Skip to content

Update bundler requirement from ~> 1.6 to ~> 2.5 in the bundler group across 1 directory#1

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/bundler/bundler-d2e3a73822
Open

Update bundler requirement from ~> 1.6 to ~> 2.5 in the bundler group across 1 directory#1
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/bundler/bundler-d2e3a73822

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github Oct 19, 2024

Updates the requirements on bundler to permit the latest version.
Updates bundler to 2.5.22

Release notes

Sourced from bundler's releases.

bundler-v2.5.22

Enhancements:

  • Update vendored uri and net-http #8112

Bug fixes:

  • Fix bundler sometimes crashing because of trying to use a version of psych compiled for a different Ruby #8104
Changelog

Sourced from bundler's changelog.

2.5.22 (October 16, 2024)

Enhancements:

  • Update vendored uri and net-http #8112

Bug fixes:

  • Fix bundler sometimes crashing because of trying to use a version of psych compiled for a different Ruby #8104

2.5.21 (October 3, 2024)

Bug fixes:

  • Fix bug report template printed when changing a path source to a git source in frozen mode #8079
  • Fix stub.activated? sometimes returning false after activation under bundler #8073
  • Fix old cache format detection when application is not source controlled #8076
  • Fix bundler/inline resetting ENV changes #8059

2.5.20 (September 24, 2024)

Enhancements:

  • Don't try to auto-install dev versions of Bundler not available remotely #8045
  • Don't try to install locked bundler when --local is passed #8041

Bug fixes:

  • Fix bundler/inline overwriting lockfiles #8055
  • Ensure refs directory in cached git source #8047
  • Fix bundle outdated with --group option #8052

2.5.19 (September 18, 2024)

Enhancements:

  • Raise original errors when unexpected errors happen during Gemfile evaluation #8003
  • Make an exe file executable when generating new gems #8020
  • Gracefully handle gem activation conflicts in inline mode #5535
  • Don't include hook templates in cached git source #8013
  • Fix some errors about a previous installation folder that's unsafe to remove, when there's no need to remove it #7985
  • Emit progress to stderr during bundle outdated --parseable #7966
  • Reject unknown platforms when running bundle lock --add-platform #7967
  • Emit progress to stderr when --print is passed to bundle lock #7957

Bug fixes:

  • Fix bundle install --local hitting the network when default gems are included #8027
  • Remove temporary .lock files unintentionally left around by gem installer #8022
  • Fix bundle exec rake install failing when local gem has extensions #7977

... (truncated)

Commits
  • 47aad23 Bump Bundler version to 2.5.22
  • 99f93ec Changelog for Bundler version 2.5.22
  • 0c0fd54 Merge pull request #8147 from rubygems/deivid-rodriguez/missing-ext-warnings
  • b37032c Merge pull request #8123 from rubygems/deivid-rodriguez/fix-nfs-shares
  • 4baa07e Merge pull request #8104 from rubygems/deivid-rodriguez/fix-specs-with-missin...
  • 2363a29 Merge pull request #8122 from rubygems/typofix
  • 51e7e7e Merge pull request #8114 from rubygems/deivid-rodriguez/stabilize-ci
  • b55f691 Merge pull request #8112 from rubygems/segiddins/update-vendored-net-http
  • a10bc40 Merge pull request #8094 from rubygems/deivid-rodriguez/remove-spec-matches-f...
  • ee1a4bf Merge pull request #8048 from rubygems/segiddins/unconditionally-set-installe...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Updates the requirements on [bundler](https://github.com/rubygems/rubygems) to permit the latest version.

Updates `bundler` to 2.5.22
- [Release notes](https://github.com/rubygems/rubygems/releases)
- [Changelog](https://github.com/rubygems/rubygems/blob/master/bundler/CHANGELOG.md)
- [Commits](ruby/rubygems@bundler-v1.6.3...bundler-v2.5.22)

---
updated-dependencies:
- dependency-name: bundler
  dependency-type: direct:development
  dependency-group: bundler
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 19, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants