Bump appraisal2 from 3.0.5 to 3.0.6

[dependabot]

Bumps appraisal2 from 3.0.5 to 3.0.6.

Release notes

Sourced from appraisal2's releases.

v3.0.6

3.0.6 - 2026-02-17

• TAG: v3.0.6
• COVERAGE: 88.34% -- 727/823 lines in 27 files
• BRANCH COVERAGE: 76.05% -- 127/167 branches in 27 files
• 43.11% documented

Added

• Test for bundler handling with pre-existing appraisal lockfiles
  • Added acceptance test that verifies appraisal correctly handles gemfiles/*.gemfile.lock files with BUNDLED WITH specified
  • Test validates that:
    • Appraisal gemfiles with pre-created lockfiles install correctly
    • Lockfiles preserve the BUNDLED WITH section reporting which bundler version was used
    • The bundler version in the lockfile is correctly maintained during installation
  • Note: Multi-version bundler switching in CI would require pre-installing multiple bundler versions; coverage is limited to lockfile preservation and environment handling.

Fixed

• Restore bundler's automatic version switching for modern bundler versions (2.2+)
  • Bundler can detect and switch to the version specified in Gemfile.lock (or appraisal lockfiles) via BUNDLED WITH
  • Previously, with_original_env stripped all bundler-related variables, preventing bundler from detecting version mismatches and breaking test isolation
  • Now uses with_bundler_env with selective cleanup:
    • Starts from Bundler.original_env when available
    • Preserves critical bundler and isolation variables (for example: BUNDLE_GEMFILE, BUNDLE_APP_CONFIG, BUNDLE_PATH, BUNDLE_USER_CACHE)
    • Removes BUNDLER_SETUP and BUNDLER_VERSION activation markers
    • Removes bundler/setup from RUBYOPT to prevent auto-activation in subprocesses
    • Prevents BUNDLE_LOCKFILE lockfile pollution of subprocesses so per-gemfile lockfiles are created correctly
  • This approach:
    • Lets subprocess bundler start fresh and process the target gemfile cleanly
    • Preserves test isolation and prevents global config pollution
    • Enables committing appraisal lockfiles with specific bundler versions for stable, repeatable builds
  • This fix maintains backward compatibility with all bundler versions

Official Discord 👉️ [![Live Chat on Discord][✉️discord-invite-img]][✉️discord-invite]

Many paths lead to being a sponsor or a backer of this project. Are you on such a path?

[![OpenCollective Sponsors][🖇osc-sponsors-i]][🖇osc-sponsors] [![Sponsor Me on Github][🖇sponsor-img]][🖇sponsor] [![Donate on PayPal][🖇paypal-img]][🖇paypal]

[![Buy me a coffee][🖇buyme-small-img]][🖇buyme] [![Donate on Polar][🖇polar-img]][🖇polar] [![Donate to my FLOSS or refugee efforts at ko-fi.com][🖇kofi-img]][🖇kofi] [![Donate to my FLOSS or refugee efforts using Patreon][🖇patreon-img]][🖇patreon]

... (truncated)

Changelog

Sourced from appraisal2's changelog.

[3.0.6] - 2026-02-17

• TAG: [v3.0.6][3.0.6t]
• COVERAGE: 88.34% -- 727/823 lines in 27 files
• BRANCH COVERAGE: 76.05% -- 127/167 branches in 27 files
• 43.11% documented

Added

• Test for bundler handling with pre-existing appraisal lockfiles
  • Added acceptance test that verifies appraisal correctly handles gemfiles/*.gemfile.lock files with BUNDLED WITH specified
  • Test validates that:
    • Appraisal gemfiles with pre-created lockfiles install correctly
    • Lockfiles preserve the BUNDLED WITH section reporting which bundler version was used
    • The bundler version in the lockfile is correctly maintained during installation
  • Note: Multi-version bundler switching in CI would require pre-installing multiple bundler versions; coverage is limited to lockfile preservation and environment handling.

Fixed

• Restore bundler's automatic version switching for modern bundler versions (2.2+)
  • Bundler can detect and switch to the version specified in Gemfile.lock (or appraisal lockfiles) via BUNDLED WITH
  • Previously, with_original_env stripped all bundler-related variables, preventing bundler from detecting version mismatches and breaking test isolation
  • Now uses with_bundler_env with selective cleanup:
    • Starts from Bundler.original_env when available
    • Preserves critical bundler and isolation variables (for example: BUNDLE_GEMFILE, BUNDLE_APP_CONFIG, BUNDLE_PATH, BUNDLE_USER_CACHE)
    • Removes BUNDLER_SETUP and BUNDLER_VERSION activation markers
    • Removes bundler/setup from RUBYOPT to prevent auto-activation in subprocesses
    • Prevents BUNDLE_LOCKFILE lockfile pollution of subprocesses so per-gemfile lockfiles are created correctly
  • This approach:
    • Lets subprocess bundler start fresh and process the target gemfile cleanly
    • Preserves test isolation and prevents global config pollution
    • Enables committing appraisal lockfiles with specific bundler versions for stable, repeatable builds
  • This fix maintains backward compatibility with all bundler versions

Commits

• cada4cf 🔖 Prepare release v3.0.6
• 13b60da Merge pull request #23 from appraisal-rb/feat/bundler-active-version-switching
• c0ceae6 ✏️ Fix test name
• 135341a 📝 Update docs site
• 86fca83 🔧 Minimum Coverage Levels
• 6755672 ✅ Make bundle version switch test more robust
• f1b58cf ✅ Use bundler version behind latest available for each minor Ruby
• e8bf01d 🐛 Clean BUNDLE_LOCKFILE to avoid pollution of sub-processes
• b07d7f2 🐛 Restore bundler's automatic version switching for modern bundler versions (...
• 183b6a7 🐛 Selectively clean bundler ENV to preserve bundler version switching
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!