v3.5.1

Enhancements:

• Installs bundler 2.5.1 as a default gem.

v3.5.0

Security:

• Replace Marshal.load with a fully-checked safe gemspec loader. Pull
  request #6896 by
  segiddins

Breaking changes:

• Drop ruby 2.6 and 2.7 support. Pull request
  #7116 by
  deivid-rodriguez
• Release package no longer includes test files. Pull request
  #6781 by hsbt
• Hide Gem::MockGemUi from users. Pull request
  #6623 by hsbt
• Deprecated Gem.datadir has been removed. Pull request
  #6469 by hsbt

Deprecations:

• Deprecate Gem::Platform.match?. Pull request
  #6783 by hsbt
• Deprecate Gem::List. Pull request
  #6311 by segiddins

Features:

• The generate_index command can now generate compact index files and
  lives as an external rubygems-generate_index gem. Pull request
  #7085 by segiddins
• Make gem install fallback to user installation directory if default
  gem home is not writable. Pull request
  #5327 by duckinator
• Leverage ruby feature to warn when requiring default gems from stdlib
  that will be turned into bundled gems in the future. Pull request
  #6840 by hsbt

Performance:

• Use match? when regexp match data is unused. Pull request
  #7263 by segiddins
• Fewer allocations in gem installation. Pull request
  #6975 by segiddins
• Optimize allocations in Gem::Version. Pull request
  #6970 by segiddins

Enhancements:

• Warn for duplicate meta data links when building gems. Pull request
  #7213 by etherbob
• Vendor net-http, net-protocol, resolv, and timeout to reduce
  conflicts between Gemfile gems and internal dependencies. Pull request
  #6793 by
  deivid-rodriguez
• Remove non-transparent requirement added to prerelease gems. Pull
  request #7226 by
  deivid-rodriguez
• Stream output from ext builds when --verbose. Pull request
  #7240 by osyoyu
• Add missing services to CI detection and make it consistent between
  RubyGems and Bundler. Pull request
  #7205 by nevinera
• Update generate licenses template to not freeze regexps. Pull request
  #7154 by
  github-actions[bot]
• Don't check LIBRUBY_RELATIVE in truffleruby to signal a bash prelude
  in rubygems binstubs. Pull request
  #7156 by
  deivid-rodriguez
• Update SPDX list and warn on deprecated identifiers. Pull request
  #6926 by simi
• Simplify extended require to potentially fix some deadlocks. Pull
  request #6827 by nobu
• Small refactors for Gem::Resolver. Pull request
  #6766 by hsbt
• Use double-quotes instead of single-quotes consistently in warnings.
  Pull request #6550 by
  hsbt
• Add debug message for nil version gemspec. Pull request
  #6436 by hsbt
• Installs bundler 2.5.0 as a default gem.

Bug fixes:

• Fix installing from source with same default bundler version already
  installed. Pull request
  #7244 by
  deivid-rodriguez

Documentation:

• Improve comment explaining the necessity of write_default_spec method.
  Pull request #6563 by
  voxik

bundler-v2.5.1

Bug fixes:

• Fix ruby Gemfile DSL with file: parameter no longer working #7288

Performance:

• Save array allocation for every dependency in Gemfile #7270

bundler-v2.5.0

Breaking changes:

• Drop ruby 2.6 and 2.7 support #7116
• The :mswin, :mswin64, :mingw, and :x64_mingw Gemfile platform values are soft-deprecated and aliased to :windows #6391

Features:

• Leverage ruby feature to warn when requiring default gems not included in the bundle that will be turned into bundled gems in the future #6831
• Introduce bundle config set version feature to choose the version of Bundler that should be used and potentially disable using the lockfile version by setting it to system #6817

Performance:

• Use match? when regexp match data is unused #7263
• Avoid some allocations when evaluating ruby Gemfile DSL #7251
• Reduce array allocations when loading definition #7199
• Avoid re-compiling static regexp in a loop #7198
• Reduce allocations when installing gems with bundler #6977
• Use a shared connection pool for fetching gems #7079
• Reduce allocations when parsing compact index #6971

Enhancements:

• Add 3.4 as a supported ruby version in Gemfile DSL #7264
• Improve install advice when some gems are not found #7265
• Vendor net-http, net-protocol, resolv, and timeout to reduce conflicts between Gemfile gems and internal dependencies #6793
• Allow bundle pristine to run in parallel #6927
• Make bundle lock always touch the lockfile in non-frozen mode #7220
• Use Minitest::TestTask in a template file for minitest #7234
• Add missing services to CI detection and make it consistent between RubyGems and Bundler #7205
• Allow auto-install to install missing git gems #7197
• Stop remembering cli flags like --jobs or --retry in configuration #7191
• Simplify remembered flags deprecation message #7189
• Make sure to require "rubygems" explicitly #7139
• Handle development dependencies duplicated in gemspec vs Gemfile #6014
• Make lockfiles generated on macOS include a lock for Linux by default #5700
• Only add a dummy bundler spec to the metadata source when necessary #4443

Bug fixes:

• Resolve ruby file: ".ruby-version" relative to containing Gemfile #7250
• Implement opaque ETag in Compact Index to avoid falling back to old index in servers with different etag implementations #7122
• Fix bundle install --system deprecation advice #7190
• Fix invalid platform removal missing adjacent platforms #7170

Documentation:

• Add missing --prefer-local to Synopsis in bundle-install.1.ronn #7194
• Update GitHub organization of Standard Ruby in bundle gem output and generated configuration #6818
• Replace "prior to" with "immediately after" in bundle gem generated README file #6338

v3.3.27

Bug fixes:

• Installs bundler 2.3.27 as a default gem.

bundler-v2.3.27

Bug fixes

• Provide fix for bundler Gemfile resolving regression. Pull request #6717
  by Hiroshi SHIBATA.

v3.4.22

Enhancements:

• Update SPDX license list as of 2023-10-05. Pull request
  #7040 by
  github-actions[bot]
• Remove unnecessary rescue. Pull request
  #7109 by
  deivid-rodriguez
• Installs bundler 2.4.22 as a default gem.

Bug fixes:

• Handle empty array at built-in YAML serializer. Pull request
  #7099 by hsbt
• Ignore non-tar format .gem files during search. Pull request
  #7095 by dearblue
• Allow explicitly uninstalling multiple versions of same gem. Pull
  request #7063 by
  kstevens715

Performance:

• Avoid regexp match on every call to Gem::Platform.local. Pull request
  #7104 by segiddins

Documentation:

• Get Gem::Specification#extensions_dir documented. Pull request
  #6218 by
  deivid-rodriguez

bundler-v2.4.22

Enhancements:

• Add Bundler::Plugin.loaded? helper #6964
• Give better error when previous installation folder is insecure to remove #7030
• Set file path when eval-ing local specification in EndpointSpecification #7106
• Git ignore the proper files for the CI service selected for bundle gem #7101
• Update vendored thor to v1.3.0 #7078
• Restore using old way of passing Ruby version to resolver #7066
• Bump vendored net-http-persistent to 4.0.2 #6787

Bug fixes:

• Fix regression when installing native extensions on universal rubies #7077
• Only remove bundler plugin gem when it's inside the cache #7001
• Don't show bug report template when GEM_HOME has no writable bit #7113
• Fix regression in old git versions #7114
• Handle empty array at built-in YAML serializer #7099
• Fix force_ruby_platform: when the lockfile only locks the ruby platform #6936

v3.4.21

Enhancements:

• Abort setup.rb if Ruby is too old. Pull request
  #7011 by
  deivid-rodriguez
• Remove usage of Dir.chdir that only execute a subprocess. Pull request
  #6930 by segiddins
• Freeze more strings in generated gemspecs. Pull request
  #6974 by segiddins
• Use pure-ruby YAML parser for loading configuration at RubyGems. Pull
  request #6615 by hsbt
• Installs bundler 2.4.21 as a default gem.

Documentation:

• Update suggested variable for bindir. Pull request
  #7028 by hsbt
• Fix invalid links in documentation. Pull request
  #7008 by simi

bundler-v2.4.21

Enhancements:

• Avoid duplicates -rbundler/setup in RUBYOPT with Ruby preview #7002
• Prevent gem activation in standalone mode #6925
• Support Ruby's preview version format (Ex: 3.3.0-preview2) in Gemfile #7016
• Fix bundle install when older revisions of git source #6980
• Remove usage of Dir.chdir that only execute a subprocess #6930

Bug fixes:

• Don't delete the release version from pre-release string more than once #7054
• Make the lock command not be affected by the frozen setting #7034
• Raise an error when adding a gem incompatible with some locked platform #7035
• Re-resolve when lockfile is invalid #7020
• Don't re-resolve with prereleases if unlocked gem has no prereleases #7021
• Include gemspec in ExtensionTask for native gem tasks #7015
• Avoid error reporting relative path when validating frozen #5128
• Fix bundle lock --minor --update <dep> edge case #6992
• Stop bundler eagerly loading all specs with exts #6945

Performance:

• Reduce allocations when parsing lockfile #6976
• Stop allocating the same settings keys repeatedly #6963

Documentation:

• Improve formatting and global source information in bundle plugin man page #7045
• Update man page of bundle exec to reflect default true of flag --keep-file-descriptors #7033