sextou issues

Bump nokogiri from 1.10.9 to 1.13.9

Bumps [nokogiri](https://github.com/sparklemotion/nokogiri) from 1.10.9 to 1.13.9. Release notes Sourced from nokogiri's releases. 1.13.9 / 2022-10-18 Security [CRuby] Vendored libxml2 is updated to address CVE-2022-2309, CVE-2022-40304, and CVE-2022-40303. See GHSA-2qc6-mcvw-92cw for...

dependabot[bot]

dependencies

Bump omniauth from 1.9.1 to 1.9.2

Bumps [omniauth](https://github.com/omniauth/omniauth) from 1.9.1 to 1.9.2. Release notes Sourced from omniauth's releases. v1.9.2 Backports a vulnerability fix that was included in Omniauth 2.0 release to the 1.9 channel. https://nvd.nist.gov/vuln/detail/CVE-2020-36599 Current...

dependabot[bot]

dependencies

Bump tzinfo from 1.2.7 to 1.2.10

Bumps [tzinfo](https://github.com/tzinfo/tzinfo) from 1.2.7 to 1.2.10. Release notes Sourced from tzinfo's releases. v1.2.10 Fixed a relative path traversal bug that could cause arbitrary files to be loaded with require when...

dependabot[bot]

dependencies

Bump rails-html-sanitizer from 1.3.0 to 1.4.3

Bumps [rails-html-sanitizer](https://github.com/rails/rails-html-sanitizer) from 1.3.0 to 1.4.3. Release notes Sourced from rails-html-sanitizer's releases. 1.4.3 / 2022-06-09 Address a possible XSS vulnerability with certain configurations of Rails::Html::Sanitizer. Prevent the combination of select...

dependabot[bot]

dependencies

Bump puma from 3.12.6 to 4.3.12

Bumps [puma](https://github.com/puma/puma) from 3.12.6 to 4.3.12. Release notes Sourced from puma's releases. 4.3.12 Security Close several HTTP Request Smuggling exploits (CVE-2022-24790) 4.3.11 Bugfix/Security Response body will always be closed. (GHSA-rmj8-8hhh-gv5h,...

dependabot[bot]

dependencies

Bump sidekiq from 6.1.0 to 6.4.0

Bumps [sidekiq](https://github.com/mperham/sidekiq) from 6.1.0 to 6.4.0. Changelog Sourced from sidekiq's changelog. 6.4.0 SECURITY: Validate input to avoid possible DoS in Web UI. Add strict argument checking #5071 Sidekiq will now...

dependabot[bot]

dependencies

Bump better_errors from 2.7.1 to 2.8.0

Bumps [better_errors](https://github.com/BetterErrors/better_errors) from 2.7.1 to 2.8.0. Release notes Sourced from better_errors's releases. v2.8.0 Support for Rails ActionableError #465 Allow editor links to work inside an iframe or with CSP that...

dependabot[bot]

dependencies