Are you writing service classes in Ruby? You need strong_service github.com/shkm/strong_... by @jamie.schembri.me for the best integration with ruby service DSL with zero dependencies and full rails compatibility.

!!! `jim release` can now: 1. build itself as a .gem, 2. pack itself into a single-file script, 3. publish both of these to GitHub Releases Try out the packed `jim.rb` file. It should be completely self-contained: github.com/duckinator/j...

You know… Ruby Central’s takeover of rubygems GitHub org ONLY worked because it could be executed within seconds, and by doing so, prevent the possibility of revert. If the ownership change was a PR it would never have been approved. If RC is “right”, why did they need the atomic switch?

Read the new white paper by @sethmlarson.dev about the challenges and vulnerabilities caused by package repository archive formats. alpha-omega.dev/blog/slipper...

PyPI serves billions of requests daily- but sustaining it isn’t free. The PSF joined the OpenSSF & others in calling for organizations to invest in sustainable open infrastructure. Learn what this means for #PyPI, the PSF, & how our community can pitch in:

@sethmlarson.dev and I went through months of intense, complex work to climb a steep and slippery learning curve, only to be stopped short at the very end by a hard ethical line we couldn't cross—it was gut-wrenching. I'm proud of what we did and I'm proud of what we didn't do.

www.youtube.com/watch?v=IQQt... My keynote, "We Who Remember Magic", from Rocky Mountain Ruby just posted.

Python Software Foundation had to make a tough choice here. I applaud them for sticking to their values. thanks for your leadership in this space @python.org pyfound.blogspot.com/2025/10/NSF-...

Let's move Ruby forward. martinemde.com/2025/10/25/m...

the former maintainers of Bundler and RubyGems have a proposal: we want to move Ruby forward andre.arko.net/2025/10/26/w...

Malicious compliance

Updating my LEGO White House

Jamie Gaskins wrote a great piece explaining how shipit, the code the deploys rubygems.org works and why a fork would have been fine. The one thing I would add is that there is no Ruby Central institutional knowledge. There were and are only outside rubygems maintainers jgaskins.blog/ruby-central...

What comes through loud and clear from Shan is the lack of respect for open source authors. She actually says it’s none of my business why I was removed from rubygems. I don’t know where you got the audacity but you should put it back. youtu.be/nKpo68g9dEk?...

rubyassociation.doorkeeper.jp/events/190436 12/20 にRuby リリース30周年イベントをやるのでみなさん来てください

You must always have a secret plan.

We need this. github.com/orgs/communi...

Today is the last day to grab a GA ticket for SF Ruby! Read our new blog post for a preview: evilmartians.com/chronicles/w...

We spun up this feature petition with GitHub that I think would genuinely help a lot of projects and companies, open source or not. github.com/orgs/communi...

In 2025 we need philosophical attitude more than ever: being calm, thoughtful and meaningful. I want to be that kind of person. In this complex era, I want to dig into things, talk with people, think about problems and make decisions. I want to be communicative, respectful and free.

Tests as the line of defense for AI generated code Testing is a skill developers should sharpen even more when using LLMs to generate code. Especially if you: 1. Use the LLM in agentic mode 2. 2. Use LLMs to solve hard problems or implement complicated business logic.

It seems like they extended the reduced price by 2 days! Come to SFRuby on November. I can’t wait to see you all there <3 Or buy a supporter ticket if you can afford it. It’s so difficult to break even on a conference.

Yeah! Join Aurelie at sfruby.com ! But like do it NOW because prices go up on Thursday! 😱

I love the effort that went into the Alt text. “zappy type deals” 😹

just discovered that my spam folder is full of messages from ruby central and I'm glad to see the system is working as designed

Thoroughly enjoyed @timriley.info's talk at XO Ruby. Thank you for making this available to us @jremsikjr.bsky.social. That was fun!

Just did a walkthrough of @timriley.info‘s setup and will be ready near the top of the hour.

We're inviting you to join us for a talk from @timriley.info on @hanamirb.org later today. 4:15 PM – 5:00 PM (Pacific Time) Details available here: www.xoruby.com/event/san-di...

I’m so excited to be able to join an @xoruby.com talk remotely! Thank you for trying this out @jremsikjr.bsky.social!

We were only supposed to post pictures of the sky on this app. I just pulled up the original design doc. This is a disaster. Please take down the other posts.

This is so awesome @duckinator.bsky.social! I think if I could start over with a “blessed” gem builder I would do a lot of more strict things (all file modes normalized, no symlinks, no absolute or relative paths). It could be so much better.

guess who just generated a valid tar file using ~150 lines of Ruby~ Tar file writer implementation: github.com/duckinator/j... And the code that uses it: github.com/duckinator/j...

Turns out people liked the “management podcast thing” Neha Batra and I did last week, so we made more: Minimum Viable Management is now a podcast. This time we talk about decisions, leadership, and other things managers pretend to be good at. Various podcast links at mikemcquaid.com/minimum-viab...

Lit is joining @openjsf.org! 🎉 Today at JSConf, The OpenJS Foundation announced Lit is officially joining as an Impact Project! We're beyond excited for this move and look forward to continuing our work to build the open web with OpenJS! Read more on our blog: lit.dev/blog/2025-10...

NPM making realsecurity changes in the wake of supply chain attacks: “If you use classic tokens in any automation,[…] you must migrate to granular access tokens before early November to avoid publishing disruptions.” “All classic tokens will be permanently revoked” Love to see it.

This is very well written and fair. I have updated my post to link to this under a new “Responses” heading. Thank you @byroot.bsky.social.

Hey folks. I'm still trying to reconcile the news today. 1. We are not selling any private info. RubyGems.org policies permit that, but gem.coop doesn't collect anything. 2. We need to have good leadership, elected transparently, with transparent finances. We're publishing our governance for that.

Thank you for an excellent post @byroot.bsky.social. I’ll corroborate what I can. I don’t feel any distrust about @tenderlove.dev’s PRs. I approved (I think) 2 of them myself. They touched code I was deeply familiar with, the tar entry/copy_stream/gem unpack logic. Great work and thank you!

On RubyGems & Governance: pup-e.com/blog/on-ruby... Many programmers have no interest in formal governance processes, but letting people act and speak on our behalf without our input is what got us here. The path forward is for the community to speak up and take direct ownership of what we make.

We never needed while loops. The power was always within us.

Now’s a good time to add CHECKSUMS to your Gemfile.lock. For an existing project: bundle lock --add-checksums This will add a new CHECKSUMS section to the lockfile that Bundler will keep up to date. Now, configure Bundler to always include checksums: bundle config lockfile_checksums true

I interrupted a family meeting of quail in my yard. It’s their yard now.

“when you make an embaressing unforced error, make a bunch of additional unforced errors to confuse your enemy” - Sun Tzu

announcing a new community-focused gem server from the team previously behind rubygems: gem.coop. join us and start using it today!

The team formerly behind RubyGems has come together to launch a new gem server for the Ruby community! gem.coop I am *super* excited about this!

I'm excited to join my friends in announcing gem.coop, a new ruby community gem server that you can use right now.

It bothers me that Ruby Central keeps implying that maintainers didn’t have MFA enabled. This is preposterous. MFA is basic good practice. (Go enable it everywhere!) It is literally impossible to disabled MFA because GitHub identifies rubygems as critical infrastructure. They know this.

Putting together my companion app for Tales of the Shire has suddenly made me question the existence of all the meat meals in the game. It implies there is an adorable, cozy, little hobbit slaughterhouse. Is it candle-lit?

What definition are we going with? www.merriam-webster.com/dictionary/m... I should probably go ask my asset manager and my property manager (lol I wish) if they use the unlisted “manage means own” definition.

Svelte is truly fun to work with. Also SvelteKit. I love the way (explaining for rails devs) that the view and controller layers are side by side in a directory hierarchy that matches the routes. It’s elegant.