This is an automated email from the ASF dual-hosted git repository. jensg pushed a commit to branch 0.23.0 in repository https://gitbox.apache.org/repos/asf/thrift.git
commit c4cbe43fd12ab5d043af5dd08d1f59e2ba07b2e4 Author: Dmytro Shteflyuk <[email protected]> AuthorDate: Wed Apr 15 12:06:15 2026 -0400 Address vulnerabilities in Rack --- lib/rb/Gemfile | 2 +- lib/rb/Gemfile.lock | 4 ++-- lib/rb/thrift.gemspec | 2 +- test/rb/Gemfile | 4 ++-- test/rb/Gemfile.lock | 4 ++-- 5 files changed, 8 insertions(+), 8 deletions(-) diff --git a/lib/rb/Gemfile b/lib/rb/Gemfile index f3da0a314..dba45e871 100644 --- a/lib/rb/Gemfile +++ b/lib/rb/Gemfile @@ -6,4 +6,4 @@ gemspec gem 'cgi' gem 'ostruct' -eval_gemfile File.expand_path("Gemfile.linters", __dir__) +eval_gemfile "Gemfile.linters" diff --git a/lib/rb/Gemfile.lock b/lib/rb/Gemfile.lock index 5030d2dea..b456592bf 100644 --- a/lib/rb/Gemfile.lock +++ b/lib/rb/Gemfile.lock @@ -38,7 +38,7 @@ GEM binding_of_caller (>= 0.7) pry (>= 0.9.11) racc (1.8.1) - rack (2.2.22) + rack (2.2.23) rack-test (0.8.3) rack (>= 1.0, < 3) rainbow (3.1.1) @@ -103,7 +103,7 @@ DEPENDENCIES pry (~> 0.11.3) pry-byebug (~> 3.6) pry-stack_explorer (~> 0.4.9.2) - rack (>= 2.2.20) + rack (>= 2.2.23) rack-test (~> 0.8.3) rake (~> 13.3) rspec (~> 3.7) diff --git a/lib/rb/thrift.gemspec b/lib/rb/thrift.gemspec index b3920d774..988addf95 100644 --- a/lib/rb/thrift.gemspec +++ b/lib/rb/thrift.gemspec @@ -32,7 +32,7 @@ Gem::Specification.new do |s| s.add_development_dependency 'pry', '~> 0.11.3' s.add_development_dependency 'pry-byebug', '~> 3.6' s.add_development_dependency 'pry-stack_explorer', '~> 0.4.9.2' - s.add_development_dependency 'rack', '>= 2.2.20' + s.add_development_dependency 'rack', '>= 2.2.23' s.add_development_dependency 'rack-test', '~> 0.8.3' s.add_development_dependency 'rake', '~> 13.3' s.add_development_dependency 'rspec', '~> 3.7' diff --git a/test/rb/Gemfile b/test/rb/Gemfile index 71ea8eae7..9e81e18bc 100644 --- a/test/rb/Gemfile +++ b/test/rb/Gemfile @@ -3,8 +3,8 @@ source "https://rubygems.org"; # Make sure all dependencies are in sync with the main library. gem 'thrift', path: '../../lib/rb' -gem 'rack', '~> 2.2' +gem 'rack', '~> 2.2', '>= 2.2.23' gem 'thin', '~> 1.7', '>= 1.7.2' gem 'test-unit', '~> 3.2', '>= 3.2.7' -eval_gemfile File.expand_path("../../lib/rb/Gemfile.linters", __dir__) +eval_gemfile "../../lib/rb/Gemfile.linters" diff --git a/test/rb/Gemfile.lock b/test/rb/Gemfile.lock index 45bb8bbad..aac147127 100644 --- a/test/rb/Gemfile.lock +++ b/test/rb/Gemfile.lock @@ -21,7 +21,7 @@ GEM power_assert (3.0.1) prism (1.9.0) racc (1.8.1) - rack (2.2.22) + rack (2.2.23) rainbow (3.1.1) regexp_parser (2.11.3) rubocop (1.82.1) @@ -64,7 +64,7 @@ PLATFORMS x86_64-linux DEPENDENCIES - rack (~> 2.2) + rack (~> 2.2, >= 2.2.23) rubocop (~> 1.82.0) rubocop-performance (~> 1.26.1) rubocop-rspec (~> 3.8.0)
