Ruby Issue Tracking System

05/29/2026

07:50 AM Ruby Revision 3ecee760 (git): [ruby/rubygems] Rename Windows tag groups to test shards

These groups now drive the macOS Intel split as well as Windows, so the
"windows" naming no longer fits. Rename the module to Spec::Shards and
the tags to shard_a..d.
https://github.com/ruby/rubygems/commit/139d8b7232
Co-Authored-By: C... hsbt (Hiroshi SHIBATA)

05:52 AM Ruby Revision eab8cbe5 (git): [ruby/rubygems] Vendor compact_index from rubygems.org for the artifice

The external compact_index gem is no longer developed; its source now
lives in rubygems/rubygems.org. Replace the runtime gem dependency with
a rake task that fetches the five files into tmp/compact_index/ when
`rake setup` (and therefor... hsbt (Hiroshi SHIBATA)

02:30 AM Ruby Revision 75dcef69 (git): Ignore misfeature findings for tarball-windows.yml

tarball-windows.yml is a CMD-based Windows build like mingw.yml and
windows.yml, which are already baselined for the misfeature audit. hsbt (Hiroshi SHIBATA)

02:30 AM Ruby Revision 28c8bef6 (git): Restrict GITHUB_TOKEN permissions in tarball reusable workflows

These reusable workflows only check out, download artifacts, build, and
test, so contents: read is sufficient. hsbt (Hiroshi SHIBATA)

02:30 AM Ruby Revision f00e912d (git): Do not persist credentials in tarball-test checkout

The subsequent git steps only fetch from the public origin and operate
on local branches, so the token does not need to be persisted. hsbt (Hiroshi SHIBATA)

02:30 AM Ruby Revision daea4807 (git): Pass only the required secrets to tarball reusable workflows

Replace secrets: inherit with explicit Slack webhook secrets, which are
the only secrets the ubuntu/macos/windows builds use. tarball-non-development
uses no secrets, so drop inherit there entirely. hsbt (Hiroshi SHIBATA)

02:30 AM Ruby Revision 6a86a2d3 (git): Fix filter-sarif version comment to match pinned ref

The SHA 2da736ff is tag v1.1, not v1.1.0.1.1. hsbt (Hiroshi SHIBATA)

02:30 AM Ruby Revision cf3cf02b (git): Exclude timeout_spec from rb/redos analysis

The spec intentionally uses a ReDoS pattern to verify Regexp.timeout. hsbt (Hiroshi SHIBATA)

02:30 AM Ruby Revision cd904eda (git): Cast pipe serial to unsigned long for %lx

InterlockedIncrement returns LONG, so make the conversion to the
unsigned long expected by %lx explicit. hsbt (Hiroshi SHIBATA)

12:39 AM Ruby Revision 37462cd2 (git): [ruby/rubygems] Move expired_cert tmp file into per-test @tempdir

Two re_sign tests wrote to a shared Dir.tmpdir/expired_cert.pem and
removed it in teardown, racing each other under test-unit
--parallel=process. @tempdir is already per-test and auto-cleaned,
so the manual @cleanup machinery goes away w... hsbt (Hiroshi SHIBATA)