Skip to content

Set bundle frozen for gitpod & update some deps

João Alexandre Cunha requested to merge feat/improve-security-with-bundle-frozen into master

Relates to: #38 (closed)

This project does not run bundle install during CI, but it does run it while spinning up the gitpod environment. We should start the environment with a set of trusted gems, instead of blindly updating them when the gitpod env is being built.

Adds BUNDLE_FROZEN=true during bundle install to increase security.

Gemfile and Gemfile.lock updates were necessary to fix compatibility with ruby 3.0.4.

GEM version diffs:

Edited by João Alexandre Cunha

Merge request reports