v3.7.1

Enhancements:

• Fix regression in presence of RVM gems. Pull request
  #8854 by
  deivid-rodriguez
• Restore parsing "--" as an unknown platform rather than crashing. Pull
  request #8846 by
  deivid-rodriguez
• Installs bundler 2.7.1 as a default gem.

Documentation:

• Use mailto link in Code of Conduct. Pull request
  #8849 by
  deivid-rodriguez
• Update Code of Conduct email to [email protected]. Pull request
  #8848 by indirect

bundler-v2.7.1

Enhancements:

• Add some missing deprecation messages #8844

Bug fixes:

• Cancel deprecation of --force flag to bundle install and bundle update #8843

Documentation:

• Clarify documentation about new default gem installation directory in Bundler 4 #8857
• Use mailto link in Code of Conduct #8849
• Update Code of Conduct email to [email protected] #8848
• Add missing link to irb repo in DEBUGGING.md #8842

v3.7.0

Security:

• Update vendored resolv to 0.6.2. Pull request
  #8831 by hsbt

Breaking changes:

• Stop generating binstubs with support for RubyGems before 2.6.2. Pull
  request #8833 by
  deivid-rodriguez
• Drop support for Ruby 3.1. Pull request
  #8634 by segiddins

Enhancements:

• Update SPDX license list as of 2025-07-01. Pull request
  #8829 by
  github-actions[bot]
• Add push_rubygem as a default scope for gem signin command. Pull
  request #8672 by hsbt
• Update bundled tls certs. Pull request
  #8731 by segiddins
• Install the best matching gem for the current platform in gem install.
  Pull request #8751 by
  segiddins
• Move most of Bundler::GemHelpers to Gem::Platform. Pull request
  #8703 by segiddins
• Ensure that Gem::Platform parses strings to a fix point. Pull request
  #8584 by segiddins
• Installs bundler 2.7.0 as a default gem.

Bug fixes:

• Fix signing HEAD and date formatting in S3 signer. Pull request
  #8763 by rye-stripe
• Fix --bindir <foo> flag to gem install failing when <foo> is not in
  the default GEM_HOME and its parent directory does not exist yet. Pull
  request #8783 by larouxn
• Fix gem install sometimes compiling the wrong source files. Pull
  request #8764 by
  deivid-rodriguez
• Workaround rust extension compilation when ccache or sccache are
  used. Pull request #8521
  by hsbt
• Fix gem pristine not recompiling extensions sometimes. Pull request
  #8757 by
  deivid-rodriguez
• Fix --prerelease flag to gem install sometimes not respected. Pull
  request #8648 by ntl

Documentation:

• Fix incorrect UPGRADING link in README.md. Pull request
  #8838 by djbender
• Add a root CONTRIBUTING.md file. Pull request
  #8822 by
  deivid-rodriguez
• Add a SECURITY.md file. Pull request
  #8812 by
  deivid-rodriguez
• Fix heading ranks in documentation. Pull request
  #8711 by antoinem

bundler-v2.7.0

Breaking changes:

• Stop allowing calling #gem on random objects #8819
• Remove path_relative_to_cwd setting #8815
• Remove the default_install_uses_path and auto_clean_without_path settings #8814
• Remove print_only_version_number setting #8799
• Drop support for Ruby 3.1 #8634
• Raise an error if incompatible or merge if compatible when a gemspec development dep is duplicated in Gemfile #8556
• Remove MD5 digesting of compact index responses #8530
• Stop generating binstubs for Bundler itself #8345

Deprecations:

• Deprecate unused Bundler::SpecSet methods #8777
• Deprecate x64-mingw32 in favour of x64-mingw-ucrt #8733
• Deprecate legacy windows platforms (:mswin, :mingw) in Gemfile DSL in favor of :windows #8447
• Deprecate CurrentRuby#maglev? and other related maglev methods #8452

Features:

• Allow simulating "Bundler 4 mode" more easily #6472

Performance:

• Cache git sources with commit SHA refs #8741

Enhancements:

• Load RubyGems extensions in the first place #8835
• Update gemspec based on provided github username when exists #8790
• Fail fast when connection errors happen #8784
• Introduce a verbose setting to enable verbose output for all commands #8801
• Introduce gem.bundle setting to run bundle install automatically after bundle gem, and make it the default #8671
• Handle Errno::EADDRNOTAVAIL errors gracefully #8776
• Use persist-credentials: false in workflow generated by bundle gem #8779
• Recognize JRuby loaded from a classloader, not just any JAR #8567
• Validate lockfile dependencies with bundle install #8666
• Ignore local specifications if they have incorrect dependencies #8647
• Move most of Bundler::GemHelpers to Gem::Platform #8703
• Improve spec.files in the .gemspec template #8732

Bug fixes:

• Fix double bundle gem prompts #8825
• Fix date displayed in bundle version help text #8806
• Fix bundle console printing bug report template on NameError during require #8804
• Fix Bundler.original_env['GEM_HOME'] when Bundler is trampolined #8781
• Fix rdoc issues when running gem commands in a bundle exec context #8770
• Never ignore gems from path sources during activation #8766
• Fix bundle install after pinning a git source with subgems #8745
• Let bundle update --bundler upgrade bundler even if restarts are disabled #8729

Documentation:

• Rewrite and complete UPGRADING document #8817
• Document that global_gem_cache also caches compiled extensions #8823
• Add default_cli_command documentation #8816
• Add a root CONTRIBUTING.md file #8822
• Add a SECURITY.md file #8812
• Update man pages for the bundle doctor ssl subcommand #8803
• Remove duplicate documentation for --changelog flag #8756
• Fix typos making some lists in documentation render incorrectly #8759
• Fix heading ranks in documentation #8711
• Clarify differences between frozen and deployment settings, and other bundle-config documentation improvements #8715

v3.6.9

Enhancements:

• Add mtime to Gem::Package::TarWriter#add_file argument. Pull request
  #8673 by unasuke
• Print webauthn authentication link as a separate line to make it easier
  to visit. Pull request
  #8663 by mperham
• Remove shellwords autoload. Pull request
  #8644 by
  deivid-rodriguez
• Installs bundler 2.6.9 as a default gem.

Performance:

• Avoid unnecessary splat allocation. Pull request
  #8640 by jeremyevans

Documentation:

• Fix typo in Changelog for 3.6.0 / 2024-12-16. Pull request
  #8638 by thatrobotdev

bundler-v2.6.9

Enhancements:

• Fix doctor command parsing of otool output #8665
• Add SSL troubleshooting to bundle doctor #8624
• Let bundle lock --normalize-platforms remove invalid platforms #8631

Bug fixes:

• Fix bundle lock sometimes allowing invalid platforms into the lockfile #8630
• Fix false positive warning about insecure materialization in frozen mode #8629

v3.6.8

Enhancements:

• Installs bundler 2.6.8 as a default gem.

bundler-v2.6.8

Enhancements:

• Refine bundle update --verbose logs #8627
• Improve bug report instructions #8607

Bug fixes:

• Fix bundle update crash in an edge case #8626
• Fix bundle lock --normalize-platforms regression #8620

v3.6.7

Enhancements:

• Sorting files in metadata for build reproducibility. Pull request
  #8569 by
  giacomobenedetti
• Default to a SOURCE_DATE_EPOCH of 315619200, to simplify reproducible
  builds. Pull request
  #8568 by duckinator
• Let gem exec raise an error in ambiguous cases. Pull request
  #8573 by
  deivid-rodriguez
• Installs bundler 2.6.7 as a default gem.

Performance:

• Speed up Version#<=> ~20-50% when lengths differ. Pull request
  #8565 by skipkayhil

bundler-v2.6.7

Enhancements:

• Fix crash when server compact index API implementation only lists versions #8594
• Fix lockfile when a gem ends up accidentally under two different sources #8579
• Refuse to install and print an error in frozen mode if some entries are missing in CHECKSUMS lockfile section #8563
• Support git 2.49 #8581
• Improve wording of a few messages #8570

Bug fixes:

• Fix bundle add sometimes generating invalid lockfiles #8586

Performance:

• Implement pub_grub strategy interface #8589
• Update vendored pub_grub #8571