[renovate]

This PR contains the following updates:

Package	Update	Change
ruby (source)	patch	4.0.7 → 4.0.9

---

Release Notes

ruby/ruby (ruby)

v4.0.9: 4.0.9

Compare Source

What's Changed

• Reject overflowed repeat/null-check IDs in huge regexps by makenowjust · Pull Request #​16801

Note: This list is automatically generated by tool/gen-github-release.rb. Because of this, some commits may be missing.

Full Changelog

v4.0.8: 4.0.8

Compare Source

What's Changed

• Bug #​22311: Build crashes on macOS 26 with the macOS 27 SDK because pipe2() and dup3() are unavailable - Ruby - Ruby Issue Tracking System
• Bug #​22174: Set operations (&, ^, collect!, flatten, classify, divide) do not preserve compare_by_identity - Ruby - Ruby Issue Tracking System
• Bug #​22383: Fix inverted STR_SHARED check in rb_str_tmp_frozen_release - Ruby - Ruby Issue Tracking System
• Bug #​22387: str_shared_replace incorrectly recalculates termlen - Ruby - Ruby Issue Tracking System
• Bug #​22327: RubyVM::ZJIT.reset_stats! aborts the process (Rust panic) when ZJIT is not enabled - Ruby - Ruby Issue Tracking System
• Bug #​22381: MatchData assigned to $~ is incorrectly reused - Ruby - Ruby Issue Tracking System
• Bug #​22321: Assertion Failed: rb_vm_search_method_slowpath:RB_TYPE_2_P(klass, RUBY_T_CLASS, RUBY_T_ICLASS): klass: T_MODULE - Ruby - Ruby Issue Tracking System
• Bug #​22315: heap-use-after-free in String unpack with a block that mutates the receiver - Ruby - Ruby Issue Tracking System
• Bug #​22318: heap uaf triggered in array.flatten - Ruby - Ruby Issue Tracking System
• Bug #​22319: heap buffer overflow triggered by array's zip function - Ruby - Ruby Issue Tracking System
• Bug #​22322: AddressSanitizer: use-after-poison in econv_description /ruby-src/build/../transcode.c - Ruby - Ruby Issue Tracking System
• Bug #​22334: Assertion Failed: VM_ENV_FLAGS:FIXNUM_P(flags) - Ruby - Ruby Issue Tracking System
• Bug #​22336: IO:Buffer Heap uaf - Ruby - Ruby Issue Tracking System
• Bug #​22330: heap uaf from string.encode() - Ruby - Ruby Issue Tracking System
• Bug #​22340: Win32: File.stat succeeds on symbolic-link loops on Windows - Ruby - Ruby Issue Tracking System
• Bug #​22335: Stack corruption with >31 keyword args and refined Integer#== - Ruby - Ruby Issue Tracking System
• Bug #​22339: Ruby::Box: crash / hang at VM shutdown with RUBY_FREE_AT_EXIT=1 - Ruby - Ruby Issue Tracking System
• Bug #​22342: IO#gets can ignore the limit argument in some edge cases - Ruby - Ruby Issue Tracking System
• Bug #​22391: Fix propagation of errno in rb_io_maybe_wait. - Ruby - Ruby Issue Tracking System
• Bug #​22384: Regexp compile error in the 2nd+ branch of a top-level alternation leaks the parse tree (regression from #​13332, Ruby 4.0) - Ruby - Ruby Issue Tracking System
• Bug #​22388: Use-after-free when an Enumerable retains its each block - Ruby - Ruby Issue Tracking System
• Bug #​22284: Passing an object with to_int to curry as its arity causes problems with LLP64. - Ruby - Ruby Issue Tracking System
• Bug #​22416: Respect timezone abbreviation encodings in Time#strftime - Ruby - Ruby Issue Tracking System
• Bug #​22426: ZJIT: keyword arguments swapped when passed out of declared order to a method with a block (please backport d81a11d4e6 to 4.0) - Ruby - Ruby Issue Tracking System
• Bug #​22406: Process.fork can leave the child unable to resolve hostnames: getaddrinfo helper threads take glibc's resolver lock after releasing the fork lock - Ruby - Ruby Issue Tracking System
• Bug #​22445: On macOS, a child of Kernel#fork can abort with "[BUG] pthread_rwlock_destroy: Resource busy (EBUSY)" - Ruby - Ruby Issue Tracking System
• Bug #​22415: Thread.handle_interrupt needs to preserve errinfo - Ruby - Ruby Issue Tracking System
• Bug #​22434: "No live threads left. Deadlock?" when running system() or spawn in Ractors - Ruby - Ruby Issue Tracking System
• Backport the regexp compiler program size overflow fixes to ruby_4_0 by hsbt · Pull Request #​19025

Note: This list is automatically generated by tool/gen-github-release.rb. Because of this, some commits may be missing.

Full Changelog

---

Configuration

📅 Schedule: (in timezone America/Chicago)

• Branch creation
  • Only on Friday (* * * * 5)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[greptile-apps]

This PR does not match any of the 1 configured review trigger rule.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Central YAML (base), Organization UI (inherited)
• Review profile: CHILL
• Plan: Advanced
• Run ID: 33494954-47c8-44e4-bf88-fbf30eb2c190

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}