From 71cc153e1dd267de6fd60e7fe97ca00dcd722d41 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Gergely=20F=C3=A1bi=C3=A1n?= Date: Wed, 29 Jan 2025 12:32:03 +0100 Subject: [PATCH] Update protobuf to fix CVE-2024-7254 --- travel_time.gemspec | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/travel_time.gemspec b/travel_time.gemspec index 924352c..93f3c2d 100644 --- a/travel_time.gemspec +++ b/travel_time.gemspec @@ -20,7 +20,7 @@ Gem::Specification.new do |spec| spec.add_dependency 'dry-configurable', '< 2.0' spec.add_dependency 'faraday', '>= 1.10', '< 3.0' - spec.add_dependency 'google-protobuf', '>= 3.21', '< 3.21.9' + spec.add_dependency 'google-protobuf', '>= 3.25.5' spec.add_dependency 'ruby-limiter', '~> 2.2.2' # Specify which files should be added to the gem when it is released.