activesupport 5.2.6 → 6.0.0

data/CHANGELOG.md

@@ -1,45 +1,14 @@
-## Rails 5.2.6 (May 05, 2021) ##
+## Rails 6.0.0 (August 16, 2019) ##
 
-*   No changes.
-
-
-## Rails 5.2.5 (March 26, 2021) ##
-
-*   No changes.
-
-
-## Rails 5.2.4.6 (May 05, 2021) ##
-
-*   No changes.
-
-
-## Rails 5.2.4.5 (February 10, 2021) ##
-
-*   No changes.
-
-
-## Rails 5.2.4.4 (September 09, 2020) ##
-
-*   No changes.
-
-
-## Rails 5.2.4.3 (May 18, 2020) ##
-
-*   [CVE-2020-8165] Deprecate Marshal.load on raw cache read in RedisCacheStore
-
-*   [CVE-2020-8165] Avoid Marshal.load on raw cache value in MemCacheStore
-
-## Rails 5.2.4.2 (March 19, 2020) ##
+*   Let `require_dependency` in `zeitwerk` mode look the autoload paths up for
+    better backwards compatibility.
 
-*   No changes.
-
-
-## Rails 5.2.4.1 (December 18, 2019) ##
-
-*   No changes.
+    *Xavier Noria*
 
+*   Let `require_dependency` in `zeitwerk` mode support arguments that respond
+    to `to_path` for better backwards compatibility.
 
-## Rails 5.2.4 (November 27, 2019) ##
+    *Xavier Noria*
 
 *   Make ActiveSupport::Logger Fiber-safe. Fixes #36752.
 
@@ -73,606 +42,531 @@
 
     *Alexander Varnin*
 
+*   Do not delegate missing `marshal_dump` and `_dump` methods via the
+    `delegate_missing_to` extension. This avoids unintentionally adding instance
+    variables when calling `Marshal.dump(object)`, should the delegation target of
+    `object` be a method which would otherwise add them. Fixes #36522.
 
-## Rails 5.2.3 (March 27, 2019) ##
-
-*   Add `ActiveSupport::HashWithIndifferentAccess#assoc`.
-
-    `assoc` can now be called with either a string or a symbol.
-
-    *Stefan Schüßler*
-
-*   Fix `String#safe_constantize` throwing a `LoadError` for incorrectly cased constant references.
+    *Aaron Lipman*
 
-    *Keenan Brock*
+## Rails 6.0.0.rc2 (July 22, 2019) ##
 
-*   Allow Range#=== and Range#cover? on Range
+*   `truncate` would return the original string if it was too short to be truncated
+    and a frozen string if it were long enough to be truncated. Now truncate will
+    consistently return an unfrozen string regardless. This behavior is consistent
+    with `gsub` and `strip`.
 
-    `Range#cover?` can now accept a range argument like `Range#include?` and
-    `Range#===`. `Range#===` works correctly on Ruby 2.6. `Range#include?` is moved
-    into a new file, with these two methods.
+    Before:
 
-    *utilum*
+        'foobar'.truncate(5).frozen?
+        # => true
+        'foobar'.truncate(6).frozen?
+        # => false
 
-*   If the same block is `included` multiple times for a Concern, an exception is no longer raised.
-
-    *Mark J. Titorenko*, *Vlad Bokov*
+    After:
 
+        'foobar'.truncate(5).frozen?
+        # => false
+        'foobar'.truncate(6).frozen?
+        # => false
 
-## Rails 5.2.2.1 (March 11, 2019) ##
+    *Jordan Thomas*
 
-*   No changes.
 
+## Rails 6.0.0.rc1 (April 24, 2019) ##
 
-## Rails 5.2.2 (December 04, 2018) ##
+*   Introduce `ActiveSupport::ActionableError`.
 
-*   Fix bug where `#to_options` for `ActiveSupport::HashWithIndifferentAccess`
-    would not act as alias for `#symbolize_keys`.
+    Actionable errors let's you dispatch actions from Rails' error pages. This
+    can help you save time if you have a clear action for the resolution of
+    common development errors.
 
-    *Nick Weiland*
+    The de-facto example are pending migrations. Every time pending migrations
+    are found, a middleware raises an error. With actionable errors, you can
+    run the migrations right from the error page. Other examples include Rails
+    plugins that need to run a rake task to setup themselves. They can now
+    raise actionable errors to run the setup straight from the error pages.
 
-*   Improve the logic that detects non-autoloaded constants.
+    Here is how to define an actionable error:
 
-    *Jan Habermann*, *Xavier Noria*
+    ```ruby
+    class PendingMigrationError < MigrationError #:nodoc:
+      include ActiveSupport::ActionableError
 
-*   Fix bug where `URI.unescape` would fail with mixed Unicode/escaped character input:
+      action "Run pending migrations" do
+        ActiveRecord::Tasks::DatabaseTasks.migrate
+      end
+    end
+    ```
 
-        URI.unescape("\xe3\x83\x90")  # => "バ"
-        URI.unescape("%E3%83%90")  # => "バ"
-        URI.unescape("\xe3\x83\x90%E3%83%90")  # => Encoding::CompatibilityError
+    To make an error actionable, include the `ActiveSupport::ActionableError`
+    module and invoke the `action` class macro to define the action. An action
+    needs a name and a procedure to execute. The name is shown as the name of a
+    button on the error pages. Once clicked, it will invoke the given
+    procedure.
 
-    *Ashe Connor*, *Aaron Patterson*
+    *Vipul A M*, *Yao Jie*, *Genadi Samokovarov*
 
+*   Preserve `html_safe?` status on `ActiveSupport::SafeBuffer#*`.
 
-## Rails 5.2.1.1 (November 27, 2018) ##
+    Before:
 
-*   No changes.
+        ("<br />".html_safe * 2).html_safe? #=> nil
 
+    After:
 
-## Rails 5.2.1 (August 07, 2018) ##
+        ("<br />".html_safe * 2).html_safe? #=> true
 
-*   Redis cache store: `delete_matched` no longer blocks the Redis server.
-    (Switches from evaled Lua to a batched SCAN + DEL loop.)
+    *Ryo Nakamura*
 
-    *Gleb Mazovetskiy*
+*   Calling test methods with `with_info_handler` method to allow minitest-hooks
+    plugin to work.
 
-*   Fix bug where `ActiveSupport::Timezone.all` would fail when tzinfo data for
-    any timezone defined in `ActiveSupport::TimeZone::MAPPING` is missing.
+    *Mauri Mustonen*
 
-    *Dominik Sander*
+*   The Zeitwerk compatibility interface for `ActiveSupport::Dependencies` no
+    longer implements `autoloaded_constants` or `autoloaded?` (undocumented,
+    anyway). Experience shows introspection does not have many use cases, and
+    troubleshooting is done by logging. With this design trade-off we are able
+    to use even less memory in all environments.
 
-*   Fix bug where `ActiveSupport::Cache` will massively inflate the storage
-    size when compression is enabled (which is true by default). This patch
-    does not attempt to repair existing data: please manually flush the cache
-    to clear out the problematic entries.
+    *Xavier Noria*
 
-    *Godfrey Chan*
-
-*   Fix `ActiveSupport::Cache#read_multi` bug with local cache enabled that was
-    returning instances of `ActiveSupport::Cache::Entry` instead of the raw values.
+*   Depends on Zeitwerk 2, which stores less metadata if reloading is disabled
+    and hence uses less memory when `config.cache_classes` is `true`, a standard
+    setup in production.
 
-    *Jason Lee*
+    *Xavier Noria*
 
+*   In `:zeitwerk` mode, eager load directories in engines and applications only
+    if present in their respective `config.eager_load_paths`.
 
-## Rails 5.2.0 (April 09, 2018) ##
+    A common use case for this is adding `lib` to `config.autoload_paths`, but
+    not to `config.eager_load_paths`. In that configuration, for example, files
+    in the `lib` directory should not be eager loaded.
 
-*   Caching: MemCache and Redis `read_multi` and `fetch_multi` speedup.
-    Read from the local in-memory cache before consulting the backend.
+    *Xavier Noria*
 
-    *Gabriel Sobrinho*
+*   Fix bug in Range comparisons when comparing to an excluded-end Range
 
-*   Return all mappings for a timezone identifier in `country_zones`.
+    Before:
 
-    Some timezones like `Europe/London` have multiple mappings in
-    `ActiveSupport::TimeZone::MAPPING` so return all of them instead
-    of the first one found by using `Hash#value`. e.g:
+        (1..10).cover?(1...11) # => false
 
-        # Before
-        ActiveSupport::TimeZone.country_zones("GB") # => ["Edinburgh"]
+    After:
 
-        # After
-        ActiveSupport::TimeZone.country_zones("GB") # => ["Edinburgh", "London"]
+        (1..10).cover?(1...11) # => true
 
-    Fixes #31668.
+    With the same change for `Range#include?` and `Range#===`.
 
-    *Andrew White*
+    *Owen Stephens*
 
-*   Add support for connection pooling on RedisCacheStore.
+*   Use weak references in descendants tracker to allow anonymous subclasses to
+    be garbage collected.
 
-    *fatkodima*
+    *Edgars Beigarts*
 
-*   Support hash as first argument in `assert_difference`. This allows to specify multiple
-    numeric differences in the same assertion.
+*   Update `ActiveSupport::Notifications::Instrumenter#instrument` to make
+    passing a block optional. This will let users use
+    `ActiveSupport::Notifications` messaging features outside of
+    instrumentation.
 
-        assert_difference ->{ Article.count } => 1, ->{ Post.count } => 2
+    *Ali Ibrahim*
 
-    *Julien Meichelbeck*
+*   Fix `Time#advance` to work with dates before 1001-03-07
 
-*   Add missing instrumentation for `read_multi` in `ActiveSupport::Cache::Store`.
+    Before:
 
-    *Ignatius Reza Lesmana*
+        Time.utc(1001, 3, 6).advance(years: -1) # => 1000-03-05 00:00:00 UTC
 
-*   `assert_changes` will always assert that the expression changes,
-    regardless of `from:` and `to:` argument combinations.
+    After
 
-    *Daniel Ma*
+        Time.utc(1001, 3, 6).advance(years: -1) # => 1000-03-06 00:00:00 UTC
 
-*   Use SHA-1 to generate non-sensitive digests, such as the ETag header.
+    Note that this doesn't affect `DateTime#advance` as that doesn't use a proleptic calendar.
 
-    Enabled by default for new apps; upgrading apps can opt in by setting
-    `config.active_support.use_sha1_digests = true`.
+    *Andrew White*
 
-    *Dmitri Dolguikh*, *Eugene Kenny*
+*   In Zeitwerk mode, engines are now managed by the `main` autoloader. Engines may reference application constants, if the application is reloaded and we do not reload engines, they won't use the reloaded application code.
 
-*   Changed default behaviour of `ActiveSupport::SecurityUtils.secure_compare`,
-    to make it not leak length information even for variable length string.
+    *Xavier Noria*
 
-    Renamed old `ActiveSupport::SecurityUtils.secure_compare` to `fixed_length_secure_compare`,
-    and started raising `ArgumentError` in case of length mismatch of passed strings.
+*   Add support for supplying `locale` to `transliterate` and `parameterize`.
 
-    *Vipul A M*
+        I18n.backend.store_translations(:de, i18n: { transliterate: { rule: { "ü" => "ue" } } })
 
-*   Make `ActiveSupport::TimeZone.all` return only time zones that are in
-    `ActiveSupport::TimeZone::MAPPING`.
+        ActiveSupport::Inflector.transliterate("ü", locale: :de) # => "ue"
+        "Fünf autos".parameterize(locale: :de) # => "fuenf-autos"
+        ActiveSupport::Inflector.parameterize("Fünf autos", locale: :de) # => "fuenf-autos"
 
-    Fixes #7245.
+    *Kaan Ozkan*, *Sharang Dashputre*
 
-    *Chris LaRose*
+*   Allow `Array#excluding` and `Enumerable#excluding` to deal with a passed array gracefully.
 
-*   MemCacheStore: Support expiring counters.
+        [ 1, 2, 3, 4, 5 ].excluding([4, 5]) # => [ 1, 2, 3 ]
 
-    Pass `expires_in: [seconds]` to `#increment` and `#decrement` options
-    to set the Memcached TTL (time-to-live) if the counter doesn't exist.
-    If the counter exists, Memcached doesn't extend its expiry when it's
-    incremented or decremented.
+    *DHH*
 
-    ```
-    Rails.cache.increment("my_counter", 1, expires_in: 2.minutes)
-    ```
+*   Renamed `Array#without` and `Enumerable#without` to `Array#excluding` and `Enumerable#excluding`, to create parity with
+    `Array#including` and `Enumerable#including`. Retained the old names as aliases.
 
-    *Takumasa Ochi*
+    *DHH*
 
-*   Handle `TZInfo::AmbiguousTime` errors.
+*   Added `Array#including` and `Enumerable#including` to conveniently enlarge a collection with more members using a method rather than an operator:
 
-    Make `ActiveSupport::TimeWithZone` match Ruby's handling of ambiguous
-    times by choosing the later period, e.g.
+        [ 1, 2, 3 ].including(4, 5) # => [ 1, 2, 3, 4, 5 ]
+        post.authors.including(Current.person) # => All the authors plus the current person!
 
-    Ruby:
-    ```
-    ENV["TZ"] = "Europe/Moscow"
-    Time.local(2014, 10, 26, 1, 0, 0)   # => 2014-10-26 01:00:00 +0300
-    ```
+    *DHH*
 
-    Before:
-    ```
-    >> "2014-10-26 01:00:00".in_time_zone("Moscow")
-    TZInfo::AmbiguousTime: 26/10/2014 01:00 is an ambiguous local time.
-    ```
 
-    After:
-    ```
-    >> "2014-10-26 01:00:00".in_time_zone("Moscow")
-    => Sun, 26 Oct 2014 01:00:00 MSK +03:00
-    ```
+## Rails 6.0.0.beta3 (March 11, 2019) ##
 
-    Fixes #17395.
+*   No changes.
 
-    *Andrew White*
 
-*   Redis cache store.
+## Rails 6.0.0.beta2 (February 25, 2019) ##
 
-    ```
-    # Defaults to `redis://localhost:6379/0`. Only use for dev/test.
-    config.cache_store = :redis_cache_store
-
-    # Supports all common cache store options (:namespace, :compress,
-    # :compress_threshold, :expires_in, :race_condition_ttl) and all
-    # Redis options.
-    cache_password = Rails.application.secrets.redis_cache_password
-    config.cache_store = :redis_cache_store, driver: :hiredis,
-      namespace: 'myapp-cache', compress: true, timeout: 1,
-      url: "redis://:#{cache_password}@myapp-cache-1:6379/0"
-
-    # Supports Redis::Distributed with multiple hosts
-    config.cache_store = :redis_cache_store, driver: :hiredis
-      namespace: 'myapp-cache', compress: true,
-      url: %w[
-        redis://myapp-cache-1:6379/0
-        redis://myapp-cache-1:6380/0
-        redis://myapp-cache-2:6379/0
-        redis://myapp-cache-2:6380/0
-        redis://myapp-cache-3:6379/0
-        redis://myapp-cache-3:6380/0
-      ]
-
-    # Or pass a builder block
-    config.cache_store = :redis_cache_store,
-      namespace: 'myapp-cache', compress: true,
-      redis: -> { Redis.new … }
-    ```
+*   New autoloading based on [Zeitwerk](https://github.com/fxn/zeitwerk).
 
-    Deployment note: Take care to use a *dedicated Redis cache* rather
-    than pointing this at your existing Redis server. It won't cope well
-    with mixed usage patterns and it won't expire cache entries by default.
+    *Xavier Noria*
 
-    Redis cache server setup guide: https://redis.io/topics/lru-cache
+*   Revise `ActiveSupport::Notifications.unsubscribe` to correctly handle Regex or other multiple-pattern subscribers.
 
-    *Jeremy Daer*
+    *Zach Kemp*
 
-*   Cache: Enable compression by default for values > 1kB.
+*   Add `before_reset` callback to `CurrentAttributes` and define `after_reset` as an alias of `resets` for symmetry.
 
-    Compression has long been available, but opt-in and at a 16kB threshold.
-    It wasn't enabled by default due to CPU cost. Today it's cheap and typical
-    cache data is eminently compressible, such as HTML or JSON fragments.
-    Compression dramatically reduces Memcached/Redis mem usage, which means
-    the same cache servers can store more data, which means higher hit rates.
+    *Rosa Gutierrez*
 
-    To disable compression, pass `compress: false` to the initializer.
+*   Remove the `` Kernel#` `` override that suppresses ENOENT and accidentally returns nil on Unix systems.
 
-    *Jeremy Daer*
+    *Akinori Musha*
 
-*   Allow `Range#include?` on TWZ ranges.
+*   Add `ActiveSupport::HashWithIndifferentAccess#assoc`.
 
-    In #11474 we prevented TWZ ranges being iterated over which matched
-    Ruby's handling of Time ranges and as a consequence `include?`
-    stopped working with both Time ranges and TWZ ranges. However in
-    ruby/ruby@b061634 support was added for `include?` to use `cover?`
-    for 'linear' objects. Since we have no way of making Ruby consider
-    TWZ instances as 'linear' we have to override `Range#include?`.
+    `assoc` can now be called with either a string or a symbol.
 
-    Fixes #30799.
+    *Stefan Schüßler*
 
-    *Andrew White*
+*   Add `Hash#deep_transform_values`, and `Hash#deep_transform_values!`.
 
-*   Fix acronym support in `humanize`.
+    *Guillermo Iguaran*
 
-    Acronym inflections are stored with lowercase keys in the hash but
-    the match wasn't being lowercased before being looked up in the hash.
-    This shouldn't have any performance impact because before it would
-    fail to find the acronym and perform the `downcase` operation anyway.
 
-    Fixes #31052.
+## Rails 6.0.0.beta1 (January 18, 2019) ##
 
-    *Andrew White*
+*   Remove deprecated `Module#reachable?` method.
 
-*   Add same method signature for `Time#prev_year` and `Time#next_year`
-    in accordance with `Date#prev_year`, `Date#next_year`.
+    *Rafael Mendonça França*
 
-    Allows pass argument for `Time#prev_year` and `Time#next_year`.
+*   Remove deprecated `#acronym_regex` method from `Inflections`.
 
-    Before:
-    ```
-    Time.new(2017, 9, 16, 17, 0).prev_year    # => 2016-09-16 17:00:00 +0300
-    Time.new(2017, 9, 16, 17, 0).prev_year(1)
-    # => ArgumentError: wrong number of arguments (given 1, expected 0)
+    *Rafael Mendonça França*
 
-    Time.new(2017, 9, 16, 17, 0).next_year    # => 2018-09-16 17:00:00 +0300
-    Time.new(2017, 9, 16, 17, 0).next_year(1)
-    # => ArgumentError: wrong number of arguments (given 1, expected 0)
-    ```
+*   Fix `String#safe_constantize` throwing a `LoadError` for incorrectly cased constant references.
 
-    After:
-    ```
-    Time.new(2017, 9, 16, 17, 0).prev_year    # => 2016-09-16 17:00:00 +0300
-    Time.new(2017, 9, 16, 17, 0).prev_year(1) # => 2016-09-16 17:00:00 +0300
+    *Keenan Brock*
 
-    Time.new(2017, 9, 16, 17, 0).next_year    # => 2018-09-16 17:00:00 +0300
-    Time.new(2017, 9, 16, 17, 0).next_year(1) # => 2018-09-16 17:00:00 +0300
-    ```
+*   Preserve key order passed to `ActiveSupport::CacheStore#fetch_multi`.
 
-    *bogdanvlviv*
+    `fetch_multi(*names)` now returns its results in the same order as the `*names` requested, rather than returning cache hits followed by cache misses.
 
-*   Add same method signature for `Time#prev_month` and `Time#next_month`
-    in accordance with `Date#prev_month`, `Date#next_month`.
+    *Gannon McGibbon*
 
-    Allows pass argument for `Time#prev_month` and `Time#next_month`.
+*   If the same block is `included` multiple times for a Concern, an exception is no longer raised.
 
-    Before:
-    ```
-    Time.new(2017, 9, 16, 17, 0).prev_month    # => 2017-08-16 17:00:00 +0300
-    Time.new(2017, 9, 16, 17, 0).prev_month(1)
-    # => ArgumentError: wrong number of arguments (given 1, expected 0)
+    *Mark J. Titorenko*, *Vlad Bokov*
 
-    Time.new(2017, 9, 16, 17, 0).next_month    # => 2017-10-16 17:00:00 +0300
-    Time.new(2017, 9, 16, 17, 0).next_month(1)
-    # => ArgumentError: wrong number of arguments (given 1, expected 0)
-    ```
+*   Fix bug where `#to_options` for `ActiveSupport::HashWithIndifferentAccess`
+    would not act as alias for `#symbolize_keys`.
 
-    After:
-    ```
-    Time.new(2017, 9, 16, 17, 0).prev_month    # => 2017-08-16 17:00:00 +0300
-    Time.new(2017, 9, 16, 17, 0).prev_month(1) # => 2017-08-16 17:00:00 +0300
+    *Nick Weiland*
 
-    Time.new(2017, 9, 16, 17, 0).next_month    # => 2017-10-16 17:00:00 +0300
-    Time.new(2017, 9, 16, 17, 0).next_month(1) # => 2017-10-16 17:00:00 +0300
-    ```
+*   Improve the logic that detects non-autoloaded constants.
 
-    *bogdanvlviv*
+    *Jan Habermann*, *Xavier Noria*
 
-*   Add same method signature for `Time#prev_day` and `Time#next_day`
-    in accordance with `Date#prev_day`, `Date#next_day`.
+*   Deprecate `ActiveSupport::Multibyte::Unicode#pack_graphemes(array)` and `ActiveSuppport::Multibyte::Unicode#unpack_graphemes(string)`
+    in favor of `array.flatten.pack("U*")` and `string.scan(/\X/).map(&:codepoints)`, respectively.
 
-    Allows pass argument for `Time#prev_day` and `Time#next_day`.
+    *Francesco Rodríguez*
 
-    Before:
-    ```
-    Time.new(2017, 9, 16, 17, 0).prev_day    # => 2017-09-15 17:00:00 +0300
-    Time.new(2017, 9, 16, 17, 0).prev_day(1)
-    # => ArgumentError: wrong number of arguments (given 1, expected 0)
+*   Deprecate `ActiveSupport::Multibyte::Chars.consumes?` in favor of `String#is_utf8?`.
 
-    Time.new(2017, 9, 16, 17, 0).next_day    # => 2017-09-17 17:00:00 +0300
-    Time.new(2017, 9, 16, 17, 0).next_day(1)
-    # => ArgumentError: wrong number of arguments (given 1, expected 0)
-    ```
+    *Francesco Rodríguez*
 
-    After:
+*   Fix duration being rounded to a full second.
     ```
-    Time.new(2017, 9, 16, 17, 0).prev_day    # => 2017-09-15 17:00:00 +0300
-    Time.new(2017, 9, 16, 17, 0).prev_day(1) # => 2017-09-15 17:00:00 +0300
-
-    Time.new(2017, 9, 16, 17, 0).next_day    # => 2017-09-17 17:00:00 +0300
-    Time.new(2017, 9, 16, 17, 0).next_day(1) # => 2017-09-17 17:00:00 +0300
+      time = DateTime.parse("2018-1-1")
+      time += 0.51.seconds
     ```
+    Will now correctly add 0.51 second and not 1 full second.
 
-    *bogdanvlviv*
-
-*   `IO#to_json` now returns the `to_s` representation, rather than
-    attempting to convert to an array. This fixes a bug where `IO#to_json`
-    would raise an `IOError` when called on an unreadable object.
-
-    Fixes #26132.
+    *Edouard Chin*
 
-    *Paul Kuruvilla*
+*   Deprecate `ActiveSupport::Multibyte::Unicode#normalize` and `ActiveSuppport::Multibyte::Chars#normalize`
+    in favor of `String#unicode_normalize`
 
-*   Remove deprecated `halt_callback_chains_on_return_false` option.
+    *Francesco Rodríguez*
 
-    *Rafael Mendonça França*
-
-*   Remove deprecated `:if` and `:unless` string filter for callbacks.
+*   Deprecate `ActiveSupport::Multibyte::Unicode#downcase/upcase/swapcase` in favor of
+    `String#downcase/upcase/swapcase`.
 
-    *Rafael Mendonça França*
+    *Francesco Rodríguez*
 
-*   `Hash#slice` now falls back to Ruby 2.5+'s built-in definition if defined.
+*   Add `ActiveSupport::ParameterFilter`.
 
-    *Akira Matsuda*
+    *Yoshiyuki Kinjo*
 
-*   Deprecate `secrets.secret_token`.
+*   Rename `Module#parent`, `Module#parents`, and `Module#parent_name` to
+    `module_parent`, `module_parents`, and `module_parent_name`.
 
-    The architecture for secrets had a big upgrade between Rails 3 and Rails 4,
-    when the default changed from using `secret_token` to `secret_key_base`.
+    *Gannon McGibbon*
 
-    `secret_token` has been soft deprecated in documentation for four years
-    but is still in place to support apps created before Rails 4.
-    Deprecation warnings have been added to help developers upgrade their
-    applications to `secret_key_base`.
+*   Deprecate the use of `LoggerSilence` in favor of `ActiveSupport::LoggerSilence`
 
-    *claudiob*, *Kasper Timm Hansen*
+    *Edouard Chin*
 
-*   Return an instance of `HashWithIndifferentAccess` from `HashWithIndifferentAccess#transform_keys`.
+*   Deprecate using negative limits in `String#first` and `String#last`.
 
-    *Yuji Yaginuma*
+    *Gannon McGibbon*, *Eric Turner*
 
-*   Add key rotation support to `MessageEncryptor` and `MessageVerifier`.
-
-    This change introduces a `rotate` method to both the `MessageEncryptor` and
-    `MessageVerifier` classes. This method accepts the same arguments and
-    options as the given classes' constructor. The `encrypt_and_verify` method
-    for `MessageEncryptor` and the `verified` method for `MessageVerifier` also
-    accept an optional keyword argument `:on_rotation` block which is called
-    when a rotated instance is used to decrypt or verify the message.
-
-    *Michael J Coyne*
-
-*   Deprecate `Module#reachable?` method.
-
-    *bogdanvlviv*
+*   Fix bug where `#without` for `ActiveSupport::HashWithIndifferentAccess` would fail
+    with symbol arguments
 
-*   Add `config/credentials.yml.enc` to store production app secrets.
+    *Abraham Chan*
 
-    Allows saving any authentication credentials for third party services
-    directly in repo encrypted with `config/master.key` or `ENV["RAILS_MASTER_KEY"]`.
+*   Treat `#delete_prefix`, `#delete_suffix` and `#unicode_normalize` results as non-`html_safe`.
+    Ensure safety of arguments for `#insert`, `#[]=` and `#replace` calls on `html_safe` Strings.
 
-    This will eventually replace `Rails.application.secrets` and the encrypted
-    secrets introduced in Rails 5.1.
+    *Janosch Müller*
 
-    *DHH*, *Kasper Timm Hansen*
+*   Changed `ActiveSupport::TaggedLogging.new` to return a new logger instance instead
+    of mutating the one received as parameter.
 
-*   Add `ActiveSupport::EncryptedFile` and `ActiveSupport::EncryptedConfiguration`.
+    *Thierry Joyal*
 
-    Allows for stashing encrypted files or configuration directly in repo by
-    encrypting it with a key.
+*   Define `unfreeze_time` as an alias of `travel_back` in `ActiveSupport::Testing::TimeHelpers`.
 
-    Backs the new credentials setup above, but can also be used independently.
+    The alias is provided for symmetry with `freeze_time`.
 
-    *DHH*, *Kasper Timm Hansen*
+    *Ryan Davidson*
 
-*   `Module#delegate_missing_to` now raises `DelegationError` if target is nil,
-    similar to `Module#delegate`.
+*   Add support for tracing constant autoloads. Just throw
 
-    *Anton Khamets*
+        ActiveSupport::Dependencies.logger = Rails.logger
+        ActiveSupport::Dependencies.verbose = true
 
-*   Update `String#camelize` to provide feedback when wrong option is passed.
+    in an initializer.
 
-    `String#camelize` was returning nil without any feedback when an
-    invalid option was passed as a parameter.
+    *Xavier Noria*
 
-    Previously:
+*   Maintain `html_safe?` on html_safe strings when sliced.
 
-        'one_two'.camelize(true)
-        # => nil
+        string = "<div>test</div>".html_safe
+        string[-1..1].html_safe? # => true
 
-    Now:
+    *Elom Gomez*, *Yumin Wong*
 
-        'one_two'.camelize(true)
-        # => ArgumentError: Invalid option, use either :upper or :lower.
+*   Add `Array#extract!`.
 
-    *Ricardo Díaz*
+    The method removes and returns the elements for which the block returns a true value.
+    If no block is given, an Enumerator is returned instead.
 
-*   Fix modulo operations involving durations.
+        numbers = [0, 1, 2, 3, 4, 5, 6, 7, 8, 9]
+        odd_numbers = numbers.extract! { |number| number.odd? } # => [1, 3, 5, 7, 9]
+        numbers # => [0, 2, 4, 6, 8]
 
-    Rails 5.1 introduced `ActiveSupport::Duration::Scalar` as a wrapper
-    around numeric values as a way of ensuring a duration was the outcome of
-    an expression. However, the implementation was missing support for modulo
-    operations. This support has now been added and should result in a duration
-    being returned from expressions involving modulo operations.
+    *bogdanvlviv*
 
-    Prior to Rails 5.1:
+*   Support not to cache `nil` for `ActiveSupport::Cache#fetch`.
 
-        5.minutes % 2.minutes
-        # => 60
+        cache.fetch('bar', skip_nil: true) { nil }
+        cache.exist?('bar') # => false
 
-    Now:
+    *Martin Hong*
 
-        5.minutes % 2.minutes
-        # => 1 minute
+*   Add "event object" support to the notification system.
+    Before this change, end users were forced to create hand made artisanal
+    event objects on their own, like this:
 
-    Fixes #29603 and #29743.
+        ActiveSupport::Notifications.subscribe('wait') do |*args|
+          @event = ActiveSupport::Notifications::Event.new(*args)
+        end
 
-    *Sayan Chakraborty*, *Andrew White*
+        ActiveSupport::Notifications.instrument('wait') do
+          sleep 1
+        end
 
-*   Fix division where a duration is the denominator.
+        @event.duration # => 1000.138
 
-    PR #29163 introduced a change in behavior when a duration was the denominator
-    in a calculation - this was incorrect as dividing by a duration should always
-    return a `Numeric`. The behavior of previous versions of Rails has been restored.
+    After this change, if the block passed to `subscribe` only takes one
+    parameter, the framework will yield an event object to the block.  Now
+    end users are no longer required to make their own:
 
-    Fixes #29592.
+        ActiveSupport::Notifications.subscribe('wait') do |event|
+          @event = event
+        end
 
-    *Andrew White*
+        ActiveSupport::Notifications.instrument('wait') do
+          sleep 1
+        end
 
-*   Add purpose and expiry support to `ActiveSupport::MessageVerifier` and
-   `ActiveSupport::MessageEncryptor`.
+        p @event.allocations # => 7
+        p @event.cpu_time    # => 0.256
+        p @event.idle_time   # => 1003.2399
 
-    For instance, to ensure a message is only usable for one intended purpose:
+    Now you can enjoy event objects without making them yourself.  Neat!
 
-        token = @verifier.generate("x", purpose: :shipping)
+    *Aaron "t.lo" Patterson*
 
-        @verifier.verified(token, purpose: :shipping) # => "x"
-        @verifier.verified(token)                     # => nil
+*   Add cpu_time, idle_time, and allocations to Event.
 
-    Or make it expire after a set time:
+    *Eileen M. Uchitelle*, *Aaron Patterson*
 
-        @verifier.generate("x", expires_in: 1.month)
-        @verifier.generate("y", expires_at: Time.now.end_of_year)
+*   RedisCacheStore: support key expiry in increment/decrement.
 
-    Showcased with `ActiveSupport::MessageVerifier`, but works the same for
-    `ActiveSupport::MessageEncryptor`'s `encrypt_and_sign` and `decrypt_and_verify`.
+    Pass `:expires_in` to `#increment` and `#decrement` to set a Redis EXPIRE on the key.
 
-    Pull requests: #29599, #29854
+    If the key is already set to expire, RedisCacheStore won't extend its expiry.
 
-    *Assain Jaleel*
+        Rails.cache.increment("some_key", 1, expires_in: 2.minutes)
 
-*   Make the order of `Hash#reverse_merge!` consistent with `HashWithIndifferentAccess`.
+    *Jason Lee*
 
-    *Erol Fornoles*
+*   Allow `Range#===` and `Range#cover?` on Range.
 
-*   Add `freeze_time` helper which freezes time to `Time.now` in tests.
+    `Range#cover?` can now accept a range argument like `Range#include?` and
+    `Range#===`. `Range#===` works correctly on Ruby 2.6. `Range#include?` is moved
+    into a new file, with these two methods.
 
-    *Prathamesh Sonpatki*
+    *Requiring active_support/core_ext/range/include_range is now deprecated.*
+    *Use `require "active_support/core_ext/range/compare_range"` instead.*
 
-*   Default `ActiveSupport::MessageEncryptor` to use AES 256 GCM encryption.
+    *utilum*
 
-    On for new Rails 5.2 apps. Upgrading apps can find the config as a new
-    framework default.
+*   Add `index_with` to Enumerable.
 
-    *Assain Jaleel*
+    Allows creating a hash from an enumerable with the value from a passed block
+    or a default argument.
 
-*   Cache: `write_multi`.
+        %i( title body ).index_with { |attr| post.public_send(attr) }
+        # => { title: "hey", body: "what's up?" }
 
-        Rails.cache.write_multi foo: 'bar', baz: 'qux'
+        %i( title body ).index_with(nil)
+        # => { title: nil, body: nil }
 
-    Plus faster fetch_multi with stores that implement `write_multi_entries`.
-    Keys that aren't found may be written to the cache store in one shot
-    instead of separate writes.
+    Closely linked with `index_by`, which creates a hash where the keys are extracted from a block.
 
-    The default implementation simply calls `write_entry` for each entry.
-    Stores may override if they're capable of one-shot bulk writes, like
-    Redis `MSET`.
+    *Kasper Timm Hansen*
 
-    *Jeremy Daer*
+*   Fix bug where `ActiveSupport::TimeZone.all` would fail when tzinfo data for
+    any timezone defined in `ActiveSupport::TimeZone::MAPPING` is missing.
 
-*   Add default option to module and class attribute accessors.
+    *Dominik Sander*
 
-        mattr_accessor :settings, default: {}
+*   Redis cache store: `delete_matched` no longer blocks the Redis server.
+    (Switches from evaled Lua to a batched SCAN + DEL loop.)
 
-    Works for `mattr_reader`, `mattr_writer`, `cattr_accessor`, `cattr_reader`,
-    and `cattr_writer` as well.
+    *Gleb Mazovetskiy*
 
-    *Genadi Samokovarov*
+*   Fix bug where `ActiveSupport::Cache` will massively inflate the storage
+    size when compression is enabled (which is true by default). This patch
+    does not attempt to repair existing data: please manually flush the cache
+    to clear out the problematic entries.
 
-*   Add `Date#prev_occurring` and `Date#next_occurring` to return specified next/previous occurring day of week.
+    *Godfrey Chan*
 
-    *Shota Iguchi*
+*   Fix bug where `URI.unescape` would fail with mixed Unicode/escaped character input:
 
-*   Add default option to `class_attribute`.
+        URI.unescape("\xe3\x83\x90")  # => "バ"
+        URI.unescape("%E3%83%90")  # => "バ"
+        URI.unescape("\xe3\x83\x90%E3%83%90")  # => Encoding::CompatibilityError
 
-    Before:
+    *Ashe Connor*, *Aaron Patterson*
 
-        class_attribute :settings
-        self.settings = {}
+*   Add `before?` and `after?` methods to `Date`, `DateTime`,
+    `Time`, and `TimeWithZone`.
 
-    Now:
+    *Nick Holden*
 
-        class_attribute :settings, default: {}
+*   `ActiveSupport::Inflector#ordinal` and `ActiveSupport::Inflector#ordinalize` now support
+    translations through I18n.
 
-    *DHH*
+        # locale/fr.rb
 
-*   `#singularize` and `#pluralize` now respect uncountables for the specified locale.
+        {
+          fr: {
+            number: {
+              nth: {
+                ordinals: lambda do |_key, number:, **_options|
+                  if number.to_i.abs == 1
+                    'er'
+                  else
+                    'e'
+                  end
+                end,
 
-    *Eilis Hamilton*
+                ordinalized: lambda do |_key, number:, **_options|
+                  "#{number}#{ActiveSupport::Inflector.ordinal(number)}"
+                end
+              }
+            }
+          }
+        }
 
-*   Add `ActiveSupport::CurrentAttributes` to provide a thread-isolated attributes singleton.
-    Primary use case is keeping all the per-request attributes easily available to the whole system.
 
-    *DHH*
+    *Christian Blais*
 
-*   Fix implicit coercion calculations with scalars and durations.
+*   Add `:private` option to ActiveSupport's `Module#delegate`
+    in order to delegate methods as private:
 
-    Previously, calculations where the scalar is first would be converted to a duration
-    of seconds, but this causes issues with dates being converted to times, e.g:
+        class User < ActiveRecord::Base
+          has_one :profile
+          delegate :date_of_birth, to: :profile, private: true
 
-        Time.zone = "Beijing"           # => Asia/Shanghai
-        date = Date.civil(2017, 5, 20)  # => Mon, 20 May 2017
-        2 * 1.day                       # => 172800 seconds
-        date + 2 * 1.day                # => Mon, 22 May 2017 00:00:00 CST +08:00
+          def age
+            Date.today.year - date_of_birth.year
+          end
+        end
 
-    Now, the `ActiveSupport::Duration::Scalar` calculation methods will try to maintain
-    the part structure of the duration where possible, e.g:
+        # User.new.age  # => 29
+        # User.new.date_of_birth
+        # => NoMethodError: private method `date_of_birth' called for #<User:0x00000008221340>
 
-        Time.zone = "Beijing"           # => Asia/Shanghai
-        date = Date.civil(2017, 5, 20)  # => Mon, 20 May 2017
-        2 * 1.day                       # => 2 days
-        date + 2 * 1.day                # => Mon, 22 May 2017
+    *Tomas Valent*
 
-    Fixes #29160, #28970.
+*   `String#truncate_bytes` to truncate a string to a maximum bytesize without
+    breaking multibyte characters or grapheme clusters like 👩‍👩‍👦‍👦.
 
-    *Andrew White*
+    *Jeremy Daer*
 
-*   Add support for versioned cache entries. This enables the cache stores to recycle cache keys, greatly saving
-    on storage in cases with frequent churn. Works together with the separation of `#cache_key` and `#cache_version`
-    in Active Record and its use in Action Pack's fragment caching.
+*   `String#strip_heredoc` preserves frozenness.
 
-    *DHH*
+        "foo".freeze.strip_heredoc.frozen?  # => true
 
-*   Pass gem name and deprecation horizon to deprecation notifications.
+    Fixes that frozen string literals would inadvertently become unfrozen:
 
-    *Willem van Bergen*
+        # frozen_string_literal: true
 
-*   Add support for `:offset` and `:zone` to `ActiveSupport::TimeWithZone#change`.
+        foo = <<-MSG.strip_heredoc
+          la la la
+        MSG
 
-    *Andrew White*
+        foo.frozen?  # => false !??
 
-*   Add support for `:offset` to `Time#change`.
+    *Jeremy Daer*
 
-    Fixes #28723.
+*   Rails 6 requires Ruby 2.5.0 or newer.
 
-    *Andrew White*
+    *Jeremy Daer*, *Kasper Timm Hansen*
 
-*   Add `fetch_values` for `HashWithIndifferentAccess`.
+*   Adds parallel testing to Rails.
 
-    The method was originally added to `Hash` in Ruby 2.3.0.
+    Parallelize your test suite with forked processes or threads.
 
-    *Josh Pencheon*
+    *Eileen M. Uchitelle*, *Aaron Patterson*
 
 
-Please check [5-1-stable](https://github.com/rails/rails/blob/5-1-stable/activesupport/CHANGELOG.md) for previous changes.
+Please check [5-2-stable](https://github.com/rails/rails/blob/5-2-stable/activesupport/CHANGELOG.md) for previous changes.