Ruby 3.4.7 release

[jwaisner]

PR Type

Enhancement

---

Description

• Add Ruby 3.4.7 release configuration and installation files

• Update bundle release version to 2025.11.23

• Include RubyGems installation script for Windows batch

• Configure Ruby executable paths and RubyGems update settings

---

Diagram Walkthrough

flowchart LR
  A["Ruby 3.4.7 Release"] --> B["bearsampp.conf"]
  A --> C["install.bat"]
  A --> D["rubygems.properties"]
  A --> E["build.properties"]
  B --> F["Ruby Configuration"]
  C --> G["Windows Installation"]
  D --> H["RubyGems Setup"]
  E --> I["Bundle Version Update"]

Loading

File Walkthrough

	Relevant files
Configuration changes	bearsampp.conf Ruby 3.4.7 configuration settings                                                bin/ruby3.4.7/bearsampp.conf Defines Ruby version as 3.4.7 Specifies Ruby executable path as bin/ruby.exe Sets console executable to bin/setrbvars.cmd References bundle release version placeholder +5/-0      rubygems.properties RubyGems update package reference                                                bin/ruby3.4.7/rubygems/rubygems.properties Specifies RubyGems download URL from Bearsampp releases Points to rubygems-update-3.7.2.gem for Ruby 3.4.7 Uses dated release tag 2025.11.23 +1/-0      build.properties Update bundle release version                                                        build.properties Updates bundle release version from 2025.8.16 to 2025.11.23 Maintains other build configuration properties unchanged +1/-1
Enhancement	install.bat Windows RubyGems installation script                                          bin/ruby3.4.7/rubygems/install.bat Windows batch script for RubyGems installation Resolves Ruby binary path and updates system gems Installs rubygems-update.gem locally without documentation Executes gem system update with error handling +10/-0

---

[qodo-code-review]

PR Compliance Guide 🔍

Below is a summary of compliance checks for this PR:

Security Compliance
⚪	Unvalidated command path Description: The script invokes "%RUBYBINPATH%\gem.cmd" without quoting the variable assignment lines and without validating or sanitizing the resolved path, which could allow command execution issues if the path contains spaces or could be redirected if environment variables are manipulated; additionally, relying on the ERRORLEVEL after CALL but not checking the final "gem update" return may allow silent failures. install.bat [7-10] Referred Code CALL "%RUBYBINPATH%\gem.cmd" install rubygems-update.gem --local --no-document IF %ERRORLEVEL% NEQ 0 exit /b %ERRORLEVEL% "%RUBYBINPATH%\gem.cmd" update --system --no-document
	Supply-chain integrity risk Description: Downloading the RubyGems update from a plain HTTPS GitHub release URL without an integrity check (e.g., pinned checksum/signature) risks supply-chain compromise if the artifact is tampered with or the URL is hijacked. rubygems.properties [1-1] Referred Code rubygems = https://github.com/Bearsampp/modules-untouched/releases/download/ruby-2025.11.23/rubygems-update-3.7.2.gem
Ticket Compliance
⚪	🎫 No ticket provided Create ticket/issue
Codebase Duplication Compliance
⚪	Codebase context is not defined Follow the guide to enable codebase context checks.
Custom Compliance
🟢	Generic: Meaningful Naming and Self-Documenting Code Objective: Ensure all identifiers clearly express their purpose and intent, making code self-documenting Status: Passed Learn more about managing compliance generic rules or creating your own custom rules
	Generic: Secure Error Handling Objective: To prevent the leakage of sensitive system information through error messages while providing sufficient detail for internal debugging. Status: Passed Learn more about managing compliance generic rules or creating your own custom rules
	Generic: Secure Logging Practices Objective: To ensure logs are useful for debugging and auditing without exposing sensitive information like PII, PHI, or cardholder data. Status: Passed Learn more about managing compliance generic rules or creating your own custom rules
⚪	Generic: Comprehensive Audit Trails Objective: To create a detailed and reliable record of critical system actions for security analysis and compliance. Status: No action logs: The script performs installation and update actions without emitting any audit logs that capture who ran it, what actions occurred, and their outcomes. Referred Code CALL "%RUBYBINPATH%\gem.cmd" install rubygems-update.gem --local --no-document IF %ERRORLEVEL% NEQ 0 exit /b %ERRORLEVEL% "%RUBYBINPATH%\gem.cmd" update --system --no-document Learn more about managing compliance generic rules or creating your own custom rules
	Generic: Robust Error Handling and Edge Case Management Objective: Ensure comprehensive error handling that provides meaningful context and graceful degradation Status: Minimal error handling: The script only checks ERRORLEVEL after the install step and exits without contextual messaging or handling for missing binaries, paths, or failed update operations. Referred Code CALL "%RUBYBINPATH%\gem.cmd" install rubygems-update.gem --local --no-document IF %ERRORLEVEL% NEQ 0 exit /b %ERRORLEVEL% "%RUBYBINPATH%\gem.cmd" update --system --no-document Learn more about managing compliance generic rules or creating your own custom rules
	Generic: Security-First Input Validation and Data Handling Objective: Ensure all data inputs are validated, sanitized, and handled securely to prevent vulnerabilities Status: External source trust: The script installs a gem from a configured external URL without integrity verification (e.g., checksum/signature) or validation of environment inputs like paths. Referred Code CALL "%RUBYBINPATH%\gem.cmd" install rubygems-update.gem --local --no-document IF %ERRORLEVEL% NEQ 0 exit /b %ERRORLEVEL% "%RUBYBINPATH%\gem.cmd" update --system --no-document Learn more about managing compliance generic rules or creating your own custom rules

Compliance status legend

🟢 - Fully Compliant
🟡 - Partial Compliant
🔴 - Not Compliant
⚪ - Requires Further Human Verification
🏷️ - Compliance label

[qodo-code-review]

PR Code Suggestions ✨

Explore these optional code suggestions:

Category	Suggestion	Impact
High-level	PR adds a non-existent Ruby version The suggestion recommends against adding configuration for Ruby 3.4.7 as this version is speculative and unreleased. This approach avoids potential maintenance issues if the final release has different requirements. Examples: bin/ruby3.4.7/bearsampp.conf [1] rubyVersion = "3.4.7" build.properties [2] bundle.release=2025.11.23 Solution Walkthrough: Before: // bin/ruby3.4.7/bearsampp.conf rubyVersion = "3.4.7" rubyExe = "bin/ruby.exe" ... // bin/ruby3.4.7/rubygems/rubygems.properties rubygems = https://.../ruby-2025.11.23/rubygems-update-3.7.2.gem // build.properties bundle.release=2025.11.23 After: // Suggestion: Do not add configuration for a speculative version. // The state should remain as it was before the PR. // build.properties bundle.release=2025.8.16 // Files under bin/ruby3.4.7/ should not be added. Suggestion importance[1-10]: 10 __ Why: The suggestion correctly identifies a fundamental flaw that the PR adds support for a speculative, non-existent Ruby version (3.4.7), which invalidates the entire purpose of the change.	High
Possible issue	Fix gem path and command invocation In install.bat, make the path to rubygems-update.gem absolute to the script's location using %~dp0 and add the CALL keyword to the second gem.cmd invocation for consistency and safety. bin/ruby3.4.7/rubygems/install.bat [7-10] -CALL "%RUBYBINPATH%\gem.cmd" install rubygems-update.gem --local --no-document +CALL "%RUBYBINPATH%\gem.cmd" install "%~dp0rubygems-update.gem" --local --no-document IF %ERRORLEVEL% NEQ 0 exit /b %ERRORLEVEL% -"%RUBYBINPATH%\gem.cmd" update --system --no-document +CALL "%RUBYBINPATH%\gem.cmd" update --system --no-document Apply / Chat Suggestion importance[1-10]: 7 __ Why: The suggestion correctly identifies two issues that improve the batch script's robustness: one prevents a potential failure based on the execution directory, and the other follows best practices for invoking other batch scripts.	Medium
More