activesupport 5.2.4.3 → 7.0.3

data/CHANGELOG.md

@@ -1,648 +1,433 @@
-## Rails 5.2.4.3 (May 18, 2020) ##
-
-*   [CVE-2020-8165] Deprecate Marshal.load on raw cache read in RedisCacheStore
-
-*   [CVE-2020-8165] Avoid Marshal.load on raw cache value in MemCacheStore
-
-## Rails 5.2.4.1 (December 18, 2019) ##
+## Rails 7.0.3 (May 09, 2022) ##
 
 *   No changes.
 
 
-## Rails 5.2.4 (November 27, 2019) ##
-
-*   Make ActiveSupport::Logger Fiber-safe. Fixes #36752.
-
-    Use `Fiber.current.__id__` in `ActiveSupport::Logger#local_level=` in order
-    to make log level local to Ruby Fibers in addition to Threads.
-
-    Example:
-
-        logger = ActiveSupport::Logger.new(STDOUT)
-        logger.level = 1
-        p "Main is debug? #{logger.debug?}"
-
-        Fiber.new {
-          logger.local_level = 0
-          p "Thread is debug? #{logger.debug?}"
-        }.resume
-
-        p "Main is debug? #{logger.debug?}"
-
-    Before:
-
-        Main is debug? false
-        Thread is debug? true
-        Main is debug? true
-
-    After:
-
-        Main is debug? false
-        Thread is debug? true
-        Main is debug? false
-
-    *Alexander Varnin*
+## Rails 7.0.2.4 (April 26, 2022) ##
 
+*   Fix and add protections for XSS in `ActionView::Helpers` and `ERB::Util`.
 
-## Rails 5.2.3 (March 27, 2019) ##
+    Add the method `ERB::Util.xml_name_escape` to escape dangerous characters
+    in names of tags and names of attributes, following the specification of XML.
 
-*   Add `ActiveSupport::HashWithIndifferentAccess#assoc`.
+    *Álvaro Martín Fraguas*
 
-    `assoc` can now be called with either a string or a symbol.
-
-    *Stefan Schüßler*
-
-*   Fix `String#safe_constantize` throwing a `LoadError` for incorrectly cased constant references.
-
-    *Keenan Brock*
-
-*   Allow Range#=== and Range#cover? on Range
-
-    `Range#cover?` can now accept a range argument like `Range#include?` and
-    `Range#===`. `Range#===` works correctly on Ruby 2.6. `Range#include?` is moved
-    into a new file, with these two methods.
-
-    *utilum*
-
-*   If the same block is `included` multiple times for a Concern, an exception is no longer raised.
-
-    *Mark J. Titorenko*, *Vlad Bokov*
-
-
-## Rails 5.2.2.1 (March 11, 2019) ##
+## Rails 7.0.2.3 (March 08, 2022) ##
 
 *   No changes.
 
 
-## Rails 5.2.2 (December 04, 2018) ##
-
-*   Fix bug where `#to_options` for `ActiveSupport::HashWithIndifferentAccess`
-    would not act as alias for `#symbolize_keys`.
-
-    *Nick Weiland*
-
-*   Improve the logic that detects non-autoloaded constants.
-
-    *Jan Habermann*, *Xavier Noria*
+## Rails 7.0.2.2 (February 11, 2022) ##
 
-*   Fix bug where `URI.unescape` would fail with mixed Unicode/escaped character input:
+*   Fix Reloader method signature to work with the new Executor signature
 
-        URI.unescape("\xe3\x83\x90")  # => "バ"
-        URI.unescape("%E3%83%90")  # => "バ"
-        URI.unescape("\xe3\x83\x90%E3%83%90")  # => Encoding::CompatibilityError
 
-    *Ashe Connor*, *Aaron Patterson*
-
-
-## Rails 5.2.1.1 (November 27, 2018) ##
+## Rails 7.0.2.1 (February 11, 2022) ##
 
 *   No changes.
 
 
-## Rails 5.2.1 (August 07, 2018) ##
+## Rails 7.0.2 (February 08, 2022) ##
 
-*   Redis cache store: `delete_matched` no longer blocks the Redis server.
-    (Switches from evaled Lua to a batched SCAN + DEL loop.)
+*   Fix `ActiveSupport::EncryptedConfiguration` to be compatible with Psych 4
 
-    *Gleb Mazovetskiy*
+    *Stephen Sugden*
 
-*   Fix bug where `ActiveSupport::Timezone.all` would fail when tzinfo data for
-    any timezone defined in `ActiveSupport::TimeZone::MAPPING` is missing.
+*   Improve `File.atomic_write` error handling.
 
-    *Dominik Sander*
+    *Daniel Pepper*
 
-*   Fix bug where `ActiveSupport::Cache` will massively inflate the storage
-    size when compression is enabled (which is true by default). This patch
-    does not attempt to repair existing data: please manually flush the cache
-    to clear out the problematic entries.
 
-    *Godfrey Chan*
+## Rails 7.0.1 (January 06, 2022) ##
 
-*   Fix `ActiveSupport::Cache#read_multi` bug with local cache enabled that was
-    returning instances of `ActiveSupport::Cache::Entry` instead of the raw values.
+*   Fix `Class#descendants` and `DescendantsTracker#descendants` compatibility with Ruby 3.1.
 
-    *Jason Lee*
+    [The native `Class#descendants` was reverted prior to Ruby 3.1 release](https://bugs.ruby-lang.org/issues/14394#note-33),
+    but `Class#subclasses` was kept, breaking the feature detection.
 
+    *Jean Boussier*
 
-## Rails 5.2.0 (April 09, 2018) ##
 
-*   Caching: MemCache and Redis `read_multi` and `fetch_multi` speedup.
-    Read from the local in-memory cache before consulting the backend.
+## Rails 7.0.0 (December 15, 2021) ##
 
-    *Gabriel Sobrinho*
+*   Fix `ActiveSupport::Duration.build` to support negative values.
 
-*   Return all mappings for a timezone identifier in `country_zones`.
+    The algorithm to collect the `parts` of the `ActiveSupport::Duration`
+    ignored the sign of the `value` and accumulated incorrect part values. This
+    impacted `ActiveSupport::Duration#sum` (which is dependent on `parts`) but
+    not `ActiveSupport::Duration#eql?` (which is dependent on `value`).
 
-    Some timezones like `Europe/London` have multiple mappings in
-    `ActiveSupport::TimeZone::MAPPING` so return all of them instead
-    of the first one found by using `Hash#value`. e.g:
+    *Caleb Buxton*, *Braden Staudacher*
 
-        # Before
-        ActiveSupport::TimeZone.country_zones("GB") # => ["Edinburgh"]
 
-        # After
-        ActiveSupport::TimeZone.country_zones("GB") # => ["Edinburgh", "London"]
+## Rails 7.0.0.rc3 (December 14, 2021) ##
 
-    Fixes #31668.
+*   No changes.
 
-    *Andrew White*
 
-*   Add support for connection pooling on RedisCacheStore.
+## Rails 7.0.0.rc2 (December 14, 2021) ##
 
-    *fatkodima*
+*   No changes.
 
-*   Support hash as first argument in `assert_difference`. This allows to specify multiple
-    numeric differences in the same assertion.
+## Rails 7.0.0.rc1 (December 06, 2021) ##
 
-        assert_difference ->{ Article.count } => 1, ->{ Post.count } => 2
+*   Deprecate passing a format to `#to_s` in favor of `#to_formatted_s` in `Array`, `Range`, `Date`, `DateTime`, `Time`,
+    `BigDecimal`, `Float` and, `Integer`.
 
-    *Julien Meichelbeck*
+    *Rafael Mendonça França*
 
-*   Add missing instrumentation for `read_multi` in `ActiveSupport::Cache::Store`.
+*   Document `ActiveSupport::Testing::Deprecation`.
 
-    *Ignatius Reza Lesmana*
+    *Sam Bostock & Sam Jordan*
 
-*   `assert_changes` will always assert that the expression changes,
-    regardless of `from:` and `to:` argument combinations.
+*   Add `Pathname#existence`.
 
-    *Daniel Ma*
+    ```ruby
+    Pathname.new("file").existence&.read
+    ```
 
-*   Use SHA-1 to generate non-sensitive digests, such as the ETag header.
+    *Timo Schilling*
 
-    Enabled by default for new apps; upgrading apps can opt in by setting
-    `config.active_support.use_sha1_digests = true`.
+*   Remove deprecate `ActiveSupport::Multibyte::Unicode.default_normalization_form`.
 
-    *Dmitri Dolguikh*, *Eugene Kenny*
+    *Rafael Mendonça França*
 
-*   Changed default behaviour of `ActiveSupport::SecurityUtils.secure_compare`,
-    to make it not leak length information even for variable length string.
+*   Remove deprecated support to use `Range#include?` to check the inclusion of a value in
+    a date time range is deprecated.
 
-    Renamed old `ActiveSupport::SecurityUtils.secure_compare` to `fixed_length_secure_compare`,
-    and started raising `ArgumentError` in case of length mismatch of passed strings.
+    *Rafael Mendonça França*
 
-    *Vipul A M*
+*   Remove deprecated `URI.parser`.
 
-*   Make `ActiveSupport::TimeZone.all` return only time zones that are in
-    `ActiveSupport::TimeZone::MAPPING`.
+    *Rafael Mendonça França*
 
-    Fixes #7245.
+*   Remove deprecated `config.active_support.use_sha1_digests`.
 
