Update Ruby to 3.1.4 (CVE) (#12305)

* Upgrade to Ruby 3.1.4 * Use PR for ruby/setup-ruby GHA
department-of-veterans-affairs · Mar 31, 2023 · 91e0ec9 · 91e0ec9
1 parent d7bf6a4
commit 91e0ec9
Show file tree

Hide file tree

Showing 6 changed files with 8 additions and 7 deletions.
diff --git a/.github/workflows/code_checks.yml b/.github/workflows/code_checks.yml
@@ -12,7 +12,8 @@ jobs:
     steps:
       - uses: actions/checkout@v3
 
-      - uses: ruby/setup-ruby@v1
+      # Lock back to an @v1-version once https://github.com/ruby/setup-ruby/pull/491 is merged
+      - uses: ruby/setup-ruby@5dd9cb06655f300c93ea885847ed649645656ba0
         with:
           bundler-cache: true
 

diff --git a/.ruby-version b/.ruby-version
@@ -1 +1 @@
-3.1.3
+3.1.4
diff --git a/Dockerfile b/Dockerfile
@@ -2,7 +2,7 @@
 #      stretch (or in alpine) and is switched automatically to pdftk-java in buster
 #      https://github.com/department-of-veterans-affairs/va.gov-team/issues/3032
 
-FROM ruby:3.1.3-slim-bullseye AS modules
+FROM ruby:3.1.4-slim-bullseye AS modules
 
 WORKDIR /tmp
 
@@ -14,7 +14,7 @@ RUN find modules -type f ! \( -name Gemfile -o -name "*.gemspec" -o -path "*/lib
 ###
 # shared build/settings for all child images, reuse these layers yo
 ###
-FROM ruby:3.1.3-slim-bullseye AS base
+FROM ruby:3.1.4-slim-bullseye AS base
 
 ARG userid=993
 SHELL ["/bin/bash", "-c"]

diff --git a/Gemfile b/Gemfile
@@ -2,7 +2,7 @@
 
 source 'https://rubygems.org'
 
-ruby '~> 3.1.3'
+ruby '~> 3.1.4'
 
 # Modules
 path 'modules' do

diff --git a/Gemfile.lock b/Gemfile.lock
@@ -1216,7 +1216,7 @@ DEPENDENCIES
   yard
 
 RUBY VERSION
-   ruby 3.1.3p185
+   ruby 3.1.4p223
 
 BUNDLED WITH
    2.4.10
diff --git a/docs/setup/native.md b/docs/setup/native.md
@@ -2,7 +2,7 @@
 
 Vets API requires:
 
-- Ruby 3.1.3
+- Ruby 3.1.4
 - PostgreSQL 11.x (including PostGIS 2.5)
 - Redis 5.0.x