Merge branch 'master' into downloads-to-ru

Author: ablzh

.github/workflows/ci.yml

@@ -25,7 +25,7 @@ jobs:
         with:
           fetch-depth: 1
       - name: Setup Ruby
-        uses: ruby/setup-ruby@09a7688d3b55cf0e976497ff046b70949eeaccfd # v1.288.0
+        uses: ruby/setup-ruby@319994f95fa847cf3fb3cd3dbe89f6dcde9f178f # v1.295.0
         with:
           ruby-version: ${{ matrix.ruby }}
           bundler-cache: true

.github/workflows/draft-release.yml

@@ -23,7 +23,7 @@ jobs:
           repository: ruby/ruby
           path: ruby
 
-      - uses: ruby/setup-ruby@09a7688d3b55cf0e976497ff046b70949eeaccfd # v1.288.0
+      - uses: ruby/setup-ruby@319994f95fa847cf3fb3cd3dbe89f6dcde9f178f # v1.295.0
         with:
           ruby-version: 3.3.4
 
@@ -33,7 +33,7 @@ jobs:
 
       - name: Update data files
         run: |
-          tool/format-release .. ${{ github.event.client_payload.version || github.event.inputs.version }} .
+          tool/format-release .. ${{ github.event.client_payload.version || github.event.inputs.version }} . | (cd .. && git apply)
         working-directory: ruby
 
       - name: Cleanup ruby directory

.github/workflows/jekyll.yml

@@ -23,7 +23,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Setup Ruby
-        uses: ruby/setup-ruby@09a7688d3b55cf0e976497ff046b70949eeaccfd # v1.288.0
+        uses: ruby/setup-ruby@319994f95fa847cf3fb3cd3dbe89f6dcde9f178f # v1.295.0
         with:
           ruby-version: '3.2'
           bundler-cache: true

_data/downloads.yml

@@ -7,10 +7,10 @@ preview:
 
 stable:
 
-  - 4.0.1
-  - 3.4.8
-  - 3.3.10
-  - 3.2.10
+  - 4.0.2
+  - 3.4.9
+  - 3.3.11
+  - 3.2.11
 
 # optional
 security_maintenance:

_data/releases.yml

@@ -21,6 +21,30 @@
 
 # 4.0 series
 
+- version: 4.0.2
+  date: 2026-03-16
+  post: /en/news/2026/03/16/ruby-4-0-2-released/
+  url:
+    gz:  https://cache.ruby-lang.org/pub/ruby/4.0/ruby-4.0.2.tar.gz
+    zip: https://cache.ruby-lang.org/pub/ruby/4.0/ruby-4.0.2.zip
+    xz:  https://cache.ruby-lang.org/pub/ruby/4.0/ruby-4.0.2.tar.xz
+  size:
+    gz:  23824654
+    zip: 29123568
+    xz:  17874724
+  sha1:
+    gz:  47c3627e2bdfe53dda77d3fa1730e44ef1ed7dfe
+    zip: 3cfd813761009f8fbb6001cf14149dc03bcd85d7
+    xz:  d927e26d22b15c6737df24cdf6ae80542a057240
+  sha256:
+    gz:  51502b26b50b68df4963336ca41e368cde92c928faf91654de4c4c1791f82aac
+    zip: 7cdbef9028a64f73ca59e21cd46c73c794df9c8294f1cb5c50c4d93c6060b240
+    xz:  4618db85bb9ec04d8152d0099db488694a3d3c4f52106625e4ad547f1318db87
+  sha512:
+    gz:  16a6ca0e9407051f58c8e3c4ec2058c52d62a9863174a3eb6dd5e9e2e893a66427e97a6e7fc8b4c3480163bd19a7a0ec4c00e481f90ff42e8f30bdbc9555f628
+    zip: ecac80a6861fd666fc024701233f5b5b93bed9ed9047cd7ca9e11799681b0102729cc53203cee4ac33245a41b786a4a4c802633d1031881200378b011ed74580
+    xz:  be71a5452068dfc3c86b8ec07456b3fdf6dc64e8c0cd16c358fc4ed8ac08707a9c28285ea8a79dbef82031d8c93c71032a82a0b45f3c9ac5325bf3b70d06fbf2
+
 - version: 4.0.1
   date: 2026-01-13
   post: /en/news/2026/01/13/ruby-4-0-1-released/
@@ -165,6 +189,30 @@
 
 # 3.4 series
 
+- version: 3.4.9
+  date: 2026-03-11
+  post: "/en/news/2026/03/11/ruby-3-4-9-released/"
+  url:
+    gz: https://cache.ruby-lang.org/pub/ruby/3.4/ruby-3.4.9.tar.gz
+    xz: https://cache.ruby-lang.org/pub/ruby/3.4/ruby-3.4.9.tar.xz
+    zip: https://cache.ruby-lang.org/pub/ruby/3.4/ruby-3.4.9.zip
+  size:
+    gz: 22456968
+    xz: 16682004
+    zip: 27645906
+  sha1:
+    gz: 6386200753caf4e336dafceeee165fa73fd234ec
+    xz: 1eb1b0b45b9e9191de9d2f360164e60eedf77012
+    zip: 8c4312fe946c7eaa269e5c7cee90f3b7350235b5
+  sha256:
+    gz: 7bb4d4f5e807cc27251d14d9d6086d182c5b25875191e44ab15b709cd7a7dd9c
+    xz: 4231c54072601a171faed1699f105985e9971c94cd382b78feb4eb44eec2dd1a
+    zip: a4dd555fddefcdd4a58d2169a568f5887b125edbbda2815ea826ca1833dc41ec
+  sha512:
+    gz: ac7147c0e575cf74f669abb991ee8695d4191c919f306f124b3ee85d6b61361e752a4f1afb7bdffb49aee21edace1fcc9bf2b074ada15fa6c1eb611354c1d54b
+    xz: 356fb47cc56f2d25198cb95253fc20ff7d9a6fd1fa53bc475e5c440012aebe27562537c399d271357235114ade263fd625029b66cb0f9b526f9c04f169fb9580
+    zip: 1c6cc4d03edb071f79f9ae41d43defa8393b467d30000e89ee872c6fe99bde015421cb1dd3ecfd5f0359c1c095b60833a95cd5f6c4397358f8ed98eace8720e2
+
 - version: 3.4.8
   date: 2025-12-17
   post: /en/news/2025/12/17/ruby-3-4-8-released/
@@ -475,6 +523,30 @@
 
 # 3.3 series
 
+- version: 3.3.11
+  date: 2026-03-26
+  post: "/en/news/2026/03/26/ruby-3-3-11-released/"
+  url:
+    gz: https://cache.ruby-lang.org/pub/ruby/3.3/ruby-3.3.11.tar.gz
+    xz: https://cache.ruby-lang.org/pub/ruby/3.3/ruby-3.3.11.tar.xz
+    zip: https://cache.ruby-lang.org/pub/ruby/3.3/ruby-3.3.11.zip
+  size:
+    gz: 21483089
+    xz: 15879844
+    zip: 26947458
+  sha1:
+    gz: 7f18e7e74ab64c5b159a8dfe8da3cc019b32bdb6
+    xz: 520afae357283c96610f340c92a6567ff7b2b923
+    zip: e01bf3ff08d96438decc35b80d4d289b9d012681
+  sha256:
+    gz: 59f0fafb1a59a05dc3765117af3fa68e153eb48254708549f321c1e9e078d7a0
+    xz: 9116bb2e313203bd78cd3e8dc09284d34b2645f725877623a7185bf3807c8ca3
+    zip: 94c9d920aade547bafe392c6a288f996c151cb217ab548be5747867353568243
+  sha512:
+    gz: effbcffce1cad4fa7158ce9159b6109a92e88c29f5d33151c2ec609c54fe24b747354b0e722e0fefe8164700acb2d650b8c65aad0e17e3dec2c26969a44fc524
+    xz: 1f8eb206a90121015b294dada7ea61ebd136e7e7dbb1c4bb7df21b85f359a2e733f438153bf07c57815a963e4ef3f766081fd4226caa6547f4c263b33ed7726e
+    zip: fc4d4299df8414daeb81ae329d67f4d0ea961443e3505407a4faa134d8b9971c49b5c6750d55b4fdc210e15276845ee9b11c4ee25461f99a743f714da7096391
+
 - version: 3.3.10
   date: 2025-10-23
   post: "/en/news/2025/10/23/ruby-3-3-10-released/"
@@ -863,6 +935,30 @@
 
 # 3.2 series
 
+- version: 3.2.11
+  date: 2026-03-27
+  post: /en/news/2026/03/27/ruby-3-2-11-released/
+  url:
+    gz:  https://cache.ruby-lang.org/pub/ruby/3.2/ruby-3.2.11.tar.gz
+    zip: https://cache.ruby-lang.org/pub/ruby/3.2/ruby-3.2.11.zip
+    xz:  https://cache.ruby-lang.org/pub/ruby/3.2/ruby-3.2.11.tar.xz
+  size:
+    gz:  19984344
+    zip: 24594356
+    xz:  14695828
+  sha1:
+    gz:  9534a3aa08d2ccb4d3c50b1301b2da9a9b91c4ab
+    zip: 7e84c9433f32a758da123d3b5532cc632d19d503
+    xz:  501cecc15ba079087967888ae455d62e5886fbc1
+  sha256:
+    gz:  b3eeabd6636f334531db3ffdc3229eb05e524740e6c84fdc043720573cf2f8b2
+    zip: 08ab90aa4ada9268e96aa47fb6c3a77fdb3b2f792f2671053e3b55a6141618ce
+    xz:  c13aec0c206725d5d356acbae6e5fd8bffd92dc325aec14fd5dd7795d4b763d2
+  sha512:
+    gz:  95896bbf519604da0dc3d82066ac92c3f661b2ee9ffd8e2c9effce4773677445f1dcc43b05539050024b57f4f94f43984a734a03015ac6e29679e79d5a093a67
+    zip: 133d63cd9bb7c9fe38eecd18c996013de0a56fef09c89c42f4fc9c383f09ab4ab3b0b31edbadd1fd1aaa797fbb9c86128ded51c6e5263cd3225754e714b3d195
+    xz:  418739d476d34e2467e7f1ee60ff63a1969a362b49871bdc488676c1ac7d28b198deee85e2bd951a23f5b0e8425bc89ca59d5c8cb8415fa5ed835555e3d3af8d
+
 - version: 3.2.10
   date: 2026-01-14
   post: "/en/news/2026/01/14/ruby-3-2-10-released/"

_plugins/translation_status.rb

@@ -8,7 +8,7 @@ module Jekyll
   # Outputs HTML.
   module TranslationStatus
 
-    LANGS = %w[en bg de es fr id it ja ko pl pt ru tr ua vi zh_cn zh_tw].freeze
+    LANGS = %w[en bg de es fr id it ja ko pl pt ru tr uk vi zh_cn zh_tw].freeze
     START_DATE = "2013-04-01"
 
     OK_CHAR      = "✓"

de/community/index.md

@@ -55,9 +55,8 @@ Für den, der sich gerne einbringen möchte, ist die folgende Liste ein guter Ei
   anderen Rubyisten zu chatten.
 
 [Ruby Core](ruby-core/)
-: Gerade jetzt, wo Ruby 2.0 in Arbeit ist, ist die beste Gelegenheit,
-  die Entwicklungen rund um Ruby näher zu betrachten. Wer daran
-  interessiert ist zu helfen, startet am Besten hier.
+: Die beste Gelegenheit, um die Entwicklungen rund um Ruby näher zu betrachten.
+  Wer daran interessiert ist zu helfen, startet am besten hier.
 
 [Weblogs zu Ruby](weblogs/)
 : Nur wenige Dinge passieren in der Ruby-Community, die nicht in Blogs

de/documentation/ruby-from-other-languages/to-ruby-from-python/index.md

@@ -84,7 +84,7 @@ Ruby-Referenz-Buch) online auf [Englisch][4].
 * Ruby hat **globale Variablen** (`$foo`), die aber selten verwendet
   werden.
 
-#### Strings, Symbole und Reguläre Ausrücke
+#### Strings, Symbole und Reguläre Ausdrücke
 
 * **Ruby-Strings** können ihren Wert ändern (sind also *mutable*).
 * In Ruby werden statt Strings häufig **Symbole** verwendet, wenn der

en/news/_posts/2026-03-05-buffer-overflow-zlib-cve-2026-27820.md

@@ -0,0 +1,36 @@
+---
+layout: news_post
+title: "CVE-2026-27820: Buffer overflow vulnerability in Zlib::GzipReader"
+author: "hsbt"
+translator:
+date: 2026-03-05 00:00:00 +0000
+tags: security
+lang: en
+---
+
+A buffer overflow vulnerability exists in `Zlib::GzipReader`. This vulnerability has been assigned the CVE identifier [CVE-2026-27820](https://www.cve.org/CVERecord?id=CVE-2026-27820). We recommend upgrading the zlib gem.
+
+### Details
+
+The `zstream_buffer_ungets` function prepends caller-provided bytes ahead of previously produced output but fails to guarantee the backing Ruby string has enough capacity before the memmove shifts the existing data. This can lead to memory corruption when the buffer length exceeds capacity.
+
+### Recommended action
+
+We recommend to update the `zlib` gem to version 3.2.3 or later. In order to ensure compatibility with bundled version in older Ruby series, you may update as follows instead:
+
+* For Ruby 3.2 users: Update to zlib 3.0.1
+* For Ruby 3.3 users: Update to zlib 3.1.2
+
+You can use gem update zlib to update it. If you are using bundler, please add `gem "zlib", ">= 3.2.3"` to your Gemfile.
+
+### Affected versions
+
+zlib gem 3.2.2 or lower
+
+### Credits
+
+Thanks to [calysteon](https://hackerone.com/calysteon) for reporting this issue. Also thanks to [nobu](https://github.com/nobu) for creating the patch.
+
+## History
+
+* Originally published at 2026-03-05 09:00:00 (UTC)

en/news/_posts/2026-03-11-ruby-3-4-9-released.md

@@ -0,0 +1,47 @@
+---
+layout: news_post
+title: "Ruby 3.4.9 Released"
+author: nagachika
+translator:
+date: 2026-03-11 11:00:00 +0000
+lang: en
+---
+
+Ruby 3.4.9 has been released.
+
+This release includes [an update to the zlib gem addressing CVE-2026-27820](https://www.ruby-lang.org/en/news/2026/03/05/buffer-overflow-zlib-cve-2026-27820/),
+along with other bug fixes.
+Please see the [GitHub releases](https://github.com/ruby/ruby/releases/tag/v3_4_9) for further details.
+
+We recommend updating your version of the zlib gem. This release has been made for the convenience of those who wish to continue using it as a default gem.
+
+
+## Download
+
+{% assign release = site.data.releases | where: "version", "3.4.9" | first %}
+
+* <{{ release.url.gz }}>
+
+      SIZE: {{ release.size.gz }}
+      SHA1: {{ release.sha1.gz }}
+      SHA256: {{ release.sha256.gz }}
+      SHA512: {{ release.sha512.gz }}
+
+* <{{ release.url.xz }}>
+
+      SIZE: {{ release.size.xz }}
+      SHA1: {{ release.sha1.xz }}
+      SHA256: {{ release.sha256.xz }}
+      SHA512: {{ release.sha512.xz }}
+
+* <{{ release.url.zip }}>
+
+      SIZE: {{ release.size.zip }}
+      SHA1: {{ release.sha1.zip }}
+      SHA256: {{ release.sha256.zip }}
+      SHA512: {{ release.sha512.zip }}
+
+## Release Comment
+
+Many committers, developers, and users who provided bug reports helped us make this release.
+Thanks for their contributions.