ruby.git/lib/bundler/fetcher.rb, branch v3_4_1

[rubygems/rubygems] Include original error when openssl fails to load

2024-11-13T08:35:40+00:00

https://github.com/rubygems/rubygems/commit/440343b791

Vendor `securerandom` in Bundler as well

2024-09-03T01:49:13+00:00

It is loaded by `Fetcher` so in most case it's fine.

But if using `bundler/inline` and a gem need to be fetched,
`securerandom` will be loaded and cause a conflict.

Can be reproduced with:

```ruby
require 'bundler/inline'

gemfile do
  source 'https://rubygems.org'
  gem 'graphql', '~> 2.0'
  gem 'graphql-client', '~> 0.18'
end

require 'json'
require 'graphql/client'
require 'graphql/client/http'
```

Ref: https://github.com/rails/rails/pull/52473#issuecomment-2284667451

Co-authored-by: Jean Boussier

[rubygems/rubygems] Use rubygems vendored uri from Bundler when available

2024-01-29T03:15:10+00:00

https://github.com/rubygems/rubygems/commit/5d6a8f2fb4

[rubygems/rubygems] Remove more methods now defined in all RubyGems versions

2023-12-14T12:22:48+00:00

https://github.com/rubygems/rubygems/commit/e015200ffa

[rubygems/rubygems] Use vendored timeout from RubyGems

2023-12-13T03:16:55+00:00

https://github.com/rubygems/rubygems/commit/cfc5018c54

[rubygems/rubygems] Use vendored net-http in Bundler

2023-12-13T03:16:55+00:00

https://github.com/rubygems/rubygems/commit/0d758e8926

[rubygems/rubygems] Require `rubygems/request` where it's used

2023-12-13T03:16:55+00:00

https://github.com/rubygems/rubygems/commit/73b9498658

[rubygems/rubygems] Use modern hashes consistently

2023-12-07T22:29:33+00:00

https://github.com/rubygems/rubygems/commit/bb66253f2c

[rubygems/rubygems] Bundler::Fetcher uses Bundler::CIDetector

2023-12-06T20:05:25+00:00

Additionally, the result is memoized, as it's used twice in a row.

This change does result in a net behavioral diff, as the list of ENVs
being checked has been updated (now includes buildkite, taskcluster,
cirrus, dsari, and drops buildbox and snap)

https://github.com/rubygems/rubygems/commit/3fb445a5a1

[rubygems/rubygems] User bundler UA when downloading gems

2023-11-15T08:33:14+00:00

Gem::RemoteFetcher uses Gem::Request, which adds the RubyGems UA.
Gem::RemoteFetcher is used to download gems, as well as the full index.
We would like the bundler UA to be used whenever bundler is making
requests.

This PR also avoids unsafely mutating the headers hash on the shared
`Gem::RemoteFetcher.fetcher` instance, which could cause corruption or
incorrect headers when making parallel requests. Instead, we create one
remote fetcher per rubygems remote, which is similar to the connection
segregation bundler is already doing

https://github.com/rubygems/rubygems/commit/f0e8dacdec