codeforamerica / honeycrisp-gem

A Rails gem with base styles and Javascript for Code for America products

http://honeycrisp.herokuapp.com

MIT License

24 stars 8 forks source link

Update gem dependencies that have security risks #298

Closed coltborg closed 2 years ago

coltborg commented 2 years ago

Comes from #296.

What does this PR do?

Update gem dependencies that have security risks
- Update rails to 5.2.4.6
- Update bundler to 2.2.19
- Update nokogiri
- Update addressable
Add run step in CircleCI to use v2 of bundler

Testing

Locally, I'm able to bundle install and run the application bin/rails s without issue.

I might be a good idea for whoever tests this PR, to pull it down locally and make sure a bundle install works properly.