Bump ruby to 3.3.0 and modify certs (#1085)

* bump ruby

* bump dockerfile to ruby 3.3.0-bullseye WIP

* Run CI without this COPY command

* add file package

* undo script changes

* remove unneccesary ca-trust readme

.ruby-version

@@ -1 +1 @@
-3.2.2
+3.3.0

Dockerfile

@@ -3,14 +3,14 @@
 #
 # shared build/settings for all child images
 ###
-FROM ruby:3.2.2-slim-buster AS base
+FROM ruby:3.3.0-slim-bullseye AS base
 
 ARG userid=309
 SHELL ["/bin/bash", "-c"]
 RUN groupadd -g $userid -r gi-bill-data-service && \
     useradd -u $userid -r -g gi-bill-data-service -d /srv/gi-bill-data-service gi-bill-data-service
 RUN apt-get update -qq && apt-get install -y \
-    build-essential git curl wget libpq-dev dumb-init shared-mime-info nodejs cron
+    build-essential git curl wget libpq-dev dumb-init shared-mime-info nodejs cron file
 
 RUN mkdir -p /srv/gi-bill-data-service/src && \
     chown -R gi-bill-data-service:gi-bill-data-service /srv/gi-bill-data-service

Gemfile

@@ -2,7 +2,7 @@
 
 source 'https://rubygems.org'
 
-ruby '3.2.2'
+ruby '3.3.0'
 
 # Anchored versions, do not change
 

Gemfile.lock

@@ -201,6 +201,8 @@ GEM
     json_schema (0.21.0)
     jsonapi-renderer (0.2.2)
     language_server-protocol (3.17.0.3)
+    libv8-node (18.19.0.0-aarch64-linux)
+    libv8-node (18.19.0.0-arm64-darwin)
     libv8-node (18.19.0.0-x86_64-linux)
     listen (3.8.0)
       rb-fsevent (~> 0.10, >= 0.10.3)
@@ -238,6 +240,10 @@ GEM
       net-protocol
     newrelic_rpm (9.8.0)
     nio4r (2.7.1)
+    nokogiri (1.16.3-aarch64-linux)
+      racc (~> 1.4)
+    nokogiri (1.16.3-arm64-darwin)
+      racc (~> 1.4)
     nokogiri (1.16.3-x86_64-linux)
       racc (~> 1.4)
     notiffany (0.1.3)
@@ -452,6 +458,8 @@ GEM
     zeitwerk (2.6.13)
 
 PLATFORMS
+  aarch64-linux
+  arm64-darwin-23
   x86_64-linux
 
 DEPENDENCIES
@@ -522,7 +530,7 @@ DEPENDENCIES
   will_paginate
 
 RUBY VERSION
-   ruby 3.2.2p53
+   ruby 3.3.0p0
 
 BUNDLED WITH
    2.4.10

import-va-certs.sh

@@ -5,6 +5,7 @@
 
     wget \
         --level=1 \
+        --quiet \
         --recursive \
         --no-parent \
         --no-host-directories \