[developerz-ai]

What

The Versions placeholder still advertised ruby2html 2.0.0 / ruby 3.4.7. Point it
at the current gem version (2.1.0) and dev Ruby (4.0.9). GitHub issue forms
cannot derive values at fill time, so the string stays static; the release
checklist now refreshes it with the version bump.

Acceptance

• .github/ISSUE_TEMPLATE/bug_report.yml Versions placeholder no longer contains 'ruby2html 2.0.0' or 'ruby 3.4.7'
• Placeholder shows the gem version declared in lib/gem/ruby2html/version.rb (2.1.0) and the Ruby in .ruby-version (4.0.9)
• Placeholder's Rails value (8.1.4) still matches Gemfile.lock:204
• A comment in bug_report.yml records that issue forms cannot derive values at fill time and how to refresh the string (value sources + release timing)
• docs/release.md's release-PR checklist names the issue-template placeholder refresh, and 'containing nothing else' still excludes unrelated changes
• No other field of .github/ISSUE_TEMPLATE/bug_report.yml changed: label, description, validations and all other fields byte-identical
• .github/ISSUE_TEMPLATE/performance.yml, README.md, llms.txt, CHANGELOG.md and .github/workflows/* are untouched
• The edited YAML block stays valid for GitHub: correct indentation and quoting, comments only on '#' lines

Changes

• .github/ISSUE_TEMPLATE/bug_report.yml (edit) — Fix the stale Versions placeholder (line 44) to "ruby2html 2.1.0, ruby 4.0.9 +YJIT, Rails 8.1.4, x86_64-linux" — gem version from lib/gem/ruby2html/version.rb:4, Ruby from .ruby-version:1, Rails 8.1.4 unchanged (Gemfile.lock:204) — and add a short YAML comment above it saying issue forms cannot derive the value at fill time and how to refresh it on release. Keep it a placeholder (the reporter supplies their own versions); touch no other field of the form.
• docs/release.md (edit) — Add a release-PR checklist step (between the CHANGELOG step and Verify) that refreshes the issue-template versions placeholder — gem version from lib/gem/ruby2html/version.rb, Ruby from .ruby-version, Rails from Gemfile.lock — and narrow the 'containing nothing else' rule so that refresh may ride along in the release PR. Renumber the following items; change nothing else in the file.
• .claude/skills/release/SKILL.md (edit) — Handoff from editor:issue-template: docs/release.md now has a release-PR step that refreshes the issue-template versions placeholder from version.rb, .ruby-version and Gemfile.lock, and explicitly allows that refresh in the release PR. — The skill's own numbered Steps (Bump / Verify / PR) mirror the release-PR procedure but do not mention the placeholder refresh, so an agent following the skill could ship a release with a stale placeholder. Add the same refresh to the skill's steps (or state that the skill's step list follows docs/release.md's checklist including the issue-template refresh).

Verification

./bin/check passed (exit 0) in 17s.

Notes

Premises of the request the team disproved:

• Premise 'if the issue-template form mechanism permits — derive them at fill time' is false: GitHub's issue-form schema allows only static label/description/placeholder/value/render attributes — no file reading, no interpolation at fill time. bug_report.yml:39-46 uses only those, so the value stays static and is refreshed at release.

Follow-up work this change creates outside its diff:

• .github/ISSUE_TEMPLATE/performance.yml — This task refreshed the bug-report Versions placeholder but left the sibling performance Environment placeholder unchanged; performance.yml:17 still shows 'ruby 3.4.7 +YJIT'; it is outside this task's acceptance scope, so performance reporters still see a stale Ruby version
• .dz/briefs/release-due.md — docs/release.md's release-PR checklist gained a placeholder-refresh step; the weekly brief's mirrored list was not changed here; the agent opens release PRs from .dz/briefs/release-due.md:38-47; without the mirrored step the placeholder is not refreshed on release and drifts again

---

🤖 Opened by developerz.ai for task tsk_e9fb14743141af19c9e205093c758762 on sebyx07/ruby2html.

Raised automatically by the raw_task_triage lane.

🤖 developerz.ai, an automated agent, not a human — this PR is one slice of a stacked plan.
Dispatched automatically by the raw_task_triage lane
Model MiniMax-M3 on router.ai.developerz.ai via native, funded by account_key
Ran on box sebastian-1
Cost unknown: no list price on record for MiniMax-M3 on router.ai.developerz.ai
Run timeline run_f18174a112934c178599474976d49dd0
Part 1/1 of plan rtk_89a5c5bd44544b268ed69199c0142321

[github-actions]

Benchmarks: x86_64 (linux)

ruby 4.0.9 (2026-10-23 revision 3e93b23afc) +PRISM [x86_64-linux] · commit 147f6f5384 · 2.0s per report
Δ is against main 51456119f5 (same runner type; expect a few % noise).

escape_bench (C ext) · peak RSS 107 MB

Benchmark	i/s	ms / call	allocs / call	vs fastest	Δ vs main
escape_html short clean (10B)	704,391 ± 0.9%	0.0014	0.00	fastest	-20.4%
escape_html medium clean (200B)	417,591 ± 0.4%	0.0024	0.00	1.69x slower	-21.1%
append short clean (10B)	202,559 ± 0.5%	0.0049	0.02	3.48x slower	-39.1%
append short dirty (10B)	153,806 ± 1.2%	0.0065	0.00	4.58x slower	-38.3%
append medium clean (200B)	148,560 ± 0.9%	0.0067	0.00	4.74x slower	-36.0%
escape_html short dirty (10B)	125,382 ± 1.6%	0.0080	100	5.62x slower	-26.9%
append medium dirty (200B)	84,994 ± 0.8%	0.0118	0.00	8.29x slower	-27.1%
escape_html medium dirty (200B)	68,906 ± 1.9%	0.0145	100	10.22x slower	-22.1%
escape_html long clean (10KB)	16,221 ± 0.3%	0.0616	0.00	43.42x slower	-12.4%
append long clean (10KB)	11,413 ± 0.6%	0.0876	0.00	61.72x slower	-20.3%
append long dirty (10KB)	1,481 ± 3.8%	0.6751	0.00	475.55x slower	-22.4%
escape_html long dirty (10KB)	1,450 ± 2.6%	0.6898	100	485.86x slower	-20.2%

escape_bench (pure Ruby) · peak RSS 148 MB

Benchmark	i/s	ms / call	allocs / call	vs fastest	Δ vs main
escape_html short clean (10B)	200,719 ± 0.8%	0.0050	0.00	fastest	-24.2%
append short clean (10B)	152,346 ± 0.6%	0.0066	0.02	1.32x slower	-23.5%
escape_html short dirty (10B)	85,384 ± 1.2%	0.0117	100	2.35x slower	-24.9%
append short dirty (10B)	65,205 ± 1.1%	0.0153	100	3.08x slower	-32.3%
escape_html medium clean (200B)	57,221 ± 1.6%	0.0175	0.00	3.51x slower	-17.6%
append medium clean (200B)	49,660 ± 0.9%	0.0201	0.00	4.04x slower	-19.3%
escape_html medium dirty (200B)	24,351 ± 1.5%	0.0411	200	8.24x slower	-35.7%
append medium dirty (200B)	21,865 ± 1.3%	0.0457	200	9.18x slower	-34.3%
escape_html long clean (10KB)	1,548 ± 0.9%	0.6460	0.00	129.66x slower	-12.4%
append long clean (10KB)	1,468 ± 1.7%	0.6814	0.00	136.77x slower	-14.6%
escape_html long dirty (10KB)	1,030 ± 0.6%	0.9713	200	194.96x slower	-12.8%
append long dirty (10KB)	910 ± 3.5%	1.0989	200	220.56x slower	-16.7%

render_bench (C ext) · peak RSS 132 MB

Benchmark	i/s	ms / call	allocs / call	vs fastest	Δ vs main
erubi	8,093 ± 1.1%	0.1236	713	fastest	-22.3%
ruby2html	5,346 ± 0.9%	0.1870	419	1.51x slower	-30.3%
phlex	489 ± 1.6%	2.0452	6,374	16.55x slower	-25.1%

render_bench (pure Ruby) · peak RSS 132 MB

Benchmark	i/s	ms / call	allocs / call	vs fastest	Δ vs main
erubi	7,968 ± 0.7%	0.1255	713	fastest	-24.8%
ruby2html	2,141 ± 0.8%	0.4672	1,029	3.72x slower	-29.6%
phlex	484 ± 2.1%	2.0647	6,374	16.45x slower	-27.2%

tag_bench (C ext) · peak RSS 39 MB

Benchmark	i/s	ms / call	allocs / call	vs fastest	Δ vs main
br	251,648 ± 1.0%	0.0040	7.00	fastest	-19.7%
li(text)	168,704 ± 1.1%	0.0059	7.02	1.49x slower	-20.7%
li(dirty text)	141,993 ± 1.0%	0.0070	7.00	1.77x slower	-20.9%
div { block }	111,505 ± 0.7%	0.0090	7.00	2.26x slower	-25.2%
span(text, class:)	30,946 ± 1.1%	0.0323	207	8.13x slower	-28.9%
div(class:) { block }	27,238 ± 0.8%	0.0367	207	9.24x slower	-34.4%
a(text, href:, class:)	22,763 ± 0.9%	0.0439	207	11.06x slower	-28.9%

tag_bench (pure Ruby) · peak RSS 27 MB

Benchmark	i/s	ms / call	allocs / call	vs fastest	Δ vs main
br	98,832 ± 0.4%	0.0101	107	fastest	-26.0%
div { block }	78,587 ± 2.5%	0.0127	107	1.26x slower	-26.5%
li(text)	72,360 ± 0.6%	0.0138	107	1.37x slower	-23.7%
li(dirty text)	49,734 ± 1.0%	0.0201	207	1.99x slower	-25.7%
span(text, class:)	14,083 ± 1.2%	0.0710	207	7.02x slower	-31.5%
div(class:) { block }	12,996 ± 0.9%	0.0769	207	7.60x slower	-32.0%
a(text, href:, class:)	9,279 ± 1.3%	0.1078	207	10.65x slower	-31.2%

Rails request (C ext) · peak RSS 240 MB

Benchmark	i/s	ms / call	allocs / call	vs fastest	Δ vs main
Slim	473 ± 6.8%	2.1157	4,251	fastest	-27.4%
Ruby2html::Component	469 ± 4.5%	2.1300	4,579	1.01x slower	-25.0%
ruby2html .html.rb templates	464 ± 3.9%	2.1548	4,716	1.02x slower	-23.6%
ViewComponent + ruby2html	447 ± 3.8%	2.2370	4,436	1.06x slower	-25.8%
Phlex	411 ± 3.4%	2.4333	5,978	1.15x slower	-21.2%
ERB	395 ± 18.5%	2.5306	3,029	1.20x slower	-30.8%

[github-actions]

Benchmarks: aarch64 (linux)

ruby 4.0.9 (2026-10-23 revision 3e93b23afc) +PRISM [aarch64-linux] · commit 147f6f5384 · 2.0s per report
Δ is against main 51456119f5 (same runner type; expect a few % noise).

escape_bench (C ext) · peak RSS 118 MB

Benchmark	i/s	ms / call	allocs / call	vs fastest	Δ vs main
escape_html short clean (10B)	617,106 ± 0.3%	0.0016	0.00	fastest	-0.3%
escape_html medium clean (200B)	337,098 ± 0.3%	0.0030	0.00	1.83x slower	-0.6%
append short clean (10B)	209,275 ± 0.2%	0.0048	0.02	2.95x slower	+0.6%
append short dirty (10B)	160,988 ± 0.3%	0.0062	0.00	3.83x slower	+0.1%
append medium clean (200B)	147,521 ± 0.2%	0.0068	0.00	4.18x slower	+0.4%
escape_html short dirty (10B)	108,544 ± 3.7%	0.0092	100	5.69x slower	-1.5%
append medium dirty (200B)	73,692 ± 0.2%	0.0136	0.00	8.37x slower	+0.0%
escape_html medium dirty (200B)	58,683 ± 0.4%	0.0170	100	10.52x slower	-1.1%
escape_html long clean (10KB)	11,462 ± 0.3%	0.0872	0.00	53.84x slower	-0.1%
append long clean (10KB)	8,971 ± 0.3%	0.1115	0.00	68.79x slower	-2.0%
append long dirty (10KB)	1,204 ± 0.2%	0.8307	0.00	512.66x slower	-0.3%
escape_html long dirty (10KB)	1,129 ± 3.0%	0.8860	100	546.74x slower	-0.7%

escape_bench (pure Ruby) · peak RSS 150 MB

Benchmark	i/s	ms / call	allocs / call	vs fastest	Δ vs main
escape_html short clean (10B)	164,636 ± 0.2%	0.0061	0.00	fastest	+0.0%
append short clean (10B)	104,467 ± 0.2%	0.0096	0.02	1.58x slower	+0.0%
escape_html short dirty (10B)	70,010 ± 0.5%	0.0143	100	2.35x slower	+2.2%
append short dirty (10B)	58,093 ± 0.6%	0.0172	100	2.83x slower	+2.8%
escape_html medium clean (200B)	56,883 ± 0.1%	0.0176	0.00	2.89x slower	+0.0%
append medium clean (200B)	45,614 ± 0.2%	0.0219	0.00	3.61x slower	+0.1%
escape_html medium dirty (200B)	24,722 ± 0.3%	0.0405	200	6.66x slower	-0.1%
append medium dirty (200B)	22,176 ± 0.5%	0.0451	200	7.42x slower	+1.6%
escape_html long clean (10KB)	1,633 ± 0.2%	0.6124	0.00	100.82x slower	-0.1%
append long clean (10KB)	1,561 ± 0.4%	0.6407	0.00	105.49x slower	+0.4%
escape_html long dirty (10KB)	1,084 ± 0.6%	0.9221	200	151.81x slower	+0.6%
append long dirty (10KB)	967 ± 2.9%	1.0342	200	170.27x slower	+1.1%

render_bench (C ext) · peak RSS 131 MB

Benchmark	i/s	ms / call	allocs / call	vs fastest	Δ vs main
erubi	7,719 ± 0.7%	0.1296	713	fastest	+2.5%
ruby2html	5,877 ± 0.5%	0.1702	419	1.31x slower	+1.9%
phlex	574 ± 1.6%	1.7432	6,374	13.46x slower	+1.9%

render_bench (pure Ruby) · peak RSS 131 MB

Benchmark	i/s	ms / call	allocs / call	vs fastest	Δ vs main
erubi	7,681 ± 0.6%	0.1302	713	fastest	+2.3%
ruby2html	2,346 ± 1.4%	0.4263	1,029	3.27x slower	+0.5%
phlex	580 ± 1.0%	1.7248	6,374	13.25x slower	+2.6%

tag_bench (C ext) · peak RSS 39 MB

Benchmark	i/s	ms / call	allocs / call	vs fastest	Δ vs main
br	221,006 ± 1.0%	0.0045	7.00	fastest	+4.0%
li(text)	162,460 ± 0.5%	0.0062	7.02	1.36x slower	+2.5%
li(dirty text)	126,863 ± 0.5%	0.0079	7.00	1.74x slower	+1.5%
div { block }	99,384 ± 0.4%	0.0101	7.00	2.22x slower	+0.7%
span(text, class:)	31,200 ± 0.5%	0.0321	207	7.08x slower	+0.8%
div(class:) { block }	29,569 ± 0.4%	0.0338	207	7.47x slower	+0.7%
a(text, href:, class:)	23,845 ± 0.4%	0.0419	207	9.27x slower	+1.0%

tag_bench (pure Ruby) · peak RSS 26 MB

Benchmark	i/s	ms / call	allocs / call	vs fastest	Δ vs main
br	83,666 ± 0.4%	0.0120	107	fastest	+1.2%
div { block }	64,671 ± 0.3%	0.0155	107	1.29x slower	+2.3%
li(text)	55,027 ± 0.5%	0.0182	107	1.52x slower	+0.7%
li(dirty text)	41,801 ± 0.5%	0.0239	207	2.00x slower	+0.2%
div(class:) { block }	15,847 ± 0.3%	0.0631	207	5.28x slower	+2.9%
span(text, class:)	15,734 ± 0.2%	0.0636	207	5.32x slower	+1.8%
a(text, href:, class:)	9,875 ± 0.4%	0.1013	207	8.47x slower	+1.5%

Rails request (C ext) · peak RSS 233 MB

Benchmark	i/s	ms / call	allocs / call	vs fastest	Δ vs main
Ruby2html::Component	502 ± 2.4%	1.9901	4,048	fastest	+2.4%
ruby2html .html.rb templates	499 ± 1.8%	2.0030	4,167	1.01x slower	+3.6%
Slim	491 ± 6.7%	2.0380	3,756	1.02x slower	+1.7%
ViewComponent + ruby2html	471 ± 2.5%	2.1210	3,905	1.07x slower	+8.6%
ERB	455 ± 11.4%	2.1988	2,703	1.10x slower	-2.1%
Phlex	431 ± 0.9%	2.3201	5,238	1.17x slower	+0.9%

[developerz-ai]

Waiting for a review of this head. Nothing is needed from you right now.

• Red on this head: no check is failing
• What was done: CI has finished. No review verdict covers this head yet, or one still holds it.
• What happens next: The platform asks for its own review when none is coming; a human reviewer who requested changes is waited for. It is handed to a person if nothing arrives.

_{Status for head 5e7477670dc4. This comment is updated in place.}

🤖 Posted by developerz.ai — an automated agent, not a human.

[developerz-ai]

Fix failing CI on #21

• Picked up
• Surveying the repo
• Working
• Pull request opened — docs(issues): refresh stale versions placeholder in bug report template #21
• Done

Work landed on #21 — watching it toward merge.

43m · 49 tool calls · 11 messages

Sessions: coding run · review 1

---

🤖 developerz.ai, an automated agent, not a human — sebastian-3 (developerz-ai[bot]) · model MiniMax-M3 on router.ai.developerz.ai

[developerz-ai]

File fence widened for a CI fix. The fix_pr follow-up for this pull request needed to change file(s) this PR did not touch, to fix the failing check — reason given: Security / bundle-audit:

• Gemfile.lock

Why: The bundle-audit job runs bundle-audit check --update against the root Gemfile.lock, which pins Rails 8.1.4. The staged log (tmp/dz/ci/[REDACTED:high_entropy].log, lines 174-341) reports 18 advisories against actionmailbox/actionpack/actionview/activestorage/activesupport 8.1.4 ("Solution: update to '~> 8.0.5, >= 8.0.5.2', '>= 8.1.4.1'") and ends with "Vulnerabilities found!". The only fix is re-locking Rails to 8.1.4.1 in Gemfile.lock (the Gemfile's ~> 8.1 constraint already allows it). Gemfile.lock is a lockfile outside my file set, so I need it added before I can regenerate it.

The platform granted it under the same area lock a new task takes (no other in-flight task holds these files), after checking the path is not a secret, CI configuration or a human-merge path.

Posted automatically by the developerz bot (AI-authored).

[developerz-ai]

🟡 Reviewed

1 actionable comment(s) · grounded on your code

_{⚠️ 1 config note(s): test files were not shown to the reviewer — this diff touched no path recognised as a test, so no assertion was available to read the change against}

_{⏱ 23s wall clock · MiniMax-M3 via router · 2 model call(s) · 512 output token(s)}

_{🤖 developerz.ai — automated review, running on your model and your box.}

[developerz-ai]

Review summary — 3 file(s), 1 finding(s).

Critical 0 · Major 0 · Minor 1 · Nit 0

Docs-only refresh of the issue-template Versions placeholder (2.1.0 / ruby 4.0.9) plus a release-checklist and skill step for keeping it current. Low risk, but the Rails value in the placeholder was changed to a version that contradicts the PR's own stated source.

• 1 noise file(s) auto-skipped (lockfiles/generated/vendored — re-include with path_filters)
• test files were not shown to the reviewer — this diff touched no path recognised as a test, so no assertion was available to read the change against

🤖 developerz.ai review — automated, running on your model and your box. What is this? · Reviewed by router/MiniMax-M3 — 12.4k in / 264 out over 1 call, on your flat-rate plan: no per-token charge (~<$0.01 at list price).

[developerz-ai]

File fence widened for a CI fix. The fix_pr follow-up for this pull request needed to change file(s) this PR did not touch, to fix the failing check — reason given: Security / bundle-audit:

• Gemfile.lock

Why: The failing job bundle-audit check --update audits the committed root Gemfile.lock, which pins rails/actionpack/actionview/activestorage/actionmailbox/activesupport at 8.1.4. The staged log (tmp/dz/ci/[REDACTED:high_entropy].log) lists 23 advisories against those gems, e.g. "Name: activesupport Version: 8.1.4 GHSA: GHSA-8474-xrp6-wh69 Criticality: High ... Solution: update to '~> 8.0.5, >= 8.0.5.2', '>= 8.1.4.1'", ending in "Vulnerabilities found!" / "Process completed with exit code 1". The only correct fix is regenerating the lockfile to the patched 8.1.4.1 release (Gemfile's rails ~> 8.1 already allows it, so the Gemfile itself needs no change). Gemfile.lock is a lockfile this change must regenerate.

The platform granted it under the same area lock a new task takes (no other in-flight task holds these files), after checking the path is not a secret, CI configuration or a human-merge path.

Posted automatically by the developerz bot (AI-authored).

[developerz-ai]

Review summary — 3 file(s), 1 finding(s).

Critical 0 · Major 0 · Minor 1 · Nit 0

Docs-only change refreshing the stale Versions placeholder in the bug report form and adding release-checklist steps to keep it current. Low risk; one docs contradiction: the placeholder advertises Rails 8.1.4.1 while its own comment and the PR point at the lockfile's 8.1.4.

• 1 noise file(s) auto-skipped (lockfiles/generated/vendored — re-include with path_filters)
• test files were not shown to the reviewer — this diff touched no path recognised as a test, so no assertion was available to read the change against

🤖 developerz.ai review — automated, running on your model and your box. What is this? · Reviewed by router/MiniMax-M3 — 12.9k in / 308 out over 1 call, on your flat-rate plan: no per-token charge (~<$0.01 at list price).

[developerz-ai]

Review summary — 3 file(s), 1 finding(s).

Critical 0 · Major 0 · Minor 1 · Nit 0

Refreshes the issue-template Versions placeholder to the current gem/Ruby/Rails versions, adds a release-checklist step (docs/release.md) and a matching step to the release skill.

• test files were not shown to the reviewer — this diff touched no path recognised as a test, so no assertion was available to read the change against

🤖 developerz.ai review — automated, running on your model and your box. What is this? · Reviewed by router/MiniMax-M3 — 26k in / 512 out over 2 calls, on your flat-rate plan: no per-token charge (~<$0.01 at list price).