fix: Update addressable to fix ReDoS vulnerability

katibest · katibest · commit 148b51d48aef · 2025-05-06T10:46:58.000-04:00
diff --git a/Gemfile b/Gemfile
@@ -4,6 +4,7 @@ gem "jekyll", "~> 4.3.3"
 gem "kramdown", "~> 2.4.0"  # Updated to secure version
 gem "webrick", "~> 1.8"    # Required for Ruby 3.0+
 gem "minima", "~> 2.5"
+gem "addressable", "~> 2.8.5"  # Updated to secure version
 
 group :jekyll_plugins do
   gem "jekyll-feed", "~> 0.12"
diff --git a/Gemfile.lock b/Gemfile.lock
@@ -76,6 +76,7 @@ PLATFORMS
   arm64-darwin-22
 
 DEPENDENCIES
+  addressable (~> 2.8.5)
   jekyll (~> 4.3.3)
   jekyll-feed (~> 0.12)
   jekyll-seo-tag (~> 2.8)
