From c07aaff522a01a862ecb60ead8a1ec2198e8c4f7 Mon Sep 17 00:00:00 2001
From: cpovirk <cpovirk@google.com>
Date: Tue, 20 Aug 2019 21:49:41 -0700
Subject: [PATCH] Pin nokogiri to 1.10.4.

Fixes potential vulnerability raised by Github: https://nvd.nist.gov/vuln/detail/CVE-2019-5477

(I'm following how you handled the previous vulnerability in CL 193086878.)

-------------
Created by MOE: https://github.com/google/moe
MOE_MIGRATED_REVID=264534363
---
 docs/Gemfile      | 2 +-
 docs/Gemfile.lock | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/docs/Gemfile b/docs/Gemfile
index 60b57da6..f66dfc40 100644
--- a/docs/Gemfile
+++ b/docs/Gemfile
@@ -2,7 +2,7 @@ source "https://rubygems.org"
 ruby RUBY_VERSION
 
 gem "github-pages", group: :jekyll_plugins
-gem 'nokogiri', '~> 1.8.2'
+gem 'nokogiri', '~> 1.10.4'
 
 # If you have any plugins, put them here!
 # group :jekyll_plugins do
diff --git a/docs/Gemfile.lock b/docs/Gemfile.lock
index cd2d2c0d..28ea5a06 100644
--- a/docs/Gemfile.lock
+++ b/docs/Gemfile.lock
@@ -196,7 +196,7 @@ GEM
     minitest (5.11.1)
     multipart-post (2.0.0)
     net-dns (0.8.0)
-    nokogiri (1.8.2)
+    nokogiri (1.10.4)
       mini_portile2 (~> 2.3.0)
     octokit (4.8.0)
       sawyer (~> 0.8.0, >= 0.5.3)
@@ -233,7 +233,7 @@ PLATFORMS
 
 DEPENDENCIES
   github-pages
-  nokogiri (~> 1.8.2)
+  nokogiri (~> 1.10.4)
 
 RUBY VERSION
    ruby 2.3.3p222