fix: upgrade Ruby to 3.2.4 to address CVE

department-of-veterans-affairs · Apr 26, 2024 · c426d1c · c426d1c
1 parent e76f788
commit c426d1c
Show file tree

Hide file tree

Showing 6 changed files with 6 additions and 6 deletions.
diff --git a/.ruby-version b/.ruby-version
@@ -1 +1 @@
-3.2.3
+3.2.4
diff --git a/Dockerfile b/Dockerfile
@@ -1,4 +1,4 @@
-FROM ruby:3.2.3-slim-bookworm as rubyimg
+FROM ruby:3.2.4-slim-bookworm as rubyimg
 
 # XXX: using stretch here for pdftk dep, which is not availible after
 #      stretch (or in alpine) and is switched automatically to pdftk-java in buster

diff --git a/Dockerfile-k8s b/Dockerfile-k8s
@@ -1,4 +1,4 @@
-FROM ruby:3.2.3-slim-bullseye AS rubyimg
+FROM ruby:3.2.4-slim-bullseye AS rubyimg
 FROM rubyimg AS modules
 
 WORKDIR /tmp

diff --git a/Gemfile b/Gemfile
@@ -2,7 +2,7 @@
 
 source 'https://rubygems.org'
 
-ruby '~> 3.2.3'
+ruby '~> 3.2.4'
 
 # Modules
 path 'modules' do

diff --git a/Gemfile.lock b/Gemfile.lock
@@ -1280,7 +1280,7 @@ DEPENDENCIES
   yard
 
 RUBY VERSION
-   ruby 3.2.3p157
+   ruby 3.2.4p170
 
 BUNDLED WITH
    2.4.9
diff --git a/docs/setup/native.md b/docs/setup/native.md
@@ -2,7 +2,7 @@
 
 Vets API requires:
 
-- Ruby 3.2.3
+- Ruby 3.2.4
 - PostgreSQL 15.x (including PostGIS 3)
 - Redis 6.2.x