contrast-agent 6.10.0 → 6.11.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 624b29e40ff797608bb6fef0ab00377cc1bc3e6756af01063d4768fad53bfbfa
-  data.tar.gz: 7380498d855e3f6b8a7387ee98351d118b6b70b7bc332536bf1124a870c1a48c
+  metadata.gz: fddcf57afedf79d84cacef08c959a190f29f6db9248d34d1a01c3abe1b13553b
+  data.tar.gz: 599882cd812552c2cc12c86f6ecd526e7a7d1e458cf8ea4d961d17ef5179c9ad
 SHA512:
-  metadata.gz: 44d0b0cc41d92f58cf048212295fdef8367a4aa4475e3d035c9ae09c80bbcad9de08ba2a63f321381de4af41fd90b581dca2710ef3641d8eb486e8664a3d18cf
-  data.tar.gz: cb2f9e2799f8ef7fff7da2ba6714e94022ad5495ddc57c448244c34f649cb70eb756d4f806c1f1274676cbdd37749bf0177cd8539b175ba7b8086857bd1f86a3
+  metadata.gz: e91dd42c9aa9f9cb934bfe878e0f6be951f9397978c874dd2a4b38c0a78f1cfe6b7e957ec6abaa3bb97a194f6494950f9ec93ebad408cf2767df06b1475bd373
+  data.tar.gz: ad17804c1abf24410ba2bbe7798ce142eba284cb0911830e40f6f92917a47961d4cfaefa79ed8affb8d1d821e27a85f57ace126a64417f6fe672f965916c3dba

data/ext/build_funchook.rb

@@ -17,7 +17,7 @@ unless find_header('funchook.h', ext_path)
     extension_paths = Dir[contrast_gem_dir_search]
     extension_paths.map! do |extension_path|
       target_path = File.join(extension_path, 'shared_libraries')
-      FileUtils.mkdir_p(target_path) unless File.exist?(target_path)
+      FileUtils.mkdir_p(target_path)
       target_path
     end
     bundler_install_target_paths += extension_paths

data/lib/contrast/agent/assess/policy/propagator/split.rb

@@ -17,12 +17,11 @@ module Contrast
         module Propagator
           # This class is specifically for String#split & String#grapheme_clusters propagation
           # it propagates tag ranges from a string to elements within an untracked array
-          class Split < Contrast::Agent::Assess::Policy::Propagator::Base
+          class Split < Contrast::Agent::Assess::Policy::Propagator::Base # rubocop:disable  Metrics/ClassLength
             extend Contrast::Components::Scope::InstanceMethods
             extend Contrast::Components::Logger::InstanceMethods
             extend Contrast::Utils::Assess::SplitUtils
             extend Contrast::Utils::Assess::EventLimitUtils
-
             SPLIT_TRACKER = Contrast::Utils::ThreadTracker.new
 
             class << self
@@ -61,7 +60,6 @@ module Contrast
                 rescue Exception => e # rubocop:disable Lint/RescueException
                   logger.warn('Unable to record split context', e)
                 end
-
                 yield
               ensure
                 # String#split exit. Remove propagation context.
@@ -158,7 +156,6 @@ module Contrast
                   # Get tags for element from source by element range.
                   range = current_index...(current_index + target_elem.length)
                   tags = source_properties.tags_at_range(range)
-
                   # Set element properties accordingly.
                   elem_properties.clear_tags
                   tags.each_pair { |key, value| elem_properties.set_tags(key, value) }

data/lib/contrast/agent/middleware.rb

@@ -44,7 +44,7 @@ module Contrast
         @app = app  # THIS MUST BE FIRST AND ALWAYS SET!
         setup_agent # THIS MUST BE SECOND AND ALWAYS CALLED!
         unless ::Contrast::AGENT.enabled?
-          logger.error('The Agent was unable to initialize before the application middleware was initialized. '\
+          logger.error('The Agent was unable to initialize before the application middleware was initialized. ' \
                        'Disabling permanently.')
           ::Contrast::AGENT.disable! # ensure the agent is disabled (probably redundant)
           return

data/lib/contrast/agent/patching/policy/method_policy_extend.rb

@@ -57,8 +57,12 @@ module Contrast
             nodes.find { |node| node }&.method_visibility
           end
 
-          def check_method_policy_nodes_empty?(source_node, propagation_node, trigger_node, protect_node,
-                                               inventory_node, deadzone_node)
+          def check_method_policy_nodes_empty?(source_node,
+                                               propagation_node,
+                                               trigger_node,
+                                               protect_node,
+                                               inventory_node,
+                                               deadzone_node)
             return false unless source_node.nil? && propagation_node.nil? && trigger_node.nil? && protect_node.nil? &&
                 inventory_node.nil? && deadzone_node.nil?
 

data/lib/contrast/agent/patching/policy/trigger_node.rb

@@ -46,7 +46,7 @@ module Contrast
             super
             unless applicator.public_methods(false).any?(applicator_method)
               raise(ArgumentError,
-                    "#{ id } did not have a proper applicator method: "\
+                    "#{ id } did not have a proper applicator method: " \
                     "#{ applicator } does not respond to #{ applicator_method }. Unable to create.")
             end
             validate_properties

data/lib/contrast/agent/protect/policy/applies_path_traversal_rule.rb

@@ -101,10 +101,10 @@ module Contrast
             CS__SAFER_REL_PATHS = %w[public app log tmp].cs__freeze
             def safer_abs_paths
               @_safer_abs_paths ||= begin
-                pwd = ENV['PWD']
+                pwd = ENV.fetch('PWD', nil)
                 if pwd
                   tmp = CS__SAFER_REL_PATHS.map { |r| "#{ pwd }/#{ r }" }
-                  gems = ENV['GEM_PATH']
+                  gems = ENV.fetch('GEM_PATH', nil)
                   tmp += gems.split(Contrast::Utils::ObjectShare::COLON) if gems
                   tmp.map!(&:downcase)
                   tmp

data/lib/contrast/agent/protect/rule/base_service.rb

@@ -91,8 +91,7 @@ module Contrast
             return Contrast::Utils::ObjectShare::EMPTY_ARRAY unless context&.agent_input_analysis&.results
 
             context.agent_input_analysis.results.select do |ia_result|
-              ia_result.rule_id == rule_name &&
-                  ia_result.score_level != Contrast::Agent::Reporting::ScoreLevel::IGNORE
+              ia_result.rule_id == rule_name && ia_result.score_level != Contrast::Agent::Reporting::ScoreLevel::IGNORE
             end
           end
 

data/lib/contrast/agent/protect/rule/cmdi/cmdi_backdoors.rb

@@ -70,7 +70,7 @@ module Contrast
           # @raise [Contrast::SecurityException]
           def raise_error classname, method
             raise(Contrast::SecurityException.new(self,
-                                                  'Command Injection Command Backdoor rule triggered. '\
+                                                  'Command Injection Command Backdoor rule triggered. ' \
                                                   "Call to #{ classname }.#{ method } blocked."))
           end
 

data/lib/contrast/agent/protect/rule/cmdi/cmdi_base_rule.rb

@@ -78,7 +78,7 @@ module Contrast
           # @raise [Contrast::SecurityException]
           def raise_error classname, method
             raise(Contrast::SecurityException.new(self,
-                                                  'Command Injection Rule triggered. '\
+                                                  'Command Injection Rule triggered. ' \
                                                   "Call to #{ classname }.#{ method } blocked."))
           end
 

data/lib/contrast/agent/protect/rule/cmdi/cmdi_chained_command.rb

@@ -32,7 +32,7 @@ module Contrast
           # @raise [Contrast::SecurityException]
           def raise_error classname, method
             raise(Contrast::SecurityException.new(self,
-                                                  'Command Injection Semantic Chained Commands rule triggered. '\
+                                                  'Command Injection Semantic Chained Commands rule triggered. ' \
                                                   "Call to #{ classname }.#{ method } blocked."))
           end
 

data/lib/contrast/agent/protect/rule/cmdi/cmdi_dangerous_path.rb

@@ -32,7 +32,7 @@ module Contrast
           # @raise [Contrast::SecurityException]
           def raise_error classname, method
             raise(Contrast::SecurityException.new(self,
-                                                  'Command Injection Dangerous Path rule triggered. '\
+                                                  'Command Injection Dangerous Path rule triggered. ' \
                                                   "Call to #{ classname }.#{ method } blocked."))
           end
 

data/lib/contrast/agent/protect/rule/sqli/postgres_sql_scanner.rb

@@ -2,7 +2,6 @@
 # frozen_string_literal: true
 
 # Copyright (c) 2022 Contrast Security, Inc. See https://www.contrastsecurity.com/enduser-terms-0317a for more details.
-# frozen_string_literal: true
 
 module Contrast
   module Agent

data/lib/contrast/agent/reporting/reporter.rb

@@ -73,13 +73,11 @@ module Contrast
         return unless event
 
         if queue.size >= MAX_QUEUE_SIZE
-          if Contrast::Agent::Telemetry::Base.enabled?
-            Contrast::Agent.thread_watcher.telemetry_queue.send_event(queue_limit_telemetry_event)
-          end
+          Contrast::Agent::Telemetry::Base.enabled? && Contrast::Agent.thread_watcher.telemetry_queue.
+              send_event(queue_limit_telemetry_event)
 
           return
         end
-
         queue << event
       end
 
@@ -89,9 +87,8 @@ module Contrast
       # @return [Net::HTTPResponse, nil]
       def send_event_immediately event
         if ::Contrast::AGENT.disabled?
-          logger.warn('[Reporter] attempted to send event immediately with Agent disabled',
-                      caller: caller,
-                      event: event)
+          logger.warn('[Reporter] attempted to send event immediately with Agent disabled', caller: caller,
+                                                                                            event: event)
           return
         end
         return unless event
@@ -157,7 +154,6 @@ module Contrast
                            else
                              stack_trace[1].path.delete_prefix(Dir.pwd)
                            end
-
         stack_frame_function = stack_trace.nil? || stack_trace[1].nil? ? 'none' : stack_trace[1].label
         Contrast::Agent::Telemetry::TelemetryException::StackFrame.build(stack_frame_function, stack_frame_type, nil)
       end

data/lib/contrast/agent/reporting/reporting_events/discovered_route.rb

@@ -5,6 +5,7 @@ require 'json'
 require 'contrast/components/logger'
 require 'contrast/agent/reporting/reporting_events/reporting_event'
 require 'contrast/utils/object_share'
+require 'contrast/utils/duck_utils'
 
 module Contrast
   module Agent
@@ -16,9 +17,9 @@ module Contrast
       # includes the literal URL and HTTP Verb used to invoke them, as they must have been called at this point to be
       # recorded.
       class DiscoveredRoute < Contrast::Agent::Reporting::ObservedRoute
-        include Contrast::Components::Logger::InstanceMethods
-
         class << self
+          include Contrast::Components::Logger::InstanceMethods
+
           # @param obj [Regexp, Object]
           # @return [String]
           def source_or_string obj
@@ -100,9 +101,7 @@ module Contrast
         def initialize
           super
           @event_type = :discovered_route
-          @signature = Contrast::Utils::ObjectShare::EMPTY_STRING
           @verb = Contrast::Utils::ObjectShare::EMPTY_STRING
-          @url = Contrast::Utils::ObjectShare::EMPTY_STRING
         end
 
         def to_controlled_hash
@@ -116,7 +115,12 @@ module Contrast
         end
 
         def validate
-          raise(ArgumentError, "#{ self } did not have a proper signature. Unable to continue.") unless signature
+          if Contrast::Utils::DuckUtils.empty_duck?(signature)
+            raise(ArgumentError, "#{ self } did not have a proper signature. Unable to continue.")
+          end
+          if Contrast::Utils::DuckUtils.empty_duck?(url)
+            raise(ArgumentError, "#{ self } did not have a proper url. Unable to continue.")
+          end
 
           nil
         end

data/lib/contrast/agent/reporting/reporting_events/observed_route.rb

@@ -6,6 +6,7 @@ require 'json'
 require 'contrast/components/logger'
 require 'contrast/agent/reporting/reporting_events/application_reporting_event'
 require 'contrast/utils/object_share'
+require 'contrast/utils/duck_utils'
 
 module Contrast
   module Agent
@@ -32,9 +33,7 @@ module Contrast
         def initialize
           @event_endpoint = Contrast::Agent::Reporting::Endpoints.observed_route
           @sources = []
-          @signature = Contrast::Utils::ObjectShare::EMPTY_STRING
           @verb = Contrast::Utils::ObjectShare::EMPTY_STRING
-          @url = Contrast::Utils::ObjectShare::EMPTY_STRING
           super()
         end
 
@@ -69,7 +68,7 @@ module Contrast
         # @return [String]
         #
         def hash_id
-          hashable_data = to_controlled_hash.except(:session_id)
+          hashable_data = to_controlled_hash.reject { |key, _value| key == :session_id } # rubocop:disable Style/HashExcept
           hashable_data[:sources] = hashable_data[:sources].sort_by { |s| s[:name] }
 
           Digest::SHA2.new(256).hexdigest(hashable_data.to_s)
@@ -78,8 +77,12 @@ module Contrast
         # @raise [ArgumentError]
         def validate
           raise(ArgumentError, "#{ self } did not have a proper sources. Unable to continue.") if @sources.nil?
-          raise(ArgumentError, "#{ self } did not have a proper signature. Unable to continue.") unless signature
-          raise(ArgumentError, "#{ self } did not have a proper url. Unable to continue.") unless url
+          if Contrast::Utils::DuckUtils.empty_duck?(signature)
+            raise(ArgumentError, "#{ self } did not have a proper signature. Unable to continue.")
+          end
+          if Contrast::Utils::DuckUtils.empty_duck?(url)
+            raise(ArgumentError, "#{ self } did not have a proper url. Unable to continue.")
+          end
 
           nil
         end

data/lib/contrast/agent/reporting/reporting_utilities/endpoints.rb

@@ -89,7 +89,7 @@ module Contrast
           #
           # @return [String]
           def application_endpoint
-            @_application_endpoint ||= "#{ Contrast::API.api_url }/agents#{ ENDPOINT_VERSION }/applications"\
+            @_application_endpoint ||= "#{ Contrast::API.api_url }/agents#{ ENDPOINT_VERSION }/applications" \
                                        "#{ server_path_segment }#{ application_path_segment }"
           end
 
@@ -97,7 +97,7 @@ module Contrast
           #
           # @return [String]
           def route_endpoint
-            @_route_endpoint ||= "#{ Contrast::API.api_url }/agents#{ ENDPOINT_VERSION }/routes"\
+            @_route_endpoint ||= "#{ Contrast::API.api_url }/agents#{ ENDPOINT_VERSION }/routes" \
                                  "#{ server_path_segment }#{ application_path_segment }"
           end
 
@@ -105,7 +105,7 @@ module Contrast
           #
           # @return [String]
           def server_endpoint
-            @_server_endpoint ||= "#{ Contrast::API.api_url }/agents#{ ENDPOINT_VERSION }/servers"\
+            @_server_endpoint ||= "#{ Contrast::API.api_url }/agents#{ ENDPOINT_VERSION }/servers" \
                                   "#{ server_path_segment }"
           end
 
@@ -113,7 +113,7 @@ module Contrast
           #
           # @return [String]
           def trace_endpoint
-            @_trace_endpoint ||= "#{ Contrast::API.api_url }/agents#{ ENDPOINT_VERSION }/traces"\
+            @_trace_endpoint ||= "#{ Contrast::API.api_url }/agents#{ ENDPOINT_VERSION }/traces" \
                                  "#{ server_path_segment }#{ application_path_segment }"
           end
 
