Merge pull request #895 from Crown-Commercial-Service/snyk-fix-55d55dcc892051ffb0b8165066da90b9

[Snyk] Security upgrade ruby from 3.4.8-alpine to 3.4.9-alpine

Author: reemi1510

.github/workflows/ci.yml

@@ -37,7 +37,7 @@ jobs:
       - name: Set up Ruby
         uses: ruby/setup-ruby@v1
         with:
-          ruby-version: 3.4.8
+          ruby-version: 3.4.9
           bundler-cache: true
 
       - name: Run migrations

.ruby-version

@@ -1 +1 @@
-3.4.8
+3.4.9

Dockerfile

@@ -4,7 +4,7 @@
 # It also improves build times by caching the base stage.
 
 # Base stage
-FROM ruby:3.4.8-alpine AS base
+FROM ruby:3.4.9-alpine AS base
 RUN apk add build-base curl git yaml-dev libc-utils libpq-dev nodejs tzdata && rm -rf /var/cache/apk/*
 
 # Set locale and timezone
@@ -52,7 +52,7 @@ COPY . $INSTALL_PATH
 RUN bundle exec rake AWS_ACCESS_KEY_ID=dummy AWS_SECRET_ACCESS_KEY=dummy AWS_S3_REGION=dummy AWS_S3_BUCKET=dummy SECRET_KEY_BASE=dummy DATABASE_URL=postgresql:does_not_exist --quiet assets:precompile
 
 # Runtime stage
-FROM ruby:3.4.8-alpine
+FROM ruby:3.4.9-alpine
 ENV INSTALL_PATH /srv/dss
 RUN mkdir -p $INSTALL_PATH
 

Gemfile

@@ -1,7 +1,7 @@
 source 'https://rubygems.org'
 git_source(:github) { |repo| "https://github.com/#{repo}.git" }
 
-ruby '3.4.8'
+ruby '3.4.9'
 
 # Bundle edge Rails instead: gem 'rails', github: 'rails/rails'
 gem 'rails', '~> 8.1', '>= 8.1.2.1'

Gemfile.lock

@@ -582,7 +582,7 @@ DEPENDENCIES
   webmock (~> 3.17.0)
 
 RUBY VERSION
-   ruby 3.4.8p72
+   ruby 3.4.9p82
 
 BUNDLED WITH
    2.6.9