The merge request updates the bundler-audit gem from version 0.7.0.1 to 0.9.1. Bundler-audit is a tool that helps identify vulnerabilities in a project's dependencies. This update will ensure that the project is protected from the latest security threats.
This PR updates bundler-audit gem
The current version,
0.7.0.1, throw a psych load error, while the new version (in this PR)
0.9.1) works fine.
bundler-audit check throw the psych error.
With the new version you can get the list of gems with CVEs and new releases with its fixes.
This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.