confium 0.3.1 → 0.3.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 975eebface92795a6a5493274a696fae3bd9bc451fdd8011be74af8ab5bf7b9b
-  data.tar.gz: a0b92a831f5391175e789fbc02ad5e674d097b20d92e1fd7059cc91890a9fbc8
+  metadata.gz: c8445c7b4b7f4fdea4740a5f22874c5a97eda59e75ebe5cf327dbc84b67ff6f2
+  data.tar.gz: 68381a40a3a7f21b5f4330611bbe86e7abbf9223602288f105f611553e86cd21
 SHA512:
-  metadata.gz: 244d4c7edcafe5cc22234cc3ad58676f765e8b840c22b1427817d3ed6e33f22cb5f57415cc2fdc7dccf7faa2bad217ec50ede0ea6a4bfd859ae3ea61ed6e5c25
-  data.tar.gz: 8a71c86a8b467209b49e1526d0be8a9c35d528e339851db5703e7a0e64993c70d6d68ea8198c8c22649daa1e3688fabaad8d9d2eb8a32dfb2502ca225e4fb38e
+  metadata.gz: 00cf2dd64ba0bce3897db2d5f026818ccc5f90cc1ad1f27a65869827f530811df1a60c50e6fefeb9c83183859bccce81194b0e031e2fbff5b8213d53bb3cb4cb
+  data.tar.gz: a2f6509125418022a2aa3d98d86b724cc841f7f3067884c482d345f2f3b28a0adb63b51dbba34d48dd5d64aa1c827a42d8bf86be273160feb631d5e8a68b72b9

data/CHANGELOG.md

@@ -1,10 +1,41 @@
 # Changelog
 
+## [0.3.2] — 2026-08-22
+
+Native platform gems (linux x86_64/aarch64, macOS x86_64/arm64) ship
+alongside the source gem — `gem install` no longer needs a Rust
+toolchain on those platforms.
+
+The 0.3.0/0.3.1 native-gem builds never actually produced platform
+gems: the cross-compile task targeted a nonexistent rake task inside
+a container whose shell swallowed the failure, and the fallback
+`gem build` stamped platform=ruby. RubyGems blocks re-pushing a
+version that ever existed, so the native gems first appear here.
+
+### Fixed
+
+- Platform gems now build on native-arch runners (one per target
+  platform). Cross-compilation via rake-compiler-dock is impossible
+  for this gem: the dock images are Ubuntu 20.04 (gcc 9.4) while the
+  vendored RNP stack needs Botan 3.12, which requires gcc 11+.
+- Each platform gem carries one extension per C-ABI window — exact
+  minors 3.1 and 3.2, plus 3.3 (loads on 3.3+) — because Ruby 3.2
+  broke the 3.1 ABI (a 3.1-built extension segfaults on 3.2) and
+  rb-sys references `ruby_current_vm_ptr` when built against
+  Ruby <= 3.2, which libruby stopped exporting in 3.3.
+  `lib/confium.rb` picks the window for the running Ruby; source
+  builds keep the flat extension path.
+- The release workflow no longer builds a source gem (that burned
+  the 0.3.1 version slots against test-and-release.yml's publish),
+  refuses to push any gem stamped platform=ruby, and installs each
+  packaged gem on Ruby 3.1 through 3.4 before publishing.
+- Windows remains unsupported: the vendored RNP (json-c + botan)
+  build has no MSVC/mingw story.
+
 ## [0.3.1] — 2026-08-21
 
-Native platform gems (linux x86_64/aarch64, macOS x86_64/arm64,
-Windows x64-mingw-ucrt) ship alongside the source gem — `gem install`
-no longer needs a Rust toolchain on those platforms.
+Shipped as a source gem only (the intended native platform gems
+failed to materialize; see 0.3.2).
 
 ### Added
 

data/Cargo.lock

@@ -647,6 +647,7 @@ dependencies = [
  "rnp-rs",
  "serde_json",
  "sha2",
+ "subtle",
 ]
 
 [[package]]

data/Rakefile

@@ -1,11 +1,7 @@
 # frozen_string_literal: true
 
+require 'rake/clean'
 require 'bundler/gem_tasks'
-require 'rspec/core/rake_task'
-RSpec::Core::RakeTask.new(:spec)
-
-require 'rubocop/rake_task'
-RuboCop::RakeTask.new
 
 require 'rb_sys/extensiontask'
 gemspec = Gem::Specification.load('confium.gemspec')
@@ -13,5 +9,22 @@ RbSys::ExtensionTask.new('confium_native', gemspec) do |ext|
   ext.lib_dir = 'lib/confium_native'
 end
 
+# Tooling tasks are dev-only and are not needed to build the
+# extension. Guard the requires so minimal environments (e.g. release
+# tooling containers) can still load this Rakefile.
+begin
+  require 'rspec/core/rake_task'
+  RSpec::Core::RakeTask.new(:spec)
+rescue LoadError
+  nil
+end
+
+begin
+  require 'rubocop/rake_task'
+  RuboCop::RakeTask.new
+rescue LoadError
+  nil
+end
+
 task compile: :clean
 task default: %i[compile spec rubocop]

data/confium.gemspec

@@ -48,7 +48,7 @@ Gem::Specification.new do |spec|
   spec.add_dependency 'rb_sys', '~> 0.9.39'
 
   spec.add_development_dependency 'rake', '~> 13.0'
-  spec.add_development_dependency 'rake-compiler', '~> 1.2.0'
+  spec.add_development_dependency 'rake-compiler', '~> 1.3.0'
   spec.add_development_dependency 'rake-compiler-dock', '~> 1.3'
   spec.add_development_dependency 'rspec', '~> 3.0'
   spec.add_development_dependency 'rubocop', '~> 1.0'

data/lib/confium/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Confium
-  VERSION = '0.3.1'
+  VERSION = '0.3.2'
 end

data/lib/confium.rb

@@ -12,7 +12,19 @@
 require_relative 'confium/version'
 
 begin
-  require_relative 'confium_native/confium_native'
+  # Pre-built platform gems ship one extension per C-ABI window
+  # (Ruby 3.2 broke the 3.1 ABI — object shapes — and rb-sys
+  # references the VM pointer libruby stopped exporting in 3.3, so
+  # 3.1 and 3.2 get exact-minor builds while 3.3 covers 3.3+).
+  # Source builds install the extension flat, without a version
+  # directory.
+  major, minor = RUBY_VERSION.split('.').first(2).map(&:to_i)
+  window = major > 3 || minor >= 3 ? '3.3' : "#{major}.#{minor}"
+  begin
+    require_relative "confium_native/#{window}/confium_native"
+  rescue LoadError
+    require_relative 'confium_native/confium_native'
+  end
 rescue LoadError => e
   warn 'confium: native extension not built — run `bundle exec rake compile`'
   raise e

metadata

@@ -1,13 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: confium
 version: !ruby/object:Gem::Version
-  version: 0.3.1
+  version: 0.3.2
 platform: ruby
 authors:
 - Ribose Open
+autorequire:
 bindir: bin
 cert_chain: []
-date: 1980-01-02 00:00:00.000000000 Z
+date: 2026-08-22 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rb_sys
@@ -43,14 +44,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.2.0
+        version: 1.3.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.2.0
+        version: 1.3.0
 - !ruby/object:Gem::Dependency
   name: rake-compiler-dock
   requirement: !ruby/object:Gem::Requirement
@@ -182,6 +183,7 @@ metadata:
   homepage_uri: https://www.confium.org
   source_code_uri: https://github.com/confium/confium-ruby
   rubygems_mfa_required: 'true'
+post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -196,7 +198,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 4.0.6
+rubygems_version: 3.5.22
+signing_key:
 specification_version: 4
 summary: Ruby bindings for the Confium multi-stakeholder threshold cryptography framework.
 test_files: []