From b35d21840910243ca380f12d875aa7ec2dcc4020 Mon Sep 17 00:00:00 2001
From: Santiago Rodriguez
 <46354312+santiagorodriguez96@users.noreply.github.com>
Date: Fri, 23 Oct 2026 10:56:26 -0300
Subject: [PATCH 1/2] ci: test against OpenSSL `4.1.0`

---
 .github/workflows/build.yml | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index bba41c0e..afb53f49 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -27,6 +27,7 @@ jobs:
           - '3.2'
           - '3.1'
         openssl:
+          - '4.1.0'
           - '4.0.0'
           - '3.6.0'
           - '3.5.4'
@@ -37,12 +38,18 @@ jobs:
           - '3.0.18'
           - '1.1.1w'
         exclude:
-          # Ruby 3.1-3.3 bundle an `openssl` gem too old for OpenSSL 4.0.
+          # Ruby 3.1-3.3 bundle an `openssl` gem too old for OpenSSL 4.
           # Re-enable once upstream ships patch releases that bump it.
+          - ruby: '3.3'
+            openssl: '4.1.0'
           - ruby: '3.3'
             openssl: '4.0.0'
+          - ruby: '3.2'
+            openssl: '4.1.0'
           - ruby: '3.2'
             openssl: '4.0.0'
+          - ruby: '3.1'
+            openssl: '4.1.0'
           - ruby: '3.1'
             openssl: '4.0.0'
         include:

From 0161092ec479fab0029f2981fd1977baacaf1791 Mon Sep 17 00:00:00 2001
From: Santiago Rodriguez
 <46354312+santiagorodriguez96@users.noreply.github.com>
Date: Fri, 23 Oct 2026 10:56:51 -0300
Subject: [PATCH 2/2] ci: test against latest OpenSSL versions

---
 .github/workflows/build.yml | 18 +++++++-----------
 1 file changed, 7 insertions(+), 11 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index afb53f49..d4884bb1 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -28,30 +28,26 @@ jobs:
           - '3.1'
         openssl:
           - '4.1.0'
-          - '4.0.0'
-          - '3.6.0'
-          - '3.5.4'
-          - '3.4.3'
+          - '4.0.3'
+          - '3.6.5'
+          - '3.5.9'
+          - '3.4.8'
           - '3.3.5'
           - '3.2.6'
           - '3.1.8'
           - '3.0.18'
           - '1.1.1w'
         exclude:
-          # Ruby 3.1-3.3 bundle an `openssl` gem too old for OpenSSL 4.
+          # Ruby 3.1-3.2 bundle an `openssl` gem too old for OpenSSL 4.
           # Re-enable once upstream ships patch releases that bump it.
-          - ruby: '3.3'
-            openssl: '4.1.0'
-          - ruby: '3.3'
-            openssl: '4.0.0'
           - ruby: '3.2'
             openssl: '4.1.0'
           - ruby: '3.2'
-            openssl: '4.0.0'
+            openssl: '4.0.3'
           - ruby: '3.1'
             openssl: '4.1.0'
           - ruby: '3.1'
-            openssl: '4.0.0'
+            openssl: '4.0.3'
         include:
           - ruby: truffleruby
           - ruby: '3.0'