[ruby-core:107481] [Ruby master Feature#18571] Removed the bundled sources from release package after Ruby 3.2

[ruby-core:107481] [Ruby master Feature#18571] Removed the bundled sources from release package after Ruby 3.2

[hsbt (Hiroshi SHIBATA)]

Issue #18571 has been reported by hsbt (Hiroshi SHIBATA).

----------------------------------------
Feature #18571: Removed the bundled sources from release package after Ruby 3.2
https://bugs.ruby-lang.org/issues/18571

* Author: hsbt (Hiroshi SHIBATA)
* Status: Open
* Priority: Normal
----------------------------------------
We shipped release package with the 3rd party source for mswin environment especially. 

The current status is here:

 * libyaml: psych gem, ruby repo and package always bundled it.
 * libffi: only ruby package bundled it. fiddle gem and repo are not bundled.
 * zlib: gem, ruby repo and package don't bundled.

I propose we stop bundling the third-party source for security and maintenance reasons. Because we have [vcpkg](https://github.com/microsoft/vcpkg) for mswin environment today. So, vcpkg provides the runtime for psych, fiddle and zlib.






-- 
https://bugs.ruby-lang.org/

[ruby-core:107585] [Ruby master Feature#18571] Removed the bundled sources from release package after Ruby 3.2

[mame (Yusuke Endoh)]

Issue #18571 has been updated by mame (Yusuke Endoh).


@tenderlovemaking's comment for psych and libffi: https://github.com/ruby/psych/issues/535

----------------------------------------
Feature #18571: Removed the bundled sources from release package after Ruby 3.2
https://bugs.ruby-lang.org/issues/18571#change-96496

* Author: hsbt (Hiroshi SHIBATA)
* Status: Open
* Priority: Normal
----------------------------------------
We shipped release package with the 3rd party source for mswin environment especially. 

The current status is here:

 * libyaml: psych gem, ruby repo and package always bundled it.
 * libffi: only ruby package bundled it. fiddle gem and repo are not bundled.
 * zlib: gem, ruby repo and package don't bundled.

I propose we stop bundling the third-party source for security and maintenance reasons. Because we have [vcpkg](https://github.com/microsoft/vcpkg) for mswin environment today. So, vcpkg provides the runtime for psych, fiddle and zlib.






-- 
https://bugs.ruby-lang.org/

[ruby-core:107626] [Ruby master Feature#18571] Removed the bundled sources from release package after Ruby 3.2

[hsbt (Hiroshi SHIBATA)]

Issue #18571 has been updated by hsbt (Hiroshi SHIBATA).

Assignee set to hsbt (Hiroshi SHIBATA)
Status changed from Open to Assigned

We decided on the following policy.

* We will remove the bundled sources from ruby repo.
  * @hsbt is working now for psych and fiddle.
* If users put the third-party source under the ruby packages, ruby build system use them.


----------------------------------------
Feature #18571: Removed the bundled sources from release package after Ruby 3.2
https://bugs.ruby-lang.org/issues/18571#change-96536

* Author: hsbt (Hiroshi SHIBATA)
* Status: Assigned
* Priority: Normal
* Assignee: hsbt (Hiroshi SHIBATA)
----------------------------------------
We shipped release package with the 3rd party source for mswin environment especially. 

The current status is here:

 * libyaml: psych gem, ruby repo and package always bundled it.
 * libffi: only ruby package bundled it. fiddle gem and repo are not bundled.
 * zlib: gem, ruby repo and package don't bundled.

I propose we stop bundling the third-party source for security and maintenance reasons. Because we have [vcpkg](https://github.com/microsoft/vcpkg) for mswin environment today. So, vcpkg provides the runtime for psych, fiddle and zlib.






-- 
https://bugs.ruby-lang.org/

[ruby-core:107632] [Ruby master Feature#18571] Removed the bundled sources from release package after Ruby 3.2

[matz (Yukihiro Matsumoto)]

Issue #18571 has been updated by matz (Yukihiro Matsumoto).


Accepted, for the record.

Matz.


----------------------------------------
Feature #18571: Removed the bundled sources from release package after Ruby 3.2
https://bugs.ruby-lang.org/issues/18571#change-96543

* Author: hsbt (Hiroshi SHIBATA)
* Status: Assigned
* Priority: Normal
* Assignee: hsbt (Hiroshi SHIBATA)
----------------------------------------
We shipped release package with the 3rd party source for mswin environment especially. 

The current status is here:

 * libyaml: psych gem, ruby repo and package always bundled it.
 * libffi: only ruby package bundled it. fiddle gem and repo are not bundled.
 * zlib: gem, ruby repo and package don't bundled.

I propose we stop bundling the third-party source for security and maintenance reasons. Because we have [vcpkg](https://github.com/microsoft/vcpkg) for mswin environment today. So, vcpkg provides the runtime for psych, fiddle and zlib.






-- 
https://bugs.ruby-lang.org/

[ruby-core:109797] [Ruby master Feature#18571] Removed the bundled sources from release package after Ruby 3.2

[hsbt (Hiroshi SHIBATA)]

Issue #18571 has been updated by hsbt (Hiroshi SHIBATA).


The current distributed package still contained libyaml and libffi sources.

We will remove them and introduce the instructions to download them when building ruby like `./configure --enable-download-source`. 

----------------------------------------
Feature #18571: Removed the bundled sources from release package after Ruby 3.2
https://bugs.ruby-lang.org/issues/18571#change-99037

* Author: hsbt (Hiroshi SHIBATA)
* Status: Assigned
* Priority: Normal
* Assignee: hsbt (Hiroshi SHIBATA)
----------------------------------------
We shipped release package with the 3rd party source for mswin environment especially. 

The current status is here:

 * libyaml: psych gem, ruby repo and package always bundled it.
 * libffi: only ruby package bundled it. fiddle gem and repo are not bundled.
 * zlib: gem, ruby repo and package don't bundled.

I propose we stop bundling the third-party source for security and maintenance reasons. Because we have [vcpkg](https://github.com/microsoft/vcpkg) for mswin environment today. So, vcpkg provides the runtime for psych, fiddle and zlib.






-- 
https://bugs.ruby-lang.org/

[ruby-core:109891] [Ruby master Feature#18571] Removed the bundled sources from release package after Ruby 3.2

[hsbt (Hiroshi SHIBATA)]

Issue #18571 has been updated by hsbt (Hiroshi SHIBATA).


commit:e4f5296f065110fa83eb450d3a861253e76e534f removed them.

----------------------------------------
Feature #18571: Removed the bundled sources from release package after Ruby 3.2
https://bugs.ruby-lang.org/issues/18571#change-99134

* Author: hsbt (Hiroshi SHIBATA)
* Status: Assigned
* Priority: Normal
* Assignee: hsbt (Hiroshi SHIBATA)
----------------------------------------
We shipped release package with the 3rd party source for mswin environment especially. 

The current status is here:

 * libyaml: psych gem, ruby repo and package always bundled it.
 * libffi: only ruby package bundled it. fiddle gem and repo are not bundled.
 * zlib: gem, ruby repo and package don't bundled.

I propose we stop bundling the third-party source for security and maintenance reasons. Because we have [vcpkg](https://github.com/microsoft/vcpkg) for mswin environment today. So, vcpkg provides the runtime for psych, fiddle and zlib.






-- 
https://bugs.ruby-lang.org/

[ruby-core:110224] [Ruby master Feature#18571] Removed the bundled sources from release package after Ruby 3.2

[hsbt (Hiroshi SHIBATA)]

Issue #18571 has been updated by hsbt (Hiroshi SHIBATA).


I and nobu added `--with-xxx-source-dir` option for psych and fiddle instead of `--enable-bundled-libyaml`.

* https://github.com/ruby/psych/pull/544
* https://github.com/ruby/fiddle/pull/113

The users who want to use newer version of libyaml or libffi environment can use this option like `gem install psych -- --with-libyaml-source-dir=$(pwd)/libyaml-0.2.5`.


----------------------------------------
Feature #18571: Removed the bundled sources from release package after Ruby 3.2
https://bugs.ruby-lang.org/issues/18571#change-99508

* Author: hsbt (Hiroshi SHIBATA)
* Status: Assigned
* Priority: Normal
* Assignee: hsbt (Hiroshi SHIBATA)
----------------------------------------
We shipped release package with the 3rd party source for mswin environment especially. 

The current status is here:

 * libyaml: psych gem, ruby repo and package always bundled it.
 * libffi: only ruby package bundled it. fiddle gem and repo are not bundled.
 * zlib: gem, ruby repo and package don't bundled.

I propose we stop bundling the third-party source for security and maintenance reasons. Because we have [vcpkg](https://github.com/microsoft/vcpkg) for mswin environment today. So, vcpkg provides the runtime for psych, fiddle and zlib.






-- 
https://bugs.ruby-lang.org/

[ruby-core:110794] [Ruby master Feature#18571] Removed the bundled sources from release package after Ruby 3.2

[hsbt (Hiroshi SHIBATA)]

Issue #18571 has been updated by hsbt (Hiroshi SHIBATA).

Target version set to 3.2

We should add the additional options and instructions to document or NEWS.

----------------------------------------
Feature #18571: Removed the bundled sources from release package after Ruby 3.2
https://bugs.ruby-lang.org/issues/18571#change-100150

* Author: hsbt (Hiroshi SHIBATA)
* Status: Assigned
* Priority: Normal
* Assignee: hsbt (Hiroshi SHIBATA)
* Target version: 3.2
----------------------------------------
We shipped release package with the 3rd party source for mswin environment especially. 

The current status is here:

 * libyaml: psych gem, ruby repo and package always bundled it.
 * libffi: only ruby package bundled it. fiddle gem and repo are not bundled.
 * zlib: gem, ruby repo and package don't bundled.

I propose we stop bundling the third-party source for security and maintenance reasons. Because we have [vcpkg](https://github.com/microsoft/vcpkg) for mswin environment today. So, vcpkg provides the runtime for psych, fiddle and zlib.






-- 
https://bugs.ruby-lang.org/

[ruby-core:110807] [Ruby master Feature#18571] Removed the bundled sources from release package after Ruby 3.2

[hsbt (Hiroshi SHIBATA)]

Issue #18571 has been updated by hsbt (Hiroshi SHIBATA).

Status changed from Assigned to Closed

I added build instructions with new options at https://github.com/ruby/ruby/commit/a80b66e7ebf1179964b416cee6fd236048a73dcf

----------------------------------------
Feature #18571: Removed the bundled sources from release package after Ruby 3.2
https://bugs.ruby-lang.org/issues/18571#change-100163

* Author: hsbt (Hiroshi SHIBATA)
* Status: Closed
* Priority: Normal
* Assignee: hsbt (Hiroshi SHIBATA)
* Target version: 3.2
----------------------------------------
We shipped release package with the 3rd party source for mswin environment especially. 

The current status is here:

 * libyaml: psych gem, ruby repo and package always bundled it.
 * libffi: only ruby package bundled it. fiddle gem and repo are not bundled.
 * zlib: gem, ruby repo and package don't bundled.

I propose we stop bundling the third-party source for security and maintenance reasons. Because we have [vcpkg](https://github.com/microsoft/vcpkg) for mswin environment today. So, vcpkg provides the runtime for psych, fiddle and zlib.






-- 
https://bugs.ruby-lang.org/