activemodel 7.1.5.2 → 8.1.2.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e89137dfa40b068e71b94112ef2591344ea839e3e077c3b1c97cb15bf8248119
-  data.tar.gz: 7bc83d36358978fd5f9ed4d54f58d2e80eac9a05fd5b5464130beec1fc8eb745
+  metadata.gz: e7d64f9c0fada4afc52f06c6b1e86cea5506c3c0e5bbb62007240efaa9635f5d
+  data.tar.gz: 73f7293af65afdd7e75dc8403f0625787c6e0e911ac629e689bd47576b995192
 SHA512:
-  metadata.gz: 5774c02cbdd72532211828a0410af3bb5215ac937e8868809257206c4798a76051a484cfa7a0d3e19476ad6339c1076ae1b5d2055ce78b3fdde4641d9cef9086
-  data.tar.gz: 615a9ed964889e21a90432b6c08411f03df07836a66de01bf9079b44979e2779032667c568873569a436e40b030b62d9c7c7aed7ac20fe74f4c905c8eaa8d5da
+  metadata.gz: 7bebff0c62141aa5ae3aa8983b261dc35634d2f3ae2266504a7f0bfc6184558bc2860d487ae452ffab1ed548fcf84e9442eebec4682cec2ec69bde83bd672370
+  data.tar.gz: 13f68620adf0b69c15818c6e290f589e263d33cdf608bb82c50928cc63c2a20ee27fb7b8f6df543e501ecb16e10dea02a409f7759a54db3e197d59bc50e2c3ff

data/CHANGELOG.md

@@ -1,311 +1,51 @@
-## Rails 7.1.5.2 (August 13, 2025) ##
+## Rails 8.1.2.1 (March 23, 2026) ##
 
 *   No changes.
 
 
-## Rails 7.1.5.1 (December 10, 2024) ##
+## Rails 8.1.2 (January 08, 2026) ##
 
 *   No changes.
 
 
-## Rails 7.1.5 (October 30, 2024) ##
-
-*   Fix regression in `alias_attribute` to work with user defined methods.
-
-    `alias_attribute` would wrongly assume the attribute accessor was generated by Active Model.
-
-    ```ruby
-    class Person
-      include ActiveModel::AttributeMethods
-
-      define_attribute_methods :name
-      attr_accessor :name
-
-      alias_attribute :full_name, :name
-    end
-
-    person.full_name # => NoMethodError: undefined method `attribute' for an instance of Person
-    ```
-
-    *Jean Boussier*
-
-
-## Rails 7.1.4.2 (October 23, 2024) ##
-
-*   No changes.
-
-
-## Rails 7.1.4.1 (October 15, 2024) ##
-
-*   No changes.
-
-
-## Rails 7.1.4 (August 22, 2024) ##
+## Rails 8.1.1 (October 28, 2025) ##
 
 *   No changes.
 
 
-## Rails 7.1.3.4 (June 04, 2024) ##
-
-*   No changes.
-
-
-## Rails 7.1.3.3 (May 16, 2024) ##
-
-*   No changes.
-
-
-## Rails 7.1.3.2 (February 21, 2024) ##
-
-*   No changes.
-
-
-## Rails 7.1.3.1 (February 21, 2024) ##
-
-*   No changes.
-
-
-## Rails 7.1.3 (January 16, 2024) ##
-
-*   No changes.
-
-
-## Rails 7.1.2 (November 10, 2023) ##
-
-*   Make `==(other)` method of AttributeSet safe.
-
-    *Dmitry Pogrebnoy*
-
-
-## Rails 7.1.1 (October 11, 2023) ##
-
-*   No changes.
-
-
-## Rails 7.1.0 (October 05, 2023) ##
-
-*   No changes.
-
-
-## Rails 7.1.0.rc2 (October 01, 2023) ##
-
-*   No changes.
-
-
-## Rails 7.1.0.rc1 (September 27, 2023) ##
-
-*   Remove change in the typography of user facing error messages.
-    For example, “can’t be blank” is again “can't be blank”.
-
-    *Rafael Mendonça França*
-
-
-## Rails 7.1.0.beta1 (September 13, 2023) ##
-
-*   Support composite identifiers in `to_key`
-
-    `to_key` avoids wrapping `#id` value into an `Array` if `#id` already an array
-
-    *Nikita Vasilevsky*
-
-*   Add `ActiveModel::Conversion.param_delimiter` to configure delimiter being used in `to_param`
-
-    *Nikita Vasilevsky*
-
-*   `undefine_attribute_methods` undefines alias attribute methods along with attribute methods.
-
-    *Nikita Vasilevsky*
+## Rails 8.1.0 (October 22, 2025) ##
 
-*   Error.full_message now strips ":base" from the message.
+*   Add `reset_token: { expires_in: ... }` option to `has_secure_password`.
 
