Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 26, 2023

Updates the requirements on bundler to permit the latest version.

Release notes

Sourced from bundler's releases.

bundler-v2.4.7

Enhancements:

  • Add --gemfile flag to bundle init to configure gemfile name to generate #6046
  • Improve solve failure explanations by using better wording #6366
  • Restore better error message when locked ref does not exist #6356
  • Avoid crashing when installing from a corrupted lockfile #6355
  • Improve wording of unmet dependencies warning #6357
  • Add Ruby 3.2 and 3.3 platforms to Gemfile DSL #6346

Bug fixes:

  • Fix crash in pub grub involving empty ranges #6365
  • Make gemspec file generated by bundle gem properly exclude itself from packaged gem #6339
  • Preserve relative path sources in standalone setup #6327
Changelog

Sourced from bundler's changelog.

2.4.7 (February 15, 2023)

Enhancements:

  • Add --gemfile flag to bundle init to configure gemfile name to generate #6046
  • Improve solve failure explanations by using better wording #6366
  • Restore better error message when locked ref does not exist #6356
  • Avoid crashing when installing from a corrupted lockfile #6355
  • Improve wording of unmet dependencies warning #6357
  • Add Ruby 3.2 and 3.3 platforms to Gemfile DSL #6346

Bug fixes:

  • Fix crash in pub grub involving empty ranges #6365
  • Make gemspec file generated by bundle gem properly exclude itself from packaged gem #6339
  • Preserve relative path sources in standalone setup #6327

2.4.6 (January 31, 2023)

Enhancements:

  • Don't warn on bundle binstubs --standalone --all #6312

Bug fixes:

  • Don't undo require decorations made by other gems #6308
  • Fix bundler/inline not properly installing gems with extensions when used more than once #6306
  • Fix bundler/inline not skipping installation when gems already there, when used more than once #6305

2.4.5 (January 21, 2023)

Bug fixes:

  • Fix bundler/inline not resolving properly if gems not preinstalled #6282
  • Fix packages for external platforms being introduced in lockfile when Bundler retries resolution #6285

Documentation:

  • Update bundle-exec man page to not use deprecated Bundler.with_clean_env #6284

2.4.4 (January 16, 2023)

Bug fixes:

  • Fix platform specific gems removed from the lockfile #6266
  • Properly handle incompatibilities on platform specific gems #6270
  • Optimistically exclude prereleases from initial resolution #6246
  • Fix another case of not properly falling back to ruby variant when materializing #6261
  • Skip setting BUNDLER_SETUP on Ruby 2.6 #6252
  • Let resolver deal with legacy gems with equivalent version and different dependencies #6219

... (truncated)

Commits
  • 3aa72e6 Bump Bundler version to 2.4.7
  • 2539f63 Changelog for Bundler version 2.4.7
  • 663334b Merge pull request #6046 from gustavothecoder/fix-bundle-gemfile-config-key
  • 65c8150 Merge pull request #6366 from jhawthorn/update_pubgrub
  • bbabfd8 Merge pull request #6365 from rubygems/fix-bad-args
  • f1c326b Merge pull request #6356 from rubygems/better-error-on-bad-ref
  • 6436b28 Merge pull request #6359 from rubygems/sync-pub-grub
  • ea93a85 Merge pull request #6355 from composerinteralia/corrupt-lockfile-crash
  • f0c1209 Merge pull request #6357 from composerinteralia/unmet-dependencies-warning
  • 36c6856 Merge pull request #6346 from composerinteralia/ruby-32-platform-value
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Updates the requirements on [bundler](https://github.com/rubygems/rubygems) to permit the latest version.
- [Release notes](https://github.com/rubygems/rubygems/releases)
- [Changelog](https://github.com/rubygems/rubygems/blob/master/bundler/CHANGELOG.md)
- [Commits](ruby/rubygems@bundler-v1.16.0...bundler-v2.4.7)

---
updated-dependencies:
- dependency-name: bundler
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Feb 26, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants