activesupport 7.2.3.1 → 8.1.4.1

data/CHANGELOG.md

@@ -1,453 +1,803 @@
-## Rails 7.2.3.1 (March 23, 2026) ##
+## Rails 8.1.4.1 (November 03, 2026) ##
 
-*   Reject scientific notation in NumberConverter
+*   `ActiveSupport::MessagePack` no longer deserializes an unsafe
+    `ActiveSupport::SafeBuffer` as `html_safe`.
 
-    [CVE-2026-33176]
+    A `SafeBuffer` that was no longer `html_safe?`, for example after an
+    in-place `gsub!`, was deserialized as an `html_safe` `SafeBuffer`. It is now
+    serialized with an unsafe marker and deserialized as a `String`. Earlier
+    versions of Rails cannot read an unsafe buffer serialized this way.
+
+    [GHSA-2w9f-fxwj-w2qf]
 
     *Jean Boussier*
 
-*   Fix `SafeBuffer#%` to preserve unsafe status
+*   `ActiveSupport::Inflector#safe_constantize` matches the constant name in a
+    `LoadError` message as a literal string instead of building a `Regexp`
+    from it.
 
-    [CVE-2026-33170]
+    The name's segments were interpolated unescaped into the pattern, so input
+    that reaches `safe_constantize`, such as the channel identifier in an Action
+    Cable subscribe command, chose the source passed to the regexp compiler.
 
-    *Jean Boussier*
+    [GHSA-8474-xrp6-wh69]
 
-*   Improve performance of NumberToDelimitedConverter
+    *Jeremy Daer*
 
-    [CVE-2026-33169]
+## Rails 8.1.4 (September 24, 2026) ##
 
-    *Jean Boussier*
+*   Fix the debug error page rendering for `SyntaxError`s with multi-line messages.
 
+    *Marco Roth*
 
-## Rails 7.2.3 (October 28, 2025) ##
+*   Make `ActiveSupport::JSON.decode` compatible with the upcoming `json` 3.0 gem.
 
-*   Fix `Enumerable#sole` to return the full tuple instead of just the first element of the tuple.
+    *Earlopain*
 
-    *Olivier Bellone*
+*   Fix `number_to_human_size` crashing for sizes above a terabyte by supporting
+    petabyte, exabyte, and zettabyte storage units.
 
-*   Fix parallel tests hanging when worker processes die abruptly.
+    *Kenta Ishizaki*
 
-    Previously, if a worker process was killed (e.g., OOM killed, `kill -9`) during parallel
-    test execution, the test suite would hang forever waiting for the dead worker.
+*   Fix `Range#sole` raising `NoMethodError` when the enumerable core extension
+    isn't already loaded.
 
-    *Joshua Young*
+    *Kenta Ishizaki*
 
-*   `ActiveSupport::FileUpdateChecker` does not depend on `Time.now` to prevent unnecessary reloads with time travel test helpers
+*   Fix `ActiveSupport::Cache::FileStore` raising `NameError` for `FileUtils`
+    when `fileutils` isn't already loaded.
 
-    *Jan Grodowski*
+    *Kenta Ishizaki*
 
-*   Fix `ActiveSupport::BroadcastLogger` from executing a block argument for each logger (tagged, info, etc.).
+*   Fix `Enumerable#in_order_of` with `filter: true` dropping `nil` elements
+    explicitly named in the series.
 
-    *Jared Armstrong*
+    *Kenta Ishizaki*
 
-*   Fix `ActiveSupport::HashWithIndifferentAccess#transform_keys!` removing defaults.
+*   Keep `HashWithIndifferentAccess#filter` returning a `HashWithIndifferentAccess`
+    instead of a plain `Hash`.
 
-    *Hartley McGuire*
+    *Kenta Ishizaki*
 
-*   Fix `ActiveSupport::HashWithIndifferentAccess#tranform_keys!` to handle collisions.
+*   Fix `number_to_human` and `number_to_human_size` crashing when `:precision` is `nil`.
 
-    If the transformation would result in a key equal to another not yet transformed one,
-    it would result in keys being lost.
+    *Kenta Ishizaki*
 
-    Before:
+*   Fix `ActiveSupport::InheritableOptions#to_h` to recursively flatten nested
+    `InheritableOptions` parents.
 
-    ```ruby
-    >> {a: 1, b: 2}.with_indifferent_access.transform_keys!(&:succ)
-    => {"c" => 1}
-    ```
+    *Andrew Novoselac*
 
-    After:
+*   Fix `ActiveSupport::StructuredEventSubscriber.debug_only` leaking debug-only
+    methods across subscriber subclasses.
 
-    ```ruby
-    >> {a: 1, b: 2}.with_indifferent_access.transform_keys!(&:succ)
-    => {"c" => 1, "d" => 2}
-    ```
+    *Kenta Ishizaki*
 
-    *Jason T Johnson*, *Jean Boussier*
+*   Fix `ActiveSupport::Inflector#transliterate` mutating the caller's string.
 
-*   Fix `ActiveSupport::Cache::MemCacheStore#read_multi` to handle network errors.
+    *Kenta Ishizaki*
 
-    This method specifically wasn't handling network errors like other codepaths.
+*   Fix `Hash.from_xml` raising `Date::Error` on `type="date"` values surrounded
+    by whitespace.
 
-    *Alessandro Dal Grande*
+    *Kenta Ishizaki*
 
-*   Fix Active Support Cache `fetch_multi` when local store is active.
+*   Fix `Time#advance` and `DateTime#advance` mutating the options hash passed
+    by the caller.
 
-    `fetch_multi` now properly yield to the provided block for missing entries
-    that have been recorded as such in the local store.
+    *Kenta Ishizaki*
 
-    *Jean Boussier*
+*   Fix `ActiveSupport::Cache::MemoryStore#cleanup` raising `NoMethodError` when
+    used with a non-`DupCoder` serializer.
 
-*   Fix execution wrapping to report all exceptions, including `Exception`.
+    *Kenta Ishizaki*
 
-    If a more serious error like `SystemStackError` or `NoMemoryError` happens,
-    the error reporter should be able to report these kinds of exceptions.
+*   Fix `String#truncate` with `:separator` misbehaving when the `:omission` is
+    longer than the target length.
 
-    *Gannon McGibbon*
+    *Kenta Ishizaki*
 
-*   Fix `RedisCacheStore` and `MemCacheStore` to also handle connection pool related errors.
+*   Fix `ActiveSupport::Cache::Store#delete_multi` mutating the names array passed
+    by the caller.
 
-    These errors are rescued and reported to `Rails.error`.
+    *Kenta Ishizaki*
 
-    *Jean Boussier*
+*   Fix `number_to_currency` crashing on a negative number when `:precision` is `nil`.
 
-*   Fix `ActiveSupport::Cache#read_multi` to respect version expiry when using local cache.
+    *Kenta Ishizaki*
 
-    *zzak*
+*   Fix `TimeZone#strptime` with `%s` dropping the sub-second fraction of the timestamp.
 
-*   Fix `ActiveSupport::MessageVerifier` and `ActiveSupport::MessageEncryptor` configuration of `on_rotation` callback.
+    *Kenta Ishizaki*
 
-    ```ruby
-    verifier.rotate(old_secret).on_rotation { ... }
-    ```
+*   Fix `HashWithIndifferentAccess.new` dropping a falsy (`false` or `0`) default
+    value from the source hash.
 
-    Now both work as documented.
+    *Kenta Ishizaki*
 
-    *Jean Boussier*
+*   Fix `Range#include?` and `Range#===` raising on exclusive non-integer sub-ranges.
 
-*   Fix `ActiveSupport::MessageVerifier` to always be able to verify both URL-safe and URL-unsafe payloads.
+    *Kenta Ishizaki*
 
-    This is to allow transitioning seemlessly from either configuration without immediately invalidating
-    all previously generated signed messages.
+*   Fix `number_to_delimited` corrupting numbers that begin with a `+` or `-` sign.
 
-    *Jean Boussier*, *Florent Beaurain*, *Ali Sepehri*
+    *Kenta Ishizaki*
 
-*   Fix `cache.fetch` to honor the provided expiry when `:race_condition_ttl` is used.
+*   Fix `ActiveSupport::InheritableOptions#==` raising `NoMethodError` when compared
+    with a non-Hash object.
 
-    ```ruby
-    cache.fetch("key", expires_in: 1.hour, race_condition_ttl: 5.second) do
-      "something"
-    end
-    ```
+    *Kenta Ishizaki*
+
+*   Fix `Enumerable#in_order_of` with `filter: false` dropping elements whose keyed
+    value is `nil`.
 
-    In the above example, the final cache entry would have a 10 seconds TTL instead
-    of the requested 1 hour.
+    *Hammad Khan*
 
-    *Dhia*
+*   Stop the DRb service when shutting down parallel test workers, preventing it
+    from lingering after the test run.
 
-*   Better handle procs with splat arguments in `set_callback`.
+    *Shuta Mugikura*
 
-    *Radamés Roriz*
+*   Preserve the encoding of `ActiveSupport::SafeBuffer` values round-tripped through
+    `ActiveSupport::MessagePack`.
 
-*   Fix `String#mb_chars` to not mutate the receiver.
+    *Rafael Mendonça França*
 
-    Previously it would call `force_encoding` on the receiver,
-    now it dups the receiver first.
+*   Fix `number_to_phone` without an area code stripping a leading delimiter when the
+    number itself coincidentally starts with the delimiter string.
 
-    *Jean Boussier*
+    *Tahsin Hasan*
 
-*   Improve `ErrorSubscriber` to also mark error causes as reported.
+*   Update `ActiveSupport::TimeZone` mappings to use the current IANA identifiers
+    `Europe/Kyiv` (was `Europe/Kiev`) and `Asia/Yangon` (was `Asia/Rangoon`).
 
-    This avoid some cases of errors being reported twice, notably in views because of how
-    errors are wrapped in `ActionView::Template::Error`.
+    *tsymbalenkovlad*
 
-    *Jean Boussier*
+*   Use the faster string-based delimiter logic by default in `number_to_delimited`,
+    instead of the regular expression fallback.
+
+    *Shinichi Maeshima*
 
-*   Fix `Module#module_parent_name` to return the correct name after the module has been named.
+*   Preserve the requested key order in `ActiveSupport::Cache::Store#fetch_multi`
+    when a local cache is active.
 
-    When called on an anonymous module, the return value wouldn't change after the module was given a name
-    later by being assigned to a constant.
+    Previously, if some keys were served from the local cache and others from the
+    underlying store, `fetch_multi` returned the local cache hits first instead of
+    following the order of the requested keys.
+
+    *Mueez Afzal*
+
+*   Fix `String#parameterize` raising `TypeError` when `separator` is `nil`.
+
+    `parameterize` already treats a `nil` separator the same as an empty one when
+    squeezing and trimming separators, but raised `TypeError` before reaching that
+    point. A `nil` separator now behaves like `""`, removing the unwanted characters.
 
     ```ruby
-    mod = Module.new
-    mod.module_parent_name # => "Object"
-    MyModule::Something = mod
-    mod.module_parent_name # => "MyModule"
+    "Donald E. Knuth".parameterize(separator: nil) # => "donaldeknuth"
     ```
 
-    *Jean Boussier*
+    *Hammad Khan*
 
-*   Fix a bug in `ERB::Util.tokenize` that causes incorrect tokenization when ERB tags are preceeded by multibyte characters.
+*   Add `RedisClient::Error` to `ActiveSupport::Cache::RedisCacheStore`'s failsafe rescue list.
 
-    *Martin Emde*
+    The redis-rb gem normally translates `RedisClient::*` errors into `Redis::*` errors but in
+    some rare cases, such as when using sentinels, `RedisClient::*` errors may slip through.
 
+    *David Arrunategui*
 
-## Rails 7.2.2.2 (August 13, 2025) ##
+*   Fix `ActiveSupport::Duration#in_minutes`, `#in_hours`, `#in_days`,
+    `#in_weeks`, `#in_months`, and `#in_years` truncating sub-second precision.
 
-*   No changes.
+    These methods divided the duration's integer second count (`in_seconds`,
+    aliased to `to_i`) instead of its exact value, so any fractional second was
+    silently dropped before the conversion.
+
+    ```ruby
+    # Before
+    90.5.seconds.in_minutes # => 1.5
 
+    # After
+    90.5.seconds.in_minutes # => 1.5083333333333333
+    ```
 
-## Rails 7.2.2.1 (December 10, 2024) ##
+    *Kenta Ishizaki*
 
-*   No changes.
+*   Fix JSON encoding of non-String Hash keys.
 
+    The old encoder would simply call `to_s` on them, the newer encoder
+    would incorrectly call `as_json` instead.
 
-## Rails 7.2.2 (October 30, 2024) ##
+    In the case of `Time`, `DateTime` and `TimeWithZone` this would result
+    in different serialization of time keys: `"2009-01-01T12:30:00.000Z"` (arguably better)
+    instead of `"2009-01-01 12:30:00 UTC"` (how it used to be).
 
-*   Include options when instrumenting `ActiveSupport::Cache::Store#delete` and `ActiveSupport::Cache::Store#delete_multi`.
+    *Kenta Ishizaki*
 
-    *Adam Renberg Tamm*
+*   Fix `number_to_phone` dropping only the first character of a
+    multi-character `:delimiter` when no area code is present.
 
-*   Print test names when running `rails test -v` for parallel tests.
+    The leading delimiter produced by an empty first capture group was
+    stripped with `slice!(0, 1)`, which assumed a single-character
+    delimiter. Multi-character (and multibyte) delimiters now work:
 
-    *John Hawthorn*, *Abeid Ahmed*
+        number_to_phone(5551234, delimiter: " - ")  # => "555 - 1234"
+        # was "- 555 - 1234"
 
+    *Kenta Ishizaki*
 
-## Rails 7.2.1.2 (October 23, 2024) ##
+*   Fix `titleize` inflector to consider Unicode characters
 
-*   No changes.
+    ```ruby
+    "ćasim đipa".titleize # => "Ćasim Đipa"
+    ```
+
+    *Eldin Guzin*
 
 
-## Rails 7.2.1.1 (October 15, 2024) ##
+## Rails 8.1.3.1 (July 29, 2026) ##
 
 *   No changes.
 
 
-## Rails 7.2.1 (August 22, 2024) ##
+## Rails 8.1.3 (March 24, 2026) ##
 
-*   No changes.
+*   Fix `JSONGemCoderEncoder` to correctly serialize custom object hash keys.
 
+    When hash keys are custom objects whose `as_json` returns a Hash,
+    the encoder now calls `to_s` on the original key object instead of
+    on the `as_json` result.
 
-## Rails 7.2.0 (August 09, 2024) ##
+    Before:
+        hash = {CustomKey.new(123) => "value"}
+        hash.to_json  # => {"{:id=>123}":"value"}
 
-*   Fix `delegate_missing_to allow_nil: true` when called with implict self
+    After:
+        hash.to_json  # => {"custom_123":"value"}
 
-    ```ruby
-    class Person
-      delegate_missing_to :address, allow_nil: true
+    *Dan Sharp*
 
-      def address
-        nil
-      end
+*   Fix inflections to better handle overlapping acronyms.
 
-      def berliner?
-        city == "Berlin"
-      end
+    ```ruby
+    ActiveSupport::Inflector.inflections(:en) do |inflect|
+      inflect.acronym "USD"
+      inflect.acronym "USDC"
     end
 
-    Person.new.city # => nil
-    Person.new.berliner? # undefined local variable or method `city' for an instance of Person (NameError)
+    "USDC".underscore # => "usdc"
     ```
 
+    *Said Kaldybaev*
+
+*   Silence Dalli 4.0+ warning when using `ActiveSupport::Cache::MemCacheStore`.
+
+    *zzak*
+
+
+## Rails 8.1.2.1 (March 23, 2026) ##
+
+*   Reject scientific notation in NumberConverter
+
+    [CVE-2026-33176]
+
     *Jean Boussier*
 
-*   Add `logger` as a dependency since it is a bundled gem candidate for Ruby 3.5
+*   Fix `SafeBuffer#%` to preserve unsafe status
 
-    *Earlopain*
+    [CVE-2026-33170]
 
-*   Define `Digest::UUID.nil_uuid`, which returns the so-called nil UUID.
+    *Jean Boussier*
 
-    *Xavier Noria*
+*   Improve performance of NumberToDelimitedConverter
+
+    [CVE-2026-33169]
+
+    *Jean Boussier*
 
-*   Support `duration` type in `ActiveSupport::XmlMini`.
 
-    *heka1024*
+## Rails 8.1.2 (January 08, 2026) ##
 
-*   Remove deprecated `ActiveSupport::Notifications::Event#children` and  `ActiveSupport::Notifications::Event#parent_of?`.
+*   Make `delegate` and `delegate_missing_to` work in BasicObject subclasses.
 
     *Rafael Mendonça França*
 
-*   Remove deprecated support to call the following methods without passing a deprecator:
+*   Fix Inflectors when using a locale that fallbacks to `:en`.
 
-    - `deprecate`
-    - `deprecate_constant`
-    - `ActiveSupport::Deprecation::DeprecatedObjectProxy.new`
-    - `ActiveSupport::Deprecation::DeprecatedInstanceVariableProxy.new`
-    - `ActiveSupport::Deprecation::DeprecatedConstantProxy.new`
-    - `assert_deprecated`
-    - `assert_not_deprecated`
-    - `collect_deprecations`
+    *Said Kaldybaev*
 
-    *Rafael Mendonça França*
+*   Fix `ActiveSupport::TimeWithZone#as_json` to consistently return UTF-8 strings.
 
-*   Remove deprecated `ActiveSupport::Deprecation` delegation to instance.
+    Previously the returned string would sometime be encoded in US-ASCII, which in
+    some cases may be problematic.
 
-    *Rafael Mendonça França*
+    Now the method consistently always return UTF-8 strings.
 
-*   Remove deprecated `SafeBuffer#clone_empty`.
+    *Jean Boussier*
 
-    *Rafael Mendonça França*
+*   Fix `TimeWithZone#xmlschema` when wrapping a `DateTime` instance in local time.
 
-*   Remove deprecated `#to_default_s` from `Array`, `Date`, `DateTime` and `Time`.
+    Previously it would return an invalid time.
 
-    *Rafael Mendonça França*
+    *Dmytro Rymar*
 
-*   Remove deprecated support to passing `Dalli::Client` instances to `MemCacheStore`.
+*   Implement LocalCache strategy on `ActiveSupport::Cache::MemoryStore`. The memory store
+    needs to respond to the same interface as other cache stores (e.g. `ActiveSupport::NullStore`).
 
-    *Rafael Mendonça França*
+    *Mikey Gough*
 
-*   Remove deprecated `config.active_support.use_rfc4122_namespaced_uuids`.
+*   Fix `ActiveSupport::Inflector.humanize` with international characters.
 
-    *Rafael Mendonça França*
+    ```ruby
+    ActiveSupport::Inflector.humanize("áÉÍÓÚ")  # => "Áéíóú"
+    ActiveSupport::Inflector.humanize("аБВГДЕ") # => "Абвгде"
+    ```
 
-*   Remove deprecated `config.active_support.remove_deprecated_time_with_zone_name`.
+    *Jose Luis Duran*
 
-    *Rafael Mendonça França*
 
-*   Remove deprecated `config.active_support.disable_to_s_conversion`.
+## Rails 8.1.1 (October 28, 2025) ##
 
-    *Rafael Mendonça França*
+*   No changes.
 
-*   Remove deprecated support to bolding log text with positional boolean in `ActiveSupport::LogSubscriber#color`.
+
+## Rails 8.1.0 (October 22, 2025) ##
+
+*   Remove deprecated passing a Time object to `Time#since`.
 
     *Rafael Mendonça França*
 
-*   Remove deprecated constants `ActiveSupport::LogSubscriber::CLEAR` and `ActiveSupport::LogSubscriber::BOLD`.
+*   Remove deprecated `Benchmark.ms` method. It is now defined in the `benchmark` gem.
 
     *Rafael Mendonça França*
 
-*   Remove deprecated support for `config.active_support.cache_format_version = 6.1`.
+*   Remove deprecated addition for `Time` instances with `ActiveSupport::TimeWithZone`.
 
     *Rafael Mendonça França*
 
-*   Remove deprecated `:pool_size` and `:pool_timeout` options for the cache storage.
+*   Remove deprecated support for `to_time` to preserve the system local time. It will now always preserve the receiver
+    timezone.
 
     *Rafael Mendonça França*
 
-*   Warn on tests without assertions.
+*   Deprecate `config.active_support.to_time_preserves_timezone`.
 
-    `ActiveSupport::TestCase` now warns when tests do not run any assertions.
-    This is helpful in detecting broken tests that do not perform intended assertions.
+    *Rafael Mendonça França*
 
-    *fatkodima*
+*   Standardize event name formatting in `assert_event_reported` error messages.
 
-*   Support `hexBinary` type in `ActiveSupport::XmlMini`.
+    The event name in failure messages now uses `.inspect` (e.g., `name: "user.created"`)
+    to match `assert_events_reported` and provide type clarity between strings and symbols.
+    This only affects tests that assert on the failure message format itself.
 
-    *heka1024*
+    *George Ma*
 
-*   Deprecate `ActiveSupport::ProxyObject` in favor of Ruby's built-in `BasicObject`.
+*   Fix `Enumerable#sole` to return the full tuple instead of just the first element of the tuple.
 
-    *Earlopain*
+    *Olivier Bellone*
+
+*   Fix parallel tests hanging when worker processes die abruptly.
 
-*   `stub_const` now accepts a `exists: false` parameter to allow stubbing missing constants.
+    Previously, if a worker process was killed (e.g., OOM killed, `kill -9`) during parallel
+    test execution, the test suite would hang forever waiting for the dead worker.
 
-    *Jean Boussier*
+    *Joshua Young*
 
-*   Make `ActiveSupport::BacktraceCleaner` copy filters and silencers on dup and clone.
+*   Add `config.active_support.escape_js_separators_in_json`.
 
-    Previously the copy would still share the internal silencers and filters array,
-    causing state to leak.
+    Introduce a new framework default to skip escaping LINE SEPARATOR (U+2028) and PARAGRAPH SEPARATOR (U+2029) in JSON.
 
-    *Jean Boussier*
+    Historically these characters were not valid inside JavaScript literal strings but that changed in ECMAScript 2019.
+    As such it's no longer a concern in modern browsers: https://caniuse.com/mdn-javascript_builtins_json_json_superset.
 
-*   Updating Astana with Western Kazakhstan TZInfo identifier.
+    *Étienne Barrié*, *Jean Boussier*
 
-    *Damian Nelson*
+*   Fix `NameError` when `class_attribute` is defined on instance singleton classes.
 
-*   Add filename support for `ActiveSupport::Logger.logger_outputs_to?`.
+    Previously, calling `class_attribute` on an instance's singleton class would raise
+    a `NameError` when accessing the attribute through the instance.
 
     ```ruby
-    logger = Logger.new('/var/log/rails.log')
-    ActiveSupport::Logger.logger_outputs_to?(logger, '/var/log/rails.log')
+    object = MyClass.new
+    object.singleton_class.class_attribute :foo, default: "bar"
+    object.foo # previously raised NameError, now returns "bar"
     ```
 
-    *Christian Schmidt*
+    *Joshua Young*
 
-*   Include `IPAddr#prefix` when serializing an `IPAddr` using the
-    `ActiveSupport::MessagePack` serializer.
+*   Introduce `ActiveSupport::Testing::EventReporterAssertions#with_debug_event_reporting`
+    to enable event reporter debug mode in tests.
 
-    This change is backward and forward compatible — old payloads can
-    still be read, and new payloads will be readable by older versions of Rails.
+    The previous way to enable debug mode is by using `#with_debug` on the
+    event reporter itself, which is too verbose. This new helper will help
+    clear up any confusion on how to test debug events.
 
-    *Taiki Komaba*
+    *Gannon McGibbon*
 
-*   Add `default:` support for `ActiveSupport::CurrentAttributes.attribute`.
+*   Add `ActiveSupport::StructuredEventSubscriber` for consuming notifications and
+    emitting structured event logs. Events may be emitted with the `#emit_event`
+    or `#emit_debug_event` methods.
 
     ```ruby
-    class Current < ActiveSupport::CurrentAttributes
-      attribute :counter, default: 0
+    class MyStructuredEventSubscriber < ActiveSupport::StructuredEventSubscriber
+      def notification(event)
+        emit_event("my.notification", data: 1)
+      end
     end
     ```
 
-    *Sean Doyle*
+    *Adrianna Chang*
+
+*   `ActiveSupport::FileUpdateChecker` does not depend on `Time.now` to prevent unecessary reloads with time travel test helpers
+
+    *Jan Grodowski*
+
+*   Add `ActiveSupport::Cache::Store#namespace=` and `#namespace`.
+
+    Can be used as an alternative to `Store#clear` in some situations such as parallel
+    testing.
+
+    *Nick Schwaderer*
+
+*   Create `parallel_worker_id` helper for running parallel tests. This allows users to
+    know which worker they are currently running in.
+
+    *Nick Schwaderer*
+
+*   Make the cache of `ActiveSupport::Cache::Strategy::LocalCache::Middleware` updatable.
+
+    If the cache client at `Rails.cache` of a booted application changes, the corresponding
+    mounted middleware needs to update in order for request-local caches to be setup properly.
+    Otherwise, redundant cache operations will erroneously hit the datastore.
 
-*   Yield instance to `Object#with` block.
+    *Gannon McGibbon*
+
+*   Add `assert_events_reported` test helper for `ActiveSupport::EventReporter`.
+
+    This new assertion allows testing multiple events in a single block, regardless of order:
 
     ```ruby
-    client.with(timeout: 5_000) do |c|
-      c.get("/commits")
+    assert_events_reported([
+      { name: "user.created", payload: { id: 123 } },
+      { name: "email.sent", payload: { to: "user@example.com" } }
+    ]) do
+      create_user_and_send_welcome_email
     end
     ```
 
-    *Sean Doyle*
+    *George Ma*
 
-*   Use logical core count instead of physical core count to determine the
-    default number of workers when parallelizing tests.
+*   Add `ActiveSupport::TimeZone#standard_name` method.
 
-    *Jonathan Hefner*
+    ``` ruby
+    zone = ActiveSupport::TimeZone['Hawaii']
+    # Old way
+    ActiveSupport::TimeZone::MAPPING[zone.name]
+    # New way
+    zone.standard_name # => 'Pacific/Honolulu'
+    ```
 
-*   Fix `Time.now/DateTime.now/Date.today` to return results in a system timezone after `#travel_to`.
+    *Bogdan Gusiev*
 
-    There is a bug in the current implementation of #travel_to:
-    it remembers a timezone of its argument, and all stubbed methods start
-    returning results in that remembered timezone. However, the expected
-    behavior is to return results in a system timezone.
+*   Add Structured Event Reporter, accessible via `Rails.event`.
 
-    *Aleksei Chernenkov*
+    The Event Reporter provides a unified interface for producing structured events in Rails
+    applications:
 
-*   Add `ErrorReported#unexpected` to report precondition violations.
+    ```ruby
+    Rails.event.notify("user.signup", user_id: 123, email: "user@example.com")
+    ```
 
-    For example:
+    It supports adding tags to events:
 
     ```ruby
-    def edit
-      if published?
-        Rails.error.unexpected("[BUG] Attempting to edit a published article, that shouldn't be possible")
-        return false
+    Rails.event.tagged("graphql") do
+      # Event includes tags: { graphql: true }
+      Rails.event.notify("user.signup", user_id: 123, email: "user@example.com")
+    end
+    ```
+
+    As well as context:
+    ```ruby
+    # All events will contain context: {request_id: "abc123", shop_id: 456}
+    Rails.event.set_context(request_id: "abc123", shop_id: 456)
+    ```
+
+    Events are emitted to subscribers. Applications register subscribers to
+    control how events are serialized and emitted. Subscribers must implement
+    an `#emit` method, which receives the event hash:
+
+    ```ruby
+    class LogSubscriber
+      def emit(event)
+        payload = event[:payload].map { |key, value| "#{key}=#{value}" }.join(" ")
+        source_location = event[:source_location]
+        log = "[#{event[:name]}] #{payload} at #{source_location[:filepath]}:#{source_location[:lineno]}"
+        Rails.logger.info(log)
       end
-      # ...
     end
     ```
 
-    The above will raise an error in development and test, but only report the error in production.
+    *Adrianna Chang*
+
+*   Make `ActiveSupport::Logger` `#freeze`-friendly.
+
+    *Joshua Young*
+
+*   Make `ActiveSupport::Gzip.compress` deterministic based on input.
+
+    `ActiveSupport::Gzip.compress` used to include a timestamp in the output,
+    causing consecutive calls with the same input data to have different output
+    if called during different seconds. It now always sets the timestamp to `0`
+    so that the output is identical for any given input.
+
+    *Rob Brackett*
+
+*   Given an array of `Thread::Backtrace::Location` objects, the new method
+    `ActiveSupport::BacktraceCleaner#clean_locations` returns an array with the
+    clean ones:
+
+    ```ruby
+    clean_locations = backtrace_cleaner.clean_locations(caller_locations)
+    ```
+
+    Filters and silencers receive strings as usual. However, the `path`
+    attributes of the locations in the returned array are the original,
+    unfiltered ones, since locations are immutable.
+
+    *Xavier Noria*
+
+*   Improve `CurrentAttributes` and `ExecutionContext` state managment in test cases.
+
+    Previously these two global state would be entirely cleared out whenever calling
+    into code that is wrapped by the Rails executor, typically Action Controller or
+    Active Job helpers:
+
+    ```ruby
+    test "#index works" do
+      CurrentUser.id = 42
+      get :index
+      CurrentUser.id == nil
+    end
+    ```
+
+    Now re-entering the executor properly save and restore that state.
 
     *Jean Boussier*
 
-*   Make the order of read_multi and write_multi notifications for `Cache::Store#fetch_multi` operations match the order they are executed in.
+*   The new method `ActiveSupport::BacktraceCleaner#first_clean_location`
+    returns the first clean location of the caller's call stack, or `nil`.
+    Locations are `Thread::Backtrace::Location` objects. Useful when you want to
+    report the application-level location where something happened as an object.
 
-    *Adam Renberg Tamm*
+    *Xavier Noria*
 
-*   Make return values of `Cache::Store#write` consistent.
+*   FileUpdateChecker and EventedFileUpdateChecker ignore changes in Gem.path now.
 
-    The return value was not specified before. Now it returns `true` on a successful write,
-    `nil` if there was an error talking to the cache backend, and `false` if the write failed
-    for another reason (e.g. the key already exists and `unless_exist: true` was passed).
+    *Ermolaev Andrey*, *zzak*
 
-    *Sander Verdonschot*
+*   The new method `ActiveSupport::BacktraceCleaner#first_clean_frame` returns
+    the first clean frame of the caller's backtrace, or `nil`. Useful when you
+    want to report the application-level frame where something happened as a
+    string.
 
-*   Fix logged cache keys not always matching actual key used by cache action.
+    *Xavier Noria*
 
-    *Hartley McGuire*
+*   Always clear `CurrentAttributes` instances.
 
-*   Improve error messages of `assert_changes` and `assert_no_changes`.
+    Previously `CurrentAttributes` instance would be reset at the end of requests.
+    Meaning its attributes would be re-initialized.
 
-    `assert_changes` error messages now display objects with `.inspect` to make it easier
-    to differentiate nil from empty strings, strings from symbols, etc.
-    `assert_no_changes` error messages now surface the actual value.
+    This is problematic because it assume these objects don't hold any state
+    other than their declared attribute, which isn't always the case, and
+    can lead to state leak across request.
 
-    *pcreux*
+    Now `CurrentAttributes` instances are abandoned at the end of a request,
+    and a new instance is created at the start of the next request.
 
-*   Fix `#to_fs(:human_size)` to correctly work with negative numbers.
+    *Jean Boussier*, *Janko Marohnić*
 
-    *Earlopain*
+*   Add public API for `before_fork_hook` in parallel testing.
 
-*   Fix `BroadcastLogger#dup` so that it duplicates the logger's `broadcasts`.
+    Introduces a public API for calling the before fork hooks implemented by parallel testing.
 
-    *Andrew Novoselac*
+    ```ruby
+    parallelize_before_fork do
+        # perform an action before test processes are forked
+    end
+    ```
+
+    *Eileen M. Uchitelle*
+
+*   Implement ability to skip creating parallel testing databases.
+
+    With parallel testing, Rails will create a database per process. If this isn't
+    desirable or you would like to implement databases handling on your own, you can
+    now turn off this default behavior.
+
+    To skip creating a database per process, you can change it via the
+    `parallelize` method:
+
+    ```ruby
+    parallelize(workers: 10, parallelize_databases: false)
+    ```
+
+    or via the application configuration:
+
+    ```ruby
+    config.active_support.parallelize_databases = false
+    ```
+
+    *Eileen M. Uchitelle*
+
+*   Allow to configure maximum cache key sizes
+
+    When the key exceeds the configured limit (250 bytes by default), it will be truncated and
+    the digest of the rest of the key appended to it.
+
+    Note that previously `ActiveSupport::Cache::RedisCacheStore` allowed up to 1kb cache keys before
+    truncation, which is now reduced to 250 bytes.
 
-*   Fix issue where `bootstrap.rb` overwrites the `level` of a `BroadcastLogger`'s `broadcasts`.
+    ```ruby
+    config.cache_store = :redis_cache_store, { max_key_size: 64 }
+    ```
+
+    *fatkodima*
+
+*   Use `UNLINK` command instead of `DEL` in `ActiveSupport::Cache::RedisCacheStore` for non-blocking deletion.
+
+    *Aron Roh*
+
+*   Add `Cache#read_counter` and `Cache#write_counter`
+
+    ```ruby
+    Rails.cache.write_counter("foo", 1)
+    Rails.cache.read_counter("foo") # => 1
+    Rails.cache.increment("foo")
+    Rails.cache.read_counter("foo") # => 2
+    ```
+
+    *Alex Ghiculescu*
+
+*   Introduce ActiveSupport::Testing::ErrorReporterAssertions#capture_error_reports
+
+    Captures all reported errors from within the block that match the given
+    error class.
+
+    ```ruby
+    reports = capture_error_reports(IOError) do
+      Rails.error.report(IOError.new("Oops"))
+      Rails.error.report(IOError.new("Oh no"))
+      Rails.error.report(StandardError.new)
+    end
+
+    assert_equal 2, reports.size
+    assert_equal "Oops", reports.first.error.message
+    assert_equal "Oh no", reports.last.error.message
+    ```
 
     *Andrew Novoselac*
 
-*   Fix compatibility with the `semantic_logger` gem.
+*   Introduce ActiveSupport::ErrorReporter#add_middleware
+
+    When reporting an error, the error context middleware will be called with the reported error
+    and base execution context. The stack may mutate the context hash. The mutated context will
+    then be passed to error subscribers. Middleware receives the same parameters as `ErrorReporter#report`.
+
+    *Andrew Novoselac*, *Sam Schmidt*
+
+*   Change execution wrapping to report all exceptions, including `Exception`.
+
+    If a more serious error like `SystemStackError` or `NoMemoryError` happens,
+    the error reporter should be able to report these kinds of exceptions.
+
+    *Gannon McGibbon*
+
+*   `ActiveSupport::Testing::Parallelization.before_fork_hook` allows declaration of callbacks that
+    are invoked immediately before forking test workers.
+
+    *Mike Dalessio*
+
+*   Allow the `#freeze_time` testing helper to accept a date or time argument.
+
+    ```ruby
+    Time.current # => Sun, 09 Jul 2024 15:34:49 EST -05:00
+    freeze_time Time.current + 1.day
+    sleep 1
+    Time.current # => Mon, 10 Jul 2024 15:34:49 EST -05:00
+    ```
+
+    *Joshua Young*
+
+*   `ActiveSupport::JSON` now accepts options
+
+    It is now possible to pass options to `ActiveSupport::JSON`:
+    ```ruby
+    ActiveSupport::JSON.decode('{"key": "value"}', symbolize_names: true) # => { key: "value" }
+    ```
+
+    *matthaigh27*
+
+*   `ActiveSupport::Testing::NotificationAssertions`'s `assert_notification` now matches against payload subsets by default.
+
+    Previously the following assertion would fail due to excess key vals in the notification payload. Now with payload subset matching, it will pass.
+
+    ```ruby
+    assert_notification("post.submitted", title: "Cool Post") do
+      ActiveSupport::Notifications.instrument("post.submitted", title: "Cool Post", body: "Cool Body")
+    end
+    ```
+
+    Additionally, you can now persist a matched notification for more customized assertions.
+
+    ```ruby
+    notification = assert_notification("post.submitted", title: "Cool Post") do
+      ActiveSupport::Notifications.instrument("post.submitted", title: "Cool Post", body: Body.new("Cool Body"))
+    end
+
+    assert_instance_of(Body, notification.payload[:body])
+    ```
+
+    *Nicholas La Roux*
+
+*   Deprecate `String#mb_chars` and `ActiveSupport::Multibyte::Chars`.
+
+    These APIs are a relic of the Ruby 1.8 days when Ruby strings weren't encoding
+    aware. There is no legitimate reasons to need these APIs today.
+
+    *Jean Boussier*
+
+*   Deprecate `ActiveSupport::Configurable`
+
+    *Sean Doyle*
+
+*   `nil.to_query("key")` now returns `key`.
+
+    Previously it would return `key=`, preventing round tripping with `Rack::Utils.parse_nested_query`.
+
+    *Erol Fornoles*
+
+*   Avoid wrapping redis in a `ConnectionPool` when using `ActiveSupport::Cache::RedisCacheStore` if the `:redis`
+    option is already a `ConnectionPool`.
+
+    *Joshua Young*
+
+*   Alter `ERB::Util.tokenize` to return :PLAIN token with full input string when string doesn't contain ERB tags.
 
-    The `semantic_logger` gem doesn't behave exactly like stdlib logger in that
-    `SemanticLogger#level` returns a Symbol while stdlib `Logger#level` returns an Integer.
+    *Martin Emde*
 
-    This caused the various `LogSubscriber` classes in Rails to break when assigned a
-    `SemanticLogger` instance.
+*   Fix a bug in `ERB::Util.tokenize` that causes incorrect tokenization when ERB tags are preceded by multibyte characters.
 
-    *Jean Boussier*, *ojab*
+    *Martin Emde*
 
-*   Fix MemoryStore to prevent race conditions when incrementing or decrementing.
+*   Add `ActiveSupport::Testing::NotificationAssertions` module to help with testing `ActiveSupport::Notifications`.
 
-    *Pierre Jambet*
+    *Nicholas La Roux*, *Yishu See*, *Sean Doyle*
 
-*   Implement `HashWithIndifferentAccess#to_proc`.
+*   `ActiveSupport::CurrentAttributes#attributes` now will return a new hash object on each call.
 
-    Previously, calling `#to_proc` on `HashWithIndifferentAccess` object used inherited `#to_proc`
-    method from the `Hash` class, which was not able to access values using indifferent keys.
+    Previously, the same hash object was returned each time that method was called.
 
     *fatkodima*
 
-Please check [7-1-stable](https://github.com/rails/rails/blob/7-1-stable/activesupport/CHANGELOG.md) for previous changes.
+*   `ActiveSupport::JSON.encode` supports CIDR notation.
+
+    Previously:
+
+    ```ruby
+    ActiveSupport::JSON.encode(IPAddr.new("172.16.0.0/24")) # => "\"172.16.0.0\""
+    ```
+
+    After this change:
+
+    ```ruby
+    ActiveSupport::JSON.encode(IPAddr.new("172.16.0.0/24")) # => "\"172.16.0.0/24\""
+    ```
+
+    *Taketo Takashima*
+
+*   Make `ActiveSupport::FileUpdateChecker` faster when checking many file-extensions.
+
+    *Jonathan del Strother*
+
+Please check [8-0-stable](https://github.com/rails/rails/blob/8-0-stable/activesupport/CHANGELOG.md) for previous changes.