Update CI to Ubuntu 22.04.

[simi]

ℹ️ Originally I tried to upgrade to Ubuntu 22.04, but there were problems with OpenSSL 3.0. It seems some API was removed with proper replacement. I have asked at ruby/openssl#480 (comment) for more info.

For now, we can (at least) migrate to Ubuntu 20.04, since Ubuntu 18.04 is deprecated for GitHub Actions.

https://github.blog/changelog/2022-08-09-github-actions-the-ubuntu-18-04-actions-runner-image-is-being-deprecated-and-will-be-removed-by-12-1-22/

[simi]

ℹ️ blocked until new Alpine release with OpenSSL 3

[codecov]

Codecov Report

Merging #3188 (ca879ad) into master (a293631) will decrease coverage by 0.38%.
The diff coverage is n/a.

❗ Current head ca879ad differs from pull request most recent head 4be2cce. Consider uploading reports for the commit 4be2cce to get more accurate results

@@            Coverage Diff             @@
##           master    #3188      +/-   ##
==========================================
- Coverage   98.58%   98.19%   -0.39%     
==========================================
  Files         113      110       -3     
  Lines        3384     3320      -64     
==========================================
- Hits         3336     3260      -76     
- Misses         48       60      +12     

Impacted Files	Coverage Δ
lib/fastly.rb	69.56% <0.00%> (-30.44%)	⬇️
app/controllers/api/v1/api_keys_controller.rb	94.11% <0.00%> (-5.89%)	⬇️
app/models/concerns/rubygem_searchable.rb	94.44% <0.00%> (-5.56%)	⬇️
app/models/user.rb	100.00% <0.00%> (ø)
lib/elastic_searcher.rb	100.00% <0.00%> (ø)
app/controllers/sessions_controller.rb	100.00% <0.00%> (ø)
app/controllers/settings_controller.rb	100.00% <0.00%> (ø)
app/models/webauthn_credential.rb
app/models/concerns/user_webauthn_methods.rb
app/controllers/webauthn_credentials_controller.rb

Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.

[simi]

ℹ️ last OpenSSL problem was fixed at ruby/openssl#541 and is included in latest release. But I'm not still sure if there is any value in this PR. 🤔

[jenshenny]

@simi would you be able to elaborate? Is it because you rather wait for the new Alpine release to upgrade both prod and ci

[simi]

I'm not sure it is worth it to add openssl into Gemfile manually. We will get latest openssl with next Ruby release as well (ruby/ruby#6337). IMHO it is ok to wait for that and move to Ubuntu 22.04 at CI with next Ruby upgrade. WDYT?

[jenshenny]

Gotcha! Thanks for providing that info, I think we can wait for the next Ruby release then too 👍

[sonalkr132]

Unless this resolves a security issue in prod, we shouldn't have to update.

[simi]

I'll strip down this PR to just update the CI runners. OpenSSL would get pulled in in https://github.com/rubygems/rubygems.org/pull/3337/files (on both sides, into app as default gem and also into docker container using Alpine 3.17 if I understand it well).

Btw. we're already locked at OpenSSL 3.0.1 gem.

rubygems.org/Gemfile.lock

Line 278 in a293631

openssl (3.0.1)

[hsbt]

👍 There is only concern about Ubuntu 22.04 with Ruby 3.0. The current ruby version is 3.1, There is no reason to stay Ubuntu 20.04.