Update protobuf to fix CVE-2024-7254

traveltime-dev · Jan 29, 2025 · 71cc153 · 71cc153
1 parent 43c0ce0
commit 71cc153
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/travel_time.gemspec b/travel_time.gemspec
@@ -20,7 +20,7 @@ Gem::Specification.new do |spec|
 
   spec.add_dependency 'dry-configurable', '< 2.0'
   spec.add_dependency 'faraday', '>= 1.10', '< 3.0'
-  spec.add_dependency 'google-protobuf', '>= 3.21', '< 3.21.9'
+  spec.add_dependency 'google-protobuf', '>= 3.25.5'
   spec.add_dependency 'ruby-limiter', '~> 2.2.2'
 
   # Specify which files should be added to the gem when it is released.