From d92263456db0d594e1458f37fd442b7a57a53ff0 Mon Sep 17 00:00:00 2001 From: Maikel Linke Date: Wed, 7 Feb 2024 13:50:19 +1100 Subject: [PATCH] Fix gem dependency declaration Dependabot updated openid_connect despite this being restricted in our Gemfile. Now, all future updates downgrade openid_connect again to satisfy our requested version. I couldn't find any good reason not to upgrade openid_connect though and since that's the version we already have, let's keep it and just remove the restriction. Then bundler doesn't downgrade any more and updates are performed well. --- Gemfile | 2 +- Gemfile.lock | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/Gemfile b/Gemfile index 8f2d9ec486..19a8772529 100644 --- a/Gemfile +++ b/Gemfile @@ -74,7 +74,7 @@ gem 'rswag-ui' gem 'omniauth_openid_connect' gem 'omniauth-rails_csrf_protection' -gem 'openid_connect', '~> 1.3' +gem 'openid_connect' gem 'angularjs-rails', '1.8.0' gem 'bugsnag' diff --git a/Gemfile.lock b/Gemfile.lock index 2995cfe9cd..3af8538e16 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -882,7 +882,7 @@ DEPENDENCIES oauth2 (~> 1.4.7) omniauth-rails_csrf_protection omniauth_openid_connect - openid_connect (~> 1.3) + openid_connect order_management! pagy (~> 5.1) paper_trail