Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ruby3.x-rails-8.0: new packages #39902

Open
wants to merge 4 commits into
base: main
Choose a base branch
from

Conversation

MickeyPvX
Copy link
Member

Creates Ruby on Rails package for Ruby 3.4, 3.3, and 3.2

Related: https://github.com/chainguard-dev/image-requests/issues/5160
EOL: https://endoflife.date/rails

Pre-review Checklist

For new package PRs only

  • This PR is marked as fixing a pre-existing package request bug
    • Alternatively, the PR is marked as related to a pre-existing package request bug, such as a dependency
  • REQUIRED - The package is available under an OSI-approved or FSF-approved license
  • REQUIRED - The version of the package is still receiving security updates
  • This PR links to the upstream project's support policy (e.g. endoflife.date)

imjasonh
imjasonh previously approved these changes Jan 17, 2025
@imjasonh imjasonh enabled auto-merge (squash) January 17, 2025 21:52
Comment on lines 12 to 15
- gcc
- git
- glibc-dev
- make
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

These shouldn't be runtime depends should they?

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I commented them out locally just to triple-check and rebuilt it...I could've sworn it was failing without them earlier, but it works without them now so...I'll drop those off 🤷‍♂️

- glibc-dev
- make
- ruby${{vars.rubyMM}}-bundler
- ruby-${{vars.rubyMM}}-dev
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Shouldn't be needed for runtime?

@jamonation
Copy link
Member

I think the runtime and build depends are mixed up here. Runtime shouldn't need much more than ruby-<version> and tzdata, whereas building needs all the dev packages.

@octo-sts octo-sts bot added the bincapz/pass bincapz/pass Bincapz (aka. malcontent) scan didn't detect any CRITICALs on the scanned packages. label Jan 17, 2025
Signed-off-by: Michael Paul <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bincapz/pass bincapz/pass Bincapz (aka. malcontent) scan didn't detect any CRITICALs on the scanned packages.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants