Add patch to bump rubyzip

debian/patches/0760-bump-rubyzip.patch

@@ -0,0 +1,36 @@
+Description: This patch bumps rubyzip to 2.0.
+Author: Utkarsh Gupta <guptautkarsh2102@gmail.com>
+Bug-Debian: https://bugs.debian.org/944906
+Last-Update: 2019-11-19
+
+--- a/Gemfile
++++ b/Gemfile
+@@ -61,7 +61,7 @@
+ 
+ # GitLab Pages
+ gem 'validates_hostname', '~> 1.0', '>= 1.0.6'
+-gem 'rubyzip', '~> 1.2', '>= 1.2.2', require: 'zip'
++gem 'rubyzip', '~> 2.0', '>= 2.0.0', require: 'zip'
+ # GitLab Pages letsencrypt support
+ gem 'acme-client', '~> 2.0', '>= 2.0.2'
+ 
+--- a/Gemfile.lock
++++ b/Gemfile.lock
+@@ -845,7 +845,7 @@
+       sexp_processor (~> 4.9)
+     rubyntlm (0.6.2)
+     rubypants (0.2.0)
+-    rubyzip (1.2.2)
++    rubyzip (2.0.0)
+     rugged (0.28.3.1)
+     safe_yaml (1.0.4)
+     sanitize (4.6.6)
+@@ -1220,7 +1220,7 @@
+   ruby-prof (~> 0.17.0)
+   ruby-progressbar
+   ruby_parser (~> 3.8)
+-  rubyzip (~> 1.2.2)
++  rubyzip (~> 2.0.0)
+   rugged (~> 0.28)
+   sanitize (~> 4.6)
+   sassc-rails (~> 2.1.0)

debian/patches/series

@@ -25,3 +25,4 @@
 0730-install-graphql-tag.patch
 0740-use-packaged-modules.patch
 0750-fix-relative-paths.patch
+0760-bump-rubyzip.patch