Separate audit workflow (#1333)

* Split bundle audit into separate workflow

* Only run gem audit if Gemfile(.lock) was changed, or every Monday @ 9AM

* Bump crass and msgpack

Author: fbacall

.github/workflows/audit.yml

@@ -0,0 +1,29 @@
+name: Gem audit
+
+on:
+  push:
+    paths:
+      - 'Gemfile*'
+  pull_request:
+    paths:
+      - 'Gemfile*'
+  schedule:
+    - cron: '0 9 * * 1'
+      timezone: 'Europe/London'
+
+jobs:
+  audit:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Install system dependencies
+        run: |
+          sudo apt-get update
+          sudo apt-get install imagemagick
+      - name: Check out code
+        uses: actions/checkout@v6
+      - name: Install Ruby & gems
+        uses: ruby/setup-ruby@v1
+        with:
+          bundler-cache: true
+      - name: Audit gems
+        run: bundle exec bundle-audit check --update

.github/workflows/test.yml

@@ -64,5 +64,3 @@ jobs:
         run: bundle exec rails test
       - name: Run system tests
         run: bundle exec rails test:system
-      - name: Audit gems
-        run: bundle exec bundle-audit check --update

Gemfile.lock

@@ -179,7 +179,7 @@ GEM
       countries (~> 5.0)
     crack (0.4.5)
       rexml
-    crass (1.0.6)
+    crass (1.0.7)
     csv (3.3.2)
     date (3.5.1)
     debug_inspector (1.1.0)
@@ -392,7 +392,7 @@ GEM
       monetize (~> 1.9)
       money (~> 6.13)
       railties (>= 3.0)
-    msgpack (1.7.2)
+    msgpack (1.8.3)
     multi_json (1.19.1)
     multi_xml (0.8.0)
       bigdecimal (>= 3.1, < 5)