From 3671e8ac8ac7a0d4f1c3b8772e5daa47b0cbb612 Mon Sep 17 00:00:00 2001 From: Esteban Carisimo <32495768+estcarisimo@users.noreply.github.com> Date: Mon, 9 Nov 2026 12:22:09 -0600 Subject: [PATCH] Bump addressable from 2.9.0 to 2.9.2 to fix security advisories bundler-audit flagged seven advisories against addressable 2.9.0 (ReDoS in URI templates, path normalization DoS, misleading display_uri hosts), all fixed in 2.9.1. This turned the Security workflow red on main. Co-Authored-By: Claude Opus 5.5 --- Gemfile.lock | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Gemfile.lock b/Gemfile.lock index c958231..ac6ce92 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -1,7 +1,7 @@ GEM remote: https://rubygems.org/ specs: - addressable (2.9.0) + addressable (2.9.2) public_suffix (>= 2.0.2, < 8.0) base64 (0.3.0) bibtex-ruby (6.2.0) @@ -163,7 +163,7 @@ DEPENDENCIES webrick (~> 1.8) CHECKSUMS - addressable (2.9.0) sha256=7fdf6ac3660f7f4e867a0838be3f6cf722ace541dd97767fa42bc6cfa980c7af + addressable (2.9.2) sha256=9117c7e7d6ee07230e75ce41fb9401ae55354dc654fcd0e862ba41d539e9a610 base64 (0.3.0) sha256=27337aeabad6ffae05c265c450490628ef3ebd4b67be58257393227588f5a97b bibtex-ruby (6.2.0) sha256=d610eba78d6adf503a843daf144644449fb34e7c3f4a75e9ab67fae5dfd7c69a bundler-audit (0.9.3) sha256=81c8766c71e47d0d28a0f98c7eed028539f21a6ea3cd8f685eb6f42333c9b4e9