Merge pull request #144 from uswitch/AIRSHIP-4060/snyk-vulnerabilities

AIRSHIP-4060/snyk-vulnerabilities: upgrade ruby and deps

Author: mnecchi

.github/workflows/push.yaml

@@ -17,7 +17,7 @@ jobs:
       - uses: ruby/setup-ruby@v1
         with:
           bundler-cache: true
-          ruby-version: 3.2.2
+          ruby-version: 3.4.8
       - run: bundle install
       - run: rake spec
 
@@ -29,7 +29,7 @@ jobs:
       - uses: ruby/setup-ruby@v1
         with:
           bundler-cache: true
-          ruby-version: 3.2.2
+          ruby-version: 3.4.8
       - run: rake version
       - run: rake build
       - uses: actions/upload-artifact@v4

.github/workflows/tag.yaml

@@ -19,7 +19,7 @@ jobs:
       - uses: ruby/setup-ruby@v1
         with:
           bundler-cache: true
-          ruby-version: 3.2.2
+          ruby-version: 3.4.8
       - run: rake version
       - run: rake build
       - uses: actions/upload-artifact@v4
@@ -40,7 +40,7 @@ jobs:
       - uses: ruby/setup-ruby@v1
         with:
           bundler-cache: true
-          ruby-version: 3.2.2
+          ruby-version: 3.4.8
       - uses: actions/download-artifact@v4
         with:
           name: pkg

.ruby-version

@@ -1 +1 @@
-3.2.2
+3.4.8

.tool-versions

@@ -0,0 +1 @@
+ruby 3.4.8

Dockerfile

@@ -1,4 +1,4 @@
-FROM ruby:3.2.2-alpine3.18
+FROM ruby:3.4.8-alpine3.23
 
 ARG TERRAFYING_VERSION=0.0.0
 
@@ -10,12 +10,12 @@ RUN wget -O terraform.zip https://releases.hashicorp.com/terraform/0.11.14/terra
 
 COPY pkg /tmp
 
-RUN apk add --update --no-cache --virtual .terra-builddeps build-base ruby-dev \
- && apk add --update --no-cache --virtual .terra-rundeps git bash \
- && gem install /tmp/terrafying-${TERRAFYING_VERSION}.gem \
- && install -d /terra \
- && apk del .terra-builddeps \
- && rm -rf /var/cache/apk/*
+RUN apk add --update --no-cache --virtual .terra-builddeps build-base ruby-dev
+RUN apk add --update --no-cache --virtual .terra-rundeps git bash
+RUN gem install /tmp/terrafying-${TERRAFYING_VERSION}.gem
+RUN install -d /terra
+RUN apk del .terra-builddeps
+RUN rm -rf /var/cache/apk/*
 
 WORKDIR /terra
 

terrafying.gemspec

@@ -39,5 +39,5 @@ Gem::Specification.new do |spec|
   spec.add_runtime_dependency 'deep_merge', '~> 1.1.1'
   spec.add_runtime_dependency 'netaddr', '~> 1.5'
   spec.add_runtime_dependency 'thor', '~> 1.4.0'
-  spec.add_runtime_dependency 'xxhash', '~> 0.4.0'
+  spec.add_runtime_dependency 'xxhash', '~> 0.7.0'
 end