From: "hsbt (Hiroshi SHIBATA)" Date: 2022-11-17T09:12:15+00:00 Subject: [ruby-core:110794] [Ruby master Feature#18571] Removed the bundled sources from release package after Ruby 3.2 Issue #18571 has been updated by hsbt (Hiroshi SHIBATA). Target version set to 3.2 We should add the additional options and instructions to document or NEWS. ---------------------------------------- Feature #18571: Removed the bundled sources from release package after Ruby 3.2 https://bugs.ruby-lang.org/issues/18571#change-100150 * Author: hsbt (Hiroshi SHIBATA) * Status: Assigned * Priority: Normal * Assignee: hsbt (Hiroshi SHIBATA) * Target version: 3.2 ---------------------------------------- We shipped release package with the 3rd party source for mswin environment especially. The current status is here: * libyaml: psych gem, ruby repo and package always bundled it. * libffi: only ruby package bundled it. fiddle gem and repo are not bundled. * zlib: gem, ruby repo and package don't bundled. I propose we stop bundling the third-party source for security and maintenance reasons. Because we have [vcpkg](https://github.com/microsoft/vcpkg) for mswin environment today. So, vcpkg provides the runtime for psych, fiddle and zlib. -- https://bugs.ruby-lang.org/ Unsubscribe: