Skip to content
This repository has been archived by the owner on Sep 28, 2023. It is now read-only.

Update dependency rake to v12 [SECURITY] #6

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Update dependency rake to v12 [SECURITY] #6

wants to merge 1 commit into from

Conversation

renovate[bot]
Copy link

@renovate renovate bot commented Jun 5, 2020 •
edited
Loading

Mend Renovate

This PR contains the following updates:

Package Update Change
rake major '< 11.0' -> '< 12.3.4'

GitHub Vulnerability Alerts

CVE-2020-8130

There is an OS command injection vulnerability in Ruby Rake before 12.3.3 in Rake::FileList when supplying a filename that begins with the pipe character |.

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

@renovate renovate bot force-pushed the renovate/rubygems-rake-vulnerability branch from a252c6e to b41651d Compare April 26, 2021 17:20
@renovate
Copy link
Author

renovate bot commented Apr 26, 2021

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻️ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you check the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: Gemfile.lock
ruby 2.7.3p183 (2021-04-05 revision 6847ee089d) [x86_64-linux]
Successfully installed bundler-1.16.0
1 gem installed
Fetching gem metadata from https://rubygems.org/.............
Fetching gem metadata from https://rubygems.org/.
Resolving dependencies....
Your bundle is locked to mimemagic (0.3.2), but that version could not be found
in any of the sources listed in your Gemfile. If you haven't changed sources,
that means the author of mimemagic (0.3.2) has removed it. You'll need to update
your bundle to a different version of mimemagic (0.3.2) that hasn't been removed
in order to install.

@renovate
Copy link
Author

renovate bot commented May 9, 2021

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻️ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you check the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: Gemfile.lock
ruby 2.7.3p183 (2021-04-05 revision 6847ee089d) [x86_64-linux]
Successfully installed bundler-1.16.0
1 gem installed
Fetching gem metadata from https://rubygems.org/.............
Fetching gem metadata from https://rubygems.org/.
Resolving dependencies....
Your bundle is locked to mimemagic (0.3.2), but that version could not be found
in any of the sources listed in your Gemfile. If you haven't changed sources,
that means the author of mimemagic (0.3.2) has removed it. You'll need to update
your bundle to a different version of mimemagic (0.3.2) that hasn't been removed
in order to install.

@renovate
Copy link
Author

renovate bot commented Jun 6, 2021 •
edited
Loading

⚠ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: Gemfile.lock
installing v2 tool ruby v3.2.1
linking tool ruby v3.2.1
ruby 3.2.1 (2023-02-08 revision 31819e82c8) [x86_64-linux]
gem 3.4.6
RubyGems Environment:
  - RUBYGEMS VERSION: 3.4.6
  - RUBY VERSION: 3.2.1 (2023-02-08 patchlevel 31) [x86_64-linux]
  - INSTALLATION DIRECTORY: /tmp/renovate-cache/others/bundler
  - USER INSTALLATION DIRECTORY: /home/ubuntu/.local/share/gem/ruby/3.2.0
  - RUBY EXECUTABLE: /opt/buildpack/tools/ruby/3.2.1/bin/ruby
  - GIT EXECUTABLE: /usr/bin/git
  - EXECUTABLE DIRECTORY: /tmp/renovate-cache/others/bundler/bin
  - SPEC CACHE DIRECTORY: /home/ubuntu/.local/share/gem/specs
  - SYSTEM CONFIGURATION DIRECTORY: /usr/local/ruby/3.2.1/etc
  - RUBYGEMS PLATFORMS:
     - ruby
     - x86_64-linux
  - GEM PATHS:
     - /tmp/renovate-cache/others/bundler
     - /home/ubuntu/.local/share/gem/ruby/3.2.0
     - /opt/buildpack/tools/ruby/3.2.1/lib/ruby/gems/3.2.0
  - GEM CONFIGURATION:
     - :update_sources => true
     - :verbose => true
     - :backtrace => false
     - :bulk_threshold => 1000
     - "gem" => "--bindir /home/ubuntu/bin --no-document"
     - :benchmark => false
  - REMOTE SOURCES:
     - https://rubygems.org/
  - SHELL PATH:
     - /home/ubuntu/.cargo/bin
     - /home/ubuntu/.local/bin
     - /go/bin
     - /home/ubuntu/bin
     - /home/ubuntu/.cargo/bin
     - /home/ubuntu/.local/bin
     - /go/bin
     - /home/ubuntu/bin
     - /home/ubuntu/.cargo/bin
     - /home/ubuntu/.local/bin
     - /go/bin
     - /home/ubuntu/bin
     - /home/ubuntu/bin
     - /home/ubuntu/.cargo/bin
     - /home/ubuntu/.local/bin
     - /go/bin
     - /home/ubuntu/bin
     - /home/ubuntu/bin
     - /usr/local/sbin
     - /usr/local/bin
     - /usr/sbin
     - /usr/bin
     - /sbin
     - /bin
Installed v2 /usr/local/buildpack/tools/v2/ruby.sh in 2 seconds
installing v2 tool bundler v1.16.0
linking tool bundler v1.16.0

