railties 5.2.3 → 6.0.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e4a69a54be1b33b98f67a2a6932d9f2d540d4ca4d709e71b76a63a69bcd929c2
-  data.tar.gz: 744e8d2b51e5a551e55b7dee2c24290c025ca1e878cc4e694e92d2a78ab06ffe
+  metadata.gz: 8978d3b263c42b7a7f85938aa1440c25f6796c9be7616280cf2c97930e088a70
+  data.tar.gz: 4f29426a081d75ad0716dfd4780280f62def9d25dcffa7b614b6c64e764cb9ad
 SHA512:
-  metadata.gz: 52fc352ae01776093655bb8b91d7489613a4ca2d185dca1de781f60230f5a91355c96f193c22ec8c8b177482e097b35e867020c4a0138a7e5bba4457ffda1621
-  data.tar.gz: 53259a4704e7f80beddce4c93db9ef66fc0702907afbe52574bbac98f3e7cea5d8e2eeab4ca434255732a79d6b46c281f7751294982521491485254fec0da24e
+  metadata.gz: 4da34a4d6f2bb8c0d3b0d0580a785a6b31fa591c3875b47dd9f8ceeb30a7c7f19a0ec282f511be8f2f9cbf0132ddd29e4b21f8562beeeec3519935d143ef9f0f
+  data.tar.gz: e96e83bf20181c578bc056b63a47397ea1db2d3075cbb9c1a88b79b4b19ce5e076dbc15a05fe9ec9e35b8f3724f075ce4cdb64df8ba7c037dd8524b5916bf938

data/CHANGELOG.md

@@ -1,249 +1,451 @@
-## Rails 5.2.3 (March 27, 2019) ##
+## Rails 6.0.1 (November 5, 2019) ##
 
-*   Seed database with inline ActiveJob job adapter.
+*   The `zeitwerk:check` Rake task reports files outside the app's root
+    directory, as in engines loaded from gems.
 
-    *Gannon McGibbon*
+    *Xavier Noria*
 
-*   Fix boolean interaction in scaffold system tests.
+*   Fixed a possible error when using the evented file update checker.
 
-    *Gannon McGibbon*
+    *Yuji Yaginuma*
 
+*   The sqlite3 database files created by the parallel testing feature are
+    included in the default `.gitignore` file for newly-generated apps.
 
-## Rails 5.2.2.1 (March 11, 2019) ##
+    *Yasuo Honda*
 
-*   No changes.
+*   `rails new` generates a `.keep` file in `tmp/pids`. This fixes starting
+    a server via `rackup` instead of `rails server`.
 
+    *Rafael Mendonça França*
 
-## Rails 5.2.2 (December 04, 2018) ##
 
-*   Disable content security policy for mailer previews.
+## Rails 6.0.0 (August 16, 2019) ##
 
-    *Dylan Reile*
+*   `Rails.autoloaders.log!` is a logging shortcut to get the activity of the
+    loaders printed to standard output. May be handy for troubleshooting.
 
-*   Log the remote IP address of clients behind a proxy.
+    *Xavier Noria*
 
-    *Atul Bhosale*
 
+## Rails 6.0.0.rc2 (July 22, 2019) ##
 
-## Rails 5.2.1.1 (November 27, 2018) ##
+*   The new configuration point `config.add_autoload_paths_to_load_path` allows
+    users to opt-out from adding autoload paths to `$LOAD_PATH`. This flag is
+    `true` by default, but it is recommended to be set to `false` in `:zeitwerk`
+    mode early, in `config/application.rb`.
 
-*   No changes.
+    Zeitwerk uses only absolute paths internally, and applications running in
+    `:zeitwerk` mode do not need `require_dependency`, so models, controllers,
+    jobs, etc. do not need to be in `$LOAD_PATH`. Setting this to `false` saves
+    Ruby from checking these directories when resolving `require` calls with
+    relative paths, and saves Bootsnap work and RAM, since it does not need to
+    build an index for them.
 
+    *Xavier Noria*
 
-## Rails 5.2.1 (August 07, 2018) ##
+## Rails 6.0.0.rc1 (April 24, 2019) ##
 
-*   Respect `NODE_ENV` when running `rails yarn:install`.
+*   Applications upgrading to Rails 6 can run the command
 
-    *Max Melentiev*
+    ```
+    bin/rails zeitwerk:check
+    ```
 
-*   Don't generate unused files in `app:update` task
+    to check if the project structure they were using with the classic
+    autoloader is compatible with `:zeitwerk` mode.
 
