rubygems-update 4.0.4 → 4.0.5

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f46bbce4276140cd482c5f57e651c9e1b5093d0d0d1fa80305a62dd015f13824
-  data.tar.gz: ed7311da71b209962ca244fa6b1767ddaf556bb2572b3327825b67e7d68d6dde
+  metadata.gz: d730c5ee36ec22bfd59911344435184146b89ae65ead9e33cdfa762498831a6f
+  data.tar.gz: ac09d3a9681fc79ebb9f08de62c3ed253f60718b397ac3819d1c91921886c4db
 SHA512:
-  metadata.gz: 3be7c427689e3863e1c3e2164758ea267129cdae4ceef0d288d1928bbc686bcb0bb40bf2658da5a6ee7d7699710b7e6d010ccdb731a320ccb8b3ef54b13ca868
-  data.tar.gz: ea3b92eb905288d60b330d2a61efe848ef7ebf630ae3dfdafd9f371540854cd0d5f81b2e88eb596f534c6e09d35b154ffa99e0f7e3d57fe7caabe7137445bc1f
+  metadata.gz: 8a6c42c73197f1b496bab3932994638de281ac6006d4500244dfa2ee4c8eb3db4d095043128b4e596611717ba35fde5675276c7a73f5a6127844671d579d8e1f
+  data.tar.gz: 500d5d9e6100937d95dd9ea517b01d28c5ef58bf584a6a333bfd82fb085a9396867a5fdd504a622cfb58bd2a7e9b452ab36a39564c8343c5748e0a70e4b61441

data/CHANGELOG.md

@@ -1,5 +1,27 @@
 # Changelog
 
+## 4.0.5 / 2026-01-29
+
+### Enhancements:
+
+* Removed unused deprecate loading. Pull request
+  [#9266](https://github.com/ruby/rubygems/pull/9266) by hsbt
+* Validate executable names for invalid characters. Pull request
+  [#9257](https://github.com/ruby/rubygems/pull/9257) by hsbt
+* Installs bundler 4.0.5 as a default gem.
+
+### Bug fixes:
+
+* Fix RubyGems not able to require the right gem:. Pull request
+  [#9246](https://github.com/ruby/rubygems/pull/9246) by Edouard-chin
+* Remove special behavior for rake. Pull request
+  [#9245](https://github.com/ruby/rubygems/pull/9245) by JasonLunn
+
+### Documentation:
+
+* Added another usage of pristine command. Pull request
+  [#9255](https://github.com/ruby/rubygems/pull/9255) by hsbt
+
 ## 4.0.4 / 2026-01-15
 
 ### Enhancements:

data/bundler/CHANGELOG.md

@@ -1,5 +1,15 @@
 # Changelog
 
+## 4.0.5 (2026-01-29)
+
+### Enhancements:
+
+  - Fix Bundler that re-exec $0 when a `version` is present in the config: [#9249](https://github.com/ruby/rubygems/pull/9249)
+
+### Bug fixes:
+
+  - Only use parent source with Git and Path sources [#9269](https://github.com/ruby/rubygems/pull/9269)
+
 ## 4.0.4 (2026-01-15)
 
 ### Enhancements:

data/bundler/lib/bundler/build_metadata.rb

@@ -4,8 +4,8 @@ module Bundler
   # Represents metadata from when the Bundler gem was built.
   module BuildMetadata
     # begin ivars
-    @built_at = "2026-01-15".freeze
-    @git_commit_sha = "49e812f884".freeze
+    @built_at = "2026-01-29".freeze
+    @git_commit_sha = "6d11c1f49d".freeze
     # end ivars
 
     # A hash representation of the build metadata.

data/bundler/lib/bundler/definition.rb

@@ -1077,7 +1077,7 @@ module Bundler
             end
           end
 
-          if parent_dep
+          if parent_dep && parent_dep.source.is_a?(Source::Path)
             replacement_source = parent_dep.source
           else
             replacement_source = sources.get(lockfile_source)

data/bundler/lib/bundler/version.rb

@@ -1,7 +1,7 @@
 # frozen_string_literal: false
 
 module Bundler
-  VERSION = "4.0.4".freeze
+  VERSION = "4.0.5".freeze
 
   def self.bundler_major_version
     @bundler_major_version ||= gem_version.segments.first

data/lib/rubygems/bundler_version_finder.rb

@@ -10,6 +10,8 @@ module Gem::BundlerVersionFinder
     v ||= bundle_update_bundler_version
     return if v == true
 
+    v ||= bundle_config_version
+
     v ||= lockfile_version
     return unless v
 
@@ -49,21 +51,7 @@ module Gem::BundlerVersionFinder
   private_class_method :lockfile_version
 
   def self.lockfile_contents
-    gemfile = ENV["BUNDLE_GEMFILE"]
-    gemfile = nil if gemfile&.empty?
-
-    unless gemfile
-      begin
-        Gem::Util.traverse_parents(Dir.pwd) do |directory|
-          next unless gemfile = Gem::GEM_DEP_FILES.find {|f| File.file?(f) }
-
-          gemfile = File.join directory, gemfile
-          break
-        end
-      rescue Errno::ENOENT
-        return
-      end
-    end
+    gemfile = gemfile_path
 
     return unless gemfile
 
@@ -82,19 +70,24 @@ module Gem::BundlerVersionFinder
   private_class_method :lockfile_contents
 
   def self.bundle_config_version
-    config_file = bundler_config_file
-    return unless config_file && File.file?(config_file)
+    version = nil
 
-    contents = File.read(config_file)
-    contents =~ /^BUNDLE_VERSION:\s*["']?([^"'\s]+)["']?\s*$/
+    [bundler_local_config_file, bundler_global_config_file].each do |config_file|
+      next unless config_file && File.file?(config_file)
 
-    $1
+      contents = File.read(config_file)
+      contents =~ /^BUNDLE_VERSION:\s*["']?([^"'\s]+)["']?\s*$/
+
+      version = $1
+      break if version
+    end
+
+    version
   end
   private_class_method :bundle_config_version
 
-  def self.bundler_config_file
-    # see Bundler::Settings#global_config_file and local_config_file
-    # global
+  def self.bundler_global_config_file
+    # see Bundler::Settings#global_config_file
     if ENV["BUNDLE_CONFIG"] && !ENV["BUNDLE_CONFIG"].empty?
       ENV["BUNDLE_CONFIG"]
     elsif ENV["BUNDLE_USER_CONFIG"] && !ENV["BUNDLE_USER_CONFIG"].empty?
@@ -103,10 +96,36 @@ module Gem::BundlerVersionFinder
       ENV["BUNDLE_USER_HOME"] + "config"
     elsif Gem.user_home && !Gem.user_home.empty?
       Gem.user_home + ".bundle/config"
-    else
-      # local
-      "config"
     end
   end
-  private_class_method :bundler_config_file
+  private_class_method :bundler_global_config_file
+
+  def self.bundler_local_config_file
+    gemfile = gemfile_path
+    return unless gemfile
+
+    File.join(File.dirname(gemfile), ".bundle", "config")
+  end
+  private_class_method :bundler_local_config_file
+
+  def self.gemfile_path
+    gemfile = ENV["BUNDLE_GEMFILE"]
+    gemfile = nil if gemfile&.empty?
+
+    unless gemfile
+      begin
+        Gem::Util.traverse_parents(Dir.pwd) do |directory|
+          next unless gemfile = Gem::GEM_DEP_FILES.find {|f| File.file?(f) }
+
+          gemfile = File.join directory, gemfile
+          break
+        end
+      rescue Errno::ENOENT
+        return
+      end
+    end
+
+    gemfile
+  end
+  private_class_method :gemfile_path
 end

data/lib/rubygems/commands/pristine_command.rb

@@ -88,6 +88,10 @@ If you have made modifications to an installed gem, the pristine command
 will revert them.  All extensions are rebuilt and all bin stubs for the gem
 are regenerated after checking for modifications.
 
+Rebuilding extensions also refreshes C-extension gems against updated system
+libraries (for example after OS or package upgrades) to avoid mismatches like
+outdated library version warnings.
+
 If the cached gem cannot be found it will be downloaded.
 
 If --no-extensions is provided pristine will not attempt to restore a gem

data/lib/rubygems/ext/builder.rb

@@ -163,8 +163,6 @@ class Gem::Ext::Builder
     @gem_dir    = spec.full_gem_path
     @target_rbconfig = target_rbconfig
     @build_jobs = build_jobs
-
-    @ran_rake = false
   end
 
   ##
@@ -177,7 +175,6 @@ class Gem::Ext::Builder
     when /configure/ then
       Gem::Ext::ConfigureBuilder
     when /rakefile/i, /mkrf_conf/i then
-      @ran_rake = true
       Gem::Ext::RakeBuilder
     when /CMakeLists.txt/ then
       Gem::Ext::CmakeBuilder.new
@@ -250,8 +247,6 @@ EOF
     FileUtils.rm_f @spec.gem_build_complete_path
 
     @spec.extensions.each do |extension|
-      break if @ran_rake
-
       build_extension extension, dest_path
     end
 

data/lib/rubygems/specification.rb

@@ -959,6 +959,15 @@ class Gem::Specification < Gem::BasicSpecification
     specification_record.find_by_path(path)
   end
 
+  ##
+  # Return the best specification that contains the file matching +path+
+  # amongst the specs that are not loaded. This method is different than
+  # +find_inactive_by_path+ as it will filter out loaded specs by their name.
+
+  def self.find_unloaded_by_path(path)
+    specification_record.find_unloaded_by_path(path)
+  end
+
   ##
   # Return the best specification that contains the file matching +path+
   # amongst the specs that are not activated.

data/lib/rubygems/specification_policy.rb

@@ -436,6 +436,7 @@ or set it to nil if you don't want to specify a license.
     warning "deprecated autorequire specified" if @specification.autorequire
 
     @specification.executables.each do |executable|
+      validate_executable(executable)
       validate_shebang_line_in(executable)
     end
 
@@ -449,6 +450,13 @@ or set it to nil if you don't want to specify a license.
     warning("no #{attribute} specified") if value.nil? || value.empty?
   end
 
+  def validate_executable(executable)
+    separators = [File::SEPARATOR, File::ALT_SEPARATOR, File::PATH_SEPARATOR].compact.map {|sep| Regexp.escape(sep) }.join
+    return unless executable.match?(/[\s#{separators}]/)
+
+    error "executable \"#{executable}\" contains invalid characters"
+  end
+
   def validate_shebang_line_in(executable)
     executable_path = File.join(@specification.bindir, executable)
     return if File.read(executable_path, 2) == "#!"

data/lib/rubygems/specification_record.rb

@@ -154,6 +154,19 @@ module Gem
       spec.to_spec
     end
 
+    ##
+    # Return the best specification that contains the file matching +path+
+    # amongst the specs that are not loaded. This method is different than
+    # +find_inactive_by_path+ as it will filter out loaded specs by their name.
+
+    def find_unloaded_by_path(path)
+      stub = stubs.find do |s|
+        next if Gem.loaded_specs[s.name]
+        s.contains_requirable_file? path
+      end
+      stub&.to_spec
+    end
+
     ##
     # Return the best specification in the record that contains the file
     # matching +path+ amongst the specs that are not activated.

data/lib/rubygems/version.rb

@@ -1,7 +1,5 @@
 # frozen_string_literal: true
 
-require_relative "deprecate"
-
 ##
 # The Version class processes string versions into comparable
 # values. A version string should normally be a series of numbers
@@ -152,6 +150,9 @@ require_relative "deprecate"
 # For the last example, single-digit versions are automatically extended with
 # a zero to give a sensible result.
 
+# Workaround for directly loading Gem::Version in some cases
+module Gem; end
+
 class Gem::Version
   include Comparable
 

data/lib/rubygems.rb

@@ -9,7 +9,7 @@
 require "rbconfig"
 
 module Gem
-  VERSION = "4.0.4"
+  VERSION = "4.0.5"
 end
 
 require_relative "rubygems/defaults"
@@ -192,11 +192,12 @@ module Gem
     begin
       spec.activate
     rescue Gem::LoadError => e # this could fail due to gem dep collisions, go lax
-      spec_by_name = Gem::Specification.find_by_name(spec.name)
-      if spec_by_name.nil?
+      spec = Gem::Specification.find_unloaded_by_path(path)
+      spec ||= Gem::Specification.find_by_name(spec.name)
+      if spec.nil?
         raise e
       else
-        spec_by_name.activate
+        spec.activate
       end
     end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: rubygems-update
 version: !ruby/object:Gem::Version
-  version: 4.0.4
+  version: 4.0.5
 platform: ruby
 authors:
 - Jim Weirich