Changelog¶ ↑

2.7.2 (2025-09-09)¶ ↑

Enhancements:¶ ↑

• Improve error message when the same source is specified through gemspec and path #8460

• Raise an error in frozen mode if some registry gems have empty checksums #8888

• Bump vendored thor to 1.4.0 #8883

• Delay default path and global cache changes to Bundler 5 #8867

• Fix spacing in bundle gem newgem.gemspec.tt #8865

Bug fixes:¶ ↑

• Fix bundle cache --frozen and bundle cache --no-prune not printing a deprecation message #8926

• Fix local installation incorrectly forced if there’s a vendor/cache directory and frozen mode is set #8925

• Fix bundle lock --update <gem> with --lockfile flag updating all gems #8922

• Fix bundle show --verbose and recommend it as an alternative to bundle show --outdated #8915

• Fix bundle cache --no-all not printing a deprecation warning #8912

• Fix bundle update foo unable to update foo in an edge case #8897

• Fix Bundler printing more flags than actually passed in verbose mode #8914

• Fix bundler failing to install sorbet-static in truffleruby when there’s no lockfile #8872

Documentation:¶ ↑

• Improve documentation of bundle doctor, bundle plugin, and bundle config #8919

• Make sure all CLI flags and subcommands are documented #8861

2.7.1 (2025-07-21)¶ ↑

Enhancements:¶ ↑

• Add some missing deprecation messages #8844

Bug fixes:¶ ↑

• Cancel deprecation of --force flag to bundle install and bundle update #8843

Documentation:¶ ↑

• Clarify documentation about new default gem installation directory in Bundler 4 #8857

• Use mailto link in Code of Conduct #8849

• Update Code of Conduct email to conduct@rubygems.org #8848

• Add missing link to irb repo in DEBUGGING.md #8842

2.7.0 (2025-07-16)¶ ↑

Breaking changes:¶ ↑

• Stop allowing calling gem on random objects #8819

• Remove path_relative_to_cwd setting #8815

• Remove the default_install_uses_path and auto_clean_without_path settings #8814

• Remove print_only_version_number setting #8799

• Drop support for Ruby 3.1 #8634

• Raise an error if incompatible or merge if compatible when a gemspec development dep is duplicated in Gemfile #8556

• Remove MD5 digesting of compact index responses #8530

• Stop generating binstubs for Bundler itself #8345

Deprecations:¶ ↑

• Deprecate unused Bundler::SpecSet methods #8777

• Deprecate x64-mingw32 in favour of x64-mingw-ucrt #8733

• Deprecate legacy windows platforms (:mswin, :mingw) in Gemfile DSL in favor of :windows #8447

• Deprecate CurrentRuby#maglev? and other related maglev methods #8452

Features:¶ ↑

• Allow simulating “Bundler 4 mode” more easily #6472

Performance:¶ ↑

• Cache git sources with commit SHA refs #8741

Enhancements:¶ ↑

• Load RubyGems extensions in the first place #8835

• Update gemspec based on provided github username when exists #8790

• Fail fast when connection errors happen #8784

• Introduce a verbose setting to enable verbose output for all commands #8801

• Introduce gem.bundle setting to run bundle install automatically after bundle gem, and make it the default #8671

• Handle Errno::EADDRNOTAVAIL errors gracefully #8776

• Use persist-credentials: false in workflow generated by bundle gem #8779

• Recognize JRuby loaded from a classloader, not just any JAR #8567

• Validate lockfile dependencies with bundle install #8666

• Ignore local specifications if they have incorrect dependencies #8647

• Move most of Bundler::GemHelpers to Gem::Platform #8703

• Improve spec.files in the .gemspec template #8732

Bug fixes:¶ ↑

• Fix double bundle gem prompts #8825

• Fix date displayed in bundle version help text #8806

• Fix bundle console printing bug report template on NameError during require #8804

• Fix Bundler.original_env['GEM_HOME'] when Bundler is trampolined #8781

• Fix rdoc issues when running gem commands in a bundle exec context #8770

• Never ignore gems from path sources during activation #8766

• Fix bundle install after pinning a git source with subgems #8745

• Let bundle update --bundler upgrade bundler even if restarts are disabled #8729

Documentation:¶ ↑

• Rewrite and complete UPGRADING document #8817

• Document that global_gem_cache also caches compiled extensions #8823

• Add default_cli_command documentation #8816

• Add a root CONTRIBUTING.md file #8822

• Add a SECURITY.md file #8812

• Update man pages for the bundle doctor ssl subcommand #8803

• Remove duplicate documentation for --changelog flag #8756

• Fix typos making some lists in documentation render incorrectly #8759

• Fix heading ranks in documentation #8711

• Clarify differences between frozen and deployment settings, and other bundle-config documentation improvements #8715

2.6.9 (2025-05-13)¶ ↑

Enhancements:¶ ↑

• Fix doctor command parsing of otool output #8665

• Add SSL troubleshooting to bundle doctor #8624

• Let bundle lock --normalize-platforms remove invalid platforms #8631

Bug fixes:¶ ↑

• Fix bundle lock sometimes allowing invalid platforms into the lockfile #8630

• Fix false positive warning about insecure materialization in frozen mode #8629

2.6.8 (2025-04-13)¶ ↑

Enhancements:¶ ↑

• Refine bundle update --verbose logs #8627

• Improve bug report instructions #8607

Bug fixes:¶ ↑

• Fix bundle update crash in an edge case #8626

• Fix bundle lock --normalize-platforms regression #8620

2.6.7 (2025-04-03)¶ ↑

Enhancements:¶ ↑

• Fix crash when server compact index API implementation only lists versions #8594

• Fix lockfile when a gem ends up accidentally under two different sources #8579

• Refuse to install and print an error in frozen mode if some entries are missing in CHECKSUMS lockfile section #8563

• Support git 2.49 #8581

• Improve wording of a few messages #8570

Bug fixes:¶ ↑

• Fix bundle add sometimes generating invalid lockfiles #8586

Performance:¶ ↑

• Implement pub_grub strategy interface #8589

• Update vendored pub_grub #8571

2.6.6 (2025-03-13)¶ ↑

Enhancements:¶ ↑

• Fix ENAMETOOLONG error when creating compact index cache #5578

• Use shorthand hash syntax for bundle add #8547

• Update vendored uri to 1.0.3 #8534

• Retry gracefully on blank partial response in compact index #8524

• Give a better error when trying to write the lock file on a read-only filesystem #5920

• Improve log messages when lockfile platforms are added #8523

• Allow noop bundle install to work on read-only or protected folders #8519

Bug fixes:¶ ↑

• Detect partial gem installs from a git source so that they are reinstalled on a successive run #8539

• Modify bundle doctor to not report issue when files aren’t writable #8520

Performance:¶ ↑

• Optimize resolution by removing an array allocation from Candidate#<=> #8559

Documentation:¶ ↑

• Update docs for with/without consistency #8555

• Recommend non-deprecated methods in bundle exec documentation #8537

• Hint about default group when using only configuration option #8536

2.6.5 (2025-02-20)¶ ↑

Enhancements:¶ ↑

• Fix lockfile platforms inconveniently added on JRuby #8494

Bug fixes:¶ ↑

• Fix resolver issue due to ill-defined version ranges being created #8503

• Make sure empty gems are not reinstalled every time #8502

2.6.4 (2025-02-17)¶ ↑

Enhancements:¶ ↑

• Make Bundler never instantiate development dependencies #8486

• Fix some invalid options to gem DSL not getting reported as invalid #8480

• Add irb to a Gemfile for a newly created gem #8467

• Auto-heal empty installation directory #8457

• Fix bundle console unnecessarily trying to load IRB twice #8443

• Add ruby_34 and ruby_35 as valid platform: #8430

• Consider gems under platform: :windows filter in Gemfile when running on Windows with ARM architecture #8428

Bug fixes:¶ ↑

• Fix regression when running bundle update <foo> would sometimes downgrade a top level dependency #8491

• Fix dependency locking when Bundler finds incorrect lockfile dependencies #8489

• Raise error when lockfile is missing deps in frozen mode #8483

• Fix bundle install --prefer-local sometimes installing very old versions #8484

• Fix incorrect error message when running bundle update in frozen mode #8481

• Keep platform variants in vendor/cache even if incompatible with the current Ruby version #8471

• Fix bundle console printing bug report template incorrectly #8436

• Fix --prefer-local not respecting default gems #8412

Performance:¶ ↑

• Improve resolution performance #8458

Documentation:¶ ↑

• Fix more broken links #8416

2.6.3 (2025-01-16)¶ ↑

Enhancements:¶ ↑

• Don’t fallback to evaluating YAML gemspecs as Ruby code #8404

• Print message when blocking on file locks #8299

• Add support for mise version manager file #8356

• Add Ruby 3.5 to Gemfile DSL platform values #8365

Bug fixes:¶ ↑

• Revert RubyGems plugins getting loaded on Bundler.require #8410

• Fix platform specific gems sometimes being removed from the lockfile #8401

• Serialize gemspec when caching git source #8403

• Fix crash on read-only filesystems in Ruby 3.4 #8372

• Fix bundle outdated <GEM> failing if not all gems are installed #8361

• Fix bundle install crash on Windows #8362

Documentation:¶ ↑

• Fix broken links in the documents #8389

2.6.2 (2024-12-23)¶ ↑

Bug fixes:¶ ↑

• Restart using Process.argv0 only if $PROGRAM_NAME is not a script #8343

Documentation:¶ ↑

• Fix typo in bundle lock man page synopsis (--add-checkums → --add-checksums) #8350

2.6.1 (2024-12-17)¶ ↑

Bug fixes:¶ ↑

• Fix missing Gem::Uri.redact on some Ruby 3.1 versions #8337

• Fix bundle lock --add-checksums when gems are already installed #8326

2.6.0 (2024-12-16)¶ ↑

Security:¶ ↑

• Fix gemfury credentials written to logs in verbose mode #8283

• Fix private registry credentials being written to logs #8222

Breaking changes:¶ ↑

• Drop ruby 3.0 support #8091

• Remove client-side MD5 ETag transition from compact index client #7677

Deprecations:¶ ↑

• Cancel bundle console deprecation #8218

• Warn when platform of installed gem differs from platform in the lockfile #8029

• Cancel deprecation of Gemfiles without a global source #8213

Features:¶ ↑

• Add a lockfile_checksums configuration to include checksums in fresh lockfiles #8219

• Add bundle lock --add-checksums to add checksums to an existing lockfile #8214

Performance:¶ ↑

• Enable a couple of performance cops #8261

• Remove override of worker jobs for bundle install --local #8248

Enhancements:¶ ↑

• Support bundle exec <relative-path-to-script> when Kernel.exec is used under the hood #8294

• Improve working with different rubies using the same lockfile #8251

• Define a few inspect methods to help debugging #8266

• Include original error when openssl fails to load #8232

• Automatically fix lockfile when it’s missing dependencies #8103

• Fix some JRuby warnings when using bundler/setup with Ruby’s -w flag #8205

• Add a --normalize-platforms flag to bundle lock #7896

• Add plugin hooks for Bundler.require #3439

Bug fixes:¶ ↑

• Fix restarting with locked version when $PROGRAM_NAME has been changed #8320

• Restore the previous cache format for git sources #8296

• Fix installs of subdependencies of unlocked dependencies to be conservative #8281

• Fix test task name on generated readme when using test-unit #8291

• Fix bundle exec executable detection on windows #8276

• Fix bundle remove sometimes not removing gems #8278

• Fix issue with git gems locking incorrect specs sometimes #8269

Documentation:¶ ↑

• Normalize command flag documentation and make sure all flags are documented #8313

• Add missing man pages for bundle env and bundle licenses #8315

• Add man page for ‘bundle issue’ command #8271

• Add man page for ‘bundle fund’ command #8258

• Move pry-related contents to debugging.md #8263

• Add debugging instruction on Windows #8236

• Unify rubygems and bundler docs directory #8159

2.5.23 (2024-11-05)¶ ↑

Enhancements:¶ ↑

• Add useful error message for plugin load #7639

• Indent github workflow steps for generated gems #8193

• Improve several permission errors #8168

• Add bundle add --quiet option #8157

Bug fixes:¶ ↑

• Fix incompatible encodings error when paths with UTF-8 characters are involved #8196

• Update --ext=rust to support compiling the native extension from source #7610

• Print a proper error when there’s a previous empty installation path with bad permissions #8169

• Fix running bundler (with a final r) in a bundle exec context #8165

• Handle two gemspec usages in same Gemfile with same dep and compatible requirements #7999

• Fix bundle check sometimes locking gems under the wrong source #8148

Documentation:¶ ↑

• Remove confusing bundle config documentation #8177

• Rename bundler inline’s install parameter and clarify docs #8170

• Clarify bundle install --quiet documentation #8163

2.5.22 (2024-10-16)¶ ↑

Enhancements:¶ ↑

• Update vendored uri and net-http #8112

Bug fixes:¶ ↑

• Fix bundler sometimes crashing because of trying to use a version of psych compiled for a different Ruby #8104

2.5.21 (2024-10-03)¶ ↑

Bug fixes:¶ ↑

• Fix bug report template printed when changing a path source to a git source in frozen mode #8079

• Fix stub.activated? sometimes returning false after activation under bundler #8073

• Fix old cache format detection when application is not source controlled #8076

• Fix bundler/inline resetting ENV changes #8059

2.5.20 (2024-09-24)¶ ↑

Enhancements:¶ ↑

• Don’t try to auto-install dev versions of Bundler not available remotely #8045

• Don’t try to install locked bundler when --local is passed #8041

Bug fixes:¶ ↑

• Fix bundler/inline overwriting lockfiles #8055

• Ensure refs directory in cached git source #8047

• Fix bundle outdated with --group option #8052

2.5.19 (2024-09-18)¶ ↑

Enhancements:¶ ↑

• Raise original errors when unexpected errors happen during Gemfile evaluation #8003

• Make an exe file executable when generating new gems #8020

• Gracefully handle gem activation conflicts in inline mode #5535

• Don’t include hook templates in cached git source #8013

• Fix some errors about a previous installation folder that’s unsafe to remove, when there’s no need to remove it #7985

• Emit progress to stderr during bundle outdated --parseable #7966

• Reject unknown platforms when running bundle lock --add-platform #7967

• Emit progress to stderr when --print is passed to bundle lock #7957

Bug fixes:¶ ↑

• Fix bundle install --local hitting the network when default gems are included #8027

• Remove temporary .lock files unintentionally left around by gem installer #8022

• Fix bundle exec rake install failing when local gem has extensions #7977

• Load gemspecs in the context of its parent also when using local overrides #7993

• Fix bundler/inline failing in Ruby 3.2 due to conflicting securerandom versions #7984

• Don’t blow up when explicit version is removed from some git sources #7973

• Fix gem exec rails new project failing on Ruby 3.2 #7960

Documentation:¶ ↑

• Improve bundle add man page #5903

• Add some documentation about backwards compatibility #7964

2.5.18 (2024-08-26)¶ ↑

Enhancements:¶ ↑

• Don’t remove existing platform gems when PLATFORMS section is badly indented #7916

Bug fixes:¶ ↑

• Fix error message when Bundler refuses to install due to frozen being set without a lockfile #7955

• Fix several issues with the --prefer-local flag #7951

• Restore support for passing relative paths to git: sources #7950

• Regenerate previous git application caches that didn’t include bare repos #7926

• Fix bundle update <indirect_dep> failing to upgrade when versions present in two different sources #7915

Documentation:¶ ↑

• Change new gem README template to have copyable code blocks #7935

2.5.17 (2024-08-01)¶ ↑

Enhancements:¶ ↑

• Print better log message when current platform is not present in the lockfile #7891

• Explicitly encode Gem::Dependency to yaml #7867

• Enable lockfile checksums on future Bundler 3 when there’s no previous lockfile #7805

Bug fixes:¶ ↑

• Fix truffleruby removing gems from lockfile #7795

• Fix bundle check exit code when gem git source is not checked out #7894

• Generate gems.rb from Gemfile.tt template for bundle-gem #7853

• Fix git source cache being used as the install location #4469

• Fix bundle exec gem uninstall #7886

2.5.16 (2024-07-18)¶ ↑

Bug fixes:¶ ↑

• Fix platform removal regression when platforms: used in the Gemfile #7864

• Fix standalone script when default gems with extensions are used #7870

• Fix another case of bundle lock --add-platform doing nothing #7848

• Fix bad error messages when using bundle add with frozen mode set #7845

• Fix generic platform gems getting incorrectly removed from lockfile #7833

Performance:¶ ↑

• Use caller_locations instead of splitting caller #7708

2.5.15 (2024-07-09)¶ ↑

Enhancements:¶ ↑

• Support --no-test, --no-ci, and --no-linter options #7780

• Allow bundle command in new gems with invalid metadata #7707

Bug fixes:¶ ↑

• Protect creating RubyGems binstubs with a file lock #7841

• Only allow valid values for --test, --ci, and --linter options #7801

• Fix bundle lock --add-platform <current_platform> doing nothing #7803

• Print a proper error when bin dir does not have writable permission bit #7794

Documentation:¶ ↑

• Regenerate bundler docs for June 2024 #7787

2.5.14 (2024-06-21)¶ ↑

Bug fixes:¶ ↑

• Fix credentials being re-added when re-resolving without a full unlock #7767

• Fix bundle update <gem_name> edge case #7770

• Fix bundle fund when the gemfile contains optional groups #7758

2.5.13 (2024-06-14)¶ ↑

Bug fixes:¶ ↑

• Fix funding metadata not being printed in some situations #7746

• Make sure to not re-resolve when a not fully specific local platform is locked #7751

• Don’t print bug report template when bin dir is not writable #7748

2.5.12 (2024-06-13)¶ ↑

Enhancements:¶ ↑

• Keep credentials in lockfile if they are already there #7720

• Auto switch to locked bundler version even when using binstubs #7719

• Don’t validate local gemspecs twice unnecessarily #7725

• Improve default gem handling by treating default gems as any other gem #7673

Bug fixes:¶ ↑

• Fix slow and incorrect resolution when adding sorbet to a Gemfile and the lockfile only includes “RUBY” in the platforms section #7731

• Fix duplicated config keys generated when fallback_timeout uri option is used #7704

• Fix bundle exec no longer working in truffleruby after explicit require of pathname was removed #7703

• Don’t let bundle config report a path without a Gemfile as “local app” #7687

Documentation:¶ ↑

• Clarify BUNDLE_USER_CONFIG is a file #7668

2.5.11 (2024-05-28)¶ ↑

Deprecations:¶ ↑

• Deprecate Bundler constants #7653

Enhancements:¶ ↑

• Bump bundle gem generated COC to Contributor Covenant 2.1 #7692

• Retry a full clone when git server does not support shallow capabilities #7649

Bug fixes:¶ ↑

• Fix regression when caching gems from secondary sources #7659

• Fix error when Bundler installation is corrupted #7642

• Fix crash caused by RubyGems require gem activation logic running before Bundler can properly register its own monkeypatches #7647

Performance:¶ ↑

• Update cache checksums to decrease string allocations #7637

• Fix performance regression in applications with a local cache #7680

Documentation:¶ ↑

• Recommend bin/rake over rake in contributing docs #7648

• Monthly man update for May 2024 #7640

• Clarify Bundler support policy #7633

2.5.10 (2024-05-03)¶ ↑

Security:¶ ↑

• Never write credentials to lockfiles #7560

Enhancements:¶ ↑

• Add auto_install support to require “bundler/setup” #6561

• Add --glob flag to bundle add #7557

Bug fixes:¶ ↑

• Make sure bundle update <specific_gems> can always update to the latest resolvable version of each requested gem #7558

• Show better error when installed gemspecs are unreadable #7603

• Fix bundle update not working on an out of sync lockfile #7607

• Don’t upcase Windows ENV before backing it up #7574

• Properly resolve aliases when bundle help is run #7601

• Fix issue installing gems with linux-musl variant on non musl linux #7583

Documentation:¶ ↑

• Clarify bundle check behaviour in docs #7613

2.5.9 (2024-04-12)¶ ↑

Bug fixes:¶ ↑

• Fix installing plugins via relative paths #7571

2.5.8 (2024-04-11)¶ ↑

Enhancements:¶ ↑

• Allow installing plugins from path via CLI #6960

• Improve validation of bundle plugin install options #7529

Bug fixes:¶ ↑

• Fix resolver error message when it runs out of versions due to --strict --patch filtering out everything #7527

• Fix incorrect bundle update --bundler message #7516

2.5.7 (2024-03-22)¶ ↑

Deprecations:¶ ↑

• Deprecate bundle plugin install --local-git= #7048

Enhancements:¶ ↑

• Ignore commented out keys in config file #7514

• Fix exclusion of .gemspec file itself in bundle gem generated gemspec file #7488

• Remove redundant configs from bundle gem generated rubocop configuration #7478

• Add gitlab: git source shorthand #7449

• Use full path for instance_eval in Bundler::DSL#eval_gemfile #7471

Documentation:¶ ↑

• Use https instead of http in documentation links #7481

2.5.6 (2024-02-06)¶ ↑

Deprecations:¶ ↑

• Refactor lockfile generation and deprecate Definition#lock with explicit lockfile #7047

Enhancements:¶ ↑

• Bump required_ruby_version to be used in bundle gem template #7430

Bug fixes:¶ ↑

• Fix musl platform not being added to the lockfile #7441

• Let Bundler.with_original_env properly restore env variables originally empty #7383

2.5.5 (2024-01-18)¶ ↑

Bug fixes:¶ ↑

• Fix development dependency not being added if introduced by two gemspecs #7358

• Fix ETag quoting regression in If-None-Match header of compact index request #7352

Documentation:¶ ↑

• Refer to underscores as underscores #7364

2.5.4 (2024-01-04)¶ ↑

Bug fixes:¶ ↑

• Fix resolution when different platform specific gems have different dependencies #7324

2.5.3 (2023-12-22)¶ ↑

Bug fixes:¶ ↑

• Fix incorrect error when Gemfile overrides a gemspec development dependency #7319

2.5.2 (2023-12-21)¶ ↑

Enhancements:¶ ↑

• Avoid vendored thor gem polluting the global namespace #7305

Bug fixes:¶ ↑

• Fix bundle update --bundler when latest version does not support current ruby #7310

• Fix incorrect lockfiles being generated in some situations #7307

• Fix incorrect re-resolve messages #7306

2.5.1 (2023-12-15)¶ ↑

Bug fixes:¶ ↑

• Fix ruby Gemfile DSL with file: parameter no longer working #7288

Performance:¶ ↑

• Save array allocation for every dependency in Gemfile #7270

2.5.0 (2023-12-15)¶ ↑

Breaking changes:¶ ↑

• Drop ruby 2.6 and 2.7 support #7116

• The :mswin, :mswin64, :mingw, and :x64_mingw Gemfile platform values are soft-deprecated and aliased to :windows #6391

Features:¶ ↑

• Leverage ruby feature to warn when requiring default gems not included in the bundle that will be turned into bundled gems in the future #6831

• Introduce bundle config set version feature to choose the version of Bundler that should be used and potentially disable using the lockfile version by setting it to system #6817

Performance:¶ ↑

• Use match? when regexp match data is unused #7263

• Avoid some allocations when evaluating ruby Gemfile DSL #7251

• Reduce array allocations when loading definition #7199

• Avoid re-compiling static regexp in a loop #7198

• Reduce allocations when installing gems with bundler #6977

• Use a shared connection pool for fetching gems #7079

• Reduce allocations when parsing compact index #6971

Enhancements:¶ ↑

• Add 3.4 as a supported ruby version in Gemfile DSL #7264

• Improve install advice when some gems are not found #7265

• Vendor net-http, net-protocol, resolv, and timeout to reduce conflicts between Gemfile gems and internal dependencies #6793

• Allow bundle pristine to run in parallel #6927

• Make bundle lock always touch the lockfile in non-frozen mode #7220

• Use Minitest::TestTask in a template file for minitest #7234

• Add missing services to CI detection and make it consistent between RubyGems and Bundler #7205

• Allow auto-install to install missing git gems #7197

• Stop remembering cli flags like --jobs or --retry in configuration #7191

• Simplify remembered flags deprecation message #7189

• Make sure to require "rubygems" explicitly #7139

• Handle development dependencies duplicated in gemspec vs Gemfile #6014

• Make lockfiles generated on macOS include a lock for Linux by default #5700

• Only add a dummy bundler spec to the metadata source when necessary #4443

Bug fixes:¶ ↑

• Resolve ruby file: ".ruby-version" relative to containing Gemfile #7250

• Implement opaque ETag in Compact Index to avoid falling back to old index in servers with different etag implementations #7122

• Fix bundle install --system deprecation advice #7190

• Fix invalid platform removal missing adjacent platforms #7170

Documentation:¶ ↑

• Add missing –prefer-local to Synopsis in bundle-install.1.ronn #7194

• Update GitHub organization of Standard Ruby in bundle gem output and generated configuration #6818

• Replace “prior to” with “immediately after” in bundle gem generated README file #6338

2.4.22 (2023-11-09)¶ ↑

Enhancements:¶ ↑

• Add Bundler::Plugin.loaded? helper #6964

• Give better error when previous installation folder is insecure to remove #7030

• Set file path when eval-ing local specification in EndpointSpecification #7106

• Git ignore the proper files for the CI service selected for bundle gem #7101

• Update vendored thor to v1.3.0 #7078

• Restore using old way of passing Ruby version to resolver #7066

• Bump vendored net-http-persistent to 4.0.2 #6787

Bug fixes:¶ ↑

• Fix regression when installing native extensions on universal rubies #7077

• Only remove bundler plugin gem when it’s inside the cache #7001

• Don’t show bug report template when GEM_HOME has no writable bit #7113

• Fix regression in old git versions #7114

• Handle empty array at built-in YAML serializer #7099

• Fix force_ruby_platform: when the lockfile only locks the ruby platform #6936

2.4.21 (2023-10-17)¶ ↑

Enhancements:¶ ↑

• Avoid duplicates -rbundler/setup in RUBYOPT with Ruby preview #7002

• Prevent gem activation in standalone mode #6925

• Support Ruby’s preview version format (Ex: 3.3.0-preview2) in Gemfile #7016

• Fix bundle install when older revisions of git source #6980

• Remove usage of Dir.chdir that only execute a subprocess #6930

Bug fixes:¶ ↑

• Don’t delete the release version from pre-release string more than once #7054

• Make the lock command not be affected by the frozen setting #7034

• Raise an error when adding a gem incompatible with some locked platform #7035

• Re-resolve when lockfile is invalid #7020

• Don’t re-resolve with prereleases if unlocked gem has no prereleases #7021

• Include gemspec in ExtensionTask for native gem tasks #7015

• Avoid error reporting relative path when validating frozen #5128

• Fix bundle lock --minor --update <dep> edge case #6992

• Stop bundler eagerly loading all specs with exts #6945

Performance:¶ ↑

• Reduce allocations when parsing lockfile #6976

• Stop allocating the same settings keys repeatedly #6963

Documentation:¶ ↑

• Improve formatting and global source information in bundle plugin man page #7045

• Update man page of bundle exec to reflect default true of flag --keep-file-descriptors #7033

2.4.20 (2023-09-27)¶ ↑

Enhancements:¶ ↑

• Bump actions/checkout to v4 in bundler gem template #6966

• Add support for the ruby-3.2.2 format in the ruby file: Gemfile directive, and explicitly test the gemset at 3.2.2 format as rejected #6954

• Support ruby file: ".tool-versions" in Gemfile #6898

• Unify LockfileParser loading of SPECS section #6933

• Only check circular deps when dependency api is available, not on full index sources #6919

Bug fixes:¶ ↑

• Allow standalone mode to work on a Windows edge case #6989

• Fix bundle outdated crashing when both ref and branch specified for a git gem in Gemfile #6959

• Fix bundle update --redownload #6924

• Fixed malformed bundler version in lockfile making Bundler crash #6920

• Fix standalone install crashing when using legacy gemfiles with multiple global sources #6918

• Resolve ruby version file relative to bundle root #6892

Performance:¶ ↑

• Lazily construct fetcher debug messages #6973

• Avoid allocating empty hashes in Index #6962

• Improve Bundler::Index efficiency by removing unnecessary creation and dups #6931

• (Further) Improve Bundler::Settings#[] performance and memory usage #6923

• Don’t use full indexes unnecessarily on legacy Gemfiles #6916

• Improve memory usage in Bundler::Settings, and thus improve boot time #6884

2.4.19 (2023-08-17)¶ ↑

Enhancements:¶ ↑

• Add file option to ruby method in Gemfile #6876

• Show better error when PAT can’t authenticate to a private server #6871

• Don’t fallback to old dependency API when bad credentials are configured #6869

Bug fixes:¶ ↑

• Fix git source conservativeness #6850

Documentation:¶ ↑

• Clarify that bundle info takes a gem name #6875

2.4.18 (2023-08-02)¶ ↑

Security:¶ ↑

• Merge URI-0.12.2 for Bundler #6779

Enhancements:¶ ↑

• Update Magnus version in Rust extension gem template #6843

Documentation:¶ ↑

• Update bundle-outdated(1) man to use table output #6833

2.4.17 (2023-07-14)¶ ↑

Enhancements:¶ ↑

• Avoid printing “Using …” messages when version has not changed #6804

Bug fixes:¶ ↑

• Fix bundler/setup unintendedly writing to the filesystem #6814

2.4.16 (2023-07-10)¶ ↑

Bug fixes:¶ ↑

• Exclude Bundler from missing locked dependencies check #6792

• Fix another incorrect removal of “ruby” platform from lockfile when changing path sources #6784

• Fix git source lockfile instability #6786

Documentation:¶ ↑

• gemfile.5: Code format the default glob to escape Markdown #6790

2.4.15 (2023-06-29)¶ ↑

Enhancements:¶ ↑

• Improve edge case error message #6733

Bug fixes:¶ ↑

• Fix bundle lock --update --bundler #6213

2.4.14 (2023-06-12)¶ ↑

Enhancements:¶ ↑

• Stop publishing Gemfile in default gem template #6723

• Avoid infinite loops when hitting resolution bugs #6722

• Make LockfileParser usable with just a lockfile #6694

• Always rely on $LOAD_PATH when jumping from exe/ to lib/ #6702

• Make frozen setting take precedence over deployment setting #6685

• Show an error when trying to update bundler in frozen mode #6684

Bug fixes:¶ ↑

• Fix deployment vs path precedence #6703

• Fix inline mode with multiple sources #6699

2.4.13 (2023-05-09)¶ ↑

Bug fixes:¶ ↑

• Fix unexpected fallbacks to full index by adding FalseClass and Time to the SafeMarshal list #6655

Documentation:¶ ↑

• Fix broken hyperlinks in bundle cache documentation #6606

2.4.12 (2023-04-11)¶ ↑

Enhancements:¶ ↑

• Remove reference to pry gem from generated bin/console file #6515

2.4.11 (2023-04-10)¶ ↑

Security:¶ ↑

• Use URI-0.12.1 (safe against CVE-2023-28755 ReDoS vulnerability) #6558

Enhancements:¶ ↑

• Remove one fallback to full indexes on big gemfiles #6578

• Generate native gems with -fvisibility=hidden #6541

Bug fixes:¶ ↑

• Fix resolver hangs when dealing with an incomplete lockfile #6552

• Fix prereleases not being considered by gem version promoter when there’s no lockfile #6537

2.4.10 (2023-03-27)¶ ↑

Bug fixes:¶ ↑

• Fix some unnecessary top level dependency downgrades #6535

• Fix incorrect ruby platform removal from lockfile when adding Gemfile dependencies #6540

• Fix installing plugins in frozen mode #6543

• Restore “enumerability” of SpecSet #6532

2.4.9 (2023-03-20)¶ ↑

Security:¶ ↑

• Don’t recommend --full-index on errors #6493

Enhancements:¶ ↑

• Fix duplicated specs in some error messages #6475

• When running bundle lock --update <name>, checkout locked revision of unrelated git sources directly #6459

• Avoid expiring git sources when unnecessary #6458

• Use RbSys::ExtensionTask when creating new rust gems #6352

• Don’t ignore pre-releases when there’s only one candidate #6441

Bug fixes:¶ ↑

• Fix incorrect removal of ruby platform when auto-healing corrupted lockfiles #6495

• Don’t consider platform specific candidates when force_ruby_platform set #6442

• Better deal with circular dependencies #6330

Documentation:¶ ↑

• Add debugging docs #6387

• Document our current release policy #6450

2.4.8 (2023-03-08)¶ ↑

Security:¶ ↑

• Safe load all marshaled data #6384

Enhancements:¶ ↑

• Better suggestion when bundler/setup fails due to missing gems and Gemfile is not the default #6428

• Simplify the gem package file filter in the gemspec template #6344

• Auto-heal corrupted Gemfile.lock with no specs #6423

• Auto-heal on corrupted lockfile with missing deps #6400

• Give a better message when Gemfile branch does not exist #6383

Bug fixes:¶ ↑

• Respect –no-install option for git: sources #6088

• Fix gems.rb lockfile for bundler version lookup in template #6413

Documentation:¶ ↑

• Switch supporting explanations to all Ruby Central #6419

2.4.7 (2023-02-15)¶ ↑

Enhancements:¶ ↑

• Add --gemfile flag to bundle init to configure gemfile name to generate #6046

• Improve solve failure explanations by using better wording #6366

• Restore better error message when locked ref does not exist #6356

• Avoid crashing when installing from a corrupted lockfile #6355

• Improve wording of unmet dependencies warning #6357

• Add Ruby 3.2 and 3.3 platforms to Gemfile DSL #6346

Bug fixes:¶ ↑

• Fix crash in pub grub involving empty ranges #6365

• Make gemspec file generated by bundle gem properly exclude itself from packaged gem #6339

• Preserve relative path sources in standalone setup #6327

2.4.6 (2023-01-31)¶ ↑

Enhancements:¶ ↑

• Don’t warn on bundle binstubs --standalone --all #6312

Bug fixes:¶ ↑

• Don’t undo require decorations made by other gems #6308

• Fix bundler/inline not properly installing gems with extensions when used more than once #6306

• Fix bundler/inline not skipping installation when gems already there, when used more than once #6305

2.4.5 (2023-01-21)¶ ↑

Bug fixes:¶ ↑

• Fix bundler/inline not resolving properly if gems not preinstalled #6282

• Fix packages for external platforms being introduced in lockfile when Bundler retries resolution #6285

Documentation:¶ ↑

• Update bundle-exec man page to not use deprecated Bundler.with_clean_env #6284

2.4.4 (2023-01-16)¶ ↑

Bug fixes:¶ ↑

• Fix platform specific gems removed from the lockfile #6266

• Properly handle incompatibilities on platform specific gems #6270

• Optimistically exclude prereleases from initial resolution #6246

• Fix another case of not properly falling back to ruby variant when materializing #6261

• Skip setting BUNDLER_SETUP on Ruby 2.6 #6252

• Let resolver deal with legacy gems with equivalent version and different dependencies #6219

2.4.3 (2023-01-06)¶ ↑

Enhancements:¶ ↑

• Enhance bundle open command to allow opening subdir/file of gem #6146

Bug fixes:¶ ↑

• Fix pointing GitHub sources to PRs #6241

• Fix version ranges incorrectly handling platforms #6240

• Cleanup unnecessary gems when removing lockfile platforms #6234

• When auto-removing RUBY platform don’t add specific platform if not needed #6233

• Fallback to selecting installable candidates if possible when materializing specs #6225

Documentation:¶ ↑

• Fix several typos #6224

2.4.2 (2023-01-01)¶ ↑

Performance:¶ ↑

• Speed up resolution by properly merging incompatibility ranges #6215

Documentation:¶ ↑

• Remove stray word in bundle config man page #6220

2.4.1 (2022-12-24)¶ ↑

Enhancements:¶ ↑

• Allow Bundler to run on old RubyGems + Ruby 2.7 without warnings #6187

Bug fixes:¶ ↑

• Fix dependencies scoped to other platforms making resolver fail #6189

• Restore annotated git tag support #6186

2.4.0 (2022-12-24)¶ ↑

Security:¶ ↑

• In README generated by bundle gem, do not fill rubygems.org install commands with the gem name automatically #6093

• Use safe Marshal deserialization for dependency API response #6141

Breaking changes:¶ ↑

• Remove Travis CI from gem skeleton #6150

• Drop support for Ruby 2.3, 2.4, 2.5 and RubyGems 2.5, 2.6, 2.7 #6107

• Completely remove “auto-sudo” feature #5888

Deprecations:¶ ↑

• Turn --ext option of bundle gem into string. Deprecate usage without explicit value #6144

Features:¶ ↑

• Add --ext=rust support to bundle gem for creating simple gems with Rust extensions #6149

• Migrate our resolver engine to PubGrub #5960

Performance:¶ ↑

• Make cloning git repos faster #4475

Enhancements:¶ ↑

• Add bundle lock --update --bundler #6134

• Support for pre flag in bundle update/bundle lock #5258

• Improve error message when changing Gemfile to a mistyped git ref #6130

• Remove special handling of some LoadError and NoMethodError #6115

Bug fixes:¶ ↑

• Don’t unlock dependencies of a gemspec when its version changes #6184

• Fix platform specific version for libv8-node and other allowlisted gems not being chosen in Truffleruby #6169

• Fix bundle outdated with both --groups and --parseable flags #6148

• Auto-heal lockfile when it’s missing specs #6132

• Fix unintentional downgrades when gemspec DSL is used #6131

• Fix display of previous gem version when previously downloaded already #6110

• Fix hang when a lockfile gem does not resolve on the current platform #6070

Documentation:¶ ↑

• Improve Bundler setup docs for development #6154

• Fx link in bundle-platform man page #6071

2.3.26 (2022-11-16)¶ ↑

Enhancements:¶ ↑

• Map ‘universal’ to the real arch in Bundler for prebuilt gem selection #5978

Documentation:¶ ↑

• Fix ‘–force’ option documentation of ‘bundle clean’ #6050

2.3.25 (2022-11-02)¶ ↑

Bug fixes:¶ ↑

• Properly sort specs when materializing #6015

• Fix bad unfreeze recommendation #6013

Documentation:¶ ↑

• Bring docs for gemfile(5) manpage up to date #6007

• Fix github DSL docs to mention they use https protocol over git under the hood #5993

2.3.24 (2022-10-17)¶ ↑

Enhancements:¶ ↑

• Only add extra resolver spec group for Ruby platform when needed #5698

• Fix little UI issue when bundler shows duplicated gems in a list #5965

Bug fixes:¶ ↑

• Fix incorrect materialization on Windows #5975

2.3.23 (2022-10-05)¶ ↑

Enhancements:¶ ↑

• Update GitLab CI template with new one #5944

Bug fixes:¶ ↑

• Fix bundle init not respecting umask in generated gem’s Gemfile #5947

Performance:¶ ↑

• Further speed up Bundler by not sorting specs unnecessarily #5868

Documentation:¶ ↑

• Update Bundler new feature instructions #5912

2.3.22 (2022-09-07)¶ ↑

Enhancements:¶ ↑

• Use a more accurate source code uri in gemspec #5896

• Support --path option in bundle add #5897

• Improve lockfile dependency unlocking #5881

• Add platform alias :windows to Gemfile DSL #5650

• Make to_lock consistent between Gem::Dependency and Bundler::Dependency #5872

• Support marshaled index specifications with nil required ruby version #5824

Bug fixes:¶ ↑

• Fix resolution hanging on musl platforms #5875

• Fix another regression affecting the sorbet family of gems #5874

Documentation:¶ ↑

• Introduce bundle-console(1) man #5901

• Introduce bundle-version(1) man #5895

• Introduce bundle-help(1) man #5886

2.3.21 (2022-08-24)¶ ↑

Enhancements:¶ ↑

• Backport non gnu libc linux support from RubyGems #4488

• Improve Bundler.rm_rf error message #5861

• Disallow both --branch and --ref at the same time in bundle-plugin #5855

• Restore previous performance of private RubyGems servers #5826

Bug fixes:¶ ↑

• Fix conservative update downgrading top level gems #5847

• Fix edge case where bundler/inline unintentionally skips install #5848

• Fix bundle platform crash when there’s a lockfile with no Ruby locked #5850

• Fix crash when incomplete locked specifications are found in transitive dependencies #5840

• Fix Ruby platform incorrectly removed on bundle update #5832

Documentation:¶ ↑

• Explain cancelled CLI deprecations clearly #5864

• Improve bundle config command synopsis #5854

• Introduce bundle-plugin(1) man #5853

2.3.20 (2022-08-10)¶ ↑

Enhancements:¶ ↑

• Consistently ignore patchlevel when reporting bundle platform --ruby #5793

• Make --standalone play nice with --local #5762

• Implement bundle install --prefer-local #5761

Bug fixes:¶ ↑

• Fix regression where yanked gems are now unintentionally updated when other gems are unlocked #5812

• Automatically remove “ruby” from lockfile if incomplete #5807

• Fix bundle outdated --strict showing too many outdated gems #5798

• Don’t discard candidates matching Ruby metadata #5784

• Fix bundle outdated crash in debug mode #5796

• Fix ruby DSL requirement matching for head and prerelease rubies #5766

Documentation:¶ ↑

• Update Bundler support policies to match what we do these days #5813

• Fix arguments for bundle-config(1) docs #5804

• Improve bundle platform man page #5788

• Remove bundle cache from deprecated commands list, and consistently link to bundle cache in man pages #5783

• Add package/pack aliases to man pages for cache #5785

• Add deprecation notice of bundle console #5775

2.3.19 (2022-07-27)¶ ↑

Enhancements:¶ ↑

• Add Bundler.settings[:only] to install gems of the specified groups #5759

• Add ignore_funding_requests config flag #5767

• Prevent random crash when autoloading Pathname #5769

• Don’t corrupt lockfile when user moves a gem that’s already in the lockfile to an incorrect source by mistake #5070

• Reconcile error/warning message for multiple global sources with documentation #5741

• Improve error message when gems cannot be found to include the source for each gem #5729

Bug fixes:¶ ↑

• Fix yet another TruffleRuby platform selection regression #5746

• Show a proper error if extension dir is not writable #5726

Performance:¶ ↑

• Lazily check incomplete lockfile to improve performance #5546

Documentation:¶ ↑

• Add deprecation notice of bundle inject #5776

• Add deprecation notice of bundle viz to man pages #5765

• Update command example in bundle exec man page #5754

• Remove bundle show from obsolete commands #5753

• Improve global source(s) documentation #5732

• Use https protocol for URLs for config mirror in bundler man #5722

2.3.18 (2022-07-14)¶ ↑

Enhancements:¶ ↑

• Extend gem DSL with a force_ruby_platform option #4049

Bug fixes:¶ ↑

• Fix misleading error if compact index cannot be copied #5709

• Fix TruffleRuby no longer able to install lockfiles generated with other implementations #5711

• Fix TruffleRuby no longer installing lockfiles using “ruby” platform correctly #5694

• Fix crash when updating vendor cache of default gems #5679

Performance:¶ ↑

• Speed up bundler/setup by using the raw Gemfile.lock information without extra processing whenever possible #5695

Documentation:¶ ↑

• Use modern style hashes in Gemfile DSL docs #5674

2.3.17 (2022-06-29)¶ ↑

Enhancements:¶ ↑

• Add support for platform :x64_mingw to correctly lookup “x64-mingw-ucrt” #5649

• Fix some errors being printed twice in --verbose mode #5654

• Fix extension paths in generated standalone script #5632

Bug fixes:¶ ↑

• Raise if ruby platform is forced and there are no ruby variants #5495

• Fix bundle package --no-install no longer skipping install #5639

Performance:¶ ↑

• Improve performance of Bundler::SpecSet#for by using hash lookup of handled deps #5537

Documentation:¶ ↑

• Fix formatting issue in bundle add man page #5642

2.3.16 (2022-06-15)¶ ↑

Performance:¶ ↑

• Improve performance of installing gems from gem server sources #5614

2.3.15 (2022-06-01)¶ ↑

Enhancements:¶ ↑

• Show better error when previous installation fails to be removed #5564

• Show exception cause in bug report template #5563

Bug fixes:¶ ↑

• Fix bundle remove by invalidating cached Bundle.definition #5443

• Fix generated standalone script when it includes default gems #5586

• Skip duplicated dependency warning for gemspec dev deps #5587

• Give better conflict resolution advice #5581

• Fix crash when commenting out a mirror in configuration #5576

• Fix crash when installing gems with symlinks #5570

• Ignore Errno::EROFS errors when creating bundler.lock #5580

• Ignore Errno::EPERM errors when creating bundler.lock #5579

• Fix crash when printing resolution conflicts on metadata requirements #5562

2.3.14 (2022-05-18)¶ ↑

Bug fixes:¶ ↑

• Fix confusing inline mode install output #5530

• Fix error message when locked version of a gem does not support running Ruby #5525

Performance:¶ ↑

• Improve bundler/setup performance again by not deduplicating intermediate results #5533

Documentation:¶ ↑

• Fix typo in documentation #5514

• Update man page for require option in bundle add command #5513

2.3.13 (2022-05-04)¶ ↑

Bug fixes:¶ ↑

• Fix missing required rubygems version when using old APIs #5496

• Fix crash when gem used twice in Gemfile under different platforms #5187

Performance:¶ ↑

• Speed up bundler/setup time #5503

2.3.12 (2022-04-20)¶ ↑

Enhancements:¶ ↑

• Improve Ruby version resolution conflicts #5474

• Stop considering RUBY_PATCHLEVEL for resolution #5472

• Add modern rubies as valid platform values in Gemfile DSL #5469

2.3.11 (2022-04-07)¶ ↑

Enhancements:¶ ↑

• Bump actions/checkout to 3 in bundler gem template #5445

• Prefer __dir__ to __FILE__ #5444

Documentation:¶ ↑

• Update bundler documentation to reflect bundle config scope changes #5441

2.3.10 (2022-03-23)¶ ↑

Enhancements:¶ ↑

• More helpful reporting of marshal loading issues #5416

• Report Github Actions CI provider within user agent string #5400

• Remove extra closing bracket in version warning #5397

2.3.9 (2022-03-09)¶ ↑

Enhancements:¶ ↑

• Add newline to validate_platforms! message when platform is missing #5353

• Suggest quicker bundle add for installation in README.md generated by bundle gem #5337

• Make --strict flag of update and outdated commands consistent #5379

Bug fixes:¶ ↑

• Fix regression when activating gem executables caused by Bundler monkey patches to RubyGems #5386

2.3.8 (2022-02-23)¶ ↑

Bug fixes:¶ ↑

• Fix corrupted lockfile when running bundle check and having to re-resolve locally #5344

• Fix typo in multiple gemfiles warning #5342

Documentation:¶ ↑

• Add clarification for bundle-config “with” option #5346

2.3.7 (2022-02-09)¶ ↑

Enhancements:¶ ↑

• Don’t activate yaml gem from Bundler #5277

• Add Reverse Dependencies section to info command #3966

Bug fixes:¶ ↑

• Don’t silently persist BUNDLE_WITH and BUNDLE_WITHOUT envs locally #5335

• Fix bundle config inside an application saving configuration globally #4152

2.3.6 (2022-01-26)¶ ↑

Enhancements:¶ ↑

• Use Gem::Platform.local instead of RUBY_PLATFORM when displaying local platform #5306

• Lock standard.yml to the required ruby version #5284

• Use Fiddle in bundle doctor to check for dynamic library presence #5173

Bug fixes:¶ ↑

• Fix edge case where gems were incorrectly removed from the lockfile #5302

• Fix force_ruby_platform ignored when lockfile includes current specific platform #5304

• Create minitest file to underscored path in “bundle gem” command with dashed gem name #5273

• Fix regression with old marshaled specs having null required_rubygems_version #5291

2.3.5 (2022-01-12)¶ ↑

Enhancements:¶ ↑

• Make bundle update --bundler actually lock to the latest bundler version (even if not yet installed) #5182

• Use thor-1.2.1 #5260

• Exclude bin directory for newgem template #5259

Bug fixes:¶ ↑

• Fix metadata requirements being bypassed when custom gem servers are used #5256

• Fix rake build:checksum writing checksum of package path, not package contents #5250

2.3.4 (2021-12-29)¶ ↑

Enhancements:¶ ↑

• Improve error message when BUNDLED WITH version does not exist #5205

Bug fixes:¶ ↑

• Fix bundle update --bundler no longer updating lockfile #5224

2.3.3 (2021-12-24)¶ ↑

Bug fixes:¶ ↑

• Fix locked bundler not installed to the right path when deployment is set #5217

2.3.2 (2021-12-23)¶ ↑

Enhancements:¶ ↑

• Remove unnecessary lockfile upgrade warning #5209

2.3.1 (2021-12-22)¶ ↑

Enhancements:¶ ↑

• Vendor latest thor with fixes for latest did_you_mean deprecations #5202

• Avoid unnecessary shellwords require on newer rubygems #5195

• Re-exec prepending command with Gem.ruby if $PROGRAM_NAME is not executable #5193

2.3.0 (2021-12-21)¶ ↑

Features:¶ ↑

• Change bundle install with a lockfile to respect the BUNDLED WITH bundler version #4076

Enhancements:¶ ↑

• Cancel deprecation of custom git sources #5147

• Print warning when running Bundler on potentially problematic RubyGems & Ruby combinations #5177

• Error tracing should be printed to stderr #5179

• Add github and ref options to bundle add #5159

• Add require parameter to bundle add #5021

• Enable parallel installation on Windows by default #4822

• More logging when compact index is not used and we fallback to other APIs #4546

• bundle gem generated MiniTest file and class now start with ‘test’ #3893

• Add Bundler::Definition.no_lock accessor for skipping lockfile creation/update #3401

Bug fixes:¶ ↑

• Fix crash when when no platform specific matches exist and show a proper error #5168

• Ignore dependencies not actually locked from frozen check #5152

• Fix bundle cache --all-platforms on Windows #4552

Documentation:¶ ↑

• Fix gemspec template typo #4545

2.2.33 (2021-12-07)¶ ↑

Security fixes:¶ ↑

• Pass “–” to git commands to separate positional and optional args #5142

Enhancements:¶ ↑

• Accept pull request URLs as github source #5126

• Add --version parameter to bundle info command #5137

• Let original Errno::EACCES error be raised in compact index updater #5110

• Improve gemfile-lockfile source equivalence errors #5120

• Avoid float-to-string loss of characters in GitHub Actions configuration labels in new gem template #5089

• Add an initial rbs template to bundle gem skeleton #5041

• Avoid shared libraries not getting environment passed right after argv in memory when bundle exec is used #4815

Bug fixes:¶ ↑

• Don’t cleanup paths from gems already activated from $LOAD_PATH #5111

• Fix handling prereleases of 0 versions, like 0.0.0.dev or 0.0.0.SNAPSHOT #5116

• Fix escape of filenames in bundle doctor #5102

• Don’t unlock dependencies when running bundle install after changing global source #5090

• Fix missing locked specs when depended on another platform #5092

• Fix bundle info sometimes claiming that bundler has been deleted #5097

Documentation:¶ ↑

• Ignore to generate the documentation from vendored libraries #5118

2.2.32 (2021-11-23)¶ ↑

Enhancements:¶ ↑

• Clarify bundle viz deprecation #5083

• Unlock dependencies that no longer match lockfile #5068

• Use shellsplit instead of array of strings for git push #5062

• Re-enable default_ignores option for standard #5003

Bug fixes:¶ ↑

• Fix downgrading dependencies by changing the Gemfile and running bundle update #5078

2.2.31 (2021-11-08)¶ ↑

Enhancements:¶ ↑

• Link to working bundler-graph plugin in bundle viz deprecation message #5061

• Memoize materialized specs when requiring bundler/setup #5033

• Allow custom LicenseRef #5013

• Better error when installing a lockfile with git sources and git is not installed #5036

• Only delete cached gem when it’s corrupted #5031

• Support gemified tsort #5032

• Add standard option alongside rubocop to bundle gem #4411

Bug fixes:¶ ↑

• Fix system man pages no longer working after bundler overrides MANPATH #5039

• Don’t warn when a lockfile is locked to a dev version #5018

2.2.30 (2021-10-26)¶ ↑

Enhancements:¶ ↑

• Add a custom SHA1 digest implementation to no longer depend on the digest gem before we know which version to activate #4989

• Ensure vendored gems have licenses #4998

• Update broken link in Bundler::Fetcher::CertificateFailureError #4987

• Give better errors for some permission issues #4965

• Print better errors when bundler/gem_tasks fail #4872

• Fix bundle install to reinstall deleted gems #4974

• Unify issue template and ISSUES.md document #4980

• Bump vendored connection_pool to 2.2.5 #4738

Bug fixes:¶ ↑

• Fix error message pointing to non existing file when using a global gem cache #4999

• Fix install crash when lockfile has missing dependencies for the current platform #4941

• Make bundle info show a proper warning every time it finds a deleted gem #4971

2.2.29 (2021-10-08)¶ ↑

Enhancements:¶ ↑

• Require at least Ruby 2.6.0 for gems created with recent rubies #4920

• Include glob information in string representation of git sources to make generated lockfiles deterministic #4947

• Add missing rubygem_push prerequisite #4930

2.2.28 (2021-09-23)¶ ↑

Enhancements:¶ ↑

• Use example.com in new gem template, since it will never have a potentially dangerous backing website #4918

• Deprecate --install flag to bundle remove and trigger install by default #4891

2.2.27 (2021-09-03)¶ ↑

Enhancements:¶ ↑

• Optimize some requires #4887

• Correctly redact credentials when using x-oauth-basic #4866

Bug fixes:¶ ↑

• Add missing key branches: to template for GitHub Actions #4883

• Fix bundle plugin install detection of already installed plugins #4869

• Make plugin installation idempotent #4864

• Fix bundle check showing duplicated gems when multiple platforms are locked #4854

• Fix bundle check incorrectly considering cached gems #4853

2.2.26 (2021-08-17)¶ ↑

Enhancements:¶ ↑

• Remove RUBYGEMS_GEMDEPS warning #4827

• Better defaults for GitHub Actions template generated by bundle gem #4619

• Make bundle exec keep file descriptors by default #4812

• Exclude gemspec file itself from file list of gems generated by bundle gem #4650

• Fix a couple small typos in deprecation / error messages #4806

• Make script generated by bundle install --standalone resilient to moving the application to a differently nested folder when path sources are used #4792

• Exclude CI files and issue templates from file list of gems generated by bundle gem #4033

Bug fixes:¶ ↑

• Respect BUNDLE_USER_HOME env when choosing config location #4828

• Fix bundle gem on path with spaces #4816

• Fix bundler hitting the network in some cases where not allowed #4805

2.2.25 (2021-07-30)¶ ↑

Deprecations:¶ ↑

• Deprecate Gemfile without an explicit global source #4779

• Deprecate bundle cache --path #4496

Enhancements:¶ ↑

• Give better errors when materialization fails #4788

• Lazily load shellwords library #4786

• Show original error and backtrace directly on bundle install errors instead of a more brittle gem install hint #4778

• Remove LoadError message in regards to requiring a relative file #4772

Bug fixes:¶ ↑

• Fix BUNDLE_USER_CONFIG no longer respected as config location #4797

• Fix --standalone installation of default gems #4782

• Fix --quiet flag not printing warnings #4781

• Fix bundler binstub version selection #4775

• Fix interrupt handling in Bundler workers #4767

2.2.24 (2021-07-15)¶ ↑

Bug fixes:¶ ↑

• Fix development gem unintentionally removed on an edge case #4751

• Fix dangling empty plugin hooks #4755

• Fix bundle plugin install --help showing bundle install‘s help #4756

• Make sure bundle check shows uniq missing gems #4749

Performance:¶ ↑

• Slightly speed up bundler/setup #4750

2.2.23 (2021-07-09)¶ ↑

Enhancements:¶ ↑

• Fix bundle install on truffleruby selecting incorrect variant for sorbet-static gem #4625

• Spare meaningless warning on read-only bundle invocations #4724

Bug fixes:¶ ↑

• Fix incorrect warning about duplicated gems in the Gemfile #4732

• Fix bundle plugin install foo crashing #4734

2.2.22 (2021-07-06)¶ ↑

Enhancements:¶ ↑

• Never downgrade indirect dependencies when running bundle update #4713

• Fix getaddrinfo errors not treated as fatal on non darwin platforms #4703

Bug fixes:¶ ↑

• Fix bundle update <gem> sometimes hanging and bundle lock --update not being able to update an insecure lockfile to the new format if it requires downgrades #4652

• Fix edge case combination of DSL methods and duplicated sources causing gems to not be found #4711

• Fix bundle doctor crashing when finding a broken symlink #4707

• Fix incorrect re-resolve edge case #4700

• Fix some gems being unintentionally locked under multiple lockfile sections #4701

• Fix --conservative flag unexpectedly updating indirect dependencies. NOTE: As part of this bug fix, some undocumented, unintentional code causing bundle update --source <gem> to update conservatively was fixed. Use the documented bundle update --conservative <gem> instead #4692

2.2.21 (2021-06-23)¶ ↑

Security fixes:¶ ↑

• Auto-update insecure lockfile to split GEM source sections whenever possible #4647

Enhancements:¶ ↑

• Use a more limited number of threads when fetching in parallel from the Compact Index API #4670

• Update TODO link in bundle gem template to https #4671

Bug fixes:¶ ↑

• Fix bundle install --local hitting the network when cache_all_platforms configured #4677

2.2.20 (2021-06-11)¶ ↑

Enhancements:¶ ↑

• Don’t print bug report template on server side errors #4663

• Don’t load resolv unnecessarily #4640

Bug fixes:¶ ↑

• Fix bundle outdated edge case #4648

• Fix bundle check with scoped rubygems sources #4639

Performance:¶ ↑

• Don’t use extra_rdoc_files with md files in gemspec to make installing bundler with docs faster #4628

2.2.19 (2021-05-31)¶ ↑

Bug fixes:¶ ↑

• Restore support for configuration keys with dashes #4582

• Fix some cached gems being unintentionally ignored when using rubygems 3.2.18 #4623

2.2.18 (2021-05-25)¶ ↑

Security fixes:¶ ↑

• Fix dependency confusion issues with implicit dependencies #4609

Enhancements:¶ ↑

• Use simpler notation for generated required_ruby_version #4598

• Undeprecate bundle show #4586

• Make sure link to new issue uses the proper template #4592

Bug fixes:¶ ↑

• Fix platform specific gems being removed from the lockfile #4580

2.2.17 (2021-05-05)¶ ↑

Enhancements:¶ ↑

• Improve authentication required error message to include an alternative using ENV #4565

• Discard partial range responses without etag #4563

• Fix configuring ENV for a gem server with a name including dashes #4571

• Redact credentials from bundle env and bundle config #4566

• Redact all sources in verbose mode #4564

• Improve bundle pristine error if BUNDLE_GEMFILE does not exist #4536

• [CurrentRuby] Add 3.0 as a known minor #4535

• Prefer File.read instead of IO.read #4530

• Add space after open curly bracket in Gemfile and gems.rb template #4518

Bug fixes:¶ ↑

• Make sure specs are fetched from the right source when materializing #4562

• Fix bundle cache with an up-to-date lockfile and specs not already installed #4554

• Ignore deployment setting in inline mode #4523

Performance:¶ ↑

• Don’t materialize resolutions when not necessary #4556

2.2.16 (2021-04-08)¶ ↑

Enhancements:¶ ↑

• Add --github-username option and config to bundle gem #3687

• Bump vendored tmpdir library copy #4506

• Add rake build:checksum task to build checksums for a gem package #4156

• Enable bundler-cache for GitHub Actions template #4498

• Improve bundle info error when gem is on a “disabled” group #4492

• Small tweak to yank message #4494

• Don’t show duplicate entries in bundle outdated output #4474

• Never downgrade top level gems when running bundle update #4473

Bug fixes:¶ ↑

• Fix incorrect logic for filtering metadata matching candidates #4497

2.2.15 (2021-03-19)¶ ↑

Enhancements:¶ ↑

• Add a hint about bundler installing executables for path gems #4461

• Warn lockfiles with incorrect resolutions #4459

• Don’t generate duplicate redundant sources in the lockfile #4456

Bug fixes:¶ ↑

• Respect running ruby when resolving platforms #4449

2.2.14 (2021-03-08)¶ ↑

Security fixes:¶ ↑

• Lock GEM sources separately and fix locally installed specs confusing bundler #4381

Bug fixes:¶ ↑

• Make rake available to other gems’ installers right after it’s installed #4428

• Fix encoding issue on compact index updater #4362

2.2.13 (2021-03-03)¶ ↑

Enhancements:¶ ↑

• Respect user configured default branch in README links in new generated gems #4303

Bug fixes:¶ ↑

• Fix gems sometimes being pulled from irrelevant sources #4418

2.2.12 (2021-03-01)¶ ↑

Bug fixes:¶ ↑

• Fix sporadic warnings about nil gemspec on install/update and make those faster #4409

• Fix deployment install with duplicate path gems added to Gemfile #4410

2.2.11 (2021-02-17)¶ ↑

Bug fixes:¶ ↑

• Revert disable_multisource changes #4385

2.2.10 (2021-02-15)¶ ↑

Security fixes:¶ ↑

• Fix source priority for transitive dependencies and split lockfile rubygems source sections #3655

Bug fixes:¶ ↑

• Fix adding platforms to lockfile sometimes conflicting on ruby requirements #4371

• Fix bundler sometimes choosing ruby variants over java ones #4367

Documentation:¶ ↑

• Update man pages to reflect to new default for bundle install jobs #4188

2.2.9 (2021-02-08)¶ ↑

Enhancements:¶ ↑

• Stop removing existing platforms when force_ruby_platform is true #4336

Bug fixes:¶ ↑

• Don’t install platform specific gems on truffleruby #4333

2.2.8 (2021-02-02)¶ ↑

Enhancements:¶ ↑

• Add a CHANGELOG.md file to gems generated by bundle gem #4093

• Support gemified set #4297

Bug fixes:¶ ↑

• Fix standalone Kernel.require visibility #4337

Performance:¶ ↑

• Fix resolver edge cases and speed up bundler #4277

2.2.7 (2021-01-26)¶ ↑

Enhancements:¶ ↑

• Improve error messages when dependency on bundler conflicts with running version #4308

• Avoid showing platforms with requirements in error messages #4310

• Introduce disable_local_revision_check config #4237

• Reverse rubygems require mixin with bundler standalone #4299

Bug fixes:¶ ↑

• Fix releasing from a not yet pushed branch #4309

• Install cache only once if it already exists #4304

• Fix force_ruby_platform no longer being respected #4302

Performance:¶ ↑

• Fix resolver dependency comparison #4289

2.2.6 (2021-01-18)¶ ↑

Enhancements:¶ ↑

• Improve resolver debugging #4288

Bug fixes:¶ ↑

• Fix dependency locking for path source #4293

Performance:¶ ↑

• Speed up complex dependency resolves by creating DepProxy factory and cache #4216

2.2.5 (2021-01-11)¶ ↑

Enhancements:¶ ↑

• Improve rubocop setup in the new gem template #4220

• Support repositories with default branch not named master #4224

Bug fixes:¶ ↑

• Let Net::HTTP decompress the index instead of doing it manually #4081

• Workaround for another jruby crash when autoloading a constant #4252

• Fix another performance regression in the resolver #4243

• Restore support for old git versions #4233

• Give a proper error if cache path does not have write access #4215

• Fix running rake release from an ambiguous ref #4219

2.2.4 (2020-12-31)¶ ↑

Bug fixes:¶ ↑

• Fix bundle man pages display on truffleruby #4209

• Fix Windows + JRuby no longer being able to install git sources #4196

2.2.3 (2020-12-22)¶ ↑

Bug fixes:¶ ↑

• Restore full compatibility with previous lockfiles #4179

• Add all matching variants with the same platform specificity to the lockfile #4180

• Fix bundler installing gems for a different platform when running in frozen mode and current platform not in the lockfile #4172

• Fix crash when bundle exec‘ing to bundler #4175

2.2.2 (2020-12-17)¶ ↑

Bug fixes:¶ ↑

• Fix resolver crash when a candidate has 0 matching platforms #4163

• Restore change to copy global with/without config locally upon bundle install #4154

2.2.1 (2020-12-14)¶ ↑

Bug fixes:¶ ↑

• Ad-hoc fix for platform regression #4127

• Workaround JRuby + Windows issue with net-http-persistent vendored code #4138

• Reset also root when in a nested invocation #4140

• Restore 2.1.4 resolution times #4134

• Fix bundle outdated --strict crash #4133

• Autoload Bundler::RemoteSpecification to workaround crash on jruby #4114

2.2.0 (2020-12-07)¶ ↑

Enhancements:¶ ↑

• New gem template: prefer require_relative to require #4066

• Always show underlying error when fetching specs fails #4061

• Add --all-platforms flag to bundle binstubs to generate binstubs for all platforms #3886

• Improve gem not found in source error messages #4019

• Revert resolving all Gemfile platforms automatically #4052

• Remove extra empty line from README template #4041

• Lazily load erb #4011

Bug fixes:¶ ↑

• Fix Bundler::Plugin::API::Source#to_s having empty source type #4084

• Raise consistent errors with or without bundle exec #4063

• Fix edge case resulting in a crash when using zeitwerk inside a nested bundle exec invocation #4062

• Enable specific_platform by default #4015

• Prevent remove command from deleting gemfile lines that are comments #4045

• Fix issue with cache_all_platforms and specific_platform configured #4042

• Fix incorrect error message on Windows #4039

• Make printed drive letters consistent on Windows #4038

• Load rubygems plugins from RUBYLIB during bundle install and bundle update #3534

• Fix specific_platform and cache_all with bundle cache --all-platforms #4022

• Bring back the possibility to install a plugin from path #4020

• Move ronn pages to lib #3997

• Fix fileutils double load when using bundler/inline #3991

• Accept responses with no etag header #3865

Documentation:¶ ↑

• Fix typo of bundle-install.1 (v2.1) #4079

• Add commented out example and more information link to generated gemspec #4034

2.2.0.rc.2 (2020-10-06)¶ ↑

Features:¶ ↑

• Add bundle fund command #3390

Enhancements:¶ ↑

• Fix ls-files matching regexp #3845

• Remove redundant bundler/setup require from spec_helper.rb generated by bundle gem #3791

Bug fixes:¶ ↑

• Deduplicate spec groups #3965

• Fix some cases of running bundler on a path including brackets #3854

• Don’t warn when deinit’ing submodules #3969

• Make bundle clean --force leave default gem executables untouched #3907

• Prioritize path.system over path when it makes sense #3933

• Sort requirements in Gem::Requirement to succeed comparison with different order #3889

• Print bug report template to standard error #3924

• Restore bundle cache --all in all cases #3914

• Move shebang to the top of bin/console template #3927

• Fix platform issues when running under a frozen bundle #3909

• Fix deprecation messages for bundle install flags, the config should be –local as before #3917

• Look for absolute path when removing bundler/setup from RUBYOPT in Bundler.unbundled_env method #3877

• Fix incorrect re-resolution when path gem excluded and not available #3902

• Fix error when building error message in bundler/inline #3901

• Fix regression related to locked ruby #3900

• Expand load paths in standalone setup.rb file #3522

• Fix broken exception recovery code when installing plugins #3487

• Fix incorrect build info on development versions of bundler, and on bundler versions installed as a default gem #3778

• Avoid autoloading openssl to try help with jruby load service issues #3809

• Fix rake release pushing all local tags instead of only the release tag #3785

• Fix rake release aborting when credentials file is missing, even if properly configured through XDG #3783

Deprecations:¶ ↑

• Deprecate bundle cache --all flag #3932

Documentation:¶ ↑

• Correct grammar in Gemfile docs #3990

• Fix typo in bundle pristine warning message #3959

• Improve human readable fallback version of CLI help messages #3921

• Note CLI flag deprecations in documentation #3915

• Update man page and deprecation warning for binstubs –all #3872

2.2.0.rc.1 (2020-07-02)¶ ↑

Features:¶ ↑

• Windows support. There’s still gotchas and unimplemented features, but a Windows CI is now enforced.

• Full multiplatform support. Bundler should now seamlessly handle multiplatform Gemfile or gems.rb files.

Enhancements:¶ ↑

• bundle info now includes gem metadata #7376

• bundle list --without-group and bundle list --only-group now support space separated list of groups in addition to single groups #7404

• bundle gem now supports a --rubocop flag that adds the rubocop gem to the new gem layout #6455

• bundle gem now supports --test-unit in addition to rspec and minitest as a value for its --test option #5521

• bundle install now uses the available number of processors automatically for concurrent gem install, except for Windows where it still uses a single thread by default #3393 and #3718

• Report Gitlab CI within bundler user-agent string #3432

• Add bundle plugin uninstall #3482

• bundle gem now supports a --ci flag and a gem.ci configuration that adds CI config files for the main CI providers to the generated gem skeleton #3667

• Allow setting a tag prefix to be used by release tasks #3766

• bundle outdated now prints output in columns for better readability #4474

• bundler’s release rake task now prints a better message when not being logged in and trying to push a gem #7513

• BUNDLE_APP_CONFIG environment variable is now documented #7563

• Original exception is now reported when bundler fails to load OpenSSL #7527

• RVM specific instructions for recompiling ruby is no longer recommended when bundler fails to load OpenSSL #7597

• Improve resolver debugging out from resolver #7589 and #7590

• Clarify bundle config --local docs #3408

• Make sure to not “leak” to a different bundler install under any circumstances #3595

• Make sure users messing with $; doesn’t affect us #3602

• Remove explicit psych activation which could potentially lead to packaging-specific issues #3638

• Deprecate --no-deployment flag and never recommend it #3657

• bundle gem test framework defaults to the gem.test setting and asks for a value without overwriting configuration if -t without a value is passed explicitly #3544

• bundle gem now ships with a default .rubocop.yml file and an offense free initial gem skeleton #3731, #3740, #3765

• Remove some requires that might workaround some autoloading issues on jruby #3771

• Unswallow an error that should make some random crashes on jruby easier to troubleshoot #3774

Bug fixes:¶ ↑

• Fix bundle pristine removing gems with local overrides. Be conservative by printing a warning and skipping the removal #7423

• Fix multiplaform resolution edge cases #7522 and #7578

• Fix ruby version conflicts not displaying the current ruby version 7559

• Fix Gemfile or gems.rb files containing :path gems using relative paths not working when the app is packaged as a jar with warbler #7614

• Fix config location edge case where if BUNDLE_APP_CONFIG is set to an absolute path like in official ruby docker images, and there’s no Gemfile up in the directory hierarchy, bundler would end up using the default config location instead of the customized one #7622

• Fix error message about missing permissions recommending a deprecated command #7633

• Fix init_gems_rb setting being ignored by bundle gem #7629

• Fix “unresolvable warning” being printed on bundle install of multipliplatform Gemfile or gems.rb files without lockfiles, multiplatform is now managed automatically #7580

• Fix setting the number of --jobs to be one unit less than specified to the CLI #3393

• Fix extension building when the same git source specifies several gems with extensions #3475

• Fix uninitialized instance variable warning under ruby-head (2.8-dev) #3477

• Fix double chdir warning while installing a git gem with extensions #3479

• Fix some deprecations not showing up when CLI flags passed as --flag=value #3561

• Fix man pages display when bundler installed as a default gem #3562

• Fix bundler gem tasks not handling relative paths #3586

• Fix deprecation warnings when options the dashed names are used, such as --no-prune #3623

• Fix crash related to bundler gem activation under old rubygems version (2.6.1 or older) #3626

• Avoid stack overflow inside StubSpecification on some edge cases #3635

• Fix bundle remove with multiline gem specifications #3400

• Fix bundle info not informing about deleted gems as opposed to old bundle show #3509

• The --no-deployment flag to bundle install was deprecated just like the other flags that rely on their value being remembered #3657

• Fix bundle install unintentionally copying with and without global config to local configuration #3666. This PR also address the BUNDLE_WITH environment variable unintentionally being persisted to configuration in a similar way (#3708)

• Fix race condition in bundle install that could “empty” exceptions to be raised #3669

• Fix --no-cache to bundle install being unintentionally deprecated #3688

• Avoid calling LoadError#message to fix performance regression in future ruby 3.0 #3762

2.1.4 (2020-01-05)¶ ↑

Bug fixes:¶ ↑

• Fix net-http-pipeline no longer being allowed in Gemfiles if already installed in the system due to our vendored version of net-http-persistent optionally requiring it #7529

• Fix inline gems no longer being requirable if no Gemfile is present in the directory hierarchy #7537

2.1.3 (2020-01-02)¶ ↑

Bug fixes:¶ ↑

• Fix rake build when path has spaces on it #7514

• Fix rake release git push tasks when the running shell has git as an alias of another command (like hub) #7510

• Fix some circular require warnings #7520

• Fix bundle config set deployment true recommended alternative to bundle config --deployment to behave in the same way as the --deployment flag #7519

2.1.2 (2019-12-20)¶ ↑

Bug fixes:¶ ↑

• Restore an explicit require "rubygems" on top rubygems_integration.rb to avoid some missing constant errors under some convoluted setups #7505

2.1.1 (2019-12-17)¶ ↑

Bug fixes:¶ ↑

• Fix some cases of shelling out to rubygems still being silent #7493

• Restore compatibility with rubygems-bundler so that binstubs work under RVM #7498

2.1.0 (2019-12-15)¶ ↑

Features:¶ ↑

• Add support for new default gems. In particular,

  • open3 #7455

  • cgi: #7456

  • uri #7460

  plus other PRs removing or lazily loading usages of these gems from other places to not interfere with user's choice, such as #7471 or #7473

Bug fixes:¶ ↑

• Fix bundle exec rake install failing #7474

• Fix bundle exec‘ing to rubygems being silent #7442

• Restore previous BUNDLE_GEMFILE in bundler/inline #7418

• Fix error when using gem DSL’s :glob option for selecting gemspecs from a specific source #7419

Enhancements:¶ ↑

• bundle config no longer warns when using “old interface” (might be deprecated again in the future) #7475

• bundle update no longer warns when used without arguments (might be deprecated again in the future) #7475

2.1.0.pre.3 (2019-11-12)¶ ↑

Features:¶ ↑

• Add caller information to some deprecation messages to make them easier to fix #7361

• Reconcile bundle cache vs bundle package everywhere. Now in docs, CLI help and everywhere else bundle cache is the preferred version and bundle package remains as an alias #7389

• Display some basic bundler documentation together with ruby’s RDoc based documentation #7394

Bug fixes:¶ ↑

• Fix typos deprecation message and upgrading docs #7374

• Deprecation warnings about taint usage on ruby 2.7 #7385

• Fix --help flag not correctly delegating to man when used with command aliases #7388

• bundle add should cache newly added gems if an application cache exists #7393

• Stop using an insecure folder as a “fallback home” when user home is not defined #7416

• Fix bundler/inline warning about Bundler.root redefinition #7417

2.1.0.pre.2 (2019-09-15)¶ ↑

Bug fixes:¶ ↑

• Fix bundle clean trying to delete non-existent directory (#7340)

• Fix warnings about keyword argument separation on ruby 2.7 (#7337)

2.1.0.pre.1 (2019-08-28)¶ ↑

One of the biggest changes in bundler 2.1.0 is that deprecations for upcoming breaking changes in bundler 3 will be turned on by default. We do this to grab feedback and communicate early to our users the kind of changes we’re intending to ship with bundler 3. See #6965.

Another important improvement is a better coexistence between bundler installations and the default copy of bundler that comes with ruby installed as a default gem. Since bundler is shipped as a default gem with ruby, a number of users have been affected by issues where bundler ends up failing due to version mismatches, because at some point of the execution, bundler switches to run the default copy instead of the expected version. A number of PRs have been focused on minimizing (hopefully eliminating) this, such as #7100, #7137, #6996, #7056, #7062, #7193, #7216, #7274

Deprecations:¶ ↑

• See the the upgrading document for a detailed explanation of the deprecations that are getting enabled in bundler 2.1, and the future breaking changes in bundler 3.

Features:¶ ↑

• Reimplement config command using subcommands (#5981)

• Add bundle plugin list command (#6120)

• Introduce a bundle lock --gemfile flag (#6748)

• Add local git repository source option (--local_git) to plugin installation (#6749)

• Add quiet flag to inline bundler (#6828)

• Introduce a prefer_patch configuration that makes bundle update behave like bundle update --patch (#6931)

• Introduce Bundler.original_system and Bundler.original_exec to shell out or exec to external programs using the original environment before bundler was loaded (#7052)

• Add feature parity to bundle info GEM with respect to the old deprecated command bundle show GEM #7026

• Introduce bundle list to list groups of gems in your Gemfile. This command was actually documented, but was working as an alias to bundle show so this could also be considered a bug fix :) #7072

• Introduce bundle outdated --filter-strict as an alias to bundle outdated --strict #6030

• Add :git and :branch options to bundle add (#7127)

• Add :ruby_26 as a valid value to the :platform(s) dsl (#7155)

• Let the bundle cache command include all features currently provided by bundle package (#7249)

• Several improvements on new gem templates (#6924, #6968, #7209, #7222, #7238)

• Add --[no-]git option to bundle gem to generate non source control gems. Useful for monorepos, for example (#7263)

Bug fixes:¶ ↑

• Raise when the same gem is available in multiple sources, and show a suggestion to solve it (#5985)

• Validate that bundler has permissions to write to the tmp directory, and raise with a meaningful error otherwise (#5954)

• Remove downloaded .gem file from the cache if it’s corrupted (#6010)

• Fix generated README in new gems to explicitly suggest running bundle install, so that the outcome is independent from the major version of bundler being run (#6068)

• Fix bundle outdated --group NAME when the group is listed second in the Gemfile (#6116)

• Improve conflict resolution messages by not calling “ruby” a gem when conflict happens in the required_ruby_version, and by filtering out requirements that didn’t contribute to the conflict (#6647)

• Avoid fetching and rebuilding git gems whenever any gem is changed in the Gemfile (#6711)

• Include the exact bundler version in the lockfile in the suggested command when bundler warns about version mismatches of itself #6971

• Fix plugins being installed every time a command is run ##6978

• Fallback to sequentially fetching specs on 429s #6728

• Make bundle clean also clean native extensions for gems with a git source #7058

• Fix bundle info bundler to show the correct path to the bundler gem #7026

• Fix bundle config build.<gem> not sending multiple parameters to extconf.rb correctly #7023

• Fix bad error message on Gemfile errors under ruby 2.7 (still unreleased, but it’s a bugfix for beta testers after all) #7038

• Warn about situations where multiple gems provide the same executable (#7075)

• Ignore frozen setting in inline mode (#7125)

• Fix incorrect “bundler attempted to update GEM but version stayed the same” message when updating git sourced gems (#6325)

• Don’t check for existence of a writable home directory if BUNDLE_USER_HOME is set (#6885)

• Fix error message when server would respond to a bad username/password request with a 401 (#6928)

• Fix bundle outdated pluralization when multiple groups are requested (#7063)

• Fix bundle install not updating conservatively when gemspec is changed (#7143)

• Fix bundle exec not respecting custom process titles inside scripts (#7140)

• Fix bundle update message about exclude groups saying “installed” instead of “updated” (#7150)

• Fix bundle licenses not showing correct information about bundler itself (#7147)

• Fix installation path not including ruby scope when BUNDLE_PATH was set (#7163)

• Fix bundle clean incorrectly removing git dependencies present in the Gemfile when rubygems 3.0+ was used and path involved a symlink (#7211)

• Fix platform specific gems always being re-resolved when bundler was not running under that platform (#7212)

• Fix bundle package --all-platforms causing bundle install to ignore --with and --without (#6113)

• Fix MissingRevision git errors to include the specific git command that failed under the hood (#7225)

• Fix using gemspec & force_ruby_platform on Windows (#6809)

• Make bundler’s binstub checks on bundler version consistent with rubygems BundlerVersionFinder (#7259)

• Fix bundle install and bundle update generating different lockfiles when path: gems with relative paths starting with “./” were used (#7264)

• Give a proper error when user tries to bundle open a default gem (#7288)

• Fix bundle doctor command (#7309)

• Fix bundler giving an unclear recommendation when duplicated gems are found in the Gemfile (#7302)

Documentation:¶ ↑

• Fix typo on a file extension in bundle.ronn #7146

• Fix incorrect default value for cache_path configuration (#7229)

• Binstubs documentation has been improved (#5889)

• Fix incorrect sections when explaining :git, :branch, and :ref options (#7265)

• Fix mentions to remembered options in docs to explain the current state (#7242)

Internally, there’s also been a bunch of improvements in our development environment, test suite, policies, contributing docs, and a bunch of cleanups of old compatibility code.

2.0.2 (2019-06-13)¶ ↑

Enhancements:¶ ↑

• Fixes for Bundler integration with ruby-src (#6941, #6973, #6977, #6315, #7061)

• Use __dir__ instead of __FILE__ when generating a gem with bundle gem (#6503)

• Use https on externals links in the Bundler gemspec (#6721)

• Removed duplicate gem names from the suggested did you mean list for gem typos (#6739)

• Removed Ruby 1.x compatibility code (#6764, #6806)

• Fixed an issue where bundle remove would crash with certain Gemfiles (#6768)

• Fixed indentation in the Bundler executable template (#6773)

• Fixed an issue where plugins could register for the same Bundler hook multiple times (#6775)

• Changed the “multiple sources” message in bundle install to be a warning instead of an error (#6790)

• Fixed a bug where path gems would break when using only_update_to_newer_versions (#6774)

• Fixed a bug where installing plugins with the --deployment setting would fail (#6805)

• Fixed an issue where bundle update couldn’t update & install a gem when no_install was set (a bundle package config) (#7078)

• Fixed an issue where users could not run bundle exec on default gems (#6963)

• Updated vendor libraries to their latest version (#7076, #7068)

• Fixed an issue where the github source was not using https by default that we mentioned in the 2.0 release (#7182)

• Fixed an issue where rake release was not outputting the message to users asking for a 2fa token (#7199)

Documentation:¶ ↑

• Fix incorrect documented BUNDLE_PATH_RELATIVE_TO_CWD env var (#6751)

• Update URLs in Bundler’s documentation to use https (#6935)

2.0.1 (2019-01-04)¶ ↑

Bug fixes:¶ ↑

• Relaxed RubyGems requirement to >= 2.5.0 (#6867)

2.0.0 (2019-01-03)¶ ↑

No changes.

2.0.0.pre.3 (2018-12-30)¶ ↑

Breaking changes:¶ ↑

• Bundler 2 now requires RubyGems 3.0.0 at minimum

Bug fixes:¶ ↑

• Ruby 2.6 compatibility fixes (@segiddins)

Enhancements:¶ ↑

• Import changes from Bundler 1.17.3 release

Note: To upgrade your Gemfile to Bundler 2 you will need to run bundle update --bundler

2.0.0.pre.2 (2018-11-27)¶ ↑

Breaking changes:¶ ↑

• :github source in the Gemfile now defaults to using HTTPS

Changes

• Add compatibility for Bundler merge into ruby-src

Note: To upgrade your Gemfile to Bundler 2 you will need to run bundle update --bundler

2.0.0.pre.1 (2018-11-09)¶ ↑

Breaking changes:¶ ↑

• Dropped support for versions of Ruby under 2.3

• Dropped support for version of RubyGems under 2.5

• Moved error messages from STDOUT to STDERR

Note: To upgrade your Gemfile to Bundler 2 you will need to run bundle update --bundler

1.17.3 (2018-12-27)¶ ↑

Bug fixes:¶ ↑

• Fix a Bundler error when installing gems on old versions of RubyGems (#6839, @colby-swandale)

• Fix a rare issue where Bundler was removing itself after a bundle clean (#6829, @colby-swandale)

Documentation:¶ ↑

• Add entry for the bundle remove command to the main Bundler manual page

1.17.2 (2018-12-11)¶ ↑

• Add compatibility for bundler merge with Ruby 2.6

1.17.1 (2018-10-25)¶ ↑

• Convert Pathnames to Strings before sorting them, fixing #6760 and #6758 (#6761, @alexggordon)

1.17.0 (2018-10-25)¶ ↑

No changes.

1.17.0.pre.2 (2018-10-13)¶ ↑

Features:¶ ↑

• Configure Bundler home, cache, config and plugin directories with BUNDLE_USER_HOME, BUNDLE_USER_CACHE, BUNDLE_USER_CONFIG and BUNDLE_USER_PLUGIN env vars (#4333, @gwerbin)

• Add --all option to bundle binstubs that will generate an executable file for all gems with commands in the bundle

• Add bundle remove command to remove gems from the Gemfile via the CLI

• Improve checking file permissions and asking for sudo in Bundler when it doesn’t need to

• Add error message to bundle add to check adding duplicate gems to the Gemfile

• When asking for sudo, Bundler will show a list of folders/files that require elevated permissions to write to.

The following new features are available but are not enabled by default. These are intended to be tested by users for the upcoming release of Bundler 2.

• Improve deprecation warning message for bundle show command

• Improve deprecation warning message for the --force option in bundle install

1.17.0.pre.1 (2018-09-24)¶ ↑

Features:¶ ↑

• Check folder/file permissions of the Bundle home directory in the bundle doctor command (#5786, @ajwann)

• Remove compiled gem extensions when running bundle clean (#5596, @akhramov)

• Add --paths option to bundle list command (#6172, @colby-swandale)

• Add base error class to gems generated from bundle gem (#6260, @christhekeele)

• Correctly re-install gem extensions with a git source when running bundle pristine (#6294, @wagenet)

• Add config option to disable platform warnings (#6124, @agrim123)

• Add --skip-install option to bundle add command to add gems to the Gemfile without installation (#6511, @agrim123)

• Add --only-explicit option to bundle outdated to list only outdated gems in the Gemfile (#5366, @peret)

• Support adding multiple gems to the Gemfile with bundle add (#6543, @agrim123)

• Make registered plugin events easier to manage in the Plugin API (@jules2689)

• Add new gem install hooks to the Plugin API (@jules2689)

• Add --optimistic and --strict options to bundle add (#6553, @agrim123)

• Add --without-group and --only-group options to bundle list (#6564, @agrim123)

• Add --gemfile option to the bundle exec command (#5924, @ankitkataria)

The following new features are available but are not enabled by default. These are intended to be tested by users for the upcoming release of Bundler 2.

• Make install --path relative to the current working directory (#2048, @igorbozato)

• Auto-configure job count (#5808, @segiddins)

• Use the Gem Version Promoter for major gem updates (#5993, @segiddins)

• Add config option to add the Ruby scope to bundle config path when configured globally (@segiddins)

1.16.6 (2018-10-05)¶ ↑

Enhancements:¶ ↑

• Add an error message when adding a gem with bundle add that’s already in the bundle (#6341, @agrim123)

• Add Homepage, Source Code and Changelog URI metadata fields to the bundle gem gemspec template (@walf443)

Bug fixes:¶ ↑

• Fix issue where updating a gem resulted in the gem’s version being downgraded when BUNDLE_ONLY_UPDATE_TO_NEWER_VERSIONS was set (#6529, @theflow)

• Fix some rescue calls that don’t specify error type (@utilum)

• Fix an issue when the Lockfile would contain platform-specific gems that it didn’t need (#6491, @segiddins)

• Improve handling of adding new gems with only a single group to the Gemfile in bundle add (@agrim123)

• Refactor check for OpenSSL in bundle env (@voxik)

• Remove an unnecessary assignment in Metadata (@voxik)

Documentation:¶ ↑

• Update docs to reflect revised guidance to check in Gemfile.lock into version control for gems (#5879, @arbonap)

• Add documentation for the --all flag in bundle update (@agrim123)

• Update README to use bundle add in usage examples (@hdf1986)

1.16.5 (2018-09-18)¶ ↑

Enhancements:¶ ↑

• Add support for TruffleRuby (@eregon)

Bug fixes:¶ ↑

• Avoid printing git errors when checking the version on incorrectly packaged versions of Bundler (#6453, @greysteil)

• Fix issue where Bundler does not check the given class when comparing equality in DepProxy (@ChrisBr)

• Handle RangeNotSatisfiable error in Compact Index (@MaxLap)

• Check for initialized search variable in LazySpecification (@voxik)

• Fix LoadError occurring in nested bundle exec calls (#6537, @colby-swandale)

• Check that Bundler::Deprecate is not an autoload constant (#6163, @eregon)

• Prefer non-pre-release versions when performing a bundle update --patch (#6684, @segiddins)

1.16.4 (2018-08-17)¶ ↑

Enhancements:¶ ↑

• Welcome new members to the Bundler core team (@indirect)

• Don’t mutate original error trees when determining version_conflict_message (@greysteil)

• Update vendored Molinillo to 0.6.6 (@segiddins)

Bug fixes:¶ ↑

• Reword bundle update regression message to be more clear to the user when a gem’s version is downgraded (#6584, @ralphbolo)

• Respect –conservative flag when updating a dependency group (#6560, @greysteil)

• Fix issue where a pre-release version was not being selected when it’s specified in the Gemfile (#6449, @akihiro17)

• Fix issue where Etc was not loaded when getting the user’s home dir (#6640, @colby-swandale)

• Use UTF-8 for reading files including Gemfile (#6660, @eregon)

• Remove unnecessary while loop in path resolver helper (@ojab)

Documentation:¶ ↑

• Document that bundle show [--paths] sorts results by name (@kemitchell)

1.16.3 (2018-07-17)¶ ↑

Features:¶ ↑

• Support URI::File of Ruby 2.6 (@hsbt)

Bug fixes:¶ ↑

• Expand symlinks during setup to allow Bundler to load correctly when using symlinks in $GEM_HOME (#6465, @ojab, @indirect)

• Dont let Bundler create temporary folders for gem installs which are owned by root (#6258, @colby-swandale)

• Don’t fallback to using temporary directories when needed directories already exist (#6546, @brodock)

• Use SharedHelpers.filesystem_access when reading a Gemfile so friendly error messages can be given to the user (#6541, @segiddins)

• Check if source responds to remotes before printing gem install error message (#6211, @colby-swandale)

• Handle Errno::ENOTSUP in the Bundler Process Lock to prevent exceptions when using NFS mounts (#6566, @colby-swandale)

• Respect encodings when reading gemspecs (#6598, @deivid-rodriguez)

Documentation:¶ ↑

• Fix links between manual pages (@BanzaiMan)

• Add warning to Gemfile documentation for the use of the source option when declaring gems (#6280, @forestgagnon)

1.16.2 (2018-04-20)¶ ↑

Enhancements:¶ ↑

• Include the gem’s source in the gem install error message when available (@papanikge)

• Remove unnecessary executable bit from gem template (@voxik)

• Dont add the timestamp comment with gems added to the Gemfile via bundle add (#6193, @cpgo)

• Improve yanked gem error message (@alyssais)

• Use Bundler.rubygems.inflate instead of the Gem::Util method directly (@segiddins)

• Remove unused instance variable (@segiddins)

Bug fixes:¶ ↑

• Only trap INT signal and have Ruby’s signal default handler be invoked (@shayonj)

• Fix warning about the use of __FILE__ in RubyGems integration testing (@MSP-Greg)

• Skip the outdated bundler check when MD5 is not available (#6032, @segiddins)

• Fallback to the original error if the friendly message raises (@segiddins)

• Rename Bundler.frozen? to avoid Object method conflict (#6252, @segiddins)

• Ensure the bindir exists before installing gems (@segiddins)

• Handle gzip corruption errors in the compact index client (#6261, @colby-swandale)

• Check if the current directory is writeable when writing files in bundle gem (#6219, @nilsding)

• Fix hang when gemspec has incompatible encoding (@deivid-rodriguez)

• Gracefully handle when the lockfile is missing spec entries for the current platform (#6079, @segiddins)

• Use Gem::Util.inflate instead of Gem.inflate (@hsbt)

• Update binstub generator to use new ERB.new arity in Ruby 2.6 (@koic)

• Fix source_location call in rubygems integration (@MSP-Greg)

• Use filesystem_access when copying files in Compact Index Updater (#6289, @segiddins)

• Fail gracefully when resetting git gems to the given revision fails (#6324, @segiddins)

• Handle exceptions that do not have a backtrace (#6342, @nesaulov)

• Check if stderr was closed before writing to it (@shime)

• Handle updating a specific gem for a non-local platform (#6350, @greysteil)

• Bump the bundle_binstub check-length to 300 characters (@tduffield)

• Fix specifying alterntive Lockfile with bundle lock when default gemfile is present (#6460, @agrim123)

• Allow installing dependencies when the path is set to . (#6475, @segiddins)

• Support Bundler installing on a readonly filesystem without a home directory (#6461, @grosser)

• Filter git uri credentials in source description (@segiddins)

Documentation:¶ ↑

• Correct typos in bundle binstubs man page (@erikj, @samueloph)

• Update links in bundle gem command documentation to use https (@KrauseFx)

• Fix broken links between bundler man pages (@segiddins)

• Add man page for the bundle doctor command (#6243, @nholden)

• Document frozen_string_literal in bundle init Gemfile (@315tky)

• Explain the gemspec files attribute in bundle gem template and print a link to bundler.io guides when running bundle gem (#6246, @nesaulov)

• Small copy tweaks & removed redundant phrasing in the bundler man page (@rubymorillo)

• Improve the documentation of the settings load order in Bundler (@rubymorillo)

• Added license info to main README (@rubymorillo)

• Document parameters and return value of Injector#inject (@tobias-grasse)

1.16.1 (2017-12-12)¶ ↑

Bug fixes:¶ ↑

• avoid hanging on complex resolver errors (#6114, @halfbyte)

• avoid an error when running bundle update --group (#6156, @mattbrictson)

• ensure the resolver prefers non-pre-release gems when possible (#6181, @greysteil)

• include bundler’s gemspec in the built gem (#6165, @dr-itz)

• ensure locally installed specs are not overridden by those in remote sources during dependency resolution (#6072, @indirect)

• ensure custom gemfiles are respected in generated binstubs (@pftg)

• fail gracefully when loading a bundler-generated binstub when bin/bundle was not generated by bundler (#6149, @hsbt)

• allow bundle init to be run even when a parent directory contains a gemfile (#6205, @colby-swandale)

1.16.0 (2017-10-31)¶ ↑

Bug fixes:¶ ↑

• avoid new RubyGems warning about unsafe YAML loading (to keep output consistent) (@segiddins)

• load digest subclasses in a thread-safe manner (@segiddins, @colby-swandale)

• avoid unused variable warnings under ruby 2.5 (@amatsuda)

• fix printing the same message twice in verbose mode (#6028, @akhramov)

• allow SignalExceptions to bubble up to the interpreter during bundle exec (#6090, @dekellum)

• avoid activating stdlib digest under Ruby 2.5 (@segiddins)

• prioritise explicitly requested gems in dependency resolution sort order (@segiddins)

• reduce memory usage during dependency resolution (#6114, @greysteil)

• ensure that the default bundler gem is not accidentally activated on ruby 2.5 when using local git overrides (@segiddins)

1.16.0.pre.3 (2017-10-04)¶ ↑

Features:¶ ↑

• the output from bundle env includes more information, particularly both the compiled & loaded versions of OpenSSL (@indirect)

Bug fixes:¶ ↑

• fix a bug where installing on FreeBSD would accidentally raise an error (#6013, @olleolleolle)

• fix a regression in 1.16 where pre-release gems could accidentally be resolved even when the gemfile contained no pre-release requirements (@greysteil)

• bundler will avoid making unnecessary network requests to fetch dependency data, fixing a regression introduced in 1.16 (@segiddins)

• the outdated bundler version message is disabled by default until the message has been fine-tuned (#6004, @segiddins)

1.16.0.pre.2 (2017-09-06)¶ ↑

Bug fixes:¶ ↑

• handle when a connection is missing a socket when warning about OpenSSL version (@greysteil)

• the description for the rake release task now reflects $RUBYGEMS_HOST (@wadetandy)

• fix a bug where bundle update would regress transitive dependencies (@greysteil)

1.16.0.pre.1 (2017-09-04)¶ ↑

Features:¶ ↑

• allow using non-branch symbolic refs in a git source (#4845, @segiddins)

• allow absolute paths in the cache path setting (#5627, @mal)

• gems created via bundle gem with rspec have --require spec_helper in their .rspec file (@koic)

• bundle env includes Gem.ruby and the bundle binstub shebang when they don’t match (#5616, @segiddins)

• allow passing gem names to bundle pristine (@segiddins)

• bundle version and bundle env include the commit and build date for the bundler gem (#5049, @segiddins)

• add the --shebang option to bundle binstubs (#4070, @segiddins, @Zorbash)

• gemfiles are evaled one fewer time when running bundle install (#4952, #3096, #4417, @segiddins)

• the fileutils gem is now vendored so different versions of the gem can be activated (@segiddins)

• speed up no-op installations (#5842, @segiddins)

• default to keeping the lockfile in the default gem template (@deivid-rodriguez)

• add a special bundler binstub that ensures the correct version of bundler is activated (#5876, @segiddins)

• speed up dependency resolution and ensure that all resolvable gemfiles can be installed (@segiddins, @greysteil)

• add a bundle list command that prints the gems in use (#4754, @colby-swandale)

• allow adding credentials to a gem source during deployment when allow_deployment_source_credential_changes is set (@adrian-gomez)

• making an outdated (and insecure) TLS connection to rubygems.org will print a warning (@segiddins)

Bug fixes:¶ ↑

• allow configuring a mirror fallback timeout without a trailing slash (#4830, @segiddins)

• fix handling of mirrors for file: urls that contain upper-case characters (@segiddins)

• list the correct gem host for rake release when allowed_push_host has been set (@mdeering)

• ensure Bundler.original_env preserves all env keys that bundler sets (#5700, @segiddins)

• ensure bundle pristine removes files added to a git gem (@segiddins)

• load plugin files from path gems before gem installation (#5429, @segiddins)

• ensure gems containing manpages are properly set up (#5730, @segiddins)

• avoid fetching remote specs when all effected gems are in groups that are not being installed (@segiddins)

• allow BUNDLE_GEMFILE to be a relative path (#5712, @gxespino)

• show a more helpful error message when a gem fails to install due to a corrupted lockfile (#5846, @segiddins)

• add a process lock to allow multiple concurrent bundle installs (#5851, @stefansedich)

• ensure that specifications always return an array for extensions (@greysteil)

• print a helpful error message when using a gem in the Gemfile with an empty name (@colby-swandale)

• ensure that all gemfiles are included in bundle env (@segiddins)

• use ssl client cert and ca cert settings from gem configuration as fallbacks (@stan3)

• avoid global namespace pollution when loading gems (#5958, @shyouhei)

• avoid running a complete re-resolve on bundle update --bundler (@segiddins)

• allow bundle binstubs --standalone to work without path being set (@colby-swandale)

• fix support for bundle paths that include jars or wars on jruby (#5975, @torcido)

1.15.4 (2017-08-19)¶ ↑

Bug fixes:¶ ↑

• handle file conflicts gracefully in bundle gem (@rafaelfranca, @segiddins)

• bundler will fail gracefully when the bundle path contains the system path separator (#5485, ajwann)

• failed gem downloads will be retried consistently across different RubyGems versions (@shayonj)

• bundle pristine will respect build options while re-building native extensions (@NickLaMuro)

1.15.3 (2017-07-21)¶ ↑

Bug fixes:¶ ↑

• ensure that empty strings passed to bundle config are serialized & parsed properly (#5881, @segiddins)

• avoid printing an outdated version warning when running a parseable command (@segiddins)

1.15.2 (2017-07-17)¶ ↑

Features:¶ ↑

• new gemfiles created by bundler will include an explicit github git source that uses https (@segiddins)

Bug fixes:¶ ↑

• inline gemfiles work when BUNDLE_BIN is set (#5847, @segiddins)

• avoid using the old dependency API when there are no changes to the compact index files (#5373, @greysteil)

• fail gracefully when the full index serves gemspecs with invalid dependencies (#5797, @segiddins)

• support installing gemfiles that use eval_gemfile, :path gems with relative paths, and --deployment simultaneously (@NickLaMuro)

• bundle config will print settings as the type they are interpreted as (@segiddins)

• respect the no_proxy environment variable when making network requests (#5781, @jakauppila)

• commands invoked with --verbose will not have default flags printed (@segiddins)

• allow bundle viz to work when another gem has a requirable grapviz file (#5707, @segiddins)

• ensure bundler puts activated gems on the $LOAD_PATH in a consistent order (#5696, @segiddins)

1.15.1 (2017-06-02)¶ ↑

Bug fixes:¶ ↑

• bundle lock --update GEM will fail gracefully when the gem is not in the lockfile (#5693, @segiddins)

• bundle init --gemspec will fail gracefully when the gemspec is invalid (@colby-swandale)

• bundle install --force works when the gemfile contains git gems (#5678, @segiddins)

• bundle env will print well-formed markdown when there are no settings (#5677, @segiddins)

1.15.0 (2017-05-19)¶ ↑

No changes.

1.15.0.pre.4 (2017-05-10)¶ ↑

Bug fixes:¶ ↑

• avoid conflicts when Gem.finish_resolve is called after the bundle has been set up (@segiddins)

• ensure that Gem::Specification.find_by_name always returns an object that can have to_spec called on it (#5592, @jules2689)

1.15.0.pre.3 (2017-04-30)¶ ↑

Bug fixes:¶ ↑

• avoid redundant blank lines in the readme generated by bundle gem (@koic)

• ensure that open-uri is not loaded after bundle exec (@segiddins)

• print a helpful error message when an activated default gem conflicts with a gem in the gemfile (@segiddins)

• only shorten ref option for git gems when it is a SHA (#5620, @segiddins)

1.15.0.pre.2 (2017-04-23)¶ ↑

Bug fixes:¶ ↑

• ensure pre-existing fit caches are updated from remote sources (#5423, @alextaylor000)

• avoid duplicating specs in the lockfile after updating with the gem uninstalled (#5599, @segiddins)

• ensure git gems have their extensions available at runtime (#5594, @jules2689, @segiddins)

1.15.0.pre.1 (2017-04-16)¶ ↑

Features:¶ ↑

• print a notification when a newer version of bundler is available (#4683, @segiddins)

• add man pages for all bundler commands (#4988, @feministy)

• add the bundle info command (@fredrb, @colby-swandale)

• all files created with bundle gem comply with the bundler style guide (@zachahn)

• if installing a gem fails, print out the reason the gem needed to be installed (#5078, @segiddins)

• allow setting gem.push_key to set the key used when running rake release (@DTrierweiler)

• print gem versions that are regressing during bundle update in yellow (#5506, @brchristian)

• avoid printing extraneous dependencies when the resolver encounters a conflict (@segiddins)

• add the bundle issue command that prints instructions for reporting issues (#4871, @jonathanpike)

• add --source and --group options to the bundle inject command (#5452, @Shekharrajak)

• add the bundle add command to add a gem to the gemfile (@denniss)

• add the bundle pristine command to re-install gems from cached .gem files (#4509, @denniss)

• add a --parseable option for bundle config (@JuanitoFatas, @colby-swandale)

Performance:¶ ↑

• speed up gemfile initialization by storing locked dependencies as a hash (@jules2689)

• speed up gemfile initialization by making locked dependency comparison lazy, avoiding object allocation (@jules2689)

• only validate git gems when they are downloaded, instead of every time Bundler.setup is run (@segiddins)

• avoid regenerating the lockfile when nothing has changed (@segiddins)

• avoid diffing large arrays when no sources in the gemfile have changed (@segiddins)

• avoid evaluating full gemspecs when running with RubyGems 2.5+ (@segiddins)

Bug fixes:¶ ↑

• fix cases where bundle update would print a resolver conflict instead of updating the selected gems (#5031, #5095, @segiddins)

• print out a stack trace after an interrupt when running in debug mode (@segiddins)

• print out when bundler starts fetching a gem from a remote server (@segiddins)

• fix bundle gem failing when git is unavailable (#5458, @Shekharrajak, @colby-swandale)

• suggest the appropriate command to unfreeze a bundle (#5009, @denniss)

• ensure nested calls to bundle exec resolve default gems correctly (#5500, @segiddins)

• ensure that a plugin failing to install doesn’t uninstall other plugins (@kerrizor, @roseaboveit)

• ensure socket is required before being referenced (#5533, @rafaelfranca)

• allow running bundle outdated when gems aren’t installed locally (#5553, @segiddins)

• print a helpful error when bundle execing to a gem that isn’t included in the bundle (#5487, @segiddins)

• print an error message when a non-git gem is given a branch option (#5530, @colby-swandale)

• allow interrupts to exit the process after gems have been installed (@segiddins)

• print the underlying error when downloading gem metadata fails (#5579, @segiddins)

• avoid deadlocking when installing with a lockfile that is missing dependencies (#5378, #5480, #5519, #5526, #5529, #5549, #5572, @segiddins)

1.14.6 (2017-03-03)¶ ↑

Bug fixes:¶ ↑

• avoid undefined constant Bundler::Plugin::API::Source exception (#5409, @segiddins)

• avoid incorrect warnings about needing to enable specific_platform (@segiddins)

• fail gracefully when the compact index does not send an ETag (#5463, @olleolleolle)

• ensure bundle outdated --local shows all outdated gems (#5430, @denniss)

• fix a case where ruby version requirements could lead to incorrect resolver conflicts (#5425, @segiddins)

1.14.5 (2017-02-22)¶ ↑

Bug fixes:¶ ↑

• avoid loading all unused gemspecs during bundle exec on RubyGems 2.3+ (@segiddins)

• improve resolver performance when dependencies have zero or one total possibilities ignoring requirements (#5444, #5457, @segiddins)

• enable compact index when OpenSSL FIPS mode is enabled but not active (#5433, @wjordan)

• use github username instead of git name for the github url in bundle gem (#5438, @danielpclark)

• avoid a TypeError on RubyGems 2.6.8 when no build settings are set for native extensions (@okkez)

• fail gracefully when the dependency api is missing runtime dependencies for a gem (@segiddins)

• handle when a platform-specific gem has more dependencies than the ruby platform version (#5339, #5426, @segiddins)

• allow running bundler on a machine with no home directory where the temporary directory is not writable (#5371, @segiddins)

• avoid gem version conflicts on openssl using Ruby 2.5 (#5235, @rhenium)

• fail when installing in frozen mode and the dependencies for gemspec gems have changed without the lockfile being updated (#5264, @segiddins)

1.14.4 (2017-02-12)¶ ↑

Bug fixes:¶ ↑

• fail gracefully when attempting to overwrite an existing directory with bundle gem (#5358, @nodo)

• fix a resolver bug that would cause bundler to report conflicts that it could resolve (#5359, #5362, @segiddins)

• set native extension build arguments for git gems (#5401, @segiddins)

• fix the suggested bundle lock command printed when a dependency is unused on any platform (@5t111111)

• ensure the version passed to ruby in the Gemfile is valid during Gemfile parsing (#5380, @segiddins)

• show bundle inject usage when too many arguments are passed (#5384, @Shekharrajak)

• stop bundle show --outdated from implicitly running bundle update (#5375, @colby-swandale)

• allow the temporary home directory fallback to work for multiple users (@svoop)

1.14.3 (2017-01-24)¶ ↑

Bug fixes:¶ ↑

• fix the resolver attempting to activate ruby-platform gems when the bundle is only for other platforms (#5349, #5356, @segiddins)

• avoid re-resolving a locked gemfile that uses gemspec and includes development dependencies (#5349, @segiddins)

1.14.2 (2017-01-22)¶ ↑

Bug fixes:¶ ↑

• fix using force_ruby_platform on windows (#5344, @segiddins)

• fix an incorrect version conflict error when using gemspec on multiple platforms (#5340, @segiddins)

1.14.1 (2017-01-21)¶ ↑

Bug fixes:¶ ↑

• work around a ruby 2.2.2 bug that caused a stack consistency error during installation (#5342, @segiddins)

1.14.0 (2017-01-20)¶ ↑

Bug fixes:¶ ↑

• ensure Settings::Mirror is autoloaded under the Settings namespace (#5238, @segiddins)

• fix bundler/inline when BUNDLE_GEMFILE="" (#5079, @segiddins)

1.14.0.pre.2 (2017-01-11)¶ ↑

Bug fixes:¶ ↑

• allow not selecting a gem when running bundle open (#5301, @segiddins)

• support installing gems from git branches that contain shell metacharacters (#5295, @segiddins)

• fix a resolver error that could leave dependencies unresolved (#5294, @segiddins)

• fix a stack overflow error when invoking commands (#5296, @segiddins)

1.14.0.pre.1 (2016-12-29)¶ ↑

Features:¶ ↑

• bundle doctor first runs bundle check (@segiddins)

• the bundler trampoline is automatically enabled when the target version is greater than bundler 2 (@segiddins)

• gem checksums returned by rubygems.org are validated when installing gems (#4464, @segiddins)

• use the git username as a github username when running bundle gem (@JuanitoFatas)

• show more context when the resolver conflicts on required ruby and rubygems versions (@segiddins)

• improve platform support by allowing bundler to pick the best platform match during dependency resolution, enabled with the specific_platform setting (#4295, #4896, @segiddins)

• always prompt the user for a password when using sudo (#3006, @segiddins)

• support running without a home directory (#4778, @segiddins)

• print a warning when the gemfile uses a platform conditional that will exclude the gem from all lockfile platforms (@segiddins)

• add the force_ruby_platform setting to force bundler to install ruby-platform gems, even on other platforms (#4813, @segiddins)

• add conservative update options to bundle lock (#4912, @chrismo)

• improve bundle outdated output to group gems by group (@ryanfox1985)

• add conservative update options to bundle update (#5065, #5076, @chrismo)

• print the output of bundle env as github-flavored markdown, making it easier to preserve formatting when copy-pasting into a new issue (@segiddins)

• configure the persistence file when using bundle gem with rspec (@segiddins)

• add support for the ruby_25 gemfile filter (@amatsuda)

• when installing with a lockfile that is missing dependencies, allow installation to proceed (but without parallelism) (@segiddins)

Performance:¶ ↑

• improve require "bundler" performance by ~5x (@segiddins)

• allow install gems in parallel when running on rubygems 2+

Bug fixes:¶ ↑

• config files with CRLF line endings can be read (#4435, @segiddins)

• bundle lock activates gems for the current platform even if they were activated under a different platform for a separate dependency (#4896, @segiddins)

• running bundle env in a directory without a gemfile no longer crashes (@segiddins)

• fail gracefully when attempting to use a source with an unknown URI scheme (#4953, @segiddins)

• store paths in the lockfile relative to the root gemfile directory when using eval_gemfile (#4966, @segiddins)

• bundle lock will not update without the --update flag (#4957, @segiddins)

• the console binstub generated by bundle gem will load .irbrc files (@mattbrictson)

• print friendly filesystem access errors in the new index (@segiddins)

• print a helpful error when running out of memory on jruby (#4673, @segiddins)

• load all rubygems plugins when installing gems (#2824, @segiddins)

• bundle clean --dry-run prints the list of gems without the --force option when no path is set (#5027, @hmistry)

• local installs no longer print “this gem may have been yanked” (#5022, @hmistry)

• avoid leaking which output when running bundle doctor (@colby-swandale)

• print a warning when attempting to bundle exec an empty program (#5084, @bronzdoc)

• ensure bundle outdated lists all outdated gems (#4979, @chrismo)

• fail gracefully when attempting to bundle gem with an invalid constant name (#5185, @segiddins)

• allow bundler/inline to work in a directory that contains a gemfile (#5117, @colby-swandale)

• ensure that the new index is thread-safe, allowing installation on rbx (#5142, @segiddins)

• remove deprecated rspec syntax in bundle gem output (@gearnode)

  • fail gracefully when any system error is encountered when touching the filesystem (#5134, @segiddins)

• fix compatibility with a machine running with FIPS mode enabled (#4989, @segiddins)

• fix bundle lock --add-platform ruby (#5230, @segiddins)

• print gem post-install messages when running bundle update (@smathy)

• ensure errors due to a retries are all separated by a newline (@segiddins)

• print out the bundle path in gem not found errors (#4854, @diegosteiner)

• fail gracefully when creating threads fails (@segiddins)

• avoid downloading metadata for gems that are only development dependencies (@Paxa)

1.13.7 (2016-12-25)¶ ↑

Features:¶ ↑

• add support for the ruby_24 gemfile filter (#5281, @amatsuda)

1.13.6 (2016-10-22)¶ ↑

Bug fixes:¶ ↑

• make the gem method public again, fixing a regression in 1.13.4 (#5102, @segiddins)

1.13.5 (2016-10-15)¶ ↑

Bug fixes:¶ ↑

• Ensure a locked pre-release spec can always be re-resolved (#5089, @segiddins)

1.13.4 (2016-10-11)¶ ↑

Bug fixes:¶ ↑

• stop printing warning when compact index versions file is rewritten (#5064, @indirect)

• fix parent directory is world writable but not sticky error on install (#5043, @indirect)

• fix for uninitialized constant Bundler::Plugin::API::Source error (#5010, @hsbt, @aycabta)

• make update options for major, minor, and patch updates consistent (#4934, @chrismo)

1.13.3 (2016-10-10)¶ ↑

Bug fixes:¶ ↑

• add support for weak etags to the new index (@segiddins)

1.13.2 (2016-09-30)¶ ↑

Bug fixes:¶ ↑

• allow Settings to be initialized without a root directory (@m1k3)

• allow specifying ruby engines in the gemfile as a symbol (#4919, @JuanitoFatas)

• avoid an exception when using bundler/deployment with Vlad (@srbaker)

• ensure redefined methods have the same visibility as the one they’re replacing, fixing Kernel.require failing on JRuby (#4975, @segiddins)

• ensure that Bundler won’t complain about a corrupt lockfile when no lockfile exists when using gemspec in the Gemfile (#5006, @segiddins)

• fail gracefully when parsing the metadata for a gemspec from the compact index fails (@segiddins)

• fix system gems not being copied to –path on bundle install (e.g. –deployment) (#4974, @chrismo)

Performance:¶ ↑

• avoid parsing the lockfile twice when evaluating gemfiles (@segiddins)

1.13.1 (2016-09-13)¶ ↑

Bug fixes:¶ ↑

• ensure that Gem::Source is available, fixing several exceptions (#4944, @dekellum)

• ensure that dependency resolution works when multiple gems have the same dependency (#4961, @segiddins)

1.13.0 (2016-09-05)¶ ↑

No changes.

1.13.0.rc.2 (2016-08-21)¶ ↑

Features:¶ ↑

• add setting exec_disable_load to force exec to spawn a new Ruby process (@segiddins)

• add doctor command to help with issues like unlinked compiled gems (#4765, @mistydemeo)

• rework the update command, providing fine-grained control via flags (#4676, @chrismo)

• add URI to http response output in debug mode (#4808, @NickLaMuro)

• add manpage for binstubs command (#4847, @Zorbash)

• support mirror settings for sources by hostname, not only full URL (@opiethehokie)

• print gem installation errors after other install output (#4834, @segiddins)

• add lock --remove-platform flag to remove platforms from the lock (#4877, @segiddins)

• add only_update_to_newer_versions setting to prevent downgrades during update (@segiddins)

• expanded experimental plugin support to include hooks and sources (@asutoshpalai)

Bug fixes:¶ ↑

• retry gem downloads (#4846, @jkeiser)

• improve the CompactIndex to handle capitalized legacy gems (#4867, @segiddins)

• reuse persistent HTTP connections for CompactIndex (@NickLaMuro)

• respect required_ruby_version when Gemfile contains ruby version (@indirect)

• allow rake release to sign git tags (#4743, @eagletmt)

• set process titles when using load during exec (@yob)

• recognize JRuby shebangs for using load during exec (@ojab)

• handle world-writable home directories (#4726, @allenzhao)

• support multi-platform gems via the gemspec Gemfile method (#4798, @segiddins)

• print dots correctly for CompactIndex fetcher (@NickLaMuro)

• set an open_timeout when requesting gem data via HTTP (@NickLaMuro)

• rename the BUNDLE_ORIG_ENV variable so it no longer shows up in config (@indirect)

• show help only when -h or --help is passed to Bundler, not to exec (#4801, @segiddins)

• handle symlinks to binstubs created by --standalone (#4782, @terinjokes)

1.13.0.rc.1 (2016-06-27)¶ ↑

Features:¶ ↑

• when bundle config major_deprecations or BUNDLE_MAJOR_DEPRECATIONS is set, deprecation warnings for bundler 2 will be printed (@segiddins)

• when running with --verbose, bundler will print the reason it is re-resolving a gemfile (@segiddins)

Bug fixes:¶ ↑

• fix support for running RubyGems 1.x on Ruby 2.3 (#4698, @segiddins)

• fix bundle exec’ing to a ruby file when gems are installed into a path (#4592, @chrismo)

• when multiple specs in a bundle have the same executable, prefer activating the one from the requested gem (#4705, @segiddins)

• stop changing the load path to require the vendored postit when trampolining (@segiddins)

• ensure relative paths are properly printed after completing an installation (@jenseng)

• fix re-resolving when there are multiple unchanged path sources (@segiddins)

• de-init submodules when running git 2.9 and requesting a git gem without submodules (@segiddins)

1.13.0.pre.1 (2016-06-20)¶ ↑

Performance:¶ ↑

• speed up gemfile resolution during bundle install by between 4x-100x (#4376, @segiddins)

• generally reduce object allocations when using bundler (@segiddins)

• speed up bin generation for path gems with many files (#2846, @segiddins)

• fix detecting path spec changes to avoid re-resolving unnecessarily (@jrafanie)

Features:¶ ↑

• automatically trampoline to the bundler version locked in the lockfile, only updating to the running version on bundle update --bundler (@segiddins)

• laying the groundwork for plugin support, which is currently unsuppported, undocumented, disabled by default, and liable to change without notice (@asutoshpalai)

• allow bundle viz --without to accept multiple :-delimited groups (@mobilutz)

• support for RubyGems 2.6.4 (#4368, @segiddins, @RochesterinNYC)

• colorize updated gem versions (#4334, @bronzdoc)

• add the --standalone flag to bundle binstubs (#4594, @b-ggs)

• update the bundle gem CoC to contributor covenant v1.4 (@cllns)

• use a custom YAML serializer to make config file consistent (@segiddins)

• filter credentials from error messages (bundler/bundler-features{#111}[https://github.com/rubygems/bundler/issues/111], @RochesterinNYC, @sandlerr)

• support relative paths used inside a nested invocation of eval_gemfile (#4584, @RochesterinNYC)

• fail gracefully when attempting to install a yanked gem (#4344, @allenzhao)

• automatically install an inline gemfile when gems are missing locally (@segiddins)

• allow conflicts for gems resolved via gemspec (@segiddins)

• add --add-platform option to bundle lock (@segiddins)

• fail gracefully when a resolved spec’s required_ruby_version or required_rubygems_version is incompatible (@segiddins)

Bug fixes:¶ ↑

• implicitly unlock the resolved ruby version when the declared requirements in the gemfile are incompatible with the locked version (#4595, #4627, @segiddins)

• add support for quoted paths in $PATH (#4323, @segiddins)

• check out missing git repos that are not being installed (#3981, @asutoshpalai)

• write bundler/setup.rb to a consistent path (@glennpratt)

• open editor in bundle open with a clean environment (@sj26)

• resolve infinitely recursive copy when running bundle package --all with a gemspec in the gemfile (#4392, #4430, @RochesterinNYC)

• fail gracefully when encountering an Errno::ENOTSUP (#4394, @segiddins)

• fail gracefully when encountering an Errno::EHOSTUNREACH (#4642, @allenzhao)

• fix loading config files with very long values (#4370, @segiddins)

• only show potential updates for gemfile platforms in bundle outdated (#4450, @RochesterinNYC)

• allow running bundle install --deployment after bundle package --all with path gems (#2175, @allenzhao)

• add support for patchlevels in ruby versions in the gemfile and gemspecs (#4593, @chalkos)

1.12.6 (2016-10-10)¶ ↑

Bug fixes:¶ ↑

• add support for weak etags to the new index (@segiddins)

1.12.5 (2016-05-25)¶ ↑

Bug fixes:¶ ↑

• only take over --help on bundle exec when the first two arguments are exec and --help (#4596, @segiddins)

• don’t require require: true dependencies that are excluded via env or install_if (@BrianHawley)

• reduce the number of threads used simultaneously by bundler (#4367, @will-in-wi)

1.12.4 (2016-05-16)¶ ↑

Bug fixes:¶ ↑

• ensure concurrent use of the new index can’t corrupt the cache (#4519, @domcleal)

• allow missing rubygems credentials when pushing a gem with a custom host (#4437, @Cohen-Carlisle)

• fix installing built-in specs with --standalone (#4557, @segiddins)

• fix bundle show when a gem has a prerelease version that includes a - (#4385, @segiddins)

1.12.3 (2016-05-06)¶ ↑

Bug fixes:¶ ↑

• fix uncoditionally writing .bundle/config when running bundle install (@segiddins)

• fall back to the dependency API and the full index when the home directory is not writable (@segiddins)

1.12.2 (2016-05-04)¶ ↑

Bug fixes:¶ ↑

• fix modifying a frozen string when the resolver conflicts on dependencies with requirements (#4520, @grzuy)

• fix bundle exec foo --help not showing the invoked command’s help (#4480, @b-ggs)