Skip to content

[pull] master from ruby:master#843

Merged
pull[bot] merged 14 commits intoturkdevops:masterfrom
ruby:master
Mar 12, 2026
Merged

[pull] master from ruby:master#843
pull[bot] merged 14 commits intoturkdevops:masterfrom
ruby:master

Conversation

@pull
Copy link

@pull pull bot commented Mar 12, 2026

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

kddnewton and others added 14 commits March 11, 2026 19:01
Bumps the github-actions group with 2 updates in the / directory: [ruby/setup-ruby](https://github.com/ruby/setup-ruby) and [advanced-security/filter-sarif](https://github.com/advanced-security/filter-sarif).


Updates `ruby/setup-ruby` from 1.290.0 to 1.292.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](ruby/setup-ruby@6ca151f...4eb9f11)

Updates `advanced-security/filter-sarif` from 1.0.1 to 1.1
- [Release notes](https://github.com/advanced-security/filter-sarif/releases)
- [Commits](advanced-security/filter-sarif@f3b8118...2da736f)

---
updated-dependencies:
- dependency-name: ruby/setup-ruby
  dependency-version: 1.292.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: advanced-security/filter-sarif
  dependency-version: '1.1'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Many gems created with the default template over the past 6 years use
`require_relative` to load compiled extensions, which breaks when
extensions are not copied into the gem's lib directory. Restore the
default to true for now to maintain compatibility, and plan to change
it to false in RubyGems 4.2 with advance warning.

ruby/rubygems@5e83a62a8e

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
…xtensions during gem build

When a gem has native extensions and uses `require_relative` to load
a path without a corresponding .rb file in the gem, warn that this
will break in RubyGems 4.2, which will stop copying compiled
extensions into the gem's lib directory. Recommend using `require`
instead.

ruby/rubygems@1198c24a08

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Decode base64-encoded values tagged with !binary in mapping keys,
mapping values (both inline and block scalar), and sequence items.
This fixes gem install failures for gems packaged with older RubyGems
that used !binary encoding in checksums.yaml.gz.

Fixes ruby/rubygems#9387

ruby/rubygems@cfc31601e9

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This was changed to unsafe_load with the swap to YAMLSerializer. But
this method did not previously do an unsafe load and we shouldn't
provide that.

ruby/rubygems@37f71c1eac
This had been the only user of Gem::SafeYAML.load for a long time. We
might as well be consistent with all other uses and use safe_load.

ruby/rubygems@1b698779f5
Using Psych, load was actually more restrictive than safe_load. Using
Gem::YAMLSerializer they were identical. We might as well use the same
path for both methods.

ruby/rubygems@d8d927f889
@pull pull bot locked and limited conversation to collaborators Mar 12, 2026
@pull pull bot added the ⤵️ pull label Mar 12, 2026
@pull pull bot merged commit 5c81ba2 into turkdevops:master Mar 12, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants