The pe-bundler package was historically included in order to support the web-based installer which was launched via bundle exec. Recently, this installer component was re-built to remove the bundler dependency which also led to the pe-bundler package being removed as well. One additional factor that led to this remove was an unresolved security vulnerability in Bundler:
http://collectiveidea.com/blog/archiv...
PE never used Bundler in a way that exposed this vulnerability, but the presence of the package was tripping vulnerability scans conducted as part of security audits in some environments.
My guess would be that there wasn't an entry in the release notes as the pe-bundler package was considered an implementation detail of the web-based installer and there was no net change in the behavior of the installer.
Asked: 2017-08-08 02:18:01 -0600
Seen: 239 times
Last updated: Aug 08 '17
