search

Nexmo / oas_parser

An open source Open API Spec 3 Definition Parser
MIT License
51 stars 16 forks source link

Dependency conflict with Sinatra (Mustermann) #69

Open SpyMachine opened 1 year ago

SpyMachine commented 1 year ago

I have a bit of an issue.

Trying to resolve https://security.snyk.io/vuln/SNYK-RUBY-SINATRA-3150405, however I cannot update Sinatra because oas_parser is still using mustermann 1.x.

Bundler could not find compatible versions for gem "mustermann":
  In snapshot (Gemfile.lock):
    mustermann (= 1.1.1)

  In Gemfile:
    oas_parser (= 0.25.4) was resolved to 0.25.4, which depends on
      mustermann-contrib (~> 1.1.1) was resolved to 1.1.1, which depends on
        mustermann (= 1.1.1)

    sinatra (~> 2.2.3) was resolved to 2.2.3, which depends on
      mustermann (~> 2.0)

Running `bundle update` will rebuild your snapshot from scratch, using only
the gems in your Gemfile, which may resolve the conflict.

Would it be possible to update oas_parser to use mustermann 2.x?