activesupport 5.2.7.1 → 6.1.4.6

data/CHANGELOG.md

@@ -1,710 +1,675 @@
-## Rails 5.2.7.1 (April 26, 2022) ##
+## Rails 6.1.4.6 (February 11, 2022) ##
 
-*   Fix and add protections for XSS in `ActionView::Helpers` and `ERB::Util`.
-
-    Add the method `ERB::Util.xml_name_escape` to escape dangerous characters
-    in names of tags and names of attributes, following the specification of XML.
-
-    *Álvaro Martín Fraguas*
-
-
-## Rails 5.2.7 (March 10, 2022) ##
-
-*   Restore support to Ruby 2.2.
-
-    *ojab*
+*   Fix Reloader method signature to work with the new Executor signature
 
 
-## Rails 5.2.6.3 (March 08, 2022) ##
+## Rails 6.1.4.5 (February 11, 2022) ##
 
 *   No changes.
 
 
-## Rails 5.2.6.2 (February 11, 2022) ##
-
-*   Fix Reloader method signature to work with the new Executor signature
-
-
-## Rails 5.2.6.1 (February 11, 2022) ##
+## Rails 6.1.4.4 (December 15, 2021) ##
 
 *   No changes.
 
 
-## Rails 5.2.6 (May 05, 2021) ##
+## Rails 6.1.4.3 (December 14, 2021) ##
 
 *   No changes.
 
 
-## Rails 5.2.5 (March 26, 2021) ##
+## Rails 6.1.4.2 (December 14, 2021) ##
 
 *   No changes.
 
 
-## Rails 5.2.4.6 (May 05, 2021) ##
+## Rails 6.1.4.1 (August 19, 2021) ##
 
 *   No changes.
 
 
-## Rails 5.2.4.5 (February 10, 2021) ##
+## Rails 6.1.4 (June 24, 2021) ##
 
-*   No changes.
+*   MemCacheStore: convert any underlying value (including `false`) to an `Entry`.
 
+    See [#42559](https://github.com/rails/rails/pull/42559).
 
-## Rails 5.2.4.4 (September 09, 2020) ##
+    *Alex Ghiculescu*
 
-*   No changes.
+*   Fix bug in `number_with_precision` when using large `BigDecimal` values.
 
+    Fixes #42302.
 
-## Rails 5.2.4.3 (May 18, 2020) ##
+    *Federico Aldunate*, *Zachary Scott*
 
-*   [CVE-2020-8165] Deprecate Marshal.load on raw cache read in RedisCacheStore
+*   Check byte size instead of length on `secure_compare`.
 
-*   [CVE-2020-8165] Avoid Marshal.load on raw cache value in MemCacheStore
+    *Tietew*
 
-## Rails 5.2.4.2 (March 19, 2020) ##
+*   Fix `Time.at` to not lose `:in` option.
 
-*   No changes.
+    *Ryuta Kamizono*
 
+*   Require a path for `config.cache_store = :file_store`.
 
-## Rails 5.2.4.1 (December 18, 2019) ##
+    *Alex Ghiculescu*
 
-*   No changes.
+*   Avoid having to store complex object in the default translation file.
 
+    *Rafael Mendonça França*
 
-## Rails 5.2.4 (November 27, 2019) ##
 
-*   Make ActiveSupport::Logger Fiber-safe. Fixes #36752.
+## Rails 6.1.3.2 (May 05, 2021) ##
 
-    Use `Fiber.current.__id__` in `ActiveSupport::Logger#local_level=` in order
-    to make log level local to Ruby Fibers in addition to Threads.
+*   No changes.
 
-    Example:
 
-        logger = ActiveSupport::Logger.new(STDOUT)
-        logger.level = 1
-        p "Main is debug? #{logger.debug?}"
+## Rails 6.1.3.1 (March 26, 2021) ##
 
-        Fiber.new {
-          logger.local_level = 0
-          p "Thread is debug? #{logger.debug?}"
-        }.resume
+*   No changes.
 
-        p "Main is debug? #{logger.debug?}"
 
-    Before:
+## Rails 6.1.3 (February 17, 2021) ##
 
-        Main is debug? false
-        Thread is debug? true
-        Main is debug? true
+*   No changes.
 
-    After:
 
-        Main is debug? false
-        Thread is debug? true
-        Main is debug? false
+## Rails 6.1.2.1 (February 10, 2021) ##
 
-    *Alexander Varnin*
+*   No changes.
 
 
-## Rails 5.2.3 (March 27, 2019) ##
+## Rails 6.1.2 (February 09, 2021) ##
 
-*   Add `ActiveSupport::HashWithIndifferentAccess#assoc`.
+*   `ActiveSupport::Cache::MemCacheStore` now accepts an explicit `nil` for its `addresses` argument.
 
-    `assoc` can now be called with either a string or a symbol.
+    ```ruby
+    config.cache_store = :mem_cache_store, nil
 
-    *Stefan Schüßler*
+    # is now equivalent to
 
-*   Fix `String#safe_constantize` throwing a `LoadError` for incorrectly cased constant references.
+    config.cache_store = :mem_cache_store
 
-    *Keenan Brock*
+    # and is also equivalent to
 
-*   Allow Range#=== and Range#cover? on Range
+    config.cache_store = :mem_cache_store, ENV["MEMCACHE_SERVERS"] || "localhost:11211"
 
-    `Range#cover?` can now accept a range argument like `Range#include?` and
-    `Range#===`. `Range#===` works correctly on Ruby 2.6. `Range#include?` is moved
-    into a new file, with these two methods.
+    # which is the fallback behavior of Dalli
+    ```
 
-    *utilum*
+    This helps those migrating from `:dalli_store`, where an explicit `nil` was permitted.
 
-*   If the same block is `included` multiple times for a Concern, an exception is no longer raised.
+    *Michael Overmeyer*
 
-    *Mark J. Titorenko*, *Vlad Bokov*
 
+## Rails 6.1.1 (January 07, 2021) ##
 
-## Rails 5.2.2.1 (March 11, 2019) ##
+*   Change `IPAddr#to_json` to match the behavior of the json gem returning the string representation
+    instead of the instance variables of the object.
 
-*   No changes.
+    Before:
 
+    ```ruby
+    IPAddr.new("127.0.0.1").to_json
+    # => "{\"addr\":2130706433,\"family\":2,\"mask_addr\":4294967295}"
+    ```
 
-## Rails 5.2.2 (December 04, 2018) ##
+    After:
 
-*   Fix bug where `#to_options` for `ActiveSupport::HashWithIndifferentAccess`
-    would not act as alias for `#symbolize_keys`.
+    ```ruby
+    IPAddr.new("127.0.0.1").to_json
+    # => "\"127.0.0.1\""
+    ```
 
-    *Nick Weiland*
 
-*   Improve the logic that detects non-autoloaded constants.
+## Rails 6.1.0 (December 09, 2020) ##
 
-    *Jan Habermann*, *Xavier Noria*
+*   Ensure `MemoryStore` disables compression by default. Reverts behavior of
+    `MemoryStore` to its prior rails `5.1` behavior.
 
-*   Fix bug where `URI.unescape` would fail with mixed Unicode/escaped character input:
+    *Max Gurewitz*
 
-        URI.unescape("\xe3\x83\x90")  # => "バ"
-        URI.unescape("%E3%83%90")  # => "バ"
-        URI.unescape("\xe3\x83\x90%E3%83%90")  # => Encoding::CompatibilityError
+*   Calling `iso8601` on negative durations retains the negative sign on individual
+    digits instead of prepending it.
 
-    *Ashe Connor*, *Aaron Patterson*
+    This change is required so we can interoperate with PostgreSQL, which prefers
+    negative signs for each component.
 
+    Compatibility with other iso8601 parsers which support leading negatives as well
+    as negatives per component is still retained.
 
-## Rails 5.2.1.1 (November 27, 2018) ##
+    Before:
 
-*   No changes.
+        (-1.year - 1.day).iso8601
+        # => "-P1Y1D"
 
+    After:
 
-## Rails 5.2.1 (August 07, 2018) ##
+        (-1.year - 1.day).iso8601
+        # => "P-1Y-1D"
 
-*   Redis cache store: `delete_matched` no longer blocks the Redis server.
-    (Switches from evaled Lua to a batched SCAN + DEL loop.)
+    *Vipul A M*
 
-    *Gleb Mazovetskiy*
+*   Remove deprecated `ActiveSupport::Notifications::Instrumenter#end=`.
 
-*   Fix bug where `ActiveSupport::Timezone.all` would fail when tzinfo data for
-    any timezone defined in `ActiveSupport::TimeZone::MAPPING` is missing.
+    *Rafael Mendonça França*
 
-    *Dominik Sander*
+*   Deprecate `ActiveSupport::Multibyte::Unicode.default_normalization_form`.
 
-*   Fix bug where `ActiveSupport::Cache` will massively inflate the storage
-    size when compression is enabled (which is true by default). This patch
-    does not attempt to repair existing data: please manually flush the cache
-    to clear out the problematic entries.
+    *Rafael Mendonça França*
 
-    *Godfrey Chan*
+*   Remove deprecated `ActiveSupport::Multibyte::Unicode.pack_graphemes`,
+    `ActiveSupport::Multibyte::Unicode.unpack_graphemes`,
+    `ActiveSupport::Multibyte::Unicode.normalize`,
+    `ActiveSupport::Multibyte::Unicode.downcase`,
+    `ActiveSupport::Multibyte::Unicode.upcase` and `ActiveSupport::Multibyte::Unicode.swapcase`.
 
-*   Fix `ActiveSupport::Cache#read_multi` bug with local cache enabled that was
-    returning instances of `ActiveSupport::Cache::Entry` instead of the raw values.
+    *Rafael Mendonça França*
 
-    *Jason Lee*
+*   Remove deprecated `ActiveSupport::Multibyte::Chars#consumes?` and `ActiveSupport::Multibyte::Chars#normalize`.
 
+    *Rafael Mendonça França*
 
-## Rails 5.2.0 (April 09, 2018) ##
+*   Remove deprecated file `active_support/core_ext/range/include_range`.
 
-*   Caching: MemCache and Redis `read_multi` and `fetch_multi` speedup.
-    Read from the local in-memory cache before consulting the backend.
+    *Rafael Mendonça França*
 
-    *Gabriel Sobrinho*
+*   Remove deprecated file `active_support/core_ext/hash/transform_values`.
 
-*   Return all mappings for a timezone identifier in `country_zones`.
+    *Rafael Mendonça França*
 
-    Some timezones like `Europe/London` have multiple mappings in
-    `ActiveSupport::TimeZone::MAPPING` so return all of them instead
-    of the first one found by using `Hash#value`. e.g:
+*   Remove deprecated file `active_support/core_ext/hash/compact`.
 
-        # Before
-        ActiveSupport::TimeZone.country_zones("GB") # => ["Edinburgh"]
+    *Rafael Mendonça França*
 
-        # After
-        ActiveSupport::TimeZone.country_zones("GB") # => ["Edinburgh", "London"]
+*   Remove deprecated file `active_support/core_ext/array/prepend_and_append`.
 
-    Fixes #31668.
+    *Rafael Mendonça França*
 
-    *Andrew White*
+*   Remove deprecated file `active_support/core_ext/numeric/inquiry`.
 
-*   Add support for connection pooling on RedisCacheStore.
+    *Rafael Mendonça França*
 
-    *fatkodima*
+*   Remove deprecated file `active_support/core_ext/module/reachable`.
 
-*   Support hash as first argument in `assert_difference`. This allows to specify multiple
-    numeric differences in the same assertion.
+    *Rafael Mendonça França*
 
-        assert_difference ->{ Article.count } => 1, ->{ Post.count } => 2
+*   Remove deprecated `Module#parent_name`, `Module#parent` and `Module#parents`.
 
-    *Julien Meichelbeck*
+    *Rafael Mendonça França*
 
-*   Add missing instrumentation for `read_multi` in `ActiveSupport::Cache::Store`.
+*   Remove deprecated `ActiveSupport::LoggerThreadSafeLevel#after_initialize`.
 
-    *Ignatius Reza Lesmana*
+    *Rafael Mendonça França*
 
-*   `assert_changes` will always assert that the expression changes,
-    regardless of `from:` and `to:` argument combinations.
+*   Remove deprecated `LoggerSilence` constant.
 
-    *Daniel Ma*
+    *Rafael Mendonça França*
 
-*   Use SHA-1 to generate non-sensitive digests, such as the ETag header.
+*   Remove deprecated fallback to `I18n.default_local` when `config.i18n.fallbacks` is empty.
 
-    Enabled by default for new apps; upgrading apps can opt in by setting
-    `config.active_support.use_sha1_digests = true`.
+    *Rafael Mendonça França*
 
-    *Dmitri Dolguikh*, *Eugene Kenny*
+*   Remove entries from local cache on `RedisCacheStore#delete_matched`
 
-*   Changed default behaviour of `ActiveSupport::SecurityUtils.secure_compare`,
-    to make it not leak length information even for variable length string.
+    Fixes #38627
 
-    Renamed old `ActiveSupport::SecurityUtils.secure_compare` to `fixed_length_secure_compare`,
-    and started raising `ArgumentError` in case of length mismatch of passed strings.
+    *ojab*
 
-    *Vipul A M*
+*   Speed up `ActiveSupport::SecurityUtils.fixed_length_secure_compare` by using
+    `OpenSSL.fixed_length_secure_compare`, if available.
 
-*   Make `ActiveSupport::TimeZone.all` return only time zones that are in
-    `ActiveSupport::TimeZone::MAPPING`.
+    *Nate Matykiewicz*
 
-    Fixes #7245.
+*   `ActiveSupport::Cache::MemCacheStore` now checks `ENV["MEMCACHE_SERVERS"]` before falling back to `"localhost:11211"` if configured without any addresses.
 
-    *Chris LaRose*
+    ```ruby
+    config.cache_store = :mem_cache_store
 
-*   MemCacheStore: Support expiring counters.
+    # is now equivalent to
 
-    Pass `expires_in: [seconds]` to `#increment` and `#decrement` options
-    to set the Memcached TTL (time-to-live) if the counter doesn't exist.
-    If the counter exists, Memcached doesn't extend its expiry when it's
-    incremented or decremented.
+    config.cache_store = :mem_cache_store, ENV["MEMCACHE_SERVERS"] || "localhost:11211"
 
-    ```
-    Rails.cache.increment("my_counter", 1, expires_in: 2.minutes)
-    ```
+    # instead of
 
-    *Takumasa Ochi*
+    config.cache_store = :mem_cache_store, "localhost:11211" # ignores ENV["MEMCACHE_SERVERS"]
+    ```
 
-*   Handle `TZInfo::AmbiguousTime` errors.
+    *Sam Bostock*
 
-    Make `ActiveSupport::TimeWithZone` match Ruby's handling of ambiguous
-    times by choosing the later period, e.g.
+*   `ActiveSupport::Subscriber#attach_to` now accepts an `inherit_all:` argument. When set to true,
+    it allows a subscriber to receive events for methods defined in the subscriber's ancestor class(es).
 
-    Ruby:
-    ```
-    ENV["TZ"] = "Europe/Moscow"
-    Time.local(2014, 10, 26, 1, 0, 0)   # => 2014-10-26 01:00:00 +0300
-    ```
+    ```ruby
+    class ActionControllerSubscriber < ActiveSupport::Subscriber
+      attach_to :action_controller
 
-    Before:
-    ```
-    >> "2014-10-26 01:00:00".in_time_zone("Moscow")
-    TZInfo::AmbiguousTime: 26/10/2014 01:00 is an ambiguous local time.
-    ```
+      def start_processing(event)
+        info "Processing by #{event.payload[:controller]}##{event.payload[:action]} as #{format}"
+      end
 
-    After:
-    ```
-    >> "2014-10-26 01:00:00".in_time_zone("Moscow")
-    => Sun, 26 Oct 2014 01:00:00 MSK +03:00
-    ```
+      def redirect_to(event)
+        info { "Redirected to #{event.payload[:location]}" }
+      end
+    end
 
-    Fixes #17395.
+    # We detach ActionControllerSubscriber from the :action_controller namespace so that our CustomActionControllerSubscriber
+    # can provide its own instrumentation for certain events in the namespace
+    ActionControllerSubscriber.detach_from(:action_controller)
 
-    *Andrew White*
+    class CustomActionControllerSubscriber < ActionControllerSubscriber
+      attach_to :action_controller, inherit_all: true
 
-*   Redis cache store.
+      def start_processing(event)
+        info "A custom response to start_processing events"
+      end
 
-    ```
-    # Defaults to `redis://localhost:6379/0`. Only use for dev/test.
-    config.cache_store = :redis_cache_store
-
-    # Supports all common cache store options (:namespace, :compress,
-    # :compress_threshold, :expires_in, :race_condition_ttl) and all
-    # Redis options.
-    cache_password = Rails.application.secrets.redis_cache_password
-    config.cache_store = :redis_cache_store, driver: :hiredis,
-      namespace: 'myapp-cache', compress: true, timeout: 1,
-      url: "redis://:#{cache_password}@myapp-cache-1:6379/0"
-
-    # Supports Redis::Distributed with multiple hosts
-    config.cache_store = :redis_cache_store, driver: :hiredis
-      namespace: 'myapp-cache', compress: true,
-      url: %w[
-        redis://myapp-cache-1:6379/0
-        redis://myapp-cache-1:6380/0
-        redis://myapp-cache-2:6379/0
-        redis://myapp-cache-2:6380/0
-        redis://myapp-cache-3:6379/0
-        redis://myapp-cache-3:6380/0
-      ]
-
-    # Or pass a builder block
-    config.cache_store = :redis_cache_store,
-      namespace: 'myapp-cache', compress: true,
-      redis: -> { Redis.new … }
+      # => CustomActionControllerSubscriber will process events for "start_processing.action_controller" notifications
+      # using its own #start_processing implementation, while retaining ActionControllerSubscriber's instrumentation
+      # for "redirect_to.action_controller" notifications
+    end
     ```
 
-    Deployment note: Take care to use a *dedicated Redis cache* rather
-    than pointing this at your existing Redis server. It won't cope well
-    with mixed usage patterns and it won't expire cache entries by default.
+    *Adrianna Chang*
 
-    Redis cache server setup guide: https://redis.io/topics/lru-cache
+*   Allow the digest class used to generate non-sensitive digests to be configured with `config.active_support.hash_digest_class`.
 
-    *Jeremy Daer*
+    `config.active_support.use_sha1_digests` is deprecated in favour of `config.active_support.hash_digest_class = ::Digest::SHA1`.
 
-*   Cache: Enable compression by default for values > 1kB.
+    *Dirkjan Bussink*
 
-    Compression has long been available, but opt-in and at a 16kB threshold.
-    It wasn't enabled by default due to CPU cost. Today it's cheap and typical
-    cache data is eminently compressible, such as HTML or JSON fragments.
-    Compression dramatically reduces Memcached/Redis mem usage, which means
-    the same cache servers can store more data, which means higher hit rates.
+*   Fix bug to make memcached write_entry expire correctly with unless_exist
 
-    To disable compression, pass `compress: false` to the initializer.
+    *Jye Lee*
 
-    *Jeremy Daer*
+*   Add `ActiveSupport::Duration` conversion methods
 
-*   Allow `Range#include?` on TWZ ranges.
+    `in_seconds`, `in_minutes`, `in_hours`, `in_days`, `in_weeks`, `in_months`, and `in_years` return the respective duration covered.
 
-    In #11474 we prevented TWZ ranges being iterated over which matched
-    Ruby's handling of Time ranges and as a consequence `include?`
-    stopped working with both Time ranges and TWZ ranges. However in
-    ruby/ruby@b061634 support was added for `include?` to use `cover?`
-    for 'linear' objects. Since we have no way of making Ruby consider
-    TWZ instances as 'linear' we have to override `Range#include?`.
+    *Jason York*
 
-    Fixes #30799.
+*   Fixed issue in `ActiveSupport::Cache::RedisCacheStore` not passing options
+    to `read_multi` causing `fetch_multi` to not work properly
 
-    *Andrew White*
+    *Rajesh Sharma*
 
-*   Fix acronym support in `humanize`.
+*   Fixed issue in `ActiveSupport::Cache::MemCacheStore` which caused duplicate compression,
+    and caused the provided `compression_threshold` to not be respected.
 
-    Acronym inflections are stored with lowercase keys in the hash but
-    the match wasn't being lowercased before being looked up in the hash.
-    This shouldn't have any performance impact because before it would
-    fail to find the acronym and perform the `downcase` operation anyway.
+    *Max Gurewitz*
 
-    Fixes #31052.
+*   Prevent `RedisCacheStore` and `MemCacheStore` from performing compression
+    when reading entries written with `raw: true`.
 
-    *Andrew White*
+    *Max Gurewitz*
 
-*   Add same method signature for `Time#prev_year` and `Time#next_year`
-    in accordance with `Date#prev_year`, `Date#next_year`.
+*   `URI.parser` is deprecated and will be removed in Rails 6.2. Use
+    `URI::DEFAULT_PARSER` instead.
 
-    Allows pass argument for `Time#prev_year` and `Time#next_year`.
+    *Jean Boussier*
 
-    Before:
-    ```
-    Time.new(2017, 9, 16, 17, 0).prev_year    # => 2016-09-16 17:00:00 +0300
-    Time.new(2017, 9, 16, 17, 0).prev_year(1)
-    # => ArgumentError: wrong number of arguments (given 1, expected 0)
+*   `require_dependency` has been documented to be _obsolete_ in `:zeitwerk`
+    mode. The method is not deprecated as such (yet), but applications are
+    encouraged to not use it.
 
-    Time.new(2017, 9, 16, 17, 0).next_year    # => 2018-09-16 17:00:00 +0300
-    Time.new(2017, 9, 16, 17, 0).next_year(1)
-    # => ArgumentError: wrong number of arguments (given 1, expected 0)
-    ```
+    In `:zeitwerk` mode, semantics match Ruby's and you do not need to be
+    defensive with load order. Just refer to classes and modules normally. If
+    the constant name is dynamic, camelize if needed, and constantize.
 
-    After:
-    ```
-    Time.new(2017, 9, 16, 17, 0).prev_year    # => 2016-09-16 17:00:00 +0300
-    Time.new(2017, 9, 16, 17, 0).prev_year(1) # => 2016-09-16 17:00:00 +0300
+    *Xavier Noria*
+
+*   Add 3rd person aliases of `Symbol#start_with?` and `Symbol#end_with?`.
 
-    Time.new(2017, 9, 16, 17, 0).next_year    # => 2018-09-16 17:00:00 +0300
-    Time.new(2017, 9, 16, 17, 0).next_year(1) # => 2018-09-16 17:00:00 +0300
+    ```ruby
+    :foo.starts_with?("f") # => true
+    :foo.ends_with?("o")   # => true
     ```
 
-    *bogdanvlviv*
+    *Ryuta Kamizono*
 
-*   Add same method signature for `Time#prev_month` and `Time#next_month`
-    in accordance with `Date#prev_month`, `Date#next_month`.
+*   Add override of unary plus for `ActiveSupport::Duration`.
 
-    Allows pass argument for `Time#prev_month` and `Time#next_month`.
+    `+ 1.second` is now identical to `+1.second` to prevent errors
+    where a seemingly innocent change of formatting leads to a change in the code behavior.
 
     Before:
-    ```
-    Time.new(2017, 9, 16, 17, 0).prev_month    # => 2017-08-16 17:00:00 +0300
-    Time.new(2017, 9, 16, 17, 0).prev_month(1)
-    # => ArgumentError: wrong number of arguments (given 1, expected 0)
-
-    Time.new(2017, 9, 16, 17, 0).next_month    # => 2017-10-16 17:00:00 +0300
-    Time.new(2017, 9, 16, 17, 0).next_month(1)
-    # => ArgumentError: wrong number of arguments (given 1, expected 0)
+    ```ruby
+    +1.second.class
+    # => ActiveSupport::Duration
+    (+ 1.second).class
+    # => Integer
     ```
 
     After:
-    ```
-    Time.new(2017, 9, 16, 17, 0).prev_month    # => 2017-08-16 17:00:00 +0300
-    Time.new(2017, 9, 16, 17, 0).prev_month(1) # => 2017-08-16 17:00:00 +0300
-
-    Time.new(2017, 9, 16, 17, 0).next_month    # => 2017-10-16 17:00:00 +0300
-    Time.new(2017, 9, 16, 17, 0).next_month(1) # => 2017-10-16 17:00:00 +0300
+    ```ruby
+    +1.second.class
+    # => ActiveSupport::Duration
+    (+ 1.second).class
+    # => ActiveSupport::Duration
     ```
 
-    *bogdanvlviv*
+    Fixes #39079.
 
-*   Add same method signature for `Time#prev_day` and `Time#next_day`
-    in accordance with `Date#prev_day`, `Date#next_day`.
+    *Roman Kushnir*
 
-    Allows pass argument for `Time#prev_day` and `Time#next_day`.
+*   Add subsec to `ActiveSupport::TimeWithZone#inspect`.
 
     Before:
-    ```
-    Time.new(2017, 9, 16, 17, 0).prev_day    # => 2017-09-15 17:00:00 +0300
-    Time.new(2017, 9, 16, 17, 0).prev_day(1)
-    # => ArgumentError: wrong number of arguments (given 1, expected 0)
 
-    Time.new(2017, 9, 16, 17, 0).next_day    # => 2017-09-17 17:00:00 +0300
-    Time.new(2017, 9, 16, 17, 0).next_day(1)
-    # => ArgumentError: wrong number of arguments (given 1, expected 0)
-    ```
+        Time.at(1498099140).in_time_zone.inspect
+        # => "Thu, 22 Jun 2017 02:39:00 UTC +00:00"
+        Time.at(1498099140, 123456780, :nsec).in_time_zone.inspect
+        # => "Thu, 22 Jun 2017 02:39:00 UTC +00:00"
+        Time.at(1498099140 + Rational("1/3")).in_time_zone.inspect
+        # => "Thu, 22 Jun 2017 02:39:00 UTC +00:00"
 
     After:
-    ```
-    Time.new(2017, 9, 16, 17, 0).prev_day    # => 2017-09-15 17:00:00 +0300
-    Time.new(2017, 9, 16, 17, 0).prev_day(1) # => 2017-09-15 17:00:00 +0300
 
-    Time.new(2017, 9, 16, 17, 0).next_day    # => 2017-09-17 17:00:00 +0300
-    Time.new(2017, 9, 16, 17, 0).next_day(1) # => 2017-09-17 17:00:00 +0300
-    ```
+        Time.at(1498099140).in_time_zone.inspect
+        # => "Thu, 22 Jun 2017 02:39:00.000000000 UTC +00:00"
+        Time.at(1498099140, 123456780, :nsec).in_time_zone.inspect
+        # => "Thu, 22 Jun 2017 02:39:00.123456780 UTC +00:00"
+        Time.at(1498099140 + Rational("1/3")).in_time_zone.inspect
+        # => "Thu, 22 Jun 2017 02:39:00.333333333 UTC +00:00"
 
-    *bogdanvlviv*
+    *akinomaeni*
 
-*   `IO#to_json` now returns the `to_s` representation, rather than
-    attempting to convert to an array. This fixes a bug where `IO#to_json`
-    would raise an `IOError` when called on an unreadable object.
+*   Calling `ActiveSupport::TaggedLogging#tagged` without a block now returns a tagged logger.
 
-    Fixes #26132.
+    ```ruby
+    logger.tagged("BCX").info("Funky time!") # => [BCX] Funky time!
+    ```
 
-    *Paul Kuruvilla*
+    *Eugene Kenny*
 
-*   Remove deprecated `halt_callback_chains_on_return_false` option.
+*   Align `Range#cover?` extension behavior with Ruby behavior for backwards ranges.
 
-    *Rafael Mendonça França*
+    `(1..10).cover?(5..3)` now returns `false`, as it does in plain Ruby.
 
-*   Remove deprecated `:if` and `:unless` string filter for callbacks.
+    Also update `#include?` and `#===` behavior to match.
 
-    *Rafael Mendonça França*
+    *Michael Groeneman*
 
-*   `Hash#slice` now falls back to Ruby 2.5+'s built-in definition if defined.
+*   Update to TZInfo v2.0.0.
 
-    *Akira Matsuda*
+    This changes the output of `ActiveSupport::TimeZone.utc_to_local`, but
+    can be controlled with the
+    `ActiveSupport.utc_to_local_returns_utc_offset_times` config.
 
