@adamchalmers.com finally got laksa from Gati and it was legit the best I've had in a LOOONG time. Thanks for the rec.

ruby.social/@Schneems/11...

ruby.social/@Schneems/11...

I'm going to be attending the AWS Summit in Sydney on Day 1, would love to catch up and say hi if anyone else is going!

An update on @ersc.io availability #jj-vcs ersc.io/blog/ersc-av...

Flying into RubyKaigi, I thought we had months to stand up AI-assisted vulnerability scanning for rubygems.org. Turns out we were out of time. We started prototyping during the conference, scanned the most critical gems, and four hours later submitted our first advisory to Nokogiri.

Scaling Ruby's defenses with AI

On April 23rd, we submitted a vulnerability report to the Nokogiri maintainers. It was the first one our team has filed using AI-assisted scanning. The maintainers accepted the report and published...

blog.rubygems.org

📢 RubyConf 2026 speakers are LIVE! (Schedule coming soon) Early Bird tickets END April 30th—that's THIS WEEK. Grab your discount before General Admission kicks in May 1st! Speakers: rubyconf.org/speakers Tickets: buff.ly/2YEb1Jn

This is a neat idea for generating screenshots from a web app automatically during a docs site build by @james. https://interblah.net/self-updating-screenshots Reminds me of @Schneems’ https://github.com/zombocom/rundoc

At 37:30 it gets into DREAM, which is the initiative that I proposed, Driving Ruby's Evolution to AI Maturity. The problem we face is that Ruby is not showing up at the table. You go to a new API or SDK and you get JS/TS, Python, and maybe Go. A decade ago Ruby was front and center.

RubyConf 2026 is evolving and we have updates to share. We reimagined several new programs to best serve the community right now. The full program and schedule is dropping very soon. Early bird pricing ends April 30. Read the full update:

RubyConf Updates

If you haven't yet seen the statement from the Ruby Central Board, the organization has been preparing for some significant changes. RubyConf, our flagship annual event, is also moving and adapting…

rubycentral.org

I finally got around to writing about the recent rubygems.org security improvements we've shipped! blog.rubygems.org/2026/04/09/p...

A lot of this fracture has been about who you trust, because so much of the story was missing. It's good to hear more of Ruby Central's side (with timestamps and the full "I made a mistake" email)! Props to @schneems.bsky.social for compiling this and adding context.

Ruby Central@rubycentral.org · 4mo ago

RubyGems Fracture Incident Report (September 18, 2025) by ruby.social/@schneems rubycentral.org/news/rubygem...

I joined RubyCentral to release a postmortem, and today I'm delivering my report on what happened. The hope is to provide more transparency and closure, 194 days since the incident on September 18. I've named the incident "RubyGems Fracture." Read my report. #ruby rubycentral.org/news/rubygem...

If you're in town for SXSW, come to AustinSystems.org on the 18th! We've got two talks lined up: embedded Linux, and distributed consensus algorithms for syncing a group of motorcyclists by radio.

Austin Systems Programming

A meetup for curious low-level engineers in Austin, TX. We meet in-person monthly.

austinsystems.org

If you want to help, Joel. Then help. If you want to report accurately, then report accurately. If you want to misrepresent, attack, threaten or silence, I cannot stop you. But don’t try to pretend it’s something else.

By not amplifying that (new to many) information. You are showing me either you already knew and chose not to mention or you didn’t and don’t feel it looks good for the team you chose. Instead you attack the messenger (me).

The big new info in the reddit comments (that you’ve neglected and not linked to) is that rubygems.org production access is directly tied to GitHub access. To offboard someone completely from prod, you need to touch GitHub.

It’s almost like you took my exact position and reversed it. And deliberately linked to a different thread. Great “reporting” Joel. Very “fair and balanced.” Fox News would be proud.

If you are going to link to a thread at least link to the comment where I speak for myself on this exact topic. Please update your link to this one www.reddit.com/r/ruby/comme...

schneems's comment on "Four months of Ruby Central moving Ruby backward"

Explore this conversation and more from the ruby community

reddit.com

Another three speakers joining us at RBQ Conf. This week’s spotlight: - Amir Rajan - Bart de Water - Chris Gratigny Medium pricing ends soon if you’ve been meaning to grab your ticket. rbqconf.com

mise now supports precompiled Ruby binaries (learned this from @nateberkopec.bsky.social's newsletter). Right now you have to opt-in in the config file, but it will become default later. See: mise.jdx.dev/lang/ruby.ht...

Happy holidays from RBQ Conf. We’re grateful for all the early support, and excited to share our keynote speakers for March. CFP is open for two more weeks if you’d like to join them on stage. Rare tickets are still available. Details at rbqconf.com

RubyGems/Bundler 4.0.1 is out now: blog.rubygems.org/2025/12/09/4...

Would you like to help shape the RubyConf 2026 program? @rubycentral.org is looking for interested to register through this form. docs.google.com/forms/d/e/1F...

RubyConf 2026 Program Committee Interest Form

Hello and welcome! We are excited to announce our recruiting search has officially opened for the the 2026 RubyConf Program Committee Members. RubyConf 2026 will be happening in Las Vegas, July 14 - ...

docs.google.com

Letting Puma auto-set your worker count is the easiest way to go for 90% of usecases. Currently, you can only do that with WEB_CONCURRENCY=auto, but we'll also make this possible in the next puma version by using `workers :auto` in your puma.rb.

Our README Newsletter returns! Click through for exciting updates on RubyConf 2026 (including our Program Committee application!), upcoming Ruby events, and holiday closure dates for Ruby Central. mailchi.mp/eab24303db59...

The Ruby Central README: November 2025 💎

The README is a newsletter focused on Ruby Central as an organization, our events, and the broader Ruby community. For more detailed open source news, check out our dedicated newsletter, The OSS Changelog.

mailchi.mp

If you are using Concurrent.physical_processor_count or Concurrent.processor_count to set your Puma/Unicorn worker counts, that is wrong. Use Concurrent.available_processor_count. It takes into account cpu quotas in envs like k8s/docker.

RBQ Conf is officially cookin’. Our CFP is open, and we’re looking for sponsors who want to support a warm, community-first Ruby gathering in Austin. If you’ve got a meaty idea to share—or want to help bring year one to life—we’d love to hear from you. rbqconf.com

Related to some recent news related to unwrap() usage, enjoy this short post about using `clippy.toml` to make your code safer #rust #rustlang www.schneems.com/2025/11/19/f...

Disallow code usage with a custom `clippy.toml`

I recently discovered that adding a clippy.toml file to the root of a Rust project gives the ability to disallow a method or a type when running cargo clippy...

schneems.com

“We adopted #rustlang for its security and are seeing a 1000x reduction in memory safety vulnerability density ... with Rust changes having a 4x lower rollback rate and spending 25% less time in code review, the safer path is now also the faster one.” security.googleblog.com/2025/11/rust...

Rust in Android: move fast and fix things

Posted by Jeff Vander Stoep, Android Last year, we wrote about why a memory safety strategy that focuses on vulnerability prevention in ...

security.googleblog.com