February 25th, 2013Language core features:
· Keyword arguments, which give flexibility to API design
· Module#prepend, which is a new way to extend a class
· A literal %i, which creates an array of symbols easily
· __dir__, which returns the dirname of the file currently being executed
· The UTF-8 default encoding, which make many magic comments omissible
Built-in libraries:
· Enumerable#lazy and Enumerator::Lazy, for (possibly infinite) lazy stream
· Enumerator#size and Range#size, for lazy size evaluation
· #to_h, which is a new convention for conversion to Hash
· Onigmo, which is a new regexp engine (a fork of Oniguruma)
· Asynchronous exception handling API
Debug support:
· DTrace support, which enables run-time diagnosis in production
· TracePoint, which is an improved tracing API
Performance improvements:
· GC optimization by bitmap marking
· Kernel#require optimization which makes Rails startup very fast
· VM optimization such as method dispatch
· Float operation optimization
February 22nd, 2013This release includes security fixes about bundled JSON and REXML:
· Denial of Service and Unsafe Object Creation Vulnerability in JSON (CVE-2013-0269)
· Entity expansion DoS vulnerability in REXML (XML bomb)
· And some small bugfixes are also included.
February 7th, 2013· This release includes a security fix about bundled RDoc.
February 6th, 2013· This release includes a security fix about bundled RDoc.
October 12th, 2012· $SAFE escaping vulnerability about Exception#to_s / NameError#to_s (CVE-2012-4464, CVE-2012-4466)
· Unintentional file creation caused by inserting a illegal NUL character
· other many bug fixes.