[dombesz]

Ticket

N/A

What are you trying to accomplish?

Upgrade ruby to 4.0.9.
See more https://www.ruby-lang.org/en/news/2026/10/23/ruby-4-0-9-released/ .

What approach did you choose and why?

Upgrade Ruby from 4.0.7 to 4.0.9.

Ruby was upgraded in:

• .ruby-version, which the Gemfile reads its Ruby version from
• Gemfile.lock, in the RUBY VERSION section
• docker/prod/Dockerfile: ARG RUBY_VERSION="4.0.9"
• docker/dev/backend/Dockerfile: FROM ruby:4.0.9-trixie
• AGENTS.md
• the macOS and Linux development setup guides: the required version, the rbenv install/rbenv global commands and the example ruby --version output
• the manual installation guide: the required version, the rbenv commands and the example output

AI involvement

Collaborative – AI generated a substantial part of the code; I reviewed and understand every line.

Merge checklist

• Added/updated tests
• Added/updated documentation in Lookbook (patterns, previews, etc)
• Tested major browsers (Chrome, Firefox, Edge, ...)

[github-actions]

Warning

This pull request does not link an OpenProject work package.

Please add a link to the work package in the description, or reference it in the
title in square brackets, e.g. [SLUG-123] My title here.

[oliverguenther]

This PR bumps the view components package for some reason, I think this is by mistake?

Also, the setup-ruby bumps should be the specific versions, otherwise zizmor will complain. I've done that in #26300

[oliverguenther]

Thanks @dombesz , I missed this PR when I worked on bumping it. My PR bumps the workflow using the specific tag, otherwise zizmor will complain. I will close this one in favor of #26300

[myabc]

@dombesz it looks like the PVC npm and gem dependencies are out-of-sync, so this should be fixed – albeit in a follow-up. / @HDinger