Upgrade build to Ruby 3.3.5, consolidate Dependabot bumps, and remove vendored docs Gemfiles

[jongyoul]

Summary

This PR consolidates the 9 open Dependabot PRs into one change and modernizes the build:

• Upgrades the Docker build image to Ruby 3.3.5 — required because nokogiri 1.19.3 needs Ruby >= 3.2 and activesupport 7.2.3.1 (already pinned in the lockfile) needs >= 3.1, so the old ruby:3.0.6 image can no longer build the site.
• Pins Bundler 4.0.13 in the Dockerfile to match Gemfile.lock's BUNDLED WITH, for reproducible builds.
• Removes the vendored Gemfile / Gemfile.lock from every docs/<version>/. These are build artifacts that were accidentally copied from the docs build sources (they are byte-identical to the root Gemfile) and are not used to serve the static site — but they are exactly what triggers the recurring Dependabot security PRs against docs/.

Merging this PR closes all 9 Dependabot PRs automatically (see Closes below).

Changes

Root site (Gemfile, Gemfile.lock, Dockerfile)

• Docker image ruby:3.0.6 → ruby:3.3.5
• Bundler pinned to 4.0.13 (matches BUNDLED WITH)
• nokogiri 1.15.4 → 1.19.3 (Bump nokogiri from 1.15.4 to 1.19.3 #53)
• faraday 2.14.1 → 2.14.2 (Bump faraday from 2.14.1 to 2.14.2 #57)
• addressable 2.8.5 → 2.9.0 (Bump addressable from 2.8.5 to 2.9.0 #50)

docs/ — removed stray build-artifact Gemfiles

• Deleted Gemfile + Gemfile.lock under every docs/<version>/ (0.5.0-incubating … 0.12.0)
• Supersedes the lockfile bumps in Bump nokogiri from 1.15.4 to 1.19.3 in /docs/0.12.0 #54 (nokogiri), Bump addressable from 2.8.7 to 2.9.0 in /docs/0.12.0 #51 (addressable), Bump rexml from 3.3.8 to 3.4.2 in /docs/0.12.0 #33 (rexml) — the files those PRs target no longer exist
• Published static HTML under docs/ is left untouched

helium GitHub Action (package-lock.json, lockfileVersion: 2 preserved)

• follow-redirects 1.15.6 → 1.16.0 (Bump follow-redirects from 1.15.6 to 1.16.0 in /.github/workflows/helium #52)
• ajv 6.12.6 → 6.15.0 (Bump ajv from 6.12.6 to 6.14.0 in /.github/workflows/helium #49)
• underscore 1.13.7 → 1.13.8 (Bump underscore from 1.13.7 to 1.13.8 in /.github/workflows/helium #47)

Verification

All builds run inside Docker:

• bundle install (Bundler 4.0.13) + jekyll build succeed on Ruby 3.3.5
• npm ci succeeds for the helium action

Closes

Closes #57, #53, #50, #54, #51, #33, #52, #49, #47

[Copilot]

Pull request overview

This PR updates the site’s build/runtime dependencies to unblock builds by moving the Docker-based Jekyll environment to Ruby 3.3.5 and consolidating several Dependabot dependency bumps across the root site, the docs/0.12.0 subsite, and the helium GitHub Action.

Changes:

• Upgraded the Docker build image from Ruby 3.0.6 to Ruby 3.3.5.
• Updated Ruby gem dependencies (notably nokogiri, addressable, faraday, plus lockfile updates) in the root site and docs/0.12.0.
• Updated transitive npm dependencies for the helium workflow via package-lock.json changes.

Reviewed changes

Copilot reviewed 3 out of 6 changed files in this pull request and generated 2 comments.

Show a summary per file

File	Description
Gemfile	Pins nokogiri to 1.19.3 for the root site.
Gemfile.lock	Updates bundled gems (incl. addressable, faraday, nokogiri) and updates the Bundler version recorded in the lockfile.
docs/0.12.0/Gemfile	Pins nokogiri to 1.19.3 for the docs/0.12.0 subsite.
docs/0.12.0/Gemfile.lock	Updates nokogiri, addressable, and rexml (lockfile-only dependency changes for docs/0.12.0).
Dockerfile	Moves the base image to ruby:3.3.5 for local Docker builds.
.github/workflows/helium/package-lock.json	Updates ajv, follow-redirects, and underscore in the helium action lockfile.

Files not reviewed (1)

• .github/workflows/helium/package-lock.json: Language not supported

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.