RubyGems - railties - Versions diffs - 5.2.4.rc1 → 6.0.0.beta1 - Mend

railties 5.2.4.rc1 → 6.0.0.beta1

Potentially problematic release.

This version of railties might be problematic. Click here for more details.

Files changed (143) hide show

checksums.yaml CHANGED

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 596bc96d4a84b3fe00bf3a420eeddac6c9fa669d66f7f61143c80d85c46f12c4
-  data.tar.gz: 3d5d05d4bd393fcb62ed2ec4e723def22ac22ff78d8883eb738c0ca31b86c4eb
+  metadata.gz: 66f8f350ddf521a8fb2a51bddda33e6afc57c6e239ea0fe8bd23bea476d12c8f
+  data.tar.gz: e647293ffdbc4bbc4beddbde230d567e90de69183b5498729717f1bfda0b2890
 SHA512:
-  metadata.gz: 994c70d561ee85193606fe7050db9d56ff204c051cec9dd0da64c29c2e7c4e921a26809b7f4bf8e91e86fbf8eb6e00a953f05ef43181ece607691a6d7d1dd6c8
-  data.tar.gz: 5a8b698fcc30d66117962171a300d38dfc04fa06cf39e7228189ef963ae7d5a40abef2ba8d9735484eba26cf615f803f65f812908aa76ae2c75e6c095e085a05
+  metadata.gz: f62d369e32f4e40ef7d5f08af230bc70967627c5db1f68c4ab295c7942ac152f33af09bb1012a2d239fb260f411328d3cf78daf70e6d08329079b031ed2f453c
+  data.tar.gz: 786ff80d0075f5ff9adefe82ce44c249aa436c8a62f663c2c10d62bef204b84ed9b1a743b7866314756eb3ea86172f3468822736d01333d0cd04cd224fc1a46d

data/CHANGELOG.md CHANGED

@@ -1,275 +1,309 @@
-## Rails 5.2.4.rc1 (November 22, 2019) ##
+## Rails 6.0.0.beta1 (January 18, 2019) ##
-*   Use original `bundler` environment variables during the process of generating a new rails project.
+*   Remove deprecated `after_bundle` helper inside plugins templates.
-    *Marco Costa*
+    *Rafael Mendonça França*
-*   Allow loading seeds without ActiveJob.
+*   Remove deprecated support to old `config.ru` that use the application class as argument of `run`.
-    Fixes #35782
+    *Rafael Mendonça França*
-    *Jeremy Weathers*
+*   Remove deprecated `environment` argument from the rails commands.
-*   Only force `:async` ActiveJob adapter to `:inline` during seeding.
+    *Rafael Mendonça França*
-    *BatedUrGonnaDie*
+*   Remove deprecated `capify!`.
+    *Rafael Mendonça França*
-## Rails 5.2.3 (March 27, 2019) ##
+*   Remove deprecated `config.secret_token`.
-*   Seed database with inline ActiveJob job adapter.
-    *Gannon McGibbon*
+    *Rafael Mendonça França*
-*   Fix boolean interaction in scaffold system tests.
+*   Seed database with inline ActiveJob job adapter.
     *Gannon McGibbon*
+*   Add `rails db:system:change` command for changing databases.
-## Rails 5.2.2.1 (March 11, 2019) ##
+    ```
+    bin/rails db:system:change --to=postgresql
+       force  config/database.yml
+        gsub  Gemfile
+    ```
-*   Generate random development secrets
+    The change command copies a template `config/database.yml` with the target database adapter into your app, and replaces your database gem with the target database gem.
-    A random development secret is now generated to tmp/development_secret.txt
+    *Gannon McGibbon*
-    This avoids an issue where development mode servers were vulnerable to
-    remote code execution.
+*   Add `rails test:channels`.
-    Fixes CVE-2019-5420
+    *bogdanvlviv*
-    *Eileen M. Uchitelle*, *Aaron Patterson*, *John Hawthorn*
+*   Use original `bundler` environment variables during the process of generating a new rails project.
+    *Marco Costa*
-## Rails 5.2.2 (December 04, 2018) ##
+*   Send Active Storage analysis and purge jobs to dedicated queues by default.
-*   Disable content security policy for mailer previews.
+    Analysis jobs now use the `:active_storage_analysis` queue, and purge jobs
+    now use the `:active_storage_purge` queue. This matches Action Mailbox,
+    which sends its jobs to dedicated queues by default.
-    *Dylan Reile*
+    *George Claghorn*
-*   Log the remote IP address of clients behind a proxy.
+*   Add `rails test:mailboxes`.
-    *Atul Bhosale*
+    *George Claghorn*
+*   Introduce guard against DNS rebinding attacks
-## Rails 5.2.1.1 (November 27, 2018) ##
+    The `ActionDispatch::HostAuthorization` is a new middleware that prevent
+    against DNS rebinding and other `Host` header attacks. It is included in
+    the development environment by default with the following configuration:
-*   No changes.
+        Rails.application.config.hosts = [
+          IPAddr.new("0.0.0.0/0"), # All IPv4 addresses.
+          IPAddr.new("::/0"),      # All IPv6 addresses.
+          "localhost"              # The localhost reserved domain.
+        ]
+    In other environments `Rails.application.config.hosts` is empty and no
+    `Host` header checks will be done. If you want to guard against header
+    attacks on production, you have to manually whitelist the allowed hosts
+    with:
-## Rails 5.2.1 (August 07, 2018) ##
+        Rails.application.config.hosts << "product.com"
-*   Respect `NODE_ENV` when running `rails yarn:install`.
+    The host of a request is checked against the `hosts` entries with the case
+    operator (`#===`), which lets `hosts` support entries of type `RegExp`,
+    `Proc` and `IPAddr` to name a few. Here is an example with a regexp.
-    *Max Melentiev*
+        # Allow requests from subdomains like `www.product.com` and
+        # `beta1.product.com`.
+        Rails.application.config.hosts << /.*\.product\.com/
-*   Don't generate unused files in `app:update` task
+    A special case is supported that allows you to whitelist all sub-domains:
-     Skip the assets' initializer when sprockets isn't loaded.
+        # Allow requests from subdomains like `www.product.com` and
+        # `beta1.product.com`.
+        Rails.application.config.hosts << ".product.com"
-     Skip `config/spring.rb` when spring isn't loaded.
+    *Genadi Samokovarov*
-    *Tsukuru Tanimichi*
+*   Remove redundant suffixes on generated helpers.
-*   Don't include `bootsnap` by default in apps generated under JRuby.
+    *Gannon McGibbon*
-    Fixes #32641.
+*   Remove redundant suffixes on generated integration tests.
-    *Guillermo Iguaran*
+    *Gannon McGibbon*
-*   Create the `.ruby-version` file compatible with MRI/JRuby by default.
+*   Fix boolean interaction in scaffold system tests.
-    Fixes #32639.
+    *Gannon McGibbon*
-    *Guillermo Iguaran*
+*   Remove redundant suffixes on generated system tests.
-*   Make the master.key file read-only for the owner upon generation on
-    POSIX-compliant systems.
+    *Gannon McGibbon*
-    Previously:
+*   Add an `abort_on_failure` boolean option to the generator method that shell
+    out (`generate`, `rake`, `rails_command`) to abort the generator if the
+    command fails.
-        $ ls -l config/master.key
-        -rw-r--r--   1 owner  group      32 Jan 1 00:00 master.key
+    *David Rodríguez*
-    Now:
+*   Remove `app/assets` and `app/javascript` from `eager_load_paths` and `autoload_paths`.
-        $ ls -l config/master.key
-        -rw-------   1 owner  group      32 Jan 1 00:00 master.key
+    *Gannon McGibbon*
-    Fixes #32604.
+*   Use Ids instead of memory addresses when displaying references in scaffold views.
-    *Jose Luis Duran*
+    Fixes #29200.
-*   Allow use of `minitest-rails` gem with Rails test runner.
+    *Rasesh Patel*
-    Fixes #31324.
+*   Adds support for multiple databases to `rails db:migrate:status`.
+    Subtasks are also added to get the status of individual databases (eg. `rails db:migrate:status:animals`).
-    *Yuji Yaginuma*
+    *Gannon McGibbon*
+*   Use Webpacker by default to manage app-level JavaScript through the new app/javascript directory.
+    Sprockets is now solely in charge, by default, of compiling CSS and other static assets.
+    Action Cable channel generators will create ES6 stubs rather than use CoffeeScript.
+    Active Storage, Action Cable, Turbolinks, and Rails-UJS are loaded by a new application.js pack.
+    Generators no longer generate JavaScript stubs.
-## Rails 5.2.0 (April 09, 2018) ##
+    *DHH*, *Lachlan Sylvester*
-*   Fix minitest rails plugin.
+*   Add `database` (aliased as `db`) option to model generator to allow
+    setting the database. This is useful for applications that use
+    multiple databases and put migrations per database in their own directories.
-    The custom reporters are added only if needed.
+    ```
+    bin/rails g model Room capacity:integer --database=kingston
+          invoke  active_record
+          create    db/kingston_migrate/20180830151055_create_rooms.rb
+    ```
-    This will fix conflicts with others plugins.
+    Because rails scaffolding uses the model generator, you can
+    also specify a database with the scaffold generator.
-    *Kevin Robatel*
+    *Gannon McGibbon*
-*   Deprecate `after_bundle` callback in Rails plugin templates.
+*   Raise an error when "recyclable cache keys" are being used by a cache store
+    that does not explicitly support it. Custom cache keys that do support this feature
+    can bypass this error by implementing the `supports_cache_versioning?` method on their
+    class and returning a truthy value.
-    *Yuji Yaginuma*
+    *Richard Schneeman*
-*   `rails new` and `rails plugin new` get `Active Storage` by default.
-     Add ability to skip `Active Storage` with `--skip-active-storage`
-     and do so automatically when `--skip-active-record` is used.
+*   Support environment specific credentials overrides.
-    *bogdanvlviv*
+    So any environment will look for `config/credentials/#{Rails.env}.yml.enc` and fall back
+    to `config/credentials.yml.enc`.
-*   Gemfile for new apps: upgrade redis-rb from ~> 3.0 to 4.0.
+    The encryption key can be in `ENV["RAILS_MASTER_KEY"]` or `config/credentials/production.key`.
-    *Jeremy Daer*
+    Environment credentials overrides can be edited with `rails credentials:edit --environment production`.
+    If no override is setup for the passed environment, it will be created.
-*   Add `mini_magick` to default `Gemfile` as comment.
+    Additionally, the default lookup paths can be overwritten with these configs:
-    *Yoshiyuki Hirano*
+    - `config.credentials.content_path`
+    - `config.credentials.key_path`
-*   Derive `secret_key_base` from the app name in development and test environments.
+    *Wojciech Wnętrzak*
-    Spares away needless secret configs.
+*   Make `ActiveSupport::Cache::NullStore` the default cache store in the test environment.
-    *DHH*, *Kasper Timm Hansen*
+    *Michael C. Nelson*
-*   Support multiple versions arguments for `gem` method of Generators.
+*   Emit warning for unknown inflection rule when generating model.
-    *Yoshiyuki Hirano*
+    *Yoshiyuki Kinjo*
-*   Add `--skip-yarn` option to the plugin generator.
+*   Add `database` (aliased as `db`) option to migration generator.
-    *bogdanvlviv*
+    If you're using multiple databases and have a folder for each database
+    for migrations (ex db/migrate and db/new_db_migrate) you can now pass the
+    `--database` option to the generator to make sure the the migration
+    is inserted into the correct folder.
-*   Optimize routes indentation.
+    ```
+    rails g migration CreateHouses --database=kingston
+      invoke  active_record
+      create    db/kingston_migrate/20180830151055_create_houses.rb
+    ```
-    *Yoshiyuki Hirano*
+    *Eileen M. Uchitelle*
-*   Optimize indentation for generator actions.
+*   Deprecate `rake routes` in favor of `rails routes`.
-    *Yoshiyuki Hirano*
+    *Yuji Yaginuma*
-*   Skip unused components when running `bin/rails` in Rails plugin.
+*   Deprecate `rake initializers` in favor of `rails initializers`.
-    *Yoshiyuki Hirano*
+    *Annie-Claude Côté*
-*   Add `git_source` to `Gemfile` for plugin generator.
+*   Deprecate `rake dev:cache` in favor of `rails dev:cache`.
-    *Yoshiyuki Hirano*
+    *Annie-Claude Côté*
-*   Add `--skip-action-cable` option to the plugin generator.
+*   Deprecate `rails notes` subcommands in favor of passing an `annotations` argument to `rails notes`.
-    *bogdanvlviv*
+    The following subcommands are replaced by passing `--annotations` or `-a` to `rails notes`:
+    - `rails notes:custom ANNOTATION=custom` is deprecated in favor of using `rails notes -a custom`.
+    - `rails notes:optimize` is deprecated in favor of using `rails notes -a OPTIMIZE`.
+    - `rails notes:todo` is deprecated in favor of  using`rails notes -a TODO`.
+    - `rails notes:fixme` is deprecated in favor of using `rails notes -a FIXME`.
-*   Deprecate support for using a `Rails::Application` subclass to start Rails server.
+    *Annie-Claude Côté*
-    *Yuji Yaginuma*
+*   Deprecate `SOURCE_ANNOTATION_DIRECTORIES` environment variable used by `rails notes`
+    through `Rails::SourceAnnotationExtractor::Annotation` in favor of using `config.annotations.register_directories`.
-*   Add `ruby x.x.x` version to `Gemfile` and create `.ruby-version`
-    root file containing the current Ruby version when new Rails applications are
-    created.
+    *Annie-Claude Côté*
-    *Alberto Almagro*
+*   Deprecate `rake notes` in favor of `rails notes`.
-*   Support `-` as a platform-agnostic way to run a script from stdin with
-    `rails runner`
+    *Annie-Claude Côté*
-    *Cody Cutrer*
+*   Don't generate unused files in `app:update` task.
-*   Add `bootsnap` to default `Gemfile`.
+    Skip the assets' initializer when sprockets isn't loaded.
-    *Burke Libbey*
+    Skip `config/spring.rb` when spring isn't loaded.
-*   Properly expand shortcuts for environment's name running the `console`
-    and `dbconsole` commands.
+    Skip yarn's contents when yarn integration isn't used.
-    *Robin Dupret*
+    *Tsukuru Tanimichi*
-*   Passing the environment's name as a regular argument to the
-    `rails dbconsole` and `rails console` commands is deprecated.
-    The `-e` option should be used instead.
+*   Make the master.key file read-only for the owner upon generation on
+    POSIX-compliant systems.
     Previously:
-        $ bin/rails dbconsole production
+        $ ls -l config/master.key
+        -rw-r--r--   1 owner  group      32 Jan 1 00:00 master.key
     Now:
-        $ bin/rails dbconsole -e production
-    *Robin Dupret*, *Kasper Timm Hansen*
-*   Allow passing a custom connection name to the `rails dbconsole`
-    command when using a 3-level database configuration.
-        $ bin/rails dbconsole -c replica
-    *Robin Dupret*, *Jeremy Daer*
-*   Skip unused components when running `bin/rails app:update`.
-    If the initial app generation skipped Action Cable, Active Record etc.,
-    the update task honors those skips too.
-    *Yuji Yaginuma*
-*   Make Rails' test runner work better with minitest plugins.
-    By demoting the Rails test runner to just another minitest plugin —
-    and thereby not eager loading it — we can co-exist much better with
-    other minitest plugins such as pride and minitest-focus.
+        $ ls -l config/master.key
+        -rw-------   1 owner  group      32 Jan 1 00:00 master.key
-    *Kasper Timm Hansen*
+    Fixes #32604.
-*   Load environment file in `dbconsole` command.
+    *Jose Luis Duran*
-    Fixes #29717.
+*   Deprecate support for using the `HOST` environment to specify the server IP.
-    *Yuji Yaginuma*
+    The `BINDING` environment should be used instead.
-*   Add `rails secrets:show` command.
+    Fixes #29516.
     *Yuji Yaginuma*
-*   Allow mounting the same engine several times in different locations.
+*   Deprecate passing Rack server name as a regular argument to `rails server`.
-    Fixes #20204.
-    *David Rodríguez*
-*   Clear screenshot files in `tmp:clear` task.
-    *Yuji Yaginuma*
+    Previously:
-*   Add `railtie.rb` to the plugin generator
+        $ bin/rails server thin
-    *Tsukuru Tanimichi*
+    There wasn't an explicit option for the Rack server to use, now we have the
+    `--using` option with the `-u` short switch.
-*   Deprecate `capify!` method in generators and templates.
+    Now:
-    *Yuji Yaginuma*
+        $ bin/rails server -u thin
-*   Allow irb options to be passed from `rails console` command.
+    This change also improves the error message if a missing or mistyped rack
+    server is given.
-    Fixes #28988.
+    *Genadi Samokovarov*
-    *Yuji Yaginuma*
+*   Add "rails routes --expanded" option to output routes in expanded mode like
+    "psql --expanded". Result looks like:
-*   Added a shared section to `config/database.yml` that will be loaded for all environments.
+    ```
+    $ rails routes --expanded
+    --[ Route 1 ]------------------------------------------------------------
+    Prefix            | high_scores
+    Verb              | GET
+    URI               | /high_scores(.:format)
+    Controller#Action | high_scores#index
+    --[ Route 2 ]------------------------------------------------------------
+    Prefix            | new_high_score
+    Verb              | GET
+    URI               | /high_scores/new(.:format)
+    Controller#Action | high_scores#new
+    ```
-    *Pierre Schambacher*
+    *Benoit Tigeot*
-*   Namespace error pages' CSS selectors to stop the styles from bleeding into other pages
-    when using Turbolinks.
+*   Rails 6 requires Ruby 2.5.0 or newer.
-    *Jan Krutisch*
+    *Jeremy Daer*, *Kasper Timm Hansen*
-Please check [5-1-stable](https://github.com/rails/rails/blob/5-1-stable/railties/CHANGELOG.md) for previous changes.
+Please check [5-2-stable](https://github.com/rails/rails/blob/5-2-stable/railties/CHANGELOG.md) for previous changes.