update rails to 5.2.6

CHANGELOG.md

@@ -8,6 +8,7 @@
 - Fix a security issue: updated url-parse to 1.5.1 to fix [CVE-2021-27515](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-27515)
 - Fix a security issue: updated hosted-git-info to 2.8.9 to fix [CVE-2021-23362](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23362)
 - Fix a security issue: updated codemirror to 5.58.2 to fix [CVE-2020-7760](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7760)
+- Fix a security issue: updated rails to 5.2.6 to fix [CVE-2021-22904](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22904)
 
 ## v4.7.8 2021 April 02
 - Updated mimemagic to 0.3.10 to fix [a build issue](https://github.com/mimemagicrb/mimemagic/issues/139)

Gemfile.lock

@@ -4,46 +4,46 @@ GEM
     Ascii85 (1.0.3)
     aasm (5.0.8)
       concurrent-ruby (~> 1.0)
-    actioncable (5.2.4.5)
+    actioncable (5.2.6)
-      actionpack (= 5.2.4.5)
+      actionpack (= 5.2.6)
       nio4r (~> 2.0)
       websocket-driver (>= 0.6.1)
-    actionmailer (5.2.4.5)
+    actionmailer (5.2.6)
-      actionpack (= 5.2.4.5)
+      actionpack (= 5.2.6)
-      actionview (= 5.2.4.5)
+      actionview (= 5.2.6)
-      activejob (= 5.2.4.5)
+      activejob (= 5.2.6)
       mail (~> 2.5, >= 2.5.4)
       rails-dom-testing (~> 2.0)
-    actionpack (5.2.4.5)
+    actionpack (5.2.6)
-      actionview (= 5.2.4.5)
+      actionview (= 5.2.6)
-      activesupport (= 5.2.4.5)
+      activesupport (= 5.2.6)
       rack (~> 2.0, >= 2.0.8)
       rack-test (>= 0.6.3)
       rails-dom-testing (~> 2.0)
       rails-html-sanitizer (~> 1.0, >= 1.0.2)
     actionpack-page_caching (1.2.2)
       actionpack (>= 5.0.0)
-    actionview (5.2.4.5)
+    actionview (5.2.6)
-      activesupport (= 5.2.4.5)
+      activesupport (= 5.2.6)
       builder (~> 3.1)
       erubi (~> 1.4)
       rails-dom-testing (~> 2.0)
       rails-html-sanitizer (~> 1.0, >= 1.0.3)
     active_record_query_trace (1.7)
-    activejob (5.2.4.5)
+    activejob (5.2.6)
-      activesupport (= 5.2.4.5)
+      activesupport (= 5.2.6)
       globalid (>= 0.3.6)
-    activemodel (5.2.4.5)
+    activemodel (5.2.6)
-      activesupport (= 5.2.4.5)
+      activesupport (= 5.2.6)
-    activerecord (5.2.4.5)
+    activerecord (5.2.6)
-      activemodel (= 5.2.4.5)
+      activemodel (= 5.2.6)
-      activesupport (= 5.2.4.5)
+      activesupport (= 5.2.6)
       arel (>= 9.0)
-    activestorage (5.2.4.5)
+    activestorage (5.2.6)
-      actionpack (= 5.2.4.5)
+      actionpack (= 5.2.6)
-      activerecord (= 5.2.4.5)
+      activerecord (= 5.2.6)
-      marcel (~> 0.3.1)
+      marcel (~> 1.0.0)
-    activesupport (5.2.4.5)
+    activesupport (5.2.6)
       concurrent-ruby (~> 1.0, >= 1.0.2)
       i18n (>= 0.7, < 2)
       minitest (~> 5.1)
@@ -157,7 +157,7 @@ GEM
     httparty (0.18.1)
       mime-types (~> 3.0)
       multi_xml (>= 0.5.2)
-    i18n (1.8.9)
+    i18n (1.8.10)
       concurrent-ruby (~> 1.0)
     icalendar (2.5.3)
       ice_cube (~> 0.16)
@@ -188,25 +188,24 @@ GEM
     listen (3.0.8)
       rb-fsevent (~> 0.9, >= 0.9.4)
       rb-inotify (~> 0.9, >= 0.9.7)
-    loofah (2.9.0)
+    loofah (2.9.1)
       crass (~> 1.0.2)
       nokogiri (>= 1.5.9)
     mail (2.7.1)
       mini_mime (>= 0.1.1)
-    marcel (0.3.3)
+    marcel (1.0.1)
-      mimemagic (~> 0.3.2)
     message_format (0.0.6)
       twitter_cldr (~> 5.0)
     method_source (1.0.0)
     mime-types (3.3.1)
       mime-types-data (~> 3.2015)
     mime-types-data (3.2021.0225)
-    mimemagic (0.3.10)
+    mimemagic (0.4.3)
       nokogiri (~> 1)
       rake
     mini_magick (4.10.1)
-    mini_mime (1.0.2)
+    mini_mime (1.1.0)
-    mini_portile2 (2.5.0)
+    mini_portile2 (2.5.1)
     minitest (5.14.4)
     minitest-reporters (1.4.2)
       ansi
@@ -217,8 +216,8 @@ GEM
     multi_json (1.14.1)
     multi_xml (0.6.0)
     multipart-post (2.1.1)
-    nio4r (2.5.5)
+    nio4r (2.5.7)
-    nokogiri (1.11.1)
+    nokogiri (1.11.3)
       mini_portile2 (~> 2.5.0)
       racc (~> 1.4)
     notify_with (0.0.2)
@@ -278,18 +277,18 @@ GEM
     rack-test (1.1.0)
       rack (>= 1.0, < 3)
     railroady (1.5.3)
-    rails (5.2.4.5)
+    rails (5.2.6)
-      actioncable (= 5.2.4.5)
+      actioncable (= 5.2.6)
-      actionmailer (= 5.2.4.5)
+      actionmailer (= 5.2.6)
-      actionpack (= 5.2.4.5)
+      actionpack (= 5.2.6)
-      actionview (= 5.2.4.5)
+      actionview (= 5.2.6)
-      activejob (= 5.2.4.5)
+      activejob (= 5.2.6)
-      activemodel (= 5.2.4.5)
+      activemodel (= 5.2.6)
-      activerecord (= 5.2.4.5)
+      activerecord (= 5.2.6)
-      activestorage (= 5.2.4.5)
+      activestorage (= 5.2.6)
-      activesupport (= 5.2.4.5)
+      activesupport (= 5.2.6)
       bundler (>= 1.3.0)
-      railties (= 5.2.4.5)
+      railties (= 5.2.6)
       sprockets-rails (>= 2.0.0)
     rails-dom-testing (2.0.3)
       activesupport (>= 4.2.0)
@@ -303,9 +302,9 @@ GEM
       rails_stdout_logging
     rails_serve_static_assets (0.0.5)
     rails_stdout_logging (0.0.5)
-    railties (5.2.4.5)
+    railties (5.2.6)
-      actionpack (= 5.2.4.5)
+      actionpack (= 5.2.6)
-      activesupport (= 5.2.4.5)
+      activesupport (= 5.2.6)
       method_source
       rake (>= 0.8.7)
       thor (>= 0.19.0, < 2.0)