Upgrade from Ruby 4.0.2 to 4.0.3 & Bundler/RubyGems from 4.0.8 to 4.0.10

- https://www.ruby-lang.org/en/news/2026/04/21/ruby-4-0-3-released/
- https://github.com/ruby/ruby/releases/tag/v4.0.3
- https://github.com/ruby/rubygems/releases/tag/bundler-v4.0.9
- https://github.com/ruby/rubygems/releases/tag/bundler-v4.0.10
- https://github.com/ruby/rubygems/releases/tag/v4.0.9
- https://github.com/ruby/rubygems/releases/tag/v4.0.10
- https://github.com/ruby/setup-ruby/releases/tag/v1.303.0
- https://github.com/ruby/setup-ruby/releases/tag/v1.304.0
- https://github.com/ruby/setup-ruby/releases/tag/v1.305.0

Author: larouxn

.devcontainer/Dockerfile

@@ -1,5 +1,5 @@
 # Make sure RUBY_VERSION matches the Ruby version in .ruby-version
-ARG RUBY_VERSION=4.0.2
+ARG RUBY_VERSION=4.0.3
 FROM ghcr.io/rails/devcontainer/images/ruby:$RUBY_VERSION
 
 # Ensure binding is always 0.0.0.0

.github/actions/setup-rubygems.org/action.yml

@@ -23,7 +23,7 @@ runs:
       if: github.secret_source != 'None' && inputs.install-avo-pro == 'true'
       run: |
         printf "BUNDLE_WITH=avo\nRAILS_GROUPS=avo\n" >> $GITHUB_ENV
-    - uses: ruby/setup-ruby@319994f95fa847cf3fb3cd3dbe89f6dcde9f178f # v1.295.0
+    - uses: ruby/setup-ruby@0cb964fd540e0a24c900370abf38a33466142735 # v1.305.0
       with:
         ruby-version: ${{ inputs.ruby-version }}
         bundler-cache: true

.github/workflows/docker.yml

@@ -13,8 +13,8 @@ jobs:
     name: Docker build (and optional push)
     runs-on: ubuntu-24.04
     env:
-      RUBYGEMS_VERSION: "4.0.8"
-      RUBY_VERSION: "4.0.2"
+      RUBYGEMS_VERSION: "4.0.10"
+      RUBY_VERSION: "4.0.3"
     permissions:
       id-token: write
     steps:

.github/workflows/lint.yml

@@ -15,7 +15,7 @@ jobs:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           persist-credentials: false
-      - uses: ruby/setup-ruby@4c56a21280b36d862b5fc31348f463d60bdc55d5 # v1.301.0
+      - uses: ruby/setup-ruby@0cb964fd540e0a24c900370abf38a33466142735 # v1.305.0
         with:
           bundler-cache: true
       - name: Rubocop
@@ -27,7 +27,7 @@ jobs:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           persist-credentials: false
-      - uses: ruby/setup-ruby@4c56a21280b36d862b5fc31348f463d60bdc55d5 # v1.301.0
+      - uses: ruby/setup-ruby@0cb964fd540e0a24c900370abf38a33466142735 # v1.305.0
         with:
           bundler-cache: true
       - name: Herb Analyze
@@ -39,7 +39,7 @@ jobs:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           persist-credentials: false
-      - uses: ruby/setup-ruby@4c56a21280b36d862b5fc31348f463d60bdc55d5 # v1.301.0
+      - uses: ruby/setup-ruby@0cb964fd540e0a24c900370abf38a33466142735 # v1.305.0
         with:
           bundler-cache: true
       - name: Brakeman
@@ -51,7 +51,7 @@ jobs:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           persist-credentials: false
-      - uses: ruby/setup-ruby@4c56a21280b36d862b5fc31348f463d60bdc55d5 # v1.301.0
+      - uses: ruby/setup-ruby@0cb964fd540e0a24c900370abf38a33466142735 # v1.305.0
         with:
           bundler-cache: true
       - name: Importmap Verify
@@ -83,7 +83,7 @@ jobs:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           persist-credentials: false
-      - uses: ruby/setup-ruby@4c56a21280b36d862b5fc31348f463d60bdc55d5 # v1.301.0
+      - uses: ruby/setup-ruby@0cb964fd540e0a24c900370abf38a33466142735 # v1.305.0
         with:
           bundler-cache: true
       - name: krane render

.github/workflows/test.yml

@@ -25,7 +25,7 @@ jobs:
     name: Rails tests ${{ matrix.tests.name }}
     runs-on: ubuntu-24.04
     env:
-      RUBYGEMS_VERSION: "4.0.8"
+      RUBYGEMS_VERSION: "4.0.10"
       # Fail hard when Toxiproxy is not running to ensure all tests (even Toxiproxy optional ones) are passing
       REQUIRE_TOXIPROXY: true
       TOXIPROXY_LISTEN_HOST: "0.0.0.0"
@@ -41,8 +41,8 @@ jobs:
       - name: Setup rubygems.org
         uses: ./.github/actions/setup-rubygems.org
         with:
-          ruby-version: "4.0.2"
-          rubygems-version: "4.0.8"
+          ruby-version: "4.0.3"
+          rubygems-version: "4.0.10"
           install-avo-pro: ${{ matrix.tests.id != 'avo-without-pro' }}
 
       - name: Tests ${{ matrix.tests.name }}

.ruby-version

@@ -1 +1 @@
-4.0.2
+4.0.3

Dockerfile

@@ -1,7 +1,7 @@
 # syntax = docker/dockerfile:1.10
 
 # Make sure RUBY_VERSION matches the Ruby version in .ruby-version and Gemfile
-ARG RUBY_VERSION=4.0.2
+ARG RUBY_VERSION=4.0.3
 ARG ALPINE_VERSION=3.23
 FROM ruby:$RUBY_VERSION-alpine${ALPINE_VERSION} AS base
 

Gemfile.lock

@@ -1376,7 +1376,7 @@ CHECKSUMS
   zlib (3.2.3) sha256=5bd316698b32f31a64ab910a8b6c282442ca1626a81bbd6a1674e8522e319c20
 
 RUBY VERSION
-  ruby 4.0.2
+  ruby 4.0.3
 
 BUNDLED WITH
-  4.0.8
+  4.0.10