pmd/Gemfile.lock

GEM
  remote: https://rubygems.org/
  specs:
    addressable (2.8.6)
      public_suffix (>= 2.0.2, < 6.0)
    base64 (0.2.0)
    bigdecimal (3.1.6)
    claide (1.1.0)
    claide-plugins (0.9.2)
      cork
      nap
      open4 (~> 1.3)
    colored2 (3.1.2)
    concurrent-ruby (1.2.3)
    cork (0.3.0)
      colored2 (~> 3.1)
    danger (9.4.3)
      claide (~> 1.0)
      claide-plugins (>= 0.9.2)
      colored2 (~> 3.1)
      cork (~> 0.1)
      faraday (>= 0.9.0, < 3.0)
      faraday-http-cache (~> 2.0)
      git (~> 1.13)
      kramdown (~> 2.3)
      kramdown-parser-gfm (~> 1.0)
      no_proxy_fix
      octokit (>= 4.0)
      terminal-table (>= 1, < 4)
    differ (0.1.2)
    et-orbi (1.2.8)
      tzinfo
    faraday (2.9.0)
      faraday-net_http (>= 2.0, < 3.2)
    faraday-http-cache (2.5.1)
      faraday (>= 0.8)
    faraday-net_http (3.1.0)
      net-http
    fugit (1.10.1)
      et-orbi (~> 1, >= 1.2.7)
      raabro (~> 1.4)
    git (1.19.1)
      addressable (~> 2.8)
      rchardet (~> 1.8)
    kramdown (2.4.0)
      rexml
    kramdown-parser-gfm (1.1.0)
      kramdown (~> 2.0)
    liquid (5.4.0)
    logger-colors (1.0.0)
    nap (1.1.0)
    net-http (0.4.1)
      uri
    no_proxy_fix (0.1.2)
    nokogiri (1.16.2-x86_64-linux)
      racc (~> 1.4)
    octokit (8.1.0)
      base64
      faraday (>= 1, < 3)
      sawyer (~> 0.9)
    open4 (1.3.4)
    pmdtester (1.5.5)
      differ (~> 0.1)
      liquid (~> 5.4)
      logger-colors (~> 1.0)
      nokogiri (~> 1.13)
      rufus-scheduler (~> 3.8)
      slop (~> 4.9)
    public_suffix (5.0.4)
    raabro (1.4.0)
    racc (1.7.3)
    rchardet (1.8.0)
    rexml (3.2.6)
    rouge (4.2.0)
    rufus-scheduler (3.9.1)
      fugit (~> 1.1, >= 1.1.6)
    safe_yaml (1.0.5)
    sawyer (0.9.2)
      addressable (>= 2.3.5)
      faraday (>= 0.17.3, < 3)
    slop (4.10.1)
    terminal-table (3.0.2)
      unicode-display_width (>= 1.1.1, < 3)
    tzinfo (2.0.6)
      concurrent-ruby (~> 1.0)
    unicode-display_width (2.5.0)
    uri (0.13.0)

PLATFORMS
  x86_64-linux

DEPENDENCIES
  bigdecimal
  danger
  liquid
  pmdtester
  rouge
  safe_yaml

BUNDLED WITH
   2.5.3
fix:[ci] Danger is failing builds Add Gemfile.lock to pin down the current versions fixes #2040 2019-09-29 21:24:34 +02:00			`GEM`
			`remote: https://rubygems.org/`
			`specs:`
[ci] Use bundler 2.4.22, which is still compatible with ruby 2.7 2023-12-16 13:03:32 +01:00			`addressable (2.8.6)`
Update gems Fixes https://github.com/pmd/pmd/security/dependabot/26 Fixes https://github.com/advisories/GHSA-4qw4-jpp4-8gvp 2022-09-24 17:52:56 +02:00			`public_suffix (>= 2.0.2, < 6.0)`
Bump pmdtester from 1.5.4 to 1.5.5 2023-11-16 10:27:54 +01:00			`base64 (0.2.0)`
Update gems Add bigdecimal and csv module, to be ruby 3.4 ready 2024-03-12 19:33:10 +01:00			`bigdecimal (3.1.6)`
Update gems (nokogiri and others) Fixes https://github.com/pmd/pmd/security/dependabot/11 Fixes https://github.com/pmd/pmd/security/dependabot/10 2022-02-26 10:39:00 +01:00			`claide (1.1.0)`
fix:[ci] Danger is failing builds Add Gemfile.lock to pin down the current versions fixes #2040 2019-09-29 21:24:34 +02:00			`claide-plugins (0.9.2)`
			`cork`
			`nap`
			`open4 (~> 1.3)`
			`colored2 (3.1.2)`
Update gems Fixes https://github.com/pmd/pmd/security/dependabot/49 Fixes https://github.com/pmd/pmd/security/dependabot/50 2024-02-15 20:31:17 +01:00			`concurrent-ruby (1.2.3)`
fix:[ci] Danger is failing builds Add Gemfile.lock to pin down the current versions fixes #2040 2019-09-29 21:24:34 +02:00			`cork (0.3.0)`
			`colored2 (~> 3.1)`
Update gems Fixes https://github.com/pmd/pmd/security/dependabot/49 Fixes https://github.com/pmd/pmd/security/dependabot/50 2024-02-15 20:31:17 +01:00			`danger (9.4.3)`
fix:[ci] Danger is failing builds Add Gemfile.lock to pin down the current versions fixes #2040 2019-09-29 21:24:34 +02:00			`claide (~> 1.0)`
			`claide-plugins (>= 0.9.2)`
			`colored2 (~> 3.1)`
			`cork (~> 0.1)`
Update gems 2023-02-02 09:37:17 +01:00			`faraday (>= 0.9.0, < 3.0)`
Bump danger from 5.16.1 to 8.4.0 2021-10-15 18:12:55 +02:00			`faraday-http-cache (~> 2.0)`
Update gems * Bump commonmarker from 0.23.9 to 0.23.10 Fixes https://github.com/pmd/pmd/security/dependabot/43 Fixes https://github.com/advisories/GHSA-7vh7-fw88-wj87 * Bump activesupport from 7.0.5 to 7.0.8 Fixes https://github.com/pmd/pmd/security/dependabot/45 Fixes CVE-2023-38037 ** Fixes https://github.com/advisories/GHSA-cr5q-6q9f-rq6q * Bump addressable from 2.8.4 to 2.8.5 * Bump danger from 9.2.0 to 9.3.2 * Bump execjs from 2.8.1 to 2.9.1 * Bump faraday from 2.7.5 to 2.7.11 * Bump ffi from 1.15.5 to 1.16.2 * Bump i18n from 1.13.0 to 1.14.1 * Bump mini_portile2 from 2.8.2 to 2.8.4 * Bump minitest from 5.18.0 to 5.20.0 * Bump nokogiri from 1.15.2 to 1.15.4 * Bump octokit from 5.6.1 to 6.1.1 * Bump public_suffix from 5.0.1 to 5.0.3 * Bump racc from 1.6.2 to 1.7.1 * Bump rexml from 3.2.5 to 3.2.6 * Bump rouge from 4.1.1 to 4.1.3 * Bump rufus-schedule from 3.8.2 to 3.9.1 2023-09-28 12:17:26 +02:00			`git (~> 1.13)`
Bump danger from 5.16.1 to 8.4.0 2021-10-15 18:12:55 +02:00			`kramdown (~> 2.3)`
			`kramdown-parser-gfm (~> 1.0)`
fix:[ci] Danger is failing builds Add Gemfile.lock to pin down the current versions fixes #2040 2019-09-29 21:24:34 +02:00			`no_proxy_fix`
[ci] Use bundler 2.4.22, which is still compatible with ruby 2.7 2023-12-16 13:03:32 +01:00			`octokit (>= 4.0)`
Bump danger from 5.16.1 to 8.4.0 2021-10-15 18:12:55 +02:00			`terminal-table (>= 1, < 4)`
fix:[ci] Danger is failing builds Add Gemfile.lock to pin down the current versions fixes #2040 2019-09-29 21:24:34 +02:00			`differ (0.1.2)`
Update gems Add bigdecimal and csv module, to be ruby 3.4 ready 2024-03-12 19:33:10 +01:00			`et-orbi (1.2.8)`
fix:[ci] Danger is failing builds Add Gemfile.lock to pin down the current versions fixes #2040 2019-09-29 21:24:34 +02:00			`tzinfo`
Update gems Fixes https://github.com/pmd/pmd/security/dependabot/49 Fixes https://github.com/pmd/pmd/security/dependabot/50 2024-02-15 20:31:17 +01:00			`faraday (2.9.0)`
			`faraday-net_http (>= 2.0, < 3.2)`
			`faraday-http-cache (2.5.1)`
Bump danger from 5.16.1 to 8.4.0 2021-10-15 18:12:55 +02:00			`faraday (>= 0.8)`
Update gems Fixes https://github.com/pmd/pmd/security/dependabot/49 Fixes https://github.com/pmd/pmd/security/dependabot/50 2024-02-15 20:31:17 +01:00			`faraday-net_http (3.1.0)`
			`net-http`
Update gems Add bigdecimal and csv module, to be ruby 3.4 ready 2024-03-12 19:33:10 +01:00			`fugit (1.10.1)`
Update regression-tester and other gems pmd-tester 1.4.1 nokogiri 1.13.4 Fixes the following security alerts: - Out-of-bounds Write in zlib affects Nokogiri - XML Injection in Xerces Java affects Nokogiri - Inefficient Regular Expression Complexity in Nokogiri - Denial of Service (DoS) in Nokogiri on JRuby 2022-04-12 12:17:01 +02:00			`et-orbi (~> 1, >= 1.2.7)`
[ci] Update pmd-tester, use auxclasspath This will test pmd/pmd-regression-tester#72 checkstyle: Add exclude patterns for checkstyle: after compilation, testresources appear now under target/test-classes and they don't need to be analyzed again. Also exclude generated-sources. 2020-10-26 17:46:05 +01:00			`raabro (~> 1.4)`
Update gems Fixes https://github.com/pmd/pmd/security/dependabot/49 Fixes https://github.com/pmd/pmd/security/dependabot/50 2024-02-15 20:31:17 +01:00			`git (1.19.1)`
Update gems Fixes https://github.com/pmd/pmd/security/dependabot/26 Fixes https://github.com/advisories/GHSA-4qw4-jpp4-8gvp 2022-09-24 17:52:56 +02:00			`addressable (~> 2.8)`
Update gems 2020-04-25 11:45:13 +02:00			`rchardet (~> 1.8)`
Update gems Fixes Command injection in ruby-git (https://github.com/pmd/pmd/security/dependabot/21) 2022-04-29 12:01:29 +02:00			`kramdown (2.4.0)`
Bump danger from 5.16.1 to 8.4.0 2021-10-15 18:12:55 +02:00			`rexml`
			`kramdown-parser-gfm (1.1.0)`
			`kramdown (~> 2.0)`
Update gems Fixes https://github.com/pmd/pmd/security/dependabot/26 Fixes https://github.com/advisories/GHSA-4qw4-jpp4-8gvp 2022-09-24 17:52:56 +02:00			`liquid (5.4.0)`
[ci] Update pmdtester to 1.1.0 2020-12-05 15:09:11 +01:00			`logger-colors (1.0.0)`
fix:[ci] Danger is failing builds Add Gemfile.lock to pin down the current versions fixes #2040 2019-09-29 21:24:34 +02:00			`nap (1.1.0)`
Update gems Fixes https://github.com/pmd/pmd/security/dependabot/49 Fixes https://github.com/pmd/pmd/security/dependabot/50 2024-02-15 20:31:17 +01:00			`net-http (0.4.1)`
			`uri`
fix:[ci] Danger is failing builds Add Gemfile.lock to pin down the current versions fixes #2040 2019-09-29 21:24:34 +02:00			`no_proxy_fix (0.1.2)`
Update gems Add bigdecimal and csv module, to be ruby 3.4 ready 2024-03-12 19:33:10 +01:00			`nokogiri (1.16.2-x86_64-linux)`
Update gems CVE-2020-26247 https://github.com/advisories/GHSA-vr8q-g5c7-m54m 2021-01-07 15:28:06 +01:00			`racc (~> 1.4)`
Update gems Fixes https://github.com/pmd/pmd/security/dependabot/49 Fixes https://github.com/pmd/pmd/security/dependabot/50 2024-02-15 20:31:17 +01:00			`octokit (8.1.0)`
			`base64`
Update gems Fixes https://github.com/pmd/pmd/security/dependabot/22 TZInfo relative path traversal vulnerability allows loading of arbitrary files CVE-2022-31163 https://github.com/advisories/GHSA-5cm2-9h8c-rvfx 2022-07-22 14:14:12 +02:00			`faraday (>= 1, < 3)`
			`sawyer (~> 0.9)`
fix:[ci] Danger is failing builds Add Gemfile.lock to pin down the current versions fixes #2040 2019-09-29 21:24:34 +02:00			`open4 (1.3.4)`
Bump pmdtester from 1.5.4 to 1.5.5 2023-11-16 10:27:54 +01:00			`pmdtester (1.5.5)`
Revert "REVERT ME - Use pmtester from pmd/pmd-regression-tester#103" This reverts commit 67928910df25574ec41821b60d352e5f32bfe971. 2022-03-24 16:18:51 +01:00			`differ (~> 0.1)`
Update pmdtester and other gems 2022-11-25 15:15:10 +01:00			`liquid (~> 5.4)`
Revert "REVERT ME - Use pmtester from pmd/pmd-regression-tester#103" This reverts commit 67928910df25574ec41821b60d352e5f32bfe971. 2022-03-24 16:18:51 +01:00			`logger-colors (~> 1.0)`
Update pmdtester to 1.4.0 2022-03-24 16:46:42 +01:00			`nokogiri (~> 1.13)`
			`rufus-scheduler (~> 3.8)`
Update pmdtester and other gems 2022-11-25 15:15:10 +01:00			`slop (~> 4.9)`
[ci] Use bundler 2.4.22, which is still compatible with ruby 2.7 2023-12-16 13:03:32 +01:00			`public_suffix (5.0.4)`
[ci] Update pmd-tester, use auxclasspath This will test pmd/pmd-regression-tester#72 checkstyle: Add exclude patterns for checkstyle: after compilation, testresources appear now under target/test-classes and they don't need to be analyzed again. Also exclude generated-sources. 2020-10-26 17:46:05 +01:00			`raabro (1.4.0)`
Bump pmdtester from 1.5.4 to 1.5.5 2023-11-16 10:27:54 +01:00			`racc (1.7.3)`
Update gems 2020-04-25 11:45:13 +02:00			`rchardet (1.8.0)`
Update gems * Bump commonmarker from 0.23.9 to 0.23.10 Fixes https://github.com/pmd/pmd/security/dependabot/43 Fixes https://github.com/advisories/GHSA-7vh7-fw88-wj87 * Bump activesupport from 7.0.5 to 7.0.8 Fixes https://github.com/pmd/pmd/security/dependabot/45 Fixes CVE-2023-38037 ** Fixes https://github.com/advisories/GHSA-cr5q-6q9f-rq6q * Bump addressable from 2.8.4 to 2.8.5 * Bump danger from 9.2.0 to 9.3.2 * Bump execjs from 2.8.1 to 2.9.1 * Bump faraday from 2.7.5 to 2.7.11 * Bump ffi from 1.15.5 to 1.16.2 * Bump i18n from 1.13.0 to 1.14.1 * Bump mini_portile2 from 2.8.2 to 2.8.4 * Bump minitest from 5.18.0 to 5.20.0 * Bump nokogiri from 1.15.2 to 1.15.4 * Bump octokit from 5.6.1 to 6.1.1 * Bump public_suffix from 5.0.1 to 5.0.3 * Bump racc from 1.6.2 to 1.7.1 * Bump rexml from 3.2.5 to 3.2.6 * Bump rouge from 4.1.1 to 4.1.3 * Bump rufus-schedule from 3.8.2 to 3.9.1 2023-09-28 12:17:26 +02:00			`rexml (3.2.6)`
Bump pmdtester from 1.5.4 to 1.5.5 2023-11-16 10:27:54 +01:00			`rouge (4.2.0)`
Update gems * Bump commonmarker from 0.23.9 to 0.23.10 Fixes https://github.com/pmd/pmd/security/dependabot/43 Fixes https://github.com/advisories/GHSA-7vh7-fw88-wj87 * Bump activesupport from 7.0.5 to 7.0.8 Fixes https://github.com/pmd/pmd/security/dependabot/45 Fixes CVE-2023-38037 ** Fixes https://github.com/advisories/GHSA-cr5q-6q9f-rq6q * Bump addressable from 2.8.4 to 2.8.5 * Bump danger from 9.2.0 to 9.3.2 * Bump execjs from 2.8.1 to 2.9.1 * Bump faraday from 2.7.5 to 2.7.11 * Bump ffi from 1.15.5 to 1.16.2 * Bump i18n from 1.13.0 to 1.14.1 * Bump mini_portile2 from 2.8.2 to 2.8.4 * Bump minitest from 5.18.0 to 5.20.0 * Bump nokogiri from 1.15.2 to 1.15.4 * Bump octokit from 5.6.1 to 6.1.1 * Bump public_suffix from 5.0.1 to 5.0.3 * Bump racc from 1.6.2 to 1.7.1 * Bump rexml from 3.2.5 to 3.2.6 * Bump rouge from 4.1.1 to 4.1.3 * Bump rufus-schedule from 3.8.2 to 3.9.1 2023-09-28 12:17:26 +02:00			`rufus-scheduler (3.9.1)`
fix:[ci] Danger is failing builds Add Gemfile.lock to pin down the current versions fixes #2040 2019-09-29 21:24:34 +02:00			`fugit (~> 1.1, >= 1.1.6)`
			`safe_yaml (1.0.5)`
Update gems Fixes https://github.com/pmd/pmd/security/dependabot/22 TZInfo relative path traversal vulnerability allows loading of arbitrary files CVE-2022-31163 https://github.com/advisories/GHSA-5cm2-9h8c-rvfx 2022-07-22 14:14:12 +02:00			`sawyer (0.9.2)`
fix:[ci] Danger is failing builds Add Gemfile.lock to pin down the current versions fixes #2040 2019-09-29 21:24:34 +02:00			`addressable (>= 2.3.5)`
Update gems Fixes https://github.com/pmd/pmd/security/dependabot/22 TZInfo relative path traversal vulnerability allows loading of arbitrary files CVE-2022-31163 https://github.com/advisories/GHSA-5cm2-9h8c-rvfx 2022-07-22 14:14:12 +02:00			`faraday (>= 0.17.3, < 3)`
Update gems Fixes https://github.com/pmd/pmd/security/dependabot/37 Fixes CVE-2023-28120 Fixes https://github.com/advisories/GHSA-pj73-v5mw-pm9j 2023-03-17 10:40:15 +01:00			`slop (4.10.1)`
Bump danger from 5.16.1 to 8.4.0 2021-10-15 18:12:55 +02:00			`terminal-table (3.0.2)`
			`unicode-display_width (>= 1.1.1, < 3)`
Update gems 2023-02-02 09:37:17 +01:00			`tzinfo (2.0.6)`
fix:[ci] Danger is failing builds Add Gemfile.lock to pin down the current versions fixes #2040 2019-09-29 21:24:34 +02:00			`concurrent-ruby (~> 1.0)`
Bump pmdtester from 1.5.4 to 1.5.5 2023-11-16 10:27:54 +01:00			`unicode-display_width (2.5.0)`
Update gems Fixes https://github.com/pmd/pmd/security/dependabot/49 Fixes https://github.com/pmd/pmd/security/dependabot/50 2024-02-15 20:31:17 +01:00			`uri (0.13.0)`
fix:[ci] Danger is failing builds Add Gemfile.lock to pin down the current versions fixes #2040 2019-09-29 21:24:34 +02:00
			`PLATFORMS`
Update gems Add bigdecimal and csv module, to be ruby 3.4 ready 2024-03-12 19:33:10 +01:00			`x86_64-linux`
fix:[ci] Danger is failing builds Add Gemfile.lock to pin down the current versions fixes #2040 2019-09-29 21:24:34 +02:00
			`DEPENDENCIES`
Update gems Add bigdecimal and csv module, to be ruby 3.4 ready 2024-03-12 19:33:10 +01:00			`bigdecimal`
Bump danger from 5.16.1 to 8.4.0 2021-10-15 18:12:55 +02:00			`danger`
Update pmdtester to 1.4.0 2022-03-24 16:46:42 +01:00			`liquid`
Revert "REVERT ME - Use pmtester from pmd/pmd-regression-tester#103" This reverts commit 67928910df25574ec41821b60d352e5f32bfe971. 2022-03-24 16:18:51 +01:00			`pmdtester`
Update pmdtester to 1.4.0 2022-03-24 16:46:42 +01:00			`rouge`
			`safe_yaml`
fix:[ci] Danger is failing builds Add Gemfile.lock to pin down the current versions fixes #2040 2019-09-29 21:24:34 +02:00
			`BUNDLED WITH`
Update gems Fixes https://github.com/pmd/pmd/security/dependabot/49 Fixes https://github.com/pmd/pmd/security/dependabot/50 2024-02-15 20:31:17 +01:00			`2.5.3`