activesupport 6.1.4.1 → 7.0.8.3

data/CHANGELOG.md

@@ -1,650 +1,580 @@
-## Rails 6.1.4.1 (August 19, 2021) ##
+## Rails 7.0.8.3 (May 17, 2024) ##
 
 *   No changes.
 
 
-## Rails 6.1.4 (June 24, 2021) ##
+## Rails 7.0.8.2 (May 16, 2024) ##
 
-*   MemCacheStore: convert any underlying value (including `false`) to an `Entry`.
+*   No changes.
 
-    See [#42559](https://github.com/rails/rails/pull/42559).
 
-    *Alex Ghiculescu*
+## Rails 7.0.8.1 (February 21, 2024) ##
 
-*   Fix bug in `number_with_precision` when using large `BigDecimal` values.
+*   No changes.
 
-    Fixes #42302.
 
-    *Federico Aldunate*, *Zachary Scott*
+## Rails 7.0.8 (September 09, 2023) ##
 
-*   Check byte size instead of length on `secure_compare`.
+*   Fix `TimeWithZone` still using deprecated `#to_s` when `ENV` or `config` to
+    disable it are set.
 
-    *Tietew*
+    *Hartley McGuire*
 
-*   Fix `Time.at` to not lose `:in` option.
+*   Fix CacheStore#write_multi when using a distributed Redis cache with a connection pool.
 
-    *Ryuta Kamizono*
+    Fixes [#48938](https://github.com/rails/rails/issues/48938).
 
-*   Require a path for `config.cache_store = :file_store`.
+    *Jonathan del Strother*
 
-    *Alex Ghiculescu*
 
-*   Avoid having to store complex object in the default translation file.
+## Rails 7.0.7.2 (August 22, 2023) ##
 
-    *Rafael Mendonça França*
+*   No changes.
 
 
-## Rails 6.1.3.2 (May 05, 2021) ##
+## Rails 7.0.7.1 (August 22, 2023) ##
 
-*   No changes.
+*   Use a temporary file for storing unencrypted files while editing
 
+    [CVE-2023-38037]
 
-## Rails 6.1.3.1 (March 26, 2021) ##
 
-*   No changes.
+## Rails 7.0.7 (August 09, 2023) ##
 
+*   Fix `Cache::NullStore` with local caching for repeated reads.
 
-## Rails 6.1.3 (February 17, 2021) ##
+    *fatkodima*
 
-*   No changes.
+*   Fix `to_s` with no arguments not respecting custom `:default` formats
 
+    *Hartley McGuire*
 
-## Rails 6.1.2.1 (February 10, 2021) ##
+*   Fix `ActiveSupport::Inflector.humanize(nil)` raising ``NoMethodError: undefined method `end_with?' for nil:NilClass``.
 
-*   No changes.
+    *James Robinson*
 
+*   Fix `Enumerable#sum` for `Enumerator#lazy`.
 
-## Rails 6.1.2 (February 09, 2021) ##
+    *fatkodima*, *Matthew Draper*, *Jonathan Hefner*
 
-*   `ActiveSupport::Cache::MemCacheStore` now accepts an explicit `nil` for its `addresses` argument.
+*   Improve error message when EventedFileUpdateChecker is used without a
+    compatible version of the Listen gem
 
-    ```ruby
-    config.cache_store = :mem_cache_store, nil
+    *Hartley McGuire*
 
-    # is now equivalent to
 
-    config.cache_store = :mem_cache_store
+## Rails 7.0.6 (June 29, 2023) ##
 
-    # and is also equivalent to
+*   Fix `EncryptedConfiguration` returning incorrect values for some `Hash`
+    methods
 
-    config.cache_store = :mem_cache_store, ENV["MEMCACHE_SERVERS"] || "localhost:11211"
+    *Hartley McGuire*
 
-    # which is the fallback behavior of Dalli
-    ```
+*   Fix arguments being destructed `Enumerable#many?` with block.
 
-    This helps those migrating from `:dalli_store`, where an explicit `nil` was permitted.
+    *Andrew Novoselac*
 
-    *Michael Overmeyer*
+*   Fix humanize for strings ending with id.
 
+    *fatkodima*
 
-## Rails 6.1.1 (January 07, 2021) ##
 
-*   Change `IPAddr#to_json` to match the behavior of the json gem returning the string representation
-    instead of the instance variables of the object.
+## Rails 7.0.5.1 (June 26, 2023) ##
 
-    Before:
+*   No changes.
 
-    ```ruby
-    IPAddr.new("127.0.0.1").to_json
-    # => "{\"addr\":2130706433,\"family\":2,\"mask_addr\":4294967295}"
-    ```
 
-    After:
+## Rails 7.0.5 (May 24, 2023) ##
 
-    ```ruby
-    IPAddr.new("127.0.0.1").to_json
-    # => "\"127.0.0.1\""
-    ```
+*   Fixes TimeWithZone ArgumentError.
 
+    *Niklas Häusele*
 
-## Rails 6.1.0 (December 09, 2020) ##
 
-*   Ensure `MemoryStore` disables compression by default. Reverts behavior of
-    `MemoryStore` to its prior rails `5.1` behavior.
+## Rails 7.0.4.3 (March 13, 2023) ##
 
-    *Max Gurewitz*
+*   Implement SafeBuffer#bytesplice
 
-*   Calling `iso8601` on negative durations retains the negative sign on individual
-    digits instead of prepending it.
+    [CVE-2023-28120]
 
-    This change is required so we can interoperate with PostgreSQL, which prefers
-    negative signs for each component.
 
-    Compatibility with other iso8601 parsers which support leading negatives as well
-    as negatives per component is still retained.
+## Rails 7.0.4.2 (January 24, 2023) ##
 
-    Before:
+*   No changes.
 
-        (-1.year - 1.day).iso8601
-        # => "-P1Y1D"
 
-    After:
+## Rails 7.0.4.1 (January 17, 2023) ##
 
-        (-1.year - 1.day).iso8601
-        # => "P-1Y-1D"
+*   Avoid regex backtracking in Inflector.underscore
 
-    *Vipul A M*
+    [CVE-2023-22796]
 
-*   Remove deprecated `ActiveSupport::Notifications::Instrumenter#end=`.
 
-    *Rafael Mendonça França*
+## Rails 7.0.4 (September 09, 2022) ##
 
-*   Deprecate `ActiveSupport::Multibyte::Unicode.default_normalization_form`.
+*   Ensure `ActiveSupport::Testing::Isolation::Forking` closes pipes
 
-    *Rafael Mendonça França*
+    Previously, `Forking.run_in_isolation` opened two ends of a pipe. The fork
+    process closed the read end, wrote to it, and then terminated (which
+    presumably closed the file descriptors on its end). The parent process
+    closed the write end, read from it, and returned, never closing the read
+    end.
 
-*   Remove deprecated `ActiveSupport::Multibyte::Unicode.pack_graphemes`,
-    `ActiveSupport::Multibyte::Unicode.unpack_graphemes`,
-    `ActiveSupport::Multibyte::Unicode.normalize`,
-    `ActiveSupport::Multibyte::Unicode.downcase`,
-    `ActiveSupport::Multibyte::Unicode.upcase` and `ActiveSupport::Multibyte::Unicode.swapcase`.
+    This resulted in an accumulation of open file descriptors, which could
+    cause errors if the limit is reached.
 
-    *Rafael Mendonça França*
+    *Sam Bostock*
 
-*   Remove deprecated `ActiveSupport::Multibyte::Chars#consumes?` and `ActiveSupport::Multibyte::Chars#normalize`.
+*   Redis cache store is now compatible with redis-rb 5.0.
 
-    *Rafael Mendonça França*
+    *Jean Boussier*
 
-*   Remove deprecated file `active_support/core_ext/range/include_range`.
+*   Fix `NoMethodError` on custom `ActiveSupport::Deprecation` behavior.
 
-    *Rafael Mendonça França*
+    `ActiveSupport::Deprecation.behavior=` was supposed to accept any object
+    that responds to `call`, but in fact its internal implementation assumed that
+    this object could respond to `arity`, so it was restricted to only `Proc` objects.
 
-*   Remove deprecated file `active_support/core_ext/hash/transform_values`.
+    This change removes this `arity` restriction of custom behaviors.
 
-    *Rafael Mendonça França*
+    *Ryo Nakamura*
 
-*   Remove deprecated file `active_support/core_ext/hash/compact`.
 
-    *Rafael Mendonça França*
+## Rails 7.0.3.1 (July 12, 2022) ##
 
-*   Remove deprecated file `active_support/core_ext/array/prepend_and_append`.
+*   No changes.
 
-    *Rafael Mendonça França*
 
-*   Remove deprecated file `active_support/core_ext/numeric/inquiry`.
+## Rails 7.0.3 (May 09, 2022) ##
 
-    *Rafael Mendonça França*
+*   No changes.
 
-*   Remove deprecated file `active_support/core_ext/module/reachable`.
 
-    *Rafael Mendonça França*
+## Rails 7.0.2.4 (April 26, 2022) ##
 
-*   Remove deprecated `Module#parent_name`, `Module#parent` and `Module#parents`.
+*   Fix and add protections for XSS in `ActionView::Helpers` and `ERB::Util`.
 
-    *Rafael Mendonça França*
+    Add the method `ERB::Util.xml_name_escape` to escape dangerous characters
+    in names of tags and names of attributes, following the specification of XML.
 
-*   Remove deprecated `ActiveSupport::LoggerThreadSafeLevel#after_initialize`.
+    *Álvaro Martín Fraguas*
 
-    *Rafael Mendonça França*
+## Rails 7.0.2.3 (March 08, 2022) ##
 
-*   Remove deprecated `LoggerSilence` constant.
+*   No changes.
 
-    *Rafael Mendonça França*
 
-*   Remove deprecated fallback to `I18n.default_local` when `config.i18n.fallbacks` is empty.
+## Rails 7.0.2.2 (February 11, 2022) ##
 
-    *Rafael Mendonça França*
+*   Fix Reloader method signature to work with the new Executor signature
 
-*   Remove entries from local cache on `RedisCacheStore#delete_matched`
 
-    Fixes #38627
+## Rails 7.0.2.1 (February 11, 2022) ##
 
-    *ojab*
+*   No changes.
 
