From e2f3c319b8b8764603546df9283332b220031df4 Mon Sep 17 00:00:00 2001 From: Erik Berlin Date: Thu, 22 Oct 2026 12:11:23 -0700 Subject: [PATCH 1/2] Sign gems on Ruby 3.4 Sigstore signing fails on Ruby 4.0. sigstore-ruby reads the trusted root with protobug 0.1.0, which passes JSON.parse options that Ruby 4.0's json 3 rejects: "unknown keywords: allow_blank, create_additions, allow_infinity". Run the push job on Ruby 3.4 until that's fixed, so released gems get a Sigstore attestation. --- .github/workflows/gem_push.yml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/.github/workflows/gem_push.yml b/.github/workflows/gem_push.yml index 9e55104..740ff86 100644 --- a/.github/workflows/gem_push.yml +++ b/.github/workflows/gem_push.yml @@ -26,7 +26,9 @@ jobs: - uses: actions/checkout@v4 - uses: ruby/setup-ruby@v1 with: - ruby-version: ruby + # Sigstore signing fails on Ruby 4.0, whose json 3 rejects options + # that protobug 0.1.0 passes to JSON.parse. Use 3.4 until it's fixed. + ruby-version: '3.4' bundler-cache: true - uses: rubygems/configure-rubygems-credentials@v1.0.0 - name: Update RubyGems From 9fd45e4bae6802d510e7b239b0996b7fdeced310 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 22 Oct 2026 19:12:38 +0000 Subject: [PATCH 2/2] Bump actions/checkout from 4 to 7 Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 7. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v4...v7) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/docs.yml | 2 +- .github/workflows/gem_push.yml | 2 +- .github/workflows/lint.yml | 2 +- .github/workflows/mutant.yml | 2 +- .github/workflows/test.yml | 2 +- .github/workflows/typecheck.yml | 2 +- 6 files changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml index c42af5c..9e47b98 100644 --- a/.github/workflows/docs.yml +++ b/.github/workflows/docs.yml @@ -14,7 +14,7 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - uses: ruby/setup-ruby@v1 with: diff --git a/.github/workflows/gem_push.yml b/.github/workflows/gem_push.yml index 740ff86..da03426 100644 --- a/.github/workflows/gem_push.yml +++ b/.github/workflows/gem_push.yml @@ -23,7 +23,7 @@ jobs: BUNDLE_WITHOUT: sig steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - uses: ruby/setup-ruby@v1 with: # Sigstore signing fails on Ruby 4.0, whose json 3 rejects options diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml index 72efcff..136e201 100644 --- a/.github/workflows/lint.yml +++ b/.github/workflows/lint.yml @@ -14,7 +14,7 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - uses: ruby/setup-ruby@v1 with: diff --git a/.github/workflows/mutant.yml b/.github/workflows/mutant.yml index c876624..a5d4c16 100644 --- a/.github/workflows/mutant.yml +++ b/.github/workflows/mutant.yml @@ -14,7 +14,7 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - uses: ruby/setup-ruby@v1 with: diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 06ce6ba..188a196 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -18,7 +18,7 @@ jobs: ruby: [ ruby-3.2, ruby-3.3, ruby-3.4, ruby-4.0 ] steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - uses: ruby/setup-ruby@v1 with: diff --git a/.github/workflows/typecheck.yml b/.github/workflows/typecheck.yml index 54f0fe7..a54e0dc 100644 --- a/.github/workflows/typecheck.yml +++ b/.github/workflows/typecheck.yml @@ -11,7 +11,7 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - uses: ruby/setup-ruby@v1 with: