Blog
16 Nov 2020
October 2020 RubyGems Updates
Welcome to the RubyGems monthly update! As part of our efforts at Ruby Together, we publish a recap of the work that we’ve done the previous month. Read on to find out what updates were made to RubyGems, Gemstash and RubyGems.org in October.
RubyGems News
In October we released a new Bundler version — 2.2.0.rc.2 and RubyGems version — 3.2.0.rc.2.
We also made the following changes and improvements:
- upgraded Bundler & RubyGems vendored Molinillo to
0.7.0(it’s latest release). - #3402, #3388 - fixed an issue with the
specific_platformsetting. - merged a PR that stops changing the CWD for building extensions, which should allow concurrent extension compilation without any contention. - #3498
- worked on PRs to improve independence between test and lib code (simplifies and helps packagers), and added some changes to improve specs.
- added improvements to require more default gems lazily.
- fixed an issue with help commands when Bundler has been installed by
ruby-coreinstaller andmanis not available. - #3997 - wrapped up a PR to allow installing plugins from local paths. - #4020
- fixed daily Bundler CI by marking the new
pathnamedefault gem as unsupported. - #4029 - fixed a
Kernel.warnstackoverflow. - #3987 - improved the deprecation path for gem query. - #4021
- fixed issues with Bundler not loading RubyGems plugins in
$LOAD_PATHlocations, which was affecting some version managers. - #3534
As always, we continue responding to RubyGems & Bundler issues and PRs, doing issue triage on both old and new issues, and reducing the number of open tickets.
In October, Rubygems gained 143 new commits, contributed by 11 authors. There were 2889 additions and 1705 deletions across 889 files.
RubyGems.org News
This month we implemented a bulk update to RubyGem downloads count to reduce the average processing time for FastlyLogProcessor by about 20 seconds. We studied an old HackerOne Report and proposed a solution for it that will get implemented into RubyGems.org.
We also made the following changes and improvements:
- imported Fastly rubygems.org production configuration to Terraform.
- updated Fastly
vclto unset X-Forwarded-Host from requests to fix a HO report. - added regex whitelist for URL on honeycomb logs export to ensure we don’t inadvertently send any sensitive information.
- fixed total count shown on search pagination. - #2526
- rebased and updated a PR to separate the edit profile and account settings, making options like MFA registration easier to find. - #2537
- updated staging.rubygems.org to support TLS 1.3 as recommended by the most recent TLS documentation of Fastly.
- created a support ticket on Fastly to request a limit increase on TLS certificates and enable the limited offering of GlobalSign certificates.
- updated DMARC record of rubygems.org to use Slack group and Postmarkapp.
- replied to support tickets and google group threads.
Finaly, we deployed an option to review changes thanks to @mensfeld, users can now compare differences between releases.
In total, Rubygems.org gained 46 new commits, contributed by 8 authors. There were 694 additions and 442 deletions across 63 files.
Gemstash News
This month we made a couple of improvements to the Gemstash project documentation, We added documentation about Gemstash and documentation recommending Gemstash instead of gem server because we’re going to deprecate gem server it’s not recommended to keep it in the documentation.
Learn more about contributing to RubyGems by visiting the RubyGems Contributing Guide. We welcome all kinds of contributions, including bug fixes, feature implementation, writing and/or updating documentation, and bug triage.tation, writing and/or updating documentation, and bug triage.