Merge pull request #675 from Automattic/pin-faraday-1.10.5

Pin faraday >= 1.10.5 for security fix

Author: iangmaia

Gemfile

@@ -6,3 +6,7 @@ gem 'danger-dangermattic', '~> 1.1'
 gem 'fastlane', '~> 2.222'
 gem 'fastlane-plugin-wpmreleasetoolkit', '~> 13.0'
 gem 'rubocop', '~> 1.65'
+
+# Security: https://github.com/lostisland/faraday/pull/1665
+# Faraday 2.0 is not compatible with Fastlane
+gem 'faraday', '~> 1.10', '>= 1.10.5'

Gemfile.lock

@@ -95,7 +95,7 @@ GEM
     drb (2.2.3)
     emoji_regex (3.2.3)
     excon (0.112.0)
-    faraday (1.10.4)
+    faraday (1.10.5)
       faraday-em_http (~> 1.0)
       faraday-em_synchrony (~> 1.0)
       faraday-excon (~> 1.1)
@@ -116,7 +116,7 @@ GEM
     faraday-http-cache (2.5.1)
       faraday (>= 0.8)
     faraday-httpclient (1.0.1)
-    faraday-multipart (1.1.1)
+    faraday-multipart (1.2.0)
       multipart-post (~> 2.0)
     faraday-net_http (1.0.2)
     faraday-net_http_persistent (1.2.0)
@@ -354,6 +354,7 @@ PLATFORMS
 
 DEPENDENCIES
   danger-dangermattic (~> 1.1)
+  faraday (~> 1.10, >= 1.10.5)
   fastlane (~> 2.222)
   fastlane-plugin-wpmreleasetoolkit (~> 13.0)
   rubocop (~> 1.65)