caius · GitHub

@caius changed the title Bundler/Gemfile updates/tuning Draft: Bundler/Gemfile updates/tuning

Oct 10, 2025
If gems don't exist as precompiled versions for linux and/or mac then allow bundler to compile them instead.
Without this it constantly gets added anytime you run bundler on a mac, won't affect production but means developers on macs don't have issues.
Generated by running
    $ bundle lock --add-checksums
These are updated whenever bundler adds or updates a gem in our dependencies, and ensures if a gem changes upstream after we've initially pinned it then we can detect it. (eg, someone changes the .gem file for a given version of a gem.) It's a mitigation against a supply chain attack.

@caius

@caius caius changed the title Draft: Bundler/Gemfile updates/tuning Bundler/Gemfile updates/tuning

Oct 15, 2025

@caius

caius marked this pull request as ready for review

October 15, 2025 00:05

@caius caius changed the title Bundler/Gemfile updates/tuning Upgrade Bundler, add more platforms to lockfile & checksum dependencies for security

Oct 15, 2025

@pushcx

@caius

caius deleted the cd/bundler-2.7.2-checksums-macos branch

December 27, 2025 18:15

Read the original on github.com ↗