Bump Nokogiri dependency for security reasons. See CVE-2019-5477.

planio-gmbh · Sep 2, 2019 · ddaf7e5 · ddaf7e5
1 parent 7737649
commit ddaf7e5
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/plaintext.gemspec b/plaintext.gemspec
@@ -20,7 +20,7 @@ Gem::Specification.new do |spec|
   spec.require_paths = ["lib"]
 
   spec.add_dependency 'rubyzip', '~> 1.2.1'
-  spec.add_dependency 'nokogiri', '~> 1.8'
+  spec.add_dependency 'nokogiri', '>= 1.10.4'
   spec.add_dependency 'activesupport', '>2.2.1 '
 
   spec.add_development_dependency "bundler", "~> 1.10"