-*   Speed up `ActiveSupport::SecurityUtils.fixed_length_secure_compare` by using
-    `OpenSSL.fixed_length_secure_compare`, if available.
 
-    *Nate Matykiewicz*
+## Rails 7.0.2 (February 08, 2022) ##
 
-*   `ActiveSupport::Cache::MemCacheStore` now checks `ENV["MEMCACHE_SERVERS"]` before falling back to `"localhost:11211"` if configured without any addresses.
+*   Fix `ActiveSupport::EncryptedConfiguration` to be compatible with Psych 4
 
-    ```ruby
-    config.cache_store = :mem_cache_store
+    *Stephen Sugden*
 
-    # is now equivalent to
+*   Improve `File.atomic_write` error handling.
 
-    config.cache_store = :mem_cache_store, ENV["MEMCACHE_SERVERS"] || "localhost:11211"
+    *Daniel Pepper*
 
-    # instead of
 
-    config.cache_store = :mem_cache_store, "localhost:11211" # ignores ENV["MEMCACHE_SERVERS"]
-    ```
+## Rails 7.0.1 (January 06, 2022) ##
 
-    *Sam Bostock*
+*   Fix `Class#descendants` and `DescendantsTracker#descendants` compatibility with Ruby 3.1.
 
-*   `ActiveSupport::Subscriber#attach_to` now accepts an `inherit_all:` argument. When set to true,
-    it allows a subscriber to receive events for methods defined in the subscriber's ancestor class(es).
+    [The native `Class#descendants` was reverted prior to Ruby 3.1 release](https://bugs.ruby-lang.org/issues/14394#note-33),
+    but `Class#subclasses` was kept, breaking the feature detection.
 
-    ```ruby
-    class ActionControllerSubscriber < ActiveSupport::Subscriber
-      attach_to :action_controller
+    *Jean Boussier*
 
-      def start_processing(event)
-        info "Processing by #{event.payload[:controller]}##{event.payload[:action]} as #{format}"
-      end
 
-      def redirect_to(event)
-        info { "Redirected to #{event.payload[:location]}" }
-      end
-    end
+## Rails 7.0.0 (December 15, 2021) ##
 
-    # We detach ActionControllerSubscriber from the :action_controller namespace so that our CustomActionControllerSubscriber
-    # can provide its own instrumentation for certain events in the namespace
-    ActionControllerSubscriber.detach_from(:action_controller)
+*   Fix `ActiveSupport::Duration.build` to support negative values.
 
-    class CustomActionControllerSubscriber < ActionControllerSubscriber
-      attach_to :action_controller, inherit_all: true
+    The algorithm to collect the `parts` of the `ActiveSupport::Duration`
+    ignored the sign of the `value` and accumulated incorrect part values. This
+    impacted `ActiveSupport::Duration#sum` (which is dependent on `parts`) but
+    not `ActiveSupport::Duration#eql?` (which is dependent on `value`).
 
-      def start_processing(event)
-        info "A custom response to start_processing events"
-      end
+    *Caleb Buxton*, *Braden Staudacher*
 
-      # => CustomActionControllerSubscriber will process events for "start_processing.action_controller" notifications
-      # using its own #start_processing implementation, while retaining ActionControllerSubscriber's instrumentation
-      # for "redirect_to.action_controller" notifications
-    end
-    ```
 
-    *Adrianna Chang*
+## Rails 7.0.0.rc3 (December 14, 2021) ##
 
-*   Allow the digest class used to generate non-sensitive digests to be configured with `config.active_support.hash_digest_class`.
+*   No changes.
 
-    `config.active_support.use_sha1_digests` is deprecated in favour of `config.active_support.hash_digest_class = ::Digest::SHA1`.
 
-    *Dirkjan Bussink*
+## Rails 7.0.0.rc2 (December 14, 2021) ##
+
+*   No changes.
+
+## Rails 7.0.0.rc1 (December 06, 2021) ##
+
+*   Deprecate passing a format to `#to_s` in favor of `#to_formatted_s` in `Array`, `Range`, `Date`, `DateTime`, `Time`,
+    `BigDecimal`, `Float` and, `Integer`.
 
-*   Fix bug to make memcached write_entry expire correctly with unless_exist
+    *Rafael Mendonça França*
 
-    *Jye Lee*
+*   Document `ActiveSupport::Testing::Deprecation`.
 
-*   Add `ActiveSupport::Duration` conversion methods
+    *Sam Bostock & Sam Jordan*
 
-    `in_seconds`, `in_minutes`, `in_hours`, `in_days`, `in_weeks`, `in_months`, and `in_years` return the respective duration covered.
+*   Add `Pathname#existence`.
 
-    *Jason York*
+    ```ruby
+    Pathname.new("file").existence&.read
+    ```
 
-*   Fixed issue in `ActiveSupport::Cache::RedisCacheStore` not passing options
-    to `read_multi` causing `fetch_multi` to not work properly
+    *Timo Schilling*
 
-    *Rajesh Sharma*
+*   Remove deprecate `ActiveSupport::Multibyte::Unicode.default_normalization_form`.
 
-*   Fixed issue in `ActiveSupport::Cache::MemCacheStore` which caused duplicate compression,
-    and caused the provided `compression_threshold` to not be respected.
+    *Rafael Mendonça França*
 
-    *Max Gurewitz*
+*   Remove deprecated support to use `Range#include?` to check the inclusion of a value in
+    a date time range is deprecated.
 
-*   Prevent `RedisCacheStore` and `MemCacheStore` from performing compression
-    when reading entries written with `raw: true`.
+    *Rafael Mendonça França*
 
-    *Max Gurewitz*
+*   Remove deprecated `URI.parser`.
 
-*   `URI.parser` is deprecated and will be removed in Rails 6.2. Use
-    `URI::DEFAULT_PARSER` instead.
+    *Rafael Mendonça França*
 
-    *Jean Boussier*
+*   Remove deprecated `config.active_support.use_sha1_digests`.
 
-*   `require_dependency` has been documented to be _obsolete_ in `:zeitwerk`
-    mode. The method is not deprecated as such (yet), but applications are
-    encouraged to not use it.
+    *Rafael Mendonça França*
 
-    In `:zeitwerk` mode, semantics match Ruby's and you do not need to be
-    defensive with load order. Just refer to classes and modules normally. If
-    the constant name is dynamic, camelize if needed, and constantize.
+*   Invoking `Object#with_options` without a `&block` argument returns the
+    `ActiveSupport::OptionMerger` instance.
 
-    *Xavier Noria*
+    *Sean Doyle*
 
-*   Add 3rd person aliases of `Symbol#start_with?` and `Symbol#end_with?`.
+*   `Rails.application.executor` hooks can now be called around every test
 
-    ```ruby
-    :foo.starts_with?("f") # => true
-    :foo.ends_with?("o")   # => true
-    ```
+    This helps to better simulate request or job local state being reset around tests and prevents state
+    leaking from one test to another.
 
-    *Ryuta Kamizono*
+    However it requires the executor hooks executed in the test environment to be re-entrant.
 
-*   Add override of unary plus for `ActiveSupport::Duration`.
+    To enable this, set `config.active_support.executor_around_test_case = true` (this is the default in Rails 7).
 
-    `+ 1.second` is now identical to `+1.second` to prevent errors
-    where a seemingly innocent change of formatting leads to a change in the code behavior.
+    *Jean Boussier*
 
-    Before:
-    ```ruby
-    +1.second.class
-    # => ActiveSupport::Duration
-    (+ 1.second).class
-    # => Integer
-    ```
+*   `ActiveSupport::DescendantsTracker` now mostly delegate to `Class#descendants` on Ruby 3.1
 
-    After:
-    ```ruby
-    +1.second.class
-    # => ActiveSupport::Duration
-    (+ 1.second).class
-    # => ActiveSupport::Duration
-    ```
+    Ruby now provides a fast `Class#descendants` making `ActiveSupport::DescendantsTracker` mostly useless.
 
-    Fixes #39079.
+    As a result the following methods are deprecated:
 
-    *Roman Kushnir*
+      - `ActiveSupport::DescendantsTracker.direct_descendants`
+      - `ActiveSupport::DescendantsTracker#direct_descendants`
 
-*   Add subsec to `ActiveSupport::TimeWithZone#inspect`.
+    *Jean Boussier*
 
-    Before:
+*   Fix the `Digest::UUID.uuid_from_hash` behavior for namespace IDs that are different from the ones defined on `Digest::UUID`.
 
-        Time.at(1498099140).in_time_zone.inspect
-        # => "Thu, 22 Jun 2017 02:39:00 UTC +00:00"
-        Time.at(1498099140, 123456780, :nsec).in_time_zone.inspect
-        # => "Thu, 22 Jun 2017 02:39:00 UTC +00:00"
-        Time.at(1498099140 + Rational("1/3")).in_time_zone.inspect
-        # => "Thu, 22 Jun 2017 02:39:00 UTC +00:00"
+    The new behavior will be enabled by setting the
+    `config.active_support.use_rfc4122_namespaced_uuids` option to `true`
+    and is the default for new apps.
 
-    After:
+    The old behavior is the default for upgraded apps and will output a
+    deprecation warning every time a value that is different than one of
+    the constants defined on the `Digest::UUID` extension is used as the
+    namespace ID.
 
-        Time.at(1498099140).in_time_zone.inspect
-        # => "Thu, 22 Jun 2017 02:39:00.000000000 UTC +00:00"
-        Time.at(1498099140, 123456780, :nsec).in_time_zone.inspect
-        # => "Thu, 22 Jun 2017 02:39:00.123456780 UTC +00:00"
-        Time.at(1498099140 + Rational("1/3")).in_time_zone.inspect
-        # => "Thu, 22 Jun 2017 02:39:00.333333333 UTC +00:00"
+    *Alex Robbin*, *Erich Soares Machado*, *Eugene Kenny*
 
-    *akinomaeni*
+*   `ActiveSupport::Inflector::Inflections#clear(:acronyms)` is now supported,
+    and `inflector.clear` / `inflector.clear(:all)` also clears acronyms.
 
-*   Calling `ActiveSupport::TaggedLogging#tagged` without a block now returns a tagged logger.
+    *Alex Ghiculescu*, *Oliver Peate*
 
-    ```ruby
-    logger.tagged("BCX").info("Funky time!") # => [BCX] Funky time!
-    ```
 
-    *Eugene Kenny*
+## Rails 7.0.0.alpha2 (September 15, 2021) ##
+
+*   No changes.
 
-*   Align `Range#cover?` extension behavior with Ruby behavior for backwards ranges.
 
-    `(1..10).cover?(5..3)` now returns `false`, as it does in plain Ruby.
+## Rails 7.0.0.alpha1 (September 15, 2021) ##
 
-    Also update `#include?` and `#===` behavior to match.
+*   `ActiveSupport::Dependencies` no longer installs a `const_missing` hook. Before this, you could push to the autoload paths and have constants autoloaded. This feature, known as the `classic` autoloader, has been removed.
 
-    *Michael Groeneman*
+    *Xavier Noria*
 
-*   Update to TZInfo v2.0.0.
+*   Private internal classes of `ActiveSupport::Dependencies` have been deleted, like `ActiveSupport::Dependencies::Reference`, `ActiveSupport::Dependencies::Blamable`, and others.
 
-    This changes the output of `ActiveSupport::TimeZone.utc_to_local`, but
-    can be controlled with the
-    `ActiveSupport.utc_to_local_returns_utc_offset_times` config.
+    *Xavier Noria*
 
-    New Rails 6.1 apps have it enabled by default, existing apps can upgrade
-    via the config in config/initializers/new_framework_defaults_6_1.rb
+*   The private API of `ActiveSupport::Dependencies` has been deleted. That includes methods like `hook!`, `unhook!`, `depend_on`, `require_or_load`, `mechanism`, and many others.
 
-    See the `utc_to_local_returns_utc_offset_times` documentation for details.
+    *Xavier Noria*
 
-    *Phil Ross*, *Jared Beck*
+*   Improves the performance of `ActiveSupport::NumberHelper` formatters by avoiding the use of exceptions as flow control.
 
-*   Add Date and Time `#yesterday?` and `#tomorrow?` alongside `#today?`.
+    *Mike Dalessio*
 
-    Aliased to `#prev_day?` and `#next_day?` to match the existing `#prev/next_day` methods.
+*   Removed rescue block from `ActiveSupport::Cache::RedisCacheStore#handle_exception`
 
-    *Jatin Dhankhar*
+    Previously, if you provided a `error_handler` to `redis_cache_store`, any errors thrown by
+    the error handler would be rescued and logged only. Removed the `rescue` clause from `handle_exception`
+    to allow these to be thrown.
 
-*   Add `Enumerable#pick` to complement `ActiveRecord::Relation#pick`.
+    *Nicholas A. Stuart*
 
-    *Eugene Kenny*
+*   Allow entirely opting out of deprecation warnings.
 
-*   [Breaking change] `ActiveSupport::Callbacks#halted_callback_hook` now receive a 2nd argument:
+    Previously if you did `app.config.active_support.deprecation = :silence`, some work would
+    still be done on each call to `ActiveSupport::Deprecation.warn`. In very hot paths, this could
+    cause performance issues.
 
-    `ActiveSupport::Callbacks#halted_callback_hook` now receive the name of the callback
-    being halted as second argument.
-    This change will allow you to differentiate which callbacks halted the chain
-    and act accordingly.
+    Now, you can make `ActiveSupport::Deprecation.warn` a no-op:
 
     ```ruby
-      class Book < ApplicationRecord
-        before_save { throw(:abort) }
-        before_create { throw(:abort) }
+    config.active_support.report_deprecations = false
+    ```
 
-        def halted_callback_hook(filter, callback_name)
-          Rails.logger.info("Book couldn't be #{callback_name}d")
-        end
+    This is the default in production for new apps. It is the equivalent to:
 
-        Book.create # => "Book couldn't be created"
-        book.save # => "Book couldn't be saved"
-      end
+    ```ruby
+    config.active_support.deprecation = :silence
+    config.active_support.disallowed_deprecation = :silence
     ```
 
-    *Edouard Chin*
+    but will take a more optimised code path.
 
-*   Support `prepend` with `ActiveSupport::Concern`.
+    *Alex Ghiculescu*
 
-    Allows a module with `extend ActiveSupport::Concern` to be prepended.
+*   Faster tests by parallelizing only when overhead is justified by the number
+    of them.
 
-        module Imposter
-          extend ActiveSupport::Concern
+    Running tests in parallel adds overhead in terms of database
+    setup and fixture loading. Now, Rails will only parallelize test executions when
+    there are enough tests to make it worth it.
 
