Prepare RubyGems 3.5.11 and Bundler 2.5.11

.codespellignore

@@ -1,4 +1,5 @@
 crate
+checkin
 falsy
 filetest
 fo

.codespellrc

@@ -2,4 +2,4 @@
 check-filenames=
 check-hidden=
 ignore-words=.codespellignore
-skip=*.pem,.git,man,vcr_cassettes,vendor,./lib/rubygems/net*,./lib/rubygems/resolv,./lib/rubygems/tsort,./lib/rubygems/timeout,./lib/rubygems/optparse
+skip=CODE_OF_CONDUCT.md,*.pem,.git,./bundler/tmp,./bundler/lib/bundler/templates/newgem/CODE_OF_CONDUCT.md.tt,man,vcr_cassettes,vendor,./lib/rubygems/net*,./lib/rubygems/resolv,./lib/rubygems/tsort,./lib/rubygems/timeout,./lib/rubygems/optparse

.devcontainer/devcontainer.json

@@ -7,9 +7,9 @@
  "remoteUser": "vscode",
  "workspaceFolder": "/workspaces/${localWorkspaceFolderBasename}",
  // Use 'postCreateCommand' to run commands after the container is created.
- "onCreateCommand": "rake setup",
+ "onCreateCommand": "bin/rake setup",
  // Use 'updateContentCommand' to run commands when the container is updated.
- "updateContentCommand": "rake update",
+ "updateContentCommand": "bin/rake update",
  // Configure tool-specific properties.
  "containerEnv": {
  "EDITOR": "code --wait",

.github/workflows/bundler.yml

@@ -53,9 +53,9 @@ jobs:
  RGV: ..
  RUBYOPT: --disable-gems
  steps:
- - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+ - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
  - name: Setup ruby
- uses: ruby/setup-ruby@1198b074305f9356bd56dd4b311757cc0dab2f1c # v1.175.1
+ uses: ruby/setup-ruby@943103cae7d3f1bb1e4951d5fcc7928b40e4b742 # v1.177.1
  with:
  ruby-version: ${{ matrix.ruby.value }}
  bundler: none

.github/workflows/daily-bundler.yml

@@ -19,10 +19,10 @@ jobs:
  env:
  RGV: ..
  steps:
- - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+ - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
 
  - name: Set up Ruby
- uses: ruby/setup-ruby@1198b074305f9356bd56dd4b311757cc0dab2f1c # v1.175.1
+ uses: ruby/setup-ruby@943103cae7d3f1bb1e4951d5fcc7928b40e4b742 # v1.177.1
  with:
  ruby-version: ruby-head
  bundler: none

.github/workflows/daily-rubygems.yml

@@ -24,10 +24,10 @@ jobs:
  env:
  TRUFFLERUBYOPT: "--experimental-options --testing-rubygems"
  steps:
- - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+ - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
 
  - name: Set up Ruby
- uses: ruby/setup-ruby@1198b074305f9356bd56dd4b311757cc0dab2f1c # v1.175.1
+ uses: ruby/setup-ruby@943103cae7d3f1bb1e4951d5fcc7928b40e4b742 # v1.177.1
  with:
  ruby-version: ${{ matrix.ruby }}
  bundler: none
@@ -42,8 +42,8 @@ jobs:
 
  - name: Test rubygems
  run: |
- rake setup
- rake test
+ bin/rake setup
+ bin/rake test
 
  - name: Get previous status
  if: always()

.github/workflows/install-rubygems.yml

@@ -26,15 +26,15 @@ jobs:
  - { name: "3.1", value: 3.1.5 }
  - { name: "3.2", value: 3.2.4 }
  - { name: "3.3", value: 3.3.1 }
- - { name: jruby, value: jruby-9.4.6.0 }
+ - { name: jruby, value: jruby-9.4.7.0 }
  - { name: truffleruby, value: truffleruby-24.0.1 }
  openssl:
  - { name: "openssl", value: true }
  - { name: "no-openssl", value: false }
  steps:
- - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+ - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
  - name: Setup ruby
- uses: ruby/setup-ruby@1198b074305f9356bd56dd4b311757cc0dab2f1c # v1.175.1
+ uses: ruby/setup-ruby@943103cae7d3f1bb1e4951d5fcc7928b40e4b742 # v1.177.1
  with:
  ruby-version: ${{ matrix.ruby.value }}
  bundler: none
@@ -85,6 +85,9 @@ jobs:
  - name: Check bundler install didn't hit the network
  run: if grep -q 'GET http' output.txt; then false; else true; fi
  working-directory: ./bundler
+ - name: Workaround bad nio4r release on JRuby, so that Rails can be installed below
+ run: gem install nio4r --version 2.7.1
+ if: matrix.ruby.name == 'jruby'
  - name: Check rails can be installed
  run: gem install rails --verbose --backtrace
  timeout-minutes: 10
@@ -99,11 +102,11 @@ jobs:
  - { name: "3.1", value: 3.1.5 } # Rails 7
  - { name: "3.2", value: 3.2.4 } # Rails 7
  - { name: "3.3", value: 3.3.1 } # Rails 7
- - { name: jruby-9.4, value: jruby-9.4.6.0, rails-args: "--skip-webpack-install" } # Rails 6
+ - { name: jruby-9.4, value: jruby-9.4.7.0, rails-args: "--skip-webpack-install" } # Rails 6
  steps:
- - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+ - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
  - name: Setup ruby
- uses: ruby/setup-ruby@1198b074305f9356bd56dd4b311757cc0dab2f1c # v1.175.1
+ uses: ruby/setup-ruby@943103cae7d3f1bb1e4951d5fcc7928b40e4b742 # v1.177.1
  with:
  ruby-version: ${{ matrix.ruby.value }}
  bundler: none

.github/workflows/jruby-bundler.yml

@@ -32,11 +32,11 @@ jobs:
  os: [ubuntu-22.04, windows-2022]
 
  steps:
- - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+ - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
  - name: Setup ruby
- uses: ruby/setup-ruby@1198b074305f9356bd56dd4b311757cc0dab2f1c # v1.175.1
+ uses: ruby/setup-ruby@943103cae7d3f1bb1e4951d5fcc7928b40e4b742 # v1.177.1
  with:
- ruby-version: jruby-9.4.6.0
+ ruby-version: jruby-9.4.7.0
  bundler: none
  - name: Setup java
  uses: actions/setup-java@99b8673ff64fbf99d8d325f52d9a5bdedb8483e9 # v4.2.1

.github/workflows/realworld-bundler.yml

@@ -43,9 +43,9 @@ jobs:
  RGV: ..
  RUBYOPT: --disable-gems
  steps:
- - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+ - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
  - name: Setup ruby
- uses: ruby/setup-ruby@1198b074305f9356bd56dd4b311757cc0dab2f1c # v1.175.1
+ uses: ruby/setup-ruby@943103cae7d3f1bb1e4951d5fcc7928b40e4b742 # v1.177.1
  with:
  ruby-version: ${{ matrix.ruby.value }}
  bundler: none
@@ -79,9 +79,9 @@ jobs:
  - { bundler: { name: 3, value: 3.0.0 }, ruby: { name: ruby-3.2, value: 3.2.4 } }
  - { bundler: { name: 3, value: 3.0.0 }, ruby: { name: ruby-3.3, value: 3.3.1 } }
  steps:
- - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+ - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
  - name: Setup ruby
- uses: ruby/setup-ruby@1198b074305f9356bd56dd4b311757cc0dab2f1c # v1.175.1
+ uses: ruby/setup-ruby@943103cae7d3f1bb1e4951d5fcc7928b40e4b742 # v1.177.1
  with:
  ruby-version: ${{ matrix.ruby.value }}
  bundler: none
@@ -104,14 +104,14 @@ jobs:
  needs: [bundler, system_rubygems_bundler]
  runs-on: ubuntu-22.04
  steps:
- - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+ - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
  - name: Setup ruby
- uses: ruby/setup-ruby@1198b074305f9356bd56dd4b311757cc0dab2f1c # v1.175.1
+ uses: ruby/setup-ruby@943103cae7d3f1bb1e4951d5fcc7928b40e4b742 # v1.177.1
  with:
  ruby-version: 3.3.1
  bundler: none
  - name: Prepare dependencies
- run: rake setup
+ run: bin/rake setup
  - name: Download all used cassettes as artifacts
  uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7
  with:

.github/workflows/ruby-core.yml

@@ -24,13 +24,13 @@ jobs:
  target: [Rubygems, Bundler]
  steps:
  - name: Set up latest ruby head
- uses: ruby/setup-ruby@1198b074305f9356bd56dd4b311757cc0dab2f1c # v1.175.1
+ uses: ruby/setup-ruby@943103cae7d3f1bb1e4951d5fcc7928b40e4b742 # v1.177.1
  with:
  ruby-version: head
  bundler: none
  - name: Save latest buildable revision to environment
  run: echo "REF=$(ruby -v | cut -d')' -f1 | cut -d' ' -f5)" >> $GITHUB_ENV
- - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+ - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
  with:
  repository: ruby/ruby
  path: ruby/ruby
@@ -49,7 +49,7 @@ jobs:
  ./configure -C --disable-install-doc
  make -j2
  working-directory: ruby/ruby
- - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+ - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
  with:
  path: rubygems/rubygems
  - name: Sync tools

.github/workflows/rubygems.yml

@@ -33,7 +33,7 @@ jobs:
  - { name: "3.3", value: 3.3.1 }
 
  include:
- - ruby: { name: jruby, value: jruby-9.4.6.0 }
+ - ruby: { name: jruby, value: jruby-9.4.7.0 }
  os: { name: Ubuntu, value: ubuntu-22.04 }
 
  - ruby: { name: truffleruby, value: truffleruby-24.0.1 }
@@ -43,9 +43,9 @@ jobs:
  ruby: { name: mswin, value: mswin }
 
  steps:
- - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+ - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
  - name: Setup ruby (Ubuntu/macOS)
- uses: ruby/setup-ruby@1198b074305f9356bd56dd4b311757cc0dab2f1c # v1.175.1
+ uses: ruby/setup-ruby@943103cae7d3f1bb1e4951d5fcc7928b40e4b742 # v1.177.1
  with:
  ruby-version: ${{ matrix.ruby.value }}
  bundler: none
@@ -56,18 +56,18 @@ jobs:
  echo "BINDGEN_EXTRA_CLANG_ARGS=$((gcm clang).source -replace "bin\clang.exe","include")" >> $env:GITHUB_ENV
  if: matrix.ruby.name == 'mswin'
  - name: Install Dependencies
- run: rake setup
+ run: bin/rake setup
  - name: Run Test
- run: rake test
+ run: bin/rake test
  if: matrix.ruby.name != 'truffleruby' && matrix.ruby.name != 'jruby'
  - name: Run Test isolatedly
- run: rake test:isolated
+ run: bin/rake test:isolated
  if: matrix.ruby.name == '3.3' && matrix.os.name != 'Windows'
  - name: Run Test (JRuby)
- run: JRUBY_OPTS=--debug rake test
+ run: JRUBY_OPTS=--debug bin/rake test
  if: startsWith(matrix.ruby.name, 'jruby')
  - name: Run Test (Truffleruby)
- run: TRUFFLERUBYOPT="--experimental-options --testing-rubygems" rake test
+ run: TRUFFLERUBYOPT="--experimental-options --testing-rubygems" bin/rake test
  if: matrix.ruby.name == 'truffleruby'
 
  timeout-minutes: 60

.github/workflows/scorecards.yml

@@ -27,12 +27,12 @@ jobs:
 
  steps:
  - name: "Checkout code"
- uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+ uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
  with:
  persist-credentials: false
 
  - name: "Run analysis"
- uses: ossf/scorecard-action@0864cf19026789058feabb7e87baa5f140aac736 # v2.3.1
+ uses: ossf/scorecard-action@dc50aa9510b46c811795eb24b2f1ba02a914e534 # v2.3.3
  with:
  results_file: results.sarif
  results_format: sarif
@@ -49,6 +49,6 @@ jobs:
 
  # Upload the results to GitHub's code scanning dashboard.
  - name: "Upload to code-scanning"
- uses: github/codeql-action/upload-sarif@cdcdbb579706841c47f7063dda365e292e5cad7a # v2.13.4
+ uses: github/codeql-action/upload-sarif@9fdb3e49720b44c48891d036bb502feb25684276 # v3.25.6
  with:
  sarif_file: results.sarif

.github/workflows/spell.yml

@@ -15,5 +15,5 @@ jobs:
  name: Check spelling
  runs-on: ubuntu-latest
  steps:
- - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+ - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
  - uses: codespell-project/actions-codespell@94259cd8be02ad2903ba34a22d9c13de21a74461 # v2.0

.github/workflows/system-rubygems-bundler.yml

@@ -38,9 +38,9 @@ jobs:
  - { bundler: { name: 3, value: 3.0.0 }, ruby: { name: ruby-3.2, value: 3.2.4 } }
  - { bundler: { name: 3, value: 3.0.0 }, ruby: { name: ruby-3.3, value: 3.3.1 } }
  steps:
- - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+ - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
  - name: Setup ruby
- uses: ruby/setup-ruby@1198b074305f9356bd56dd4b311757cc0dab2f1c # v1.175.1
+ uses: ruby/setup-ruby@943103cae7d3f1bb1e4951d5fcc7928b40e4b742 # v1.177.1
  with:
  ruby-version: ${{ matrix.ruby.value }}
  bundler: none
@@ -61,7 +61,7 @@ jobs:
  run: |
  RGV=$(ruby -e 'puts Gem::VERSION.split(".")[0..2].join(".")')
  echo "RGV=v$RGV" >> $GITHUB_ENV
- - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+ - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
  with:
  path: bundler/tmp/rubygems
  ref: ${{ env.RGV }}

.github/workflows/truffleruby-bundler.yml

@@ -24,9 +24,9 @@ jobs:
  runs-on: ubuntu-22.04
 
  steps:
- - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+ - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
  - name: Setup ruby
- uses: ruby/setup-ruby@1198b074305f9356bd56dd4b311757cc0dab2f1c # v1.175.1
+ uses: ruby/setup-ruby@943103cae7d3f1bb1e4951d5fcc7928b40e4b742 # v1.177.1
  with:
  ruby-version: truffleruby-24.0.1
  bundler: none

.github/workflows/ubuntu-lint.yml

@@ -21,18 +21,18 @@ jobs:
  env:
  RUBYOPT: -Ilib
  steps:
- - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+ - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
  - name: Setup ruby
- uses: ruby/setup-ruby@1198b074305f9356bd56dd4b311757cc0dab2f1c # v1.175.1
+ uses: ruby/setup-ruby@943103cae7d3f1bb1e4951d5fcc7928b40e4b742 # v1.177.1
  with:
  ruby-version: 3.3.1
  bundler: none
  - name: Install Dependencies
- run: rake setup
+ run: bin/rake setup
  - name: Run Lint
- run: rake rubocop
+ run: bin/rake rubocop
  - name: Generate docs
- run: rake docs
+ run: bin/rake docs
  - name: Install & Check Dependencies
  run: bin/rake dev:frozen_deps
  - name: Misc checks

.github/workflows/weekly-update.yml

@@ -24,7 +24,7 @@ jobs:
  git config --global user.email [email protected]
  git config --global push.autoSetupRemote true
 
- - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+ - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
 
  - name: Check versions
  run: |

CHANGELOG.md

@@ -1,3 +1,47 @@
+# 3.5.11 / 2024-05-28
+
+## Enhancements:
+
+* Update SPDX license list as of 2024-05-22. Pull request
+ [#7689](https://github.com/rubygems/rubygems/pull/7689) by
+ github-actions[bot]
+* Fix the update_rubygems inconsistency (--disable-gems). Pull request
+ [#7658](https://github.com/rubygems/rubygems/pull/7658) by x-yuri
+* Accept WASI as an OS name in Gem::Platform. Pull request
+ [#7629](https://github.com/rubygems/rubygems/pull/7629) by kateinoigakukun
+* Warn if RubyGems version explicitly set in gemspec does not match
+ running version. Pull request
+ [#7460](https://github.com/rubygems/rubygems/pull/7460) by
+ deivid-rodriguez
+* Installs bundler 2.5.11 as a default gem.
+
+## Bug fixes:
+
+* Fix binstubs sometimes not getting regenerated when `--destdir` is
+ given. Pull request
+ [#7660](https://github.com/rubygems/rubygems/pull/7660) by
+ deivid-rodriguez
+* Fix `gem uninstall --user-install` for symlinked HOME. Pull request
+ [#7645](https://github.com/rubygems/rubygems/pull/7645) by
+ deivid-rodriguez
+* Fix issue when plugin stubs would sometimes not be properly removed by
+ `gem uninstall`. Pull request
+ [#7631](https://github.com/rubygems/rubygems/pull/7631) by
+ deivid-rodriguez
+* Fix plugins uninstallation for user installed gems. Pull request
+ [#6456](https://github.com/rubygems/rubygems/pull/6456) by voxik
+
+## Performance:
+
+* Use a constant empty tar header to avoid extra allocations. Pull request
+ [#7484](https://github.com/rubygems/rubygems/pull/7484) by segiddins
+
+## Documentation:
+
+* Recommend `bin/rake` over `rake` in contributing docs. Pull request
+ [#7648](https://github.com/rubygems/rubygems/pull/7648) by
+ deivid-rodriguez
+
 # 3.5.10 / 2024-05-03
 
 ## Security:
@@ -5949,7 +5993,7 @@ There has been some minor usability enhancements and changes ...
  This *greatly* speeds up gem commands run in non-admin mode when the
  site-wide cache is out of date.
 * The gem command now used an HTTP HEAD command to detect if the
- server's source index needs to be downloaed.
+ server's source index needs to be downloaded.
 * gem check gemname --test will run unit tests on installed gems that
  have unit tests.
 * Multiple gem names are allowed on the gem install command line.