-    *Chris LaRose*
+    *Rafael Mendonça França*
 
-*   MemCacheStore: Support expiring counters.
+*   Invoking `Object#with_options` without a `&block` argument returns the
+    `ActiveSupport::OptionMerger` instance.
 
-    Pass `expires_in: [seconds]` to `#increment` and `#decrement` options
-    to set the Memcached TTL (time-to-live) if the counter doesn't exist.
-    If the counter exists, Memcached doesn't extend its expiry when it's
-    incremented or decremented.
+    *Sean Doyle*
 
-    ```
-    Rails.cache.increment("my_counter", 1, expires_in: 2.minutes)
-    ```
+*   `Rails.application.executor` hooks can now be called around every test
 
-    *Takumasa Ochi*
+    This helps to better simulate request or job local state being reset around tests and prevents state
+    leaking from one test to another.
 
-*   Handle `TZInfo::AmbiguousTime` errors.
+    However it requires the executor hooks executed in the test environment to be re-entrant.
 
-    Make `ActiveSupport::TimeWithZone` match Ruby's handling of ambiguous
-    times by choosing the later period, e.g.
+    To enable this, set `config.active_support.executor_around_test_case = true` (this is the default in Rails 7).
 
-    Ruby:
-    ```
-    ENV["TZ"] = "Europe/Moscow"
-    Time.local(2014, 10, 26, 1, 0, 0)   # => 2014-10-26 01:00:00 +0300
-    ```
+    *Jean Boussier*
 
-    Before:
-    ```
-    >> "2014-10-26 01:00:00".in_time_zone("Moscow")
-    TZInfo::AmbiguousTime: 26/10/2014 01:00 is an ambiguous local time.
-    ```
+*   `ActiveSupport::DescendantsTracker` now mostly delegate to `Class#descendants` on Ruby 3.1
 
-    After:
-    ```
-    >> "2014-10-26 01:00:00".in_time_zone("Moscow")
-    => Sun, 26 Oct 2014 01:00:00 MSK +03:00
-    ```
+    Ruby now provides a fast `Class#descendants` making `ActiveSupport::DescendantsTracker` mostly useless.
 
-    Fixes #17395.
+    As a result the following methods are deprecated:
 
-    *Andrew White*
+      - `ActiveSupport::DescendantsTracker.direct_descendants`
+      - `ActiveSupport::DescendantsTracker#direct_descendants`
 
-*   Redis cache store.
+    *Jean Boussier*
 
-    ```
-    # Defaults to `redis://localhost:6379/0`. Only use for dev/test.
-    config.cache_store = :redis_cache_store
-
-    # Supports all common cache store options (:namespace, :compress,
-    # :compress_threshold, :expires_in, :race_condition_ttl) and all
-    # Redis options.
-    cache_password = Rails.application.secrets.redis_cache_password
-    config.cache_store = :redis_cache_store, driver: :hiredis,
-      namespace: 'myapp-cache', compress: true, timeout: 1,
-      url: "redis://:#{cache_password}@myapp-cache-1:6379/0"
-
-    # Supports Redis::Distributed with multiple hosts
-    config.cache_store = :redis_cache_store, driver: :hiredis
-      namespace: 'myapp-cache', compress: true,
-      url: %w[
-        redis://myapp-cache-1:6379/0
-        redis://myapp-cache-1:6380/0
-        redis://myapp-cache-2:6379/0
-        redis://myapp-cache-2:6380/0
-        redis://myapp-cache-3:6379/0
-        redis://myapp-cache-3:6380/0
-      ]
-
-    # Or pass a builder block
-    config.cache_store = :redis_cache_store,
-      namespace: 'myapp-cache', compress: true,
-      redis: -> { Redis.new … }
-    ```
+*   Fix the `Digest::UUID.uuid_from_hash` behavior for namespace IDs that are different from the ones defined on `Digest::UUID`.
 
-    Deployment note: Take care to use a *dedicated Redis cache* rather
-    than pointing this at your existing Redis server. It won't cope well
-    with mixed usage patterns and it won't expire cache entries by default.
+    The new behavior will be enabled by setting the
+    `config.active_support.use_rfc4122_namespaced_uuids` option to `true`
+    and is the default for new apps.
 
-    Redis cache server setup guide: https://redis.io/topics/lru-cache
+    The old behavior is the default for upgraded apps and will output a
+    deprecation warning every time a value that is different than one of
+    the constants defined on the `Digest::UUID` extension is used as the
+    namespace ID.
 
-    *Jeremy Daer*
+    *Alex Robbin*, *Erich Soares Machado*, *Eugene Kenny*
 
-*   Cache: Enable compression by default for values > 1kB.
+*   `ActiveSupport::Inflector::Inflections#clear(:acronyms)` is now supported,
+    and `inflector.clear` / `inflector.clear(:all)` also clears acronyms.
 
-    Compression has long been available, but opt-in and at a 16kB threshold.
-    It wasn't enabled by default due to CPU cost. Today it's cheap and typical
-    cache data is eminently compressible, such as HTML or JSON fragments.
-    Compression dramatically reduces Memcached/Redis mem usage, which means
-    the same cache servers can store more data, which means higher hit rates.
+    *Alex Ghiculescu*, *Oliver Peate*
 
-    To disable compression, pass `compress: false` to the initializer.
 
-    *Jeremy Daer*
+## Rails 7.0.0.alpha2 (September 15, 2021) ##
 
-*   Allow `Range#include?` on TWZ ranges.
+*   No changes.
 
-    In #11474 we prevented TWZ ranges being iterated over which matched
-    Ruby's handling of Time ranges and as a consequence `include?`
-    stopped working with both Time ranges and TWZ ranges. However in
-    ruby/ruby@b061634 support was added for `include?` to use `cover?`
-    for 'linear' objects. Since we have no way of making Ruby consider
-    TWZ instances as 'linear' we have to override `Range#include?`.
 
-    Fixes #30799.
+## Rails 7.0.0.alpha1 (September 15, 2021) ##
 
-    *Andrew White*
+*   `ActiveSupport::Dependencies` no longer installs a `const_missing` hook. Before this, you could push to the autoload paths and have constants autoloaded. This feature, known as the `classic` autoloader, has been removed.
 
-*   Fix acronym support in `humanize`.
+    *Xavier Noria*
 
-    Acronym inflections are stored with lowercase keys in the hash but
-    the match wasn't being lowercased before being looked up in the hash.
-    This shouldn't have any performance impact because before it would
-    fail to find the acronym and perform the `downcase` operation anyway.
+*   Private internal classes of `ActiveSupport::Dependencies` have been deleted, like `ActiveSupport::Dependencies::Reference`, `ActiveSupport::Dependencies::Blamable`, and others.
 
-    Fixes #31052.
+    *Xavier Noria*
 
-    *Andrew White*
+*   The private API of `ActiveSupport::Dependencies` has been deleted. That includes methods like `hook!`, `unhook!`, `depend_on`, `require_or_load`, `mechanism`, and many others.
 
-*   Add same method signature for `Time#prev_year` and `Time#next_year`
-    in accordance with `Date#prev_year`, `Date#next_year`.
+    *Xavier Noria*
 
-    Allows pass argument for `Time#prev_year` and `Time#next_year`.
+*   Improves the performance of `ActiveSupport::NumberHelper` formatters by avoiding the use of exceptions as flow control.
 
-    Before:
-    ```
-    Time.new(2017, 9, 16, 17, 0).prev_year    # => 2016-09-16 17:00:00 +0300
-    Time.new(2017, 9, 16, 17, 0).prev_year(1)
-    # => ArgumentError: wrong number of arguments (given 1, expected 0)
+    *Mike Dalessio*
 
-    Time.new(2017, 9, 16, 17, 0).next_year    # => 2018-09-16 17:00:00 +0300
-    Time.new(2017, 9, 16, 17, 0).next_year(1)
-    # => ArgumentError: wrong number of arguments (given 1, expected 0)
-    ```
+*   Removed rescue block from `ActiveSupport::Cache::RedisCacheStore#handle_exception`
 
-    After:
-    ```
-    Time.new(2017, 9, 16, 17, 0).prev_year    # => 2016-09-16 17:00:00 +0300
-    Time.new(2017, 9, 16, 17, 0).prev_year(1) # => 2016-09-16 17:00:00 +0300
+    Previously, if you provided a `error_handler` to `redis_cache_store`, any errors thrown by
+    the error handler would be rescued and logged only. Removed the `rescue` clause from `handle_exception`
+    to allow these to be thrown.
 
-    Time.new(2017, 9, 16, 17, 0).next_year    # => 2018-09-16 17:00:00 +0300
-    Time.new(2017, 9, 16, 17, 0).next_year(1) # => 2018-09-16 17:00:00 +0300
-    ```
+    *Nicholas A. Stuart*
 
-    *bogdanvlviv*
+*   Allow entirely opting out of deprecation warnings.
 
-*   Add same method signature for `Time#prev_month` and `Time#next_month`
-    in accordance with `Date#prev_month`, `Date#next_month`.
+    Previously if you did `app.config.active_support.deprecation = :silence`, some work would
+    still be done on each call to `ActiveSupport::Deprecation.warn`. In very hot paths, this could
+    cause performance issues.
 
-    Allows pass argument for `Time#prev_month` and `Time#next_month`.
+    Now, you can make `ActiveSupport::Deprecation.warn` a no-op:
 
-    Before:
+    ```ruby
+    config.active_support.report_deprecations = false
     ```
-    Time.new(2017, 9, 16, 17, 0).prev_month    # => 2017-08-16 17:00:00 +0300
-    Time.new(2017, 9, 16, 17, 0).prev_month(1)
-    # => ArgumentError: wrong number of arguments (given 1, expected 0)
 
-    Time.new(2017, 9, 16, 17, 0).next_month    # => 2017-10-16 17:00:00 +0300
-    Time.new(2017, 9, 16, 17, 0).next_month(1)
-    # => ArgumentError: wrong number of arguments (given 1, expected 0)
-    ```
+    This is the default in production for new apps. It is the equivalent to:
 
-    After:
+    ```ruby
+    config.active_support.deprecation = :silence
+    config.active_support.disallowed_deprecation = :silence
     ```
-    Time.new(2017, 9, 16, 17, 0).prev_month    # => 2017-08-16 17:00:00 +0300
-    Time.new(2017, 9, 16, 17, 0).prev_month(1) # => 2017-08-16 17:00:00 +0300
 
-    Time.new(2017, 9, 16, 17, 0).next_month    # => 2017-10-16 17:00:00 +0300
-    Time.new(2017, 9, 16, 17, 0).next_month(1) # => 2017-10-16 17:00:00 +0300
-    ```
+    but will take a more optimised code path.
 
-    *bogdanvlviv*
+    *Alex Ghiculescu*
 
-*   Add same method signature for `Time#prev_day` and `Time#next_day`
-    in accordance with `Date#prev_day`, `Date#next_day`.
+*   Faster tests by parallelizing only when overhead is justified by the number
+    of them.
 
-    Allows pass argument for `Time#prev_day` and `Time#next_day`.
+    Running tests in parallel adds overhead in terms of database
+    setup and fixture loading. Now, Rails will only parallelize test executions when
+    there are enough tests to make it worth it.
 
-    Before:
-    ```
-    Time.new(2017, 9, 16, 17, 0).prev_day    # => 2017-09-15 17:00:00 +0300
-    Time.new(2017, 9, 16, 17, 0).prev_day(1)
-    # => ArgumentError: wrong number of arguments (given 1, expected 0)
+    This threshold is 50 by default, and is configurable via config setting in
+    your test.rb:
 
-    Time.new(2017, 9, 16, 17, 0).next_day    # => 2017-09-17 17:00:00 +0300
-    Time.new(2017, 9, 16, 17, 0).next_day(1)
-    # => ArgumentError: wrong number of arguments (given 1, expected 0)
+    ```ruby
+    config.active_support.test_parallelization_threshold = 100
     ```
 
-    After:
-    ```
-    Time.new(2017, 9, 16, 17, 0).prev_day    # => 2017-09-15 17:00:00 +0300
-    Time.new(2017, 9, 16, 17, 0).prev_day(1) # => 2017-09-15 17:00:00 +0300
+    It's also configurable at the test case level:
 
-    Time.new(2017, 9, 16, 17, 0).next_day    # => 2017-09-17 17:00:00 +0300
-    Time.new(2017, 9, 16, 17, 0).next_day(1) # => 2017-09-17 17:00:00 +0300
+    ```ruby
+    class ActiveSupport::TestCase
+      parallelize threshold: 100
+    end
     ```
 
-    *bogdanvlviv*
+    *Jorge Manrubia*
 
-*   `IO#to_json` now returns the `to_s` representation, rather than
-    attempting to convert to an array. This fixes a bug where `IO#to_json`
-    would raise an `IOError` when called on an unreadable object.
+*   OpenSSL constants are now used for Digest computations.
 
-    Fixes #26132.
-
-    *Paul Kuruvilla*
-
-*   Remove deprecated `halt_callback_chains_on_return_false` option.
-
-    *Rafael Mendonça França*
-
-*   Remove deprecated `:if` and `:unless` string filter for callbacks.
-
-    *Rafael Mendonça França*
+    *Dirkjan Bussink*
 
-*   `Hash#slice` now falls back to Ruby 2.5+'s built-in definition if defined.
+*   `TimeZone.iso8601` now accepts valid ordinal values similar to Ruby's `Date._iso8601` method.
+    A valid ordinal value will be converted to an instance of `TimeWithZone` using the `:year`
+    and `:yday` fragments returned from `Date._iso8601`.
 
-    *Akira Matsuda*
-
-*   Deprecate `secrets.secret_token`.
-
-    The architecture for secrets had a big upgrade between Rails 3 and Rails 4,
-    when the default changed from using `secret_token` to `secret_key_base`.
-
-    `secret_token` has been soft deprecated in documentation for four years
-    but is still in place to support apps created before Rails 4.
-    Deprecation warnings have been added to help developers upgrade their
-    applications to `secret_key_base`.
-
-    *claudiob*, *Kasper Timm Hansen*
-
-*   Return an instance of `HashWithIndifferentAccess` from `HashWithIndifferentAccess#transform_keys`.
-
-    *Yuji Yaginuma*
-
-*   Add key rotation support to `MessageEncryptor` and `MessageVerifier`.
-
-    This change introduces a `rotate` method to both the `MessageEncryptor` and
-    `MessageVerifier` classes. This method accepts the same arguments and
-    options as the given classes' constructor. The `encrypt_and_verify` method
-    for `MessageEncryptor` and the `verified` method for `MessageVerifier` also
-    accept an optional keyword argument `:on_rotation` block which is called
-    when a rotated instance is used to decrypt or verify the message.
-
-    *Michael J Coyne*
-
-*   Deprecate `Module#reachable?` method.
-
-    *bogdanvlviv*
+    ```ruby
+    twz = ActiveSupport::TimeZone["Eastern Time (US & Canada)"].iso8601("21087")
+    twz.to_a[0, 6] == [0, 0, 0, 28, 03, 2021]
+    ```
 
-*   Add `config/credentials.yml.enc` to store production app secrets.
+    *Steve Laing*
 
-    Allows saving any authentication credentials for third party services
-    directly in repo encrypted with `config/master.key` or `ENV["RAILS_MASTER_KEY"]`.
+*   `Time#change` and methods that call it (e.g. `Time#advance`) will now
+    return a `Time` with the timezone argument provided, if the caller was
+    initialized with a timezone argument.
 
-    This will eventually replace `Rails.application.secrets` and the encrypted
-    secrets introduced in Rails 5.1.
+    Fixes [#42467](https://github.com/rails/rails/issues/42467).
 
-    *DHH*, *Kasper Timm Hansen*
+    *Alex Ghiculescu*
 
-*   Add `ActiveSupport::EncryptedFile` and `ActiveSupport::EncryptedConfiguration`.
+*   Allow serializing any module or class to JSON by name.
 
-    Allows for stashing encrypted files or configuration directly in repo by
-    encrypting it with a key.
+    *Tyler Rick*, *Zachary Scott*
 
-    Backs the new credentials setup above, but can also be used independently.
+*   Raise `ActiveSupport::EncryptedFile::MissingKeyError` when the
+    `RAILS_MASTER_KEY` environment variable is blank (e.g. `""`).
 
-    *DHH*, *Kasper Timm Hansen*
+    *Sunny Ripert*
 
-*   `Module#delegate_missing_to` now raises `DelegationError` if target is nil,
-    similar to `Module#delegate`.
+*   The `from:` option is added to `ActiveSupport::TestCase#assert_no_changes`.
 
-    *Anton Khamets*
+    It permits asserting on the initial value that is expected not to change.
 
-*   Update `String#camelize` to provide feedback when wrong option is passed.
+    ```ruby
+    assert_no_changes -> { Status.all_good? }, from: true do
+      post :create, params: { status: { ok: true } }
+    end
+    ```
 
-    `String#camelize` was returning nil without any feedback when an
-    invalid option was passed as a parameter.
+    *George Claghorn*
 
-    Previously:
+*   Deprecate `ActiveSupport::SafeBuffer`'s incorrect implicit conversion of objects into string.
 
-        'one_two'.camelize(true)
-        # => nil
+    Except for a few methods like `String#%`, objects must implement `#to_str`
+    to be implicitly converted to a String in string operations. In some
+    circumstances `ActiveSupport::SafeBuffer` was incorrectly calling the
+    explicit conversion method (`#to_s`) on them. This behavior is now
+    deprecated.
 
-    Now:
+    *Jean Boussier*
 
-        'one_two'.camelize(true)
-        # => ArgumentError: Invalid option, use either :upper or :lower.
+*   Allow nested access to keys on `Rails.application.credentials`.
 
-    *Ricardo Díaz*
+    Previously only top level keys in `credentials.yml.enc` could be accessed with method calls. Now any key can.
 
-*   Fix modulo operations involving durations.
+    For example, given these secrets:
 
-    Rails 5.1 introduced `ActiveSupport::Duration::Scalar` as a wrapper
-    around numeric values as a way of ensuring a duration was the outcome of
-    an expression. However, the implementation was missing support for modulo
-    operations. This support has now been added and should result in a duration
-    being returned from expressions involving modulo operations.
+    ```yml
+    aws:
+      access_key_id: 123
+      secret_access_key: 345
+    ```
 
-    Prior to Rails 5.1:
+    `Rails.application.credentials.aws.access_key_id` will now return the same thing as
+    `Rails.application.credentials.aws[:access_key_id]`.
 
-        5.minutes % 2.minutes
-        # => 60
+    *Alex Ghiculescu*
 
-    Now:
+*   Added a faster and more compact `ActiveSupport::Cache` serialization format.
 
-        5.minutes % 2.minutes
-        # => 1 minute
+    It can be enabled with `config.active_support.cache_format_version = 7.0` or
+    `config.load_defaults 7.0`. Regardless of the configuration Active Support
+    7.0 can read cache entries serialized by Active Support 6.1 which allows to
+    upgrade without invalidating the cache. However Rails 6.1 can't read the
+    new format, so all readers must be upgraded before the new format is enabled.
 
-    Fixes #29603 and #29743.
+    *Jean Boussier*
 
-    *Sayan Chakraborty*, *Andrew White*
+*   Add `Enumerable#sole`, per `ActiveRecord::FinderMethods#sole`.  Returns the
+    sole item of the enumerable, raising if no items are found, or if more than
+    one is.
 
-*   Fix division where a duration is the denominator.
+    *Asherah Connor*
 
-    PR #29163 introduced a change in behavior when a duration was the denominator
-    in a calculation - this was incorrect as dividing by a duration should always
-    return a `Numeric`. The behavior of previous versions of Rails has been restored.
+*   Freeze `ActiveSupport::Duration#parts` and remove writer methods.
 
-    Fixes #29592.
+    Durations are meant to be value objects and should not be mutated.
 
     *Andrew White*
 
-*   Add purpose and expiry support to `ActiveSupport::MessageVerifier` and
-   `ActiveSupport::MessageEncryptor`.
-
-    For instance, to ensure a message is only usable for one intended purpose:
-
-        token = @verifier.generate("x", purpose: :shipping)
-
-        @verifier.verified(token, purpose: :shipping) # => "x"
-        @verifier.verified(token)                     # => nil
-
-    Or make it expire after a set time:
-
-        @verifier.generate("x", expires_in: 1.month)
-        @verifier.generate("y", expires_at: Time.now.end_of_year)
-
-    Showcased with `ActiveSupport::MessageVerifier`, but works the same for
-    `ActiveSupport::MessageEncryptor`'s `encrypt_and_sign` and `decrypt_and_verify`.
-
-    Pull requests: #29599, #29854
-
-    *Assain Jaleel*
-
-*   Make the order of `Hash#reverse_merge!` consistent with `HashWithIndifferentAccess`.
-
-    *Erol Fornoles*
-
-*   Add `freeze_time` helper which freezes time to `Time.now` in tests.
-
-    *Prathamesh Sonpatki*
+*   Fix `ActiveSupport::TimeZone#utc_to_local` with fractional seconds.
 
-*   Default `ActiveSupport::MessageEncryptor` to use AES 256 GCM encryption.
+    When `utc_to_local_returns_utc_offset_times` is false and the time
+    instance had fractional seconds the new UTC time instance was out by
+    a factor of 1,000,000 as the `Time.utc` constructor takes a usec
+    value and not a fractional second value.
 
-    On for new Rails 5.2 apps. Upgrading apps can find the config as a new
-    framework default.
+    *Andrew White*
 
-    *Assain Jaleel*
+*   Add `expires_at` argument to `ActiveSupport::Cache` `write` and `fetch` to set a cache entry TTL as an absolute time.
 
-*   Cache: `write_multi`.
+    ```ruby
+    Rails.cache.write(key, value, expires_at: Time.now.at_end_of_hour)
+    ```
 
-        Rails.cache.write_multi foo: 'bar', baz: 'qux'
+    *Jean Boussier*
 
-    Plus faster fetch_multi with stores that implement `write_multi_entries`.
-    Keys that aren't found may be written to the cache store in one shot
-    instead of separate writes.
+*   Deprecate `ActiveSupport::TimeWithZone.name` so that from Rails 7.1 it will use the default implementation.
 
-    The default implementation simply calls `write_entry` for each entry.
-    Stores may override if they're capable of one-shot bulk writes, like
-    Redis `MSET`.
+    *Andrew White*
 
-    *Jeremy Daer*
+*   Deprecates Rails custom `Enumerable#sum` and `Array#sum` in favor of Ruby's native implementation which
+    is considerably faster.
 
-*   Add default option to module and class attribute accessors.
+    Ruby requires an initializer for non-numeric type as per examples below:
 
-        mattr_accessor :settings, default: {}
+    ```ruby
+    %w[foo bar].sum('')
+    # instead of %w[foo bar].sum
 
-    Works for `mattr_reader`, `mattr_writer`, `cattr_accessor`, `cattr_reader`,
-    and `cattr_writer` as well.
+    [[1, 2], [3, 4, 5]].sum([])
+    # instead of [[1, 2], [3, 4, 5]].sum
+    ```
 
-    *Genadi Samokovarov*
+    *Alberto Mota*
 
-*   Add `Date#prev_occurring` and `Date#next_occurring` to return specified next/previous occurring day of week.
+*   Tests parallelization is now disabled when running individual files to prevent the setup overhead.
 
-    *Shota Iguchi*
+    It can still be enforced if the environment variable `PARALLEL_WORKERS` is present and set to a value greater than 1.
 
-*   Add default option to `class_attribute`.
+    *Ricardo Díaz*
 
-    Before:
+*   Fix proxying keyword arguments in `ActiveSupport::CurrentAttributes`.
 
-        class_attribute :settings
-        self.settings = {}
+    *Marcin Kołodziej*
 
-    Now:
+*   Add `Enumerable#maximum` and `Enumerable#minimum` to easily calculate the maximum or minimum from extracted
+    elements of an enumerable.
 
-        class_attribute :settings, default: {}
+    ```ruby
+    payments = [Payment.new(5), Payment.new(15), Payment.new(10)]
 
-    *DHH*
+    payments.minimum(:price) # => 5
+    payments.maximum(:price) # => 15
+    ```
 
-*   `#singularize` and `#pluralize` now respect uncountables for the specified locale.
+    This also allows passing enumerables to `fresh_when` and `stale?` in Action Controller.
+    See PR [#41404](https://github.com/rails/rails/pull/41404) for an example.
 
-    *Eilis Hamilton*
+    *Ayrton De Craene*
 
-*   Add `ActiveSupport::CurrentAttributes` to provide a thread-isolated attributes singleton.
-    Primary use case is keeping all the per-request attributes easily available to the whole system.
+*   `ActiveSupport::Cache::MemCacheStore` now accepts an explicit `nil` for its `addresses` argument.
 
-    *DHH*
+    ```ruby
+    config.cache_store = :mem_cache_store, nil
 
-*   Fix implicit coercion calculations with scalars and durations.
+    # is now equivalent to
 
-    Previously, calculations where the scalar is first would be converted to a duration
-    of seconds, but this causes issues with dates being converted to times, e.g:
+    config.cache_store = :mem_cache_store
 
-        Time.zone = "Beijing"           # => Asia/Shanghai
-        date = Date.civil(2017, 5, 20)  # => Mon, 20 May 2017
-        2 * 1.day                       # => 172800 seconds
-        date + 2 * 1.day                # => Mon, 22 May 2017 00:00:00 CST +08:00
+    # and is also equivalent to
 
-    Now, the `ActiveSupport::Duration::Scalar` calculation methods will try to maintain
-    the part structure of the duration where possible, e.g:
+    config.cache_store = :mem_cache_store, ENV["MEMCACHE_SERVERS"] || "localhost:11211"
 
-        Time.zone = "Beijing"           # => Asia/Shanghai
-        date = Date.civil(2017, 5, 20)  # => Mon, 20 May 2017
-        2 * 1.day                       # => 2 days
-        date + 2 * 1.day                # => Mon, 22 May 2017
+    # which is the fallback behavior of Dalli
+    ```
 
-    Fixes #29160, #28970.
+    This helps those migrating from `:dalli_store`, where an explicit `nil` was permitted.
 
-    *Andrew White*
+    *Michael Overmeyer*
 
-*   Add support for versioned cache entries. This enables the cache stores to recycle cache keys, greatly saving
-    on storage in cases with frequent churn. Works together with the separation of `#cache_key` and `#cache_version`
-    in Active Record and its use in Action Pack's fragment caching.
+*   Add `Enumerable#in_order_of` to put an Enumerable in a certain order by a key.
 
     *DHH*
 
-*   Pass gem name and deprecation horizon to deprecation notifications.
+*   `ActiveSupport::Inflector.camelize` behaves expected when provided a symbol `:upper` or `:lower` argument. Matches
+    `String#camelize` behavior.
 
-    *Willem van Bergen*
+    *Alex Ghiculescu*
 
-*   Add support for `:offset` and `:zone` to `ActiveSupport::TimeWithZone#change`.
+*   Raises an `ArgumentError` when the first argument of `ActiveSupport::Notification.subscribe` is
+    invalid.
 
-    *Andrew White*
+    *Vipul A M*
 
-*   Add support for `:offset` to `Time#change`.
+*   `HashWithIndifferentAccess#deep_transform_keys` now returns a `HashWithIndifferentAccess` instead of a `Hash`.
 
-    Fixes #28723.
+    *Nathaniel Woodthorpe*
 
-    *Andrew White*
+*   Consume dalli’s `cache_nils` configuration as `ActiveSupport::Cache`'s `skip_nil` when using `MemCacheStore`.
 
-*   Add `fetch_values` for `HashWithIndifferentAccess`.
+    *Ritikesh G*
 
-    The method was originally added to `Hash` in Ruby 2.3.0.
+*   Add `RedisCacheStore#stats` method similar to `MemCacheStore#stats`. Calls `redis#info` internally.
 
-    *Josh Pencheon*
+    *Ritikesh G*
 
 
-Please check [5-1-stable](https://github.com/rails/rails/blob/5-1-stable/activesupport/CHANGELOG.md) for previous changes.
+Please check [6-1-stable](https://github.com/rails/rails/blob/6-1-stable/activesupport/CHANGELOG.md) for previous changes.