Skip to content

Update vendored gems to latest versions - #9948

Merged
hsbt merged 11 commits into
4.0from
update-vendored-gems-4.0
Oct 13, 2026
Merged

hsbt merged 11 commits into
4.0from
update-vendored-gems-4.0

Conversation

@hsbt

@hsbt hsbt commented Oct 13, 2026 •

Copy link
Copy Markdown
Member

I brought the vendored gems on 4.0 up to their latest releases: fileutils 1.8.1, uri 1.1.2, net-protocol 0.4.0, net-http 0.10.0, net-http-persistent 4.0.8, connection_pool 2.5.5, thor 1.5.0, timeout 0.6.1 and optparse 0.8.1. The vendored files match master apart from master-only patches. molinillo stays at its pinned commit because upstream HEAD only changes CI.

connection_pool stays on 2.x because 3.x forwards anonymous parameters inside blocks, which Ruby 3.3.0 rejects as a SyntaxError. The net-http 0.7.0 pin worked around a JRuby failure in 0.8.0 that ruby/net-http#252 fixed in 0.9.0. This targets 4.0 directly because its vendoring layout differs from master, so #9947 cannot be cherry-picked.

Generated with Claude Code

hsbt and others added 11 commits October 13, 2026 20:37
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
net-protocol now only requires io/wait on Ruby older than 3.2, so loading it no longer prints the io-wait 1.0.0 deprecation warning. The gem ships its license as COPYING instead of LICENSE.txt.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
The 0.7.0 pin avoided the open_timeout probe that broke 0.8.0 on JRuby, which ruby/net-http#252 replaced in 0.9.0. net-http now also declares its dependency on net-protocol, so the vendoring tool no longer lists it as an extra dependency.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Upstream now handles the cgi/escape fallback and parses no_proxy with URI.decode_www_form itself, so the vendoring patch shrinks to the require rewrites and pipeline removal.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
net-http-persistent 4.0.8 detects the keyword-argument API of connection_pool 3.x, so the 2.x pin is no longer needed.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
The hidden-command exclusion in find_command_possibilities was merged upstream, so the patch now only strips LCSDiff and guards the pathname require.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
connection_pool 3.x forwards anonymous parameters inside blocks, which Ruby 3.3.0 rejects as a SyntaxError. Bundler 4.0 still supports Ruby 3.3.0, so stay on the latest 2.x release.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@hsbt
hsbt merged commit 7534fd1 into 4.0 Oct 13, 2026
89 checks passed
@hsbt
hsbt deleted the update-vendored-gems-4.0 branch October 13, 2026 23:37
@hsbt hsbt changed the title Update vendored gems on the 4.0 branch Update vendored gems to latest versions Oct 13, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant