94363 Commits

Author SHA1 Message Date
Kazuki Yamaguchi
ea79fe225c [ruby/openssl] ssl: use SSL_CTX_set_dh_auto() by default
Rely on OpenSSL's builtin DH parameters for TLS 1.2 and earlier instead
of providing a default SSLContext#tmp_dh_callback proc.
SSL_CTX_set_dh_auto() has been available since OpenSSL 1.1.0.

The parameters can still be overridden by specifying
SSLContext#tmp_dh_callback or #tmp_dh, as confirmed by existing tests.

SSLContext#tmp_dh_callback depends on a deprecated OpenSSL feature. We
also prefer not to hard-code parameters, which is a maintenance burden.
This change also improves Ractor compatibility by removing the
unshareable proc.

https://github.com/ruby/openssl/commit/9cfec9bf5e
2025-10-08 13:59:39 +00:00
Kazuki Yamaguchi
8dfe540341 [ruby/openssl] ssl: fix extconf.rb check for SSL_CTX_set0_tmp_dh_pkey()
Check for the function we actually use. Both SSL_set0_tmp_dh_pkey() and
SSL_CTX_set0_tmp_dh_pkey() were added in OpenSSL 3.0.

https://github.com/ruby/openssl/commit/a9b6a64e5f
2025-10-08 13:59:38 +00:00
Kazuki Yamaguchi
810b3a405b [ruby/openssl] provider: load "default" provider in test_openssl_legacy_provider
Update the test case to explicitly load both the "default" and the
"legacy" providers.

Currently, the "default" provider as a side effect by the
OpenSSL::PKey::DH.new call in lib/openssl/ssl.rb. It will be cleaned up
in a following patch.

https://github.com/ruby/openssl/commit/013db02fb2
2025-10-08 13:59:38 +00:00
Earlopain
b8f8d646a6 [ruby/prism] For these special cases, there exists no optional argument type. Since a endless method is started with =, there was ambiguity here. We have to simply reject these in all cases.
This adds a new error for the following reason:
* `def foo arg = nil` is interpreted as a normal method call with optional `arg` without matching `end`
* `def foo *arg = nil; end` is interpreted as a endless method call that has body `nil` with extraneous `end`

`def foo *arg = nil` is somewhere inbetween and I don't know how to otherwise indicate the error.
Now the second case above also shows the newly added error message.

Fixes [Bug #21623]

https://github.com/ruby/prism/commit/e1910d4492
2025-10-08 13:04:57 +00:00
Nobuyoshi Nakada
7c9dd0ecff
[Bug #21629] Initialize struct RArray 2025-10-08 18:19:56 +09:00
Nobuyoshi Nakada
2bb6fe3854
[Bug #21629] Initialize struct RString 2025-10-08 18:19:47 +09:00
Nobuyoshi Nakada
43dbb9a93f
[Bug #21629] Enable nonstring attribute on clang 21 2025-10-08 18:17:19 +09:00
Takashi Kokubun
9ae3e20953 push_push.yml: Suppress progress of requests
which also disables some error messages, but --fail-with-body -w
'%{http_code}' seems to show everything we need anyway.
2025-10-08 01:01:51 -07:00
Takashi Kokubun
949717efb1 post_push.yml: Fix an invalid YAML syntax 2025-10-08 00:59:31 -07:00
Takashi Kokubun
a0e7341bfd post_push.yml: Migrate fetch_changesets
from post-receive.sh
2025-10-08 00:54:54 -07:00
dependabot[bot]
ac01ac11f9 Bump github/codeql-action from 3 to 4
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3 to 4.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Commits](https://github.com/github/codeql-action/compare/v3...v4)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-08 16:18:27 +09:00
Takashi Kokubun
000165a51c post_push.yml: Simplify the overall workflow 2025-10-07 21:07:57 -07:00
Takashi Kokubun
f063427c45 post_push.yml: Skip .github/actions/setup/directories
These scripts are made to be fairly portable, so it shouldn't need all
these steps to make them work.
2025-10-07 20:56:16 -07:00
Takashi Kokubun
76b1039485
Carve out a workflow for post-push hooks (#14768)
from check_misc.yml.

These steps originally came from git.ruby-lang.org/ruby.git's
post-receive hooks. Because it handles a different set of events from
what the original check_misc.yml does, it probably allows them to be
simpler if they are separated.
2025-10-07 20:54:37 -07:00
Takashi Kokubun
d4a762e005 check_misc.yml: Support non-master branches
See also: 0b0eae90f6
2025-10-07 20:33:02 -07:00
Peter Zhu
68e0321327 Always load -test-/asan in tests
-test-/asan should always be available.
2025-10-07 20:35:34 -04:00
Takashi Kokubun
337189f4ba check_misc.yml: Add a missing argument to update-ruby.sh
https://github.com/ruby/ruby/pull/14765
2025-10-07 17:14:23 -07:00
Takashi Kokubun
b05d64aa50
Resurrect sync from GitHub to git.ruby-lang.org (#14765) 2025-10-07 17:12:01 -07:00
Stan Lo
5a9aa9013f Use master commit of irb
This version of IRB has higher test timeout on CI, which is needed
for ZJIT to pass IRB integration tests.
2025-10-07 17:11:37 -07:00
Stan Lo
6c7aa118cc ZJIT: Test against bundled gems on CI 2025-10-07 17:11:37 -07:00
Ricardo Trindade
42ba82424d Fix typo in comment in array#zip docs
Duplicate the was found in the documentation
2025-10-07 18:54:34 -04:00
Aiden Fox Ivey
9a75c05b5a ZJIT: Ignore results with no samples 2025-10-07 15:13:46 -07:00
Aiden Fox Ivey
c1cb034356 ZJIT: Refactor comments and rewrite frames handling 2025-10-07 15:13:46 -07:00
Aiden Fox Ivey
4d0f53520c ZJIT: Change name format of zjit_exit_locations dump file 2025-10-07 15:13:46 -07:00
Aiden Fox Ivey
b78270a6c6 ZJIT: Remove unnecessary .dup calls in exit_locations
* Using https://www.rubyexplorer.xyz/?c=frames+%3D+results%5B%3Aframes%5D.dup shows dup is called regardless
2025-10-07 15:13:46 -07:00
Luke Gruber
446257c84b Add debug #define to call sched_yield before each pthread_mutex_lock
This is useful for debugging mutex issues as it increases contention for locks.
It is off by default.
2025-10-07 13:00:16 -07:00
Nobuyoshi Nakada
7089a4e2d8
Fix not to skip necessary commits 2025-10-08 00:50:00 +09:00
Nobuyoshi Nakada
c951e1c4e0
Return false to skip emptied commits 2025-10-08 00:09:44 +09:00
Nobuyoshi Nakada
40d1603e54 [ruby/io-console] Skip emptied commits
https://github.com/ruby/io-console/commit/431c3f3369
2025-10-08 00:03:48 +09:00
Nobuyoshi Nakada
78dbc6c0b7
Shorten timeout for csv
It usually ends in a few seconds, and less than 10 seconds even on
Windows.  But recently it stalls 10 minutes and times out.
2025-10-07 23:51:00 +09:00
Nobuyoshi Nakada
a6938eb46a
Skip files that are "deleted by us"
"Deleted" means that file is only for the upstream but not for ruby.
2025-10-07 22:36:32 +09:00
Satoshi Tagomori
25c893af6d Add a control frame column "n:xxxx" as namespace id in crash reports 2025-10-07 22:18:29 +09:00
Satoshi Tagomori
9a0e857c35 Stop displaying current namespace when it crashed
To avoid crashes during displaying crash reports.
2025-10-07 22:18:29 +09:00
Yusuke Endoh
c693b0e477 [ruby/error_highlight] Improve English comments and messages
https://github.com/ruby/error_highlight/commit/5f976265ef
2025-10-07 09:07:22 +00:00
git
71e231847b Update default gems list at e5b2e5227b4ebf0a0635126e0fb335 [ci skip] 2025-10-07 08:35:07 +00:00
Jean Boussier
e5b2e5227b [ruby/json] Release 2.15.1
https://github.com/ruby/json/commit/9e6067bb55
2025-10-07 08:33:08 +00:00
Satoshi Tagomori
2548c476a3 Add namespace debug methods and assertions 2025-10-07 14:19:26 +09:00
Satoshi Tagomori
52c6b32f80 Initialize the main namespace after loading builtin libraries
* For having the common set of loaded libraries between root and main namespaces
* To have the consistent $LOADED_FEATURES in the main namespace
2025-10-07 14:19:26 +09:00
Satoshi Tagomori
0f05979299 ns_id of main is already initialized in Namespace.new 2025-10-07 14:19:26 +09:00
Nobuyoshi Nakada
4cdf5f4933 Verify that RubyGems is enabled by default 2025-10-07 13:21:24 +09:00
Étienne Barrié
03f714de62 Remove warning when generating $(arch)-fake.rb
This happens if BASERUBY is Ruby 3.4.

    $ rm -f *-fake.rb && make test-precheck RUBYOPT=-w >/dev/null
    build/arm64-darwin24-fake.rb:28: warning: ::Ruby is reserved for Ruby 3.5
2025-10-07 12:33:50 +09:00
Nobuyoshi Nakada
c6a119c751
Update rubyspec as of CVE-2025-27221 2025-10-07 10:30:16 +09:00
git
def07dca82 Update default gems list at 6a58c4fbb653ad05e2da2f85d79797 [ci skip] 2025-10-07 01:14:41 +00:00
Hiroshi SHIBATA
6a58c4fbb6 [ruby/uri] Bump up to v1.0.4
https://github.com/ruby/uri/commit/e5074739c3
2025-10-07 01:12:43 +00:00
Nobuyoshi Nakada
eccc54b4fa [ruby/uri] Add authority accessor
https://github.com/ruby/uri/commit/6c6449e15f
2025-10-07 01:12:42 +00:00
Nobuyoshi Nakada
d0395bd0ea [ruby/uri] Clear user info totally at setting any of authority info
Fix CVE-2025-27221.
https://hackerone.com/reports/3221142

https://github.com/ruby/uri/commit/5cec76b9e8
2025-10-07 01:12:42 +00:00
Takashi Kokubun
e3d4cb5de5
Sync Prism (#14751)
to c89ca2af12
2025-10-06 17:41:55 -07:00
Takashi Kokubun
b1e672bb48 sync_default_gems.yml: Remove client_payload references
Now that repository_dispatch is gone, we don't need them either.
2025-10-06 16:18:30 -07:00
Takashi Kokubun
8c0fc05832 sync_default_gems.yml: Remove unused repository_dispatch
We actually use the workflow-level dispatch from API as well
2025-10-06 16:17:46 -07:00
git
854491fe99 Update default gems list at dad064a0ea823222f729367b501e7d [ci skip] 2025-10-06 22:05:03 +00:00