[renovate]

This PR contains the following updates:

Package	Update	Change
ruby (source)	patch	4.0.6 → 4.0.9

---

Release Notes

ruby/ruby (ruby)

v4.0.9: 4.0.9

Compare Source

What's Changed

• Reject overflowed repeat/null-check IDs in huge regexps by makenowjust · Pull Request #​16801

Note: This list is automatically generated by tool/gen-github-release.rb. Because of this, some commits may be missing.

Full Changelog

v4.0.8: 4.0.8

Compare Source

What's Changed

• Bug #​22311: Build crashes on macOS 26 with the macOS 27 SDK because pipe2() and dup3() are unavailable - Ruby - Ruby Issue Tracking System
• Bug #​22174: Set operations (&, ^, collect!, flatten, classify, divide) do not preserve compare_by_identity - Ruby - Ruby Issue Tracking System
• Bug #​22383: Fix inverted STR_SHARED check in rb_str_tmp_frozen_release - Ruby - Ruby Issue Tracking System
• Bug #​22387: str_shared_replace incorrectly recalculates termlen - Ruby - Ruby Issue Tracking System
• Bug #​22327: RubyVM::ZJIT.reset_stats! aborts the process (Rust panic) when ZJIT is not enabled - Ruby - Ruby Issue Tracking System
• Bug #​22381: MatchData assigned to $~ is incorrectly reused - Ruby - Ruby Issue Tracking System
• Bug #​22321: Assertion Failed: rb_vm_search_method_slowpath:RB_TYPE_2_P(klass, RUBY_T_CLASS, RUBY_T_ICLASS): klass: T_MODULE - Ruby - Ruby Issue Tracking System
• Bug #​22315: heap-use-after-free in String unpack with a block that mutates the receiver - Ruby - Ruby Issue Tracking System
• Bug #​22318: heap uaf triggered in array.flatten - Ruby - Ruby Issue Tracking System
• Bug #​22319: heap buffer overflow triggered by array's zip function - Ruby - Ruby Issue Tracking System
• Bug #​22322: AddressSanitizer: use-after-poison in econv_description /ruby-src/build/../transcode.c - Ruby - Ruby Issue Tracking System
• Bug #​22334: Assertion Failed: VM_ENV_FLAGS:FIXNUM_P(flags) - Ruby - Ruby Issue Tracking System
• Bug #​22336: IO:Buffer Heap uaf - Ruby - Ruby Issue Tracking System
• Bug #​22330: heap uaf from string.encode() - Ruby - Ruby Issue Tracking System
• Bug #​22340: Win32: File.stat succeeds on symbolic-link loops on Windows - Ruby - Ruby Issue Tracking System
• Bug #​22335: Stack corruption with >31 keyword args and refined Integer#== - Ruby - Ruby Issue Tracking System
• Bug #​22339: Ruby::Box: crash / hang at VM shutdown with RUBY_FREE_AT_EXIT=1 - Ruby - Ruby Issue Tracking System
• Bug #​22342: IO#gets can ignore the limit argument in some edge cases - Ruby - Ruby Issue Tracking System
• Bug #​22391: Fix propagation of errno in rb_io_maybe_wait. - Ruby - Ruby Issue Tracking System
• Bug #​22384: Regexp compile error in the 2nd+ branch of a top-level alternation leaks the parse tree (regression from #​13332, Ruby 4.0) - Ruby - Ruby Issue Tracking System
• Bug #​22388: Use-after-free when an Enumerable retains its each block - Ruby - Ruby Issue Tracking System
• Bug #​22284: Passing an object with to_int to curry as its arity causes problems with LLP64. - Ruby - Ruby Issue Tracking System
• Bug #​22416: Respect timezone abbreviation encodings in Time#strftime - Ruby - Ruby Issue Tracking System
• Bug #​22426: ZJIT: keyword arguments swapped when passed out of declared order to a method with a block (please backport d81a11d4e6 to 4.0) - Ruby - Ruby Issue Tracking System
• Bug #​22406: Process.fork can leave the child unable to resolve hostnames: getaddrinfo helper threads take glibc's resolver lock after releasing the fork lock - Ruby - Ruby Issue Tracking System
• Bug #​22445: On macOS, a child of Kernel#fork can abort with "[BUG] pthread_rwlock_destroy: Resource busy (EBUSY)" - Ruby - Ruby Issue Tracking System
• Bug #​22415: Thread.handle_interrupt needs to preserve errinfo - Ruby - Ruby Issue Tracking System
• Bug #​22434: "No live threads left. Deadlock?" when running system() or spawn in Ractors - Ruby - Ruby Issue Tracking System
• Backport the regexp compiler program size overflow fixes to ruby_4_0 by hsbt · Pull Request #​19025

