rubygems-update 4.0.0.beta2 → 4.0.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f31ce47efac5d3d0089c3975c5780af2261713de46df8c22303f5ac55573d518
-  data.tar.gz: b43f1d1d9f1738113a8019f3ae2545d397994d5521b67c49ff2c483bbfea1b3c
+  metadata.gz: e3a33e757835b567451e625eb60fd87dc9d40b5710c96f6a548cf493bb930f03
+  data.tar.gz: 95b7748028d7563f74e22aac82e4eab9766ba4aca0b29596af58264ac42721e6
 SHA512:
-  metadata.gz: 68e41c3357b295d7d47e18e010429c345f13fe61b8fa634ed8829ccc10d285912c949a3bc2e39658ee3006581ceb4607bb748165eca58d5105c7305e4ac0d21b
-  data.tar.gz: a04efa571683ed932c4da17f87d5fea140961849479d854671098ef2a3d61b2394d4da977218cd2f22db8016b3d25d80e198ca98df5ba7a2722531c502020fd2
+  metadata.gz: 86a9a29465975044bfc0ad313700a2037a3ef33182f905134df80ab09b43bb753ccd5512bc0cdcc4c8838648ed7e01cfa47d9348d3d482d43c6a045584119be4
+  data.tar.gz: aaa0136052ccb1ca34cbedc2d45707f34b82820d1b72859c9de97f959b861bddae87e77801a47a50c79f5b5fb3fe2ce56d8fc46c47506646e554629c3bb41cf4

data/CHANGELOG.md

@@ -1,55 +1,6 @@
 # Changelog
 
-## 4.0.0.beta2 / 2025-11-26
-
-### Deprecations:
-
-* Deprecate comparing Gem::Version objects with strings. Pull request
-  [#9085](https://github.com/ruby/rubygems/pull/9085) by tenderlove
-
-### Enhancements:
-
-* Undeprecate Gem::Version#<=> against strings. Pull request
-  [#9110](https://github.com/ruby/rubygems/pull/9110) by byroot
-* Installs bundler 4.0.0.beta2 as a default gem.
-
-### Bug fixes:
-
-* Respect `BUNDLE_VERSION` config at Gem::BundlerVersionFinder. Pull
-  request [#9106](https://github.com/ruby/rubygems/pull/9106) by hsbt
-
-## 4.0.0.beta1 / 2025-11-20
-
-### Security:
-
-* Bump up vendored URI to 1.0.4. Pull request
-  [#9031](https://github.com/ruby/rubygems/pull/9031) by hsbt
-
-### Breaking changes:
-
-* Removed deprecated `-C` option from gem build. Pull request
-  [#9088](https://github.com/ruby/rubygems/pull/9088) by hsbt
-* Removed deprecated Gem::Specification#has_rdoc, has_rdoc= and has_rdoc?.
-  Pull request [#9084](https://github.com/ruby/rubygems/pull/9084) by hsbt
-* Removed deprecated `gem query` command. Pull request
-  [#9083](https://github.com/ruby/rubygems/pull/9083) by hsbt
-* Removed deprecated Gem::DependencyInstaller#find_gems_with_sources. Pull
-  request [#9082](https://github.com/ruby/rubygems/pull/9082) by hsbt
-* Remove deprecated methods of RubyGems. Pull request
-  [#9081](https://github.com/ruby/rubygems/pull/9081) by hsbt
-* Make verification methods private. Pull request
-  [#9051](https://github.com/ruby/rubygems/pull/9051) by tenderlove
-* Deprecate `--default` option from install command. Pull request
-  [#7588](https://github.com/ruby/rubygems/pull/7588) by hsbt
-* Switch to 4.0.0.dev in development version. Pull request
-  [#9002](https://github.com/ruby/rubygems/pull/9002) by hsbt
-* Removed `compatibility.rb` for RG 4.0. Pull request
-  [#8899](https://github.com/ruby/rubygems/pull/8899) by hsbt
-
-### Deprecations:
-
-* Deprecate `Gem::Specification#datadir`. Pull request
-  [#8900](https://github.com/ruby/rubygems/pull/8900) by hsbt
+## 4.0.0 / 2025-12-03
 
 ### Features:
 
@@ -62,6 +13,8 @@
 
 ### Performance:
 
+* Add `MAKEFLAGS=-j` by default before compiling. Pull request
+  [#9131](https://github.com/ruby/rubygems/pull/9131) by Edouard-chin
 * Remove some memoization. Pull request
   [#9017](https://github.com/ruby/rubygems/pull/9017) by tenderlove
 * Pull `Gem.win_platform?` out of a hot path. Pull request
@@ -81,13 +34,9 @@
   [#9089](https://github.com/ruby/rubygems/pull/9089) by hsbt
 * Removed unused `Gem::Deprecate`. Pull request
   [#9090](https://github.com/ruby/rubygems/pull/9090) by hsbt
-* Test all tests of `make test-all` by ruby core. Pull request
-  [#9075](https://github.com/ruby/rubygems/pull/9075) by hsbt
 * Add debug logging information to see the time it took to download and
   install a gem. Pull request
   [#9066](https://github.com/ruby/rubygems/pull/9066) by Edouard-chin
-* Use `assert_ractor` for testing Ractor. Pull request
-  [#9069](https://github.com/ruby/rubygems/pull/9069) by hsbt
 * Fix constants in TAR to be frozen. Pull request
   [#9041](https://github.com/ruby/rubygems/pull/9041) by tenderlove
 * Remove open-ended and prerelease dependency warnings when building gems.
@@ -97,16 +46,81 @@
   [#8753](https://github.com/ruby/rubygems/pull/8753) by cfis
 * Restrict what schemes are acceptable in the remote fetcher. Pull request
   [#9022](https://github.com/ruby/rubygems/pull/9022) by tenderlove
+* `gem sources --prepend` and `--append` allow finer grained control of
+  sources. Pull request [#8901](https://github.com/ruby/rubygems/pull/8901)
+  by martinemde
+* Improve `gem sources --remove` output. Pull request
+  [#8909](https://github.com/ruby/rubygems/pull/8909) by deivid-rodriguez
+* Make `gem sources` output more clear. Pull request
+  [#8938](https://github.com/ruby/rubygems/pull/8938) by deivid-rodriguez
 * Don't fail if there is no makefile, simply don't do anything. Pull
   request [#8879](https://github.com/ruby/rubygems/pull/8879) by ioquatix
-* Installs bundler 4.0.0.beta1 as a default gem.
+* Use IMDSv2 for S3 instance credentials. Pull request
+  [#7709](https://github.com/ruby/rubygems/pull/7709) by folbricht-stripe
+* Fix regression in presence of RVM gems. Pull request
+  [#8854](https://github.com/ruby/rubygems/pull/8854) by deivid-rodriguez
+* Restore parsing "--" as an unknown platform rather than crashing. Pull
+  request [#8846](https://github.com/ruby/rubygems/pull/8846) by
+  deivid-rodriguez
+* Installs bundler 4.0.0 as a default gem.
+
+### Bug fixes:
+
+* Fix test failure of mswin and nmake. Pull request
+  [#9135](https://github.com/ruby/rubygems/pull/9135) by hsbt
+* Respect `BUNDLE_VERSION` config at Gem::BundlerVersionFinder. Pull
+  request [#9106](https://github.com/ruby/rubygems/pull/9106) by hsbt
+* Fix "did you mean" suggestions for unknown commands. Pull request
+  [#8948](https://github.com/ruby/rubygems/pull/8948) by deivid-rodriguez
+* Fix trailing slashes not considered by `gem sources --remove`. Pull
+  request [#8939](https://github.com/ruby/rubygems/pull/8939) by
+  deivid-rodriguez
+
+### Security:
+
+* Bump up vendored URI to 1.0.4. Pull request
+  [#9031](https://github.com/ruby/rubygems/pull/9031) by hsbt
+
+### Breaking changes:
+
+* Removed deprecated `-C` option from gem build. Pull request
+  [#9088](https://github.com/ruby/rubygems/pull/9088) by hsbt
+* Removed deprecated Gem::Specification#has_rdoc, has_rdoc= and has_rdoc?.
+  Pull request [#9084](https://github.com/ruby/rubygems/pull/9084) by hsbt
+* Removed deprecated `gem query` command. Pull request
+  [#9083](https://github.com/ruby/rubygems/pull/9083) by hsbt
+* Removed deprecated Gem::DependencyInstaller#find_gems_with_sources. Pull
+  request [#9082](https://github.com/ruby/rubygems/pull/9082) by hsbt
+* Remove deprecated methods of RubyGems. Pull request
+  [#9081](https://github.com/ruby/rubygems/pull/9081) by hsbt
+* Make verification methods private. Pull request
+  [#9051](https://github.com/ruby/rubygems/pull/9051) by tenderlove
+* Deprecate `--default` option from install command. Pull request
+  [#7588](https://github.com/ruby/rubygems/pull/7588) by hsbt
+* Removed `compatibility.rb` for RG 4.0. Pull request
+  [#8899](https://github.com/ruby/rubygems/pull/8899) by hsbt
+
+### Deprecations:
+
+* Deprecate `Gem::Specification#datadir`. Pull request
+  [#8900](https://github.com/ruby/rubygems/pull/8900) by hsbt
 
 ### Documentation:
 
+* Unified UPGRADING.md and extract blog.rubygems.org. Pull request
+  [#9148](https://github.com/ruby/rubygems/pull/9148) by hsbt
+* Remove italic formatting from changelog section headers. Pull request
+  [#9128](https://github.com/ruby/rubygems/pull/9128) by hsbt
 * [DOC] Fix the location of Gem::Deprecate document. Pull request
   [#9065](https://github.com/ruby/rubygems/pull/9065) by nobu
 * Fix typo. Pull request
   [#9012](https://github.com/ruby/rubygems/pull/9012) by etiennebarrie
+* Added document for Gem::Uninstaller. Pull request
+  [#8904](https://github.com/ruby/rubygems/pull/8904) by hsbt
+* Use mailto link in Code of Conduct. Pull request
+  [#8849](https://github.com/ruby/rubygems/pull/8849) by deivid-rodriguez
+* Update Code of Conduct email to conduct@rubygems.org. Pull request
+  [#8848](https://github.com/ruby/rubygems/pull/8848) by indirect
 
 ## 3.7.2 / 2025-09-09
 

data/Manifest.txt

@@ -352,10 +352,9 @@ bundler/lib/bundler/vlad.rb
 bundler/lib/bundler/worker.rb
 bundler/lib/bundler/yaml_serializer.rb
 doc/MAINTAINERS.txt
-doc/bundler/UPGRADING.md
+doc/UPGRADING.md
 doc/rubygems/CONTRIBUTING.md
 doc/rubygems/POLICIES.md
-doc/rubygems/UPGRADING.md
 exe/gem
 exe/update_rubygems
 hide_lib_for_update/note.txt

data/README.md

@@ -65,7 +65,7 @@ To upgrade to the latest RubyGems, run:
 
     $ gem update --system
 
-See [UPGRADING](doc/rubygems/UPGRADING.md) for more details and alternative instructions.
+See [UPGRADING](doc/UPGRADING.md) for more details and alternative instructions.
 
 ## Release policy
 

data/bundler/CHANGELOG.md

@@ -1,27 +1,62 @@
 # Changelog
 
-## 4.0.0.beta2 (2025-11-26)
+## 4.0.0 (2025-12-03)
 
 ### Features:
 
   - Support bundle install --lockfile option [#9111](https://github.com/ruby/rubygems/pull/9111)
   - Add support for lockfile in Gemfile and bundle install --no-lock [#9059](https://github.com/ruby/rubygems/pull/9059)
+  - Add `--ext=go` to `bundle gem` [#8183](https://github.com/ruby/rubygems/pull/8183)
+  - Update Bundler::CurrentRuby::ALL_RUBY_VERSIONS [#9058](https://github.com/ruby/rubygems/pull/9058)
+  - Introduce `bundle list --format=json` [#8728](https://github.com/ruby/rubygems/pull/8728)
 
 ### Performance:
 
   - Run git operations in parallel to speed things up: [#9100](https://github.com/ruby/rubygems/pull/9100)
+  - Replace instance method look up in plugin installer [#9094](https://github.com/ruby/rubygems/pull/9094)
+  - Adjust the API_REQUEST_LIMIT to make less network roundtrip [#9071](https://github.com/ruby/rubygems/pull/9071)
 
 ### Enhancements:
 
-  - Fixup GH-9085 [#9108](https://github.com/ruby/rubygems/pull/9108)
-  - Add go_gem/rake_task for Go native extention gem skeleton [#9105](https://github.com/ruby/rubygems/pull/9105)
-  - Keep legacy windows platform, not removed them [#9104](https://github.com/ruby/rubygems/pull/9104)
+  - Make BUNDLE_LOCKFILE environment variable have precedence over lockfile method in Gemfile [#9146](https://github.com/ruby/rubygems/pull/9146)
+  - Improve banner message for the default command [#9145](https://github.com/ruby/rubygems/pull/9145)
+  - Introduce `install_or_cli_help` and use it default `bundle` command [#9136](https://github.com/ruby/rubygems/pull/9136)
+  - Add go_gem/rake_task for Go native extension gem skeleton [#9105](https://github.com/ruby/rubygems/pull/9105)
+  - Warn users that `bundle` now display the help: [#9092](https://github.com/ruby/rubygems/pull/9092)
+  - Use DidYouMean::SpellChecker for gem suggestions in Bundler [#3857](https://github.com/ruby/rubygems/pull/3857)
+  - Update all vendored libraries to latest version [#9089](https://github.com/ruby/rubygems/pull/9089)
+  - We don't need to allow some warning now [#9074](https://github.com/ruby/rubygems/pull/9074)
+  - Support to embedded Pathname [#9056](https://github.com/ruby/rubygems/pull/9056)
+  - Enforce activation of irb when running with bundle console [#9033](https://github.com/ruby/rubygems/pull/9033)
+  - Update Magnus version in Rust extension gem template [#9025](https://github.com/ruby/rubygems/pull/9025)
+  - Add checksum of gems hosted on private servers: [#9004](https://github.com/ruby/rubygems/pull/9004)
+  - Loading support on Windows [#8254](https://github.com/ruby/rubygems/pull/8254)
+  - Improve error message when the same source is specified through `gemspec` and `path` [#8460](https://github.com/ruby/rubygems/pull/8460)
+  - Raise an error in frozen mode if some registry gems have empty checksums [#8888](https://github.com/ruby/rubygems/pull/8888)
+  - Bump vendored thor to 1.4.0 [#8883](https://github.com/ruby/rubygems/pull/8883)
+  - Delay default path and global cache changes to Bundler 5 [#8867](https://github.com/ruby/rubygems/pull/8867)
+  - Fix spacing in bundle gem newgem.gemspec.tt [#8865](https://github.com/ruby/rubygems/pull/8865)
+  - Add some missing deprecation messages [#8844](https://github.com/ruby/rubygems/pull/8844)
 
 ### Bug fixes:
 
+  - Fixed checksums generation issue when no source is specified [#9133](https://github.com/ruby/rubygems/pull/9133)
   - Check for file existence before deletion from cache [#9095](https://github.com/ruby/rubygems/pull/9095)
-
-## 4.0.0.beta1 (2025-11-20)
+  - Use method_defined?(:method, false) [#9098](https://github.com/ruby/rubygems/pull/9098)
+  - Handle BUNDLER_VERSION being set to an empty string [#6928](https://github.com/ruby/rubygems/pull/6928)
+  - Fix `bundle install` when the Gemfile contains "install_if" git gems: [#8992](https://github.com/ruby/rubygems/pull/8992)
+  - Fix installation issue related to path sources and precompiled gems [#8973](https://github.com/ruby/rubygems/pull/8973)
+  - Fix outdated lockfile during `bundle lock` when source changes [#8962](https://github.com/ruby/rubygems/pull/8962)
+  - Raise error on missing version file [#8963](https://github.com/ruby/rubygems/pull/8963)
+  - Fix `bundle cache --frozen` and `bundle cache --no-prune` not printing a deprecation message [#8926](https://github.com/ruby/rubygems/pull/8926)
+  - Fix local installation incorrectly forced if there's a `vendor/cache` directory and frozen mode is set [#8925](https://github.com/ruby/rubygems/pull/8925)
+  - Fix `bundle lock --update <gem>` with `--lockfile` flag updating all gems [#8922](https://github.com/ruby/rubygems/pull/8922)
+  - Fix `bundle show --verbose` and recommend it as an alternative to `bundle show --outdated` [#8915](https://github.com/ruby/rubygems/pull/8915)
+  - Fix `bundle cache --no-all` not printing a deprecation warning [#8912](https://github.com/ruby/rubygems/pull/8912)
+  - Fix `bundle update foo` unable to update foo in an edge case [#8897](https://github.com/ruby/rubygems/pull/8897)
+  - Fix Bundler printing more flags than actually passed in verbose mode [#8914](https://github.com/ruby/rubygems/pull/8914)
+  - Fix bundler failing to install sorbet-static in truffleruby when there's no lockfile [#8872](https://github.com/ruby/rubygems/pull/8872)
+  - Cancel deprecation of `--force` flag to `bundle install` and `bundle update` [#8843](https://github.com/ruby/rubygems/pull/8843)
 
 ### Security:
 
@@ -35,14 +70,12 @@
   - Pick and add extra changes for 4.0.0 version [#9018](https://github.com/ruby/rubygems/pull/9018)
   - Replaced Bundler::SharedHelpers.major_deprecation to feature_removed! or feature_deprecated! [#9016](https://github.com/ruby/rubygems/pull/9016)
   - Removed legacy_check option from SpecSet#for [#9015](https://github.com/ruby/rubygems/pull/9015)
-  - Removed deprecated legacy windows platform support [#9013](https://github.com/ruby/rubygems/pull/9013)
   - Make update_requires_all_flag to settings [#9011](https://github.com/ruby/rubygems/pull/9011)
   - Make default cli command settings [#9010](https://github.com/ruby/rubygems/pull/9010)
   - Make global_gem_cache flag to settings [#9009](https://github.com/ruby/rubygems/pull/9009)
   - Consolidate removal of `Bundler.rubygems.all_specs` [#9008](https://github.com/ruby/rubygems/pull/9008)
   - Consolidate removal of `Bundler::SpecSet#-` and `Bundler::SpecSet#<<` [#9007](https://github.com/ruby/rubygems/pull/9007)
   - Replaced Bundler.feature_flag.plugins? to Bundler.settings [#9006](https://github.com/ruby/rubygems/pull/9006)
-  - Switch to 4.0.0.dev in development version [#9002](https://github.com/ruby/rubygems/pull/9002)
   - Make `bundle show --outdated` raise an error [#8980](https://github.com/ruby/rubygems/pull/8980)
   - Make `--local-git` flag to `bundle plugin install` raise an error [#8979](https://github.com/ruby/rubygems/pull/8979)
   - Switch `cache_all` to be `true` by default [#8975](https://github.com/ruby/rubygems/pull/8975)
@@ -59,40 +92,17 @@
   - Remove deprecated `bundle viz` and `bundle inject` commands [#8923](https://github.com/ruby/rubygems/pull/8923)
   - Removed to workaround for Bundler 2.2 [#8903](https://github.com/ruby/rubygems/pull/8903)
 
-### Features:
-
-  - Update Bundler::CurrentRuby::ALL_RUBY_VERSIONS [#9058](https://github.com/ruby/rubygems/pull/9058)
-  - Introduce `bundle list --format=json` [#8728](https://github.com/ruby/rubygems/pull/8728)
-
-### Performance:
-
-  - Replace instance method look up in plugin installer [#9094](https://github.com/ruby/rubygems/pull/9094)
-  - Adjust the API_REQUEST_LIMIT to make less network roundtrip [#9071](https://github.com/ruby/rubygems/pull/9071)
-
-### Enhancements:
-
-  - Use DidYouMean::SpellChecker for gem suggestions in Bundler [#3857](https://github.com/ruby/rubygems/pull/3857)
-  - Update all vendored libraries to latest version [#9089](https://github.com/ruby/rubygems/pull/9089)
-  - We don't need to allow some warning now [#9074](https://github.com/ruby/rubygems/pull/9074)
-  - Shell out fewer times [#9068](https://github.com/ruby/rubygems/pull/9068)
-  - Build gems directly instead of shelling out [#9053](https://github.com/ruby/rubygems/pull/9053)
-  - Support to embedded Pathname [#9056](https://github.com/ruby/rubygems/pull/9056)
-  - Forcely activate irb when running with bundle console [#9033](https://github.com/ruby/rubygems/pull/9033)
-  - Update Magnus version in Rust extension gem template [#9025](https://github.com/ruby/rubygems/pull/9025)
-  - Postpone to remove legacy mingw platform [#9023](https://github.com/ruby/rubygems/pull/9023)
-  - Add checksum of gems hosted on private servers: [#9004](https://github.com/ruby/rubygems/pull/9004)
-  - Loading support on Windows [#8254](https://github.com/ruby/rubygems/pull/8254)
-
-### Bug fixes:
-
-  - Fix `bundle install` when the Gemfile contains "install_if" git gems: [#8992](https://github.com/ruby/rubygems/pull/8992)
-  - Fix installation issue related to path sources and precompiled gems [#8973](https://github.com/ruby/rubygems/pull/8973)
-  - Fix outdated lockfile during `bundle lock` when source changes [#8962](https://github.com/ruby/rubygems/pull/8962)
-  - Raise error on missing version file [#8963](https://github.com/ruby/rubygems/pull/8963)
-
 ### Documentation:
 
+  - Unified UPGRADING.md and extract blog.rubygems.org [#9148](https://github.com/ruby/rubygems/pull/9148)
+  - Remove italic formatting from changelog section headers [#9128](https://github.com/ruby/rubygems/pull/9128)
   - Small clarifications to Bundler 4 upgrade docs [#8964](https://github.com/ruby/rubygems/pull/8964)
+  - Improve documentation of `bundle doctor`, `bundle plugin`, and `bundle config` [#8919](https://github.com/ruby/rubygems/pull/8919)
+  - Make sure all CLI flags and subcommands are documented [#8861](https://github.com/ruby/rubygems/pull/8861)
+  - Clarify documentation about new default gem installation directory in Bundler 4 [#8857](https://github.com/ruby/rubygems/pull/8857)
+  - Use mailto link in Code of Conduct [#8849](https://github.com/ruby/rubygems/pull/8849)
+  - Update Code of Conduct email to conduct@rubygems.org [#8848](https://github.com/ruby/rubygems/pull/8848)
+  - Add missing link to `irb` repo in DEBUGGING.md [#8842](https://github.com/ruby/rubygems/pull/8842)
 
 ## 2.7.2 (2025-09-09)
 

data/bundler/lib/bundler/build_metadata.rb

@@ -4,8 +4,8 @@ module Bundler
   # Represents metadata from when the Bundler gem was built.
   module BuildMetadata
     # begin ivars
-    @built_at = "2025-11-26".freeze
-    @git_commit_sha = "743810236c".freeze
+    @built_at = "2025-12-03".freeze
+    @git_commit_sha = "64d0dfe695".freeze
     # end ivars
 
     # A hash representation of the build metadata.

data/bundler/lib/bundler/cli.rb

@@ -69,7 +69,7 @@ module Bundler
 
       # lock --lockfile works differently than install --lockfile
       unless current_cmd == "lock"
-        custom_lockfile = options[:lockfile] || Bundler.settings[:lockfile]
+        custom_lockfile = options[:lockfile] || ENV["BUNDLE_LOCKFILE"] || Bundler.settings[:lockfile]
         if custom_lockfile && !custom_lockfile.empty?
           Bundler::SharedHelpers.set_env "BUNDLE_LOCKFILE", File.expand_path(custom_lockfile)
           reset_settings = true
@@ -120,20 +120,28 @@ module Bundler
       self.class.send(:class_options_help, shell)
     end
 
+    desc "install_or_cli_help", "Tries to run bundle install but prints a summary of bundler commands if there is no Gemfile", hide: true
+    def install_or_cli_help
+      invoke_other_command("install")
+    rescue GemfileNotFound => error
+      Bundler.ui.error error.message, wrap: true
+      invoke_other_command("cli_help")
+    end
+
     def self.default_command(meth = nil)
       return super if meth
 
-      default_cli_command = Bundler.settings[:default_cli_command]
-      return default_cli_command if default_cli_command
-
-      Bundler.ui.warn(<<~MSG)
-        In the next version of Bundler, running `bundle` without argument will no longer run `bundle install`.
-        Instead, the `help` command will be displayed.
-
-        If you'd like to keep the previous behaviour please run `bundle config set default_cli_command install --global`.
-      MSG
+      unless Bundler.settings[:default_cli_command]
+        Bundler.ui.info <<-MSG
+          In a future version of Bundler, running `bundle` without argument will no longer run `bundle install`.
+          Instead, the `cli_help` command will be displayed. Please use `bundle install` explicitly for scripts like CI/CD.
+          You can use the future behavior now with `bundle config set default_cli_command cli_help --global`,
+          or you can continue to use the current behavior with `bundle config set default_cli_command install_or_cli_help --global`.
+          This message will be removed after a default_cli_command value is set.
+        MSG
+      end
 
-      "install"
+      Bundler.settings[:default_cli_command] || "install_or_cli_help"
     end
 
     class_option "no-color", type: :boolean, desc: "Disable colorization in output"
@@ -274,8 +282,10 @@ module Bundler
       end
 
       require_relative "cli/install"
+      options = self.options.dup
+      options["lockfile"] ||= ENV["BUNDLE_LOCKFILE"]
       Bundler.settings.temporary(no_install: false) do
-        Install.new(options.dup).run
+        Install.new(options).run
       end
     end
 
@@ -723,6 +733,19 @@ module Bundler
       config[:current_command]
     end
 
+    def invoke_other_command(name)
+      _, _, config = @_initializer
+      original_command = config[:current_command]
+      command = self.class.all_commands[name]
+      config[:current_command] = command
+      send(name)
+    ensure
+      config[:current_command] = original_command
+    end
+
+    def current_command=(command)
+    end
+
     def print_command
       return unless Bundler.ui.debug?
       cmd = current_command

data/bundler/lib/bundler/definition.rb

@@ -539,6 +539,8 @@ module Bundler
     end
 
     def add_checksums
+      require "rubygems/package"
+
       @locked_checksums = true
 
       setup_domain!(add_checksums: true)

data/bundler/lib/bundler/man/gemfile.5

@@ -494,9 +494,9 @@ The \fBbundle install\fR \fB\-\-no\-lock\fR option (which disables lockfile crea
 .IP "2." 4
 The \fBbundle install\fR \fB\-\-lockfile\fR option\.
 .IP "3." 4
-The \fBlockfile\fR method in the Gemfile\.
-.IP "4." 4
 The \fBBUNDLE_LOCKFILE\fR environment variable\.
+.IP "4." 4
+The \fBlockfile\fR method in the Gemfile\.
 .IP "5." 4
 The default behavior of adding \fB\.lock\fR to the end of the Gemfile name\.
 .IP "" 0

data/bundler/lib/bundler/man/gemfile.5.ronn

@@ -581,6 +581,6 @@ following precedence is used:
 
 1. The `bundle install` `--no-lock` option (which disables lockfile creation).
 1. The `bundle install` `--lockfile` option.
-1. The `lockfile` method in the Gemfile.
 1. The `BUNDLE_LOCKFILE` environment variable.
+1. The `lockfile` method in the Gemfile.
 1. The default behavior of adding `.lock` to the end of the Gemfile name.

data/bundler/lib/bundler/vendor/thor/lib/thor.rb

@@ -625,7 +625,7 @@ class Bundler::Thor
     # alias name.
     def find_command_possibilities(meth)
       len = meth.to_s.length
-      possibilities = all_commands.merge(map).keys.select { |n| meth == n[0, len] }.sort
+      possibilities = all_commands.reject { |_k, c| c.hidden? }.merge(map).keys.select { |n| meth == n[0, len] }.sort
       unique_possibilities = possibilities.map { |k| map[k] || k }.uniq
 
       if possibilities.include?(meth)

data/bundler/lib/bundler/version.rb

@@ -1,7 +1,7 @@
 # frozen_string_literal: false
 
 module Bundler
-  VERSION = "4.0.0.beta2".freeze
+  VERSION = "4.0.0".freeze
 
   def self.bundler_major_version
     @bundler_major_version ||= gem_version.segments.first

data/doc/UPGRADING.md

@@ -0,0 +1,28 @@
+# How to upgrade/downgrade Rubygems and Bundler:
+
+## Upgrade Recipe
+
+    $ gem update --system
+
+    $ gem install bundler
+    $ bundle update --bundler
+
+## Downgrade Recipe
+
+    $ gem update --system 3.7.2
+
+    $ gem install bundler -v 2.7.2
+    $ bundle update --bundler=2.7.2
+
+## Install a pre-release version
+
+    $ gem update --system --pre
+
+    $ gem install bundler --pre
+    $ bundle update --bundler=4.0.0.beta1
+
+## Install from source
+
+*   Download from: https://rubygems.org/pages/download
+*   Unpack into a directory and `cd` there
+*   Install with: `ruby setup.rb`

data/doc/rubygems/POLICIES.md

@@ -40,150 +40,6 @@ releases will only support Ruby 2.3 and above. As of this writing RubyGems is
 at version 2.7, so when RubyGems 2.8 is released, it will only support Ruby
 2.3 and later.
 
-## Release Process
-
-### Permissions
-
-You'll need the following environment variables set to release RubyGems &
-Bundler:
-
-* AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY: to be able to push RubyGems zip
-  files to s3 so that they appear at RubyGems [download page].
-
-* GITHUB_RELEASE_PAT: A [GitHub PAT] with repo permissions, in order to push
-  GitHub releases and to use the GitHub API for changelog generation.
-
-[download page]: https://rubygems.org/pages/download
-[GitHub PAT]: https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/creating-a-personal-access-token
-
-### Recommendations for security releases
-
-*   Obtain CVE numbers as needed from HackerOne or Red Hat.
-*   Agree on a release date with ruby-core, so patches can be backported to
-    older Ruby versions as needed.
-*   Avoid releasing security updates on Fridays, so platform services don't
-    have to work on weekends.
-*   Continue with the regular release process below.
-
-### Branching
-
-Bundler releases are synchronized with rubygems releases at the moment. That
-means that releases for both share the same stable branch, and they should
-generally happen together.
-
-The current conventional naming for stable branches is `x+1.y`, where `x.y` is
-the version of `bundler` that will be released. This is because `rubygems-x+1.y`
-will be released at the same time.
-
-For example, `rubygems-3.2.0` and `bundler-2.2.0` were both released from the
-`3.2` stable branch.
-
-Once a stable branch has been cut from `master`, changes for that minor release
-series are only made _intentionally_, via patch releases. That is to say,
-changes to `master` by default _won't_ make their way into the current stable
-branch, and development on `master` will be targeting the next minor
-or major release.
-
-There is a `bin/rake prepare_release[<target_rubygems_version>]` rake task
-that helps with creating a release. It takes a single argument, the _exact
-rubygems release_ being made (e.g.  `3.2.3` when releasing bundler `2.2.3`).
-This task checks out the appropriate stable branch (`3.2`, for example), grabs
-all merged but unreleased PRs from both bundler & rubygems from GitHub that are
-compatible with the target release level, and then cherry-picks those changes
-(and only those changes) to a new branch based off the stable branch. Then bumps
-the version in all version files, synchronizes both changelogs to include all
-backported changes and commits that change on top of the cherry-picks.
-
-Note that this task requires all user facing pull requests to be tagged with
-specific labels. See [Merging a PR](../bundler/playbooks/MERGING_A_PR.md) for details.
-
-Also note that when this task cherry-picks, it cherry-picks the merge commits
-using the following command:
-
-```bash
-$ git cherry-pick -m 1 MERGE_COMMIT_SHAS
-```
-
-For example, for PR [#5029](https://github.com/rubygems/bundler/pull/5029), we
-cherry picked commit [dd6aef9](https://github.com/rubygems/bundler/commit/dd6aef97a5f2e7173f406267256a8c319d6134ab),
-not [4fe9291](https://github.com/rubygems/bundler/commit/4fe92919f51e3463f0aad6fa833ab68044311f03)
-using:
-
-```bash
-$ git cherry-pick -m 1 dd6aef9
-```
-
-After running the task, you'll have a release branch ready to be merged into the
-stable branch. You'll want to open a PR from this branch into the stable branch
-and provided CI is green, you can go ahead, merge the PR and run release tasks
-as specified below from the updated stable branch.
-
-### Automatic changelog and backport generation
-
-PR labels and titles are used to automatically generate changelogs for patch and
-minor releases.
-
-When releasing, a changelog generation script goes through all PRs that have
-never made it into a release, and selects only the ones with specific labels as
-detailed in the `.changelog.yml` and `bundler/.changelog.yml` files. Those
-particular PRs get backported to the stable branch and included in the release
-changelog.
-
-If PRs don't have a proper label, they won't be backported to patch releases.
-
-If you want a PR to be backported to a patch level release, but don't want to
-include it in the changelog, you can use the special `rubygems: skip changelog`
-and `bundler: skip changelog` labels. For example, this is useful when
-backporting a PR generates conflicts that are solved by backporting another PR
-with no user visible changes. You can use these special labels to also backport
-the other PR and not get any conflicts.
-
-### Breaking changes
-
-Bundler cares a lot about preserving compatibility. As a result, changes that
-break backwards compatibility should (whenever this is possible) include a feature
-release that is backwards compatible, and issue warnings for all options and
-behaviors that will change.
-
-We only release major breaking changes when incrementing the _major_ version of
-Bundler and RubyGems. However, experience shows that almost every single part of
-Bundler and RubyGems is depended on by someone in ways hard to anticipate. So if
-we were strict about breaking changes we'd need to hold on from making progress
-a lot, or continuously increment the major version, emptying "really major"
-versions from their meaning. Because of this, we also may release "small"
-breaking changes in minor releases. "Small" here means that we expect them to
-affect only very few users in rare cases.
-
-### Steps for patch releases
-
-*   Confirm all PRs that you want backported are properly tagged with `rubygems:
-    <type>` or `bundler: <type>` labels at GitHub.
-*   Run `bin/rake prepare_release[<target_rubygems_version>]`. This will create
-    a PR to the stable branch with the backports included in the release, and
-    proper changelogs and version bumps. It will also create a PR to merge
-    release changelogs into master.
-*   Once CI passes, merge the release PR, switch to the stable branch and pull
-    the PR just merged.
-*   Release `bundler` with `bin/rake bundler:release`.
-*   Release `rubygems` with `bin/rake release`.
-
-### Steps for minor and major releases
-
-*   Confirm all PRs that you want listed in changelogs are properly tagged with
-    `rubygems: <type>` or `bundler: <type>` labels at GitHub.
-*   Run `bin/rake prepare_release[<target_rubygems_version>]`. This will create
-    a new stable branch off the master branch, and create a PR to it with the
-    proper version bumps and changelogs. It will also create a PR to merge
-    release changelogs into master.
-*   Replace the stable branch in the workflows with the new stable branch, and
-    push that change to the release PR.
-*   Replace version numbers with the next ".dev" version, and push that change
-    to the master PR.
-*   Once CI passes, merge the release PR, switch to  the stable branch and pull
-    the PR just merged.
-*   Release `bundler` with `bin/rake bundler:release`.
-*   Release `rubygems` with `bin/rake release`.
-
 ## Committer Access
 
 RubyGems committers may lose their commit privileges if they are inactive for

data/lib/rubygems/ext/ext_conf_builder.rb

@@ -40,6 +40,9 @@ class Gem::Ext::ExtConfBuilder < Gem::Ext::Builder
       end
 
       ENV["DESTDIR"] = nil
+      unless RUBY_PLATFORM.include?("mswin") && RbConfig::CONFIG["configure_args"]&.include?("nmake")
+        ENV["MAKEFLAGS"] ||= "-j#{Etc.nprocessors + 1}"
+      end
 
       make dest_path, results, extension_dir, tmp_dest_relative, target_rbconfig: target_rbconfig
 

data/lib/rubygems.rb

@@ -9,7 +9,7 @@
 require "rbconfig"
 
 module Gem
-  VERSION = "4.0.0.beta2"
+  VERSION = "4.0.0"
 end
 
 require_relative "rubygems/defaults"

data/rubygems-update.gemspec

@@ -32,7 +32,7 @@ Gem::Specification.new do |s|
   s.extra_rdoc_files = [
     "LICENSE.txt", "doc/MAINTAINERS.txt",
     "MIT.txt", "Manifest.txt", "README.md",
-    "doc/rubygems/UPGRADING.md", "doc/rubygems/POLICIES.md", "CODE_OF_CONDUCT.md",
+    "doc/UPGRADING.md", "doc/rubygems/POLICIES.md", "CODE_OF_CONDUCT.md",
     "doc/rubygems/CONTRIBUTING.md",
     "bundler/LICENSE.md", "bundler/README.md",
     "hide_lib_for_update/note.txt", *Dir["bundler/lib/bundler/man/*.1", base: __dir__]

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: rubygems-update
 version: !ruby/object:Gem::Version
-  version: 4.0.0.beta2
+  version: 4.0.0
 platform: ruby
 authors:
 - Jim Weirich
@@ -76,9 +76,9 @@ extra_rdoc_files:
 - bundler/lib/bundler/man/bundle-version.1
 - bundler/lib/bundler/man/bundle.1
 - doc/MAINTAINERS.txt
+- doc/UPGRADING.md
 - doc/rubygems/CONTRIBUTING.md
 - doc/rubygems/POLICIES.md
-- doc/rubygems/UPGRADING.md
 - hide_lib_for_update/note.txt
 files:
 - CHANGELOG.md
@@ -435,10 +435,9 @@ files:
 - bundler/lib/bundler/worker.rb
 - bundler/lib/bundler/yaml_serializer.rb
 - doc/MAINTAINERS.txt
-- doc/bundler/UPGRADING.md
+- doc/UPGRADING.md
 - doc/rubygems/CONTRIBUTING.md
 - doc/rubygems/POLICIES.md
-- doc/rubygems/UPGRADING.md
 - exe/gem
 - exe/update_rubygems
 - hide_lib_for_update/note.txt

data/doc/bundler/UPGRADING.md

@@ -1,211 +0,0 @@
-# Upgrading
-
-## Bundler 4
-
-In order to prepare for Bundler 4, you can easily configure Bundler 2.7 to
-behave exactly like Bundler 4 will behave. To do so, set the environment
-variable `BUNDLE_SIMULATE_VERSION` to `4`. Alternatively, you can use `bundle
-config` and enable "Bundler 4 mode" either globally through `bundle config set
---global simulate_version 4`, or locally through `bundle config set --local
-simulate_version 4`. From now on in this document we will assume that all three
-of these configuration options are available, but will only mention `bundle
-config set <option> <value>`.
-
-The following is a summary of the changes that we plan to introduce in Bundler
-4, and why we will be making those changes. Some of them should be well known
-already by existing users, because we have been printing deprecation messages
-for years, but some of them are defaults that will be switched in Bundler 4 and
-needs some heads up.
-
-### Running just `bundle`  will print help usage
-
-We're changing this default to make Bundler more friendly for new users. We do
-understand that long time users already know how Bundler works and find useful
-that just `bundle` defaults to `bundle install`. Those users can keep the
-existing default by configuring
-
-```
-bundle config default_cli_command install
-```
-
-### Flags passed to `bundle install` that relied on being remembered across invocations will be removed
-
-In particular, the `--clean`, `--deployment`, `--frozen`, `--no-prune`,
-`--path`, `--shebang`, `--system`, `--without`, and `--with` options to `bundle
-install`.
-
-Remembering CLI options has been a source of historical confusion and bug
-reports, not only for beginners but also for experienced users. A CLI tool
-should not behave differently across exactly the same invocations _unless_
-explicitly configured to do so. This is what configuration is about after all,
-and things should never be silently configured without the user knowing about
-it.
-
-The problem with changing this behavior is that very common workflows are
-relying on it. For example, when you run `bundle install --without
-development:test` in production, those flags are persisted in the app's
-configuration file and further `bundle` invocations will happily ignore
-development and test gems.  This magic will disappear from bundler 4, and you
-will explicitly need to configure it, either through environment variables,
-application configuration, or machine configuration. For example, with `bundle
-config set --local without development test`.
-
-### Bundler will include checksums in new lockfiles by default
-
-We shipped this security feature recently and we believe it's time to turn it on
-by default, so that everyone benefits from the extra security assurances. So
-whenever you create a new lockfile, Bundler will include a CHECKSUMS section.
-Bundler will not automatically add a CHECKSUMS section to existing
-lockfiles, though, unless explicitly requested through `bundle lock
---add-checksums`.
-
-### Strict source pinning in Gemfile is enforced by default
-
-In bundler 4, the source for every dependency will be unambiguously defined, and
-Bundler will refuse to run otherwise.
-
-* Multiple global Gemfile sources will no longer be supported.
-
-  Instead of something like this:
-
-  ```ruby
-  source "https://main_source"
-  source "https://another_source"
-
-  gem "dependency1"
-  gem "dependency2"
-  ```
-
-  do something like this:
-
-  ```ruby
-  source "https://main_source"
-
-  gem "dependency1"
-
-  source "https://another_source" do
-    gem "dependency2"
-  end
-  ```
-
-* Global `path` and `git` sources will no longer be supported.
-
-  Instead of something like this:
-
-  ```ruby
-  path "/my/path/with/gems"
-  git "https://my_git_repo_with_gems"
-
-  gem "dependency1"
-  gem "dependency2"
-  ```
-
-  do something like this:
-
-  ```ruby
-  gem "dependency1", path: "/my/path/with/gems"
-  gem "dependency2", git: "https://my_git_repo_with_gems"
-  ```
-
-  or use the block forms if you have multiple gems for each source and you want
-  to be a bit DRYer:
-
-
-  ```ruby
-  path "/my/path/with/gems" do
-    # gem "dependency1"
-    # ...
-    # gem "dependencyn"
-  end
-
-  git "https://my_git_repo_with_gems" do
-    # gem "dependency1"
-    # ...
-    # gem "dependencyn"
-  end
-  ```
-
-#### Notable CLI changes
-
-* `bundle viz` will be removed and extracted to a plugin.
-
-  This is the only bundler command requiring external dependencies, both an OS
-  dependency (the `graphviz` package) and a gem dependency (the `ruby-graphviz`
-  gem). Removing these dependencies will make development easier and it was also
-  seen by the bundler team as an opportunity to develop a bundler plugin that
-  it's officially maintained by the bundler team, and that users can take as a
-  reference to develop their own plugins. The plugin will contain the same code
-  as the old core command, the only difference being that the command is now
-  implemented as `bundle graph` which is much easier to understand. However, the
-  details of the plugin are under discussion. See [#3333](https://github.com/ruby/rubygems/issues/3333).
-
-* The `bundle install` command will no longer accept a `--binstubs` flag.
-
-  The `--binstubs` option has been removed from `bundle install` and replaced
-  with the `bundle binstubs` command. The `--binstubs` flag would create
-  binstubs for all executables present inside the gems in the project. This was
-  hardly useful since most users will only use a subset of all the binstubs
-  available to them. Also, it would force the introduction of a bunch of most
-  likely unused files into source control. Because of this, binstubs now must
-  be created and checked into version control individually.
-
-* The `bundle inject` command will be replaced with `bundle add`
-
-  We believe the new command fits the user's mental model better and it supports
-  a wider set of use cases. The interface supported by `bundle inject` works
-  exactly the same in `bundle add`, so it should be easy to migrate to the new
-  command.
-
-### Other notable changes
-
-* Git and Path gems will be included in `vendor/cache` by default
-
-  If you have a `vendor/cache` directory (to support offline scenarios, for
-  example), Bundler will start including gems from `path` and `git` sources in
-  there. We're unsure why these gems were treated specially so we'll start
-  caching them normally.
-
-* Bundler will use cached local data if available when network issues are found
-  during resolution.
-
-  Just trying to provide a more resilient behavior here.
-
-* `Bundler.clean_env`, `Bundler.with_clean_env`, `Bundler.clean_system`, and `Bundler.clean_exec` will be removed
-
-  All of these helpers ultimately use `Bundler.clean_env` under the hood, which
-  makes sure all bundler-related environment are removed inside the block it
-  yields.
-
-  After quite a lot user reports, we noticed that users don't usually want this
-  but instead want the bundler environment as it was before the current process
-  was started. Thus, `Bundler.with_original_env`, `Bundler.original_system`, and
-  `Bundler.original_exec` were born. They all use the new `Bundler.original_env`
-  under the hood.
-
-  There's however some specific cases where the good old `Bundler.clean_env`
-  behavior can be useful. For example, when testing Rails generators, you really
-  want an environment where `bundler` is out of the picture. This is why we
-  decided to keep the old behavior under a new more clear name, because we
-  figured the word "clean" was too ambiguous. So we have introduced
-  `Bundler.unbundled_env`, `Bundler.with_unbundled_env`,
-  `Bundler.unbundled_system`, and `Bundler.unbundled_exec`.
-
-* `Bundler.environment` is deprecated in favor of `Bundler.load`.
-
-  We're not sure how people might be using this directly but we have removed the
-  `Bundler::Environment` class which was instantiated by `Bundler.environment`
-  since we realized the `Bundler::Runtime` class was the same thing. During the
-  transition `Bundler.environment` will delegate to `Bundler.load`, which holds
-  the reference to the `Bundler::Environment`.
-
-* Deployment helpers for `vlad` and `capistrano` are being removed.
-
-  These are natural deprecations since the `vlad` tool has had no activity for
-  years whereas `capistrano` 3 has built-in Bundler integration in the form of
-  the `capistrano-bundler` gem, and everyone using Capistrano 3 should be
-  already using that instead. If for some reason, you are still using Capistrano
-  2, feel free to copy the Capistrano tasks out of the Bundler 2 file
-  `lib/bundler/deployment.rb` and put them into your app.
-
-  In general, we don't want to maintain integrations for every deployment system
-  out there, so that's why we are removing these.

data/doc/rubygems/UPGRADING.md

@@ -1,15 +0,0 @@
-# How to upgrade/downgrade Rubygems:
-
-## Downgrade Recipe
-
-    $ gem update --system 3.1.4
-
-## Upgrade Recipe
-
-    $ gem update --system
-
-## Install from source
-
-*   Download from: https://rubygems.org/pages/download
-*   Unpack into a directory and `cd` there
-*   Install with: `ruby setup.rb`