ndr_dev_support 7.3.6 → 7.3.7

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 589fcf9c03c62ecbeecffbfe9020e87a7a1d5deec59506eef8129592504ae1c7
-  data.tar.gz: 8e99fb0d7c43f670c8684fdd11e570df00d69895e18f16194dd70a4f1afd6047
+  metadata.gz: 8fd8bba1f3c88cc84df99dd1fe9b1f3a8877d49ede2736d4a1b8b362c6217663
+  data.tar.gz: b0476e365b2ed4cda0d6cace8107c9a569e91af2b67b6bace8284bc3393e320f
 SHA512:
-  metadata.gz: 768b8c51a8653ce8866a322fcb2bcf7548bb42a4ce8d133b5e397f961bb143c0b8f2820eb9e5a67d211bb6304d125359ea8f210456604cc4d1d0e62374c50545
-  data.tar.gz: ff1eb7652b61497650afd78d9fb9bd0a8f366b6bcc972240f6c07f6e4529015e0fede07f4787eb965acd848348cbb966ddcd17c1566cc0fb57b9172cc10141f2
+  metadata.gz: 5a6457d87e9cc922d07c94944b88c5a032cdd9401d2de59960fa8611f6736d1f86fc4943fd707b38de01a6c1a9e4ae6d4692b4e01ebf918b72bf26bdbe30d1ea
+  data.tar.gz: 0d47c0e6fa632d39610dbd3acde0f6b71b617e2a436439d28d40d8d95bfaa6ab344fd254d5fb40ae0c227b9c4fa1cccd4d6c8c34e201bc1741b1139c0714b34f

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 ## [Unreleased]
 *no unreleased changes*
 
+## 7.3.7 / 2026-06-29
+### Fixed
+* Drop support for Ruby 3.1 and 3.2, Rails 7.0
+* Capistrano: deployment should continue even if cleanup cannot delete files
+
 ## 7.3.6 / 2026-01-13
 ### Added
 * Support Rails 8.1, Ruby 4.0

data/SECURITY.md

@@ -0,0 +1,35 @@
+# Security
+
+NHS England takes security and the protection of private data extremely seriously. If you believe you have found a vulnerability or other issue which has compromised or could compromise the security of any of our systems and/or private data managed by our systems, please do not hesitate to contact us using the methods outlined below.
+
+## Table of Contents
+
+- [Security](#security)
+  - [Table of Contents](#table-of-contents)
+  - [Reporting a vulnerability](#reporting-a-vulnerability)
+    - [Email](#email)
+    - [NCSC](#ncsc)
+  - [General Security Enquiries](#general-security-enquiries)
+
+## Reporting a vulnerability
+
+Please note, email is our preferred method of receiving reports.
+
+### Email
+
+If you wish to notify us of a vulnerability via email, please include detailed information on the nature of the vulnerability and any steps required to reproduce it.
+
+You can reach us at:
+
+- [Brian.Shand@nhs.net](mailto:Brian.Shand@nhs.net)
+- [cybersecurity@nhs.net](mailto:cybersecurity@nhs.net)
+
+### NCSC
+
+You can send your report to the National Cyber Security Centre, who will assess your report and pass it on to NHS England if necessary.
+
+You can report vulnerabilities here: [https://www.ncsc.gov.uk/information/vulnerability-reporting](https://www.ncsc.gov.uk/information/vulnerability-reporting)
+
+## General Security Enquiries
+
+If you have general enquiries regarding our cybersecurity, please reach out to us at [cybersecurity@nhs.net](mailto:cybersecurity@nhs.net)

data/lib/ndr_dev_support/capistrano/restart.rb

@@ -5,5 +5,15 @@ Capistrano::Configuration.instance(:must_exist).load do
       # The tmp/ directory should be shared, so this affects all prior deployments
       run "touch #{shared_path}/tmp/restart.txt"
     end
+
+    desc <<~DESC
+      Clean up old releases. Overrides the default deploy:cleanup but without blocking \
+      subsequent tasks if cleanup fails (e.g. because of locked files or permissions issues).
+    DESC
+    task :cleanup, except: { no_release: true } do
+      count = fetch(:keep_releases, 5).to_i
+      try_sudo "ls -1dt #{releases_path}/* | tail -n +#{count + 1} | #{try_sudo} xargs -r rm -rf " \
+               "|| echo 'cap deploy:cleanup failed - continuing, but check permissions.' >&2"
+    end
   end
 end

data/lib/ndr_dev_support/version.rb

@@ -2,5 +2,5 @@
 # This defines the NdrDevSupport version. If you change it, rebuild and commit the gem.
 # Use "rake build" to build the gem, see rake -T for all bundler rake tasks (and our own).
 module NdrDevSupport
-  VERSION = '7.3.6'
+  VERSION = '7.3.7'
 end

data/ndr_dev_support.gemspec

@@ -13,14 +13,14 @@ Gem::Specification.new do |spec|
   spec.license       = 'MIT'
 
   gem_files          = %w[CHANGELOG.md CODE_OF_CONDUCT.md LICENSE.txt README.md
-                          config lib ndr_dev_support.gemspec]
+                          SECURITY.md config lib ndr_dev_support.gemspec]
   spec.files         = `git ls-files -z`.split("\x0").
                        select { |f| gem_files.include?(f.split('/')[0]) }
   spec.bindir        = 'exe'
   spec.executables   = spec.files.grep(%r{^exe/}) { |f| File.basename(f) }
   spec.require_paths = ['lib']
 
-  spec.required_ruby_version = '>= 3.1'
+  spec.required_ruby_version = '>= 3.2'
 
   spec.add_dependency 'pry'
 
@@ -39,7 +39,7 @@ Gem::Specification.new do |spec|
   # Integration test dependencies:
   spec.add_dependency 'capybara', '>= 3.34'
   spec.add_dependency 'capybara-screenshot'
-  spec.add_dependency 'minitest', '~> 5.11'
+  spec.add_dependency 'minitest', '>= 5.11', '< 7.0'
   spec.add_dependency 'selenium-webdriver', '~> 4.8'
   spec.add_dependency 'show_me_the_cookies'
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: ndr_dev_support
 version: !ruby/object:Gem::Version
-  version: 7.3.6
+  version: 7.3.7
 platform: ruby
 authors:
 - NCRS Development Team
@@ -167,16 +167,22 @@ dependencies:
   name: minitest
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
         version: '5.11'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '7.0'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
         version: '5.11'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '7.0'
 - !ruby/object:Gem::Dependency
   name: selenium-webdriver
   requirement: !ruby/object:Gem::Requirement
@@ -403,6 +409,7 @@ files:
 - CODE_OF_CONDUCT.md
 - LICENSE.txt
 - README.md
+- SECURITY.md
 - config/rubocop/ndr.yml
 - lib/minitest/rake_ci.rb
 - lib/minitest/rake_ci_plugin.rb
@@ -480,7 +487,7 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: '3.1'
+      version: '3.2'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="