Add an opt-in OS credential store for gem and bundler credentials#9671

Open

hsbt wants to merge 23 commits into

masterfrom

claude/relaxed-chatterjee-5fedd7

Commits on Jul 2, 2026

Add the Gem::CredentialStore wrapper

hsbt
and
claude
committed
Add the macOS Keychain backend

hsbt
and
claude
committed
Add the Linux Secret Service backend

hsbt
and
claude
committed
Add the Windows Credential Manager backend

hsbt
and
claude
committed
Store gem credentials through the credential store in Gem::ConfigFile

hsbt
and
claude
committed
Read the gem API key from the credential store when enabled

hsbt
and
claude
committed
Clear the credential store on gem signout

hsbt
and
claude
committed
Note credential store use in gem signin and push help

hsbt
and
claude
committed
Store bundler host credentials in the credential store when enabled

hsbt
and
claude
committed
Document the credential_store setting in bundle-config(1)

hsbt
and
claude
committed
Support pluggable credential store backends by name

hsbt
and
claude
committed
Accept a credential store backend name in Gem::ConfigFile

hsbt
and
claude
committed
Accept a credential store backend name in bundler settings

hsbt
and
claude
committed
Document selecting a credential store backend by name

hsbt
and
claude
committed
Move the native backends under credential_store/native

hsbt
and
claude
committed
Normalize credential_store keys like the bundler config file

hsbt
and
claude
committed
Fall back when the paired RubyGems has no credential store

hsbt
and
claude
committed
Spell out what gem signout removes from the credential store

hsbt
and
claude
committed
Reject macOS keychain secrets the security CLI cannot round-trip

hsbt
and
claude
committed
Keep the config file and the credential store consistent on write

hsbt
and
claude
committed
Explain credential store selection, migration, and API key precedence

hsbt
and
claude
committed
Clear every registry from the credential store on gem signout

hsbt
and
claude
committed
Fix credential store tests under ruby-core and JRuby

hsbt
and
claude
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

Add an opt-in OS credential store for gem and bundler credentials#9671

Add an opt-in OS credential store for gem and bundler credentials#9671
hsbt wants to merge 23 commits into
masterfrom
claude/relaxed-chatterjee-5fedd7

Commits on Jul 2, 2026

Add the Gem::CredentialStore wrapper

Add the macOS Keychain backend

Add the Linux Secret Service backend

Add the Windows Credential Manager backend

Store gem credentials through the credential store in Gem::ConfigFile

Read the gem API key from the credential store when enabled

Clear the credential store on gem signout

Note credential store use in gem signin and push help

Store bundler host credentials in the credential store when enabled

Document the credential_store setting in bundle-config(1)

Support pluggable credential store backends by name

Accept a credential store backend name in Gem::ConfigFile

Accept a credential store backend name in bundler settings

Document selecting a credential store backend by name

Move the native backends under credential_store/native

Normalize credential_store keys like the bundler config file

Fall back when the paired RubyGems has no credential store

Spell out what gem signout removes from the credential store

Reject macOS keychain secrets the security CLI cannot round-trip

Keep the config file and the credential store consistent on write

Explain credential store selection, migration, and API key precedence

Clear every registry from the credential store on gem signout

Fix credential store tests under ruby-core and JRuby