#RubyGems
LightNews LightNews
seyhunak.bsky.social
Huge thanks to Anthropic and Claude supports me to speed up delivery of new edition twitter-bootstrap-rails 5.5.0 is out! 🚀

Repo: github.com/seyhunak/twi...
RubyGems: rubygems.org/gems/twitter...

#RubyOnRails #RubyGems #OpenSource
November 7, 2026 at 9:37 AM
andycroll.bsky.social
They'd hallucinate attendance and just "hallway track" each other into Rubygems again.
November 6, 2026 at 7:34 AM
hsbt.org
Part 2 of What's New in RubyGems/Bundler 4.1 covers supply chain defenses. Cooldown comes to the gem command, credentials can live in the OS keychain, and gem push attaches attestations on GitHub Actions. The final 4.1.0 release is coming soon.
dev.to/hsbt/whats-n...
What's New in RubyGems/Bundler 4.1, Part 2: Defenses Against Supply Chain Attacks
I'm Hiroshi Shibata (hsbt), a Ruby committer and the lead maintainer of RubyGems and Bundler. ...
dev.to
November 6, 2026 at 9:11 AM
campuscodi.risky.biz
-US Treasury sanctions more cyber scammers
-Ukraine detains cyber scam gang
-Former FBI pleads guilty to crypt theft
-New RubyGems malware
-BO Team tried to pull off a supply chain attack
-Storm-3358 linked to Cambodia
-New malware: Greeter framework, PSK Agent RAT, Armorsteal, Marsalek MaaS
November 9, 2026 at 8:09 AM
hsbt.org
RubyGems 4.0.24 and Bundler 4.0.24 are out. This is one of our regular releases, and we keep fixing bugs so the fixes reach you. Update with gem update --system. blog.rubygems.org/2026/11/05/4...
4.0.24 Released
RubyGems 4.0.24 includes enhancements, bug fixes and documentation and Bundler 4.0.24 includes enhancements and bug fixes.
blog.rubygems.org
November 5, 2026 at 3:03 AM
ai-linkstream.bsky.social
OpenAI's new AI model, Swarm Chaser, enhances collaborative problem-solving by directing AI swarms using tools from RubyGems and Hugging Face. https://www.wsj.com/tech/ai/swarm-chaser-openai-rubygems-hugging-face-7d55b51f
https://www.wsj.com/tech/ai/swarm-chaser-openai-rubygems-hugging-face-7d55b51f
OpenAI's new AI model, Swarm Chaser, enhances collaborative problem-solving by directing AI swarms using tools from RubyGems and Hugging Face.
www.wsj.com
November 6, 2026 at 10:20 PM
radwebhosting.com
How to Install #GitLab on #AlmaLinux #VPS Easily

In this tutorial we are going to show you in detail how to install Gitlab on AlmaLinux VPS.
What is GitLab?
GitLab is open-source ...
Continued 👉 #dedicatedserver #rubygems #selfhosting #installguide #selfhosted #rubyonrails #opensource
How to Install GitLab on AlmaLinux VPS Easily
blog.radwebhosting.com
November 8, 2026 at 2:27 PM
andrewnez.bsky.social
You can now choose a 1, 3 or 7 day release cooldown at proxy.ecosyste.ms.

Example: proxy.ecosyste.ms/cooldown/3d/...

Proxy currently supports cooldowns for npm, PyPI (pip/uv), RubyGems (Bundler), Go modules, Cargo, Composer, Hex, pub.dev, Maven, NuGet, Conda and Helm.
Proxy | ecosyste.ms
proxy.ecosyste.ms caches downloads from public package registries. Find configuration instructions for your package manager.
proxy.ecosyste.ms
November 6, 2026 at 12:15 PM
hendryadrian.bsky.social
Aikido reports that RubyGems extensions and plugins can execute code during installation, and plugins can run on later gem commands. It found four gems sending data; opt-out controls are available in RubyGems and Bundler 4.1 prereleases, not stable 4.0.x.
RubyGems Extensions and Plugins Can Execute Code During Installation
Aikido reports that RubyGems extensions and plugins can execute code during installation, and plugins can run on later gem commands. It found four gems…
cyber.hendryadrian.com
November 6, 2026 at 5:00 AM
saeloun.com
Our favourite gem this season isn’t on RubyGems. It’s the people we get to build with. Happy Diwali 🪔

#HappyDiwali #RubyOnRails #Saeloun
November 8, 2026 at 4:30 AM
undercodenews.bsky.social
RubyGems Supply-Chain Security Warning: Aikido Finds Plugins Transmitting Data During Installation and Command Execution + Video

Introduction: Developer Tools Become Another Software Supply-Chain Risk Ruby developers may face an overlooked security and privacy risk involving the RubyGems…
RubyGems Supply-Chain Security Warning: Aikido Finds Plugins Transmitting Data During Installation and Command Execution + Video
Introduction: Developer Tools Become Another Software Supply-Chain Risk Ruby developers may face an overlooked security and privacy risk involving the RubyGems ecosystem. Security researchers at Aikido have reported that RubyGems extensions and plugins can execute code during installation, while certain plugins can continue running whenever developers execute subsequent gem commands. The discovery highlights an important security concern: installing a development dependency does not necessarily mean that its code runs only once.
undercodenews.com
November 6, 2026 at 5:26 AM
hgomez.bsky.social
Pour le coup, il y a des solutions qui sortent qui sont déjà très solides. github.com/openartifact... celui là par exemple, il n'a rien à envier à un Artifactory Pro. Un seul gars et une IA. Chapeau
GitHub - openartifact/openartifact: Self-hosted artifact repository for many package formats: Maven, npm, PyPI, Docker/OCI, Helm, Debian, RPM, Go, Cargo, NuGet, RubyGems, Conda, Conan, Ivy, sbt and mo...
Self-hosted artifact repository for many package formats: Maven, npm, PyPI, Docker/OCI, Helm, Debian, RPM, Go, Cargo, NuGet, RubyGems, Conda, Conan, Ivy, sbt and more. - openartifact/openartifact
github.com
November 4, 2026 at 3:11 PM
rubycoder.bsky.social
ruby_llm-providers-claude_code bridges claude code cli into rubyllm, letting you tap claude's agentic capabilities and tool use through batch stdin/stdout without leaving ruby.

https://rubycoder.ai/item/ruby-llm-providers-claude-code

#rubygems #ruby
ruby_llm-providers-claude_code
A RubyLLM provider gem that integrates Claude Code CLI, enabling you to use Claude's agentic capabilities with tools and resumable sessions as a RubyLLM model provider through batch stdin/stdout communication.
rubycoder.ai
November 8, 2026 at 8:00 PM
ai-linkstream.bsky.social
The WSJ article discusses rising AI tools like OpenAI and Hugging Face, their impact on software, and the trend of using AI for enhanced creativity in programming. https://www.wsj.com/tech/ai/swarm-chaser-openai-rubygems-hugging-face-7d55b51f
https://www.wsj.com/tech/ai/swarm-chaser-openai-rubygems-hugging-face-7d55b51f
The WSJ article discusses rising AI tools like OpenAI and Hugging Face, their impact on software, and the trend of using AI for enhanced creativity in programming.
www.wsj.com
November 6, 2026 at 11:30 PM
rubycoder.bsky.social
ruby_llm-providers-copilot pipes github copilot cli into json events, so you can use copilot's agentic features and tool calling anywhere rubyllm expects a model.

https://rubycoder.ai/item/ruby-llm-providers-copilot

#rubygems #ruby
ruby_llm-providers-copilot
Integrates GitHub Copilot as a provider for RubyLLM, enabling Copilot's agentic capabilities with tools, MCP servers, and resumable sessions to be used anywhere RubyLLM expects a model. Pipes prompts to Copilot CLI and reads back JSON events for seamless agent integration.
rubycoder.ai
November 9, 2026 at 2:00 AM
pkgradar.bsky.social
📊 In the last day: 1 malicious package caught across rubygems, ahead of the public advisory. We were first on 50%.

#malware #supplychainsecurity #opensource
Flagged-first coverage
1 malicious packages flagged across rubygems, before their public advisories.
pkgradar.com
November 2, 2026 at 8:57 AM
alchemy-cms.com
🎉 alchemy_cms v8.4.3 has been released!

https://github.com/AlchemyCMS/alchemy_cms/releases/tag/v8.4.3

#rubygems #ruby #rails #cms #alchemycms
Release v8.4.3 · AlchemyCMS/alchemy_cms · GitHub
What's Changed Security fix(security): Verify CSRF token before loading the current user. GHSA-cqh4-xxr9-qc73 fix(security): Restrict writable ingredient attributes on elements. GHSA-3v87-v27q...
github.com
November 9, 2026 at 8:41 PM
rubycoder.bsky.social
the legion-gaia gem handles orchestration for multi-agent systems, managing tick cycles and communication channels so you can focus on the agent logic itself.

https://rubycoder.ai/item/legion-gaia

#rubygems #ruby
November 3, 2026 at 2:00 PM
rubycoder.bsky.social
the video_frame_interpolation gem wraps videoupscaler's api to handle 4k upscaling, 60fps interpolation, denoising and stabilization, plus it hooks into n8n/make/zapier for automation workflows.

https://rubycoder.ai/item/video-frame-interpolation

#rubygems #ruby
video_frame_interpolation
Official Ruby SDK for VideoUpscaler that enables AI-powered video enhancement including 4K upscaling, frame interpolation to 60FPS, denoising, and stabilization. Integrates with workflow automation platforms like n8n, Make, and Zapier for streamlined video processing pipelines.
rubycoder.ai
November 6, 2026 at 2:00 AM
rubycoder.bsky.social
the notebooklm gem gives you all 56 google notebooklm operations as ruby methods through a local mcp server, zero runtime dependencies.

https://rubycoder.ai/item/notebooklm

#rubygems #ruby
notebooklm
Ruby gem providing programmatic access to Google NotebookLM through a local MCP server, exposing 56 documented operations as Ruby methods with zero runtime dependencies.
rubycoder.ai
November 8, 2026 at 2:00 PM
radwebhosting.com
How to Host Your Own #Mastodon Server on a #VPS (5 Minute Quick-Start Guide)

This article provides a guide for how to host your own Mastodon server on a VPS.

Running your own Mastodon server on a VPS ...
Continued 👉 #activitypub #selfhosted #rubygems #installguide #rubyonrails #selfhosting
How to Host Your Own Mastodon Server on a VPS (5 Minute Quick-Start Guide)
blog.radwebhosting.com
November 4, 2026 at 3:30 PM
rubycoder.bsky.social
the spectre gem makes it pretty painless to wire up llm stuff into rails apps without all the boilerplate usually required for ai integrations.

https://rubycoder.ai/item/spectre

#rubygems #ruby
Spectre
A Ruby gem that simplifies integrating AI capabilities into Rails applications, providing straightforward abstractions for common AI tasks and workflows.
rubycoder.ai
November 7, 2026 at 2:00 AM
rubycoder.bsky.social
simplecov-ai turns coverage reports into clean markdown that llms can actually parse, matching gaps to ast boundaries so ai tooling can suggest real improvements instead of guessing.

https://rubycoder.ai/item/simplecov-ai

#rubygems #ruby
simplecov-ai
Generates concise, deterministic Markdown coverage digests optimized for LLMs and autonomous agents by matching coverage gaps to AST semantic boundaries, enabling more effective AI-driven code analysis and improvement.
rubycoder.ai
November 10, 2026 at 2:00 AM
rubycoder.bsky.social
rpeft brings lora fine-tuning to ruby through pycall, giving you train, adapter, and merge workflows without leaving your rails stack.

https://rubycoder.ai/item/rpeft

#rubygems #ruby
rpeft
A Ruby interface for LoRA fine-tuning of large language models, leveraging PyTorch, Hugging Face Transformers, and PEFT through PyCall. Provides a Ruby API and CLI for the complete train, adapter, and merge lifecycle.
rubycoder.ai
November 7, 2026 at 2:00 PM
andrewnez.mastodon.social.ap.brid.gy
You can now choose a 1, 3 or 7 day release cooldown at https://proxy.ecosyste.ms.

Example: https://proxy.ecosyste.ms/cooldown/3d/npm/

Proxy currently supports cooldowns for npm, PyPI (pip/uv), RubyGems (Bundler), Go modules, Cargo, Composer, Hex, pub.dev, Maven, NuGet, Conda and Helm.
Proxy | ecosyste.ms
proxy.ecosyste.ms caches downloads from public package registries. Find configuration instructions for your package manager.
proxy.ecosyste.ms
November 6, 2026 at 12:14 PM