v3.5.11

Enhancements:

• Update SPDX license list as of 2024-05-22. Pull request
  #7689 by
  github-actions[bot]
• Fix the update_rubygems inconsistency (--disable-gems). Pull request
  #7658 by x-yuri
• Accept WASI as an OS name in Gem::Platform. Pull request
  #7629 by kateinoigakukun
• Warn if RubyGems version explicitly set in gemspec does not match
  running version. Pull request
  #7460 by
  deivid-rodriguez
• Installs bundler 2.5.11 as a default gem.

Bug fixes:

• Fix binstubs sometimes not getting regenerated when --destdir is
  given. Pull request
  #7660 by
  deivid-rodriguez
• Fix gem uninstall --user-install for symlinked HOME. Pull request
  #7645 by
  deivid-rodriguez
• Fix issue when plugin stubs would sometimes not be properly removed by
  gem uninstall. Pull request
  #7631 by
  deivid-rodriguez
• Fix plugins uninstallation for user installed gems. Pull request
  #6456 by voxik

Performance:

• Use a constant empty tar header to avoid extra allocations. Pull request
  #7484 by segiddins

Documentation:

• Recommend bin/rake over rake in contributing docs. Pull request
  #7648 by
  deivid-rodriguez

bundler-v2.5.11

Deprecations:

• Deprecate Bundler constants #7653

Enhancements:

• Bump bundle gem generated COC to Contributor Covenant 2.1 #7692
• Retry a full clone when git server does not support shallow capabilities #7649

Bug fixes:

• Fix regression when caching gems from secondary sources #7659
• Fix error when Bundler installation is corrupted #7642
• Fix crash caused by RubyGems require gem activation logic running before Bundler can properly register its own monkeypatches #7647

Performance:

• Update cache checksums to decrease string allocations #7637
• Fix performance regression in applications with a local cache #7680

Documentation:

• Recommend bin/rake over rake in contributing docs #7648
• Monthly man update for May 2024 #7640
• Clarify Bundler support policy #7633

v3.5.10

Security:

• Add a limit to the size of the metadata and checksums files in a gem
  package. Pull request
  #7568 by segiddins

Enhancements:

• Don't fully require rubygems from rubygems/package to prevent some
  circular require warnings when using Bundler. Pull request
  #7612 by
  deivid-rodriguez
• Installs bundler 2.5.10 as a default gem.

Bug fixes:

• Rename credential email to identifier in WebAuthn poller. Pull request
  #7623 by jenshenny

bundler-v2.5.10

Security:

• Never write credentials to lockfiles #7560

Enhancements:

• Add auto_install support to require "bundler/setup" #6561
• Add --glob flag to bundle add #7557

Bug fixes:

• Make sure bundle update <specific_gems> can always update to the latest resolvable version of each requested gem #7558
• Show better error when installed gemspecs are unreadable #7603
• Fix bundle update not working on an out of sync lockfile #7607
• Don't upcase Windows ENV before backing it up #7574
• Properly resolve aliases when bundle help is run #7601
• Fix issue installing gems with linux-musl variant on non musl linux #7583

Documentation:

• Clarify bundle check behaviour in docs #7613

v3.5.9

Enhancements:

• Installs bundler 2.5.9 as a default gem.

bundler-v2.5.9

Bug fixes:

• Fix installing plugins via relative paths #7571

v3.5.8

Security:

• Respect global umask when writing regular files. Pull request
  #7518 by
  deivid-rodriguez

Enhancements:

• Allow string keys with gemrc. Pull request
  #7543 by hsbt
• [Experimental] Add "gem rebuild" command. Pull request
  #4913 by duckinator
• Installs bundler 2.5.8 as a default gem.

Bug fixes:

• Fix NoMethodError crash when building errors about corrupt package
  files. Pull request
  #7539 by jez
• Fix resolver to properly intersect Arrays of Gem::Resolver::Activation
  objects. Pull request
  #7537 by
  deivid-rodriguez

bundler-v2.5.8

Enhancements:

• Allow installing plugins from path via CLI #6960
• Improve validation of bundle plugin install options #7529

Bug fixes:

• Fix resolver error message when it runs out of versions due to --strict --patch filtering out everything #7527
• Fix incorrect bundle update --bundler message #7516

v3.5.7

Enhancements:

• Warn on empty or open required_ruby_version specification attribute.
  Pull request #5010 by
  simi
• Control whether YAML aliases are enabled in Gem::SafeYAML.safe_load via
  attribute. Pull request
  #7464 by segiddins
• Update SPDX license list as of 2024-02-08. Pull request
  #7468 by
  github-actions[bot]
• Installs bundler 2.5.7 as a default gem.

Bug fixes:

• Allow prerelease activation (even if requirement is not explicit about
  it) when it's the only possibility. Pull request
  #7428 by kimesf

Documentation:

• Fix a typo. Pull request
  #7505 by hsbt
• Use https instead of http in documentation links. Pull request
  #7481 by hsbt

bundler-v2.5.7

Deprecations:

• Deprecate bundle plugin install --local-git= #7048

Enhancements:

• Ignore commented out keys in config file #7514
• Fix exclusion of .gemspec file itself in bundle gem generated gemspec file #7488
• Remove redundant configs from bundle gem generated rubocop configuration #7478
• Add gitlab: git source shorthand #7449
• Use full path for instance_eval in Bundler::DSL#eval_gemfile #7471

Documentation:

• Use https instead of http in documentation links #7481