Skip to content

Conversation

@toshimaru
Copy link
Member

@toshimaru toshimaru commented Jan 19, 2025

Updated Test Matrix

Ruby Version Rails Versions
2.7 5.2, 6.0, 6.1, 7.0
3.3 7.1, 7.2

Changes

  • Update Gemfile.lock
  • Add --path vendor/bundle to fix the following error
The installation path is insecure. Bundler cannot continue.
/opt/hostedtoolcache/Ruby/3.3.9/x64/lib/ruby/gems/3.3.0/gems is world-writable
(without sticky bit).
Bundler cannot safely replace gems in world-writeable directories due to
potential vulnerabilities.
Please change the permissions of this directory or choose a different install
path.
rake aborted!

Realted PR

@toshimaru toshimaru force-pushed the ruby-3.4 branch 4 times, most recently from b7c46ab to 1f1ccd9 Compare September 26, 2025 04:56
```
The installation path is insecure. Bundler cannot continue.
/opt/hostedtoolcache/Ruby/3.3.9/x64/lib/ruby/gems/3.3.0/gems is world-writable
(without sticky bit).
Bundler cannot safely replace gems in world-writeable directories due to
potential vulnerabilities.
Please change the permissions of this directory or choose a different install
path.
rake aborted!
```
@toshimaru toshimaru changed the title Bump ruby from 3.3 to 3.4 fix: Fix CI build (modify matrix) Sep 26, 2025
@toshimaru toshimaru self-assigned this Sep 26, 2025
@toshimaru toshimaru marked this pull request as ready for review September 26, 2025 05:37
Copilot AI review requested due to automatic review settings September 26, 2025 05:37
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR fixes CI build issues by updating the test matrix and addressing bundle installation path security concerns. The changes ensure proper isolation of gem installations and optimize the Ruby/Rails version compatibility matrix.

  • Updated Ruby/Rails version test matrix to improve compatibility coverage
  • Added --path vendor/bundle flag to bundle install command to resolve security warnings
  • Removed Ruby 3.0 from the matrix and redistributed Rails versions between Ruby 2.7 and 3.3

Reviewed Changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File Description
.github/workflows/ci.yml Updated test matrix to use Ruby 2.7 with Rails 5.2-7.0 and Ruby 3.3 with Rails 7.1-7.2
Rakefile Added --path vendor/bundle to bundle install command to fix security warnings

Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.

@toshimaru toshimaru merged commit 888b3e4 into railsdoc:main Sep 26, 2025
10 checks passed
@toshimaru toshimaru deleted the ruby-3.4 branch September 26, 2025 05:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant