railwayapp/railpack v0.40.0 on GitHub

Providers

Node: Bun projects now set BUN_INSTALL_GLOBAL_STORE=0 by default to keep the isolated dependency store local and prevent broken symlinks across container layers. by @iloveitaly in #756
PHP: Apt package lists in FrankenPHP images now properly expand ... spread operators instead of passing them literally to apt-get. by @Tyagiquamar in #748

Planner: File discovery now respects excluded files from .dockerignore and railpack.json, preventing build failures caused by copying excluded manifests and ignoring excluded local mise configs. by @iloveitaly in #757

Updated mise from v2026.8.16 to v2026.9.12.

Lockfile revision 2: Newly generated lockfiles now use revision 2 format with .mise/locks/ dependency sidecars, and locked installs verify graph integrity. (v2026.9.7)
Go workspace toolchains: Active go.work files with a toolchain directive now select the Go version during builds while member go.mod files are ignored. (v2026.9.12)
Ruby Gemfile version files: Bundler ruby file: ".ruby-version" declarations in Gemfile are now parsed to resolve the project's Ruby version. (v2026.9.2)
Lockfile URL validation: Installs now fail early if a locked platform URL mismatches the entry's version, preventing silent installation of mismatched releases. (v2026.9.12)

Full Changelog: v0.39.0...v0.40.0

Internal improvements to dependencies and testing.