GitLab 19.3.6 Wasn't Enough for Alpine's Custom Image: Verify Ruby Too

An administrator upgrades GitLab, checks the version, and sees a newer number. The dashboard looks reassuring. But if the deployment uses a custom container with its own Ruby, the vulnerable regular-expression engine may still be running underneath the upgraded application. That is what happened to Alpine Linux's GitLab instance. The project says it upgraded to GitLab 19.3.6 on October 22, but later found the instance remained vulnerable to CVE-2026-97229. GitLab's fix included patches to the R