[Security] Bump omniauth from 1.9.1 to 2.0.3

Bumps [omniauth](https://github.com/omniauth/omniauth) from 1.9.1 to 2.0.3. **This update includes a security fix.** - [Release notes](https://github.com/omniauth/omniauth/releases) - [Commits](https://github.com/omniauth/omniauth/compare/v1.9.1...v2.0.3) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Merge pull request #191 from projekteuler/dependabot/bundler/rails-6.1.3
2025-12-10 16:46:42 +01:00 · 2021-03-01 10:26:25 +00:00 · 2021-03-01 11:24:59 +01:00 · 2021-03-01 11:23:43 +01:00 · 2021-03-01 11:23:14 +01:00 · 2021-03-01 07:40:40 +00:00
3 changed files with 80 additions and 73 deletions
--- a/4
+++ b/4
@ -2,7 +2,7 @@ source 'https://rubygems.org'


 # Bundle edge Rails instead: gem 'rails', github: 'rails/rails'
-gem 'rails', '6.1.2'
+gem 'rails', '6.1.3'
 # Use sqlite3 as the database for Active Record
 gem 'sqlite3', '~> 1.4.1'

@ -32,7 +32,7 @@ gem 'turbolinks', '~> 5.2.1'
 # Build JSON APIs with ease. Read more: https://github.com/rails/jbuilder
 gem 'jbuilder', '~> 2.11.2'
 # bundle exec rake doc:rails generates the API under doc/api.
-gem 'sdoc', '~> 2.0.3',          group: :doc
+gem 'sdoc', '~> 2.0.4',          group: :doc

 gem 'web-console', '~> 4.1.0', group: :development
 gem 'listen', '~> 3.4.1', group: :development
--- a/Gemfile.lock
+++ b/Gemfile.lock
@ -1,60 +1,60 @@
 GEM
  remote: https://rubygems.org/
  specs:
-    actioncable (6.1.2)
-      actionpack (= 6.1.2)
-      activesupport (= 6.1.2)
+    actioncable (6.1.3)
+      actionpack (= 6.1.3)
+      activesupport (= 6.1.3)
      nio4r (~> 2.0)
      websocket-driver (>= 0.6.1)
-    actionmailbox (6.1.2)
-      actionpack (= 6.1.2)
-      activejob (= 6.1.2)
-      activerecord (= 6.1.2)
-      activestorage (= 6.1.2)
-      activesupport (= 6.1.2)
+    actionmailbox (6.1.3)
+      actionpack (= 6.1.3)
+      activejob (= 6.1.3)
+      activerecord (= 6.1.3)
+      activestorage (= 6.1.3)
+      activesupport (= 6.1.3)
      mail (>= 2.7.1)
-    actionmailer (6.1.2)
-      actionpack (= 6.1.2)
-      actionview (= 6.1.2)
-      activejob (= 6.1.2)
-      activesupport (= 6.1.2)
+    actionmailer (6.1.3)
+      actionpack (= 6.1.3)
+      actionview (= 6.1.3)
+      activejob (= 6.1.3)
+      activesupport (= 6.1.3)
      mail (~> 2.5, >= 2.5.4)
      rails-dom-testing (~> 2.0)
-    actionpack (6.1.2)
-      actionview (= 6.1.2)
-      activesupport (= 6.1.2)
+    actionpack (6.1.3)
+      actionview (= 6.1.3)
+      activesupport (= 6.1.3)
      rack (~> 2.0, >= 2.0.9)
      rack-test (>= 0.6.3)
      rails-dom-testing (~> 2.0)
      rails-html-sanitizer (~> 1.0, >= 1.2.0)
-    actiontext (6.1.2)
-      actionpack (= 6.1.2)
-      activerecord (= 6.1.2)
-      activestorage (= 6.1.2)
-      activesupport (= 6.1.2)
+    actiontext (6.1.3)
+      actionpack (= 6.1.3)
+      activerecord (= 6.1.3)
+      activestorage (= 6.1.3)
+      activesupport (= 6.1.3)
      nokogiri (>= 1.8.5)
-    actionview (6.1.2)
-      activesupport (= 6.1.2)
+    actionview (6.1.3)
+      activesupport (= 6.1.3)
      builder (~> 3.1)
      erubi (~> 1.4)
      rails-dom-testing (~> 2.0)
      rails-html-sanitizer (~> 1.1, >= 1.2.0)
-    activejob (6.1.2)
-      activesupport (= 6.1.2)
+    activejob (6.1.3)
+      activesupport (= 6.1.3)
      globalid (>= 0.3.6)
-    activemodel (6.1.2)
-      activesupport (= 6.1.2)
-    activerecord (6.1.2)
-      activemodel (= 6.1.2)
-      activesupport (= 6.1.2)
-    activestorage (6.1.2)
-      actionpack (= 6.1.2)
-      activejob (= 6.1.2)
-      activerecord (= 6.1.2)
-      activesupport (= 6.1.2)
+    activemodel (6.1.3)
+      activesupport (= 6.1.3)
+    activerecord (6.1.3)
+      activemodel (= 6.1.3)
+      activesupport (= 6.1.3)
+    activestorage (6.1.3)
+      actionpack (= 6.1.3)
+      activejob (= 6.1.3)
+      activerecord (= 6.1.3)
+      activesupport (= 6.1.3)
      marcel (~> 0.3.1)
      mimemagic (~> 0.3.2)
-    activesupport (6.1.2)
+    activesupport (6.1.3)
      concurrent-ruby (~> 1.0, >= 1.0.2)
      i18n (>= 1.6, < 2)
      minitest (>= 5.1)
@ -100,8 +100,11 @@ GEM
    docile (1.3.2)
    erubi (1.10.0)
    execjs (2.7.0)
-    faraday (1.0.0)
+    faraday (1.3.0)
+      faraday-net_http (~> 1.0)
      multipart-post (>= 1.2, < 3)
+      ruby2_keywords
+    faraday-net_http (1.0.1)
    ffi (1.14.2)
    font-awesome-sass (5.15.1)
      sassc (>= 1.11)
@ -109,7 +112,7 @@ GEM
      activesupport (>= 4.2.0)
    hashdiff (1.0.1)
    hashie (4.1.0)
-    i18n (1.8.8)
+    i18n (1.8.9)
      concurrent-ruby (~> 1.0)
    jbuilder (2.11.2)
      activesupport (>= 5.0.0)
@ -117,7 +120,7 @@ GEM
      rails-dom-testing (>= 1, < 3)
      railties (>= 4.2.0)
      thor (>= 0.14, < 2.0)
-    jwt (2.2.1)
+    jwt (2.2.2)
    listen (3.4.1)
      rb-fsevent (~> 0.10, >= 0.10.3)
      rb-inotify (~> 0.9, >= 0.9.10)
@ -134,7 +137,7 @@ GEM
    mini_portile2 (2.5.0)
    minitest (5.14.3)
    msgpack (1.4.2)
-    multi_json (1.14.1)
+    multi_json (1.15.0)
    multi_xml (0.6.0)
    multipart-post (2.1.1)
    mysql2 (0.5.3)
@ -142,42 +145,45 @@ GEM
    nokogiri (1.11.1)
      mini_portile2 (~> 2.5.0)
      racc (~> 1.4)
-    oauth2 (1.4.3)
+    oauth2 (1.4.4)
      faraday (>= 0.8, < 2.0)
      jwt (>= 1.0, < 3.0)
      multi_json (~> 1.3)
      multi_xml (~> 0.5)
      rack (>= 1.2, < 3)
-    omniauth (1.9.1)
+    omniauth (2.0.3)
      hashie (>= 3.4.6)
      rack (>= 1.6.2, < 3)
-    omniauth-github (1.4.0)
-      omniauth (~> 1.5)
-      omniauth-oauth2 (>= 1.4.0, < 2.0)
-    omniauth-oauth2 (1.6.0)
-      oauth2 (~> 1.1)
-      omniauth (~> 1.9)
+      rack-protection
+    omniauth-github (2.0.0)
+      omniauth (~> 2.0)
+      omniauth-oauth2 (~> 1.7.1)
+    omniauth-oauth2 (1.7.1)
+      oauth2 (~> 1.4)
+      omniauth (>= 1.9, < 3)
    orm_adapter (0.5.0)
    popper_js (1.16.0)
    public_suffix (4.0.6)
    racc (1.5.2)
    rack (2.2.3)
+    rack-protection (2.1.0)
+      rack
    rack-test (1.1.0)
      rack (>= 1.0, < 3)
-    rails (6.1.2)
-      actioncable (= 6.1.2)
-      actionmailbox (= 6.1.2)
-      actionmailer (= 6.1.2)
-      actionpack (= 6.1.2)
-      actiontext (= 6.1.2)
-      actionview (= 6.1.2)
-      activejob (= 6.1.2)
-      activemodel (= 6.1.2)
-      activerecord (= 6.1.2)
-      activestorage (= 6.1.2)
-      activesupport (= 6.1.2)
+    rails (6.1.3)
+      actioncable (= 6.1.3)
+      actionmailbox (= 6.1.3)
+      actionmailer (= 6.1.3)
+      actionpack (= 6.1.3)
+      actiontext (= 6.1.3)
+      actionview (= 6.1.3)
+      activejob (= 6.1.3)
+      activemodel (= 6.1.3)
+      activerecord (= 6.1.3)
+      activestorage (= 6.1.3)
+      activesupport (= 6.1.3)
      bundler (>= 1.15.0)
-      railties (= 6.1.2)
+      railties (= 6.1.3)
      sprockets-rails (>= 2.0.0)
    rails-controller-testing (1.0.5)
      actionpack (>= 5.0.1.rc1)
@ -191,9 +197,9 @@ GEM
    rails-i18n (6.0.0)
      i18n (>= 0.7, < 2)
      railties (>= 6.0.0, < 7)
-    railties (6.1.2)
-      actionpack (= 6.1.2)
-      activesupport (= 6.1.2)
+    railties (6.1.3)
+      actionpack (= 6.1.3)
+      activesupport (= 6.1.3)
      method_source
      rake (>= 0.8.7)
      thor (~> 1.0)
@ -201,11 +207,12 @@ GEM
    rb-fsevent (0.10.4)
    rb-inotify (0.10.1)
      ffi (~> 1.0)
-    rdoc (6.2.1)
+    rdoc (6.3.0)
    responders (3.0.1)
      actionpack (>= 5.0)
      railties (>= 5.0)
    rexml (3.2.4)
+    ruby2_keywords (0.0.4)
    sassc (2.4.0)
      ffi (~> 1.9)
    sassc-rails (2.1.2)
@ -214,7 +221,7 @@ GEM
      sprockets (> 3.0)
      sprockets-rails
      tilt
-    sdoc (2.0.3)
+    sdoc (2.0.4)
      rdoc (>= 5.0)
    simplecov (0.18.1)
      docile (~> 1.1)
@ -244,7 +251,7 @@ GEM
      activemodel (>= 6.0.0)
      bindex (>= 0.4.0)
      railties (>= 6.0.0)
-    webmock (3.11.2)
+    webmock (3.12.0)
      addressable (>= 2.3.6)
      crack (>= 0.3.2)
      hashdiff (>= 0.4.0, < 2.0.0)
@ -275,11 +282,11 @@ DEPENDENCIES
  mysql2 (~> 0.5.2)
  omniauth
  omniauth-github
-  rails (= 6.1.2)
+  rails (= 6.1.3)
  rails-controller-testing
  rails-i18n (~> 6.0.0)
  sassc-rails (~> 2.1.2)
-  sdoc (~> 2.0.3)
+  sdoc (~> 2.0.4)
  sqlite3 (~> 1.4.1)
  turbolinks (~> 5.2.1)
  tzinfo-data
--- a/app/scrubbers/translation_content_scrubber.rb
+++ b/app/scrubbers/translation_content_scrubber.rb
@ -3,7 +3,7 @@ class TranslationContentScrubber < Rails::Html::PermitScrubber
    super
