[ARVADOS] created: 1.3.0-2641-g237a581b8

[Git user]

        at  237a581b8872c4d95212bc5009815f046cebcf25 (commit)


commit 237a581b8872c4d95212bc5009815f046cebcf25
Author: Lucas Di Pentima <lucas at di-pentima.com.ar>
Date:   Fri Jun 5 15:13:44 2020 -0300

    16492: Upgrades websocket-extensions gem to fix a security alert.
    
    We really don't use this gem as it's requested by actioncable from Rails 5
    that we don't even load at runtime. But, as we cannot remove actioncable
    from our Gemfile.lock files because of some other gems depending on 'rails',
    we upgrade it to make GitHub happy.
    
    Arvados-DCO-1.1-Signed-off-by: Lucas Di Pentima <lucas at di-pentima.com.ar>

diff --git a/apps/workbench/Gemfile.lock b/apps/workbench/Gemfile.lock
index e722fa241..2420fee24 100644
--- a/apps/workbench/Gemfile.lock
+++ b/apps/workbench/Gemfile.lock
@@ -315,7 +315,7 @@ GEM
       json (>= 1.8.0)
     websocket-driver (0.6.5)
       websocket-extensions (>= 0.1.0)
-    websocket-extensions (0.1.3)
+    websocket-extensions (0.1.5)
     xpath (2.1.0)
       nokogiri (~> 1.3)
 
diff --git a/services/api/Gemfile.lock b/services/api/Gemfile.lock
index 9f3a5fb2b..c8a1a27b7 100644
--- a/services/api/Gemfile.lock
+++ b/services/api/Gemfile.lock
@@ -273,7 +273,7 @@ GEM
       json (>= 1.8.0)
     websocket-driver (0.6.5)
       websocket-extensions (>= 0.1.0)
-    websocket-extensions (0.1.3)
+    websocket-extensions (0.1.5)
 
 PLATFORMS
   ruby

-----------------------------------------------------------------------


hooks/post-receive
--