rubygems-update 4.0.6 → 4.0.7

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 31e2118baf4f86a82f4be2262ed95ba157c3a8658ba723b1adfa5470a69d4dd3
-  data.tar.gz: b352f65e3933433c38e4b35f21b0360cbe4051bf5bbf2b03f4e4e2a6eb06c6b8
+  metadata.gz: cd74ce9ba4fda49012edabc1f3ac73712a3d4e5cac0a0093731b71dbfe5c7e0e
+  data.tar.gz: 513137267bce8b486aa2b239c05ddfa7f0a85c5bc3a2a495e9a8e50a179f51f3
 SHA512:
-  metadata.gz: 827fdf491c604e5895703d0c9354635c3f4b0b975b82f985ddef401a778914286fd44c78632e1ad650e88a5fb4655ebe8699246c0ae7b8b1bccb2ad4bf1d1f8c
-  data.tar.gz: 583355691ea29aba83275cff50c3bc5f9ffb5da060cf5d284d1bd1f38626b7ca7d6c6ff8422f237b813c2d5cbd1e4801bfff16972b1c0385977aedec28d676de
+  metadata.gz: c2c8b03826b7117d507149efd79904e4bf6028da39569dfd2e4a7301a1273064d2069e89c22adee81b1c2b80804f1a23cc635154df0d0f42467c5a83f44e2508
+  data.tar.gz: 0517c93d395ef01d37f9f3375ed5c93a11836b8dc1adec94c01181fe7f14243ef517a840f0692c33b04c8c963007556604d955aee5d5a3ebaf72fdc0224107bc

data/CHANGELOG.md

@@ -1,5 +1,22 @@
 # Changelog
 
+## 4.0.7 / 2026-02-25
+
+### Enhancements:
+
+* Add Gem.disable_system_update_message in setup.rb. Pull request
+  [#9020](https://github.com/ruby/rubygems/pull/9020) by hyuraku
+* Print message when signing in with an existing API key. Pull request
+  [#9312](https://github.com/ruby/rubygems/pull/9312) by hsbt
+* Installs bundler 4.0.7 as a default gem.
+
+### Documentation:
+
+* Document gemspecs must be deterministic. Pull request
+  [#9321](https://github.com/ruby/rubygems/pull/9321) by fxn
+* Remove "##" from a comment to require. Pull request
+  [#9306](https://github.com/ruby/rubygems/pull/9306) by tompng
+
 ## 4.0.6 / 2026-02-05
 
 ### Enhancements:

data/Manifest.txt

@@ -220,6 +220,7 @@ bundler/lib/bundler/templates/newgem/bin/setup.tt
 bundler/lib/bundler/templates/newgem/circleci/config.yml.tt
 bundler/lib/bundler/templates/newgem/exe/newgem.tt
 bundler/lib/bundler/templates/newgem/ext/newgem/Cargo.toml.tt
+bundler/lib/bundler/templates/newgem/ext/newgem/build.rs.tt
 bundler/lib/bundler/templates/newgem/ext/newgem/extconf-c.rb.tt
 bundler/lib/bundler/templates/newgem/ext/newgem/extconf-go.rb.tt
 bundler/lib/bundler/templates/newgem/ext/newgem/extconf-rust.rb.tt
@@ -229,6 +230,7 @@ bundler/lib/bundler/templates/newgem/ext/newgem/newgem.c.tt
 bundler/lib/bundler/templates/newgem/ext/newgem/newgem.go.tt
 bundler/lib/bundler/templates/newgem/ext/newgem/newgem.h.tt
 bundler/lib/bundler/templates/newgem/ext/newgem/src/lib.rs.tt
+bundler/lib/bundler/templates/newgem/github/workflows/build-gems.yml.tt
 bundler/lib/bundler/templates/newgem/github/workflows/main.yml.tt
 bundler/lib/bundler/templates/newgem/gitignore.tt
 bundler/lib/bundler/templates/newgem/gitlab-ci.yml.tt

data/bundler/CHANGELOG.md

@@ -1,5 +1,24 @@
 # Changelog
 
+## 4.0.7 (2026-02-25)
+
+### Enhancements:
+
+  - Don't check whether a plugin needs to be installed: [#9328](https://github.com/ruby/rubygems/pull/9328)
+  - [rust gem] Major improvements for gem scaffolding (rebased) [#8455](https://github.com/ruby/rubygems/pull/8455)
+  - Fix(bundler): only preload git sources for requested groups [#9234](https://github.com/ruby/rubygems/pull/9234)
+  - Raise error when gem contains capital letters [#5432](https://github.com/ruby/rubygems/pull/5432)
+
+### Bug fixes:
+
+  - Fix Bundler crashing when it tries to install plugin: [#9335](https://github.com/ruby/rubygems/pull/9335)
+  - Run git operations in parallel (take 2): [#9323](https://github.com/ruby/rubygems/pull/9323)
+  - Add support for help flag in plugin commands [#9263](https://github.com/ruby/rubygems/pull/9263)
+
+### Documentation:
+
+  - [DOC] Fix link in Bundler [#9315](https://github.com/ruby/rubygems/pull/9315)
+
 ## 4.0.6 (2026-02-05)
 
 ### Bug fixes:

data/bundler/lib/bundler/build_metadata.rb

@@ -4,8 +4,8 @@ module Bundler
   # Represents metadata from when the Bundler gem was built.
   module BuildMetadata
     # begin ivars
-    @built_at = "2026-02-05".freeze
-    @git_commit_sha = "0947d9cf5b".freeze
+    @built_at = "2026-02-25".freeze
+    @git_commit_sha = "049c458564".freeze
     # end ivars
 
     # A hash representation of the build metadata.

data/bundler/lib/bundler/cli/gem.rb

@@ -158,6 +158,9 @@ module Bundler
       case config[:ci]
       when "github"
         templates.merge!("github/workflows/main.yml.tt" => ".github/workflows/main.yml")
+        if extension == "rust"
+          templates.merge!("github/workflows/build-gems.yml.tt" => ".github/workflows/build-gems.yml")
+        end
         config[:ignore_paths] << ".github/"
       when "gitlab"
         templates.merge!("gitlab-ci.yml.tt" => ".gitlab-ci.yml")
@@ -228,6 +231,7 @@ module Bundler
         templates.merge!(
           "Cargo.toml.tt" => "Cargo.toml",
           "ext/newgem/Cargo.toml.tt" => "ext/#{name}/Cargo.toml",
+          "ext/newgem/build.rs.tt" => "ext/#{name}/build.rs",
           "ext/newgem/extconf-rust.rb.tt" => "ext/#{name}/extconf.rb",
           "ext/newgem/src/lib.rs.tt" => "ext/#{name}/src/lib.rs",
         )
@@ -435,6 +439,10 @@ module Bundler
         exit 1
       end
 
+      if /[A-Z]/.match?(name)
+        Bundler.ui.warn "Gem names with capital letters are not recommended. Please use only lowercase letters, numbers, and hyphens."
+      end
+
       constant_name = constant_array.join("::")
 
       existing_constant = constant_array.inject(Object) do |c, s|

data/bundler/lib/bundler/cli.rb

@@ -155,6 +155,10 @@ module Bundler
     def help(cli = nil)
       cli = self.class.all_aliases[cli] if self.class.all_aliases[cli]
 
+      if Bundler.settings[:plugins] && Bundler::Plugin.command?(cli) && !self.class.all_commands.key?(cli)
+        return Bundler::Plugin.exec_command(cli, ["--help"])
+      end
+
       case cli
       when "gemfile" then command = "gemfile"
       when nil       then command = "bundle"

data/bundler/lib/bundler/definition.rb

@@ -249,6 +249,7 @@ module Bundler
     end
 
     def missing_specs
+      preload_git_sources
       resolve.missing_specs_for(requested_dependencies)
     end
 
@@ -1125,26 +1126,43 @@ module Bundler
     end
 
     def preload_git_sources
-      sources.git_sources.each {|source| preload_git_source_worker.enq(source) }
-    ensure
-      preload_git_source_worker.stop
-    end
-
-    def find_source_requirements
-      if Gem.ruby_version >= Gem::Version.new("3.3")
+      if Gem.ruby_version < Gem::Version.new("3.3")
         # Ruby 3.2 has a bug that incorrectly triggers a circular dependency warning. This version will continue to
         # fetch git repositories one by one.
-        preload_git_sources
+        return
       end
 
+      begin
+        needed_git_sources.each {|source| preload_git_source_worker.enq(source) }
+      ensure
+        preload_git_source_worker.stop
+      end
+    end
+
+    # Git sources needed for the requested groups (excludes sources only used by --without groups)
+    def needed_git_sources
+      needed_deps = dependencies_for(requested_groups)
+      sources.git_sources.select do |source|
+        needed_deps.any? {|d| d.source == source }
+      end
+    end
+
+    # Git sources that should be excluded (only used by --without groups)
+    def excluded_git_sources
+      sources.git_sources - needed_git_sources
+    end
+
+    def find_source_requirements
+      preload_git_sources
+
       # Record the specs available in each gem's source, so that those
       # specs will be available later when the resolver knows where to
       # look for that gemspec (or its dependencies)
       source_requirements = if precompute_source_requirements_for_indirect_dependencies?
-        all_requirements = source_map.all_requirements
+        all_requirements = source_map.all_requirements(excluded_git_sources)
         { default: default_source }.merge(all_requirements)
       else
-        { default: Source::RubygemsAggregate.new(sources, source_map) }.merge(source_map.direct_requirements)
+        { default: Source::RubygemsAggregate.new(sources, source_map, excluded_git_sources) }.merge(source_map.direct_requirements)
       end
       source_requirements.merge!(source_map.locked_requirements) if nothing_changed?
       metadata_dependencies.each do |dep|

data/bundler/lib/bundler/plugin.rb

@@ -253,10 +253,13 @@ module Bundler
     # @param [Array<String>] names of inferred source plugins that can be ignored
     def save_plugins(plugins, specs, optional_plugins = [])
       plugins.each do |name|
-        next if index.installed?(name)
-
         spec = specs[name]
 
+        # It's possible that the `plugin` found in the Gemfile don't appear in the specs. For instance when
+        # calling `BUNDLE_WITHOUT=default bundle install`, the plugins will not get installed.
+        next if spec.nil?
+        next if index.installed?(name)
+
         save_plugin(name, spec, optional_plugins.include?(name))
       end
     end

data/bundler/lib/bundler/rubygems_gem_installer.rb

@@ -71,9 +71,6 @@ module Bundler
     def generate_plugins
       return unless Gem::Installer.method_defined?(:generate_plugins, false)
 
-      latest = Gem::Specification.stubs_for(spec.name).first
-      return if latest && latest.version > spec.version
-
       ensure_writable_dir @plugins_dir
 
       if spec.plugins.empty?

data/bundler/lib/bundler/source/rubygems_aggregate.rb

@@ -5,9 +5,10 @@ module Bundler
     class RubygemsAggregate
       attr_reader :source_map, :sources
 
-      def initialize(sources, source_map)
+      def initialize(sources, source_map, excluded_sources = [])
         @sources = sources
         @source_map = source_map
+        @excluded_sources = excluded_sources
 
         @index = build_index
       end
@@ -31,6 +32,8 @@ module Bundler
           dependency_names = source_map.pinned_spec_names
 
           sources.all_sources.each do |source|
+            next if @excluded_sources.include?(source)
+
             source.dependency_names = dependency_names - source_map.pinned_spec_names(source)
             idx.add_source source.specs
             dependency_names.concat(source.unmet_deps).uniq!

data/bundler/lib/bundler/source_map.rb

@@ -14,10 +14,14 @@ module Bundler
       direct_requirements.reject {|_, source| source == skip }.keys
     end
 
-    def all_requirements
+    def all_requirements(excluded_sources = [])
       requirements = direct_requirements.dup
 
-      unmet_deps = sources.non_default_explicit_sources.map do |source|
+      explicit_sources = sources.non_default_explicit_sources.reject do |source|
+        excluded_sources.include?(source)
+      end
+
+      unmet_deps = explicit_sources.map do |source|
         (source.spec_names - pinned_spec_names).each do |indirect_dependency_name|
           previous_source = requirements[indirect_dependency_name]
           if previous_source.nil?

data/bundler/lib/bundler/templates/newgem/Cargo.toml.tt

@@ -5,3 +5,9 @@
 [workspace]
 members = ["./ext/<%= config[:name] %>"]
 resolver = "2"
+
+[profile.release]
+# By default, debug symbols are stripped from the final binary which makes it
+# harder to debug if something goes wrong. It's recommended to keep debug
+# symbols in the release build so that you can debug the final binary if needed.
+debug = true

data/bundler/lib/bundler/templates/newgem/ext/newgem/Cargo.toml.tt

@@ -13,3 +13,10 @@ crate-type = ["cdylib"]
 
 [dependencies]
 magnus = { version = "0.8.2" }
+rb-sys = { version = "0.9", features = ["stable-api-compiled-fallback"] }
+
+[build-dependencies]
+rb-sys-env = "0.2.2"
+
+[dev-dependencies]
+rb-sys-test-helpers = { version = "0.2.2" }

data/bundler/lib/bundler/templates/newgem/ext/newgem/build.rs.tt

@@ -0,0 +1,5 @@
+pub fn main() -> Result<(), Box<dyn std::error::Error>> {
+    let _ = rb_sys_env::activate()?;
+
+    Ok(())
+}

data/bundler/lib/bundler/templates/newgem/ext/newgem/src/lib.rs.tt

@@ -1,7 +1,7 @@
 use magnus::{function, prelude::*, Error, Ruby};
 
-fn hello(subject: String) -> String {
-    format!("Hello from Rust, {subject}!")
+pub fn hello(subject: String) -> String {
+    format!("Hello {subject}, from Rust!")
 }
 
 #[magnus::init]
@@ -10,3 +10,14 @@ fn init(ruby: &Ruby) -> Result<(), Error> {
     module.define_singleton_method("hello", function!(hello, 1))?;
     Ok(())
 }
+
+#[cfg(test)]
+mod tests {
+    use rb_sys_test_helpers::ruby_test;
+    use super::hello;
+
+    #[ruby_test]
+    fn test_hello() {
+        assert_eq!("Hello world, from Rust!", hello("world".to_string()));
+    }
+}

data/bundler/lib/bundler/templates/newgem/github/workflows/build-gems.yml.tt

@@ -0,0 +1,65 @@
+---
+name: Build gems
+
+on:
+  push:
+    tags:
+      - "v*"
+      - "cross-gem/*"
+  workflow_dispatch:
+
+jobs:
+  ci-data:
+    runs-on: ubuntu-latest
+    outputs:
+      result: ${{ steps.fetch.outputs.result }}
+    steps:
+      - uses: oxidize-rb/actions/fetch-ci-data@v1
+        id: fetch
+        with:
+          supported-ruby-platforms: |
+            exclude: ["arm-linux", "x64-mingw32"]
+          stable-ruby-versions: |
+            exclude: ["head"]
+
+  source-gem:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: ruby/setup-ruby@v1
+        with:
+          bundler-cache: true
+
+      - name: Build gem
+        run: bundle exec rake build
+
+      - uses: actions/upload-artifact@v3
+        with:
+          name: source-gem
+          path: pkg/*.gem
+
+  cross-gem:
+    name: Compile native gem for ${{ matrix.platform }}
+    runs-on: ubuntu-latest
+    needs: ci-data
+    strategy:
+      matrix:
+        platform: ${{ fromJSON(needs.ci-data.outputs.result).supported-ruby-platforms }}
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: ruby/setup-ruby@v1
+        with:
+          bundler-cache: true
+
+      - uses: oxidize-rb/actions/cross-gem@v1
+        id: cross-gem
+        with:
+          platform: ${{ matrix.platform }}
+          ruby-versions: ${{ join(fromJSON(needs.ci-data.outputs.result).stable-ruby-versions, ',') }}
+
+      - uses: actions/upload-artifact@v3
+        with:
+          name: cross-gem
+          path: ${{ steps.cross-gem.outputs.gem-path }}

data/bundler/lib/bundler/templates/newgem/newgem.gemspec.tt

@@ -15,10 +15,6 @@ Gem::Specification.new do |spec|
   spec.license = "MIT"
 <%- end -%>
   spec.required_ruby_version = ">= <%= config[:required_ruby_version] %>"
-<%- if config[:ext] == 'rust' -%>
-  spec.required_rubygems_version = ">= <%= config[:rust_builder_required_rubygems_version] %>"
-<%- end -%>
-
   spec.metadata["allowed_push_host"] = "TODO: Set to your gem server 'https://example.com'"
   spec.metadata["homepage_uri"] = spec.homepage
   spec.metadata["source_code_uri"] = "<%= config[:source_code_uri] %>"
@@ -44,9 +40,6 @@ Gem::Specification.new do |spec|
 
   # Uncomment to register a new dependency of your gem
   # spec.add_dependency "example-gem", "~> 1.0"
-<%- if config[:ext] == 'rust' -%>
-  spec.add_dependency "rb_sys", "~> 0.9.91"
-<%- end -%>
 <%- if config[:ext] == 'go' -%>
   spec.add_dependency "go_gem", "~> 0.2"
 <%- end -%>

data/bundler/lib/bundler/templates/newgem/spec/newgem_spec.rb.tt

@@ -5,7 +5,15 @@ RSpec.describe <%= config[:constant_name] %> do
     expect(<%= config[:constant_name] %>::VERSION).not_to be nil
   end
 
+<%- if config[:ext] == 'rust' -%>
+  it "can call into Rust" do
+    result = <%= config[:constant_name] %>.hello("world")
+
+    expect(result).to be("Hello earth, from Rust!")
+  end
+<%- else -%>
   it "does something useful" do
     expect(false).to eq(true)
   end
+<%- end -%>
 end

data/bundler/lib/bundler/templates/newgem/test/minitest/test_newgem.rb.tt

@@ -7,7 +7,13 @@ class <%= config[:minitest_constant_name] %> < Minitest::Test
     refute_nil ::<%= config[:constant_name] %>::VERSION
   end
 
+<%- if config[:ext] == 'rust' -%>
+  def test_hello_world
+    assert_equal "Hello earth, from Rust!", <%= config[:constant_name] %>.hello("world")
+  end
+<%- else -%>
   def test_it_does_something_useful
     assert false
   end
+<%- end -%>
 end

data/bundler/lib/bundler/version.rb

@@ -1,7 +1,7 @@
 # frozen_string_literal: false
 
 module Bundler
-  VERSION = "4.0.6".freeze
+  VERSION = "4.0.7".freeze
 
   def self.bundler_major_version
     @bundler_major_version ||= gem_version.segments.first

data/bundler/lib/bundler.rb

@@ -172,7 +172,7 @@ module Bundler
       self_manager.restart_with_locked_bundler_if_needed
     end
 
-    # Automatically install dependencies if settings[:auto_install] exists.
+    # Automatically install dependencies if <tt>settings[:auto_install]</tt> exists.
     # This is set through config cmd `bundle config set --global auto_install 1`.
     #
     # Note that this method `nil`s out the global Definition object, so it

data/lib/rubygems/gemcutter_utilities.rb

@@ -154,10 +154,11 @@ module Gem::GemcutterUtilities
 
   def sign_in(sign_in_host = nil, scope: nil)
     sign_in_host ||= host
-    return if api_key
-
     pretty_host = pretty_host(sign_in_host)
-
+    if api_key
+      say "You are already signed in on #{pretty_host}."
+      return
+    end
     say "Enter your #{pretty_host} credentials."
     say "Don't have an account yet? " \
         "Create one at #{sign_in_host}/sign_up"

data/lib/rubygems/specification.rb

@@ -35,6 +35,15 @@ require "rbconfig"
 # Starting in RubyGems 2.0, a Specification can hold arbitrary
 # metadata.  See #metadata for restrictions on the format and size of metadata
 # items you may add to a specification.
+#
+# Specifications must be deterministic, as in the example above. For instance,
+# you cannot define attributes conditionally:
+#
+#   # INVALID: do not do this.
+#   unless RUBY_ENGINE == "jruby"
+#     s.extensions << "ext/example/extconf.rb"
+#   end
+#
 
 class Gem::Specification < Gem::BasicSpecification
   # REFACTOR: Consider breaking out this version stuff into a separate

data/lib/rubygems.rb

@@ -9,7 +9,7 @@
 require "rbconfig"
 
 module Gem
-  VERSION = "4.0.6"
+  VERSION = "4.0.7"
 end
 
 require_relative "rubygems/defaults"
@@ -1411,9 +1411,7 @@ require_relative "rubygems/specification"
 
 # REFACTOR: This should be pulled out into some kind of hacks file.
 begin
-  ##
   # Defaults the operating system (or packager) wants to provide for RubyGems.
-
   require "rubygems/defaults/operating_system"
 rescue LoadError
   # Ignored
@@ -1428,9 +1426,7 @@ rescue StandardError => e
 end
 
 begin
-  ##
   # Defaults the Ruby implementation wants to provide for RubyGems
-
   require "rubygems/defaults/#{RUBY_ENGINE}"
 rescue LoadError
 end

data/setup.rb

@@ -25,6 +25,10 @@ $:.unshift File.expand_path("lib")
 require "rubygems"
 require "rubygems/gem_runner"
 
+if Gem.disable_system_update_message
+  abort "ERROR: #{Gem.disable_system_update_message}"
+end
+
 Gem::CommandManager.instance.register_command :setup
 
 args = ARGV.clone

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: rubygems-update
 version: !ruby/object:Gem::Version
-  version: 4.0.6
+  version: 4.0.7
 platform: ruby
 authors:
 - Jim Weirich
@@ -303,6 +303,7 @@ files:
 - bundler/lib/bundler/templates/newgem/circleci/config.yml.tt
 - bundler/lib/bundler/templates/newgem/exe/newgem.tt
 - bundler/lib/bundler/templates/newgem/ext/newgem/Cargo.toml.tt
+- bundler/lib/bundler/templates/newgem/ext/newgem/build.rs.tt
 - bundler/lib/bundler/templates/newgem/ext/newgem/extconf-c.rb.tt
 - bundler/lib/bundler/templates/newgem/ext/newgem/extconf-go.rb.tt
 - bundler/lib/bundler/templates/newgem/ext/newgem/extconf-rust.rb.tt
@@ -312,6 +313,7 @@ files:
 - bundler/lib/bundler/templates/newgem/ext/newgem/newgem.go.tt
 - bundler/lib/bundler/templates/newgem/ext/newgem/newgem.h.tt
 - bundler/lib/bundler/templates/newgem/ext/newgem/src/lib.rs.tt
+- bundler/lib/bundler/templates/newgem/github/workflows/build-gems.yml.tt
 - bundler/lib/bundler/templates/newgem/github/workflows/main.yml.tt
 - bundler/lib/bundler/templates/newgem/gitignore.tt
 - bundler/lib/bundler/templates/newgem/gitlab-ci.yml.tt