Skip to content

Upgrading rubygems-update 3 to 4

Breaking3.7.2 → 4.0.23Breaking9Security13Deprecated3New17Changed62Fixed56Other27

Full comparisonBack to rubygems-update
BreakingUpgrade verdict

9 breaking changes and 12 security fixes.

In plain terms
  • The internal deprecation helper module is gone.
  • Removes the deprecated `-C` option from gem build.
  • Removes deprecated Gem::Specification#has_rdoc, has_rdoc= and has_rdoc?.
  • Removes the deprecated `gem query` command.
Must act Top 5 of 24 that need code or config changes

What you must change

Breaking9
Removes unused Gem::Deprecate.
Gem::Deprecate
4.0.0GitHub ReleaseSummarizedView source
Removes the deprecated -C option from gem build.
gem build-C
4.0.0GitHub ReleaseSummarizedView source
Removes deprecated Gem::Specification#has_rdoc, has_rdoc= and has_rdoc?.
Gem::Specification#has_rdocGem::Specification#has_rdoc=Gem::Specification#has_rdoc?
4.0.0GitHub ReleaseSummarizedView source
Removes the deprecated gem query command.
gem query
4.0.0GitHub ReleaseSummarizedView source
Removes deprecated Gem::DependencyInstaller#find_gems_with_sources.
Gem::DependencyInstaller#find_gems_with_sources
4.0.0GitHub ReleaseSummarizedView source
Removes deprecated methods of RubyGems.
4.0.0GitHub ReleaseSummarizedView source
Removes compatibility.rb for RubyGems 4.0.
compatibility.rb
4.0.0GitHub ReleaseSummarizedView source
Makes verification methods private.
4.0.0GitHub ReleaseSummarizedView source
Switch to 4.0.0.dev in development version.
4.0.0.beta1GitHub ReleaseOriginalView source
Security12
Drops setuid, setgid and sticky bits when extracting gems.
4.0.23GitHub ReleaseSummarizedView source
Keeps credentials on redirects only within the same origin.
4.0.22GitHub ReleaseSummarizedView source
Rejects Bundler redirects that downgrade https to http.
4.0.21GitHub ReleaseSummarizedView source
Rejects SafeMarshal collection lengths longer than the remaining input.
SafeMarshal
4.0.19GitHub ReleaseSummarizedView source
Validates the platform field in Gem::Installer#verify_spec.
Gem::Installer#verify_spec
4.0.19GitHub ReleaseSummarizedView source
Restricts UserDefined handling to an explicit class set for Gem::SafeMarshal.
Gem::SafeMarshal
4.0.19GitHub ReleaseSummarizedView source
Filters git command output against the configured URI.
4.0.19GitHub ReleaseSummarizedView source
Redacts URI userinfo from settings names in the Bundler User-Agent.
4.0.18GitHub ReleaseSummarizedView source
Validates gem name before building compact index cache paths.
4.0.18GitHub ReleaseSummarizedView source
Prevents archive extraction from escaping destination_dir via pre-existing symlinks.
destination_dir
4.0.13GitHub ReleaseSummarizedView source
Restricts what schemes are acceptable in the remote fetcher.
4.0.0GitHub ReleaseSummarizedView source
Bumps the vendored URI library to 1.0.4.
URI
4.0.0GitHub ReleaseSummarizedView source

Deprecations to plan for

Deprecated3
Deprecates the --default option of the install command.
gem install--default
4.0.0GitHub ReleaseSummarizedView source
Deprecates Gem::Specification#datadir.
Gem::Specification#datadir
4.0.0GitHub ReleaseSummarizedView source
Deprecate comparing Gem::Version objects with strings.
4.0.0.beta2GitHub ReleaseOriginalView source