v4.0.16

Enhancements:

• Installs bundler 4.0.16 as a default gem.

Bug fixes:

• Skip the make job server when using BSD make. Pull request #9676 by flavorjones

bundler-v4.0.16

Enhancements:

• Bundler: Fix Bundler::Fetcher for PQC support, adding integration connection tests. Pull request #9637 by junaruga
• Reuse RubyGems' vendored tsort in Bundler. Pull request #9647 by hsbt

Bug fixes:

• Initialize the new gem's git repo without a subshell. Pull request #9670 by hsbt
• Preserve CRLF lockfile line endings on Windows. Pull request #9669 by hsbt
• Fix the gemspec error snippet on Windows drive-letter paths. Pull request #9668 by hsbt

Documentation:

• Point Bundler gemspec metadata at the moved docs. Pull request #9648 by hsbt

v4.0.15

Enhancements:

• Rubygems: Fix Gem::Request for PQC support, adding integration connection tests. Pull request #9615 by junaruga
• Reduce peak memory usage of full index loading and bundle install. Pull request #9618 by hsbt
• Installs bundler 4.0.15 as a default gem.

Bug fixes:

• Forward security policy to old-format gems. Pull request #9611 by hsbt

bundler-v4.0.15

Enhancements:

• Resolve Git LFS files in git sources from the real remote. Pull request #9632 by hsbt
• Suggest access issues, not only yanking, for missing locked gems. Pull request #9631 by hsbt
• Implement a make jobserver (continuation of #9210). Pull request #9625 by hsbt
• Reduce peak memory usage of full index loading and bundle install. Pull request #9618 by hsbt
• Bump up to rb-sys 0.9.128. Pull request #9569 by hsbt

Bug fixes:

• Skip the make jobserver on Windows. Pull request #9630 by hsbt
• Don't require source plugins to be installed to parse a lockfile: 4.0.x. Pull request #9621 by hsbt
• Exempt lockfile versions from cooldown on every resolution path. Pull request #9619 by hsbt
• Set Bundler.settings[:ssl_ca_cert] to download gems. Pull request #9610 by junaruga

bundler-v4.0.14

Bug fixes:

• Preserve per-source cooldown when converging sources from the lockfile. Pull request #9601 by bryanwoods
• Don't exclude the locked version from cooldown during bundle update. Pull request #9599 by hsbt

v4.0.14

Enhancements:

• Add executables and bindir validation to the gem installer. Pull request #9595 by hsbt
• Strip C1 control characters from displayed gem text. Pull request #9597 by hsbt
• Installs bundler 4.0.14 as a default gem.

v4.0.13

Enhancements:

• Prevent extraction from escaping destination_dir via pre-existing symlinks. Pull request #9493 by thesmartshadow
• Close stdin immediately when using popen2e. Pull request #9540 by rwstauner
• Fallback to copy symlinks on Windows. Pull request #9296 by larskanis
• Installs bundler 4.0.13 as a default gem.

bundler-v4.0.13

Enhancements:

• Do not hard-code permissions for new gem directories during bundle install. Pull request #9557 by maxfelsher-cgi
• Clear gem specification cache after acquiring process lock. Pull request #9310 by ngan
• Show release date with bundle outdated. Pull request #9337 by hsbt

Bug fixes:

• Apply cooldown to locally installed gem versions. Pull request #9582 by hsbt

Security:

• Add cooldown to delay newly published gem. Pull request #9576 by hsbt

v4.0.12

Enhancements:

• Remove cygwin from WIN_PATTERNS. Pull request #9527 by fd00
• Installs bundler 4.0.12 as a default gem.

Bug fixes:

• Fall back to lockfile version when BUNDLE_VERSION is "lockfile". Pull request #9545 by hsbt
• Read BUNDLE_VERSION env var in BundlerVersionFinder. Pull request #9538 by hsbt

bundler-v4.0.12

Enhancements:

• Make bundle config get return status 1 when the value is not set. Pull request #9505 by willnet
• Use Pathname#absolute?. Pull request #9529 by nobu
• Deprecate parsing non-lockfile content in LockfileParser. Pull request #9502 by kurotaky
• Print a warning for a potential confusion from the indirect dependencies. Pull request #5029 by junaruga
• Respect Gemfile bundler setting in Bundler.setup. Pull request #4892 by godfat

Bug fixes:

• Gracefully handle missing checksums in Compact Index. Pull request #9492 by jneen
• Skip git source exclusion when lockfile cannot backfill. Pull request #9544 by yahonda
• Fix bundle config gemfile unset behavior. Pull request #9514 by afurm