v3.7.2

Enhancements:

• gem sources --prepend and --append allow finer grained control of
  sources. Pull request
  #8901 by martinemde
• Improve gem sources --remove output. Pull request
  #8909 by
  deivid-rodriguez
• Make gem sources output more clear. Pull request
  #8938 by
  deivid-rodriguez
• Use IMDSv2 for S3 instance credentials. Pull request
  #7709 by
  folbricht-stripe
• Installs bundler 2.7.2 as a default gem.

Bug fixes:

• Fix "did you mean" suggestions for unknown commands. Pull request
  #8948 by
  deivid-rodriguez
• Fix trailing slashes not considered by gem sources --remove. Pull
  request #8939 by
  deivid-rodriguez

bundler-v2.7.2

Enhancements:

• Improve error message when the same source is specified through gemspec and path #8460
• Raise an error in frozen mode if some registry gems have empty checksums #8888
• Bump vendored thor to 1.4.0 #8883
• Delay default path and global cache changes to Bundler 5 #8867
• Fix spacing in bundle gem newgem.gemspec.tt #8865

Bug fixes:

• Fix bundle cache --frozen and bundle cache --no-prune not printing a deprecation message #8926
• Fix local installation incorrectly forced if there's a vendor/cache directory and frozen mode is set #8925
• Fix bundle lock --update <gem> with --lockfile flag updating all gems #8922
• Fix bundle show --verbose and recommend it as an alternative to bundle show --outdated #8915
• Fix bundle cache --no-all not printing a deprecation warning #8912
• Fix bundle update foo unable to update foo in an edge case #8897
• Fix Bundler printing more flags than actually passed in verbose mode #8914
• Fix bundler failing to install sorbet-static in truffleruby when there's no lockfile #8872

Documentation:

• Improve documentation of bundle doctor, bundle plugin, and bundle config #8919
• Make sure all CLI flags and subcommands are documented #8861

v3.7.1

Enhancements:

• Fix regression in presence of RVM gems. Pull request
  #8854 by
  deivid-rodriguez
• Restore parsing "--" as an unknown platform rather than crashing. Pull
  request #8846 by
  deivid-rodriguez
• Installs bundler 2.7.1 as a default gem.

Documentation:

• Use mailto link in Code of Conduct. Pull request
  #8849 by
  deivid-rodriguez
• Update Code of Conduct email to [email protected]. Pull request
  #8848 by indirect

bundler-v2.7.1

Enhancements:

• Add some missing deprecation messages #8844

Bug fixes:

• Cancel deprecation of --force flag to bundle install and bundle update #8843

Documentation:

• Clarify documentation about new default gem installation directory in Bundler 4 #8857
• Use mailto link in Code of Conduct #8849
• Update Code of Conduct email to [email protected] #8848
• Add missing link to irb repo in DEBUGGING.md #8842

v3.7.0

Security:

• Update vendored resolv to 0.6.2. Pull request
  #8831 by hsbt

Breaking changes:

• Stop generating binstubs with support for RubyGems before 2.6.2. Pull
  request #8833 by
  deivid-rodriguez
• Drop support for Ruby 3.1. Pull request
  #8634 by segiddins

Enhancements:

• Update SPDX license list as of 2025-07-01. Pull request
  #8829 by
  github-actions[bot]
• Add push_rubygem as a default scope for gem signin command. Pull
  request #8672 by hsbt
• Update bundled tls certs. Pull request
  #8731 by segiddins
• Install the best matching gem for the current platform in gem install.
  Pull request #8751 by
  segiddins
• Move most of Bundler::GemHelpers to Gem::Platform. Pull request
  #8703 by segiddins
• Ensure that Gem::Platform parses strings to a fix point. Pull request
  #8584 by segiddins
• Installs bundler 2.7.0 as a default gem.

Bug fixes:

• Fix signing HEAD and date formatting in S3 signer. Pull request
  #8763 by rye-stripe
• Fix --bindir <foo> flag to gem install failing when <foo> is not in
  the default GEM_HOME and its parent directory does not exist yet. Pull
  request #8783 by larouxn
• Fix gem install sometimes compiling the wrong source files. Pull
  request #8764 by
  deivid-rodriguez
• Workaround rust extension compilation when ccache or sccache are
  used. Pull request #8521
  by hsbt
• Fix gem pristine not recompiling extensions sometimes. Pull request
  #8757 by
  deivid-rodriguez
• Fix --prerelease flag to gem install sometimes not respected. Pull
  request #8648 by ntl

Documentation:

• Fix incorrect UPGRADING link in README.md. Pull request
  #8838 by djbender
• Add a root CONTRIBUTING.md file. Pull request
  #8822 by
  deivid-rodriguez
• Add a SECURITY.md file. Pull request
  #8812 by
  deivid-rodriguez
• Fix heading ranks in documentation. Pull request
  #8711 by antoinem

bundler-v2.7.0

Breaking changes:

• Stop allowing calling #gem on random objects #8819
• Remove path_relative_to_cwd setting #8815
• Remove the default_install_uses_path and auto_clean_without_path settings #8814
• Remove print_only_version_number setting #8799
• Drop support for Ruby 3.1 #8634
• Raise an error if incompatible or merge if compatible when a gemspec development dep is duplicated in Gemfile #8556
• Remove MD5 digesting of compact index responses #8530
• Stop generating binstubs for Bundler itself #8345

Deprecations:

• Deprecate unused Bundler::SpecSet methods #8777
• Deprecate x64-mingw32 in favour of x64-mingw-ucrt #8733
• Deprecate legacy windows platforms (:mswin, :mingw) in Gemfile DSL in favor of :windows #8447
• Deprecate CurrentRuby#maglev? and other related maglev methods #8452

Features:

• Allow simulating "Bundler 4 mode" more easily #6472

Performance:

• Cache git sources with commit SHA refs #8741

Enhancements:

• Load RubyGems extensions in the first place #8835
• Update gemspec based on provided github username when exists #8790
• Fail fast when connection errors happen #8784
• Introduce a verbose setting to enable verbose output for all commands #8801
• Introduce gem.bundle setting to run bundle install automatically after bundle gem, and make it the default #8671
• Handle Errno::EADDRNOTAVAIL errors gracefully #8776
• Use persist-credentials: false in workflow generated by bundle gem #8779
• Recognize JRuby loaded from a classloader, not just any JAR #8567
• Validate lockfile dependencies with bundle install #8666
• Ignore local specifications if they have incorrect dependencies #8647
• Move most of Bundler::GemHelpers to Gem::Platform #8703
• Improve spec.files in the .gemspec template #8732

Bug fixes:

• Fix double bundle gem prompts #8825
• Fix date displayed in bundle version help text #8806
• Fix bundle console printing bug report template on NameError during require #8804
• Fix Bundler.original_env['GEM_HOME'] when Bundler is trampolined #8781
• Fix rdoc issues when running gem commands in a bundle exec context #8770
• Never ignore gems from path sources during activation #8766
• Fix bundle install after pinning a git source with subgems #8745
• Let bundle update --bundler upgrade bundler even if restarts are disabled #8729

Documentation:

• Rewrite and complete UPGRADING document #8817
• Document that global_gem_cache also caches compiled extensions #8823
• Add default_cli_command documentation #8816
• Add a root CONTRIBUTING.md file #8822
• Add a SECURITY.md file #8812
• Update man pages for the bundle doctor ssl subcommand #8803
• Remove duplicate documentation for --changelog flag #8756
• Fix typos making some lists in documentation render incorrectly #8759
• Fix heading ranks in documentation #8711
• Clarify differences between frozen and deployment settings, and other bundle-config documentation improvements #8715

v3.6.9

Enhancements:

• Add mtime to Gem::Package::TarWriter#add_file argument. Pull request
  #8673 by unasuke
• Print webauthn authentication link as a separate line to make it easier
  to visit. Pull request
  #8663 by mperham
• Remove shellwords autoload. Pull request
  #8644 by
  deivid-rodriguez
• Installs bundler 2.6.9 as a default gem.

Performance:

• Avoid unnecessary splat allocation. Pull request
  #8640 by jeremyevans

Documentation:

• Fix typo in Changelog for 3.6.0 / 2024-12-16. Pull request
  #8638 by thatrobotdev

bundler-v2.6.9

Enhancements:

• Fix doctor command parsing of otool output #8665
• Add SSL troubleshooting to bundle doctor #8624
• Let bundle lock --normalize-platforms remove invalid platforms #8631

Bug fixes:

• Fix bundle lock sometimes allowing invalid platforms into the lockfile #8630
• Fix false positive warning about insecure materialization in frozen mode #8629

v3.6.8

Enhancements:

• Installs bundler 2.6.8 as a default gem.

bundler-v2.6.8

Enhancements:

• Refine bundle update --verbose logs #8627
• Improve bug report instructions #8607

Bug fixes:

• Fix bundle update crash in an edge case #8626
• Fix bundle lock --normalize-platforms regression #8620