Ruby Central's OSS Changelog: May 2025

Hello, and welcome to the May newsletter. Read on for announcements about our Open Source Program and a report of the OSS work we’ve done over the past month.Our Security Engineer in Residence, Samuel Giddins, delivered a talk on the challenges of building the sigstore-ruby sigstore client and, most importantly, have crucial in-person discussions with the folks building Ruby, including: The JRuby team: what is the path forward for JRuby’s crypto primitives, and how can we help get JRuby to parity with MRI? Ruby Core: the state of ruby release build reproducibility. The core team accepted, in principle, our proposed improvements. We will be testing and making the archive build reproducible as our immediate next steps. Future reproducibility of built and installed binaries is planned as a follow-up. Gem developers: other projects intersecting with the ongoing "wheels" work, and what a more declarative build system could look like for extensions. Our eventual goals include an improved replacement for extconf.rb and mkmf, which are hard to understand, slow due to serial execution, and duplicate work across different extensions. As mentioned in our previous newsletters, we will now be sending out separate updates for the Open Source Program and.