railties 5.2.1.1 → 6.0.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 7ac62b7145047acaa2ca4089363697d3e41b87ac975d3342cb13af99a6d5aa07
-  data.tar.gz: c843b07e8cdda6352c8e94410540ca9c05bcf9eafd98ae9636ea5b2a796499d4
+  metadata.gz: 8978d3b263c42b7a7f85938aa1440c25f6796c9be7616280cf2c97930e088a70
+  data.tar.gz: 4f29426a081d75ad0716dfd4780280f62def9d25dcffa7b614b6c64e764cb9ad
 SHA512:
-  metadata.gz: 8c7db2109b887540c55a3f82aa7f72dc9ad373f9f6946fc65cd6aacbfe82652db54f925e81b85c69e93aa46db01166fb0cb6eed87110a48d728c4428f5c2f3b2
-  data.tar.gz: 568086504c93ff9ae1205b8b68fa58a18e62ceb984adf5f676abb3e817b12726e42b33ba474aa4dab622d44ea00346ad35a195a0825a017c904f609567d86b4a
+  metadata.gz: 4da34a4d6f2bb8c0d3b0d0580a785a6b31fa591c3875b47dd9f8ceeb30a7c7f19a0ec282f511be8f2f9cbf0132ddd29e4b21f8562beeeec3519935d143ef9f0f
+  data.tar.gz: e96e83bf20181c578bc056b63a47397ea1db2d3075cbb9c1a88b79b4b19ce5e076dbc15a05fe9ec9e35b8f3724f075ce4cdb64df8ba7c037dd8524b5916bf938

data/CHANGELOG.md

@@ -1,222 +1,451 @@
-## Rails 5.2.1.1 (November 27, 2018) ##
+## Rails 6.0.1 (November 5, 2019) ##
 
-*   No changes.
+*   The `zeitwerk:check` Rake task reports files outside the app's root
+    directory, as in engines loaded from gems.
 
+    *Xavier Noria*
 
-## Rails 5.2.1 (August 07, 2018) ##
+*   Fixed a possible error when using the evented file update checker.
 
-*   Respect `NODE_ENV` when running `rails yarn:install`.
+    *Yuji Yaginuma*
 
-    *Max Melentiev*
+*   The sqlite3 database files created by the parallel testing feature are
+    included in the default `.gitignore` file for newly-generated apps.
 
-*   Don't generate unused files in `app:update` task
+    *Yasuo Honda*
 
-     Skip the assets' initializer when sprockets isn't loaded.
+*   `rails new` generates a `.keep` file in `tmp/pids`. This fixes starting
+    a server via `rackup` instead of `rails server`.
 
-     Skip `config/spring.rb` when spring isn't loaded.
+    *Rafael Mendonça França*
 
-    *Tsukuru Tanimichi*
 
-*   Don't include `bootsnap` by default in apps generated under JRuby.
+## Rails 6.0.0 (August 16, 2019) ##
 
-    Fixes #32641.
+*   `Rails.autoloaders.log!` is a logging shortcut to get the activity of the
+    loaders printed to standard output. May be handy for troubleshooting.
 
-    *Guillermo Iguaran*
+    *Xavier Noria*
 
-*   Create the `.ruby-version` file compatible with MRI/JRuby by default.
 
-    Fixes #32639.
+## Rails 6.0.0.rc2 (July 22, 2019) ##
 
-    *Guillermo Iguaran*
+*   The new configuration point `config.add_autoload_paths_to_load_path` allows
+    users to opt-out from adding autoload paths to `$LOAD_PATH`. This flag is
+    `true` by default, but it is recommended to be set to `false` in `:zeitwerk`
+    mode early, in `config/application.rb`.
 
-*   Make the master.key file read-only for the owner upon generation on
-    POSIX-compliant systems.
+    Zeitwerk uses only absolute paths internally, and applications running in
+    `:zeitwerk` mode do not need `require_dependency`, so models, controllers,
+    jobs, etc. do not need to be in `$LOAD_PATH`. Setting this to `false` saves
+    Ruby from checking these directories when resolving `require` calls with
+    relative paths, and saves Bootsnap work and RAM, since it does not need to
+    build an index for them.
 
-    Previously:
+    *Xavier Noria*
 
-        $ ls -l config/master.key
-        -rw-r--r--   1 owner  group      32 Jan 1 00:00 master.key
+## Rails 6.0.0.rc1 (April 24, 2019) ##
 
-    Now:
+*   Applications upgrading to Rails 6 can run the command
 
-        $ ls -l config/master.key
-        -rw-------   1 owner  group      32 Jan 1 00:00 master.key
+    ```
+    bin/rails zeitwerk:check
+    ```
 
-    Fixes #32604.
+    to check if the project structure they were using with the classic
+    autoloader is compatible with `:zeitwerk` mode.
 
-    *Jose Luis Duran*
+    *Matilda Smeds* & *Xavier Noria*
+
+*   Allow loading seeds without ActiveJob.
+
+    Fixes #35782
 
-*   Allow use of `minitest-rails` gem with Rails test runner.
+    *Jeremy Weathers*
 
-    Fixes #31324.
+*   `null: false` is set in the migrations by default for column pointed by
+    `belongs_to` / `references` association generated by model generator.
+
+    Also deprecate passing {required} to the model generator.
+
+    *Prathamesh Sonpatki*
+
+*   New applications get `config.cache_classes = false` in `config/environments/test.rb`
+    unless `--skip-spring`.
+
+    *Xavier Noria*
+
+*   Autoloading during initialization is deprecated.
+
+    *Xavier Noria*
+
+*   Only force `:async` ActiveJob adapter to `:inline` during seeding.
+
+    *BatedUrGonnaDie*
+
+*   The `connection` option of `rails dbconsole` command is deprecated in
+    favor of `database` option.
 
     *Yuji Yaginuma*
 
+*   Replace `chromedriver-helper` gem with `webdrivers` in default Gemfile.
+    `chromedriver-helper` is deprecated as of March 31, 2019 and won't
+    receive any further updates.
 
-## Rails 5.2.0 (April 09, 2018) ##
+    *Guillermo Iguaran‮*
 
-*   Fix minitest rails plugin.
+*   Applications running in `:zeitwerk` mode that use `bootsnap` need
+    to upgrade `bootsnap` to at least 1.4.2.
 
-    The custom reporters are added only if needed.
+    *Xavier Noria*
 
-    This will fix conflicts with others plugins.
+*   Add `config.disable_sandbox` option to Rails console.
 
-    *Kevin Robatel*
+    This setting will disable `rails console --sandbox` mode, preventing
+    developer from accidentally starting a sandbox console,
+    which when left inactive, can cause the database server to run out of memory.
 
-*   Deprecate `after_bundle` callback in Rails plugin templates.
+    *Prem Sichanugrist*
+
+*   Add `-e/--environment` option to `rails initializers`.
 
     *Yuji Yaginuma*
 
-*   `rails new` and `rails plugin new` get `Active Storage` by default.
-     Add ability to skip `Active Storage` with `--skip-active-storage`
-     and do so automatically when `--skip-active-record` is used.
 
-    *bogdanvlviv*
+## Rails 6.0.0.beta3 (March 11, 2019) ##
 
-*   Gemfile for new apps: upgrade redis-rb from ~> 3.0 to 4.0.
+*   Generate random development secrets
 
-    *Jeremy Daer*
+    A random development secret is now generated to tmp/development_secret.txt
 
-*   Add `mini_magick` to default `Gemfile` as comment.
+    This avoids an issue where development mode servers were vulnerable to
+    remote code execution.
 
-    *Yoshiyuki Hirano*
+    Fixes CVE-2019-5420
 
-*   Derive `secret_key_base` from the app name in development and test environments.
+    *Eileen M. Uchitelle*, *Aaron Patterson*, *John Hawthorn*
 
-    Spares away needless secret configs.
 
-    *DHH*, *Kasper Timm Hansen*
+## Rails 6.0.0.beta2 (February 25, 2019) ##
 
-*   Support multiple versions arguments for `gem` method of Generators.
+*   Fix non-symbol access to nested hashes returned from `Rails::Application.config_for`
+    being broken by allowing non-symbol access with a deprecation notice.
 
-    *Yoshiyuki Hirano*
+    *Ufuk Kayserilioglu*
 
-*   Add `--skip-yarn` option to the plugin generator.
+*   Fix deeply nested namespace command printing.
 
-    *bogdanvlviv*
+    *Gannon McGibbon*
 
-*   Optimize routes indentation.
 
-    *Yoshiyuki Hirano*
+## Rails 6.0.0.beta1 (January 18, 2019) ##
 
-*   Optimize indentation for generator actions.
+*   Remove deprecated `after_bundle` helper inside plugins templates.
 
-    *Yoshiyuki Hirano*
+    *Rafael Mendonça França*
 
-*   Skip unused components when running `bin/rails` in Rails plugin.
+*   Remove deprecated support to old `config.ru` that use the application class as argument of `run`.
 
-    *Yoshiyuki Hirano*
+    *Rafael Mendonça França*
 
-*   Add `git_source` to `Gemfile` for plugin generator.
+*   Remove deprecated `environment` argument from the rails commands.
 
-    *Yoshiyuki Hirano*
+    *Rafael Mendonça França*
 
-*   Add `--skip-action-cable` option to the plugin generator.
+*   Remove deprecated `capify!`.
 
-    *bogdanvlviv*
+    *Rafael Mendonça França*
 
-*   Deprecate support for using a `Rails::Application` subclass to start Rails server.
+*   Remove deprecated `config.secret_token`.
 
-    *Yuji Yaginuma*
+    *Rafael Mendonça França*
 
-*   Add `ruby x.x.x` version to `Gemfile` and create `.ruby-version`
-    root file containing the current Ruby version when new Rails applications are
-    created.
+*   Seed database with inline ActiveJob job adapter.
 
-    *Alberto Almagro*
+    *Gannon McGibbon*
 
-*   Support `-` as a platform-agnostic way to run a script from stdin with
-    `rails runner`
+*   Add `rails db:system:change` command for changing databases.
 
-    *Cody Cutrer*
+    ```
+    bin/rails db:system:change --to=postgresql
+       force  config/database.yml
+        gsub  Gemfile
+    ```
 
-*   Add `bootsnap` to default `Gemfile`.
+    The change command copies a template `config/database.yml` with
+    the target database adapter into your app, and replaces your database gem
+    with the target database gem.
 
-    *Burke Libbey*
+    *Gannon McGibbon*
 
-*   Properly expand shortcuts for environment's name running the `console`
-    and `dbconsole` commands.
+*   Add `rails test:channels`.
 
-    *Robin Dupret*
+    *bogdanvlviv*
 
-*   Passing the environment's name as a regular argument to the
-    `rails dbconsole` and `rails console` commands is deprecated.
-    The `-e` option should be used instead.
+*   Use original `bundler` environment variables during the process of generating a new rails project.
 
-    Previously:
+    *Marco Costa*
 
-        $ bin/rails dbconsole production
+*   Send Active Storage analysis and purge jobs to dedicated queues by default.
 
-    Now:
+    Analysis jobs now use the `:active_storage_analysis` queue, and purge jobs
+    now use the `:active_storage_purge` queue. This matches Action Mailbox,
+    which sends its jobs to dedicated queues by default.
 
-        $ bin/rails dbconsole -e production
+    *George Claghorn*
 
-    *Robin Dupret*, *Kasper Timm Hansen*
+*   Add `rails test:mailboxes`.
 
-*   Allow passing a custom connection name to the `rails dbconsole`
-    command when using a 3-level database configuration.
+    *George Claghorn*
 
-        $ bin/rails dbconsole -c replica
+*   Introduce guard against DNS rebinding attacks.
 
-    *Robin Dupret*, *Jeremy Daer*
+    The `ActionDispatch::HostAuthorization` is a new middleware that prevents
+    against DNS rebinding and other `Host` header attacks. It is included in
+    the development environment by default with the following configuration:
 
-*   Skip unused components when running `bin/rails app:update`.
+        Rails.application.config.hosts = [
+          IPAddr.new("0.0.0.0/0"), # All IPv4 addresses.
+          IPAddr.new("::/0"),      # All IPv6 addresses.
+          "localhost"              # The localhost reserved domain.
+        ]
 
-    If the initial app generation skipped Action Cable, Active Record etc.,
-    the update task honors those skips too.
+    In other environments `Rails.application.config.hosts` is empty and no
+    `Host` header checks will be done. If you want to guard against header
+    attacks on production, you have to manually permit the allowed hosts
+    with:
 
-    *Yuji Yaginuma*
+        Rails.application.config.hosts << "product.com"
 
-*   Make Rails' test runner work better with minitest plugins.
+    The host of a request is checked against the `hosts` entries with the case
+    operator (`#===`), which lets `hosts` support entries of type `Regexp`,
+    `Proc` and `IPAddr` to name a few. Here is an example with a regexp.
 
-    By demoting the Rails test runner to just another minitest plugin —
-    and thereby not eager loading it — we can co-exist much better with
-    other minitest plugins such as pride and minitest-focus.
+        # Allow requests from subdomains like `www.product.com` and
+        # `beta1.product.com`.
+        Rails.application.config.hosts << /.*\.product\.com/
 
-    *Kasper Timm Hansen*
+    A special case is supported that allows you to permit all sub-domains:
 
-*   Load environment file in `dbconsole` command.
+        # Allow requests from subdomains like `www.product.com` and
+        # `beta1.product.com`.
+        Rails.application.config.hosts << ".product.com"
 
-    Fixes #29717.
+    *Genadi Samokovarov*
 
-    *Yuji Yaginuma*
+*   Remove redundant suffixes on generated helpers.
 
-*   Add `rails secrets:show` command.
+    *Gannon McGibbon*
 
-    *Yuji Yaginuma*
+*   Remove redundant suffixes on generated integration tests.
+
+    *Gannon McGibbon*
 
-*   Allow mounting the same engine several times in different locations.
+*   Fix boolean interaction in scaffold system tests.
 
-    Fixes #20204.
+    *Gannon McGibbon*
+
+*   Remove redundant suffixes on generated system tests.
+
+    *Gannon McGibbon*
+
+*   Add an `abort_on_failure` boolean option to the generator method that shell
+    out (`generate`, `rake`, `rails_command`) to abort the generator if the
+    command fails.
 
     *David Rodríguez*
 
-*   Clear screenshot files in `tmp:clear` task.
+*   Remove `app/assets` and `app/javascript` from `eager_load_paths` and `autoload_paths`.
+
+    *Gannon McGibbon*
+
+*   Use Ids instead of memory addresses when displaying references in scaffold views.
+
+    Fixes #29200.
+
+    *Rasesh Patel*
+
+*   Adds support for multiple databases to `rails db:migrate:status`.
+    Subtasks are also added to get the status of individual databases (eg. `rails db:migrate:status:animals`).
+
+    *Gannon McGibbon*
+
+*   Use Webpacker by default to manage app-level JavaScript through the new app/javascript directory.
+    Sprockets is now solely in charge, by default, of compiling CSS and other static assets.
+    Action Cable channel generators will create ES6 stubs rather than use CoffeeScript.
+    Active Storage, Action Cable, Turbolinks, and Rails-UJS are loaded by a new application.js pack.
+    Generators no longer generate JavaScript stubs.
+
+    *DHH*, *Lachlan Sylvester*
+
+*   Add `database` (aliased as `db`) option to model generator to allow
+    setting the database. This is useful for applications that use
+    multiple databases and put migrations per database in their own directories.
+
+    ```
+    bin/rails g model Room capacity:integer --database=kingston
+          invoke  active_record
+          create    db/kingston_migrate/20180830151055_create_rooms.rb
+    ```
+
+    Because rails scaffolding uses the model generator, you can
+    also specify a database with the scaffold generator.
+
+    *Gannon McGibbon*
+
+*   Raise an error when "recyclable cache keys" are being used by a cache store
+    that does not explicitly support it. Custom cache keys that do support this feature
+    can bypass this error by implementing the `supports_cache_versioning?` method on their
+    class and returning a truthy value.
+
+    *Richard Schneeman*
+
+*   Support environment specific credentials overrides.
+
+    So any environment will look for `config/credentials/#{Rails.env}.yml.enc` and fall back
+    to `config/credentials.yml.enc`.
+
+    The encryption key can be in `ENV["RAILS_MASTER_KEY"]` or `config/credentials/production.key`.
+
+    Environment credentials overrides can be edited with `rails credentials:edit --environment production`.
+    If no override is set up for the passed environment, it will be created.
+
+    Additionally, the default lookup paths can be overwritten with these configs:
+
+    - `config.credentials.content_path`
+    - `config.credentials.key_path`
+
+    *Wojciech Wnętrzak*
+
+*   Make `ActiveSupport::Cache::NullStore` the default cache store in the test environment.
+
+    *Michael C. Nelson*
+
+*   Emit warning for unknown inflection rule when generating model.
+
+    *Yoshiyuki Kinjo*
+
+*   Add `database` (aliased as `db`) option to migration generator.
+
+    If you're using multiple databases and have a folder for each database
+    for migrations (ex db/migrate and db/new_db_migrate) you can now pass the
+    `--database` option to the generator to make sure the the migration
+    is inserted into the correct folder.
+
+    ```
+    rails g migration CreateHouses --database=kingston
+      invoke  active_record
+      create    db/kingston_migrate/20180830151055_create_houses.rb
+    ```
+
+    *Eileen M. Uchitelle*
+
+*   Deprecate `rake routes` in favor of `rails routes`.
 
     *Yuji Yaginuma*
 
-*   Add `railtie.rb` to the plugin generator
+*   Deprecate `rake initializers` in favor of `rails initializers`.
+
+    *Annie-Claude Côté*
+
+*   Deprecate `rake dev:cache` in favor of `rails dev:cache`.
+
+    *Annie-Claude Côté*
+
+*   Deprecate `rails notes` subcommands in favor of passing an `annotations` argument to `rails notes`.
+
+    The following subcommands are replaced by passing `--annotations` or `-a` to `rails notes`:
+    - `rails notes:custom ANNOTATION=custom` is deprecated in favor of using `rails notes -a custom`.
+    - `rails notes:optimize` is deprecated in favor of using `rails notes -a OPTIMIZE`.
+    - `rails notes:todo` is deprecated in favor of  using`rails notes -a TODO`.
+    - `rails notes:fixme` is deprecated in favor of using `rails notes -a FIXME`.
+
+    *Annie-Claude Côté*
+
+*   Deprecate `SOURCE_ANNOTATION_DIRECTORIES` environment variable used by `rails notes`
+    through `Rails::SourceAnnotationExtractor::Annotation` in favor of using `config.annotations.register_directories`.
+
+    *Annie-Claude Côté*
+
+*   Deprecate `rake notes` in favor of `rails notes`.
+
+    *Annie-Claude Côté*
+
+*   Don't generate unused files in `app:update` task.
+
+    Skip the assets' initializer when sprockets isn't loaded.
+
+    Skip `config/spring.rb` when spring isn't loaded.
+
+    Skip yarn's contents when yarn integration isn't used.
 
     *Tsukuru Tanimichi*
 
-*   Deprecate `capify!` method in generators and templates.
+*   Make the master.key file read-only for the owner upon generation on
+    POSIX-compliant systems.
 
-    *Yuji Yaginuma*
+    Previously:
+
+        $ ls -l config/master.key
+        -rw-r--r--   1 owner  group      32 Jan 1 00:00 master.key
+
+    Now:
+
+        $ ls -l config/master.key
+        -rw-------   1 owner  group      32 Jan 1 00:00 master.key
 
-*   Allow irb options to be passed from `rails console` command.
+    Fixes #32604.
+
+    *Jose Luis Duran*
 
-    Fixes #28988.
+*   Deprecate support for using the `HOST` environment variable to specify the server IP.
+
+    The `BINDING` environment variable should be used instead.
+
+    Fixes #29516.
 
     *Yuji Yaginuma*
 
-*   Added a shared section to `config/database.yml` that will be loaded for all environments.
+*   Deprecate passing Rack server name as a regular argument to `rails server`.
+
+    Previously:
+
+        $ bin/rails server thin
+
+    There wasn't an explicit option for the Rack server to use, now we have the
+    `--using` option with the `-u` short switch.
+
+    Now:
+
+        $ bin/rails server -u thin
+
+    This change also improves the error message if a missing or mistyped rack
+    server is given.
+
+    *Genadi Samokovarov*
+
+*   Add "rails routes --expanded" option to output routes in expanded mode like
+    "psql --expanded". Result looks like:
+
+    ```
+    $ rails routes --expanded
+    --[ Route 1 ]------------------------------------------------------------
+    Prefix            | high_scores
+    Verb              | GET
+    URI               | /high_scores(.:format)
+    Controller#Action | high_scores#index
+    --[ Route 2 ]------------------------------------------------------------
+    Prefix            | new_high_score
+    Verb              | GET
+    URI               | /high_scores/new(.:format)
+    Controller#Action | high_scores#new
+    ```
 
-    *Pierre Schambacher*
+    *Benoit Tigeot*
 
-*   Namespace error pages' CSS selectors to stop the styles from bleeding into other pages
-    when using Turbolinks.
+*   Rails 6 requires Ruby 2.5.0 or newer.
 
-    *Jan Krutisch*
+    *Jeremy Daer*, *Kasper Timm Hansen*
 
 
-Please check [5-1-stable](https://github.com/rails/rails/blob/5-1-stable/railties/CHANGELOG.md) for previous changes.
+Please check [5-2-stable](https://github.com/rails/rails/blob/5-2-stable/railties/CHANGELOG.md) for previous changes.