pmd/Gemfile.lock

GEM
  remote: https://rubygems.org/
  specs:
    addressable (2.8.4)
      public_suffix (>= 2.0.2, < 6.0)
    claide (1.1.0)
    claide-plugins (0.9.2)
      cork
      nap
      open4 (~> 1.3)
    colored2 (3.1.2)
    concurrent-ruby (1.2.2)
    cork (0.3.0)
      colored2 (~> 3.1)
    danger (9.2.0)
      claide (~> 1.0)
      claide-plugins (>= 0.9.2)
      colored2 (~> 3.1)
      cork (~> 0.1)
      faraday (>= 0.9.0, < 3.0)
      faraday-http-cache (~> 2.0)
      git (~> 1.7)
      kramdown (~> 2.3)
      kramdown-parser-gfm (~> 1.0)
      no_proxy_fix
      octokit (~> 5.0)
      terminal-table (>= 1, < 4)
    differ (0.1.2)
    et-orbi (1.2.7)
      tzinfo
    faraday (2.7.4)
      faraday-net_http (>= 2.0, < 3.1)
      ruby2_keywords (>= 0.0.4)
    faraday-http-cache (2.5.0)
      faraday (>= 0.8)
    faraday-net_http (3.0.2)
    fugit (1.8.1)
      et-orbi (~> 1, >= 1.2.7)
      raabro (~> 1.4)
    git (1.18.0)
      addressable (~> 2.8)
      rchardet (~> 1.8)
    kramdown (2.4.0)
      rexml
    kramdown-parser-gfm (1.1.0)
      kramdown (~> 2.0)
    liquid (5.4.0)
    logger-colors (1.0.0)
    mini_portile2 (2.8.1)
    nap (1.1.0)
    no_proxy_fix (0.1.2)
    nokogiri (1.14.3)
      mini_portile2 (~> 2.8.0)
      racc (~> 1.4)
    octokit (5.6.1)
      faraday (>= 1, < 3)
      sawyer (~> 0.9)
    open4 (1.3.4)
    pmdtester (1.5.3)
      differ (~> 0.1)
      liquid (~> 5.4)
      logger-colors (~> 1.0)
      nokogiri (~> 1.13)
      rufus-scheduler (~> 3.8)
      slop (~> 4.9)
    public_suffix (5.0.1)
    raabro (1.4.0)
    racc (1.6.2)
    rchardet (1.8.0)
    rexml (3.2.5)
    rouge (4.1.0)
    ruby2_keywords (0.0.5)
    rufus-scheduler (3.8.2)
      fugit (~> 1.1, >= 1.1.6)
    safe_yaml (1.0.5)
    sawyer (0.9.2)
      addressable (>= 2.3.5)
      faraday (>= 0.17.3, < 3)
    slop (4.10.1)
    terminal-table (3.0.2)
      unicode-display_width (>= 1.1.1, < 3)
    tzinfo (2.0.6)
      concurrent-ruby (~> 1.0)
    unicode-display_width (2.4.2)

PLATFORMS
  ruby

DEPENDENCIES
  danger
  liquid
  pmdtester
  rouge
  safe_yaml

BUNDLED WITH
   2.4.5
fix:[ci] Danger is failing builds Add Gemfile.lock to pin down the current versions fixes #2040 2019-09-29 21:24:34 +02:00			`GEM`
			`remote: https://rubygems.org/`
			`specs:`
Update gems Fixes https://github.com/pmd/pmd/security/dependabot/38 Fixes https://github.com/pmd/pmd/security/dependabot/39 Fixes https://github.com/pmd/pmd/security/dependabot/40 2023-04-28 10:28:17 +02:00			`addressable (2.8.4)`
Update gems Fixes https://github.com/pmd/pmd/security/dependabot/26 Fixes https://github.com/advisories/GHSA-4qw4-jpp4-8gvp 2022-09-24 17:52:56 +02:00			`public_suffix (>= 2.0.2, < 6.0)`
Update gems (nokogiri and others) Fixes https://github.com/pmd/pmd/security/dependabot/11 Fixes https://github.com/pmd/pmd/security/dependabot/10 2022-02-26 10:39:00 +01:00			`claide (1.1.0)`
fix:[ci] Danger is failing builds Add Gemfile.lock to pin down the current versions fixes #2040 2019-09-29 21:24:34 +02:00			`claide-plugins (0.9.2)`
			`cork`
			`nap`
			`open4 (~> 1.3)`
			`colored2 (3.1.2)`
Update gems Fixes https://github.com/pmd/pmd/security/dependabot/37 Fixes CVE-2023-28120 Fixes https://github.com/advisories/GHSA-pj73-v5mw-pm9j 2023-03-17 10:40:15 +01:00			`concurrent-ruby (1.2.2)`
fix:[ci] Danger is failing builds Add Gemfile.lock to pin down the current versions fixes #2040 2019-09-29 21:24:34 +02:00			`cork (0.3.0)`
			`colored2 (~> 3.1)`
Update gems 2023-02-02 09:37:17 +01:00			`danger (9.2.0)`
fix:[ci] Danger is failing builds Add Gemfile.lock to pin down the current versions fixes #2040 2019-09-29 21:24:34 +02:00			`claide (~> 1.0)`
			`claide-plugins (>= 0.9.2)`
			`colored2 (~> 3.1)`
			`cork (~> 0.1)`
Update gems 2023-02-02 09:37:17 +01:00			`faraday (>= 0.9.0, < 3.0)`
Bump danger from 5.16.1 to 8.4.0 2021-10-15 18:12:55 +02:00			`faraday-http-cache (~> 2.0)`
			`git (~> 1.7)`
			`kramdown (~> 2.3)`
			`kramdown-parser-gfm (~> 1.0)`
fix:[ci] Danger is failing builds Add Gemfile.lock to pin down the current versions fixes #2040 2019-09-29 21:24:34 +02:00			`no_proxy_fix`
Update gems Fixes https://github.com/pmd/pmd/security/dependabot/26 Fixes https://github.com/advisories/GHSA-4qw4-jpp4-8gvp 2022-09-24 17:52:56 +02:00			`octokit (~> 5.0)`
Bump danger from 5.16.1 to 8.4.0 2021-10-15 18:12:55 +02:00			`terminal-table (>= 1, < 4)`
fix:[ci] Danger is failing builds Add Gemfile.lock to pin down the current versions fixes #2040 2019-09-29 21:24:34 +02:00			`differ (0.1.2)`
Update gems Fixes https://github.com/pmd/pmd/security/dependabot/12 2022-03-10 10:58:16 +01:00			`et-orbi (1.2.7)`
fix:[ci] Danger is failing builds Add Gemfile.lock to pin down the current versions fixes #2040 2019-09-29 21:24:34 +02:00			`tzinfo`
Update gems 2023-02-02 09:37:17 +01:00			`faraday (2.7.4)`
			`faraday-net_http (>= 2.0, < 3.1)`
Bump danger from 5.16.1 to 8.4.0 2021-10-15 18:12:55 +02:00			`ruby2_keywords (>= 0.0.4)`
Update gems Fixes https://github.com/pmd/pmd/security/dependabot/38 Fixes https://github.com/pmd/pmd/security/dependabot/39 Fixes https://github.com/pmd/pmd/security/dependabot/40 2023-04-28 10:28:17 +02:00			`faraday-http-cache (2.5.0)`
Bump danger from 5.16.1 to 8.4.0 2021-10-15 18:12:55 +02:00			`faraday (>= 0.8)`
Update gems 2023-02-02 09:37:17 +01:00			`faraday-net_http (3.0.2)`
Update gems Fixes https://github.com/pmd/pmd/security/dependabot/35 Fixes CVE-2023-22796 Fixes https://github.com/advisories/GHSA-j6gc-792m-qgm2 Fixes https://github.com/pmd/pmd/security/dependabot/36 Fixes https://github.com/advisories/GHSA-636f-xm5j-pj9m 2023-01-25 08:48:34 +01:00			`fugit (1.8.1)`
Update regression-tester and other gems pmd-tester 1.4.1 nokogiri 1.13.4 Fixes the following security alerts: - Out-of-bounds Write in zlib affects Nokogiri - XML Injection in Xerces Java affects Nokogiri - Inefficient Regular Expression Complexity in Nokogiri - Denial of Service (DoS) in Nokogiri on JRuby 2022-04-12 12:17:01 +02:00			`et-orbi (~> 1, >= 1.2.7)`
[ci] Update pmd-tester, use auxclasspath This will test pmd/pmd-regression-tester#72 checkstyle: Add exclude patterns for checkstyle: after compilation, testresources appear now under target/test-classes and they don't need to be analyzed again. Also exclude generated-sources. 2020-10-26 17:46:05 +01:00			`raabro (~> 1.4)`
Update gems Fixes https://github.com/pmd/pmd/security/dependabot/38 Fixes https://github.com/pmd/pmd/security/dependabot/39 Fixes https://github.com/pmd/pmd/security/dependabot/40 2023-04-28 10:28:17 +02:00			`git (1.18.0)`
Update gems Fixes https://github.com/pmd/pmd/security/dependabot/26 Fixes https://github.com/advisories/GHSA-4qw4-jpp4-8gvp 2022-09-24 17:52:56 +02:00			`addressable (~> 2.8)`
Update gems 2020-04-25 11:45:13 +02:00			`rchardet (~> 1.8)`
Update gems Fixes Command injection in ruby-git (https://github.com/pmd/pmd/security/dependabot/21) 2022-04-29 12:01:29 +02:00			`kramdown (2.4.0)`
Bump danger from 5.16.1 to 8.4.0 2021-10-15 18:12:55 +02:00			`rexml`
			`kramdown-parser-gfm (1.1.0)`
			`kramdown (~> 2.0)`
Update gems Fixes https://github.com/pmd/pmd/security/dependabot/26 Fixes https://github.com/advisories/GHSA-4qw4-jpp4-8gvp 2022-09-24 17:52:56 +02:00			`liquid (5.4.0)`
[ci] Update pmdtester to 1.1.0 2020-12-05 15:09:11 +01:00			`logger-colors (1.0.0)`
Update gems Fixes https://github.com/pmd/pmd/security/dependabot/34 Fixes CVE-2022-46648 Fixes https://github.com/advisories/GHSA-pfpr-3463-c6jh 2023-01-10 12:21:27 +01:00			`mini_portile2 (2.8.1)`
fix:[ci] Danger is failing builds Add Gemfile.lock to pin down the current versions fixes #2040 2019-09-29 21:24:34 +02:00			`nap (1.1.0)`
			`no_proxy_fix (0.1.2)`
Update gems Fixes https://github.com/pmd/pmd/security/dependabot/38 Fixes https://github.com/pmd/pmd/security/dependabot/39 Fixes https://github.com/pmd/pmd/security/dependabot/40 2023-04-28 10:28:17 +02:00			`nokogiri (1.14.3)`
Update gems (nokogiri and others) Fixes https://github.com/pmd/pmd/security/dependabot/11 Fixes https://github.com/pmd/pmd/security/dependabot/10 2022-02-26 10:39:00 +01:00			`mini_portile2 (~> 2.8.0)`
Update gems CVE-2020-26247 https://github.com/advisories/GHSA-vr8q-g5c7-m54m 2021-01-07 15:28:06 +01:00			`racc (~> 1.4)`
Update gems Fixes https://github.com/pmd/pmd/security/dependabot/26 Fixes https://github.com/advisories/GHSA-4qw4-jpp4-8gvp 2022-09-24 17:52:56 +02:00			`octokit (5.6.1)`
Update gems Fixes https://github.com/pmd/pmd/security/dependabot/22 TZInfo relative path traversal vulnerability allows loading of arbitrary files CVE-2022-31163 https://github.com/advisories/GHSA-5cm2-9h8c-rvfx 2022-07-22 14:14:12 +02:00			`faraday (>= 1, < 3)`
			`sawyer (~> 0.9)`
fix:[ci] Danger is failing builds Add Gemfile.lock to pin down the current versions fixes #2040 2019-09-29 21:24:34 +02:00			`open4 (1.3.4)`
Update pmdtester and other gems 2022-11-25 15:15:10 +01:00			`pmdtester (1.5.3)`
Revert "REVERT ME - Use pmtester from pmd/pmd-regression-tester#103" This reverts commit 67928910df25574ec41821b60d352e5f32bfe971. 2022-03-24 16:18:51 +01:00			`differ (~> 0.1)`
Update pmdtester and other gems 2022-11-25 15:15:10 +01:00			`liquid (~> 5.4)`
Revert "REVERT ME - Use pmtester from pmd/pmd-regression-tester#103" This reverts commit 67928910df25574ec41821b60d352e5f32bfe971. 2022-03-24 16:18:51 +01:00			`logger-colors (~> 1.0)`
Update pmdtester to 1.4.0 2022-03-24 16:46:42 +01:00			`nokogiri (~> 1.13)`
			`rufus-scheduler (~> 3.8)`
Update pmdtester and other gems 2022-11-25 15:15:10 +01:00			`slop (~> 4.9)`
Update gems Fixes https://github.com/pmd/pmd/security/dependabot/31 Fixes CVE-2022-23476 Fixes https://github.com/advisories/GHSA-qv4q-mr5r-qprj 2022-12-08 11:41:02 +01:00			`public_suffix (5.0.1)`
[ci] Update pmd-tester, use auxclasspath This will test pmd/pmd-regression-tester#72 checkstyle: Add exclude patterns for checkstyle: after compilation, testresources appear now under target/test-classes and they don't need to be analyzed again. Also exclude generated-sources. 2020-10-26 17:46:05 +01:00			`raabro (1.4.0)`
