Remove explicit dependency on uri

aspettl · Nov 6, 2024 · f0cdb44 · f0cdb44
1 parent 55bdaef
commit f0cdb44
Show file tree

Hide file tree

Showing 2 changed files with 0 additions and 5 deletions.
diff --git a/Gemfile b/Gemfile
@@ -83,6 +83,3 @@ end
 
 # Windows does not include zoneinfo files, so bundle the tzinfo-data gem
 gem 'tzinfo-data', platforms: %i[mingw mswin x64_mingw jruby]
-
-# see https://www.ruby-lang.org/en/news/2023/06/29/redos-in-uri-CVE-2023-36617/
-gem 'uri', '>= 0.12.2'
diff --git a/Gemfile.lock b/Gemfile.lock
@@ -277,7 +277,6 @@ GEM
     tzinfo (2.0.6)
       concurrent-ruby (~> 1.0)
     unicode-display_width (2.6.0)
-    uri (0.13.1)
     useragent (0.16.10)
     warden (1.2.9)
       rack (>= 2.0.9)
@@ -323,7 +322,6 @@ DEPENDENCIES
   selenium-webdriver (>= 4.11.0)
   sprockets-rails
   tzinfo-data
-  uri (>= 0.12.2)
   web-console (>= 4.1.0)
 
 RUBY VERSION