Update Rubygems and Bundler to v4.0.7 (major)

This MR contains the following updates:

Package	Update	Change
bundler (source, changelog)	major	2.7.2 -> 4.0.7
rubygems (source, changelog)	major	3.7.2 -> 4.0.7

Notes for Reviewer

• For security reasons, our Renovate fork cannot trigger chart pipelines
  • ⚠️ Reviewer needs to initiate new MR pipeline, subsequently triggering chart pipeline from it. ⚠️

---

Release Notes

ruby/rubygems (bundler)

v4.0.7

Compare Source

Enhancements:

• Don't check whether a plugin needs to be installed: #​9328
• [rust gem] Major improvements for gem scaffolding (rebased) #​8455
• Fix(bundler): only preload git sources for requested groups #​9234
• Raise error when gem contains capital letters #​5432

Bug fixes:

• Fix Bundler crashing when it tries to install plugin: #​9335
• Run git operations in parallel (take 2): #​9323
• Add support for help flag in plugin commands #​9263

Documentation:

• [DOC] Fix link in Bundler #​9315

v4.0.6

Compare Source

Bug fixes:

• Fix gzip cache corruption when recovering from HTTP 416 responses #​9272
• Fallback git/path sources to default source #​9301
• Ensure revision is always re-resolved in git_proxy.rb #​9294

Documentation:

• Clarify local gem override docs to require git-sourced gems #​9305

v4.0.5

Compare Source

Enhancements:

• Fix Bundler that re-exec $0 when a version is present in the config: #​9249

Bug fixes:

• Only use parent source with Git and Path sources #​9269

v4.0.4

Compare Source

Enhancements:

• Validate more options for add sub-command #​5905
• Support Ruby 4.1 #​9219

Bug fixes:

• Fix dependency source bug in bundler #​9213
• Retain current bundler version on bundle clean #​9221

v4.0.3

Compare Source

Enhancements:

• Fall back to ruby platform gem when precompiled variant is incompatible #​9211

v4.0.2

Compare Source

Enhancements:

• Support single quotes in mise format ruby version #​9183
• Tweak the Bundler's "X gems now installed message": #​9194

Bug fixes:

• Allow to show cli_help with bundler executable #​9198
• Allow bundle pristine to work for git gems in the same repo #​9196

v4.0.1

Compare Source

Performance:

• Increase connection pool to allow for up to 70% speed increase on bundle install #​9087

Enhancements:

• Fix the config suggestion in the warning for $ bundle #​9164
• Fix native extension loading in newgem template for RHEL-based systems #​9156

Bug fixes:

• Fix Bundler removing executables after creating them #​9169

v4.0.0

Compare Source

Features:

• Support bundle install --lockfile option #​9111
• Add support for lockfile in Gemfile and bundle install --no-lock #​9059
• Add --ext=go to bundle gem #​8183
• Update Bundler::CurrentRuby::ALL_RUBY_VERSIONS #​9058
• Introduce bundle list --format=json #​8728

Performance:

• Run git operations in parallel to speed things up: #​9100
• Replace instance method look up in plugin installer #​9094
• Adjust the API_REQUEST_LIMIT to make less network roundtrip #​9071

Enhancements:

• Make BUNDLE_LOCKFILE environment variable have precedence over lockfile method in Gemfile #​9146
• Improve banner message for the default command #​9145
• Introduce install_or_cli_help and use it default bundle command #​9136
• Add go_gem/rake_task for Go native extension gem skeleton #​9105
• Warn users that bundle now display the help: #​9092
• Use DidYouMean::SpellChecker for gem suggestions in Bundler #​3857
• Update all vendored libraries to latest version #​9089
• We don't need to allow some warning now #​9074
• Support to embedded Pathname #​9056
• Enforce activation of irb when running with bundle console #​9033
• Update Magnus version in Rust extension gem template #​9025
• Add checksum of gems hosted on private servers: #​9004
• Loading support on Windows #​8254
• Improve error message when the same source is specified through gemspec and path #​8460
• Raise an error in frozen mode if some registry gems have empty checksums #​8888
• Bump vendored thor to 1.4.0 #​8883
• Delay default path and global cache changes to Bundler 5 #​8867
• Fix spacing in bundle gem newgem.gemspec.tt #​8865
• Add some missing deprecation messages #​8844

Bug fixes:

• Fixed checksums generation issue when no source is specified #​9133
• Check for file existence before deletion from cache #​9095
• Use method_defined?(:method, false) #​9098
• Handle BUNDLER_VERSION being set to an empty string #​6928
• Fix bundle install when the Gemfile contains "install_if" git gems: #​8992
• Fix installation issue related to path sources and precompiled gems #​8973
• Fix outdated lockfile during bundle lock when source changes #​8962
• Raise error on missing version file #​8963
• Fix bundle cache --frozen and bundle cache --no-prune not printing a deprecation message #​8926
• Fix local installation incorrectly forced if there's a vendor/cache directory and frozen mode is set #​8925
• Fix bundle lock --update <gem> with --lockfile flag updating all gems #​8922
• Fix bundle show --verbose and recommend it as an alternative to bundle show --outdated #​8915
• Fix bundle cache --no-all not printing a deprecation warning #​8912
• Fix bundle update foo unable to update foo in an edge case #​8897
• Fix Bundler printing more flags than actually passed in verbose mode #​8914
• Fix bundler failing to install sorbet-static in truffleruby when there's no lockfile #​8872
• Cancel deprecation of --force flag to bundle install and bundle update #​8843

Security:

• Bump up vendored URI to 1.0.4 #​9031

Breaking changes:

• Fix triple spacing when generating lockfile #​9076
• Hide patchlevel from lockfile #​7772
• Remove bundler_4_mode #​9038
• Pick and add extra changes for 4.0.0 version #​9018
• Replaced Bundler::SharedHelpers.major_deprecation to feature_removed! or feature_deprecated! #​9016
• Removed legacy_check option from SpecSet#for #​9015
• Make update_requires_all_flag to settings #​9011
• Make default cli command settings #​9010
• Make global_gem_cache flag to settings #​9009
• Consolidate removal of Bundler.rubygems.all_specs #​9008
• Consolidate removal of Bundler::SpecSet#- and Bundler::SpecSet#<< #​9007
• Replaced Bundler.feature_flag.plugins? to Bundler.settings #​9006
• Make bundle show --outdated raise an error #​8980
• Make --local-git flag to bundle plugin install raise an error #​8979
• Switch cache_all to be true by default #​8975
• Completely forbid passing --ext to bundle gem without a value #​8976
• Switch lockfile_checksums to be true by default #​8981
• Make bundle install --binstubs raise an error #​8978
• Make bundle remove --install raise an error #​8977
• Remove support for multiple global sources in Gemfile & lockfile #​8968
• Remove allow_offline_install setting #​8969
• Completely remove --rubocop flag to bundle gem, and related configuration #​8967
• Completely remove all remembered CLI flags #​8958
• Remove implementation of deployment, capistrano and vlad entrypoints #​8957
• Remove deprecated Bundler.*clean*, and Bundler.environment helpers #​8924
• Remove deprecated bundle viz and bundle inject commands #​8923
• Removed to workaround for Bundler 2.2 #​8903

Documentation:

• Unified UPGRADING.md and extract blog.rubygems.org #​9148
• Remove italic formatting from changelog section headers #​9128
• Small clarifications to Bundler 4 upgrade docs #​8964
• Improve documentation of bundle doctor, bundle plugin, and bundle config #​8919
• Make sure all CLI flags and subcommands are documented #​8861
• Clarify documentation about new default gem installation directory in Bundler 4 #​8857
• Use mailto link in Code of Conduct #​8849
• Update Code of Conduct email to conduct@rubygems.org #​8848
• Add missing link to irb repo in DEBUGGING.md #​8842

ruby/rubygems (rubygems)

v4.0.7

Compare Source

Enhancements:

• Add Gem.disable_system_update_message in setup.rb. Pull request #​9020 by hyuraku
• Print message when signing in with an existing API key. Pull request #​9312 by hsbt
• Installs bundler 4.0.7 as a default gem.

Documentation:

• Document gemspecs must be deterministic. Pull request #​9321 by fxn
• Remove "##" from a comment to require. Pull request #​9306 by tompng

v4.0.6

Compare Source

Enhancements:

• Update vendored resolv to 0.7.0. Pull request #​9298 by hsbt
• Installs bundler 4.0.6 as a default gem.

v4.0.5

Compare Source

Enhancements:

• Removed unused deprecate loading. Pull request #​9266 by hsbt
• Validate executable names for invalid characters. Pull request #​9257 by hsbt
• Installs bundler 4.0.5 as a default gem.

Bug fixes:

• Fix RubyGems not able to require the right gem:. Pull request #​9246 by Edouard-chin
• Remove special behavior for rake. Pull request #​9245 by JasonLunn

Documentation:

• Added another usage of pristine command. Pull request #​9255 by hsbt

v4.0.4

Compare Source

Enhancements:

• Remove date require from rebuild command. Pull request #​9232 by jeremyevans
• Installs bundler 4.0.4 as a default gem.

Bug fixes:

• Add a missing "require 'etc'" statement:. Pull request #​9242 by Edouard-chin

v4.0.3

Compare Source

Enhancements:

• Installs bundler 4.0.3 as a default gem.

Documentation:

• Fix broken documentation links. Pull request #​9208 by eileencodes

v4.0.2

Compare Source

Enhancements:

• Pass down value of BUNDLE_JOBS to RubyGems before compiling & introduce a new gem install -j flag. Pull request #​9171 by Edouard-chin
• Installs bundler 4.0.2 as a default gem.

v4.0.1

Compare Source

Enhancements:

• Installs bundler 4.0.1 as a default gem.

Bug fixes:

• Fixed unexpected default bundler installation. Pull request #​9167 by hsbt

Documentation:

• Update contributing docs with RGV. Pull request #​9155 by eileencodes

v4.0.0

Compare Source

Features:

• Undeprecate Gem::Version.new(nil). Pull request #​9086 by tenderlove
• Add pattern matching support to Gem::NameTuple. Pull request #​9064 by baweaver
• Add pattern matching support to Gem::Platform. Pull request #​9062 by baweaver

Performance:

• Add MAKEFLAGS=-j by default before compiling. Pull request #​9131 by Edouard-chin
• Remove some memoization. Pull request #​9017 by tenderlove
• Pull Gem.win_platform? out of a hot path. Pull request #​8983 by tenderlove
• Stop trying to remove every file on extraction. Pull request #​8974 by tenderlove
• Use IO.copy_stream with IO object directly. Pull request #​8970 by tenderlove
• Pass a file size to IO.copy_stream. Pull request #​8966 by tenderlove
• Use File#chmod rather than FileUtils.chmod. Pull request #​8965 by tenderlove

Enhancements:

• Update all vendored libraries to latest version. Pull request #​9089 by hsbt
• Removed unused Gem::Deprecate. Pull request #​9090 by hsbt
• Add debug logging information to see the time it took to download and install a gem. Pull request #​9066 by Edouard-chin
• Fix constants in TAR to be frozen. Pull request #​9041 by tenderlove
• Remove open-ended and prerelease dependency warnings when building gems. Pull request #​9050 by jeremyevans
• Revamp CmakeBuilder. Pull request #​8753 by cfis
• Restrict what schemes are acceptable in the remote fetcher. Pull request #​9022 by tenderlove
• gem sources --prepend and --append allow finer grained control of sources. Pull request #​8901 by martinemde
• Improve gem sources --remove output. Pull request #​8909 by deivid-rodriguez
• Make gem sources output more clear. Pull request #​8938 by deivid-rodriguez
• Don't fail if there is no makefile, simply don't do anything. Pull request #​8879 by ioquatix
• Use IMDSv2 for S3 instance credentials. Pull request #​7709 by folbricht-stripe
• Fix regression in presence of RVM gems. Pull request #​8854 by deivid-rodriguez
• Restore parsing "--" as an unknown platform rather than crashing. Pull request #​8846 by deivid-rodriguez
• Installs bundler 4.0.0 as a default gem.

Bug fixes:

• Fix test failure of mswin and nmake. Pull request #​9135 by hsbt
• Respect BUNDLE_VERSION config at Gem::BundlerVersionFinder. Pull request #​9106 by hsbt
• Fix "did you mean" suggestions for unknown commands. Pull request #​8948 by deivid-rodriguez
• Fix trailing slashes not considered by gem sources --remove. Pull request #​8939 by deivid-rodriguez

Security:

• Bump up vendored URI to 1.0.4. Pull request #​9031 by hsbt

Breaking changes:

• Removed deprecated -C option from gem build. Pull request #​9088 by hsbt
• Removed deprecated Gem::Specification#has_rdoc, has_rdoc= and has_rdoc?. Pull request #​9084 by hsbt
• Removed deprecated gem query command. Pull request #​9083 by hsbt
• Removed deprecated Gem::DependencyInstaller#find_gems_with_sources. Pull request #​9082 by hsbt
• Remove deprecated methods of RubyGems. Pull request #​9081 by hsbt
• Make verification methods private. Pull request #​9051 by tenderlove
• Deprecate --default option from install command. Pull request #​7588 by hsbt
• Removed compatibility.rb for RG 4.0. Pull request #​8899 by hsbt

Deprecations:

• Deprecate Gem::Specification#datadir. Pull request #​8900 by hsbt

Documentation:

• Unified UPGRADING.md and extract blog.rubygems.org. Pull request #​9148 by hsbt
• Remove italic formatting from changelog section headers. Pull request #​9128 by hsbt
• [DOC] Fix the location of Gem::Deprecate document. Pull request #​9065 by nobu
• Fix typo. Pull request #​9012 by etiennebarrie
• Added document for Gem::Uninstaller. Pull request #​8904 by hsbt
• Use mailto link in Code of Conduct. Pull request #​8849 by deivid-rodriguez
• Update Code of Conduct email to conduct@rubygems.org. Pull request #​8848 by indirect

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻️ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this MR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this MR, check this box

---

This MR has been generated by Renovate Bot.