CVS commit: pkgsrc/lang

["Takahiro Kambe" <taca%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   taca
Date:           Sun Mar 22 13:20:18 UTC 2026

Modified Files:
        pkgsrc/lang/ruby: rubyversion.mk
        pkgsrc/lang/ruby40: distinfo

Log Message:
lang/ruby40: update to 4.0.2

This release contains security fix for zlib gem version 3.3.2 which fixes
CVE-2026-27820.

Quote from release announce:

This is a routine update that includes a bugfix in YJIT for NoMethodError on
Puma. Please see the GitHub Releases for further details.

Release Schedule

We intend to release the latest stable Ruby version (currently Ruby 4.0)
every two months following the most recent release. Ruby 4.0.3 will be
released in May, 4.0.4 in July, 4.0.5 in September, and 4.0.6 in November.

If a change arises that significantly affects users, a release may occur
earlier than planned, and the subsequent schedule may shift accordingly.

Changes from GitHub release page:

4.0.2 (2026-03-16)

* Bug #21941: Local variable becomes nil when YJIT enabled mid-method with
  fork/signal/ensure

* Bug #21832: segfault with argument forwarding, when combined with splat &
  positional arg

* Bug #21723: binding.irb raises a LoadError under bundle exec when Gemfile
  contains path: or git:

* Bug #21847: Backport syntax_suggest 2.0.3 to supported branches

* Bug #21866: Backport Fix for integer overflow checks in enumerator

* Bug #21865: Crash on signal raise

* Bug #21842: Encoding of rb_interned_str

* Bug #21838: Rails seeing degradation (20% slowdown) related to Revision
  079ef92b "Implement global allocatable slots and empty pages" (from Sep 5
  2024)

* Bug #21873: UnboundMethod#== returns false for methods from
  included/extended modules

* ZJIT: Avoid runtime exceptions from RubyVM::ZJIT.stats_string by k0kubun ·
  Pull Request #16139

* Bug #21931: GC Crash in String#% (backport
  726205b354d1068147719fb42e1de743f1838ef1)

* Bug #21944: "Cannot allocate memory" with M:N threads or Ractors on a low
  RAM Linux machine

* Bug #21927: Prism: misleading error message for forwarding in lambda
  argument

* Bug #21925: Prism misparses standalone "in" pattern matching in "case/in"

* Bug #21828: An incorrect warning message related to benchmark is shown
  when using benchmark-ips

* Bug #21917: Unable to build 4.0.1 on AIX 7.2

* Bug #21945: Ripper lexes newline between identifier and and? as ignored
  newline

* Bug #21947: Timeout.timeout doesn't use Timeout::ExitException when Fiber
  scheduler is in use.

* Bug #21926: Thread#value on popen3 wait thread hangs in finalizer

* Bug #21880: The ultra_safe mode of pstore bundled with Ruby 4.0 is broken.

* Bug #21097: x = a rescue b in c and def f = a rescue b in c parsed
  differently between parse.y and prism


To generate a diff of this commit:
cvs rdiff -u -r1.313 -r1.314 pkgsrc/lang/ruby/rubyversion.mk
cvs rdiff -u -r1.3 -r1.4 pkgsrc/lang/ruby40/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/lang/ruby/rubyversion.mk
diff -u pkgsrc/lang/ruby/rubyversion.mk:1.313 pkgsrc/lang/ruby/rubyversion.mk:1.314
--- pkgsrc/lang/ruby/rubyversion.mk:1.313       Thu Mar 12 15:42:14 2026
+++ pkgsrc/lang/ruby/rubyversion.mk     Sun Mar 22 13:20:18 2026
@@ -1,4 +1,4 @@
-# $NetBSD: rubyversion.mk,v 1.313 2026/03/12 15:42:14 taca Exp $
+# $NetBSD: rubyversion.mk,v 1.314 2026/03/22 13:20:18 taca Exp $
 #
 
 # This file determines which Ruby version is used as a dependency for
@@ -215,7 +215,7 @@ RUBY_VERSION_REQD?= ${PKGNAME_REQD:C/rub
 RUBY32_VERSION=                3.2.10
 RUBY33_VERSION=                3.3.10
 RUBY34_VERSION=                3.4.9
-RUBY40_VERSION=                4.0.1
+RUBY40_VERSION=                4.0.2
 
 # current API compatible version; used for version of shared library
 RUBY32_API_VERSION=    3.2.0
@@ -567,7 +567,7 @@ RUBY_SUFFIX=                ${_RUBY_VER_MAJOR}${_RUBY_
 RUBY_RUBYGEMS_VER=             4.0.3
 
 # default gems
-RUBY_BUNDLER_VER=              4.0.3
+RUBY_BUNDLER_VER=              4.0.6
 RUBY_CGI_VER=                  0.4.2   #
 RUBY_DELEGATE_VER=             0.6.1
 RUBY_DID_YOU_MEAN_VER=         2.0.0
@@ -585,14 +585,14 @@ RUBY_OPEN3_VER=                   0.2.1
 RUBY_OPTPARSE_VER=             0.8.1
 RUBY_PP_VER=                   0.6.3
 RUBY_PRETTYPRINT_VER=          0.2.0
-RUBY_PRISM_VER=                        1.8.0
+RUBY_PRISM_VER=                        1.8.1
 RUBY_RESOLV_VER=               0.7.0
 RUBY_RUBY2_KEYWORDS_VER=       0.0.5
 RUBY_SECURERANDOM_VER=         0.4.1
 RUBY_SET_VER=                  1.1.1   #
 RUBY_SHELLWORDS_VER=           0.2.2
 RUBY_SINGLETON_VER=            0.3.0
-RUBY_SYNTAX_SUGGEST_VER=       2.0.2
+RUBY_SYNTAX_SUGGEST_VER=       2.0.3
 RUBY_TEMPFILE_VER=             0.3.1
 RUBY_TIME_VER=                 0.4.2
 RUBY_TIMEOUT_VER=              0.6.0
@@ -615,11 +615,11 @@ RUBY_JSON_VER=                    2.18.0
 RUBY_OPENSSL_VER=              4.0.0
 RUBY_OSTRUCT_VER=              0.6.3
 RUBY_PATHNAME_VER=             0.4.0
-RUBY_PSTORE_VER=               0.2.0
+RUBY_PSTORE_VER=               0.2.1
 RUBY_PSYCH_VER=                        5.3.1
 RUBY_STRINGIO_VER=             3.2.0
 RUBY_STRSCAN_VER=              3.1.6
-RUBY_ZLIB_VER=                 3.2.2
+RUBY_ZLIB_VER=                 3.2.3
 
 # bundled gems
 RUBY_ABBREV_VER=               0.1.2

Index: pkgsrc/lang/ruby40/distinfo
diff -u pkgsrc/lang/ruby40/distinfo:1.3 pkgsrc/lang/ruby40/distinfo:1.4
--- pkgsrc/lang/ruby40/distinfo:1.3     Thu Feb  5 13:07:17 2026
+++ pkgsrc/lang/ruby40/distinfo Sun Mar 22 13:20:18 2026
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.3 2026/02/05 13:07:17 wiz Exp $
+$NetBSD: distinfo,v 1.4 2026/03/22 13:20:18 taca Exp $
 
-BLAKE2s (ruby-4.0.1.tar.xz) = 241246857c0f5543a6ca7a9c332440cdc00b68ba3a89f9b6f3174e4b1518a9be
-SHA512 (ruby-4.0.1.tar.xz) = b67d9d1f97ba30200d103f8454e39dc2d0450819d51d91eb5451d44b0bafc56d2fa48bb1be6c5081babe5828f679984bad02b9bcee7441f6bd34c0a95b8f200b
-Size (ruby-4.0.1.tar.xz) = 17892492 bytes
+BLAKE2s (ruby-4.0.2.tar.xz) = 3a09b9377bff12ff0fa5e1ee4688d4b0e57cc6676afbc891f9820eb49849650b
+SHA512 (ruby-4.0.2.tar.xz) = be71a5452068dfc3c86b8ec07456b3fdf6dc64e8c0cd16c358fc4ed8ac08707a9c28285ea8a79dbef82031d8c93c71032a82a0b45f3c9ac5325bf3b70d06fbf2
+Size (ruby-4.0.2.tar.xz) = 17874724 bytes
 SHA1 (patch-.bundle_gems_rdoc-7.0.3_lib_rdoc_encoding.rb) = e46514327db9c2fb7f6eccd9c8af52e85c6310cd
 SHA1 (patch-.bundle_gems_rdoc-7.0.3_lib_rdoc_generator_template_aliki___header.rhtml) = e8752b12058f5e71e31d696de65da9360dc5d12d
 SHA1 (patch-common.mk) = c23eed58427b2fd4ba8fdb3692f609701a666c6d