[depfu]

Here is everything you need to know about this upgrade. Please take a good look at what changed and the test results before merging this pull request.

What changed?

Release Notes

4.0.9

Posted by k0kubun on 23 Oct 2026

      <p>Ruby 4.0.9 has been released.</p>

This release includes a fix for a bug in Regexp compilation that GitLab’s CVE-2026-110264 relies on. Please see the topic below for details.

• Regexp compilation fixes related to GitLab’s CVE-2026-89078, CVE-2026-93577, CVE-2026-97229 and CVE-2026-110264

Please see the GitHub releases for further details.

4.0.8

Posted by k0kubun on 22 Oct 2026

      <p>Ruby 4.0.8 has been released.</p>

This is a routine update that includes bugfixes. Please see the GitHub releases for further details.

4.0.7

Posted by k0kubun on 15 Sep 2026

      <p>Ruby 4.0.7 has been released.</p>

This is a routine update that includes bugfixes. Please see the GitHub releases for further details.

Release Schedule

We intend to release the latest stable Ruby version (currently Ruby 4.0) every two months following the most recent release. Ruby 4.0.8 will be released in November.

If a change arises that significantly affects users, a release may occur earlier than planned.

4.0.6

Posted by k0kubun on 14 Jul 2026

      <p>Ruby 4.0.6 has been released.</p>

This is a routine update that includes bugfixes. Please see the GitHub releases for further details.

Release Schedule

We intend to release the latest stable Ruby version (currently Ruby 4.0) every two months following the most recent release. Ruby 4.0.7 will be released in September, and 4.0.8 in November.

If a change arises that significantly affects users, a release may occur earlier than planned, and the subsequent schedule may shift accordingly.

---

All Depfu comment commands

@​depfu refresh

Rebases against your default branch and redoes this update

@​depfu recreate

Recreates this PR, overwriting any edits that you've made to it

@​depfu merge

Merges this PR once your tests are passing and conflicts are resolved

@​depfu close

Closes this PR and deletes the branch

@​depfu reopen

Restores the branch and reopens this PR (if it's closed)

@​depfu pause

Pauses all engine updates and closes this PR