Merge pull request #158 from oivoodoo/copilot/fix-ae9def7a-9876-4593-9f98-5edbb30a203b

Security: Update dependencies to fix 6 security vulnerabilities and modernize CI

Author: oivoodoo

.github/workflows/brakeman-analysis.yml

@@ -39,6 +39,6 @@ jobs:
 
     # Upload the SARIF file generated in the previous step
     - name: Upload SARIF
-      uses: github/codeql-action/upload-sarif@v2
+      uses: github/codeql-action/upload-sarif@v4
       with:
         sarif_file: output.sarif.json

.github/workflows/rubocop-analysis.yml

@@ -10,14 +10,14 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v2
+      uses: actions/checkout@v4
 
     # If running on a self-hosted runner, check it meets the requirements
     # listed at https://github.com/ruby/setup-ruby#using-self-hosted-runners
     - name: Set up Ruby
       uses: ruby/setup-ruby@v1
       with:
-        ruby-version: 2.7
+        ruby-version: 3.2
 
     # This step is not necessary if you add the gem to your Gemfile
     - name: Install Code Scanning integration
@@ -34,6 +34,6 @@ jobs:
         "
 
     - name: Upload Sarif output
-      uses: github/codeql-action/upload-sarif@v1
+      uses: github/codeql-action/upload-sarif@v4
       with:
         sarif_file: rubocop.sarif

.travis.yml

@@ -1,7 +1,8 @@
 language: ruby
 rvm:
-  - 2.7.7
   - 3.0.4
+  - 3.1.4
+  - 3.2.0
 script: time ./script/travis.sh
 addons:
   apt:

Gemfile

@@ -5,6 +5,7 @@ gemspec
 
 group :test do
   gem 'activerecord', '>= 8.0.2.1'
+
   gem 'actionmailer', '>= 8.0.2.1'
   gem 'bson_ext', '~> 1.3'
   gem 'sqlite3'
@@ -29,12 +30,18 @@ group :test do
   gem 'shoulda'
   gem 'rb-fsevent'
   gem 'factory_bot_rails', '>= 5.2.0'
-  gem 'database_cleaner', '< 1.1.0'
+  gem 'database_cleaner', '>= 2.0.0'
   gem 'cucumber'
   gem 'capybara', '>= 3.38.0'
   gem 'cucumber-rails', '>= 2.1.0'
   gem 'selenium-webdriver'
-  gem 'chromedriver-helper'
+  gem 'webdrivers'
   gem 'launchy'
   gem 'nokogiri', '>= 1.18.8'
+  
+  # Security updates
+  gem 'rack', '>= 3.1.16'
+  gem 'rack-session', '>= 2.1.1'
+  gem 'thor', '>= 1.4.0'
+  gem 'net-imap', '>= 0.5.7'
 end