activemodel 8.1.3.1 → 8.1.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 67b65091317b383e403994b383ca5eeabbedf48f250e6fca510b5ae9f7788ba5
-  data.tar.gz: 232cc9acf9a344bbb60964e3d44b90b983e79f29f73836b5e0a5c4bc7cc7e6c0
+  metadata.gz: 37ac49fcbb7194fa33c83ce420982403b8f1bcd5059e0e893a7758a2f7b1fa0f
+  data.tar.gz: 2f41f78730b71f3b386299fa207176cd7c477badf17917f9a540aa55397996fd
 SHA512:
-  metadata.gz: 52e093968e2ae9b22ad7f12ed3024c614de2c7b0509ed44b90d1bcdea96d948e65904b20100272f6cc57512a5d6fbb56fab9e99b0be76574d5ceabeb96910e77
-  data.tar.gz: 3fae2ff1ee2b877c46a45d728f3825624bec1be5d1a8d380e01b44e6cdf0eff61ae85c56f7631fc1d695e3c6c94eb0de65d615ae4af5796083907732e236e140
+  metadata.gz: 1cd37e1b7ed1206d74e7dc170a51a4641b9152056aa367eadb37d3315693b0ebe6b7814e391fdefaa7f3e29988c1a0aa594c3faf14990797ba1e972c5e99ffd1
+  data.tar.gz: 5720c98d3ddeb1aeb18caccd209d9ae3fe57a8b2995849f3876514e6e0c2ada90a401f9ac2caf8a17e4d9c49850729fd2e19c0358834d281086117c7b916baae

data/CHANGELOG.md

@@ -1,3 +1,41 @@
+## Rails 8.1.4 (September 24, 2026) ##
+
+*   Fix `ActiveModel::Errors#import` mutating the override options hash passed to it.
+
+    *Kenta Ishizaki*
+
+*   Fix `normalizes` not detecting in-place changes for attributes whose database
+    cast type differs from the attribute type (e.g. JSON columns), causing
+    normalization to be skipped on validation.
+
+    *Chedli Bourguiba*
+
+*   Fix `alias_attribute` accumulating duplicate entries in `aliases_by_attribute_name`
+    when called multiple times with the same arguments.
+
+    *Nicholas Jakobsen*
+
+*   Fix `normalizes` re-applying normalizations on every validation of an
+    unpersisted record, and speed up validation of normalized attributes.
+
+    The in-place mutation check re-ran the normalizer on every `valid?` of an
+    unpersisted record: wasteful for idempotent normalizers and compounded the
+    result for non-idempotent ones. Normalizations are now re-applied only on a
+    genuine in-place mutation.
+
+    *Yaroslav Markin*
+
+*   Limit the size of strings `ActiveModel::Type::Integer` will coerce with `to_i`.
+
+    Calling `to_i` on very long strings can take a long time and could be used as
+    a DoS vector. Integer casting now only considers the first `_limit * 4` bytes
+    of a string (16 bytes for a default 4-byte integer, 32 bytes for an 8-byte
+    bigint), which is enough to hold the maximum representable value plus a sign
+    or a short slug suffix.
+
+    *Aaron Patterson*, *Jean Boussier*
+
+
 ## Rails 8.1.3.1 (July 29, 2026) ##
 
 *   No changes.

data/lib/active_model/attribute_methods.rb

@@ -204,7 +204,7 @@ module ActiveModel
         old_name = old_name.to_s
         new_name = new_name.to_s
         self.attribute_aliases = attribute_aliases.merge(new_name => old_name)
-        aliases_by_attribute_name[old_name] << new_name
+        aliases_by_attribute_name[old_name] |= [new_name]
         eagerly_generate_alias_attribute_methods(new_name, old_name)
       end
 
@@ -521,10 +521,18 @@ module ActiveModel
       __send__(match.proxy_target, match.attr_name, ...)
     end
 
+    ##
+    # :method: respond_to_without_attributes?
+    # :call-seq:
+    #   respond_to_without_attributes?(method, include_private_methods = false)
+    #
+    # Checks whether the object responds to +method+ without searching the
+    # attributes.
+    define_method(:respond_to_without_attributes?, Kernel.instance_method(:respond_to?))
+
     # A +Person+ instance with a +name+ attribute can ask
     # <tt>person.respond_to?(:name)</tt>, <tt>person.respond_to?(:name=)</tt>,
     # and <tt>person.respond_to?(:name?)</tt> which will all return +true+.
-    alias :respond_to_without_attributes? :respond_to?
     def respond_to?(method, include_private_methods = false)
       if super
         true

data/lib/active_model/attributes/normalization.rb

@@ -139,10 +139,15 @@ module ActiveModel
       private
         def normalize_changed_in_place_attributes
           self.class.normalized_attributes.each do |name|
-            normalize_attribute(name) if attribute_changed_in_place?(name)
+            attribute = @attributes[name.to_s]
+            normalize_attribute(name) if normalized_attribute_changed_in_place?(attribute)
           end
         end
 
+        def normalized_attribute_changed_in_place?(attribute)
+          attribute.changed_in_place? && attribute.value != attribute.type_cast(attribute.value_before_type_cast)
+        end
+
         class NormalizedValueType < DelegateClass(ActiveModel::Type::Value) # :nodoc:
           include ActiveModel::Type::SerializeCastValue
 

data/lib/active_model/dirty.rb

@@ -230,7 +230,7 @@ module ActiveModel
       #
       # This method is generated for each attribute.
       #
-      # Clears all dirty data of the attribute: current changes and previous changes.
+      # Clears the current changes of the attribute.
       #
       #   person = Person.new(name: 'Chris')
       #   person.name = 'Jason'

data/lib/active_model/errors.rb

@@ -149,6 +149,7 @@ module ActiveModel
     # * +:attribute+ - Override the attribute the error belongs to.
     # * +:type+ - Override type of the error.
     def import(error, override_options = {})
+      override_options = override_options.dup
       [:attribute, :type].each do |key|
         if override_options.key?(key)
           override_options[key] = override_options[key].to_sym
@@ -311,7 +312,7 @@ module ActiveModel
     #
     #   person.errors.add(:name, :too_long, count: 25)
     #   person.errors.messages
-    #   # => ["is too long (maximum is 25 characters)"]
+    #   # => {:name=>["is too long (maximum is 25 characters)"]}
     #
     # If +type+ is a proc, it will be called, allowing for things like
     # <tt>Time.now</tt> to be used within an error.

data/lib/active_model/gem_version.rb

@@ -9,8 +9,8 @@ module ActiveModel
   module VERSION
     MAJOR = 8
     MINOR = 1
-    TINY  = 3
-    PRE   = "1"
+    TINY  = 4
+    PRE   = nil
 
     STRING = [MAJOR, MINOR, TINY, PRE].compact.join(".")
   end

data/lib/active_model/serialization.rb

@@ -164,7 +164,9 @@ module ActiveModel
     #       @data[key]
     #     end
     #   end
-    alias :read_attribute_for_serialization :send
+    def read_attribute_for_serialization(key)
+      send(key)
+    end
 
     private
       def attribute_names_for_serialization

data/lib/active_model/serializers/json.rb

@@ -26,7 +26,7 @@ module ActiveModel
       #   user = User.find(1)
       #   user.as_json
       #   # => { "id" => 1, "name" => "Konata Izumi", "age" => 16,
-      #   #     "created_at" => "2006-08-01T17:27:133.000Z", "awesome" => true}
+      #   #     "created_at" => "2006-08-01T17:27:13.000Z", "awesome" => true}
       #
       #   ActiveRecord::Base.include_root_in_json = true
       #

data/lib/active_model/type/date_time.rb

@@ -25,11 +25,8 @@ module ActiveModel
     #   event.start.sec   # => 0
     #   event.start.zone  # => "EAT"
     #
-    # String values are parsed using the ISO 8601 datetime format. Partial
-    # time-only formats are also accepted.
-    #
-    #   event.start = "06:07:08+09:00"
-    #   event.start.utc # => 1999-12-31 21:07:08 UTC
+    # String values are parsed using the ISO 8601 datetime format. Use the
+    # +:time+ type instead to parse partial time-only values.
     #
     # The degree of sub-second precision can be customized when declaring an
     # attribute:

data/lib/active_model/type/decimal.rb

@@ -32,7 +32,7 @@ module ActiveModel
     #   bag.weight # => nil
     #
     #   bag.weight = :arbitrary
-    #   bag.weight # => nil (the result of `.to_s.to_d`)
+    #   bag.weight # => 0.0 (the result of `.to_s.to_d`)
     #
     # Decimal precision defaults to 18, and can be customized when declaring an
     # attribute:

data/lib/active_model/type/integer.rb

@@ -110,7 +110,15 @@ module ActiveModel
         end
 
         def cast_value(value)
-          value.to_i rescue nil
+          case value
+          when ::Integer
+            value
+          when ::String
+            str = value.bytesize > _limit * 4 ? value.byteslice(0, _limit * 4) : value
+            str.to_i rescue nil
+          else
+            value.to_i rescue nil
+          end
         end
 
         def max_value

data/lib/active_model/validations/validates.rb

@@ -80,7 +80,7 @@ module ActiveModel
       #   <tt>on: [:create, :custom_validation_context]</tt>)
       # * <tt>:except_on</tt> - Specifies the contexts where this validation is not active.
       #   Runs in all validation contexts by default +nil+. You can pass a symbol
-      #   or an array of symbols. (e.g. <tt>except: :create</tt> or
+      #   or an array of symbols. (e.g. <tt>except_on: :create</tt> or
       #   <tt>except_on: :custom_validation_context</tt> or
       #   <tt>except_on: [:create, :custom_validation_context]</tt>)
       # * <tt>:if</tt> - Specifies a method, proc or string to call to determine

data/lib/active_model/validations.rb

@@ -72,7 +72,7 @@ module ActiveModel
       #   <tt>on: [:create, :custom_validation_context]</tt>)
       # * <tt>:except_on</tt> - Specifies the contexts where this validation is not active.
       #   Runs in all validation contexts by default +nil+. You can pass a symbol
-      #   or an array of symbols. (e.g. <tt>except: :create</tt> or
+      #   or an array of symbols. (e.g. <tt>except_on: :create</tt> or
       #   <tt>except_on: :custom_validation_context</tt> or
       #   <tt>except_on: [:create, :custom_validation_context]</tt>)
       # * <tt>:allow_nil</tt> - Skip validation if attribute is +nil+.
@@ -144,7 +144,7 @@ module ActiveModel
       #   <tt>on: [:create, :custom_validation_context]</tt>)
       # * <tt>:except_on</tt> - Specifies the contexts where this validation is not active.
       #   Runs in all validation contexts by default +nil+. You can pass a symbol
-      #   or an array of symbols. (e.g. <tt>except: :create</tt> or
+      #   or an array of symbols. (e.g. <tt>except_on: :create</tt> or
       #   <tt>except_on: :custom_validation_context</tt> or
       #   <tt>except_on: [:create, :custom_validation_context]</tt>)
       # * <tt>:if</tt> - Specifies a method or proc to call to determine
@@ -436,7 +436,9 @@ module ActiveModel
     #       @data[key]
     #     end
     #   end
-    alias :read_attribute_for_validation :send
+    def read_attribute_for_validation(key)
+      send(key)
+    end
 
     # Returns the context when running validations.
     def validation_context

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: activemodel
 version: !ruby/object:Gem::Version
-  version: 8.1.3.1
+  version: 8.1.4
 platform: ruby
 authors:
 - David Heinemeier Hansson
@@ -15,14 +15,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 8.1.3.1
+        version: 8.1.4
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 8.1.3.1
+        version: 8.1.4
 description: A toolkit for building modeling frameworks like Active Record. Rich support
   for attributes, callbacks, validations, serialization, internationalization, and
   testing.
@@ -113,10 +113,10 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/rails/rails/issues
-  changelog_uri: https://github.com/rails/rails/blob/v8.1.3.1/activemodel/CHANGELOG.md
-  documentation_uri: https://api.rubyonrails.org/v8.1.3.1/
+  changelog_uri: https://github.com/rails/rails/blob/v8.1.4/activemodel/CHANGELOG.md
+  documentation_uri: https://api.rubyonrails.org/v8.1.4/
   mailing_list_uri: https://discuss.rubyonrails.org/c/rubyonrails-talk
-  source_code_uri: https://github.com/rails/rails/tree/v8.1.3.1/activemodel
+  source_code_uri: https://github.com/rails/rails/tree/v8.1.4/activemodel
   rubygems_mfa_required: 'true'
 rdoc_options: []
 require_paths:
@@ -132,7 +132,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 4.0.16
+rubygems_version: 4.0.20
 specification_version: 4
 summary: A toolkit for building modeling frameworks (part of Rails).
 test_files: []