The gem bundle_update_interactive is a CLI tool for inspecting and interactively updating your gems.
Installation
Install it (globally for the currently active Ruby version) via:
gem install bundle_update_interactive
Then, run it via:
bundle update-interactive
# or
bundle ui
For more details, refer to the docs Show archive.org snapshot .
Usage
The CLI will show you for each gem, whether a CVE exists for your current version and whether major/minor/patch updates are available.
You can navigate the list with the up/down arrow keys. The UI also allows you to selectively update gems:
- select gems with
space - confirm the selection and apply the updates with
enter - abort the update and exit with
ctrl+C
Note
Due to an increase in supply chain attacks, we no longer recommend blindly installing patch updates. Prefer using this tool for patching CVEs and for catching up on major versions.
The tool respects your Bundler settings, such as the cooldown period, and reports which versions were held back because of them:
$ bundle ui
Resolving latest gem versions...
Fetching gem metadata from https://rubygems.org/..........
Resolving dependencies...
The following gem versions were skipped by the cooldown setting:
* database_consistency 3.0.11 (available in 4 days), resolved 3.0.10 instead
Gems held back this way do not appear in the interactive update list.
