From df39fd3e22bb36060a89459f091a107ae6dbefd9 Mon Sep 17 00:00:00 2001
From: fallwith <fallwith@gmail.com>
Date: Mon, 3 Jun 2024 15:44:25 -0700
Subject: [PATCH] Ruby workflow enhancements

- checkout@v3 uses a deprecated Node.js v16 runtime and should be
  updated to v4
- Ruby 3.3 (not 3.2) is the latest stable Ruby, so update setup-ruby to
  use v3.3
- We have multiple public Ruby repos that have `Gemfile.lock`
  intentionally ignored by Git, but FOSSA wants that file so
  autogenerate it running `bundle lock` where appropriate
  - Do not run `bundle lock` if a lock file already exists
  - Handle multiple `Gemfile` locations (the NR Ruby agent has 2)
  - Ignore the `test/` and `spec/` directories
---
 .github/workflows/fossa-ruby-bundler.yml | 17 +++++++++++++++--
 1 file changed, 15 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/fossa-ruby-bundler.yml b/.github/workflows/fossa-ruby-bundler.yml
index 4b0b52d..e155f92 100644
--- a/.github/workflows/fossa-ruby-bundler.yml
+++ b/.github/workflows/fossa-ruby-bundler.yml
@@ -22,9 +22,22 @@ jobs:
       FOSSA_ANALYZE_RESULT: ""
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - uses: ruby/setup-ruby@v1
         with:
-          ruby-version: '3.2'
+          ruby-version: '3.3'
+      - name: Ensure that a Gemfile.lock file exists for each Gemfile file
+        run: |
+          echo "Ensuring that Gemfile.lock files exist..."
+          for gemfile in $(find . -name Gemfile -not -path './test/**' -not -path './spec/**'); do
+            dir=${gemfile%/*}
+            echo "Found Gemfile at $dir"
+            if [[ -e "$dir/Gemfile.lock" ]]; then
+              echo "Found Gemfile.lock at $dir"
+            else
+              echo "No Gemfile.lock found at $dir - generating one..."
+              bundle lock --gemfile "$dir/Gemfile"
+            fi
+          done
       - id: fossa-cli
         uses: newrelic/.github/.github/composite/fossa-composite@main