I built a new Ruby gem for work and released the first version today. It's a query builder for Elastic's ES|QL.

It lets you build ES|QL queries in Ruby code by chaining functions and run them with Elastic's ES|QL query API.

Rubygems: https://rubygems.org/gems/elastic-esql
Source code: https://github.com/elastic/esql-ruby/

How to Host Your Own #Mastodon Server on a #VPS (5 Minute Quick-Start Guide)

This article provides a guide for how to host your own Mastodon server on a VPS.

Running your own Mastodon server on a VPS is an excellent way to enjoy an efficient and secure Mastodon experience.
What is Mastodon?
Mastodon is a #decentralized social media platform that enables users to post ...
Continued https://blog.radwebhosting.com/how-to-host-your-own-mastodon-server-on-a-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host #installguide #rubygems #activitypub #rubyonrails #selfhosting #selfhosted

How to Host Your Own #Mastodon Server on a #VPS (5 Minute Quick-Start Guide)

This article provides a guide for how to host your own Mastodon server on a VPS.

Running your own Mastodon server on a VPS is an excellent way to enjoy an efficient and secure Mastodon experience.
What is Mastodon?
Mastodon is a #decentralized social media platform that enables users to post ...
Continued https://blog.radwebhosting.com/how-to-host-your-own-mastodon-server-on-a-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.social #rubyonrails #selfhosting #activitypub #selfhosted #rubygems #installguide

RubyGems security feature: Trusted Publishing. https://github.com/rubygems/release-gem/?tab=readme-ov-file#trusted-publishing Here it is, in the official GitHub Action, with a short recipe for how to use it.

In RubyGems.org, as a gem owner, you set up a "Trusted Publisher" that points to the filename of the Workflow that does the publishing, e.g. publish.yml.

Right, and see this blog post for other bits of explanation. https://segiddins.github.io/are-we-attested-yet/

Good luck!

54% of @rubygems are abandoned says @mghaught

"A lot of #HackerOne notifications that we're getting, are #AI generated garbage" says the director of #OpenSource @mghaught from @rubygems / @rubycentral at @balticruby.

"We need more open source Ruby code" says @matz at @balticruby.

How to Host Your Own #Mastodon Server on a #VPS (5 Minute Quick-Start Guide)

This article provides a guide for how to host your own Mastodon server on a VPS.

Running your own Mastodon server on a VPS is an excellent way to enjoy an efficient and secure Mastodon experience.
What is Mastodon?
Mastodon is a #decentralized social media platform that enables users to post ...
Continued https://blog.radwebhosting.com/how-to-host-your-own-mastodon-server-on-a-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host #selfhosted #installguide #rubygems #selfhosting #activitypub #rubyonrails

How to Host Your Own #Mastodon Server on a #VPS (5 Minute Quick-Start Guide)

This article provides a guide for how to host your own Mastodon server on a VPS.

Running your own Mastodon server on a VPS is an excellent way to enjoy an efficient and secure Mastodon experience.
What is Mastodon?
Mastodon is a #decentralized social media platform that enables users to post ...
Continued https://blog.radwebhosting.com/how-to-host-your-own-mastodon-server-on-a-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.social #rubyonrails #installguide #rubygems #selfhosting #selfhosted #activitypub

Malicious #RubyGems pose as #Fastlane to steal 3Telegram API data

https://www.bleepingcomputer.com/news/security/malicious-rubygems-pose-as-fastlane-to-steal-telegram-api-data/

Hackers turned trusted Ruby packages into data-stealing traps. Discover how malicious Fastlane plugins exploited the open-source supply chain and what it means for developer security.

https://thedefendopsdiaries.com/understanding-and-mitigating-supply-chain-attacks-insights-from-the-rubygems-breach/

#supplychainattack
#rubygems
#cybersecurity
#opensource
#telegramsecurity

> A RubyGems plugin that allows you to clone gem repositories by fetching source code URLs from gem metadata and using ghq or git clone.

https://github.com/hsbt/gem-clone #ruby #rubygems #opensource

I'm pleased to see that @kou made a proof-of-concept rubygems plugin to support specifying external dependencies in the gemspec and have them installed from the package manager, instead of Fat Gems where every C extension vendors a copy of the C library they bind against.
https://rubygems.org/gems/rubygems-requirements-system
https://www.youtube.com/watch?v=ZAONpE2JYw0

@kou, @flavorjones, and myself discussed how this might work and all of the edge-cases, but never got around to submitting an RFC.
https://gist.github.com/postmodern/4c0cbccc0c7eda4585db0fc5267cdd57

So @jorgemanru announced an upgrade for #ActionText with "No #Trix".

https://bird.makeup/users/jorgemanru/statuses/1926644973623025771