Merge pull request #21 from cbetta/snyk-fix-8f6e4107

[Snyk] Fix for 2 vulnerabilities

Author: cbetta

Gemfile

@@ -7,9 +7,9 @@ gem 'pg'
 gem 'uglifier'
 gem 'rails_12factor'
 gem 'turbolinks'
-gem 'coffee-rails'
-gem 'sass-rails'
-gem 'simple_form'
+gem 'coffee-rails', '>= 4.2.1'
+gem 'sass-rails', '>= 5.0.6'
+gem 'simple_form', '>= 3.3.1'
 gem 'email_validator'
 gem 'validate_url'
 gem 'domainatrix'
@@ -21,7 +21,7 @@ gem 'sucker_punch', '~> 2.0'
 
 
 group :development do
-  gem 'rails_real_favicon', '>= 0.0.6'
+  gem 'rails_real_favicon', '>= 0.0.7'
   gem 'letter_opener'
   gem 'foreman'
   gem 'spring'

Gemfile.lock

@@ -53,13 +53,13 @@ GEM
       public_suffix (~> 2.0, >= 2.0.2)
     arel (7.1.4)
     builder (3.2.3)
-    coffee-rails (4.2.1)
+    coffee-rails (4.2.2)
       coffee-script (>= 2.2.0)
-      railties (>= 4.0.0, < 5.2.x)
+      railties (>= 4.0.0)
     coffee-script (2.4.1)
       coffee-script-source
       execjs
-    coffee-script-source (1.10.0)
+    coffee-script-source (1.12.2)
     concurrent-ruby (1.0.5)
     domain_name (0.5.20170404)
       unf (>= 0.0.5, < 1.0.0)
@@ -74,8 +74,8 @@ GEM
       multipart-post (>= 1.2, < 3)
     foreman (0.82.0)
       thor (~> 0.19.1)
-    globalid (0.3.7)
-      activesupport (>= 4.1.0)
+    globalid (0.4.0)
+      activesupport (>= 4.2.0)
     gravatarify (3.1.1)
     heroics (0.0.17)
       erubis (~> 2.0)
@@ -85,8 +85,8 @@ GEM
       netrc
     http-cookie (1.0.3)
       domain_name (~> 0.5)
-    i18n (0.8.1)
-    json (2.0.3)
+    i18n (0.8.4)
+    json (2.1.0)
     launchy (2.4.3)
       addressable (~> 2.3)
     letsencrypt-rails-heroku (0.2.7)
@@ -96,28 +96,28 @@ GEM
       launchy (~> 2.2)
     loofah (2.0.3)
       nokogiri (>= 1.5.9)
-    mail (2.6.4)
+    mail (2.6.5)
       mime-types (>= 1.16, < 4)
     method_source (0.8.2)
     mime-types (3.1)
       mime-types-data (~> 3.2015)
     mime-types-data (3.2016.0521)
-    mini_portile2 (2.1.0)
-    minitest (5.10.1)
+    mini_portile2 (2.2.0)
+    minitest (5.10.2)
     moneta (0.8.0)
     multi_json (1.12.1)
     multipart-post (2.0.0)
     netrc (0.11.0)
     nio4r (1.2.1)
-    nokogiri (1.7.1)
-      mini_portile2 (~> 2.1.0)
+    nokogiri (1.8.0)
+      mini_portile2 (~> 2.2.0)
     pg (0.19.0)
     phony (2.15.35)
     phony_rails (0.14.4)
       activesupport (>= 3.0)
       phony (~> 2.15)
     public_suffix (2.0.4)
-    rack (2.0.1)
+    rack (2.0.3)
     rack-test (0.6.3)
       rack (>= 1.0)
     rails (5.0.0.1)
@@ -135,9 +135,9 @@ GEM
     rails-assets-jquery (2.2.4)
     rails-assets-semantic (2.2.4)
       rails-assets-jquery (>= 1.8)
-    rails-dom-testing (2.0.2)
-      activesupport (>= 4.2.0, < 6.0)
-      nokogiri (~> 1.6)
+    rails-dom-testing (2.0.3)
+      activesupport (>= 4.2.0)
+      nokogiri (>= 1.6)
     rails-html-sanitizer (1.0.3)
       loofah (~> 2.0)
     rails_12factor (0.0.3)
@@ -157,21 +157,21 @@ GEM
       rake (>= 0.8.7)
       thor (>= 0.18.1, < 2.0)
     rake (12.0.0)
-    rest-client (2.0.1)
+    rest-client (2.0.2)
       http-cookie (>= 1.0.2, < 2.0)
       mime-types (>= 1.16, < 4.0)
       netrc (~> 0.8)
     rubyzip (1.2.1)
-    sass (3.4.22)
+    sass (3.4.24)
     sass-rails (5.0.6)
       railties (>= 4.0.0, < 6)
       sass (~> 3.1)
       sprockets (>= 2.8, < 4.0)
       sprockets-rails (>= 2.0, < 4.0)
       tilt (>= 1.1, < 3)
-    simple_form (3.3.1)
-      actionpack (> 4, < 5.1)
-      activemodel (> 4, < 5.1)
+    simple_form (3.5.0)
+      actionpack (> 4, < 5.2)
+      activemodel (> 4, < 5.2)
     spring (2.0.0)
       activesupport (>= 4.2)
     sprockets (3.7.1)
@@ -185,7 +185,7 @@ GEM
       concurrent-ruby (~> 1.0.0)
     thor (0.19.4)
     thread_safe (0.3.6)
-    tilt (2.0.5)
+    tilt (2.0.7)
     turbolinks (5.0.1)
       turbolinks-source (~> 5)
     turbolinks-source (5.0.0)
@@ -195,7 +195,7 @@ GEM
       execjs (>= 0.3.0, < 3)
     unf (0.1.4)
       unf_ext
-    unf_ext (0.0.7.2)
+    unf_ext (0.0.7.4)
     validate_url (1.0.2)
       activemodel (>= 3.0.0)
       addressable
@@ -207,7 +207,7 @@ PLATFORMS
   ruby
 
 DEPENDENCIES
-  coffee-rails
+  coffee-rails (>= 4.2.1)
   domainatrix
   email_validator
   foreman
@@ -221,9 +221,9 @@ DEPENDENCIES
   rails-assets-jquery!
   rails-assets-semantic!
   rails_12factor
-  rails_real_favicon (>= 0.0.6)
-  sass-rails
-  simple_form
+  rails_real_favicon (>= 0.0.7)
+  sass-rails (>= 5.0.6)
+  simple_form (>= 3.3.1)
   spring
   sucker_punch (~> 2.0)
   turbolinks