Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Updates to vulnerable dependencies #329

Merged
merged 1 commit into from
Oct 15, 2024
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 3 additions & 1 deletion .gitignore
Original file line number Diff line number Diff line change
Expand Up @@ -5,4 +5,6 @@ _site/
.DS_Store
.vendor/
vendor/
.bundle/
.bundle/
node_modules/
assets/uswds/
5 changes: 3 additions & 2 deletions Gemfile
Original file line number Diff line number Diff line change
Expand Up @@ -5,8 +5,9 @@ source "https://rubygems.org"
git_source(:github) {|repo_name| "https://github.com/#{repo_name}" }

gem "jekyll", "~> 4.3.2"
gem "nokogiri", "~> 1.14"
gem "html-proofer", "~> 3.19", ">= 3.19.4"
gem "nokogiri", "~> 1.16"
gem 'html-proofer', '~> 5.0', '>= 5.0.9'
gem "jekyll-redirect-from", ">= 0.16.0"
gem "kramdown-parser-gfm", ">= 1.1.0"
gem "jekyll-sitemap", ">= 1.4.0"
gem 'rexml', '~> 3.3', '>= 3.3.8'
65 changes: 49 additions & 16 deletions Gemfile.lock
Original file line number Diff line number Diff line change
@@ -1,32 +1,51 @@
GEM
remote: https://rubygems.org/
specs:
Ascii85 (1.1.1)
addressable (2.8.6)
public_suffix (>= 2.0.2, < 6.0)
afm (0.2.2)
async (2.17.0)
console (~> 1.26)
fiber-annotation
io-event (~> 1.6, >= 1.6.5)
bigdecimal (3.1.8)
colorator (1.1.0)
concurrent-ruby (1.2.3)
console (1.27.0)
fiber-annotation
fiber-local (~> 1.1)
json
em-websocket (0.5.3)
eventmachine (>= 0.12.9)
http_parser.rb (~> 0)
ethon (0.16.0)
ffi (>= 1.15.0)
eventmachine (1.2.7)
ffi (1.16.3)
fiber-annotation (0.2.0)
fiber-local (1.1.0)
fiber-storage
fiber-storage (1.0.0)
forwardable-extended (2.6.0)
google-protobuf (3.25.5)
google-protobuf (3.25.5-arm64-darwin)
google-protobuf (3.25.5-x86_64-darwin)
google-protobuf (3.25.5-x86_64-linux)
html-proofer (3.19.4)
hashery (2.1.2)
html-proofer (5.0.9)
addressable (~> 2.3)
mercenary (~> 0.3)
async (~> 2.1)
nokogiri (~> 1.13)
parallel (~> 1.10)
pdf-reader (~> 2.11)
rainbow (~> 3.0)
typhoeus (~> 1.3)
yell (~> 2.0)
zeitwerk (~> 2.5)
http_parser.rb (0.8.0)
i18n (1.14.5)
concurrent-ruby (~> 1.0)
io-event (1.7.1)
jekyll (4.3.3)
addressable (~> 2.4)
colorator (~> 1.0)
Expand All @@ -51,6 +70,7 @@ GEM
jekyll (>= 3.7, < 5.0)
jekyll-watch (2.2.1)
listen (~> 3.0)
json (2.7.2)
kramdown (2.4.0)
rexml
kramdown-parser-gfm (1.1.0)
Expand All @@ -60,54 +80,67 @@ GEM
rb-fsevent (~> 0.10, >= 0.10.3)
rb-inotify (~> 0.9, >= 0.9.10)
mercenary (0.4.0)
mini_portile2 (2.8.1)
nokogiri (1.14.3)
mini_portile2 (~> 2.8.0)
mini_portile2 (2.8.7)
nokogiri (1.16.7)
mini_portile2 (~> 2.8.2)
racc (~> 1.4)
nokogiri (1.14.3-x86_64-darwin)
nokogiri (1.16.7-arm64-darwin)
racc (~> 1.4)
nokogiri (1.14.3-x86_64-linux)
nokogiri (1.16.7-x86_64-darwin)
racc (~> 1.4)
nokogiri (1.16.7-x86_64-linux)
racc (~> 1.4)
parallel (1.22.1)
pathutil (0.16.2)
forwardable-extended (~> 2.6)
pdf-reader (2.12.0)
Ascii85 (~> 1.0)
afm (~> 0.2.1)
hashery (~> 2.0)
ruby-rc4
ttfunk
public_suffix (5.0.5)
racc (1.6.2)
racc (1.8.1)
rainbow (3.1.1)
rake (13.2.1)
rb-fsevent (0.11.2)
rb-inotify (0.10.1)
ffi (~> 1.0)
rexml (3.2.8)
strscan (>= 3.0.9)
rexml (3.3.8)
rouge (4.2.1)
ruby-rc4 (0.1.5)
safe_yaml (1.0.5)
sass-embedded (1.54.6)
google-protobuf (~> 3.19)
rake (>= 10.0.0)
sass-embedded (1.54.6-arm64-darwin)
google-protobuf (~> 3.19)
sass-embedded (1.54.6-x86_64-darwin)
google-protobuf (~> 3.19)
strscan (3.1.0)
terminal-table (3.0.2)
unicode-display_width (>= 1.1.1, < 3)
typhoeus (1.4.0)
ttfunk (1.8.0)
bigdecimal (~> 3.1)
typhoeus (1.4.1)
ethon (>= 0.9.0)
unicode-display_width (2.5.0)
webrick (1.8.2)
yell (2.2.2)
zeitwerk (2.6.18)

PLATFORMS
arm64-darwin
ruby
x86_64-darwin-21
x86_64-linux

DEPENDENCIES
html-proofer (~> 3.19, >= 3.19.4)
html-proofer (~> 5.0, >= 5.0.9)
jekyll (~> 4.3.2)
jekyll-redirect-from (>= 0.16.0)
jekyll-sitemap (>= 1.4.0)
kramdown-parser-gfm (>= 1.1.0)
nokogiri (~> 1.14)
nokogiri (~> 1.16)
rexml (~> 3.3, >= 3.3.8)

BUNDLED WITH
2.4.2
16 changes: 8 additions & 8 deletions _includes/footer.html
Original file line number Diff line number Diff line change
Expand Up @@ -62,46 +62,46 @@ <h5>
<div class="usa-identifier__container">
<ul class="usa-identifier__required-links-list">
<li class="usa-identifier__required-links-item">
<a href="//www.whitehouse.gov/omb/" class="usa-identifier__required-link usa-link">About OMB</a>
<a href="https://www.whitehouse.gov/omb/" class="usa-identifier__required-link usa-link">About OMB</a>
</li>
<li class="usa-identifier__required-links-item">
<a
href="//www.gsa.gov/website-information/website-policies#accessibility"
href="https://www.gsa.gov/website-information/website-policies#accessibility"
class="usa-identifier__required-link usa-link"
>Accessibility support</a
>
</li>
<li class="usa-identifier__required-links-item">
<a
href="//www.gsa.gov/reference/freedom-of-information-act-foia"
href="https://www.gsa.gov/reference/freedom-of-information-act-foia"
class="usa-identifier__required-link usa-link"
>FOIA requests</a
>
</li>
<li class="usa-identifier__required-links-item">
<a
href="//www.gsa.gov/reference/civil-rights-programs/notification-and-federal-employee-antidiscrimination-and-retaliation-act-of-2002"
href="https://www.gsa.gov/reference/civil-rights-programs/notification-and-federal-employee-antidiscrimination-and-retaliation-act-of-2002"
class="usa-identifier__required-link usa-link"
>No FEAR Act data</a
>
</li>
<li class="usa-identifier__required-links-item">
<a href="//www.gsaig.gov" class="usa-identifier__required-link usa-link">Office of the Inspector General</a>
<a href="https://www.gsaig.gov" class="usa-identifier__required-link usa-link">Office of the Inspector General</a>
</li>
<li class="usa-identifier__required-links-item">
<a href="//www.gsa.gov/reference/reports/budget-performance" class="usa-identifier__required-link usa-link"
<a href="https://www.gsa.gov/reference/reports/budget-performance" class="usa-identifier__required-link usa-link"
>Performance reports</a
>
</li>
<li class="usa-identifier__required-links-item">
<a
href="//www.gsa.gov/website-information/website-policies#privacy"
href="https://www.gsa.gov/website-information/website-policies#privacy"
class="usa-identifier__required-link usa-link"
>Privacy policy</a
>
</li>
<li class="usa-identifier__required-links-item">
<a href="//github.com/GSA/data-strategy/issues" class="usa-identifier__required-link usa-link"
<a href="https://github.com/GSA/data-strategy/issues" class="usa-identifier__required-link usa-link"
>Report a bug</a
>
</li>
Expand Down
2 changes: 1 addition & 1 deletion _posts/2019-07-14-census-pdb-roam.md
Original file line number Diff line number Diff line change
Expand Up @@ -46,7 +46,7 @@ As soon as ROAM went live in February 2018, users inside and outside of the Cens

The LRS, as packaged in ROAM, has also become a data-based decision-making tool for non-federal organizations, providing them with objective data validated by the Census Bureau. Given the representation and financial ramifications—seats in Congress and hundreds of billions of federal dollars are allocated according to decennial census information—state governments and other organizations invest a lot of resources in getting their residents tallied properly. California, for instance, has “already allocated more than $100 million on efforts aimed at getting all its residents counted” in the upcoming census, with other states following suit.[^3] ROAM helps these governments, especially those that lack the geospatial information programming capacity to work with raw PDB data, to allocate their census programs efficiently.

Several organizations have taken it a step further, building on the firm foundation of the PDB and ROAM. California built its own tool, called the Statewide Outreach and Rapid Deployment (also known as SWoRD) tool on top of PDB data and using ROAM as an example. New York City and others have taken their own similar approaches. To help facilitate value creation on top of ROAM, its underlying data services are made available by the Census Bureau at [census.gov/roam](http://www.census.gov/roam) as a RESTful API (an Application Program Interface that responds predictably to other computers’ requests made over the internet).
Several organizations have taken it a step further, building on the firm foundation of the PDB and ROAM. California built its own tool, called the Statewide Outreach and Rapid Deployment (also known as SWoRD) tool on top of PDB data and using ROAM as an example. New York City and others have taken their own similar approaches. To help facilitate value creation on top of ROAM, its underlying data services are made available by the Census Bureau at [census.gov/roam](https://www.census.gov/roam) as a RESTful API (an Application Program Interface that responds predictably to other computers’ requests made over the internet).

## An evolving tool

Expand Down
20 changes: 10 additions & 10 deletions package-lock.json

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 1 addition & 1 deletion package.json
Original file line number Diff line number Diff line change
Expand Up @@ -12,7 +12,7 @@
"qa": "bundle exec htmlproofer --http-status-ignore \"301,302,401,403,429\" --check-html _site",
"setup": "bundle install",
"start": "bundle exec jekyll serve",
"test": "bundle exec htmlproofer --check-html --disable-external _site"
"test": "bundle exec htmlproofer --disable-external _site"
},
"repository": {
"type": "git",
Expand Down