From 84235b409b5334d7fbfb96d444479a377c113f01 Mon Sep 17 00:00:00 2001 From: Justin Gordon Date: Tue, 3 Nov 2026 15:47:03 -1000 Subject: [PATCH] Update loofah, nokogiri and rails-html-sanitizer to clear advisories Conservative relock (loofah 2.25.3, nokogiri 1.19.7, rails-html-sanitizer 1.7.2) that keeps every platform entry already in the lockfile. Gemfile.lock only. Co-Authored-By: Claude Sonnet 5.5 --- Gemfile.lock | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/Gemfile.lock b/Gemfile.lock index 8760f3f1..2a4af1f4 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -206,9 +206,9 @@ GEM addressable (~> 2.8) childprocess (~> 5.0) logger (1.7.0) - loofah (2.25.2) + loofah (2.25.3) crass (~> 1.0.2) - nokogiri (>= 1.12.0) + nokogiri (>= 1.19.5) mail (2.9.1) logger mini_mime (>= 0.1.1) @@ -235,11 +235,11 @@ GEM net-smtp (0.5.2) net-protocol nio4r (2.7.5) - nokogiri (1.19.4-aarch64-linux-gnu) + nokogiri (1.19.7-aarch64-linux-gnu) racc (~> 1.4) - nokogiri (1.19.4-arm64-darwin) + nokogiri (1.19.7-arm64-darwin) racc (~> 1.4) - nokogiri (1.19.4-x86_64-linux-gnu) + nokogiri (1.19.7-x86_64-linux-gnu) racc (~> 1.4) openssl (4.0.2) package_json (0.2.0) @@ -314,8 +314,8 @@ GEM activesupport (>= 5.0.0) minitest nokogiri (>= 1.6) - rails-html-sanitizer (1.7.1) - loofah (~> 2.25, >= 2.25.2) + rails-html-sanitizer (1.7.2) + loofah (~> 2.25, >= 2.25.3) nokogiri (>= 1.15.7, != 1.16.7, != 1.16.6, != 1.16.5, != 1.16.4, != 1.16.3, != 1.16.2, != 1.16.1, != 1.16.0.rc1, != 1.16.0) rails_best_practices (1.23.2) activesupport