Upgrade rack from 2.2.6.3 to 2.2.6.4

CHANGELOG.md

@@ -5,16 +5,20 @@ The format is based on [Keep a Changelog](http://keepachangelog.com/en/1.0.0/)
 and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.html).
 
 ## [Unreleased]
+### Security
+- Update rack in Gemfile.lock and tests/integration/test-app/Gemfile.lock to 2.2.6.4 to address CVE-2023-27539,
+  and activesupport in Gemfile.lock and tests/integration/test-app/Gemfile.lock to 6.1.7.3 for CVE-2023-28120 (not vulnerable)
+  [cyberark/conjur-service-broker#323](https://github.com/cyberark/conjur-service-broker/pull/323)
+- Update rack in Gemfile.lock and tests/integration/test-app/Gemfile.lock to 2.2.6.3
+  for CVE-2023-27630 (not vulnerable)
+  [cyberark/conjur-service-broker#320](https://github.com/cyberark/conjur-service-broker/pull/320)
 
 ## [1.2.8] - 2023-03-14
 ### Changed
 - Upgrade supported Ruby version to 3.1.x. Resolves CVE-2021-33621, CVE-2020-36327 and CVE-2021-43809
   [cyberark/conjur-service-broker#306](https://github.com/cyberark/conjur-service-broker/pull/306)
 
 ### Security
-- Update rack in Gemfile.lock and tests/integration/test-app/Gemfile.lock to 2.2.6.3
-  for CVE-2023-27630 (not vulnerable)
-  [cyberark/conjur-service-broker#320](https://github.com/cyberark/conjur-service-broker/pull/320)
 - Update activesupport in Gemfile.lock to 6.1.7.2 for CVE-2023-22796 (not vulnerable)
   [cyberark/conjur-service-broker#312](https://github.com/cyberark/conjur-service-broker/pull/312)
 - Update activesupport in tests/integration/test-app/Gemfile.lock to 7.0.4.1

Gemfile.lock

@@ -1,20 +1,20 @@
 GEM
   remote: https://rubygems.org/
   specs:
-    actionpack (6.1.7.2)
-      actionview (= 6.1.7.2)
-      activesupport (= 6.1.7.2)
+    actionpack (6.1.7.3)
+      actionview (= 6.1.7.3)
+      activesupport (= 6.1.7.3)
       rack (~> 2.0, >= 2.0.9)
       rack-test (>= 0.6.3)
       rails-dom-testing (~> 2.0)
       rails-html-sanitizer (~> 1.0, >= 1.2.0)
-    actionview (6.1.7.2)
-      activesupport (= 6.1.7.2)
+    actionview (6.1.7.3)
+      activesupport (= 6.1.7.3)
       builder (~> 3.1)
       erubi (~> 1.4)
       rails-dom-testing (~> 2.0)
       rails-html-sanitizer (~> 1.1, >= 1.2.0)
-    activesupport (6.1.7.2)
+    activesupport (6.1.7.3)
       concurrent-ruby (~> 1.0, >= 1.0.2)
       i18n (>= 1.6, < 2)
       minitest (>= 5.1)
@@ -112,7 +112,7 @@ GEM
       mime-types-data (~> 3.2015)
     mime-types-data (3.2023.0218.1)
     mini_portile2 (2.8.1)
-    minitest (5.17.0)
+    minitest (5.18.0)
     multi_json (1.15.0)
     multi_test (0.1.2)
     netrc (0.11.0)
@@ -130,17 +130,17 @@ GEM
     puma (5.6.4)
       nio4r (~> 2.0)
     racc (1.6.2)
-    rack (2.2.6.3)
+    rack (2.2.6.4)
     rack-test (2.0.2)
       rack (>= 1.3)
     rails-dom-testing (2.0.3)
       activesupport (>= 4.2.0)
       nokogiri (>= 1.6)
     rails-html-sanitizer (1.5.0)
       loofah (~> 2.19, >= 2.19.1)
-    railties (6.1.7.2)
-      actionpack (= 6.1.7.2)
-      activesupport (= 6.1.7.2)
+    railties (6.1.7.3)
+      actionpack (= 6.1.7.3)
+      activesupport (= 6.1.7.3)
       method_source
       rake (>= 12.2)
       thor (~> 1.0)

NOTICES.txt

@@ -16,12 +16,12 @@ SECTION 2: BSD-3-Clause
 
 SECTION 3: MIT
 
->>> https://rubygems.org/gems/actionview/versions/6.1.7.2
->>> https://rubygems.org/gems/activesupport/versions/6.1.7.2
+>>> https://rubygems.org/gems/actionview/versions/6.1.7.3
+>>> https://rubygems.org/gems/activesupport/versions/6.1.7.3
 >>> https://rubygems.org/gems/json-schema/versions/2.8.0
 >>> https://rubygems.org/gems/listen/versions/3.0.8
->>> https://rubygems.org/gems/rack/versions/2.2.6.3
->>> https://rubygems.org/gems/railties/versions/6.1.7.2
+>>> https://rubygems.org/gems/rack/versions/2.2.6.4
+>>> https://rubygems.org/gems/railties/versions/6.1.7.3
 
 
 APPENDIX: Standard License Files and Templates
@@ -90,7 +90,7 @@ OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 
 MIT License is applicable to the following component(s).
 
->>> https://rubygems.org/gems/actionview/versions/6.1.7.2
+>>> https://rubygems.org/gems/actionview/versions/6.1.7.3
 
 Copyright (c) 2004-2022 David Heinemeier Hansson
 
@@ -112,7 +112,7 @@ LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.
 
->>> https://rubygems.org/gems/activesupport/versions/6.1.7.2
+>>> https://rubygems.org/gems/activesupport/versions/6.1.7.3
 
 Copyright (c) 2005-2022 David Heinemeier Hansson
 
@@ -178,7 +178,7 @@ LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.
 
->>> https://rubygems.org/gems/rack/versions/2.2.6.3
+>>> https://rubygems.org/gems/rack/versions/2.2.6.4
 
 Copyright (c) 2007-2021 Leah Neukirchen <http://leahneukirchen.org/infopage.html>
 
@@ -200,7 +200,7 @@ LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.
 
->>> https://rubygems.org/gems/railties/versions/6.1.7.2
+>>> https://rubygems.org/gems/railties/versions/6.1.7.3
 
 Copyright (c) 2004-2022 David Heinemeier Hansson
 

tests/integration/test-app/Gemfile.lock

@@ -1,7 +1,7 @@
 GEM
   remote: https://rubygems.org/
   specs:
-    activesupport (6.1.7.2)
+    activesupport (6.1.7.3)
       concurrent-ruby (~> 1.0, >= 1.0.2)
       i18n (>= 1.6, < 2)
       minitest (>= 5.1)
@@ -38,12 +38,12 @@ GEM
     mime-types (3.4.1)
       mime-types-data (~> 3.2015)
     mime-types-data (3.2023.0218.1)
-    minitest (5.17.0)
+    minitest (5.18.0)
     mustermann (3.0.0)
       ruby2_keywords (~> 0.0.1)
     netrc (0.11.0)
     public_suffix (5.0.1)
-    rack (2.2.6.3)
+    rack (2.2.6.4)
     rack-protection (3.0.5)
       rack
     rest-client (2.1.0)