Skip to content

chore: remove the demo Rails app, update CI and dependencies - #3

Merged
secretpray merged 2 commits into
nextfrom
chore/next-infra
Nov 6, 2026
Merged

secretpray merged 2 commits into
nextfrom
chore/next-infra

Conversation

@secretpray

@secretpray secretpray commented Nov 3, 2026 •

Copy link
Copy Markdown
Collaborator

The SDK becomes a plain library, and CI and dependencies are brought up to date. No change to the SDK's runtime behaviour.

Removed

  • The demo Rails app: test/dummy, bin/playground, lib/octaspace/playground and their tests
  • Transport::MockTransport and the Rails OctaSpace::Engine
  • Appraisals, gemfiles/* and the Rails 7.1/7.2/8.0 matrix; railties/puma dev dependencies. The Railtie stays (it needs no Rails dependency)

CI (.github/workflows/ci.yml)

  • Runs on pushes and on every pull request
  • permissions: contents: read, persist-credentials: false, concurrency cancels outdated runs
  • Actions pinned to commit SHAs: actions/checkout v7.0.1, ruby/setup-ruby v1.336.0
  • Test matrix: Ruby 3.3, 3.4, 4.0, plus gem build --strict
  • New security job: bundle-audit check --update
  • Dependabot for bundler and GitHub Actions, with a 3-day cooldown

Dependencies

  • required_ruby_version >= 3.3 (3.2 is end of life)
  • faraday >= 2.14.3, < 3: earlier 2.x versions have published advisories
  • Dev: minitest 6, webmock 3.34, standard 1.57, rake 13.3, bundler-audit; connection_pool 2.x and 3.x allowed

Verification

  • bundle exec rake test on Ruby 3.3, 3.4 and 4.0: 0 failures
  • standardrb, bundle-audit check --update and gem build --strict: clean

The SDK becomes a bare library on the way to the next API:

- remove the Rails playground (test/dummy, bin/playground,
  lib/octaspace/playground), MockTransport, the Rails Engine and the
  Appraisal/Rails matrix; the Railtie stays (no Rails dependency)
- require Ruby >= 3.3 (3.2 is EOL); CI tests 3.3, 3.4 and 4.0
- CI: actions pinned to commit SHAs, read-only token, concurrency,
  runs on main and next and on every PR, strict gem build,
  bundler-audit job
- Dependabot for bundler and actions, targeting next, 3-day cooldown
- faraday >= 2.14.3 (fixes published advisories); minitest 6,
  current webmock/standard/rake; railties and puma removed
- docs/GIT_WORKFLOW_NEXT.md: how to work with the next branch
@secretpray secretpray changed the title chore: drop the playground, modernize CI and dependencies chore: remove the demo Rails app, update CI and dependencies Nov 6, 2026
@secretpray
secretpray merged commit 610ba2f into next Nov 6, 2026
5 checks passed
@secretpray
secretpray deleted the chore/next-infra branch November 6, 2026 10:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant