chore(deps): update dependency gem:bundler to v4.0.15

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
gem:bundler (source, changelog)	4.0.4 → 4.0.15

---

Release Notes

ruby/rubygems (gem:bundler)

v4.0.15

Compare Source

Enhancements:

• Resolve Git LFS files in git sources from the real remote. Pull request #​9632 by hsbt
• Suggest access issues, not only yanking, for missing locked gems. Pull request #​9631 by hsbt
• Implement a make jobserver (continuation of #​9210). Pull request #​9625 by hsbt
• Reduce peak memory usage of full index loading and bundle install. Pull request #​9618 by hsbt
• Bump up to rb-sys 0.9.128. Pull request #​9569 by hsbt

Bug fixes:

• Skip the make jobserver on Windows. Pull request #​9630 by hsbt
• Don't require source plugins to be installed to parse a lockfile: 4.0.x. Pull request #​9621 by hsbt
• Exempt lockfile versions from cooldown on every resolution path. Pull request #​9619 by hsbt
• Set Bundler.settings[:ssl_ca_cert] to download gems. Pull request #​9610 by junaruga

v4.0.14

Compare Source

Bug fixes:

• Preserve per-source cooldown when converging sources from the lockfile. Pull request #​9601 by bryanwoods
• Don't exclude the locked version from cooldown during bundle update. Pull request #​9599 by hsbt

v4.0.13

Compare Source

Enhancements:

• Do not hard-code permissions for new gem directories during bundle install. Pull request #​9557 by maxfelsher-cgi
• Clear gem specification cache after acquiring process lock. Pull request #​9310 by ngan
• Show release date with bundle outdated. Pull request #​9337 by hsbt

Bug fixes:

• Apply cooldown to locally installed gem versions. Pull request #​9582 by hsbt

Security:

• Add cooldown to delay newly published gem. Pull request #​9576 by hsbt

v4.0.12

Compare Source

Enhancements:

• Make bundle config get return status 1 when the value is not set. Pull request #​9505 by willnet
• Use Pathname#absolute?. Pull request #​9529 by nobu
• Deprecate parsing non-lockfile content in LockfileParser. Pull request #​9502 by kurotaky
• Print a warning for a potential confusion from the indirect dependencies. Pull request #​5029 by junaruga
• Respect Gemfile bundler setting in Bundler.setup. Pull request #​4892 by godfat

Bug fixes:

• Gracefully handle missing checksums in Compact Index. Pull request #​9492 by jneen
• Skip git source exclusion when lockfile cannot backfill. Pull request #​9544 by yahonda
• Fix bundle config gemfile unset behavior. Pull request #​9514 by afurm

v4.0.11

Compare Source

Enhancements:

• Update gem creation guide URL to rubygems.org. Pull request #​9500 by nissyi-gh
• Lock the checksum of Bundler itself in the lockfile. Pull request #​9366 by Edouard-chin

Bug fixes:

• Fix installing gems with native extensions + transitive dependencies. Pull request #​9477 by nicholasdower
• Fix the bundler version not being updated in dev/test lockfile. Pull request #​9463 by Edouard-chin
• Ensure the release CI doesn't break due to the Bundler checksum feature. Pull request #​9436 by Edouard-chin

Documentation:

• Fix formatting for BUNDLE_PREFER_PATCH variable in man page. Pull request #​9474 by toy

v4.0.10

Compare Source

Enhancements:

• Ignore warnings with spec different platforms. Pull request #​8508 by hsbt
• Improve error message when current platform is not in lockfile. Pull request #​9439 by 55728
• Cache package version selection. Pull request #​9410 by Edouard-chin
• Check happy path first when comparing gem version. Pull request #​9417 by Edouard-chin
• [feature] default_cli_command for config what command bundler runs when no specific command is provided. Pull request #​8886 by jonbarlo
• Introduce a fast path for comparing Gem::Version. Pull request #​9414 by Edouard-chin

Bug fixes:

• Restore rb_sys dependency for Rust. Pull request #​9416 by bangseongbeom

v4.0.9

Compare Source

Enhancements:

• Check the git version only once per bundle install. Pull request #​9406 by Edouard-chin
• Normalize the number of workers when performing parallel operations. Pull request #​9400 by Edouard-chin
• Add exponential backoff to bundler retries. Pull request #​9163 by ChrisBr
• Introduce a priority queue. Pull request #​9389 by Edouard-chin
• Split the download and install process of a gem. Pull request #​9381 by Edouard-chin

Bug fixes:

• Retry git fetch without --depth for dumb HTTP transport. Pull request #​9405 by hsbt

v4.0.8

Compare Source

Enhancements:

• Add a new Bundler config to control how many specs are fetched #​9363
• Restrict GitHub Actions workflow permissions for newgem #​9361

Bug fixes:

• Fix plugin new version not registering #​9355

v4.0.7

Compare Source

Enhancements:

• Don't check whether a plugin needs to be installed: #​9328
• [rust gem] Major improvements for gem scaffolding (rebased) #​8455
• Fix(bundler): only preload git sources for requested groups #​9234
• Raise error when gem contains capital letters #​5432

Bug fixes:

• Fix Bundler crashing when it tries to install plugin: #​9335
• Run git operations in parallel (take 2): #​9323
• Add support for help flag in plugin commands #​9263

Documentation:

• [DOC] Fix link in Bundler #​9315

v4.0.6

Compare Source

Bug fixes:

• Fix gzip cache corruption when recovering from HTTP 416 responses #​9272
• Fallback git/path sources to default source #​9301
• Ensure revision is always re-resolved in git_proxy.rb #​9294

Documentation:

• Clarify local gem override docs to require git-sourced gems #​9305

v4.0.5

Compare Source

Enhancements:

• Fix Bundler that re-exec $0 when a version is present in the config: #​9249

Bug fixes:

• Only use parent source with Git and Path sources #​9269

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.