Fix Dependabot security update for concurrent-ruby in react-native (#57355)

Summary:

The Dependabot GitHub Action on `react/react-native` `main` has been failing repeatedly because of `concurrent-ruby`. A security advisory marks `concurrent-ruby < 1.3.7` as affected (patched in `1.3.7`), but all three RN Gemfiles pin `gem 'concurrent-ruby', '<= 1.3.4'`. Dependabot cannot satisfy the advisory under that pin, so it opens a security PR to bump to `1.3.7` and then, on every subsequent run, reports `pull_request_exists_for_latest_version` as a hard error — failing the check and regenerating the internal CI task.

The `<= 1.3.4` upper bound was originally added because `concurrent-ruby 1.3.5` dropped its `logger` dependency, which broke older `activesupport`/CocoaPods setups. That cause is already mitigated: every Gemfile now explicitly lists `gem 'logger'`. The upper-bound pin is therefore obsolete.

This change relaxes the constraint from `<= 1.3.4` to `>= 1.3.7` in all three Gemfiles (root, `private/helloworld`, `packages/rn-tester`) and updates the two corresponding `Gemfile.lock` files to resolve `concurrent-ruby 1.3.7`. `1.3.7` introduces no new transitive dependencies over `1.3.4`, so no other lockfile entries change. With the advisory satisfied on `main`, Dependabot stops recreating the security PR and the recurring check failure stops.

Differential Revision: D109967250

Author: christophpurrer

Gemfile

@@ -4,12 +4,15 @@ source 'https://rubygems.org'
 ruby ">= 2.6.10"
 
 gem 'cocoapods', '~> 1.13', '!= 1.15.0', '!= 1.15.1'
+# Ruby 3.4.0 has removed some libraries from the standard library.
+# logger must be loaded before activesupport to avoid uninitialized constant
+# ActiveSupport::LoggerThreadSafeLevel::Logger error with activesupport 6.1.7.10.
+gem 'logger'
 gem 'activesupport', '>= 6.1.7.5', '< 7.1.0'
 gem 'xcodeproj', '< 1.26.0'
-gem 'concurrent-ruby', '<= 1.3.4'
+gem 'concurrent-ruby', '>= 1.3.7'
 
 # Ruby 3.4.0 has removed some libraries from the standard library.
 gem 'bigdecimal'
-gem 'logger'
 gem 'benchmark'
 gem 'mutex_m'

Gemfile.lock

@@ -55,7 +55,7 @@ GEM
       netrc (~> 0.11)
     cocoapods-try (1.2.0)
     colored2 (3.1.2)
-    concurrent-ruby (1.2.2)
+    concurrent-ruby (1.3.7)
     escape (0.0.4)
     ethon (0.16.0)
       ffi (>= 1.15.0)
@@ -97,7 +97,7 @@ DEPENDENCIES
   benchmark
   bigdecimal
   cocoapods (~> 1.13, != 1.15.1, != 1.15.0)
-  concurrent-ruby (<= 1.3.4)
+  concurrent-ruby (>= 1.3.7)
   logger
   mutex_m
   xcodeproj (< 1.26.0)

packages/rn-tester/Gemfile

@@ -7,13 +7,16 @@ ruby ">= 2.6.10"
 # bound in the template on Cocoapods with next React Native release.
 gem 'cocoapods', '~> 1.13', '!= 1.15.0', '!= 1.15.1'
 gem 'rexml'
+# Ruby 3.4.0 has removed some libraries from the standard library.
+# logger must be loaded before activesupport to avoid uninitialized constant
+# ActiveSupport::LoggerThreadSafeLevel::Logger error with activesupport 6.1.7.10.
+gem 'logger'
 gem 'activesupport', '>= 6.1.7.5', '< 7.1.0'
 gem 'xcodeproj', '< 1.26.0'
-gem 'concurrent-ruby', '<= 1.3.4'
+gem 'concurrent-ruby', '>= 1.3.7'
 
 # Ruby 3.4.0 has removed some libraries from the standard library.
 gem 'bigdecimal'
-gem 'logger'
 gem 'benchmark'
 gem 'mutex_m'
 gem 'nkf'

private/helloworld/Gemfile

@@ -3,13 +3,16 @@ source 'https://rubygems.org'
 ruby ">= 2.6.10"
 
 gem 'cocoapods', '~> 1.13', '!= 1.15.0', '!= 1.15.1'
+# Ruby 3.4.0 has removed some libraries from the standard library.
+# logger must be loaded before activesupport to avoid uninitialized constant
+# ActiveSupport::LoggerThreadSafeLevel::Logger error with activesupport 6.1.7.10.
+gem 'logger'
 gem 'activesupport', '>= 6.1.7.5', '< 7.1.0'
 gem 'xcodeproj', '< 1.26.0'
-gem 'concurrent-ruby', '<= 1.3.4'
+gem 'concurrent-ruby', '>= 1.3.7'
 
 # Ruby 3.4.0 has removed some libraries from the standard library.
 gem 'bigdecimal'
-gem 'logger'
 gem 'benchmark'
 gem 'mutex_m'
 gem 'nkf'

private/helloworld/Gemfile.lock

@@ -58,7 +58,7 @@ GEM
       netrc (~> 0.11)
     cocoapods-try (1.2.0)
     colored2 (3.1.2)
-    concurrent-ruby (1.3.4)
+    concurrent-ruby (1.3.7)
     escape (0.0.4)
     ethon (0.16.0)
       ffi (>= 1.15.0)
@@ -101,7 +101,7 @@ DEPENDENCIES
   benchmark
   bigdecimal
   cocoapods (~> 1.13, != 1.15.1, != 1.15.0)
-  concurrent-ruby (<= 1.3.4)
+  concurrent-ruby (>= 1.3.7)
   ffi (>= 1.17.2)
   logger
   mutex_m