Update Gemfile.lock to update rack to version 2.2.3.1 to address vulnerabilities

[Sangeetharajaram724]

Currently the version of rack gem pinned in Gemfile.lock is 2.2.3 that has some vulnerabilities which are fixed in 2.2.3.1. Hence Gemfile.lock needs to be updated with 2.2.3.1.

https://github.com/DataDog/chef-datadog/blob/main/Gemfile.lock#L232

[Sangeetharajaram724]

Thanks for updating rack & rexml gem version. Can you please update the addressable gem version as well ? As per below advisory, addressable gem version should be 2.8.0 but now in gemfile.lock, we can see the addressable as 2.7.0.

GHSA-jxhc-q857-3j6g

[Sangeetharajaram724]

Below are the vulnerable gem versions that are getting installed as part of datadog cookbook ( https://github.com/DataDog/chef-datadog/blob/main/Gemfile.lock ). Hence Gemfile.lock needs to be updated with fixed versions of gems.

LocationPath DetailedName Version FixedVersion Link
/var/chef/cache/cookbooks/datadog/Gemfile.lock addressable 2.7.0 2.8.0 GHSA-jxhc-q857-3j6g
/var/chef/cache/cookbooks/datadog/Gemfile.lock addressable 2.7.0 2.8.0 GHSA-jxhc-q857-3j6g
/var/chef/cache/cookbooks/datadog/Gemfile.lock nokogiri 1.15.7 1.18.4 GHSA-mrxw-mxhj-p664
/var/chef/cache/cookbooks/datadog/Gemfile.lock nokogiri 1.15.7 1.18.4 GHSA-mrxw-mxhj-p664
/var/chef/cache/cookbooks/datadog/Gemfile.lock nokogiri 1.15.7 1.18.4 GHSA-mrxw-mxhj-p664
/var/chef/cache/cookbooks/datadog/Gemfile.lock rack 2.2.13 2.2.14 GHSA-gjh7-p2fx-99vx