Merge branch 'master' into dependabot/github_actions/aquasecurity/setup-trivy-0.2.5

Author: YOU54F

.github/workflows/audit.yml

@@ -19,7 +19,7 @@ jobs:
     env:
       TAG: latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Manual Trivy Setup
         uses: aquasecurity/setup-trivy@v0.3.1
         with:

.github/workflows/release_image.yml

@@ -42,7 +42,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 0
 
@@ -51,7 +51,7 @@ jobs:
 
       - name: Log into ghcr registry
         if: github.event_name != 'pull_request'
-        uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0
+        uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0
         with:
           registry: ghcr.io
           username: ${{ github.actor }}

.github/workflows/test.yml

@@ -13,7 +13,7 @@ jobs:
   test:
     runs-on: "ubuntu-latest"
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - uses: ruby/setup-ruby@v1
       - run: "bundle install"
       - run: "bundle exec rake"

.github/workflows/update_gems.yml

@@ -34,7 +34,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
 
       - uses: ruby/setup-ruby@v1
         with:

.ruby-version

@@ -1 +1 @@
-3.3
+3.4.9

CHANGELOG.md

@@ -1,3 +1,20 @@
+<a name="2.138.0-pactbroker2.119.0"></a>
+### 2.138.0-pactbroker2.119.0 (2026-04-17)
+
+#### Features
+
+* **deps**
+  * update pact_broker gem to version 2.119.0	 ([776961d](/../../commit/776961d))
+
+#### Bug Fixes
+
+* Update Trivy setup action version to v0.2.6	 ([22c2f06](/../../commit/22c2f06))
+* pin postgres to version 17 to avoid data directory incompatibility	 ([dd1a22d](/../../commit/dd1a22d))
+* update pact-broker image to latest version with ARM64 support	 ([8571152](/../../commit/8571152))
+
+* **deps**
+  * bundle update	 ([7db8e86](/../../commit/7db8e86))
+
 <a name="2.137.0-pactbroker2.118.0"></a>
 ### 2.137.0-pactbroker2.118.0 (2026-01-06)
 

Dockerfile

@@ -1,16 +1,16 @@
-FROM ruby:3.3.10-alpine3.23 AS base
+FROM ruby:3.4.9-alpine3.23 AS base
 
 # 1. Install target specfic dependencies
 # - gcompat required for arm/arm64 (otherwise nokogiri breaks when viewing network graph)
 #   - https://github.com/sparklemotion/nokogiri/issues/2414
 # 2. Supercronic - setup sha1sum for each supported architecture
 FROM base AS base-amd64
-ENV SUPERCRONIC_SHA1SUM=f70ad28d0d739a96dc9e2087ae370c257e79b8d7
+ENV SUPERCRONIC_SHA1SUM=f97b92132b61a8f827c3faf67106dc0e4467ccf2
 FROM base AS base-arm64
-ENV SUPERCRONIC_SHA1SUM=44e10e33e8d98b1d1522f6719f15fb9469786ff0
+ENV SUPERCRONIC_SHA1SUM=5c6266786c2813d6f8a99965d84452faae42b483
 RUN apk add --update --no-cache gcompat
 FROM base AS base-arm
-ENV SUPERCRONIC_SHA1SUM=d1e9c90160c92201233daf164088bd861b4b39a4
+ENV SUPERCRONIC_SHA1SUM=9d222afc7875bff33bb3623dd88b390f51d9d81e
 RUN apk add --update --no-cache gcompat
 
 # Supercronic - use base-$TARGETARCH to select correct base image SUPERCRONIC_SHA1SUM
@@ -19,7 +19,7 @@ FROM base-$TARGETARCH AS pb-dev
 
 # Install Supercronic
 ARG TARGETARCH
-ENV SUPERCRONIC_URL=https://github.com/aptible/supercronic/releases/download/v0.2.41/supercronic-linux-${TARGETARCH} \
+ENV SUPERCRONIC_URL=https://github.com/aptible/supercronic/releases/download/v0.2.43/supercronic-linux-${TARGETARCH} \
     SUPERCRONIC=supercronic-linux-${TARGETARCH}
 RUN wget "$SUPERCRONIC_URL" \
  && echo "${SUPERCRONIC_SHA1SUM}  ${SUPERCRONIC}" | sha1sum -c - \

Dockerfile-bundle-base

@@ -1,4 +1,4 @@
-FROM ruby:3.3.10-alpine3.23
+FROM ruby:3.4.9-alpine3.23
 
 # Installation path
 ENV HOME=/pact_broker

Dockerfile-package-base

@@ -1,4 +1,4 @@
-FROM ruby:3.3.10-alpine3.23
+FROM ruby:3.4.9-alpine3.23
 
 # Installation path
 ENV HOME=/app

Gemfile.lock

@@ -15,16 +15,16 @@ GIT
 GEM
   remote: https://rubygems.org/
   specs:
-    amazing_print (1.8.1)
-    anyway_config (2.7.2)
+    amazing_print (2.0.0)
+    anyway_config (2.8.0)
       ruby-next-core (~> 1.0)
     as-notifications (1.0.2)
     base64 (0.3.0)
-    bigdecimal (3.3.1)
-    concurrent-ruby (1.3.5)
+    bigdecimal (4.0.1)
+    concurrent-ruby (1.3.6)
     crass (1.0.6)
     csv (3.3.5)
-    date (3.5.0)
+    date (3.5.1)
     declarative (0.0.20)
     diff-lcs (1.6.2)
     disposable (0.6.3)
@@ -33,27 +33,27 @@ GEM
     dry-configurable (1.3.0)
       dry-core (~> 1.1)
       zeitwerk (~> 2.6)
-    dry-core (1.1.0)
+    dry-core (1.2.0)
       concurrent-ruby (~> 1.0)
       logger
       zeitwerk (~> 2.6)
-    dry-inflector (1.2.0)
+    dry-inflector (1.3.1)
     dry-initializer (3.2.0)
     dry-logic (1.6.0)
       bigdecimal
       concurrent-ruby (~> 1.0)
       dry-core (~> 1.1)
       zeitwerk (~> 2.6)
-    dry-schema (1.14.1)
+    dry-schema (1.16.0)
       concurrent-ruby (~> 1.0)
       dry-configurable (~> 1.0, >= 1.0.1)
       dry-core (~> 1.1)
       dry-initializer (~> 3.2)
-      dry-logic (~> 1.5)
-      dry-types (~> 1.8)
+      dry-logic (~> 1.6)
+      dry-types (~> 1.9, >= 1.9.1)
       zeitwerk (~> 2.6)
-    dry-types (1.8.3)
-      bigdecimal (~> 3.0)
+    dry-types (1.9.1)
+      bigdecimal (>= 3.0)
       concurrent-ruby (~> 1.0)
       dry-core (~> 1.0)
       dry-inflector (~> 1.0)
@@ -70,34 +70,35 @@ GEM
     haml (5.2.2)
       temple (>= 0.8.0)
       tilt
-    i18n (1.14.7)
+    i18n (1.14.8)
       concurrent-ruby (~> 1.0)
     json (2.12.2)
     jsonpath (1.1.5)
       multi_json
     logger (1.7.0)
     mini_portile2 (2.8.9)
     moments (0.3.0)
-    multi_json (1.17.0)
+    multi_json (1.19.1)
     mustermann (3.0.4)
       ruby2_keywords (~> 0.0.1)
     mutex_m (0.3.0)
     mysql2 (0.5.7)
       bigdecimal
     nio4r (2.7.5)
-    nokogiri (1.18.10)
+    nokogiri (1.19.1)
       mini_portile2 (~> 2.8.2)
       racc (~> 1.4)
     ostruct (0.6.3)
-    pact-support (1.21.4)
-      amazing_print (~> 1.8)
+    pact-support (1.21.6)
+      amazing_print (~> 2.0)
       diff-lcs (~> 1.6)
       expgen (~> 0.1)
       json (~> 2.12.2)
       jsonpath (~> 1.0)
+      logger (< 2.0)
       rainbow (~> 3.1.1)
       string_pattern (~> 2.0)
-    pact_broker (2.117.1)
+    pact_broker (2.118.0)
       anyway_config (~> 2.1)
       csv (~> 3.0)
       dry-validation (~> 1.8)
@@ -122,21 +123,21 @@ GEM
       table_print (~> 1.5)
       webmachine (>= 2.0.0.beta, < 3.0)
       wisper (~> 2.0)
-    padrino-core (0.16.0.pre3)
-      padrino-support (= 0.16.0.pre3)
+    padrino-core (0.16.0)
+      padrino-support (= 0.16.0)
       rackup (~> 2.1)
       sinatra (~> 4)
       thor (~> 1.0)
-    padrino-support (0.16.0.pre3)
+    padrino-support (0.16.0)
     parslet (2.0.0)
-    pg (1.6.2)
-    psych (5.2.6)
+    pg (1.6.3)
+    psych (5.3.1)
       date
       stringio
-    puma (7.1.0)
+    puma (7.2.0)
       nio4r (~> 2.0)
     racc (1.8.1)
-    rack (3.2.4)
+    rack (3.2.5)
     rack-protection (4.2.1)
       base64 (>= 0.1.0)
       logger (>= 1.6.0)
@@ -146,7 +147,7 @@ GEM
       rack (>= 3.0.0)
     rack-test (2.2.0)
       rack (>= 1.3)
-    rackup (2.2.1)
+    rackup (2.3.1)
       rack (>= 3)
     rainbow (3.1.1)
     rake (13.3.1)
@@ -176,19 +177,19 @@ GEM
     rspec-its (2.0.0)
       rspec-core (>= 3.13.0)
       rspec-expectations (>= 3.13.0)
-    rspec-mocks (3.13.7)
+    rspec-mocks (3.13.8)
       diff-lcs (>= 1.2.0, < 2.0)
       rspec-support (~> 3.13.0)
-    rspec-support (3.13.6)
-    ruby-next-core (1.1.2)
+    rspec-support (3.13.7)
+    ruby-next-core (1.2.0)
     ruby2_keywords (0.0.5)
     sanitize (6.1.3)
       crass (~> 1.0.2)
       nokogiri (>= 1.12.0)
     semantic_logger (4.17.0)
       concurrent-ruby (~> 1.0)
     semver2 (3.4.2)
-    sequel (5.98.0)
+    sequel (5.102.0)
       bigdecimal
     sinatra (4.2.1)
       logger (>= 1.6.0)
@@ -197,17 +198,17 @@ GEM
       rack-protection (= 4.2.1)
       rack-session (>= 2.0.0, < 3)
       tilt (~> 2.0)
-    sqlite3 (2.7.4)
+    sqlite3 (2.9.1)
       mini_portile2 (~> 2.8.0)
-    string_pattern (2.3.0)
+    string_pattern (2.4.0)
       regexp_parser (~> 2.5, >= 2.5.0)
-    stringio (3.1.7)
-    sucker_punch (3.2.0)
+    stringio (3.2.0)
+    sucker_punch (3.3.0)
       concurrent-ruby (~> 1.0)
     table_print (1.5.7)
     temple (0.10.4)
-    thor (1.4.0)
-    tilt (2.6.1)
+    thor (1.5.0)
+    tilt (2.7.0)
     trailblazer-option (0.1.2)
     uber (0.1.0)
     webmachine (2.0.1)
@@ -216,7 +217,7 @@ GEM
       i18n (>= 0.4.0)
       multi_json
     wisper (2.0.1)
-    zeitwerk (2.7.3)
+    zeitwerk (2.7.5)
 
 PLATFORMS
   ruby