Skip to content

Remove Gemfiles for Rails 6 and less (TECH-17268_bump_appraisals) #231

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
ttstarck merged 4 commits into from
Feb 20, 2025
Merged

Remove Gemfiles for Rails 6 and less (TECH-17268_bump_appraisals) #231

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
1cc54b9
Remove old Rails < 7 gemfiles
ttstarck Feb 19, 2025
3a218ea
remove tmp file
ttstarck Feb 19, 2025
fa8aa94
fix build.yml
ttstarck Feb 19, 2025
037d303
add drb gem
ttstarck Feb 20, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
9 changes: 6 additions & 3 deletions .github/workflows/build.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -18,13 +18,16 @@ jobs:
strategy:
fail-fast: false
matrix:
ruby: [3.1, 3.2, 3.3]
ruby: [3.1, 3.2, 3.3, 3.4]
gemfile:
- Gemfile
- gemfiles/rails_6_0.gemfile
- gemfiles/rails_6_1.gemfile
- gemfiles/rails_7_0.gemfile
- gemfiles/rails_7_1.gemfile
- gemfiles/rails_7_2.gemfile
- gemfiles/rails_8_0.gemfile
exclude:
- ruby: 3.1
gemfile: gemfiles/rails_8_0.gemfile

env:
BUNDLE_GEMFILE: ${{ matrix.gemfile }}
Expand Down
2 changes: 1 addition & 1 deletion Appraisals
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,4 +2,4 @@

require "appraisal/matrix"

appraisal_matrix(rails: "6.0")
appraisal_matrix(rails: "7.0")
1 change: 1 addition & 0 deletions Gemfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -26,3 +26,4 @@ gem "concurrent-ruby", "~> 1.3", "< 1.3.5"
gem "base64", ">= 0.2.0"
gem "bigdecimal", ">= 3.1"
gem "mutex_m", ">= 0.3.0"
gem "drb"
2 changes: 2 additions & 0 deletions Gemfile.lock
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,18 +8,18 @@
GEM
remote: https://rubygems.org/
specs:
actioncable (6.1.7.3)

Check failure on line 11 in Gemfile.lock

View check run for this annotation

Security Scanner as a Service / Bundle Audit

Gemfile.lock#L11 

          actionpack
          Warning Message: https://discuss.rubyonrails.org/t/cve-2023-28362-possible-xss-via-user-supplied-values-to-redirect-to/83132
          CVE:             CVE-2023-28362
          Severity:        medium

Check failure on line 11 in Gemfile.lock

View check run for this annotation

Security Scanner as a Service / Bundle Audit

Gemfile.lock#L11 

          actionpack
          Warning Message: https://github.com/rails/rails/security/advisories/GHSA-fwhr-88qx-h9g7
          CVE:             CVE-2024-28103
          Severity:        medium

Check failure on line 11 in Gemfile.lock

View check run for this annotation

Security Scanner as a Service / Bundle Audit

Gemfile.lock#L11 

          actionpack
          Warning Message: https://github.com/rails/rails/security/advisories/GHSA-x76w-6vjr-8xgj
          CVE:             CVE-2024-41128
          Severity:

Check failure on line 11 in Gemfile.lock

View check run for this annotation

Security Scanner as a Service / Bundle Audit

Gemfile.lock#L11 

          actionpack
          Warning Message: https://github.com/rails/rails/security/advisories/GHSA-vfg9-r3fq-jvx4
          CVE:             CVE-2024-47887
          Severity:

Check failure on line 11 in Gemfile.lock

View check run for this annotation

Security Scanner as a Service / Bundle Audit

Gemfile.lock#L11 

          actionpack
          Warning Message: https://github.com/rails/rails/security/advisories/GHSA-vfm5-rmrh-j26v
          CVE:             CVE-2024-54133
          Severity:
actionpack (= 6.1.7.3)

Check failure on line 12 in Gemfile.lock

View check run for this annotation

Security Scanner as a Service / Bundle Audit

Gemfile.lock#L12 

          activesupport
          Warning Message: https://github.com/rails/rails/releases/tag/v7.0.7.1
          CVE:             CVE-2023-38037
          Severity:        medium
activesupport (= 6.1.7.3)
nio4r (~> 2.0)
websocket-driver (>= 0.6.1)
actionmailbox (6.1.7.3)
actionpack (= 6.1.7.3)
activejob (= 6.1.7.3)
activerecord (= 6.1.7.3)

Check failure on line 19 in Gemfile.lock

View check run for this annotation

Security Scanner as a Service / Bundle Audit

Gemfile.lock#L19 

          activestorage
          Warning Message: https://discuss.rubyonrails.org/t/possible-sensitive-session-information-leak-in-active-storage/84945
          CVE:             CVE-2024-26144
          Severity:        medium
activestorage (= 6.1.7.3)
activesupport (= 6.1.7.3)
mail (>= 2.7.1)

Check failure on line 22 in Gemfile.lock

View check run for this annotation

Security Scanner as a Service / Bundle Audit

Gemfile.lock#L22 

          actionmailer
          Warning Message: https://github.com/rails/rails/security/advisories/GHSA-h47h-mwp9-c6q6
          CVE:             CVE-2024-47889
          Severity:
actionmailer (6.1.7.3)
actionpack (= 6.1.7.3)
actionview (= 6.1.7.3)
Expand All @@ -29,16 +29,16 @@
rails-dom-testing (~> 2.0)
actionpack (6.1.7.3)
actionview (= 6.1.7.3)
activesupport (= 6.1.7.3)

Check failure on line 32 in Gemfile.lock

View check run for this annotation

Security Scanner as a Service / Bundle Audit

Gemfile.lock#L32 

          rack
          Warning Message: https://discuss.rubyonrails.org/t/denial-of-service-vulnerability-in-rack-content-type-parsing/84941
          CVE:             CVE-2024-25126
          Severity:        medium

Check failure on line 32 in Gemfile.lock

View check run for this annotation

Security Scanner as a Service / Bundle Audit

Gemfile.lock#L32 

          rack
          Warning Message: https://discuss.rubyonrails.org/t/possible-dos-vulnerability-with-range-header-in-rack/84944
          CVE:             CVE-2024-26141
          Severity:

Check failure on line 32 in Gemfile.lock

View check run for this annotation

Security Scanner as a Service / Bundle Audit

Gemfile.lock#L32 

          rack
          Warning Message: https://discuss.rubyonrails.org/t/possible-denial-of-service-vulnerability-in-rack-header-parsing/84942
          CVE:             CVE-2024-26146
          Severity:

Check failure on line 32 in Gemfile.lock

View check run for this annotation

Security Scanner as a Service / Bundle Audit

Gemfile.lock#L32 

          rack
          Warning Message: https://github.com/rack/rack/security/advisories/GHSA-7g2v-jj9q-g3rg
          CVE:             CVE-2025-25184
          Severity:
rack (~> 2.0, >= 2.0.9)
rack-test (>= 0.6.3)
rails-dom-testing (~> 2.0)
rails-html-sanitizer (~> 1.0, >= 1.2.0)

Check failure on line 36 in Gemfile.lock

View check run for this annotation

Security Scanner as a Service / Bundle Audit

Gemfile.lock#L36 

          actiontext
          Warning Message: https://github.com/rails/rails/security/advisories/GHSA-wwhv-wxv9-rpgw
          CVE:             CVE-2024-47888
          Severity:
actiontext (6.1.7.3)
actionpack (= 6.1.7.3)
activerecord (= 6.1.7.3)
activestorage (= 6.1.7.3)
activesupport (= 6.1.7.3)

Check failure on line 41 in Gemfile.lock

View check run for this annotation

Security Scanner as a Service / Bundle Audit

Gemfile.lock#L41 

          nokogiri
          Warning Message: https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-r95h-9x8f-r3f7
          CVE:             GHSA-r95h-9x8f-r3f7
          Severity:

Check failure on line 41 in Gemfile.lock

View check run for this annotation

Security Scanner as a Service / Bundle Audit

Gemfile.lock#L41 

          nokogiri
          Warning Message: https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-vvfq-8hwr-qm4m
          CVE:             GHSA-vvfq-8hwr-qm4m
          Severity:

Check failure on line 41 in Gemfile.lock

View check run for this annotation

Security Scanner as a Service / Bundle Audit

Gemfile.lock#L41 

          nokogiri
          Warning Message: https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-xc9x-jj77-9p9j
          CVE:             GHSA-xc9x-jj77-9p9j
          Severity:
nokogiri (>= 1.8.5)
actionview (6.1.7.3)
activesupport (= 6.1.7.3)
Expand Down Expand Up @@ -83,6 +83,7 @@
crass (1.0.6)
date (3.3.3)
diff-lcs (1.5.1)
drb (2.2.1)
erubi (1.12.0)
globalid (1.1.0)
activesupport (>= 5.0)
Expand All @@ -95,7 +96,7 @@
crass (~> 1.0.2)
nokogiri (>= 1.12.0)
mail (2.8.1)
mini_mime (>= 0.1.1)

Check failure on line 99 in Gemfile.lock

View check run for this annotation

Security Scanner as a Service / Bundle Audit

Gemfile.lock#L99 

          net-imap
          Warning Message: https://github.com/ruby/net-imap/security/advisories/GHSA-7fc5-f82f-cx69
          CVE:             CVE-2025-25186
          Severity:        medium
net-imap
net-pop
net-smtp
Expand Down Expand Up @@ -163,7 +164,7 @@
thor (~> 1.0)
rainbow (3.1.1)
rake (13.0.6)
regexp_parser (2.8.0)

Check failure on line 167 in Gemfile.lock

View check run for this annotation

Security Scanner as a Service / Bundle Audit

Gemfile.lock#L167 

          rexml
          Warning Message: https://github.com/ruby/rexml/security/advisories/GHSA-vg3r-rm7w-2xgh
          CVE:             CVE-2024-35176
          Severity:        medium

Check failure on line 167 in Gemfile.lock

View check run for this annotation

Security Scanner as a Service / Bundle Audit

Gemfile.lock#L167 

          rexml
          Warning Message: https://github.com/ruby/rexml/security/advisories/GHSA-4xqq-m2hx-25v8
          CVE:             CVE-2024-39908
          Severity:        medium

Check failure on line 167 in Gemfile.lock

View check run for this annotation

Security Scanner as a Service / Bundle Audit

Gemfile.lock#L167 

          rexml
          Warning Message: https://www.ruby-lang.org/en/news/2024/08/01/dos-rexml-cve-2024-41123
          CVE:             CVE-2024-41123
          Severity:        medium

Check failure on line 167 in Gemfile.lock

View check run for this annotation

Security Scanner as a Service / Bundle Audit

Gemfile.lock#L167 

          rexml
          Warning Message: https://www.ruby-lang.org/en/news/2024/08/01/dos-rexml-cve-2024-41946
          CVE:             CVE-2024-41946
          Severity:        medium

Check failure on line 167 in Gemfile.lock

View check run for this annotation

Security Scanner as a Service / Bundle Audit

Gemfile.lock#L167 

          rexml
          Warning Message: https://github.com/ruby/rexml/security/advisories/GHSA-vmwr-mc7x-5vc3
          CVE:             CVE-2024-43398
          Severity:        medium

Check failure on line 167 in Gemfile.lock

View check run for this annotation

Security Scanner as a Service / Bundle Audit

Gemfile.lock#L167 

          rexml
          Warning Message: https://github.com/ruby/rexml/security/advisories/GHSA-2rxp-v6pw-ch6m
          CVE:             CVE-2024-49761
          Severity:        high
rexml (3.2.5)
rspec-expectations (3.13.3)
diff-lcs (>= 1.2.0, < 2.0)
Expand Down Expand Up @@ -226,6 +227,7 @@
base64 (>= 0.2.0)
bigdecimal (>= 3.1)
concurrent-ruby (~> 1.3, < 1.3.5)
drb
large_text_field!
minitest (~> 5.1)
minitest-reporters
Expand Down
26 changes: 0 additions & 26 deletions gemfiles/rails_6_0.gemfile
View file
Open in desktop

This file was deleted.

26 changes: 0 additions & 26 deletions gemfiles/rails_6_1.gemfile
View file
Open in desktop

This file was deleted.

1 change: 1 addition & 0 deletions gemfiles/rails_7_0.gemfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -21,6 +21,7 @@ gem "concurrent-ruby", "~> 1.3", "< 1.3.5"
gem "base64", ">= 0.2.0"
gem "bigdecimal", ">= 3.1"
gem "mutex_m", ">= 0.3.0"
gem "drb"
gem "rails", "~> 7.0.0"

gemspec path: "../"
1 change: 1 addition & 0 deletions gemfiles/rails_7_1.gemfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -21,6 +21,7 @@ gem "concurrent-ruby", "~> 1.3", "< 1.3.5"
gem "base64", ">= 0.2.0"
gem "bigdecimal", ">= 3.1"
gem "mutex_m", ">= 0.3.0"
gem "drb"
gem "rails", "~> 7.1.0"

gemspec path: "../"
1 change: 1 addition & 0 deletions gemfiles/rails_7_2.gemfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -21,6 +21,7 @@ gem "concurrent-ruby", "~> 1.3", "< 1.3.5"
gem "base64", ">= 0.2.0"
gem "bigdecimal", ">= 3.1"
gem "mutex_m", ">= 0.3.0"
gem "drb"
gem "rails", "~> 7.2.0"

gemspec path: "../"
1 change: 1 addition & 0 deletions gemfiles/rails_8_0.gemfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -21,6 +21,7 @@ gem "concurrent-ruby", "~> 1.3", "< 1.3.5"
gem "base64", ">= 0.2.0"
gem "bigdecimal", ">= 3.1"
gem "mutex_m", ">= 0.3.0"
gem "drb"
gem "rails", "~> 8.0.0"

gemspec path: "../"