RubyGems Navigation menu


Back to blog posts

August 2018 RubyGems Updates

Welcome to the RubyGems monthly update! As part of our efforts at Ruby Together, we publish a recap of the work that we’ve done the previous month. Read on to find out what updates were made to RubyGems and in August. news

In August, we blacklisted several gems with names that were close to other popular gems, in response to CVE-2018-3779. We’re starting to investigate ways to protect from malicious gems—if you’re interested in helping work on that, let us know! We also reviewed and merged performance improvements to the “rubygems#show” and “version#index” pages, contributed by @nateberkopec.

In total, gained 11 commits from 5 authors, making 44 additions and 35 deletions across 8 files.

rubygems news

In RubyGems, we fixed some bugs, including the ability to auto re-sign expired certs, fixed some tests, and made sure that gems with allowed_push_host set will be pushed to the correct host by gem push.

In total there were 19 new commits, contributed by 5 authors, with 112 additions and 26 deletions across 13 files.

Learn more about contributing to RubyGems by visiting the RubyGems Contributing Guide. We welcome all kinds of contributions, including bug fixes, feature implementation, writing and/or updating documentation, and bug triage.