Skip to content

THREESCALE-11894 - Bump nokogiri gem [2.15]#600

Merged
akostadinov merged 2 commits into
3scale-2.15-stablefrom
THREESCALE-11894-bump-nokogiri-2.15
Jul 15, 2026
Merged

THREESCALE-11894 - Bump nokogiri gem [2.15]#600
akostadinov merged 2 commits into
3scale-2.15-stablefrom
THREESCALE-11894-bump-nokogiri-2.15

Conversation

@akostadinov-bot

Copy link
Copy Markdown

Summary

  • Bump nokogiri from 1.16.5 to 1.19.4 in Gemfile.lock
  • Picks up latest libxml2 fixes bundled with the nokogiri gem
  • No changes to Gemfile constraints; all existing dependency requirements remain satisfied

Test plan

  • CI passes (Gemfile.lock only change, no code changes)
  • Verify the application boots correctly with the updated gem

@akostadinov-bot

Copy link
Copy Markdown
Author

Review finding: Ruby version incompatibility (fixed)

Issue: nokogiri 1.19.4 requires Ruby >= 3.2, but this branch (3scale-2.15-stable) uses ubi9/ruby-31 (Ruby 3.1) in its Dockerfile. Bumping to 1.19.4 would break the build.

Fix pushed: Changed the bump target to nokogiri 1.18.10 (latest in the 1.18.x series), which requires Ruby >= 3.1.0 and is compatible with this branch's Ruby version. Dependencies (mini_portile2 ~> 2.8.2, racc ~> 1.4) remain the same.

Version Required Ruby Compatible?
1.16.5 (current) >= 3.0.0 Yes
1.18.10 (fixed) >= 3.1.0 Yes
1.19.4 (original PR) >= 3.2 No

@akostadinov-bot akostadinov-bot Bot force-pushed the THREESCALE-11894-bump-nokogiri-2.15 branch from 2b0b0b0 to 0d273d8 Compare July 13, 2026 20:52
@jlledom

jlledom commented Jul 14, 2026

Copy link
Copy Markdown
Contributor

Which Jira issue does this belong to? I'd like to verify that Nokogiri 1.18.10 fixes the corresponding CVE

@akostadinov-bot akostadinov-bot Bot force-pushed the THREESCALE-11894-bump-nokogiri-2.15 branch from 0d273d8 to 138c112 Compare July 14, 2026 08:20
@akostadinov-bot akostadinov-bot Bot changed the base branch from 3scale-2.15-stable to ci/manual-approval-gate-2.15 July 14, 2026 08:20
jlledom
jlledom previously approved these changes Jul 14, 2026
@akostadinov-bot akostadinov-bot Bot force-pushed the ci/manual-approval-gate-2.15 branch from bd2a950 to e36fe57 Compare July 14, 2026 09:56
akostadinov-bot and others added 2 commits July 14, 2026 09:57
Bump nokogiri gem from 1.16.5 to 1.19.4 to pick up
the latest libxml2 fixes bundled with the gem.

Assisted-By: claude-opus-4-6
nokogiri 1.19.x requires Ruby >= 3.2, but this branch's Dockerfile
uses ubi9/ruby-31 (Ruby 3.1). Downgrade to 1.18.10, the latest
version compatible with Ruby 3.1. Dependencies (mini_portile2 ~> 2.8.2,
racc ~> 1.4) remain unchanged.

Assisted-By: claude-opus-4-6
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
@akostadinov-bot akostadinov-bot Bot force-pushed the THREESCALE-11894-bump-nokogiri-2.15 branch from 138c112 to 7b8a69d Compare July 14, 2026 09:57
@akostadinov akostadinov deleted the branch 3scale-2.15-stable July 14, 2026 21:27
@jlledom

jlledom commented Jul 15, 2026

Copy link
Copy Markdown
Contributor

Why closing this?

@akostadinov

Copy link
Copy Markdown
Contributor

crap, I missed these two last night. idk why things didn't work as anticipated

@akostadinov akostadinov reopened this Jul 15, 2026
@akostadinov akostadinov changed the base branch from ci/manual-approval-gate-2.15 to master July 15, 2026 11:45
@akostadinov akostadinov dismissed jlledom’s stale review July 15, 2026 11:45

The base branch was changed.

@akostadinov akostadinov requested a review from jlledom July 15, 2026 11:45
@akostadinov

Copy link
Copy Markdown
Contributor

pls reapprove

@akostadinov akostadinov changed the base branch from master to 3scale-2.15-stable July 15, 2026 11:47
@akostadinov akostadinov merged commit c41284e into 3scale-2.15-stable Jul 15, 2026
10 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants