Skip to content

[pull] master from ruby:master - #1437

Merged
pull[bot] merged 4 commits into
turkdevops:masterfrom
ruby:master
Sep 23, 2026
Merged

pull[bot] merged 4 commits into
turkdevops:masterfrom
ruby:master

Conversation

@pull

@pull pull Bot commented Sep 23, 2026

Copy link
Copy Markdown

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

dependabot Bot and others added 4 commits September 23, 2026 11:41
Bumps the github-actions group with 1 update in the / directory: [taiki-e/install-action](https://github.com/taiki-e/install-action).


Updates `taiki-e/install-action` from 2.87.16 to 2.87.17
- [Release notes](https://github.com/taiki-e/install-action/releases)
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md)
- [Commits](taiki-e/install-action@9114bf4...94c31af)

---
updated-dependencies:
- dependency-name: taiki-e/install-action
  dependency-version: 2.87.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
[Bug #22377]

When we statically resolve a `swap` we need to make sure the element
we reordered will receive its optimization pass.
If the source string is modified in the block of String#unpack, it can
cause an use-after-free. For example, the following script crashes:

    fmt = "A" * 1_000_000
    str = "C" * 1_000_000
    str.unpack(fmt) { fmt.clear }
@pull pull Bot locked and limited conversation to collaborators Sep 23, 2026
@pull pull Bot added the ⤵️ pull label Sep 23, 2026
@pull
pull Bot merged commit 852b243 into turkdevops:master Sep 23, 2026
1 of 4 checks passed
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants