Ruby Issue Tracking System

Today

08:10 AM Ruby Revision cb26283b (git): [ruby/erb] Version 6.0.1.1

k0kubun (Takashi Kokubun)

08:10 AM Ruby Revision c35379df (git): [ruby/erb] Prohibit def_method on marshal-loaded ERB instances

Extends the @_init guard to def_method so that an ERB object created
via Marshal.load (which bypasses initialize) raises ArgumentError
instead of evaluating arbitrary source. def_module and def_class both
delegate to def_method and are c... k0kubun (Takashi Kokubun)

07:39 AM Ruby Revision 8b77fda2 (git): [ruby/erb] Version 6.0.4

https://github.com/ruby/erb/commit/4d2b45e140 k0kubun (Takashi Kokubun)

07:38 AM Ruby Revision d1589536 (git): [ruby/erb] Prohibit def_method on marshal-loaded ERB instances

Extends the @_init guard to def_method so that an ERB object created
via Marshal.load (which bypasses initialize) raises ArgumentError
instead of evaluating arbitrary source. def_module and def_class both
delegate to def_method and are c... k0kubun (Takashi Kokubun)

04/17/2026

04:31 PM Ruby Misc #22006: Usage of deprecated input in gem sync workflows

Again, I was not sure what you were proposing from reading your description, but I think we could define a shared action that just calls "Create GitHub App token" and "Sync to ruby/ruby". We still have to make sure credentials are availa... k0kubun (Takashi Kokubun)

04/16/2026

06:20 PM Ruby Misc #22006: Usage of deprecated input in gem sync workflows

> But this made me think that perhaps this mechanism should be a composite action or something similar? Then you don't need to update it in so many places (currently 47) when something changes.
I'm not sure what you're proposing. The ma... k0kubun (Takashi Kokubun)

04/15/2026

04:44 PM Ruby Revision 44d8d828 (git): [ruby/erb] Version 6.0.3

Sorry, I forgot to push the 6.0.2 bump https://github.com/ruby/erb/commit/8626c822ea8009008fb5884cfc949cbcafbe9680 to master.
The tag was branched off of https://github.com/ruby/erb/commit/3d4dc31905e978d46f1eeda7bacaa469ce543733.
To av... k0kubun (Takashi Kokubun)

04:03 PM Ruby Revision 14b243b2 (git): Skip auto-request-review on Cargo.lock (#16743)

k0kubun (Takashi Kokubun)

04/06/2026

08:42 PM Ruby Revision 8dd73008 (git): ZJIT: Replace Option<i32> with Recompile enum for side exit recompilation (#16665)

k0kubun (Takashi Kokubun)

04/04/2026

03:22 AM Ruby Bug #21787: `IO::Buffer` Integer Overflow in Range Validation Leads to Out-of-Bounds Memory Access

ruby_4_0 already contains commit:c353b625297162024b5a80480664e599dd49a294 and commit:f430fbbfacea5690d790dd9060ca4118431fc2fb. k0kubun (Takashi Kokubun)