Merge pull request #2031 from github/fix/nokogiri-CVE-GHSA-wx95-c6cv-8532

fix(deps): bump nokogiri to >= 1.19.1 to fix GHSA-wx95-c6cv-8532

Author: zkoppert

.github/workflows/ci.yml

@@ -14,7 +14,6 @@ jobs:
     strategy:
       matrix:
         ruby:
-          - "3.1"
           - "3.2"
           - "3.3"
           - "3.4"

Gemfile

@@ -15,4 +15,4 @@ gem "twitter-text", "~> 1.14"
 gem "asciidoctor", "~> 2.0.5"
 gem "rake"
 gem "rexml"
-gem "nokogiri", "~> 1.18.9"
+gem "nokogiri", ">= 1.19.1"

Gemfile.lock

@@ -58,18 +58,18 @@ GEM
     mini_portile2 (2.8.9)
     minitest (5.25.5)
     mutex_m (0.3.0)
-    nokogiri (1.18.9)
+    nokogiri (1.19.1)
       mini_portile2 (~> 2.8.2)
       racc (~> 1.4)
-    nokogiri (1.18.9-aarch64-linux-gnu)
+    nokogiri (1.19.1-aarch64-linux-gnu)
       racc (~> 1.4)
-    nokogiri (1.18.9-arm-linux-gnu)
+    nokogiri (1.19.1-arm-linux-gnu)
       racc (~> 1.4)
-    nokogiri (1.18.9-arm64-darwin)
+    nokogiri (1.19.1-arm64-darwin)
       racc (~> 1.4)
-    nokogiri (1.18.9-x86_64-darwin)
+    nokogiri (1.19.1-x86_64-darwin)
       racc (~> 1.4)
-    nokogiri (1.18.9-x86_64-linux-gnu)
+    nokogiri (1.19.1-x86_64-linux-gnu)
       racc (~> 1.4)
     nokogiri-diff (0.3.0)
       nokogiri (~> 1.5)
@@ -128,7 +128,7 @@ DEPENDENCIES
   html-pipeline (~> 1.0)
   kramdown
   minitest (~> 5.4, >= 5.4.3)
-  nokogiri (~> 1.18.9)
+  nokogiri (>= 1.19.1)
   nokogiri-diff (~> 0.3.0)
   org-ruby (= 0.9.12)
   rake
@@ -140,4 +140,4 @@ DEPENDENCIES
   wikicloth (= 0.8.3)
 
 BUNDLED WITH
-   2.5.9
+   2.4.10