From 462154889855876cc726abae3a4d71e5948d32e1 Mon Sep 17 00:00:00 2001 From: Stefan Daschek Date: Mon, 9 Nov 2020 17:49:57 +0100 Subject: Update version requirement for kramdown Fixes CVE-2020-14001 kramdown is not used in the gem itself though, only in development when generating documentation. --- axlsx.gemspec | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/axlsx.gemspec b/axlsx.gemspec index e4260c13..d494782f 100644 --- a/axlsx.gemspec +++ b/axlsx.gemspec @@ -22,7 +22,7 @@ Gem::Specification.new do |s| s.add_runtime_dependency "mimemagic", '~> 0.3' s.add_development_dependency 'yard', "~> 0.9.8" - s.add_development_dependency 'kramdown', '~> 1.16', '>= 1.16.2' + s.add_development_dependency 'kramdown', '~> 2.3' s.add_development_dependency 'timecop', "~> 0.8.1" s.required_ruby_version = '~> 2.3' s.require_path = 'lib' -- cgit v1.2.3