actionview 8.0.4 → 8.0.5

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: aeb3faebba3888c2547df27d7cc538badd8e00fe9e5f71c9038e6152871faf81
-  data.tar.gz: e30a30ad64c05a3074f3f8907755988164422b061d1ea3c7e84333c54f4aa07e
+  metadata.gz: 37987aa62646838570a7a8167d4f913d4b8019e7c03a756c34d6fb394f76ab5f
+  data.tar.gz: 22d8090b406f2bca0b4049b85df4d66740ef778a2d58f699d205154247fd7b03
 SHA512:
-  metadata.gz: 103df643034496a2a5adf3f9b316287afdfa4a54926a08fc04376f9f49bb9667e28ed713487657b293a587b7a2cd07962811938fe194f22c3c686a68b4de0eb7
-  data.tar.gz: 3f6a06ab5713e1fa37ea1afa727bfc4b145335c6d329228446020383bab4b73d9322736ec6f0afed3f7b033959e656b19eba94db271634b35ff1da4e0c4c3a25
+  metadata.gz: c140a8cf5c4ceed7879f29df22dbfb90adde9b111f3bf34c85f447e60b05841e819ceb0c7c699683505079368013570e336a7318cf6cca4174e1851606d1c542
+  data.tar.gz: 63ccdfbe1489d624b520aaf070f1b16c17b4f3a8c85b1f1f76dec9f0d51c74e7cb9868c6792fbebd9629251da14a7defd128f9754d6b849b262fc1a5d7174531

data/CHANGELOG.md

@@ -1,3 +1,41 @@
+## Rails 8.0.5 (March 24, 2026) ##
+
+*   Fix encoding errors for string locals containing non-ASCII characters.
+
+    *Kataoka Katsuki*
+
+*   Fix collection caching to only forward `expires_in` argument if explicitly set.
+
+    *Pieter Visser*
+
+*   Fix `file_field` to join mime types with a comma when provided as Array
+
+    ```ruby
+    file_field(:article, :image, accept: ['image/png', 'image/gif', 'image/jpeg'])
+    ```
+
+    Now behaves likes:
+
+    ```
+    file_field(:article, :image, accept: 'image/png,image/gif,image/jpeg')
+    ```
+
+    *Bogdan Gusiev*
+
+*   Fix strict locals parsing to handle multiline definitions.
+
+    *Said Kaldybaev*
+
+
+## Rails 8.0.4.1 (March 23, 2026) ##
+
+*   Skip blank attribute names in tag helpers to avoid generating invalid HTML.
+
+    [CVE-2026-33168]
+
+    *Mike Dalessio*
+
+
 ## Rails 8.0.4 (October 28, 2025) ##
 
 *   Restore `add_default_name_and_id` method.

data/lib/action_view/gem_version.rb

@@ -9,7 +9,7 @@ module ActionView
   module VERSION
     MAJOR = 8
     MINOR = 0
-    TINY  = 4
+    TINY  = 5
     PRE   = nil
 
     STRING = [MAJOR, MINOR, TINY, PRE].compact.join(".")

data/lib/action_view/helpers/tag_helper.rb

@@ -250,16 +250,19 @@ module ActionView
           output = +""
           sep    = " "
           options.each_pair do |key, value|
+            next if key.blank?
+
             type = TAG_TYPES[key]
             if type == :data && value.is_a?(Hash)
               value.each_pair do |k, v|
-                next if v.nil?
+                next if k.blank? || v.nil?
+
                 output << sep
                 output << prefix_tag_option(key, k, v, escape)
               end
             elsif type == :aria && value.is_a?(Hash)
               value.each_pair do |k, v|
-                next if v.nil?
+                next if k.blank? || v.nil?
 
                 case v
                 when Array, Hash

data/lib/action_view/helpers/tags/file_field.rb

@@ -6,6 +6,9 @@ module ActionView
       class FileField < TextField # :nodoc:
         def render
           include_hidden = @options.delete(:include_hidden)
+          if @options[:accept].is_a?(Array)
+            @options[:accept] = @options[:accept].join(",")
+          end
           options = @options.stringify_keys
           add_default_name_and_field(options)
 

data/lib/action_view/renderer/partial_renderer/collection_caching.rb

@@ -111,7 +111,11 @@ module ActionView
         end
 
         unless entries_to_write.empty?
-          collection_cache.write_multi(entries_to_write)
+          if @options[:cached].is_a?(Hash) && @options[:cached].key?(:expires_in)
+            collection_cache.write_multi(entries_to_write, expires_in: @options[:cached][:expires_in])
+          else
+            collection_cache.write_multi(entries_to_write)
+          end
         end
 
         keyed_partials

data/lib/action_view/template.rb

@@ -7,7 +7,7 @@ module ActionView
   class Template
     extend ActiveSupport::Autoload
 
-    STRICT_LOCALS_REGEX = /\#\s+locals:\s+\((.*)\)/
+    STRICT_LOCALS_REGEX = /\#\s+locals:\s+\((.*?)\)(?=\s*-?%>|\s*$)/m
 
     # === Encodings in ActionView::Template
     #
@@ -366,10 +366,16 @@ module ActionView
     def strict_locals!
       if @strict_locals == NONE
         self.source.sub!(STRICT_LOCALS_REGEX, "")
-        @strict_locals = $1
+        @strict_locals = $1&.rstrip
 
         return if @strict_locals.nil? # Magic comment not found
 
+        # Tag with the assumed encoding before encode! runs, same as
+        # encode! does for the source itself (see above).
+        if @strict_locals.encoding == Encoding::BINARY
+          @strict_locals.force_encoding(Encoding.default_external)
+        end
+
         @strict_locals = "**nil" if @strict_locals.blank?
       end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: actionview
 version: !ruby/object:Gem::Version
-  version: 8.0.4
+  version: 8.0.5
 platform: ruby
 authors:
 - David Heinemeier Hansson
@@ -15,14 +15,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 8.0.4
+        version: 8.0.5
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 8.0.4
+        version: 8.0.5
 - !ruby/object:Gem::Dependency
   name: builder
   requirement: !ruby/object:Gem::Requirement
@@ -85,28 +85,28 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 8.0.4
+        version: 8.0.5
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 8.0.4
+        version: 8.0.5
 - !ruby/object:Gem::Dependency
   name: activemodel
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 8.0.4
+        version: 8.0.5
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 8.0.4
+        version: 8.0.5
 description: Simple, battle-tested conventions and helpers for building web pages.
 email: david@loudthinking.com
 executables: []
@@ -246,10 +246,10 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/rails/rails/issues
-  changelog_uri: https://github.com/rails/rails/blob/v8.0.4/actionview/CHANGELOG.md
-  documentation_uri: https://api.rubyonrails.org/v8.0.4/
+  changelog_uri: https://github.com/rails/rails/blob/v8.0.5/actionview/CHANGELOG.md
+  documentation_uri: https://api.rubyonrails.org/v8.0.5/
   mailing_list_uri: https://discuss.rubyonrails.org/c/rubyonrails-talk
-  source_code_uri: https://github.com/rails/rails/tree/v8.0.4/actionview
+  source_code_uri: https://github.com/rails/rails/tree/v8.0.5/actionview
   rubygems_mfa_required: 'true'
 rdoc_options: []
 require_paths:
@@ -266,7 +266,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements:
 - none
-rubygems_version: 3.6.9
+rubygems_version: 4.0.6
 specification_version: 4
 summary: Rendering framework putting the V in MVC (part of Rails).
 test_files: []