Skip to content

Dependency conflict with Sinatra (Mustermann) #69

Description

@SpyMachine

I have a bit of an issue.

Trying to resolve https://security.snyk.io/vuln/SNYK-RUBY-SINATRA-3150405, however I cannot update Sinatra because oas_parser is still using mustermann 1.x.

Bundler could not find compatible versions for gem "mustermann":
  In snapshot (Gemfile.lock):
    mustermann (= 1.1.1)

  In Gemfile:
    oas_parser (= 0.25.4) was resolved to 0.25.4, which depends on
      mustermann-contrib (~> 1.1.1) was resolved to 1.1.1, which depends on
        mustermann (= 1.1.1)

    sinatra (~> 2.2.3) was resolved to 2.2.3, which depends on
      mustermann (~> 2.0)

Running `bundle update` will rebuild your snapshot from scratch, using only
the gems in your Gemfile, which may resolve the conflict.

Would it be possible to update oas_parser to use mustermann 2.x?

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Fields

    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions