I think that RubyGems / Bundler should not be loaded into Ruby::Box by default. I have shared a few of my thoughts with @tagomoris and based on that he implemented #22329. But I'd like to go further. I think that it would be nice to h...vo.x (Vit Ondruch)
One more question. What is the process with H1 disclosure? Because to me it seems that the H1 report is still private despite being referenced in the GHSAvo.x (Vit Ondruch)
The CVE-2026-27820 was fixed and disclosed more than one month ago: https://www.ruby-lang.org/en/news/2026/03/05/buffer-overflow-zlib-cve-2026-27820/ However, there is still no public information on https://www.cve.org/CVERecord?id...vo.x (Vit Ondruch)
My email client does not like this proposal: <img style="width: 232px;" src="clipboard-202603312047-a8wkw.png"><br> Maybe `:))` (even bigger smile) should be considered instead?vo.x (Vit Ondruch)
byroot (Jean Boussier) wrote in #note-6: > I'm not 100% sure I understand what you mean. When the backticks were changed, I have seen more broken test suites then the actual code. And the test suites typically checks error text outpu...vo.x (Vit Ondruch)
> This however has some small backward compatibly consequences, as code parsing backtraces with regexps isn't that rare. > ... This is typically not the case for test suites, unfortunatelyvo.x (Vit Ondruch)
And RSpec were also adjusted to the new behavior AFAICT: https://github.com/rspec/rspec/pull/282/commits/1c20fa80772ca7a1ed0512056ce7cd6a94f8e68dvo.x (Vit Ondruch)
Just FTR, not sure how the revert is supposed to look like, but at least Pry was adjusted for the new behavior: https://github.com/pry/pry/pull/2357 It does not benefit from columns, but I suspect the revert would somehow influence...vo.x (Vit Ondruch)
matz (Yukihiro Matsumoto) wrote in #note-8: > I think“Ruby's License” is something described in COPYING, i.e., it is inseparable from BSD-2clause. Historically it was combination with GPL, so some description should be updated. > ... T...vo.x (Vit Ondruch)