Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update dependency bundler to v2.6.5 #88

Merged
merged 1 commit into from
Feb 28, 2025

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Feb 28, 2025

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
bundler (source, changelog) 2.5.22 -> 2.6.5 age adoption passing confidence

Release Notes

rubygems/rubygems (bundler)

v2.6.5

Compare Source

Enhancements:

  • Fix lockfile platforms inconveniently added on JRuby #​8494

Bug fixes:

  • Fix resolver issue due to ill-defined version ranges being created #​8503
  • Make sure empty gems are not reinstalled every time #​8502

v2.6.4

Compare Source

Enhancements:

  • Make Bundler never instantiate development dependencies #​8486
  • Fix some invalid options to gem DSL not getting reported as invalid #​8480
  • Add irb to a Gemfile for a newly created gem #​8467
  • Auto-heal empty installation directory #​8457
  • Fix bundle console unnecessarily trying to load IRB twice #​8443
  • Add ruby_34 and ruby_35 as valid platform: #​8430
  • Consider gems under platform: :windows filter in Gemfile when running on Windows with ARM architecture #​8428

Bug fixes:

  • Fix regression when running bundle update <foo> would sometimes downgrade a top level dependency #​8491
  • Fix dependency locking when Bundler finds incorrect lockfile dependencies #​8489
  • Raise error when lockfile is missing deps in frozen mode #​8483
  • Fix bundle install --prefer-local sometimes installing very old versions #​8484
  • Fix incorrect error message when running bundle update in frozen mode #​8481
  • Keep platform variants in vendor/cache even if incompatible with the current Ruby version #​8471
  • Fix bundle console printing bug report template incorrectly #​8436
  • Fix --prefer-local not respecting default gems #​8412

Performance:

  • Improve resolution performance #​8458

Documentation:

v2.6.3

Compare Source

Enhancements:

  • Don't fallback to evaluating YAML gemspecs as Ruby code #​8404
  • Print message when blocking on file locks #​8299
  • Add support for mise version manager file #​8356
  • Add Ruby 3.5 to Gemfile DSL platform values #​8365

Bug fixes:

  • Revert RubyGems plugins getting loaded on Bundler.require #​8410
  • Fix platform specific gems sometimes being removed from the lockfile #​8401
  • Serialize gemspec when caching git source #​8403
  • Fix crash on read-only filesystems in Ruby 3.4 #​8372
  • Fix bundle outdated <GEM> failing if not all gems are installed #​8361
  • Fix bundle install crash on Windows #​8362

Documentation:

  • Fix broken links in the documents #​8389

v2.6.2

Compare Source

Bug fixes:

  • Restart using Process.argv0 only if $PROGRAM_NAME is not a script #​8343

Documentation:

  • Fix typo in bundle lock man page synopsis (--add-checkums--add-checksums) #​8350

v2.6.1

Compare Source

Bug fixes:

  • Fix missing Gem::Uri.redact on some Ruby 3.1 versions #​8337
  • Fix bundle lock --add-checksums when gems are already installed #​8326

v2.6.0

Compare Source

Security:

  • Fix gemfury credentials written to logs in verbose mode #​8283
  • Fix private registry credentials being written to logs #​8222

Breaking changes:

  • Drop ruby 3.0 support #​8091
  • Remove client-side MD5 ETag transition from compact index client #​7677

Deprecations:

  • Cancel bundle console deprecation #​8218
  • Warn when platform of installed gem differs from platform in the lockfile #​8029
  • Cancel deprecation of Gemfiles without a global source #​8213

Features:

  • Add a lockfile_checksums configuration to include checksums in fresh lockfiles #​8219
  • Add bundle lock --add-checksums to add checksums to an existing lockfile #​8214

Performance:

  • Enable a couple of performance cops #​8261
  • Remove override of worker jobs for bundle install --local #​8248

Enhancements:

  • Support bundle exec <relative-path-to-script> when Kernel.exec is used under the hood #​8294
  • Improve working with different rubies using the same lockfile #​8251
  • Define a few inspect methods to help debugging #​8266
  • Include original error when openssl fails to load #​8232
  • Automatically fix lockfile when it's missing dependencies #​8103
  • Fix some JRuby warnings when using bundler/setup with Ruby's -w flag #​8205
  • Add a --normalize-platforms flag to bundle lock #​7896
  • Add plugin hooks for Bundler.require #​3439

Bug fixes:

  • Fix restarting with locked version when $PROGRAM_NAME has been changed #​8320
  • Restore the previous cache format for git sources #​8296
  • Fix installs of subdependencies of unlocked dependencies to be conservative #​8281
  • Fix test task name on generated readme when using test-unit #​8291
  • Fix bundle exec executable detection on windows #​8276
  • Fix bundle remove sometimes not removing gems #​8278
  • Fix issue with git gems locking incorrect specs sometimes #​8269

Documentation:

  • Normalize command flag documentation and make sure all flags are documented #​8313
  • Add missing man pages for bundle env and bundle licenses #​8315
  • Add man page for 'bundle issue' command #​8271
  • Add man page for 'bundle fund' command #​8258
  • Move pry-related contents to debugging.md #​8263
  • Add debugging instruction on Windows #​8236
  • Unify rubygems and bundler docs directory #​8159

v2.5.23

Compare Source

Enhancements:

  • Add useful error message for plugin load #​7639
  • Indent github workflow steps for generated gems #​8193
  • Improve several permission errors #​8168
  • Add bundle add --quiet option #​8157

Bug fixes:

  • Fix incompatible encodings error when paths with UTF-8 characters are involved #​8196
  • Update --ext=rust to support compiling the native extension from source #​7610
  • Print a proper error when there's a previous empty installation path with bad permissions #​8169
  • Fix running bundler (with a final r) in a bundle exec context #​8165
  • Handle two gemspec usages in same Gemfile with same dep and compatible requirements #​7999
  • Fix bundle check sometimes locking gems under the wrong source #​8148

Documentation:

  • Remove confusing bundle config documentation #​8177
  • Rename bundler inline's install parameter and clarify docs #​8170
  • Clarify bundle install --quiet documentation #​8163

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@github-advanced-security
Copy link

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.

@renovate renovate bot force-pushed the renovate/bundler-2.x branch from 9df753a to 53de9a2 Compare February 28, 2025 15:54
@bastelfreak bastelfreak merged commit 60f839d into main Feb 28, 2025
9 checks passed
@bastelfreak bastelfreak deleted the renovate/bundler-2.x branch February 28, 2025 15:57
@rwaffen rwaffen added enhancement New feature or request dependencies Pull requests that update a dependency file labels Feb 28, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file enhancement New feature or request
Projects
Status: Done
Development

Successfully merging this pull request may close these issues.

2 participants