ci: move to Ruby 3.3.5

Closes https://github.com/Orange-OpenSource/ouds-ios/security/dependabot/5

Signed-off-by: Pierre-Yves Lapersonne <[email protected]>

.github/DEVELOP.md

@@ -52,15 +52,21 @@ brew install swiftformat
 ```
 
 Ensure you have the suitable _Ruby_ version. We recommend the use of [rbenv](https://github.com/rbenv/rbenv) to load the suitable version of ruby.
-We use here _Ruby 3_ (3.1.x).
+We use here _Ruby 3_ (>= 3.3).
 If you are not used to this tool:
 
 ```shell
-# List available local version of Ruby
+# List available local versions of Ruby
 rbenv install --list
 
-# Apply the 3.1.2 version of Ruby (if listed previously)
-rbenv global 3.1.2
+# Apply the expected x.y.z version of Ruby (if listed previously with the command above)
+rbenv global 3.3.5
+
+# If you don't have the expected x.y.z version of Ruby, run:
+# >  brew update && brew upgrade ruby-build
+# >  rbenv install x.y.z
+# then 
+# >  rbenv global x.y.z
 
 # Check Ruby version
 ruby --version

.github/workflows/build-and-test.yml

@@ -44,7 +44,7 @@ jobs:
       - name: Set up Ruby
         uses: ruby/setup-ruby@v1
         with:
-          ruby-version: '3.1'
+          ruby-version: '3.3'
 
       - name: Install Fastlane
         run: |
@@ -69,7 +69,7 @@ jobs:
       - name: Set up Ruby
         uses: ruby/setup-ruby@v1
         with:
-          ruby-version: '3.1'
+          ruby-version: '3.3'
 
       - name: Install Fastlane
         run: |

CHANGELOG.md

@@ -53,6 +53,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - [DemoApp] Remove duplicated section in color page for content on background values ([#236](https://github.com/Orange-OpenSource/ouds-ios/issues/236))
 - [DemoApp] Hide from Voice Over decorative image in theme selector (a11y)
 
+### Security
+
+- [Tool] Move to Ruby 3.3.5 to fix Dependabot alert about *REXML ReDoS vulnerability* (CVE-2024-49761) ([#5](https://github.com/Orange-OpenSource/ouds-ios/security/dependabot/5))
+
 ## [0.4.1](https://github.com/Orange-OpenSource/ouds-ios/compare/0.4.0...0.4.1) - 2024-10-21
 
 ### Fixed