Note: This list is automatically generated by tool/gen-github-release.rb. Because of this, some commits may be missing.

Full Changelog

v4.0.7: 4.0.7

Compare Source

What's Changed

• Bug #​22188: addr2line doesn't find symbols when compiled with GCC LTO - Ruby - Ruby Issue Tracking System
• Bug #​22210: Check if issue #​19969 is still reproducible / re-opened in 4.0.x - Ruby - Ruby Issue Tracking System
• Bug #​22217: Segmentation fault when resuming execution with Coverage.start and ruby/debug - Ruby - Ruby Issue Tracking System
• Fix formatting in ObjectSpace._id2ref error path by eregon · Pull Request #​18206
• Bug #​22200: ObjectSpace._id2ref can return a different object than the id's owner on Ruby 4.0 (stale id2ref_tbl entry for objects with generic fields) - Ruby - Ruby Issue Tracking System
• Bug #​22123: Ruby::Box + BUNDLER_SETUP can evaluate gemspecs before main-box RubyGems initialization - Ruby - Ruby Issue Tracking System
• Bump ERB to 6.0.7 by k0kubun · Pull Request #​18282
• Bug #​22237: GC.auto_compact corrupts a String or segfaults from String#tr with dup or gsub - Ruby - Ruby Issue Tracking System
• Bug #​22243: Change fork behavior when Process._fork raises an exception during fork with a block argument - Ruby - Ruby Issue Tracking System
• Bug #​22223: Socket.tcp with connect_timeout returns a phantom "connected" socket for a refused connection on macOS 27 (kernel answers EISCONN on connect retry; SO_ERROR never consulted) - Ruby - Ruby Issue Tracking System
• Bug #​22220: Performance regression when requiring aws-sdk-ec2 in Ruby 4.0.6 - Ruby - Ruby Issue Tracking System
• Bug #​22218: Line TracePoint misses executed loop condition after a guard - Ruby - Ruby Issue Tracking System
• Bug #​22198: win32: heap overflow in Kernel#system - Ruby - Ruby Issue Tracking System
• Bug #​22196: Heap-use-after-free in fiber_switch with transfer-terminated async tasks on 3.4.10 - Ruby - Ruby Issue Tracking System
• Bug #​22190: Class#subclasses does not include clones of classes that include modules - Ruby - Ruby Issue Tracking System
• Bug #​11438: native_thread_init_stack() get machine.stack_start unequal to thread's stack start address, x86 win32 - Ruby - Ruby Issue Tracking System
• Bug #​22257: Prepending a module to an already-included module leaves stale super caches - Ruby - Ruby Issue Tracking System
• Bug #​22242: SEGV in method dispatch (vm_call_iseq_setup_kwparm_nokwarg / def_iseq_ptr) on Ruby 4.0.6 — Rails CI - Ruby - Ruby Issue Tracking System
• Bug #​22269: Coverage.line_stub clobbers already-collected coverage data - Ruby - Ruby Issue Tracking System
• Bug #​22290: Adding instance variables to anonymous object may bloat all future classes - Ruby - Ruby Issue Tracking System
• Bug #​22292: YJIT/ZJIT: Struct accessor crashes after an instance variable is set on a Struct that exactly fills the largest GC slot - Ruby - Ruby Issue Tracking System
• Bug #​20958: fix ENV.keys encoding on windows - Ruby - Ruby Issue Tracking System
• Bug #​22259: Arrays sharding a buffer segfault when concatenating with each other - Ruby - Ruby Issue Tracking System
• Bug #​22264: Warning missing from parse.y hash literals - Ruby - Ruby Issue Tracking System
• Bug #​22303: EncodingError from interpolating symbol crashes whole process - Ruby - Ruby Issue Tracking System
• Bug #​22224: YJIT: rb_yjit_invalidate_ep_is_bp takes the VM lock stopping Ractors on every Proc materialization; multi-Ractor throughput collapses (up to ~150x) - Ruby - Ruby Issue Tracking System

Note: This list is automatically generated by tool/gen-github-release.rb. Because of this, some commits may be missing.

Full Changelog

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Triggered from #122 by @​renovate[bot].

Checking if we can fast forward main (887d53d) to renovate/ruby-4.x (9f2f17e).

Target branch (main):

commit 887d53db4dbad9098a72f6df0f9038200bac9bca (HEAD -> main, origin/main)
Author: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Date:   Thu Jul 16 20:16:12 2026 +0000

    chore(deps): update dependency tzinfo-data to v1.2026.3

Pull request (renovate/ruby-4.x):

commit 9f2f17e20146a82a398bc0d0b2d981f56c68eef5 (pull_request/renovate/ruby-4.x)
Author: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Date:   Tue Sep 15 07:05:25 2026 +0000

    chore(deps): update dependency ruby to v4.0.7

It is possible to fast forward main (887d53d) to renovate/ruby-4.x (9f2f17e). If you have write access to the target repository, you can add a comment with /fast-forward to fast forward main to renovate/ruby-4.x.

[github-actions]

Triggered from #122 by @​renovate[bot].

Checking if we can fast forward main (887d53d) to renovate/ruby-4.x (2d01ba9).

Target branch (main):

commit 887d53db4dbad9098a72f6df0f9038200bac9bca (HEAD -> main, origin/main)
Author: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Date:   Thu Jul 16 20:16:12 2026 +0000

    chore(deps): update dependency tzinfo-data to v1.2026.3

Pull request (renovate/ruby-4.x):

commit 2d01ba92921335a759648e81a61d0cd744aa084c (pull_request/renovate/ruby-4.x)
Author: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Date:   Thu Oct 22 10:15:38 2026 +0000

    chore(deps): update dependency ruby to v4.0.8

It is possible to fast forward main (887d53d) to renovate/ruby-4.x (2d01ba9). If you have write access to the target repository, you can add a comment with /fast-forward to fast forward main to renovate/ruby-4.x.

[github-actions]

Triggered from #122 by @​renovate[bot].

Checking if we can fast forward main (887d53d) to renovate/ruby-4.x (e7f7ff7).

Target branch (main):

commit 887d53db4dbad9098a72f6df0f9038200bac9bca (HEAD -> main, origin/main)
Author: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Date:   Thu Jul 16 20:16:12 2026 +0000

    chore(deps): update dependency tzinfo-data to v1.2026.3

Pull request (renovate/ruby-4.x):

commit e7f7ff745b9e8ee04632ed3e2c1458d54a7a6a51 (pull_request/renovate/ruby-4.x)
Author: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Date:   Fri Oct 23 06:35:57 2026 +0000

    chore(deps): update dependency ruby to v4.0.9

It is possible to fast forward main (887d53d) to renovate/ruby-4.x (e7f7ff7). If you have write access to the target repository, you can add a comment with /fast-forward to fast forward main to renovate/ruby-4.x.