Why RubyGems just revoked every legacy API key

#​810 — July 23, 2026 Read on the Web Ruby Weekly 🔒   RubyGems Revokes Legacy API Keys After Possible Cache Leak — A CDN caching bug, which has existed for years, could have served accounts' legacy API keys to other users. There's no evidence of malicious use, but it's worth affected owners checking their gems over nonetheless. Colby Swandale (Ruby Central) 💡 Luke Marshall, from Truffle Security, discovered this bug and did a full technical writeup of how the bug could have been exp...