From e2f3c319b8b8764603546df9283332b220031df4 Mon Sep 17 00:00:00 2001 From: Erik Berlin Date: Thu, 22 Oct 2026 12:11:23 -0700 Subject: [PATCH 1/2] Sign gems on Ruby 3.4 Sigstore signing fails on Ruby 4.0. sigstore-ruby reads the trusted root with protobug 0.1.0, which passes JSON.parse options that Ruby 4.0's json 3 rejects: "unknown keywords: allow_blank, create_additions, allow_infinity". Run the push job on Ruby 3.4 until that's fixed, so released gems get a Sigstore attestation. --- .github/workflows/gem_push.yml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/.github/workflows/gem_push.yml b/.github/workflows/gem_push.yml index 9e55104..740ff86 100644 --- a/.github/workflows/gem_push.yml +++ b/.github/workflows/gem_push.yml @@ -26,7 +26,9 @@ jobs: - uses: actions/checkout@v4 - uses: ruby/setup-ruby@v1 with: - ruby-version: ruby + # Sigstore signing fails on Ruby 4.0, whose json 3 rejects options + # that protobug 0.1.0 passes to JSON.parse. Use 3.4 until it's fixed. + ruby-version: '3.4' bundler-cache: true - uses: rubygems/configure-rubygems-credentials@v1.0.0 - name: Update RubyGems From d23f5d5f927430cd43d6421d4ffd8ac37e4c83d4 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 22 Oct 2026 19:12:29 +0000 Subject: [PATCH 2/2] Bump rubygems/configure-rubygems-credentials from 1.0.0 to 2.1.0 Bumps [rubygems/configure-rubygems-credentials](https://github.com/rubygems/configure-rubygems-credentials) from 1.0.0 to 2.1.0. - [Release notes](https://github.com/rubygems/configure-rubygems-credentials/releases) - [Commits](https://github.com/rubygems/configure-rubygems-credentials/compare/v1.0.0...v2.1.0) --- updated-dependencies: - dependency-name: rubygems/configure-rubygems-credentials dependency-version: 2.1.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/gem_push.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/gem_push.yml b/.github/workflows/gem_push.yml index 740ff86..f04f617 100644 --- a/.github/workflows/gem_push.yml +++ b/.github/workflows/gem_push.yml @@ -30,7 +30,7 @@ jobs: # that protobug 0.1.0 passes to JSON.parse. Use 3.4 until it's fixed. ruby-version: '3.4' bundler-cache: true - - uses: rubygems/configure-rubygems-credentials@v1.0.0 + - uses: rubygems/configure-rubygems-credentials@v2.1.0 - name: Update RubyGems run: gem update --system - name: Build gem