foreman: 0.78.0 -> 0.87.2

[zimbatm]

Motivation for this change

CVE fixes #90776

Things done

• Built on platform(s)
  • x86_64-linux
  • aarch64-linux
  • x86_64-darwin
  • aarch64-darwin
• For non-Linux: Is sandbox = true set in nix.conf? (See Nix manual)
• Tested via one or more NixOS test(s) if existing and applicable for the change (look inside nixos/tests)
• Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review wip"
• Tested execution of all binary files (usually in ./result/bin/)
• 21.11 Release Notes (or backporting 21.05 Release notes)
  • (Package updates) Added a release notes entry if the change is major or breaking
  • (Module updates) Added a release notes entry if the change is significant
  • (Module addition) Added a release notes entry if adding a new NixOS module
• Fits CONTRIBUTING.md.

[domenkozar]

@GrahamcOfBorg build foreman

[github-actions]

Successfully created backport PR #137087 for release-21.05.

[jdelStrother]

@zimbatm the PLATFORM change in Gemfile.lock seems to now prevent starting foreman in anything other than x86_64-linux.

$ foreman --help
Traceback (most recent call last):
	3: from /nix/store/7g9fqv28yfhv8r74gm13pj15wrckvxgp-foreman-0.87.2/bin/foreman:19:in `<main>'
	2: from /nix/store/s153awgiyhpwvwr02nlwkpygj3lnyb58-bundler-2.2.24/lib/ruby/gems/2.7.0/gems/bundler-2.2.24/lib/bundler.rb:143:in `setup'
	1: from /nix/store/s153awgiyhpwvwr02nlwkpygj3lnyb58-bundler-2.2.24/lib/ruby/gems/2.7.0/gems/bundler-2.2.24/lib/bundler/definition.rb:431:in `validate_runtime!'
/nix/store/s153awgiyhpwvwr02nlwkpygj3lnyb58-bundler-2.2.24/lib/ruby/gems/2.7.0/gems/bundler-2.2.24/lib/bundler/definition.rb:462:in `validate_platforms!': Your bundle only supports platforms ["x86_64-linux"] but your local platform is arm64-darwin-20. Add the current platform to the lockfile with `bundle lock --add-platform arm64-darwin-20` and try again. (Bundler::ProductionError)

Is that a product of bundling with bundler 2.2 rather than 2.1, or something else?

[zimbatm]

@jdelStrother can you try this PR? #139456 Looks like bundler has changed.

[jdelStrother]

Thanks - looks promising. I'm away for a week though, will try it on my return

[jdelStrother]

Sorry for the late reply, but yep - looks good!