Upgrade Ruby from 2.6.6 to 2.7.x

[CSCSxx]

Unfortunately, I can't do the upgrade myself within my Dockerfile because I'm using it on a Synology NAS and can't really access the core from the outside.
But I also think in general that it makes sense to close the known security gaps in this way

[frank-dspeed]

Synology ships with this?

[jcormier]

Doesn't look like an upgraded Ruby 2.6.9 package has been released yet. https://launchpad.net/%7Ebrightbox/+archive/ubuntu/ruby-ng/+index?batch=75&memo=75&start=75

However according to Ruby, the maintenance for 2.6 is ending next month, so probably better to move to Ruby 2.7.2+ since thats the latest version that redmine 4.2 supports.
https://www.redmine.org/projects/redmine/wiki/RedmineInstall

[jcormier]

Synology ships with this?

Someone must have created a package for it. Its been in their package manager for years now.

[jcormier]

Pushed release 4.2.3-1

@sameersbn Build needs to be kicked off

[sameersbn]

done!

[CSCSxx]

Hi there,
yes it works on Synology. But not directly shipped from them. You can install Docker and then get the dockerfile from the docker sourcepool.
Actually there are known problems in Redmine with custom fields under ruby 2.7.x! It will be fixed in 4.1.6 and 4.2.4
Thanks and greetings

[jcormier]

Actually there are known problems in Redmine with custom fields under ruby 2.7.x! It will be fixed in 4.1.6 and 4.2.4

Well thats annoying, I checked https://www.redmine.org/projects/redmine/wiki/RedmineInstall which only mentions avoiding 2.7.0/2.7.1

Found your issue. https://www.redmine.org/issues/36584

Seems like we should revert this change until 4.2.4 is released...

[jcormier]

Posted 4.2.3-2 that reverts back to Ruby 2.6.6. Hopefully redmine 4.2.4 will fix the issue with Ruby 2.7

[CSCSxx]

I hope also ;)

[jcormier]

Should leave this open since its not actually resolved yet

[jcormier]

Redmine 4.2.4 has been released. Will update docker image

https://www.redmine.org/projects/redmine/wiki/Changelog_4_2

[jcormier]

Well, i guess not quite yet, they posted the changelog but haven't uploaded the 4.2.4 tarball.

[CSCSxx]

Now, it is released

[jcormier]

So not sure whats happening over there but who ever did the release attached it to the Downloads wiki page instead of uploading it to the normal releases url. https://www.redmine.org/releases/.

So our standard download link doesn't work. Posted an issue to redmine.org, perhaps they are having some server issues and this is a temporary situation.
https://www.redmine.org/issues/36703

[CSCSxx]

Now, it should be online...

[jcormier]

Yup, sorry was busy last week. Looking at it now

…

On Tue, Mar 8, 2022 at 10:33 AM CSCSxx ***@***.***> wrote: Now, it should be online... — Reply to this email directly, view it on GitHub <#488 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/ABK2RGKHASPAWEMVPGM2RIDU65XLXANCNFSM5N42RIAQ> . Triage notifications on the go with GitHub Mobile for iOS <https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675> or Android <https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub>. You are receiving this because you modified the open/close state.Message ID: ***@***.***>

-- Jonathan Cormier Software Engineer Voice: 315.425.4045 x222 http://www.CriticalLink.com <http://www.criticallink.com/> 6712 Brooklawn Parkway, Syracuse, NY 13211 <https://www.linkedin.com/company/critical-link-llc> <https://twitter.com/Critical_Link>

[jcormier]

Just pushed 4.2.4 and 4.1.6. However, looks like only "lastest" build got triggered.

[jcormier]

Tags 4.2, 4.2.4, and 4.1.6-r2 have been pushed