chore(deps): update jruby docker tag to v9.4.15.0

[gdrenovate]

This PR contains the following updates:

Package	Type	Update	Change
jruby (source)	final	patch	9.4.12.1 → 9.4.15.0

---

Configuration

📅 Schedule: (in timezone Europe/Prague)

• Branch creation
  • Between 09:00 AM and 03:59 PM, only on Monday (* 9-15 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

Summary by CodeRabbit

• Chores
  • Updated the application’s JRuby runtime to version 9.4.15.0. This is a maintenance update; no user-facing behavior changes are specified.

[coderabbitai]

Navigate logical layers of code changes, visualize relationships, and explore their blast radius.

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

• Configuration used: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: 6988c5f3-a266-42ea-a1e3-fbd394fd09b3

📥 Commits

Reviewing files that changed from the base of the PR and between da0197c and d1b95db.

📒 Files selected for processing (1)

• Dockerfile.jruby

Included review availability: This review used your included allowance. Your plan provides up to 1 included review per hour; 0 remain after this review.

---

📝 Walkthrough

Walkthrough

The JRuby Docker image now uses version 9.4.15.0 instead of 9.4.12.1.

Changes

JRuby Base Image

Layer / File(s)	Summary
Update JRuby base image Dockerfile.jruby	The base image tag changes from JRuby 9.4.12.1 to 9.4.15.0.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~3 minutes

Change: Other

Merge Risk: ⚪ Minimal · up to d1b95

The appstore image will use JRuby 9.4.15.0 through its existing build paths. No specific merge-blocking risk is evident.

Security Architecture Review

Security architecture risk: 🔵 Low · up to d1b95

The update leaves the application's build wiring and container configuration unchanged. No introduced security issue was established, but the new base image's inherited identity and runtime behavior were not independently verified.

Retained concerns
No architecture-level concerns identified.

Security review details

Security Blast Radius

• inferred — Security-relevant effects of changed upstream runtime behavior could reach the appstore process and its existing environment secrets and mounted resources. This exposure predates the PR; whether effective authority changes with the new image remains unresolved.

Trust Boundaries and Controls

• observed — The local comparison introduces no additional secret inputs, mounts, or runtime authority declarations. This is counterevidence to a locally configured authority expansion, not proof that the two upstream images have identical security behavior.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and concisely describes the JRuby Docker tag update from the changeset.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

_{A rabbit checks the image tag,
And finds a newer JRuby in the stack.
From nine-four-twelve to nine-four-fifteen,
The Dockerfile holds the version clean.
Hop, hop—the update is complete!}

_{Comment @coderabbitai help to get the list of available commands.}

✨ Finishing Touches 💡 1

🛠️ Fix failing CI checks 💡

• Commit to this branch
• Create a new PR