    self.tags = %w( strong em b i p code pre tt samp kbd var sub
        sup dfn cite big small address hr br div span h1 h2 h3 h4 h5 h6 ul ol li dl dt dd abbr
-        acronym a img blockquote del ins table th tr td thead tbody tfoot )
+        acronym a img blockquote del ins table th tr td thead tbody tfoot u )
    self.attributes = %w( href src width height alt cite datetime title class name xml:lang abbr style
        align border cellpadding cellspacing colspan )
  end
Author	SHA1	Message	Date
dependabot-preview[bot]	b71106185f	[Security] Bump omniauth from 1.9.1 to 2.0.3 Bumps [omniauth](https://github.com/omniauth/omniauth) from 1.9.1 to 2.0.3. This update includes a security fix. - [Release notes](https://github.com/omniauth/omniauth/releases) - [Commits](https://github.com/omniauth/omniauth/compare/v1.9.1...v2.0.3) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>	2021-03-01 10:26:25 +00:00
Philipp Fischbeck	a6d74cd0da	Merge pull request #191 from projekteuler/dependabot/bundler/rails-6.1.3 Bump rails from 6.1.2 to 6.1.3	2021-03-01 11:24:59 +01:00
Philipp Fischbeck	e7d739c212	Merge pull request #195 from projekteuler/dependabot/bundler/sdoc-2.0.4 Bump sdoc from 2.0.3 to 2.0.4	2021-03-01 11:23:43 +01:00
Philipp Fischbeck	2f734d851e	Merge pull request #196 from projekteuler/dependabot/bundler/webmock-3.12.0 Bump webmock from 3.11.2 to 3.12.0	2021-03-01 11:23:14 +01:00
dependabot-preview[bot]	49fc0ea601	Bump webmock from 3.11.2 to 3.12.0 Bumps [webmock](https://github.com/bblimke/webmock) from 3.11.2 to 3.12.0. - [Release notes](https://github.com/bblimke/webmock/releases) - [Changelog](https://github.com/bblimke/webmock/blob/master/CHANGELOG.md) - [Commits](https://github.com/bblimke/webmock/compare/v3.11.2...v3.12.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>	2021-03-01 07:40:40 +00:00
dependabot-preview[bot]	a0a010e53b	Bump sdoc from 2.0.3 to 2.0.4 Bumps [sdoc](https://github.com/zzak/sdoc) from 2.0.3 to 2.0.4. - [Release notes](https://github.com/zzak/sdoc/releases) - [Changelog](https://github.com/zzak/sdoc/blob/master/CHANGELOG.md) - [Commits](https://github.com/zzak/sdoc/commits) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>	2021-02-26 06:33:49 +00:00
Philipp Fischbeck	8f72d768f1	Merge pull request #193 from projekteuler/support-underline Support underline in translations	2021-02-22 15:29:29 +01:00
Philipp Fischbeck	2e2e419938	Support underline in translations	2021-02-22 15:24:28 +01:00
dependabot-preview[bot]	62616d1865	Bump rails from 6.1.2 to 6.1.3 Bumps [rails](https://github.com/rails/rails) from 6.1.2 to 6.1.3. - [Release notes](https://github.com/rails/rails/releases) - [Commits](https://github.com/rails/rails/compare/v6.1.2...v6.1.3) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>	2021-02-18 05:50:50 +00:00