bunny 3.2.0 → 3.4.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 712a18cac951945d52173bb1222fc7f31db91caa07b38ab70939f0d82ba16716
-  data.tar.gz: 545adc41e89744dcf9b28737e174f3006f61f5d174e157a74441e60d34bbeb62
+  metadata.gz: ca20b85fa97e5dfdf990bf45cbf000331d413a9aff294c121a788d7883a053bd
+  data.tar.gz: 69f78dded2ac65e651ba70baab933119b9cd80663a1bc0d5dae52767d01dae5c
 SHA512:
-  metadata.gz: 15b48abb0e61c6dd1d19bfa3e1c9135315106bf1e9da78ce619c7fcab665b2d462747abe3f1bd8b2a3cc16530c58b10cf882c6c547b1cf0cc03a235c700f8087
-  data.tar.gz: fcdaef2f5bda1df881f7c6ba27ded1c591fd7c0b77ec816ce45b8554220062183918af19224d216cd50e0bc613bfae6add49b976232ba05d7d672a0dc92d509c
+  metadata.gz: 2b6bb72790ce461357e9934be10ae6a1b1d07744d835bed51c1add5502bbf4710ff9cc16e87e4b685b0fe31a9a8bd932dc00c6d9795cfc3f03ca6b03df6b0e40
+  data.tar.gz: 53978c476c2e712a4e624765fcd66ce5d4dd8cc99eeb364a244f26990d303ea3600d394db130db949040f0a76c59fc76657f6c2a714bb26bc45f84229c1cc5bb

data/ChangeLog.md

@@ -1,3 +1,57 @@
+## Changes between Bunny 3.3.0 and 3.4.0 (Sep 18, 2026)
+
+### Ruby 3.2 or Later Is Now Required
+
+`required_ruby_version` was raised from `3.0` to `3.2`.
+
+Ruby `3.0` and `3.1` have reached end of life and are no longer tested against.
+
+
+### Client Certificate Chains
+
+If `tls_cert` points at a certificate bundle (chain), the entire chain will now be sent.
+
+Previously only the first (leaf) certificate was sent, unintentionally.
+
+Contributed by @eglitobias.
+
+GitHub issues: [#749](https://github.com/ruby-amqp/bunny/issues/749), [#750](https://github.com/ruby-amqp/bunny/pull/750)
+
+
+### TLS Handshake Now Respects `connect_timeout`
+
+A peer that accepted the TCP connection but never completed the TLS handshake
+could block `Bunny::Session#start` indefinitely. The handshake now gives up after
+`connect_timeout` and the connection fails over to the next endpoint.
+
+This requires the `openssl` gem `3.3.0` or later.
+
+
+## Changes between Bunny 3.2.0 and 3.3.0 (Aug 29, 2026)
+
+### Passive Declarations No Longer Affect Topology Recovery
+
+`Bunny::Channel#queue` and `Bunny::Channel#exchange` recorded passively declared
+queues and exchanges for topology recovery by mistake. Passive declares are just
+existence checks and should not be replayed by topology recovery.
+
+`Bunny::Session#queue_exists?` and `Bunny::Session#exchange_exists?` were affected
+in the same way, since both are implemented using passive declarations.
+
+### Queue Recovery Recorded `exclusive` and `auto_delete` in Reverse
+
+`Bunny::Channel#queue_declare` passed the `exclusive` and `auto_delete` properties
+to the topology registry in the wrong order, so a queue that used one but not the
+other was recovered with both properties flipped.
+
+
+### `amq-protocol` Bump to `2.9.0`
+
+[`2.9.0` release notes](https://github.com/ruby-amqp/amq-protocol/releases/tag/v2.9.0).
+
+This version requires Ruby `3.2.0` or later.
+
+
 ## Changes between Bunny 3.1.0 and 3.2.0 (Aug 19, 2026)
 
 ### Modernization for Ruby 3.x

data/lib/bunny/channel.rb

@@ -523,7 +523,7 @@ module Bunny
 
       q = find_queue(name) || Bunny::Queue.new(self, name, opts)
 
-      record_queue(q)
+      record_queue(q) unless opts[:passive]
       register_queue(q)
     end
 
@@ -1352,7 +1352,7 @@ module Bunny
       args = opts[:arguments]
 
       result = self.queue_declare_without_recording_topology(name, opts)
-      self.record_queue_with(self, result.queue, is_server_named, durable, exclusive, auto_delete, args) unless passive
+      self.record_queue_with(self, result.queue, is_server_named, durable, auto_delete, exclusive, args) unless passive
 
       result
     end

data/lib/bunny/exchange.rb

@@ -108,8 +108,9 @@ module Bunny
 
       # for basic.return dispatch and such
       @channel.register_exchange(self)
-      # for topology recovery
-      @channel.record_exchange(self)
+      # for topology recovery. A passive declaration does not own the exchange,
+      # so it must not overwrite what was recorded for it earlier
+      @channel.record_exchange(self) unless @options[:passive]
     end
 
     # @return [Boolean] true if this exchange was declared as durable (will survive broker restart).

data/lib/bunny/queue.rb

@@ -91,8 +91,9 @@ module Bunny
 
       # for basic.deliver dispatch and such
       @channel.register_queue(self)
-      # for topology recovery
-      @channel.record_queue(self)
+      # for topology recovery. A passive declaration does not own the queue,
+      # so it must not overwrite what was recorded for it earlier
+      @channel.record_queue(self) unless @options[:passive]
     end
 
     # @return [Boolean] true if this queue was declared as durable (will survive broker restart).

data/lib/bunny/transport.rb

@@ -108,7 +108,12 @@ module Bunny
     def connect
       if uses_tls?
         begin
-          @socket.connect
+          tls_handshake
+        rescue ClientTimeout => e
+          @logger.error { "TLS connection failed: #{e.message}" }
+          close
+          @status = :not_connected
+          raise Bunny::TCPConnectionFailed.new(e, self.hostname, self.port)
         rescue OpenSSL::SSL::SSLError => e
           @logger.error { "TLS connection failed: #{e.message}" }
           raise e
@@ -335,6 +340,17 @@ module Bunny
       @socket
     end
 
+    # Needs the openssl gem >= 3.3, which added SSLSocket#timeout= and made #connect honour it
+    def tls_handshake
+      previous_timeout = @socket.timeout
+      @socket.timeout = @connect_timeout if @connect_timeout
+      @socket.connect
+    rescue IO::TimeoutError
+      raise ClientTimeout, "TLS handshake timed out after #{@connect_timeout} seconds"
+    ensure
+      @socket.timeout = previous_timeout
+    end
+
     def maybe_initialize_socket
       initialize_socket if !@socket || closed?
     end
@@ -481,7 +497,12 @@ module Bunny
     end
 
     def initialize_tls_context(ctx, opts = {})
-      ctx.cert       = OpenSSL::X509::Certificate.new(@tls_certificate) if @tls_certificate
+      if @tls_certificate
+        leaf, *chain = OpenSSL::X509::Certificate.load(@tls_certificate)
+
+        ctx.cert = leaf
+        ctx.extra_chain_cert = chain unless chain.empty?
+      end
       ctx.key        = OpenSSL::PKey.read(@tls_key) if @tls_key
       ctx.cert_store = if @tls_certificate_store
                          @tls_certificate_store

data/lib/bunny/version.rb

@@ -2,5 +2,5 @@
 
 module Bunny
   # @return [String] Version of the library
-  VERSION = "3.2.0"
+  VERSION = "3.4.0"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: bunny
 version: !ruby/object:Gem::Version
-  version: 3.2.0
+  version: 3.4.0
 platform: ruby
 authors:
 - Chris Duncan
@@ -19,14 +19,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.8'
+        version: '2.9'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.8'
+        version: '2.9'
 - !ruby/object:Gem::Dependency
   name: logger
   requirement: !ruby/object:Gem::Requirement
@@ -47,6 +47,20 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '1.7'
+- !ruby/object:Gem::Dependency
+  name: openssl
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '3.3'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '3.3'
 - !ruby/object:Gem::Dependency
   name: sorted_set
   requirement: !ruby/object:Gem::Requirement
@@ -129,14 +143,14 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: '3.0'
+      version: '3.2'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.6.9
+rubygems_version: 4.0.16
 specification_version: 4
 summary: Popular easy to use Ruby client for RabbitMQ
 test_files: []