Skip to content

Bundler

Categories: ruby

Renovate supports updating Bundler dependencies.

File Matching

By default, Renovate will check any files matching the following regular expression: /(^|/)Gemfile$/.

For details on how to extend a manager's managerFilePatterns value, please follow this link.

Supported datasources

This manager supports extracting the following datasources: ruby-version, rubygems.

Dependency types

This manager has no documented depType values.

Default config

{
  "managerFilePatterns": [
    "/(^|/)Gemfile$/"
  ],
  "versioning": "ruby"
}

Lock File Maintenance

This manager supports lockFileMaintenance for the following file(s):

  • Gemfile.lock

Lock file maintenance is delegated to the underlying package manager, which Renovate runs as an external command.

Additional Information

Renovate uses the bundler manager to extract dependencies from Gemfile and Gemfile.lock files.

Authenticating private registry

If:

  • you need Bundler to authenticate to a private registry
  • and that private registry is not on the same host as Renovate (your GitHub/GitLab/etc)

Then you should authenticate Renovate with hostRules. For example:

{
  "hostRules": [
    {
      "matchHost": "private-registry.company.com",
      "hostType": "rubygems",
      "token": "abc123"
    }
  ]
}

Important notes:

  • hostType is a required field, set hostType=rubygems
  • If you use the same registry for more than one package type, you may need more than one hostRules entry
  • Instead of token, you can use a username and password

To avoid committing raw secrets to your repository, either:

  • If self-hosting: add the hostRules to your bot config file, instead of the repository configuration file, or
  • If using the Mend Renovate App: use the encrypted config option