-    *zzak*
-
-*   Add a load hook for `ActiveModel::Model` (named `active_model`) to match the load hook for
-    `ActiveRecord::Base` and allow for overriding aspects of the `ActiveModel::Model` class.
-
-    *Lewis Buckley*
-
-*   Improve password length validation in ActiveModel::SecurePassword to consider byte size for BCrypt
-    compatibility.
-
-    The previous password length validation only considered the character count, which may not
-    accurately reflect the 72-byte size limit imposed by BCrypt. This change updates the validation
-    to consider both character count and byte size while keeping the character length validation in place.
-
-    ```ruby
-    user = User.new(password: "a" * 73)  # 73 characters
-    user.valid? # => false
-    user.errors[:password] # => ["is too long"]
-
-
-    user = User.new(password: "あ" * 25)  # 25 characters, 75 bytes
-    user.valid? # => false
-    user.errors[:password] # => ["is too long"]
-    ```
-
-    *ChatGPT*, *Guillermo Iguaran*
-
-*   `has_secure_password` now generates an `#{attribute}_salt` method that returns the salt
-    used to compute the password digest. The salt will change whenever the password is changed,
-    so it can be used to create single-use password reset tokens with `generates_token_for`:
-
-    ```ruby
-    class User < ActiveRecord::Base
-      has_secure_password
-
-      generates_token_for :password_reset, expires_in: 15.minutes do
-        password_salt&.last(10)
-      end
-    end
-    ```
-
-    *Lázaro Nixon*
-
-*   Improve typography of user facing error messages. In English contractions,
-    the Unicode APOSTROPHE (`U+0027`) is now RIGHT SINGLE QUOTATION MARK
-    (`U+2019`). For example, "can't be blank" is now "can’t be blank".
-
-    *Jon Dufresne*
-
-*   Add class to `ActiveModel::MissingAttributeError` error message.
-
-    Show which class is missing the attribute in the error message:
+    Allows configuring the expiry duration of password reset tokens (default remains 15 minutes for backwards compatibility).
 
     ```ruby
-    user = User.first
-    user.pets.select(:id).first.user_id
-    # => ActiveModel::MissingAttributeError: missing attribute 'user_id' for Pet
+    has_secure_password reset_token: { expires_in: 1.hour }
     ```
 
-    *Petrik de Heus*
-
-*   Raise `NoMethodError` in `ActiveModel::Type::Value#as_json` to avoid unpredictable
-    results.
+    *Jevin Sew*, *Abeid Ahmed*
 
-    *Vasiliy Ermolovich*
+*   Add `except_on:` option for validation callbacks.
 
-*   Custom attribute types that inherit from Active Model built-in types and do
-    not override the `serialize` method will now benefit from an optimization
-    when serializing attribute values for the database.
+    *Ben Sheldon*
 
-    For example, with a custom type like the following:
+*   Backport `ActiveRecord::Normalization` to `ActiveModel::Attributes::Normalization`
 
     ```ruby
-    class DowncasedString < ActiveModel::Type::String
-      def cast(value)
-        super&.downcase
-      end
-    end
+    class User
+      include ActiveModel::Attributes
+      include ActiveModel::Attributes::Normalization
 
-    ActiveRecord::Type.register(:downcased_string, DowncasedString)
+      attribute :email, :string
 
-    class User < ActiveRecord::Base
-      attribute :email, :downcased_string
+      normalizes :email, with: -> email { email.strip.downcase }
     end
 
-    user = User.new(email: "FooBar@example.com")
+    user = User.new
+    user.email =    " CRUISE-CONTROL@EXAMPLE.COM\n"
+    user.email # => "cruise-control@example.com"
     ```
 
-    Serializing the `email` attribute for the database will be roughly twice as
-    fast.  More expensive `cast` operations will likely see greater improvements.
-
-    *Jonathan Hefner*
-
-*   `has_secure_password` now supports password challenges via a
-    `password_challenge` accessor and validation.
-
-    A password challenge is a safeguard to verify that the current user is
-    actually the password owner.  It can be used when changing sensitive model
-    fields, such as the password itself.  It is different than a password
-    confirmation, which is used to prevent password typos.
-
-    When `password_challenge` is set, the validation checks that the value's
-    digest matches the *currently persisted* `password_digest` (i.e.
-    `password_digest_was`).
-
-    This allows a password challenge to be done as part of a typical `update`
-    call, just like a password confirmation.  It also allows a password
-    challenge error to be handled in the same way as other validation errors.
-
-    For example, in the controller, instead of:
-
-    ```ruby
-    password_params = params.require(:password).permit(
-      :password_challenge,
-      :password,
-      :password_confirmation,
-    )
-
-    password_challenge = password_params.delete(:password_challenge)
-    @password_challenge_failed = !current_user.authenticate(password_challenge)
-
-    if !@password_challenge_failed && current_user.update(password_params)
-      # ...
-    end
-    ```
-
-    You can now write:
-
-    ```ruby
-    password_params = params.require(:password).permit(
-      :password_challenge,
-      :password,
-      :password_confirmation,
-    ).with_defaults(password_challenge: "")
-
-    if current_user.update(password_params)
-      # ...
-    end
-    ```
-
-    And, in the view, instead of checking `@password_challenge_failed`, you can
-    render an error for the `password_challenge` field just as you would for
-    other form fields, including utilizing `config.action_view.field_error_proc`.
-
-    *Jonathan Hefner*
-
-*   Support infinite ranges for `LengthValidator`s `:in`/`:within` options
-
-    ```ruby
-    validates_length_of :first_name, in: ..30
-    ```
-
-    *fatkodima*
-
-*   Add support for beginless ranges to inclusivity/exclusivity validators:
-
-    ```ruby
-    validates_inclusion_of :birth_date, in: -> { (..Date.today) }
-    ```
-
-    ```ruby
-    validates_exclusion_of :birth_date, in: -> { (..Date.today) }
-    ```
-
-    *Bo Jeanes*
-
-*   Make validators accept lambdas without record argument
-
-    ```ruby
-    # Before
-    validates_comparison_of :birth_date, less_than_or_equal_to: ->(_record) { Date.today }
-
-    # After
-    validates_comparison_of :birth_date, less_than_or_equal_to: -> { Date.today }
-    ```
-
-    *fatkodima*
-
-*   Fix casting long strings to `Date`, `Time` or `DateTime`
-
-    *fatkodima*
-
-*   Use different cache namespace for proxy calls
-
-    Models can currently have different attribute bodies for the same method
-    names, leading to conflicts. Adding a new namespace `:active_model_proxy`
-    fixes the issue.
-
-    *Chris Salzberg*
+    *Sean Doyle*
 
-Please check [7-0-stable](https://github.com/rails/rails/blob/7-0-stable/activemodel/CHANGELOG.md) for previous changes.
+Please check [8-0-stable](https://github.com/rails/rails/blob/8-0-stable/activemodel/CHANGELOG.md) for previous changes.

data/README.rdoc

@@ -56,7 +56,7 @@ behavior out of the box:
     person.clear_name
     person.clear_age
 
-  {Learn more}[link:classes/ActiveModel/AttributeMethods.html]
+  {Learn more}[https://api.rubyonrails.org/classes/ActiveModel/AttributeMethods.html]
 
 * Callbacks for certain operations
 
@@ -74,7 +74,7 @@ behavior out of the box:
   This generates +before_create+, +around_create+ and +after_create+
   class methods that wrap your create method.
 
-  {Learn more}[link:classes/ActiveModel/Callbacks.html]
+  {Learn more}[https://api.rubyonrails.org/classes/ActiveModel/Callbacks.html]
 
 * Tracking value changes
 
@@ -110,7 +110,7 @@ behavior out of the box:
     person.save
     person.previous_changes # => {'name' => ['bob, 'robert']}
 
-  {Learn more}[link:classes/ActiveModel/Dirty.html]
+  {Learn more}[https://api.rubyonrails.org/classes/ActiveModel/Dirty.html]
 
 * Adding +errors+ interface to objects
 
@@ -141,7 +141,7 @@ behavior out of the box:
     person.errors.full_messages
     # => ["Name cannot be nil"]
 
-  {Learn more}[link:classes/ActiveModel/Errors.html]
+  {Learn more}[https://api.rubyonrails.org/classes/ActiveModel/Errors.html]
 
 * Model name introspection
 
@@ -152,7 +152,7 @@ behavior out of the box:
     NamedPerson.model_name.name   # => "NamedPerson"
     NamedPerson.model_name.human  # => "Named person"
 
-  {Learn more}[link:classes/ActiveModel/Naming.html]
+  {Learn more}[https://api.rubyonrails.org/classes/ActiveModel/Naming.html]
 
 * Making objects serializable
 
@@ -179,7 +179,7 @@ behavior out of the box:
     s = SerialPerson.new
     s.to_json             # => "{\"name\":null}"
 
-  {Learn more}[link:classes/ActiveModel/Serialization.html]
+  {Learn more}[https://api.rubyonrails.org/classes/ActiveModel/Serialization.html]
 
 * Internationalization (i18n) support
 
@@ -190,7 +190,7 @@ behavior out of the box:
     Person.human_attribute_name('my_attribute')
     # => "My attribute"
 
-  {Learn more}[link:classes/ActiveModel/Translation.html]
+  {Learn more}[https://api.rubyonrails.org/classes/ActiveModel/Translation.html]
 
 * Validation support
 
@@ -208,7 +208,7 @@ behavior out of the box:
     person.first_name = 'zoolander'
     person.valid?  # => false
 
-  {Learn more}[link:classes/ActiveModel/Validations.html]
+  {Learn more}[https://api.rubyonrails.org/classes/ActiveModel/Validations.html]
 
 * Custom validators
 
@@ -230,7 +230,7 @@ behavior out of the box:
     p.name = "Bob"
     p.valid?                  # =>  true
 
-  {Learn more}[link:classes/ActiveModel/Validator.html]
+  {Learn more}[https://api.rubyonrails.org/classes/ActiveModel/Validator.html]
 
 
 == Download and installation
@@ -261,6 +261,6 @@ Bug reports for the Ruby on \Rails project can be filed here:
 
 * https://github.com/rails/rails/issues
 
-Feature requests should be discussed on the rails-core mailing list here:
+Feature requests should be discussed on the rubyonrails-core forum here:
 
 * https://discuss.rubyonrails.org/c/rubyonrails-core

data/lib/active_model/attribute/user_provided_default.rb

@@ -26,6 +26,16 @@ module ActiveModel
         self.class.new(name, user_provided_value, type, original_attribute)
       end
 
+      def dup_or_share # :nodoc:
+        # Can't elide dup when the default is a Proc
+        # See Attribute#dup_or_share
+        if @user_provided_value.is_a?(Proc)
+          dup
+        else
+          super
+        end
+      end
+
       def marshal_dump
         result = [
           name,

data/lib/active_model/attribute.rb

@@ -38,7 +38,7 @@ module ActiveModel
       @value = value unless value.nil?
     end
 
-    def value
+    def value(&)
       # `defined?` is cheaper than `||=` when we get back falsy values
       @value = type_cast(value_before_type_cast) unless defined?(@value)
       @value
@@ -96,6 +96,14 @@ module ActiveModel
       end
     end
 
+    def dup_or_share # :nodoc:
+      if @type.mutable?
+        dup
+      else
+        self # If the underlying type is immutable we can get away with not duping
+      end
+    end
+
     def type_cast(*)
       raise NotImplementedError
     end
@@ -153,7 +161,7 @@ module ActiveModel
       alias :assigned? :original_attribute
 
       def initialize_dup(other)
-        if defined?(@value) && @value.duplicable?
+        if @value&.duplicable?
           @value = @value.dup
         end
       end

data/lib/active_model/attribute_assignment.rb

@@ -36,19 +36,42 @@ module ActiveModel
 
     alias attributes= assign_attributes
 
+    # Like `BasicObject#method_missing`, `#attribute_writer_missing` is invoked
+    # when `#assign_attributes` is passed an unknown attribute name.
+    #
+    # By default, `#attribute_writer_missing` raises an UnknownAttributeError.
+    #
+    #   class Rectangle
+    #     include ActiveModel::AttributeAssignment
+    #
+    #     attr_accessor :length, :width
+    #
+    #     def attribute_writer_missing(name, value)
+    #       Rails.logger.warn "Tried to assign to unknown attribute #{name}"
+    #     end
+    #   end
+    #
+    #   rectangle = Rectangle.new
+    #   rectangle.assign_attributes(height: 10) # => Logs "Tried to assign to unknown attribute 'height'"
+    def attribute_writer_missing(name, value)
+      raise UnknownAttributeError.new(self, name)
+    end
+
     private
       def _assign_attributes(attributes)
-        attributes.each do |k, v|
+        attributes.each_pair do |k, v|
           _assign_attribute(k, v)
         end
       end
 
       def _assign_attribute(k, v)
         setter = :"#{k}="
+        public_send(setter, v)
+      rescue NoMethodError
         if respond_to?(setter)
-          public_send(setter, v)
+          raise
         else
-          raise UnknownAttributeError.new(self, k.to_s)
+          attribute_writer_missing(k.to_s, v)
         end
       end
   end