devise-fireauth

devise-fireauth copied to clipboard

Bumps [nokogiri](https://github.com/sparklemotion/nokogiri) from 1.13.7 to 1.13.9. Release notes Sourced from nokogiri's releases. 1.13.9 / 2022-10-18 Security [CRuby] Vendored libxml2 is updated to address CVE-2022-2309, CVE-2022-40304, and CVE-2022-40303. See GHSA-2qc6-mcvw-92cw for...

dependabot[bot]

yeuem1vannam

Appending `token_key` to devise's `config.authorization_keys`

yeuem1vannam

yeuem1vannam

Bumps [rack](https://github.com/rack/rack) from 2.2.4 to 2.2.6.3. Changelog Sourced from rack's changelog. Changelog All notable changes to this project will be documented in this file. For info on how to format...

dependabot[bot]

Bumps [globalid](https://github.com/rails/globalid) from 1.0.0 to 1.0.1. Release notes Sourced from globalid's releases. v1.0.1 Possible ReDoS based DoS vulnerability in GlobalID There is a ReDoS based DoS vulnerability in the GlobalID...

dependabot[bot]

Bumps [rails-html-sanitizer](https://github.com/rails/rails-html-sanitizer) from 1.4.3 to 1.4.4. Release notes Sourced from rails-html-sanitizer's releases. 1.4.4 / 2022-12-13 Address inefficient regular expression complexity with certain configurations of Rails::Html::Sanitizer. Fixes CVE-2022-23517. See GHSA-5x79-w82f-gw8w for...

dependabot[bot]

Bumps [loofah](https://github.com/flavorjones/loofah) from 2.18.0 to 2.19.1. Release notes Sourced from loofah's releases. 2.19.1 / 2022-12-13 Security Address CVE-2022-23514, inefficient regular expression complexity. See GHSA-486f-hjj9-9vhh for more information. Address CVE-2022-23515, improper...

dependabot[bot]

Bumps [yard](https://github.com/lsegal/yard) from 0.9.28 to 0.9.36. Release notes Sourced from yard's releases. Release v0.9.36 Further XSS fixes for generated frameset pages (#1538) Improve tests for Ruby 3.3 compatibility (#1519, #1531)...

dependabot[bot]

Bumps [rexml](https://github.com/ruby/rexml) from 3.2.5 to 3.3.6. Release notes Sourced from rexml's releases. REXML 3.3.6 - 2024-08-22 Improvements Removed duplicated entity expansions for performance. GH-194 Patch by Viktor Ivarsson. Improved namespace...

dependabot[bot]