Publish RubyGems Monthly Updates for March 2023

[lauragift21]

RubyGems update roundup for March 2023.

Hi @deivid-rodriguez, can you help review this month's update to ensure I accurately captured the work done last month?

[mensfeld]

Shouldn't we mention the browning / reaction to it on our API? I'm not sure where we stand with this but it did cause some havoc ;)

[lauragift21]

Shouldn't we mention the browning / reaction to it on our API? I'm not sure where we stand with this but it did cause some havoc ;)

Sure, I'm happy to include it, I will be curious to hear what @indirect or @deivid-rodriguez thoughts are on this.

[deivid-rodriguez]

I'd group the client side improvements into:

• Enhance dealing with tar files to support future server side gem content navigation feature (Remove side-effect of GEM_HOME configuration for some tests rubygems#6461, Improve TarHeader#calculate_checksum speed and readability rubygems#6476).
• Improved auto-healing of corrupted lockfiles and fixed some related regressions (Auto-heal on corrupted lockfile with missing deps rubygems#6400, Auto-heal corrupted Gemfile.lock with no specs rubygems#6423, Fix resolver hangs when dealing with an incomplete lockfile rubygems#6552, Fix incorrect ruby platform removal from lockfile when adding Gemfile dependencies rubygems#6540, Restore "enumerability" of SpecSet rubygems#6532, Fix incorrect removal of ruby platform when auto-healing corrupted lockfiles rubygems#6495).
• Fix some resolution edge cases (Better deal with circular dependencies rubygems#6330, Don't consider platform specific candidates when force_ruby_platform set rubygems#6442, Don't ignore pre-releases when there's only one candidate rubygems#6441, Fix some unnecessary top level dependency downgrades rubygems#6535

Even if not end user visible improvements, I'd also mention @hsbt's efforts to unify RubyGems & Bundler codebase.

And even if not yet release, I think it's also worth mentioning efforts to support WebAuthn from the CLI (rubygems/rubygems#6523).

The other improvements included in the initial list (rubygems/rubygems#6413, rubygems/rubygems#6537, rubygems/rubygems#6428, rubygems/rubygems#6461), I'd probably move them to a "Other improvements" section.

Regarding the dependency API brown out, I do think it's worth mentioning it in the rubygems.org news.

[lauragift21]

dependency API brown out

Hi @mensfeld, This was covered in the previous RubyGems.org update: https://blog.rubygems.org/2023/03/11/february-rubygems-updates.html

[mensfeld]

@lauragift21 thank you 🙏

[lauragift21]

I'd group the client side improvements into:

• Enhance dealing with tar files to support future server side gem content navigation feature (Remove side-effect of GEM_HOME configuration for some tests rubygems#6461, Improve TarHeader#calculate_checksum speed and readability rubygems#6476).
• Improved auto-healing of corrupted lockfiles and fixed some related regressions (Auto-heal on corrupted lockfile with missing deps rubygems#6400, Auto-heal corrupted Gemfile.lock with no specs rubygems#6423, Fix resolver hangs when dealing with an incomplete lockfile rubygems#6552, Fix incorrect ruby platform removal from lockfile when adding Gemfile dependencies rubygems#6540, Restore "enumerability" of SpecSet rubygems#6532, Fix incorrect removal of ruby platform when auto-healing corrupted lockfiles rubygems#6495).
• Fix some resolution edge cases (Better deal with circular dependencies rubygems#6330, Don't consider platform specific candidates when force_ruby_platform set rubygems#6442, Don't ignore pre-releases when there's only one candidate rubygems#6441, Fix some unnecessary top level dependency downgrades rubygems#6535

Even if not end user visible improvements, I'd also mention @hsbt's efforts to unify RubyGems & Bundler codebase.

And even if not yet release, I think it's also worth mentioning efforts to support WebAuthn from the CLI (rubygems/rubygems#6523).

The other improvements included in the initial list (rubygems/rubygems#6413, rubygems/rubygems#6537, rubygems/rubygems#6428, rubygems/rubygems#6461), I'd probably move them to a "Other improvements" section.

Regarding the dependency API brown out, I do think it's worth mentioning it in the rubygems.org news.

Hey @deivid-rodriguez I'm cross-checking to see if #6461 relates to dealing with tar files. I checked the description of the PR and it doesn't look like it. Could you help clarify?

[deivid-rodriguez]

That's my mistake @lauragift21, sorry. I meant to link to rubygems/rubygems#6494, thanks for catching it!