-     Skip the assets' initializer when sprockets isn't loaded.
+    *Matilda Smeds* & *Xavier Noria*
 
-     Skip `config/spring.rb` when spring isn't loaded.
+*   Allow loading seeds without ActiveJob.
 
-    *Tsukuru Tanimichi*
+    Fixes #35782
 
-*   Don't include `bootsnap` by default in apps generated under JRuby.
+    *Jeremy Weathers*
 
-    Fixes #32641.
+*   `null: false` is set in the migrations by default for column pointed by
+    `belongs_to` / `references` association generated by model generator.
 
-    *Guillermo Iguaran*
+    Also deprecate passing {required} to the model generator.
 
-*   Create the `.ruby-version` file compatible with MRI/JRuby by default.
+    *Prathamesh Sonpatki*
 
-    Fixes #32639.
+*   New applications get `config.cache_classes = false` in `config/environments/test.rb`
+    unless `--skip-spring`.
 
-    *Guillermo Iguaran*
+    *Xavier Noria*
 
-*   Make the master.key file read-only for the owner upon generation on
-    POSIX-compliant systems.
+*   Autoloading during initialization is deprecated.
 
-    Previously:
+    *Xavier Noria*
 
-        $ ls -l config/master.key
-        -rw-r--r--   1 owner  group      32 Jan 1 00:00 master.key
+*   Only force `:async` ActiveJob adapter to `:inline` during seeding.
 
-    Now:
+    *BatedUrGonnaDie*
 
-        $ ls -l config/master.key
-        -rw-------   1 owner  group      32 Jan 1 00:00 master.key
+*   The `connection` option of `rails dbconsole` command is deprecated in
+    favor of `database` option.
 
-    Fixes #32604.
+    *Yuji Yaginuma*
 
-    *Jose Luis Duran*
+*   Replace `chromedriver-helper` gem with `webdrivers` in default Gemfile.
+    `chromedriver-helper` is deprecated as of March 31, 2019 and won't
+    receive any further updates.
+
+    *Guillermo Iguaran‮*
+
+*   Applications running in `:zeitwerk` mode that use `bootsnap` need
+    to upgrade `bootsnap` to at least 1.4.2.
+
+    *Xavier Noria*
+
+*   Add `config.disable_sandbox` option to Rails console.
+
+    This setting will disable `rails console --sandbox` mode, preventing
+    developer from accidentally starting a sandbox console,
+    which when left inactive, can cause the database server to run out of memory.
 
-*   Allow use of `minitest-rails` gem with Rails test runner.
+    *Prem Sichanugrist*
 
-    Fixes #31324.
+*   Add `-e/--environment` option to `rails initializers`.
 
     *Yuji Yaginuma*
 
 
-## Rails 5.2.0 (April 09, 2018) ##
+## Rails 6.0.0.beta3 (March 11, 2019) ##
 
-*   Fix minitest rails plugin.
+*   Generate random development secrets
 
-    The custom reporters are added only if needed.
+    A random development secret is now generated to tmp/development_secret.txt
 
-    This will fix conflicts with others plugins.
+    This avoids an issue where development mode servers were vulnerable to
+    remote code execution.
 
-    *Kevin Robatel*
+    Fixes CVE-2019-5420
 
-*   Deprecate `after_bundle` callback in Rails plugin templates.
+    *Eileen M. Uchitelle*, *Aaron Patterson*, *John Hawthorn*
 
-    *Yuji Yaginuma*
 
-*   `rails new` and `rails plugin new` get `Active Storage` by default.
-     Add ability to skip `Active Storage` with `--skip-active-storage`
-     and do so automatically when `--skip-active-record` is used.
+## Rails 6.0.0.beta2 (February 25, 2019) ##
 
-    *bogdanvlviv*
+*   Fix non-symbol access to nested hashes returned from `Rails::Application.config_for`
+    being broken by allowing non-symbol access with a deprecation notice.
 
-*   Gemfile for new apps: upgrade redis-rb from ~> 3.0 to 4.0.
+    *Ufuk Kayserilioglu*
 
-    *Jeremy Daer*
+*   Fix deeply nested namespace command printing.
 
-*   Add `mini_magick` to default `Gemfile` as comment.
+    *Gannon McGibbon*
 
-    *Yoshiyuki Hirano*
 
-*   Derive `secret_key_base` from the app name in development and test environments.
+## Rails 6.0.0.beta1 (January 18, 2019) ##
 
-    Spares away needless secret configs.
+*   Remove deprecated `after_bundle` helper inside plugins templates.
 
