RubyGems/Bundler 4.0.0.beta1 is out now!
github.com/ruby/rubygem...
github.com/ruby/rubygem...
You can try that with `gem i bundler --pre` and regenerate lockfile or update your lockfile with `4.0.0.beta1` at `BUNDLED WITH` section. I welcome your feedback for next major release.
github.com/ruby/rubygem...
github.com/ruby/rubygem...
You can try that with `gem i bundler --pre` and regenerate lockfile or update your lockfile with `4.0.0.beta1` at `BUNDLED WITH` section. I welcome your feedback for next major release.
Release v4.0.0.beta1 · ruby/rubygems
Security:
Bump up vendored URI to 1.0.4. Pull request
#9031 by hsbt
Breaking changes:
Removed deprecated -C option from gem build. Pull request
#9088 by hsbt
Removed deprecated Gem::Specificatio...
github.com
November 20, 2025 at 4:50 AM
RubyGems/Bundler 4.0.0.beta1 is out now!
github.com/ruby/rubygem...
github.com/ruby/rubygem...
You can try that with `gem i bundler --pre` and regenerate lockfile or update your lockfile with `4.0.0.beta1` at `BUNDLED WITH` section. I welcome your feedback for next major release.
github.com/ruby/rubygem...
github.com/ruby/rubygem...
You can try that with `gem i bundler --pre` and regenerate lockfile or update your lockfile with `4.0.0.beta1` at `BUNDLED WITH` section. I welcome your feedback for next major release.
Oh, late last year I also published a post about universal precompiled native Rubygems!
mike.daless.io/posts/2025/0...
This might be interesting if you've been following along with the bundler performance conversations like this post by @tenderlove.dev:
tenderlovemaking.com/2025/12/29/c...
mike.daless.io/posts/2025/0...
This might be interesting if you've been following along with the bundler performance conversations like this post by @tenderlove.dev:
tenderlovemaking.com/2025/12/29/c...
Universal Rubygem Precompilation - mike.daless.io
mike.daless.io
January 3, 2026 at 7:45 PM
Oh, late last year I also published a post about universal precompiled native Rubygems!
mike.daless.io/posts/2025/0...
This might be interesting if you've been following along with the bundler performance conversations like this post by @tenderlove.dev:
tenderlovemaking.com/2025/12/29/c...
mike.daless.io/posts/2025/0...
This might be interesting if you've been following along with the bundler performance conversations like this post by @tenderlove.dev:
tenderlovemaking.com/2025/12/29/c...
Hey I published a new RubyGem for checking code for instance variable whoopsies
avdi.codes/announcing-i...
avdi.codes/announcing-i...
Announcing Ivar: Ruby’s Missing Instance Variable Typo Warnings
Ivar is a Ruby gem that automatically checks for typos in instance variables.
avdi.codes
May 8, 2025 at 3:45 PM
Hey I published a new RubyGem for checking code for instance variable whoopsies
avdi.codes/announcing-i...
avdi.codes/announcing-i...
I joined RubyCentral to release a postmortem, and today I'm delivering my report on what happened. The hope is to provide more transparency and closure, 194 days since the incident on September 18.
I've named the incident "RubyGems Fracture." Read my report. #ruby
rubycentral.org/news/rubygem...
I've named the incident "RubyGems Fracture." Read my report. #ruby
rubycentral.org/news/rubygem...
rubycentral.org
March 31, 2026 at 2:22 PM
I joined RubyCentral to release a postmortem, and today I'm delivering my report on what happened. The hope is to provide more transparency and closure, 194 days since the incident on September 18.
I've named the incident "RubyGems Fracture." Read my report. #ruby
rubycentral.org/news/rubygem...
I've named the incident "RubyGems Fracture." Read my report. #ruby
rubycentral.org/news/rubygem...
Here’s a note from our Executive Director regarding our recent security incident.
rubycentral.org/news/rubygem...
rubycentral.org/news/rubygem...
Rubygems.org AWS Root Access Event – September 2025
As part of standard incident-response practice, Ruby Central is publishing the following post-incident review to the public. This document summarizes the September 2025 AWS root-access event, what…
rubycentral.org
October 9, 2025 at 5:34 PM
Here’s a note from our Executive Director regarding our recent security incident.
rubycentral.org/news/rubygem...
rubycentral.org/news/rubygem...
RubyGems/Bundler 4.0.9 has been released! 💎
blog.rubygems.org/2026/03/25/4...
This version moves toward a more performant pipeline.
github.com/ruby/rubygem.... This separation allows for optimized I/O operations and paves the way for faster, parallelized gem installations.
blog.rubygems.org/2026/03/25/4...
This version moves toward a more performant pipeline.
github.com/ruby/rubygem.... This separation allows for optimized I/O operations and paves the way for faster, parallelized gem installations.
4.0.9 Released - RubyGems Blog
blog.rubygems.org
March 25, 2026 at 1:34 AM
RubyGems/Bundler 4.0.9 has been released! 💎
blog.rubygems.org/2026/03/25/4...
This version moves toward a more performant pipeline.
github.com/ruby/rubygem.... This separation allows for optimized I/O operations and paves the way for faster, parallelized gem installations.
blog.rubygems.org/2026/03/25/4...
This version moves toward a more performant pipeline.
github.com/ruby/rubygem.... This separation allows for optimized I/O operations and paves the way for faster, parallelized gem installations.
#OBS 2.10.29 is out. There are #security updates you shouldn’t skip. Multiple #CVEs were addressed in #RubyGem. If you’re running your own instance, update as soon as possible. openbuildservice.org/download/
Download
Create and Distribute Software Packages for all Major Linux Distributions with all the Tools to Work Together!
openbuildservice.org
November 24, 2025 at 9:38 AM
#OBS 2.10.29 is out. There are #security updates you shouldn’t skip. Multiple #CVEs were addressed in #RubyGem. If you’re running your own instance, update as soon as possible. openbuildservice.org/download/
Here's a direct link to the Github repo.
Open it up and give it a ⭐️ so you'll remember it later and help it look more established for the next developer that comes along and is looking for a quick way to ship a command-line app for their web app.
✌️
github.com/terminalwire...
Open it up and give it a ⭐️ so you'll remember it later and help it look more established for the next developer that comes along and is looking for a quick way to ship a command-line app for their web app.
✌️
github.com/terminalwire...
GitHub - terminalwire/ruby: RubyGem for Terminalwire
RubyGem for Terminalwire. Contribute to terminalwire/ruby development by creating an account on GitHub.
github.com
May 5, 2025 at 5:02 PM
Here's a direct link to the Github repo.
Open it up and give it a ⭐️ so you'll remember it later and help it look more established for the next developer that comes along and is looking for a quick way to ship a command-line app for their web app.
✌️
github.com/terminalwire...
Open it up and give it a ⭐️ so you'll remember it later and help it look more established for the next developer that comes along and is looking for a quick way to ship a command-line app for their web app.
✌️
github.com/terminalwire...
I've drafted an initial design proposal for the cooldown feature for RubyGems/Bundler: github.com/ruby/rubygem...
Cooldown option for bundle update and bundle outdated · ruby rubygems · Discussion #9113
@woodruffw’s “We should all be using dependency cooldowns” makes a good case that supporting a cooldown (a window of time between when a dependency is published and when it’s considered suitable fo...
github.com
April 9, 2026 at 10:54 AM
I've drafted an initial design proposal for the cooldown feature for RubyGems/Bundler: github.com/ruby/rubygem...
We’re excited to share that free #RubyGem analytics are now available to the community! 🙌
Through our partnership with ClickHouse, developers and security researchers can now query over 200 billion RubyGem download events since 2017, with new data added every hour. 👀
Through our partnership with ClickHouse, developers and security researchers can now query over 200 billion RubyGem download events since 2017, with new data added every hour. 👀
Announcing Ruby Gem analytics powered by ClickHouse and Ruby Central
In partnership with Ruby Central, we’re excited to announce that all RubyGems download data - over 180 billion rows - is now free to query at sql.clickhouse.com; explore trends, analyze usage, and…
clickhouse.com
April 16, 2025 at 12:01 PM
We’re excited to share that free #RubyGem analytics are now available to the community! 🙌
Through our partnership with ClickHouse, developers and security researchers can now query over 200 billion RubyGem download events since 2017, with new data added every hour. 👀
Through our partnership with ClickHouse, developers and security researchers can now query over 200 billion RubyGem download events since 2017, with new data added every hour. 👀
RubyGems/Bundler 4.0.3 is out now.
blog.rubygems.org/2025/12/23/4...
This release to improve handle precompiled gem with new release version of Ruby like 4.0. github.com/ruby/rubygem...
blog.rubygems.org/2025/12/23/4...
This release to improve handle precompiled gem with new release version of Ruby like 4.0. github.com/ruby/rubygem...
4.0.3 Released - RubyGems Blog
blog.rubygems.org
December 23, 2025 at 6:19 AM
RubyGems/Bundler 4.0.3 is out now.
blog.rubygems.org/2025/12/23/4...
This release to improve handle precompiled gem with new release version of Ruby like 4.0. github.com/ruby/rubygem...
blog.rubygems.org/2025/12/23/4...
This release to improve handle precompiled gem with new release version of Ruby like 4.0. github.com/ruby/rubygem...
A new AI review! guard/guard-livereload ⭐3.5/5.0
guard-livereload is a mature RubyGem plugin for the Guard ecosystem that triggers LiveReload browser refreshes when files change.
https://gitrated.com/guard/guard-livereload
guard-livereload is a mature RubyGem plugin for the Guard ecosystem that triggers LiveReload browser refreshes when files change.
https://gitrated.com/guard/guard-livereload
September 17, 2026 at 6:47 PM
A new AI review! guard/guard-livereload ⭐3.5/5.0
guard-livereload is a mature RubyGem plugin for the Guard ecosystem that triggers LiveReload browser refreshes when files change.
https://gitrated.com/guard/guard-livereload
guard-livereload is a mature RubyGem plugin for the Guard ecosystem that triggers LiveReload browser refreshes when files change.
https://gitrated.com/guard/guard-livereload
What are some bundler/rubygem situations that one might have to troubleshoot?
Common error messages, things that sometimes don't work as expected, that kind of thing...
What do you see that you'd like a bundler troubleshooting guide to cover?
Common error messages, things that sometimes don't work as expected, that kind of thing...
What do you see that you'd like a bundler troubleshooting guide to cover?
February 11, 2025 at 2:09 AM
What are some bundler/rubygem situations that one might have to troubleshoot?
Common error messages, things that sometimes don't work as expected, that kind of thing...
What do you see that you'd like a bundler troubleshooting guide to cover?
Common error messages, things that sometimes don't work as expected, that kind of thing...
What do you see that you'd like a bundler troubleshooting guide to cover?
A little intro to my gem for Rails called Satanic Pages.
It's markdown + a few niceties.
youtu.be/gxDKb-2roF8
It's markdown + a few niceties.
youtu.be/gxDKb-2roF8
Perfect Static Markdown Pages in Ruby on Rails with SATANIC PAGES
I made a new (tiny) Rubygem! Satanic Pages for Rails is Markdown views with YAML frontmatter and inline Erb. Just the way I like 'em.GET IT 📦 https://github...
www.youtube.com
May 22, 2025 at 7:48 PM
A little intro to my gem for Rails called Satanic Pages.
It's markdown + a few niceties.
youtu.be/gxDKb-2roF8
It's markdown + a few niceties.
youtu.be/gxDKb-2roF8
RubyGems 4.0.13 adds a cooldown feature to Bundler for newly published gems.
The opt-in setting lets projects delay dependency resolution for new gem versions, reducing exposure during the short window when malicious releases often spread fastest.
socket.dev/blog/rubygem...
The opt-in setting lets projects delay dependency resolution for new gem versions, reducing exposure during the short window when malicious releases often spread fastest.
socket.dev/blog/rubygem...
RubyGems Adds Cooldown Feature to Bundler for Newly Publishe...
RubyGems and Bundler 4.0.13 introduced an opt-in cooldown feature that delays newly published gems during dependency resolution.
socket.dev
June 5, 2026 at 6:39 AM
RubyGems 4.0.13 adds a cooldown feature to Bundler for newly published gems.
The opt-in setting lets projects delay dependency resolution for new gem versions, reducing exposure during the short window when malicious releases often spread fastest.
socket.dev/blog/rubygem...
The opt-in setting lets projects delay dependency resolution for new gem versions, reducing exposure during the short window when malicious releases often spread fastest.
socket.dev/blog/rubygem...
Imagine pulling the trigger on a hostile takeover just so you can be a total ass to the community propping up "your" project...
github.com/ruby/rubygem...
github.com/ruby/rubygem...
github.com/ruby/rubygem...
github.com/ruby/rubygem...
Fallback to copy symlinks on Windows by larskanis · Pull Request #9296 · ruby/rubygems
Symlinks are not permitted by default for a Windows user. To use them, a switch called "Development Mode" in the system settings has to be enabled.
What was the end-user or developer prob...
github.com
March 7, 2026 at 4:13 PM
Imagine pulling the trigger on a hostile takeover just so you can be a total ass to the community propping up "your" project...
github.com/ruby/rubygem...
github.com/ruby/rubygem...
github.com/ruby/rubygem...
github.com/ruby/rubygem...
Claude Max の OSS プログラムを活用して libyaml 使わなくても RubyGems を動くようにできないか試していたらできてしまった。
github.com/ruby/rubygem...
Thank you Anthropic.
github.com/ruby/rubygem...
Thank you Anthropic.
Imprement yaml parser written by pure ruby instead of Psych by hsbt · Pull Request #9352 · ruby/rubygems
What was the end-user or developer problem that led to this PR?
We would like to allow users to freely specify the version, but the version of the libraries used internally like Psych cannot be spe...
github.com
March 6, 2026 at 5:37 AM
Claude Max の OSS プログラムを活用して libyaml 使わなくても RubyGems を動くようにできないか試していたらできてしまった。
github.com/ruby/rubygem...
Thank you Anthropic.
github.com/ruby/rubygem...
Thank you Anthropic.
Created my first #Ruby gem that parses text and generates bluesky rich text facets! Supports these facets:
- Mentions
- Hashtags
- URLs as well as markdown-style links
API is stable, but development is still in progress.
github.com/jonathanyeon...
- Mentions
- Hashtags
- URLs as well as markdown-style links
API is stable, but development is still in progress.
github.com/jonathanyeon...
GitHub - jonathanyeong/bsky-parser: Rubygem that will parse some content and output the parsed content as well as Bluesky facets.
Rubygem that will parse some content and output the parsed content as well as Bluesky facets. - jonathanyeong/bsky-parser
github.com
February 19, 2025 at 3:01 AM
Created my first #Ruby gem that parses text and generates bluesky rich text facets! Supports these facets:
- Mentions
- Hashtags
- URLs as well as markdown-style links
API is stable, but development is still in progress.
github.com/jonathanyeon...
- Mentions
- Hashtags
- URLs as well as markdown-style links
API is stable, but development is still in progress.
github.com/jonathanyeon...
I just stumbled into a RubyGem repo that points to their cucumber specs as their official project documentation 😭
In case you're wondering, Cucumber specs are not great documentation. They're also not great tests. Not sure what they're great at TBH.
And no, I'm not going to name the project.
In case you're wondering, Cucumber specs are not great documentation. They're also not great tests. Not sure what they're great at TBH.
And no, I'm not going to name the project.
February 23, 2025 at 9:41 PM
I just stumbled into a RubyGem repo that points to their cucumber specs as their official project documentation 😭
In case you're wondering, Cucumber specs are not great documentation. They're also not great tests. Not sure what they're great at TBH.
And no, I'm not going to name the project.
In case you're wondering, Cucumber specs are not great documentation. They're also not great tests. Not sure what they're great at TBH.
And no, I'm not going to name the project.
🆕 @whiskey.fm #213
NPM Worms & RubyGems Coups:
Trust Issues in Open Source
Crappy whiskey and chats about Tailwind as a “state management library,” security scares in open source, dependency hygiene, developer visa drama, tech salaries and whatnot.
⤷ nerdy.dev/www-ep214-np...
NPM Worms & RubyGems Coups:
Trust Issues in Open Source
Crappy whiskey and chats about Tailwind as a “state management library,” security scares in open source, dependency hygiene, developer visa drama, tech salaries and whatnot.
⤷ nerdy.dev/www-ep214-np...
WWW Ep214 Npm Worms Rubygem Coups · October 21, 2025
Ep #214 NPM Worms & RubyGems Coups: Trust Issues in Open Source Robbie , Chuck , and I talk about the worst whiskey, Tailwind as a “state management library,” recent security scares in open source...
nerdy.dev
October 21, 2025 at 12:35 AM
🆕 @whiskey.fm #213
NPM Worms & RubyGems Coups:
Trust Issues in Open Source
Crappy whiskey and chats about Tailwind as a “state management library,” security scares in open source, dependency hygiene, developer visa drama, tech salaries and whatnot.
⤷ nerdy.dev/www-ep214-np...
NPM Worms & RubyGems Coups:
Trust Issues in Open Source
Crappy whiskey and chats about Tailwind as a “state management library,” security scares in open source, dependency hygiene, developer visa drama, tech salaries and whatnot.
⤷ nerdy.dev/www-ep214-np...
🎉 Big news for #Ruby teams! After 6 months of successful beta testing, our Rubygems ecosystem support is now GA.
Socket's scanning catches supply chain threats that traditional tools miss. Secure your repos today! → socket.dev/blog/rubygem... #rails @lucianghinda.com
Socket's scanning catches supply chain threats that traditional tools miss. Secure your repos today! → socket.dev/blog/rubygem... #rails @lucianghinda.com
Rubygems Ecosystem Support Now Generally Available - Socket
Socket's Rubygems ecosystem support is moving from beta to GA, featuring enhanced security scanning to detect supply chain threats beyond traditional ...
socket.dev
April 15, 2025 at 10:03 PM
🎉 Big news for #Ruby teams! After 6 months of successful beta testing, our Rubygems ecosystem support is now GA.
Socket's scanning catches supply chain threats that traditional tools miss. Secure your repos today! → socket.dev/blog/rubygem... #rails @lucianghinda.com
Socket's scanning catches supply chain threats that traditional tools miss. Secure your repos today! → socket.dev/blog/rubygem... #rails @lucianghinda.com
이 이상하다..
gem 관리를 안 해서 오랜만에 연 코드가 어떤 gem 참조하고 있었는지 모르겠음
정황상 rubygem이고 파라미터 3개를 넘겨주고 있었는데, 지금 문서 보니까 샘플엔 파라미터가 없음.
로컬에서 돌리면 파라미터 1~2개 달라고 함.
gem 관리를 안 해서 오랜만에 연 코드가 어떤 gem 참조하고 있었는지 모르겠음
정황상 rubygem이고 파라미터 3개를 넘겨주고 있었는데, 지금 문서 보니까 샘플엔 파라미터가 없음.
로컬에서 돌리면 파라미터 1~2개 달라고 함.
September 27, 2025 at 3:10 AM
이 이상하다..
gem 관리를 안 해서 오랜만에 연 코드가 어떤 gem 참조하고 있었는지 모르겠음
정황상 rubygem이고 파라미터 3개를 넘겨주고 있었는데, 지금 문서 보니까 샘플엔 파라미터가 없음.
로컬에서 돌리면 파라미터 1~2개 달라고 함.
gem 관리를 안 해서 오랜만에 연 코드가 어떤 gem 참조하고 있었는지 모르겠음
정황상 rubygem이고 파라미터 3개를 넘겨주고 있었는데, 지금 문서 보니까 샘플엔 파라미터가 없음.
로컬에서 돌리면 파라미터 1~2개 달라고 함.