-          # Same as `included`, except only run when prepended.
-          prepended do
-          end
-        end
+    This threshold is 50 by default, and is configurable via config setting in
+    your test.rb:
 
-        class Person
-          prepend Imposter
-        end
+    ```ruby
+    config.active_support.test_parallelization_threshold = 100
+    ```
 
-    Class methods are prepended to the base class, concerning is also
-    updated: `concerning :Imposter, prepend: true do`.
+    It's also configurable at the test case level:
 
-    *Jason Karns*, *Elia Schito*
+    ```ruby
+    class ActiveSupport::TestCase
+      parallelize threshold: 100
+    end
+    ```
 
-*   Deprecate using `Range#include?` method to check the inclusion of a value
-    in a date time range. It is recommended to use `Range#cover?` method
-    instead of `Range#include?` to check the inclusion of a value
-    in a date time range.
+    *Jorge Manrubia*
 
-    *Vishal Telangre*
+*   OpenSSL constants are now used for Digest computations.
 
-*   Support added for a `round_mode` parameter, in all number helpers. (See: `BigDecimal::mode`.)
+    *Dirkjan Bussink*
 
-    ```ruby
-    number_to_currency(1234567890.50, precision: 0, round_mode: :half_down) # => "$1,234,567,890"
-    number_to_percentage(302.24398923423, precision: 5, round_mode: :down) # => "302.24398%"
-    number_to_rounded(389.32314, precision: 0, round_mode: :ceil) # => "390"
-    number_to_human_size(483989, precision: 2, round_mode: :up) # => "480 KB"
-    number_to_human(489939, precision: 2, round_mode: :floor) # => "480 Thousand"
+*   `TimeZone.iso8601` now accepts valid ordinal values similar to Ruby's `Date._iso8601` method.
+    A valid ordinal value will be converted to an instance of `TimeWithZone` using the `:year`
+    and `:yday` fragments returned from `Date._iso8601`.
 
-    485000.to_s(:human, precision: 2, round_mode: :half_even) # => "480 Thousand"
+    ```ruby
+    twz = ActiveSupport::TimeZone["Eastern Time (US & Canada)"].iso8601("21087")
+    twz.to_a[0, 6] == [0, 0, 0, 28, 03, 2021]
     ```
 
-    *Tom Lord*
+    *Steve Laing*
+
+*   `Time#change` and methods that call it (e.g. `Time#advance`) will now
+    return a `Time` with the timezone argument provided, if the caller was
+    initialized with a timezone argument.
+
+    Fixes [#42467](https://github.com/rails/rails/issues/42467).
 
-*   `Array#to_sentence` no longer returns a frozen string.
+    *Alex Ghiculescu*
 
-    Before:
+*   Allow serializing any module or class to JSON by name.
 
-        ['one', 'two'].to_sentence.frozen?
-        # => true
+    *Tyler Rick*, *Zachary Scott*
 
-    After:
+*   Raise `ActiveSupport::EncryptedFile::MissingKeyError` when the
+    `RAILS_MASTER_KEY` environment variable is blank (e.g. `""`).
 
-        ['one', 'two'].to_sentence.frozen?
-        # => false
+    *Sunny Ripert*
 
-    *Nicolas Dular*
+*   The `from:` option is added to `ActiveSupport::TestCase#assert_no_changes`.
 
-*   When an instance of `ActiveSupport::Duration` is converted to an `iso8601` duration string, if `weeks` are mixed with `date` parts, the `week` part will be converted to days.
-    This keeps the parser and serializer on the same page.
+    It permits asserting on the initial value that is expected not to change.
 
     ```ruby
-    duration = ActiveSupport::Duration.build(1000000)
-    # 1 week, 4 days, 13 hours, 46 minutes, and 40.0 seconds
+    assert_no_changes -> { Status.all_good? }, from: true do
+      post :create, params: { status: { ok: true } }
+    end
+    ```
 
-    duration_iso = duration.iso8601
-    # P11DT13H46M40S
+    *George Claghorn*
 
-    ActiveSupport::Duration.parse(duration_iso)
-    # 11 days, 13 hours, 46 minutes, and 40 seconds
+*   Deprecate `ActiveSupport::SafeBuffer`'s incorrect implicit conversion of objects into string.
 
-    duration = ActiveSupport::Duration.build(604800)
-    # 1 week
+    Except for a few methods like `String#%`, objects must implement `#to_str`
+    to be implicitly converted to a String in string operations. In some
+    circumstances `ActiveSupport::SafeBuffer` was incorrectly calling the
+    explicit conversion method (`#to_s`) on them. This behavior is now
+    deprecated.
 
-    duration_iso = duration.iso8601
-    # P1W
+    *Jean Boussier*
 
-    ActiveSupport::Duration.parse(duration_iso)
-    # 1 week
-    ```
+*   Allow nested access to keys on `Rails.application.credentials`.
 
-    *Abhishek Sarkar*
+    Previously only top level keys in `credentials.yml.enc` could be accessed with method calls. Now any key can.
 
