(PA-6386) Patch Ruby for CVE-2024-27282

[shubhamshinde360]

• Patches the ruby 'Use-After-Free' issue for regexp.
• Upstream fix commit: ruby/ruby@90b194b

[shubhamshinde360]

Picked up several platforms at random and built agent-runtime-7.x and agent-runtime-main. The patch is getting applied successfully.
7.x:
Jenkins: https://jenkins-platform.delivery.puppetlabs.net/view/vanagon-generic-builder/job/platform_vanagon-generic-builder_vanagon-packaging_generic-builder/2984/
Artifacts: https://builds.delivery.puppetlabs.net/puppet-runtime/12c01dde3d7fa8e1f2684eebc837f64a8332b122/artifacts/

main:
Jenkins: https://jenkins-platform.delivery.puppetlabs.net/view/vanagon-generic-builder/job/platform_vanagon-generic-builder_vanagon-packaging_generic-builder/2982/
Artifacts: https://builds.delivery.puppetlabs.net/puppet-runtime/12c01dde3d7fa8e1f2684eebc837f64a8332b122/artifacts/

[cthorn42]

Bump Ruby to 3.2.4

[shubhamshinde360]

Thanks @cthorn42,
We are currently on ruby 3.2.3 on main and the vulnerability was addressed in 3.2.4.
I'll work on bumping projects to 3.2.4.

[joshcooper]

So for this PR, perhaps remove the patch for 3.2.3, but keep the 2.7.x patch?

[shubhamshinde360]

@joshcooper, yes. I have kept the 2.7.x patch as it and bumped the projects which are 3.2.3 to 3.2.4.
Currently I am testing the changes on vanagon generic builder.

The work in progress branch:
master...shubhamshinde360:puppet-runtime:PA-6386-patch-and-upgrade-ruby

[shubhamshinde360]

Superseded by #858