[Snyk] Security upgrade ruby from 3.2.0-alpine to 3.3.9-alpine

[karimkawambwa]

Snyk has created this PR to fix 4 vulnerabilities in the dockerfile dependencies of this project.

Keeping your Docker base image up-to-date means you’ll benefit from security fixes in the latest version of your chosen image.

Snyk changed the following file(s):

• Dockerfile

We recommend upgrading to ruby:3.3.9-alpine, as this image has only 2 known vulnerabilities. To do this, merge this pull request, then verify your application still works as expected.

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Out-of-bounds Write SNYK-ALPINE317-NCURSES-5606599	614
	Out-of-bounds Write SNYK-ALPINE317-NCURSES-5606599	614
	NULL Pointer Dereference SNYK-ALPINE317-OPENSSL-3314647	614
	Use After Free SNYK-ALPINE317-OPENSSL-3314650	614
	Access of Resource Using Incompatible Type ('Type Confusion') SNYK-ALPINE317-OPENSSL-7911573	614

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Access of Resource Using Incompatible Type ('Type Confusion')
🦉 NULL Pointer Dereference
🦉 Use After Free

[sentry]

Bug: The Dockerfile's Ruby version (3.3.9) conflicts with the Gemfile's (3.2.0) and .ruby-version's (3.1.0) specified Ruby versions.
_{Severity: CRITICAL | Confidence: High}

🔍 Detailed Analysis

The Dockerfile specifies FROM ruby:3.3.9-alpine, but the Gemfile requires ruby '3.2.0' and the .ruby-version file specifies ruby-3.1.0. When bundle install runs in the Docker container, the ruby 3.3.9 interpreter will not satisfy the Gemfile's ruby '3.2.0' constraint. This will cause bundle install to raise an exception and fail, leading to a complete Docker build failure.

💡 Suggested Fix

Update the Gemfile to ruby '3.3.9' (or a compatible version constraint) and the .ruby-version file to ruby-3.3.9 to match the Docker base image.

🤖 Prompt for AI Agent

Review the code at the location below. A potential bug has been identified by an AI
agent.
Verify if this is a real issue. If it is, propose a fix; if not, explain why it's not
valid.

Location: Dockerfile#L1

Potential issue: The `Dockerfile` specifies `FROM ruby:3.3.9-alpine`, but the `Gemfile`
requires `ruby '3.2.0'` and the `.ruby-version` file specifies `ruby-3.1.0`. When
`bundle install` runs in the Docker container, the `ruby 3.3.9` interpreter will not
satisfy the `Gemfile`'s `ruby '3.2.0'` constraint. This will cause `bundle install` to
raise an exception and fail, leading to a complete Docker build failure.

_{Did we get this right? 👍 / 👎 to inform future reviews.
Reference ID: 5781117}