From: "hsbt (Hiroshi SHIBATA)" Date: 2022-08-31T07:28:45+00:00 Subject: [ruby-core:109797] [Ruby master Feature#18571] Removed the bundled sources from release package after Ruby 3.2 Issue #18571 has been updated by hsbt (Hiroshi SHIBATA). The current distributed package still contained libyaml and libffi sources. We will remove them and introduce the instructions to download them when building ruby like `./configure --enable-download-source`. ---------------------------------------- Feature #18571: Removed the bundled sources from release package after Ruby 3.2 https://bugs.ruby-lang.org/issues/18571#change-99037 * Author: hsbt (Hiroshi SHIBATA) * Status: Assigned * Priority: Normal * Assignee: hsbt (Hiroshi SHIBATA) ---------------------------------------- We shipped release package with the 3rd party source for mswin environment especially. The current status is here: * libyaml: psych gem, ruby repo and package always bundled it. * libffi: only ruby package bundled it. fiddle gem and repo are not bundled. * zlib: gem, ruby repo and package don't bundled. I propose we stop bundling the third-party source for security and maintenance reasons. Because we have [vcpkg](https://github.com/microsoft/vcpkg) for mswin environment today. So, vcpkg provides the runtime for psych, fiddle and zlib. -- https://bugs.ruby-lang.org/ Unsubscribe: