rubygems-update 3.5.5 → 3.5.10

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c73f20f52f61db2ba70e9fd03114617fbaf95d0d78b9cb296f5b10efeb762aa8
-  data.tar.gz: 0a30532cbba00ffba42ae8649f7a43fca6c688e8a3e2cb7c74818b1336ff2de5
+  metadata.gz: 97ec064ecaff6444c3f5d4886ab9f26d8816ecbfd69bde14cc9d9748fd5216ca
+  data.tar.gz: 8faa5fd2aff20db824858c72c8630330d756a0c1ed4be3ebed776f34312d78a7
 SHA512:
-  metadata.gz: 86a479e68ce7ba20464ac3a1af32d2f3032ae12fa5ec61b529b69296dacfc2d3746ab3e92382c04fe0363cd48d0a289cb3996cfea609b73314cdaf4c5cecf08b
-  data.tar.gz: 006f72296a1ee5695a5df7a12be4c61bf58b39ac1698b2047219217a160115b6a34f329169cdcc1019782f99fbbe66e20dd165d5941dc396338ade779b54b8d7
+  metadata.gz: efd2a5427612ce3ba3752fabb0b8bb3896fc39bcbbec9b96b901cae4ea1f11b074865a5a1d1a2d648b6557a0cd8bca53701ad9479f2b2d9492da0f58bdfb20d0
+  data.tar.gz: 9cc9ec7254e49127dbf7f48c1d052ff86195075e09d7e59b0ed5d053233fd7e1f0dffc5ba7def7f5d3e71102d8efbcabac0616c0e47caef385bf96fe18012a50

data/CHANGELOG.md

@@ -1,3 +1,110 @@
+# 3.5.10 / 2024-05-03
+
+## Security:
+
+* Add a limit to the size of the metadata and checksums files in a gem
+  package. Pull request
+  [#7568](https://github.com/rubygems/rubygems/pull/7568) by segiddins
+
+## Enhancements:
+
+* Don't fully require `rubygems` from `rubygems/package` to prevent some
+  circular require warnings when using Bundler. Pull request
+  [#7612](https://github.com/rubygems/rubygems/pull/7612) by
+  deivid-rodriguez
+* Installs bundler 2.5.10 as a default gem.
+
+## Bug fixes:
+
+* Rename credential email to identifier in WebAuthn poller. Pull request
+  [#7623](https://github.com/rubygems/rubygems/pull/7623) by jenshenny
+
+# 3.5.9 / 2024-04-12
+
+## Enhancements:
+
+* Installs bundler 2.5.9 as a default gem.
+
+# 3.5.8 / 2024-04-11
+
+## Security:
+
+* Respect global umask when writing regular files. Pull request
+  [#7518](https://github.com/rubygems/rubygems/pull/7518) by
+  deivid-rodriguez
+
+## Enhancements:
+
+* Allow string keys with gemrc. Pull request
+  [#7543](https://github.com/rubygems/rubygems/pull/7543) by hsbt
+* [Experimental] Add "gem rebuild" command. Pull request
+  [#4913](https://github.com/rubygems/rubygems/pull/4913) by duckinator
+* Installs bundler 2.5.8 as a default gem.
+
+## Bug fixes:
+
+* Fix NoMethodError crash when building errors about corrupt package
+  files. Pull request
+  [#7539](https://github.com/rubygems/rubygems/pull/7539) by jez
+* Fix resolver to properly intersect Arrays of `Gem::Resolver::Activation`
+  objects. Pull request
+  [#7537](https://github.com/rubygems/rubygems/pull/7537) by
+  deivid-rodriguez
+
+# 3.5.7 / 2024-03-22
+
+## Enhancements:
+
+* Warn on empty or open required_ruby_version specification attribute.
+  Pull request [#5010](https://github.com/rubygems/rubygems/pull/5010) by
+  simi
+* Control whether YAML aliases are enabled in Gem::SafeYAML.safe_load via
+  attribute. Pull request
+  [#7464](https://github.com/rubygems/rubygems/pull/7464) by segiddins
+* Update SPDX license list as of 2024-02-08. Pull request
+  [#7468](https://github.com/rubygems/rubygems/pull/7468) by
+  github-actions[bot]
+* Installs bundler 2.5.7 as a default gem.
+
+## Bug fixes:
+
+* Allow prerelease activation (even if requirement is not explicit about
+  it) when it's the only possibility. Pull request
+  [#7428](https://github.com/rubygems/rubygems/pull/7428) by kimesf
+
+## Documentation:
+
+* Fix a typo. Pull request
+  [#7505](https://github.com/rubygems/rubygems/pull/7505) by hsbt
+* Use https instead of http in documentation links. Pull request
+  [#7481](https://github.com/rubygems/rubygems/pull/7481) by hsbt
+
+# 3.5.6 / 2024-02-06
+
+## Enhancements:
+
+* Deep copy requirements in `Gem::Specification` and `Gem::Requirement`.
+  Pull request [#7439](https://github.com/rubygems/rubygems/pull/7439) by
+  flavorjones
+* Change gem login message to clear up that username can be also used.
+  Pull request [#7422](https://github.com/rubygems/rubygems/pull/7422) by
+  VitaliySerov
+* Add metadata for rubygems.org. Pull request
+  [#7435](https://github.com/rubygems/rubygems/pull/7435) by m-nakamura145
+* Improve gem login scope selection. Pull request
+  [#7342](https://github.com/rubygems/rubygems/pull/7342) by williantenfen
+* Vendor uri in RubyGems. Pull request
+  [#7386](https://github.com/rubygems/rubygems/pull/7386) by
+  deivid-rodriguez
+* Installs bundler 2.5.6 as a default gem.
+
+## Bug fixes:
+
+* Skip to load commented out words. Pull request
+  [#7413](https://github.com/rubygems/rubygems/pull/7413) by hsbt
+* Fix rake runtime dependency warning for rake based extension. Pull
+  request [#7395](https://github.com/rubygems/rubygems/pull/7395) by ntkme
+
 # 3.5.5 / 2024-01-18
 
 ## Enhancements:

data/Manifest.txt

@@ -164,6 +164,7 @@ bundler/lib/bundler/plugin/events.rb
 bundler/lib/bundler/plugin/index.rb
 bundler/lib/bundler/plugin/installer.rb
 bundler/lib/bundler/plugin/installer/git.rb
+bundler/lib/bundler/plugin/installer/path.rb
 bundler/lib/bundler/plugin/installer/rubygems.rb
 bundler/lib/bundler/plugin/source_list.rb
 bundler/lib/bundler/process_lock.rb
@@ -383,6 +384,7 @@ lib/rubygems/commands/pristine_command.rb
 lib/rubygems/commands/push_command.rb
 lib/rubygems/commands/query_command.rb
 lib/rubygems/commands/rdoc_command.rb
+lib/rubygems/commands/rebuild_command.rb
 lib/rubygems/commands/search_command.rb
 lib/rubygems/commands/server_command.rb
 lib/rubygems/commands/setup_command.rb
@@ -424,6 +426,7 @@ lib/rubygems/gemcutter_utilities.rb
 lib/rubygems/gemcutter_utilities/webauthn_listener.rb
 lib/rubygems/gemcutter_utilities/webauthn_listener/response.rb
 lib/rubygems/gemcutter_utilities/webauthn_poller.rb
+lib/rubygems/gemspec_helpers.rb
 lib/rubygems/install_default_message.rb
 lib/rubygems/install_message.rb
 lib/rubygems/install_update_options.rb
@@ -431,37 +434,7 @@ lib/rubygems/installer.rb
 lib/rubygems/installer_uninstaller_utils.rb
 lib/rubygems/local_remote_options.rb
 lib/rubygems/name_tuple.rb
-lib/rubygems/net-http/.document
-lib/rubygems/net-http/LICENSE.txt
-lib/rubygems/net-http/lib/net/http.rb
-lib/rubygems/net-http/lib/net/http/backward.rb
-lib/rubygems/net-http/lib/net/http/exceptions.rb
-lib/rubygems/net-http/lib/net/http/generic_request.rb
-lib/rubygems/net-http/lib/net/http/header.rb
-lib/rubygems/net-http/lib/net/http/proxy_delta.rb
-lib/rubygems/net-http/lib/net/http/request.rb
-lib/rubygems/net-http/lib/net/http/requests.rb
-lib/rubygems/net-http/lib/net/http/response.rb
-lib/rubygems/net-http/lib/net/http/responses.rb
-lib/rubygems/net-http/lib/net/http/status.rb
-lib/rubygems/net-http/lib/net/https.rb
-lib/rubygems/net-protocol/.document
-lib/rubygems/net-protocol/LICENSE.txt
-lib/rubygems/net-protocol/lib/net/protocol.rb
-lib/rubygems/net/http.rb
 lib/rubygems/openssl.rb
-lib/rubygems/optparse.rb
-lib/rubygems/optparse/.document
-lib/rubygems/optparse/COPYING
-lib/rubygems/optparse/lib/optionparser.rb
-lib/rubygems/optparse/lib/optparse.rb
-lib/rubygems/optparse/lib/optparse/ac.rb
-lib/rubygems/optparse/lib/optparse/date.rb
-lib/rubygems/optparse/lib/optparse/kwargs.rb
-lib/rubygems/optparse/lib/optparse/shellwords.rb
-lib/rubygems/optparse/lib/optparse/time.rb
-lib/rubygems/optparse/lib/optparse/uri.rb
-lib/rubygems/optparse/lib/optparse/version.rb
 lib/rubygems/package.rb
 lib/rubygems/package/digest_io.rb
 lib/rubygems/package/file_source.rb
@@ -489,9 +462,6 @@ lib/rubygems/request_set/lockfile.rb
 lib/rubygems/request_set/lockfile/parser.rb
 lib/rubygems/request_set/lockfile/tokenizer.rb
 lib/rubygems/requirement.rb
-lib/rubygems/resolv/.document
-lib/rubygems/resolv/LICENSE.txt
-lib/rubygems/resolv/lib/resolv.rb
 lib/rubygems/resolver.rb
 lib/rubygems/resolver/activation_request.rb
 lib/rubygems/resolver/api_set.rb
@@ -511,29 +481,6 @@ lib/rubygems/resolver/installer_set.rb
 lib/rubygems/resolver/local_specification.rb
 lib/rubygems/resolver/lock_set.rb
 lib/rubygems/resolver/lock_specification.rb
-lib/rubygems/resolver/molinillo.rb
-lib/rubygems/resolver/molinillo/.document
-lib/rubygems/resolver/molinillo/LICENSE
-lib/rubygems/resolver/molinillo/lib/molinillo.rb
-lib/rubygems/resolver/molinillo/lib/molinillo/delegates/resolution_state.rb
-lib/rubygems/resolver/molinillo/lib/molinillo/delegates/specification_provider.rb
-lib/rubygems/resolver/molinillo/lib/molinillo/dependency_graph.rb
-lib/rubygems/resolver/molinillo/lib/molinillo/dependency_graph/action.rb
-lib/rubygems/resolver/molinillo/lib/molinillo/dependency_graph/add_edge_no_circular.rb
-lib/rubygems/resolver/molinillo/lib/molinillo/dependency_graph/add_vertex.rb
-lib/rubygems/resolver/molinillo/lib/molinillo/dependency_graph/delete_edge.rb
-lib/rubygems/resolver/molinillo/lib/molinillo/dependency_graph/detach_vertex_named.rb
-lib/rubygems/resolver/molinillo/lib/molinillo/dependency_graph/log.rb
-lib/rubygems/resolver/molinillo/lib/molinillo/dependency_graph/set_payload.rb
-lib/rubygems/resolver/molinillo/lib/molinillo/dependency_graph/tag.rb
-lib/rubygems/resolver/molinillo/lib/molinillo/dependency_graph/vertex.rb
-lib/rubygems/resolver/molinillo/lib/molinillo/errors.rb
-lib/rubygems/resolver/molinillo/lib/molinillo/gem_metadata.rb
-lib/rubygems/resolver/molinillo/lib/molinillo/modules/specification_provider.rb
-lib/rubygems/resolver/molinillo/lib/molinillo/modules/ui.rb
-lib/rubygems/resolver/molinillo/lib/molinillo/resolution.rb
-lib/rubygems/resolver/molinillo/lib/molinillo/resolver.rb
-lib/rubygems/resolver/molinillo/lib/molinillo/state.rb
 lib/rubygems/resolver/requirement_list.rb
 lib/rubygems/resolver/set.rb
 lib/rubygems/resolver/source_set.rb
@@ -573,14 +520,6 @@ lib/rubygems/ssl_certs/rubygems.org/GlobalSignRootCA.pem
 lib/rubygems/ssl_certs/rubygems.org/GlobalSignRootCA_R3.pem
 lib/rubygems/stub_specification.rb
 lib/rubygems/text.rb
-lib/rubygems/timeout.rb
-lib/rubygems/timeout/.document
-lib/rubygems/timeout/LICENSE.txt
-lib/rubygems/timeout/lib/timeout.rb
-lib/rubygems/tsort.rb
-lib/rubygems/tsort/.document
-lib/rubygems/tsort/LICENSE.txt
-lib/rubygems/tsort/lib/tsort.rb
 lib/rubygems/uninstaller.rb
 lib/rubygems/unknown_command_spell_checker.rb
 lib/rubygems/update_suggestion.rb
@@ -591,6 +530,87 @@ lib/rubygems/util.rb
 lib/rubygems/util/licenses.rb
 lib/rubygems/util/list.rb
 lib/rubygems/validator.rb
+lib/rubygems/vendor/molinillo/.document
+lib/rubygems/vendor/molinillo/LICENSE
+lib/rubygems/vendor/molinillo/lib/molinillo.rb
+lib/rubygems/vendor/molinillo/lib/molinillo/delegates/resolution_state.rb
+lib/rubygems/vendor/molinillo/lib/molinillo/delegates/specification_provider.rb
+lib/rubygems/vendor/molinillo/lib/molinillo/dependency_graph.rb
+lib/rubygems/vendor/molinillo/lib/molinillo/dependency_graph/action.rb
+lib/rubygems/vendor/molinillo/lib/molinillo/dependency_graph/add_edge_no_circular.rb
+lib/rubygems/vendor/molinillo/lib/molinillo/dependency_graph/add_vertex.rb
+lib/rubygems/vendor/molinillo/lib/molinillo/dependency_graph/delete_edge.rb
+lib/rubygems/vendor/molinillo/lib/molinillo/dependency_graph/detach_vertex_named.rb
+lib/rubygems/vendor/molinillo/lib/molinillo/dependency_graph/log.rb
+lib/rubygems/vendor/molinillo/lib/molinillo/dependency_graph/set_payload.rb
+lib/rubygems/vendor/molinillo/lib/molinillo/dependency_graph/tag.rb
+lib/rubygems/vendor/molinillo/lib/molinillo/dependency_graph/vertex.rb
+lib/rubygems/vendor/molinillo/lib/molinillo/errors.rb
+lib/rubygems/vendor/molinillo/lib/molinillo/gem_metadata.rb
+lib/rubygems/vendor/molinillo/lib/molinillo/modules/specification_provider.rb
+lib/rubygems/vendor/molinillo/lib/molinillo/modules/ui.rb
+lib/rubygems/vendor/molinillo/lib/molinillo/resolution.rb
+lib/rubygems/vendor/molinillo/lib/molinillo/resolver.rb
+lib/rubygems/vendor/molinillo/lib/molinillo/state.rb
+lib/rubygems/vendor/net-http/.document
+lib/rubygems/vendor/net-http/LICENSE.txt
+lib/rubygems/vendor/net-http/lib/net/http.rb
+lib/rubygems/vendor/net-http/lib/net/http/backward.rb
+lib/rubygems/vendor/net-http/lib/net/http/exceptions.rb
+lib/rubygems/vendor/net-http/lib/net/http/generic_request.rb
+lib/rubygems/vendor/net-http/lib/net/http/header.rb
+lib/rubygems/vendor/net-http/lib/net/http/proxy_delta.rb
+lib/rubygems/vendor/net-http/lib/net/http/request.rb
+lib/rubygems/vendor/net-http/lib/net/http/requests.rb
+lib/rubygems/vendor/net-http/lib/net/http/response.rb
+lib/rubygems/vendor/net-http/lib/net/http/responses.rb
+lib/rubygems/vendor/net-http/lib/net/http/status.rb
+lib/rubygems/vendor/net-http/lib/net/https.rb
+lib/rubygems/vendor/net-protocol/.document
+lib/rubygems/vendor/net-protocol/LICENSE.txt
+lib/rubygems/vendor/net-protocol/lib/net/protocol.rb
+lib/rubygems/vendor/optparse/.document
+lib/rubygems/vendor/optparse/COPYING
+lib/rubygems/vendor/optparse/lib/optionparser.rb
+lib/rubygems/vendor/optparse/lib/optparse.rb
+lib/rubygems/vendor/optparse/lib/optparse/ac.rb
+lib/rubygems/vendor/optparse/lib/optparse/date.rb
+lib/rubygems/vendor/optparse/lib/optparse/kwargs.rb
+lib/rubygems/vendor/optparse/lib/optparse/shellwords.rb
+lib/rubygems/vendor/optparse/lib/optparse/time.rb
+lib/rubygems/vendor/optparse/lib/optparse/uri.rb
+lib/rubygems/vendor/optparse/lib/optparse/version.rb
+lib/rubygems/vendor/resolv/.document
+lib/rubygems/vendor/resolv/LICENSE.txt
+lib/rubygems/vendor/resolv/lib/resolv.rb
+lib/rubygems/vendor/timeout/.document
+lib/rubygems/vendor/timeout/LICENSE.txt
+lib/rubygems/vendor/timeout/lib/timeout.rb
+lib/rubygems/vendor/tsort/.document
+lib/rubygems/vendor/tsort/LICENSE.txt
+lib/rubygems/vendor/tsort/lib/tsort.rb
+lib/rubygems/vendor/uri/.document
+lib/rubygems/vendor/uri/LICENSE.txt
+lib/rubygems/vendor/uri/lib/uri.rb
+lib/rubygems/vendor/uri/lib/uri/common.rb
+lib/rubygems/vendor/uri/lib/uri/file.rb
+lib/rubygems/vendor/uri/lib/uri/ftp.rb
+lib/rubygems/vendor/uri/lib/uri/generic.rb
+lib/rubygems/vendor/uri/lib/uri/http.rb
+lib/rubygems/vendor/uri/lib/uri/https.rb
+lib/rubygems/vendor/uri/lib/uri/ldap.rb
+lib/rubygems/vendor/uri/lib/uri/ldaps.rb
+lib/rubygems/vendor/uri/lib/uri/mailto.rb
+lib/rubygems/vendor/uri/lib/uri/rfc2396_parser.rb
+lib/rubygems/vendor/uri/lib/uri/rfc3986_parser.rb
+lib/rubygems/vendor/uri/lib/uri/version.rb
+lib/rubygems/vendor/uri/lib/uri/ws.rb
+lib/rubygems/vendor/uri/lib/uri/wss.rb
+lib/rubygems/vendored_molinillo.rb
+lib/rubygems/vendored_net_http.rb
+lib/rubygems/vendored_optparse.rb
+lib/rubygems/vendored_timeout.rb
+lib/rubygems/vendored_tsort.rb
 lib/rubygems/version.rb
 lib/rubygems/version_option.rb
 lib/rubygems/yaml_serializer.rb

data/POLICIES.md

@@ -65,6 +65,59 @@ Bundler:
     have to work on weekends.
 *   Continue with the regular release process below.
 
+### Branching
+
+Bundler releases are synchronized with rubygems releases at the moment. That
+means that releases for both share the same stable branch, and they should
+generally happen together.
+
+The current conventional naming for stable branches is `x+1.y`, where `x.y` is
+the version of `bundler` that will be released. This is because `rubygems-x+1.y`
+will be released at the same time.
+
+For example, `rubygems-3.2.0` and `bundler-2.2.0` were both released from the
+`3.2` stable branch.
+
+Once a stable branch has been cut from `master`, changes for that minor release
+series are only made _intentionally_, via patch releases. That is to say,
+changes to `master` by default _won't_ make their way into the current stable
+branch, and development on `master` will be targeting the next minor
+or major release.
+
+There is a `rake prepare_release[<target_rubygems_version>]` rake task
+that helps with creating a release. It takes a single argument, the _exact
+rubygems release_ being made (e.g.  `3.2.3` when releasing bundler `2.2.3`).
+This task checks out the appropriate stable branch (`3.2`, for example), grabs
+all merged but unreleased PRs from both bundler & rubygems from GitHub that are
+compatible with the target release level, and then cherry-picks those changes
+(and only those changes) to a new branch based off the stable branch. Then bumps
+the version in all version files, synchronizes both changelogs to include all
+backported changes and commits that change on top of the cherry-picks.
+
+Note that this task requires all user facing pull requests to be tagged with
+specific labels. See [Merging a PR](/bundler/doc/playbooks/MERGING_A_PR.md) for details.
+
+Also note that when this task cherry-picks, it cherry-picks the merge commits
+using the following command:
+
+```bash
+$ git cherry-pick -m 1 MERGE_COMMIT_SHAS
+```
+
+For example, for PR [#5029](https://github.com/rubygems/bundler/pull/5029), we
+cherry picked commit [dd6aef9](https://github.com/rubygems/bundler/commit/dd6aef97a5f2e7173f406267256a8c319d6134ab),
+not [4fe9291](https://github.com/rubygems/bundler/commit/4fe92919f51e3463f0aad6fa833ab68044311f03)
+using:
+
+```bash
+$ git cherry-pick -m 1 dd6aef9
+```
+
+After running the task, you'll have a release branch ready to be merged into the
+stable branch. You'll want to open a PR from this branch into the stable branch
+and provided CI is green, you can go ahead, merge the PR and run release tasks
+as specified below from the updated stable branch.
+
 ### Automatic changelog and backport generation
 
 PR labels and titles are used to automatically generate changelogs for patch and
@@ -85,12 +138,28 @@ backporting a PR generates conflicts that are solved by backporting another PR
 with no user visible changes. You can use these special labels to also backport
 the other PR and not get any conflicts.
 
+### Breaking changes
+
+Bundler cares a lot about preserving compatibility. As a result, changes that
+break backwards compatibility should (whenever this is possible) include a feature
+release that is backwards compatible, and issue warnings for all options and
+behaviors that will change.
+
+We only release major breaking changes when incrementing the _major_ version of
+Bundler and RubyGems. However, experience shows that almost every single part of
+Bundler and RubyGems is depended on by someone in ways hard to anticipate. So if
+we were strict about breaking changes we'd need to hold on from making progress
+a lot, or continuously increment the major version, emptying "really major"
+versions from their meaning. Because of this, we also may release "small"
+breaking changes in minor releases. "Small" here means that we expect them to
+affect only very few users in rare cases.
+
 ### Steps for patch releases
 
 *   Confirm all PRs that you want backported are properly tagged with `rubygems:
     <type>` or `bundler: <type>` labels at GitHub.
-*   Run `rake prepare_release[<target_version>]`. This will create a PR to the
-    stable branch with the backports included in the release, and proper
+*   Run `rake prepare_release[<target_rubygems_version>]`. This will create a PR
+    to the stable branch with the backports included in the release, and proper
     changelogs and version bumps. It will also create a PR to merge release
     changelogs into master.
 *   Once CI passes, merge the release PR, switch to the stable branch and pull
@@ -102,10 +171,10 @@ the other PR and not get any conflicts.
 
 *   Confirm all PRs that you want listed in changelogs are properly tagged with
     `rubygems: <type>` or `bundler: <type>` labels at GitHub.
-*   Run `rake prepare_release[<target_version>]`. This will create a new stable
-    branch off the master branch, and create a PR to it with the proper version
-    bumps and changelogs. It will also create a PR to merge release changelogs
-    into master.
+*   Run `rake prepare_release[<target_rubygems_version>]`. This will create a
+    new stable branch off the master branch, and create a PR to it with the
+    proper version bumps and changelogs. It will also create a PR to merge
+    release changelogs into master.
 *   Replace the stable branch in the workflows with the new stable branch, and
     push that change to the release PR.
 *   Replace version numbers with the next ".dev" version, and push that change

data/bundler/CHANGELOG.md

@@ -1,3 +1,78 @@
+# 2.5.10 (May 3, 2024)
+
+## Security:
+
+  - Never write credentials to lockfiles [#7560](https://github.com/rubygems/rubygems/pull/7560)
+
+## Enhancements:
+
+  - Add auto_install support to require "bundler/setup" [#6561](https://github.com/rubygems/rubygems/pull/6561)
+  - Add `--glob` flag to `bundle add` [#7557](https://github.com/rubygems/rubygems/pull/7557)
+
+## Bug fixes:
+
+  - Make sure `bundle update <specific_gems>` can always update to the latest resolvable version of each requested gem [#7558](https://github.com/rubygems/rubygems/pull/7558)
+  - Show better error when installed gemspecs are unreadable [#7603](https://github.com/rubygems/rubygems/pull/7603)
+  - Fix `bundle update` not working on an out of sync lockfile [#7607](https://github.com/rubygems/rubygems/pull/7607)
+  - Don't upcase Windows ENV before backing it up [#7574](https://github.com/rubygems/rubygems/pull/7574)
+  - Properly resolve aliases when `bundle help` is run [#7601](https://github.com/rubygems/rubygems/pull/7601)
+  - Fix issue installing gems with linux-musl variant on non musl linux [#7583](https://github.com/rubygems/rubygems/pull/7583)
+
+## Documentation:
+
+  - Clarify `bundle check` behaviour in docs [#7613](https://github.com/rubygems/rubygems/pull/7613)
+
+# 2.5.9 (April 12, 2024)
+
+## Bug fixes:
+
+  - Fix installing plugins via relative paths [#7571](https://github.com/rubygems/rubygems/pull/7571)
+
+# 2.5.8 (April 11, 2024)
+
+## Enhancements:
+
+  - Allow installing plugins from path via CLI [#6960](https://github.com/rubygems/rubygems/pull/6960)
+  - Improve validation of `bundle plugin install` options [#7529](https://github.com/rubygems/rubygems/pull/7529)
+
+## Bug fixes:
+
+  - Fix resolver error message when it runs out of versions due to `--strict --patch` filtering out everything [#7527](https://github.com/rubygems/rubygems/pull/7527)
+  - Fix incorrect `bundle update --bundler` message [#7516](https://github.com/rubygems/rubygems/pull/7516)
+
+# 2.5.7 (March 22, 2024)
+
+## Deprecations:
+
+  - Deprecate `bundle plugin install --local-git=` [#7048](https://github.com/rubygems/rubygems/pull/7048)
+
+## Enhancements:
+
+  - Ignore commented out keys in config file [#7514](https://github.com/rubygems/rubygems/pull/7514)
+  - Fix exclusion of `.gemspec` file itself in `bundle gem` generated gemspec file [#7488](https://github.com/rubygems/rubygems/pull/7488)
+  - Remove redundant configs from `bundle gem` generated rubocop configuration [#7478](https://github.com/rubygems/rubygems/pull/7478)
+  - Add `gitlab:` git source shorthand [#7449](https://github.com/rubygems/rubygems/pull/7449)
+  - Use full path for `instance_eval` in `Bundler::DSL#eval_gemfile` [#7471](https://github.com/rubygems/rubygems/pull/7471)
+
+## Documentation:
+
+  - Use https instead of http in documentation links [#7481](https://github.com/rubygems/rubygems/pull/7481)
+
+# 2.5.6 (February 6, 2024)
+
+## Deprecations:
+
+  - Refactor lockfile generation and deprecate `Definition#lock` with explicit lockfile [#7047](https://github.com/rubygems/rubygems/pull/7047)
+
+## Enhancements:
+
+  - Bump `required_ruby_version` to be used in `bundle gem` template [#7430](https://github.com/rubygems/rubygems/pull/7430)
+
+## Bug fixes:
+
+  - Fix musl platform not being added to the lockfile [#7441](https://github.com/rubygems/rubygems/pull/7441)
+  - Let `Bundler.with_original_env` properly restore env variables originally empty [#7383](https://github.com/rubygems/rubygems/pull/7383)
+
 # 2.5.5 (January 18, 2024)
 
 ## Bug fixes:

data/bundler/lib/bundler/build_metadata.rb

@@ -4,8 +4,8 @@ module Bundler
   # Represents metadata from when the Bundler gem was built.
   module BuildMetadata
     # begin ivars
-    @built_at = "2024-01-18".freeze
-    @git_commit_sha = "2efa8cec93".freeze
+    @built_at = "2024-05-03".freeze
+    @git_commit_sha = "24cac00613".freeze
     @release = true
     # end ivars
 

data/bundler/lib/bundler/cli/binstubs.rb

@@ -45,7 +45,7 @@ module Bundler
             next
           end
 
-          Bundler.settings.temporary(path: (Bundler.settings[:path] || Bundler.root)) do
+          Bundler.settings.temporary(path: Bundler.settings[:path] || Bundler.root) do
             installer.generate_standalone_bundler_executable_stubs(spec, installer_opts)
           end
         else

data/bundler/lib/bundler/cli/gem.rb

@@ -437,7 +437,7 @@ module Bundler
     end
 
     def required_ruby_version
-      "2.6.0"
+      "3.0.0"
     end
 
     def rubocop_version

data/bundler/lib/bundler/cli/lock.rb

@@ -33,8 +33,11 @@ module Bundler
         update = { bundler: bundler }
       end
 
+      file = options[:lockfile]
+      file = file ? Pathname.new(file).expand_path : Bundler.default_lockfile
+
       Bundler.settings.temporary(frozen: false) do
-        definition = Bundler.definition(update)
+        definition = Bundler.definition(update, file)
 
         Bundler::CLI::Common.configure_gem_version_promoter(definition, options) if options[:update]
 
@@ -60,10 +63,8 @@ module Bundler
         if print
           puts definition.to_lock
         else
-          file = options[:lockfile]
-          file = file ? File.expand_path(file) : Bundler.default_lockfile
           puts "Writing lockfile to #{file}"
-          definition.lock(file)
+          definition.lock
         end
       end
 

data/bundler/lib/bundler/cli/plugin.rb

@@ -5,14 +5,15 @@ module Bundler
   class CLI::Plugin < Thor
     desc "install PLUGINS", "Install the plugin from the source"
     long_desc <<-D
-      Install plugins either from the rubygems source provided (with --source option) or from a git source provided with --git (for remote repos) or --local_git (for local repos). If no sources are provided, it uses Gem.sources
+      Install plugins either from the rubygems source provided (with --source option), from a git source provided with --git, or a local path provided with --path. If no sources are provided, it uses Gem.sources
    D
     method_option "source", type: :string, default: nil, banner: "URL of the RubyGems source to fetch the plugin from"
     method_option "version", type: :string, default: nil, banner: "The version of the plugin to fetch"
     method_option "git", type: :string, default: nil, banner: "URL of the git repo to fetch from"
-    method_option "local_git", type: :string, default: nil, banner: "Path of the local git repo to fetch from"
+    method_option "local_git", type: :string, default: nil, banner: "Path of the local git repo to fetch from (deprecated)"
     method_option "branch", type: :string, default: nil, banner: "The git branch to checkout"
     method_option "ref", type: :string, default: nil, banner: "The git revision to check out"
+    method_option "path", type: :string, default: nil, banner: "Path of a local gem to directly use"
     def install(*plugins)
       Bundler::Plugin.install(plugins, options)
     end