December 2025 - ruby-talk - ml.ruby-lang.org

[ruby-talk:444712] [ANN] rodauth-oauth 1.6.4 released
by Tiago Cardoso 11 Dec '25

11 Dec '25

rodauth-oauth 1.6.4 has been released. rodauth-oauth is a rack-compatible toolkit for building OAuth 2.0 authorization servers, as well as OpenID Authentication Providers. rodauth-oauth is certified <https://openid.net/certification/> for the following profiles of the OpenID Connect™ protocol: Basic OP, Implicit OP, Hybrid OP, Config OP, Dynamic OP, Form Post OP, 3rd Party Init OP Session Management OP, RP-Initiated Logout OP, Front-Channel OP, Back-Channel OP # as simple as rodauth do enable :oauth_authorization_code_grant # or enable :oidc end Among its features, it supports: * Authorization Code Grant * Refresh Token Grant * Implicit Grant * Client Credentials Grant * Device Code Grant * Token Revocation * Token Introspection * Auth Server Metadata * PKCE * Resource Indicators * JWT Access Tokens * mTLS Client Authentication * Assertion Framework * SAML 2.0 Bearer Assertion Grant * JWT Bearer Assertion Grant * JWT Secured authorization requests (JAR) * JWT Secured authorization response mode (JARM) * Pushed Authorization requests (PAR) * Demonstrating Proof-of-Possession at the Application Layer (DPoP) * Dynamic Client Registration * OpenID * OpenID Discovery * OpenID Multiple Response types * OpenID Self Issued Tokens * OpenID Connect Dynamic Client Registration * OpenID Session Management * OpenID RP Initiated Logout * OpenID Frontchannel Logout * OpenID Backchannel Logout It can also be used with Rails (via the "rodauth-rails" gem). Website: rodauth-oauth · honeyryder <https://honeyryderchuck.gitlab.io/rodauth-oauth/> Documentation: Rodauth OAuth: OAuth 2.0 and OpenID for rodauth <https://honeyryderchuck.gitlab.io/rodauth-oauth/rdoc/> Wiki: Home · Wiki · OS / rodauth-oauth · GitLab <https://gitlab.com/honeyryderchuck/rodauth-oauth/wikis/home> CI: https://gitlab.com/honeyryderchuck/rodauth-oauth/pipeline These are the release notes since the last update: ### 1.6.4 #### Bugfixes * on `/userinfo` request, enforce existence of oauth grant before proceeding with the userinfo requests. #### Chore * linting + tweaks to example scripts. ### 1.6.3 #### Improvements * all routes can now be used via rodauth `internal_request` feature. #### Bugfixes * `oauth_application_management` feature: fixed "new oauth application" link to account for for prefix usage. ### 1.6.2 #### Bugfixes * fix oauth_base `supported_response_type?` when `grant_types` column is set in the database, but `response_types` is not. ### 1.6.1 #### Bugfixes Fixed regressions in rails generated templates: * some `:oauth_dpop` form fields not being rendered; * `check_box_tag` rails helper usage was wrongly setting all checkboxes to "checked" #### Chore * Updated latest features (`:oauth_dpop`) options documentation. * rails tests will now exercise the rails generated templates again.

