Upgrade ruby to 3.3.7

Author: aespinoza-quoin

Diff for: .ruby-version

@@ -1 +1 @@
-ruby-3.3.5
+ruby-3.3.7

Diff for: Gemfile

@@ -3,7 +3,7 @@
 # Copyright (c) 2014 - 2023 UNICEF. All rights reserved.
 
 source 'https://rubygems.org'
-ruby '3.3.5'
+ruby '3.3.7'
 
 gem 'activerecord-nulldb-adapter'      # Running Rake tasks at build time before DB is set up. TODO: Still needed?
 gem 'activerecord-session_store', '~> 2.0'

Diff for: Gemfile.lock

@@ -475,7 +475,7 @@ DEPENDENCIES
   memory_profiler
   minipack (~> 0.3)
   net-http-persistent (~> 4.0)
-  nokogiri (~> 1.16)
+  nokogiri (~> 1.18)
   pg (~> 1.5)
   prawn (~> 2.4)
   prawn-table (~> 0.2)
@@ -510,13 +510,13 @@ DEPENDENCIES
   text (~> 1.3)
   twitter_cldr (~> 4.4)
   tzinfo-data (~> 1.2023)
-  uri (~> 0.12)
+  uri (~> 0.13)
   web-push (~> 3.0)
   will_paginate (~> 4.0)
   write_xlsx (~> 1.11)
 
 RUBY VERSION
-   ruby 3.3.5p100
+   ruby 3.3.7p123
 
 BUNDLED WITH
    2.4.18

Diff for: azure-pipelines.yml

@@ -41,7 +41,7 @@ jobs:
         displayName: 'Install dependencies'
       - bash: |
           . ~/.bash_env
-          rbenv global 3.3.5
+          rbenv global 3.3.7
           bundle install --without production --path=${BUNDLE_PATH:-vendor/bundle}
         displayName: 'Bundle install'
         env:

Diff for: bitbucket-pipelines.yml

@@ -4,7 +4,7 @@ definitions:
   steps:
     - step: &server-test
         name: Server tests
-        image: ruby:3.3.5-bookworm
+        image: ruby:3.3.7-bookworm
         script:
           - ./bin/install_local_test_solr.sh
           - ./bin/run_server_tests.sh

Diff for: doc/getting_started_development.md

@@ -111,9 +111,9 @@ In the Primero top-level directory, there is a file `.ruby-version`, which conta
 
 ```bash
 cat .ruby-version
-# This will print something like: ruby-3.3.5
+# This will print something like: ruby-3.3.7
 # rbenv needs the version number, but not the ruby- prefix.
-rbenv install 3.3.5 # replace 3.3.5 with whatever version is in .ruby-version
+rbenv install 3.3.7 # replace 3.3.7 with whatever version is in .ruby-version
 ```
 
 It will take several minutes to build and install ruby, depending on the speed of your machine.

Diff for: docker/application/Dockerfile

@@ -2,8 +2,8 @@
 
 # -------------------------------------------------------------------- BUILD STAGE
 ARG BUILD_REGISTRY
-ARG RUBY_VERSION=3.3.5
-FROM ${BUILD_REGISTRY}ruby:${RUBY_VERSION}-alpine3.20 AS build-env
+ARG RUBY_VERSION=3.3.7
+FROM ${BUILD_REGISTRY}ruby:${RUBY_VERSION}-alpine3.21 AS build-env
 
 ENV BUILD_PACKAGES="bash curl wget curl-dev build-base git"
 ENV PYTHON_PACKAGES="python3 py3-pip"
@@ -101,11 +101,11 @@ RUN set -euox pipefail \
 
 # -------------------------------------------------------------------- FINAL
 ARG BUILD_REGISTRY
-FROM ${BUILD_REGISTRY}ruby:${RUBY_VERSION}-alpine3.20
+FROM ${BUILD_REGISTRY}ruby:${RUBY_VERSION}-alpine3.21
 
 ENV BUILD_PACKAGES=bash
 ENV RUNTIME_PACKAGES="libpq gettext libintl imagemagick libsodium-dev p7zip tini"
-ENV SECURITY_UPDATED_PACKAGES="libexpat=2.6.4-r0 curl=8.12.1-r0 musl=1.2.5-r1 musl-utils=1.2.5-r1 libxml2=2.12.7-r2 openssl=3.3.3-r0 "
+# ENV SECURITY_UPDATED_PACKAGES="libexpat=2.6.4-r0 curl=8.12.1-r0 musl=1.2.5-r1 musl-utils=1.2.5-r1 libxml2=2.12.7-r1 openssl=3.3.3-r0 "
 
 ARG APP_UID
 ARG APP_GID
@@ -119,7 +119,7 @@ ENV RAILS_ENV=production
 # Install our packages
 RUN set -euox pipefail \
         ; apk update \
-        ; apk add --no-cache $SECURITY_UPDATED_PACKAGES \
+        # ; apk add --no-cache $SECURITY_UPDATED_PACKAGES \
         ; apk add --no-cache $BUILD_PACKAGES \
         ; apk add --no-cache $RUNTIME_PACKAGES \
         ; rm -rf /var/cache/apk/*