Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Outdated version of bundler #109

Closed
Laguna1989 opened this issue Feb 4, 2024 · 1 comment
Closed

Outdated version of bundler #109

Laguna1989 opened this issue Feb 4, 2024 · 1 comment

Comments

@Laguna1989
Copy link

The version of bundler used with this github action is (2.1.4). According to the bundler rubygems website this is from January 2020 and by that already four years old.

The latest version as of today is 2.5.5 from 2024-01-18.

This poses not only a big concern to supported features but can also mean a massive security risk.

I strongly advice to upgrade to the latest version as soon as possible and on a regular basis.

@yoannchaudet
Copy link
Collaborator

Should be better with

ARG RUBY_VERSION=3.3
FROM ruby:$RUBY_VERSION-slim
.

❯ docker run -it  ruby:3.3-slim  /bin/bash
root@05d8639a770d:/# bundle -v
Bundler version 2.5.11

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants