Fix vulnerabilities by removing specific versions of dependencies crimp 0.2.0

bbc / alephant-broker

Brokers requests for alephant components

MIT License

4 stars 3 forks source link

Closed alex-magana closed 5 years ago

alex-magana commented 5 years ago

This PR:

removes gem, listen, to resolve security vulnerabilities introduced by gem, ffi, via gem, listen.
locks the version of crimp to 0.2.0 to address the discrepancy in resolving the URIs in broker requests to the MD5 hash stored in the lookup table by the renderer.

alex-magana commented 5 years ago

Looking into the failed checks 👇