Megabump dependencies

Author: sayhiben

.env.example

@@ -55,7 +55,7 @@ PORT=3000
 # Feature Flags (Optional)
 # ============================================
 
-# These can also be managed via Flipper UI at /admin/feature_flags
+# These can also be managed via Flipper UI at /admin/flipper
 # ENABLE_ANALYTICS=false
 # ENABLE_BULK_IMPORT=false
 # ENABLE_EXPORT=false

.eslintrc.json

@@ -5,11 +5,16 @@ on:
     branches: [ main ]
   workflow_dispatch:
 
+permissions:
+  contents: read
+  packages: write
+
 env:
-  RUBY_VERSION: '3.3.6'
-  NODE_VERSION: '20'
-  POSTGRES_VERSION: '17'
-  REDIS_VERSION: '7'
+  RUBY_VERSION: '4.0.1'
+  NODE_VERSION: '24'
+  POSTGRES_VERSION: '18'
+  REDIS_VERSION: '8'
+  REGISTRY: ghcr.io
 
 jobs:
   test:
@@ -18,7 +23,7 @@ jobs:
 
     services:
       postgres:
-        image: postgres:17
+        image: postgres:${{ env.POSTGRES_VERSION }}
         env:
           POSTGRES_PASSWORD: postgres
           POSTGRES_DB: streamsource_test
@@ -31,7 +36,7 @@ jobs:
           - 5432:5432
 
       redis:
-        image: redis:7
+        image: redis:${{ env.REDIS_VERSION }}
         options: >-
           --health-cmd "redis-cli ping"
           --health-interval 10s
@@ -141,6 +146,40 @@ jobs:
     steps:
     - name: Checkout code
       uses: actions/checkout@v4
+
+    - name: Set image name
+      id: image
+      run: echo "name=${GITHUB_REPOSITORY,,}" >> $GITHUB_OUTPUT
+
+    - name: Set up QEMU
+      uses: docker/setup-qemu-action@v3
+
+    - name: Set up Docker Buildx
+      uses: docker/setup-buildx-action@v3
+
+    - name: Log in to GHCR
+      uses: docker/login-action@v3
+      with:
+        registry: ${{ env.REGISTRY }}
+        username: ${{ github.actor }}
+        password: ${{ secrets.GITHUB_TOKEN }}
+
+    - name: Extract Docker metadata
+      id: meta
+      uses: docker/metadata-action@v5
+      with:
+        images: ${{ env.REGISTRY }}/${{ steps.image.outputs.name }}
+        tags: |
+          type=sha,format=long
+          type=raw,value=latest
+
+    - name: Build and push image
+      uses: docker/build-push-action@v6
+      with:
+        context: .
+        push: true
+        tags: ${{ steps.meta.outputs.tags }}
+        labels: ${{ steps.meta.outputs.labels }}
 
     - name: Deploy to DigitalOcean
       id: deploy
@@ -153,16 +192,12 @@ jobs:
         script: |
           set -e
           cd /var/www/streamsource
+          export STREAMSOURCE_IMAGE="${{ env.REGISTRY }}/${{ steps.image.outputs.name }}:sha-${{ github.sha }}"
+          export STREAMSOURCE_ENV_FILE="/var/www/streamsource/.env.production"
           
-          # Set environment variables for deployment
-          export GITHUB_REPOSITORY="${{ github.repository }}"
-          export GITHUB_SHA="${{ github.sha }}"
-          export GITHUB_REF="${{ github.ref }}"
-          
-          # Run deployment with error handling
-          echo "🚀 Starting deployment..."
-          ./deploy/github-deploy.sh
-          
+          echo "🚀 Pulling image ${STREAMSOURCE_IMAGE}..."
+          docker compose -f docker-compose.yml -f docker-compose.prod.yml pull web
+          docker compose -f docker-compose.yml -f docker-compose.prod.yml up -d web
           echo "✅ Deployment completed successfully"
 
     - name: Comprehensive health check
@@ -244,4 +279,4 @@ jobs:
             "auto_merge": false
           }' || echo "Failed to record deployment"
         
-        echo "✅ Deployment metrics recorded"
+        echo "✅ Deployment metrics recorded"

.github/workflows/deploy.yml

@@ -6,10 +6,10 @@ on:
     branches: [ main, develop ]
 
 env:
-  RUBY_VERSION: '3.3.6'
-  NODE_VERSION: '20'
-  POSTGRES_VERSION: '17'
-  REDIS_VERSION: '7'
+  RUBY_VERSION: '4.0.1'
+  NODE_VERSION: '24'
+  POSTGRES_VERSION: '18'
+  REDIS_VERSION: '8'
 
 jobs:
   # Parallel job for different test types
@@ -25,7 +25,7 @@ jobs:
 
     services:
       postgres:
-        image: postgres:17
+        image: postgres:${{ env.POSTGRES_VERSION }}
         env:
           POSTGRES_PASSWORD: postgres
           POSTGRES_DB: streamsource_test
@@ -38,7 +38,7 @@ jobs:
           - 5432:5432
 
       redis:
-        image: redis:7
+        image: redis:${{ env.REDIS_VERSION }}
         options: >-
           --health-cmd "redis-cli ping"
           --health-interval 10s
@@ -471,4 +471,4 @@ jobs:
               issue_number: context.issue.number,
               body: summary
             });
-          }
+          }

.github/workflows/pr-validation.yml

@@ -1 +1 @@
-3.3.6
+4.0.1

.ruby-version

@@ -0,0 +1,36 @@
+# Repository Guidelines
+
+## Project Structure & Module Organization
+- `app/`: Rails application code (controllers, models, views, policies).
+- `app/javascript/`: Stimulus controllers and JS entrypoints; compiled into `app/assets/builds/`.
+- `app/assets/`: Tailwind entry CSS and built assets.
+- `config/`: Rails configuration (routes, initializers, environments).
+- `db/`: migrations, schema, and seeds.
+- `spec/`: RSpec tests, factories, and support helpers.
+- `docs/` + `swagger/`: API documentation and Swagger spec.
+- `deploy/`: deployment scripts and infrastructure configs.
+
+## Build, Test, and Development Commands
+This repo is Docker-only; do not use system Ruby/Bundler.
+- Start/stop: `make up`, `make down`, logs with `make logs`.
+- Rails console: `make shell` or `docker compose exec web bin/rails console`.
+- Migrations: `make migrate`.
+- Tests: `make test` or `docker compose exec web bin/test [path]`.
+- Lint/security: `docker compose exec web bundle exec rubocop`, `docker compose exec web bundle exec brakeman -q -w2`.
+- JS/CSS build: `docker compose exec web yarn build` and `docker compose exec web yarn build:css`.
+
+## Coding Style & Naming Conventions
+- Indentation: 2 spaces (EditorConfig).
+- Ruby: RuboCop (Rails/RSpec), line length 120, prefer double quotes.
+- JavaScript: ESLint Standard; single quotes, no semicolons, 2-space indent.
+- Naming: specs use `*_spec.rb`; factories live in `spec/factories/`.
+
+## Testing Guidelines
+- Framework: RSpec with FactoryBot; avoid fixtures.
+- Run a single spec: `docker compose exec web bin/test spec/models/user_spec.rb`.
+- Coverage target is >90% (see `docs/LINTING.md`); add edge-case coverage for controllers and services.
+
+## Commit & Pull Request Guidelines
+- Commit messages are short, imperative, and lowercase (e.g., “simplify makefile”).
+- Branch naming: `feature/...`, `fix/...`, `docs/...`.
+- PRs should include a brief summary, tests run, and doc updates. If API changes, update `docs/API.md` and `swagger/v1/swagger.yaml`.

AGENTS.md

@@ -35,9 +35,9 @@ StreamSource is a Rails 8 application providing both a RESTful API and a real-ti
 
 ### Core Technologies
 - **Rails 8.0.x** - Main framework
-- **Ruby 3.3.6** - Programming language
-- **PostgreSQL 17** - Primary database
-- **Redis 7** - Caching, ActionCable, sessions
+- **Ruby 4.0.1** - Programming language
+- **PostgreSQL 18** - Primary database
+- **Redis 8** - Caching, ActionCable, sessions
 - **Puma** - Web server with multi-worker support
 - **Docker** - Containerization (mandatory)