Repository navigation
Add gemspec metadata and build the file list without git - #615
Merged
Merged
Conversation
- Add source_code_uri, bug_tracker_uri, and rubygems_mfa_required metadata - Build the file list with Dir instead of shelling out to git, so the gem builds outside a git checkout (the packaged files are unchanged) - Use https for the Gemfile source Signed-off-by: Tim Smith <tsmith84@proton.me>
ls-todd-lunter
added a commit
that referenced
this pull request
Oct 27, 2026
* Declare base64 as a runtime dependency so the gem loads on Ruby 3.4+ (#605) * Replace multi_json with the json standard library and drop the multi_json dependency (#613) * Keep the build context inside the build directory: symlinks are archived as symlinks rather than followed, and .dockerignore patterns can no longer reach outside the directory (#611) * Send platform as a query parameter on Container.create (#607) * Honor stdout: false and stderr: false in Container#exec (#609) * Request an HTTP upgrade when attaching to stdin so the attach no longer hangs (#610) * Memoize Connection#rootless? when the daemon is not rootless (#608) * Add gemspec metadata (source_code_uri, bug_tracker_uri, rubygems_mfa_required) and build the gem file list without git (#615) * Fix and update README examples and streaming read_timeout docs (#606, #585, #592) * Fix CI, test through Ruby 4.0 and Docker 28 and 29, and remove Travis, Code Climate and unmaintained test image leftovers (#604, #605, #614, #616)
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
source_code_uriandbug_tracker_uri, so rubygems.org links to the repo and issues. Addsrubygems_mfa_required = 'true', so future releases must be pushed with MFA, which protects against supply-chain attacks.gem.fileswithDirinstead of shelling out togit ls-files. The gem now builds outside a git checkout, for example from a source tarball or in some packaging pipelines. I checked that the packaged file list is identical: every file underlib/is.rb, plusREADME.mdandLICENSE.https://for theGemfilesource. Thehttp://source allowed gems to be fetched over plain HTTP.Authors and emails are unchanged.
Testing
gem build docker-api.gemspecsucceeds.git ls-files lib README.md LICENSEand the newDirglob produce the same file list.