(security) update rails to 5.2.8.1

CHANGELOG.md

@@ -21,6 +21,7 @@
 - Fix a bug: Erroneous "cancelation failed" message if elasticsearch was disabled
 - Fix a security issue: updated terser to 4.8.1 to fix [CVE-2022-25858](https://cve.mitre.org/cgi-bin/cvename.cgi?CVE-2022-25858)
 - Fix a security issue: updated tzinfo to 1.2.10 to fix [CVE-2022-31163](https://cve.mitre.org/cgi-bin/cvename.cgi?CVE-2022-31163)
+- Fix a security issue: updated rails to 5.2.8.1 to fix [CVE-2022-32224](https://cve.mitre.org/cgi-bin/cvename.cgi?CVE-2022-32224)
 
 ## v5.4.12 2022 July 06
 

Gemfile

@@ -3,7 +3,7 @@
 source 'https://rubygems.org'
 
 # Bundle edge Rails instead: gem 'rails', github: 'rails/rails'
-gem 'rails', '~> 5.2.7'
+gem 'rails', '~> 5.2.8'
 # Used by rails 5.2 to reduce the app boot time by over 50%
 gem 'bootsnap'
 # Use Puma as web server

Gemfile.lock

@@ -4,46 +4,46 @@ GEM
     Ascii85 (1.0.3)
     aasm (5.0.8)
       concurrent-ruby (~> 1.0)
-    actioncable (5.2.7.1)
+    actioncable (5.2.8.1)
-      actionpack (= 5.2.7.1)
+      actionpack (= 5.2.8.1)
       nio4r (~> 2.0)
       websocket-driver (>= 0.6.1)
-    actionmailer (5.2.7.1)
+    actionmailer (5.2.8.1)
-      actionpack (= 5.2.7.1)
+      actionpack (= 5.2.8.1)
-      actionview (= 5.2.7.1)
+      actionview (= 5.2.8.1)
-      activejob (= 5.2.7.1)
+      activejob (= 5.2.8.1)
       mail (~> 2.5, >= 2.5.4)
       rails-dom-testing (~> 2.0)
-    actionpack (5.2.7.1)
+    actionpack (5.2.8.1)
-      actionview (= 5.2.7.1)
+      actionview (= 5.2.8.1)
-      activesupport (= 5.2.7.1)
+      activesupport (= 5.2.8.1)
       rack (~> 2.0, >= 2.0.8)
       rack-test (>= 0.6.3)
       rails-dom-testing (~> 2.0)
       rails-html-sanitizer (~> 1.0, >= 1.0.2)
     actionpack-page_caching (1.2.2)
       actionpack (>= 5.0.0)
-    actionview (5.2.7.1)
+    actionview (5.2.8.1)
-      activesupport (= 5.2.7.1)
+      activesupport (= 5.2.8.1)
       builder (~> 3.1)
       erubi (~> 1.4)
       rails-dom-testing (~> 2.0)
       rails-html-sanitizer (~> 1.0, >= 1.0.3)
     active_record_query_trace (1.7)
-    activejob (5.2.7.1)
+    activejob (5.2.8.1)
-      activesupport (= 5.2.7.1)
+      activesupport (= 5.2.8.1)
       globalid (>= 0.3.6)
-    activemodel (5.2.7.1)
+    activemodel (5.2.8.1)
-      activesupport (= 5.2.7.1)
+      activesupport (= 5.2.8.1)
-    activerecord (5.2.7.1)
+    activerecord (5.2.8.1)
-      activemodel (= 5.2.7.1)
+      activemodel (= 5.2.8.1)
-      activesupport (= 5.2.7.1)
+      activesupport (= 5.2.8.1)
       arel (>= 9.0)
-    activestorage (5.2.7.1)
+    activestorage (5.2.8.1)
-      actionpack (= 5.2.7.1)
+      actionpack (= 5.2.8.1)
-      activerecord (= 5.2.7.1)
+      activerecord (= 5.2.8.1)
       marcel (~> 1.0.0)
-    activesupport (5.2.7.1)
+    activesupport (5.2.8.1)
       concurrent-ruby (~> 1.0, >= 1.0.2)
       i18n (>= 0.7, < 2)
       minitest (~> 5.1)
@@ -167,7 +167,7 @@ GEM
       mime-types (~> 3.0)
       multi_xml (>= 0.5.2)
     httpclient (2.8.3)
-    i18n (1.10.0)
+    i18n (1.12.0)
       concurrent-ruby (~> 1.0)
     icalendar (2.7.1)
       ice_cube (~> 0.16)
@@ -221,7 +221,7 @@ GEM
     mini_magick (4.10.1)
     mini_mime (1.1.2)
     mini_portile2 (2.8.0)
-    minitest (5.15.0)
+    minitest (5.16.2)
     minitest-reporters (1.4.2)
       ansi
       builder
@@ -232,7 +232,7 @@ GEM
     multi_xml (0.6.0)
     multipart-post (2.1.1)
     nio4r (2.5.8)
-    nokogiri (1.13.6)
+    nokogiri (1.13.8)
       mini_portile2 (~> 2.8.0)
       racc (~> 1.4)
     notify_with (0.0.2)
@@ -298,7 +298,7 @@ GEM
       activesupport (>= 3.0.0)
     raabro (1.4.0)
     racc (1.6.0)
-    rack (2.2.3.1)
+    rack (2.2.4)
     rack-oauth2 (1.19.0)
       activesupport
       attr_required
@@ -307,21 +307,21 @@ GEM
       rack (>= 2.1.0)
     rack-proxy (0.7.2)
       rack
-    rack-test (1.1.0)
+    rack-test (2.0.2)
-      rack (>= 1.0, < 3)
+      rack (>= 1.3)
     railroady (1.5.3)
-    rails (5.2.7.1)
+    rails (5.2.8.1)
-      actioncable (= 5.2.7.1)
+      actioncable (= 5.2.8.1)
-      actionmailer (= 5.2.7.1)
+      actionmailer (= 5.2.8.1)
-      actionpack (= 5.2.7.1)
+      actionpack (= 5.2.8.1)
-      actionview (= 5.2.7.1)
+      actionview (= 5.2.8.1)
-      activejob (= 5.2.7.1)
+      activejob (= 5.2.8.1)
-      activemodel (= 5.2.7.1)
+      activemodel (= 5.2.8.1)
-      activerecord (= 5.2.7.1)
+      activerecord (= 5.2.8.1)
-      activestorage (= 5.2.7.1)
+      activestorage (= 5.2.8.1)
-      activesupport (= 5.2.7.1)
+      activesupport (= 5.2.8.1)
       bundler (>= 1.3.0)
-      railties (= 5.2.7.1)
+      railties (= 5.2.8.1)
       sprockets-rails (>= 2.0.0)
     rails-dom-testing (2.0.3)
       activesupport (>= 4.2.0)
@@ -335,9 +335,9 @@ GEM
       rails_stdout_logging
     rails_serve_static_assets (0.0.5)
     rails_stdout_logging (0.0.5)
-    railties (5.2.7.1)
+    railties (5.2.8.1)
-      actionpack (= 5.2.7.1)
+      actionpack (= 5.2.8.1)
-      activesupport (= 5.2.7.1)
+      activesupport (= 5.2.8.1)
       method_source
       rake (>= 0.8.7)
       thor (>= 0.19.0, < 2.0)
@@ -420,7 +420,7 @@ GEM
     spring-watcher-listen (2.0.1)
       listen (>= 2.7, < 4.0)
       spring (>= 1.2, < 3.0)
-    sprockets (4.0.3)
+    sprockets (4.1.1)
       concurrent-ruby (~> 1.0)
       rack (> 1, < 3)
     sprockets-rails (3.4.2)
@@ -537,7 +537,7 @@ DEPENDENCIES
   puma (= 4.3.12)
   pundit
   railroady
-  rails (~> 5.2.7)
+  rails (~> 5.2.8)
   rails-observers
   rails_12factor
   rb-readline