From a1c45fcb2186c604f643f1ac2871be044af2290d Mon Sep 17 00:00:00 2001 From: dadachi Date: Fri, 17 Jul 2026 20:30:50 +0900 Subject: [PATCH] Update Ruby to 4.0.6 and update gems - Bump Ruby 4.0.3 -> 4.0.6 - bundle update: includes faraday 2.14.3, fixing CVE-2026-54297 (GHSA-98m9-hrrm-r99r) flagged by bundler-audit, which was failing the scan_ruby CI check on all open Dependabot PRs Co-Authored-By: Claude Fable 5 Claude-Session: https://claude.ai/code/session_01J6rAaUbYuFz9YZrZTN6Pz2 --- .ruby-version | 2 +- Gemfile.lock | 116 +++++++++++++++++++++++++------------------------- 2 files changed, 59 insertions(+), 59 deletions(-) diff --git a/.ruby-version b/.ruby-version index c4e41f9..d13e837 100644 --- a/.ruby-version +++ b/.ruby-version @@ -1 +1 @@ -4.0.3 +4.0.6 diff --git a/Gemfile.lock b/Gemfile.lock index 643d5f5..1431d91 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -1,7 +1,7 @@ GEM remote: https://rubygems.org/ specs: - aasm (5.5.2) + aasm (6.0.0) concurrent-ruby (~> 1.0) action_push_native (0.3.1) activejob (>= 8.0) @@ -105,7 +105,7 @@ GEM bindex (0.8.1) bootsnap (1.24.6) msgpack (~> 1.2) - brakeman (8.0.4) + brakeman (8.0.5) racc builder (3.3.0) bundler-audit (0.9.3) @@ -123,7 +123,7 @@ GEM childprocess (5.1.0) logger (~> 1.5) chronic (0.10.2) - concurrent-ruby (1.3.6) + concurrent-ruby (1.3.7) config (5.6.1) deep_merge (~> 1.2, >= 1.2.1) ostruct @@ -131,7 +131,7 @@ GEM crack (1.0.1) bigdecimal rexml - crass (1.0.6) + crass (1.0.7) csv (3.3.5) date (3.5.1) debug (1.11.1) @@ -149,7 +149,7 @@ GEM devise (> 3.5.2, < 5) rails (>= 4.2.0, < 8.2) drb (2.2.3) - erb (6.0.4) + erb (6.0.5) erb_lint (0.9.0) activesupport better_html (>= 2.0.1) @@ -160,11 +160,11 @@ GEM erubi (1.13.1) et-orbi (1.4.0) tzinfo - faraday (2.14.2) + faraday (2.14.3) faraday-net_http (>= 2.0, < 3.5) json logger - faraday-net_http (3.4.3) + faraday-net_http (3.4.4) net-http (~> 0.5) ffi (1.17.4-aarch64-linux-gnu) ffi (1.17.4-arm-linux-gnu) @@ -172,32 +172,32 @@ GEM ffi (1.17.4-x86-linux-gnu) ffi (1.17.4-x86_64-darwin) ffi (1.17.4-x86_64-linux-gnu) - fugit (1.12.1) + fugit (1.13.0) et-orbi (~> 1.4) raabro (~> 1.4) - globalid (1.3.0) + globalid (1.4.0) activesupport (>= 6.1) - google-cloud-env (2.3.1) + google-cloud-env (2.4.0) base64 (~> 0.2) faraday (>= 1.0, < 3.a) google-logging-utils (0.2.0) - googleauth (1.16.2) + googleauth (1.17.1) faraday (>= 1.0, < 3.a) google-cloud-env (~> 2.2) google-logging-utils (~> 0.1) jwt (>= 1.4, < 4.0) - multi_json (~> 1.11) os (>= 0.9, < 2.0) + pstore (~> 0.1) signet (>= 0.16, < 2.a) hashdiff (1.2.1) - http-2 (1.1.3) + http-2 (1.2.1) httparty (0.24.2) csv mini_mime (>= 1.0.0) multi_xml (>= 0.5.2) - httpx (1.7.8) - http-2 (>= 1.1.3) - i18n (1.14.8) + httpx (1.8.0) + http-2 (>= 1.2.0) + i18n (1.15.2) concurrent-ruby (~> 1.0) image_processing (2.0.2) importmap-rails (2.2.3) @@ -211,15 +211,15 @@ GEM prism (>= 1.3.0) rdoc (>= 4.0.0) reline (>= 0.4.2) - json (2.19.8) + json (2.21.1) jsonapi-serializer (2.2.0) activesupport (>= 4.2) jwt (3.2.0) base64 - language_server-protocol (3.17.0.5) + language_server-protocol (3.17.0.6) lint_roller (1.1.0) logger (1.7.0) - loofah (2.25.1) + loofah (2.25.2) crass (~> 1.0.2) nokogiri (>= 1.12.0) madmin (2.3.3) @@ -229,13 +229,13 @@ GEM rails (>= 7.0.0) stimulus-rails turbo-rails - mail (2.9.0) + mail (2.9.1) logger mini_mime (>= 0.1.1) net-imap net-pop net-smtp - mailbin (1.1.2) + mailbin (1.2.0) importmap-rails rails (>= 7.1.0) turbo-rails @@ -257,13 +257,12 @@ GEM railties (>= 7.1) stimulus-rails turbo-rails - msgpack (1.8.1) - multi_json (1.21.1) + msgpack (1.8.3) multi_xml (0.9.1) bigdecimal (>= 3.1, < 5) net-http (0.9.1) uri (>= 0.11.1) - net-imap (0.6.4) + net-imap (0.6.4.1) date net-protocol net-pop (0.1.2) @@ -273,34 +272,34 @@ GEM net-smtp (0.5.1) net-protocol nio4r (2.7.5) - nokogiri (1.19.3) + nokogiri (1.19.4) mini_portile2 (~> 2.8.2) racc (~> 1.4) - nokogiri (1.19.3-aarch64-linux-gnu) + nokogiri (1.19.4-aarch64-linux-gnu) racc (~> 1.4) - nokogiri (1.19.3-arm-linux-gnu) + nokogiri (1.19.4-arm-linux-gnu) racc (~> 1.4) - nokogiri (1.19.3-arm64-darwin) + nokogiri (1.19.4-arm64-darwin) racc (~> 1.4) - nokogiri (1.19.3-x86_64-darwin) + nokogiri (1.19.4-x86_64-darwin) racc (~> 1.4) - nokogiri (1.19.3-x86_64-linux-gnu) + nokogiri (1.19.4-x86_64-linux-gnu) racc (~> 1.4) noticed (3.0.0) rails (>= 6.1.0) orm_adapter (0.5.0) os (1.1.4) ostruct (0.6.3) - overcommit (0.70.0) + overcommit (0.71.0) childprocess (>= 0.6.3, < 6) iniparse (~> 1.4) rexml (>= 3.3.9) - pagy (43.5.5) + pagy (43.6.0) json uri yaml parallel (2.1.0) - parser (3.3.11.1) + parser (3.3.12.0) ast (~> 2.4.1) racc pg (1.6.3) @@ -308,7 +307,7 @@ GEM pg (1.6.3-arm64-darwin) pg (1.6.3-x86_64-darwin) pg (1.6.3-x86_64-linux) - pp (0.6.3) + pp (0.6.4) prettyprint prettyprint (0.2.0) prism (1.9.0) @@ -316,9 +315,7 @@ GEM actionpack (>= 7.0.0) activesupport (>= 7.0.0) rack - psych (5.4.0) - date - stringio + pstore (0.2.1) public_suffix (7.0.5) puma (8.0.2) nio4r (~> 2.0) @@ -354,8 +351,8 @@ GEM activesupport (>= 5.0.0) minitest nokogiri (>= 1.6) - rails-html-sanitizer (1.7.0) - loofah (~> 2.25) + rails-html-sanitizer (1.7.1) + loofah (~> 2.25, >= 2.25.2) nokogiri (>= 1.15.7, != 1.16.7, != 1.16.6, != 1.16.5, != 1.16.4, != 1.16.3, != 1.16.2, != 1.16.1, != 1.16.0.rc1, != 1.16.0) railties (8.1.3) actionpack (= 8.1.3) @@ -368,21 +365,26 @@ GEM zeitwerk (~> 2.6) rainbow (3.1.1) rake (13.4.2) - rdoc (7.2.0) + rbs (4.0.3) + logger + prism (>= 1.6.0) + tsort + rdoc (8.0.0) erb - psych (>= 4.0.0) + prism (>= 1.6.0) + rbs (>= 4.0.0) tsort regexp_parser (2.12.0) reline (0.6.3) io-console (~> 0.5) - resend (1.3.0) + resend (1.6.0) base64 httparty (>= 0.22.0) responders (3.2.0) actionpack (>= 7.0) railties (>= 7.0) rexml (3.4.4) - rubocop (1.86.2) + rubocop (1.88.2) json (~> 2.3) language_server-protocol (~> 3.17.0.2) lint_roller (~> 1.1.0) @@ -393,14 +395,14 @@ GEM rubocop-ast (>= 1.49.0, < 2.0) ruby-progressbar (~> 1.7) unicode-display_width (>= 2.4.0, < 4.0) - rubocop-ast (1.49.1) + rubocop-ast (1.50.0) parser (>= 3.3.7.2) prism (~> 1.7) rubocop-performance (1.26.1) lint_roller (~> 1.1) rubocop (>= 1.75.0, < 2.0) rubocop-ast (>= 1.47.1, < 2.0) - rubocop-rails (2.35.2) + rubocop-rails (2.36.0) activesupport (>= 4.2.0) lint_roller (~> 1.1) rack (>= 1.1) @@ -414,22 +416,21 @@ GEM ruby-vips (2.3.0) ffi (~> 1.12) logger - rubyzip (3.3.0) + rubyzip (3.4.1) securerandom (0.4.1) seed-fu (2.3.9) activerecord (>= 3.1) activesupport (>= 3.1) - selenium-webdriver (4.44.0) + selenium-webdriver (4.46.0) base64 (~> 0.2) logger (~> 1.4) rexml (~> 3.2, >= 3.2.5) rubyzip (>= 1.2.2, < 4.0) websocket (~> 1.0) - signet (0.21.0) + signet (0.22.0) addressable (~> 2.8) faraday (>= 0.17.5, < 3.a) jwt (>= 1.5, < 4.0) - multi_json (~> 1.10) smart_properties (1.17.0) solid_cable (4.0.0) actioncable (>= 7.2) @@ -449,15 +450,14 @@ GEM thor (>= 1.3.1) stimulus-rails (1.3.4) railties (>= 6.0.0) - stringio (3.2.0) - tailwindcss-rails (4.4.0) + tailwindcss-rails (4.6.0) railties (>= 7.0.0) tailwindcss-ruby (~> 4.0) - tailwindcss-ruby (4.3.0) - tailwindcss-ruby (4.3.0-aarch64-linux-gnu) - tailwindcss-ruby (4.3.0-arm64-darwin) - tailwindcss-ruby (4.3.0-x86_64-darwin) - tailwindcss-ruby (4.3.0-x86_64-linux-gnu) + tailwindcss-ruby (4.3.2) + tailwindcss-ruby (4.3.2-aarch64-linux-gnu) + tailwindcss-ruby (4.3.2-arm64-darwin) + tailwindcss-ruby (4.3.2-x86_64-darwin) + tailwindcss-ruby (4.3.2-x86_64-linux-gnu) thor (1.5.0) timeout (0.6.1) tsort (0.2.0) @@ -485,7 +485,7 @@ GEM crack (>= 0.3.2) hashdiff (>= 0.4.0, < 2.0.0) websocket (1.2.11) - websocket-driver (0.8.1) + websocket-driver (0.8.2) base64 websocket-extensions (>= 0.1.0) websocket-extensions (0.1.5) @@ -553,7 +553,7 @@ DEPENDENCIES whenever RUBY VERSION - ruby 4.0.3 + ruby 4.0.6 BUNDLED WITH 4.0.3