From: "hsbt (Hiroshi SHIBATA)" Date: 2022-02-17T11:25:09+00:00 Subject: [ruby-core:107626] [Ruby master Feature#18571] Removed the bundled sources from release package after Ruby 3.2 Issue #18571 has been updated by hsbt (Hiroshi SHIBATA). Assignee set to hsbt (Hiroshi SHIBATA) Status changed from Open to Assigned We decided on the following policy. * We will remove the bundled sources from ruby repo. * @hsbt is working now for psych and fiddle. * If users put the third-party source under the ruby packages, ruby build system use them. ---------------------------------------- Feature #18571: Removed the bundled sources from release package after Ruby 3.2 https://bugs.ruby-lang.org/issues/18571#change-96536 * Author: hsbt (Hiroshi SHIBATA) * Status: Assigned * Priority: Normal * Assignee: hsbt (Hiroshi SHIBATA) ---------------------------------------- We shipped release package with the 3rd party source for mswin environment especially. The current status is here: * libyaml: psych gem, ruby repo and package always bundled it. * libffi: only ruby package bundled it. fiddle gem and repo are not bundled. * zlib: gem, ruby repo and package don't bundled. I propose we stop bundling the third-party source for security and maintenance reasons. Because we have [vcpkg](https://github.com/microsoft/vcpkg) for mswin environment today. So, vcpkg provides the runtime for psych, fiddle and zlib. -- https://bugs.ruby-lang.org/ Unsubscribe: