activesupport 4.2.11.1 → 6.0.3.1

data/CHANGELOG.md

@@ -1,678 +1,666 @@
-## Rails 4.2.11.1 (March 11, 2019) ##
+## Rails 6.0.3.1 (May 18, 2020) ##
 
-*   No changes.
-
-
-## Rails 4.2.11 (November 27, 2018) ##
-
-*   No changes.
+*   [CVE-2020-8165] Deprecate Marshal.load on raw cache read in RedisCacheStore
 
+*   [CVE-2020-8165] Avoid Marshal.load on raw cache value in MemCacheStore
 
-## Rails 4.2.10 (September 27, 2017) ##
+## Rails 6.0.3 (May 06, 2020) ##
 
-*   No changes.
+*   `Array#to_sentence` no longer returns a frozen string.
 
+    Before:
 
-## Rails 4.2.9 (June 26, 2017) ##
+        ['one', 'two'].to_sentence.frozen?
+        # => true
 
-*   Fixed bug in `DateAndTime::Compatibility#to_time` that caused it to
-    raise `RuntimeError: can't modify frozen Time` when called on any frozen `Time`.
-    Properly pass through the frozen `Time` or `ActiveSupport::TimeWithZone` object
-    when calling `#to_time`.
+    After:
 
-    *Kevin McPhillips* & *Andrew White*
+        ['one', 'two'].to_sentence.frozen?
+        # => false
 
-*   Restore the return type of `DateTime#utc`
+    *Nicolas Dular*
 
-    In Rails 5.0 the return type of `DateTime#utc` was changed to `Time` to be
-    consistent with the new `DateTime#localtime` method. When these changes were
-    backported in #27553 this inadvertently changed the return type in a patcn
-    release. Since `DateTime#localtime` was new in Rails 4.2.8 it's okay to
-    restore the return type of `DateTime#utc` but keep `DateTime#localtime` as
-    returning `Time` without breaking backwards compatibility.
+*   Update `ActiveSupport::Messages::Metadata#fresh?` to work for cookies with expiry set when
+    `ActiveSupport.parse_json_times = true`.
 
-    *Andrew White*
+    *Christian Gregg*
 
-*   In Core Extensions, make `MarshalWithAutoloading#load` pass through the second, optional
-    argument for `Marshal#load( source [, proc] )`. This way we don't have to do
-    `Marshal.method(:load).super_method.call(sourse, proc)` just to be able to pass a proc.
 
-    *Jeff Latz*
+## Rails 6.0.2.2 (March 19, 2020) ##
 
-*   Cache `ActiveSupport::TimeWithZone#to_datetime` before freezing.
-
-    *Adam Rice*
+*   No changes.
 
-*   `AS::Testing::TimeHelpers#travel_to` now changes `DateTime.now` as well as
-    `Time.now` and `Date.today`.
 
-    *Yuki Nishijima*
+## Rails 6.0.2.1 (December 18, 2019) ##
 
+*   No changes.
 
-## Rails 4.2.8 (February 21, 2017) ##
 
-*   Make `getlocal` and `getutc` always return instances of `Time` for
-    `ActiveSupport::TimeWithZone` and `DateTime`. This eliminates a possible
-    stack level too deep error in `to_time` where `ActiveSupport::TimeWithZone`
-    was wrapping a `DateTime` instance. As a consequence of this the internal
-    time value in `ActiveSupport::TimeWithZone` is now always an instance of
-    `Time` in the UTC timezone, whether that's as the UTC time directly or
-    a representation of the local time in the timezone. There should be no
-    consequences of this internal change and if there are it's a bug due to
-    leaky abstractions.
+## Rails 6.0.2 (December 13, 2019) ##
 
-    *Andrew White*
+*   Eager load translations during initialization.
 
-*   Add `DateTime#subsec` to return the fraction of a second as a `Rational`.
+    *Diego Plentz*
 
-    *Andrew White*
+*   Use per-thread CPU time clock on `ActiveSupport::Notifications`.
 
-*   Add additional aliases for `DateTime#utc` to mirror the ones on
-    `ActiveSupport::TimeWithZone` and `Time`.
+    *George Claghorn*
 
-    *Andrew White*
 
-*   Add `DateTime#localtime` to return an instance of `Time` in the system's
-    local timezone. Also aliased to `getlocal`.
+## Rails 6.0.1 (November 5, 2019) ##
 
-    *Andrew White*, *Yuichiro Kaneko*
+*   `ActiveSupport::SafeBuffer` supports `Enumerator` methods.
 
-*   Add `Time#sec_fraction` to return the fraction of a second as a `Rational`.
+    *Shugo Maeda*
 
-    *Andrew White*
+*   The Redis cache store fails gracefully when the server returns a "max number
+    of clients reached" error.
 
-*   Add `ActiveSupport.to_time_preserves_timezone` config option to control
-    how `to_time` handles timezones. In Ruby 2.4+ the behavior will change
-    from converting to the local system timezone, to preserving the timezone
-    of the receiver. This config option defaults to false so that apps made
-    with earlier versions of Rails are not affected when upgrading, e.g:
+    *Brandon Medenwald*
 
-        >> ENV['TZ'] = 'US/Eastern'
+*   Fixed that mutating a value returned by a memory cache store would
+    unexpectedly change the cached value.
 
-        >> "2016-04-23T10:23:12.000Z".to_time
-        => "2016-04-23T06:23:12.000-04:00"
+    *Jonathan Hyman*
 
-        >> ActiveSupport.to_time_preserves_timezone = true
+*   The default inflectors in `zeitwerk` mode support overrides:
 
-        >> "2016-04-23T10:23:12.000Z".to_time
-        => "2016-04-23T10:23:12.000Z"
+    ```ruby
+    # config/initializers/zeitwerk.rb
+    Rails.autoloaders.each do |autoloader|
+      autoloader.inflector.inflect(
+        "html_parser" => "HTMLParser",
+        "ssl_error"   => "SSLError"
+      )
+    end
+    ```
 
-    Fixes #24617.
+    That way, you can tweak how individual basenames are inflected without touching Active Support inflection rules, which are global. These inflectors fallback to `String#camelize`, so existing inflection rules are still taken into account for non-overridden basenames.
 
-    *Andrew White*
+    Please, check the [autoloading guide for `zeitwerk` mode](https://guides.rubyonrails.org/v6.0/autoloading_and_reloading_constants.html#customizing-inflections) if you prefer not to depend on `String#camelize` at all.
 
-*   Add `init_with` to `ActiveSupport::TimeWithZone` and `ActiveSupport::TimeZone`
+    *Xavier Noria*
 
-    It is helpful to be able to run apps concurrently written in successive
-    versions of Rails to aid migration, e.g. run Rails 4.2 and 5.0 variants
-    of your application at the same time to carry out A/B testing.
+*   Improve `Range#===`, `Range#include?`, and `Range#cover?` to work with beginless (startless)
+    and endless range targets.
 
-    To do this serialization formats need to be cross compatible and the
-    change in 3aa26cf didn't meet this criteria because the Psych loader
-    checks for the existence of `init_with` before setting the instance
-    variables and the wrapping behavior of `ActiveSupport::TimeWithZone`
-    tries to see if the `Time` instance responds to `init_with` before the
-    `@time` variable is set.
+    *Allen Hsu*, *Andrew Hodgkinson*
 
-    To fix this we backported just the `init_with` behavior from the change
-    in 3aa26cf. If the revived instance is then written out to YAML again
-    it will revert to the default Rails 4.2 behavior of converting it to
-    a UTC timestamp string.
+*   Don't use `Process#clock_gettime(CLOCK_THREAD_CPUTIME_ID)` on Solaris.
 
-    Fixes #26296.
+    *Iain Beeston*
 
-    *Andrew White*
 
-*   Fix `ActiveSupport::TimeWithZone#in` across DST boundaries.
+## Rails 6.0.0 (August 16, 2019) ##
 
-    Previously calls to `in` were being sent to the non-DST aware
-    method `Time#since` via `method_missing`. It is now aliased to
-    the DST aware `ActiveSupport::TimeWithZone#since` which handles
-    transitions across DST boundaries, e.g:
+*   Let `require_dependency` in `zeitwerk` mode look the autoload paths up for
+    better backwards compatibility.
 
-        Time.zone = "US/Eastern"
+    *Xavier Noria*
 
-        t = Time.zone.local(2016,11,6,1)
-        # => Sun, 06 Nov 2016 01:00:00 EDT -05:00
+*   Let `require_dependency` in `zeitwerk` mode support arguments that respond
+    to `to_path` for better backwards compatibility.
 
-        t.in(1.hour)
-        # => Sun, 06 Nov 2016 01:00:00 EST -05:00
+    *Xavier Noria*
 
-    Fixes #26580.
+*   Make ActiveSupport::Logger Fiber-safe. Fixes #36752.
 
-    *Thomas Balthazar*
+    Use `Fiber.current.__id__` in `ActiveSupport::Logger#local_level=` in order
+    to make log level local to Ruby Fibers in addition to Threads.
 
+    Example:
 
-## Rails 4.2.7 (July 12, 2016) ##
+        logger = ActiveSupport::Logger.new(STDOUT)
+        logger.level = 1
+        p "Main is debug? #{logger.debug?}"
 
-*   Fixed `ActiveSupport::Logger.broadcast` so that calls to `#silence` now
-    properly delegate to all loggers. Silencing now properly suppresses logging
-    to both the log and the console.
+        Fiber.new {
+          logger.local_level = 0
+          p "Thread is debug? #{logger.debug?}"
+        }.resume
 
-    *Kevin McPhillips*
+        p "Main is debug? #{logger.debug?}"
 
-*   Backported `ActiveSupport::LoggerThreadSafeLevel`. Assigning the
-    `Rails.logger.level` is now thread safe.
+    Before:
 
-    *Kevin McPhillips*
+        Main is debug? false
+        Thread is debug? true
+        Main is debug? true
 
-*   Fixed a problem with ActiveSupport::SafeBuffer.titleize calling capitalize
-    on nil.
+    After:
 
-    *Brian McManus*
+        Main is debug? false
+        Thread is debug? true
+        Main is debug? false
 
-*   Time zones: Ensure that the UTC offset reflects DST changes that occurred
-    since the app started. Removes UTC offset caching, reducing performance,
-    but this is still relatively quick and isn't in any hot paths.
+    *Alexander Varnin*
 
-    *Alexey Shein*
+*   Do not delegate missing `marshal_dump` and `_dump` methods via the
+    `delegate_missing_to` extension. This avoids unintentionally adding instance
+    variables when calling `Marshal.dump(object)`, should the delegation target of
+    `object` be a method which would otherwise add them. Fixes #36522.
 
-*   Prevent `Marshal.load` from looping infinitely when trying to autoload a constant
-    which resolves to a different name.
+    *Aaron Lipman*
 
-    *Olek Janiszewski*
 
+## Rails 6.0.0.rc2 (July 22, 2019) ##
 
-## Rails 4.2.6 (March 07, 2016) ##
+*   `truncate` would return the original string if it was too short to be truncated
+    and a frozen string if it were long enough to be truncated. Now truncate will
+    consistently return an unfrozen string regardless. This behavior is consistent
+    with `gsub` and `strip`.
 
-*   No changes.
+    Before:
 
+        'foobar'.truncate(5).frozen?
+        # => true
+        'foobar'.truncate(6).frozen?
+        # => false
 
-## Rails 4.2.5.2 (February 26, 2016) ##
+    After:
 
-*   No changes.
+        'foobar'.truncate(5).frozen?
+        # => false
+        'foobar'.truncate(6).frozen?
+        # => false
 
+    *Jordan Thomas*
 
-## Rails 4.2.5.1 (January 25, 2015) ##
 
-*   No changes.
+## Rails 6.0.0.rc1 (April 24, 2019) ##
 
+*   Introduce `ActiveSupport::ActionableError`.
 
-## Rails 4.2.5 (November 12, 2015) ##
+    Actionable errors let's you dispatch actions from Rails' error pages. This
+    can help you save time if you have a clear action for the resolution of
+    common development errors.
 
-*   Fix `TimeWithZone#eql?` to properly handle `TimeWithZone` created from `DateTime`:
-        twz = DateTime.now.in_time_zone
-        twz.eql?(twz.dup) => true
+    The de-facto example are pending migrations. Every time pending migrations
+    are found, a middleware raises an error. With actionable errors, you can
+    run the migrations right from the error page. Other examples include Rails
+    plugins that need to run a rake task to setup themselves. They can now
+    raise actionable errors to run the setup straight from the error pages.
 
-    Fixes #14178.
+    Here is how to define an actionable error:
 
-    *Roque Pinel*
+    ```ruby
+    class PendingMigrationError < MigrationError #:nodoc:
+      include ActiveSupport::ActionableError
 
-*   Handle invalid UTF-8 characters in `MessageVerifier.verify`.
+      action "Run pending migrations" do
+        ActiveRecord::Tasks::DatabaseTasks.migrate
+      end
+    end
+    ```
 
-    *Roque Pinel*, *Grey Baker*
+    To make an error actionable, include the `ActiveSupport::ActionableError`
+    module and invoke the `action` class macro to define the action. An action
+    needs a name and a procedure to execute. The name is shown as the name of a
+    button on the error pages. Once clicked, it will invoke the given
+    procedure.
 
+    *Vipul A M*, *Yao Jie*, *Genadi Samokovarov*
 
-## Rails 4.2.4 (August 24, 2015) ##
+*   Preserve `html_safe?` status on `ActiveSupport::SafeBuffer#*`.
 
-*   Fix a `SystemStackError` when encoding an `Enumerable` with `json` gem and
-    with the Active Support JSON encoder loaded.
+    Before:
 
-    Fixes #20775.
+        ("<br />".html_safe * 2).html_safe? #=> nil
 
-    *Sammy Larbi*, *Prathamesh Sonpatki*
+    After:
 
-*   Fix not calling `#default` on `HashWithIndifferentAcess#to_hash` when only
-    `default_proc` is set, which could raise.
+        ("<br />".html_safe * 2).html_safe? #=> true
 
-    *Simon Eskildsen*
+    *Ryo Nakamura*
 
-*   Fix setting `default_proc` on `HashWithIndifferentAccess#dup`
+*   Calling test methods with `with_info_handler` method to allow minitest-hooks
+    plugin to work.
 
-    *Simon Eskildsen*
+    *Mauri Mustonen*
 
+*   The Zeitwerk compatibility interface for `ActiveSupport::Dependencies` no
+    longer implements `autoloaded_constants` or `autoloaded?` (undocumented,
+    anyway). Experience shows introspection does not have many use cases, and
+    troubleshooting is done by logging. With this design trade-off we are able
+    to use even less memory in all environments.
 
-## Rails 4.2.3 (June 25, 2015) ##
+    *Xavier Noria*
 
-*   Fix a range of values for parameters of the Time#change
+*   Depends on Zeitwerk 2, which stores less metadata if reloading is disabled
+    and hence uses less memory when `config.cache_classes` is `true`, a standard
+    setup in production.
 
-    *Nikolay Kondratyev*
+    *Xavier Noria*
 
-*   Add some missing `require 'active_support/deprecation'`
+*   In `:zeitwerk` mode, eager load directories in engines and applications only
+    if present in their respective `config.eager_load_paths`.
 
-    *Akira Matsuda*
+    A common use case for this is adding `lib` to `config.autoload_paths`, but
+    not to `config.eager_load_paths`. In that configuration, for example, files
+    in the `lib` directory should not be eager loaded.
 
+    *Xavier Noria*
 
-## Rails 4.2.2 (June 16, 2015) ##
+*   Fix bug in Range comparisons when comparing to an excluded-end Range
 
-*   Fix XSS vulnerability in `ActiveSupport::JSON.encode` method.
+    Before:
 
-    CVE-2015-3226.
+        (1..10).cover?(1...11) # => false
 
-    *Rafael Mendonça França*
+    After:
 
-*   Fix denial of service vulnerability in the XML processing.
+        (1..10).cover?(1...11) # => true
 
-    CVE-2015-3227.
+    With the same change for `Range#include?` and `Range#===`.
 
-    *Aaron Patterson*
+    *Owen Stephens*
 
+*   Use weak references in descendants tracker to allow anonymous subclasses to
+    be garbage collected.
 
-## Rails 4.2.1 (March 19, 2015) ##
+    *Edgars Beigarts*
 
-*   Fixed a problem where String#truncate_words would get stuck with a complex
-    string.
+*   Update `ActiveSupport::Notifications::Instrumenter#instrument` to make
+    passing a block optional. This will let users use
+    `ActiveSupport::Notifications` messaging features outside of
+    instrumentation.
 
-    *Henrik Nygren*
+    *Ali Ibrahim*
 
-*   Fixed a roundtrip problem with AS::SafeBuffer where primitive-like strings
-    will be dumped as primitives:
+*   Fix `Time#advance` to work with dates before 1001-03-07
 
     Before:
 
-        YAML.load ActiveSupport::SafeBuffer.new("Hello").to_yaml  # => "Hello"
-        YAML.load ActiveSupport::SafeBuffer.new("true").to_yaml   # => true
-        YAML.load ActiveSupport::SafeBuffer.new("false").to_yaml  # => false
-        YAML.load ActiveSupport::SafeBuffer.new("1").to_yaml      # => 1
-        YAML.load ActiveSupport::SafeBuffer.new("1.1").to_yaml    # => 1.1
-
-     After:
-
-        YAML.load ActiveSupport::SafeBuffer.new("Hello").to_yaml  # => "Hello"
-        YAML.load ActiveSupport::SafeBuffer.new("true").to_yaml   # => "true"
-        YAML.load ActiveSupport::SafeBuffer.new("false").to_yaml  # => "false"
-        YAML.load ActiveSupport::SafeBuffer.new("1").to_yaml      # => "1"
-        YAML.load ActiveSupport::SafeBuffer.new("1.1").to_yaml    # => "1.1"
-
-    *Godfrey Chan*
-
-*   Replace fixed `:en` with `I18n.default_locale` in `Duration#inspect`.
+        Time.utc(1001, 3, 6).advance(years: -1) # => 1000-03-05 00:00:00 UTC
 
-    *Dominik Masur*
+    After
 
-*   Add missing time zone definitions for Russian Federation and sync them
-    with `zone.tab` file from tzdata version 2014j (latest).
+        Time.utc(1001, 3, 6).advance(years: -1) # => 1000-03-06 00:00:00 UTC
 
-    *Andrey Novikov*
+    Note that this doesn't affect `DateTime#advance` as that doesn't use a proleptic calendar.
 
+    *Andrew White*
 
-## Rails 4.2.0 (December 20, 2014) ##
-
-*   The decorated `load` and `require` methods are now kept private.
-
-    Fixes #17553.
+*   In Zeitwerk mode, engines are now managed by the `main` autoloader. Engines may reference application constants, if the application is reloaded and we do not reload engines, they won't use the reloaded application code.
 
     *Xavier Noria*
 
-*   `String#remove` and `String#remove!` accept multiple arguments.
+*   Add support for supplying `locale` to `transliterate` and `parameterize`.
 
-    *Pavel Pravosud*
+        I18n.backend.store_translations(:de, i18n: { transliterate: { rule: { "ü" => "ue" } } })
 
-*   `TimeWithZone#strftime` now delegates every directive to `Time#strftime` except for '%Z',
-    it also now correctly handles escaped '%' characters placed just before time zone related directives.
+        ActiveSupport::Inflector.transliterate("ü", locale: :de) # => "ue"
+        "Fünf autos".parameterize(locale: :de) # => "fuenf-autos"
+        ActiveSupport::Inflector.parameterize("Fünf autos", locale: :de) # => "fuenf-autos"
 
-    *Pablo Herrero*
+    *Kaan Ozkan*, *Sharang Dashputre*
 
-*   Corrected `Inflector#underscore` handling of multiple successive acroynms.
+*   Allow `Array#excluding` and `Enumerable#excluding` to deal with a passed array gracefully.
 
-    *James Le Cuirot*
+        [ 1, 2, 3, 4, 5 ].excluding([4, 5]) # => [ 1, 2, 3 ]
 
-*   Delegation now works with ruby reserved words passed to `:to` option.
-
-    Fixes #16956.
+    *DHH*
 
-    *Agis Anastasopoulos*
+*   Renamed `Array#without` and `Enumerable#without` to `Array#excluding` and `Enumerable#excluding`, to create parity with
+    `Array#including` and `Enumerable#including`. Retained the old names as aliases.
 
-*   Added method `#eql?` to `ActiveSupport::Duration`, in addition to `#==`.
+    *DHH*
 
-    Currently, the following returns `false`, contrary to expectation:
+*   Added `Array#including` and `Enumerable#including` to conveniently enlarge a collection with more members using a method rather than an operator:
 
-        1.minute.eql?(1.minute)
+        [ 1, 2, 3 ].including(4, 5) # => [ 1, 2, 3, 4, 5 ]
+        post.authors.including(Current.person) # => All the authors plus the current person!
 
-    Adding method `#eql?` will make this behave like expected. Method `#eql?` is
-    just a bit stricter than `#==`, as it checks whether the argument is also a duration. Their
-    parts may be different though.
+    *DHH*
 
-        1.minute.eql?(60.seconds)  # => true
-        1.minute.eql?(60)          # => false
 
-    *Joost Lubach*
+## Rails 6.0.0.beta3 (March 11, 2019) ##
 
-*   `Time#change` can now change nanoseconds (`:nsec`) as a higher-precision
-    alternative to microseconds (`:usec`).
+*   No changes.
 
-    *Agis Anastasooulos*
 
-*   `MessageVerifier.new` raises an appropriate exception if the secret is `nil`.
-    This prevents `MessageVerifier#generate` from raising a cryptic error later on.
+## Rails 6.0.0.beta2 (February 25, 2019) ##
 
-    *Kostiantyn Kahanskyi*
+*   New autoloading based on [Zeitwerk](https://github.com/fxn/zeitwerk).
 
-*   Introduced new configuration option `active_support.test_order` for
-    specifying the order in which test cases are executed. This option currently defaults
-    to `:sorted` but will be changed to `:random` in Rails 5.0.
+    *Xavier Noria*
 
-    *Akira Matsuda*, *Godfrey Chan*
+*   Revise `ActiveSupport::Notifications.unsubscribe` to correctly handle Regex or other multiple-pattern subscribers.
 
-*   Fixed a bug in `Inflector#underscore` where acroynms in nested constant names
-    are incorrectly parsed as camelCase.
+    *Zach Kemp*
 
-    Fixes #8015.
+*   Add `before_reset` callback to `CurrentAttributes` and define `after_reset` as an alias of `resets` for symmetry.
 
-    *Fred Wu*, *Matthew Draper*
+    *Rosa Gutierrez*
 
-*   Make `Time#change` throw an exception if the `:usec` option is out of range and
-    the time has an offset other than UTC or local.
+*   Remove the `` Kernel#` `` override that suppresses ENOENT and accidentally returns nil on Unix systems.
 
-    *Agis Anastasopoulos*
+    *Akinori Musha*
 
-*   `Method` objects now report themselves as not `duplicable?`. This allows
-    hashes and arrays containing `Method` objects to be `deep_dup`ed.
+*   Add `ActiveSupport::HashWithIndifferentAccess#assoc`.
 
-    *Peter Jaros*
+    `assoc` can now be called with either a string or a symbol.
 
-*   `determine_constant_from_test_name` does no longer shadow `NameError`s
-    which happens during constant autoloading.
+    *Stefan Schüßler*
 
-    Fixes #9933.
+*   Add `Hash#deep_transform_values`, and `Hash#deep_transform_values!`.
 
-    *Guo Xiang Tan*
+    *Guillermo Iguaran*
 
-*   Added instance_eval version to Object#try and Object#try!, so you can do this:
 
-        person.try { name.first }
+## Rails 6.0.0.beta1 (January 18, 2019) ##
 
-    instead of:
+*   Remove deprecated `Module#reachable?` method.
 
-        person.try { |person| person.name.first }
+    *Rafael Mendonça França*
 
-    *DHH*, *Ari Pollak*
+*   Remove deprecated `#acronym_regex` method from `Inflections`.
 
-*   Fix the `ActiveSupport::Duration#instance_of?` method to return the right
-    value with the class itself since it was previously delegated to the
-    internal value.
+    *Rafael Mendonça França*
 
-    *Robin Dupret*
+*   Fix `String#safe_constantize` throwing a `LoadError` for incorrectly cased constant references.
 
-*   Fix rounding errors with `#travel_to` by resetting the usec on any passed time to zero, so we only travel
-    with per-second precision, not anything deeper than that.
+    *Keenan Brock*
 
-    *DHH*
+*   Preserve key order passed to `ActiveSupport::CacheStore#fetch_multi`.
 
-*   Fix DateTime comparison with `DateTime::Infinity` object.
+    `fetch_multi(*names)` now returns its results in the same order as the `*names` requested, rather than returning cache hits followed by cache misses.
 
-    *Rafael Mendonça França*
+    *Gannon McGibbon*
 
-*   Added Object#itself which returns the object itself. Useful when dealing with a chaining scenario, like Active Record scopes:
+*   If the same block is `included` multiple times for a Concern, an exception is no longer raised.
 
-        Event.public_send(state.presence_in([ :trashed, :drafted ]) || :itself).order(:created_at)
+    *Mark J. Titorenko*, *Vlad Bokov*
 
-    *DHH*
+*   Fix bug where `#to_options` for `ActiveSupport::HashWithIndifferentAccess`
+    would not act as alias for `#symbolize_keys`.
 
-*   `Object#with_options` executes block in merging option context when
-    explicit receiver in not passed.
+    *Nick Weiland*
 
-    *Pavel Pravosud*
+*   Improve the logic that detects non-autoloaded constants.
 
-*   Fixed a compatibility issue with the `Oj` gem when cherry-picking the file
-    `active_support/core_ext/object/json` without requiring `active_support/json`.
+    *Jan Habermann*, *Xavier Noria*
 
-    Fixes #16131.
+*   Deprecate `ActiveSupport::Multibyte::Unicode#pack_graphemes(array)` and `ActiveSupport::Multibyte::Unicode#unpack_graphemes(string)`
+    in favor of `array.flatten.pack("U*")` and `string.scan(/\X/).map(&:codepoints)`, respectively.
 
-    *Godfrey Chan*
+    *Francesco Rodríguez*
 
-*   Make `Hash#with_indifferent_access` copy the default proc too.
+*   Deprecate `ActiveSupport::Multibyte::Chars.consumes?` in favor of `String#is_utf8?`.
 
-    *arthurnn*, *Xanders*
+    *Francesco Rodríguez*
 
-*   Add `String#truncate_words` to truncate a string by a number of words.
+*   Fix duration being rounded to a full second.
+    ```
+      time = DateTime.parse("2018-1-1")
+      time += 0.51.seconds
+    ```
+    Will now correctly add 0.51 second and not 1 full second.
 
