Ruby

Refactor socket timestamp tests

• Avoid unnecessarily binding sender sockets, as ephemeral ports can
  very occasionally conflict on Linux. This investigation is assisted
  by Claude Code.
• Compare timestamps using a range instead of relying on inspect....

[ruby/prism] Remove a warning from discarded-qualifiers

I've been seeing this for a while now:

../../../../ext/prism/../../src/memchr.c: In function ‘pm_memchr’:
../../../../ext/prism/../../src/memchr.c:35:16: warning: return discards ‘const’ qualifier from pointer target type [-Wdiscarded-qualifiers]...

Fix sending backtraces across ractors

[Bug #21818]

Currently exceptions can be sent across ractors,
but because of a limitation in the TypedData API,
the exception backtrace is duped as an empty backtrace.

The problem is that backtraces are embedded objects,...

[ruby/rubygems] Use gem exec --conservative for sigstore-cli instead of pinning version

Hardcoding sigstore-cli:0.2.2 meant rubygems would need a new release
whenever sigstore-cli ships a new version. Using --conservative lets
gem exec prefer an already-installed version and falls back to the...

[ruby/rubygems] Normalize host comparison in attestation_supported_host?

The method compared against a hardcoded string, so a trailing slash
(e.g. "https://rubygems.org/") would cause auto-attestation to be
silently skipped. Now we chomp the trailing slash and compare against...

[ruby/rubygems] Show only error message on attestation failure unless verbose

When auto-attestation fails, the warning previously included
e.full_message with a full backtrace that could be noisy and expose
local paths. Now only e.message is shown by default, and the full...

[ruby/rubygems] Honor explicit --attestation option regardless of platform and host

The send_push_request method previously skipped all attestation handling
on JRuby, non-rubygems.org hosts, or outside GitHub Actions. This meant
that even when a user explicitly passed --attestation with a local...

[ruby/rubygems] Reverse to use attestation condition

https://github.com/ruby/rubygems/commit/ea1f43c4ae

[ruby/rubygems] Omit tests of auto-attestation with JRuby

https://github.com/ruby/rubygems/commit/543ac52412

[ruby/rubygems] Use Tempfile for auto-attestation bundles and clean up after use

https://github.com/ruby/rubygems/commit/498401c010

Co-authored-by: hsbt 12301+hsbt@users.noreply.github.com