From cc177909d994d0f61e82ab920160cd4c64283ef7 Mon Sep 17 00:00:00 2001 From: Finn Bacall Date: Tue, 30 Jun 2026 14:41:50 +0100 Subject: [PATCH 1/7] Split bundle audit into separate workflow --- .github/workflows/audit.yml | 20 ++++++++++++++++++++ .github/workflows/test.yml | 2 -- 2 files changed, 20 insertions(+), 2 deletions(-) create mode 100644 .github/workflows/audit.yml diff --git a/.github/workflows/audit.yml b/.github/workflows/audit.yml new file mode 100644 index 000000000..26af2fc78 --- /dev/null +++ b/.github/workflows/audit.yml @@ -0,0 +1,20 @@ +name: Gem audit + +on: [push, pull_request] + +jobs: + test: + runs-on: ubuntu-latest + steps: + - name: Install system dependencies + run: | + sudo apt-get update + sudo apt-get install imagemagick + - name: Check out code + uses: actions/checkout@v6 + - name: Install Ruby & gems + uses: ruby/setup-ruby@v1 + with: + bundler-cache: true + - name: Audit gems + run: bundle exec bundle-audit check --update diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index aeb4985ab..fb8e04e0f 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -64,5 +64,3 @@ jobs: run: bundle exec rails test - name: Run system tests run: bundle exec rails test:system - - name: Audit gems - run: bundle exec bundle-audit check --update \ No newline at end of file From 69f54e54fe292c944f8288340fba3aa8b96eb1a6 Mon Sep 17 00:00:00 2001 From: Finn Bacall Date: Tue, 30 Jun 2026 14:57:59 +0100 Subject: [PATCH 2/7] Only run gem audit if Gemfile(.lock) was changed, or every Monday @ 9AM --- .github/workflows/audit.yml | 11 ++++++++++- 1 file changed, 10 insertions(+), 1 deletion(-) diff --git a/.github/workflows/audit.yml b/.github/workflows/audit.yml index 26af2fc78..d01f32a23 100644 --- a/.github/workflows/audit.yml +++ b/.github/workflows/audit.yml @@ -1,6 +1,15 @@ name: Gem audit -on: [push, pull_request] +on: + push: + paths: + - 'Gemfile*' + pull_request: + paths: + - 'Gemfile*' + schedule: + - cron: '0 9 * * 1' + timezone: 'Europe/London' jobs: test: From 7d77078da41c33f83337ffa84470f0ca88504960 Mon Sep 17 00:00:00 2001 From: Finn Bacall Date: Tue, 30 Jun 2026 15:00:34 +0100 Subject: [PATCH 3/7] Check if workflow triggers --- Gemfile.lock | 1 + 1 file changed, 1 insertion(+) diff --git a/Gemfile.lock b/Gemfile.lock index b5d853f01..cef8befb2 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -943,5 +943,6 @@ DEPENDENCIES whenever will_paginate + BUNDLED WITH 4.0.13 From e1eb14104a0bb295a8f88b58f3820223a62e868f Mon Sep 17 00:00:00 2001 From: Finn Bacall Date: Tue, 30 Jun 2026 15:01:02 +0100 Subject: [PATCH 4/7] Check if workflow triggers #2 --- Gemfile | 1 + 1 file changed, 1 insertion(+) diff --git a/Gemfile b/Gemfile index e84c1ef21..e879c9830 100644 --- a/Gemfile +++ b/Gemfile @@ -91,6 +91,7 @@ group :development do gem 'web-console' end + group :test do gem 'capybara' gem 'committee' From a33e47a3a32ecf6388924159fc3a9d1974d6245b Mon Sep 17 00:00:00 2001 From: Finn Bacall Date: Tue, 30 Jun 2026 15:05:20 +0100 Subject: [PATCH 5/7] Revert --- Gemfile | 1 - Gemfile.lock | 1 - 2 files changed, 2 deletions(-) diff --git a/Gemfile b/Gemfile index e879c9830..e84c1ef21 100644 --- a/Gemfile +++ b/Gemfile @@ -91,7 +91,6 @@ group :development do gem 'web-console' end - group :test do gem 'capybara' gem 'committee' diff --git a/Gemfile.lock b/Gemfile.lock index cef8befb2..b5d853f01 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -943,6 +943,5 @@ DEPENDENCIES whenever will_paginate - BUNDLED WITH 4.0.13 From b4e74cf2a0e4830a76380a9a6baff09dc5b7ff7a Mon Sep 17 00:00:00 2001 From: Finn Bacall Date: Tue, 30 Jun 2026 15:36:58 +0100 Subject: [PATCH 6/7] Rename job Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> --- .github/workflows/audit.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/audit.yml b/.github/workflows/audit.yml index d01f32a23..269cf1d93 100644 --- a/.github/workflows/audit.yml +++ b/.github/workflows/audit.yml @@ -12,7 +12,7 @@ on: timezone: 'Europe/London' jobs: - test: + audit: runs-on: ubuntu-latest steps: - name: Install system dependencies From 04d464ca6041e8ab8ad2311764b1e1928c390c4c Mon Sep 17 00:00:00 2001 From: Finn Bacall Date: Thu, 2 Jul 2026 13:14:36 +0100 Subject: [PATCH 7/7] Bump crass and msgpack --- Gemfile.lock | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Gemfile.lock b/Gemfile.lock index b5d853f01..f4386c8c0 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -179,7 +179,7 @@ GEM countries (~> 5.0) crack (0.4.5) rexml - crass (1.0.6) + crass (1.0.7) csv (3.3.2) date (3.5.1) debug_inspector (1.1.0) @@ -392,7 +392,7 @@ GEM monetize (~> 1.9) money (~> 6.13) railties (>= 3.0) - msgpack (1.7.2) + msgpack (1.8.3) multi_json (1.19.1) multi_xml (0.8.0) bigdecimal (>= 3.1, < 5)