01:55 <bronzdoc> Hi everyone, i'm interested in contributing to bundler

02:57 <bronzdoc> is there any bug/feature i can help with to get a better knowledge of the codebase?

16:39 <tubbo> hey guys, i see this warning when i `bundle` for gems in which i need a private gem server source: "Warning: this Gemfile contains multiple primary sources. Using `source` more than once without a block is a security risk, and may result in installing unexpected gems. To resolve this warning, use a block to indicate which gems should come from the secondary source. To upgrade this warning to an error, run

16:39 <tubbo> `bundle config disable_multisource true`."

16:40 <tubbo> is there any way to get rid of it? like can i specify a `source:` attribute in the gemspec and get rid of it in Gemfile or something?

18:49 <jhass> tubbo: so you got a .gemspec which adds dependencies to gems from that private source as well as rubygems.org?

18:49 <tubbo> jhass: yeah

18:50 <tubbo> jhass: the Gemfile currently has two source declarations, in our apps we've mitigated the warning by surrounding the gems that come from our private gem server with a source block

18:50 <tubbo> but i can't do that in a gemspec

18:50 <tubbo> so i was wondering if there was any way to get rid of the warning in the gemspec, it's not a huge deal just seems like a little oversight..

18:52 <jhass> mh, so you did try surrounding the gemspec call into a source block?

18:54 <jhass> https://github.com/bundler/bundler/issues/3576 I guess that's the issue you want to subscribe to

19:00 <tubbo> jhass: how much of a bounty do i need to contribute to get `Bundler.i_know_multiple_sources_are_bad_but_i_need_them` in the project? ;)

19:01 <tubbo> yeah...unfortunately when i try to add what i think should be the right option, i get "Illformed requirement [{:source=>"https://gems.mycompany.com..."

19:01 <jhass> if I could get a PR for optional groups in I'm sure you can get a bundle config option in

19:02 <tubbo> heh, that did it

19:02 <tubbo> just re-defined the requirement in my Gemfile, done.

19:03 <jhass> https://github.com/bundler/bundler/blob/master/lib/bundler/dsl.rb#L350-L366