From: "hsbt (Hiroshi SHIBATA)" Date: 2022-10-07T05:38:26+00:00 Subject: [ruby-core:110224] [Ruby master Feature#18571] Removed the bundled sources from release package after Ruby 3.2 Issue #18571 has been updated by hsbt (Hiroshi SHIBATA). I and nobu added `--with-xxx-source-dir` option for psych and fiddle instead of `--enable-bundled-libyaml`. * https://github.com/ruby/psych/pull/544 * https://github.com/ruby/fiddle/pull/113 The users who want to use newer version of libyaml or libffi environment can use this option like `gem install psych -- --with-libyaml-source-dir=$(pwd)/libyaml-0.2.5`. ---------------------------------------- Feature #18571: Removed the bundled sources from release package after Ruby 3.2 https://bugs.ruby-lang.org/issues/18571#change-99508 * Author: hsbt (Hiroshi SHIBATA) * Status: Assigned * Priority: Normal * Assignee: hsbt (Hiroshi SHIBATA) ---------------------------------------- We shipped release package with the 3rd party source for mswin environment especially. The current status is here: * libyaml: psych gem, ruby repo and package always bundled it. * libffi: only ruby package bundled it. fiddle gem and repo are not bundled. * zlib: gem, ruby repo and package don't bundled. I propose we stop bundling the third-party source for security and maintenance reasons. Because we have [vcpkg](https://github.com/microsoft/vcpkg) for mswin environment today. So, vcpkg provides the runtime for psych, fiddle and zlib. -- https://bugs.ruby-lang.org/ Unsubscribe: