Will solidus drop rails 7.0 support

[fthobe]

Rails 7.0 is dropped from support April 1st. Will solidus drop it as well with the next major? @jarednorman

[jarednorman]

We like to give some leeway if possible, but will drop support as soon as it's inconvenient to keep. Why do you ask?

[fthobe]

I feel a lot of gems are pinned and some of them definitely shouldn't be. The minimum devise version has CVE entries for example. I feel consistently enforcing the minimum requirements for Ruby / Rails might be the better solution as long as there's nobody hunting down problematic dependencies.

[jarednorman]

Yeah, we've discussed that bit, but haven't made a decision.

[fthobe]

There should be a note that installations below certain releases of devise cause security issues.