From: "matz (Yukihiro Matsumoto)" Date: 2022-02-17T13:05:55+00:00 Subject: [ruby-core:107632] [Ruby master Feature#18571] Removed the bundled sources from release package after Ruby 3.2 Issue #18571 has been updated by matz (Yukihiro Matsumoto). Accepted, for the record. Matz. ---------------------------------------- Feature #18571: Removed the bundled sources from release package after Ruby 3.2 https://bugs.ruby-lang.org/issues/18571#change-96543 * Author: hsbt (Hiroshi SHIBATA) * Status: Assigned * Priority: Normal * Assignee: hsbt (Hiroshi SHIBATA) ---------------------------------------- We shipped release package with the 3rd party source for mswin environment especially. The current status is here: * libyaml: psych gem, ruby repo and package always bundled it. * libffi: only ruby package bundled it. fiddle gem and repo are not bundled. * zlib: gem, ruby repo and package don't bundled. I propose we stop bundling the third-party source for security and maintenance reasons. Because we have [vcpkg](https://github.com/microsoft/vcpkg) for mswin environment today. So, vcpkg provides the runtime for psych, fiddle and zlib. -- https://bugs.ruby-lang.org/ Unsubscribe: