[PoC] Imprement yaml parser written by pure ruby instead of Psych by hsbt · Pull Request #9352 · ruby/rubygems

Implement name field for Gem::Specification in YAMLSerializer

hsbt

committed

Implement version field for Gem::Specification in YAMLSerializer

hsbt

committed

Implement authors field for Gem::Specification in YAMLSerializer

hsbt

committed

Implement summary field for Gem::Specification in YAMLSerializer

hsbt

committed

Implement description field for Gem::Specification in YAMLSerializer

hsbt

committed

Use YAMLSerializer in Gem.load_yaml

hsbt

committed

Use YAMLSerializer in Gem::SafeYAML

hsbt

committed

Use YAMLSerializer.dump in Gem::Specification#to_yaml

hsbt

committed

Remove direct Psych dependencies in Gem::Package

hsbt

committed

Use YAMLSerializer in Gem::TestCase#load_yaml

hsbt

committed

Replace Psych.dump with Gem::YAMLSerializer.dump in test_gem_package.rb

hsbt

committed

Implement robust pure-Ruby YAML serializer and parser for gemspecs and metadata

hsbt

committed

Enhance YAML serializer to handle multiline strings, add Gem::Dependency support, and improve parsing and indentation

hsbt

committed

Use Gem::YAMLSerializer for YAML output, parse cargo metadata with JSON, and harden YAML serializer parsing to improve safety and correctness

hsbt

committed

Refactor YAML parsing to handle lone '-' lists, fix recursion/indent logic, replace DisallowedClass with ArgumentError, prevent stalled parsing by shifting unchanged lines, and drop aliases check i…

hsbt

committed

Complete pure-Ruby YAML implementation and fix related test failures

hsbt

committed

bin/rubocop -A

hsbt

committed

Replace String.new concatenations with string literals and joined parts in YAMLSerializer for improved performance and readability

hsbt

committed

Remove lib/rubygems/psych_tree.rb custom NoAliasYAMLTree that disabled YAML anchors and customized scalar quoting

hsbt

committed

Use Gem::SafeYAML::PERMITTED_CLASSES

hsbt

committed

Use Gem::SafeYAML::PERMITTED_SYMBOLS

hsbt

committed

Use aliases_enabled

hsbt

committed

Don't need to use PERMITTED_CLASSES and PERMITTED_SYMBOLS for SafeYAML.load

hsbt

committed

bin/rubocop -a

hsbt

committed

Ensure specification_version is an Integer during YAML deserialization and add SafeYAML tests for specification_version, disallowed classes/symbols, and aliases

hsbt

committed

Fix YAMLSerializer parsing for empty array items and restrict specification_version conversion to numeric strings; update tests to assert error messages and add real gemspec parsing test

hsbt

committed

Restrict YAML deserialization by passing permitted_classes: [] and return {} unless content is a Hash to avoid unsafe loads and ensure a Hash result

hsbt

committed

Add YAML anchor/alias support and parsing robustness to YAMLSerializer, ensure requirements/rdoc_options become arrays and tolerate malformed versions, and add tests covering anchors and parsing fixes

hsbt

committed

Normalize YAML-serialized spec fields into arrays to ensure rdoc_options and other array fields are correctly typed

hsbt

committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

[PoC] Imprement yaml parser written by pure ruby instead of Psych#9352

[PoC] Imprement yaml parser written by pure ruby instead of Psych#9352
hsbt wants to merge 29 commits intomasterfrom
pure-psych

Commits on Feb 25, 2026

Implement name field for Gem::Specification in YAMLSerializer

Implement version field for Gem::Specification in YAMLSerializer

Implement authors field for Gem::Specification in YAMLSerializer

Implement summary field for Gem::Specification in YAMLSerializer

Implement description field for Gem::Specification in YAMLSerializer

Use YAMLSerializer in Gem.load_yaml

Use YAMLSerializer in Gem::SafeYAML

Use YAMLSerializer.dump in Gem::Specification#to_yaml

Remove direct Psych dependencies in Gem::Package

Use YAMLSerializer in Gem::TestCase#load_yaml

Replace Psych.dump with Gem::YAMLSerializer.dump in test_gem_package.rb

Implement robust pure-Ruby YAML serializer and parser for gemspecs and metadata

Enhance YAML serializer to handle multiline strings, add Gem::Dependency support, and improve parsing and indentation

Use Gem::YAMLSerializer for YAML output, parse cargo metadata with JSON, and harden YAML serializer parsing to improve safety and correctness

Refactor YAML parsing to handle lone '-' lists, fix recursion/indent logic, replace DisallowedClass with ArgumentError, prevent stalled parsing by shifting unchanged lines, and drop aliases check i…

Complete pure-Ruby YAML implementation and fix related test failures

bin/rubocop -A

Replace String.new concatenations with string literals and joined parts in YAMLSerializer for improved performance and readability

Remove lib/rubygems/psych_tree.rb custom NoAliasYAMLTree that disabled YAML anchors and customized scalar quoting

Use Gem::SafeYAML::PERMITTED_CLASSES

Use Gem::SafeYAML::PERMITTED_SYMBOLS

Use aliases_enabled

Don't need to use PERMITTED_CLASSES and PERMITTED_SYMBOLS for SafeYAML.load

bin/rubocop -a

Ensure specification_version is an Integer during YAML deserialization and add SafeYAML tests for specification_version, disallowed classes/symbols, and aliases

Fix YAMLSerializer parsing for empty array items and restrict specification_version conversion to numeric strings; update tests to assert error messages and add real gemspec parsing test

Restrict YAML deserialization by passing permitted_classes: [] and return {} unless content is a Hash to avoid unsafe loads and ensure a Hash result

Add YAML anchor/alias support and parsing robustness to YAMLSerializer, ensure requirements/rdoc_options become arrays and tolerate malformed versions, and add tests covering anchors and parsing fixes

Normalize YAML-serialized spec fields into arrays to ensure rdoc_options and other array fields are correctly typed