home.social

#bundler_audit — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #bundler_audit, aggregated by home.social.

fetched live
  1. postmodern @[email protected] ·

    Heads Up: it appears that one of this year's RubyGSoC proposed Ideas is to add an "official" `bundle audit` command to Bundler that would override/conflict with bundler-audit's own `bundle audit` command. This has the potential of confusing bundler-audit users, potentially breaking CIs, and creating backlash (aka drama).
    github.com/rubygsoc/rubygsoc/w

    I have submitted an issue raising concerns with this proposed RubyGSoC Idea.
    github.com/rubygsoc/rubygsoc/i

    #bundler_audit #rubygsoc #gsoc2026 #gsoc

    #bundler_audit #rubygsoc #gsoc2026 #gsoc
  2. postmodern @[email protected] ·

    Just released bundler-audit 0.9.3, which officially adds support for Ruby 3.4, 3.5, 4.0, and Bundler 4.x.

    github.com/rubysec/bundler-aud
    github.com/rubysec/bundler-aud

    #ruby #bundler #rubysec #bundler_audit #bundleraudit

    #ruby #bundler #rubysec #bundler_audit #bundleraudit
  3. postmodern @[email protected] ·

    Released bundler-audit 0.9.2 fixing a few minor issues.
    github.com/rubysec/bundler-aud
    github.com/rubysec/bundler-aud

    #ruby #bundler_audit #bundleraudit #rubysec

    #ruby #bundler_audit #bundleraudit #rubysec
  4. postmodern @[email protected] ·

    "Integrating the bundle-audit security tool into Bundler"
    Wow, this is news to me. No one from RubyCentral or the Bundler team has reached out to me about this recently? While I get the idea of vendoring popular tools/libraries, I still worry we're bloating up the base Ruby install again?
    rubycentral.org/news/stf-annou
    #bundler #bundler_audit #ruby

    #bundler #bundler_audit #ruby