Merge pull request #22374 from peterhoeg/f/ruby-tar
fpm: fix vulnerable dependency
This commit is contained in:
commit
664360229e
@ -1,2 +1,4 @@
|
||||
source 'https://rubygems.org'
|
||||
|
||||
gem 'archive-tar-minitar', '>= 0.5.2.1', github: 'peterhoeg/archive-tar-minitar'
|
||||
gem 'fpm'
|
||||
|
@ -1,7 +1,12 @@
|
||||
GIT
|
||||
remote: git://github.com/peterhoeg/archive-tar-minitar.git
|
||||
revision: dae32ca550a87dba32597115ae18805db4782ebe
|
||||
specs:
|
||||
archive-tar-minitar (0.5.2.1)
|
||||
|
||||
GEM
|
||||
remote: https://rubygems.org/
|
||||
specs:
|
||||
archive-tar-minitar (0.5.2)
|
||||
arr-pm (0.0.10)
|
||||
cabin (> 0)
|
||||
backports (3.6.8)
|
||||
@ -40,7 +45,8 @@ PLATFORMS
|
||||
ruby
|
||||
|
||||
DEPENDENCIES
|
||||
archive-tar-minitar (>= 0.5.2.1)!
|
||||
fpm
|
||||
|
||||
BUNDLED WITH
|
||||
1.12.5
|
||||
1.14.3
|
||||
|
@ -1,11 +1,13 @@
|
||||
{
|
||||
archive-tar-minitar = {
|
||||
source = {
|
||||
remotes = ["https://rubygems.org"];
|
||||
sha256 = "1j666713r3cc3wb0042x0wcmq2v11vwwy5pcaayy5f0lnd26iqig";
|
||||
type = "gem";
|
||||
fetchSubmodules = false;
|
||||
rev = "dae32ca550a87dba32597115ae18805db4782ebe";
|
||||
sha256 = "0fvxacbcb52fm5dis451kdd7dv74z8p6nm4vnfqf7jg2aghcxdkd";
|
||||
type = "git";
|
||||
url = "git://github.com/peterhoeg/archive-tar-minitar.git";
|
||||
};
|
||||
version = "0.5.2";
|
||||
version = "0.5.2.1";
|
||||
};
|
||||
arr-pm = {
|
||||
source = {
|
||||
|
Loading…
Reference in New Issue
Block a user