bundler-v4.0.14

Bug fixes:

• Preserve per-source cooldown when converging sources from the lockfile. Pull request #9601 by bryanwoods
• Don't exclude the locked version from cooldown during bundle update. Pull request #9599 by hsbt

v4.0.14

Enhancements:

• Add executables and bindir validation to the gem installer. Pull request #9595 by hsbt
• Strip C1 control characters from displayed gem text. Pull request #9597 by hsbt
• Installs bundler 4.0.14 as a default gem.

v4.0.13

Enhancements:

• Prevent extraction from escaping destination_dir via pre-existing symlinks. Pull request #9493 by thesmartshadow
• Close stdin immediately when using popen2e. Pull request #9540 by rwstauner
• Fallback to copy symlinks on Windows. Pull request #9296 by larskanis
• Installs bundler 4.0.13 as a default gem.

bundler-v4.0.13

Enhancements:

• Do not hard-code permissions for new gem directories during bundle install. Pull request #9557 by maxfelsher-cgi
• Clear gem specification cache after acquiring process lock. Pull request #9310 by ngan
• Show release date with bundle outdated. Pull request #9337 by hsbt

Bug fixes:

• Apply cooldown to locally installed gem versions. Pull request #9582 by hsbt

Security:

• Add cooldown to delay newly published gem. Pull request #9576 by hsbt

v4.0.12

Enhancements:

• Remove cygwin from WIN_PATTERNS. Pull request #9527 by fd00
• Installs bundler 4.0.12 as a default gem.

Bug fixes:

• Fall back to lockfile version when BUNDLE_VERSION is "lockfile". Pull request #9545 by hsbt
• Read BUNDLE_VERSION env var in BundlerVersionFinder. Pull request #9538 by hsbt

bundler-v4.0.12

Enhancements:

• Make bundle config get return status 1 when the value is not set. Pull request #9505 by willnet
• Use Pathname#absolute?. Pull request #9529 by nobu
• Deprecate parsing non-lockfile content in LockfileParser. Pull request #9502 by kurotaky
• Print a warning for a potential confusion from the indirect dependencies. Pull request #5029 by junaruga
• Respect Gemfile bundler setting in Bundler.setup. Pull request #4892 by godfat

Bug fixes:

• Gracefully handle missing checksums in Compact Index. Pull request #9492 by jneen
• Skip git source exclusion when lockfile cannot backfill. Pull request #9544 by yahonda
• Fix bundle config gemfile unset behavior. Pull request #9514 by afurm

v4.0.11

Enhancements:

• Add commented-out rubygems_mfa_required to bundle gem template. Pull request #9487 by MatheusRich
• Clarify the name and meaning of the first argument to gem spec. Pull request #9476 by eregon
• Installs bundler 4.0.11 as a default gem.

bundler-v4.0.11

Enhancements:

• Update gem creation guide URL to rubygems.org. Pull request #9500 by nissyi-gh
• Lock the checksum of Bundler itself in the lockfile. Pull request #9366 by Edouard-chin

Bug fixes:

• Fix installing gems with native extensions + transitive dependencies. Pull request #9477 by nicholasdower
• Fix the bundler version not being updated in dev/test lockfile. Pull request #9463 by Edouard-chin
• Ensure the release CI doesn't break due to the Bundler checksum feature. Pull request #9436 by Edouard-chin

Documentation:

• Fix formatting for BUNDLE_PREFER_PATCH variable in man page. Pull request #9474 by toy

bundler-v4.0.10

Enhancements:

• Ignore warnings with spec different platforms. Pull request #8508 by hsbt
• Improve error message when current platform is not in lockfile. Pull request #9439 by 55728
• Cache package version selection. Pull request #9410 by Edouard-chin
• Check happy path first when comparing gem version. Pull request #9417 by Edouard-chin
• [feature] default_cli_command for config what command bundler runs when no specific command is provided. Pull request #8886 by jonbarlo
• Introduce a fast path for comparing Gem::Version. Pull request #9414 by Edouard-chin

Bug fixes:

• Restore rb_sys dependency for Rust. Pull request #9416 by bangseongbeom

v4.0.10

Enhancements:

• Ignore warnings with spec different platforms. Pull request #8508 by hsbt
• Better algorithm for sorting gem version. Pull request #9421 by Edouard-chin
• Update SPDX license list as of 2026-02-20. Pull request #9434 by hsbt
• Installs bundler 4.0.10 as a default gem.

Bug fixes:

• Register native extension files in default spec map. Pull request #9431 by hsbt
• Fix NoMethodError in Gem.try_activate when activation conflicts occur. Pull request #9404 by hsbt