Yanked mimemagic 0.3.5 leaves us with no buildable version of rails 6.0

[alexmreis]

mimemagic 0.3.5 has been yanked from rubygems, marcel needs to be upgraded to use 0.4.0 and released ASAP.

Rails applications depending on activestorage -> marcel are unable to be built currently..

Bundler could not find compatible versions for gem "mimemagic":
  In Gemfile:
    mimemagic (~> 0.4.0)

    rails (~> 6.0.3, >= 6.0.3.4) was resolved to 6.0.3.4, which depends on
      activestorage (= 6.0.3.4) was resolved to 6.0.3.4, which depends on
        marcel (~> 0.3.1) was resolved to 0.3.3, which depends on
          mimemagic (~> 0.3.2)

[907th]

Old Rails versions are affected too:

Bundler could not find compatible versions for gem "mimemagic":
  In Gemfile:
    mimemagic (~> 0.4.0)

    rails (~> 5.2) was resolved to 5.2.1.rc1, which depends on
      activestorage (= 5.2.1.rc1) was resolved to 5.2.1.rc1, which depends on
        marcel (~> 0.3.1) was resolved to 0.3.3, which depends on
          mimemagic (~> 0.3.2)

[907th]

mimemagic 0.3.6 has been released several minutes ago which solves the issue

[alexmreis]

Tried upgrading marcel to use mimemagic 0.4.0, but there's breaking changes (yay for non-semantic versioning)

File does not exist: mimemagic/overlay

[mrahul17]

thanks @907th , couldn't see it on the releases page. but this exits as a separate branch

[907th]

@light94 It is available on rubygems.org

[vizjerai-vineti]

Gem was yanked due to license change from MIT to GPL-2.0

mimemagicrb/mimemagic#97

[bdewater]

@alexmreis

Tried upgrading marcel to use mimemagic 0.4.0, but there's breaking changes (yay for non-semantic versioning)

It's a 0.y.z version and that means according to SemVer the API is not considered stable: https://semver.org/#spec-item-4

[coding-red-panda]

just leaving a note to track this, as this affects the PR I have open for the Rails project.
Marcel is a dependency, and GPL is not really an option, so interested to see how this will be resolved.

[beauraF]

#24

[coding-red-panda]

Just offering this as a potential alternative : rails/rails#41751
Not depend on the gem anymore and replace with something else?
I know someone is rebuilding the mimemagic gem, but it might also not work out.

[jrochkind]

Note that mimemagic 0.3.6 is GPL licensed though. So while it might build, it might not be legal to use it in a non-GPL-licenesed project.

The yankings are actually around this license error/dispute.

[jellybob]

I'm working with the maintainer to get jellybob/mimemagic#3 (further discussion at jellybob/mimemagic#1) merged and shipped as 0.3.7, which resolves the GPL violations in MimeMagic at the expense of a slightly more involved install process.

[stanhu]

For those of you looking for an alternative and are okay with compiling a C extension, I took the fine work in https://github.com/kwilczynski/ruby-magic and bundled libmagic via https://gitlab.com/gitlab-org/ruby-magic/-/merge_requests/1.

You can find this gem under ruby-magic-static: https://rubygems.org/gems/ruby-magic-static. No longer needed.

I've commented in the upstream gem about making this the behavior of ruby-magic: kwilczynski/ruby-magic#1

UPDATE: ruby-magic now vendors libmagic.