From 1bd210dd1d676cf82d3763ea5ffa693f0aa02292 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sun, 15 Feb 2026 00:52:12 +0000 Subject: [PATCH 1/3] fix: api/ruby/building-your-first-github-app/Gemfile & api/ruby/building-your-first-github-app/Gemfile.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-FARADAY-15253521 --- .../building-your-first-github-app/Gemfile | 2 +- .../Gemfile.lock | 51 +++++++------------ 2 files changed, 20 insertions(+), 33 deletions(-) diff --git a/api/ruby/building-your-first-github-app/Gemfile b/api/ruby/building-your-first-github-app/Gemfile index 2c4d810..f4afe05 100644 --- a/api/ruby/building-your-first-github-app/Gemfile +++ b/api/ruby/building-your-first-github-app/Gemfile @@ -1,5 +1,5 @@ source "https://rubygems.org" gem "jwt", "~> 2.1" -gem "octokit", "~> 4.0" +gem "octokit", "~> 4.23", ">= 4.23.0" gem "sinatra", "~> 4.0", ">= 4.0.1" diff --git a/api/ruby/building-your-first-github-app/Gemfile.lock b/api/ruby/building-your-first-github-app/Gemfile.lock index ce514dd..5d0000e 100644 --- a/api/ruby/building-your-first-github-app/Gemfile.lock +++ b/api/ruby/building-your-first-github-app/Gemfile.lock @@ -1,40 +1,26 @@ GEM remote: https://rubygems.org/ specs: - addressable (2.8.6) - public_suffix (>= 2.0.2, < 6.0) + addressable (2.8.8) + public_suffix (>= 2.0.2, < 8.0) base64 (0.3.0) - faraday (1.10.3) - faraday-em_http (~> 1.0) - faraday-em_synchrony (~> 1.0) - faraday-excon (~> 1.1) - faraday-httpclient (~> 1.0) - faraday-multipart (~> 1.0) - faraday-net_http (~> 1.0) - faraday-net_http_persistent (~> 1.0) - faraday-patron (~> 1.0) - faraday-rack (~> 1.0) - faraday-retry (~> 1.0) - ruby2_keywords (>= 0.0.4) - faraday-em_http (1.0.0) - faraday-em_synchrony (1.0.0) - faraday-excon (1.1.0) - faraday-httpclient (1.0.1) - faraday-multipart (1.0.4) - multipart-post (~> 2) - faraday-net_http (1.0.1) - faraday-net_http_persistent (1.2.0) - faraday-patron (1.0.0) - faraday-rack (1.0.0) - faraday-retry (1.0.3) + faraday (2.14.1) + faraday-net_http (>= 2.0, < 3.5) + json + logger + faraday-net_http (3.4.2) + net-http (~> 0.5) + json (2.18.1) jwt (2.1.0) logger (1.7.0) - multipart-post (2.3.0) mustermann (3.0.4) ruby2_keywords (~> 0.0.1) - octokit (4.9.0) - sawyer (~> 0.8.0, >= 0.5.3) - public_suffix (5.0.4) + net-http (0.9.1) + uri (>= 0.11.1) + octokit (4.25.1) + faraday (>= 1, < 3) + sawyer (~> 0.9) + public_suffix (6.0.2) rack (3.2.3) rack-protection (4.2.1) base64 (>= 0.1.0) @@ -44,9 +30,9 @@ GEM base64 (>= 0.1.0) rack (>= 3.0.0) ruby2_keywords (0.0.5) - sawyer (0.8.2) + sawyer (0.9.3) addressable (>= 2.3.5) - faraday (> 0.8, < 2.0) + faraday (>= 0.17.3, < 3) sinatra (4.2.1) logger (>= 1.6.0) mustermann (~> 3.0) @@ -55,13 +41,14 @@ GEM rack-session (>= 2.0.0, < 3) tilt (~> 2.0) tilt (2.6.1) + uri (1.1.1) PLATFORMS ruby DEPENDENCIES jwt (~> 2.1) - octokit (~> 4.0) + octokit (~> 4.23, >= 4.23.0) sinatra (~> 4.0, >= 4.0.1) BUNDLED WITH From fa4ff1c23309df4900cd262ac971e32f2187f0b2 Mon Sep 17 00:00:00 2001 From: "snyk-io[bot]" <141718529+snyk-io[bot]@users.noreply.github.com> Date: Mon, 16 Feb 2026 20:21:24 +0000 Subject: [PATCH 2/3] fix: api/ruby/building-your-first-github-app/Gemfile & api/ruby/building-your-first-github-app/Gemfile.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-FARADAY-15253521 From f9dc9ef8e1a3feeed3c825e34f5f186e8f291857 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 17 Feb 2026 10:22:01 +0000 Subject: [PATCH 3/3] fix: api/ruby/building-your-first-github-app/Gemfile & api/ruby/building-your-first-github-app/Gemfile.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-FARADAY-15253521