-    *Mohamed Osama*
+    *Edouard Chin*
 
-*   Deprecate `capture` and `quietly`.
+*   Deprecate `ActiveSupport::Multibyte::Unicode#normalize` and `ActiveSupport::Multibyte::Chars#normalize`
+    in favor of `String#unicode_normalize`
 
-    These methods are not thread safe and may cause issues when used in threaded environments.
-    To avoid problems we are deprecating them.
+    *Francesco Rodríguez*
 
-    *Tom Meier*
+*   Deprecate `ActiveSupport::Multibyte::Unicode#downcase/upcase/swapcase` in favor of
+    `String#downcase/upcase/swapcase`.
 
-*   `DateTime#to_f` now preserves the fractional seconds instead of always
-    rounding to `.0`.
+    *Francesco Rodríguez*
 
-    Fixes #15994.
+*   Add `ActiveSupport::ParameterFilter`.
 
-    *John Paul Ashenfelter*
+    *Yoshiyuki Kinjo*
 
-*   Add `Hash#transform_values` to simplify a common pattern where the values of a
-    hash must change, but the keys are left the same.
+*   Rename `Module#parent`, `Module#parents`, and `Module#parent_name` to
+    `module_parent`, `module_parents`, and `module_parent_name`.
 
-    *Sean Griffin*
+    *Gannon McGibbon*
 
-*   Always instrument `ActiveSupport::Cache`.
+*   Deprecate the use of `LoggerSilence` in favor of `ActiveSupport::LoggerSilence`
 
-    Since `ActiveSupport::Notifications` only instruments items when there
-    are attached subscribers, we don't need to disable instrumentation.
+    *Edouard Chin*
 
-    *Peter Wagenet*
+*   Deprecate using negative limits in `String#first` and `String#last`.
 
-*   Make the `apply_inflections` method case-insensitive when checking
-    whether a word is uncountable or not.
+    *Gannon McGibbon*, *Eric Turner*
 
-    *Robin Dupret*
+*   Fix bug where `#without` for `ActiveSupport::HashWithIndifferentAccess` would fail
+    with symbol arguments
 
-*   Make Dependencies pass a name to NameError error.
+    *Abraham Chan*
 
-    *arthurnn*
+*   Treat `#delete_prefix`, `#delete_suffix` and `#unicode_normalize` results as non-`html_safe`.
+    Ensure safety of arguments for `#insert`, `#[]=` and `#replace` calls on `html_safe` Strings.
 
-*   Fixed `ActiveSupport::Cache::FileStore` exploding with long paths.
+    *Janosch Müller*
 
-    *Adam Panzer*, *Michael Grosser*
+*   Changed `ActiveSupport::TaggedLogging.new` to return a new logger instance instead
+    of mutating the one received as parameter.
 
-*   Fixed `ActiveSupport::TimeWithZone#-` so precision is not unnecessarily lost
-    when working with objects with a nanosecond component.
+    *Thierry Joyal*
 
-    `ActiveSupport::TimeWithZone#-` should return the same result as if we were
-    using `Time#-`:
+*   Define `unfreeze_time` as an alias of `travel_back` in `ActiveSupport::Testing::TimeHelpers`.
 
-        Time.now.end_of_day - Time.now.beginning_of_day # => 86399.999999999
+    The alias is provided for symmetry with `freeze_time`.
 
-    Before:
+    *Ryan Davidson*
 
-        Time.zone.now.end_of_day.nsec # => 999999999
-        Time.zone.now.end_of_day - Time.zone.now.beginning_of_day # => 86400.0
+*   Add support for tracing constant autoloads. Just throw
 
-    After:
+        ActiveSupport::Dependencies.logger = Rails.logger
+        ActiveSupport::Dependencies.verbose = true
 
-        Time.zone.now.end_of_day - Time.zone.now.beginning_of_day
-        # => 86399.999999999
+    in an initializer.
 
-    *Gordon Chan*
+    *Xavier Noria*
 
-*   Fixed precision error in NumberHelper when using Rationals.
+*   Maintain `html_safe?` on html_safe strings when sliced.
 
-    Before:
+        string = "<div>test</div>".html_safe
+        string[-1..1].html_safe? # => true
 
-        ActiveSupport::NumberHelper.number_to_rounded Rational(1000, 3), precision: 2
-        # => "330.00"
+    *Elom Gomez*, *Yumin Wong*
 
-    After:
+*   Add `Array#extract!`.
 
-        ActiveSupport::NumberHelper.number_to_rounded Rational(1000, 3), precision: 2
-        # => "333.33"
+    The method removes and returns the elements for which the block returns a true value.
+    If no block is given, an Enumerator is returned instead.
 
-    See #15379.
+        numbers = [0, 1, 2, 3, 4, 5, 6, 7, 8, 9]
+        odd_numbers = numbers.extract! { |number| number.odd? } # => [1, 3, 5, 7, 9]
+        numbers # => [0, 2, 4, 6, 8]
 
-    *Juanjo Bazán*
+    *bogdanvlviv*
 
-*   Removed deprecated `Numeric#ago` and friends
+*   Support not to cache `nil` for `ActiveSupport::Cache#fetch`.
 
-    Replacements:
+        cache.fetch('bar', skip_nil: true) { nil }
+        cache.exist?('bar') # => false
 
-        5.ago   => 5.seconds.ago
-        5.until => 5.seconds.until
-        5.since => 5.seconds.since
-        5.from_now => 5.seconds.from_now
+    *Martin Hong*
 
-    See #12389 for the history and rationale behind this.
+*   Add "event object" support to the notification system.
+    Before this change, end users were forced to create hand made artisanal
+    event objects on their own, like this:
 
-    *Godfrey Chan*
+        ActiveSupport::Notifications.subscribe('wait') do |*args|
+          @event = ActiveSupport::Notifications::Event.new(*args)
+        end
 
-*   DateTime `advance` now supports partial days.
+        ActiveSupport::Notifications.instrument('wait') do
+          sleep 1
+        end
 
-    Before:
+        @event.duration # => 1000.138
 
-        DateTime.now.advance(days: 1, hours: 12)
+    After this change, if the block passed to `subscribe` only takes one
+    parameter, the framework will yield an event object to the block.  Now
+    end users are no longer required to make their own:
 
-    After:
+        ActiveSupport::Notifications.subscribe('wait') do |event|
+          @event = event
+        end
 
-        DateTime.now.advance(days: 1.5)
+        ActiveSupport::Notifications.instrument('wait') do
+          sleep 1
+        end
 
-    Fixes #12005.
+        p @event.allocations # => 7
+        p @event.cpu_time    # => 0.256
+        p @event.idle_time   # => 1003.2399
 
-    *Shay Davidson*
+    Now you can enjoy event objects without making them yourself.  Neat!
 
-*   `Hash#deep_transform_keys` and `Hash#deep_transform_keys!` now transform hashes
-    in nested arrays.  This change also applies to `Hash#deep_stringify_keys`,
-    `Hash#deep_stringify_keys!`, `Hash#deep_symbolize_keys` and
-    `Hash#deep_symbolize_keys!`.
+    *Aaron "t.lo" Patterson*
 
-    *OZAWA Sakuro*
+*   Add cpu_time, idle_time, and allocations to Event.
 
-*   Fixed confusing `DelegationError` in `Module#delegate`.
+    *Eileen M. Uchitelle*, *Aaron Patterson*
 
-    See #15186.
+*   RedisCacheStore: support key expiry in increment/decrement.
 
-    *Vladimir Yarotsky*
+    Pass `:expires_in` to `#increment` and `#decrement` to set a Redis EXPIRE on the key.
 
-*   Fixed `ActiveSupport::Subscriber` so that no duplicate subscriber is created
-    when a subscriber method is redefined.
+    If the key is already set to expire, RedisCacheStore won't extend its expiry.
 
-    *Dennis Schön*
+        Rails.cache.increment("some_key", 1, expires_in: 2.minutes)
 
-*   Remove deprecated string based terminators for `ActiveSupport::Callbacks`.
+    *Jason Lee*
 
-    *Eileen M. Uchitelle*
+*   Allow `Range#===` and `Range#cover?` on Range.
 
-*   Fixed an issue when using
-    `ActiveSupport::NumberHelper::NumberToDelimitedConverter` to
-    convert a value that is an `ActiveSupport::SafeBuffer` introduced
-    in 2da9d67.
+    `Range#cover?` can now accept a range argument like `Range#include?` and
+    `Range#===`. `Range#===` works correctly on Ruby 2.6. `Range#include?` is moved
+    into a new file, with these two methods.
 
-    See #15064.
+    *Requiring active_support/core_ext/range/include_range is now deprecated.*
+    *Use `require "active_support/core_ext/range/compare_range"` instead.*
 
-    *Mark J. Titorenko*
+    *utilum*
 
-*   `TimeZone#parse` defaults the day of the month to '1' if any other date
-    components are specified. This is more consistent with the behavior of
-    `Time#parse`.
+*   Add `index_with` to Enumerable.
 
-    *Ulysse Carion*
+    Allows creating a hash from an enumerable with the value from a passed block
+    or a default argument.
 
-*   `humanize` strips leading underscores, if any.
+        %i( title body ).index_with { |attr| post.public_send(attr) }
+        # => { title: "hey", body: "what's up?" }
 
-    Before:
+        %i( title body ).index_with(nil)
+        # => { title: nil, body: nil }
 
-        '_id'.humanize # => ""
+    Closely linked with `index_by`, which creates a hash where the keys are extracted from a block.
 
-    After:
+    *Kasper Timm Hansen*
 
-        '_id'.humanize # => "Id"
+*   Fix bug where `ActiveSupport::TimeZone.all` would fail when tzinfo data for
+    any timezone defined in `ActiveSupport::TimeZone::MAPPING` is missing.
 
-    *Xavier Noria*
+    *Dominik Sander*
 
-*   Fixed backward compatibility issues introduced in 326e652.
+*   Redis cache store: `delete_matched` no longer blocks the Redis server.
+    (Switches from evaled Lua to a batched SCAN + DEL loop.)
 
-    Empty Hash or Array should not be present in serialization result.
+    *Gleb Mazovetskiy*
 
-        {a: []}.to_query # => ""
-        {a: {}}.to_query # => ""
+*   Fix bug where `ActiveSupport::Cache` will massively inflate the storage
+    size when compression is enabled (which is true by default). This patch
+    does not attempt to repair existing data: please manually flush the cache
+    to clear out the problematic entries.
 
-    For more info see #14948.
+    *Godfrey Chan*
 
-    *Bogdan Gusiev*
+*   Fix bug where `URI.unescape` would fail with mixed Unicode/escaped character input:
 
-*   Add `Digest::UUID::uuid_v3` and `Digest::UUID::uuid_v5` to support stable
-    UUID fixtures on PostgreSQL.
+        URI.unescape("\xe3\x83\x90")  # => "バ"
+        URI.unescape("%E3%83%90")  # => "バ"
+        URI.unescape("\xe3\x83\x90%E3%83%90")  # => Encoding::CompatibilityError
 
-    *Roderick van Domburg*
+    *Ashe Connor*, *Aaron Patterson*
 
-*   Fixed `ActiveSupport::Duration#eql?` so that `1.second.eql?(1.second)` is
-    true.
+*   Add `before?` and `after?` methods to `Date`, `DateTime`,
+    `Time`, and `TimeWithZone`.
 
-    This fixes the current situation of:
+    *Nick Holden*
 
-        1.second.eql?(1.second) # => false
+*   `ActiveSupport::Inflector#ordinal` and `ActiveSupport::Inflector#ordinalize` now support
+    translations through I18n.
 
-    `eql?` also requires that the other object is an `ActiveSupport::Duration`.
-    This requirement makes `ActiveSupport::Duration`'s behavior consistent with
-    the behavior of Ruby's numeric types:
+        # locale/fr.rb
 
-        1.eql?(1.0) # => false
-        1.0.eql?(1) # => false
+        {
+          fr: {
+            number: {
+              nth: {
+                ordinals: lambda do |_key, number:, **_options|
+                  if number.to_i.abs == 1
+                    'er'
+                  else
+                    'e'
+                  end
+                end,
 
-        1.second.eql?(1) # => false (was true)
-        1.eql?(1.second) # => false
+                ordinalized: lambda do |_key, number:, **_options|
+                  "#{number}#{ActiveSupport::Inflector.ordinal(number)}"
+                end
+              }
+            }
+          }
+        }
 
-        { 1 => "foo", 1.0 => "bar" }
-        # => { 1 => "foo", 1.0 => "bar" }
 
-        { 1 => "foo", 1.second => "bar" }
-        # now => { 1 => "foo", 1.second => "bar" }
-        # was => { 1 => "bar" }
+    *Christian Blais*
 
-    And though the behavior of these hasn't changed, for reference:
+*   Add `:private` option to ActiveSupport's `Module#delegate`
+    in order to delegate methods as private:
 
-        1 == 1.0 # => true
-        1.0 == 1 # => true
+        class User < ActiveRecord::Base
+          has_one :profile
+          delegate :date_of_birth, to: :profile, private: true
 
-        1 == 1.second # => true
-        1.second == 1 # => true
+          def age
+            Date.today.year - date_of_birth.year
+          end
+        end
 
-    *Emily Dobervich*
+        # User.new.age  # => 29
+        # User.new.date_of_birth
+        # => NoMethodError: private method `date_of_birth' called for #<User:0x00000008221340>
 
-*   `ActiveSupport::SafeBuffer#prepend` acts like `String#prepend` and modifies
-    instance in-place, returning self. `ActiveSupport::SafeBuffer#prepend!` is
-    deprecated.
+    *Tomas Valent*
 
-    *Pavel Pravosud*
+*   `String#truncate_bytes` to truncate a string to a maximum bytesize without
+    breaking multibyte characters or grapheme clusters like 👩‍👩‍👦‍👦.
 
-*   `HashWithIndifferentAccess` better respects `#to_hash` on objects it
-    receives. In particular, `.new`, `#update`, `#merge`, and `#replace` accept
-    objects which respond to `#to_hash`, even if those objects are not hashes
-    directly.
+    *Jeremy Daer*
 
-    *Peter Jaros*
+*   `String#strip_heredoc` preserves frozenness.
 
-*   Deprecate `Class#superclass_delegating_accessor`, use `Class#class_attribute` instead.
+        "foo".freeze.strip_heredoc.frozen?  # => true
 
-    *Akshay Vishnoi*
+    Fixes that frozen string literals would inadvertently become unfrozen:
 
-*   Ensure classes which `include Enumerable` get `#to_json` in addition to
-    `#as_json`.
+        # frozen_string_literal: true
 
-    *Sammy Larbi*
+        foo = <<-MSG.strip_heredoc
+          la la la
+        MSG
 
-*   Change the signature of `fetch_multi` to return a hash rather than an
-    array. This makes it consistent with the output of `read_multi`.
+        foo.frozen?  # => false !??
 
-    *Parker Selbert*
+    *Jeremy Daer*
 
-*   Introduce `Concern#class_methods` as a sleek alternative to clunky
-    `module ClassMethods`. Add `Kernel#concern` to define at the toplevel
-    without chunky `module Foo; extend ActiveSupport::Concern` boilerplate.
+*   Rails 6 requires Ruby 2.5.0 or newer.
 
-        # app/models/concerns/authentication.rb
-        concern :Authentication do
-          included do
-            after_create :generate_private_key
-          end
+    *Jeremy Daer*, *Kasper Timm Hansen*
 
-          class_methods do
-            def authenticate(credentials)
-              # ...
-            end
-          end
+*   Adds parallel testing to Rails.
 
-          def generate_private_key
-            # ...
-          end
-        end
+    Parallelize your test suite with forked processes or threads.
 
-        # app/models/user.rb
-        class User < ActiveRecord::Base
-          include Authentication
-        end
+    *Eileen M. Uchitelle*, *Aaron Patterson*
 
-    *Jeremy Kemper*
 
-Please check [4-1-stable](https://github.com/rails/rails/blob/4-1-stable/activesupport/CHANGELOG.md) for previous changes.
+Please check [5-2-stable](https://github.com/rails/rails/blob/5-2-stable/activesupport/CHANGELOG.md) for previous changes.