From 532b097ee463678ec44f88c4adf433647b853a8e Mon Sep 17 00:00:00 2001 From: Fumito Ito Date: Fri, 6 May 2022 12:33:02 +0900 Subject: [PATCH] bump ruby-git version to fix security vulnerable ruby-git `<1.11.0` are vulnerable to Command Injection via git argument injection. For more information, see https://github.com/ruby-git/ruby-git/pull/569. --- generamba.gemspec | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/generamba.gemspec b/generamba.gemspec index 0ccdb43..e143510 100644 --- a/generamba.gemspec +++ b/generamba.gemspec @@ -23,7 +23,7 @@ Gem::Specification.new do |spec| spec.add_runtime_dependency 'thor', '0.19.1' spec.add_runtime_dependency 'xcodeproj', '>= 1.6.0', '< 2.0.0' spec.add_runtime_dependency 'liquid', '4.0.0' - spec.add_runtime_dependency 'git', '1.2.9.1' + spec.add_runtime_dependency 'git', '>=1.11.0' spec.add_runtime_dependency 'cocoapods-core', '>= 1.4.0', '< 2.0.0' spec.add_runtime_dependency 'terminal-table', '1.4.5'