how to fix: Gemfile & Gemfile.lock to reduce vulnerabilities

i really dont even know where i am suppuosed to check to see the files that was actually edited so i can check for wrong naming or whatsoever

1 Like

I also would like to know the answer to this.

@yemisi567 Gemfile and Gemfile.lock are how dependencies are managed in the Ruby programming language. Most folks use a tool called Bundler to do this. You can read more about it here

For the purposes of a GitHub Learning Lab course, the authors of the course should keep the dependencies up to date so that you don’t have vulnerabilities. If you still see a vulnerability, depending on it severity it may still be safe to continue with the course. If you leave the course and rejoin it, you should get a fresh copy of the course repository which will be updated, if the author has fixed the vulnerability.