Ruby
LanguageRuby 4.0 is the newest actively maintained release, currently at patch 4.0.6. 3 of 15 tracked cycles remain supported. The next cycle scheduled to reach end-of-life is 3.3, on March 31, 2027.
How Ruby versioning, EOL & security support work
Ruby releases a new major or minor version annually, on December 25th, and tracks each branch's support status on its official branches page. Each branch moves through named phases, normal maintenance, then security maintenance, before being marked end of life.
Ruby vulnerabilities are reported privately, either through Ruby's HackerOne program or by email to security@ruby-lang.org, specifically not through the public bug tracker. The security team fixes confirmed issues, ships a patch release, and only then publishes details. Since fixes are only backported to branches still in normal or security maintenance, a branch already marked EOL receives nothing for any vulnerability found afterward.
Sources: Ruby Maintenance Branches, Ruby Security page
Release lifecycle
Data sourced from endoflife.date.
Want to hear about it the moment Ruby has a new release or reaches end-of-life?
Get alerts