Ruby Issue Tracking System

Today

12:35 AM Ruby Revision ed0519b7 (git): [ruby/rubygems] Only coerce exact true and false gemrc values to booleans

Alternation binds looser than the anchors, so `/\Atrue|false\Z/` reads as
`(\Atrue)|(false\Z)` and quietly turned every gemrc string starting with
`true` or ending with `false` into the boolean false. `:credential_store:
truestore` disab... hsbt (Hiroshi SHIBATA)

12:29 AM Ruby Revision f6c8c1f7 (git): [ruby/rubygems] Keep the credential_store vocabulary lists private

They sit after `private`, which does not apply to constants, so both are
public API today. Nothing outside the file reads them, and the setting
has not shipped, so this is the last release where making them private
costs nothing.
https:... hsbt (Hiroshi SHIBATA)

12:29 AM Ruby Revision 7c3a23a0 (git): [ruby/rubygems] Align the credential_store false vocabulary with to_bool

`credential_store` was the only Bundler setting that read `off` as
disabled, while every other setting goes through `Settings#to_bool`,
whose false vocabulary has never had it. The disabled branch now
delegates to `#to_bool` so the two c... hsbt (Hiroshi SHIBATA)

12:29 AM Ruby Revision 9c8e1e5d (git): [ruby/rubygems] Record why the RubyGems half keeps `off`

The two sides of one setting now disagree on `off`, so the list has to
say why it stays wider here. Nothing on the way in turns `off` into a
boolean, and nothing on this side shares the single vocabulary that
Bundler's boolean settings a... hsbt (Hiroshi SHIBATA)

08/27/2026

11:37 PM Ruby Revision 5eb9a692 (git): [ruby/rubygems] Keep lockfile parsing from loading Bundler source plugins

A PLUGIN SOURCE section sends Bundler::Plugin.from_lock looking for the
plugin that handles it, and finding one loads and runs that plugin's
`plugins.rb`. The plugin index is read from the lockfile directory, so a
repository could run co... hsbt (Hiroshi SHIBATA)

11:37 PM Ruby Revision 11d8ba65 (git): [ruby/rubygems] Pin lockfile dependencies to the version their section resolved

The parser removed in #9564 turned a `!` entry in the DEPENDENCIES
section into a `= <version>` requirement. Bundler's LockfileParser
records the pinned source on the dependency and leaves the requirement
at `>= 0`, so `gem install -g` c... hsbt (Hiroshi SHIBATA)

11:37 PM Ruby Revision 99d127e5 (git): [ruby/rubygems] Restore lockfile remote order for GEM sections

Bundler::Source::Rubygems stores remotes in reverse of the lockfile
order, so reading them straight through flipped which remote a spec
downloads from when a GEM section lists more than one.
https://github.com/ruby/rubygems/commit/da017... hsbt (Hiroshi SHIBATA)

11:37 PM Ruby Revision 660aa1a2 (git): [ruby/rubygems] Do not restore Bundler root when it was never saved

`defined?(previous_root)` is true even when the assignment never ran, so
a failure before the root was saved reset Bundler's root to nil.
https://github.com/ruby/rubygems/commit/b2177cd67d
Co-Authored-By: Claude Fable 5 <noreply@anthro... hsbt (Hiroshi SHIBATA)

11:19 PM Ruby Revision 25f520c9 (git): [ruby/rubygems] Ignore plugin index entries that point outside the plugin root

A path stored relative to the plugin root only means anything inside it,
so an entry that climbs out of it did not come from a plugin Bundler
installed there. Paths recorded as absolute are left alone, which is how
`bundle plugin install... hsbt (Hiroshi SHIBATA)

11:19 PM Ruby Revision ca40db6d (git): [ruby/rubygems] Relativize a plugin path only when it is really under the root

The save side matched the root as a string prefix, so an absolute path
that starts with the root but climbs above it was written back relative,
and the filter above then dropped it on the next load. Asking the same
question both ways lea... hsbt (Hiroshi SHIBATA)