build(deps): bump rb_sys from 0.9.125 to 0.9.126 in /bindings/ruby in the per-dependency group across 1 directory - #22
Closed
dependabot[bot] wants to merge 1 commit into
Conversation
dependabot
Bot
added
dependencies
Bumps the per-dependency group with 1 update in the /bindings/ruby directory: [rb_sys](https://github.com/oxidize-rb/rb-sys). Updates `rb_sys` from 0.9.125 to 0.9.126 - [Release notes](https://github.com/oxidize-rb/rb-sys/releases) - [Commits](oxidize-rb/rb-sys@v0.9.125...v0.9.126) --- updated-dependencies: - dependency-name: rb_sys dependency-version: 0.9.126 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: per-dependency ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/bundler/bindings/ruby/per-dependency-de302389f5
branch
from
April 8, 2026 23:55
3f57e31 to
a039cba
Compare
Author
|
Looks like rb_sys is updatable in another way, so this is no longer needed. |
dependabot
Bot
deleted the
dependabot/bundler/bindings/ruby/per-dependency-de302389f5
branch
April 15, 2026 23:55
anakrish
pushed a commit
that referenced
this pull request
Jun 19, 2026
Mirror the regorus-bpf egress backend for an LSM file-open hook. Lower a regorus-lift EnforcerConfig over the observable fields input.path (Str, canonicalized in user space) and input.op (read/write/exec) into a fixed rule plan, with a user-space reference enforcer that the conformance tests treat as ground truth. What lowers: Eq/Membership of exact paths and ops, plus a non-negated startswith(input.path, ...) as a leading-byte prefix. What is dropped (fail-closed, never approximated): non-observable fields, a second atom on the same field, negated prefixes, and endswith/contains (a fixed kernel program cannot match suffix/substring soundly). The non-negotiable invariant is preserved: enforce == Allow implies full_eval == allow. bpf/file_open.bpf.c is a CO-RE lsm/file_open program built on the same self-authored compat shim (no libbpf-dev). It reads a bounded, NON-canonical bpf_d_path prefix and is documented best-effort (Phase-2 risk); the user-space enforcer is the conformance reference. It compiles cleanly against live /sys/kernel/btf/vmlinux. Tests: triple-path conformance and scenarios #22-23 (file-read allow-list, no-exec-from-tmp), exporter unit tests, fail-closed/design notes for #24-27 (signature allow-listing, module lockdown, ptrace/raw-socket, AI-agent guardrail composition), and a toolchain-gated BPF compile test. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
anakrish
pushed a commit
that referenced
this pull request
Jun 19, 2026
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the per-dependency group with 1 update in the /bindings/ruby directory: rb_sys.
Updates
rb_sysfrom 0.9.125 to 0.9.126Release notes
Sourced from rb_sys's releases.
Commits
daa12b6Merge pull request #721 from oxidize-rb/fix/arm-linux-lld87b7176Replace GNU ld with ld.lld via symlink instead of RUSTFLAGSbc8babfMerge pull request #720 from oxidize-rb/fix/arm-linux-llde1c6160Fix -fuse-ld=lld by adding -B/usr/bin to linker search path64ced97Merge pull request #719 from oxidize-rb/fix/arm-linux-lld98f681fDowngrade example Cargo.lock to v3 for MSRV compatibility1018960Use lld for arm-linux to fix binutils 2.34 assertion failure74aa40aMerge pull request #718 from oxidize-rb/fix/arm-linux-linker4cf5665Fix arm-linux cross-compilation by adding missing linker configd9a52c4Merge pull request #717 from oxidize-rb/fix/update-trivy-action