Skip to content

Ruby's package ecosystem is managed through Bundler and the Gemfile/Gemfile.lock system. The RubyGems repository hosts 170,000+ gems. ReleaseRun provides free tools for auditing Ruby gem dependencies, checking CVEs in your Gemfile, and tracking Ruby and Rails release status.

Ruby Dependency Health Checkers

Gemfile Health Checker

The Gemfile Health Checker scans your Gemfile for gems with known security advisories (from ruby-advisory-db), outdated major versions, and gems that have been deprecated or abandoned. Paste your Gemfile and get results instantly.

RubyGems Health Checker

The RubyGems Health Checker checks an individual gem's version history, current release status, and known CVEs. Useful for evaluating gems before adding them as dependencies.

Ruby Release History and EOL

Ruby releases one new minor version per year (December). Each version receives approximately 3 years of support. Ruby 3.1 reached EOL in March 2025. The Ruby Release History page covers the full version timeline and support windows.

Ruby 2.7 reached EOL in April 2023. If you are running Ruby 2.7 in production, you are operating an unsupported runtime with no security patches.

Ruby on Rails

Rails is the dominant Ruby web framework. Rails versions have specific Ruby version requirements — Rails 8.0 requires Ruby 3.2+. The Rails Release History page covers support windows and upgrade guidance. Keeping Ruby and Rails versions current together reduces the risk of double-upgrade friction later.

Ruby Security Tools

  • bundler-audit — scans Gemfile.lock against ruby-advisory-db for CVEs; the standard Ruby security audit tool
  • brakeman — static analysis security scanner for Rails apps; catches SQL injection, XSS, and other Rails-specific vulnerabilities in source code

All Ruby Tools on ReleaseRun