activestorage 6.1.7.10 → 7.0.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 7210176f90dfcb16101844584d3c0c6d37f3996085f6b0103a1e5a6001756273
-  data.tar.gz: 65e005fc682e993bd2f35ef01422337d0a25d298834c4fe1fa6560dead731d3b
+  metadata.gz: 85a5cf62726ae4b98295bb1b62926f4f2fa15257babdb8d6251cff37c682c354
+  data.tar.gz: 65f662b546c7f3e5eaf0775f065174f6d7162721578d763213eefd2875565a7b
 SHA512:
-  metadata.gz: b6dca260b33a644eb54c94514f6943b63b2935ba1736b9e2ce3af4f2dba2aaa854e01d5d0ac323e87b9dac4f1c8f2b3ee04d8935d28583956265b8de805d490e
-  data.tar.gz: f5890441b9d8be4edb20b0d637e3e9e6eff0fc7844c0e12a3d9ba907f1227c117e81e8f538206c0478be8a8b72cf3ac1f1d37ba7e02eaa7e0fdc03d5e9f285c1
+  metadata.gz: 3ff136a959f672bb822be34f573209a3017744a8ba476e8f6e2ec3de11130b9fb1bf4e876ee2b0233b1a2bfa9acd66d211b2b9b329f533b9449fd8d084482ec6
+  data.tar.gz: 1d38c4402a276a86847c492c1d373fab6ace21b6149e03426744561a1528307947f4353645b53db5bdf32cfa4776aa0c15cfd0591631bdc554be66b481f5d77e

data/CHANGELOG.md

@@ -1,80 +1,65 @@
-## Rails 6.1.7.10 (October 23, 2024) ##
-
-*   No changes.
-
-
-## Rails 6.1.7.9 (October 15, 2024) ##
-
-*   No changes.
-
-
-## Rails 6.1.7.8 (June 04, 2024) ##
-
-*   No changes.
+## Rails 7.0.0 (December 15, 2021) ##
 
+*   Support transforming empty-ish `has_many_attached` value into `[]` (e.g. `[""]`).
 
-## Rails 6.1.7.7 (February 21, 2024) ##
-
-*   Disables the session in `ActiveStorage::Blobs::ProxyController`
-    and `ActiveStorage::Representations::ProxyController`
-    in order to allow caching by default in some CDNs as CloudFlare
-
-    Fixes #44136
-
-    *Bruno Prieto*
-
-## Rails 6.1.7.6 (August 22, 2023) ##
+    ```ruby
+    @user.highlights = [""]
+    @user.highlights # => []
+    ```
 
-*   No changes.
+    *Sean Doyle*
 
 
-## Rails 6.1.7.5 (August 22, 2023) ##
+## Rails 7.0.0.rc3 (December 14, 2021) ##
 
 *   No changes.
 
 
-## Rails 6.1.7.4 (June 26, 2023) ##
+## Rails 7.0.0.rc2 (December 14, 2021) ##
 
 *   No changes.
 
+## Rails 7.0.0.rc1 (December 06, 2021) ##
 
-## Rails 6.1.7.3 (March 13, 2023) ##
-
-*   No changes.
+*   `Add ActiveStorage::Blob.compose` to concatenate multiple blobs.
 
+    *Gannon McGibbon*
 
-## Rails 6.1.7.2 (January 24, 2023) ##
+*   Setting custom metadata on blobs are now persisted to remote storage.
 
-*   No changes.
+    *joshuamsager*
 
+*   Support direct uploads to multiple services.
 
-## Rails 6.1.7.1 (January 17, 2023) ##
+    *Dmitry Tsepelev*
 
-*   No changes.
+*   Invalid default content types are deprecated
 
+    Blobs created with content_type `image/jpg`, `image/pjpeg`, `image/bmp`, `text/javascript` will now produce
+    a deprecation warning, since these are not valid content types.
 
-## Rails 6.1.7 (September 09, 2022) ##
+    These content types will be removed from the defaults in Rails 7.1.
 
-*   Respect Active Record's primary_key_type in Active Storage migrations. Backported from 7.0.
+    You can set `config.active_storage.silence_invalid_content_types_warning = true` to dismiss the warning.
 
-    *fatkodima*
+    *Alex Ghiculescu*
 
-## Rails 6.1.6.1 (July 12, 2022) ##
+## Rails 7.0.0.alpha2 (September 15, 2021) ##
 
 *   No changes.
 
 
-## Rails 6.1.6 (May 09, 2022) ##
+## Rails 7.0.0.alpha1 (September 15, 2021) ##
 
-*   No changes.
+*   Emit Active Support instrumentation events from Active Storage analyzers.
 
+    Fixes #42930
 
-## Rails 6.1.5.1 (April 26, 2022) ##
+    *Shouichi Kamiya*
 
-*   No changes.
+*   Add support for byte range requests
 
-
-## Rails 6.1.5 (March 09, 2022) ##
+    *Tom Prats*
 
 *   Attachments can be deleted after their association is no longer defined.
 
@@ -82,350 +67,206 @@
 
     *Don Sisco*
 
+*   Make `vips` the default variant processor for new apps.
 
-## Rails 6.1.4.7 (March 08, 2022) ##
-
-*   Added image transformation validation via configurable allow-list.
-    
-    Variant now offers a configurable allow-list for
-    transformation methods in addition to a configurable deny-list for arguments.
-    
-    [CVE-2022-21831]
-
-
-## Rails 6.1.4.6 (February 11, 2022) ##
-
-*   No changes.
-
-
-## Rails 6.1.4.5 (February 11, 2022) ##
-
-*   No changes.
-
-
-## Rails 6.1.4.4 (December 15, 2021) ##
-
-*   No changes.
-
-
-## Rails 6.1.4.3 (December 14, 2021) ##
-
-*   No changes.
-
-
-## Rails 6.1.4.2 (December 14, 2021) ##
-
-*   No changes.
-
-
-## Rails 6.1.4.1 (August 19, 2021) ##
-
-*   No changes.
-
-
-## Rails 6.1.4 (June 24, 2021) ##
-
-*   The parameters sent to `ffmpeg` for generating a video preview image are now
-    configurable under `config.active_storage.video_preview_arguments`.
-
-    *Brendon Muir*
-
-*   Fix Active Storage update task when running in an engine.
-
-    *Justin Malčić*
+    See the upgrade guide for instructions on converting from `mini_magick` to `vips`. `mini_magick` is
+    not deprecated, existing apps can keep using it.
 
-*   Don't raise an error if the mime type is not recognized.
+    *Breno Gazzola*
 
-    Fixes #41777.
+*   Deprecate `ActiveStorage::Current.host` in favor of `ActiveStorage::Current.url_options` which accepts
+    a host, protocol and port.
 
-    *Alex Ghiculescu*
-
-*   `ActiveStorage::PreviewError` is raised when a previewer is unable to generate a preview image.
-
-    *Alex Robbin*
-
-*   respond with 404 given invalid variation key when asking for representations.
-
-    *George Claghorn*
-
-*   `Blob` creation shouldn't crash if no service selected.
-
-    *Alex Ghiculescu*
-
-
-## Rails 6.1.3.2 (May 05, 2021) ##
-
-*   No changes.
+    *Santiago Bartesaghi*
 
+*   Allow using [IAM](https://cloud.google.com/storage/docs/access-control/signed-urls) when signing URLs with GCS.
 
-## Rails 6.1.3.1 (March 26, 2021) ##
-
-*  Marcel is upgraded to version 1.0.0 to avoid a dependency on GPL-licensed
-   mime types data.
-
-   *George Claghorn*
-
-
-## Rails 6.1.3 (February 17, 2021) ##
-
-*   No changes.
+    ```yaml
+    gcs:
+      service: GCS
+      ...
+      iam: true
+    ```
 
+    *RRethy*
 
-## Rails 6.1.2.1 (February 10, 2021) ##
+*   OpenSSL constants are now used for Digest computations.
 
-*   No changes.
+    *Dirkjan Bussink*
 
+*   Deprecate `config.active_storage.replace_on_assign_to_many`. Future versions of Rails
+    will behave the same way as when the config is set to `true`.
 
-## Rails 6.1.2 (February 09, 2021) ##
+    *Santiago Bartesaghi*
 
-*   No changes.
+*   Remove deprecated methods: `build_after_upload`, `create_after_upload!` in favor of `create_and_upload!`,
+    and `service_url` in favor of `url`.
 
+    *Santiago Bartesaghi*
 
-## Rails 6.1.1 (January 07, 2021) ##
+*   Add support of `strict_loading_by_default` to `ActiveStorage::Representations` controllers.
 
-*   Fix S3 multipart uploads when threshold is larger than file.
+    *Anton Topchii*, *Andrew White*
 
-    *Matt Muller*
+*   Allow to detach an attachment when record is not persisted.
 
+    *Jacopo Beschi*
 
-## Rails 6.1.0 (December 09, 2020) ##
+*   Use libvips instead of ImageMagick to analyze images when `active_storage.variant_processor = vips`.
 
-*   Change default queue name of the analysis (`:active_storage_analysis`) and
-    purge (`:active_storage_purge`) jobs to be the job adapter's default (`:default`).
+    *Breno Gazzola*
 
-    *Rafael Mendonça França*
+*   Add metadata value for presence of video channel in video blobs.
 
-*   Implement `strict_loading` on ActiveStorage associations.
+    The `metadata` attribute of video blobs has a new boolean key named `video` that is set to
+    `true` if the file has an video channel and `false` if it doesn't.
 
-    *David Angulo*
+    *Breno Gazzola*
 
-*   Remove deprecated support to pass `:combine_options` operations to `ActiveStorage::Transformers::ImageProcessing`.
+*   Deprecate usage of `purge` and `purge_later` from the association extension.
 
-    *Rafael Mendonça França*
+    *Jacopo Beschi*
 
-*   Remove deprecated `ActiveStorage::Transformers::MiniMagickTransformer`.
+*   Passing extra parameters in `ActiveStorage::Blob#url` to S3 Client.
 
-    *Rafael Mendonça França*
+    This allows calls of `ActiveStorage::Blob#url` to have more interaction with
+    the S3 Presigner, enabling, amongst other options, custom S3 domain URL
+    Generation.
 
-*   Remove deprecated `config.active_storage.queue`.
-
-    *Rafael Mendonça França*
-
-*   Remove deprecated `ActiveStorage::Downloading`.
+    ```ruby
+    blob = ActiveStorage::Blob.last
 
-    *Rafael Mendonça França*
+    blob.url # => https://<bucket-name>.s3.<region>.amazonaws.com/<key>
+    blob.url(virtual_host: true) # => # => https://<bucket-name>/<key>
+    ```
 
-*   Add per-environment configuration support
+    *josegomezr*
 
-    *Pietro Moro*
+*   Allow setting a `Cache-Control` on files uploaded to GCS.
 
-*   The Poppler PDF previewer renders a preview image using the original
-    document's crop box rather than its media box, hiding print margins. This
-    matches the behavior of the MuPDF previewer.
+    ```yaml
+    gcs:
+      service: GCS
+      ...
+      cache_control: "public, max-age=3600"
+    ```
 
-    *Vincent Robert*
+    *maleblond*
 
-*   Touch parent model when an attachment is purged.
+*   The parameters sent to `ffmpeg` for generating a video preview image are now
+    configurable under `config.active_storage.video_preview_arguments`.
 
-    *Víctor Pérez Rodríguez*
+    *Brendon Muir*
 
-*   Files can now be served by proxying them from the underlying storage service
-    instead of redirecting to a signed service URL. Use the
-    `rails_storage_proxy_path` and `_url` helpers to proxy an attached file:
+*   The ActiveStorage video previewer will now use scene change detection to generate
+    better preview images (rather than the previous default of using the first frame
+    of the video). This change requires FFmpeg v3.4+.
 
-    ```erb
-    <%= image_tag rails_storage_proxy_path(@user.avatar) %>
-    ```
+    *Jonathan Hefner*
 
-    To proxy by default, set `config.active_storage.resolve_model_to_route`:
+*   Add support for ActiveStorage expiring URLs.
 
     ```ruby
-    # Proxy attached files instead.
-    config.active_storage.resolve_model_to_route = :rails_storage_proxy
-    ```
-
-    ```erb
-    <%= image_tag @user.avatar %>
-    ```
-
-    To redirect to a signed service URL when the default file serving strategy
-    is set to proxying, use the `rails_storage_redirect_path` and `_url` helpers:
+    rails_blob_path(user.avatar, disposition: "attachment", expires_in: 30.minutes)
 
-    ```erb
-    <%= image_tag rails_storage_redirect_path(@user.avatar) %>
+    <%= image_tag rails_blob_path(user.avatar.variant(resize: "100x100"), expires_in: 30.minutes) %>
     ```
 
-    *Jonathan Fleckenstein*
+    If you want to set default expiration time for ActiveStorage URLs throughout your application, set `config.active_storage.urls_expire_in`.
 
-*   Add `config.active_storage.web_image_content_types` to allow applications
-    to add content types (like `image/webp`) in which variants can be processed,
-    instead of letting those images be converted to the fallback PNG format.
+    *aki77*
 
-    *Jeroen van Haperen*
+*   Allow to purge an attachment when record is not persisted for `has_many_attached`.
 
-*   Add support for creating variants of `WebP` images out of the box.
+    *Jacopo Beschi*
 
-    *Dino Maric*
+*   Add `with_all_variant_records` method to eager load all variant records on an attachment at once.
+    `with_attached_image` scope now eager loads variant records if using variant tracking.
 
-*   Only enqueue analysis jobs for blobs with non-null analyzer classes.
-
-    *Gannon McGibbon*
-
-*   Previews are created on the same service as the original blob.
-
-    *Peter Zhu*
+    *Alex Ghiculescu*
 
-*   Remove unused `disposition` and `content_type` query parameters for `DiskService`.
+*   Add metadata value for presence of audio channel in video blobs.
 
-    *Peter Zhu*
+    The `metadata` attribute of video blobs has a new boolean key named `audio` that is set to
+    `true` if the file has an audio channel and `false` if it doesn't.
 
-*   Use `DiskController` for both public and private files.
+    *Breno Gazzola*
 
-    `DiskController` is able to handle multiple services by adding a
-    `service_name` field in the generated URL in `DiskService`.
+*   Adds analyzer for audio files.
 
-    *Peter Zhu*
+    *Breno Gazzola*
 
-*   Variants are tracked in the database to avoid existence checks in the storage service.
+*   Respect Active Record's primary_key_type in Active Storage migrations.
 
-    *George Claghorn*
+    *fatkodima*
 
-*   Deprecate `service_url` methods in favour of `url`.
+*   Allow `expires_in` for ActiveStorage signed ids.
 
-    Deprecate `Variant#service_url` and `Preview#service_url` to instead use
-    `#url` method to be consistent with `Blob`.
+    *aki77*
 
-    *Peter Zhu*
+*   Allow to purge an attachment when record is not persisted for `has_one_attached`.
 
-*   Permanent URLs for public storage blobs.
+    *Jacopo Beschi*
 
-    Services can be configured in `config/storage.yml` with a new key
-    `public: true | false` to indicate whether a service holds public
-    blobs or private blobs. Public services will always return a permanent URL.
+*   Add a load hook called `active_storage_variant_record` (providing `ActiveStorage::VariantRecord`)
+    to allow for overriding aspects of the `ActiveStorage::VariantRecord` class. This makes
+    `ActiveStorage::VariantRecord` consistent with `ActiveStorage::Blob` and `ActiveStorage::Attachment`
+    that already have load hooks.
 
-    Deprecates `Blob#service_url` in favor of `Blob#url`.
+    *Brendon Muir*
 
-    *Peter Zhu*
+*   `ActiveStorage::PreviewError` is raised when a previewer is unable to generate a preview image.
 
-*   Make services aware of configuration names.
+    *Alex Robbin*
 
-    *Gannon McGibbon*
+*   Add `ActiveStorage::Streaming` module that can be included in a controller to get access to `#send_blob_stream`,
+    which wraps the new `ActionController::Base#send_stream` method to stream a blob from cloud storage:
 
-*   The `Content-Type` header is set on image variants when they're uploaded to third-party storage services.
+    ```ruby
+    class MyPublicBlobsController < ApplicationController
+      include ActiveStorage::SetBlob, ActiveStorage::Streaming
+
+      def show
+        http_cache_forever(public: true) do
+          send_blob_stream @blob, disposition: params[:disposition]
+        end
+      end
+    end
+    ```
 
-    *Kyle Ribordy*
+    *DHH*
 
-*   Allow storage services to be configured per attachment.
+*   Add ability to use pre-defined variants.
 
