Merge pull request cloudfoundry#1616 from cloudfoundry/snyk-fix-8a7055fff721e53f29f0d76c4643a85c

[Snyk] Fix for 4 vulnerabilities

Author: matt-royal

Gemfile

@@ -1,7 +1,7 @@
 source 'https://rubygems.org'
 
 gem 'addressable'
-gem 'allowy'
+gem 'allowy', '>= 2.1.0'
 gem 'cf-copilot', '0.0.14'
 gem 'clockwork', require: false
 gem 'cloudfront-signer'
@@ -45,12 +45,12 @@ gem 'yajl-ruby'
 # Rails Components
 gem 'actionpack', '~> 5.2.4', '>= 5.2.4.3'
 gem 'actionview', '~> 5.2.4', '>= 5.2.4.3'
-gem 'activemodel', '~> 5.2.0', '>= 5.2.4.3'
+gem 'activemodel', '~> 5.2.4', '>= 5.2.4.3'
 gem 'railties', '~> 5.2.4', '>= 5.2.4.3'
 
 # Blobstore and Bits Service Dependencies
 gem 'azure-storage', '0.14.0.preview' # https://github.com/Azure/azure-storage-ruby/issues/122
-gem 'bits_service_client', '~> 3.0'
+gem 'bits_service_client', '~> 3.3', '>= 3.3.0'
 gem 'fog-aliyun'
 gem 'fog-aws'
 gem 'fog-azure-rm', git: 'https://github.com/fog/fog-azure-rm.git', branch: 'fog-arm-cf'
@@ -86,7 +86,7 @@ group :test do
   gem 'rspec-its'
   gem 'rspec-rails', '~> 3.8.3'
   gem 'rspec-wait'
-  gem 'rspec_api_documentation', '>= 4.8.0'
+  gem 'rspec_api_documentation', '>= 6.1.0'
   gem 'rubocop', '~> 0.79.0'
   gem 'timecop'
   gem 'webmock', '> 2.3.1'

Gemfile.lock

@@ -95,8 +95,9 @@ GEM
     beefcake (1.0.0)
     benchmark (0.1.0)
     bit-struct (0.16)
-    bits_service_client (3.3.0)
+    bits_service_client (3.4.0)
       activesupport
+      statsd-ruby (~> 1.4.0)
       steno
     builder (3.2.4)
     byebug (10.0.2)
@@ -127,8 +128,8 @@ GEM
     debase-ruby_core_source (0.10.3)
     declarative (0.0.10)
     declarative-option (0.1.0)
-    delayed_job (4.1.5)
-      activesupport (>= 3.0, < 5.3)
+    delayed_job (4.1.8)
+      activesupport (>= 3.0, < 6.1)
     diff-lcs (1.3)
     docile (1.1.5)
     domain_name (0.5.20180417)
@@ -156,7 +157,7 @@ GEM
     ffi-compiler (1.0.1)
       ffi (>= 1.0.0)
       rake
-    fluent-logger (0.7.2)
+    fluent-logger (0.8.2)
       msgpack (>= 1.0.0, < 2)
     fog-aliyun (0.3.17)
       aliyun-sdk (~> 0.7.3)
@@ -281,7 +282,7 @@ GEM
       faraday (~> 0.9)
       faraday-cookie_jar (~> 0.0.6)
       ms_rest (~> 0.6.3)
-    msgpack (1.2.4)
+    msgpack (1.3.3)
     multi_json (1.12.2)
     multipart-parser (0.1.1)
     multipart-post (2.1.1)
@@ -403,7 +404,7 @@ GEM
     rubyzip (2.0.0)
     safe_yaml (1.0.4)
     scientist (1.1.1)
-    sequel (5.22.0)
+    sequel (5.32.0)
     sexp_processor (4.7.0)
     signet (0.11.0)
       addressable (~> 2.3)
@@ -490,12 +491,12 @@ PLATFORMS
 DEPENDENCIES
   actionpack (~> 5.2.4, >= 5.2.4.3)
   actionview (~> 5.2.4, >= 5.2.4.3)
-  activemodel (~> 5.2.0, >= 5.2.4.3)
+  activemodel (~> 5.2.4, >= 5.2.4.3)
   addressable
-  allowy
+  allowy (>= 2.1.0)
   awesome_print
   azure-storage (= 0.14.0.preview)
-  bits_service_client (~> 3.0)
+  bits_service_client (~> 3.3, >= 3.3.0)
   byebug
   cf-copilot (= 0.0.14)
   cf-perm (~> 0.0.10)
@@ -551,7 +552,7 @@ DEPENDENCIES
   rspec-its
   rspec-rails (~> 3.8.3)
   rspec-wait
-  rspec_api_documentation (>= 4.8.0)
+  rspec_api_documentation (>= 6.1.0)
   rubocop (~> 0.79.0)
   ruby-debug-ide (>= 0.7.0.beta4)
   rubyzip (>= 1.3.0)