[AUTOPATCHER-CORE] Upgrade rubygem-concurrent-ruby to 1.3.7 for CVE-2026-54904, CVE-2026-54905, CVE-2026-54906 (microsoft#17836)

Author: CBL-Mariner-Bot

SPECS/rubygem-concurrent-ruby/rubygem-concurrent-ruby.signatures.json

@@ -1,5 +1,5 @@
 {
   "Signatures": {
-    "concurrent-ruby-1.2.2.tar.gz": "33d4b2282e38a96efe7c80a4149429fd1ca036c482ec7e499fc6a8f8db63ada3"
+    "concurrent-ruby-1.3.7.tar.gz": "a3ddf25559d8be9668d5f3cb64cf6542673f4a851f2e2d40203be44f2b23468f"
   }
 }

SPECS/rubygem-concurrent-ruby/rubygem-concurrent-ruby.spec

@@ -2,7 +2,7 @@
 %global gem_name concurrent-ruby
 Summary:        Modern concurrency tools for Ruby
 Name:           rubygem-concurrent-ruby
-Version:        1.2.2
+Version:        1.3.7
 Release:        1%{?dist}
 License:        MIT
 Vendor:         Microsoft Corporation
@@ -38,6 +38,9 @@ cp -r lib/ %{buildroot}%{gem_instdir}/
 %{gemdir}
 
 %changelog
+* Sun Jun 28 2026 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 1.3.7-1
+- Auto-upgrade to 1.3.7 - for CVE-2026-54904, CVE-2026-54905, CVE-2026-54906
+
 * Thu Nov 02 2023 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 1.2.2-1
 - Auto-upgrade to 1.2.2 - Azure Linux 3.0 - package upgrades
 

cgmanifest.json

@@ -26734,8 +26734,8 @@
         "type": "other",
         "other": {
           "name": "rubygem-concurrent-ruby",
-          "version": "1.2.2",
-          "downloadUrl": "https://github.com/ruby-concurrency/concurrent-ruby/archive/refs/tags/v1.2.2.tar.gz"
+          "version": "1.3.7",
+          "downloadUrl": "https://github.com/ruby-concurrency/concurrent-ruby/archive/refs/tags/v1.3.7.tar.gz"
         }
       }
     },