From 16abb56216da88f8a7395a6b837a649c137b21c0 Mon Sep 17 00:00:00 2001 From: cve-remediation-bot Date: Thu, 6 Aug 2026 13:05:17 +0000 Subject: [PATCH] chore(deps): remediate CVE-2026-54904 (concurrent-ruby) Co-Authored-By: Claude Sonnet 5 --- puppet.gemspec | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/puppet.gemspec b/puppet.gemspec index ed1944f5965..f0eb4577334 100644 --- a/puppet.gemspec +++ b/puppet.gemspec @@ -20,7 +20,7 @@ Gem::Specification.new do |spec| spec.require_paths = ["lib"] spec.summary = "Puppet, an automated configuration management tool" spec.specification_version = 4 - spec.add_runtime_dependency('concurrent-ruby', '~> 1.0') + spec.add_runtime_dependency('concurrent-ruby', ['>= 1.3.7', '< 2.0']) spec.add_runtime_dependency('deep_merge', '~> 1.0') spec.add_runtime_dependency('facter', ['>= 4.3.0', '< 5']) spec.add_runtime_dependency('fast_gettext', '>= 2.1', '< 4')