[security] Update to 3.3.1, 3.2.4, 3.1.5, 3.0.7

[tianon]

Normally I would let the bot handle this, but our build tests there have been slow so this should get the updates in faster.

https://www.ruby-lang.org/en/news/2024/04/23/ruby-3-3-1-released/ https://www.ruby-lang.org/en/news/2024/04/23/ruby-3-2-4-released/ https://www.ruby-lang.org/en/news/2024/04/23/ruby-3-1-5-released/ https://www.ruby-lang.org/en/news/2024/04/23/ruby-3-0-7-released/

https://www.ruby-lang.org/en/news/2024/04/23/arbitrary-memory-address-read-regexp-cve-2024-27282/ https://www.ruby-lang.org/en/news/2024/03/21/rce-rdoc-cve-2024-27281/ https://www.ruby-lang.org/en/news/2024/03/21/buffer-overread-cve-2024-27280/

[tianon]

After this release, Ruby 3.0 reaches EOL. In other words, this is expected to be the last release of Ruby 3.0 series. We will not release Ruby 3.0.8 even if a security vulnerability is found (but could release if a severe regression is found). We recommend all Ruby 3.0 users to start migration to Ruby 3.3, 3.2, or 3.1 immediately.

https://www.ruby-lang.org/en/news/2024/04/23/ruby-3-0-7-released/

[ericboehs]

All the 3.2.4 images only have the arm platform available. Are the other arches building?

[mscrivo]

All the 3.2.4 images only have the arm platform available. Are the other arches building?

seems to be the case:

[ericboehs]

I saw 3.3.1 had x86 a couple hours ago. Unfortunately my project doesn't easily upgrade from 3.2. I didn't see any movement on <3.3 images as far as nom-arm arches. 😞

[ericboehs]

Seeing new images 👏🏻

[tianon]

https://github.com/docker-library/ruby/issues/449#issuecomment-2073494117

This is expected -- the builds are still in progress, so Docker is pulling for you the "best" architecture supported by your host system.

[ericboehs]

ARM was the only one available so builds of 3.2.4 were failing on GitHub Actions until about 30 minutes ago.

Thanks for getting this out! 🙌🙌