upgrade: ruby 4.0.2 → 4.0.3 and fix devcontainer base image (#6928)

* upgrade: ruby from 4.0.2 to 4.0.3 and fix devcontainer base image

The devcontainer base (ruby:dev-3.3-bookworm) shipped Ruby 3.3 while the
project pinned 4.0.2, so bundle install failed in codespaces. Bump the
base to dev-4.0-bookworm and align the project to 4.0.3 so codespace
builds don't need a slow rvm compile.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* pin bundler to 4.0.6 in bin/setup and Gemfile.lock

bin/setup previously installed whatever bundler version was latest and
then rewrote BUNDLED WITH via 'bundle update --bundler', so the lockfile
silently drifted whenever a developer ran setup. Pin to 4.0.6 — the
version Heroku supports for our Ruby — and drop the auto-rewrite step.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: compwron

.devcontainer/Dockerfile

@@ -1,2 +1,16 @@
-FROM mcr.microsoft.com/devcontainers/ruby:dev-3.3-bookworm
+FROM mcr.microsoft.com/devcontainers/ruby:dev-4.0-bookworm
 RUN apt-get update && apt-get install -y vim curl gpg postgresql postgresql-contrib tzdata imagemagick
+
+# The dev-4.0 tag tracks the latest Ruby 4.0.x patch, which may not match the
+# exact version pinned in .ruby-version. If it doesn't, install the pinned
+# version via rvm so Bundler is happy. When patch versions align, this is a
+# no-op and the build stays fast.
+USER vscode
+COPY --chown=vscode:vscode .ruby-version /tmp/.ruby-version
+RUN /bin/bash -lc '\
+    pinned="$(cat /tmp/.ruby-version)"; \
+    if ! ruby -v | grep -q "ruby $pinned"; then \
+      rvm install "$pinned" && rvm --default use "$pinned"; \
+    fi' \
+    && rm /tmp/.ruby-version
+USER root

.devcontainer/post-create.sh

@@ -3,9 +3,9 @@ RUBY_VERSION="$(cat .ruby-version | tr -d '\n')"
 # copy the file only if it doesn't already exist
 cp -n .devcontainer/.env.codespaces .env
 
-# If the project's required ruby version changes from 4.0.2, this command
+# If the project's required ruby version changes from 4.0.3, this command
 # will download and compile the correct version, but it will take a long time.
-if [ "$RUBY_VERSION" != "4.0.2" ]; then
+if [ "$RUBY_VERSION" != "4.0.3" ]; then
 	rvm install $RUBY_VERSION
 	rvm use $RUBY_VERSION
 	echo "Ruby $RUBY_VERSION installed"

.ruby-version

@@ -1 +1 @@
-4.0.2
+4.0.3

.tool-versions

@@ -1,2 +1,2 @@
-ruby 4.0.2
+ruby 4.0.3
 nodejs 24.13.0

Dockerfile

@@ -4,7 +4,7 @@ ARG ROOT=/usr/src/app/
 
 FROM node:24-alpine AS node-source
 
-FROM ruby:4.0.2-alpine AS build
+FROM ruby:4.0.3-alpine AS build
 ARG ROOT
 WORKDIR $ROOT
 
@@ -22,7 +22,7 @@ RUN bundle config set force_ruby_platform true
 COPY Gemfile* $ROOT
 RUN bundle install
 
-FROM ruby:4.0.2-alpine
+FROM ruby:4.0.3-alpine
 ARG ROOT
 WORKDIR $ROOT
 

Gemfile

@@ -2,7 +2,7 @@
 
 source "https://rubygems.org"
 
-ruby "4.0.2"
+ruby "4.0.3"
 gem "rails", "~> 7.2"
 
 gem "after_party" # Post-deployment tasks

Gemfile.lock

@@ -802,7 +802,7 @@ DEPENDENCIES
   wicked
 
 RUBY VERSION
-  ruby 4.0.2
+  ruby 4.0.3
 
 BUNDLED WITH
-  4.0.9
+  4.0.6

README.md

@@ -93,7 +93,7 @@ The complete [role description of a CASA volunteer](https://pgcasa.org/volunteer
 
 | Technology | Version |
 |---|---|
-| Ruby | 4.0.2 (see `.ruby-version`) |
+| Ruby | 4.0.3 (see `.ruby-version`) |
 | Rails | 7.2 |
 | PostgreSQL | 14+ |
 | Node.js | LTS/Krypton (see `.nvmrc`) |
@@ -131,7 +131,7 @@ Key libraries: [Hotwire Turbo](https://turbo.hotwired.dev/), [Stimulus](https://
 
 **Ruby**
 1. Install a ruby version manager: [rvm](https://rvm.io/) or [rbenv](https://github.com/rbenv/rbenv)
-1. when you cd into the project directory, let your version manager install the ruby version in `.ruby-version`. Right now that's Ruby 4.0.2
+1. when you cd into the project directory, let your version manager install the ruby version in `.ruby-version`. Right now that's Ruby 4.0.3
 1. `gem install bundler`
 
 **node.js**

bin/setup

@@ -21,8 +21,10 @@ FileUtils.chdir APP_ROOT do
 
   puts "\n== Installing dependencies =="
   system! 'gem install foreman'
-  system! 'gem install bundler --conservative'
-  system!('bundle update --bundler --verbose')
+  # Pin bundler to a version Heroku supports for our Ruby. Match Heroku's
+  # supported Ruby/Bundler pairings as they evolve:
+  # https://devcenter.heroku.com/articles/ruby-support-reference#supported-ruby-versions
+  system! 'gem install bundler -v 4.0.6 --conservative'
   system!('bundle check') || system!('bundle install')
 
   # puts '\n== Copying sample files =='

doc/LINUX_SETUP.md

@@ -84,7 +84,7 @@ git clone https://github.com/rbenv/rbenv.git ~/.rbenv
 #   fetch list of ruby versions
 git clone https://github.com/rbenv/ruby-build.git "$(rbenv root)"/plugins/ruby-build
 
-rbenv install 4.0.2
+rbenv install 4.0.3
 ```
 
 If you would like RVM instead of rbenv
@@ -95,9 +95,9 @@ gpg --keyserver hkp://pool.sks-keyservers.net --recv-keys 409B6B1796C275462A1703
 \curl -sSL https://get.rvm.io | bash
 . ./.bashrc
 rvm get head
-rvm install 4.0.2
-rvm alias create ruby 4.0.2
-rvm alias create default ruby-4.0.2
+rvm install 4.0.3
+rvm alias create ruby 4.0.3
+rvm alias create default ruby-4.0.3
 ```
 
 ```# Download the Chrome browser (for RSpec testing):