Merge branch '16265-security-updates' into dependabot/bundler/apps/workbench/loofah...

diff --combined apps/workbench/Gemfile.lock
index 08ce86a9d69b04b286958e573d38a503208c2888,04bf0516be10c7d4100b5f05aae7a5d6445f6597..2af9c8b16f0b282ef3abc1a4d7c3880e690f7420
--- 1/apps/workbench/Gemfile.lock
--- 2/apps/workbench/Gemfile.lock
+++ b/apps/workbench/Gemfile.lock
@@@ -1,9 -1,9 +1,9 @@@
  GIT
-   remote: https://github.com/curoverse/arvados.git
-   revision: dd9f2403f43bcb93da5908ddde57d8c0491bb4c2
+   remote: https://github.com/arvados/arvados.git
+   revision: c210114aa8c77ba0bb8e4d487fc1507b40f9560f
    glob: sdk/ruby/arvados.gemspec
    specs:
-     arvados (1.4.1.20191019025325)
+     arvados (1.5.0.pre20200114202620)
        activesupport (>= 3)
        andand (~> 1.3, >= 1.3.3)
        arvados-google-api-client (>= 0.7, < 0.8.9)
@@@ -13,14 -13,14 +13,14 @@@
        jwt (>= 0.1.5, < 2)
  
  GIT
-   remote: https://github.com/curoverse/nulldb
+   remote: https://github.com/arvados/nulldb
    revision: d8e0073b665acdd2537c5eb15178a60f02f4b413
    specs:
      activerecord-nulldb-adapter (0.3.9)
        activerecord (>= 2.0.0)
  
  GIT
-   remote: https://github.com/curoverse/themes_for_rails
+   remote: https://github.com/arvados/themes_for_rails
    revision: ddf6e592b3b6493ea0c2de7b5d3faa120ed35be0
    specs:
      themes_for_rails (0.5.1)
@@@ -122,7 -122,7 +122,7 @@@ GE
      coffee-script-source (1.12.2)
      commonjs (0.2.7)
      concurrent-ruby (1.1.5)
 -    crass (1.0.4)
 +    crass (1.0.5)
      deep_merge (1.2.1)
      docile (1.3.1)
      erubis (2.7.0)
@@@ -150,7 -150,7 +150,7 @@@
        rails-dom-testing (>= 1, < 3)
        railties (>= 4.2.0)
        thor (>= 0.14, < 2.0)
-     json (2.2.0)
+     json (2.3.0)
      jwt (1.5.6)
      launchy (2.4.3)
        addressable (~> 2.3)
@@@ -167,12 -167,12 +167,12 @@@
        railties (>= 4)
        request_store (~> 1.0)
      logstash-event (1.2.02)
 -    loofah (2.2.3)
 +    loofah (2.3.1)
        crass (~> 1.0.2)
        nokogiri (>= 1.5.9)
      mail (2.7.1)
        mini_mime (>= 0.1.1)
-     memoist (0.16.0)
+     memoist (0.16.2)
      metaclass (0.0.4)
      method_source (0.9.2)
      mime-types (3.2.2)
@@@ -195,7 -195,7 +195,7 @@@
      net-ssh-gateway (2.0.0)
        net-ssh (>= 4.0.0)
      nio4r (2.3.1)
-     nokogiri (1.10.5)
+     nokogiri (1.10.8)
        mini_portile2 (~> 2.4.0)
      npm-rails (0.2.1)
        rails (>= 3.2)
@@@ -213,7 -213,7 +213,7 @@@
        cliver (~> 0.3.1)
        multi_json (~> 1.0)
        websocket-driver (>= 0.2.0)
-     public_suffix (4.0.1)
+     public_suffix (4.0.3)
      rack (2.0.7)
      rack-mini-profiler (1.0.2)
        rack (>= 1.2.0)
@@@ -247,7 -247,7 +247,7 @@@
        method_source
        rake (>= 0.8.7)
        thor (>= 0.18.1, < 2.0)
-     rake (12.3.2)
+     rake (13.0.1)
      raphael-rails (2.1.2)
      rb-fsevent (0.10.3)
      rb-inotify (0.10.0)
@@@ -308,7 -308,7 +308,7 @@@
      thor (0.20.3)
      thread_safe (0.3.6)
      tilt (2.0.9)
-     tzinfo (1.2.5)
+     tzinfo (1.2.6)
        thread_safe (~> 0.1)
      uglifier (2.7.2)
        execjs (>= 0.3.0)
@@@ -375,4 -375,4 +375,4 @@@ DEPENDENCIE
    uglifier (~> 2.0)
  
  BUNDLED WITH
-    1.17.3
+    1.11