RubyGems - railties - Versions diffs - 5.2.3 → 6.0.0 - Mend

railties 5.2.3 → 6.0.0

Files changed (158) hide show

checksums.yaml CHANGED

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e4a69a54be1b33b98f67a2a6932d9f2d540d4ca4d709e71b76a63a69bcd929c2
-  data.tar.gz: 744e8d2b51e5a551e55b7dee2c24290c025ca1e878cc4e694e92d2a78ab06ffe
+  metadata.gz: 2b04a08eb82e879b82eedd995b752a67d28034ca4e739d85af4a3150cf13f78a
+  data.tar.gz: 2623b97396462dcedff1b752f1f4e22f96a41002b72c3bae0e09bf6fe8a6d16c
 SHA512:
-  metadata.gz: 52fc352ae01776093655bb8b91d7489613a4ca2d185dca1de781f60230f5a91355c96f193c22ec8c8b177482e097b35e867020c4a0138a7e5bba4457ffda1621
-  data.tar.gz: 53259a4704e7f80beddce4c93db9ef66fc0702907afbe52574bbac98f3e7cea5d8e2eeab4ca434255732a79d6b46c281f7751294982521491485254fec0da24e
+  metadata.gz: ff9939eadf0ff8eb72a75d5d74cae7ad54df7947e3b0a1dcefe03bcd53c06c510034e52bad63db94530abf245bc72e90600f19a7077632e8d4ba4b5de50a8fe0
+  data.tar.gz: 0b29fe874bf1a37eca8377cec2e3ecfd96d3d97bf4b8907995eb26f476b62aee22143b9f9375a05c946d6a75953e8dc95c1f5005a1b81df664fd1321d9aed709

data/CHANGELOG.md CHANGED

@@ -1,249 +1,429 @@
-## Rails 5.2.3 (March 27, 2019) ##
+## Rails 6.0.0 (August 16, 2019) ##
-*   Seed database with inline ActiveJob job adapter.
+*   `Rails.autoloaders.log!` is a logging shortcut to get the activity of the
+    loaders printed to standard output. May be handy for troubleshooting.
-    *Gannon McGibbon*
+    *Xavier Noria*
-*   Fix boolean interaction in scaffold system tests.
-    *Gannon McGibbon*
+## Rails 6.0.0.rc2 (July 22, 2019) ##
+*   The new configuration point `config.add_autoload_paths_to_load_path` allows
+    users to opt-out from adding autoload paths to `$LOAD_PATH`. This flag is
+    `true` by default, but it is recommended to be set to `false` in `:zeitwerk`
+    mode early, in `config/application.rb`.
-## Rails 5.2.2.1 (March 11, 2019) ##
+    Zeitwerk uses only absolute paths internally, and applications running in
+    `:zeitwerk` mode do not need `require_dependency`, so models, controllers,
+    jobs, etc. do not need to be in `$LOAD_PATH`. Setting this to `false` saves
+    Ruby from checking these directories when resolving `require` calls with
+    relative paths, and saves Bootsnap work and RAM, since it does not need to
+    build an index for them.
-*   No changes.
+    *Xavier Noria*
+## Rails 6.0.0.rc1 (April 24, 2019) ##
-## Rails 5.2.2 (December 04, 2018) ##
+*   Applications upgrading to Rails 6 can run the command
-*   Disable content security policy for mailer previews.
+    ```
+    bin/rails zeitwerk:check
+    ```
-    *Dylan Reile*
+    to check if the project structure they were using with the classic
+    autoloader is compatible with `:zeitwerk` mode.
-*   Log the remote IP address of clients behind a proxy.
+    *Matilda Smeds* & *Xavier Noria*
-    *Atul Bhosale*
+*   Allow loading seeds without ActiveJob.
+    Fixes #35782
-## Rails 5.2.1.1 (November 27, 2018) ##
+    *Jeremy Weathers*
-*   No changes.
+*   `null: false` is set in the migrations by default for column pointed by
+    `belongs_to` / `references` association generated by model generator.
+    Also deprecate passing {required} to the model generator.
-## Rails 5.2.1 (August 07, 2018) ##
+    *Prathamesh Sonpatki*
-*   Respect `NODE_ENV` when running `rails yarn:install`.
+*   New applications get `config.cache_classes = false` in `config/environments/test.rb`
+    unless `--skip-spring`.
-    *Max Melentiev*
+    *Xavier Noria*
-*   Don't generate unused files in `app:update` task
+*   Autoloading during initialization is deprecated.
-     Skip the assets' initializer when sprockets isn't loaded.
+    *Xavier Noria*
-     Skip `config/spring.rb` when spring isn't loaded.
+*   Only force `:async` ActiveJob adapter to `:inline` during seeding.
-    *Tsukuru Tanimichi*
+    *BatedUrGonnaDie*
-*   Don't include `bootsnap` by default in apps generated under JRuby.
+*   The `connection` option of `rails dbconsole` command is deprecated in
+    favor of `database` option.
-    Fixes #32641.
+    *Yuji Yaginuma*
-    *Guillermo Iguaran*
+*   Replace `chromedriver-helper` gem with `webdrivers` in default Gemfile.
+    `chromedriver-helper` is deprecated as of March 31, 2019 and won't
+    receive any further updates.
-*   Create the `.ruby-version` file compatible with MRI/JRuby by default.
+    *Guillermo Iguaran‮*
-    Fixes #32639.
+*   Applications running in `:zeitwerk` mode that use `bootsnap` need
+    to upgrade `bootsnap` to at least 1.4.2.
-    *Guillermo Iguaran*
+    *Xavier Noria*
-*   Make the master.key file read-only for the owner upon generation on
-    POSIX-compliant systems.
+*   Add `config.disable_sandbox` option to Rails console.
-    Previously:
+    This setting will disable `rails console --sandbox` mode, preventing
+    developer from accidentally starting a sandbox console,
+    which when left inactive, can cause the database server to run out of memory.
-        $ ls -l config/master.key
-        -rw-r--r--   1 owner  group      32 Jan 1 00:00 master.key
+    *Prem Sichanugrist*
-    Now:
+*   Add `-e/--environment` option to `rails initializers`.
-        $ ls -l config/master.key
-        -rw-------   1 owner  group      32 Jan 1 00:00 master.key
+    *Yuji Yaginuma*
-    Fixes #32604.
-    *Jose Luis Duran*
+## Rails 6.0.0.beta3 (March 11, 2019) ##
-*   Allow use of `minitest-rails` gem with Rails test runner.
+*   Generate random development secrets
-    Fixes #31324.
+    A random development secret is now generated to tmp/development_secret.txt
-    *Yuji Yaginuma*
+    This avoids an issue where development mode servers were vulnerable to
+    remote code execution.
+    Fixes CVE-2019-5420
-## Rails 5.2.0 (April 09, 2018) ##
+    *Eileen M. Uchitelle*, *Aaron Patterson*, *John Hawthorn*
-*   Fix minitest rails plugin.
-    The custom reporters are added only if needed.
+## Rails 6.0.0.beta2 (February 25, 2019) ##
-    This will fix conflicts with others plugins.
+*   Fix non-symbol access to nested hashes returned from `Rails::Application.config_for`
+    being broken by allowing non-symbol access with a deprecation notice.
-    *Kevin Robatel*
+    *Ufuk Kayserilioglu*
-*   Deprecate `after_bundle` callback in Rails plugin templates.
+*   Fix deeply nested namespace command printing.
-    *Yuji Yaginuma*
+    *Gannon McGibbon*
-*   `rails new` and `rails plugin new` get `Active Storage` by default.
-     Add ability to skip `Active Storage` with `--skip-active-storage`
-     and do so automatically when `--skip-active-record` is used.
-    *bogdanvlviv*
+## Rails 6.0.0.beta1 (January 18, 2019) ##
+*   Remove deprecated `after_bundle` helper inside plugins templates.
+    *Rafael Mendonça França*
+*   Remove deprecated support to old `config.ru` that use the application class as argument of `run`.
+    *Rafael Mendonça França*
+*   Remove deprecated `environment` argument from the rails commands.
-*   Gemfile for new apps: upgrade redis-rb from ~> 3.0 to 4.0.
+    *Rafael Mendonça França*
-    *Jeremy Daer*
+*   Remove deprecated `capify!`.
-*   Add `mini_magick` to default `Gemfile` as comment.
+    *Rafael Mendonça França*
-    *Yoshiyuki Hirano*
+*   Remove deprecated `config.secret_token`.
-*   Derive `secret_key_base` from the app name in development and test environments.
+    *Rafael Mendonça França*
-    Spares away needless secret configs.
+*   Seed database with inline ActiveJob job adapter.
+    *Gannon McGibbon*
-    *DHH*, *Kasper Timm Hansen*
+*   Add `rails db:system:change` command for changing databases.
-*   Support multiple versions arguments for `gem` method of Generators.
+    ```
+    bin/rails db:system:change --to=postgresql
+       force  config/database.yml
+        gsub  Gemfile
+    ```
-    *Yoshiyuki Hirano*
+    The change command copies a template `config/database.yml` with
+    the target database adapter into your app, and replaces your database gem
+    with the target database gem.
-*   Add `--skip-yarn` option to the plugin generator.
+    *Gannon McGibbon*
+*   Add `rails test:channels`.
     *bogdanvlviv*
-*   Optimize routes indentation.
+*   Use original `bundler` environment variables during the process of generating a new rails project.
-    *Yoshiyuki Hirano*
+    *Marco Costa*
-*   Optimize indentation for generator actions.
+*   Send Active Storage analysis and purge jobs to dedicated queues by default.
-    *Yoshiyuki Hirano*
+    Analysis jobs now use the `:active_storage_analysis` queue, and purge jobs
+    now use the `:active_storage_purge` queue. This matches Action Mailbox,
+    which sends its jobs to dedicated queues by default.
-*   Skip unused components when running `bin/rails` in Rails plugin.
+    *George Claghorn*
-    *Yoshiyuki Hirano*
+*   Add `rails test:mailboxes`.
-*   Add `git_source` to `Gemfile` for plugin generator.
+    *George Claghorn*
-    *Yoshiyuki Hirano*
+*   Introduce guard against DNS rebinding attacks.
-*   Add `--skip-action-cable` option to the plugin generator.
+    The `ActionDispatch::HostAuthorization` is a new middleware that prevents
+    against DNS rebinding and other `Host` header attacks. It is included in
+    the development environment by default with the following configuration:
-    *bogdanvlviv*
+        Rails.application.config.hosts = [
+          IPAddr.new("0.0.0.0/0"), # All IPv4 addresses.
+          IPAddr.new("::/0"),      # All IPv6 addresses.
+          "localhost"              # The localhost reserved domain.
+        ]
-*   Deprecate support for using a `Rails::Application` subclass to start Rails server.
+    In other environments `Rails.application.config.hosts` is empty and no
+    `Host` header checks will be done. If you want to guard against header
+    attacks on production, you have to manually permit the allowed hosts
+    with:
-    *Yuji Yaginuma*
+        Rails.application.config.hosts << "product.com"
-*   Add `ruby x.x.x` version to `Gemfile` and create `.ruby-version`
-    root file containing the current Ruby version when new Rails applications are
-    created.
+    The host of a request is checked against the `hosts` entries with the case
+    operator (`#===`), which lets `hosts` support entries of type `Regexp`,
+    `Proc` and `IPAddr` to name a few. Here is an example with a regexp.
-    *Alberto Almagro*
+        # Allow requests from subdomains like `www.product.com` and
+        # `beta1.product.com`.
+        Rails.application.config.hosts << /.*\.product\.com/
-*   Support `-` as a platform-agnostic way to run a script from stdin with
-    `rails runner`
+    A special case is supported that allows you to permit all sub-domains:
-    *Cody Cutrer*
+        # Allow requests from subdomains like `www.product.com` and
+        # `beta1.product.com`.
+        Rails.application.config.hosts << ".product.com"
-*   Add `bootsnap` to default `Gemfile`.
+    *Genadi Samokovarov*
-    *Burke Libbey*
+*   Remove redundant suffixes on generated helpers.
-*   Properly expand shortcuts for environment's name running the `console`
-    and `dbconsole` commands.
+    *Gannon McGibbon*
-    *Robin Dupret*
+*   Remove redundant suffixes on generated integration tests.
-*   Passing the environment's name as a regular argument to the
-    `rails dbconsole` and `rails console` commands is deprecated.
-    The `-e` option should be used instead.
+    *Gannon McGibbon*
-    Previously:
+*   Fix boolean interaction in scaffold system tests.
-        $ bin/rails dbconsole production
+    *Gannon McGibbon*
-    Now:
+*   Remove redundant suffixes on generated system tests.
-        $ bin/rails dbconsole -e production
+    *Gannon McGibbon*
-    *Robin Dupret*, *Kasper Timm Hansen*
+*   Add an `abort_on_failure` boolean option to the generator method that shell
+    out (`generate`, `rake`, `rails_command`) to abort the generator if the
+    command fails.
-*   Allow passing a custom connection name to the `rails dbconsole`
-    command when using a 3-level database configuration.
+    *David Rodríguez*
-        $ bin/rails dbconsole -c replica
+*   Remove `app/assets` and `app/javascript` from `eager_load_paths` and `autoload_paths`.
-    *Robin Dupret*, *Jeremy Daer*
+    *Gannon McGibbon*
-*   Skip unused components when running `bin/rails app:update`.
+*   Use Ids instead of memory addresses when displaying references in scaffold views.
-    If the initial app generation skipped Action Cable, Active Record etc.,
-    the update task honors those skips too.
+    Fixes #29200.
-    *Yuji Yaginuma*
+    *Rasesh Patel*
-*   Make Rails' test runner work better with minitest plugins.
+*   Adds support for multiple databases to `rails db:migrate:status`.
+    Subtasks are also added to get the status of individual databases (eg. `rails db:migrate:status:animals`).
-    By demoting the Rails test runner to just another minitest plugin —
-    and thereby not eager loading it — we can co-exist much better with
-    other minitest plugins such as pride and minitest-focus.
+    *Gannon McGibbon*
-    *Kasper Timm Hansen*
+*   Use Webpacker by default to manage app-level JavaScript through the new app/javascript directory.
+    Sprockets is now solely in charge, by default, of compiling CSS and other static assets.
+    Action Cable channel generators will create ES6 stubs rather than use CoffeeScript.
+    Active Storage, Action Cable, Turbolinks, and Rails-UJS are loaded by a new application.js pack.
+    Generators no longer generate JavaScript stubs.
-*   Load environment file in `dbconsole` command.
+    *DHH*, *Lachlan Sylvester*
-    Fixes #29717.
+*   Add `database` (aliased as `db`) option to model generator to allow
+    setting the database. This is useful for applications that use
+    multiple databases and put migrations per database in their own directories.
-    *Yuji Yaginuma*
+    ```
+    bin/rails g model Room capacity:integer --database=kingston
+          invoke  active_record
+          create    db/kingston_migrate/20180830151055_create_rooms.rb
+    ```
-*   Add `rails secrets:show` command.
+    Because rails scaffolding uses the model generator, you can
+    also specify a database with the scaffold generator.
-    *Yuji Yaginuma*
+    *Gannon McGibbon*
-*   Allow mounting the same engine several times in different locations.
+*   Raise an error when "recyclable cache keys" are being used by a cache store
+    that does not explicitly support it. Custom cache keys that do support this feature
+    can bypass this error by implementing the `supports_cache_versioning?` method on their
+    class and returning a truthy value.
-    Fixes #20204.
+    *Richard Schneeman*
-    *David Rodríguez*
+*   Support environment specific credentials overrides.
+    So any environment will look for `config/credentials/#{Rails.env}.yml.enc` and fall back
+    to `config/credentials.yml.enc`.
+    The encryption key can be in `ENV["RAILS_MASTER_KEY"]` or `config/credentials/production.key`.
+    Environment credentials overrides can be edited with `rails credentials:edit --environment production`.
+    If no override is set up for the passed environment, it will be created.
+    Additionally, the default lookup paths can be overwritten with these configs:
-*   Clear screenshot files in `tmp:clear` task.
+    - `config.credentials.content_path`
+    - `config.credentials.key_path`
+    *Wojciech Wnętrzak*
+*   Make `ActiveSupport::Cache::NullStore` the default cache store in the test environment.
+    *Michael C. Nelson*
+*   Emit warning for unknown inflection rule when generating model.
+    *Yoshiyuki Kinjo*
+*   Add `database` (aliased as `db`) option to migration generator.
+    If you're using multiple databases and have a folder for each database
+    for migrations (ex db/migrate and db/new_db_migrate) you can now pass the
+    `--database` option to the generator to make sure the the migration
+    is inserted into the correct folder.
+    ```
+    rails g migration CreateHouses --database=kingston
+      invoke  active_record
+      create    db/kingston_migrate/20180830151055_create_houses.rb
+    ```
+    *Eileen M. Uchitelle*
+*   Deprecate `rake routes` in favor of `rails routes`.
     *Yuji Yaginuma*
-*   Add `railtie.rb` to the plugin generator
+*   Deprecate `rake initializers` in favor of `rails initializers`.
+    *Annie-Claude Côté*
+*   Deprecate `rake dev:cache` in favor of `rails dev:cache`.
+    *Annie-Claude Côté*
+*   Deprecate `rails notes` subcommands in favor of passing an `annotations` argument to `rails notes`.
+    The following subcommands are replaced by passing `--annotations` or `-a` to `rails notes`:
+    - `rails notes:custom ANNOTATION=custom` is deprecated in favor of using `rails notes -a custom`.
+    - `rails notes:optimize` is deprecated in favor of using `rails notes -a OPTIMIZE`.
+    - `rails notes:todo` is deprecated in favor of  using`rails notes -a TODO`.
+    - `rails notes:fixme` is deprecated in favor of using `rails notes -a FIXME`.
+    *Annie-Claude Côté*
+*   Deprecate `SOURCE_ANNOTATION_DIRECTORIES` environment variable used by `rails notes`
+    through `Rails::SourceAnnotationExtractor::Annotation` in favor of using `config.annotations.register_directories`.
+    *Annie-Claude Côté*
+*   Deprecate `rake notes` in favor of `rails notes`.
+    *Annie-Claude Côté*
+*   Don't generate unused files in `app:update` task.
+    Skip the assets' initializer when sprockets isn't loaded.
+    Skip `config/spring.rb` when spring isn't loaded.
+    Skip yarn's contents when yarn integration isn't used.
     *Tsukuru Tanimichi*
-*   Deprecate `capify!` method in generators and templates.
+*   Make the master.key file read-only for the owner upon generation on
+    POSIX-compliant systems.
+    Previously:
-    *Yuji Yaginuma*
+        $ ls -l config/master.key
+        -rw-r--r--   1 owner  group      32 Jan 1 00:00 master.key
+    Now:
+        $ ls -l config/master.key
+        -rw-------   1 owner  group      32 Jan 1 00:00 master.key
+    Fixes #32604.
+    *Jose Luis Duran*
+*   Deprecate support for using the `HOST` environment variable to specify the server IP.
-*   Allow irb options to be passed from `rails console` command.
+    The `BINDING` environment variable should be used instead.
-    Fixes #28988.
+    Fixes #29516.
     *Yuji Yaginuma*
-*   Added a shared section to `config/database.yml` that will be loaded for all environments.
+*   Deprecate passing Rack server name as a regular argument to `rails server`.
+    Previously:
+        $ bin/rails server thin
+    There wasn't an explicit option for the Rack server to use, now we have the
+    `--using` option with the `-u` short switch.
+    Now:
+        $ bin/rails server -u thin
+    This change also improves the error message if a missing or mistyped rack
+    server is given.
+    *Genadi Samokovarov*
+*   Add "rails routes --expanded" option to output routes in expanded mode like
+    "psql --expanded". Result looks like:
+    ```
+    $ rails routes --expanded
+    --[ Route 1 ]------------------------------------------------------------
+    Prefix            | high_scores
+    Verb              | GET
+    URI               | /high_scores(.:format)
+    Controller#Action | high_scores#index
+    --[ Route 2 ]------------------------------------------------------------
+    Prefix            | new_high_score
+    Verb              | GET
+    URI               | /high_scores/new(.:format)
+    Controller#Action | high_scores#new
+    ```
-    *Pierre Schambacher*
+    *Benoit Tigeot*
-*   Namespace error pages' CSS selectors to stop the styles from bleeding into other pages
-    when using Turbolinks.
+*   Rails 6 requires Ruby 2.5.0 or newer.
-    *Jan Krutisch*
+    *Jeremy Daer*, *Kasper Timm Hansen*
-Please check [5-1-stable](https://github.com/rails/rails/blob/5-1-stable/railties/CHANGELOG.md) for previous changes.
+Please check [5-2-stable](https://github.com/rails/rails/blob/5-2-stable/railties/CHANGELOG.md) for previous changes.