Upgrade Rails to 7.2

.github/workflows/ci.yml

@@ -7,6 +7,22 @@ concurrency:
   cancel-in-progress: true
 
 jobs:
+  scan_ruby:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Set up Ruby
+        uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: .ruby-version
+          bundler-cache: true
+
+      - name: Scan for common Rails security vulnerabilities using static analysis
+        run: bin/brakeman --no-pager
+
   test_lint:
     runs-on: ubuntu-latest
     strategy:
@@ -34,7 +50,7 @@ jobs:
       - uses: actions/checkout@v4
       - uses: ruby/setup-ruby@v1
         with:
-          ruby-version: 3.3
+          ruby-version: .ruby-version
           bundler-cache: true
       - uses: actions/setup-node@v4
         with:

Gemfile

@@ -2,7 +2,7 @@ source "https://rubygems.org"
 git_source(:github) { |repo| "https://github.com/#{repo}.git" }
 
 # Bundle edge Rails instead: gem 'rails', github: 'rails/rails'
-gem "rails", "~> 7.1.0"
+gem "rails", "~> 7.2.0"
 
 # Deliver assets for Rails
 gem "propshaft", "~> 0.7.0"
@@ -29,13 +29,15 @@ gem "sqlite3", "~> 1.7.0"
 gem "activerecord-enhancedsqlite3-adapter", "~> 0.7.0"
 
 # Cache store
-gem "solid_cache", "~> 0.4.2"
+gem "solid_cache", "~> 1.0.0"
 
 # Background job processing
 gem "solid_queue", "~> 0.2.1"
 
 # Default stack for pub/sub
-gem "litestack", "~> 0.4.2"
+# Because there is an error while using with Rails 7.2, the fix is not released yet.
+# So we use the main branch for now.
+gem "litestack", git: "https://github.com/oldmoe/litestack.git", branch: "master"
 
 # Build JSON APIs with ease. Read more: https://github.com/rails/jbuilder
 gem "jbuilder", "~> 2.11.5"
@@ -56,7 +58,7 @@ gem "httparty", "~> 0.22.0"
 gem "browser", "~> 5.3.1"
 
 # For searching
-gem "ransack", "~> 4.1.0"
+gem "ransack", "~> 4.2.0"
 
 # For sortable list
 gem "acts_as_list", "~> 1.1.0"
@@ -77,12 +79,14 @@ gem "daemons", "~> 1.4.0"
 gem "pg", "~> 1.5.4"
 
 # Reduces boot times through caching; required in config/boot.rb
-gem "bootsnap", "~> 1.17.0", require: false
+gem "bootsnap", "~> 1.18.0", require: false
 
 group :development, :test do
   gem "standard", "~> 1.25.0"
   gem "standard-rails"
   gem "erb_lint", "~> 0.4.0", require: false
+  # Static analysis for security vulnerabilities [https://brakemanscanner.org/]
+  gem "brakeman", require: false
   # See https://guides.rubyonrails.org/debugging_rails_applications.html#debugging-with-the-debug-gem
   gem "debug", platforms: %i[mri mingw x64_mingw]
 end
@@ -93,7 +97,7 @@ group :development do
   # Memory profiler for ruby
   gem "memory_profiler", "~> 0.9.13", require: false
   # Help to kill N+1 queries and unused eager loading
-  gem "bullet", "~> 7.1.0"
+  gem "bullet", "~> 7.2.0"
   # For deployment
   gem "kamal", "~> 1.4.0"
 end