packages/lang/ruby/patches, branch master

ruby: update to 4.0.7

2026-10-24T07:37:33Z

ruby 4.0.3 only contains ERB 6.0.1.1, which fixes CVE-2026-41316. ruby 4.0.4 is a routine update that includes bugfixes. ruby 4.0.5 only contains a security fix for CVE-2026-46727: Use-after-free in pthread-based getaddrinfo timeout handler and a build system regression in Ruby 4.0.4 under C locale. ruby 4.0.6 is a routine update that includes bugfixes. ruby 4.0.7 is a routine update that includes bugfixes. Packaging changes: - Patch 010-fix-riscv64-build.patch was dropped as MUSL 1.2.5 fixes the issue. - Exclude source files (*.c, *.h, Makefile...) from packages. - Updated ruby_missingfiles to match package files exclusions. - Changed the dependency order (rake -> rubygem, racc -> rubygem) - Moved rdoc_plugin.rb to ruby-rdoc package (and dropping ruby-gems dependency on ruby-rdoc). - Refreshed the dependencies. - ruby_find_pkgsdeps: * fixed a bug in dependency expansion * updated weak dependencies - Added custom test-version.sh to ignore version check on subpackages commands as they use their own gem version. Link: https://www.ruby-lang.org/en/news/2026/04/21/ruby-4-0-3-released/ Changelog: https://github.com/ruby/ruby/releases/tag/v4.0.3 Link: https://www.ruby-lang.org/en/news/2026/05/11/ruby-4-0-4-released/ Changelog: https://github.com/ruby/ruby/releases/tag/v4.0.4 Link: https://www.ruby-lang.org/en/news/2026/05/20/ruby-4-0-5-released/ Changelog: https://github.com/ruby/ruby/releases/tag/v4.0.5 Link: https://www.ruby-lang.org/en/news/2026/07/14/ruby-4-0-6-released/ Changelog: https://github.com/ruby/ruby/releases/tag/v4.0.6 Link: https://www.ruby-lang.org/en/news/2026/09/15/ruby-4-0-7-released/ Changelog: https://github.com/ruby/ruby/releases/tag/v4.0.7 Signed-off-by: Luiz Angelo Daros de Luca

ruby: update to 3.4.5

2025-09-18T19:17:26Z

Ruby 3.4.0 is a major release that introduces several changes: - Adds `it` block parameter reference - Switches default parser to Prism - Implements Happy Eyeballs Version 2 in the socket library - Improves YJIT - Adds Modular GC - And more (see changelog for full details) Subsequent minor releases include: - 3.4.1: fixes version description - 3.4.2: routine bugfix release - 3.4.3: routine bugfix release - 3.4.4: routine bugfix release (Linux-specific) - 3.4.5: routine bugfix release, adds GCC 15 support Packaging changes: - (NEW) ruby-repl_type_completor (packaging the repl_type_completor gem) - Refreshed package dependencies - Updated `ruby_missingfiles` (detects unpacked files) to use `apk` - Refactored `ruby_find_pkgsdeps` (detects inter-package dependencies) to use the Ruby parser (Prism) instead of heuristic string matching Changelog: https://www.ruby-lang.org/en/news/2024/12/25/ruby-3-4-0-released/ Signed-off-by: Luiz Angelo Daros de Luca

ruby: fix riscv64 build

2023-08-14T21:16:23Z

Fix build by adding missing macros. The patch is taken from: https://lists.openembedded.org/g/openembedded-core/message/161168 Signed-off-by: Tianling Shen

ruby: update to 3.2.1

2023-04-11T19:48:16Z

Ruby 3.2 changes include: * WASI based WebAssembly support * Production-ready YJIT * Regexp improvements against ReDoS See: https://www.ruby-lang.org/en/news/2022/12/25/ruby-3-2-0-released/ Ruby 3.2.1 changes includes: * Bugfixes See: https://www.ruby-lang.org/en/news/2023/02/08/ruby-3-2-1-released/ Package-related changes are: * libyaml is no longer bundled, requiring OpenWrt to build it as a host library for ruby/host. * Added sub-packages: - ruby-mjit: files for mJIT, although disabled during build - ruby-syntax_suggest: finds missing ends * Backported patches dropped: - 001-fix-build-with-libressl-3.5.patch - 002-fix-operator-precedence.patch * Usual dependencies adjustments Signed-off-by: Luiz Angelo Daros de Luca

ruby: update to 3.1.3

2022-12-12T03:10:09Z

This release includes a security fix. - CVE-2021-33621: HTTP response splitting in CGI For more details: - https://www.ruby-lang.org/en/news/2022/11/24/ruby-3-1-3-released/ Signed-off-by: Luiz Angelo Daros de Luca

ruby: fix build with LibreSSL over v3.5

2022-07-24T02:19:12Z

LibreSSL 3.5 and later provide and need to use PEM_write_bio_PrivateKey_traditional() upstream commit: https://github.com/ruby/openssl/commit/e25fb0d0d86da5a9398ebdc9216b2ea89f80fa3d https://github.com/ruby/openssl/commit/b02815271fcc295cb8b07ef740684b88a10f2760 Signed-off-by: ZiMing Mo

ruby: update to 3.1.2

2022-04-25T19:13:08Z

Ruby 3.1.0 major changes: - YJIT: New experimental in-process JIT compiler - debug gem: A new debugger - error_highlight: Fine-grained error location in backtrace - IRB Autocomplete and Documentation Display - Many more. See: https://www.ruby-lang.org/en/news/2021/12/25/ruby-3-1-0-released/ Ruby 3.1.1 changes: - Many non-security bug fixes. See: https://www.ruby-lang.org/en/news/2022/02/18/ruby-3-1-1-released/ Ruby 3.1.2 changes: - CVE-2022-28738: Double free in Regexp compilation - CVE-2022-28739: Buffer overrun in String-to-Float conversion Packaging changes: - Dropped 100-musl.patch (upstream fix) - Added: ruby-error_highlight, ruby-random_formatter, ruby-ruby2_keywords - Removed: ruby-dbm, ruby-gdbm, ruby-fiber, ruby-gdbm, ruby-tracer - ruby_find_pkgsdeps script: * cleaned some ignored and weak dependencies - ruby_missingfiles script: * fix the example cmdline * let diff use all terminal columns Signed-off-by: Luiz Angelo Daros de Luca

ruby: update to 3.0.2

2021-07-15T17:44:15Z

This release fixes some bugs and these vulnerabilities: * CVE-2021-31810: Trusting FTP PASV responses vulnerability in Net::FTP * CVE-2021-32066: A StartTLS stripping vulnerability in Net::IMAP * CVE-2021-31799: A command injection vulnerability in RDoc Signed-off-by: Luiz Angelo Daros de Luca

ruby: update to 3.0.0

2021-02-22T22:49:38Z

This release goal is performance, concurrency, and typing. See details in https://www.ruby-lang.org/en/news/2020/12/25/ruby-3-0-0-released/ New subpackages (reflect of mostly complete upstream ruby gemification) - ruby-abbrev (from ruby-misc) - ruby-base64 (from ruby-misc) - ruby-coverage (from ruby-misc) - ruby-continuation (from ruby-misc) - ruby-debug (from ruby-debuglib) - ruby-english (from ruby-misc) - ruby-expect (from ruby-misc) - ruby-fiber (from ruby-misc) - ruby-find (from ruby-filelib) - ruby-io-nonblock (from ruby-multithread) - ruby-io-wait (from ruby-multithread) - ruby-monitor (from ruby-multithread) - ruby-net-ftp (from ruby-net) - ruby-net-http (from ruby-net) - ruby-net-imap (from ruby-net) - ruby-net-pop (from ruby-net) - ruby-net-protocol (from ruby-net) - ruby-objspace (from ruby-debuglib) - ruby-open-uri (from ruby-net) - ruby-pathname (from ruby-filelib) - ruby-pp (from ruby-prettyprint) - ruby-pty (from ruby-misc) - ruby-rbs (NEW) - ruby-resolv (from ruby-socket) - ruby-resolv-replace (from ruby-socket) - ruby-securerandom (from ruby-misc) - ruby-set (from ruby-misc) - ruby-shellwords (from ruby-misc) - ruby-syslog (from ruby-logger) - ruby-tempfile (from ruby-filelib) - ruby-tmpdir (from ruby-filelib) - ruby-tsort (from ruby-misc) - ruby-typeprof (NEW) - ruby-un (from ruby-mkmf) - ruby-weakref (from ruby-misc) Removed subpackages - ruby-debuglib (split into ruby-debug,ruby-objspace) - ruby-filelib (split into ruby-find,ruby-pathname,ruby-tempfile,ruby-tmpdir) - ruby-misc (split into ruby-abbrev,ruby-base64,ruby-continuation, ruby-coverage,ruby-english,ruby-expect,ruby-fiber,ruby-securerandom, ruby-set,ruby-shellwords,ruby-tsort,ruby-weakref) - ruby-multithread (split into ruby-io-nonblock,ruby-io-wait,ruby-monitor) - ruby-net (split into ruby-net-ftp,ruby-net-http,ruby-net-imap,ruby-net-pop, ruby-net-protocol,ruby-open-uri) - ruby-net-telnet (removed upstream) - ruby-sdbm (removed upstream) - ruby-webrick (removed upstream) - ruby-xmlrpc (removed upstream) Signed-off-by: Luiz Angelo Daros de Luca

treewide: Run refresh on all packages

2021-02-21T00:02:15Z

The crude loop I wrote to come up with this changeset: find -L package/feeds/packages/ -name patches | \ sed 's/patches$/refresh/' | sort | xargs make Signed-off-by: Ilya Lipnitskiy