Skip to content

Upgrade bundler-audit to the latest version

Helio Cola requested to merge gitlab-community/gitlab:upgrade/bundler-audit into master

What does this MR do and why?

Upgrade bundler-audit to the latest version

Upgrading from version 0.7.0.1 to 0.9.1 Version 0.7.0.1 throw Psych::DisallowedClass when running bundle-audit check Version 0.9.1 now list the gems with CVEs that needed to be updated

Screenshots or screen recordings

Not applicable

How to set up and validate locally

  1. Run bundle install
  2. Run bundler-audit update
  3. Run bundler-audit check

With the new version, the list of Gems with CVEs are displayed With version 0.7.0.1, it throws an exception and prints out Tried to load unspecified class: Date (Psych::DisallowedClass)

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

Merge request reports