v3.5.10

Security:

• Add a limit to the size of the metadata and checksums files in a gem
  package. Pull request
  #7568 by segiddins

Enhancements:

• Don't fully require rubygems from rubygems/package to prevent some
  circular require warnings when using Bundler. Pull request
  #7612 by
  deivid-rodriguez
• Installs bundler 2.5.10 as a default gem.

Bug fixes:

• Rename credential email to identifier in WebAuthn poller. Pull request
  #7623 by jenshenny

bundler-v2.5.10

Security:

• Never write credentials to lockfiles #7560

Enhancements:

• Add auto_install support to require "bundler/setup" #6561
• Add --glob flag to bundle add #7557

Bug fixes:

• Make sure bundle update <specific_gems> can always update to the latest resolvable version of each requested gem #7558
• Show better error when installed gemspecs are unreadable #7603
• Fix bundle update not working on an out of sync lockfile #7607
• Don't upcase Windows ENV before backing it up #7574
• Properly resolve aliases when bundle help is run #7601
• Fix issue installing gems with linux-musl variant on non musl linux #7583

Documentation:

• Clarify bundle check behaviour in docs #7613

v3.5.9

Enhancements:

• Installs bundler 2.5.9 as a default gem.

bundler-v2.5.9

Bug fixes:

• Fix installing plugins via relative paths #7571

v3.5.8

Security:

• Respect global umask when writing regular files. Pull request
  #7518 by
  deivid-rodriguez

Enhancements:

• Allow string keys with gemrc. Pull request
  #7543 by hsbt
• [Experimental] Add "gem rebuild" command. Pull request
  #4913 by duckinator
• Installs bundler 2.5.8 as a default gem.

Bug fixes:

• Fix NoMethodError crash when building errors about corrupt package
  files. Pull request
  #7539 by jez
• Fix resolver to properly intersect Arrays of Gem::Resolver::Activation
  objects. Pull request
  #7537 by
  deivid-rodriguez

bundler-v2.5.8

Enhancements:

• Allow installing plugins from path via CLI #6960
• Improve validation of bundle plugin install options #7529

Bug fixes:

• Fix resolver error message when it runs out of versions due to --strict --patch filtering out everything #7527
• Fix incorrect bundle update --bundler message #7516

v3.5.7

Enhancements:

• Warn on empty or open required_ruby_version specification attribute.
  Pull request #5010 by
  simi
• Control whether YAML aliases are enabled in Gem::SafeYAML.safe_load via
  attribute. Pull request
  #7464 by segiddins
• Update SPDX license list as of 2024-02-08. Pull request
  #7468 by
  github-actions[bot]
• Installs bundler 2.5.7 as a default gem.

Bug fixes:

• Allow prerelease activation (even if requirement is not explicit about
  it) when it's the only possibility. Pull request
  #7428 by kimesf

Documentation:

• Fix a typo. Pull request
  #7505 by hsbt
• Use https instead of http in documentation links. Pull request
  #7481 by hsbt

bundler-v2.5.7

Deprecations:

• Deprecate bundle plugin install --local-git= #7048

Enhancements:

• Ignore commented out keys in config file #7514
• Fix exclusion of .gemspec file itself in bundle gem generated gemspec file #7488
• Remove redundant configs from bundle gem generated rubocop configuration #7478
• Add gitlab: git source shorthand #7449
• Use full path for instance_eval in Bundler::DSL#eval_gemfile #7471

Documentation:

• Use https instead of http in documentation links #7481

v3.5.6

Enhancements:

• Deep copy requirements in Gem::Specification and Gem::Requirement.
  Pull request #7439 by
  flavorjones
• Change gem login message to clear up that username can be also used.
  Pull request #7422 by
  VitaliySerov
• Add metadata for rubygems.org. Pull request
  #7435 by m-nakamura145
• Improve gem login scope selection. Pull request
  #7342 by williantenfen
• Vendor uri in RubyGems. Pull request
  #7386 by
  deivid-rodriguez
• Installs bundler 2.5.6 as a default gem.

Bug fixes:

• Skip to load commented out words. Pull request
  #7413 by hsbt
• Fix rake runtime dependency warning for rake based extension. Pull
  request #7395 by ntkme

bundler-v2.5.6

Deprecations:

• Refactor lockfile generation and deprecate Definition#lock with explicit lockfile #7047

Enhancements:

• Bump required_ruby_version to be used in bundle gem template #7430

Bug fixes:

• Fix musl platform not being added to the lockfile #7441
• Let Bundler.with_original_env properly restore env variables originally empty #7383