[fbacall]

Summary of changes

• Bump Ruby, Rails + other gem versions

Motivation and context

Security

Checklist

• I have read and followed the CONTRIBUTING guide.
• I confirm that I have the authority necessary to make this contribution on behalf of its copyright owner and agree to license it to the TeSS codebase under the BSD license.

[Copilot]

🟡 Changes recommended

The Dockerfile still defaults to Ruby 3.4.9 without Compose overrides, leaving development and production containers, including Sidekiq, without the intended Ruby 3.4.12 upgrade.

1 open issue

• Docker images remain on Ruby 3.4.9 · New

What changed in this PR

This security-focused update refreshes TeSS’s Ruby runtime selection, Rails framework, and several supporting gems.

Changes:

• Updates .ruby-version from Ruby 3.4.9 to 3.4.12.
• Upgrades Rails and its components from 8.1.3.1 to 8.1.4.
• Updates Rack, Nokogiri, and related URL-parsing and HTML-sanitization dependencies.

File	Description
Gemfile.lock	Locks updated Rails and supporting gem versions.
Gemfile	Pins Rails to 8.1.4.
.ruby-version	Selects Ruby 3.4.12 for version-manager-based environments.

_{Review effort: Balanced}