     ```ruby
     class User < ActiveRecord::Base
-      has_one_attached :avatar, service: :s3
+      has_one_attached :avatar do |attachable|
+        attachable.variant :thumb, resize: "100x100"
+        attachable.variant :medium, resize: "300x300", monochrome: true
+      end
     end
 
     class Gallery < ActiveRecord::Base
-      has_many_attached :photos, service: :s3
+      has_many_attached :photos do |attachable|
+        attachable.variant :thumb, resize: "100x100"
+        attachable.variant :medium, resize: "300x300", monochrome: true
+      end
     end
-    ```
 
-    *Dmitry Tsepelev*
-
-*   You can optionally provide a custom blob key when attaching a new file:
-
-    ```ruby
-    user.avatar.attach key: "avatars/#{user.id}.jpg",
-      io: io, content_type: "image/jpeg", filename: "avatar.jpg"
+    <%= image_tag user.avatar.variant(:thumb) %>
     ```
 
-    Active Storage will store the blob's data on the configured service at the provided key.
-
-    *George Claghorn*
-
-*   Replace `Blob.create_after_upload!` with `Blob.create_and_upload!` and deprecate the former.
-
-    `create_after_upload!` has been removed since it could lead to data
-    corruption by uploading to a key on the storage service which happened to
-    be already taken. Creating the record would then correctly raise a
-    database uniqueness exception but the stored object would already have
-    overwritten another. `create_and_upload!` swaps the order of operations
-    so that the key gets reserved up-front or the uniqueness error gets raised,
-    before the upload to a key takes place.
-
-    *Julik Tarkhanov*
-
-*   Set content disposition in direct upload using `filename` and `disposition` parameters to `ActiveStorage::Service#headers_for_direct_upload`.
-
-    *Peter Zhu*
-
-*   Allow record to be optionally passed to blob finders to make sharding
-    easier.
-
-    *Gannon McGibbon*
-
-*   Switch from `azure-storage` gem to `azure-storage-blob` gem for Azure service.
-
-    *Peter Zhu*
-
-*   Add `config.active_storage.draw_routes` to disable Active Storage routes.
-
-    *Gannon McGibbon*
-
-*   Image analysis is skipped if ImageMagick returns an error.
-
-    `ActiveStorage::Analyzer::ImageAnalyzer#metadata` would previously raise a
-    `MiniMagick::Error`, which caused persistent `ActiveStorage::AnalyzeJob`
-    failures. It now logs the error and returns `{}`, resulting in no metadata
-    being added to the offending image blob.
-
-    *George Claghorn*
-
-*   Method calls on singular attachments return `nil` when no file is attached.
-
-    Previously, assuming the following User model, `user.avatar.filename` would
-    raise a `Module::DelegationError` if no avatar was attached:
-
-    ```ruby
-    class User < ApplicationRecord
-      has_one_attached :avatar
-    end
-    ```
-
-    They now return `nil`.
-
-    *Matthew Tanous*
-
-*   The mirror service supports direct uploads.
-
-    New files are directly uploaded to the primary service. When a
-    directly-uploaded file is attached to a record, a background job is enqueued
-    to copy it to each secondary service.
-
-    Configure the queue used to process mirroring jobs by setting
-    `config.active_storage.queues.mirror`. The default is `:active_storage_mirror`.
-
-    *George Claghorn*
-
-*   The S3 service now permits uploading files larger than 5 gigabytes.
+    *fatkodima*
 
-    When uploading a file greater than 100 megabytes in size, the service
-    transparently switches to [multipart uploads](https://docs.aws.amazon.com/AmazonS3/latest/dev/mpuoverview.html)
-    using a part size computed from the file's total size and S3's part count limit.
+*   After setting `config.active_storage.resolve_model_to_route = :rails_storage_proxy`
+    `rails_blob_path` and `rails_representation_path` will generate proxy URLs by default.
 
-    No application changes are necessary to take advantage of this feature. You
-    can customize the default 100 MB multipart upload threshold in your S3
-    service's configuration:
+    *Ali Ismayilov*
 
-    ```yaml
-    production:
-      service: s3
-      access_key_id: <%= Rails.application.credentials.dig(:aws, :access_key_id) %>
-      secret_access_key: <%= Rails.application.credentials.dig(:aws, :secret_access_key) %>
-      region: us-east-1
-      bucket: my-bucket
-      upload:
-        multipart_threshold: <%= 250.megabytes %>
-    ```
+*   Declare `ActiveStorage::FixtureSet` and `ActiveStorage::FixtureSet.blob` to
+    improve fixture integration.
 
-    *George Claghorn*
+    *Sean Doyle*
 
 
-Please check [6-0-stable](https://github.com/rails/rails/blob/6-0-stable/activestorage/CHANGELOG.md) for previous changes.
+Please check [6-1-stable](https://github.com/rails/rails/blob/6-1-stable/activestorage/CHANGELOG.md) for previous changes.

data/MIT-LICENSE

@@ -1,4 +1,4 @@
-Copyright (c) 2017-2022 David Heinemeier Hansson, Basecamp
+Copyright (c) 2017-2021 David Heinemeier Hansson, Basecamp
 
 Permission is hereby granted, free of charge, to any person obtaining
 a copy of this software and associated documentation files (the

data/README.md

@@ -32,7 +32,7 @@ class User < ApplicationRecord
 end
 
 # Attach an avatar to the user.
-user.avatar.attach(io: File.open("/path/to/face.jpg"), filename: "face.jpg", content_type: "image/jpg")
+user.avatar.attach(io: File.open("/path/to/face.jpg"), filename: "face.jpg", content_type: "image/jpeg")
 
 # Does the user have an avatar?
 user.avatar.attached? # => true
@@ -88,8 +88,7 @@ class MessagesController < ApplicationController
   end
 
   def create
-    message = Message.create! params.require(:message).permit(:title, :content)
-    message.images.attach(params[:message][:images])
+    message = Message.create! params.require(:message).permit(:title, :content, images: [])
     redirect_to message
   end
 
@@ -124,27 +123,42 @@ When the application is configured to proxy files by default, use the `rails_sto
 
 Optionally, files can be proxied instead. This means that your application servers will download file data from the storage service in response to requests. This can be useful for serving files from a CDN.
 
-Explicitly proxy attachments using the `rails_storage_proxy_path` and `_url` route helpers:
-
-```erb
-<%= image_tag rails_storage_proxy_path(@user.avatar) %>
-```
-
-Or configure Active Storage to use proxying by default:
+You can configure Active Storage to use proxying by default:
 
 ```ruby
 # config/initializers/active_storage.rb
 Rails.application.config.active_storage.resolve_model_to_route = :rails_storage_proxy
 ```
 
+Or if you want to explicitly proxy specific attachments there are URL helpers you can use in the form of `rails_storage_proxy_path` and `rails_storage_proxy_url`.
+
+```erb
+<%= image_tag rails_storage_proxy_path(@user.avatar) %>
+```
+
 ## Direct uploads
 
 Active Storage, with its included JavaScript library, supports uploading directly from the client to the cloud.
 
 ### Direct upload installation
 
-1. Include `activestorage.js` in your application's JavaScript bundle.
+1. Include the Active Storage JavaScript in your application's JavaScript bundle or reference it directly.
 
+    Requiring directly without bundling through the asset pipeline in the application html with autostart:
+    ```html
+    <%= javascript_include_tag "activestorage" %>
+    ```
+    Requiring via importmap-rails without bundling through the asset pipeline in the application html without autostart as ESM:
+    ```ruby
+    # config/importmap.rb
+    pin "@rails/activestorage", to: "activestorage.esm.js"
+    ```
+    ```html
+    <script type="module-shim">
+      import * as ActiveStorage from "@rails/activestorage"
+      ActiveStorage.start()
+    </script>
+    ```
     Using the asset pipeline:
     ```js
     //= require activestorage