Skip to content

Commit

Permalink
Merge pull request #1874 from chef/slim_package
Browse files Browse the repository at this point in the history
update deps: includes nginx 1.18.0 (addresses CVE-2019-20372 tripping up scanners)
  • Loading branch information
robbkidd authored Aug 6, 2020
2 parents 2957f7d + 5d2960d commit 0023db8
Showing 1 changed file with 95 additions and 103 deletions.
198 changes: 95 additions & 103 deletions omnibus/Gemfile.lock
Original file line number Diff line number Diff line change
@@ -1,23 +1,23 @@
GIT
remote: https://github.com/chef/omnibus-software.git
revision: 722d2a8b7f74b98ee44efadac6d74daa5559a48d
revision: ddae3723ac532c779f6db65be237dc9f73e968c4
specs:
omnibus-software (4.0.0)
omnibus (>= 5.6.1)

GIT
remote: https://github.com/chef/omnibus.git
revision: f38dcb57017e007c7e98a9934e881904a5e09907
revision: f8f202cdffe5a77aed4c4884f302a38be3eabc64
specs:
omnibus (7.0.6)
omnibus (7.0.19)
aws-sdk-s3 (~> 1)
chef-cleanroom (~> 1.0)
chef-sugar (>= 3.3)
ffi-yajl (~> 2.2)
license_scout (~> 1.0)
mixlib-shellout (>= 2.0, < 4.0)
mixlib-versioning
ohai (>= 13, < 16)
ohai (>= 13, < 17)
pedump
ruby-progressbar (~> 1.7)
thor (>= 0.18, < 2.0)
Expand All @@ -27,27 +27,27 @@ GEM
specs:
addressable (2.7.0)
public_suffix (>= 2.0.2, < 5.0)
artifactory (3.0.12)
artifactory (3.0.15)
awesome_print (1.8.0)
aws-eventstream (1.0.3)
aws-partitions (1.279.0)
aws-sdk-core (3.90.1)
aws-eventstream (~> 1.0, >= 1.0.2)
aws-eventstream (1.1.0)
aws-partitions (1.351.0)
aws-sdk-core (3.104.3)
aws-eventstream (~> 1, >= 1.0.2)
aws-partitions (~> 1, >= 1.239.0)
aws-sigv4 (~> 1.1)
jmespath (~> 1.0)
aws-sdk-kms (1.29.0)
aws-sdk-core (~> 3, >= 3.71.0)
aws-sdk-kms (1.36.0)
aws-sdk-core (~> 3, >= 3.99.0)
aws-sigv4 (~> 1.1)
aws-sdk-s3 (1.60.2)
aws-sdk-core (~> 3, >= 3.83.0)
aws-sdk-s3 (1.75.0)
aws-sdk-core (~> 3, >= 3.104.1)
aws-sdk-kms (~> 1)
aws-sigv4 (~> 1.1)
aws-sigv4 (1.1.1)
aws-eventstream (~> 1.0, >= 1.0.2)
bcrypt_pbkdf (1.0.1)
berkshelf (7.0.9)
chef (>= 13.6.52)
aws-sigv4 (1.2.1)
aws-eventstream (~> 1, >= 1.0.2)
bcrypt_pbkdf (1.1.0.rc1)
berkshelf (7.1.0)
chef (>= 15.7.32)
chef-config
cleanroom (~> 1.0)
concurrent-ruby (~> 1.0)
Expand All @@ -60,65 +60,52 @@ GEM
solve (~> 4.0)
thor (>= 0.20)
builder (3.2.4)
celluloid (0.17.4)
celluloid-essentials
celluloid-extras
celluloid-fsm
celluloid-pool
celluloid-supervision
timers (>= 4.1.1)
celluloid-essentials (0.20.5)
timers (>= 4.1.1)
celluloid-extras (0.20.5)
timers (>= 4.1.1)
celluloid-fsm (0.20.5)
timers (>= 4.1.1)
celluloid-pool (0.20.5)
timers (>= 4.1.1)
celluloid-supervision (0.20.6)
timers (>= 4.1.1)
chef (15.8.23)
chef (16.3.45)
addressable
bcrypt_pbkdf (~> 1.0)
bcrypt_pbkdf (= 1.1.0.rc1)
bundler (>= 1.10)
chef-config (= 15.8.23)
chef-utils (= 15.8.23)
chef-config (= 16.3.45)
chef-utils (= 16.3.45)
chef-vault
chef-zero (>= 14.0.11)
diff-lcs (~> 1.2, >= 1.2.4)
diff-lcs (>= 1.2.4, < 1.4.0)
ed25519 (~> 1.2)
erubis (~> 2.7)
ffi (~> 1.9, >= 1.9.25)
ffi-libarchive
ffi (>= 1.9.25)
ffi-libarchive (~> 1.0, >= 1.0.3)
ffi-yajl (~> 2.2)
highline (>= 1.6.9, < 2)
highline (>= 1.6.9, < 3)
iniparse (~> 1.4)
license-acceptance (~> 1.0, >= 1.0.5)
mixlib-archive (>= 0.4, < 2.0)
mixlib-authentication (>= 2.1, < 4)
mixlib-cli (>= 2.1.1, < 3.0)
mixlib-log (>= 2.0.3, < 4.0)
mixlib-shellout (>= 3.0.3, < 4.0)
net-sftp (~> 2.1, >= 2.1.2)
net-ssh (>= 4.2, < 6)
mixlib-shellout (>= 3.1.1, < 4.0)
net-sftp (>= 2.1.2, < 4.0)
net-ssh (>= 4.2, < 7)
net-ssh-multi (~> 1.2, >= 1.2.1)
ohai (~> 15.0)
ohai (~> 16.0)
pastel
plist (~> 3.2)
proxifier (~> 1.0)
syslog-logger (~> 1.6)
train-core (~> 3.1)
train-core (~> 3.2, >= 3.2.28)
train-winrm (>= 0.2.5)
tty-prompt (~> 0.21)
tty-screen (~> 0.6)
uuidtools (~> 2.1.5)
chef-cleanroom (1.0.2)
chef-config (15.8.23)
chef-config (16.3.45)
addressable
chef-utils (= 15.8.23)
chef-utils (= 16.3.45)
fuzzyurl
mixlib-config (>= 2.2.12, < 4.0)
mixlib-shellout (>= 2.0, < 4.0)
tomlrb (~> 1.2)
chef-sugar (5.1.9)
chef-utils (15.8.23)
chef-utils (16.3.45)
chef-vault (4.0.1)
chef-zero (15.0.0)
ffi-yajl (~> 2.2)
hashie (>= 2.0, < 5.0)
Expand All @@ -127,17 +114,16 @@ GEM
uuidtools (~> 2.1)
citrus (3.0.2)
cleanroom (1.0.0)
coderay (1.1.2)
concurrent-ruby (1.1.6)
diff-lcs (1.3)
ed25519 (1.2.4)
equatable (0.6.1)
erubi (1.9.0)
erubis (2.7.0)
faraday (1.0.0)
faraday (1.0.1)
multipart-post (>= 1.2, < 3)
ffi (1.12.2)
ffi-libarchive (1.0.0)
ffi (1.13.1)
ffi-libarchive (1.0.3)
ffi (~> 1.0)
ffi-yajl (2.3.3)
libyajl2 (~> 1.2)
Expand All @@ -147,61 +133,65 @@ GEM
gyoku (1.3.1)
builder (>= 2.1.2)
hashie (4.1.0)
highline (1.7.10)
highline (2.0.3)
httpclient (2.8.3)
inifile (3.0.0)
iniparse (1.5.0)
iostruct (0.0.4)
ipaddress (0.8.3)
jmespath (1.4.0)
json (2.3.0)
kitchen-vagrant (0.11.3)
test-kitchen (~> 1.0.0.beta)
json (2.3.1)
kitchen-vagrant (1.6.1)
test-kitchen (>= 1.4, < 3)
libyajl2 (1.2.0)
license-acceptance (1.0.13)
license-acceptance (1.0.19)
pastel (~> 0.7)
tomlrb (~> 1.2)
tty-box (~> 0.3)
tty-prompt (~> 0.18)
license_scout (1.1.7)
license_scout (1.1.8)
ffi-yajl (~> 2.2)
mixlib-shellout (>= 2.2, < 4.0)
toml-rb (>= 1, < 3)
little-plugger (1.1.4)
logging (2.2.2)
logging (2.3.0)
little-plugger (~> 1.1)
multi_json (~> 1.10)
method_source (0.9.2)
multi_json (~> 1.14)
minitar (0.9)
mixlib-archive (1.0.5)
mixlib-log
mixlib-authentication (3.0.6)
mixlib-cli (2.1.5)
mixlib-cli (2.1.6)
mixlib-config (3.0.6)
tomlrb
mixlib-install (3.12.1)
mixlib-shellout
mixlib-versioning
thor
mixlib-log (3.0.8)
mixlib-shellout (3.0.9)
mixlib-shellout (3.1.2)
chef-utils
mixlib-versioning (1.2.12)
molinillo (0.6.6)
multi_json (1.14.1)
multi_json (1.15.0)
multipart-post (2.1.1)
necromancer (0.5.1)
net-scp (2.0.0)
net-ssh (>= 2.6.5, < 6.0.0)
net-sftp (2.1.2)
net-ssh (>= 2.6.5)
net-ssh (5.2.0)
net-scp (3.0.0)
net-ssh (>= 2.6.5, < 7.0.0)
net-sftp (3.0.0)
net-ssh (>= 5.0.0, < 7.0.0)
net-ssh (6.1.0)
net-ssh-gateway (2.0.0)
net-ssh (>= 4.0.0)
net-ssh-multi (1.2.1)
net-ssh (>= 2.6.5)
net-ssh-gateway (>= 1.2.0)
nori (2.6.0)
octokit (4.16.0)
octokit (4.18.0)
faraday (>= 0.9)
sawyer (~> 0.8.0, >= 0.5.3)
ohai (15.7.4)
chef-config (>= 12.8, < 16)
ohai (16.3.2)
chef-config (>= 12.8, < 17)
chef-utils (>= 16.0, < 17)
ffi (~> 1.9)
ffi-yajl (~> 2.2)
ipaddress
Expand All @@ -212,30 +202,24 @@ GEM
plist (~> 3.1)
systemu (~> 2.6.4)
wmi-lite (~> 1.0)
pastel (0.7.3)
pastel (0.7.4)
equatable (~> 0.6)
tty-color (~> 0.5)
pedump (0.5.4)
pedump (0.6.1)
awesome_print
iostruct (>= 0.0.4)
multipart-post (>= 2.0.0)
progressbar
rainbow
zhexdump (>= 0.0.2)
plist (3.5.0)
progressbar (1.10.1)
proxifier (1.0.3)
pry (0.12.2)
coderay (~> 1.1.0)
method_source (~> 0.9.0)
public_suffix (4.0.3)
public_suffix (4.0.5)
rack (2.2.3)
rainbow (3.0.0)
retryable (3.0.5)
ruby-progressbar (1.10.1)
rubyntlm (0.6.2)
rubyzip (2.2.0)
safe_yaml (0.9.7)
rubyzip (2.3.0)
sawyer (0.8.2)
addressable (>= 2.3.5)
faraday (> 0.8, < 2.0)
Expand All @@ -250,26 +234,30 @@ GEM
strings-ansi (0.2.0)
syslog-logger (1.6.8)
systemu (2.6.5)
test-kitchen (1.0.0.beta.3)
celluloid
mixlib-shellout
net-scp
net-ssh
pry
safe_yaml (~> 0.9.5)
thor
test-kitchen (2.5.4)
bcrypt_pbkdf (~> 1.0)
ed25519 (~> 1.2)
license-acceptance (~> 1.0, >= 1.0.11)
mixlib-install (~> 3.6)
mixlib-shellout (>= 1.2, < 4.0)
net-scp (>= 1.1, < 4.0)
net-ssh (>= 2.9, < 7.0)
net-ssh-gateway (>= 1.2, < 3.0)
thor (>= 0.19, < 2.0)
winrm (~> 2.0)
winrm-elevated (~> 1.0)
winrm-fs (~> 1.1)
thor (1.0.1)
timers (4.3.0)
toml-rb (2.0.1)
citrus (~> 3.0, > 3.0)
tomlrb (1.2.9)
train-core (3.2.23)
tomlrb (1.3.0)
train-core (3.3.13)
addressable (~> 2.5)
inifile (~> 3.0)
ffi (!= 1.13.0)
json (>= 1.8, < 3.0)
mixlib-shellout (>= 2.0, < 4.0)
net-scp (>= 1.2, < 3.0)
net-ssh (>= 2.9, < 6.0)
net-scp (>= 1.2, < 4.0)
net-ssh (>= 2.9, < 7.0)
train-winrm (0.2.6)
winrm (~> 2.0)
winrm-fs (~> 1.0)
Expand All @@ -279,16 +267,16 @@ GEM
tty-cursor (~> 0.7)
tty-color (0.5.1)
tty-cursor (0.7.1)
tty-prompt (0.20.0)
tty-prompt (0.21.0)
necromancer (~> 0.5.0)
pastel (~> 0.7.0)
tty-reader (~> 0.7.0)
tty-reader (0.7.0)
tty-cursor (~> 0.7)
tty-screen (~> 0.7)
wisper (~> 2.0.0)
tty-screen (0.7.1)
unicode-display_width (1.6.1)
tty-screen (0.8.1)
unicode-display_width (1.7.0)
unicode_utils (1.4.0)
uuidtools (2.1.5)
winrm (2.3.4)
Expand All @@ -300,6 +288,10 @@ GEM
logging (>= 1.6.1, < 3.0)
nori (~> 2.0)
rubyntlm (~> 0.6.0, >= 0.6.1)
winrm-elevated (1.2.1)
erubi (~> 1.8)
winrm (~> 2.0)
winrm-fs (~> 1.0)
winrm-fs (1.3.4)
erubi (~> 1.8)
logging (>= 1.6.1, < 3.0)
Expand Down

0 comments on commit 0023db8

Please sign in to comment.