-
Notifications
You must be signed in to change notification settings - Fork 5
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Remove support for Ruby <2.7 #206
Conversation
Code Climate has analyzed commit 7abf83d and detected 0 issues on this pull request. The test coverage on the diff in this pull request is 100.0% (50% is the threshold). This pull request will bring the total coverage in the repository to 83.9% (0.0% change). View more on Code Climate. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM 👍 Left a note about updating CONTRIB to reflect the new auto-release flow, but that doesn't really affect the scope of these security changes.
1. Commit these changes - `Bump version to x.y.z` is an acceptable commit message - and open a PR | ||
for review. Your PR should include updates to `lib/conjur-api/version.rb`, and |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I think this entire Releasing
section needs some more attention. The project was recently added to the new automated release flow, but this section was never updated to reflect that.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Agreed. I just removed one inaccuracy but it definitely needs a larger overhaul.
Desired Outcome
dev/Dockerfile.dev in conjur-api-ruby uses the ruby:2.5 base image. This image includes a number of known vulnerabilities. Update this to a later version (preferably one that matches our upgraded Ruby version everywhere else).
Implemented Changes
Connected Issue/Story
CyberArk internal issue link: ONYX-16435
Changelog
CHANGELOG update
Test coverage
changes, or
Documentation
README
s) were updated in this PRBehavior
Security