latest master changes are merging

.github/workflows/build.yml

@@ -7,14 +7,14 @@ on:
 
 env:
   FORCE_COLOR: "1" #Forces color within GHA - Note RSPEC still won't use color see line 199 --tty for rspec color
-      
+
 
 jobs:
   rake:
     runs-on: ubuntu-8-cores-latest
     services:
       postgres:
-        image: postgres:11.7
+        image: postgres:14.8
         env:
           POSTGRES_USER: root
           POSTGRES_PASSWORD: password
@@ -53,16 +53,20 @@ jobs:
     steps:
     - uses: actions/checkout@v3
 
-    - name: Install chromium
+    - name: install node version
+      uses: actions/setup-node@v4
+      with:
+        node-version: '16.16.0'
+
+    - name: Install Chrome
       run: |
-        CHROME_VERSION="106.0.5249.119-1"
         apt-get update
-        wget --no-verbose -O /tmp/chrome.deb https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-stable/google-chrome-stable_${CHROME_VERSION}_amd64.deb \
+        wget --no-verbose -O /tmp/chrome.deb https://dl.google.com/linux/direct/google-chrome-stable_current_amd64.deb \
         && apt install -y /tmp/chrome.deb \
         && rm /tmp/chrome.deb
         echo "Chrome exe name: $(ls /usr/bin | chrome)"
         echo "Chrome version: $(google-chrome --version)"
-       
+
     - name: Ruby version
       run: ruby -v
 
@@ -89,28 +93,32 @@ jobs:
 
     - name: Assets Precompile
       run: |
-          ./ci-bin/capture-log "bundle exec rake assets:precompile"    
+          ./ci-bin/capture-log "bundle exec rake assets:precompile"
 
     - name: RSpec
       run: |-
         mkdir -p ./test-results/rspec
         mkdir .webdrivers
         chmod -R 777 ${GITHUB_WORKSPACE}
+        set -o pipefail
         runuser -u circleci -- make -f Makefile.example test | tee ./test-results/rspec/rspec.out # circleci refers to user
       env:
         POSTGRES_HOST: postgres
-
-    # Artifact Uploads    
-    - uses: actions/upload-artifact@v3
-      with:
-        path: "./test-results"
+      shell: bash
+
+    # Artifact Uploads
     - uses: actions/upload-artifact@v3
+      if: success() || failure()
       with:
         path: "./test-results"
+
     - uses: actions/upload-artifact@v3
+      if: failure()
       with:
         path: "./tmp/capybara"
+
     - uses: actions/upload-artifact@v3
+      if: success() || failure()
       with:
         path: "./log/test.log"
 
@@ -119,7 +127,7 @@ jobs:
       run: |-
         npm install -g eslint
         ./ci-bin/capture-log "make -f Makefile.example lint"
-      if: ${{ always() }}  
+      if: ${{ always() }}
 
     - name: Security
       run:  ./ci-bin/capture-log "make -f Makefile.example security"

.nvmrc

@@ -1 +1 @@
-12.13.0
+16.16.0

.rubocop.yml

@@ -6,6 +6,7 @@ AllCops:
     - '**/Rakefile'
     - '**/*.rake'
   Exclude:
+    - 'bin/**/*'
     - 'db/**/*'
     - 'config/**/*'
     - 'script/**/*'

.security.yml

@@ -1,3 +1,16 @@
 CVES:
-  CVE-2015-9284:  2021-10-31
-  CVE-2021-41098: 2021-10-31
+  GHSA-5pq7-52mg-hr42: 2024-10-31
+  CVE-2015-9284:  2024-10-31
+  CVE-2021-41098: 2024-10-31
+  CVE-2023-22795: 2024-10-31
+  CVE-2023-22792: 2024-10-31
+  CVE-2023-28362: 2024-10-31
+  CVE-2023-23913: 2024-10-31
+  CVE-2022-44566: 2024-10-31
+  CVE-2023-38037: 2024-10-31
+  CVE-2023-22796: 2024-10-31
+  CVE-2023-28120: 2024-10-31
+  CVE-2022-32511: 2024-10-31
+  CVE-2020-36599: 2024-10-31
+  CVE-2023-40175: 2024-10-31
+  CVE-2022-45442: 2024-10-31

Gemfile

@@ -4,14 +4,19 @@ source ENV["GEM_SERVER_URL"] || "https://rubygems.org"
 
 gem "active_model_serializers"
 gem "activejob_dj_overrides"
-gem "aws-sdk", "~> 2"
-gem "bgs", git: "https://github.com/department-of-veterans-affairs/ruby-bgs.git", ref: "98547485d863f2f0d3bb9a1b9ec92a8fe21ba306"
-gem "caseflow", git: "https://github.com/department-of-veterans-affairs/caseflow-commons", ref: "fb6fa9658825c143eb8d202b87128f34ca7e210b"
+gem "aws-sdk-s3"
+gem "aws-sdk-core", "3.131.0"
+gem "aws-sdk-sqs"
+gem "aws-sdk-ec2"
+gem "bgs", git: "https://github.com/department-of-veterans-affairs/ruby-bgs.git", ref: "a2e055b5a52bd1e2bb8c2b3b8d5820b1a404cd3d"
+gem "bootsnap", require: false
+gem "caseflow", git: "https://github.com/department-of-veterans-affairs/caseflow-commons", ref: "716b58caf2116da5fca21c3b3aeea6c9712f3b9d"
 gem "coffee-rails", "> 4.1.0"
-gem "connect_vbms", git: "https://github.com/department-of-veterans-affairs/connect_vbms.git", ref: "ac1ae63ffb04a2ab4d2d5469262981acab162e94"
+gem "connect_vbms", git: "https://github.com/department-of-veterans-affairs/connect_vbms.git", branch: "master"
 gem "connect_vva", git: "https://github.com/department-of-veterans-affairs/connect_vva.git", ref: "dfd1aeb2605c1f237f520bcdc41b059202e8944d"
 gem "distribute_reads"
 gem "dogstatsd-ruby"
+gem "statsd-instrument"
 gem "httpclient"
 gem "jbuilder", "~> 2.0"
 gem "jquery-rails", ">= 4.3.4"
@@ -27,12 +32,13 @@ gem "omniauth-saml-va", git: "https://github.com/department-of-veterans-affairs/
 gem "pg", "~> 0.18", platforms: :ruby
 gem "puma", "5.6.4"
 gem "rack-cors", ">= 1.0.4"
-gem "rails", "5.2.4.6"
+gem "rails", "6.0.6.1"
 gem "redis-namespace"
 gem "redis-rails", "~> 5.0.2"
 gem "redis-semaphore"
 gem "request_store"
 gem "rubyzip", ">= 1.3.0"
+gem "ruby_claim_evidence_api", git: "https://github.com/department-of-veterans-affairs/ruby_claim_evidence_api.git", ref: "095798918338650383b06ff535bc63fc5fbfc8dc"
 gem "sass-rails", "~> 5.0"
 gem "sentry-raven"
 gem "shoryuken", "3.1.11"
@@ -64,7 +70,7 @@ group :test do
   gem "database_cleaner"
   gem "launchy"
   gem "rspec"
-  gem "rspec-github", require: false # Github Actions Annotations Formatter 
+  gem "rspec-github", require: false # Github Actions Annotations Formatter
   gem "rspec-rails"
   gem "rspec-retry"
   gem "saml_idp", git: "https://github.com/18F/saml_idp.git", branch: "master"