opf / opf/openproject-docker-compose

Rails deprecation and security warnings

Open
#152 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Shell
Stars
342
Forks
315
PR merge metrics
No merged PRs in 30d

Description

Hi,

I see many deprecation and security warnings on my latest log check after a docker pull-compose up:

docker logs office-openproject-1
DEPRECATION WARNING: ActiveSupport::Configurable is deprecated without replacement, and will be removed in Rails 8.2.

You can emulate the previous behavior with `class_attribute`.
 (called from <top (required)> at /app/config/application.rb:44)
=> Booting Puma
=> Rails 8.1.2 application starting in production
=> Run `bin/rails server --help` for more startup options
I, [2026-03-12T15:22:49.979331 #1]  INFO -- : Increasing database pool size to 17 to match max threads
W, [2026-03-12T15:22:56.240658 #1]  WARN -- : SECURITY WARNING: Dalli is using Marshal for serialization. Marshal can execute arbitrary code during deserialization. If your memcached server could be compromised, consider using a safer serializer like JSON: Dalli::Client.new(servers, serializer: JSON)
W, [2026-03-12T15:23:40.641179 #1]  WARN -- : Generating image variants require the image_processing gem. Please add `gem "image_processing", "~> 1.2"` to your Gemfile or set `config.active_storage.variant_processor = :disabled`.
[1] Puma starting in cluster mode...

Hope they're being managed.

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Read config/application.rb:44 and the Gemfile, then reproduce the warnings with docker logs office-openproject-1 after the reported Compose startup. Trace the ActiveSupport, Dalli, and Active Storage warnings; done means each reported warning has a documented or verified resolution without introducing new startup warnings.

Written by the indexing model from the issue text.

Assessment

Tech stack
docker, docker-compose, rails
Domain
devops, infrastructure
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.