/opt/buildpack/tools/bundler/1.16.0/3.2/gems/bundler-1.16.0/lib/bundler/shared_helpers.rb:266:in `search_up': undefined method `untaint' for "/mnt/renovate/gh/Odania-IT/odania-varnish":String (NoMethodError)

      current  = File.expand_path(SharedHelpers.pwd).untaint
                                                    ^^^^^^^^
	from /opt/buildpack/tools/bundler/1.16.0/3.2/gems/bundler-1.16.0/lib/bundler/shared_helpers.rb:253:in `find_file'
	from /opt/buildpack/tools/bundler/1.16.0/3.2/gems/bundler-1.16.0/lib/bundler/shared_helpers.rb:245:in `find_gemfile'
	from /opt/buildpack/tools/bundler/1.16.0/3.2/gems/bundler-1.16.0/lib/bundler/shared_helpers.rb:27:in `root'
	from /opt/buildpack/tools/bundler/1.16.0/3.2/gems/bundler-1.16.0/lib/bundler.rb:218:in `root'
	from /opt/buildpack/tools/bundler/1.16.0/3.2/gems/bundler-1.16.0/lib/bundler.rb:230:in `app_config_path'
	from /opt/buildpack/tools/bundler/1.16.0/3.2/gems/bundler-1.16.0/lib/bundler.rb:257:in `settings'
	from /opt/buildpack/tools/bundler/1.16.0/3.2/gems/bundler-1.16.0/lib/bundler/env.rb:20:in `report'
	from /opt/buildpack/tools/bundler/1.16.0/3.2/gems/bundler-1.16.0/lib/bundler/friendly_errors.rb:96:in `request_issue_report_for'
	from /opt/buildpack/tools/bundler/1.16.0/3.2/gems/bundler-1.16.0/lib/bundler/friendly_errors.rb:46:in `log_error'
	from /opt/buildpack/tools/bundler/1.16.0/3.2/gems/bundler-1.16.0/lib/bundler/friendly_errors.rb:126:in `rescue in with_friendly_errors'
	from /opt/buildpack/tools/bundler/1.16.0/3.2/gems/bundler-1.16.0/lib/bundler/friendly_errors.rb:121:in `with_friendly_errors'
	from /opt/buildpack/tools/bundler/1.16.0/3.2/gems/bundler-1.16.0/exe/bundle:22:in `<top (required)>'
	from /opt/buildpack/tools/bundler/1.16.0/3.2/gems/bundler-1.16.0/exe/bundler:4:in `load'
	from /opt/buildpack/tools/bundler/1.16.0/3.2/gems/bundler-1.16.0/exe/bundler:4:in `<top (required)>'
	from /opt/buildpack/tools/bundler/1.16.0/3.2/bin/bundler:25:in `load'
	from /opt/buildpack/tools/bundler/1.16.0/3.2/bin/bundler:25:in `<main>'
/opt/buildpack/tools/bundler/1.16.0/3.2/gems/bundler-1.16.0/lib/bundler/shared_helpers.rb:266:in `search_up': undefined method `untaint' for "/mnt/renovate/gh/Odania-IT/odania-varnish":String (NoMethodError)

      current  = File.expand_path(SharedHelpers.pwd).untaint
                                                    ^^^^^^^^
	from /opt/buildpack/tools/bundler/1.16.0/3.2/gems/bundler-1.16.0/lib/bundler/shared_helpers.rb:253:in `find_file'
	from /opt/buildpack/tools/bundler/1.16.0/3.2/gems/bundler-1.16.0/lib/bundler/shared_helpers.rb:245:in `find_gemfile'
	from /opt/buildpack/tools/bundler/1.16.0/3.2/gems/bundler-1.16.0/lib/bundler/shared_helpers.rb:27:in `root'
	from /opt/buildpack/tools/bundler/1.16.0/3.2/gems/bundler-1.16.0/lib/bundler.rb:218:in `root'
	from /opt/buildpack/tools/bundler/1.16.0/3.2/gems/bundler-1.16.0/lib/bundler.rb:230:in `app_config_path'
	from /opt/buildpack/tools/bundler/1.16.0/3.2/gems/bundler-1.16.0/lib/bundler.rb:257:in `settings'
	from /opt/buildpack/tools/bundler/1.16.0/3.2/gems/bundler-1.16.0/lib/bundler/feature_flag.rb:21:in `block in settings_method'
	from /opt/buildpack/tools/bundler/1.16.0/3.2/gems/bundler-1.16.0/lib/bundler/cli.rb:97:in `<class:CLI>'
	from /opt/buildpack/tools/bundler/1.16.0/3.2/gems/bundler-1.16.0/lib/bundler/cli.rb:7:in `<module:Bundler>'
	from /opt/buildpack/tools/bundler/1.16.0/3.2/gems/bundler-1.16.0/lib/bundler/cli.rb:6:in `<top (required)>'
	from <internal:/opt/buildpack/tools/ruby/3.2.1/lib/ruby/3.2.0/rubygems/core_ext/kernel_require.rb>:88:in `require'
	from <internal:/opt/buildpack/tools/ruby/3.2.1/lib/ruby/3.2.0/rubygems/core_ext/kernel_require.rb>:88:in `require'
	from /opt/buildpack/tools/bundler/1.16.0/3.2/gems/bundler-1.16.0/exe/bundle:23:in `block in <top (required)>'
	from /opt/buildpack/tools/bundler/1.16.0/3.2/gems/bundler-1.16.0/lib/bundler/friendly_errors.rb:122:in `with_friendly_errors'
	from /opt/buildpack/tools/bundler/1.16.0/3.2/gems/bundler-1.16.0/exe/bundle:22:in `<top (required)>'
	from /opt/buildpack/tools/bundler/1.16.0/3.2/gems/bundler-1.16.0/exe/bundler:4:in `load'
	from /opt/buildpack/tools/bundler/1.16.0/3.2/gems/bundler-1.16.0/exe/bundler:4:in `<top (required)>'
	from /opt/buildpack/tools/bundler/1.16.0/3.2/bin/bundler:25:in `load'
	from /opt/buildpack/tools/bundler/1.16.0/3.2/bin/bundler:25:in `<main>'

@renovate
Copy link
Author

renovate bot commented Mar 24, 2023

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠ Warning: custom changes will be lost.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@renovate-bot