Hello! Welcome to the August newsletter. Read on for announcements from Ruby Central and a report of the OSS work we’ve done from the previous month.

In July, Ruby Central's open source work was supported by Ruby Shield sponsor Shopify, AWS, the Sovereign Tech Fund (STF), and Ruby Central memberships from 29 other companies, including Partner-level member Contributed Systems, the company behind Mike Perham’s Sidekiq. In total, we were supported by 185 members. Thanks to all of our members for making everything that we do possible. <3

Ruby Central News

RubyConf 2024 announcements

Applications to the Scholars & Guides Program are now open for RubyConf 2024!

This is an incredible mentorship opportunity for those new to the community and looking to make professional connections AND for those looking to offer experience and help support our growing Ruby community. Apply Now! The application deadline is Monday, August 26, 2024.

Tickets for RubyConf 2024 are on sale now!

Already booked your ticket? Go ahead and book your hotel room at conference rates too and get a glimpse of our amazing host city on our website.

We’re looking for sponsors for this year’s conference

Want to promote your company at RubyConf in 2024? Secure your sponsorship now to reach all our attendees, showcase your thought leadership, and cultivate invaluable industry relationships by emailing our wonderful sponsorships manager, Tom.

Check out our Ruby Central Membership Program!

Ruby Central is forming sustaining partnerships with major companies in our community. Click here to learn about all the exciting new ways we’ll be engaging with our members and how you can get involved.

Upcoming Conferences:

Get Involved:

  • If you'd like to get involved and help make our community and events even better, we'd love to have you join us! Check out our volunteer page, and/or feel free to shoot an email to our executive director, Adarsh, to find the best way to get plugged in.
  • Remember, you can receive exclusive benefits like conference discounts and more by signing up for a Ruby Central membership. Check to see if your employer matches donations to Ruby Central, Inc. through Benevity and double your support!

RubyGems News

In July, we released RubyGems 3.5.15, 3.5.16 and Bundler 2.5.15, 2.5.16. These releases brings a series of enhancements and bug fixes designed to improve the overall developer experience with RubyGems. Notable improvements included a performance enhancement by using caller_locations instead of splitting caller, as collecting all call locations as strings and then extracting and splitting just one was inefficient. Additionally, we resolved issues with loading nested gemrc configuration keys when specified as symbols and implemented a file lock to safeguard the creation of binstubs.

Some other important accomplishments from the team this month include:

Publishing a basic conformance test for all gem servers

  • This update allows any gem server to be easily tested for compliance with RubyGems standards, significantly impacting both users and developers.
  • The conformance test can be accessed and utilized through our GitHub repository.

Updating our OpenSearch cluster from 2.11 to 2.13

  • We recently updated our OpenSearch cluster from version 2.11 to 2.13 as part of our regular maintenance routine.
  • This upgrade was efficiently executed with a one-click process in our AWS console. The update ensures that our systems continue to run smoothly and benefit from the latest features and improvements. For more details on the update and its benefits, refer to the AWS OpenSearch release notes.

Confirmed protection against recent OpenSSH Bug

  • Early this month, a vulnerability was discovered in certain versions of OpenSSH that could trigger remote code execution.
  • The RubyGems security team promptly responded by implementing tests to ensure our software was not exposed to this threat, guaranteeing that our users and developers could continue their work without interruption.

In July, RubyGems gained 171 new commits contributed by 12 authors. They were 2,827 additions and 1,769 deletions across 113 files.

RubyGems.org News

The updates made this month to RubyGems.org reflect a strong commitment to improving user experience, enhancing security, and modernizing the platform. Sponsored hosting for RubyGems.org in July was provided by AWS, Fastly, and DataDog. The following are highlights of what the team worked on this month:

Discontinued auto sign-in after email confirmation and password reset

  • The primary goal for this change is to simplify login flows, reducing the likelihood of mistakes or bypasses.
  • This change aligns with best practices recommended by OWASP and will enhance security and streamline the login process for both users and developers.

Presented on RubyGems.org at RedDot Ruby Conference 2024

In July, RubyGems.org gained 128 new commits contributed by 8 authors. There were 2,416 additions and 973 deletions across 167 files.

Total spent

In July we spent $77,574.26 on development work.

Thank you

Thank you to all the contributors of RubyGems and RubyGems.org for this month! Your contributions are greatly appreciated, and we are grateful for your support.

Contributors to RubyGems:

Contributors to RubyGems.org:

If we missed you, please let us know so we can include you in our shout out!