Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 21, 2021

Updates the requirements on bundler to permit the latest version.

Release notes

Sourced from bundler's releases.

bundler-v2.3.0

Features:

  • Change bundle install with a lockfile to respect the BUNDLED WITH bundler version #4076

Enhancements:

  • Print warning when running Bundler on potentially problematic RubyGems & Ruby combinations #5177
  • Error tracing should be printed to stderr #5179
  • Add github and ref options to bundle add #5159
  • Add require parameter to bundle add #5021
  • Enable parallel installation on Windows by default #4822
  • More logging when compact index is not used and we fallback to other APIs #4546
  • bundle gem generated MiniTest file and class now start with 'test' #3893
  • Add Bundler::Definition.no_lock accessor for skipping lock file creation/update #3401

Bug fixes:

  • Fix crash when when no platform specific matches exist and show a proper error #5168
  • Ignore dependencies not actually locked from frozen check #5152
  • Fix bundle cache --all-platforms on Windows #4552

Documentation:

  • Fix gemspec template typo #4545
Changelog

Sourced from bundler's changelog.

2.3.0 (December 21, 2021)

Features:

  • Change bundle install with a lockfile to respect the BUNDLED WITH bundler version #4076

Enhancements:

  • Print warning when running Bundler on potentially problematic RubyGems & Ruby combinations #5177
  • Error tracing should be printed to stderr #5179
  • Add github and ref options to bundle add #5159
  • Add require parameter to bundle add #5021
  • Enable parallel installation on Windows by default #4822
  • More logging when compact index is not used and we fallback to other APIs #4546
  • bundle gem generated MiniTest file and class now start with 'test' #3893
  • Add Bundler::Definition.no_lock accessor for skipping lock file creation/update #3401

Bug fixes:

  • Fix crash when when no platform specific matches exist and show a proper error #5168
  • Ignore dependencies not actually locked from frozen check #5152
  • Fix bundle cache --all-platforms on Windows #4552

Documentation:

  • Fix gemspec template typo #4545

2.2.33 (December 7, 2021)

Security fixes:

  • Pass "--" to git commands to separate positional and optional args #5142

Enhancements:

  • Accept pull request URLs as github source #5126
  • Add --version parameter to bundle info command #5137
  • Let original Errno::EACCES error be raised in compact index updater #5110
  • Improve gemfile-lockfile source equivalence errors #5120
  • Avoid float-to-string loss of characters in GitHub Actions configuration labels in new gem template #5089
  • Add an initial rbs template to bundle gem skeleton #5041
  • Avoid shared libraries not getting environment passed right after argv in memory when bundle exec is used #4815

Bug fixes:

  • Don't cleanup paths from gems already activated from $LOAD_PATH #5111
  • Fix handling prereleases of 0 versions, like 0.0.0.dev or 0.0.0.SNAPSHOT #5116
  • Fix escape of filenames in bundle doctor #5102
  • Don't unlock dependencies when running bundle install after changing global source #5090
  • Fix missing locked specs when depended on another platform #5092

... (truncated)

Commits
  • e7167b9 Merge pull request #5185 from rubygems/release/bundler_2.3.0_rubygems_3.3.0
  • 3ae13e7 Use new stable branch in CI scripts
  • e1dcefe Bump Rubygems version to 3.3.0
  • 2003cbc Changelog for Rubygems version 3.3.0
  • a6889b2 Bump Bundler version to 2.3.0
  • 7565ed7 Changelog for Bundler version 2.3.0
  • 082a0ed Merge pull request #5188 from rubygems/clarify_release_level_naming
  • 0743b5a Merge pull request #5177 from rubygems/old_rubies_warnings
  • 204670a Clarify release level naming in scripts
  • d6df0b7 Print warning when running potentially problematic rubygems + ruby combinations
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Updates the requirements on [bundler](https://github.com/rubygems/rubygems) to permit the latest version.
- [Release notes](https://github.com/rubygems/rubygems/releases)
- [Changelog](https://github.com/rubygems/rubygems/blob/master/bundler/CHANGELOG.md)
- [Commits](ruby/rubygems@bundler-v1.16.0...bundler-v2.3.0)

---
updated-dependencies:
- dependency-name: bundler
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Dec 21, 2021
@segiddins segiddins merged commit a8c46f1 into master Dec 21, 2021
@segiddins segiddins deleted the dependabot/bundler/bundler-tw-2.3 branch December 21, 2021 18:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants