From 51ddb42bc75f3516e1c224209f050e5caf2e814a Mon Sep 17 00:00:00 2001 From: Dan Milne Date: Sun, 19 Jul 2026 16:00:41 +1000 Subject: [PATCH] Bump Ruby to 4.0.6 and update gems Updates the bundle (bundle update), most importantly crass 1.0.6 -> 1.0.7, which clears the four ruby-advisory-db advisories (GHSA-6jxj-px6v-747w, GHSA-6wmf-3r64-vcwv, GHSA-8vfg-2r28-hvhj, GHSA-wwpr-jff3-395c) that were failing CI's bundler-audit (scan_ruby) step. Also bumps .ruby-version and the Dockerfile build arg from 4.0.5 to 4.0.6. Co-Authored-By: Claude Opus 4.8 Claude-Session: https://claude.ai/code/session_01DUaWqESTbUEdSi9erQ3jgt --- .ruby-version | 2 +- Dockerfile | 2 +- Gemfile.lock | 85 ++++++++++++++++++++++++--------------------------- 3 files changed, 42 insertions(+), 47 deletions(-) diff --git a/.ruby-version b/.ruby-version index 7636e75..d13e837 100644 --- a/.ruby-version +++ b/.ruby-version @@ -1 +1 @@ -4.0.5 +4.0.6 diff --git a/Dockerfile b/Dockerfile index 87f7b2c..e586148 100644 --- a/Dockerfile +++ b/Dockerfile @@ -8,7 +8,7 @@ # For a containerized dev environment, see Dev Containers: https://guides.rubyonrails.org/getting_started_with_devcontainer.html # Make sure RUBY_VERSION matches the Ruby version in .ruby-version -ARG RUBY_VERSION=4.0.5 +ARG RUBY_VERSION=4.0.6 FROM docker.io/library/ruby:$RUBY_VERSION-slim AS base LABEL org.opencontainers.image.source=https://github.com/dkam/clinch diff --git a/Gemfile.lock b/Gemfile.lock index 702fd67..2d8b3bf 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -111,16 +111,15 @@ GEM cose (1.3.1) cbor (~> 0.5.9) openssl-signature_algorithm (~> 1.0) - crass (1.0.6) + crass (1.0.7) date (3.5.1) debug (1.11.1) irb (~> 1.10) reline (>= 0.3.8) - docile (1.4.1) dotenv (3.2.0) drb (2.2.3) ed25519 (1.4.0) - erb (6.0.4) + erb (6.0.5) erubi (1.13.1) et-orbi (1.4.0) tzinfo @@ -131,10 +130,10 @@ GEM ffi (1.17.4-arm64-darwin) ffi (1.17.4-x86_64-linux-gnu) ffi (1.17.4-x86_64-linux-musl) - fugit (1.12.2) + fugit (1.13.0) et-orbi (~> 1.4) raabro (~> 1.4) - globalid (1.3.0) + globalid (1.4.0) activesupport (>= 6.1) i18n (1.15.2) concurrent-ruby (~> 1.0) @@ -154,7 +153,7 @@ GEM jbuilder (2.15.1) actionview (>= 7.0.0) activesupport (>= 7.0.0) - json (2.19.9) + json (2.21.1) jwt (3.2.0) base64 kamal (2.12.0) @@ -168,7 +167,7 @@ GEM sshkit (>= 1.23.0, < 2.0) thor (~> 1.3) zeitwerk (>= 2.6.18, < 3.0) - language_server-protocol (3.17.0.5) + language_server-protocol (3.17.0.6) launchy (3.1.1) addressable (~> 2.8) childprocess (~> 5.0) @@ -177,10 +176,10 @@ GEM launchy (>= 2.2, < 4) lint_roller (1.1.0) logger (1.7.0) - loofah (2.25.1) + loofah (2.25.2) crass (~> 1.0.2) nokogiri (>= 1.12.0) - mail (2.9.0) + mail (2.9.1) logger mini_mime (>= 0.1.1) net-imap @@ -188,7 +187,7 @@ GEM net-smtp marcel (1.2.1) matrix (0.4.3) - mini_magick (5.3.1) + mini_magick (5.3.2) logger mini_mime (1.1.5) minitest (5.27.0) @@ -206,7 +205,7 @@ GEM net-ssh (>= 5.0.0, < 8.0.0) net-smtp (0.5.1) net-protocol - net-ssh (7.3.2) + net-ssh (7.3.3) nio4r (2.7.5) nokogiri (1.19.4-aarch64-linux-gnu) racc (~> 1.4) @@ -227,10 +226,10 @@ GEM openssl (> 2.0) ostruct (0.6.3) parallel (2.1.0) - parser (3.3.11.1) + parser (3.3.12.0) ast (~> 2.4.1) racc - pp (0.6.3) + pp (0.6.4) prettyprint prettyprint (0.2.0) prism (1.9.0) @@ -238,9 +237,6 @@ GEM actionpack (>= 7.0.0) activesupport (>= 7.0.0) rack - psych (5.4.0) - date - stringio public_suffix (7.0.5) puma (8.0.2) nio4r (~> 2.0) @@ -272,8 +268,8 @@ GEM activesupport (>= 5.0.0) minitest nokogiri (>= 1.6) - rails-html-sanitizer (1.7.0) - loofah (~> 2.25) + rails-html-sanitizer (1.7.1) + loofah (~> 2.25, >= 2.25.2) nokogiri (>= 1.15.7, != 1.16.7, != 1.16.6, != 1.16.5, != 1.16.4, != 1.16.3, != 1.16.2, != 1.16.1, != 1.16.0.rc1, != 1.16.0) railties (8.1.3) actionpack (= 8.1.3) @@ -286,9 +282,14 @@ GEM zeitwerk (~> 2.6) rainbow (3.1.1) rake (13.4.2) - rdoc (7.2.0) + rbs (4.0.3) + logger + prism (>= 1.6.0) + tsort + rdoc (8.0.0) erb - psych (>= 4.0.0) + prism (>= 1.6.0) + rbs (>= 4.0.0) tsort regexp_parser (2.12.0) reline (0.6.3) @@ -299,7 +300,7 @@ GEM chunky_png (~> 1.0) rqrcode_core (~> 2.0) rqrcode_core (2.1.0) - rubocop (1.87.0) + rubocop (1.88.2) json (~> 2.3) language_server-protocol (~> 3.17.0.2) lint_roller (~> 1.1.0) @@ -310,7 +311,7 @@ GEM rubocop-ast (>= 1.49.0, < 2.0) ruby-progressbar (~> 1.7) unicode-display_width (>= 2.4.0, < 4.0) - rubocop-ast (1.49.1) + rubocop-ast (1.50.0) parser (>= 3.3.7.2) prism (~> 1.7) rubocop-performance (1.26.1) @@ -321,11 +322,11 @@ GEM ruby-vips (2.3.0) ffi (~> 1.12) logger - rubyzip (3.4.0) + rubyzip (3.4.1) safety_net_attestation (0.5.0) jwt (>= 2.0, < 4.0) securerandom (0.4.1) - selenium-webdriver (4.45.0) + selenium-webdriver (4.46.0) base64 (~> 0.2) logger (~> 1.4) rexml (~> 3.2, >= 3.2.5) @@ -338,13 +339,8 @@ GEM bigdecimal concurrent-ruby (~> 1.0, >= 1.0.2) logger - simplecov (0.22.0) - docile (~> 1.1) - simplecov-html (~> 0.11) - simplecov_json_formatter (~> 0.1) - simplecov-html (0.13.2) - simplecov_json_formatter (0.1.4) - solid_cable (4.0.0) + simplecov (1.0.2) + solid_cable (4.0.2) actioncable (>= 7.2) activejob (>= 7.2) activerecord (>= 7.2) @@ -374,10 +370,10 @@ GEM net-sftp (>= 2.1.2) net-ssh (>= 2.8.0) ostruct - standard (1.55.0) + standard (1.56.0) language_server-protocol (~> 3.17.0.2) lint_roller (~> 1.0) - rubocop (~> 1.87.0) + rubocop (~> 1.88.0) standard-custom (~> 1.0.0) standard-performance (~> 1.8) standard-custom (1.0.2) @@ -388,21 +384,20 @@ GEM rubocop-performance (~> 1.26.0) stimulus-rails (1.3.4) railties (>= 6.0.0) - stringio (3.2.0) tailwindcss-rails (4.6.0) railties (>= 7.0.0) tailwindcss-ruby (~> 4.0) - tailwindcss-ruby (4.3.1) - tailwindcss-ruby (4.3.1-aarch64-linux-gnu) - tailwindcss-ruby (4.3.1-aarch64-linux-musl) - tailwindcss-ruby (4.3.1-arm64-darwin) - tailwindcss-ruby (4.3.1-x86_64-linux-gnu) - tailwindcss-ruby (4.3.1-x86_64-linux-musl) + tailwindcss-ruby (4.3.2) + tailwindcss-ruby (4.3.2-aarch64-linux-gnu) + tailwindcss-ruby (4.3.2-aarch64-linux-musl) + tailwindcss-ruby (4.3.2-arm64-darwin) + tailwindcss-ruby (4.3.2-x86_64-linux-gnu) + tailwindcss-ruby (4.3.2-x86_64-linux-musl) thor (1.5.0) - thruster (0.1.21) - thruster (0.1.21-aarch64-linux) - thruster (0.1.21-arm64-darwin) - thruster (0.1.21-x86_64-linux) + thruster (0.1.23) + thruster (0.1.23-aarch64-linux) + thruster (0.1.23-arm64-darwin) + thruster (0.1.23-x86_64-linux) timeout (0.6.1) tpm-key_attestation (0.14.1) bindata (~> 2.4) @@ -432,7 +427,7 @@ GEM safety_net_attestation (~> 0.5.0) tpm-key_attestation (~> 0.14.0) websocket (1.2.11) - websocket-driver (0.8.1) + websocket-driver (0.8.2) base64 websocket-extensions (>= 0.1.0) websocket-extensions (0.1.5)