Skip to content

[pull] master from ruby:master - #1453

Merged
pull[bot] merged 6 commits into
turkdevops:masterfrom
ruby:master
Sep 28, 2026
Merged

pull[bot] merged 6 commits into
turkdevops:masterfrom
ruby:master

Conversation

@pull

@pull pull Bot commented Sep 28, 2026 •

Copy link
Copy Markdown

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

BurdetteLamar and others added 6 commits September 28, 2026 09:49
Treat encoding coercion, `to_io`, and scheduler capability checks as
callouts that can change the buffer before byte access begins.

- Copy `get_string` bytes through the existing locked-for-reading helper
  after encoding coercion, without retaining metadata pointers across it.
- Obtain the writable buffer after `to_io` conversion in `read` and `pread`.
- Reacquire and validate the buffer before native I/O fallback when the
  scheduler does not handle `read`, `write`, `pread`, or `pwrite`.

Add regression coverage using the existing buffer and slice APIs. Scheduler
probes shrink a slice without freeing its underlying storage, making stale
length handling observable without accessing released memory. Also cover
encoding callbacks and frozen-state changes during I/O coercion.

This is an independent correctness extraction from #18911. It introduces
no new classes, slice representation, or public API.
…me origin

Gem::RemoteFetcher and the Bundler downloader resent the header on every redirect, including one to another origin. It carries the source URI that Bundler replaces with a mirror, credentials included, so it is meant for the mirror's origin only, and RFC 9110 (Section 15.4) asks a client following a redirect to consider removing such fields.

ruby/rubygems@f52afd1b92

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@pull pull Bot locked and limited conversation to collaborators Sep 28, 2026
@pull pull Bot added the ⤵️ pull label Sep 28, 2026
@pull
pull Bot merged commit 1692691 into turkdevops:master Sep 28, 2026
1 of 3 checks passed
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants