
Security News
CISA’s 2025 SBOM Guidance Adds Hashes, Licenses, Tool Metadata, and Context
CISA’s 2025 draft SBOM guidance adds new fields like hashes, licenses, and tool metadata to make software inventories more actionable.
Bundler makes sure Ruby applications run the same code on every machine.
It does this by managing the gems that the application depends on. Given a list of gems, it can automatically download and install those gems, as well as any other gems needed by the gems that are listed. Before installing gems, it checks the versions of every gem to make sure that they are compatible, and can all be loaded at the same time. After the gems have been installed, Bundler can help you update some or all of them when new versions become available. Finally, it records the exact versions that have been installed, so that others can install the exact same gems.
To install (or update to the latest version):
gem install bundler
To install a prerelease version (if one is available), run gem install bundler --pre
. To uninstall Bundler, run gem uninstall bundler
.
Bundler is most commonly used to manage your application's dependencies. For example, these commands will allow you to use Bundler to manage the rspec
gem for your application:
bundle init
bundle add rspec
bundle install
bundle exec rspec
See bundler.io for the full documentation.
For help with common problems, see TROUBLESHOOTING.
Still stuck? Try filing an issue.
To see what has changed in recent versions of Bundler, see the CHANGELOG.
To get in touch with the Bundler core team and other Bundler users, please join the Bundler slack.
If you'd like to contribute to Bundler, that's awesome, and we <3 you. We've put together the Bundler contributor guide with all of the information you need to get started.
If you'd like to request a substantial change to Bundler or its documentation, refer to the Bundler RFC process for more information.
RubyGems is managed by Ruby Central, a non-profit organization that supports the Ruby community through projects like this one, as well as RubyConf, RailsConf, and RubyGems.org. You can support Ruby Central by attending or sponsoring a conference, or by joining as a supporting member.
Everyone interacting in the Bundler project's codebases, issue trackers, chat rooms, and mailing lists is expected to follow the Bundler code of conduct.
Bundler is available under an MIT License.
FAQs
Unknown package
We found that bundler demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 15 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
CISA’s 2025 draft SBOM guidance adds new fields like hashes, licenses, and tool metadata to make software inventories more actionable.
Security News
A clarification on our recent research investigating 60 malicious Ruby gems.
Security News
ESLint now supports parallel linting with a new --concurrency flag, delivering major speed gains and closing a 10-year-old feature request.