Is RubyGems currently down? Live Status and Outage Reports

Scroll down

Roger Oba @rogerluan_

Reported 2022-05-13 06:17:30

@rubygems_status @rubygems it seems like RubyGems is down? Retrying fetcher due to error (2/4): Bundler::HTTPError Could not fetch specs from https://t.co/1or75NakDx due to underlying error <timed out (https://t.co/DtAi5ESeLp)>

Shanie Weissman @ Work @ShanieWss

Reported 2022-05-10 08:51:44

Much has been said about CVE-2022-29176, the #RubyGems server-side vulnerability that has potentially enabled malicious activity. But nobody breaks this story down like @maciejmensfeld. Read how @WhiteSourceSoft Diffend ensured no gems were compromised. #softwaresupplychain

Maciej Mensfeld @maciejmensfeld

Reported 2022-05-09 03:56:34

@hubertlepicki @rubygems Not the core problem here. Every software is vulnerable ;) the centralization we have in RubyGems is both good and bad but the benefits outweigh the costs/risks.

Hubert Łępicki ❌🦶🐍 @hubertlepicki

Reported 2022-05-09 03:52:00

@maciejmensfeld @rubygems do you think centralized package repositories are inherently vulnerable to attacks and we should start thinking of building a distributed system or that's not the core problem here?

Samuel Giddins @segiddins

Reported 2022-05-05 18:03:36

It’s been far too long, but today I ran incident response for a @rubygems vuln. Writeup is at https://t.co/Lyy1YV6foZ, and I’ll be napping to recover from my strenuous one-line fix.

Zartash @zeeforum

Reported 2022-04-24 17:42:56

@omgubuntu I have tried it but I think this is not stable. Because there were some issues with ***rant due to openssl 3.I think when rubygems will get update it will fix the problem. Otherwise it's cool :) GUI. Also some libraries upgrade issue, I think they have been remove from kernel

Jacques Chester @jacques_chester

Reported 2022-04-13 19:20:40

So today we asked for eyes on RubyGems RFC & discovered Cargo and PyPI are working on the same problem & got feedback from npm and Maven folks who worked on the problem previously & basically my day was pretty great. I think this @theopenssf thing is turning out quite well.

Jared Norman @jardonamron

Reported 2022-04-01 10:53:45

I've proven him wrong and have released a general purpose halting problem solution in Ruby, as an @rspec matcher. The source code is already up on GitHub and the gem, rspec-halting, is available on RubyGems! https://t.co/LfOUuffmYj

Benoit Daloze @eregontp

Reported 2022-03-31 11:17:21

@nirvdrum Who does `gem install` nowadays for an application's dependencies? Agreed we should fix that in RubyGems, if not already the case.

Jacques Chester @jacques_chester

Reported 2022-03-03 08:44:00

I am unreasonably excited by this news. For any @sonatype folks, there's a semi-formal group of source repo maintainers (so far RubyGems, PyPI, npm, Cargo) who are swapping ideas and solutions and we'd love to see you.

Brad Gessler @bradgessler

Reported 2022-02-28 18:57:06

.@rubygems if you’re going to do this: > There was a problem saving your gem: Name 'magiclink' is too similar to an existing gem named 'magic-link' Then could you please make https://t.co/MBrF0XWQc6 redirect to https://t.co/lSePRfbcT6

noah @additionaltext

Reported 2022-02-28 10:42:53

did rubygems break their IPV6 again or is this a "me" problem

schwadruary @schwad_rb

Reported 2022-02-08 04:52:00

I released a version 0.1.2 of a gem on rubygems two weeks ago. today did `bundle add mygem` and it defaulted to `0.1.0`. Is this normal or should I repro into a bundler issue? 🧐

Stateless Code @statelesscode

Reported 2022-02-07 20:07:13

Codecast: Getting Started with Rails 7 26: Fix Rich Text Fixtures and Validations https://t.co/vUyKOc1n0c via @YouTube #ruby #rails7 #rails #rubyonrails #rubygems #codecast #screencast #github #opensource #minitest #TDD #actiontext #activestorage #richtext #bugfix #troubleshoot

oǝW ǝp ʎʇsıW @mstea_ebooks

Reported 2022-02-05 17:40:12

Filed a Radar for the Rubygems/SIP issue, with details on their mailing list but only of high enough quality

fastlane @FastlaneTools

Reported 2022-02-03 20:18:10

[fastlane] 2.204.2 🔄 Fix for filtering locally to find app from App Store Connect is reverted 🙏 Please update to this from 2.204.1 as soon as you can! Version 2.204.1 is going to be removed from RubyGems as its no longer needed 🗑 https://t.co/Q5MmevUwKn

Charles Oliver Nutter @headius

Reported 2022-02-03 11:20:13

@_matthewd Hey there! Dunno if you are still doing Ruby stuff but there's finally interest in improving RubyGems-related boot time, so of course I thought of gel. If you have some input to offer or want to help out, I've opened this issue with ruby-core: https://t.co/LCTSYFBYvg

Tracy Miranda @tracymiranda

Reported 2022-01-31 10:58:21

Amazing how quickly adoption can happen when you have developer friendly tools. ICYMI @projectsigstore is being adopted by: 💎Ruby @rubygems 🐍 Python @pypi 📦Kubernetes release @kubernetesio Also @gradle, @jreleaser and many more in the pipeline!

Ain Tohvri @tekkie

Reported 2022-01-24 10:52:54

RubyGems Adoptions is a great feature to save dying dependencies, a common problem in the #OpenSource community. https://t.co/quJ6NxQi8z #Ruby #RubyOnRails https://t.co/46O5TVIgiU

ステ猫 @stereocat

Reported 2022-01-12 21:47:44

"Calling `DidYouMean::SPELL_CHECKERS.merge!(error_name => spell_checker)' has been deprecated. Please call `DidYouMean.correct_error(error_name, spell_checker)' instead." · Issue #5234 · rubygems/rubygems https://t.co/FY1kBucBKp

miusoph.eth @miusoph

Reported 2022-01-04 05:23:54

the fix for slop dependency to use like moshy on rubygems is so funny, you just update slop and then copy the updated files into the old slop folder lolol 🍻

James Tucker @raggi

Reported 2021-12-27 12:44:36

@woody77gmail Yeah, or apt, rpm, etc. The problem is, despite significant efforts (I was involved in rubygems a long time ago), the incentives and solutions never align well enough. Cargo would have the same problem (via https://t.co/r3kc2fpYN4) but no one builds dynamic libs so it's ok "atm"

Jun Jiang @jasl9187

Reported 2021-12-17 13:43:24

@theleastbad just do a quick compatible fix, please try, if you meet trouble, please create an issue, if no issue, I shall release to RubyGems next weekend. for next major release, I'd like to finish it on my new year hacking week, so stay tune.

Maciej Mensfeld @maciejmensfeld

Reported 2021-12-15 10:52:30

@fnordfish @rubygems @rubygems_status AWS is down. We know.

tante @tante

Reported 2021-12-09 04:19:26

NPM (and PyPi/RubyGems) keeps spreading malicious packages. It's a hard problem but really needs to be tackled soon. Because "npm install" is basically how people build a lot of stuff these days. https://t.co/KzeknatWhl

Colby Swandale @oceanicpanda

Reported 2021-12-04 02:39:04

I can never remember which command is needed to login to the RubyGems CLI, I always think it's `login`, but that's not correct, it's actually `signin`. I've opened a PR that adds an alias to help anyone else that also has this issue. https://t.co/JqUCsp9EgO

veajah evans @veajahevans

Reported 2021-12-02 07:09:58

@RubygemsN I had the same issue, But it was resolved immediately after i wrote to Blockchain instant Support using this form. I think you should write too: https://t.co/nryjvTuH4Y

Colby Swandale @oceanicpanda

Reported 2021-11-27 19:45:02

@kddnewton @ioquatix Maybe this is a comms issue or I'm missing something, but only until I heard about this team working on https://t.co/MliR2qLodY has Shopify ever offered support to the RubyGems, Bundler or https://t.co/MliR2qLodY teams to my recollection.

Louis Pilfold @louispilfold

Reported 2021-11-22 13:06:41

@hdgarrood @taylorfausak @christopherdone @TechnoEmpress This is interesting! Why is it that this issue doesn't come up in the Hex, RubyGems, npm, etc ecosystems? Is it a cultural difference in which library authors use more lax versions in these ecosystems?

Schneems 💉💉✨✨ staying alive @schneems

Reported 2021-11-11 10:24:42

Thinking about Chernobyl and the perception that there was a safe "abort" button that actually triggered the problem. For Rubygems, that's "yank". It looks like it's an "in an emergency press this for the right thing" but is almost always the wrong thing.

techglimpse @techglimpse

Reported 2021-11-11 03:40:22

Rubygems-update requires Ruby version >= 2.3.0 [Fix] https://t.co/YXz5Z7pgVF

🎃⚔️🔰 💉Bill DeVoe💉 🔰⚔️🎃 @wdevoe

Reported 2021-11-07 16:27:58

Btw - the problem I had was the #CocoaPods wasn’t using the right version of #RubyGems and was failing with newer pods. So I did: brew link —overwrite cocoapods And that seemed to get it pointing the right direction. Mostly. 🤦🏻‍♂️

Stateless Code @statelesscode

Reported 2021-10-19 09:18:25

Codecast: Create a RubyGem 76: Fix Bonus and Penalty when Number of Dice... https://t.co/nKXcs6h2D0 via @YouTube #ruby #rubygems #codecast #screencast #NerdDice #DnD #roleplaying #softwaredevelopment #github #opensource #rspec #rubocop #dice #TDD #metaprogramming #method_missing

Kerim Satirli @ksatirli

Reported 2021-10-18 05:16:49

@skwashd Definitely something to be aware of, but nothing that's unique to our Registry. NPM, RubyGems and many other ecosystems have the same exact problem - which isn't to say we (all) can't do a better job about surfacing good quality abstractions.

Stateless Code @statelesscode

Reported 2021-10-01 15:53:19

Codecast: Create a RubyGem 65: Fix README typos and Fix a Code Smell https://t.co/6IZsbgt8Q6 via @YouTube #ruby #rubygems #codecast #screencast #NerdDice #DnD #roleplaying #softwaredevelopment #github #opensource #rspec #rubocop #object #dice #refactoring #codeclimate

Han Seoul-Oh @laughinghan

Reported 2021-09-24 03:53:07

@mycoliza @vicentebosch Bundler for RubyGems improved upon pip with Gemfile vs Gemfile.lock; RVM for isolation was backported to Python as virtualenv; NPM made sure to have strong isolation from the start. Cargo further improved upon it by learning from the NPM vs Yarn reproducible builds issue.

ruby-core-bot @ruby_core_bot

Reported 2021-09-23 23:10:40

Revision 4e7f085c (git): [rubygems/rubygems] Revert "Fix an issue causing nested Gem::Uri instances" https://t.co/hbt7VR99aL

ruby-core-bot @ruby_core_bot

Reported 2021-09-23 23:10:39

Revision b1ab1ee0 (git): [rubygems/rubygems] Fix error message building changing p***word of source https://t.co/rDDj7kbZTF

˗ˏˋ abhinav.co ˊˎ˗ @abhinav

Reported 2021-09-15 15:17:42

@josevalim Take care José - you have been an inspiration. The other day, I was browsing through a rubygems issue on github & I was amazed to see how patient you were even when the issue itself wasn't real. Thank you for being the way you are, Elixir ecosystem is kind because you are kind.

Stateless Code @statelesscode

Reported 2021-09-06 11:02:34

Codecast: Create a RubyGem 46: Add include_all_dice! Method to Fix a Bug... https://t.co/YwJvbX7PgM via @YouTube #ruby #rubygems #codecast #screencast #NerdDice #DnD #roleplaying #softwaredevelopment #github #opensource #rspec #rubocop #object #dice #TDD #bugfix #debugging

Stateless Code @statelesscode

Reported 2021-08-30 19:38:39

Codecast: Create a RubyGem 40: Add damage type, modify config, fix bug https://t.co/Ex2D1uWMcx via @YouTube #ruby #rubygems #codecast #screencast #NerdDice #DnD #roleplaying #softwaredevelopment #github #opensource #rspec #rubocop #object #dice #bugfix

Seth @seesethcode

Reported 2021-08-16 17:12:07

@excid3 @afomera Gotcha, so the namespacing is for the same gem to be published to RubyGems but set a scope to use a particular repo for that specific gem. I guess that is only a problem if you’re taking over a gem to publish it’s replacement

oǝW ǝp ʎʇsıW @mstea_ebooks

Reported 2021-08-09 10:54:02

YOU: Should I watch for the Rubygems/SIP issue, with details on how to fix it.

DJ WETH @brunobar79

Reported 2021-08-04 15:57:40

@jacksondame @mr_ligi @rafathebuilder @rainbowdotme Also, there's this dumb rumor that supply chain attacks are an npm / JS only problem so everyone repeats the same, targeting React Native apps. Hint: It's not... - RubyGems: https://t.co/neLoYiKDdC - PyPy: https://t.co/WdNioygRvB - Java: https://t.co/WBPwyK2w4r

Maciej Mensfeld @maciejmensfeld

Reported 2021-07-30 13:08:39

✨💎🤟 Reporting from the field: two new packages taken down from RubyGems. Stay safe and have a great weekend. Over and out. #ruby #opensource #security

friendly neighborhood dog mom @duckinator

Reported 2021-07-29 20:59:57

First, some background: RubyGems has had reproducible builds for about a year and a half. However, there's one catch: you need to know the value of SOURCE_DATE_EPOCH. I have been wanting to fix that requirement by including the value somewhere in the metadata.

Mohit Sindhwani @onghu

Reported 2021-07-06 23:25:18

@tenderlove @RubygemsN What was the problem, if it's easy to articulate?

Bob Maerten @bobmaerten

Reported 2021-07-06 06:38:22

OMG, rubygems is down! https://t.co/K390qXgvJY

postmodern @postmodern_mod3

Reported 2021-07-01 05:25:32

@_solnic_ the last remaining unsolved problem for rubygems UX are C extensions. If anyone could `gem install your_app` and run it without worrying about a C compiler or ruby.h or libsqlite3, that would be awesome.

Axel Kee 🐐 @soulchildpls

Reported 2021-06-08 06:57:30

Rubygems is also down.... oh ****

Is RubyGems down right now?

RubyGems Problem Reports

RubyGems Latest Reports

RubyGems Comments