From 46b7b4c16976775b0455098d7bbf679225132ec4 Mon Sep 17 00:00:00 2001 From: lauragift21 Date: Mon, 8 Apr 2024 15:59:32 +0100 Subject: [PATCH 1/3] Publish March 2024 RubyGems Monthly Update --- _posts/2024-04-08-march-rubygems-updates.md | 77 +++++++++++++++++++++ 1 file changed, 77 insertions(+) create mode 100644 _posts/2024-04-08-march-rubygems-updates.md diff --git a/_posts/2024-04-08-march-rubygems-updates.md b/_posts/2024-04-08-march-rubygems-updates.md new file mode 100644 index 0000000..b60fd77 --- /dev/null +++ b/_posts/2024-04-08-march-rubygems-updates.md @@ -0,0 +1,77 @@ +--- +title: March 2024 RubyGems Updates +layout: post +author: Gift Egwuenu +author_email: laurandidi21@gmail.com +--- + +Welcome to the RubyGems monthly update! As part of our efforts at Ruby Central, we publish a recap of the work that we’ve done the previous month. Read on to find out what updates were made to RubyGems and RubyGems.org in March. + +## RubyGems News + +This month, RubyGems released RubyGems [3.5.7](https://github.com/rubygems/rubygems/blob/master/CHANGELOG.md#357--2024-03-22) and Bundler [2.5.7](https://github.com/rubygems/rubygems/blob/master/bundler/CHANGELOG.md#257-march-22-2024). These updates introduce a range of enhancements and bug fixes, all aimed at enhancing the developer experience. They include: [the introduction of an attribute in `Gem::SafeYAML.safe_load` to control whether YAML aliases is enabled](https://github.com/rubygems/rubygems/pull/7464), [a warning mechanism for when the `required_ruby_version` specification attribute is empty](https://github.com/rubygems/rubygems/pull/5010), and [the removal of unnecessary configurations in the RuboCop setup generated by `bundle gem`](https://github.com/rubygems/rubygems/pull/7478). + +Some other important accomplishments from the team this month include: + +**[Make `gem install` respect the umask of the target system](https://github.com/rubygems/rubygems/pull/7518)**: + +- The goal of this change is to address the issue where RubyGems may install files with permissions that are broader than desired, giving write permissions to users other than the current user. This issue arises when the original packaging of files includes these broad permissions, likely due to an unsafe umask set by the gem's author. +- The solution implemented by [@deivid-rodriguez](https://github.com/deivid-rodriguez) was to adopt a more straightforward approach than the previous attempt (which was reverted due to test failures in `ruby core`) by applying the target system’s umask to regular files (excluding directories) before setting their permissions. + +**[Fixed Bundler’s application cache misuse](https://github.com/rubygems/rubygems/pull/7516):** + +- This update resolves an issue in how Bundler was using its cache, leading to odd behavior. Users were seeing unusual updates, like Bundler claiming it was updating to versions that didn’t actually exist (for example, "Updating to 3.0.9"). +- The problem was rooted in how Bundler managed cached gems. These gems were mistakenly being considered in situations they shouldn’t have been, which caused not only strange messages but also errors in the lockfile, such as gems appearing under incorrect sources. +- The solution implemented ensures that cached gems are kept separate from those available online, preventing the confusion that was causing these issues. This approach helps maintain clarity and accuracy in Bundler’s operations. + +In March, RubyGems gained [67 new commits](https://github.com/rubygems/rubygems/compare/master@%7B2024-3-01%7D...master@%7B2024-3-31%7D) contributed by 13 authors. There were 934 additions and 194 deletions across 92 files. + +## RubyGems.org News + +March's updates to RubyGems.org reflect a strong commitment to improving user experience, enhancing security, and modernizing the platform. + +The following are highlights of what the team worked on this month: + +**[Major PostgreSQL zero downtime upgrade](https://github.com/rubygems/pg-major-update)**: + +- This significant update was carried out to ensure that application dependencies remain up-to-date. Notably, this is the second upgrade effort, moving from PostgreSQL version 12 to 13, following the original upgrade to version 12 in response to the end of life (EOL) for PostgreSQL 11 on Amazon RDS. +- The upgrade process utilized `pgbouncer` and a manually managed blue/green environment to achieve zero downtime. For detailed scripts and an explanation of the procedure, visit the [project’s GitHub page](https://github.com/rubygems/pg-major-update). +- Additional information and related updates can be found in [#4482](https://github.com/rubygems/rubygems.org/pull/4482) and [#4500](https://github.com/rubygems/rubygems.org/pull/4500). + +In March, RubyGems.org gained [69 new commits](https://github.com/rubygems/rubygems.org/compare/master@%7B2024-2-01%7D...master@%7B2024-2-31%7D) contributed by 12 authors. There were 466 additions and 1,263 deletions across 75 files. + +## Thank you + +Thank you to all the contributors of RubyGems and RubyGems.org for this month! Your contributions are greatly appreciated, and we are grateful for your support. + +### Contributors to RubyGems: + +- [@nobu](https://github.com/nobu) Nobuyoshi Nakada +- [@martinemde](https://github.com/martinemde) Martin Emde +- [@deivid-rodriguez](https://github.com/deivid-rodriguez) David Rodríguez +- [@kateinoigakukun](https://github.com/kateinoigakukun) Yuta Saito +- [@hsbt](https://github.com/hsbt) Hiroshi Shibata +- [@simi](https://github.com/simi) Josef Šimánek +- [@cuishuang](https://github.com/cuishuang) Cui Fliter +- [@jez](https://github.com/jez) Jake Zimmerman +- [@duckinator](https://github.com/duckinator) Ellen Marie Dash +- [@agrobbin](https://github.com/agrobbin) Alex Robbin +- [@ccutrer](https://github.com/ccutrer) Cody Cutrer +- [@JaneScarlet](https://github.com/JaneScarlet) Amanda JC + +### Contributors to RubyGems.org: + +- [@segiddins](https://github.com/segiddins) Samuel Giddins +- [@jgarber623](https://github.com/jgarber623) Jason Garber +- [@hsbt](https://github.com/hsbt) Hiroshi Shibata +- [@simi](https://github.com/simi) Josef Šimánek +- [@martinemde](https://github.com/martinemde) Martin Emde +- [@deivid-rodriguez](https://github.com/deivid-rodriguez) David Rodríguez +- [@indirect](https://github.com/indirect) André Arko +- [@spk](https://github.com/spk) Laurent Arnoud +- [@bradly](https://github.com/bradly) Bradly Feeley +- [@joeldrapper](https://github.com/joeldrapper) Joel Drapper +- [@ytjmt](https://github.com/ytjmt) Yuki Tsujimoto + +--- +Learn more about contributing to RubyGems by visiting the RubyGems Contributing Guide. We welcome all kinds of contributions, including bug fixes, feature implementation, writing and updating documentation, and bug triage. From 293ccee808a1f635fd087fe3fb178fe62812f729 Mon Sep 17 00:00:00 2001 From: lauragift21 Date: Mon, 8 Apr 2024 16:23:08 +0100 Subject: [PATCH 2/3] update post --- _posts/2024-04-08-march-rubygems-updates.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/_posts/2024-04-08-march-rubygems-updates.md b/_posts/2024-04-08-march-rubygems-updates.md index b60fd77..3902314 100644 --- a/_posts/2024-04-08-march-rubygems-updates.md +++ b/_posts/2024-04-08-march-rubygems-updates.md @@ -36,7 +36,7 @@ The following are highlights of what the team worked on this month: - This significant update was carried out to ensure that application dependencies remain up-to-date. Notably, this is the second upgrade effort, moving from PostgreSQL version 12 to 13, following the original upgrade to version 12 in response to the end of life (EOL) for PostgreSQL 11 on Amazon RDS. - The upgrade process utilized `pgbouncer` and a manually managed blue/green environment to achieve zero downtime. For detailed scripts and an explanation of the procedure, visit the [project’s GitHub page](https://github.com/rubygems/pg-major-update). -- Additional information and related updates can be found in [#4482](https://github.com/rubygems/rubygems.org/pull/4482) and [#4500](https://github.com/rubygems/rubygems.org/pull/4500). +- A detailed blog post with additional details will be released soon. In March, RubyGems.org gained [69 new commits](https://github.com/rubygems/rubygems.org/compare/master@%7B2024-2-01%7D...master@%7B2024-2-31%7D) contributed by 12 authors. There were 466 additions and 1,263 deletions across 75 files. From 06ead6f5a07ecece2597e483d0c42de514ab44a3 Mon Sep 17 00:00:00 2001 From: lauragift21 Date: Sun, 14 Apr 2024 01:31:11 +0100 Subject: [PATCH 3/3] Update RubyGems Post --- ...dates.md => 2024-04-12-march-rubygems-updates.md} | 12 +++++++++--- 1 file changed, 9 insertions(+), 3 deletions(-) rename _posts/{2024-04-08-march-rubygems-updates.md => 2024-04-12-march-rubygems-updates.md} (86%) diff --git a/_posts/2024-04-08-march-rubygems-updates.md b/_posts/2024-04-12-march-rubygems-updates.md similarity index 86% rename from _posts/2024-04-08-march-rubygems-updates.md rename to _posts/2024-04-12-march-rubygems-updates.md index 3902314..dc0777b 100644 --- a/_posts/2024-04-08-march-rubygems-updates.md +++ b/_posts/2024-04-12-march-rubygems-updates.md @@ -9,11 +9,12 @@ Welcome to the RubyGems monthly update! As part of our efforts at Ruby Central, ## RubyGems News -This month, RubyGems released RubyGems [3.5.7](https://github.com/rubygems/rubygems/blob/master/CHANGELOG.md#357--2024-03-22) and Bundler [2.5.7](https://github.com/rubygems/rubygems/blob/master/bundler/CHANGELOG.md#257-march-22-2024). These updates introduce a range of enhancements and bug fixes, all aimed at enhancing the developer experience. They include: [the introduction of an attribute in `Gem::SafeYAML.safe_load` to control whether YAML aliases is enabled](https://github.com/rubygems/rubygems/pull/7464), [a warning mechanism for when the `required_ruby_version` specification attribute is empty](https://github.com/rubygems/rubygems/pull/5010), and [the removal of unnecessary configurations in the RuboCop setup generated by `bundle gem`](https://github.com/rubygems/rubygems/pull/7478). +This month, RubyGems released RubyGems [3.5.7](https://github.com/rubygems/rubygems/blob/master/CHANGELOG.md#357--2024-03-22) and Bundler [2.5.7](https://github.com/rubygems/rubygems/blob/master/bundler/CHANGELOG.md#257-march-22-2024). These updates introduce a range of enhancements and bug fixes, all aimed at enhancing the developer experience. They include: [the introduction of an attribute](https://github.com/rubygems/rubygems/pull/7464) in `Gem::SafeYAML.safe_load` to control whether YAML aliases is enabled, [a warning mechanism](https://github.com/rubygems/rubygems/pull/5010) for when the `required_ruby_version` specification attribute is empty, and [the removal of unnecessary configurations](https://github.com/rubygems/rubygems/pull/7478) in the RuboCop setup generated by `bundle gem`. Some other important accomplishments from the team this month include: -**[Make `gem install` respect the umask of the target system](https://github.com/rubygems/rubygems/pull/7518)**: + +**[Making `gem install` respect the umask of the target system](https://github.com/rubygems/rubygems/pull/7518):** - The goal of this change is to address the issue where RubyGems may install files with permissions that are broader than desired, giving write permissions to users other than the current user. This issue arises when the original packaging of files includes these broad permissions, likely due to an unsafe umask set by the gem's author. - The solution implemented by [@deivid-rodriguez](https://github.com/deivid-rodriguez) was to adopt a more straightforward approach than the previous attempt (which was reverted due to test failures in `ruby core`) by applying the target system’s umask to regular files (excluding directories) before setting their permissions. @@ -38,7 +39,8 @@ The following are highlights of what the team worked on this month: - The upgrade process utilized `pgbouncer` and a manually managed blue/green environment to achieve zero downtime. For detailed scripts and an explanation of the procedure, visit the [project’s GitHub page](https://github.com/rubygems/pg-major-update). - A detailed blog post with additional details will be released soon. -In March, RubyGems.org gained [69 new commits](https://github.com/rubygems/rubygems.org/compare/master@%7B2024-2-01%7D...master@%7B2024-2-31%7D) contributed by 12 authors. There were 466 additions and 1,263 deletions across 75 files. +In March, RubyGems.org gained [69 new commits](https://github.com/rubygems/rubygems.org/compare/master@%7B2024-3-01%7D...master@%7B2024-3-31%7D) contributed by 12 authors. There were 466 additions and 1,263 deletions across 75 files. + ## Thank you @@ -58,6 +60,10 @@ Thank you to all the contributors of RubyGems and RubyGems.org for this month! Y - [@agrobbin](https://github.com/agrobbin) Alex Robbin - [@ccutrer](https://github.com/ccutrer) Cody Cutrer - [@JaneScarlet](https://github.com/JaneScarlet) Amanda JC +- [@doodzik](https://github.com/doodzik) Frederik Dudzik +- [@marcandre](https://github.com/marcandre) Marc-André Lafortune +- [@dduugg](https://github.com/dduugg) Douglas Eichelberger + ### Contributors to RubyGems.org: