Skip to content
RubyGems

3.5.0 Released

David Rodríguez

RubyGems 3.5.0 includes security, breaking changes, deprecations, features, performance, enhancements, bug fixes and documentation.

To update to the latest RubyGems you can run:

gem update --system

To install RubyGems by hand see the Download RubyGems page.

## Security:

  • Replace Marshal.load with a fully-checked safe gemspec loader. Pull request #6896 by segiddins

## Breaking changes:

  • Drop ruby 2.6 and 2.7 support. Pull request #7116 by deivid-rodriguez
  • Release package no longer includes test files. Pull request #6781 by hsbt
  • Hide Gem::MockGemUi from users. Pull request #6623 by hsbt
  • Deprecated Gem.datadir has been removed. Pull request #6469 by hsbt

## Deprecations:

  • Deprecate Gem::Platform.match?. Pull request #6783 by hsbt
  • Deprecate Gem::List. Pull request #6311 by segiddins

## Features:

  • The generate_index command can now generate compact index files and lives as an external rubygems-generate_index gem. Pull request #7085 by segiddins
  • Make gem install fallback to user installation directory if default gem home is not writable. Pull request #5327 by duckinator
  • Leverage ruby feature to warn when requiring default gems from stdlib that will be turned into bundled gems in the future. Pull request #6840 by hsbt

## Performance:

  • Use match? when regexp match data is unused. Pull request #7263 by segiddins
  • Fewer allocations in gem installation. Pull request #6975 by segiddins
  • Optimize allocations in Gem::Version. Pull request #6970 by segiddins

## Enhancements:

  • Warn for duplicate meta data links when building gems. Pull request #7213 by etherbob
  • Vendor net-http, net-protocol, resolv, and timeout to reduce conflicts between Gemfile gems and internal dependencies. Pull request #6793 by deivid-rodriguez
  • Remove non-transparent requirement added to prerelease gems. Pull request #7226 by deivid-rodriguez
  • Stream output from ext builds when –verbose. Pull request #7240 by osyoyu
  • Add missing services to CI detection and make it consistent between RubyGems and Bundler. Pull request #7205 by nevinera
  • Update generate licenses template to not freeze regexps. Pull request #7154 by github-actions[bot]
  • Don’t check LIBRUBY_RELATIVE in truffleruby to signal a bash prelude in rubygems binstubs. Pull request #7156 by deivid-rodriguez
  • Update SPDX list and warn on deprecated identifiers. Pull request #6926 by simi
  • Simplify extended require to potentially fix some deadlocks. Pull request #6827 by nobu
  • Small refactors for Gem::Resolver. Pull request #6766 by hsbt
  • Use double-quotes instead of single-quotes consistently in warnings. Pull request #6550 by hsbt
  • Add debug message for nil version gemspec. Pull request #6436 by hsbt
  • Installs bundler 2.5.0 as a default gem.

## Bug fixes:

  • Fix installing from source with same default bundler version already installed. Pull request #7244 by deivid-rodriguez

## Documentation:

  • Improve comment explaining the necessity of write_default_spec method. Pull request #6563 by voxik

SHA256 Checksums:

  • rubygems-3.5.0.tgz
    6a7ccc98b5ba51be68c5a29a902c125c6f1d3690a0504787c40eb1c4a077e160
  • rubygems-3.5.0.zip
    361992e5d27277e1a470aae6f871814e236faf7c4c3e007cfd882c5c1cbd8d86
  • rubygems-update-3.5.0.gem
    0de926b1bbed63c6aabb899ceb9c9640589dbaa47f5a12c4f98f503744813f12