Update dependency bundler to v2.6.5

This MR contains the following updates:

Package	Update	Change
bundler (source, changelog)	minor	2.5.11 -> 2.6.5
bundler (source, changelog)	patch	2.6.2 -> 2.6.5
bundler (source, changelog)	minor	2.5.9 -> 2.6.5

---

Release Notes

rubygems/rubygems (bundler)

v2.6.5

Compare Source

Enhancements:

• Fix lockfile platforms inconveniently added on JRuby #​8494

Bug fixes:

• Fix resolver issue due to ill-defined version ranges being created #​8503
• Make sure empty gems are not reinstalled every time #​8502

v2.6.4

Compare Source

Enhancements:

• Make Bundler never instantiate development dependencies #​8486
• Fix some invalid options to gem DSL not getting reported as invalid #​8480
• Add irb to a Gemfile for a newly created gem #​8467
• Auto-heal empty installation directory #​8457
• Fix bundle console unnecessarily trying to load IRB twice #​8443
• Add ruby_34 and ruby_35 as valid platform: #​8430
• Consider gems under platform: :windows filter in Gemfile when running on Windows with ARM architecture #​8428

Bug fixes:

• Fix regression when running bundle update <foo> would sometimes downgrade a top level dependency #​8491
• Fix dependency locking when Bundler finds incorrect lockfile dependencies #​8489
• Raise error when lockfile is missing deps in frozen mode #​8483
• Fix bundle install --prefer-local sometimes installing very old versions #​8484
• Fix incorrect error message when running bundle update in frozen mode #​8481
• Keep platform variants in vendor/cache even if incompatible with the current Ruby version #​8471
• Fix bundle console printing bug report template incorrectly #​8436
• Fix --prefer-local not respecting default gems #​8412

Performance:

• Improve resolution performance #​8458

Documentation:

• Fix more broken links #​8416

v2.6.3

Compare Source

Enhancements:

• Don't fallback to evaluating YAML gemspecs as Ruby code #​8404
• Print message when blocking on file locks #​8299
• Add support for mise version manager file #​8356
• Add Ruby 3.5 to Gemfile DSL platform values #​8365

Bug fixes:

• Revert RubyGems plugins getting loaded on Bundler.require #​8410
• Fix platform specific gems sometimes being removed from the lockfile #​8401
• Serialize gemspec when caching git source #​8403
• Fix crash on read-only filesystems in Ruby 3.4 #​8372
• Fix bundle outdated <GEM> failing if not all gems are installed #​8361
• Fix bundle install crash on Windows #​8362

Documentation:

• Fix broken links in the documents #​8389

v2.6.2

Compare Source

Bug fixes:

• Restart using Process.argv0 only if $PROGRAM_NAME is not a script #​8343

Documentation:

• Fix typo in bundle lock man page synopsis (--add-checkums → --add-checksums) #​8350

v2.6.1

Compare Source

Bug fixes:

• Fix missing Gem::Uri.redact on some Ruby 3.1 versions #​8337
• Fix bundle lock --add-checksums when gems are already installed #​8326

v2.6.0

Compare Source

Security:

• Fix gemfury credentials written to logs in verbose mode #​8283
• Fix private registry credentials being written to logs #​8222

Breaking changes:

• Drop ruby 3.0 support #​8091
• Remove client-side MD5 ETag transition from compact index client #​7677

Deprecations:

• Cancel bundle console deprecation #​8218
• Warn when platform of installed gem differs from platform in the lockfile #​8029
• Cancel deprecation of Gemfiles without a global source #​8213

Features:

• Add a lockfile_checksums configuration to include checksums in fresh lockfiles #​8219
• Add bundle lock --add-checksums to add checksums to an existing lockfile #​8214

Performance:

• Enable a couple of performance cops #​8261
• Remove override of worker jobs for bundle install --local #​8248

Enhancements:

• Support bundle exec <relative-path-to-script> when Kernel.exec is used under the hood #​8294
• Improve working with different rubies using the same lockfile #​8251
• Define a few inspect methods to help debugging #​8266
• Include original error when openssl fails to load #​8232
• Automatically fix lockfile when it's missing dependencies #​8103
• Fix some JRuby warnings when using bundler/setup with Ruby's -w flag #​8205
• Add a --normalize-platforms flag to bundle lock #​7896
• Add plugin hooks for Bundler.require #​3439

Bug fixes:

• Fix restarting with locked version when $PROGRAM_NAME has been changed #​8320
• Restore the previous cache format for git sources #​8296
• Fix installs of subdependencies of unlocked dependencies to be conservative #​8281
• Fix test task name on generated readme when using test-unit #​8291
• Fix bundle exec executable detection on windows #​8276
• Fix bundle remove sometimes not removing gems #​8278
• Fix issue with git gems locking incorrect specs sometimes #​8269

Documentation:

• Normalize command flag documentation and make sure all flags are documented #​8313
• Add missing man pages for bundle env and bundle licenses #​8315
• Add man page for 'bundle issue' command #​8271
• Add man page for 'bundle fund' command #​8258
• Move pry-related contents to debugging.md #​8263
• Add debugging instruction on Windows #​8236
• Unify rubygems and bundler docs directory #​8159

v2.5.23

Compare Source

Enhancements:

• Add useful error message for plugin load #​7639
• Indent github workflow steps for generated gems #​8193
• Improve several permission errors #​8168
• Add bundle add --quiet option #​8157

Bug fixes:

• Fix incompatible encodings error when paths with UTF-8 characters are involved #​8196
• Update --ext=rust to support compiling the native extension from source #​7610
• Print a proper error when there's a previous empty installation path with bad permissions #​8169
• Fix running bundler (with a final r) in a bundle exec context #​8165
• Handle two gemspec usages in same Gemfile with same dep and compatible requirements #​7999
• Fix bundle check sometimes locking gems under the wrong source #​8148

Documentation:

• Remove confusing bundle config documentation #​8177
• Rename bundler inline's install parameter and clarify docs #​8170
• Clarify bundle install --quiet documentation #​8163

v2.5.22

Compare Source

Enhancements:

• Update vendored uri and net-http #​8112

Bug fixes:

• Fix bundler sometimes crashing because of trying to use a version of psych compiled for a different Ruby #​8104

v2.5.21

Compare Source

Bug fixes:

• Fix bug report template printed when changing a path source to a git source in frozen mode #​8079
• Fix stub.activated? sometimes returning false after activation under bundler #​8073
• Fix old cache format detection when application is not source controlled #​8076
• Fix bundler/inline resetting ENV changes #​8059

v2.5.20

Compare Source

Enhancements:

• Don't try to auto-install dev versions of Bundler not available remotely #​8045
• Don't try to install locked bundler when --local is passed #​8041

Bug fixes:

• Fix bundler/inline overwriting lockfiles #​8055
• Ensure refs directory in cached git source #​8047
• Fix bundle outdated with --group option #​8052

v2.5.19

Compare Source

Enhancements:

• Raise original errors when unexpected errors happen during Gemfile evaluation #​8003
• Make an exe file executable when generating new gems #​8020
• Gracefully handle gem activation conflicts in inline mode #​5535
• Don't include hook templates in cached git source #​8013
• Fix some errors about a previous installation folder that's unsafe to remove, when there's no need to remove it #​7985
• Emit progress to stderr during bundle outdated --parseable #​7966
• Reject unknown platforms when running bundle lock --add-platform #​7967
• Emit progress to stderr when --print is passed to bundle lock #​7957

Bug fixes:

• Fix bundle install --local hitting the network when default gems are included #​8027
• Remove temporary .lock files unintentionally left around by gem installer #​8022
• Fix bundle exec rake install failing when local gem has extensions #​7977
• Load gemspecs in the context of its parent also when using local overrides #​7993
• Fix bundler/inline failing in Ruby 3.2 due to conflicting securerandom versions #​7984
• Don't blow up when explicit version is removed from some git sources #​7973
• Fix gem exec rails new project failing on Ruby 3.2 #​7960

Documentation:

• Improve bundle add man page #​5903
• Add some documentation about backwards compatibility #​7964

v2.5.18

Compare Source

Enhancements:

• Don't remove existing platform gems when PLATFORMS section is badly indented #​7916

Bug fixes:

• Fix error message when Bundler refuses to install due to frozen being set without a lockfile #​7955
• Fix several issues with the --prefer-local flag #​7951
• Restore support for passing relative paths to git: sources #​7950
• Regenerate previous git application caches that didn't include bare repos #​7926
• Fix bundle update <indirect_dep> failing to upgrade when versions present in two different sources #​7915

Documentation:

• Change new gem README template to have copyable code blocks #​7935

v2.5.17

Compare Source

Enhancements:

• Print better log message when current platform is not present in the lockfile #​7891
• Explicitly encode Gem::Dependency to yaml #​7867
• Enable lockfile checksums on future Bundler 3 when there's no previous lockfile #​7805

Bug fixes:

• Fix truffleruby removing gems from lockfile #​7795
• Fix bundle check exit code when gem git source is not checked out #​7894
• Generate gems.rb from Gemfile.tt template for bundle-gem #​7853
• Fix git source cache being used as the install location #​4469
• Fix bundle exec gem uninstall #​7886

v2.5.16

Compare Source

Bug fixes:

• Fix platform removal regression when platforms: used in the Gemfile #​7864
• Fix standalone script when default gems with extensions are used #​7870
• Fix another case of bundle lock --add-platform doing nothing #​7848
• Fix bad error messages when using bundle add with frozen mode set #​7845
• Fix generic platform gems getting incorrectly removed from lockfile #​7833

Performance:

• Use caller_locations instead of splitting caller #​7708

v2.5.15

Compare Source

Enhancements:

• Support --no-test, --no-ci, and --no-linter options #​7780
• Allow bundle command in new gems with invalid metadata #​7707

Bug fixes:

• Protect creating RubyGems binstubs with a file lock #​7841
• Only allow valid values for --test, --ci, and --linter options #​7801
• Fix bundle lock --add-platform <current_platform> doing nothing #​7803
• Print a proper error when bin dir does not have writable permission bit #​7794

Documentation:

• Regenerate bundler docs for June 2024 #​7787

v2.5.14

Compare Source

Bug fixes:

• Fix credentials being re-added when re-resolving without a full unlock #​7767
• Fix bundle update <gem_name> edge case #​7770
• Fix bundle fund when the gemfile contains optional groups #​7758

v2.5.13

Compare Source

Bug fixes:

• Fix funding metadata not being printed in some situations #​7746
• Make sure to not re-resolve when a not fully specific local platform is locked #​7751
• Don't print bug report template when bin dir is not writable #​7748

v2.5.12

Compare Source

Enhancements:

• Keep credentials in lockfile if they are already there #​7720
• Auto switch to locked bundler version even when using binstubs #​7719
• Don't validate local gemspecs twice unnecessarily #​7725
• Improve default gem handling by treating default gems as any other gem #​7673

Bug fixes:

• Fix slow and incorrect resolution when adding sorbet to a Gemfile and the lockfile only includes "RUBY" in the platforms section #​7731
• Fix duplicated config keys generated when fallback_timeout uri option is used #​7704
• Fix bundle exec no longer working in truffleruby after explicit require of pathname was removed #​7703
• Don't let bundle config report a path without a Gemfile as "local app" #​7687

Documentation:

• Clarify BUNDLE_USER_CONFIG is a file #​7668

---

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻️ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this MR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this MR, check this box

---

This MR has been generated by Renovate Bot.