RubyGems 4.1.0.beta3 Released With Updated Bundler 4.1.0.beta3
The latest pre-release of RubyGems and Bundler introduces syntax changes for Gemfile overrides alongside several security, stability, and bug fixes.
RubyGems 4.1.0.beta3 ships with Bundler 4.1.0.beta3 as a default gem. Published on October 28 under commit cd7536a, this pre-release requires explicit opt-in.
Gemfile authors must update the override option. Keys from: and to: are renamed to in: and with: in pull request #9979 by Hiroshi SHIBATA. Additionally, pull request #9958 by Ufuk Kayserilioglu adds an OVERRIDES section to Gemfile.lock for recording these overrides.
Bug fixes in Bundler include Bundler::Source::Rubygems#hash now agreeing with eql?. Also, Farid Zakaria contributed a fix where bundle lock adds checksums after platform changes. Islam Elsayed fixed BUNDLE_RETRY so it applies to lazy gemspec downloads, and Shai fixed Git sources sharing a cache so they preload sequentially.
RubyGems fixes handle missing bin directories by skipping executable removal gracefully, courtesy of Evan Li and Hiroshi SHIBATA in pull request #9963. Mike Dalessio contributed pull request #9969, which turns off echo before password prompts.
Finally, pull request #9930 by Richard Janita and Hiroshi SHIBATA fixes file locks that previously allowed multiple processes in when lock files were removed.