railties 5.2.4 → 6.0.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: d29e86115edab9c724ecc2189e576d536126a9b3cf39998b757d34f8e8814ba0
-  data.tar.gz: 65762e159387158b43097135022127ef0f1941d30468aec108dc3768258e4cf6
+  metadata.gz: 2b04a08eb82e879b82eedd995b752a67d28034ca4e739d85af4a3150cf13f78a
+  data.tar.gz: 2623b97396462dcedff1b752f1f4e22f96a41002b72c3bae0e09bf6fe8a6d16c
 SHA512:
-  metadata.gz: fd08ee427f2b6b305de5c3cc07d553569861687395e18364488e70e0dc6e03c59a097f657f97838f5f1cd8db4a8babd405872a5a89b2ed9e1bcb67beeaddb959
-  data.tar.gz: 6bc043ce2a55cb46e2b0643e8f6826fbcd7ec172684847ca1097b3c65de3bc5b65d53685908b70a05ebafba33169ef611a2f7d598e6a76675282bb1bca90949f
+  metadata.gz: ff9939eadf0ff8eb72a75d5d74cae7ad54df7947e3b0a1dcefe03bcd53c06c510034e52bad63db94530abf245bc72e90600f19a7077632e8d4ba4b5de50a8fe0
+  data.tar.gz: 0b29fe874bf1a37eca8377cec2e3ecfd96d3d97bf4b8907995eb26f476b62aee22143b9f9375a05c946d6a75953e8dc95c1f5005a1b81df664fd1321d9aed709

data/CHANGELOG.md

@@ -1,8 +1,39 @@
-## Rails 5.2.4 (November 27, 2019) ##
+## Rails 6.0.0 (August 16, 2019) ##
 
-*   Use original `bundler` environment variables during the process of generating a new rails project.
+*   `Rails.autoloaders.log!` is a logging shortcut to get the activity of the
+    loaders printed to standard output. May be handy for troubleshooting.
 
-    *Marco Costa*
+    *Xavier Noria*
+
+
+## Rails 6.0.0.rc2 (July 22, 2019) ##
+
+*   The new configuration point `config.add_autoload_paths_to_load_path` allows
+    users to opt-out from adding autoload paths to `$LOAD_PATH`. This flag is
+    `true` by default, but it is recommended to be set to `false` in `:zeitwerk`
+    mode early, in `config/application.rb`.
+
+    Zeitwerk uses only absolute paths internally, and applications running in
+    `:zeitwerk` mode do not need `require_dependency`, so models, controllers,
+    jobs, etc. do not need to be in `$LOAD_PATH`. Setting this to `false` saves
+    Ruby from checking these directories when resolving `require` calls with
+    relative paths, and saves Bootsnap work and RAM, since it does not need to
+    build an index for them.
+
+    *Xavier Noria*
+
+## Rails 6.0.0.rc1 (April 24, 2019) ##
+
+*   Applications upgrading to Rails 6 can run the command
+
+    ```
+    bin/rails zeitwerk:check
+    ```
+
+    to check if the project structure they were using with the classic
+    autoloader is compatible with `:zeitwerk` mode.
+
+    *Matilda Smeds* & *Xavier Noria*
 
 *   Allow loading seeds without ActiveJob.
 
@@ -10,23 +41,56 @@
 
     *Jeremy Weathers*
 
+*   `null: false` is set in the migrations by default for column pointed by
+    `belongs_to` / `references` association generated by model generator.
+
+    Also deprecate passing {required} to the model generator.
+
+    *Prathamesh Sonpatki*
+
+*   New applications get `config.cache_classes = false` in `config/environments/test.rb`
+    unless `--skip-spring`.
+
+    *Xavier Noria*
+
+*   Autoloading during initialization is deprecated.
+
+    *Xavier Noria*
+
 *   Only force `:async` ActiveJob adapter to `:inline` during seeding.
 
     *BatedUrGonnaDie*
 
+*   The `connection` option of `rails dbconsole` command is deprecated in
+    favor of `database` option.
 
-## Rails 5.2.3 (March 27, 2019) ##
+    *Yuji Yaginuma*
 
-*   Seed database with inline ActiveJob job adapter.
+*   Replace `chromedriver-helper` gem with `webdrivers` in default Gemfile.
+    `chromedriver-helper` is deprecated as of March 31, 2019 and won't
+    receive any further updates.
 
-    *Gannon McGibbon*
+    *Guillermo Iguaran‮*
 
-*   Fix boolean interaction in scaffold system tests.
+*   Applications running in `:zeitwerk` mode that use `bootsnap` need
+    to upgrade `bootsnap` to at least 1.4.2.
 
-    *Gannon McGibbon*
+    *Xavier Noria*
+
+*   Add `config.disable_sandbox` option to Rails console.
 
+    This setting will disable `rails console --sandbox` mode, preventing
+    developer from accidentally starting a sandbox console,
+    which when left inactive, can cause the database server to run out of memory.
 
-## Rails 5.2.2.1 (March 11, 2019) ##
+    *Prem Sichanugrist*
+
+*   Add `-e/--environment` option to `rails initializers`.
+
+    *Yuji Yaginuma*
+
+
+## Rails 6.0.0.beta3 (March 11, 2019) ##
 
 *   Generate random development secrets
 
@@ -40,236 +104,326 @@
     *Eileen M. Uchitelle*, *Aaron Patterson*, *John Hawthorn*
 
 
-## Rails 5.2.2 (December 04, 2018) ##
+## Rails 6.0.0.beta2 (February 25, 2019) ##
 
-*   Disable content security policy for mailer previews.
+*   Fix non-symbol access to nested hashes returned from `Rails::Application.config_for`
+    being broken by allowing non-symbol access with a deprecation notice.
 
-    *Dylan Reile*
+    *Ufuk Kayserilioglu*
 
-*   Log the remote IP address of clients behind a proxy.
+*   Fix deeply nested namespace command printing.
 
-    *Atul Bhosale*
+    *Gannon McGibbon*
 
 
-## Rails 5.2.1.1 (November 27, 2018) ##
+## Rails 6.0.0.beta1 (January 18, 2019) ##
 
-*   No changes.
+*   Remove deprecated `after_bundle` helper inside plugins templates.
 
+    *Rafael Mendonça França*
 
-## Rails 5.2.1 (August 07, 2018) ##
+*   Remove deprecated support to old `config.ru` that use the application class as argument of `run`.
 
-*   Respect `NODE_ENV` when running `rails yarn:install`.
+    *Rafael Mendonça França*
 
-    *Max Melentiev*
+*   Remove deprecated `environment` argument from the rails commands.
 
-*   Don't generate unused files in `app:update` task
+    *Rafael Mendonça França*
 
-     Skip the assets' initializer when sprockets isn't loaded.
+*   Remove deprecated `capify!`.
 
-     Skip `config/spring.rb` when spring isn't loaded.
+    *Rafael Mendonça França*
 
-    *Tsukuru Tanimichi*
+*   Remove deprecated `config.secret_token`.
 
-*   Don't include `bootsnap` by default in apps generated under JRuby.
+    *Rafael Mendonça França*
 
-    Fixes #32641.
+*   Seed database with inline ActiveJob job adapter.
 
-    *Guillermo Iguaran*
+    *Gannon McGibbon*
 
-*   Create the `.ruby-version` file compatible with MRI/JRuby by default.
+*   Add `rails db:system:change` command for changing databases.
 
-    Fixes #32639.
+    ```
+    bin/rails db:system:change --to=postgresql
+       force  config/database.yml
+        gsub  Gemfile
+    ```
 
-    *Guillermo Iguaran*
+    The change command copies a template `config/database.yml` with
+    the target database adapter into your app, and replaces your database gem
+    with the target database gem.
 
-*   Make the master.key file read-only for the owner upon generation on
-    POSIX-compliant systems.
+    *Gannon McGibbon*
 
-    Previously:
+*   Add `rails test:channels`.
 
-        $ ls -l config/master.key
-        -rw-r--r--   1 owner  group      32 Jan 1 00:00 master.key
+    *bogdanvlviv*
 
-    Now:
+*   Use original `bundler` environment variables during the process of generating a new rails project.
 
-        $ ls -l config/master.key
-        -rw-------   1 owner  group      32 Jan 1 00:00 master.key
+    *Marco Costa*
 
-    Fixes #32604.
+*   Send Active Storage analysis and purge jobs to dedicated queues by default.
 
-    *Jose Luis Duran*
+    Analysis jobs now use the `:active_storage_analysis` queue, and purge jobs
+    now use the `:active_storage_purge` queue. This matches Action Mailbox,
+    which sends its jobs to dedicated queues by default.
 
-*   Allow use of `minitest-rails` gem with Rails test runner.
+    *George Claghorn*
 
-    Fixes #31324.
+*   Add `rails test:mailboxes`.
 
-    *Yuji Yaginuma*
+    *George Claghorn*
 
+*   Introduce guard against DNS rebinding attacks.
 
-## Rails 5.2.0 (April 09, 2018) ##
+    The `ActionDispatch::HostAuthorization` is a new middleware that prevents
+    against DNS rebinding and other `Host` header attacks. It is included in
+    the development environment by default with the following configuration:
 
-*   Fix minitest rails plugin.
+        Rails.application.config.hosts = [
+          IPAddr.new("0.0.0.0/0"), # All IPv4 addresses.
+          IPAddr.new("::/0"),      # All IPv6 addresses.
+          "localhost"              # The localhost reserved domain.
+        ]
 
-    The custom reporters are added only if needed.
+    In other environments `Rails.application.config.hosts` is empty and no
+    `Host` header checks will be done. If you want to guard against header
+    attacks on production, you have to manually permit the allowed hosts
+    with:
 
-    This will fix conflicts with others plugins.
+        Rails.application.config.hosts << "product.com"
 
-    *Kevin Robatel*
+    The host of a request is checked against the `hosts` entries with the case
+    operator (`#===`), which lets `hosts` support entries of type `Regexp`,
+    `Proc` and `IPAddr` to name a few. Here is an example with a regexp.
 
-*   Deprecate `after_bundle` callback in Rails plugin templates.
+        # Allow requests from subdomains like `www.product.com` and
+        # `beta1.product.com`.
+        Rails.application.config.hosts << /.*\.product\.com/
 
-    *Yuji Yaginuma*
+    A special case is supported that allows you to permit all sub-domains:
 
-*   `rails new` and `rails plugin new` get `Active Storage` by default.
-     Add ability to skip `Active Storage` with `--skip-active-storage`
-     and do so automatically when `--skip-active-record` is used.
+        # Allow requests from subdomains like `www.product.com` and
+        # `beta1.product.com`.
+        Rails.application.config.hosts << ".product.com"
 
-    *bogdanvlviv*
-
-*   Gemfile for new apps: upgrade redis-rb from ~> 3.0 to 4.0.
+    *Genadi Samokovarov*
 
-    *Jeremy Daer*
+*   Remove redundant suffixes on generated helpers.
 
-*   Add `mini_magick` to default `Gemfile` as comment.
+    *Gannon McGibbon*
 
-    *Yoshiyuki Hirano*
+*   Remove redundant suffixes on generated integration tests.
 
-*   Derive `secret_key_base` from the app name in development and test environments.
+    *Gannon McGibbon*
 
-    Spares away needless secret configs.
+*   Fix boolean interaction in scaffold system tests.
 
-    *DHH*, *Kasper Timm Hansen*
+    *Gannon McGibbon*
 
-*   Support multiple versions arguments for `gem` method of Generators.
+*   Remove redundant suffixes on generated system tests.
 
-    *Yoshiyuki Hirano*
+    *Gannon McGibbon*
 
-*   Add `--skip-yarn` option to the plugin generator.
+*   Add an `abort_on_failure` boolean option to the generator method that shell
+    out (`generate`, `rake`, `rails_command`) to abort the generator if the
+    command fails.
 
-    *bogdanvlviv*
+    *David Rodríguez*
 
-*   Optimize routes indentation.
+*   Remove `app/assets` and `app/javascript` from `eager_load_paths` and `autoload_paths`.
 
-    *Yoshiyuki Hirano*
+    *Gannon McGibbon*
 
-*   Optimize indentation for generator actions.
+*   Use Ids instead of memory addresses when displaying references in scaffold views.
 
-    *Yoshiyuki Hirano*
+    Fixes #29200.
 
-*   Skip unused components when running `bin/rails` in Rails plugin.
+    *Rasesh Patel*
 
-    *Yoshiyuki Hirano*
+*   Adds support for multiple databases to `rails db:migrate:status`.
+    Subtasks are also added to get the status of individual databases (eg. `rails db:migrate:status:animals`).
 
-*   Add `git_source` to `Gemfile` for plugin generator.
+    *Gannon McGibbon*
 
-    *Yoshiyuki Hirano*
+*   Use Webpacker by default to manage app-level JavaScript through the new app/javascript directory.
+    Sprockets is now solely in charge, by default, of compiling CSS and other static assets.
+    Action Cable channel generators will create ES6 stubs rather than use CoffeeScript.
+    Active Storage, Action Cable, Turbolinks, and Rails-UJS are loaded by a new application.js pack.
+    Generators no longer generate JavaScript stubs.
 
-*   Add `--skip-action-cable` option to the plugin generator.
+    *DHH*, *Lachlan Sylvester*
 
-    *bogdanvlviv*
+*   Add `database` (aliased as `db`) option to model generator to allow
+    setting the database. This is useful for applications that use
+    multiple databases and put migrations per database in their own directories.
 
-*   Deprecate support for using a `Rails::Application` subclass to start Rails server.
+    ```
+    bin/rails g model Room capacity:integer --database=kingston
+          invoke  active_record
+          create    db/kingston_migrate/20180830151055_create_rooms.rb
+    ```
 
-    *Yuji Yaginuma*
+    Because rails scaffolding uses the model generator, you can
+    also specify a database with the scaffold generator.
 
-*   Add `ruby x.x.x` version to `Gemfile` and create `.ruby-version`
-    root file containing the current Ruby version when new Rails applications are
-    created.
+    *Gannon McGibbon*
 
-    *Alberto Almagro*
+*   Raise an error when "recyclable cache keys" are being used by a cache store
+    that does not explicitly support it. Custom cache keys that do support this feature
+    can bypass this error by implementing the `supports_cache_versioning?` method on their
+    class and returning a truthy value.
 
-*   Support `-` as a platform-agnostic way to run a script from stdin with
-    `rails runner`
+    *Richard Schneeman*
 
-    *Cody Cutrer*
+*   Support environment specific credentials overrides.
 
-*   Add `bootsnap` to default `Gemfile`.
+    So any environment will look for `config/credentials/#{Rails.env}.yml.enc` and fall back
+    to `config/credentials.yml.enc`.
 
-    *Burke Libbey*
+    The encryption key can be in `ENV["RAILS_MASTER_KEY"]` or `config/credentials/production.key`.
 
-*   Properly expand shortcuts for environment's name running the `console`
-    and `dbconsole` commands.
+    Environment credentials overrides can be edited with `rails credentials:edit --environment production`.
+    If no override is set up for the passed environment, it will be created.
 
-    *Robin Dupret*
+    Additionally, the default lookup paths can be overwritten with these configs:
 
-*   Passing the environment's name as a regular argument to the
-    `rails dbconsole` and `rails console` commands is deprecated.
-    The `-e` option should be used instead.
+    - `config.credentials.content_path`
+    - `config.credentials.key_path`
 
-    Previously:
+    *Wojciech Wnętrzak*
 
-        $ bin/rails dbconsole production
+*   Make `ActiveSupport::Cache::NullStore` the default cache store in the test environment.
 
-    Now:
+    *Michael C. Nelson*
 
-        $ bin/rails dbconsole -e production
+*   Emit warning for unknown inflection rule when generating model.
 
-    *Robin Dupret*, *Kasper Timm Hansen*
+    *Yoshiyuki Kinjo*
 
-*   Allow passing a custom connection name to the `rails dbconsole`
-    command when using a 3-level database configuration.
+*   Add `database` (aliased as `db`) option to migration generator.
 
-        $ bin/rails dbconsole -c replica
+    If you're using multiple databases and have a folder for each database
+    for migrations (ex db/migrate and db/new_db_migrate) you can now pass the
+    `--database` option to the generator to make sure the the migration
+    is inserted into the correct folder.
 
-    *Robin Dupret*, *Jeremy Daer*
+    ```
+    rails g migration CreateHouses --database=kingston
+      invoke  active_record
+      create    db/kingston_migrate/20180830151055_create_houses.rb
+    ```
 
-*   Skip unused components when running `bin/rails app:update`.
+    *Eileen M. Uchitelle*
 
-    If the initial app generation skipped Action Cable, Active Record etc.,
-    the update task honors those skips too.
+*   Deprecate `rake routes` in favor of `rails routes`.
 
     *Yuji Yaginuma*
 
-*   Make Rails' test runner work better with minitest plugins.
+*   Deprecate `rake initializers` in favor of `rails initializers`.
 
-    By demoting the Rails test runner to just another minitest plugin —
-    and thereby not eager loading it — we can co-exist much better with
-    other minitest plugins such as pride and minitest-focus.
+    *Annie-Claude Côté*
 
-    *Kasper Timm Hansen*
+*   Deprecate `rake dev:cache` in favor of `rails dev:cache`.
 
-*   Load environment file in `dbconsole` command.
+    *Annie-Claude Côté*
 
-    Fixes #29717.
+*   Deprecate `rails notes` subcommands in favor of passing an `annotations` argument to `rails notes`.
 
-    *Yuji Yaginuma*
+    The following subcommands are replaced by passing `--annotations` or `-a` to `rails notes`:
+    - `rails notes:custom ANNOTATION=custom` is deprecated in favor of using `rails notes -a custom`.
+    - `rails notes:optimize` is deprecated in favor of using `rails notes -a OPTIMIZE`.
+    - `rails notes:todo` is deprecated in favor of  using`rails notes -a TODO`.
+    - `rails notes:fixme` is deprecated in favor of using `rails notes -a FIXME`.
 
-*   Add `rails secrets:show` command.
+    *Annie-Claude Côté*
 
-    *Yuji Yaginuma*
+*   Deprecate `SOURCE_ANNOTATION_DIRECTORIES` environment variable used by `rails notes`
+    through `Rails::SourceAnnotationExtractor::Annotation` in favor of using `config.annotations.register_directories`.
 
-*   Allow mounting the same engine several times in different locations.
+    *Annie-Claude Côté*
 
-    Fixes #20204.
+*   Deprecate `rake notes` in favor of `rails notes`.
 
-    *David Rodríguez*
+    *Annie-Claude Côté*
 
-*   Clear screenshot files in `tmp:clear` task.
+*   Don't generate unused files in `app:update` task.
 
-    *Yuji Yaginuma*
+    Skip the assets' initializer when sprockets isn't loaded.
+
+    Skip `config/spring.rb` when spring isn't loaded.
 
-*   Add `railtie.rb` to the plugin generator
+    Skip yarn's contents when yarn integration isn't used.
 
     *Tsukuru Tanimichi*
 
-*   Deprecate `capify!` method in generators and templates.
+*   Make the master.key file read-only for the owner upon generation on
+    POSIX-compliant systems.
 
-    *Yuji Yaginuma*
+    Previously:
 
-*   Allow irb options to be passed from `rails console` command.
+        $ ls -l config/master.key
+        -rw-r--r--   1 owner  group      32 Jan 1 00:00 master.key
+
+    Now:
+
+        $ ls -l config/master.key
+        -rw-------   1 owner  group      32 Jan 1 00:00 master.key
+
+    Fixes #32604.
+
+    *Jose Luis Duran*
+
+*   Deprecate support for using the `HOST` environment variable to specify the server IP.
 
-    Fixes #28988.
+    The `BINDING` environment variable should be used instead.
+
+    Fixes #29516.
 
     *Yuji Yaginuma*
 
-*   Added a shared section to `config/database.yml` that will be loaded for all environments.
+*   Deprecate passing Rack server name as a regular argument to `rails server`.
+
+    Previously:
+
+        $ bin/rails server thin
+
+    There wasn't an explicit option for the Rack server to use, now we have the
+    `--using` option with the `-u` short switch.
+
+    Now:
+
+        $ bin/rails server -u thin
+
+    This change also improves the error message if a missing or mistyped rack
+    server is given.
+
+    *Genadi Samokovarov*
+
+*   Add "rails routes --expanded" option to output routes in expanded mode like
+    "psql --expanded". Result looks like:
+
+    ```
+    $ rails routes --expanded
+    --[ Route 1 ]------------------------------------------------------------
+    Prefix            | high_scores
+    Verb              | GET
+    URI               | /high_scores(.:format)
+    Controller#Action | high_scores#index
+    --[ Route 2 ]------------------------------------------------------------
+    Prefix            | new_high_score
+    Verb              | GET
+    URI               | /high_scores/new(.:format)
+    Controller#Action | high_scores#new
+    ```
 
-    *Pierre Schambacher*
+    *Benoit Tigeot*
 
-*   Namespace error pages' CSS selectors to stop the styles from bleeding into other pages
-    when using Turbolinks.
+*   Rails 6 requires Ruby 2.5.0 or newer.
 
-    *Jan Krutisch*
+    *Jeremy Daer*, *Kasper Timm Hansen*
 
 
-Please check [5-1-stable](https://github.com/rails/rails/blob/5-1-stable/railties/CHANGELOG.md) for previous changes.
+Please check [5-2-stable](https://github.com/rails/rails/blob/5-2-stable/railties/CHANGELOG.md) for previous changes.