deps: tighten deps a bit, fixing to major versions, mustache 1.x (fro…

…m 0.7)

This form makes Rubocop happy but allows us a good amount of flexibility in deploying to environments with fixed gem versions. Should work with Fedora's rubygem dependencies, too.

Gemfile.lock

@@ -2,28 +2,25 @@ PATH
   remote: .
   specs:
     ronn-ng (0.10.1.pre5)
-      kramdown (>= 2.1)
-      kramdown-parser-gfm (>= 1.0.1)
-      mustache (>= 0.7.0)
-      nokogiri (>= 1.14.3)
+      kramdown (~> 2, >= 2.1)
+      kramdown-parser-gfm (~> 1, >= 1.0.1)
+      mustache (~> 1)
+      nokogiri (~> 1, >= 1.14.3)
 
 GEM
   remote: https://rubygems.org/
   specs:
     ast (2.4.2)
-    base64 (0.2.0)
     json (2.7.1)
     kramdown (2.4.0)
       rexml
     kramdown-parser-gfm (1.1.0)
       kramdown (~> 2.0)
     language_server-protocol (3.17.0.3)
-    mini_portile2 (2.8.5)
     mustache (1.1.1)
-    mustermann (3.0.0)
+    mustermann (2.0.2)
       ruby2_keywords (~> 0.0.1)
-    nokogiri (1.15.5)
-      mini_portile2 (~> 2.8.2)
+    nokogiri (1.16.0-x86_64-darwin)
       racc (~> 1.4)
     parallel (1.24.0)
     parser (3.2.2.4)
@@ -32,9 +29,8 @@ GEM
     power_assert (2.0.3)
     racc (1.7.3)
     rack (2.2.8)
-    rack-protection (3.2.0)
-      base64 (>= 0.1.0)
-      rack (~> 2.2, >= 2.2.4)
+    rack-protection (2.2.4)
+      rack
     rainbow (3.1.1)
     rake (13.1.0)
     regexp_parser (2.8.3)
@@ -56,27 +52,27 @@ GEM
       rubocop (~> 1.0)
     ruby-progressbar (1.13.0)
     ruby2_keywords (0.0.5)
-    sinatra (3.2.0)
-      mustermann (~> 3.0)
-      rack (~> 2.2, >= 2.2.4)
-      rack-protection (= 3.2.0)
+    sinatra (2.2.4)
+      mustermann (~> 2.0)
+      rack (~> 2.2)
+      rack-protection (= 2.2.4)
       tilt (~> 2.0)
     test-unit (3.6.1)
       power_assert
     tilt (2.3.0)
     unicode-display_width (2.5.0)
 
 PLATFORMS
-  ruby
+  x86_64-darwin-23
 
 DEPENDENCIES
-  rack (>= 2.2.3)
-  rake (>= 13.0.3)
+  rack (~> 2, >= 2.2.3)
+  rake (~> 13, >= 13.0.3)
   ronn-ng!
-  rubocop (>= 1.25.1)
-  rubocop-rake
-  sinatra (>= 2.2.3)
-  test-unit (>= 3.2.7)
+  rubocop (~> 1, >= 1.25.1)
+  rubocop-rake (~> 0)
+  sinatra (~> 2, >= 2.2.3)
+  test-unit (~> 3, >= 3.2.7)
 
 BUNDLED WITH
-   2.1.4
+   2.4.10

ronn-ng.gemspec

@@ -59,20 +59,20 @@ Gem::Specification.new do |s|
   s.executables = ['ronn']
 
   s.extra_rdoc_files = %w[LICENSE.txt AUTHORS]
-  s.add_dependency 'kramdown',              '>= 2.1'
-  s.add_dependency 'kramdown-parser-gfm',   '>= 1.0.1'
-  s.add_dependency 'mustache',              '>= 0.7.0'
+  s.add_dependency 'kramdown',                 ['~> 2', '>= 2.1']
+  s.add_dependency 'kramdown-parser-gfm',      ['~> 1', '>= 1.0.1']
+  s.add_dependency 'mustache',                 ['~> 1']
   # nokogiri <= 1.14.2 mishandle tag names with ":" in them (see #102)
-  s.add_dependency 'nokogiri',              '>= 1.14.3'
-  # rack < 2.2.3.0 have security vulns
-  s.add_development_dependency 'rack',      '>= 2.2.3'
-  s.add_development_dependency 'rake',      '>= 13.0.3'
+  s.add_dependency 'nokogiri',                 ['~> 1', '>= 1.14.3']
+  # rack < 2.2.3 have security vulns
+  s.add_development_dependency 'rack',         ['~> 2', '>= 2.2.3']
+  s.add_development_dependency 'rake',         ['~> 13', '>= 13.0.3']
   # just a guess based on what I used to use
-  s.add_development_dependency 'rubocop',   '>= 1.25.1'
-  s.add_development_dependency 'rubocop-rake'
+  s.add_development_dependency 'rubocop',      ['~> 1', '>= 1.25.1']
+  s.add_development_dependency 'rubocop-rake', ['~> 0']
   # sinatra < 2.2.3 have security vulns
-  s.add_development_dependency 'sinatra',   '>= 2.2.3'
-  s.add_development_dependency 'test-unit', '>= 3.2.7'
+  s.add_development_dependency 'sinatra',      ['~> 2', '>= 2.2.3']
+  s.add_development_dependency 'test-unit',    ['~> 3', '>= 3.2.7']
 
   s.rdoc_options = ['--line-numbers', '--inline-source', '--title', 'Ronn']
   s.require_paths = %w[lib]