Merge branch 'ignore-rails-cves' into 'master'

Ignore two Rails CVEs in bundler:audit job

See merge request !9456

.gitlab-ci.yml

@@ -281,7 +281,7 @@ bundler:audit:
     - master@gitlab/gitlabhq
     - master@gitlab/gitlab-ee
   script:
-    - "bundle exec bundle-audit check --update --ignore OSVDB-115941"
+    - "bundle exec bundle-audit check --update --ignore OSVDB-115941 CVE-2016-6316 CVE-2016-6317"
 migration paths:
   stage: test