Summary This branch implements ~35 performance optimizations to Bundler's installation pipeline, inspired by tenderlove's blog post and by studying uv's actual source code architecture....

A flaw was found in the foreman_ansible plugin's Ansible inventory API. The controller builds its host query using an unscoped Host.where call that does not enforce the search filter associated with the caller's view_hosts permission. An authenticated user whose host visibility is restricted by a permission filter can supply arbitrary …

Researchers linked OpenAI agents to RubyGems abuse and alleged RubyDoc RCE, highlighting risks around autonomous AI, build systems, and credentials. OpenAI agents are linked to more than 2,000 RubyGem...

Release video for Glimmer DSL for Web (Award-Winning Frontend Framework for Ruby on Rails) 0.10.5 Before & After Mutations. Glimmer DSL Web Release Version 0.10.5 GitHub : GitHub - AndyObtiva/glimmer-dsl-web: Glimmer DSL for Web (Ruby-in-the-Browser Web Frontend Framework). The "Rails" of Frontend Frameworks!!! · GitHub RubyGem : glimmer-dsl-web | RubyGems.org | your community gem host Blog Post : Code Master Blog: Video: Glimmer DSL for Web 0.10.5 Before & After Mutations ··· (click for more details)

Release video for Glimmer DSL for Web (Award-Winning Frontend Framework for Ruby on Rails) 0.10.5 Before & After Mutations. Glimmer DSL Web Release Version 0.10.5 GitHub : GitHub - AndyObtiva/glimmer-dsl-web: Glimmer DSL for Web (Ruby-in-the-Browser Web Frontend Framework). The "Rails" of Frontend Frameworks!!! · GitHub RubyGem : glimmer-dsl-web | RubyGems.org | your community gem host Blog Post : Code Master Blog: Video: Glimmer DSL for Web 0.10.5 Before & After Mutations ··· (click for more details)

Reported Sunday, Sep 13 - 9:17pm EDT (TheFly subscription required to read more.)

By: Richard Schneeman This document attempts to give closure to the Ruby community about the events that led to the incident, September 10-18, 2025, which I’ve named “RubyGems Fracture.” Preamble...

On May 11th, 2026, hundreds of malicious packages were uploaded to RubyGems by AI agents performing web-lookup tasks with significant overlap with the German Wiki Incident.

Researchers found more than 2,000 malicious RubyGem packages uploaded by a swarm of OpenAI agents, which also tried to exploit a recent RubyGem API key vulnerability and used disposable emails to create accounts. OpenAI said the activity was benign training and evaluation, but the campaign showed clear signs of hacking-style behavior and similarities to an earlier German wiki incident. #OpenAI #RubyGems #GermanWiki

Release video for Glimmer DSL for Web (Award-Winning Frontend Framework for Ruby on Rails) 0.10.4 Insert Mutation: Glimmer DSL Web Release Version 0.10.4 GitHub : GitHub - AndyObtiva/glimmer-dsl-web: Glimmer DSL for Web (Ruby-in-the-Browser Web Frontend Framework). The "Rails" of Frontend Frameworks!!! · GitHub RubyGem : glimmer-dsl-web | RubyGems.org | your community gem host Blog Announcement : andymaleh.blogspot.com ### Glimmer DSL for Web 0.10.4 Insert Mutation code master oop ruby jruby java jee jse desktop web gui glimmer swt libui tk gtk rails ··· (click for more details)

Release video for Glimmer DSL for Web (Award-Winning Frontend Framework for Ruby on Rails) 0.10.4 Insert Mutation: Glimmer DSL Web Release Version 0.10.4 GitHub : GitHub - AndyObtiva/glimmer-dsl-web: Glimmer DSL for Web (Ruby-in-the-Browser Web Frontend Framework). The "Rails" of Frontend Frameworks!!! · GitHub RubyGem : glimmer-dsl-web | RubyGems.org | your community gem host Blog Announcement : andymaleh.blogspot.com ### Glimmer DSL for Web 0.10.4 Insert Mutation code master oop ruby jruby java jee jse desktop web gui glimmer swt libui tk gtk rails ··· (click for more details)

Release video for Glimmer DSL for Web (Award-Winning Frontend Framework for Ruby on Rails) 0.10.4 Insert Mutation: Glimmer DSL Web Release Version 0.10.4 GitHub : GitHub - AndyObtiva/glimmer-dsl-web: Glimmer DSL for Web (Ruby-in-the-Browser Web Frontend Framework). The "Rails" of Frontend Frameworks!!! · GitHub RubyGem : glimmer-dsl-web | RubyGems.org | your community gem host Blog Announcement : andymaleh.blogspot.com ### Glimmer DSL for Web 0.10.4 Insert Mutation code master oop ruby jruby java jee jse desktop web gui glimmer swt libui tk gtk rails ··· (click for more details)

Security updates have been issued by **AlmaLinux** (gzip, iperf3, libxml2, mingw-sqlite, mysql:8.4, nginx:1.26, nodejs:24, php, and tar), **Debian** (expat and libdbd-csv-perl), **Fedora** (apache-ivy, bind, bluez, bubblewrap, curl, emacs, epiphany, expat, freerdp, gdk-pixbuf2, GitPython, hcloud, kbd, kernel, lego, libopenmpt, mqttcli, nebula, opkssh, python-mkdocs-git-revision-date-localized-plugin, python-pip, rpki-client, rubygem-mechanize, srt, and subfinder), **Mageia** (c-ares, clamav, expat, mingq-expat, firefox, nspr, nss, flatpak, hplip, jbig2dec, nodejs, openssl, perl-Catalyst-Plugin-Authentication, perl-Date-Manip, perl-HTML-FormHandler, perl-HTTP-Date, perl-Mojolicious, perl-Plack, postgresql15, postgresql18, python-hpack, redis, roundcubemail, thunderbird, varnish, and vim), **Oracle** (golang and libxml2), **Red Hat** (bind, bind9.18, dracut, glib2, golang, gzip, kernel, kernel-rt, openssl, osbuild-composer, tar, and unbound), **SUSE** (7zip, busybox, bzip2, c-ares, chromedriver, chromium, cpio, curl, dhcpcd, dovecot24, dracut, firefox, go1.25, go1.26, go1.26-openssl, google-cloud-sap-agent, gstreamer-plugins-bad, gzip, helm, ImageMagick, istioctl, jfrog-cli, jupyter-jupyterlab, libarchive, libcares2, libheif, liboqs, librest, openssl-1_1, openssl-3, owasp-modsecurity-crs, pcp, php-composer2, postgresql14, postgresql15, postgresql17, postgresql18, python-cryptography, python-httplib2, python-pip, python313, python313-djangorestframework, python313-starlette, qemu, qt6-svg, quagga, rav1e, rmt-server, rsync, rsyslog, snphost, sssd, thunderbird, unbound, vim, wget, xmlrpc-c, yast2-auth-client, and yast2-samba-client), and **Ubuntu** (attr, bind9, coreutils, cpio, diffutils, freerdp3, libssh, mysql-8.0, mysql-8.4, openjdk-17-crac, openjdk-21-crac, openjdk-25-crac, openssl, p11-kit, perl, pillow, udisks2, util-linux, webkit2gtk, zfs-linux, and zlib).

Glimmer DSL for Web 0.10.0 & 0.10.1 Release Video : Glimmer DSL Web Release Version 0.10.0 & 0.10.1 GitHub : GitHub - AndyObtiva/glimmer-dsl-web: Glimmer DSL for Web (Ruby-in-the-Browser Web Frontend Framework). The "Rails" of Frontend Frameworks!!! · GitHub RubyGem : glimmer-dsl-web | RubyGems.org | your community gem host Blog : Code Master Blog: Glimmer DSL for Web 0.10.1 Auto-Conversion of Date/Time Element Values + New Sample Happy Glimmering! ··· (click for more details)

Description Bundler fails to evaluate a local gemspec when Ruby Box is enabled with RUBY_BOX=1. The failure occurs before the requested command runs: Bundler::GemspecError: There was an error while...

hkob の雑記録 第552回は、DateProperty の見直しをNotion AIとペアプログラミングで実施し、実装・テスト・リファレンス更新、Rubygem 4.0.2をリリースしました (要約 by Notion AI) #NotionTips #Ruby

RubyGems keeps the push API key in ~/.gem/credentials and Bundler keeps host credentials in .bundle/config, both as plain text. This adds an opt-in credential store, shared by both, that keeps thos...

This is the first phase of converging RubyGems and Bundler on a single layout. Bundler currently lives under bundler/ with its own lib, exe, gemspec, and docs, while ruby/ruby already vendors Bundl...

What was the end-user or developer problem that led to this PR? On 32-bit AIX, gem source --add and gem update --system crash with [FATAL] failed to allocate memory (#9368). Two independent causes:...

Security updates have been issued by AlmaLinux (kernel), Debian (dovecot, exim4, frr, and haveged), Fedora (cockpit, freeipa, jpegxl, libre, nextcloud, perl-Cpanel-JSON-XS, perl-Crypt-Argon2, perl-Dist-Build, perl-ExtUtils-Builder, perl-ExtUtils-Builder-Compiler, perl-HTTP-Tiny, perl-libwww-perl, python-starlette, rubygem-yard, rust-sequoia-cert-store, rust-sequoia-chameleon-gnupg, rust-sequoia-octopus-librnp, rust-sequoia-sop, rust-sequoia-sq, rust-sequoia-wot, samba, and transmission), Red Hat (image-builder), Slackware (dnsmasq and libinput), SUSE (evince, glibc, google-guest-agent, hplip, ignition, LibVNCServer, libzypp, libsolv, python-Pillow, salt, thunderbird, and vim), and Ubuntu (apache2, linux, linux-aws, linux-aws-5.15, linux-aws-fips, linux-fips, linux-gcp, linux-gcp-5.15, linux-gcp-fips, linux-gke, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iot-realtime, linux-intel-iotg, linux-kvm, linux-nvidia, linux-nvidia-tegra, linux-nvidia-tegra-5.15, linux-nvidia-tegra-igx, linux-oracle, linux-raspi, linux-realtime, linux, linux-aws, linux-aws-fips, linux-azure, linux-azure-5.4, linux-azure-fips, linux-bluefield, linux-fips, linux-gcp, linux-gcp-5.4, linux-gcp-fips, linux-iot, linux-kvm, linux-oracle, linux-oracle-5.4, linux-xilinx-zynqmp, linux, linux-azure, linux-azure-4.15, linux-azure-fips, linux-fips, linux-gcp-4.15, linux-gcp-fips, linux-kvm, linux-oracle, linux-aws-5.4, linux-hwe-5.4, linux-azure-fips, linux-fips, linux-raspi, linux-raspi-5.4, nano, postfix, robocode, tomcat6, tomcat7, and yard).