Update gems Fixes https://github.com/pmd/pmd/security/dependabot/34 Fixes CVE-2022-46648 Fixes https://github.com/advisories/GHSA-pfpr-3463-c6jh 2023-01-10 12:21:27 +01:00			`racc (1.6.2)`
Update gems 2020-04-25 11:45:13 +02:00			`rchardet (1.8.0)`
Bump danger from 5.16.1 to 8.4.0 2021-10-15 18:12:55 +02:00			`rexml (3.2.5)`
Update gems Fixes https://github.com/pmd/pmd/security/dependabot/37 Fixes CVE-2023-28120 Fixes https://github.com/advisories/GHSA-pj73-v5mw-pm9j 2023-03-17 10:40:15 +01:00			`rouge (4.1.0)`
Bump danger from 5.16.1 to 8.4.0 2021-10-15 18:12:55 +02:00			`ruby2_keywords (0.0.5)`
Update gems Fixes https://github.com/pmd/pmd/security/dependabot/22 TZInfo relative path traversal vulnerability allows loading of arbitrary files CVE-2022-31163 https://github.com/advisories/GHSA-5cm2-9h8c-rvfx 2022-07-22 14:14:12 +02:00			`rufus-scheduler (3.8.2)`
fix:[ci] Danger is failing builds Add Gemfile.lock to pin down the current versions fixes #2040 2019-09-29 21:24:34 +02:00			`fugit (~> 1.1, >= 1.1.6)`
			`safe_yaml (1.0.5)`
Update gems Fixes https://github.com/pmd/pmd/security/dependabot/22 TZInfo relative path traversal vulnerability allows loading of arbitrary files CVE-2022-31163 https://github.com/advisories/GHSA-5cm2-9h8c-rvfx 2022-07-22 14:14:12 +02:00			`sawyer (0.9.2)`
fix:[ci] Danger is failing builds Add Gemfile.lock to pin down the current versions fixes #2040 2019-09-29 21:24:34 +02:00			`addressable (>= 2.3.5)`
Update gems Fixes https://github.com/pmd/pmd/security/dependabot/22 TZInfo relative path traversal vulnerability allows loading of arbitrary files CVE-2022-31163 https://github.com/advisories/GHSA-5cm2-9h8c-rvfx 2022-07-22 14:14:12 +02:00			`faraday (>= 0.17.3, < 3)`
Update gems Fixes https://github.com/pmd/pmd/security/dependabot/37 Fixes CVE-2023-28120 Fixes https://github.com/advisories/GHSA-pj73-v5mw-pm9j 2023-03-17 10:40:15 +01:00			`slop (4.10.1)`
Bump danger from 5.16.1 to 8.4.0 2021-10-15 18:12:55 +02:00			`terminal-table (3.0.2)`
			`unicode-display_width (>= 1.1.1, < 3)`
Update gems 2023-02-02 09:37:17 +01:00			`tzinfo (2.0.6)`
fix:[ci] Danger is failing builds Add Gemfile.lock to pin down the current versions fixes #2040 2019-09-29 21:24:34 +02:00			`concurrent-ruby (~> 1.0)`
Update gems Fixes https://github.com/pmd/pmd/security/dependabot/34 Fixes CVE-2022-46648 Fixes https://github.com/advisories/GHSA-pfpr-3463-c6jh 2023-01-10 12:21:27 +01:00			`unicode-display_width (2.4.2)`
fix:[ci] Danger is failing builds Add Gemfile.lock to pin down the current versions fixes #2040 2019-09-29 21:24:34 +02:00
			`PLATFORMS`
			`ruby`

			`DEPENDENCIES`
Bump danger from 5.16.1 to 8.4.0 2021-10-15 18:12:55 +02:00			`danger`
Update pmdtester to 1.4.0 2022-03-24 16:46:42 +01:00			`liquid`
Revert "REVERT ME - Use pmtester from pmd/pmd-regression-tester#103" This reverts commit 67928910df25574ec41821b60d352e5f32bfe971. 2022-03-24 16:18:51 +01:00			`pmdtester`
Update pmdtester to 1.4.0 2022-03-24 16:46:42 +01:00			`rouge`
			`safe_yaml`
fix:[ci] Danger is failing builds Add Gemfile.lock to pin down the current versions fixes #2040 2019-09-29 21:24:34 +02:00
			`BUNDLED WITH`
Update bundler 2023-01-25 08:56:17 +01:00			`2.4.5`