Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Warn on .bundle/config file presence #471

Merged
merged 1 commit into from
Mar 17, 2016
Merged

Conversation

schneems
Copy link
Contributor

Discussion at rubygems/bundler#4351 (comment)

Also do not load the stored .bundle directory. We are passing in all the flags that we need to bundle install. If we also store a .bundle/config file between builds than if you accidentally include .bundle/config file in your repo with a BUNDLE_WITHOUT value ,it will get persisted to the .bundle/config file to the cache and deleting the file from your repo does not get rid of the problem. The config is un-needed, since we're using all flags all the time, let's not rely on the .bundle/config file.

Discussion at rubygems/bundler#4351 (comment)

Also do not load the stored `.bundle` directory. We are passing in all the flags that we need to `bundle install`. If we also store a `.bundle/config` file between builds than if you accidentally include `.bundle/config` file in your repo with a `BUNDLE_WITHOUT` value ,it will get persisted to the `.bundle/config` file to the cache and deleting the file from your repo does not get rid of the problem. The config is un-needed, since we're using all flags all the time, let's not rely on the `.bundle/config` file.
@@ -558,7 +568,6 @@ def build_bundler
else
# using --deployment is preferred if we can
bundle_command += " --deployment"
cache.load ".bundle"
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We should warn here if it exists and then either delete it or do a delete later down the line.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We talked about this in hipchat. You can't detect if a user has created this file or if it was previously generated by Heroku. We've had this change merged into master for some time now and it hasn't caused any issues. Going to deploy.

schneems added a commit that referenced this pull request Mar 17, 2016
@schneems schneems merged commit f676bd8 into master Mar 17, 2016
@edmorley edmorley deleted the schneems/warn-bundle-config branch August 27, 2020 06:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants