Skip to content

chore: forward-port NEWS/changelog entries for clarity#114

Merged
k0kubun merged 1 commit intoruby:masterfrom
chadlwilson:patch-2
Apr 22, 2026
Merged

chore: forward-port NEWS/changelog entries for clarity#114
k0kubun merged 1 commit intoruby:masterfrom
chadlwilson:patch-2

Conversation

@chadlwilson
Copy link
Copy Markdown
Contributor

@chadlwilson chadlwilson commented Apr 21, 2026

Consolidates changelog entries from earlier ruby branches making it easier to see the entire history in one place.

As a side note, I see all the historical branches have been deleted. I understand that Ruby 3.1 is EOL from CRuby PoV, however JRuby 9.4 targets Ruby 3.1 compatibility, and is just about to go soft EOL itself.

It thus targets erb 2.2.3. Would you consider doing a one-off 2.2.3.1 release? v2.2.3...chadlwilson:erb:ruby-3.1 (tests pass locally on CRuby 3.1 and JRuby 9.4)

Otherwise I suppose jruby can consider deviating stdlib verisons and bumping to 4.0.3.1 or 4.0.4.1 (which is probably fine?)

Consolidates changelog entries from earlier ruby branches
- 9345076
- 6a2e4a7
- b6be29f
@k0kubun k0kubun merged commit b5af2ba into ruby:master Apr 22, 2026
8 checks passed
@chadlwilson chadlwilson deleted the patch-2 branch April 22, 2026 02:08
@chadlwilson
Copy link
Copy Markdown
Contributor Author

@k0kubun thanks! so would you consider a backport release of 2.2.3.1 via v2.2.3...chadlwilson:erb:ruby-3.1 (or similar)?

Or that's a "no", and you suggest JRuby upgrades its default gem for 3.1-compatible branch to 4.0.x?

@k0kubun
Copy link
Copy Markdown
Member

k0kubun commented Apr 22, 2026

Sorry, no, having four different branches is already too much overhead, so we can't maintain erb for EOL Ruby versions.

@chadlwilson
Copy link
Copy Markdown
Contributor Author

OK, thank you for replying @k0kubun - that's reasonable.

Will consider moving to 4.0.4.1 on jruby 9.4 as I have proposed at jruby/jruby#9387

chadlwilson added a commit to chadlwilson/jruby that referenced this pull request Apr 22, 2026
2.2.3 is EOL from CRuby perspective, so they will not backport the security fix to a maintained gem (I [asked](ruby/erb#114 (comment))).

This thus deviates from the CRuby 3.1 stdlib version and bumps to 4.0.4.1 (as bundled with Ruby 3.4.x, maintained at https://github.com/ruby/erb/tree/ruby-3.4).

This still has Ruby 2.7 compatibility and the two relevant "breaking" changes seem innocuous: https://github.com/ruby/erb/blob/ruby-3.4/NEWS.md (Drop deprecated -S option from command / Bump `required-ruby_version` to Ruby 2.7+)

Signed-off-by: Chad Wilson <29788154+chadlwilson@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants