Bump cfn-model to 0.6.9

Gemfile.lock

@@ -3,7 +3,7 @@ PATH
   specs:
     cfn-nag (0.0.0)
       aws-sdk-s3 (~> 1.76)
-      cfn-model (= 0.6.6)
+      cfn-model (= 0.6.9)
       lightly (~> 0.3.2)
       logging (~> 2.2.2)
       netaddr (~> 2.0.4)
@@ -30,9 +30,9 @@ GEM
       aws-sigv4 (~> 1.4)
     aws-sigv4 (1.4.0)
       aws-eventstream (~> 1, >= 1.0.2)
-    cfn-model (0.6.6)
+    cfn-model (0.6.9)
       kwalify (= 0.7.2)
-      psych (~> 3)
+      psych (>= 3.1, < 5)
     diff-lcs (1.4.4)
     docile (1.3.5)
     jmespath (1.6.1)
@@ -48,7 +48,8 @@ GEM
     parallel (1.21.0)
     parser (3.0.2.0)
       ast (~> 2.4.1)
-    psych (3.3.2)
+    psych (4.0.5)
+      stringio
     rainbow (3.0.0)
     rake (13.0.1)
     regexp_parser (2.1.1)
@@ -84,6 +85,7 @@ GEM
       simplecov_json_formatter (~> 0.1)
     simplecov-html (0.12.3)
     simplecov_json_formatter (0.1.2)
+    stringio (3.0.2)
     unicode-display_width (2.1.0)
 
 PLATFORMS

cfn-nag.gemspec

@@ -27,7 +27,7 @@ Gem::Specification.new do |s|
   # versus what we used to run tests in cfn-nag before publishing cfn-nag
   # they are coupled and we are doing a good bit of experimenting in cfn-model
   # i might consider collapsing them again....
-  s.add_runtime_dependency('cfn-model', '0.6.6')
+  s.add_runtime_dependency('cfn-model', '0.6.9')
   s.add_runtime_dependency('logging', '~> 2.2.2')
   s.add_runtime_dependency('netaddr', '~> 2.0.4')
   s.add_runtime_dependency('optimist', '~> 3.0.0')