v3.2.21

Enhancements:

• Fix typo in OpenSSL detection. Pull request #4679 by osyoyu
• Add the most recent licenses from spdx.org. Pull request #4662 by nobu
• Simplify setup.rb code to allow installing rubygems from source on
  truffleruby 21.0 and 21.1. Pull request #4624 by deivid-rodriguez

Bug fixes:

• Create credentials folder when setting API keys if not there yet. Pull
  request #4665 by deivid-rodriguez

bundler-v2.2.21

Security fixes:

• Auto-update insecure lockfile to split GEM source sections whenever possible #4647

Enhancements:

• Use a more limited number of threads when fetching in parallel from the Compact Index API #4670
• Update TODO link in bundle gem template to https #4671

Bug fixes:

• Fix bundle install --local hitting the network when cache_all_platforms configured #4677

v3.2.20

Security fixes:

• Verify plaform before installing to avoid potential remote code
  execution. Pull request #4667 by sonalkr132

Enhancements:

• Add better specification policy error description. Pull request #4658 by
  ceritium

bundler-v2.2.20

Enhancements:

• Don't print bug report template on server side errors #4663
• Don't load resolv unnecessarily #4640

Bug fixes:

• Fix bundle outdated edge case #4648
• Fix bundle check with scoped rubygems sources #4639

Performance:

• Don't use extra_rdoc_files with md files in gemspec to make installing bundler with docs faster #4628

v3.2.19

Enhancements:

• Fix gem help build output format. Pull request #4613 by tnir

bundler-v2.2.19

Bug fixes:

• Restore support for configuration keys with dashes #4582
• Fix some cached gems being unintentionally ignored when using rubygems 3.2.18 #4623

v3.2.18

Enhancements:

• Don't leave temporary directory around when building extensions to
  improve build reproducibility. Pull request #4610 by baloo

bundler-v2.2.18

Security fixes:

• Fix dependency confusion issues with implicit dependencies #4609

Enhancements:

• Use simpler notation for generated required_ruby_version #4598
• Undeprecate bundle show #4586
• Make sure link to new issue uses the proper template #4592

Bug fixes:

• Fix platform specific gems being removed from the lockfile #4580

v3.2.17

Enhancements:

• Only print month & year in deprecation messages. Pull request #3085 by
  Schwad
• Make deprecate method support ruby3's keyword arguments. Pull request
  #4558 by mame
• Update the default bindir on macOS. Pull request #4524 by nobu
• Prefer File.open instead of Kernel#open. Pull request #4529 by mame

Documentation:

• Fix usage messages to reflect the current POSIX-compatible behaviour.
  Pull request #4551 by graywolf-at-work

bundler-v2.2.17

Enhancements:

• Improve authentication required error message to include an alternative using ENV #4565
• Discard partial range responses without etag #4563
• Fix configuring ENV for a gem server with a name including dashes #4571
• Redact credentials from bundle env and bundle config #4566
• Redact all sources in verbose mode #4564
• Improve bundle pristine error if BUNDLE_GEMFILE does not exist #4536
• [CurrentRuby] Add 3.0 as a known minor #4535
• Prefer File.read instead of IO.read #4530
• Add space after open curly bracket in Gemfile and gems.rb template #4518

Bug fixes:

• Make sure specs are fetched from the right source when materializing #4562
• Fix bundle cache with an up-to-date lockfile and specs not already installed #4554
• Ignore deployment setting in inline mode #4523

Performance:

• Don't materialize resolutions when not necessary #4556