Ruby Issue Tracking System

04/22/2026

12:36 AM Ruby Revision a53f3d57 (git): [ruby/erb] Prohibit def_method on marshal-loaded ERB instances

Extends the @_init guard to def_method so that an ERB object created
via Marshal.load (which bypasses initialize) raises ArgumentError
instead of evaluating arbitrary source. def_module and def_class both
delegate to def_method and are c... k0kubun (Takashi Kokubun)

12:36 AM Ruby Revision 2f223e90 (git): [ruby/erb] Version 4.0.3.1

k0kubun (Takashi Kokubun)

04/21/2026

11:56 PM Ruby Revision 85a0a764 (git): [ruby/erb] Prohibit def_method on marshal-loaded ERB instances

Extends the @_init guard to def_method so that an ERB object created
via Marshal.load (which bypasses initialize) raises ArgumentError
instead of evaluating arbitrary source. def_module and def_class both
delegate to def_method and are c... k0kubun (Takashi Kokubun)

11:56 PM Ruby Revision e8ef5265 (git): [ruby/erb] Version 4.0.4.1

k0kubun (Takashi Kokubun)

08:10 AM Ruby Revision cb26283b (git): [ruby/erb] Version 6.0.1.1

k0kubun (Takashi Kokubun)

08:10 AM Ruby Revision c35379df (git): [ruby/erb] Prohibit def_method on marshal-loaded ERB instances

Extends the @_init guard to def_method so that an ERB object created
via Marshal.load (which bypasses initialize) raises ArgumentError
instead of evaluating arbitrary source. def_module and def_class both
delegate to def_method and are c... k0kubun (Takashi Kokubun)

07:39 AM Ruby Revision 8b77fda2 (git): [ruby/erb] Version 6.0.4

https://github.com/ruby/erb/commit/4d2b45e140 k0kubun (Takashi Kokubun)

07:38 AM Ruby Revision d1589536 (git): [ruby/erb] Prohibit def_method on marshal-loaded ERB instances

Extends the @_init guard to def_method so that an ERB object created
via Marshal.load (which bypasses initialize) raises ArgumentError
instead of evaluating arbitrary source. def_module and def_class both
delegate to def_method and are c... k0kubun (Takashi Kokubun)

04/17/2026

04:31 PM Ruby Misc #22006: Usage of deprecated input in gem sync workflows

Again, I was not sure what you were proposing from reading your description, but I think we could define a shared action that just calls "Create GitHub App token" and "Sync to ruby/ruby". We still have to make sure credentials are availa... k0kubun (Takashi Kokubun)

04/16/2026

06:20 PM Ruby Misc #22006: Usage of deprecated input in gem sync workflows

> But this made me think that perhaps this mechanism should be a composite action or something similar? Then you don't need to update it in so many places (currently 47) when something changes.
I'm not sure what you're proposing. The ma... k0kubun (Takashi Kokubun)