Merge pull request #289 from mlibrary/2024-04-01-updates

April 2024 dependency updates.

.github/dependabot.yml

@@ -0,0 +1,41 @@
+version: 2
+updates:
+  # Enable version updates for npm
+  - package-ecosystem: npm
+    # Look for `package.json` and `lock` files in the `root` directory
+    directory: /
+    # Check the npm registry for updates every first day of the month at 6am EST
+    schedule:
+      interval: monthly
+      timezone: America/Detroit
+      time: "06:00"
+    # Assign to the lead developer
+    assignees:
+      - erinesullivan
+    # Add the `dependencies` label
+    labels:
+      - dependencies
+
+  # Enable version updates for GitHub Actions with similar scheduling details
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: monthly
+      timezone: America/Detroit
+      time: "06:00"
+    assignees:
+      - erinesullivan
+    labels:
+      - dependencies
+
+  # Enable version updates for Gems with similar scheduling details
+  - package-ecosystem: bundler
+    directory: /
+    schedule:
+      interval: monthly
+      timezone: America/Detroit
+      time: "06:00"
+    assignees:
+      - niquerio
+    labels:
+      - dependencies

.github/workflows/tests.yml

@@ -12,10 +12,10 @@ jobs:
         run: cat env.* > .env
       - name: Load .env file
         uses: xom9ikk/dotenv@v2
-      - name: Set up Ruby 3.2
+      - name: Set up Ruby 3.3
         uses: ruby/setup-ruby@v1
         with:
-          ruby-version: '3.2'
+          ruby-version: '3.3'
           bundler-cache: true
       - name: Run linter for Ruby
         run: bundle exec standardrb

Dockerfile

@@ -1,4 +1,4 @@
-FROM ruby:3.2 AS development
+FROM ruby:3.3 AS development
 
 ARG UNAME=app
 ARG UID=1000

Gemfile

@@ -14,7 +14,7 @@ gem "omniauth_openid_connect"
 gem "redcarpet"
 gem "rackup"
 # needed for when we go to ruby 3.3, but we aren't there yet
-# gem "csv" # included here because httparty uses it and ought to requirequire it
+gem "csv" # included here because httparty uses it and ought to require it
 
 # In order to get rspec to work for ruby 3.1. Maybe later see if it's still necessary
 gem "net-smtp", require: false

Gemfile.lock

@@ -31,7 +31,7 @@ GEM
     ast (2.4.2)
     attr_required (1.0.2)
     base64 (0.2.0)
-    bigdecimal (3.1.6)
+    bigdecimal (3.1.7)
     bindata (2.5.0)
     byebug (11.1.3)
     climate_control (1.2.0)
@@ -41,6 +41,7 @@ GEM
     crack (1.0.0)
       bigdecimal
       rexml
+    csv (3.3.0)
     date (3.3.4)
     diff-lcs (1.5.1)
     docile (1.4.0)
@@ -80,7 +81,7 @@ GEM
       net-smtp
     method_source (1.0.0)
     mini_mime (1.1.5)
-    minitest (5.22.2)
+    minitest (5.22.3)
     multi_json (1.15.0)
     multi_xml (0.6.0)
     mustermann (3.0.0)
@@ -95,9 +96,9 @@ GEM
       net-protocol
     net-protocol (0.2.2)
       timeout
-    net-smtp (0.4.0.1)
+    net-smtp (0.5.0)
       net-protocol
-    nio4r (2.7.0)
+    nio4r (2.7.1)
     omniauth (2.1.2)
       hashie (>= 3.4.6)
       rack (>= 2.2.3)
@@ -129,11 +130,11 @@ GEM
     pry-byebug (3.10.1)
       byebug (~> 11.0)
       pry (>= 0.13, < 0.15)
-    public_suffix (5.0.4)
+    public_suffix (5.0.5)
     puma (6.4.2)
       nio4r (~> 2.0)
     racc (1.7.3)
-    rack (3.0.9.1)
+    rack (3.0.10)
     rack-oauth2 (2.2.1)
       activesupport
       attr_required
@@ -168,7 +169,7 @@ GEM
       diff-lcs (>= 1.2.0, < 2.0)
       rspec-support (~> 3.13.0)
     rspec-support (3.13.1)
-    rubocop (1.62.0)
+    rubocop (1.62.1)
       json (~> 2.3)
       language_server-protocol (>= 3.17.0)
       parallel (~> 1.10)
@@ -179,7 +180,7 @@ GEM
       rubocop-ast (>= 1.31.1, < 2.0)
       ruby-progressbar (~> 1.7)
       unicode-display_width (>= 2.4.0, < 3.0)
-    rubocop-ast (1.31.1)
+    rubocop-ast (1.31.2)
       parser (>= 3.3.0.4)
     rubocop-performance (1.20.2)
       rubocop (>= 1.48.1, < 2.0)
@@ -207,10 +208,10 @@ GEM
       tilt (~> 2.0)
     sinatra-flash (0.3.0)
       sinatra (>= 1.0.0)
-    standard (1.34.0)
+    standard (1.35.1)
       language_server-protocol (~> 3.17.0.2)
       lint_roller (~> 1.0)
-      rubocop (~> 1.60)
+      rubocop (~> 1.62.0)
       standard-custom (~> 1.0.0)
       standard-performance (~> 1.3)
     standard-custom (1.0.2)
@@ -224,7 +225,7 @@ GEM
       attr_required (>= 0.0.5)
       faraday (~> 2.0)
       faraday-follow_redirects
-    telephone_number (1.4.20)
+    telephone_number (1.4.21)
     tilt (2.3.0)
     timeout (0.4.1)
     tzinfo (2.0.6)
@@ -264,6 +265,7 @@ DEPENDENCIES
   addressable
   alma_rest_client!
   climate_control
+  csv
   httparty
   jwt
   net-smtp
@@ -287,4 +289,4 @@ DEPENDENCIES
   yabeda-puma-plugin
 
 BUNDLED WITH
-   2.5.6
+   2.5.7