Adding grape-middleware-logger gem, and version updates for fixing security vulnerabilities. (CredentialEngine#925)

* Adding grape-middleware-logger gem, and version updates for fixing security vulnerabilities.
* Update gemfile.lock
* Update dockerfile.
* Update bundler version.

Author: rohit-joy

Dockerfile

@@ -266,7 +266,7 @@ RUN set -eux; \
 FROM registry.access.redhat.com/ubi10/ubi-micro:10.0-1754556444
 
 ENV APP_PATH=/app/
-ARG RUBY_VERSION=3.4.3
+ARG RUBY_VERSION=3.4.6
 ENV PATH="/usr/local/bin:$PATH"
 ENV LD_LIBRARY_PATH="/usr/lib64:/lib64:/usr/local/lib"
 ENV OPENSSL_MODULES="/usr/lib64/ossl-modules"
@@ -289,5 +289,84 @@ RUN set -eux; \
 USER 1000
 
 ENTRYPOINT ["/usr/bin/docker-entrypoint.sh"]
-
 EXPOSE 9292
+
+# Auto-collect shared library dependencies for Ruby, native gems, and psql
+RUN set -eux; \
+    mkdir -p /runtime/usr/lib64; \
+    targets="/usr/local/bin/ruby /usr/bin/psql /usr/bin/pg_dump /usr/bin/pg_restore"; \
+    if [ -d "$APP_PATH/vendor/bundle" ]; then \
+    sofiles=$(find "$APP_PATH/vendor/bundle" -type f -name "*.so" || true); \
+    targets="$targets $sofiles"; \
+    fi; \
+    for t in $targets; do \
+    [ -f "$t" ] || continue; \
+    ldd "$t" | awk '/=> \/|\//{print $3}' | sed -e 's/(0x[0-9a-fA-F]\+)//g' | grep -E '^/' || true; \
+    done | sort -u | while read -r lib; do \
+    [ -f "$lib" ] || continue; \
+    cp -a "$lib" /runtime/usr/lib64/ 2>/dev/null || true; \
+    done
+RUN set -eux; \
+    # Copy commonly required runtime shared libraries (no loop)
+    cp -a /usr/lib64/libpq.so.*            /runtime/usr/lib64/ 2>/dev/null || true; \
+    cp -a /usr/lib64/libssl.so.*           /runtime/usr/lib64/ 2>/dev/null || true; \
+    cp -a /usr/lib64/libcrypto.so.*        /runtime/usr/lib64/ 2>/dev/null || true; \
+    cp -a /usr/lib64/libcrypt.so.*         /runtime/usr/lib64/ 2>/dev/null || true; \
+    cp -a /lib64/libcrypt.so.*             /runtime/usr/lib64/ 2>/dev/null || true; \
+    cp -a /usr/lib64/libgssapi_krb5.so.*   /runtime/usr/lib64/ 2>/dev/null || true; \
+    cp -a /usr/lib64/libkrb5.so.*          /runtime/usr/lib64/ 2>/dev/null || true; \
+    cp -a /usr/lib64/libkrb5support.so.*   /runtime/usr/lib64/ 2>/dev/null || true; \
+    cp -a /usr/lib64/libk5crypto.so.*      /runtime/usr/lib64/ 2>/dev/null || true; \
+    cp -a /usr/lib64/libcom_err.so.*       /runtime/usr/lib64/ 2>/dev/null || true; \
+    cp -a /usr/lib64/libldap.so.*          /runtime/usr/lib64/ 2>/dev/null || true; \
+    cp -a /usr/lib64/liblber.so.*          /runtime/usr/lib64/ 2>/dev/null || true; \
+    cp -a /usr/lib64/libsasl2.so.*         /runtime/usr/lib64/ 2>/dev/null || true; \
+    cp -a /lib64/libgssapi_krb5.so.*       /runtime/usr/lib64/ 2>/dev/null || true; \
+    cp -a /lib64/libkrb5.so.*              /runtime/usr/lib64/ 2>/dev/null || true; \
+    cp -a /lib64/libkrb5support.so.*       /runtime/usr/lib64/ 2>/dev/null || true; \
+    cp -a /lib64/libk5crypto.so.*          /runtime/usr/lib64/ 2>/dev/null || true; \
+    cp -a /lib64/libcom_err.so.*           /runtime/usr/lib64/ 2>/dev/null || true; \
+    cp -a /lib64/libldap*.so.*             /runtime/usr/lib64/ 2>/dev/null || true; \
+    cp -a /lib64/liblber.so.*              /runtime/usr/lib64/ 2>/dev/null || true; \
+    cp -a /lib64/libsasl2.so.*             /runtime/usr/lib64/ 2>/dev/null || true; \
+    cp -a /usr/lib64/libkeyutils.so.*      /runtime/usr/lib64/ 2>/dev/null || true; \
+    cp -a /lib64/libkeyutils.so.*          /runtime/usr/lib64/ 2>/dev/null || true; \
+    cp -a /usr/lib64/libevent-*.so*        /runtime/usr/lib64/ 2>/dev/null || true; \
+    cp -a /lib64/libevent-*.so*            /runtime/usr/lib64/ 2>/dev/null || true; \
+    cp -a /usr/lib64/liblz4.so.*           /runtime/usr/lib64/ 2>/dev/null || true; \
+    cp -a /lib64/liblz4.so.*               /runtime/usr/lib64/ 2>/dev/null || true; \
+    cp -a /usr/lib64/libyaml-0.so.*        /runtime/usr/lib64/ 2>/dev/null || true; \
+    cp -a /usr/lib64/libreadline.so.*      /runtime/usr/lib64/ 2>/dev/null || true; \
+    cp -a /usr/lib64/libncursesw.so.*      /runtime/usr/lib64/ 2>/dev/null || true; \
+    cp -a /usr/lib64/libz.so.*             /runtime/usr/lib64/ 2>/dev/null || true; \
+    cp -a /usr/lib64/libzstd.so.*          /runtime/usr/lib64/ 2>/dev/null || true; \
+    cp -a /usr/lib64/libgmp.so.*           /runtime/usr/lib64/ 2>/dev/null || true; \
+    cp -a /usr/lib64/libffi.so.*           /runtime/usr/lib64/ 2>/dev/null || true; \
+    cp -a /usr/lib64/libgdbm.so.*          /runtime/usr/lib64/ 2>/dev/null || true; \
+    # App
+    cp -a $APP_PATH /runtime/app; \
+    # Timezone data for TZInfo
+    mkdir -p /runtime/usr/share && cp -a /usr/share/zoneinfo /runtime/usr/share/zoneinfo; \
+    chmod +x /tmp/docker-entrypoint.sh; cp /tmp/docker-entrypoint.sh /runtime/usr/bin/docker-entrypoint.sh
+
+# Runtime stage (UBI 10 micro)
+ENV PATH="/usr/local/bin:$PATH"
+ENV LD_LIBRARY_PATH="/usr/lib64:/lib64:/usr/local/lib"
+ENV OPENSSL_MODULES="/usr/lib64/ossl-modules"
+ENV OPENSSL_CONF="/etc/pki/tls/openssl.cnf"
+ENV HOME="/home/registry"
+ENV BUNDLE_PATH="/app/vendor/bundle"
+
+WORKDIR $APP_PATH
+
+# Copy runtime files from builder
+COPY --from=builder /runtime/ /
+
+# Create runtime user (ubi-micro lacks useradd)
+RUN set -eux; \
+    uid=1000; gid=1000; \
+    mkdir -p /home/registry; \
+    echo "registry:x:${uid}:${gid}:Registry User:/home/registry:/bin/sh" >> /etc/passwd; \
+    echo "registry:x:${gid}:" >> /etc/group; \
+    chown -R ${uid}:${gid} /app /home/registry
+USER 1000