Ruby 中心的开源软件变更日志：2025 年 3 月

March Newsletter as Ruby Central's OSS Changelog: Sending separate updates for Open Source Program and general Ruby Central news. General Ruby Central newsletter later this month.
Letter From Open Source Director: RubyGems has grown, focusing on stability and security. Creating clear standards and processes for RubyGems.org management. Partnered with a law firm to formalize policies and open a 60-day review period. Encourage feedback at mailto:legal@rubycentral.org or on Slack. Full letter details at https://rubycentral.org/news/...
Open Source Program Announcements:
- Dealing with malicious packages: Samuel Giddins published a blog post on handling malicious packages, sparking positive engagement. Read at https://blog.rubygems.org/202...
- RubyGems presentations in Poland: Sam presented at Ruby Community Conference 2025 and KRUG's February 2025 meetup on modernizing gem development and Ruby supply chain security. Video at https://www.youtube.com/embed...
RubyGems News: Released RubyGems [3.6.4, 3.6.5] and Bundler [2.6.4, 2.6.5]. Notable improvements include streamlining command output, clearer error messages, correct Windows gem handling, and resolver issue fixes. Other accomplishments: upgrading Kubernetes and OpenSearch clusters, developing wheels for RubyGems, and improving Bundler's resolution.
RubyGems.org News: Updates reflect commitment to user experience and security. Sponsored hosting by AWS, Fastly, and Datadog. Fixed API key role creation for Buildkite to ensure correct principal assignment.
RubyGems Ecosystem News:
- sigstore-ruby: Nearly ready for 0.3.0 release with improved spec compliance and JRuby support. Challenging due to reimplementation of cryptographic operations. Read more in Sam's 2024 year in review.
- Ecosystem adoption: Tracker launched to monitor sigstore adoption among popular gems. Currently 20 top gems are shipping attestations.
Thank You: Acknowledges contributors to RubyGems and RubyGems.org this month, including Samuel Giddins, Josef Šimánek, etc. If missed, let them know.