Merge pull request #20390 from adfoster-r7/pin-stringio-version

Pin StringIO version

Author: cgranleese-r7

Gemfile.lock

@@ -104,6 +104,7 @@ PATH
       sinatra
       sqlite3 (= 1.7.3)
       sshkey
+      stringio (= 3.1.1)
       swagger-blocks
       syslog
       thin
@@ -601,7 +602,7 @@ GEM
     sqlite3 (1.7.3)
       mini_portile2 (~> 2.8.0)
     sshkey (3.0.0)
-    stringio (3.1.7)
+    stringio (3.1.1)
     strptime (0.2.5)
     swagger-blocks (3.0.0)
     syslog (0.3.0)

metasploit-framework.gemspec

@@ -261,6 +261,10 @@ Gem::Specification.new do |spec|
   # Needed for generic in-memory cachine
   spec.add_runtime_dependency 'lru_redux'
 
+  # Pinned on 3.1.1 as it is the version supported by our Ruby 3.3.8 dependency to avoid this issue https://github.com/rubygems/rubygems/issues/7657#issuecomment-2521083323
+  # When Ruby ships with `gem --version` 3.6.0 or higher by default this can be removed
+  spec.add_runtime_dependency 'stringio', '3.1.1'
+
   # Standard libraries: https://www.ruby-lang.org/en/news/2023/12/25/ruby-3-3-0-released/
   %w[
     abbrev