-*   Deprecate `secrets.secret_token`.
+    New Rails 6.1 apps have it enabled by default, existing apps can upgrade
+    via the config in config/initializers/new_framework_defaults_6_1.rb
 
-    The architecture for secrets had a big upgrade between Rails 3 and Rails 4,
-    when the default changed from using `secret_token` to `secret_key_base`.
+    See the `utc_to_local_returns_utc_offset_times` documentation for details.
 
-    `secret_token` has been soft deprecated in documentation for four years
-    but is still in place to support apps created before Rails 4.
-    Deprecation warnings have been added to help developers upgrade their
-    applications to `secret_key_base`.
+    *Phil Ross*, *Jared Beck*
 
-    *claudiob*, *Kasper Timm Hansen*
+*   Add Date and Time `#yesterday?` and `#tomorrow?` alongside `#today?`.
 
-*   Return an instance of `HashWithIndifferentAccess` from `HashWithIndifferentAccess#transform_keys`.
+    Aliased to `#prev_day?` and `#next_day?` to match the existing `#prev/next_day` methods.
 
-    *Yuji Yaginuma*
+    *Jatin Dhankhar*
 
-*   Add key rotation support to `MessageEncryptor` and `MessageVerifier`.
+*   Add `Enumerable#pick` to complement `ActiveRecord::Relation#pick`.
 
-    This change introduces a `rotate` method to both the `MessageEncryptor` and
-    `MessageVerifier` classes. This method accepts the same arguments and
-    options as the given classes' constructor. The `encrypt_and_verify` method
-    for `MessageEncryptor` and the `verified` method for `MessageVerifier` also
-    accept an optional keyword argument `:on_rotation` block which is called
-    when a rotated instance is used to decrypt or verify the message.
+    *Eugene Kenny*
 
-    *Michael J Coyne*
+*   [Breaking change] `ActiveSupport::Callbacks#halted_callback_hook` now receive a 2nd argument:
 
-*   Deprecate `Module#reachable?` method.
+    `ActiveSupport::Callbacks#halted_callback_hook` now receive the name of the callback
+    being halted as second argument.
+    This change will allow you to differentiate which callbacks halted the chain
+    and act accordingly.
 
-    *bogdanvlviv*
+    ```ruby
+      class Book < ApplicationRecord
+        before_save { throw(:abort) }
+        before_create { throw(:abort) }
 
-*   Add `config/credentials.yml.enc` to store production app secrets.
+        def halted_callback_hook(filter, callback_name)
+          Rails.logger.info("Book couldn't be #{callback_name}d")
+        end
 
-    Allows saving any authentication credentials for third party services
-    directly in repo encrypted with `config/master.key` or `ENV["RAILS_MASTER_KEY"]`.
+        Book.create # => "Book couldn't be created"
+        book.save # => "Book couldn't be saved"
+      end
+    ```
 
-    This will eventually replace `Rails.application.secrets` and the encrypted
-    secrets introduced in Rails 5.1.
+    *Edouard Chin*
 
-    *DHH*, *Kasper Timm Hansen*
+*   Support `prepend` with `ActiveSupport::Concern`.
 
-*   Add `ActiveSupport::EncryptedFile` and `ActiveSupport::EncryptedConfiguration`.
+    Allows a module with `extend ActiveSupport::Concern` to be prepended.
 
-    Allows for stashing encrypted files or configuration directly in repo by
-    encrypting it with a key.
+        module Imposter
+          extend ActiveSupport::Concern
 
-    Backs the new credentials setup above, but can also be used independently.
+          # Same as `included`, except only run when prepended.
+          prepended do
+          end
+        end
 
-    *DHH*, *Kasper Timm Hansen*
+        class Person
+          prepend Imposter
+        end
 
-*   `Module#delegate_missing_to` now raises `DelegationError` if target is nil,
-    similar to `Module#delegate`.
+    Class methods are prepended to the base class, concerning is also
+    updated: `concerning :Imposter, prepend: true do`.
 
-    *Anton Khamets*
+    *Jason Karns*, *Elia Schito*
 
-*   Update `String#camelize` to provide feedback when wrong option is passed.
+*   Deprecate using `Range#include?` method to check the inclusion of a value
+    in a date time range. It is recommended to use `Range#cover?` method
+    instead of `Range#include?` to check the inclusion of a value
+    in a date time range.
 
-    `String#camelize` was returning nil without any feedback when an
-    invalid option was passed as a parameter.
+    *Vishal Telangre*
 
-    Previously:
+*   Support added for a `round_mode` parameter, in all number helpers. (See: `BigDecimal::mode`.)
 
-        'one_two'.camelize(true)
-        # => nil
+    ```ruby
+    number_to_currency(1234567890.50, precision: 0, round_mode: :half_down) # => "$1,234,567,890"
+    number_to_percentage(302.24398923423, precision: 5, round_mode: :down) # => "302.24398%"
+    number_to_rounded(389.32314, precision: 0, round_mode: :ceil) # => "390"
+    number_to_human_size(483989, precision: 2, round_mode: :up) # => "480 KB"
+    number_to_human(489939, precision: 2, round_mode: :floor) # => "480 Thousand"
 
-    Now:
+    485000.to_s(:human, precision: 2, round_mode: :half_even) # => "480 Thousand"
+    ```
 
-        'one_two'.camelize(true)
-        # => ArgumentError: Invalid option, use either :upper or :lower.
+    *Tom Lord*
 
-    *Ricardo Díaz*
+*   `Array#to_sentence` no longer returns a frozen string.
 
-*   Fix modulo operations involving durations.
+    Before:
 
-    Rails 5.1 introduced `ActiveSupport::Duration::Scalar` as a wrapper
-    around numeric values as a way of ensuring a duration was the outcome of
-    an expression. However, the implementation was missing support for modulo
-    operations. This support has now been added and should result in a duration
-    being returned from expressions involving modulo operations.
+        ['one', 'two'].to_sentence.frozen?
+        # => true
 
-    Prior to Rails 5.1:
+    After:
 
-        5.minutes % 2.minutes
-        # => 60
+        ['one', 'two'].to_sentence.frozen?
+        # => false
 
-    Now:
+    *Nicolas Dular*
 
-        5.minutes % 2.minutes
-        # => 1 minute
+*   When an instance of `ActiveSupport::Duration` is converted to an `iso8601` duration string, if `weeks` are mixed with `date` parts, the `week` part will be converted to days.
+    This keeps the parser and serializer on the same page.
 
-    Fixes #29603 and #29743.
+    ```ruby
+    duration = ActiveSupport::Duration.build(1000000)
+    # 1 week, 4 days, 13 hours, 46 minutes, and 40.0 seconds
 
-    *Sayan Chakraborty*, *Andrew White*
+    duration_iso = duration.iso8601
+    # P11DT13H46M40S
 
-*   Fix division where a duration is the denominator.
+    ActiveSupport::Duration.parse(duration_iso)
+    # 11 days, 13 hours, 46 minutes, and 40 seconds
 
-    PR #29163 introduced a change in behavior when a duration was the denominator
-    in a calculation - this was incorrect as dividing by a duration should always
-    return a `Numeric`. The behavior of previous versions of Rails has been restored.
+    duration = ActiveSupport::Duration.build(604800)
+    # 1 week
 
-    Fixes #29592.
+    duration_iso = duration.iso8601
+    # P1W
 
-    *Andrew White*
+    ActiveSupport::Duration.parse(duration_iso)
+    # 1 week
+    ```
 
-*   Add purpose and expiry support to `ActiveSupport::MessageVerifier` and
-   `ActiveSupport::MessageEncryptor`.
+    *Abhishek Sarkar*
 
-    For instance, to ensure a message is only usable for one intended purpose:
+*   Add block support to `ActiveSupport::Testing::TimeHelpers#travel_back`.
 
-        token = @verifier.generate("x", purpose: :shipping)
+    *Tim Masliuchenko*
 
-        @verifier.verified(token, purpose: :shipping) # => "x"
-        @verifier.verified(token)                     # => nil
+*   Update `ActiveSupport::Messages::Metadata#fresh?` to work for cookies with expiry set when
+    `ActiveSupport.parse_json_times = true`.
 
-    Or make it expire after a set time:
+    *Christian Gregg*
 
-        @verifier.generate("x", expires_in: 1.month)
-        @verifier.generate("y", expires_at: Time.now.end_of_year)
+*   Support symbolic links for `content_path` in `ActiveSupport::EncryptedFile`.
 
-    Showcased with `ActiveSupport::MessageVerifier`, but works the same for
-    `ActiveSupport::MessageEncryptor`'s `encrypt_and_sign` and `decrypt_and_verify`.
+    *Takumi Shotoku*
 
-    Pull requests: #29599, #29854
+*   Improve `Range#===`, `Range#include?`, and `Range#cover?` to work with beginless (startless)
+    and endless range targets.
 
-    *Assain Jaleel*
+    *Allen Hsu*, *Andrew Hodgkinson*
 
-*   Make the order of `Hash#reverse_merge!` consistent with `HashWithIndifferentAccess`.
+*   Don't use `Process#clock_gettime(CLOCK_THREAD_CPUTIME_ID)` on Solaris.
 
-    *Erol Fornoles*
+    *Iain Beeston*
 
-*   Add `freeze_time` helper which freezes time to `Time.now` in tests.
+*   Prevent `ActiveSupport::Duration.build(value)` from creating instances of
+    `ActiveSupport::Duration` unless `value` is of type `Numeric`.
 
-    *Prathamesh Sonpatki*
+    Addresses the errant set of behaviours described in #37012 where
+    `ActiveSupport::Duration` comparisons would fail confusingly
+    or return unexpected results when comparing durations built from instances of `String`.
 
-*   Default `ActiveSupport::MessageEncryptor` to use AES 256 GCM encryption.
+    Before:
 
-    On for new Rails 5.2 apps. Upgrading apps can find the config as a new
-    framework default.
+        small_duration_from_string = ActiveSupport::Duration.build('9')
+        large_duration_from_string = ActiveSupport::Duration.build('100000000000000')
+        small_duration_from_int = ActiveSupport::Duration.build(9)
 
-    *Assain Jaleel*
+        large_duration_from_string > small_duration_from_string
+        # => false
 
-*   Cache: `write_multi`.
+        small_duration_from_string == small_duration_from_int
+        # => false
 
-        Rails.cache.write_multi foo: 'bar', baz: 'qux'
+        small_duration_from_int < large_duration_from_string
+        # => ArgumentError (comparison of ActiveSupport::Duration::Scalar with ActiveSupport::Duration failed)
 
-    Plus faster fetch_multi with stores that implement `write_multi_entries`.
-    Keys that aren't found may be written to the cache store in one shot
-    instead of separate writes.
+        large_duration_from_string > small_duration_from_int
+        # => ArgumentError (comparison of String with ActiveSupport::Duration failed)
 
-    The default implementation simply calls `write_entry` for each entry.
-    Stores may override if they're capable of one-shot bulk writes, like
-    Redis `MSET`.
+    After:
 
-    *Jeremy Daer*
+        small_duration_from_string = ActiveSupport::Duration.build('9')
+        # => TypeError (can't build an ActiveSupport::Duration from a String)
 
-*   Add default option to module and class attribute accessors.
+    *Alexei Emam*
 
-        mattr_accessor :settings, default: {}
+*   Add `ActiveSupport::Cache::Store#delete_multi` method to delete multiple keys from the cache store.
 
