ruby.git/.github/workflows/tarball-ubuntu.yml, branch master The Ruby Programming Language Bump actions/checkout to v6.0.3 2026-06-04T01:49:04+00:00 Hiroshi SHIBATA hsbt@ruby-lang.org 2026-06-04T01:04:20+00:00 a50eaa3dcd6fcb3673d5356db886af26c4e15e52 Dependabot left the version comment as v6.0.2 on the four lines that carry a trailing `# zizmor: ignore[artipacked]`, since its comment rewriter only handles a version comment as the last token on the line. zizmor flagged the resulting hash/comment mismatch. Update every checkout pin in .github to the v6.0.3 commit and comment at once. 
Dependabot left the version comment as v6.0.2 on the four lines that
carry a trailing `# zizmor: ignore[artipacked]`, since its comment
rewriter only handles a version comment as the last token on the line.
zizmor flagged the resulting hash/comment mismatch. Update every
checkout pin in .github to the v6.0.3 commit and comment at once.
Build full path for HOME stat snapshot 2026-06-02T07:32:40+00:00 Hiroshi SHIBATA hsbt@ruby-lang.org 2026-06-02T06:50:06+00:00 220f66a33eae1370aa964e7c07efdfdaf7bccddf Dir.each_child yields entry names, so stat/digest/children ran against the working directory instead of HOME. Join dir and name first. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> 
Dir.each_child yields entry names, so stat/digest/children ran against
the working directory instead of HOME. Join dir and name first.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Pass only the required secrets to tarball reusable workflows 2026-05-29T02:30:03+00:00 Hiroshi SHIBATA hsbt@ruby-lang.org 2026-05-29T00:51:16+00:00 daea48078cd029b16ef5a4a31fe7fedf72bb00f0 Replace secrets: inherit with explicit Slack webhook secrets, which are the only secrets the ubuntu/macos/windows builds use. tarball-non-development uses no secrets, so drop inherit there entirely. 
Replace secrets: inherit with explicit Slack webhook secrets, which are
the only secrets the ubuntu/macos/windows builds use. tarball-non-development
uses no secrets, so drop inherit there entirely.
Restrict GITHUB_TOKEN permissions in tarball reusable workflows 2026-05-29T02:30:03+00:00 Hiroshi SHIBATA hsbt@ruby-lang.org 2026-05-29T00:47:58+00:00 28c8bef6d78f4fc50e7e14afd5dd7c121e2639e6 These reusable workflows only check out, download artifacts, build, and test, so contents: read is sufficient. 
These reusable workflows only check out, download artifacts, build, and
test, so contents: read is sufficient.
Simplify save-stats.rb without Pathname 2026-05-23T02:37:24+00:00 Nobuyoshi Nakada nobu@ruby-lang.org 2026-05-23T02:37:24+00:00 02ad18dc580bffe5048cbd7d99b6a7ecb3784e07 






Bump the github-actions group across 1 directory with 5 updates
2026-05-22T03:25:38+00:00

dependabot[bot]
49699333+dependabot[bot]@users.noreply.github.com

2026-05-22T02:15:06+00:00

d90401d2dabf957e9341a777788d8f60cda76177

Bumps the github-actions group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [ruby/setup-ruby](https://github.com/ruby/setup-ruby) | `1.307.0` | `1.310.0` |
| [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action) | `0.5.3` | `0.5.6` |
| [github/codeql-action](https://github.com/github/codeql-action) | `4.35.4` | `4.35.5` |
| [ruby/action-slack](https://github.com/ruby/action-slack) | `3.2.2` | `4.0.0` |
| [taiki-e/install-action](https://github.com/taiki-e/install-action) | `2.78.0` | `2.79.4` |



Updates `ruby/setup-ruby` from 1.307.0 to 1.310.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](https://github.com/ruby/setup-ruby/compare/6aaa311d81eba98ae12eaffbcb63296ace0efcde...afeafc3d1ab54a631816aba4c914a0081c12ff2f)

Updates `zizmorcore/zizmor-action` from 0.5.3 to 0.5.6
- [Release notes](https://github.com/zizmorcore/zizmor-action/releases)
- [Commits](https://github.com/zizmorcore/zizmor-action/compare/b1d7e1fb5de872772f31590499237e7cce841e8e...5f14fd08f7cf1cb1609c1e344975f152c7ee938d)

Updates `github/codeql-action` from 4.35.4 to 4.35.5
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/68bde559dea0fdcac2102bfdf6230c5f70eb485e...9e0d7b8d25671d64c341c19c0152d693099fb5ba)

Updates `ruby/action-slack` from 3.2.2 to 4.0.0
- [Release notes](https://github.com/ruby/action-slack/releases)
- [Commits](https://github.com/ruby/action-slack/compare/54175162371f1f7c8eb94d7c8644ee2479fcd375...d260b61aa817726d5bedd22dd6cc305787fa4cdd)

Updates `taiki-e/install-action` from 2.78.0 to 2.79.4
- [Release notes](https://github.com/taiki-e/install-action/releases)
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/taiki-e/install-action/compare/e1c4cd42111751368541a7cb5db3522bd1f846a4...e0eafa9a0d485c37f97c0f7beb930a58a2facbac)

---
updated-dependencies:
- dependency-name: ruby/setup-ruby
  dependency-version: 1.310.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: zizmorcore/zizmor-action
  dependency-version: 0.5.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: github/codeql-action
  dependency-version: 4.35.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: ruby/action-slack
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: taiki-e/install-action
  dependency-version: 2.79.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>




Bumps the github-actions group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [ruby/setup-ruby](https://github.com/ruby/setup-ruby) | `1.307.0` | `1.310.0` |
| [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action) | `0.5.3` | `0.5.6` |
| [github/codeql-action](https://github.com/github/codeql-action) | `4.35.4` | `4.35.5` |
| [ruby/action-slack](https://github.com/ruby/action-slack) | `3.2.2` | `4.0.0` |
| [taiki-e/install-action](https://github.com/taiki-e/install-action) | `2.78.0` | `2.79.4` |



Updates `ruby/setup-ruby` from 1.307.0 to 1.310.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](https://github.com/ruby/setup-ruby/compare/6aaa311d81eba98ae12eaffbcb63296ace0efcde...afeafc3d1ab54a631816aba4c914a0081c12ff2f)

Updates `zizmorcore/zizmor-action` from 0.5.3 to 0.5.6
- [Release notes](https://github.com/zizmorcore/zizmor-action/releases)
- [Commits](https://github.com/zizmorcore/zizmor-action/compare/b1d7e1fb5de872772f31590499237e7cce841e8e...5f14fd08f7cf1cb1609c1e344975f152c7ee938d)

Updates `github/codeql-action` from 4.35.4 to 4.35.5
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/68bde559dea0fdcac2102bfdf6230c5f70eb485e...9e0d7b8d25671d64c341c19c0152d693099fb5ba)

Updates `ruby/action-slack` from 3.2.2 to 4.0.0
- [Release notes](https://github.com/ruby/action-slack/releases)
- [Commits](https://github.com/ruby/action-slack/compare/54175162371f1f7c8eb94d7c8644ee2479fcd375...d260b61aa817726d5bedd22dd6cc305787fa4cdd)

Updates `taiki-e/install-action` from 2.78.0 to 2.79.4
- [Release notes](https://github.com/taiki-e/install-action/releases)
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/taiki-e/install-action/compare/e1c4cd42111751368541a7cb5db3522bd1f846a4...e0eafa9a0d485c37f97c0f7beb930a58a2facbac)

---
updated-dependencies:
- dependency-name: ruby/setup-ruby
  dependency-version: 1.310.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: zizmorcore/zizmor-action
  dependency-version: 0.5.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: github/codeql-action
  dependency-version: 4.35.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: ruby/action-slack
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: taiki-e/install-action
  dependency-version: 2.79.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>






Reuse the script to save stats of HOME
2026-05-22T02:40:33+00:00

Nobuyoshi Nakada
nobu@ruby-lang.org

2026-05-21T10:05:01+00:00

dde7b1d7e05eda62af14c70d49e3309b63fa7f9b












Align tarball-test setup-ruby with the rest of the repo
2026-05-22T01:31:11+00:00

Hiroshi SHIBATA
hsbt@ruby-lang.org

2026-05-22T00:31:50+00:00

7bd4961e7d1933c601346654563eb1581bf19174

Bump ruby/setup-ruby to v1.307.0 (matching the 17 other workflows that
already pin this SHA) and use Ruby 3.2 as the host interpreter on both
Ubuntu and Windows.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>





Bump ruby/setup-ruby to v1.307.0 (matching the 17 other workflows that
already pin this SHA) and use Ruby 3.2 as the host interpreter on both
Ubuntu and Windows.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>







Install gmp on every tarball-test platform
2026-05-22T01:31:11+00:00

Hiroshi SHIBATA
hsbt@ruby-lang.org

2026-05-22T00:25:34+00:00

5a6e6d48c384737baf2921558d7b05e92618da1e

macOS already pulled gmp via brew so bignum tests linked against it,
while ubuntu/non-development/windows skipped it and quietly used the
pure-C fallback. Add libgmp-dev on apt and gmp on vcpkg so all platforms
build bignum.c against gmp consistently.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>





macOS already pulled gmp via brew so bignum tests linked against it,
while ubuntu/non-development/windows skipped it and quietly used the
pure-C fallback. Add libgmp-dev on apt and gmp on vcpkg so all platforms
build bignum.c against gmp consistently.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>







Drop readline and curses from tarball-test dependency install
2026-05-22T01:31:11+00:00

Hiroshi SHIBATA
hsbt@ruby-lang.org

2026-05-22T00:24:46+00:00

1a5cf207a206eb05f259d524678a68923eb3a2e4

ext/readline and ext/curses are no longer shipped from ruby/ruby, so
libreadline / libncurses are unused at build and run time. Remove them
from apt / brew / vcpkg lists, drop the matching --with-readline-dir
configure flag on macOS, and simplify the Windows DLL symlink loop that
was carved out to skip readline.dll.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>





ext/readline and ext/curses are no longer shipped from ruby/ruby, so
libreadline / libncurses are unused at build and run time. Remove them
from apt / brew / vcpkg lists, drop the matching --with-readline-dir
configure flag on macOS, and simplify the Windows DLL symlink loop that
was carved out to skip readline.dll.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>