> ## Content Index
> Fetch the complete content index at: https://rubycentral.org/llms.txt
> Use this file to discover other available public pages before exploring further.

# August 2024 Newsletter
- URL: https://rubycentral.org/news/august-2024-newsletter/
- Published: 2024-08-20T16:00:02.000Z
- Updated: 2024-09-26T21:05:54.000Z
- Author: Irene Kannyo
- Tags: Newsletter

Hello! Welcome to the August newsletter. Read on for announcements from Ruby Central and a report of the OSS work we’ve done from the previous month.

In July, Ruby Central's open source work was supported by Ruby Shield sponsor [Shopify](https://www.shopify.com/?ref=rubycentral.org), [AWS](https://aws.amazon.com/?ref=rubycentral.org), the [Sovereign Tech Fund](https://www.sovereigntechfund.de/?ref=rubycentral.org) (STF), and Ruby Central memberships from 29 other companies, including Partner-level member [Contributed Systems](https://contribsys.com/?ref=rubycentral.org), the company behind Mike Perham’s [Sidekiq](https://sidekiq.org/?ref=rubycentral.org). In total, we were supported by 185 members. Thanks to all of our members for making everything that we do possible. <3

# **Ruby Central News**

## RubyConf 2024 announcements

### Applications to the Scholars & Guides Program are now open for RubyConf 2024!

This is an incredible mentorship opportunity for those new to the community and looking to make professional connections AND for those looking to offer experience and help support our growing [Ruby](https://ruby.social/tags/Ruby?ref=rubycentral.org) community. Apply Now! **The** **application deadline is Monday, August 26, 2024.**

### Tickets for RubyConf 2024 are [on sale now!](https://ti.to/rubyconf/2024?ref=rubycentral.org)

Already booked your ticket? Go ahead and [**book your hotel room**](https://book.passkey.com/event/50806364/owner/2874/home?ref=rubycentral.org) at conference rates too and get a glimpse of our amazing host city on our [website](https://rubyconf.org/?ref=rubycentral.org).

### We’re looking for sponsors for this year’s conference

Want to promote your company at RubyConf in 2024? **Secure your sponsorship now** to reach all our attendees, showcase your thought leadership, and cultivate invaluable industry relationships by [emailing our wonderful sponsorships manager, Tom](http://tom@rubycentral.org/).

## **Check out our Ruby Central Membership Program!**

Ruby Central is forming sustaining partnerships with major companies in our community. [Click here to learn about all the exciting new ways we’ll be engaging with our members and how you can get involved](https://webforms.pipedrive.com/f/6aW4k05dMuwVRUNS7cR5nhHZyJFbhc7hrhQnQ21odD5tYLNhzwTSa9Xu1bguTOzePV?ref=rubycentral.org).

## **Upcoming Conferences:**

- Ruby Central
  - RubyConf 2024 will be in Chicago on Nov 13-15th at the Hilton Downtown Chicago.
  - RailsConf 2025 [will be our final RailsConf.](https://rubycentral.org/news/anewearforrubycentralevents/) We’ve made a limited number of supporter tickets available [here](https://ti.to/railsconf/2025?ref=rubycentral.org) for purchase — consider contributing to help make this special event the best one yet!
- Community Conferences
  - The upcoming lineup of Ruby conferences include: [Osaka RubyKaigi](https://regional.rubykaigi.org/osaka04/?ref=rubycentral.org) (August 24), [Rails Camp USA](https://west.railscamp.us/2024?ref=rubycentral.org) (August 27–30), [Fukuoka RubyistKaigi](https://regional.rubykaigi.org/fukuoka04/?ref=rubycentral.org) (September 7, 2024), [EuRuKo](https://2024.euruko.org/?ref=rubycentral.org) (September 11–13), [Friendly.rb](https://friendlyrb.com/?ref=rubycentral.org) (September 18–19) and [Rails World](https://rubyonrails.org/world/2024?ref=rubycentral.org) (September 26–27).
  - Updated information is always available at [rubyconferences.org](https://rubyconferences.org/?ref=rubycentral.org), which includes [a super-handy iCal feed](https://rubyconferences.org/calendar.ics?ref=rubycentral.org).

## **Get Involved:**

- If you'd like to get involved and help make our community and events even better, we'd love to have you join us! Check out our [volunteer page](https://rubycentral.org/volunteer/), and/or feel free to [shoot an email to our executive director, Adarsh](http://adarsh@rubycentral.org/), to find the best way to get plugged in.
- Remember, you can receive exclusive benefits like conference discounts and more by signing up for a Ruby Central [membership](https://rubycentral.org/#/portal/signup). *Check to see if your employer matches donations to Ruby Central, Inc. through* [*Benevity*](https://causes.benevity.org/causes/840-300040446?ref=rubycentral.org) *and double your support!*

## RubyGems News

In July, we released RubyGems [3.5.15](https://github.com/rubygems/rubygems/blob/master/CHANGELOG.md?ref=rubycentral.org#3515--2024-07-09), [3.5.16](https://github.com/rubygems/rubygems/blob/master/CHANGELOG.md?ref=rubycentral.org#3516--2024-07-18) and Bundler [2.5.15](https://github.com/rubygems/rubygems/blob/master/bundler/CHANGELOG.md?ref=rubycentral.org#2515-july-9-2024), [2.5.16](https://github.com/rubygems/rubygems/blob/master/bundler/CHANGELOG.md?ref=rubycentral.org#2516-july-18-2024). These releases brings a series of enhancements and bug fixes designed to improve the overall developer experience with RubyGems. Notable improvements included a performance enhancement by using [caller\_locations instead of splitting caller](https://github.com/rubygems/rubygems/pull/7708?ref=rubycentral.org), as collecting all call locations as strings and then extracting and splitting just one was inefficient. Additionally, we resolved issues with loading [nested gemrc configuration keys](https://github.com/rubygems/rubygems/pull/7851?ref=rubycentral.org) when specified as symbols and implemented a file lock to [safeguard the creation of binstubs](https://github.com/rubygems/rubygems/pull/7806?ref=rubycentral.org).

Some other important accomplishments from the team this month include:

**Publishing a** [**basic conformance test for all gem servers**](https://github.com/rubygems/gem%5Fserver%5Fconformance?ref=rubycentral.org)

- This update allows any gem server to be easily tested for compliance with RubyGems standards, significantly impacting both users and developers.
- The conformance test can be accessed and utilized through our [GitHub repository](https://github.com/rubygems/gem%5Fserver%5Fconformance?ref=rubycentral.org).

[**Updating our OpenSearch cluster from 2.11 to 2.13**](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/release-notes.html?ref=rubycentral.org)

- We recently updated our OpenSearch cluster from version 2.11 to 2.13 as part of our regular maintenance routine.
- This upgrade was efficiently executed with a one-click process in our AWS console. The update ensures that our systems continue to run smoothly and benefit from the latest features and improvements. For more details on the update and its benefits, refer to the [AWS OpenSearch release notes](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/release-notes.html?ref=rubycentral.org).

**Confirmed protection against recent OpenSSH Bug**

- Early this month, [a vulnerability was discovered](https://cyberinsider.com/14-million-openssh-servers-potentially-vulnerable-to-regresshion-bug/?ref=rubycentral.org) in certain versions of OpenSSH that could trigger remote code execution.
- The RubyGems security team promptly responded by implementing tests to ensure our software was not exposed to this threat, guaranteeing that our users and developers could continue their work without interruption.

In July, RubyGems gained [171 new commits](https://github.com/rubygems/rubygems/compare/master@%7B2024-7-01%7D...master@%7B2024-7-31%7D?ref=rubycentral.org) contributed by 12 authors. They were 2,827 additions and 1,769 deletions across 113 files.

## [RubyGems.org](http://rubygems.org/?ref=rubycentral.org) News

The updates made this month to [RubyGems.org](http://rubygems.org/?ref=rubycentral.org) reflect a strong commitment to improving user experience, enhancing security, and modernizing the platform. Sponsored hosting for [RubyGems.org](http://rubygems.org/?ref=rubycentral.org) in July was provided by [AWS](https://aws.amazon.com/?ref=rubycentral.org), [Fastly](https://www.fastly.com/?ref=rubycentral.org), and [DataDog](https://www.datadoghq.com/?ref=rubycentral.org). The following are highlights of what the team worked on this month:

**Discontinued auto sign-in** [**after email confirmation**](https://github.com/rubygems/rubygems.org/pull/4810?ref=rubycentral.org)[**and password reset**](https://github.com/rubygems/rubygems.org/pull/4811?ref=rubycentral.org)

- The primary goal for this change is to simplify login flows, reducing the likelihood of mistakes or bypasses.
- This change aligns with best practices recommended by [OWASP](https://cheatsheetseries.owasp.org/cheatsheets/Forgot%5FPassword%5FCheat%5FSheet.html?ref=rubycentral.org#user-resets-password) and will enhance security and streamline the login process for both users and developers.

**Presented on** [**RubyGems.org**](http://rubygems.org/?ref=rubycentral.org) **at RedDot Ruby Conference 2024**

- [@colby-swandale](https://github.com/colby-swandale?ref=rubycentral.org) gave a presentation on ["Scaling RubyGems.org to 1 Trillion Downloads"](https://drive.google.com/file/d/1szfL-qNAa%5FisxsnPqR8d7rDmxwZD1MzJ/view?ref=rubycentral.org).
- The talk was a deep dive into Ruby's package ecosystem, exploring how [RubyGems.org](http://rubygems.org/?ref=rubycentral.org) is maintained and the ongoing efforts of the team ensuring [rubygems.org](http://rubygems.org/?ref=rubycentral.org) remains a healthy and sustainable platform long into the future.
- Colby discussed the latest work and improvements made to the platform and outlined plans for future enhancements.

In July, [RubyGems.org](http://rubygems.org/?ref=rubycentral.org) gained [128 new commits](https://github.com/rubygems/rubygems.org/compare/master@%7B2024-7-01%7D...master@%7B2024-7-31%7D?ref=rubycentral.org) contributed by 8 authors. There were 2,416 additions and 973 deletions across 167 files.

## Total spent

In July we spent $77,574.26 on development work.

## Thank you

Thank you to all the contributors of RubyGems and [RubyGems.org](http://rubygems.org/?ref=rubycentral.org) for this month! Your contributions are greatly appreciated, and we are grateful for your support.

### Contributors to RubyGems:

- [@jeromedalbert](https://github.com/jeromedalbert?ref=rubycentral.org) Jerome Dalbert
- [@deivid-rodriguez](https://github.com/deivid-rodriguez?ref=rubycentral.org) David Rodríguez
- [@segiddins](https://github.com/segiddins?ref=rubycentral.org) Samuel Giddins
- [@hsbt](https://github.com/hsbt?ref=rubycentral.org) Hiroshi Shibata
- [@ntkme](https://github.com/ntkme?ref=rubycentral.org) Natsuki Times
- [@moofkit](https://github.com/moofkit?ref=rubycentral.org) Dmitriy Ivliev
- [@leetking](https://github.com/leetking?ref=rubycentral.org) Alpha 0x00
- [@nobu](https://github.com/nobu?ref=rubycentral.org) Nobuyoshi Nakada
- [@simi](https://github.com/simi?ref=rubycentral.org) Josef Šimánek
- [@jasonkarns](https://github.com/jasonkarns?ref=rubycentral.org) Jason Karns
- [@coryspitzer](https://github.com/CorySpitzer?ref=rubycentral.org) Cory Spitzer
- [@martinemde](https://github.com/martinemde?ref=rubycentral.org) Martin Emde

### Contributors to [RubyGems.org](http://rubygems.org/?ref=rubycentral.org):

- [@martinemde](https://github.com/martinemde?ref=rubycentral.org) Martin Emde
- [@segiddins](https://github.com/segiddins?ref=rubycentral.org) Samuel Giddins
- [@simi](https://github.com/simi?ref=rubycentral.org) Josef Šimánek
- [@indirect](https://github.com/indirect?ref=rubycentral.org) André Arko
- [@colby-swandale](https://github.com/colby-swandale?ref=rubycentral.org) Colby Swandale
- [@earlopain](https://github.com/Earlopain?ref=rubycentral.org) Earlopain
- [@robbyrussell](https://github.com/robbyrussell?ref=rubycentral.org) Robby Russell
- [@jenshenny](https://github.com/jenshenny?ref=rubycentral.org) Jenny Shen

*If we missed you, please let us know so we can include you in our shout out!*