Skip to content

[pull] master from ruby:master#1061

Merged
pull[bot] merged 6 commits into
turkdevops:masterfrom
ruby:master
May 29, 2026
Merged

[pull] master from ruby:master#1061
pull[bot] merged 6 commits into
turkdevops:masterfrom
ruby:master

Conversation

@pull
Copy link
Copy Markdown

@pull pull Bot commented May 29, 2026

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

rhenium and others added 6 commits May 29, 2026 13:07
OpenSSL::KDF.pbkdf2_hmac and .scrypt are currently not interrupted by
Timeout.timeout because they make a single, slow OpenSSL function call
during which Ruby-level interrupts cannot be handled. Add advice against
using parameters from untrusted inputs.

ruby/openssl@58c0b81a59
Prior to a26f528, `rbimpl_rtypeddata_p`
checked whether a flag that is no longer used since that commit was set.
As a result, typed data objects created in newer versions of Ruby are
considered as untyped in extension libraries compiled with older headers.
ZJIT: Materialize frames in exit trampoline
Data and TypedData now both are T_DATA so we can clean up this path and
make T_DATA look like the others: T_STRING, etc.

Thanks to @nobu for noticing and reporting here: #17114
The "locale" encoding is only registered once, so we can use an atomic
to avoid the full lock and hash lookup.
@pull pull Bot locked and limited conversation to collaborators May 29, 2026
@pull pull Bot added the ⤵️ pull label May 29, 2026
@pull pull Bot merged commit d901035 into turkdevops:master May 29, 2026
1 of 3 checks passed
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants