From 76bbfa22c9eef69f792894684c766e915712c8ef Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Wed, 23 Aug 2023 17:47:22 +0000
Subject: [PATCH] fix: Gemfile to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-RUBY-ACTIVESUPPORT-5851458
- https://snyk.io/vuln/SNYK-RUBY-RAILTIES-5851410
---
 Gemfile | 26 +++++++++++++-------------
 1 file changed, 13 insertions(+), 13 deletions(-)

diff --git a/Gemfile b/Gemfile
index f8aba1518..9809561bf 100644
--- a/Gemfile
+++ b/Gemfile
@@ -1,12 +1,12 @@
 source 'https://rubygems.org'
 
-gem 'rails', '5.2.8.1'
+gem 'rails', '6.1.7.5'
 
 gem 'sprockets'
 
 # Need to require sprockets-rails expicitly to get asset pipeline, at least untill we move to SASS
 # Pinning sprockets-rails to 2.3.3 so that everything doesn't blow up. It might be time to start thinking about webpack.
-gem 'sprockets-rails', '2.3.3'
+gem 'sprockets-rails', '3.0.0'
 # We need less-rails outside of the assets group so that assets will build in production
 gem 'less-rails'
 # We want non-digest versions of our assets for font-awesome
@@ -22,8 +22,8 @@ gem 'rubyzip', '>= 1.3.0'
 gem 'zip-zip'
 
 gem 'axlsx', git: 'https://github.com/randym/axlsx', branch: 'master'
-gem 'mongoid', '~> 6.4.2'
-gem 'devise'
+gem 'mongoid', '~> 7.0.12'
+gem 'devise', '>= 4.9.0'
 gem 'systemu'
 gem 'multi_json'
 gem 'rest-client'
@@ -32,22 +32,22 @@ gem 'roo', '~> 2.7'
 
 
 gem 'oj' # Faster JSON
-gem 'apipie-rails'
+gem 'apipie-rails', '>= 0.8.2'
 gem 'maruku' # enable Markup for API documentation
-gem 'doorkeeper', '~> 4.4.0'
-gem "doorkeeper-mongodb", '~> 4.1.0'
+gem 'doorkeeper', '~> 5.0.0'
+gem "doorkeeper-mongodb", "~> 4.2.0"
 
 group :test, :development, :ci do
   gem 'pry'
   # Pinning teaspoon to 1.1.5 because of sprockets-rails 2.3.3
-  gem 'teaspoon', '1.1.5'
+  gem 'teaspoon', '1.2.0'
   gem "overcommit"
   gem 'rubocop', '~> 0.88.0'
   gem 'rubocop-ast', '~> 0.3.0'
-  gem 'teaspoon-jasmine'
+  gem 'teaspoon-jasmine', '>= 2.4.1'
   gem 'simplecov', :require => false
   gem 'minitest'
-  gem 'rails_best_practices'
+  gem 'rails_best_practices', '>= 1.23.2'
   gem 'webmock', '~> 2.3.1'
   gem 'vcr'
   gem 'bundler-audit'
@@ -87,12 +87,12 @@ end
 gem 'foreman'
 
 gem 'handlebars_assets', '0.16'
-gem 'jquery-rails'
+gem 'jquery-rails', '>= 4.5.1'
 
 # Browser Detection
 gem 'browser'
 
 gem "reverse_markdown", "~> 2.0"
-gem "tinymce-rails"
+gem "tinymce-rails", ">= 5.8.2"
 
-gem "devise_saml_authenticatable"
+gem "devise_saml_authenticatable", ">= 1.9.1"