From 01d8840fd6ea378cefe78d4a340c7590a1f8cd70 Mon Sep 17 00:00:00 2001 From: rhymes Date: Fri, 31 Aug 2018 21:55:49 +0200 Subject: [PATCH] Update bundle-audit step due to updated rubyzip (#569) rubyzip 1.2.1, responsible for https://nvd.nist.gov/vuln/detail/CVE-2018-1000544, has been superseded by rubyzip 1.2.2 which fixes the security vulnerability. rubyzip 1.2.2 has been merged in this PR https://github.com/thepracticaldev/dev.to/pull/567 Hence, the code doesn't need to ignore it anymore --- .travis.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.travis.yml b/.travis.yml index 03a99d881..cedd8a5ff 100644 --- a/.travis.yml +++ b/.travis.yml @@ -39,7 +39,7 @@ script: - "./cc-test-reporter format-coverage -t lcov -o coverage/codeclimate.lcov.json" - "./cc-test-reporter sum-coverage coverage/codeclimate.*.json" - "./cc-test-reporter upload-coverage" -- "bundle exec bundle-audit check --update --ignore CVE-2018-1000544" +- "bundle exec bundle-audit check --update" deploy: provider: heroku api_key: "$HEROKU_AUTH_TOKEN"