1 0

[ruby-talk:444711] [ANN] cel 0.5.0 released
by Tiago Cardoso 11 Dec '25

11 Dec '25

cel 0.5.0 has been released. cel is a pure Ruby implementation of Google Common Expression Language, https://opensource.google/projects/cel. The Common Expression Language (CEL) implements common semantics for expression evaluation, enabling different applications to more easily interoperate. ```ruby require "cel" # set the environment env = Cel::Environment.new(name: :string, group: :string) # parse ast = env.compile('name.startsWith("/groups/" + group)') # check prg = env.program(ast) # evaluate prg.evaluate(name: Cel::String.new("/groups/acme.co/documents/secret-stuff "), group: Cel::String.new("acme.co")) #=> true # or do it all in one go env.evaluate('name.startsWith("/groups/" + group)', name: Cel::String.new("/groups/acme.co/documents/secret-stuff"), group: Cel::String.new("acme.co") ) ``` Here are the updates since the last release: ## [0.5.0] - 2025-12-11 ### Features #### Custom extensions A new `:extensions` kwarg is added to `Cel::Environment.new` which allows adding custom extensions, in a similar manner as what the standard extensions (like `math` or `string`) are done: ```ruby module Ext # defines a random function which takes no arguments and returns 42 end Cel::Environment.new.evaluate("ext.random()") #=> raises error Cel::Environment.new(extensions: { ext: Ext }).evaluate("ext.random()") #=> 42 ``` ### Backwards Compatibility The ractor safety introduced in 0.4.1 has been relaxed in order to allow extensions of core classes by custom extensions, And you'll need to explicitly call `Cel.freeze` before using `cel` inside ractors. This is a direct consequence of how extensions patch `cel` core classes. ATTENTION: Changes may be introduced in the way core classes are patched by extensions, towards making `cel` ractor-safe by default. If you rely on custom extensions, do follow the migration instructions in subsequent releases. ### Bugfixes Fixed checker type inference when using nexted expressions (like when using the `bind` extensions to evaluate cel sub-expressions). ## [0.4.1] - 2025-11-25 ### Improvements * Literal class can now mark which methods are CEL directives, the remainder being lib private helpers. * `cel` is now ractor compatible. * Documentation on how to support abstract types has been added. ### Security A remote execution attack vector has been fixed, which allowed executing arbitrary Ruby code within a CEL expression when calling functions on a variable declared as a CEL map. Example: ```ruby env = Cel::Environment.new(declarations: { webhook: :map }) env.evaluate("webhook.payload.send('eval', 'File.write(\"test.txt\", \"Hello, world!\")')", webhook: { payload: {} }) ```

1 0

[ruby-talk:444710] [ANN] llm.rb v2.1.0
by Robert 06 Dec '25

06 Dec '25

Hi everyone, I'd like to share and announce the release of llm.rb v2.1.0. The source is available at https://github.com/llmrb/llm.rb > What is llm.rb? llm.rb is a zero-dependency Ruby toolkit for Large Language Models that includes OpenAI, Gemini, Anthropic, xAI (Grok), zAI, DeepSeek, Ollama, and LlamaCpp. The toolkit includes full support for chat, streaming, tool calling, audio, images, files, and structured outputs. > Example A simple chatbot that maintains a conversation and streams responses in real-time: #!/usr/bin/env ruby require "llm" llm = LLM.openai(key: ENV["KEY"]) bot = LLM::Bot.new(llm, stream: $stdout) loop do print "> " bot.chat(gets) print "\n" end All the best, Robert

1 0

[ruby-talk:444675] [ANN] Jarbler 0.4.3 released
by Peter Ramm 02 Dec '25

02 Dec '25

Pack a Ruby application into an executable jar file. Jarbler creates a self executing Java jar file containing a Ruby application and all its Gem dependencies. The included Ruby program is directly executed inside the JVM using the JRuby runtime jars. https://github.com/rammpeter/jarbler Changes: https://github.com/rammpeter/jarbler/blob/main/CHANGELOG.md

4 4

[ruby-talk:444692] Ruby, Rubinius, and AI
by Brian Shirai 01 Dec '25

01 Dec '25

Hello Rubyists! If you're interested in Ruby+AI, you may be curious about some recent developments with Rubinius. I've written them up here: https://vivarium-ai.com/newsletters/0-hello-world-who-is-out-there/ Cheers, Brian

1 1

[ruby-talk:444707] [ANN] DB GUI 0.3.0 & Glimmer DSL for LibUI 0.13.1 Released
by Andy Maleh 30 Nov '25

30 Nov '25

DB GUI 0.3.0 & Glimmer DSL for LibUI 0.13.1 have been released. DB GUI now supports remembering multiple database profiles, including which one was last selected. Glimmer DSL for LibUI now supports combobox items data-binding. https://raw.githubusercontent.com/AndyObtiva/db-gui/refs/heads/master/scree… Blog post announcement : https://andymaleh.blogspot.com/2025/11/db-gui-030-glimmer-dsl-for-libui-013… GitHub Projects : DB GUI : https://github.com/AndyObtiva/db-gui Glimmer DSL for LibUI : https://github.com/AndyObtiva/glimmer-dsl-libui Ruby Gems: db-gui : https://rubygems.org/gems/db-gui glimmer-dsl-libui : https://rubygems.org/gems/glimmer-dsl-libui

1 0