-    *DHH*, *Kasper Timm Hansen*
+    *Rafael Mendonça França*
 
-*   Support multiple versions arguments for `gem` method of Generators.
+*   Remove deprecated support to old `config.ru` that use the application class as argument of `run`.
 
-    *Yoshiyuki Hirano*
+    *Rafael Mendonça França*
 
-*   Add `--skip-yarn` option to the plugin generator.
+*   Remove deprecated `environment` argument from the rails commands.
 
-    *bogdanvlviv*
+    *Rafael Mendonça França*
 
-*   Optimize routes indentation.
+*   Remove deprecated `capify!`.
 
-    *Yoshiyuki Hirano*
+    *Rafael Mendonça França*
 
-*   Optimize indentation for generator actions.
+*   Remove deprecated `config.secret_token`.
 
-    *Yoshiyuki Hirano*
+    *Rafael Mendonça França*
 
-*   Skip unused components when running `bin/rails` in Rails plugin.
+*   Seed database with inline ActiveJob job adapter.
 
-    *Yoshiyuki Hirano*
+    *Gannon McGibbon*
 
-*   Add `git_source` to `Gemfile` for plugin generator.
+*   Add `rails db:system:change` command for changing databases.
 
-    *Yoshiyuki Hirano*
+    ```
+    bin/rails db:system:change --to=postgresql
+       force  config/database.yml
+        gsub  Gemfile
+    ```
 
-*   Add `--skip-action-cable` option to the plugin generator.
+    The change command copies a template `config/database.yml` with
+    the target database adapter into your app, and replaces your database gem
+    with the target database gem.
+
+    *Gannon McGibbon*
+
+*   Add `rails test:channels`.
 
     *bogdanvlviv*
 
-*   Deprecate support for using a `Rails::Application` subclass to start Rails server.
+*   Use original `bundler` environment variables during the process of generating a new rails project.
 
-    *Yuji Yaginuma*
+    *Marco Costa*
 
-*   Add `ruby x.x.x` version to `Gemfile` and create `.ruby-version`
-    root file containing the current Ruby version when new Rails applications are
-    created.
+*   Send Active Storage analysis and purge jobs to dedicated queues by default.
 
-    *Alberto Almagro*
+    Analysis jobs now use the `:active_storage_analysis` queue, and purge jobs
+    now use the `:active_storage_purge` queue. This matches Action Mailbox,
+    which sends its jobs to dedicated queues by default.
 
-*   Support `-` as a platform-agnostic way to run a script from stdin with
-    `rails runner`
+    *George Claghorn*
 
-    *Cody Cutrer*
+*   Add `rails test:mailboxes`.
 
-*   Add `bootsnap` to default `Gemfile`.
+    *George Claghorn*
 
-    *Burke Libbey*
+*   Introduce guard against DNS rebinding attacks.
 
-*   Properly expand shortcuts for environment's name running the `console`
-    and `dbconsole` commands.
+    The `ActionDispatch::HostAuthorization` is a new middleware that prevents
+    against DNS rebinding and other `Host` header attacks. It is included in
+    the development environment by default with the following configuration:
 
-    *Robin Dupret*
+        Rails.application.config.hosts = [
+          IPAddr.new("0.0.0.0/0"), # All IPv4 addresses.
+          IPAddr.new("::/0"),      # All IPv6 addresses.
+          "localhost"              # The localhost reserved domain.
+        ]
 
-*   Passing the environment's name as a regular argument to the
-    `rails dbconsole` and `rails console` commands is deprecated.
-    The `-e` option should be used instead.
+    In other environments `Rails.application.config.hosts` is empty and no
+    `Host` header checks will be done. If you want to guard against header
+    attacks on production, you have to manually permit the allowed hosts
+    with:
 
-    Previously:
+        Rails.application.config.hosts << "product.com"
 
-        $ bin/rails dbconsole production
+    The host of a request is checked against the `hosts` entries with the case
+    operator (`#===`), which lets `hosts` support entries of type `Regexp`,
+    `Proc` and `IPAddr` to name a few. Here is an example with a regexp.
 
-    Now:
+        # Allow requests from subdomains like `www.product.com` and
+        # `beta1.product.com`.
+        Rails.application.config.hosts << /.*\.product\.com/
+
+    A special case is supported that allows you to permit all sub-domains:
 
-        $ bin/rails dbconsole -e production
+        # Allow requests from subdomains like `www.product.com` and
+        # `beta1.product.com`.
+        Rails.application.config.hosts << ".product.com"
 
-    *Robin Dupret*, *Kasper Timm Hansen*
+    *Genadi Samokovarov*
 
-*   Allow passing a custom connection name to the `rails dbconsole`
-    command when using a 3-level database configuration.
+*   Remove redundant suffixes on generated helpers.
 
-        $ bin/rails dbconsole -c replica
+    *Gannon McGibbon*
 
-    *Robin Dupret*, *Jeremy Daer*
+*   Remove redundant suffixes on generated integration tests.
 
-*   Skip unused components when running `bin/rails app:update`.
+    *Gannon McGibbon*
 
-    If the initial app generation skipped Action Cable, Active Record etc.,
-    the update task honors those skips too.
+*   Fix boolean interaction in scaffold system tests.
 
-    *Yuji Yaginuma*
+    *Gannon McGibbon*
 
-*   Make Rails' test runner work better with minitest plugins.
+*   Remove redundant suffixes on generated system tests.
 
-    By demoting the Rails test runner to just another minitest plugin —
-    and thereby not eager loading it — we can co-exist much better with
-    other minitest plugins such as pride and minitest-focus.
+    *Gannon McGibbon*
 
-    *Kasper Timm Hansen*
+*   Add an `abort_on_failure` boolean option to the generator method that shell
+    out (`generate`, `rake`, `rails_command`) to abort the generator if the
+    command fails.
 
-*   Load environment file in `dbconsole` command.
+    *David Rodríguez*
 
-    Fixes #29717.
+*   Remove `app/assets` and `app/javascript` from `eager_load_paths` and `autoload_paths`.
 
-    *Yuji Yaginuma*
+    *Gannon McGibbon*
 
-*   Add `rails secrets:show` command.
+*   Use Ids instead of memory addresses when displaying references in scaffold views.
 
-    *Yuji Yaginuma*
+    Fixes #29200.
 
-*   Allow mounting the same engine several times in different locations.
+    *Rasesh Patel*
 
-    Fixes #20204.
+*   Adds support for multiple databases to `rails db:migrate:status`.
+    Subtasks are also added to get the status of individual databases (eg. `rails db:migrate:status:animals`).
 
-    *David Rodríguez*
+    *Gannon McGibbon*
+
+*   Use Webpacker by default to manage app-level JavaScript through the new app/javascript directory.
+    Sprockets is now solely in charge, by default, of compiling CSS and other static assets.
+    Action Cable channel generators will create ES6 stubs rather than use CoffeeScript.
+    Active Storage, Action Cable, Turbolinks, and Rails-UJS are loaded by a new application.js pack.
+    Generators no longer generate JavaScript stubs.
+
+    *DHH*, *Lachlan Sylvester*
+
+*   Add `database` (aliased as `db`) option to model generator to allow
+    setting the database. This is useful for applications that use
+    multiple databases and put migrations per database in their own directories.
+
+    ```
+    bin/rails g model Room capacity:integer --database=kingston
+          invoke  active_record
+          create    db/kingston_migrate/20180830151055_create_rooms.rb
+    ```
+
+    Because rails scaffolding uses the model generator, you can
+    also specify a database with the scaffold generator.
+
+    *Gannon McGibbon*
+
+*   Raise an error when "recyclable cache keys" are being used by a cache store
+    that does not explicitly support it. Custom cache keys that do support this feature
+    can bypass this error by implementing the `supports_cache_versioning?` method on their
+    class and returning a truthy value.
+
+    *Richard Schneeman*
+
+*   Support environment specific credentials overrides.
 
-*   Clear screenshot files in `tmp:clear` task.
+    So any environment will look for `config/credentials/#{Rails.env}.yml.enc` and fall back
+    to `config/credentials.yml.enc`.
+
+    The encryption key can be in `ENV["RAILS_MASTER_KEY"]` or `config/credentials/production.key`.
+
+    Environment credentials overrides can be edited with `rails credentials:edit --environment production`.
+    If no override is set up for the passed environment, it will be created.
+
+    Additionally, the default lookup paths can be overwritten with these configs:
+
+    - `config.credentials.content_path`
+    - `config.credentials.key_path`
+
+    *Wojciech Wnętrzak*
+
+*   Make `ActiveSupport::Cache::NullStore` the default cache store in the test environment.
+
+    *Michael C. Nelson*
+
+*   Emit warning for unknown inflection rule when generating model.
+
+    *Yoshiyuki Kinjo*
+
+*   Add `database` (aliased as `db`) option to migration generator.
+
+    If you're using multiple databases and have a folder for each database
+    for migrations (ex db/migrate and db/new_db_migrate) you can now pass the
+    `--database` option to the generator to make sure the the migration
+    is inserted into the correct folder.
+
+    ```
+    rails g migration CreateHouses --database=kingston
+      invoke  active_record
+      create    db/kingston_migrate/20180830151055_create_houses.rb
+    ```
+
+    *Eileen M. Uchitelle*
+
+*   Deprecate `rake routes` in favor of `rails routes`.
 
     *Yuji Yaginuma*
 
-*   Add `railtie.rb` to the plugin generator
+*   Deprecate `rake initializers` in favor of `rails initializers`.
+
+    *Annie-Claude Côté*
+
+*   Deprecate `rake dev:cache` in favor of `rails dev:cache`.
+
+    *Annie-Claude Côté*
+
+*   Deprecate `rails notes` subcommands in favor of passing an `annotations` argument to `rails notes`.
+
+    The following subcommands are replaced by passing `--annotations` or `-a` to `rails notes`:
+    - `rails notes:custom ANNOTATION=custom` is deprecated in favor of using `rails notes -a custom`.
+    - `rails notes:optimize` is deprecated in favor of using `rails notes -a OPTIMIZE`.
+    - `rails notes:todo` is deprecated in favor of  using`rails notes -a TODO`.
+    - `rails notes:fixme` is deprecated in favor of using `rails notes -a FIXME`.
+
+    *Annie-Claude Côté*
+
+*   Deprecate `SOURCE_ANNOTATION_DIRECTORIES` environment variable used by `rails notes`
+    through `Rails::SourceAnnotationExtractor::Annotation` in favor of using `config.annotations.register_directories`.
+
+    *Annie-Claude Côté*
+
+*   Deprecate `rake notes` in favor of `rails notes`.
+
+    *Annie-Claude Côté*
+
+*   Don't generate unused files in `app:update` task.
+
+    Skip the assets' initializer when sprockets isn't loaded.
+
+    Skip `config/spring.rb` when spring isn't loaded.
+
+    Skip yarn's contents when yarn integration isn't used.
 
     *Tsukuru Tanimichi*
 
-*   Deprecate `capify!` method in generators and templates.
+*   Make the master.key file read-only for the owner upon generation on
+    POSIX-compliant systems.
 
-    *Yuji Yaginuma*
+    Previously:
+
+        $ ls -l config/master.key
+        -rw-r--r--   1 owner  group      32 Jan 1 00:00 master.key
+
+    Now:
+
+        $ ls -l config/master.key
+        -rw-------   1 owner  group      32 Jan 1 00:00 master.key
+
+    Fixes #32604.
 
-*   Allow irb options to be passed from `rails console` command.
+    *Jose Luis Duran*
+
+*   Deprecate support for using the `HOST` environment variable to specify the server IP.
 
-    Fixes #28988.
+    The `BINDING` environment variable should be used instead.
+
+    Fixes #29516.
 
     *Yuji Yaginuma*
 
-*   Added a shared section to `config/database.yml` that will be loaded for all environments.
+*   Deprecate passing Rack server name as a regular argument to `rails server`.
+
+    Previously:
+
+        $ bin/rails server thin
+
+    There wasn't an explicit option for the Rack server to use, now we have the
+    `--using` option with the `-u` short switch.
+
+    Now:
+
+        $ bin/rails server -u thin
+
+    This change also improves the error message if a missing or mistyped rack
+    server is given.
+
+    *Genadi Samokovarov*
+
+*   Add "rails routes --expanded" option to output routes in expanded mode like
+    "psql --expanded". Result looks like:
+
+    ```
+    $ rails routes --expanded
+    --[ Route 1 ]------------------------------------------------------------
+    Prefix            | high_scores
+    Verb              | GET
+    URI               | /high_scores(.:format)
+    Controller#Action | high_scores#index
+    --[ Route 2 ]------------------------------------------------------------
+    Prefix            | new_high_score
+    Verb              | GET
+    URI               | /high_scores/new(.:format)
+    Controller#Action | high_scores#new
+    ```
 
-    *Pierre Schambacher*
+    *Benoit Tigeot*
 
-*   Namespace error pages' CSS selectors to stop the styles from bleeding into other pages
-    when using Turbolinks.
+*   Rails 6 requires Ruby 2.5.0 or newer.
 
-    *Jan Krutisch*
+    *Jeremy Daer*, *Kasper Timm Hansen*
 
 
-Please check [5-1-stable](https://github.com/rails/rails/blob/5-1-stable/railties/CHANGELOG.md) for previous changes.
+Please check [5-2-stable](https://github.com/rails/rails/blob/5-2-stable/railties/CHANGELOG.md) for previous changes.