-*   Add block support to `ActiveSupport::Testing::TimeHelpers#travel_back`.
+    For example, given these secrets:
 
-    *Tim Masliuchenko*
+    ```yml
+    aws:
+      access_key_id: 123
+      secret_access_key: 345
+    ```
 
-*   Update `ActiveSupport::Messages::Metadata#fresh?` to work for cookies with expiry set when
-    `ActiveSupport.parse_json_times = true`.
+    `Rails.application.credentials.aws.access_key_id` will now return the same thing as
+    `Rails.application.credentials.aws[:access_key_id]`.
 
-    *Christian Gregg*
+    *Alex Ghiculescu*
 
-*   Support symbolic links for `content_path` in `ActiveSupport::EncryptedFile`.
+*   Added a faster and more compact `ActiveSupport::Cache` serialization format.
 
-    *Takumi Shotoku*
+    It can be enabled with `config.active_support.cache_format_version = 7.0` or
+    `config.load_defaults 7.0`. Regardless of the configuration Active Support
+    7.0 can read cache entries serialized by Active Support 6.1 which allows to
+    upgrade without invalidating the cache. However Rails 6.1 can't read the
+    new format, so all readers must be upgraded before the new format is enabled.
 
-*   Improve `Range#===`, `Range#include?`, and `Range#cover?` to work with beginless (startless)
-    and endless range targets.
+    *Jean Boussier*
 
-    *Allen Hsu*, *Andrew Hodgkinson*
+*   Add `Enumerable#sole`, per `ActiveRecord::FinderMethods#sole`.  Returns the
+    sole item of the enumerable, raising if no items are found, or if more than
+    one is.
 
-*   Don't use `Process#clock_gettime(CLOCK_THREAD_CPUTIME_ID)` on Solaris.
+    *Asherah Connor*
 
-    *Iain Beeston*
+*   Freeze `ActiveSupport::Duration#parts` and remove writer methods.
 
-*   Prevent `ActiveSupport::Duration.build(value)` from creating instances of
-    `ActiveSupport::Duration` unless `value` is of type `Numeric`.
+    Durations are meant to be value objects and should not be mutated.
 
-    Addresses the errant set of behaviours described in #37012 where
-    `ActiveSupport::Duration` comparisons would fail confusingly
-    or return unexpected results when comparing durations built from instances of `String`.
+    *Andrew White*
 
-    Before:
+*   Fix `ActiveSupport::TimeZone#utc_to_local` with fractional seconds.
 
-        small_duration_from_string = ActiveSupport::Duration.build('9')
-        large_duration_from_string = ActiveSupport::Duration.build('100000000000000')
-        small_duration_from_int = ActiveSupport::Duration.build(9)
+    When `utc_to_local_returns_utc_offset_times` is false and the time
+    instance had fractional seconds the new UTC time instance was out by
+    a factor of 1,000,000 as the `Time.utc` constructor takes a usec
+    value and not a fractional second value.
 
-        large_duration_from_string > small_duration_from_string
-        # => false
+    *Andrew White*
 
-        small_duration_from_string == small_duration_from_int
-        # => false
+*   Add `expires_at` argument to `ActiveSupport::Cache` `write` and `fetch` to set a cache entry TTL as an absolute time.
 
-        small_duration_from_int < large_duration_from_string
-        # => ArgumentError (comparison of ActiveSupport::Duration::Scalar with ActiveSupport::Duration failed)
+    ```ruby
+    Rails.cache.write(key, value, expires_at: Time.now.at_end_of_hour)
+    ```
 
-        large_duration_from_string > small_duration_from_int
-        # => ArgumentError (comparison of String with ActiveSupport::Duration failed)
+    *Jean Boussier*
 
-    After:
+*   Deprecate `ActiveSupport::TimeWithZone.name` so that from Rails 7.1 it will use the default implementation.
 
-        small_duration_from_string = ActiveSupport::Duration.build('9')
-        # => TypeError (can't build an ActiveSupport::Duration from a String)
+    *Andrew White*
 
-    *Alexei Emam*
+*   Deprecates Rails custom `Enumerable#sum` and `Array#sum` in favor of Ruby's native implementation which
+    is considerably faster.
 
-*   Add `ActiveSupport::Cache::Store#delete_multi` method to delete multiple keys from the cache store.
+    Ruby requires an initializer for non-numeric type as per examples below:
 
-    *Peter Zhu*
+    ```ruby
+    %w[foo bar].sum('')
+    # instead of %w[foo bar].sum
 
-*   Support multiple arguments in `HashWithIndifferentAccess` for `merge` and `update` methods, to
-    follow Ruby 2.6 addition.
+    [[1, 2], [3, 4, 5]].sum([])
+    # instead of [[1, 2], [3, 4, 5]].sum
+    ```
 
-    *Wojciech Wnętrzak*
+    *Alberto Mota*
 
-*   Allow initializing `thread_mattr_*` attributes via `:default` option.
+*   Tests parallelization is now disabled when running individual files to prevent the setup overhead.
 
-        class Scraper
-          thread_mattr_reader :client, default: Api::Client.new
-        end
+    It can still be enforced if the environment variable `PARALLEL_WORKERS` is present and set to a value greater than 1.
 
-    *Guilherme Mansur*
+    *Ricardo Díaz*
 
-*   Add `compact_blank` for those times when you want to remove #blank? values from
-    an Enumerable (also `compact_blank!` on Hash, Array, ActionController::Parameters).
+*   Fix proxying keyword arguments in `ActiveSupport::CurrentAttributes`.
 
-    *Dana Sherson*
+    *Marcin Kołodziej*
 
-*   Make ActiveSupport::Logger Fiber-safe.
+*   Add `Enumerable#maximum` and `Enumerable#minimum` to easily calculate the maximum or minimum from extracted
+    elements of an enumerable.
 
-    Use `Fiber.current.__id__` in `ActiveSupport::Logger#local_level=` in order
-    to make log level local to Ruby Fibers in addition to Threads.
+    ```ruby
+    payments = [Payment.new(5), Payment.new(15), Payment.new(10)]
 
-    Example:
+    payments.minimum(:price) # => 5
+    payments.maximum(:price) # => 15
+    ```
 
-        logger = ActiveSupport::Logger.new(STDOUT)
-        logger.level = 1
-        puts "Main is debug? #{logger.debug?}"
+    This also allows passing enumerables to `fresh_when` and `stale?` in Action Controller.
+    See PR [#41404](https://github.com/rails/rails/pull/41404) for an example.
 
-        Fiber.new {
-          logger.local_level = 0
-          puts "Thread is debug? #{logger.debug?}"
-        }.resume
+    *Ayrton De Craene*
 
-        puts "Main is debug? #{logger.debug?}"
+*   `ActiveSupport::Cache::MemCacheStore` now accepts an explicit `nil` for its `addresses` argument.
 
-    Before:
+    ```ruby
+    config.cache_store = :mem_cache_store, nil
 
-        Main is debug? false
-        Thread is debug? true
-        Main is debug? true
+    # is now equivalent to
 
-    After:
+    config.cache_store = :mem_cache_store
 
-        Main is debug? false
-        Thread is debug? true
-        Main is debug? false
+    # and is also equivalent to
 
-    Fixes #36752.
+    config.cache_store = :mem_cache_store, ENV["MEMCACHE_SERVERS"] || "localhost:11211"
 
-    *Alexander Varnin*
+    # which is the fallback behavior of Dalli
+    ```
 
-*   Allow the `on_rotation` proc used when decrypting/verifying a message to be
-    passed at the constructor level.
+    This helps those migrating from `:dalli_store`, where an explicit `nil` was permitted.
 
-    Before:
+    *Michael Overmeyer*
 
-        crypt = ActiveSupport::MessageEncryptor.new('long_secret')
-        crypt.decrypt_and_verify(encrypted_message, on_rotation: proc { ... })
-        crypt.decrypt_and_verify(another_encrypted_message, on_rotation: proc { ... })
+*   Add `Enumerable#in_order_of` to put an Enumerable in a certain order by a key.
 
-    After:
+    *DHH*
 
-        crypt = ActiveSupport::MessageEncryptor.new('long_secret', on_rotation: proc { ... })
-        crypt.decrypt_and_verify(encrypted_message)
-        crypt.decrypt_and_verify(another_encrypted_message)
+*   `ActiveSupport::Inflector.camelize` behaves expected when provided a symbol `:upper` or `:lower` argument. Matches
+    `String#camelize` behavior.
 
-    *Edouard Chin*
+    *Alex Ghiculescu*
 
-*   `delegate_missing_to` would raise a `DelegationError` if the object
-    delegated to was `nil`. Now the `allow_nil` option has been added to enable
-    the user to specify they want `nil` returned in this case.
+*   Raises an `ArgumentError` when the first argument of `ActiveSupport::Notification.subscribe` is
+    invalid.
 
-    *Matthew Tanous*
+    *Vipul A M*
 
-*   `truncate` would return the original string if it was too short to be truncated
-    and a frozen string if it were long enough to be truncated. Now truncate will
-    consistently return an unfrozen string regardless. This behavior is consistent
-    with `gsub` and `strip`.
+*   `HashWithIndifferentAccess#deep_transform_keys` now returns a `HashWithIndifferentAccess` instead of a `Hash`.
 
-    Before:
+    *Nathaniel Woodthorpe*
 
-        'foobar'.truncate(5).frozen?
-        # => true
-        'foobar'.truncate(6).frozen?
-        # => false
+*   Consume dalli’s `cache_nils` configuration as `ActiveSupport::Cache`'s `skip_nil` when using `MemCacheStore`.
 
-    After:
+    *Ritikesh G*
 
-        'foobar'.truncate(5).frozen?
-        # => false
-        'foobar'.truncate(6).frozen?
-        # => false
+*   Add `RedisCacheStore#stats` method similar to `MemCacheStore#stats`. Calls `redis#info` internally.
 
-    *Jordan Thomas*
+    *Ritikesh G*
 
 
-Please check [6-0-stable](https://github.com/rails/rails/blob/6-0-stable/activesupport/CHANGELOG.md) for previous changes.
+Please check [6-1-stable](https://github.com/rails/rails/blob/6-1-stable/activesupport/CHANGELOG.md) for previous changes.