Skip to content

Conversation

@dependabot-preview
Copy link

Updates the requirements on bundler to permit the latest version.

Release notes

Sourced from bundler's releases.

bundler-v2.2.4

Bug fixes:

  • Fix bundle man pages display on truffleruby #4209
  • Fix Windows + JRuby no longer being able to install git sources #4196
Changelog

Sourced from bundler's changelog.

2.2.3 (December 22, 2020)

Bug fixes:

  • Restore full compatibility with previous lockfiles #4179
  • Add all matching variants with the same platform specificity to the lockfile #4180
  • Fix bundler installing gems for a different platform when running in frozen mode and current platform not in the lockfile #4172
  • Fix crash when bundle exec'ing to bundler #4175

2.2.2 (December 17, 2020)

Bug fixes:

  • Fix resolver crash when a candidate has 0 matching platforms #4163
  • Restore change to copy global with/without config locally upon bundle install #4154

2.2.1 (December 14, 2020)

Bug fixes:

  • Ad-hoc fix for platform regression #4127
  • Workaround JRuby + Windows issue with net-http-persistent vendored code #4138
  • Reset also root when in a nested invocation #4140
  • Restore 2.1.4 resolution times #4134
  • Fix bundle outdated --strict crash #4133
  • Autoload Bundler::RemoteSpecification to workaround crash on jruby #4114

2.2.0 (December 7, 2020)

Enhancements:

  • New gem template: prefer require_relative to require #4066
  • Always show underlying error when fetching specs fails #4061
  • Add --all-platforms flag to bundle binstubs to generate binstubs for all platforms #3886
  • Improve gem not found in source error messages #4019
  • Revert resolving all Gemfile platforms automatically #4052
  • Remove extra empty line from README template #4041
  • Lazily load erb #4011

Bug fixes:

  • Fix Bundler::Plugin::API::Source#to_s having empty source type #4084
  • Raise consistent errors with or without bundle exec #4063
  • Fix edge case resulting in a crash when using zeitwerk inside a nested bundle exec invocation #4062
  • Enable specific_platform by default #4015
  • Prevent remove command from deleting gemfile lines that are comments #4045
  • Fix issue with cache_all_platforms and specific_platform configured #4042
  • Fix incorrect error message on Windows #4039
  • Make printed drive letters consistent on Windows #4038
  • Load rubygems plugins from RUBYLIB during bundle install and bundle update #3534
Commits
  • 529e536 Merge pull request #4212 from rubygems/release/bundler_2.2.4_rubygems_3.2.4
  • 05bffe7 Bump Rubygems version to 3.2.4
  • 9fbacf6 Changelog for Rubygems version 3.2.4
  • b38ca1c Bump Bundler version to 2.2.4
  • 0d2b988 Changelog for Bundler version 2.2.4
  • 68f6a4f Merge pull request #4213 from rubygems/fix_index_fallback
  • 095358c Merge pull request #4209 from rubygems/fix_bundle_man_pages_display_on_truffl...
  • 56efcd2 Merge pull request #4168 from rubygems/markdown_changelog
  • e0e49df Merge pull request #4196 from rubygems/no_subshells_for_git_commands
  • 9d650b8 Merge pull request #4201 from rubygems/fix_head_install_on_truffleruby
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
  • @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

  • Update frequency (including time of day and day of week)
  • Pull request limits (per update run and/or open at any time)
  • Automerge options (never/patch/minor, and dev/runtime dependencies)
  • Out-of-range updates (receive only lockfile updates, if desired)
  • Security updates (receive only security updates, if desired)

Updates the requirements on [bundler](https://github.com/rubygems/rubygems) to permit the latest version.
- [Release notes](https://github.com/rubygems/rubygems/releases)
- [Changelog](https://github.com/rubygems/rubygems/blob/master/bundler/CHANGELOG.md)
- [Commits](ruby/rubygems@v1.16.0...bundler-v2.2.4)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
@dependabot-preview dependabot-preview bot added the dependencies Pull requests that update a dependency file label Jan 1, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant