ruby.git/spec/bundler/update, branch v3_4_9

Merge RubyGems-3.6.6 and Bundler-2.6.6

2025-04-09T00:54:29+00:00

[rubygems/rubygems] Enable checksums on Bundler 3 for fresh lockfiles

2024-07-23T19:40:09+00:00

And get specs passing.

https://github.com/rubygems/rubygems/commit/c23b5f5b84

Synchronize Bundler & RubyGems (#11071)

2024-06-28T14:12:29+00:00

[rubygems/rubygems] Reuse `git` helper when possible

2024-06-06T18:44:43+00:00

https://github.com/rubygems/rubygems/commit/f7c7bae940

[rubygems/rubygems] Use modern hashes consistently

2023-12-07T22:29:33+00:00

https://github.com/rubygems/rubygems/commit/bb66253f2c

[rubygems/rubygems] Converts Bundler lockfile checksum validation to opt-in only

2023-12-05T21:09:53+00:00

Looks for the CHECKSUMS section in the lockfile, activating the feature
only if the section exists. Without a CHECKSUMS section, Bundler will
continue as normal, validating checksums when gems are installed while
checksums from the compact index are present.

https://github.com/rubygems/rubygems/commit/2353cc93a4

[rubygems/rubygems] Add CHECKSUMS for each gem in lockfile

2023-10-23T04:59:01+00:00

We lock the checksum for each resolved spec under a new CHECKSUMS
section in the lockfile.

If the locked spec does not resolve for the local platform, we preserve
the locked checksum, similar to how we preserve specs.

Checksum locking only makes sense on install. The compact index
information is only available then.

https://github.com/rubygems/rubygems/commit/bde37ca6bf

[rubygems/rubygems] Fix bundle update --redownload

2023-08-29T19:31:36+00:00

It now does the redownloading/installing just like bundle install --redownload

https://github.com/rubygems/rubygems/commit/3b058e5eca

Merge RubyGems/Bundler master

2022-12-09T07:36:22+00:00

  Pick from https://github.com/rubygems/rubygems/commit/823c776d951f3c35094611473ec77f94e8bf6610

Followed up CVE-2022-39253 for bundler examples

2022-10-20T05:36:06+00:00