Skip to content

Conversation

@boost-tim
Copy link
Contributor

As Dan, I want Ruby up to date on the supplejack_common, so that we are safe and secure from CVE's

Acceptance Criteria
-Rails is running on the latest Ruby (3.4.5 at the time of writing)
-The app using the latest Alpine version available for that ruby version
-NodeJS is upgraded to the version available on that Alpine version

Risks
?

Notes
-Upgrading Ruby will upgrade the Alpine version we're on and the NodeJS version too. This will help to avoid CVEs
-This might be the previous upgrade 157787

@boost-tim boost-tim requested a review from hapiben June 13, 2025 01:52
@github-actions
Copy link

Code quality score

Lovely, the code quality is unchanged for this PR 😊

Ruby file count Similarity score (flay) ABC complexity (flog) Code smells (reek) TOTALS
base 62 0.16 6.0 20.0 26.16
this branch 62 0.16 6.0 20.0 26.16
difference 0 0.0 0.0 0.0 0.0

@hapiben
Copy link
Member

hapiben commented Jun 13, 2025

There might be other areas where we use 3.2.2 for example: https://github.com/DigitalNZ/supplejack_common/blob/main/.github/workflows/test.yml

@boost-tim boost-tim merged commit 491d088 into main Jun 16, 2025
8 checks passed
@boost-tim boost-tim deleted the tw/upgrade-ruby branch June 16, 2025 22:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants