diff --git a/Gemfile b/Gemfile index ad13e4959..0a3827cef 100644 --- a/Gemfile +++ b/Gemfile @@ -71,6 +71,10 @@ gem "sidekiq" gem "sidekiq-cron" gem "unread" +# Pinning versions to address vulnerabilities +gem "nokogiri", "~> 1.18.9" +gem "thor", "~> 1.4.0" + group :development, :test do # Check gems for known vulnerabilities gem "bundler-audit" diff --git a/Gemfile.lock b/Gemfile.lock index f95ed70bc..6421c038e 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -289,13 +289,13 @@ GEM net-smtp (0.5.1) net-protocol nio4r (2.7.4) - nokogiri (1.18.8-arm64-darwin) + nokogiri (1.18.9-arm64-darwin) racc (~> 1.4) - nokogiri (1.18.8-x86_64-darwin) + nokogiri (1.18.9-x86_64-darwin) racc (~> 1.4) - nokogiri (1.18.8-x86_64-linux-gnu) + nokogiri (1.18.9-x86_64-linux-gnu) racc (~> 1.4) - nokogiri (1.18.8-x86_64-linux-musl) + nokogiri (1.18.9-x86_64-linux-musl) racc (~> 1.4) notifications-ruby-client (6.0.0) jwt (>= 1.5, < 3) @@ -498,7 +498,7 @@ GEM stimulus-rails (1.3.3) railties (>= 6.0.0) stringio (3.1.5) - thor (1.3.2) + thor (1.4.0) thread_safe (0.3.6) timecop (0.9.8) timeout (0.4.3) @@ -572,6 +572,7 @@ DEPENDENCIES json-schema listen (~> 3.3) method_source (~> 1.1) + nokogiri (~> 1.18.9) notifications-ruby-client overcommit (>= 0.37.0) paper_trail (~> 15.2) @@ -603,6 +604,7 @@ DEPENDENCIES sidekiq-cron simplecov stimulus-rails + thor (~> 1.4.0) timecop (~> 0.9.4) tzinfo-data uk_postcode diff --git a/app/models/form.rb b/app/models/form.rb index 74dd59003..1a7f07a07 100644 --- a/app/models/form.rb +++ b/app/models/form.rb @@ -16,7 +16,7 @@ class Form }, 2024 => { submission_deadline: Time.zone.local(2025, 6, 6), - new_logs_end_date: Time.zone.local(2025, 7, 14), + new_logs_end_date: Time.zone.local(2025, 7, 24), edit_end_date: Time.zone.local(2025, 8, 1), }, 2025 => {