Feature #18571: Removed the bundled sources from release package after Ruby 3.2

• Status: Closed
• Priority: Normal
• Assignee: hsbt (Hiroshi SHIBATA)
• Target version: 3.2

[hsbt (Hiroshi SHIBATA)]

We shipped release package with the 3rd party source for mswin environment especially.

The current status is here:

• libyaml: psych gem, ruby repo and package always bundled it.
• libffi: only ruby package bundled it. fiddle gem and repo are not bundled.
• zlib: gem, ruby repo and package don't bundled.

I propose we stop bundling the third-party source for security and maintenance reasons. Because we have vcpkg for mswin environment today. So, vcpkg provides the runtime for psych, fiddle and zlib.

[mame (Yusuke Endoh)]

@tenderlovemaking's comment for psych and libffi: https://github.com/ruby/psych/issues/535

[hsbt (Hiroshi SHIBATA)]

• Status changed from Open to Assigned
• Assignee set to hsbt (Hiroshi SHIBATA)

We decided on the following policy.

• We will remove the bundled sources from ruby repo.
  • @hsbt (Hiroshi SHIBATA) is working now for psych and fiddle.
• If users put the third-party source under the ruby packages, ruby build system use them.

[matz (Yukihiro Matsumoto)]

Accepted, for the record.

Matz.

[hsbt (Hiroshi SHIBATA)]

• Related to Bug #18666: No rule to make target 'yaml/yaml.h', needed by 'api.o' added

[nobu (Nobuyoshi Nakada)]

• Status changed from Assigned to Closed

Applied in changeset git|282baa694320bbe385693902dfde0bdf93a532b8.

---

[DOC] Move the entry for [Feature #18571]

[hsbt (Hiroshi SHIBATA)]

• Status changed from Closed to Assigned

[hsbt (Hiroshi SHIBATA)]

The current distributed package still contained libyaml and libffi sources.

We will remove them and introduce the instructions to download them when building ruby like ./configure --enable-download-source.

[hsbt (Hiroshi SHIBATA)]

e4f5296f065110fa83eb450d3a861253e76e534f removed them.

[hsbt (Hiroshi SHIBATA)]

• Related to Bug #18790: cannot load such file -- digest (LoadError) added

[hsbt (Hiroshi SHIBATA)]

• Related to Bug #18034: Segmentation fault fiddle with `--enable-bundled-libffi` and macOS added

[hsbt (Hiroshi SHIBATA)]

I and nobu added --with-xxx-source-dir option for psych and fiddle instead of --enable-bundled-libyaml.

• https://github.com/ruby/psych/pull/544
• https://github.com/ruby/fiddle/pull/113

The users who want to use newer version of libyaml or libffi environment can use this option like gem install psych -- --with-libyaml-source-dir=$(pwd)/libyaml-0.2.5.

[hsbt (Hiroshi SHIBATA)]

• Target version set to 3.2

We should add the additional options and instructions to document or NEWS.

[hsbt (Hiroshi SHIBATA)]

• Status changed from Assigned to Closed

I added build instructions with new options at https://github.com/ruby/ruby/commit/a80b66e7ebf1179964b416cee6fd236048a73dcf