Update Ruby from 3.0.2 to 3.0.4

[tnir]

Signed-off-by: Takuya Noguchi takninnovationresearch@gmail.com

What type of PR is this? (check all applicable)

• Optimization

Description

Updates Ruby from 3.0.2 to 3.0.4 as well as (default) bundler from 2.2.22 to 2.2.33.

Related Tickets & Documents

• Merge RubyGems 3.2.33 and Bundler 2.2.33 ruby/ruby#5787
• https://www.ruby-lang.org/en/news/2022/04/12/ruby-3-0-4-released/
  • CVE-2022-28738: Double free in Regexp compilation
  • CVE-2022-28739: Buffer overrun in String-to-Float conversion
• https://www.ruby-lang.org/en/news/2021/11/24/ruby-3-0-3-released/
  • CVE-2021-41817: Regular Expression Denial of Service Vulnerability of Date Parsing Methods
  • CVE-2021-41816: Buffer Overrun in CGI.escape_html
  • CVE-2021-41819: Cookie Prefix Spoofing in CGI::Cookie.parse

QA Instructions, Screenshots, Recordings

• quay.io/forem/ruby:3.0.4 should be prepared first instead of quay.io/forem/ruby:3.0.2.
• quay.io/forem/ruby:3.0.4 image is ready
  • https://quay.io/repository/forem/ruby?tab=tags

UI accessibility concerns?

n/a

Added/updated tests?

• I need help with writing tests

[github-actions]

Thank you for opening this PR! We appreciate you!

For all pull requests coming from third-party forks we will need to
review the PR before we can process it through our CI pipelines.

A Forem Team member will review this contribution and get back to
you as soon as possible!

[jeremyf]

@tnir Thanks for the submission, we're looking into the details of upgrading the fleet's build process.

[tnir]

@jeremyf Can I help you add forem/ruby:3.0.4 to https://quay.io/repository/forem/ruby?tab=tags? It does not look like an open source...

[jeremyf]

@tnir I'm raising this to the SRE/Devops folks as their the ones that have been tracking this work.

[maestromac]

@tnir We are using Fedora's system ruby and they currently do not support 3.0.4 but it looks like it will be releasing very soon.

[aitchiss]

@tnir We are using Fedora's system ruby and they currently do not support 3.0.4 but it looks like it will be releasing very soon.

Just a heads up I've converted this PR to draft for now since we're waiting on the Fedora support

[tnir]

@maestromac @aitchiss Thanks for feedback. Due to #17645, let me close this now.

I am not familiar with general development workflow with Fedora and RedHat Quay and new to Forem's internal development workflow, but Fedora 36 is going with Ruby 3.1 so closing while I already have noticed that Fedora 34 and 35 have ruby-3.0.4-based packages in their testing repositories, respectively. 🙏 😭 👋