Ruby Issue Tracking System

09/18/2026

05:00 AM Ruby Revision 21a472e8 (git): [ruby/rubygems] Always require the vendored SecureRandom in Gem::AtomicFileWriter

`defined?(Gem::SecureRandom)` is already true while another thread is still loading the file and has not yet extended it with `Random::Formatter`, so a parallel installer worker could skip the require and fail with `NoMethodError` on `Ge... hsbt (Hiroshi SHIBATA)

04:26 AM Ruby Revision 801d2011 (git): [ruby/rubygems] Re-enable stdio capture tests under Ruby::Box

ruby/ruby#18574 makes $stdout and $stderr reassignment reach Kernel#puts and Kernel#warn inside a box. The box lanes run on a ruby-core master build, which has the fix.
https://bugs.ruby-lang.org/issues/21867
https://github.com/ruby/ru... hsbt (Hiroshi SHIBATA)

02:54 AM Ruby Revision 8d02a193 (git): [ruby/rubygems] Align RemoteFetcher#fetch_http redirects with the compact index fetcher

A relative Location died with `NoMethodError` because it was parsed on
its own instead of against the request URI, 308 fell through to "Bad
response", the non-https rejection printed the Location's credentials in
clear text, and an absol... hsbt (Hiroshi SHIBATA)

02:54 AM Ruby Revision 1d24919a (git): [ruby/rubygems] Treat an empty password as no password in Gem::Uri

`https://TOKEN:@host/` parses with an empty-string password, so `token?`
did not recognize it and `redacted` kept the token in clear text as
`https://TOKEN:REDACTED@host/`. `redact_credentials_from` also matched
the empty string and inse... hsbt (Hiroshi SHIBATA)

02:54 AM Ruby Revision f9d2cd31 (git): [ruby/rubygems] Tolerate a URI without a host in ConnectionPools#no_proxy?

`net_http_args` calls `no_proxy?` whether or not a proxy is configured,
so a typo such as `https:/host` that URI parses with a nil host died with
`NoMethodError` instead of reaching the connection error that reports
the URI.
https://git... hsbt (Hiroshi SHIBATA)

02:33 AM Ruby Revision 2ec3ef4a (git): [ruby/rubygems] Drop the YAMLTree.create shim for psych older than 2.0

Psych::Visitors::YAMLTree.create has existed since psych 2.0, so the shim was never defined on any supported Ruby.
https://github.com/ruby/rubygems/commit/242ca5848b
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> hsbt (Hiroshi SHIBATA)

02:33 AM Ruby Revision 44182010 (git): [ruby/rubygems] Drop feature detection for Ruby core methods older than 3.2

Symbol#name (3.0), Exception#detailed_message (3.2), Module#ruby2_keywords (2.7) and URI::Generic#hostname (1.9.3) exist on every supported Ruby, so the fallbacks were dead code.
https://github.com/ruby/rubygems/commit/ee203a9319
Co-Au... hsbt (Hiroshi SHIBATA)

02:33 AM Ruby Revision 49df6173 (git): [ruby/rubygems] Drop the fallbacks for openssl gems older than 2.2

Ruby 3.2 ships openssl 3.1, so PKey#public_to_der and SSLContext#min_version= are always available. get_public_key is documented to take a PKey, so the test that passed it a certificate now reads the key from the certificate directly.
h... hsbt (Hiroshi SHIBATA)

02:25 AM Ruby Revision b14e047f (git): [ruby/rubygems] Describe --major as preferring the latest major version

GemVersionPromoter sorts every candidate newest first under --major, and --strict does not cap it at any major, so "next major version" never matched what it does.
https://github.com/ruby/rubygems/issues/8090
https://github.com/ruby/ru... hsbt (Hiroshi SHIBATA)

02:20 AM Ruby Bug #22283 (Closed): `defined?` does not see global variables assigned in a box

hsbt (Hiroshi SHIBATA)