fix: address SNYK-RUBY-GOOGLEPROTOBUF-3167775 (#212)

* fix: address SNYK-RUBY-GOOGLEPROTOBUF-3167775

https://app.snyk.io/vuln/SNYK-RUBY-GOOGLEPROTOBUF-3167775

* fix: update deps in appraisal lockfiles

Co-authored-by: Grex <[email protected]>
Co-authored-by: Grex <[email protected]>

Author: vecerek

Gemfile.lock

@@ -2,7 +2,7 @@ PATH
   remote: .
   specs:
     apollo-federation (3.3.0)
-      google-protobuf (~> 3.19)
+      google-protobuf (~> 3.21.7)
       graphql (>= 1.10.14)
 
 GEM
@@ -42,7 +42,9 @@ GEM
     debase-ruby_core_source (0.10.9)
     diff-lcs (1.3)
     erubi (1.9.0)
-    google-protobuf (3.21.1-x86_64-linux)
+    google-protobuf (3.21.12)
+    google-protobuf (3.21.12-x86_64-darwin)
+    google-protobuf (3.21.12-x86_64-linux)
     graphql (1.10.14)
     i18n (1.8.5)
       concurrent-ruby (~> 1.0)
@@ -106,6 +108,11 @@ GEM
     zeitwerk (2.4.2)
 
 PLATFORMS
+  arm64-darwin-21
+  arm64-darwin-22
+  x86_64-darwin-20
+  x86_64-darwin-21
+  x86_64-darwin-22
   x86_64-linux
 
 DEPENDENCIES

apollo-federation.gemspec

@@ -28,7 +28,7 @@ Gem::Specification.new do |spec|
 
   spec.add_dependency 'graphql', '>= 1.10.14'
 
-  spec.add_runtime_dependency 'google-protobuf', '~> 3.19'
+  spec.add_runtime_dependency 'google-protobuf', '~> 3.21.7'
 
   spec.add_development_dependency 'actionpack'
   spec.add_development_dependency 'appraisal'

gemfiles/graphql_1.10.gemfile.lock

@@ -2,7 +2,7 @@ PATH
   remote: ..
   specs:
     apollo-federation (3.3.0)
-      google-protobuf (~> 3.19)
+      google-protobuf (~> 3.21.7)
       graphql (>= 1.10.14)
 
 GEM
@@ -42,7 +42,7 @@ GEM
     debase-ruby_core_source (0.10.9)
     diff-lcs (1.3)
     erubi (1.9.0)
-    google-protobuf (3.21.5)
+    google-protobuf (3.21.12)
     graphql (1.10.14)
     i18n (1.8.5)
       concurrent-ruby (~> 1.0)

gemfiles/graphql_1.11.gemfile.lock

@@ -2,7 +2,7 @@ PATH
   remote: ..
   specs:
     apollo-federation (3.3.0)
-      google-protobuf (~> 3.19)
+      google-protobuf (~> 3.21.7)
       graphql (>= 1.10.14)
 
 GEM
@@ -42,7 +42,7 @@ GEM
     debase-ruby_core_source (0.10.9)
     diff-lcs (1.4.4)
     erubi (1.9.0)
-    google-protobuf (3.21.5)
+    google-protobuf (3.21.12)
     graphql (1.11.2)
     i18n (1.8.5)
       concurrent-ruby (~> 1.0)

gemfiles/graphql_1.12.gemfile.lock

@@ -2,7 +2,7 @@ PATH
   remote: ..
   specs:
     apollo-federation (3.3.0)
-      google-protobuf (~> 3.19)
+      google-protobuf (~> 3.21.7)
       graphql (>= 1.10.14)
 
 GEM
@@ -42,7 +42,7 @@ GEM
     debase-ruby_core_source (0.10.9)
     diff-lcs (1.4.4)
     erubi (1.9.0)
-    google-protobuf (3.21.5)
+    google-protobuf (3.21.12)
     graphql (1.12.5)
     i18n (1.8.5)
       concurrent-ruby (~> 1.0)

gemfiles/graphql_1.13.gemfile.lock

@@ -2,7 +2,7 @@ PATH
   remote: ..
   specs:
     apollo-federation (3.3.0)
-      google-protobuf (~> 3.19)
+      google-protobuf (~> 3.21.7)
       graphql (>= 1.10.14)
 
 GEM
@@ -42,7 +42,7 @@ GEM
     debase-ruby_core_source (0.10.14)
     diff-lcs (1.5.0)
     erubi (1.10.0)
-    google-protobuf (3.21.5)
+    google-protobuf (3.21.12)
     graphql (1.13.6)
     i18n (1.9.1)
       concurrent-ruby (~> 1.0)

gemfiles/graphql_2.0.gemfile.lock

@@ -2,7 +2,7 @@ PATH
   remote: ..
   specs:
     apollo-federation (3.3.0)
-      google-protobuf (~> 3.19)
+      google-protobuf (~> 3.21.7)
       graphql (>= 1.10.14)
 
 GEM
@@ -42,7 +42,7 @@ GEM
     debase-ruby_core_source (0.10.14)
     diff-lcs (1.5.0)
     erubi (1.10.0)
-    google-protobuf (3.21.5)
+    google-protobuf (3.21.12)
     graphql (2.0.1)
     i18n (1.9.1)
       concurrent-ruby (~> 1.0)