Skip to content

Update Ruby - #29

Merged
tgxworld merged 1 commit into
mainfrom
tgxworld/bump-ruby-security
Oct 23, 2026
Merged

tgxworld merged 1 commit into
mainfrom
tgxworld/bump-ruby-security

Conversation

@tgxworld

@tgxworld tgxworld commented Oct 23, 2026 •

Copy link
Copy Markdown
Contributor

No description provided.

The images use Ruby releases that lack the full set of regexp compilation fixes described in Ruby's advisory:
https://www.ruby-lang.org/en/news/2026/10/23/regexp-fixes-for-gitlab-cves/

This commit updates the images to Ruby 4.0.9, 3.4.12, and 3.3.13. It removes the local Ruby 3.4 backport because 3.4.12 includes that fix, and updates Bundler to 4.0.23.
@tgxworld
tgxworld marked this pull request as ready for review October 23, 2026 06:14
@tgxworld tgxworld changed the title SECURITY: Update Ruby images with regexp compilation fixes Update Ruby Oct 23, 2026
@tgxworld
tgxworld merged commit 0e7d023 into main Oct 23, 2026
6 checks passed
@tgxworld
tgxworld deleted the tgxworld/bump-ruby-security branch October 23, 2026 06:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

2 participants