activesupport 6.0.6.1 → 6.1.7.6

data/CHANGELOG.md

@@ -1,782 +1,768 @@
-## Rails 6.0.6.1 (January 17, 2023) ##
+## Rails 6.1.7.6 (August 22, 2023) ##
 
 *   No changes.
 
 
-## Rails 6.0.6 (September 09, 2022) ##
-
-*   No changes.
+## Rails 6.1.7.5 (August 22, 2023) ##
 
+*   Use a temporary file for storing unencrypted files while editing
 
-## Rails 6.0.5.1 (July 12, 2022) ##
-
-*   No changes.
+    [CVE-2023-38037]
 
 
-## Rails 6.0.5 (May 09, 2022) ##
+## Rails 6.1.7.4 (June 26, 2023) ##
 
 *   No changes.
 
 
-## Rails 6.0.4.8 (April 26, 2022) ##
+## Rails 6.1.7.3 (March 13, 2023) ##
 
-*   Fix and add protections for XSS in `ActionView::Helpers` and `ERB::Util`.
+*   Implement SafeBuffer#bytesplice
 
-    Add the method `ERB::Util.xml_name_escape` to escape dangerous characters
-    in names of tags and names of attributes, following the specification of XML.
+    [CVE-2023-28120]
 
-    *Álvaro Martín Fraguas*
 
-
-## Rails 6.0.4.7 (March 08, 2022) ##
+## Rails 6.1.7.2 (January 24, 2023) ##
 
 *   No changes.
 
 
-## Rails 6.0.4.6 (February 11, 2022) ##
-
-*   Fix Reloader method signature to work with the new Executor signature
+## Rails 6.1.7.1 (January 17, 2023) ##
 
+*   Avoid regex backtracking in Inflector.underscore
 
-## Rails 6.0.4.5 (February 11, 2022) ##
+    [CVE-2023-22796]
 
-*   No changes.
 
-
-## Rails 6.0.4.4 (December 15, 2021) ##
+## Rails 6.1.7 (September 09, 2022) ##
 
 *   No changes.
 
 
-## Rails 6.0.4.3 (December 14, 2021) ##
+## Rails 6.1.6.1 (July 12, 2022) ##
 
 *   No changes.
 
 
-## Rails 6.0.4.2 (December 14, 2021) ##
+## Rails 6.1.6 (May 09, 2022) ##
 
 *   No changes.
 
 
-## Rails 6.0.4.1 (August 19, 2021) ##
+## Rails 6.1.5.1 (April 26, 2022) ##
 
-*   No changes.
+*   Fix and add protections for XSS in `ActionView::Helpers` and `ERB::Util`.
 
+    Add the method `ERB::Util.xml_name_escape` to escape dangerous characters
+    in names of tags and names of attributes, following the specification of XML.
 
-## Rails 6.0.4 (June 15, 2021) ##
+    *Álvaro Martín Fraguas*
 
-*   Fixed issue in `ActiveSupport::Cache::RedisCacheStore` not passing options
-    to `read_multi` causing `fetch_multi` to not work properly.
+## Rails 6.1.5 (March 09, 2022) ##
 
-    *Rajesh Sharma*
+*   Fix `ActiveSupport::Duration.build` to support negative values.
 
-*   `with_options` copies its options hash again to avoid leaking mutations.
+    The algorithm to collect the `parts` of the `ActiveSupport::Duration`
+    ignored the sign of the `value` and accumulated incorrect part values. This
+    impacted `ActiveSupport::Duration#sum` (which is dependent on `parts`) but
+    not `ActiveSupport::Duration#eql?` (which is dependent on `value`).
 
-    Fixes #39343.
+    *Caleb Buxton*, *Braden Staudacher*
 
-    *Eugene Kenny*
+*   `Time#change` and methods that call it (eg. `Time#advance`) will now
+    return a `Time` with the timezone argument provided, if the caller was
+    initialized with a timezone argument.
 
+    Fixes [#42467](https://github.com/rails/rails/issues/42467).
 
-## Rails 6.0.3.7 (May 05, 2021) ##
+    *Alex Ghiculescu*
 
-*   No changes.
+*   Clone to keep extended Logger methods for tagged logger.
 
+    *Orhan Toy*
 
-## Rails 6.0.3.6 (March 26, 2021) ##
+*   `assert_changes` works on including `ActiveSupport::Assertions` module.
 
-*   No changes.
+    *Pedro Medeiros*
 
 
-## Rails 6.0.3.5 (February 10, 2021) ##
+## Rails 6.1.4.7 (March 08, 2022) ##
 
 *   No changes.
 
 
-## Rails 6.0.3.4 (October 07, 2020) ##
+## Rails 6.1.4.6 (February 11, 2022) ##
 
-*   No changes.
+*   Fix Reloader method signature to work with the new Executor signature
 
 
-## Rails 6.0.3.3 (September 09, 2020) ##
+## Rails 6.1.4.5 (February 11, 2022) ##
 
 *   No changes.
 
 
-## Rails 6.0.3.2 (June 17, 2020) ##
+## Rails 6.1.4.4 (December 15, 2021) ##
 
 *   No changes.
 
 
-## Rails 6.0.3.1 (May 18, 2020) ##
-
-*   [CVE-2020-8165] Deprecate Marshal.load on raw cache read in RedisCacheStore
-
-*   [CVE-2020-8165] Avoid Marshal.load on raw cache value in MemCacheStore
+## Rails 6.1.4.3 (December 14, 2021) ##
 
+*   No changes.
 
-## Rails 6.0.3 (May 06, 2020) ##
-
-*   `Array#to_sentence` no longer returns a frozen string.
-
-    Before:
 
-        ['one', 'two'].to_sentence.frozen?
-        # => true
+## Rails 6.1.4.2 (December 14, 2021) ##
 
-    After:
+*   No changes.
 
-        ['one', 'two'].to_sentence.frozen?
-        # => false
 
-    *Nicolas Dular*
+## Rails 6.1.4.1 (August 19, 2021) ##
 
-*   Update `ActiveSupport::Messages::Metadata#fresh?` to work for cookies with expiry set when
-    `ActiveSupport.parse_json_times = true`.
+*   No changes.
 
-    *Christian Gregg*
 
+## Rails 6.1.4 (June 24, 2021) ##
 
-## Rails 6.0.2.2 (March 19, 2020) ##
+*   MemCacheStore: convert any underlying value (including `false`) to an `Entry`.
 
-*   No changes.
+    See [#42559](https://github.com/rails/rails/pull/42559).
 
+    *Alex Ghiculescu*
 
-## Rails 6.0.2.1 (December 18, 2019) ##
+*   Fix bug in `number_with_precision` when using large `BigDecimal` values.
 
-*   No changes.
+    Fixes #42302.
 
+    *Federico Aldunate*, *Zachary Scott*
 
-## Rails 6.0.2 (December 13, 2019) ##
+*   Check byte size instead of length on `secure_compare`.
 
-*   Eager load translations during initialization.
+    *Tietew*
 
-    *Diego Plentz*
+*   Fix `Time.at` to not lose `:in` option.
 
-*   Use per-thread CPU time clock on `ActiveSupport::Notifications`.
+    *Ryuta Kamizono*
 
-    *George Claghorn*
+*   Require a path for `config.cache_store = :file_store`.
 
+    *Alex Ghiculescu*
 
-## Rails 6.0.1 (November 5, 2019) ##
+*   Avoid having to store complex object in the default translation file.
 
-*   `ActiveSupport::SafeBuffer` supports `Enumerator` methods.
+    *Rafael Mendonça França*
 
-    *Shugo Maeda*
 
-*   The Redis cache store fails gracefully when the server returns a "max number
-    of clients reached" error.
+## Rails 6.1.3.2 (May 05, 2021) ##
 
-    *Brandon Medenwald*
+*   No changes.
 
-*   Fixed that mutating a value returned by a memory cache store would
-    unexpectedly change the cached value.
 
-    *Jonathan Hyman*
+## Rails 6.1.3.1 (March 26, 2021) ##
 
-*   The default inflectors in `zeitwerk` mode support overrides:
+*   No changes.
 
-    ```ruby
-    # config/initializers/zeitwerk.rb
-    Rails.autoloaders.each do |autoloader|
-      autoloader.inflector.inflect(
-        "html_parser" => "HTMLParser",
-        "ssl_error"   => "SSLError"
-      )
-    end
-    ```
 
-    That way, you can tweak how individual basenames are inflected without touching Active Support inflection rules, which are global. These inflectors fallback to `String#camelize`, so existing inflection rules are still taken into account for non-overridden basenames.
+## Rails 6.1.3 (February 17, 2021) ##
 
-    Please, check the [autoloading guide for `zeitwerk` mode](https://guides.rubyonrails.org/v6.0/autoloading_and_reloading_constants.html#customizing-inflections) if you prefer not to depend on `String#camelize` at all.
+*   No changes.
 
-    *Xavier Noria*
 
-*   Improve `Range#===`, `Range#include?`, and `Range#cover?` to work with beginless (startless)
-    and endless range targets.
+## Rails 6.1.2.1 (February 10, 2021) ##
 
-    *Allen Hsu*, *Andrew Hodgkinson*
+*   No changes.
 
-*   Don't use `Process#clock_gettime(CLOCK_THREAD_CPUTIME_ID)` on Solaris.
 
-    *Iain Beeston*
+## Rails 6.1.2 (February 09, 2021) ##
 
+*   `ActiveSupport::Cache::MemCacheStore` now accepts an explicit `nil` for its `addresses` argument.
 
-## Rails 6.0.0 (August 16, 2019) ##
+    ```ruby
+    config.cache_store = :mem_cache_store, nil
 
-*   Let `require_dependency` in `zeitwerk` mode look the autoload paths up for
-    better backwards compatibility.
+    # is now equivalent to
 
-    *Xavier Noria*
+    config.cache_store = :mem_cache_store
 
-*   Let `require_dependency` in `zeitwerk` mode support arguments that respond
-    to `to_path` for better backwards compatibility.
+    # and is also equivalent to
 
-    *Xavier Noria*
+    config.cache_store = :mem_cache_store, ENV["MEMCACHE_SERVERS"] || "localhost:11211"
 
-*   Make ActiveSupport::Logger Fiber-safe. Fixes #36752.
+    # which is the fallback behavior of Dalli
+    ```
 
-    Use `Fiber.current.__id__` in `ActiveSupport::Logger#local_level=` in order
-    to make log level local to Ruby Fibers in addition to Threads.
+    This helps those migrating from `:dalli_store`, where an explicit `nil` was permitted.
 
-    Example:
+    *Michael Overmeyer*
 
-        logger = ActiveSupport::Logger.new(STDOUT)
-        logger.level = 1
-        p "Main is debug? #{logger.debug?}"
 
-        Fiber.new {
-          logger.local_level = 0
-          p "Thread is debug? #{logger.debug?}"
-        }.resume
+## Rails 6.1.1 (January 07, 2021) ##
 
-        p "Main is debug? #{logger.debug?}"
+*   Change `IPAddr#to_json` to match the behavior of the json gem returning the string representation
+    instead of the instance variables of the object.
 
     Before:
 
-        Main is debug? false
-        Thread is debug? true
-        Main is debug? true
+    ```ruby
+    IPAddr.new("127.0.0.1").to_json
+    # => "{\"addr\":2130706433,\"family\":2,\"mask_addr\":4294967295}"
+    ```
 
     After:
 
-        Main is debug? false
-        Thread is debug? true
-        Main is debug? false
+    ```ruby
+    IPAddr.new("127.0.0.1").to_json
+    # => "\"127.0.0.1\""
+    ```
 
-    *Alexander Varnin*
 
-*   Do not delegate missing `marshal_dump` and `_dump` methods via the
-    `delegate_missing_to` extension. This avoids unintentionally adding instance
-    variables when calling `Marshal.dump(object)`, should the delegation target of
-    `object` be a method which would otherwise add them. Fixes #36522.
+## Rails 6.1.0 (December 09, 2020) ##
 
-    *Aaron Lipman*
+*   Ensure `MemoryStore` disables compression by default. Reverts behavior of
+    `MemoryStore` to its prior rails `5.1` behavior.
 
+    *Max Gurewitz*
 
-## Rails 6.0.0.rc2 (July 22, 2019) ##
+*   Calling `iso8601` on negative durations retains the negative sign on individual
+    digits instead of prepending it.
 
-*   `truncate` would return the original string if it was too short to be truncated
-    and a frozen string if it were long enough to be truncated. Now truncate will
-    consistently return an unfrozen string regardless. This behavior is consistent
-    with `gsub` and `strip`.
+    This change is required so we can interoperate with PostgreSQL, which prefers
+    negative signs for each component.
+
+    Compatibility with other iso8601 parsers which support leading negatives as well
+    as negatives per component is still retained.
 
     Before:
 
-        'foobar'.truncate(5).frozen?
-        # => true
-        'foobar'.truncate(6).frozen?
-        # => false
+        (-1.year - 1.day).iso8601
+        # => "-P1Y1D"
 
     After:
 
-        'foobar'.truncate(5).frozen?
-        # => false
-        'foobar'.truncate(6).frozen?
-        # => false
-
-    *Jordan Thomas*
-
+        (-1.year - 1.day).iso8601
+        # => "P-1Y-1D"
 
-## Rails 6.0.0.rc1 (April 24, 2019) ##
+    *Vipul A M*
 
-*   Speed improvements to `Hash.except` and `HashWithIndifferentAccess#except`.
+*   Remove deprecated `ActiveSupport::Notifications::Instrumenter#end=`.
 
-    These methods now unset the `default`/`default_proc` on the returned Hash, compatible with Ruby 3.0’s native implementation.
-
-    *Timo Schilling*
-
-*   Introduce `ActiveSupport::ActionableError`.
-
-    Actionable errors let's you dispatch actions from Rails' error pages. This
-    can help you save time if you have a clear action for the resolution of
-    common development errors.
+    *Rafael Mendonça França*
 
-    The de-facto example are pending migrations. Every time pending migrations
-    are found, a middleware raises an error. With actionable errors, you can
-    run the migrations right from the error page. Other examples include Rails
-    plugins that need to run a rake task to setup themselves. They can now
-    raise actionable errors to run the setup straight from the error pages.
+*   Deprecate `ActiveSupport::Multibyte::Unicode.default_normalization_form`.
 
-    Here is how to define an actionable error:
+    *Rafael Mendonça França*
 
-    ```ruby
-    class PendingMigrationError < MigrationError #:nodoc:
-      include ActiveSupport::ActionableError
+*   Remove deprecated `ActiveSupport::Multibyte::Unicode.pack_graphemes`,
+    `ActiveSupport::Multibyte::Unicode.unpack_graphemes`,
+    `ActiveSupport::Multibyte::Unicode.normalize`,
+    `ActiveSupport::Multibyte::Unicode.downcase`,
+    `ActiveSupport::Multibyte::Unicode.upcase` and `ActiveSupport::Multibyte::Unicode.swapcase`.
 
-      action "Run pending migrations" do
-        ActiveRecord::Tasks::DatabaseTasks.migrate
-      end
-    end
-    ```
+    *Rafael Mendonça França*
 
-    To make an error actionable, include the `ActiveSupport::ActionableError`
-    module and invoke the `action` class macro to define the action. An action
-    needs a name and a procedure to execute. The name is shown as the name of a
-    button on the error pages. Once clicked, it will invoke the given
-    procedure.
+*   Remove deprecated `ActiveSupport::Multibyte::Chars#consumes?` and `ActiveSupport::Multibyte::Chars#normalize`.
 
-    *Vipul A M*, *Yao Jie*, *Genadi Samokovarov*
+    *Rafael Mendonça França*
 
-*   Preserve `html_safe?` status on `ActiveSupport::SafeBuffer#*`.
+*   Remove deprecated file `active_support/core_ext/range/include_range`.
 
-    Before:
+    *Rafael Mendonça França*
 
-        ("<br />".html_safe * 2).html_safe? #=> nil
+*   Remove deprecated file `active_support/core_ext/hash/transform_values`.
 
-    After:
+    *Rafael Mendonça França*
 
-        ("<br />".html_safe * 2).html_safe? #=> true
+*   Remove deprecated file `active_support/core_ext/hash/compact`.
 
-    *Ryo Nakamura*
+    *Rafael Mendonça França*
 
-*   Calling test methods with `with_info_handler` method to allow minitest-hooks
-    plugin to work.
+*   Remove deprecated file `active_support/core_ext/array/prepend_and_append`.
 
-    *Mauri Mustonen*
+    *Rafael Mendonça França*
 
-*   The Zeitwerk compatibility interface for `ActiveSupport::Dependencies` no
-    longer implements `autoloaded_constants` or `autoloaded?` (undocumented,
-    anyway). Experience shows introspection does not have many use cases, and
-    troubleshooting is done by logging. With this design trade-off we are able
-    to use even less memory in all environments.
+*   Remove deprecated file `active_support/core_ext/numeric/inquiry`.
 
-    *Xavier Noria*
+    *Rafael Mendonça França*
 
-*   Depends on Zeitwerk 2, which stores less metadata if reloading is disabled
-    and hence uses less memory when `config.cache_classes` is `true`, a standard
-    setup in production.
+*   Remove deprecated file `active_support/core_ext/module/reachable`.
 
-    *Xavier Noria*
+    *Rafael Mendonça França*
 
-*   In `:zeitwerk` mode, eager load directories in engines and applications only
-    if present in their respective `config.eager_load_paths`.
+*   Remove deprecated `Module#parent_name`, `Module#parent` and `Module#parents`.
 
-    A common use case for this is adding `lib` to `config.autoload_paths`, but
-    not to `config.eager_load_paths`. In that configuration, for example, files
-    in the `lib` directory should not be eager loaded.
+    *Rafael Mendonça França*
 
-    *Xavier Noria*
+*   Remove deprecated `ActiveSupport::LoggerThreadSafeLevel#after_initialize`.
 
-*   Fix bug in Range comparisons when comparing to an excluded-end Range
+    *Rafael Mendonça França*
 
-    Before:
+*   Remove deprecated `LoggerSilence` constant.
 
-        (1..10).cover?(1...11) # => false
+    *Rafael Mendonça França*
 
-    After:
+*   Remove deprecated fallback to `I18n.default_local` when `config.i18n.fallbacks` is empty.
 
-        (1..10).cover?(1...11) # => true
+    *Rafael Mendonça França*
 
-    With the same change for `Range#include?` and `Range#===`.
+*   Remove entries from local cache on `RedisCacheStore#delete_matched`
 
-    *Owen Stephens*
+    Fixes #38627
 
-*   Use weak references in descendants tracker to allow anonymous subclasses to
-    be garbage collected.
+    *ojab*
 
-    *Edgars Beigarts*
+*   Speed up `ActiveSupport::SecurityUtils.fixed_length_secure_compare` by using
+    `OpenSSL.fixed_length_secure_compare`, if available.
 
-*   Update `ActiveSupport::Notifications::Instrumenter#instrument` to make
-    passing a block optional. This will let users use
-    `ActiveSupport::Notifications` messaging features outside of
-    instrumentation.
+    *Nate Matykiewicz*
 
-    *Ali Ibrahim*
+*   `ActiveSupport::Cache::MemCacheStore` now checks `ENV["MEMCACHE_SERVERS"]` before falling back to `"localhost:11211"` if configured without any addresses.
 
-*   Fix `Time#advance` to work with dates before 1001-03-07
+    ```ruby
+    config.cache_store = :mem_cache_store
 
-    Before:
+    # is now equivalent to
 
-        Time.utc(1001, 3, 6).advance(years: -1) # => 1000-03-05 00:00:00 UTC
+    config.cache_store = :mem_cache_store, ENV["MEMCACHE_SERVERS"] || "localhost:11211"
 
-    After
+    # instead of
 
-        Time.utc(1001, 3, 6).advance(years: -1) # => 1000-03-06 00:00:00 UTC
+    config.cache_store = :mem_cache_store, "localhost:11211" # ignores ENV["MEMCACHE_SERVERS"]
+    ```
 
-    Note that this doesn't affect `DateTime#advance` as that doesn't use a proleptic calendar.
+    *Sam Bostock*
 
-    *Andrew White*
+*   `ActiveSupport::Subscriber#attach_to` now accepts an `inherit_all:` argument. When set to true,
+    it allows a subscriber to receive events for methods defined in the subscriber's ancestor class(es).
 
-*   In Zeitwerk mode, engines are now managed by the `main` autoloader. Engines may reference application constants, if the application is reloaded and we do not reload engines, they won't use the reloaded application code.
+    ```ruby
+    class ActionControllerSubscriber < ActiveSupport::Subscriber
+      attach_to :action_controller
 
-    *Xavier Noria*
+      def start_processing(event)
+        info "Processing by #{event.payload[:controller]}##{event.payload[:action]} as #{format}"
+      end
 
-*   Add support for supplying `locale` to `transliterate` and `parameterize`.
+      def redirect_to(event)
+        info { "Redirected to #{event.payload[:location]}" }
+      end
+    end
 
-        I18n.backend.store_translations(:de, i18n: { transliterate: { rule: { "ü" => "ue" } } })
+    # We detach ActionControllerSubscriber from the :action_controller namespace so that our CustomActionControllerSubscriber
+    # can provide its own instrumentation for certain events in the namespace
+    ActionControllerSubscriber.detach_from(:action_controller)
 
-        ActiveSupport::Inflector.transliterate("ü", locale: :de) # => "ue"
-        "Fünf autos".parameterize(locale: :de) # => "fuenf-autos"
-        ActiveSupport::Inflector.parameterize("Fünf autos", locale: :de) # => "fuenf-autos"
+    class CustomActionControllerSubscriber < ActionControllerSubscriber
+      attach_to :action_controller, inherit_all: true
 
-    *Kaan Ozkan*, *Sharang Dashputre*
+      def start_processing(event)
+        info "A custom response to start_processing events"
+      end
 
-*   Allow `Array#excluding` and `Enumerable#excluding` to deal with a passed array gracefully.
+      # => CustomActionControllerSubscriber will process events for "start_processing.action_controller" notifications
+      # using its own #start_processing implementation, while retaining ActionControllerSubscriber's instrumentation
+      # for "redirect_to.action_controller" notifications
+    end
+    ```
 
-        [ 1, 2, 3, 4, 5 ].excluding([4, 5]) # => [ 1, 2, 3 ]
+    *Adrianna Chang*
 
-    *DHH*
+*   Allow the digest class used to generate non-sensitive digests to be configured with `config.active_support.hash_digest_class`.
 
-*   Renamed `Array#without` and `Enumerable#without` to `Array#excluding` and `Enumerable#excluding`, to create parity with
-    `Array#including` and `Enumerable#including`. Retained the old names as aliases.
+    `config.active_support.use_sha1_digests` is deprecated in favour of `config.active_support.hash_digest_class = ::Digest::SHA1`.
 
-    *DHH*
+    *Dirkjan Bussink*
 
-*   Added `Array#including` and `Enumerable#including` to conveniently enlarge a collection with more members using a method rather than an operator:
+*   Fix bug to make memcached write_entry expire correctly with unless_exist
 
-        [ 1, 2, 3 ].including(4, 5) # => [ 1, 2, 3, 4, 5 ]
-        post.authors.including(Current.person) # => All the authors plus the current person!
+    *Jye Lee*
 
-    *DHH*
+*   Add `ActiveSupport::Duration` conversion methods
 
+    `in_seconds`, `in_minutes`, `in_hours`, `in_days`, `in_weeks`, `in_months`, and `in_years` return the respective duration covered.
 
-## Rails 6.0.0.beta3 (March 11, 2019) ##
+    *Jason York*
 
-*   No changes.
+*   Fixed issue in `ActiveSupport::Cache::RedisCacheStore` not passing options
+    to `read_multi` causing `fetch_multi` to not work properly
 
+    *Rajesh Sharma*
 
-## Rails 6.0.0.beta2 (February 25, 2019) ##
+*   Fixed issue in `ActiveSupport::Cache::MemCacheStore` which caused duplicate compression,
+    and caused the provided `compression_threshold` to not be respected.
 
-*   New autoloading based on [Zeitwerk](https://github.com/fxn/zeitwerk).
+    *Max Gurewitz*
 
-    *Xavier Noria*
+*   Prevent `RedisCacheStore` and `MemCacheStore` from performing compression
+    when reading entries written with `raw: true`.
 
-*   Revise `ActiveSupport::Notifications.unsubscribe` to correctly handle Regex or other multiple-pattern subscribers.
+    *Max Gurewitz*
 
-    *Zach Kemp*
+*   `URI.parser` is deprecated and will be removed in Rails 7.0. Use
+    `URI::DEFAULT_PARSER` instead.
 
-*   Add `before_reset` callback to `CurrentAttributes` and define `after_reset` as an alias of `resets` for symmetry.
+    *Jean Boussier*
 
-    *Rosa Gutierrez*
+*   `require_dependency` has been documented to be _obsolete_ in `:zeitwerk`
+    mode. The method is not deprecated as such (yet), but applications are
+    encouraged to not use it.
 
-*   Remove the `` Kernel#` `` override that suppresses ENOENT and accidentally returns nil on Unix systems.
+    In `:zeitwerk` mode, semantics match Ruby's and you do not need to be
+    defensive with load order. Just refer to classes and modules normally. If
+    the constant name is dynamic, camelize if needed, and constantize.
 
-    *Akinori Musha*
+    *Xavier Noria*
 
-*   Add `ActiveSupport::HashWithIndifferentAccess#assoc`.
+*   Add 3rd person aliases of `Symbol#start_with?` and `Symbol#end_with?`.
 
-    `assoc` can now be called with either a string or a symbol.
+    ```ruby
+    :foo.starts_with?("f") # => true
+    :foo.ends_with?("o")   # => true
+    ```
 
-    *Stefan Schüßler*
+    *Ryuta Kamizono*
 
-*   Add `Hash#deep_transform_values`, and `Hash#deep_transform_values!`.
+*   Add override of unary plus for `ActiveSupport::Duration`.
 
-    *Guillermo Iguaran*
+    `+ 1.second` is now identical to `+1.second` to prevent errors
+    where a seemingly innocent change of formatting leads to a change in the code behavior.
 
+    Before:
+    ```ruby
+    +1.second.class
+    # => ActiveSupport::Duration
+    (+ 1.second).class
+    # => Integer
+    ```
 
-## Rails 6.0.0.beta1 (January 18, 2019) ##
+    After:
+    ```ruby
+    +1.second.class
+    # => ActiveSupport::Duration
+    (+ 1.second).class
+    # => ActiveSupport::Duration
+    ```
 
-*   Remove deprecated `Module#reachable?` method.
+    Fixes #39079.
 
-    *Rafael Mendonça França*
+    *Roman Kushnir*
 
-*   Remove deprecated `#acronym_regex` method from `Inflections`.
+*   Add subsec to `ActiveSupport::TimeWithZone#inspect`.
 
-    *Rafael Mendonça França*
+    Before:
 
-*   Fix `String#safe_constantize` throwing a `LoadError` for incorrectly cased constant references.
+        Time.at(1498099140).in_time_zone.inspect
+        # => "Thu, 22 Jun 2017 02:39:00 UTC +00:00"
+        Time.at(1498099140, 123456780, :nsec).in_time_zone.inspect
+        # => "Thu, 22 Jun 2017 02:39:00 UTC +00:00"
+        Time.at(1498099140 + Rational("1/3")).in_time_zone.inspect
+        # => "Thu, 22 Jun 2017 02:39:00 UTC +00:00"
 
-    *Keenan Brock*
+    After:
 
-*   Preserve key order passed to `ActiveSupport::CacheStore#fetch_multi`.
+        Time.at(1498099140).in_time_zone.inspect
+        # => "Thu, 22 Jun 2017 02:39:00.000000000 UTC +00:00"
+        Time.at(1498099140, 123456780, :nsec).in_time_zone.inspect
+        # => "Thu, 22 Jun 2017 02:39:00.123456780 UTC +00:00"
+        Time.at(1498099140 + Rational("1/3")).in_time_zone.inspect
+        # => "Thu, 22 Jun 2017 02:39:00.333333333 UTC +00:00"
 
-    `fetch_multi(*names)` now returns its results in the same order as the `*names` requested, rather than returning cache hits followed by cache misses.
+    *akinomaeni*
 
-    *Gannon McGibbon*
+*   Calling `ActiveSupport::TaggedLogging#tagged` without a block now returns a tagged logger.
 
-*   If the same block is `included` multiple times for a Concern, an exception is no longer raised.
+    ```ruby
+    logger.tagged("BCX").info("Funky time!") # => [BCX] Funky time!
+    ```
 
-    *Mark J. Titorenko*, *Vlad Bokov*
+    *Eugene Kenny*
 
-*   Fix bug where `#to_options` for `ActiveSupport::HashWithIndifferentAccess`
-    would not act as alias for `#symbolize_keys`.
+*   Align `Range#cover?` extension behavior with Ruby behavior for backwards ranges.
 
-    *Nick Weiland*
+    `(1..10).cover?(5..3)` now returns `false`, as it does in plain Ruby.
 
-*   Improve the logic that detects non-autoloaded constants.
+    Also update `#include?` and `#===` behavior to match.
 
-    *Jan Habermann*, *Xavier Noria*
+    *Michael Groeneman*
 
-*   Deprecate `ActiveSupport::Multibyte::Unicode#pack_graphemes(array)` and `ActiveSupport::Multibyte::Unicode#unpack_graphemes(string)`
-    in favor of `array.flatten.pack("U*")` and `string.scan(/\X/).map(&:codepoints)`, respectively.
+*   Update to TZInfo v2.0.0.
 
-    *Francesco Rodríguez*
+    This changes the output of `ActiveSupport::TimeZone.utc_to_local`, but
+    can be controlled with the
+    `ActiveSupport.utc_to_local_returns_utc_offset_times` config.
 
-*   Deprecate `ActiveSupport::Multibyte::Chars.consumes?` in favor of `String#is_utf8?`.
+    New Rails 6.1 apps have it enabled by default, existing apps can upgrade
+    via the config in config/initializers/new_framework_defaults_6_1.rb
 
-    *Francesco Rodríguez*
+    See the `utc_to_local_returns_utc_offset_times` documentation for details.
 
-*   Fix duration being rounded to a full second.
-    ```
-      time = DateTime.parse("2018-1-1")
-      time += 0.51.seconds
-    ```
-    Will now correctly add 0.51 second and not 1 full second.
+    *Phil Ross*, *Jared Beck*
 
-    *Edouard Chin*
+*   Add Date and Time `#yesterday?` and `#tomorrow?` alongside `#today?`.
 
-*   Deprecate `ActiveSupport::Multibyte::Unicode#normalize` and `ActiveSupport::Multibyte::Chars#normalize`
-    in favor of `String#unicode_normalize`
+    Aliased to `#prev_day?` and `#next_day?` to match the existing `#prev/next_day` methods.
 
-    *Francesco Rodríguez*
+    *Jatin Dhankhar*
 
-*   Deprecate `ActiveSupport::Multibyte::Unicode#downcase/upcase/swapcase` in favor of
-    `String#downcase/upcase/swapcase`.
+*   Add `Enumerable#pick` to complement `ActiveRecord::Relation#pick`.
 
-    *Francesco Rodríguez*
+    *Eugene Kenny*
 
-*   Add `ActiveSupport::ParameterFilter`.
+*   [Breaking change] `ActiveSupport::Callbacks#halted_callback_hook` now receive a 2nd argument:
 
-    *Yoshiyuki Kinjo*
+    `ActiveSupport::Callbacks#halted_callback_hook` now receive the name of the callback
+    being halted as second argument.
+    This change will allow you to differentiate which callbacks halted the chain
+    and act accordingly.
 
-*   Rename `Module#parent`, `Module#parents`, and `Module#parent_name` to
-    `module_parent`, `module_parents`, and `module_parent_name`.
+    ```ruby
+      class Book < ApplicationRecord
+        before_save { throw(:abort) }
+        before_create { throw(:abort) }
 
-    *Gannon McGibbon*
+        def halted_callback_hook(filter, callback_name)
+          Rails.logger.info("Book couldn't be #{callback_name}d")
+        end
 
-*   Deprecate the use of `LoggerSilence` in favor of `ActiveSupport::LoggerSilence`
+        Book.create # => "Book couldn't be created"
+        book.save # => "Book couldn't be saved"
+      end
+    ```
 
     *Edouard Chin*
 
-*   Deprecate using negative limits in `String#first` and `String#last`.
+*   Support `prepend` with `ActiveSupport::Concern`.
 
-    *Gannon McGibbon*, *Eric Turner*
+    Allows a module with `extend ActiveSupport::Concern` to be prepended.
 
-*   Fix bug where `#without` for `ActiveSupport::HashWithIndifferentAccess` would fail
-    with symbol arguments
+        module Imposter
+          extend ActiveSupport::Concern
 
-    *Abraham Chan*
-
-*   Treat `#delete_prefix`, `#delete_suffix` and `#unicode_normalize` results as non-`html_safe`.
-    Ensure safety of arguments for `#insert`, `#[]=` and `#replace` calls on `html_safe` Strings.
-
-    *Janosch Müller*
-
-*   Changed `ActiveSupport::TaggedLogging.new` to return a new logger instance instead
-    of mutating the one received as parameter.
-
-    *Thierry Joyal*
+          # Same as `included`, except only run when prepended.
+          prepended do
+          end
+        end
 
-*   Define `unfreeze_time` as an alias of `travel_back` in `ActiveSupport::Testing::TimeHelpers`.
+        class Person
+          prepend Imposter
+        end
 
-    The alias is provided for symmetry with `freeze_time`.
+    Class methods are prepended to the base class, concerning is also
+    updated: `concerning :Imposter, prepend: true do`.
 
-    *Ryan Davidson*
+    *Jason Karns*, *Elia Schito*
 
-*   Add support for tracing constant autoloads. Just throw
+*   Deprecate using `Range#include?` method to check the inclusion of a value
+    in a date time range. It is recommended to use `Range#cover?` method
+    instead of `Range#include?` to check the inclusion of a value
+    in a date time range.
 
-        ActiveSupport::Dependencies.logger = Rails.logger
-        ActiveSupport::Dependencies.verbose = true
+    *Vishal Telangre*
 
-    in an initializer.
+*   Support added for a `round_mode` parameter, in all number helpers. (See: `BigDecimal::mode`.)
 
-    *Xavier Noria*
-
-*   Maintain `html_safe?` on html_safe strings when sliced.
+    ```ruby
+    number_to_currency(1234567890.50, precision: 0, round_mode: :half_down) # => "$1,234,567,890"
+    number_to_percentage(302.24398923423, precision: 5, round_mode: :down) # => "302.24398%"
+    number_to_rounded(389.32314, precision: 0, round_mode: :ceil) # => "390"
+    number_to_human_size(483989, precision: 2, round_mode: :up) # => "480 KB"
+    number_to_human(489939, precision: 2, round_mode: :floor) # => "480 Thousand"
 
-        string = "<div>test</div>".html_safe
-        string[-1..1].html_safe? # => true
+    485000.to_s(:human, precision: 2, round_mode: :half_even) # => "480 Thousand"
+    ```
 
-    *Elom Gomez*, *Yumin Wong*
+    *Tom Lord*
 
-*   Add `Array#extract!`.
+*   `Array#to_sentence` no longer returns a frozen string.
 
-    The method removes and returns the elements for which the block returns a true value.
-    If no block is given, an Enumerator is returned instead.
+    Before:
 
-        numbers = [0, 1, 2, 3, 4, 5, 6, 7, 8, 9]
-        odd_numbers = numbers.extract! { |number| number.odd? } # => [1, 3, 5, 7, 9]
-        numbers # => [0, 2, 4, 6, 8]
+        ['one', 'two'].to_sentence.frozen?
+        # => true
 
-    *bogdanvlviv*
+    After:
 
-*   Support not to cache `nil` for `ActiveSupport::Cache#fetch`.
+        ['one', 'two'].to_sentence.frozen?
+        # => false
 
-        cache.fetch('bar', skip_nil: true) { nil }
-        cache.exist?('bar') # => false
+    *Nicolas Dular*
 
-    *Martin Hong*
+*   When an instance of `ActiveSupport::Duration` is converted to an `iso8601` duration string, if `weeks` are mixed with `date` parts, the `week` part will be converted to days.
+    This keeps the parser and serializer on the same page.
 
-*   Add "event object" support to the notification system.
-    Before this change, end users were forced to create hand made artisanal
-    event objects on their own, like this:
+    ```ruby
+    duration = ActiveSupport::Duration.build(1000000)
+    # 1 week, 4 days, 13 hours, 46 minutes, and 40.0 seconds
 
-        ActiveSupport::Notifications.subscribe('wait') do |*args|
-          @event = ActiveSupport::Notifications::Event.new(*args)
-        end
+    duration_iso = duration.iso8601
+    # P11DT13H46M40S
 
-        ActiveSupport::Notifications.instrument('wait') do
-          sleep 1
-        end
+    ActiveSupport::Duration.parse(duration_iso)
+    # 11 days, 13 hours, 46 minutes, and 40 seconds
 
-        @event.duration # => 1000.138
+    duration = ActiveSupport::Duration.build(604800)
+    # 1 week
 
-    After this change, if the block passed to `subscribe` only takes one
-    parameter, the framework will yield an event object to the block.  Now
-    end users are no longer required to make their own:
+    duration_iso = duration.iso8601
+    # P1W
 
-        ActiveSupport::Notifications.subscribe('wait') do |event|
-          @event = event
-        end
+    ActiveSupport::Duration.parse(duration_iso)
+    # 1 week
+    ```
 
-        ActiveSupport::Notifications.instrument('wait') do
-          sleep 1
-        end
+    *Abhishek Sarkar*
 
-        p @event.allocations # => 7
-        p @event.cpu_time    # => 0.256
-        p @event.idle_time   # => 1003.2399
+*   Add block support to `ActiveSupport::Testing::TimeHelpers#travel_back`.
 
-    Now you can enjoy event objects without making them yourself.  Neat!
+    *Tim Masliuchenko*
 
-    *Aaron "t.lo" Patterson*
+*   Update `ActiveSupport::Messages::Metadata#fresh?` to work for cookies with expiry set when
+    `ActiveSupport.parse_json_times = true`.
 
-*   Add cpu_time, idle_time, and allocations to Event.
+    *Christian Gregg*
 
-    *Eileen M. Uchitelle*, *Aaron Patterson*
+*   Support symbolic links for `content_path` in `ActiveSupport::EncryptedFile`.
 
-*   RedisCacheStore: support key expiry in increment/decrement.
+    *Takumi Shotoku*
 
-    Pass `:expires_in` to `#increment` and `#decrement` to set a Redis EXPIRE on the key.
+*   Improve `Range#===`, `Range#include?`, and `Range#cover?` to work with beginless (startless)
+    and endless range targets.
 
-    If the key is already set to expire, RedisCacheStore won't extend its expiry.
+    *Allen Hsu*, *Andrew Hodgkinson*
 
-        Rails.cache.increment("some_key", 1, expires_in: 2.minutes)
+*   Don't use `Process#clock_gettime(CLOCK_THREAD_CPUTIME_ID)` on Solaris.
 
-    *Jason Lee*
+    *Iain Beeston*
 
-*   Allow `Range#===` and `Range#cover?` on Range.
+*   Prevent `ActiveSupport::Duration.build(value)` from creating instances of
+    `ActiveSupport::Duration` unless `value` is of type `Numeric`.
 
-    `Range#cover?` can now accept a range argument like `Range#include?` and
-    `Range#===`. `Range#===` works correctly on Ruby 2.6. `Range#include?` is moved
-    into a new file, with these two methods.
+    Addresses the errant set of behaviours described in #37012 where
+    `ActiveSupport::Duration` comparisons would fail confusingly
+    or return unexpected results when comparing durations built from instances of `String`.
 
-    *Requiring active_support/core_ext/range/include_range is now deprecated.*
-    *Use `require "active_support/core_ext/range/compare_range"` instead.*
+    Before:
 
-    *utilum*
+        small_duration_from_string = ActiveSupport::Duration.build('9')
+        large_duration_from_string = ActiveSupport::Duration.build('100000000000000')
+        small_duration_from_int = ActiveSupport::Duration.build(9)
 
-*   Add `index_with` to Enumerable.
+        large_duration_from_string > small_duration_from_string
+        # => false
 
-    Allows creating a hash from an enumerable with the value from a passed block
-    or a default argument.
+        small_duration_from_string == small_duration_from_int
+        # => false
 
-        %i( title body ).index_with { |attr| post.public_send(attr) }
-        # => { title: "hey", body: "what's up?" }
+        small_duration_from_int < large_duration_from_string
+        # => ArgumentError (comparison of ActiveSupport::Duration::Scalar with ActiveSupport::Duration failed)
 
-        %i( title body ).index_with(nil)
-        # => { title: nil, body: nil }
+        large_duration_from_string > small_duration_from_int
+        # => ArgumentError (comparison of String with ActiveSupport::Duration failed)
 
-    Closely linked with `index_by`, which creates a hash where the keys are extracted from a block.
+    After:
 
-    *Kasper Timm Hansen*
+        small_duration_from_string = ActiveSupport::Duration.build('9')
+        # => TypeError (can't build an ActiveSupport::Duration from a String)
 
-*   Fix bug where `ActiveSupport::TimeZone.all` would fail when tzinfo data for
-    any timezone defined in `ActiveSupport::TimeZone::MAPPING` is missing.
+    *Alexei Emam*
 
-    *Dominik Sander*
+*   Add `ActiveSupport::Cache::Store#delete_multi` method to delete multiple keys from the cache store.
 
-*   Redis cache store: `delete_matched` no longer blocks the Redis server.
-    (Switches from evaled Lua to a batched SCAN + DEL loop.)
+    *Peter Zhu*
 
-    *Gleb Mazovetskiy*
+*   Support multiple arguments in `HashWithIndifferentAccess` for `merge` and `update` methods, to
+    follow Ruby 2.6 addition.
 
-*   Fix bug where `ActiveSupport::Cache` will massively inflate the storage
-    size when compression is enabled (which is true by default). This patch
-    does not attempt to repair existing data: please manually flush the cache
-    to clear out the problematic entries.
+    *Wojciech Wnętrzak*
 
-    *Godfrey Chan*
+*   Allow initializing `thread_mattr_*` attributes via `:default` option.
 
-*   Fix bug where `URI.unescape` would fail with mixed Unicode/escaped character input:
+        class Scraper
+          thread_mattr_reader :client, default: Api::Client.new
+        end
 
-        URI.unescape("\xe3\x83\x90")  # => "バ"
-        URI.unescape("%E3%83%90")  # => "バ"
-        URI.unescape("\xe3\x83\x90%E3%83%90")  # => Encoding::CompatibilityError
+    *Guilherme Mansur*
 
-    *Ashe Connor*, *Aaron Patterson*
+*   Add `compact_blank` for those times when you want to remove #blank? values from
+    an Enumerable (also `compact_blank!` on Hash, Array, ActionController::Parameters).
 
-*   Add `before?` and `after?` methods to `Date`, `DateTime`,
-    `Time`, and `TimeWithZone`.
+    *Dana Sherson*
 
-    *Nick Holden*
+*   Make ActiveSupport::Logger Fiber-safe.
 
-*   `ActiveSupport::Inflector#ordinal` and `ActiveSupport::Inflector#ordinalize` now support
-    translations through I18n.
+    Use `Fiber.current.__id__` in `ActiveSupport::Logger#local_level=` in order
+    to make log level local to Ruby Fibers in addition to Threads.
 
-        # locale/fr.rb
+    Example:
 
-        {
-          fr: {
-            number: {
-              nth: {
-                ordinals: lambda do |_key, number:, **_options|
-                  if number.to_i.abs == 1
-                    'er'
-                  else
-                    'e'
-                  end
-                end,
+        logger = ActiveSupport::Logger.new(STDOUT)
+        logger.level = 1
+        puts "Main is debug? #{logger.debug?}"
 
-                ordinalized: lambda do |_key, number:, **_options|
-                  "#{number}#{ActiveSupport::Inflector.ordinal(number)}"
-                end
-              }
-            }
-          }
-        }
+        Fiber.new {
+          logger.local_level = 0
+          puts "Thread is debug? #{logger.debug?}"
+        }.resume
 
+        puts "Main is debug? #{logger.debug?}"
 
-    *Christian Blais*
+    Before:
 
-*   Add `:private` option to ActiveSupport's `Module#delegate`
-    in order to delegate methods as private:
+        Main is debug? false
+        Thread is debug? true
+        Main is debug? true
 
-        class User < ActiveRecord::Base
-          has_one :profile
-          delegate :date_of_birth, to: :profile, private: true
+    After:
 
-          def age
-            Date.today.year - date_of_birth.year
-          end
-        end
+        Main is debug? false
+        Thread is debug? true
+        Main is debug? false
 
-        # User.new.age  # => 29
-        # User.new.date_of_birth
-        # => NoMethodError: private method `date_of_birth' called for #<User:0x00000008221340>
+    Fixes #36752.
 
-    *Tomas Valent*
+    *Alexander Varnin*
 
-*   `String#truncate_bytes` to truncate a string to a maximum bytesize without
-    breaking multibyte characters or grapheme clusters like 👩‍👩‍👦‍👦.
+*   Allow the `on_rotation` proc used when decrypting/verifying a message to be
+    passed at the constructor level.
 
-    *Jeremy Daer*
+    Before:
 
-*   `String#strip_heredoc` preserves frozenness.
+        crypt = ActiveSupport::MessageEncryptor.new('long_secret')
+        crypt.decrypt_and_verify(encrypted_message, on_rotation: proc { ... })
+        crypt.decrypt_and_verify(another_encrypted_message, on_rotation: proc { ... })
 
-        "foo".freeze.strip_heredoc.frozen?  # => true
+    After:
 
-    Fixes that frozen string literals would inadvertently become unfrozen:
+        crypt = ActiveSupport::MessageEncryptor.new('long_secret', on_rotation: proc { ... })
+        crypt.decrypt_and_verify(encrypted_message)
+        crypt.decrypt_and_verify(another_encrypted_message)
 
-        # frozen_string_literal: true
+    *Edouard Chin*
 
-        foo = <<-MSG.strip_heredoc
-          la la la
-        MSG
+*   `delegate_missing_to` would raise a `DelegationError` if the object
+    delegated to was `nil`. Now the `allow_nil` option has been added to enable
+    the user to specify they want `nil` returned in this case.
 
-        foo.frozen?  # => false !??
+    *Matthew Tanous*
 
-    *Jeremy Daer*
+*   `truncate` would return the original string if it was too short to be truncated
+    and a frozen string if it were long enough to be truncated. Now truncate will
+    consistently return an unfrozen string regardless. This behavior is consistent
+    with `gsub` and `strip`.
 
-*   Rails 6 requires Ruby 2.5.0 or newer.
+    Before:
 
-    *Jeremy Daer*, *Kasper Timm Hansen*
+        'foobar'.truncate(5).frozen?
+        # => true
+        'foobar'.truncate(6).frozen?
+        # => false
 
-*   Adds parallel testing to Rails.
+    After:
 
-    Parallelize your test suite with forked processes or threads.
+        'foobar'.truncate(5).frozen?
+        # => false
+        'foobar'.truncate(6).frozen?
+        # => false
 
-    *Eileen M. Uchitelle*, *Aaron Patterson*
+    *Jordan Thomas*
 
 
-Please check [5-2-stable](https://github.com/rails/rails/blob/5-2-stable/activesupport/CHANGELOG.md) for previous changes.
+Please check [6-0-stable](https://github.com/rails/rails/blob/6-0-stable/activesupport/CHANGELOG.md) for previous changes.