release: 3.4.7

- has lower complexity and works equally well in CI

.github/renovate.json5

@@ -9,6 +9,7 @@
   schedule: ["before 8am on thursday"],
   branchPrefix: "renovate-",
   dependencyDashboardHeader: "View repository job log [here](https://app.renovatebot.com/dashboard#github/cmur2/dyndnsd).",
+  separateMinorPatch: true,
   commitMessagePrefix: "project: ",
   commitMessageAction: "update",
   commitMessageTopic: "{{depName}}",
@@ -19,6 +20,12 @@
       matchManagers: ["bundler"],
       enabled: false,
     },
+    // prevent minor updates to Alpine 3.14 due to https://wiki.alpinelinux.org/wiki/Release_Notes_for_Alpine_3.14.0#faccessat2
+    {
+      matchManagers: ["dockerfile"],
+      matchUpdateTypes: ["minor"],
+      enabled: false,
+    },
     // Commit message formats
     {
       matchDatasources: ["docker"],

.gitignore

@@ -2,3 +2,4 @@
 *.lock
 pkg/*
 .yardoc
+hadolint

.rubocop.yml

@@ -6,6 +6,9 @@ AllCops:
   TargetRubyVersion: '2.5'
   NewCops: enable
 
+Gemspec/RequireMFA:
+  Enabled: false
+
 Layout/EmptyLineAfterGuardClause:
   Enabled: false
 

CHANGELOG.md

@@ -1,5 +1,29 @@
 # Changelog
 
+## 3.4.7 (November 19th, 2021)
+
+OTHER:
+
+- re-release 3.4.6 to rebuild Docker image with security vulnerabilities fixes
+
+## 3.4.6 (November 19th, 2021)
+
+OTHER:
+
+- re-release 3.4.5 to rebuild Docker image with security vulnerabilities fixes
+
+## 3.4.5 (August 26th, 2021)
+
+OTHER:
+
+- re-release 3.4.4 to rebuild Docker image with security vulnerabilities fixes
+
+## 3.4.4 (August 26th, 2021)
+
+OTHER:
+
+- re-release 3.4.3 to rebuild Docker image with security vulnerabilities fixes
+
 ## 3.4.3 (August 20th, 2021)
 
 OTHER:

Rakefile

@@ -22,11 +22,13 @@ namespace :solargraph do
 end
 
 # renovate: datasource=github-tags depName=hadolint/hadolint
-hadolint_version = 'v2.6.0'
+hadolint_version = 'v2.8.0'
 
 desc 'Run hadolint for Dockerfile linting'
 task :hadolint do
-  sh "docker run --rm -i hadolint/hadolint:#{hadolint_version} hadolint --ignore DL3018 - < docker/Dockerfile"
+  sh "wget -q -O ./hadolint https://github.com/hadolint/hadolint/releases/download/#{hadolint_version}/hadolint-Linux-x86_64"
+  sh 'chmod a+x ./hadolint'
+  sh './hadolint --ignore DL3018 docker/Dockerfile'
 end
 
 task default: [:rubocop, :spec, 'bundle:audit', :solargraph]

docker/Dockerfile

@@ -1,10 +1,10 @@
-FROM alpine:3.13.5
+FROM alpine:3.13.7
 
 EXPOSE 5353 8080
 
 ARG DYNDNSD_VERSION
 
-RUN apk --no-cache add openssl ca-certificates apk-tools && \
+RUN apk --no-cache add openssl ca-certificates && \
     apk --no-cache add ruby ruby-etc ruby-io-console ruby-json ruby-webrick && \
     apk --no-cache add --virtual .build-deps linux-headers ruby-dev build-base tzdata && \
     gem install --no-document dyndnsd -v ${DYNDNSD_VERSION} && \

docker/ci/Dockerfile

@@ -1,4 +1,4 @@
-FROM alpine:3.13.5
+FROM alpine:3.13.7
 
 EXPOSE 5353 8080
 

dyndnsd.gemspec

@@ -27,21 +27,21 @@ Gem::Specification.new do |s|
 
   s.required_ruby_version = '>= 2.5'
 
-  s.add_runtime_dependency 'async-dns', '~> 1.2.0'
+  s.add_runtime_dependency 'async-dns', '~> 1.3.0'
   s.add_runtime_dependency 'metriks'
   s.add_runtime_dependency 'opentelemetry-exporter-jaeger', '~> 0.20.0'
-  s.add_runtime_dependency 'opentelemetry-instrumentation-rack', '~> 0.19.0'
+  s.add_runtime_dependency 'opentelemetry-instrumentation-rack', '~> 0.20.0'
   s.add_runtime_dependency 'opentelemetry-sdk', '~> 1.0.0.rc2'
   s.add_runtime_dependency 'rack', '~> 2.0'
   s.add_runtime_dependency 'webrick', '>= 1.6.1'
 
   s.add_development_dependency 'bundler'
-  s.add_development_dependency 'bundler-audit', '~> 0.8.0'
+  s.add_development_dependency 'bundler-audit', '~> 0.9.0'
   s.add_development_dependency 'rack-test'
   s.add_development_dependency 'rake'
   s.add_development_dependency 'rspec'
-  s.add_development_dependency 'rubocop', '~> 1.19.0'
+  s.add_development_dependency 'rubocop', '~> 1.23.0'
   s.add_development_dependency 'rubocop-rake', '~> 0.6.0'
-  s.add_development_dependency 'rubocop-rspec', '~> 2.4.0'
-  s.add_development_dependency 'solargraph', '~> 0.43.0'
+  s.add_development_dependency 'rubocop-rspec', '~> 2.6.0'
+  s.add_development_dependency 'solargraph', '~> 0.44.0'
 end

lib/dyndnsd/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Dyndnsd
-  VERSION = '3.4.3'
+  VERSION = '3.4.7'
 end