Fix/image CVE refresh - #744

Merged

wdower merged 7 commits into

fix/image-cve-refresh

Jul 31, 2026

Commits on Jul 28, 2026

fix(security): remediate shipped-image gem CVEs + ECI build fixes
wdower
committed
007edca
chore: remove giant comment from Gemfile
wdower
committed
67663fb

Commits on Jul 29, 2026

fix(ci): sync Ruby/Node version pins to 3.4.10 for CVE patch
wdower
committed
272177a

Commits on Jul 30, 2026

ci: build Ruby from source for lint/backend (ruby-builder lacks 3.4.10)
wdower
committed
d219bbb
fix(deps): bump bootsnap to 1.24.6 for Ruby 3.4.10 boot under coverage
wdower
committed
ffa5bc9
fix(security): bump Rails to 8.0.5.1 for CVE-2026-66066
wdower
committed
3acb4ff

Commits on Jul 31, 2026

harden: enforce HTTPS on build-time curl downloads (Sonar S6506)
wdower
committed
e21fd91