@@ -121,8 +121,8 @@ module Contrast
           #
           # @return [String]
           def server_path_segment
-            @_server_path_segment ||= "/#{ Base64.urlsafe_encode64(server_host_name, padding: false) }"\
-                                      "/#{ Base64.urlsafe_encode64(server_path, padding: false) }"\
+            @_server_path_segment ||= "/#{ Base64.urlsafe_encode64(server_host_name, padding: false) }" \
+                                      "/#{ Base64.urlsafe_encode64(server_path, padding: false) }" \
                                       "/#{ Base64.urlsafe_encode64(server_type, padding: false) }"
           end
 
@@ -130,7 +130,7 @@ module Contrast
           #
           # @return [String]
           def application_path_segment
-            @_application_path_segment ||= "/#{ Base64.urlsafe_encode64(APP_LANGUAGE, padding: false) }"\
+            @_application_path_segment ||= "/#{ Base64.urlsafe_encode64(APP_LANGUAGE, padding: false) }" \
                                            "/#{ Base64.urlsafe_encode64(app_name, padding: false) }"
           end
 

data/lib/contrast/agent/reporting/reporting_utilities/response_handler_utils.rb

@@ -22,14 +22,14 @@ module Contrast
             unprocessable_entity: '422',
             too_many_requests: '429'
         }.cs__freeze
-        APP_NON_EXISTENT_MSG = 'Application does not exist! Either it has not been created or has '\
-                               'been deleted or archived. '\
+        APP_NON_EXISTENT_MSG = 'Application does not exist! Either it has not been created or has ' \
+                               'been deleted or archived. ' \
                                'Disabling permanently.'
         SUSPEND_MSG = 'Reporter is temporarily suspended.'
         UNSUCCESSFULLY_RECEIVED_MSG = 'The Reporter was unable to send message.'
-        FORBIDDEN_MSG = 'Access was forbidden for current Report because the request authentication '\
+        FORBIDDEN_MSG = 'Access was forbidden for current Report because the request authentication ' \
                         'information was not provided'
-        FORBIDDEN_NO_ACTION_MSG = 'Report access was forbidden because the supplied credentials failed '\
+        FORBIDDEN_NO_ACTION_MSG = 'Report access was forbidden because the supplied credentials failed ' \
                                   'to authenticate the Agent'
         UNPROCESSABLE_ENTITY_MSG = 'Reporter received Unprocessable Entity response. Disabling permanently.'
         RETRY_AFTER_MSG = "There are too many requests of this type being sent by this Agent. #{ SUSPEND_MSG }"

data/lib/contrast/agent/telemetry/base.rb

@@ -14,7 +14,6 @@ module Contrast
       # This class will initialize and hold everything needed for the telemetry
       class Base < WorkerThread
         include Contrast::Components::Logger::InstanceMethods
-
         # this is where we will send the data from the agents
         URL = 'https://telemetry.ruby.contrastsecurity.com/'
         # Suggested timeout after each send is to be 3 hours (10800 seconds)
@@ -108,8 +107,7 @@ module Contrast
         end
 
         def request_with_response event
-          res = client.send_request(event, connection)
-          client.handle_response(res)
+          client.handle_response(client.send_request(event, connection))
         end
 
         private
@@ -134,8 +132,7 @@ module Contrast
                 event = queue.pop
                 begin
                   logger.debug('[Telemetry] This is the current processed event', event)
-                  sleep_time = request_with_response(event)
-                  if sleep_time
+                  if (sleep_time = request_with_response(event))
                     sleep(sleep_time)
                     logger.debug('[Telemetry] Retrying to process event', event)
                     retry_sleep_time = request_with_response(event)

data/lib/contrast/agent/version.rb

@@ -3,6 +3,6 @@
 
 module Contrast
   module Agent
-    VERSION = '6.10.0'
+    VERSION = '6.11.0'
   end
 end

data/lib/contrast/components/config.rb

@@ -30,7 +30,7 @@ module Contrast
       DATE_TIME = '%Y-%m-%dT%H:%M:%S.%L%z'
 
       class Interface # :nodoc: # rubocop:disable Metrics/ClassLength
-        SESSION_VARIABLES = 'Invalid configuration. '\
+        SESSION_VARIABLES = 'Invalid configuration. ' \
                             "Setting both application.session_id and application.session_metadata is not allowed.\n"
         API_URL = "Invalid configuration. Missing a required connection value 'url' is not set."
         API_KEY = "Invalid configuration. Missing a required connection value 'api_key' is not set."

data/lib/contrast/framework/rack/patch/session_cookie.rb

@@ -48,7 +48,8 @@ module Contrast
 
             def vulnerable_setting?(setting_key,
                                     safe_settings_value,
-                                    options, safe_default: true,
+                                    options,
+                                    safe_default: true,
                                     comparison_type: nil)
               # In most cases, Rack is pretty nice and the default value is safe
               return !safe_default unless options&.key?(setting_key)

data/lib/contrast/utils/duck_utils.rb

@@ -63,6 +63,24 @@ module Contrast
           # otherwise, don't risk it
           false
         end
+
+        # Every duck quacks to nil, we need to check if it is empty?
+        # Utils method to check for blank ( nil or empty object ).
+        #
+        # @param [Object] object to test.
+        # @return [Boolean]
+        def empty_duck? object
+          # If not quacking to empty it is True/False class, Integer, Regexp or Time instance.
+          return false if object.instance_of?(TrueClass) || object.instance_of?(FalseClass)
+
+          if object.cs__respond_to?(:empty?)
+            return true if object.empty?
+          elsif object.nil?
+            return true
+          end
+
+          false
+        end
       end
     end
   end

data/lib/contrast/utils/heap_dump_util.rb

@@ -35,7 +35,7 @@ module Contrast
         control = Contrast::Utils::HeapDumpUtil.control
         log_enabled_warning
         dir = control[:path]
-        Dir.mkdir(dir) unless Dir.exist?(dir)
+        FileUtils.mkdir_p(dir)
         return unless File.writable?(dir)
 
         delay = control[:delay]

data/lib/contrast/utils/log_utils.rb

@@ -26,7 +26,7 @@ module Contrast
         return File.writable?(path) if File.exist?(path)
 
         dir_name = File.dirname(File.absolute_path(path))
-        FileUtils.mkdir_p(dir_name) unless Dir.exist?(dir_name)
+        FileUtils.mkdir_p(dir_name)
         File.writable?(dir_name)
       end
 

data/lib/contrast/utils/middleware_utils.rb

@@ -12,7 +12,7 @@ module Contrast
       LANGUAGE_DEPRECATION_VERSION = '2.7'
       LANGUAGE_DEPRECATION_YEAR = '2023'
       LANGUAGE_DEPRECATION_WARNING =
-        "[Contrast Security] [DEPRECATION] Support for Ruby #{ LANGUAGE_DEPRECATION_VERSION } will be removed in "\
+        "[Contrast Security] [DEPRECATION] Support for Ruby #{ LANGUAGE_DEPRECATION_VERSION } will be removed in " \
         "April #{ LANGUAGE_DEPRECATION_YEAR }. Please contact Customer Support prior if you require continued support."
 
       def setup_agent

data/lib/contrast/utils/patching/policy/patch_utils.rb

@@ -23,8 +23,8 @@ module Contrast
         # Given a method, return a symbol in the format
         # <method_start>_unbound_<method_name>
         def build_unbound_method_name patcher_method
-          "#{ Contrast::Utils::ObjectShare::CONTRAST_PATCHED_METHOD_START }unbound"\
-          "#{ Contrast::Utils::ObjectShare::UNDERSCORE }"\
+          "#{ Contrast::Utils::ObjectShare::CONTRAST_PATCHED_METHOD_START }unbound" \
+          "#{ Contrast::Utils::ObjectShare::UNDERSCORE }" \
           "#{ patcher_method }".to_sym
         end
 

data/lib/contrast/utils/routes_sent.rb

@@ -3,6 +3,7 @@
 
 # require 'contrast/components/logger'
 # require 'contrast/agent/telemetry/events/exceptions/telemetry_exception_event'
+require 'contrast/utils/duck_utils'
 
 module Contrast
   module Utils
@@ -25,6 +26,9 @@ module Contrast
       # @param route [Contrast::Agent::Reporting::ObservedRoute] the route
       # @return [boolean]
       def sendable? route
+        return false if Contrast::Utils::DuckUtils.empty_duck?(route.signature)
+        return false if Contrast::Utils::DuckUtils.empty_duck?(route.url)
+
         route_hash = route.hash_id
 
         # If hash doesn't exist in @cache...

data/lib/contrast/utils/telemetry.rb

@@ -81,7 +81,7 @@ module Contrast
         #
         # @return[Boolean] true if success, false if fails
         def touch_marker dir, file
-          FileUtils.mkdir_p(dir) unless Dir.exist?(dir)
+          FileUtils.mkdir_p(dir)
           FileUtils.touch(dir + file)
           File.file?(dir + file)
         rescue StandardError => _e

data/ruby-agent.gemspec

@@ -75,7 +75,7 @@ def self.add_specs spec
   spec.add_development_dependency 'factory_bot'
   spec.add_development_dependency 'fake_ftp'
   spec.add_development_dependency 'openssl'
-  spec.add_development_dependency 'parallel_tests'
+  spec.add_development_dependency 'parallel_tests', '~> 3.0'
   spec.add_development_dependency 'rspec', '~> 3.0'
   spec.add_development_dependency 'rspec-benchmark'
   spec.add_development_dependency 'rspec_junit_formatter', '0.3.0'
@@ -92,11 +92,11 @@ end
 
 # Dependencies used to run all of our Rubocop during the linting phase.
 def self.add_rubocop spec
-  spec.add_development_dependency 'rubocop', '1.26.1'
-  spec.add_development_dependency 'rubocop-performance', '1.13.3'
-  spec.add_development_dependency 'rubocop-rails', '2.14.2'
+  spec.add_development_dependency 'rubocop', '1.37.1'
+  spec.add_development_dependency 'rubocop-performance', '1.15.0'
+  spec.add_development_dependency 'rubocop-rails', '2.17.2'
   spec.add_development_dependency 'rubocop-rake', '0.6.0'
-  spec.add_development_dependency 'rubocop-rspec', '2.9.0'
+  spec.add_development_dependency 'rubocop-rspec', '2.14.2'
 end
 
 # Dependencies not mocked out during RSpec that we test real code of, beyond just frameworks.

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: contrast-agent
 version: !ruby/object:Gem::Version
-  version: 6.10.0
+  version: 6.11.0
 platform: ruby
 authors:
 - galen.palmer@contrastsecurity.com
@@ -13,7 +13,7 @@ authors:
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2022-11-02 00:00:00.000000000 Z
+date: 2022-11-09 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler
@@ -161,42 +161,42 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.26.1
+        version: 1.37.1
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.26.1
+        version: 1.37.1
 - !ruby/object:Gem::Dependency
   name: rubocop-performance
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.13.3
+        version: 1.15.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.13.3
+        version: 1.15.0
 - !ruby/object:Gem::Dependency
   name: rubocop-rails
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.14.2
+        version: 2.17.2
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.14.2
+        version: 2.17.2
 - !ruby/object:Gem::Dependency
   name: rubocop-rake
   requirement: !ruby/object:Gem::Requirement
@@ -217,14 +217,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.9.0
+        version: 2.14.2
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.9.0
+        version: 2.14.2
 - !ruby/object:Gem::Dependency
   name: simplecov
   requirement: !ruby/object:Gem::Requirement
@@ -473,16 +473,16 @@ dependencies:
   name: parallel_tests
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '0'
+        version: '3.0'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '0'
+        version: '3.0'
 - !ruby/object:Gem::Dependency
   name: rspec
   requirement: !ruby/object:Gem::Requirement