Merge branch 'id-rails-next-dependency-check' into 'master'

Check Gemfile.lock and Gemfile.next.lock match on deps update

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/165481



Merged-by: David Dieulivol <ddieulivol@gitlab.com>
Approved-by: David Dieulivol <ddieulivol@gitlab.com>
Reviewed-by: Igor Drozdov <idrozdov@gitlab.com>
Co-authored-by: Igor Drozdov <idrozdov@gitlab.com>

.gitlab/ci/rules.gitlab-ci.yml

@@ -304,6 +304,10 @@
 .python-patterns: &python-patterns
   - '{Pipfile,*/Pipfile,*/*/Pipfile}'
 
+.ruby-dependency-patterns: &ruby-dependency-patterns
+  - '{Gemfile.lock,*/Gemfile.lock,*/*/Gemfile.lock}'
+  - '{Gemfile.next.lock,*/Gemfile.next.lock,*/*/Gemfile.next.lock}'
+
 .dependency-patterns: &dependency-patterns
   - '{Gemfile.lock,*/Gemfile.lock,*/*/Gemfile.lock}'
   - '{Gemfile.next.lock,*/Gemfile.next.lock,*/*/Gemfile.next.lock}'
@@ -2499,6 +2503,11 @@
       changes: *code-backstage-patterns
       when: always
 
+.rails:rules:rails-next-dependency-check:
+  rules:
+    - <<: *if-merge-request
+      changes: *ruby-dependency-patterns
+
 #########################
 # Static analysis rules #
 #########################

.gitlab/ci/static-analysis.gitlab-ci.yml

@@ -135,6 +135,25 @@ rubocop:
         fi
       fi
 
+rails-next-dependency-check:
+  stage: lint
+  needs: []
+  extends:
+    - .rails:rules:rails-next-dependency-check
+  variables:
+    BUNDLE_GEMFILE: Gemfile.next
+  script:
+    - bundle install
+    - cp Gemfile.lock Gemfile.next.lock
+    - bundle lock
+    - bundle install
+  after_script:
+    - |
+      if [ "$CI_JOB_STATUS" == "failed" ]; then
+        echo "Gemfile.next.lock contains outdated dependencies, please run the following command and push the changes:"
+        echo "cp Gemfile.lock Gemfile.next.lock && BUNDLE_GEMFILE=Gemfile.next bundle lock && BUNDLE_GEMFILE=Gemfile.next bundle exec bundler-checksum init"
+      fi
+
 feature-flags-usage:
   extends:
     - .static-analysis-base