Bump rubyzip from 1.2.2 to 1.2.3 (#231)

Bumps [rubyzip](https://github.com/rubyzip/rubyzip) from 1.2.2 to 1.2.3. - [Release notes](https://github.com/rubyzip/rubyzip/releases) - [Changelog](https://github.com/rubyzip/rubyzip/blob/master/Changelog.md) - [Commits](rubyzip/rubyzip@v1.2.2...v1.2.3) Signed-off-by: dependabot[bot] <[email protected]>
ualbertalib · May 31, 2019 · 7e3e4f2 · 7e3e4f2
1 parent 1690ec8
commit 7e3e4f2
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/Gemfile b/Gemfile
@@ -3,7 +3,7 @@ source 'https://rubygems.org'
 gem 'rails', '~>3.2.22'
 
 # pin this to post-CVE 2017-5946
-gem 'rubyzip', '~> 1.2.2'
+gem 'rubyzip', '~> 1.2.3'
 
 gem 'mysql2', '~>0.3.20'
 gem 'omniauth'

diff --git a/Gemfile.lock b/Gemfile.lock
@@ -239,7 +239,7 @@ GEM
       rspec-support (~> 3.5.0)
     rspec-support (3.5.0)
     ruby-rc4 (0.1.5)
-    rubyzip (1.2.2)
+    rubyzip (1.2.3)
     sass (3.4.22)
     sass-rails (3.2.6)
       railties (~> 3.2.0)
@@ -326,7 +326,7 @@ DEPENDENCIES
   rollbar
   rspec
   rspec-rails
-  rubyzip (~> 1.2.2)
+  rubyzip (~> 1.2.3)
   sass
   sass-rails (~> 3.2.3)
   selenium-webdriver