Skip to content

Commit 83eae42

Browse files
mokagioclaude
andcommitted
Pin faraday >= 1.10.5 for security fix
--- Generated with the help of Claude Code, https://code.claude.com Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
1 parent b8e328b commit 83eae42

File tree

2 files changed

+7
-2
lines changed

2 files changed

+7
-2
lines changed

Gemfile

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -8,3 +8,7 @@ gem 'fastlane', '~> 2.228'
88
#
99
# gem 'fastlane-plugin-wpmreleasetoolkit', git: 'https://github.com/wordpress-mobile/release-toolkit', ref: ''
1010
gem 'fastlane-plugin-wpmreleasetoolkit', '~> 13.8'
11+
12+
# Security: https://github.com/lostisland/faraday/pull/1665
13+
# Faraday 2.0 is not compatible with Fastlane
14+
gem 'faraday', '~> 1.10', '>= 1.10.5'

Gemfile.lock

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -93,7 +93,7 @@ GEM
9393
drb (2.2.3)
9494
emoji_regex (3.2.3)
9595
excon (0.112.0)
96-
faraday (1.10.4)
96+
faraday (1.10.5)
9797
faraday-em_http (~> 1.0)
9898
faraday-em_synchrony (~> 1.0)
9999
faraday-excon (~> 1.1)
@@ -114,7 +114,7 @@ GEM
114114
faraday-http-cache (2.5.1)
115115
faraday (>= 0.8)
116116
faraday-httpclient (1.0.1)
117-
faraday-multipart (1.1.1)
117+
faraday-multipart (1.2.0)
118118
multipart-post (~> 2.0)
119119
faraday-net_http (1.0.2)
120120
faraday-net_http_persistent (1.2.0)
@@ -354,6 +354,7 @@ PLATFORMS
354354

355355
DEPENDENCIES
356356
danger-dangermattic (~> 1.0)
357+
faraday (~> 1.10, >= 1.10.5)
357358
fastlane (~> 2.228)
358359
fastlane-plugin-wpmreleasetoolkit (~> 13.8)
359360

0 commit comments

Comments
 (0)