Ruby Version Upgrade

[Jacob Burroughs]

As of the 2023-06-21 release, canvas will require ruby 3.1 in production.  The oldest release that has all ruby 3.1 related fixes in it is 2023-05-10, so you can upgrade ruby while running any of 2023-05-10, 2023-05-24, and 2023-06-07 .

If you run on a Ubuntu-based system, you may be used to running Brightbox ruby (https://www.brightbox.com/docs/ruby/ubuntu/).  Brightbox seems to have stopped creating deb packages for newer rubies (and newer Ubuntu), so we have created a PPA with newer rubies for ubuntu focal and jammy: https://launchpad.net/~instructure/+archive/ubuntu/ruby .

Please let us know either here or in IRC if you have any questions or issues upgrading.

[joe hobson]

Could upgrading to Ruby 3.1 (I'm using rbenv) cause issues with JWT? Looks like I'm not the only one with this problem, detailed over on this thread: InvalidJwtKey for page editor RCE

Your help is greatly appreciated!

[Graham Ballantyne]

You’re likely running into this issue because the location of the keys has changed in the 2023-05-24 release:

--

---
You received this message because you are subscribed to the Google Groups "Canvas LMS Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to canvas-lms-use...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/canvas-lms-users/d6bdf549-3b76-4708-a715-1c902032a927n%40googlegroups.com.

[joe hobson]

Thank you, Graham. You are incredibly helpful, as always. That tip fixed my problems with JWT and the RCE

It's incredibly frustrating how poorly supported this "open source" project is. I have added an issue to the RCE project to get the ReadMe updated so hopefully we can save someone else from pulling their hair out.