Sourced from concurrent-ruby's releases.
v1.3.7
There are 3 security fixes in this release, so updating is recommended. These security vulnerabilities are not very likely to be hit in practice and have a corresponding
Lowseverity score.What's Changed
- CVE-2026-54904
AtomicReference#updatelivelocks when the stored value isFloat::NAN. Fix by@joshuay03and@eregon- CVE-2026-54905
ReentrantReadWriteLockread-count overflow grants a write lock without exclusivity. Fix by@joshuay03- CVE-2026-54906
ReadWriteLockallows wrong-thread write release and stray read-release counter corruption. Fix by@joshuay03- concurrent-ruby-ext: fix build on Darwin 32-bit by
@barracuda156in ruby-concurrency/concurrent-ruby#1064- Add SECURITY.md by
@eregonin ruby-concurrency/concurrent-ruby#1104- Add Ruby 4.0 in CI by
@eregonin ruby-concurrency/concurrent-ruby#1106New Contributors
@barracuda156made their first contribution in ruby-concurrency/concurrent-ruby#1064Full Changelog: https://github.com/ruby-concurrency/concurrent-ruby/compare/v1.3.6...v1.3.7
v1.3.6
What's Changed
- Run tests without the C extension in CI by
@eregonin ruby-concurrency/concurrent-ruby#1081- Fix typo in Promise docs by
@danieldiekmeierin ruby-concurrency/concurrent-ruby#1083- Correct word in readme by
@wwahammyin ruby-concurrency/concurrent-ruby#1084- Fix mistakes in MVar documentation by
@trinistrin ruby-concurrency/concurrent-ruby#1087- Fix multi require concurrent/executor/cached_thread_pool by
@OuYangJinTingin ruby-concurrency/concurrent-ruby#1085- Use typed data APIs by
@nobuin ruby-concurrency/concurrent-ruby#1096- Add Joshua Young to the list of maintainers by
@eregonin ruby-concurrency/concurrent-ruby#1097- Asynchronous pruning for RubyThreadPoolExecutor by
@joshuay03in ruby-concurrency/concurrent-ruby#1082- Mark RubySingleThreadExecutor as a SerialExecutorService by
@meineerdein ruby-concurrency/concurrent-ruby#1070- Allow TimerTask to be safely restarted after shutdown and avoid duplicate tasks by
@bensheldonin ruby-concurrency/concurrent-ruby#1001- Flaky test fix: allow ThreadPool to shutdown before asserting completed_task_count by
@bensheldonin ruby-concurrency/concurrent-ruby#1098ThreadPoolExecutor#killwillwait_for_terminationin JRuby; ensureTimerSettimer thread shuts down cleanly by@bensheldonin ruby-concurrency/concurrent-ruby#1044New Contributors
@danieldiekmeiermade their first contribution in ruby-concurrency/concurrent-ruby#1083@wwahammymade their first contribution in ruby-concurrency/concurrent-ruby#1084@trinistrmade their first contribution in ruby-concurrency/concurrent-ruby#1087@OuYangJinTingmade their first contribution in ruby-concurrency/concurrent-ruby#1085@nobumade their first contribution in ruby-concurrency/concurrent-ruby#1096@joshuay03made their first contribution in ruby-concurrency/concurrent-ruby#1082Full Changelog: https://github.com/ruby-concurrency/concurrent-ruby/compare/v1.3.5...v1.3.6
Sourced from concurrent-ruby's changelog.
Release v1.3.7 (16 June 2026)
concurrent-ruby:
- See the release notes on GitHub.
Release v1.3.6 (13 December 2025)
concurrent-ruby:
- See the release notes on GitHub.
4c8fc28
Release 1.3.7d91ca94
Fix AtomicReference#update livelock when stored value is Float::NAN on
JRuby ...7e4d711
Fix ReentrantReadWriteLock read hold overflow into
write-lock bit6e37e06
Fix AtomicReference#update livelock when stored value is
Float::NAN2825cfa
Cleanup spec3fd4932
Fix ReadWriteLock wrong-thread write release and stray read
release1974b47
Add Ruby 4.0 in CIdf8706d
Add SECURITY.md (#1104)7a1b789
Bump actions/upload-pages-artifact from 4 to 59b2dbf7
Bump actions/deploy-pages from 4 to 5Sourced from faraday's releases.
v2.14.3
Security Note
This release contains a security fix, we recommend all users to upgrade as soon as possible. A Security Advisory with more details will be posted shortly.
What's Changed
- Upgrade CI lint step from Ruby 3 to 4 by
@larouxnin lostisland/faraday#1673- feat(test): add Stubs#clear to remove all stubs by
@SAY-5in lostisland/faraday#1675New Contributors
@SAY-5made their first contribution in lostisland/faraday#1675Full Changelog: https://github.com/lostisland/faraday/compare/v2.14.2...v2.14.3