From ea618dbd119ce601e9919327f7ea24a62af75e90 Mon Sep 17 00:00:00 2001 From: Matthias Folz Date: Tue, 19 May 2026 12:15:30 +0200 Subject: [PATCH] fix cves and update CICD --- .../workflows/dependabot-pr-auto-merge.yml | 9 +-- .github/workflows/update_ruby_pr.yml | 18 +++++ Gemfile.lock | 75 ++++++++++--------- 3 files changed, 60 insertions(+), 42 deletions(-) create mode 100644 .github/workflows/update_ruby_pr.yml diff --git a/.github/workflows/dependabot-pr-auto-merge.yml b/.github/workflows/dependabot-pr-auto-merge.yml index c9ed65e..8816fdf 100644 --- a/.github/workflows/dependabot-pr-auto-merge.yml +++ b/.github/workflows/dependabot-pr-auto-merge.yml @@ -9,7 +9,7 @@ permissions: jobs: dependabot-pr-auto-merge: runs-on: ubuntu-latest - if: github.event.pull_request.user.login == 'dependabot[bot]' + if: github.event.pull_request.user.login == 'dependabot[bot]' || github.event.pull_request.user.login == 'github-actions[bot]' || github.event.pull_request.user.login == 'a9s-internal' steps: - name: Suite Status Checks @@ -19,12 +19,9 @@ jobs: token: ${{ secrets.GITHUB_TOKEN }} ignore: dependabot-email-notification - - name: Dependabot metadata - id: dependabot-metadata - uses: dependabot/fetch-metadata@v2 - - name: Auto-merge Dependabot PR run: | gh pr merge --auto --squash "${{ github.event.pull_request.html_url }}" env: - GH_TOKEN: ${{ secrets.GIT_TOKEN }} \ No newline at end of file + GH_TOKEN: ${{ secrets.GIT_TOKEN }} + diff --git a/.github/workflows/update_ruby_pr.yml b/.github/workflows/update_ruby_pr.yml new file mode 100644 index 0000000..0767a4c --- /dev/null +++ b/.github/workflows/update_ruby_pr.yml @@ -0,0 +1,18 @@ +name: auto-update + +on: + workflow_dispatch: + schedule: + # daily 8am UTC + - cron: "0 8 * * *" + +permissions: + contents: write + pull-requests: write + checks: read + +jobs: + update: + uses: anynines/int-gitops/.github/workflows/update_ruby.yml@master + secrets: + token: ${{ secrets.GITHUB_TOKEN }} diff --git a/Gemfile.lock b/Gemfile.lock index 2c371bd..3d9d3f6 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -1,7 +1,7 @@ GEM remote: https://rubygems.org/ specs: - activesupport (7.2.3) + activesupport (7.2.3.1) base64 benchmark (>= 0.3) bigdecimal @@ -10,77 +10,80 @@ GEM drb i18n (>= 1.6, < 2) logger (>= 1.4.2) - minitest (>= 5.1) + minitest (>= 5.1, < 6) securerandom (>= 0.3) tzinfo (~> 2.0, >= 2.0.5) - amq-protocol (2.3.2) + amq-protocol (2.8.0) amqp (1.8.0) amq-protocol (>= 2.2.0) eventmachine ast (2.4.3) base64 (0.3.0) benchmark (0.5.0) - bigdecimal (3.3.1) - concurrent-ruby (1.3.5) + bigdecimal (4.1.2) + concurrent-ruby (1.3.6) connection_pool (2.5.5) daemon-kit (0.3.3) eventmachine (>= 0.12.10) thor - diff-lcs (1.5.0) + diff-lcs (1.6.2) drb (2.2.3) erubis (2.7.0) eventmachine (1.2.7) - honeybadger (5.0.2) - i18n (1.14.7) + honeybadger (6.6.1) + logger + ostruct + i18n (1.14.8) concurrent-ruby (~> 1.0) - json (2.17.1) + json (2.19.5) language_server-protocol (3.17.0.5) lint_roller (1.1.0) logger (1.7.0) - minitest (5.26.2) - parallel (1.27.0) - parser (3.3.10.0) + minitest (5.27.0) + ostruct (0.6.3) + parallel (1.28.0) + parser (3.3.11.1) ast (~> 2.4.1) racc - prism (1.6.0) + prism (1.9.0) psych (3.3.4) racc (1.8.1) - rack (3.2.4) + rack (3.2.6) rainbow (3.1.1) - rake (13.0.6) - regexp_parser (2.11.3) - rspec (3.12.0) - rspec-core (~> 3.12.0) - rspec-expectations (~> 3.12.0) - rspec-mocks (~> 3.12.0) - rspec-core (3.12.0) - rspec-support (~> 3.12.0) - rspec-expectations (3.12.0) + rake (13.4.2) + regexp_parser (2.12.0) + rspec (3.13.2) + rspec-core (~> 3.13.0) + rspec-expectations (~> 3.13.0) + rspec-mocks (~> 3.13.0) + rspec-core (3.13.6) + rspec-support (~> 3.13.0) + rspec-expectations (3.13.5) diff-lcs (>= 1.2.0, < 2.0) - rspec-support (~> 3.12.0) - rspec-mocks (3.12.0) + rspec-support (~> 3.13.0) + rspec-mocks (3.13.8) diff-lcs (>= 1.2.0, < 2.0) - rspec-support (~> 3.12.0) - rspec-support (3.12.0) - rubocop (1.81.7) + rspec-support (~> 3.13.0) + rspec-support (3.13.7) + rubocop (1.86.2) json (~> 2.3) language_server-protocol (~> 3.17.0.2) lint_roller (~> 1.1.0) - parallel (~> 1.10) + parallel (>= 1.10) parser (>= 3.3.0.2) rainbow (>= 2.2.2, < 4.0) regexp_parser (>= 2.9.3, < 3.0) - rubocop-ast (>= 1.47.1, < 2.0) + rubocop-ast (>= 1.49.0, < 2.0) ruby-progressbar (~> 1.7) unicode-display_width (>= 2.4.0, < 4.0) - rubocop-ast (1.48.0) + rubocop-ast (1.49.1) parser (>= 3.3.7.2) - prism (~> 1.4) + prism (~> 1.7) rubocop-performance (1.26.1) lint_roller (~> 1.1) rubocop (>= 1.75.0, < 2.0) rubocop-ast (>= 1.47.1, < 2.0) - rubocop-rails (2.34.2) + rubocop-rails (2.35.2) activesupport (>= 4.2.0) lint_roller (~> 1.1) rack (>= 1.1) @@ -90,18 +93,18 @@ GEM rubocop (>= 1.72) rubocop-performance (>= 1.24) rubocop-rails (>= 2.30) - rubocop-rspec (3.8.0) + rubocop-rspec (3.9.0) lint_roller (~> 1.1) rubocop (~> 1.81) ruby-progressbar (1.13.0) safely (0.3.2) securerandom (0.4.1) - thor (1.2.1) + thor (1.5.0) tzinfo (2.0.6) concurrent-ruby (~> 1.0) unicode-display_width (3.2.0) unicode-emoji (~> 4.1) - unicode-emoji (4.1.0) + unicode-emoji (4.2.0) PLATFORMS ruby