Updating Blazer to 2.6.1 (#17390)

Prior to this commit, we were seeing the following:

```console
❯ bundle exec bundle-audit check --update
Updating ruby-advisory-db ...
From https://github.com/rubysec/ruby-advisory-db
 * branch            master     -> FETCH_HEAD
Already up to date.
Updated ruby-advisory-db
ruby-advisory-db:
  advisories:	562 advisories
  last updated:	2022-04-20 14:56:09 -0700
  commit:	1cca55530261d16f4cd16691c1ebbae86c91c28b
Name: blazer
Version: 2.5.0
CVE: CVE-2022-29498
Criticality: Unknown
URL: https://github.com/ankane/blazer/issues/392
Title: SQL injection for certain queries with variables
Solution: upgrade to >= 2.6.0

Vulnerabilities found!
```

Blocking forem/forem#17382
This commit is contained in:
Jeremy Friesen 2022-04-21 09:53:00 -04:00 committed by GitHub
parent 92030f4798
commit 8fbc2e86d5
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
6 changed files with 4 additions and 4 deletions

View file

@ -17,7 +17,7 @@ gem "addressable", "~> 2.8" # A replacement for the URI implementation that is p
gem "ahoy_email", "~> 2.1.2" # Email analytics for Rails
gem "ahoy_matey", "~> 4.0" # Tracking analytics for Rails
gem "ancestry", "~> 4.1" # Ancestry allows the records of a ActiveRecord model to be organized in a tree structure
gem "blazer", "~> 2.5.0" # Allows admins to query data
gem "blazer", "~> 2.6" # Allows admins to query data
gem "bootsnap", ">= 1.1.0", require: false # Boot large ruby/rails apps faster
gem "carrierwave", "~> 2.2" # Upload files in your Ruby applications, map them to a range of ORMs, store them on different backends
gem "carrierwave-bombshelter", "~> 0.2" # Protect your carrierwave from image bombs

View file

@ -116,7 +116,7 @@ GEM
parser (>= 2.4)
smart_properties
bindex (0.8.1)
blazer (2.5.0)
blazer (2.6.1)
activerecord (>= 5)
chartkick (>= 3.2)
railties (>= 5)
@ -157,7 +157,7 @@ GEM
activesupport (>= 3.2.0)
carrierwave
fastimage
chartkick (4.1.2)
chartkick (4.1.3)
childprocess (4.1.0)
cloudinary (1.23.0)
aws_cf_signer
@ -954,7 +954,7 @@ DEPENDENCIES
amazing_print (~> 1.4)
ancestry (~> 4.1)
better_errors (~> 2.9)
blazer (~> 2.5.0)
blazer (~> 2.6)
bootsnap (>= 1.1.0)
brakeman (~> 5.2)
bullet (~> 7.0)

Binary file not shown.

BIN
vendor/cache/blazer-2.6.1.gem vendored Normal file

Binary file not shown.

Binary file not shown.

BIN
vendor/cache/chartkick-4.1.3.gem vendored Normal file

Binary file not shown.