-    Works for `mattr_reader`, `mattr_writer`, `cattr_accessor`, `cattr_reader`,
-    and `cattr_writer` as well.
+    *Peter Zhu*
 
-    *Genadi Samokovarov*
+*   Support multiple arguments in `HashWithIndifferentAccess` for `merge` and `update` methods, to
+    follow Ruby 2.6 addition.
 
-*   Add `Date#prev_occurring` and `Date#next_occurring` to return specified next/previous occurring day of week.
+    *Wojciech Wnętrzak*
 
-    *Shota Iguchi*
+*   Allow initializing `thread_mattr_*` attributes via `:default` option.
 
-*   Add default option to `class_attribute`.
+        class Scraper
+          thread_mattr_reader :client, default: Api::Client.new
+        end
 
-    Before:
+    *Guilherme Mansur*
 
-        class_attribute :settings
-        self.settings = {}
+*   Add `compact_blank` for those times when you want to remove #blank? values from
+    an Enumerable (also `compact_blank!` on Hash, Array, ActionController::Parameters).
 
-    Now:
+    *Dana Sherson*
 
-        class_attribute :settings, default: {}
+*   Make ActiveSupport::Logger Fiber-safe.
 
-    *DHH*
+    Use `Fiber.current.__id__` in `ActiveSupport::Logger#local_level=` in order
+    to make log level local to Ruby Fibers in addition to Threads.
 
-*   `#singularize` and `#pluralize` now respect uncountables for the specified locale.
+    Example:
 
-    *Eilis Hamilton*
+        logger = ActiveSupport::Logger.new(STDOUT)
+        logger.level = 1
+        puts "Main is debug? #{logger.debug?}"
+
+        Fiber.new {
+          logger.local_level = 0
+          puts "Thread is debug? #{logger.debug?}"
+        }.resume
 
-*   Add `ActiveSupport::CurrentAttributes` to provide a thread-isolated attributes singleton.
-    Primary use case is keeping all the per-request attributes easily available to the whole system.
+        puts "Main is debug? #{logger.debug?}"
 
-    *DHH*
+    Before:
 
-*   Fix implicit coercion calculations with scalars and durations.
+        Main is debug? false
+        Thread is debug? true
+        Main is debug? true
 
-    Previously, calculations where the scalar is first would be converted to a duration
-    of seconds, but this causes issues with dates being converted to times, e.g:
+    After:
 
-        Time.zone = "Beijing"           # => Asia/Shanghai
-        date = Date.civil(2017, 5, 20)  # => Mon, 20 May 2017
-        2 * 1.day                       # => 172800 seconds
-        date + 2 * 1.day                # => Mon, 22 May 2017 00:00:00 CST +08:00
+        Main is debug? false
+        Thread is debug? true
+        Main is debug? false
 
-    Now, the `ActiveSupport::Duration::Scalar` calculation methods will try to maintain
-    the part structure of the duration where possible, e.g:
+    Fixes #36752.
 
-        Time.zone = "Beijing"           # => Asia/Shanghai
-        date = Date.civil(2017, 5, 20)  # => Mon, 20 May 2017
-        2 * 1.day                       # => 2 days
-        date + 2 * 1.day                # => Mon, 22 May 2017
+    *Alexander Varnin*
 
-    Fixes #29160, #28970.
+*   Allow the `on_rotation` proc used when decrypting/verifying a message to be
+    passed at the constructor level.
 
-    *Andrew White*
+    Before:
 
-*   Add support for versioned cache entries. This enables the cache stores to recycle cache keys, greatly saving
-    on storage in cases with frequent churn. Works together with the separation of `#cache_key` and `#cache_version`
-    in Active Record and its use in Action Pack's fragment caching.
+        crypt = ActiveSupport::MessageEncryptor.new('long_secret')
+        crypt.decrypt_and_verify(encrypted_message, on_rotation: proc { ... })
+        crypt.decrypt_and_verify(another_encrypted_message, on_rotation: proc { ... })
 
-    *DHH*
+    After:
 
-*   Pass gem name and deprecation horizon to deprecation notifications.
+        crypt = ActiveSupport::MessageEncryptor.new('long_secret', on_rotation: proc { ... })
+        crypt.decrypt_and_verify(encrypted_message)
+        crypt.decrypt_and_verify(another_encrypted_message)
 
-    *Willem van Bergen*
+    *Edouard Chin*
 
-*   Add support for `:offset` and `:zone` to `ActiveSupport::TimeWithZone#change`.
+*   `delegate_missing_to` would raise a `DelegationError` if the object
+    delegated to was `nil`. Now the `allow_nil` option has been added to enable
+    the user to specify they want `nil` returned in this case.
 
-    *Andrew White*
+    *Matthew Tanous*
 
-*   Add support for `:offset` to `Time#change`.
+*   `truncate` would return the original string if it was too short to be truncated
+    and a frozen string if it were long enough to be truncated. Now truncate will
+    consistently return an unfrozen string regardless. This behavior is consistent
+    with `gsub` and `strip`.
 
-    Fixes #28723.
+    Before:
 
-    *Andrew White*
+        'foobar'.truncate(5).frozen?
+        # => true
+        'foobar'.truncate(6).frozen?
+        # => false
 
-*   Add `fetch_values` for `HashWithIndifferentAccess`.
+    After:
 
-    The method was originally added to `Hash` in Ruby 2.3.0.
+        'foobar'.truncate(5).frozen?
+        # => false
+        'foobar'.truncate(6).frozen?
+        # => false
 
-    *Josh Pencheon*
+    *Jordan Thomas*
 
 
-Please check [5-1-stable](https://github.com/rails/rails/blob/5-1-stable/activesupport/CHANGELOG.md) for previous changes.
+Please check [6-0-stable](https://github.com/rails/rails/blob/6-0-stable/activesupport/CHANGELOG.md) for previous changes.