October 23, 2026 12:12pm

Ruby 4.0.9, 3.4.12, and 3.3.13 support

New

Ruby 4.0.9, 3.4.12, and 3.3.13 are now precompiled and ready to deploy on Hatchbox.

These are security releases. They fix memory corruption bugs in Ruby's regular expression engine that GitLab reported as CVE-2026-89078, CVE-2026-93577, CVE-2026-97229, and CVE-2026-110264. Apps that build regular expressions from user input should upgrade as soon as possible. See the Ruby announcement for more details.