[Snyk] Security upgrade aws-sdk-s3 from 1.196.1 to 1.208.0

[karimkawambwa]

Snyk has created this PR to fix 1 vulnerabilities in the rubygems dependencies of this project.

Snyk changed the following file(s):

• Gemfile

⚠️ Warning

Failed to update the Gemfile.lock, please update manually before merging.

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Use of a Broken or Risky Cryptographic Algorithm SNYK-RUBY-AWSSDKS3-14465282	586

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Use of a Broken or Risky Cryptographic Algorithm

[sentry]

Bug: The version constraint for aws-sdk-s3 is set to >= 1.208.0, but the latest available version is 1.206.0. This will cause bundle install to fail.
_{Severity: CRITICAL | Confidence: High}

🔍 Detailed Analysis

The Gemfile specifies a version requirement for the aws-sdk-s3 gem as >= 1.208.0. However, the latest publicly available version of this gem is 1.206.0. As a result, the dependency resolver (bundler) will be unable to find a matching version, causing the bundle install command to fail. This will prevent the application from being deployed or its dependencies from being updated successfully.

💡 Suggested Fix

Update the version constraint for aws-sdk-s3 to a version that exists, such as >= 1.206.0 or another appropriate version that meets the requirements. After changing the Gemfile, run bundle install to update the Gemfile.lock accordingly.

🤖 Prompt for AI Agent

Review the code at the location below. A potential bug has been identified by an AI
agent.
Verify if this is a real issue. If it is, propose a fix; if not, explain why it's not
valid.

Location: Gemfile#L45

Potential issue: The `Gemfile` specifies a version requirement for the `aws-sdk-s3` gem
as `>= 1.208.0`. However, the latest publicly available version of this gem is
`1.206.0`. As a result, the dependency resolver (`bundler`) will be unable to find a
matching version, causing the `bundle install` command to fail. This will prevent the
application from being deployed or its dependencies from being updated successfully.

_{Did we get this right? 👍 / 👎 to inform future reviews.
Reference ID: 7787928}