forked from rubygems/rubygems
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathHistory.txt
4113 lines (3423 loc) · 169 KB
/
History.txt
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
# coding: UTF-8
=== 3.0.6 / 2019-08-17
Bug fixes:
* Revert #2813. It broke the compatibility with 3.0.x versions.
=== 3.0.5 / 2019-08-16
Minor enhancements:
* Use env var to configure api key on push. Pull request #2559 by Luis
Sagastume.
* Unswallow uninstall error. Pull request #2707 by David Rodríguez.
* Expose windows path normalization utility. Pull request #2767 by David
Rodríguez.
* Clean which command. Pull request #2801 by Luis Sagastume.
* Upgrading S3 source signature to AWS SigV4. Pull request #2807 by
Alexander Pakulov.
* Remove missleading comment, no reason to move Gem.host to Gem::Util.
Pull request #2811 by Luis Sagastume.
* Drop support for 'gem env packageversion'. Pull request #2813 by Luis
Sagastume.
* Take into account just git tracked files in update_manifest rake task.
Pull request #2816 by Luis Sagastume.
* Remove TODO comment, there's no Gem::Dirs constant. Pull request #2819
by Luis Sagastume.
* Remove unused 'raise' from test_case. Pull request #2820 by Luis
Sagastume.
* Move TODO comment to an information comment. Pull request #2821 by Luis
Sagastume.
* Use File#open instead of Kernel#open in stub_specification.rb. Pull
request #2834 by Luis Sagastume.
* Make error code a gemcutter_utilities a constant. Pull request #2844 by
Luis Sagastume.
* Remove FIXME comment related to PathSupport. Pull request #2854 by Luis
Sagastume.
* Use gsub with Hash. Pull request #2860 by Kazuhiro NISHIYAMA.
* Use the standard RUBY_ENGINE_VERSION instead of JRUBY_VERSION. Pull
request #2864 by Benoit Daloze.
* Do not mutate uri.query during s3 signature creation. Pull request #2874
by Alexander Pakulov.
* Fixup #2844. Pull request #2878 by SHIBATA Hiroshi.
Bug fixes:
* Fix intermittent test error on Appveyor & Travis. Pull request #2568 by
MSP-Greg.
* Extend timeout on assert_self_install_permissions. Pull request #2605 by
SHIBATA Hiroshi.
* Better folder assertions. Pull request #2644 by David Rodríguez.
* Fix default gem executable installation when folder is not `bin/`. Pull
request #2649 by David Rodríguez.
* Fix gem uninstall behavior. Pull request #2663 by Luis Sagastume.
* Fix for large values in UID/GID fields in tar archives. Pull request
#2780 by Alexey Shein.
* Fixed task order for release. Pull request #2792 by SHIBATA Hiroshi.
* Ignore GEMRC variable for test suite. Pull request #2837 by SHIBATA
Hiroshi.
=== 3.0.4 / 2019-06-14
Minor enhancements:
* Add support for TruffleRuby #2612 by Benoit Daloze
* Serve a more descriptive error when --no-ri or --no-rdoc are used #2572
by Grey Baker
* Improve test compatibility with CMake 2.8. Pull request #2590 by Vít
Ondruch.
* Restore gem build behavior and introduce the "-C" flag to gem build.
Pull request #2596 by Luis Sagastume.
* Enabled block call with util_set_arch. Pull request #2603 by SHIBATA
Hiroshi.
* Avoid rdoc hook when it's failed to load rdoc library. Pull request
#2604 by SHIBATA Hiroshi.
* Drop tests for legacy RDoc. Pull request #2608 by Nobuyoshi Nakada.
* Update TODO comment. Pull request #2658 by Luis Sagastume.
* Skip malicious extension test with mswin platform. Pull request #2670 by
SHIBATA Hiroshi.
* Check deprecated methods on release. Pull request #2673 by David
Rodríguez.
* Add steps to run bundler tests. Pull request #2680 by Aditya Prakash.
* Skip temporary "No such host is known" error. Pull request #2684 by
Takashi Kokubun.
* Replaced aws-sdk-s3 instead of s3cmd. Pull request #2688 by SHIBATA
Hiroshi.
* Allow uninstall from symlinked GEM_HOME. Pull request #2720 by David
Rodríguez.
* Use current checkout in CI to uninstall RVM related gems. Pull request
#2729 by David Rodríguez.
* Update Contributor Covenant v1.4.1. Pull request #2751 by SHIBATA
Hiroshi.
* Added supported versions of Ruby. Pull request #2756 by SHIBATA Hiroshi.
* Fix shadowing outer local variable warning. Pull request #2763 by Luis
Sagastume.
* Update the certificate files to make the test pass on Debian 10. Pull
request #2777 by Yusuke Endoh.
* Backport ruby core changes. Pull request #2778 by SHIBATA Hiroshi.
Bug fixes:
* Test_gem.rb - intermittent failure fix. Pull request #2613 by MSP-Greg.
* Fix sporadic CI failures. Pull request #2617 by David Rodríguez.
* Fix flaky bundler version finder tests. Pull request #2624 by David
Rodríguez.
* Fix gem indexer tests leaking utility gems. Pull request #2625 by David
Rodríguez.
* Clean up default spec dir too. Pull request #2639 by David Rodríguez.
* Fix 2.6.1 build against vendored bundler. Pull request #2645 by David
Rodríguez.
* Fix comment typo. Pull request #2664 by Luis Sagastume.
* Fix comment of Gem::Specification#required_ruby_version=. Pull request
#2732 by Alex Junger.
* Fix TODOs. Pull request #2748 by David Rodríguez.
=== 3.0.3 / 2019-03-05
Security fixes:
* Fixed following vulnerabilities:
* CVE-2019-8320: Delete directory using symlink when decompressing tar
* CVE-2019-8321: Escape sequence injection vulnerability in `verbose`
* CVE-2019-8322: Escape sequence injection vulnerability in `gem owner`
* CVE-2019-8323: Escape sequence injection vulnerability in API response handling
* CVE-2019-8324: Installing a malicious gem may lead to arbitrary code execution
* CVE-2019-8325: Escape sequence injection vulnerability in errors
=== 3.0.2 / 2019-01-01
Minor enhancements:
* Use Bundler-1.17.3. Pull request #2556 by SHIBATA Hiroshi.
* Fix document flag description. Pull request #2555 by Luis Sagastume.
Bug fixes:
* Fix tests when ruby --program-suffix is used without rubygems
--format-executable. Pull request #2549 by Jeremy Evans.
* Fix Gem::Requirement equality comparison when ~> operator is used. Pull
request #2554 by Grey Baker.
* Unset SOURCE_DATE_EPOCH in the test cases. Pull request #2558 by Sorah
Fukumori.
* Restore SOURCE_DATE_EPOCH. Pull request #2560 by SHIBATA Hiroshi.
=== 3.0.1 / 2018-12-23
Bug fixes:
* Ensure globbed files paths are expanded. Pull request #2536 by Tony Ta.
* Dup the Dir.home string before passing it on. Pull request #2545 by
Charles Oliver Nutter.
* Added permissions to installed files for non-owners. Pull request #2546
by SHIBATA Hiroshi.
* Restore release task without hoe. Pull request #2547 by SHIBATA Hiroshi.
=== 3.0.0 / 2018-12-19
Major enhancements:
* S3 source. Pull request #1690 by Aditya Prakash.
* Download gems with threads. Pull request #1898 by André Arko.
* Update to SPDX license list 3.0. Pull request #2152 by Mike Linksvayer.
* [GSoC] Multi-factor feature for RubyGems. Pull request #2369 by Qiu
Chaofan.
* Use bundler 1.17.2. Pull request #2521 by SHIBATA Hiroshi.
Minor enhancements:
* Don't treat inaccessible working directories as build failures. Pull
request #1135 by Pete.
* Remove useless directory parameter from builders .build methods.
[rebased]. Pull request #1433 by Kurtis Rainbolt-Greene.
* Skipping more than one gem in pristine. Pull request #1592 by Henne
Vogelsang.
* Add info command to print information about an installed gem. Pull
request #2023 by Colby Swandale.
* Add --[no-]check-development option to cleanup command. Pull request
#2061 by Lin Jen-Shin (godfat).
* Show which gem referenced a missing gem. Pull request #2067 by Artem
Khramov.
* Prevent to delete to "bundler-" prefix gem like bundler-audit. Pull
request #2086 by SHIBATA Hiroshi.
* Fix rake install_test_deps once the rake clean_env does not exist. Pull
request #2090 by Lucas Arantes.
* Workaround common options mutation in Gem::Command test. Pull request
#2098 by Thibault Jouan.
* Extract a SpecificationPolicy validation class. Pull request #2101 by
Olle Jonsson.
* Handle environment that does not have `flock` system call. Pull request
#2107 by SHIBATA Hiroshi.
* Handle the explain option in gem update. Pull request #2110 by Colby
Swandale.
* Add Gem.operating_system_defaults to allow packagers to override
defaults. Pull request #2116 by Vít Ondruch.
* Update for compatibility with new minitest. Pull request #2118 by
MSP-Greg.
* Make Windows bin stubs portable. Pull request #2119 by MSP-Greg.
* Avoid to warnings about gemspec loadings in rubygems tests. Pull request
#2125 by SHIBATA Hiroshi.
* Set whether bundler is used for gemdeps with an environmental variable.
Pull request #2126 by SHIBATA Hiroshi.
* Titleize "GETTING HELP" in readme. Pull request #2136 by Colby Swandale.
* Improve the error message given when using --version with multiple gems
in the install command. Pull request #2137 by Colby Swandale.
* Use `File.open` instead of `open`. Pull request #2142 by SHIBATA
Hiroshi.
* Gem::Util.traverse_parents should not crash on permissions error. Pull
request #2147 by Robert Ulejczyk.
* [Installer] Avoid a #mkdir race condition. Pull request #2148 by Samuel
Giddins.
* Allow writing gemspecs from gem unpack to location specified by target
option. Pull request #2150 by Colby Swandale.
* Raise errors in `gem uninstall` when a file in a gem could not be
removed . Pull request #2154 by Colby Swandale.
* Remove PID from gem index directory. Pull request #2155 by SHIBATA
Hiroshi.
* Nil guard on `Gem::Specification`. Pull request #2164 by SHIBATA
Hiroshi.
* Skip broken test with macOS platform. Pull request #2167 by SHIBATA
Hiroshi.
* Support option for `--destdir` with upgrade installer. Pull request
#2169 by SHIBATA Hiroshi.
* To use constant instead of hard-coded version. Pull request #2171 by
SHIBATA Hiroshi.
* Add Rake task to install dev dependencies. Pull request #2173 by Ellen
Marie Dash.
* Add new sections to the README and explanation of what RubyGems is.
Pull request #2174 by Colby Swandale.
* Prefer to use `Numeric#zero?` instead of `== 0`. Pull request #2176 by
SHIBATA Hiroshi.
* Ignore performance test of version regexp pattern. Pull request #2179 by
SHIBATA Hiroshi.
* Ignore .DS_Store files in the update_manifest task. Pull request #2199
by Colby Swandale.
* Allow building gems without having to be in the gem folder . Pull
request #2204 by Colby Swandale.
* Added coverage ability used by simplecov. Pull request #2207 by SHIBATA
Hiroshi.
* Improve invalid proxy error message. Pull request #2217 by Luis
Sagastume.
* Simplify home directory detection and platform condition. Pull request
#2218 by SHIBATA Hiroshi.
* Permission options. Pull request #2219 by Nobuyoshi Nakada.
* Improve gemspec and package task. Pull request #2220 by SHIBATA Hiroshi.
* Prefer to use util_spec in `Gem::TestCase`. Pull request #2227 by
SHIBATA Hiroshi.
* [Requirement] Treat requirements with == versions as equal. Pull
request #2230 by Samuel Giddins.
* Add a note for the non-semantically versioned case. Pull request #2242
by David Rodríguez.
* Keep feature names loaded in the block. Pull request #2261 by Nobuyoshi
Nakada.
* Tweak warning recommendation. Pull request #2266 by David Rodríguez.
* Show git path in gem env. Pull request #2268 by Luis Sagastume.
* Add `--env-shebang` flag to setup command. Pull request #2271 by James
Myers.
* Support SOURCE_DATE_EPOCH to make gem spec reproducible. Pull request
#2278 by Levente Polyak.
* Chdir back to original directory when building an extension fails. Pull
request #2282 by Samuel Giddins.
* [Rakefile] Add a default task that runs the tests. Pull request #2283 by
Samuel Giddins.
* Support SOURCE_DATE_EPOCH to make gem tar reproducible. Pull request
#2289 by Levente Polyak.
* Reset hooks in test cases. Pull request #2297 by Samuel Giddins.
* Minor typo: nokogiri. Pull request #2298 by Darshan Baid.
* Ignore vendored molinillo from code coverage. Pull request #2302 by
SHIBATA Hiroshi.
* Support IO.copy_stream. Pull request #2303 by okkez.
* Prepare beta release. Pull request #2304 by SHIBATA Hiroshi.
* Add error message when trying to open a default gem. Pull request #2307
by Luis Sagastume.
* Add alias command 'i' for 'install' command. Pull request #2308 by
ota42y.
* Cleanup rdoc task in Rakefile. Pull request #2318 by SHIBATA Hiroshi.
* Add testcase to test_gem_text.rb. Pull request #2329 by Oliver.
* Gem build strict option. Pull request #2332 by David Rodríguez.
* Make spec reset more informative. Pull request #2333 by Luis Sagastume.
* [Rakefile] Set bundler build metadata when doing a release. Pull request
#2335 by Samuel Giddins.
* Speed up globbing relative to given directories. Pull request #2336 by
Samuel Giddins.
* Remove semver gem build warning. Pull request #2351 by David Rodríguez.
* Expand symlinks in gem path. Pull request #2352 by Benoit Daloze.
* Normalize comment indentations. Pull request #2353 by David Rodríguez.
* Add bindir flag to pristine. Pull request #2361 by Luis Sagastume.
* Add --user-install behaviour to cleanup command. Pull request #2362 by
Luis Sagastume.
* Allow build options to be passed to Rake. Pull request #2382 by Alyssa
Ross.
* Add --re-sign flag to cert command. Pull request #2391 by Luis
Sagastume.
* Fix "interpreted as grouped expression" warning. Pull request #2399 by
Colby Swandale.
* [Gem::Ext::Builder] Comments to aid future refactoring. Pull request
#2405 by Ellen Marie Dash.
* Move CONTRIBUTING.rdoc and POLICIES.rdoc documents to markdown. Pull
request #2412 by Colby Swandale.
* Improve certificate expiration defaults. Pull request #2420 by Luis
Sagastume.
* Freeze all possible constants. Pull request #2422 by Colby Swandale.
* Fix bundler rubygems binstub not properly looking for bundler. Pull
request #2426 by David Rodríguez.
* Make sure rubygems never leaks to another installation. Pull request
#2427 by David Rodríguez.
* Update README.md. Pull request #2428 by Marc-André Lafortune.
* Restrict special chars from prefixing new gem names. Pull request #2432
by Luis Sagastume.
* This removes support for dynamic API backend lookup via DNS SRV records.
Pull request #2433 by Arlandis Word.
* Fix link to CONTRIBUTING.md doc. Pull request #2434 by Arlandis Word.
* Support Keyword args with Psych. Pull request #2439 by SHIBATA Hiroshi.
* Bug/kernel#warn uplevel. Pull request #2442 by Nobuyoshi Nakada.
* Improve certificate error message. Pull request #2454 by Luis Sagastume.
* Update gem open command help text. Pull request #2458 by Aditya Prakash.
* Uninstall with versions. Pull request #2466 by David Rodríguez.
* Add output option to build command. Pull request #2501 by Colby
Swandale.
* Move rubocop into a separate stage in travis ci. Pull request #2510 by
Colby Swandale.
* Ignore warnings with test_gem_specification.rb. Pull request #2523 by
SHIBATA Hiroshi.
* Support the environment without OpenSSL. Pull request #2528 by SHIBATA
Hiroshi.
Bug fixes:
* Fix undefined method error when printing alert. Pull request #1884 by
Robert Ross.
* Frozen string fix - lib/rubygems/bundler_version_finder.rb. Pull request
#2115 by MSP-Greg.
* Fixed typos. Pull request #2143 by SHIBATA Hiroshi.
* Fix regression of destdir on Windows platform. Pull request #2178 by
SHIBATA Hiroshi.
* Fixed no assignment variables about default gems installation. Pull
request #2181 by SHIBATA Hiroshi.
* Fix spelling errors in the README. Pull request #2187 by Colby Swandale.
* Missing comma creates ambiguous meaning. Pull request #2190 by Clifford
Heath.
* Fix getting started instructions. Pull request #2198 by Luis Sagastume.
* Fix rubygems dev env. Pull request #2201 by Luis Sagastume.
* Fix #1470: generate documentation when --install-dir is present. Pull
request #2229 by Elias Hernandis.
* Fix activation when multiple platforms installed. Pull request #2339 by
MSP-Greg.
* Fix required_ruby_version with prereleases and improve error message.
Pull request #2344 by David Rodríguez.
* Update tests for 'newer' Windows builds. Pull request #2348 by MSP-Greg.
* Fix broken rubocop task by upgrading to 0.58.1. Pull request #2356 by
David Rodríguez.
* Gem::Version should handle nil like it used to before. Pull request
#2363 by Luis Sagastume.
* Avoid need of C++ compiler to pass the test suite. Pull request #2367 by
Vít Ondruch.
* Fix auto resign expired certificate. Pull request #2380 by Luis
Sagastume.
* Skip permissions-dependent test when root. Pull request #2386 by Alyssa
Ross.
* Fix test that depended on /usr/bin being in PATH. Pull request #2387 by
Alyssa Ross.
* Fixed test fail with mswin environment. Pull request #2390 by SHIBATA
Hiroshi.
* Fix broken builds using the correct rubocop version. Pull request #2396
by Luis Sagastume.
* Fix extension builder failure when verbose. Pull request #2457 by Sorah
Fukumori.
* Fix test warnings. Pull request #2472 by MSP-Greg.
* The test suite of bundler is not present ruby description. Pull request
#2484 by SHIBATA Hiroshi.
* Fix crash on certain gemspecs. Pull request #2506 by David Rodríguez.
* Fixed test fails with the newer version of OpenSSL. Pull request #2507
by SHIBATA Hiroshi.
* Fix broken symlink that points to ../*. Pull request #2516 by Akira
Matsuda.
* Fix remote fetcher tests. Pull request #2520 by Luis Sagastume.
* Fix tests when --program-suffix and similar ruby configure options are
used. Pull request #2529 by Jeremy Evans.
Compatibility changes:
* IO.binread is not provided at Ruby 1.8. Pull request #2093 by SHIBATA
Hiroshi.
* Ignored to publish rdoc documentation of rubygems for
docs.seattlerb.org. Pull request #2105 by SHIBATA Hiroshi.
* Support pre-release RubyGems. Pull request #2128 by SHIBATA Hiroshi.
* Relax minitest version for 5. Pull request #2131 by SHIBATA Hiroshi.
* Remove zentest from dev dependency. Pull request #2132 by SHIBATA
Hiroshi.
* Remove hoe for test suite. Pull request #2160 by SHIBATA Hiroshi.
* Cleanup deprecated tasks. Pull request #2162 by SHIBATA Hiroshi.
* Drop to support Ruby < 2.2. Pull request #2182 by SHIBATA Hiroshi.
* Cleanup deprecated style. Pull request #2193 by SHIBATA Hiroshi.
* Remove CVEs from the rubygems repo. Pull request #2195 by Colby
Swandale.
* Removed needless condition for old version of ruby. Pull request #2206
by SHIBATA Hiroshi.
* Removed deprecated methods over the limit day. Pull request #2216 by
SHIBATA Hiroshi.
* Remove syck support. Pull request #2222 by SHIBATA Hiroshi.
* Removed needless condition for Encoding. Pull request #2223 by SHIBATA
Hiroshi.
* Removed needless condition for String#force_encoding. Pull request #2225
by SHIBATA Hiroshi.
* Removed needless OpenSSL patch for Ruby 1.8. Pull request #2243 by
SHIBATA Hiroshi.
* Removed compatibility code for Ruby 1.9.2. Pull request #2244 by SHIBATA
Hiroshi.
* Removed needless version condition for the old ruby. Pull request #2252
by SHIBATA Hiroshi.
* Remove needless define/respond_to condition. Pull request #2255 by
SHIBATA Hiroshi.
* Use File.realpath directly in Gem::Package. Pull request #2284 by
SHIBATA Hiroshi.
* Removed needless condition for old versions of Ruby. Pull request #2286
by SHIBATA Hiroshi.
* Remove the --rdoc and --ri options from install/update. Pull request
#2354 by Colby Swandale.
* Move authors assigner to required attributes section of
Gem::Specification. Pull request #2406 by Grey Baker.
* Remove rubyforge_page functionality. Pull request #2436 by Nick
Schwaderer.
* Drop ruby 1.8 support and use IO.popen. Pull request #2441 by Nobuyoshi
Nakada.
* Drop ruby 2.2 support. Pull request #2487 by David Rodríguez.
* Remove some old compatibility code. Pull request #2488 by David
Rodríguez.
* Remove .document from src. Pull request #2489 by Colby Swandale.
* Remove old version support. Pull request #2493 by Nobuyoshi Nakada.
* [BudlerVersionFinder] set .filter! and .compatible? to match only on
major versions. Pull request #2515 by Colby Swandale.
Style changes:
* Add Rubocop. Pull request #2250 by Colby Swandale.
* Removed explicitly declaration of thread library. Pull request #2324 by
SHIBATA Hiroshi.
* Remove Trailing whitespace with rubocop. Pull request #2394 by SHIBATA
Hiroshi.
* Update rubocop and also use correct pessimistic version. Pull request
#2404 by Colby Swandale.
* Enable more rubocop rules. Pull request #2435 by Ellen Marie Dash.
* Fix and lock rubocop. Pull request #2465 by David Rodríguez.
* Add a rubocop binstub. Pull request #2468 by David Rodríguez.
* Restore the `rubocop` task. Pull request #2470 by David Rodríguez.
* Remove trailing blank lines. Pull request #2471 by David Rodríguez.
* Remove empty lines around method bodies. Pull request #2473 by David
Rodríguez.
* Enable Style/MethodDefParentheses in Rubocop. Pull request #2478 by
Colby Swandale.
* Enable Style/MultilineIfThen in Rubocop. Pull request #2479 by Luis
Sagastume.
* Remove trailing 'then' from generated code. Pull request #2480 by Luis
Sagastume.
=== 2.7.10 / 2019-06-14
Minor enhancements:
* Fix bundler rubygems binstub not properly looking for bundler. Pull request #2426
by David Rodríguez.
* [BudlerVersionFinder] set .filter! and .compatible? to match only on major versions.
Pull request #2515 by Colby Swandale.
+ Update for compatibility with new minitest. Pull request #2118 by MSP-Greg.
=== 2.7.9 / 2019-03-05
Security fixes:
* Fixed following vulnerabilities:
* CVE-2019-8320: Delete directory using symlink when decompressing tar
* CVE-2019-8321: Escape sequence injection vulnerability in `verbose`
* CVE-2019-8322: Escape sequence injection vulnerability in `gem owner`
* CVE-2019-8323: Escape sequence injection vulnerability in API response handling
* CVE-2019-8324: Installing a malicious gem may lead to arbitrary code execution
* CVE-2019-8325: Escape sequence injection vulnerability in errors
=== 2.7.8 / 2018-11-02
Minor enhancements:
* [Requirement] Treat requirements with == versions as equal. Pull
request #2230 by Samuel Giddins.
* Fix exec_name documentation. Pull request #2239 by Luis Sagastume.
* [TarHeader] Extract the empty header into a constant. Pull request #2247
by Samuel Giddins.
* Simplify the code that lets us call the original, non-monkeypatched
Kernel#require. Pull request #2267 by Leon Miller-Out.
* Add install alias documentation. Pull request #2320 by ota42y.
* [Rakefile] Set bundler build metadata when doing a release. Pull request
#2335 by Samuel Giddins.
* Backport commits from ruby core . Pull request #2347 by SHIBATA Hiroshi.
* Sign in to the correct host before push. Pull request #2366 by Luis
Sagastume.
* Bump bundler-1.16.4. Pull request #2381 by SHIBATA Hiroshi.
* Improve bindir flag description. Pull request #2383 by Luis Sagastume.
* Update bundler-1.16.6. Pull request #2423 by SHIBATA Hiroshi.
Bug fixes:
* Fix #1470: generate documentation when --install-dir is present. Pull
request #2229 by Elias Hernandis.
* Fix no proxy checking. Pull request #2249 by Luis Sagastume.
* Validate SPDX license exceptions. Pull request #2257 by Mikit.
* Retry api specification spec with original platform. Pull request #2275
by Luis Sagastume.
* Fix approximate recommendation with prereleases. Pull request #2345 by
David Rodríguez.
* Gem::Version should handle nil like it used to before. Pull request
#2363 by Luis Sagastume.
=== 2.7.7 / 2018-05-08
Minor enhancements:
* [RequestSet] Only suggest a gem version with an installable platform.
Pull request #2175 by Samuel Giddins.
* Fixed no assignment variables about default gems installation. Pull
request #2181 by SHIBATA Hiroshi.
* Backport improvements for test-case from Ruby core. Pull request #2189
by SHIBATA Hiroshi.
* Fix ruby warnings in test suite. Pull request #2205 by Colby Swandale.
* To use Gem::Specification#bindir of bundler instead of hard coded path.
Pull request #2208 by SHIBATA Hiroshi.
* Update gem push --help description. Pull request #2215 by Luis
Sagastume.
* Backport ruby core commits. Pull request #2264 by SHIBATA Hiroshi.
Bug fixes:
* Frozen string fix - lib/rubygems/bundler_version_finder.rb. Pull request
#2115 by MSP-Greg.
* Fixed tempfile leak for RubyGems 2.7.6. Pull request #2194 by SHIBATA
Hiroshi.
* Add missing requires. Pull request #2196 by David Rodríguez.
* Fix Gem::Version.correct?. Pull request #2203 by Masato Nakamura.
* Fix verify_entry regex for metadata. Pull request #2212 by Luis
Sagastume.
* Fix path checks for case insensitive filesystem. Pull request #2211 by
Lars Kanis.
Compatibility changes:
* Deprecate unused code before removing them at #1524. Pull request #2197
by SHIBATA Hiroshi.
* Deprecate for rubygems 3. Pull request #2214 by SHIBATA Hiroshi.
* Mark deprecation to `ubygems.rb` for RubyGems 4. Pull request #2269 by
SHIBATA Hiroshi.
* Update bundler-1.16.2. Pull request #2291 by SHIBATA Hiroshi.
=== 2.7.6 / 2018-02-16
Security fixes:
* Prevent path traversal when writing to a symlinked basedir outside of the root.
Discovered by nmalkin, fixed by Jonathan Claudius and Samuel Giddins.
* Fix possible Unsafe Object Deserialization Vulnerability in gem owner.
Fixed by Jonathan Claudius.
* Strictly interpret octal fields in tar headers.
Discovered by plover, fixed by Samuel Giddins.
* Raise a security error when there are duplicate files in a package.
Discovered by plover, fixed by Samuel Giddins.
* Enforce URL validation on spec homepage attribute.
Discovered by Yasin Soliman, fixed by Jonathan Claudius.
* Mitigate XSS vulnerability in homepage attribute when displayed via `gem server`.
Discovered by Yasin Soliman, fixed by Jonathan Claudius.
* Prevent Path Traversal issue during gem installation.
Discovered by nmalkin.
=== 2.7.5
Bug fixes:
* To use bundler-1.16.1 #2121 by SHIBATA Hiroshi.
* Fixed leaked FDs. Pull request #2127 by Nobuyoshi Nakada.
* Support option for `--destdir` with upgrade installer. #2169 by Thibault Jouan.
* Remove PID from gem index directory. #2155 by SHIBATA Hiroshi.
* Avoid a #mkdir race condition #2148 by Samuel Giddins.
* Gem::Util.traverse_parents should not crash on permissions error #2147 by Robert Ulejczyk.
* Use `File.open` instead of `open`. #2142 by SHIBATA Hiroshi.
* Set whether bundler is used for gemdeps with an environmental variable #2126 by SHIBATA Hiroshi.
* Fix undefined method error when printing alert #1884 by Robert Ross.
=== 2.7.4
Bug fixes:
* Fixed leaked FDs. Pull request #2127 by Nobuyoshi Nakada.
* Avoid to warnings about gemspec loadings in rubygems tests. Pull request
#2125 by SHIBATA Hiroshi.
* Fix updater with rubygems-2.7.3 Pull request #2124 by SHIBATA Hiroshi.
* Handle environment that does not have `flock` system call. Pull request
#2107 by SHIBATA Hiroshi.
=== 2.7.3
Minor enhancements:
* Removed needless version lock. Pull request #2074 by SHIBATA Hiroshi.
* Add --[no-]check-development option to cleanup command. Pull request
#2061 by Lin Jen-Shin (godfat).
* Merge glob pattern using braces. Pull request #2072 by Kazuhiro
NISHIYAMA.
* Removed warnings of unused variables. Pull request #2084 by SHIBATA
Hiroshi.
* Call SPDX.org using HTTPS. Pull request #2102 by Olle Jonsson.
* Remove multi load warning from plugins documentation. Pull request #2103
by Thibault Jouan.
Bug fixes:
* Fix test failure on Alpine Linux. Pull request #2079 by Ellen Marie
Dash.
* Avoid encoding issues by using binread in setup. Pull request #2089 by
Mauro Morales.
* Fix rake install_test_deps once the rake clean_env does not exist. Pull
request #2090 by Lucas Oliveira.
* Prevent to delete to "bundler-" prefix gem like bundler-audit. Pull
request #2086 by SHIBATA Hiroshi.
* Generate .bat files on Windows platform. Pull request #2094 by SHIBATA
Hiroshi.
* Workaround common options mutation in Gem::Command test. Pull request
#2098 by Thibault Jouan.
* Check gems dir existence before removing bundler. Pull request #2104 by
Thibault Jouan.
* Use setup command --regenerate-binstubs option flag. Pull request #2099
by Thibault Jouan.
=== 2.7.2
Bug fixes:
* Added template files to vendoerd bundler. Pull request #2065 by SHIBATA
Hiroshi.
* Added workaround for non-git environment. Pull request #2066 by SHIBATA
Hiroshi.
=== 2.7.1 (2017-11-03)
Bug fixes:
* Fix `gem update --system` with RubyGems 2.7+. Pull request #2054 by
Samuel Giddins.
=== 2.7.0 (2017-11-02)
Major enhancements:
* Update vendored bundler-1.16.0. Pull request #2051 by Samuel Giddins.
* Use Bundler for Gem.use_gemdeps. Pull request #1674 by Samuel Giddins.
* Add command `signin` to `gem` CLI. Pull request #1944 by Shiva Bhusal.
* Add Logout feature to CLI. Pull request #1938 by Shiva Bhusal.
Minor enhancements:
* Added message to uninstall command for gem that is not installed. Pull
request #1979 by anant anil kolvankar.
* Add --trust-policy option to unpack command. Pull request #1718 by
Nobuyoshi Nakada.
* Show default gems for all platforms. Pull request #1685 by Konstantin
Shabanov.
* Add Travis and Appveyor build status to README. Pull request #1918 by
Jun Aruga.
* Remove warning `no email specified` when no email. Pull request #1675 by
Leigh McCulloch.
* Improve -rubygems performance. Pull request #1801 by Samuel Giddins.
* Improve the performance of Kernel#require. Pull request #1678 by Samuel
Giddins.
* Improve user-facing messages by consistent casing of Ruby/RubyGems. Pull
request #1771 by John Labovitz.
* Improve error message when Gem::RuntimeRequirementNotMetError is raised.
Pull request #1789 by Luis Sagastume.
* Code Improvement: Inheritance corrected. Pull request #1942 by Shiva
Bhusal.
* [Source] Autoload fileutils. Pull request #1906 by Samuel Giddins.
* Use Hash#fetch instead of if/else in Gem::ConfigFile. Pull request #1824
by Daniel Berger.
* Require digest when it is used. Pull request #2006 by Samuel Giddins.
* Do not index the doc folder in the `update_manifest` task. Pull request
#2031 by Colby Swandale.
* Don't use two postfix conditionals on one line. Pull request #2038 by
Ellen Marie Dash.
* [SafeYAML] Avoid warning when Gem::Deprecate.skip is set. Pull request
#2034 by Samuel Giddins.
* Update gem yank description. Pull request #2009 by David Radcliffe.
* Fix formatting of installation instructions in README. Pull request
#2018 by Jordan Danford.
* Do not use #quick_spec internally. Pull request #1733 by Jon Moss.
* Switch from docs to guides reference. Pull request #1886 by Jonathan
Claudius.
* Happier message when latest version is already installed. Pull request
#1956 by Jared Beck.
* Update specification reference docs. Pull request #1960 by Grey Baker.
* Allow Gem.finish_resolve to respect already-activated specs. Pull
request #1910 by Samuel Giddins.
* Update cryptography for Gem::Security. Pull request #1691 by Sylvain
Daubert.
* Don't output mkmf.log message if compilation didn't fail. Pull request
#1808 by Jeremy Evans.
* Matches_for_glob - remove root path. Pull request #2010 by ahorek.
* Gem::Resolver#search_for update for reliable searching/sorting. Pull
request #1993 by MSP-Greg.
* Allow local installs with transitive prerelease requirements. Pull
request #1990 by Samuel Giddins.
* Small style fixes to Installer Set. Pull request #1985 by Arthur
Marzinkovskiy.
* Setup cmd: Avoid terminating option string w/ dot. Pull request #1825 by
Olle Jonsson.
* Warn when no files are set. Pull request #1773 by Aidan Coyle.
* Ensure `to_spec` falls back on prerelease specs. Pull request #1755 by
André Arko.
* [Specification] Eval setting default attributes in #initialize. Pull
request #1739 by Samuel Giddins.
* Sort ordering of sources is preserved. Pull request #1633 by Nathan
Ladd.
* Retry with :prerelease when no suggestions are found. Pull request #1696
by Aditya Prakash.
* [Rakefile] Run `git submodule update --init` in `rake newb`. Pull
request #1694 by Samuel Giddins.
* [TestCase] Address comments around ui changes. Pull request #1677 by
Samuel Giddins.
* Eagerly resolve in activate_bin_path. Pull request #1666 by Samuel
Giddins.
* [Version] Make hash based upon canonical segments. Pull request #1659 by
Samuel Giddins.
* Add Ruby Together CTA, rearrange README a bit. Pull request #1775 by
Michael Bernstein.
* Update Contributing.rdoc with new label usage. Pull request #1716 by
Lynn Cyrin.
* Add --host sample to help. Pull request #1709 by Code Ahss.
* Add a helpful suggestion when `gem install` fails due to required_rub….
Pull request #1697 by Samuel Giddins.
* Add cert expiration length flag. Pull request #1725 by Luis Sagastume.
* Add submodule instructions to manual install. Pull request #1727 by
Joseph Frazier.
* Allow usage of multiple `--version` operators. Pull request #1546 by
James Wen.
* Warn when requiring deprecated files. Pull request #1939 by Ellen Marie
Dash.
Compatibility changes:
* Use `-rrubygems` instead of `-rubygems.rb`. Because ubygems.rb is
unavailable on Ruby 2.5. Pull request #2028 #2027 #2029
by SHIBATA Hiroshi.
* Deprecate Gem::InstallerTestCase#util_gem_bindir and
Gem::InstallerTestCase#util_gem_dir. Pull request #1729 by Jon Moss.
* Deprecate passing options to Gem::GemRunner. Pull request #1730 by Jon
Moss.
* Add deprecation for Gem#datadir. Pull request #1732 by Jon Moss.
* Add deprecation warning for Gem::DependencyInstaller#gems_to_install.
Pull request #1731 by Jon Moss.
* Update Code of Conduct to Contributor Covenant v1.4.0. Pull request
#1796 by Matej.
Bug fixes:
* Fix issue for MinGW / MSYS2 builds and testing. Pull request #1876 by
MSP-Greg.
* Fixed broken links and overzealous URL encoding in gem server. Pull
request #1809 by Nicole Orchard.
* Fix a typo. Pull request #1722 by Koichi ITO.
* Fix error message Gem::Security::Policy. Pull request #1724 by Nobuyoshi
Nakada.
* Fixing links markdown formatting in README. Pull request #1791 by Piotr
Kuczynski.
* Fix failing Bundler 1.8.7 CI builds. Pull request #1820 by Samuel
Giddins.
* Fixed test broken on ruby-head . Pull request #1842 by SHIBATA Hiroshi.
* Fix typos with misspell. Pull request #1846 by SHIBATA Hiroshi.
* Fix gem open to open highest version number rather than lowest. Pull
request #1877 by Tim Pope.
* Fix test_self_find_files_with_gemfile to sort expected files. Pull
request #1878 by Kazuaki Matsuo.
* Fix typos in CONTRIBUTING.rdoc. Pull request #1909 by Mark Sayson.
* Fix some small documentation issues in installer. Pull request #1972 by
Colby Swandale.
* Fix links in Policies document. Pull request #1964 by Alyssa Ross.
* Fix NoMethodError on bundler/inline environment. Pull request #2042 by
SHIBATA Hiroshi.
* Correct comments for Gem::InstallerTestCase#setup. Pull request #1741 by
MSP-Greg.
* Use File.expand_path for certification and key location. Pull request
#1987 by SHIBATA Hiroshi.
* Rescue EROFS. Pull request #1417 by Nobuyoshi Nakada.
* Fix spelling of 'vulnerability'. Pull request #2022 by Philip Arndt.
* Fix metadata link key names. Pull request #1896 by Aditya Prakash.
* Fix a typo in uninstall_command.rb. Pull request #1934 by Yasuhiro
Horimoto.
* Gem::Requirement.create treat arguments as variable-length. Pull request
#1830 by Toru YAGI.
* Display an explanation when rake encounters an ontological problem. Pull
request #1982 by Wilson Bilkovich.
* [Server] Handle gems with names ending in `-\d`. Pull request #1926 by
Samuel Giddins.
* [InstallerSet] Avoid reloading _all_ local gems multiple times during
dependency resolution. Pull request #1925 by Samuel Giddins.
* Modify the return value of Gem::Version.correct?. Pull request #1916 by
Tsukuru Tanimichi.
* Validate metadata link keys. Pull request #1834 by Aditya Prakash.
* Add changelog to metadata validation. Pull request #1885 by Aditya
Prakash.
* Replace socket error text message. Pull request #1823 by Daniel Berger.
* Raise error if the email is invalid when building cert. Pull request
#1779 by Luis Sagastume.
* [StubSpecification] Don’t iterate through all loaded specs in #to_spec.
Pull request #1738 by Samuel Giddins.
=== 2.6.14 / 2017-10-09
Security fixes:
* Whitelist classes and symbols that are in loaded YAML.
See CVE-2017-0903 for full details.
Fix by Aaron Patterson.
=== 2.6.13 / 2017-08-27
Security fixes:
* Fix a DNS request hijacking vulnerability. (CVE-2017-0902)
Discovered by Jonathan Claudius, fix by Samuel Giddins.
* Fix an ANSI escape sequence vulnerability. (CVE-2017-0899)
Discovered by Yusuke Endoh, fix by Evan Phoenix.
* Fix a DOS vulnerability in the `query` command. (CVE-2017-0900)
Discovered by Yusuke Endoh, fix by Samuel Giddins.
* Fix a vulnerability in the gem installer that allowed a malicious gem
to overwrite arbitrary files. (CVE-2017-0901)
Discovered by Yusuke Endoh, fix by Samuel Giddins.
=== 2.6.12 / 2017-04-30
Bug fixes:
* Fix test_self_find_files_with_gemfile to sort expected files. Pull
request #1880 by Kazuaki Matsuo.
* Fix issue for MinGW / MSYS2 builds and testing. Pull request #1879 by
MSP-Greg.
* Fix gem open to open highest version number rather than lowest. Pull
request #1877 by Tim Pope.
* Add a test for requiring a default spec as installed by the ruby
installer. Pull request #1899 by Samuel Giddins.
* Fix broken --exact parameter to gem command. Pull request #1873 by Jason
Frey.
* [Installer] Generate backwards-compatible binstubs. Pull request #1904
by Samuel Giddins.
* Fix pre-existing source recognition on add action. Pull request #1883 by
Jonathan Claudius.
* Prevent negative IDs in output of #inspect. Pull request #1908 by Vít
Ondruch.
* Allow Gem.finish_resolve to respect already-activated specs. Pull
request #1910 by Samuel Giddins.
=== 2.6.11 / 2017-03-16
Bug fixes:
* Fixed broken tests on ruby-head. Pull request #1841 by
SHIBATA Hiroshi.
* Update vendored Molinillo to 0.5.7. Pull request #1859 by Samuel
Giddins.
* Avoid activating Ruby 2.5 default gems when possible. Pull request #1843
by Samuel Giddins.
* Use improved resolver sorting algorithm. Pull request #1856 by
Samuel Giddins.
=== 2.6.10 / 2017-01-23
Bug fixes:
* Fix `require` calling the wrong `gem` method when it is overridden.
Pull request #1822 by Samuel Giddins.
=== 2.6.9 / 2017-01-20
Bug fixes:
* Allow initializing versions with empty strings. Pull request #1767 by
Luis Sagastume.
* Fix TypeError on 2.4. Pull request #1788 by Nobuyoshi Nakada.
* Don't output mkmf.log message if compilation didn't fail. Pull request
#1808 by Jeremy Evans.
* Fixed broken links and overzealous URL encoding in gem server. Pull
request #1809 by Nicole Orchard.
* Update vendored Molinillo to 0.5.5. Pull request #1812 by Samuel
Giddins.
* RakeBuilder: avoid frozen string issue. Pull request #1819 by Olle
Jonsson.
=== 2.6.8 / 2016-10-29
Bug fixes:
* Improve SSL verification failure message. Pull request #1751
by Eric Hodel.
* Ensure `to_spec` falls back on prerelease specs. Pull request
#1755 by André Arko.
* Update vendored Molinillo to 0.5.3. Pull request #1763 by
Samuel Giddins.
=== 2.6.7 / 2016-09-26
Bug fixes:
* Install native extensions in the correct location when using the
`--user-install` flag. Pull request #1683 by Noah Kantrowitz.
* When calling `Gem.sources`, load sources from `configuration`
if present, else use the default sources. Pull request #1699
by Luis Sagastume.
* Fail gracefully when attempting to redirect without a Location.
Pull request #1711 by Samuel Giddins.
* Update vendored Molinillo to 0.5.1. Pull request #1714 by
Samuel Giddins.
=== 2.6.6 / 2016-06-22
Bug fixes:
* Sort installed versions to make sure we install the latest version when
running `gem update --system`. As a one-time fix, run
`gem update --system=2.6.6`. Pull request #1601 by David Radcliffe.
=== 2.6.5 / 2016-06-21
Minor enhancements:
* Support for unified Integer in Ruby 2.4. Pull request #1618
by SHIBATA Hiroshi.
* Update vendored Molinillo to 0.5.0 for performance improvements.
Pull request #1638 by Samuel Giddins.
Bug fixes:
* Raise an explicit error if Signer#sign is called with no certs. Pull
request #1605 by Daniel Berger.
* Update `update_bundled_ca_certificates` utility script for directory
nesting. Pull request #1583 by James Wen.
* Fix broken symlink support in tar writer (+ fix broken test). Pull
request #1578 by Cezary Baginski.
* Remove extension directory before (re-)installing. Pull request #1576
by Jeremy Hinegardner.
* Regenerate test CA certificates with appropriate extensions. Pull
request #1611 by rhenium.
* Rubygems does not terminate on failed file lock when not superuser. Pull
request #1582 by Ellen Marie Dash.
* Fix tar headers with a 101 character name. Pull request #1612 by Paweł
Tomulik.
* Add Gem.platform_defaults to allow implementations to override defaults.
Pull request #1644 by Charles Oliver Nutter.
* Run Bundler tests on TravisCI. Pull request #1650 by Samuel Giddins.
=== 2.6.4 / 2016-04-26
Minor enhancements:
* Use Gem::Util::NULL_DEVICE instead of hard coded strings. Pull request #1588
by Chris Charabaruk.
* Use File.symlink on MS Windows if supported. Pull request #1418
by Nobuyoshi Nakada.
Bug fixes:
* Redact uri password from error output when gem fetch fails. Pull request
#1565 by Brian Fletcher.
* Suppress warnings. Pull request #1594 by Nobuyoshi Nakada.
* Escape user-supplied content served on web pages by `gem server` to avoid
potential XSS vulnerabilities. Samuel Giddins.
=== 2.6.3 / 2016-04-05
Minor enhancements:
* Lazily calculate Gem::LoadError exception messages. Pull request #1550
by Aaron Patterson.
* New fastly cert. Pull request #1548 by David Radcliffe.
* Organize and cleanup SSL certs. Pull request #1555 by James Wen.
* [RubyGems] Make deprecation message for paths= more helpful. Pull
request #1562 by Samuel Giddins.
* Show default gems when using "gem list". Pull request #1570 by Luis
Sagastume.
Bug fixes:
* Stub ordering should be consistent regardless of how cache is populated.
Pull request #1552 by Aaron Patterson.
* Handle cases when the @@stubs variable contains non-stubs. Pull request
#1558 by Per Lundberg.
* Fix test on Windows for inconsistent temp path. Pull request #1554 by
Hiroshi Shirosaki.
* Fix `Gem.find_spec_for_exe` picks oldest gem. Pull request #1566 by
Shinichi Maeshima.
* [Owner] Fallback to email and userid when owner email is missing. Pull
request #1569 by Samuel Giddins.
* [Installer] Handle nil existing executable. Pull request #1561 by Samuel
Giddins.
* Allow two digit version numbers in the tests. Pull request #1575 by unak.
=== 2.6.2 / 2016-03-12
Bug fixes: