From c8fb76cd51571459fe109e769a9a3c800e28430f Mon Sep 17 00:00:00 2001
From: aram price <aram.price@broadcom.com>
Date: Thu, 9 Apr 2026 14:20:17 -0700
Subject: [PATCH 1/3] CI: add bump-deps task for gems

- update ruby-version to 3.3; version 3.2 is out of support
---
 .ruby-version            |  2 +-
 ci/pipelines/builder.yml | 54 ++++++++++++++++++++++++++++++++++++++++
 2 files changed, 55 insertions(+), 1 deletion(-)

diff --git a/.ruby-version b/.ruby-version
index 944880fa15..eb39e5382f 100644
--- a/.ruby-version
+++ b/.ruby-version
@@ -1 +1 @@
-3.2.0
+3.3
diff --git a/ci/pipelines/builder.yml b/ci/pipelines/builder.yml
index 54b62fbde3..b15a323991 100644
--- a/ci/pipelines/builder.yml
+++ b/ci/pipelines/builder.yml
@@ -22,6 +22,7 @@ groups:
 
 - name: auto-bumps
   jobs:
+  - bump-deps
   - bump-bosh-agent
   #@ for blobstore_type in data.values.blobstore_types:
   - bump-bosh-blobstore-(@= blobstore_type @)
@@ -729,6 +730,40 @@ jobs:
       icon_url: https://i.imgur.com/A0Vlw5t.png
       text_file: slack-message/message
 
+- name: bump-deps
+  plan:
+    - in_parallel:
+        - get: bosh-linux-stemcell-builder
+        - get: bosh-stemcells-ci
+        - get: ruby-release
+        - get: bosh-ruby-release-registry-image
+        - get: weekly
+          trigger: true
+        - get: bosh-integration-image
+    - load_var: ruby_version
+      file: bosh-linux-stemcell-builder/.ruby-version
+      reveal: true
+    - task: bump-gems
+      image: bosh-ruby-release-registry-image
+      file: ruby-release/ci/tasks/shared/bump-gems.yml
+      input_mapping:
+        input-repo: bosh-linux-stemcell-builder
+      output_mapping:
+        output-repo: bosh-linux-stemcell-builder
+      params:
+        GIT_USER_NAME: CI Bot
+        GIT_USER_EMAIL: bots@cloudfoundry.org
+        PACKAGE: ruby-((.:ruby_version))
+        VENDOR: true
+    - task: test-unit
+      file: bosh-stemcells-ci/ci/tasks/test-unit.yml
+      image: bosh-integration-image
+      privileged: true
+    - put: bosh-linux-stemcell-builder-push
+      params:
+        repository: bosh-linux-stemcell-builder
+        rebase: true
+
 - name: bump-bosh-agent
   plan:
   - get: bosh-agent
@@ -807,6 +842,14 @@ resources:
   source:
     initial_version: true
     interval: 24h
+- name: weekly
+  type: time
+  source:
+    start: 3:00 -0700
+    stop: 4:30 -0700
+    days:
+      - Saturday
+    initial_version: true
 
 - name: bosh-agent
   type: metalink-repository
@@ -1026,6 +1069,17 @@ resources:
   source:
     url: ((slack_hook_url))
 
+- name: bosh-ruby-release-registry-image
+  type: registry-image
+  source:
+    repository: bosh/ruby-release
+    username: ((dockerhub_username))
+    password: ((dockerhub_password))
+- name: ruby-release
+  type: git
+  source:
+    uri: https://github.com/cloudfoundry/bosh-package-ruby-release.git
+
 - name: ubuntu_base
   type: registry-image
   source:

From 66a988901d0a531c4854d048c82ee98cacc644b3 Mon Sep 17 00:00:00 2001
From: aram price <aram.price@broadcom.com>
Date: Thu, 9 Apr 2026 14:29:27 -0700
Subject: [PATCH 2/3] CI: add github action to test ruby

---
 .github/workflows/ruby.yml | 15 +++++++++++++++
 1 file changed, 15 insertions(+)
 create mode 100644 .github/workflows/ruby.yml

diff --git a/.github/workflows/ruby.yml b/.github/workflows/ruby.yml
new file mode 100644
index 0000000000..956f2f5a93
--- /dev/null
+++ b/.github/workflows/ruby.yml
@@ -0,0 +1,15 @@
+name: Run Specs
+on: [ push, pull_request ]
+
+jobs:
+  unit_specs:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v4
+      with: { lfs: true }
+    - uses: ruby/setup-ruby@v1
+    - name: test-bosh-stemcell
+      run: |
+        bundle install
+        bundle exec rspec
+      working-directory: bosh-stemcell/

From 027361bcda5c94ea6fdcc0ef07e5f86317d5dab7 Mon Sep 17 00:00:00 2001
From: aram price <aram.price@broadcom.com>
Date: Thu, 9 Apr 2026 14:29:55 -0700
Subject: [PATCH 3/3] CI: add dependabot to update github actions

---
 .github/dependabot.yml | 7 +++++++
 1 file changed, 7 insertions(+)
 create mode 100644 .github/dependabot.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000000..900df3257f
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,7 @@
+---
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "daily"