Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 3 additions & 4 deletions .github/workflows/ci.yml
Original file line number Diff line number Diff line change
Expand Up @@ -17,9 +17,8 @@ jobs:
fail-fast: false
matrix:
ruby-version:
- '3.1'
- '3.2'
- jruby-9.4
- '3.4'
- jruby-10.0

steps:
- uses: actions/checkout@v4
Expand All @@ -46,7 +45,7 @@ jobs:

- uses: ruby/setup-ruby@v1
with:
ruby-version: 3.1
ruby-version: 3.4

- name: Install dependencies
run: bundle install
Expand Down
6 changes: 3 additions & 3 deletions launchdarkly-openfeature-server-sdk.gemspec
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,7 @@ Gem::Specification.new do |spec|
spec.summary = "LaunchDarkly OpenFeature Server SDK"
spec.description = "A LaunchDarkly provider for use with the OpenFeature SDK"
spec.homepage = "https://github.com/launchdarkly/openfeature-ruby-server"
spec.required_ruby_version = ">= 3.1"
spec.required_ruby_version = ">= 3.4"

spec.metadata["homepage_uri"] = spec.homepage
spec.metadata["source_code_uri"] = "https://github.com/launchdarkly/openfeature-ruby-server"
Expand All @@ -28,8 +28,8 @@ Gem::Specification.new do |spec|
spec.executables = spec.files.grep(%r{\Aexe/}) { |f| File.basename(f) }
spec.require_paths = ["lib"]

spec.add_runtime_dependency "launchdarkly-server-sdk", "~> 8.4.0"
spec.add_runtime_dependency "openfeature-sdk", "~> 0.4.0"
spec.add_runtime_dependency "launchdarkly-server-sdk", "~> 8.4"
spec.add_runtime_dependency "openfeature-sdk", "~> 0.6.0"
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Dependency on non-existent gem version breaks installation

High Severity

The openfeature-sdk gem version 0.6.x does not exist on RubyGems — the latest published version is 0.5.0 (January 2026). The constraint ~> 0.6.0 will cause bundle install to fail for every user, making the gem completely unusable. The OpenFeature specification has a 0.6.0 release, but the Ruby SDK gem has not reached that version. The required_ruby_version bump to >= 3.4 is also based on the false premise that openfeature-sdk 0.6.x requires Ruby 3.4; the actual latest (0.5.0) only requires >= 3.1.

Additional Locations (1)

Fix in Cursor Fix in Web

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is a false positive. The openfeature-sdk gem does have version 0.6.4 published on RubyGems:

$ gem search openfeature-sdk --remote --versions

*** REMOTE GEMS ***

openfeature-sdk (0.6.4)

CI (bundle install) succeeds on all three matrix entries (Ruby 3.4, JRuby 10.0, Windows), confirming the gem resolves and installs correctly. The Ruby 3.4 requirement also comes from the gem itself — openfeature-sdk 0.6.0 added spec.required_ruby_version = ">= 3.4" in its changelog.


# For more information and examples about making a new gem, check out our
# guide at: https://bundler.io/guides/creating_gem.html
Expand Down