Skip to content

chore: update gems to fix CVEs#4677

Merged
kkraune merged 1 commit intomasterfrom
fix/cve-dependency-updates
Apr 29, 2026
Merged

chore: update gems to fix CVEs#4677
kkraune merged 1 commit intomasterfrom
fix/cve-dependency-updates

Conversation

@odosk
Copy link
Copy Markdown
Contributor

@odosk odosk commented Apr 28, 2026

Summary

  • Add explicit minimum version constraints to Gemfile and update Gemfile.lock
  • Addresses CVE-2026-35611 and CVE-2025-6490 in html-proofer, nokogiri, github-pages, and minima

Changes

Gemfile:

Gem Old constraint New constraint
minima ~> 2.0 >= 2.5.1
github-pages unversioned >= 232
html-proofer unversioned >= 5.2.1

Gemfile.lock:

Gem Old version New version
html-proofer 5.1.1 5.2.1
nokogiri 1.19.1 1.19.3

Test plan

  • Verify the site builds successfully with bundle exec jekyll build
  • Confirm security scanner no longer flags these CVEs

🤖 Generated with Claude Code

Add explicit minimum version constraints in Gemfile and update
Gemfile.lock to address CVE-2026-35611 and CVE-2025-6490 in
html-proofer (5.1.1→5.2.1), nokogiri (1.19.1→1.19.3), github-pages,
and minima.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
@kkraune kkraune merged commit ea66a29 into master Apr 29, 2026
@kkraune kkraune deleted the fix/cve-dependency-updates branch April 29, 2026 07:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants