Merge pull request #267 from GSA/security-fixes

Security fixes

Gemfile

@@ -7,7 +7,7 @@ gem "execjs", "2.7.0" # https://github.com/rails/execjs/issues/99
 gem "mini_racer"
 gem "autoprefixer-rails"
 gem 'webrick', '~> 1.8'# not included in jekyll directly until 4.3.0 https://github.com/jekyll/jekyll/pull/8524
-
+gem 'jekyll-liquify', "0.0.2"
 # See https://github.com/envygeeks/jekyll-assets/issues/622
 gem "sprockets", "~> 3.7"
 

Gemfile.lock

@@ -16,13 +16,17 @@ GEM
       ffi (>= 1.15.0)
     eventmachine (1.2.7)
     execjs (2.7.0)
+    ffi (1.17.0-arm64-darwin)
     ffi (1.17.0-x86_64-darwin)
     ffi (1.17.0-x86_64-linux-gnu)
     forwardable-extended (2.6.0)
-    google-protobuf (4.28.2-x86_64-darwin)
+    google-protobuf (4.29.1-arm64-darwin)
       bigdecimal
       rake (>= 13)
-    google-protobuf (4.28.2-x86_64-linux)
+    google-protobuf (4.29.1-x86_64-darwin)
+      bigdecimal
+      rake (>= 13)
+    google-protobuf (4.29.1-x86_64-linux)
       bigdecimal
       rake (>= 13)
     html-proofer (3.19.4)
@@ -54,6 +58,9 @@ GEM
       webrick (~> 1.7)
     jekyll-feed (0.17.0)
       jekyll (>= 3.7, < 5.0)
+    jekyll-liquify (0.0.2)
+      liquid (>= 2.5, < 5.0)
+      redcarpet (~> 3.1)
     jekyll-paginate-v2 (3.0.0)
       jekyll (>= 3.0, < 5.0)
     jekyll-redirect-from (0.16.0)
@@ -66,10 +73,11 @@ GEM
       jekyll (>= 3.7, < 5.0)
     jekyll-watch (2.2.1)
       listen (~> 3.0)
-    kramdown (2.4.0)
-      rexml
+    kramdown (2.5.1)
+      rexml (>= 3.3.9)
     kramdown-parser-gfm (1.1.0)
       kramdown (~> 2.0)
+    libv8-node (18.19.0.0-arm64-darwin)
     libv8-node (18.19.0.0-x86_64-darwin)
     libv8-node (18.19.0.0-x86_64-linux)
     liquid (4.0.4)
@@ -79,9 +87,11 @@ GEM
     mercenary (0.4.0)
     mini_racer (0.16.0)
       libv8-node (~> 18.19.0.0)
-    nokogiri (1.16.7-x86_64-darwin)
+    nokogiri (1.17.2-arm64-darwin)
+      racc (~> 1.4)
+    nokogiri (1.17.2-x86_64-darwin)
       racc (~> 1.4)
-    nokogiri (1.16.7-x86_64-linux)
+    nokogiri (1.17.2-x86_64-linux)
       racc (~> 1.4)
     parallel (1.26.3)
     pathutil (0.16.2)
@@ -94,10 +104,11 @@ GEM
     rb-fsevent (0.11.2)
     rb-inotify (0.11.1)
       ffi (~> 1.0)
-    rexml (3.3.8)
-    rouge (4.4.0)
+    redcarpet (3.6.0)
+    rexml (3.3.9)
+    rouge (4.5.1)
     safe_yaml (1.0.5)
-    sass-embedded (1.80.3)
+    sass-embedded (1.83.0)
       google-protobuf (~> 4.28)
       rake (>= 13)
     sprockets (3.7.5)
@@ -109,11 +120,12 @@ GEM
     typhoeus (1.4.1)
       ethon (>= 0.9.0)
     unicode-display_width (2.6.0)
-    webrick (1.8.2)
+    webrick (1.9.1)
     yell (2.2.2)
 
 PLATFORMS
-  x86_64-darwin-20
+  arm64-darwin
+  x86_64-darwin
   x86_64-linux
 
 DEPENDENCIES
@@ -122,6 +134,7 @@ DEPENDENCIES
   html-proofer (~> 3.15)
   jekyll (~> 4.3.4)
   jekyll-feed (~> 0.15)
+  jekyll-liquify (= 0.0.2)
   jekyll-paginate-v2 (= 3.0.0)
   jekyll-redirect-from
   jekyll-seo-tag
@@ -137,4 +150,4 @@ RUBY VERSION
    ruby 3.1.3p185
 
 BUNDLED WITH
-   2.3.26
+   2.5.21