[ruby-on-rails] Bump Gemfile and Bundler ro 4.0.11

[hayat01sh1da]

1. Overview

This document summarizes the differences between Bundler versions 4.0.10 (released April 8, 2026) and 4.0.11 (released April 30, 2026). The comparison includes 25 commits over 22 days with changes across performance, features, bug fixes, and documentation.

• CHANGELOG
  • 4.0.10
  • 4.0.11
• Diffs

2. Version Release Details

2-1. Version 4.0.10

• Release Date: April 8, 2026
• Key Focus: Performance optimization, platform improvements, and feature additions

2-2. Version 4.0.11

• Release Date: April 30, 2026
• Key Focus: Checksum locking for Bundler itself, bug fixes for native extensions, and documentation improvements

3. Enhancements

3-1. Version 4.0.10 Enhancements

1. Performance Optimization:
   • Cache package version selection (PR Cache package version selection ruby/rubygems#9410)
   • Introduce a fast path for comparing Gem::Version (PR Introduce a fast path for comparing Gem::Version ruby/rubygems#9414)
   • Check happy path first when comparing gem version (PR Check happy path first when comparing gem version ruby/rubygems#9417)
2. Platform Handling:
   • Ignore warnings with spec different platforms (PR Ignore warnings with spec different platforms ruby/rubygems#8508)
   • Improve error message when current platform is not in lockfile (PR Improve error message when current platform is not in lockfile ruby/rubygems#9439)
3. Feature Addition:
   • default_cli_command for config: Allows specifying what command Bundler runs when no specific command is provided (PR [feature] default_cli_command for config what command bundler runs when no specific command is provided ruby/rubygems#8886)

3-2. Version 4.0.11 Enhancements

1. Gem Creation Documentation:
   • Update gem creation guide URL to rubygems.org (PR Update gem creation guide URL to rubygems.org ruby/rubygems#9500)
2. Lockfile Checksum Feature:
   • Lock the checksum of Bundler itself in the lockfile (PR Lock the checksum of Bundler itself in the lockfile ruby/rubygems#9366)
   • This ensures Bundler integrity is verified during installation

4. Bug Fixes

4-1. Version 4.0.10 Bug Fixes

1. Dependency Management:
   • Restore rb_sys dependency for Rust (PR Restore rb_sys dependency for Rust ruby/rubygems#9416)
   • Addresses critical Rust extension build requirements

4-2. Version 4.0.11 Bug Fixes

1. Native Extensions with Transitive Dependencies:
   • Fix installing gems with native extensions + transitive dependencies (PR Fix installing gems with native extensions + transitive dependencies ruby/rubygems#9477)
   • Resolves installation issues where gems with C/Rust extensions and multiple dependency layers failed
2. Bundler Version Tracking:
   • Fix the bundler version not being updated in dev/test lockfile (PR Fix the bundler version not being updated in dev/test lockfile ruby/rubygems#9463)
   • Ensures lockfile reflects the correct Bundler version during development
3. CI/Release Process:
   • Ensure the release CI doesn't break due to the Bundler checksum feature (PR Ensure the release CI doesn't break due to the Bundler checksum feature ruby/rubygems#9436)
   • Addresses CI failures when using the new checksum validation feature:
     • Skip bundler self-checksum for unreleased bundlers (PR Skip bundler self-checksum for unreleased bundlers ruby/rubygems#9501)
     • Skip bundler self-checksum on ruby-core in test fixtures (PR Skip bundler self-checksum on ruby-core in test fixtures ruby/rubygems#9506)
     • Replace targeted :ruby_repo skip (PR not specified)

5. Code Quality & Maintenance

5-1. Version 4.0.11 Improvements

1. Formatting & Style Fixes:
   • Fix inconsistent indentation at line 481 in git_spec.rb
   • Fix lockfile DEPENDENCIES section to use 'rubocop' instead of 'parallel'
   • Fix test_execute_allowed_push_host response message to match expected format
   • Fix typo in test description: 'to' -> 'do'
   • Use distinct gemspec filenames in stub_with_version and stub_without_version
   • Fix grammar in gem installer cache comment
2. Test Improvements:
   • Various test naming and structure fixes to improve maintainability
3. Documentation:
   • Fix formatting for BUNDLE_PREFER_PATCH variable in man page (PR fix formatting for BUNDLE_PREFER_PATCH variable in man page ruby/rubygems#9474)

6. Feature Additions by Category

6-1. Version 4.0.10 Feature Categories

Category	Feature	PR
Performance	Version selection caching	ruby/rubygems#9410
Performance	Fast path for Gem::Version comparison	ruby/rubygems#9414
Performance	Happy path optimization	ruby/rubygems#9417
Platform	Ignore platform-specific spec warnings	ruby/rubygems#8508
Platform	Error message improvement	ruby/rubygems#9439
CLI	default_cli_command config option	ruby/rubygems#8886

6-2. Version 4.0.11 Feature Categories

Category	Feature	PR
Security	Bundler checksum locking	ruby/rubygems#9366
Documentation	Gem creation URL update	ruby/rubygems#9500
Reliability	Native extension + transitive deps	ruby/rubygems#9477
Tracking	Bundler version in lockfile	ruby/rubygems#9463
CI/Testing	Checksum feature CI support	ruby/rubygems#9436, ruby/rubygems#9501, ruby/rubygems#9506

7. Key Differences Summary

7-1. Performance Focus

• 4.0.10: Heavily focused on runtime performance optimization through caching and fast paths
• 4.0.11: Focus shifts to stability and correctness over performance

7-2. Feature Stability

• 4.0.10: Introduces new features and optimizations
• 4.0.11: Stabilizes new checksum feature introduced post-4.0.10, fixes related CI issues

7-3. Scope of Changes

• 4.0.10: 4 main enhancements, 1 bug fix (~5 commits)
• 4.0.11: 2 enhancements, 3 major bug fix categories, extensive code quality improvements (~20 commits)

7-4. Developer Experience

• 4.0.10: Improves error messages and platform handling for end users
• 4.0.11: Improves CI reliability and checksum validation for both end users and release process

8. Commit Statistics (4.0.10...4.0.11)

• Total Commits: 25
• Commits on Apr 8, 2026: 2-4 (4.0.10 release preparation)
• Commits on Apr 30, 2026: 20+ (4.0.11 development and release)
• Files Changed: 67
• Key Contributors: hsbt, Edouard-chin, Claude (via Copilot), and others

9. Bundler Checksum Feature (4.0.11 Major Addition)

9-1. Overview

The new checksum locking feature in 4.0.11 represents the most significant addition between these versions:

• Purpose: Verify the integrity of Bundler itself in lockfiles
• Implementation: Stores Bundler checksum similar to gem checksums
• CI Impact: Required special handling for:
  • Unreleased Bundler versions
  • Test fixtures using ruby-core
  • Development lockfiles

9-2. Related Fixes

Multiple commits were needed to stabilize this feature:

• PR Fix the bundler version not being updated in dev/test lockfile ruby/rubygems#9463: Update bundler version in dev/test lockfiles
• PR Ensure the release CI doesn't break due to the Bundler checksum feature ruby/rubygems#9436: Graceful handling in release CI
• PR Skip bundler self-checksum for unreleased bundlers ruby/rubygems#9501: Skip self-checksum for unreleased bundlers
• PR Skip bundler self-checksum on ruby-core in test fixtures ruby/rubygems#9506: Skip self-checksum on ruby-core fixtures

10. Migration Notes from 4.0.10 to 4.0.11

10-1. For End Users

1. Checksum Validation: Bundler checksums will now be validated
2. Lockfile Changes: New bundler entry may appear in lockfile DEPENDENCIES section
3. Performance: Negligible performance impact; native extension installation more reliable

10-2. For CI/Release Systems

1. Ruby-core: Skip Bundler self-checksum for ruby-core CI environments
2. Unreleased Versions: Configure checksum skipping for pre-release Bundler versions
3. Lockfile Updates: Ensure dev/test lockfiles are updated with correct Bundler version

11. Technical Improvements Summary

Aspect	4.0.10	4.0.11
Performance	⭐⭐⭐⭐⭐	⭐⭐⭐⭐
Stability	⭐⭐⭐⭐	⭐⭐⭐⭐⭐
Features	⭐⭐⭐⭐	⭐⭐⭐
Documentation	⭐⭐⭐	⭐⭐⭐⭐
Code Quality	⭐⭐⭐⭐	⭐⭐⭐⭐⭐
CI/Testing	⭐⭐⭐	⭐⭐⭐⭐⭐

[hayat01sh1da]

[hayat01sh1da]