Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Prevent bundler 2.5.19 #23206

Merged
merged 1 commit into from
Sep 24, 2024
Merged

Conversation

Fryguy
Copy link
Member

@Fryguy Fryguy commented Sep 24, 2024

bundler 2.5.19 introduced an issue where bundler/inline would accidentally overwrite lockfiles. This impacts the release builds because it tries to write to a location it does not have access to. This was fixed in bundler 2.5.20

@agrare Please review.

bundler 2.5.19 introduced an issue where bundler/inline would
accidentally overwrite lockfiles. This impacts the release builds
because it tries to write to a location it does not have access to. This
was fixed in bundler 2.5.20
@agrare
Copy link
Member

agrare commented Sep 24, 2024

@miq-bot
Copy link
Member

miq-bot commented Sep 24, 2024

Checked commit Fryguy@6d94d73 with ruby 3.1.5, rubocop 1.56.3, haml-lint 0.51.0, and yamllint
1 file checked, 0 offenses detected
Everything looks fine. ⭐

@agrare agrare merged commit 1a21589 into ManageIQ:master Sep 24, 2024
8 checks passed
@Fryguy Fryguy deleted the prevent_bundler_2_5_19 branch September 25, 2024 21:35
@Fryguy
Copy link
Member Author

Fryguy commented Oct 8, 2024

Backported to radjabov in commit c5fc9f5.

commit c5fc9f5f04d76f829b65aee6395fbbcddcd602bb
Author: Adam Grare <[email protected]>
Date:   Tue Sep 24 18:53:20 2024 -0400

    Merge pull request #23206 from Fryguy/prevent_bundler_2_5_19
    
    Prevent bundler 2.5.19
    
    (cherry picked from commit 1a21589295ffdf5780f89a28eab680d99da3c1bf)

Fryguy pushed a commit that referenced this pull request Oct 8, 2024
Prevent bundler 2.5.19

(cherry picked from commit 1a21589)
Fryguy added a commit to Fryguy/manageiq that referenced this pull request Oct 8, 2024
- puma due to backport of ManageIQ#23220
- bundler due to backport of ManageIQ#23206
- manageiq-smartstate due to backport of ManageIQ#23194
- rexml due to recent CVEs
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants