railties 6.0.0 → 7.1.3.2

data/CHANGELOG.md

@@ -1,429 +1,883 @@
-## Rails 6.0.0 (August 16, 2019) ##
+## Rails 7.1.3.2 (February 21, 2024) ##
 
-*   `Rails.autoloaders.log!` is a logging shortcut to get the activity of the
-    loaders printed to standard output. May be handy for troubleshooting.
+*   No changes.
 
-    *Xavier Noria*
 
+## Rails 7.1.3.1 (February 21, 2024) ##
+
+*   No changes.
+
+
+## Rails 7.1.3 (January 16, 2024) ##
+
+*   Make sure `config.after_routes_loaded` hook runs on boot.
+
+    *Rafael Mendonça França*
+
+*   Fix `config.log_level` not being respected when using a `BroadcastLogger`
+
+    *Édouard Chin*
+
+*   Fix isolated engines to take `ActiveRecord::Base.table_name_prefix` into consideration.
+    This will allow for engine defined models, such as inside Active Storage, to respect
+    Active Record table name prefix configuration.
+
+    *Chedli Bourguiba*
+
+*   The `bin/rails app:template` command will no longer add potentially unwanted
+    gem platforms via `bundle lock --add-platform=...` commands.
 
-## Rails 6.0.0.rc2 (July 22, 2019) ##
+    *Jonathan Hefner*
 
-*   The new configuration point `config.add_autoload_paths_to_load_path` allows
-    users to opt-out from adding autoload paths to `$LOAD_PATH`. This flag is
-    `true` by default, but it is recommended to be set to `false` in `:zeitwerk`
-    mode early, in `config/application.rb`.
 
-    Zeitwerk uses only absolute paths internally, and applications running in
-    `:zeitwerk` mode do not need `require_dependency`, so models, controllers,
-    jobs, etc. do not need to be in `$LOAD_PATH`. Setting this to `false` saves
-    Ruby from checking these directories when resolving `require` calls with
-    relative paths, and saves Bootsnap work and RAM, since it does not need to
-    build an index for them.
+## Rails 7.1.2 (November 10, 2023) ##
+
+*   Fix running `db:system:change` when app has no Dockerfile.
+
+    *Hartley McGuire*
+
+*   If you accessed `config.eager_load_paths` and friends, later changes to
+    `config.paths` were not reflected in the expected auto/eager load paths.
+    Now, they are.
+
+    This bug has been latent since Rails 3.
+
+    Fixes #49629.
 
     *Xavier Noria*
 
-## Rails 6.0.0.rc1 (April 24, 2019) ##
+## Rails 7.1.1 (October 11, 2023) ##
+
+*   Ensures the Rails generated Dockerfile uses correct ruby version and matches Gemfile.
+
+    *Abhay Nikam*
+
+
+## Rails 7.1.0 (October 05, 2023) ##
+
+*   No changes.
+
+
+## Rails 7.1.0.rc2 (October 01, 2023) ##
 
-*   Applications upgrading to Rails 6 can run the command
+*   Always set the Rails logger to be an instance of `ActiveSupport::BroadcastLogger`.
 
+    *Edouard Chin*
+
+
+## Rails 7.1.0.rc1 (September 27, 2023) ##
+
+*   Require `concurrent-ruby` in `config/puma.rb` so that Puma can boot in
+    production when `WEB_CONCURRENCY` is not explicitly specified.
+
+    Fixes #49323.
+
+    *Matt Brictson*
+
+*   Raise error when generating attribute with dangerous name.
+
+    The following will now raise an error as `save` and `hash` are already
+    defined by Active Record.
+
+    ```bash
+    $ bin/rails generate model Post save
+    $ bin/rails generate model Post hash
     ```
-    bin/rails zeitwerk:check
+
+    *Petrik de Heus*
+
+
+## Rails 7.1.0.beta1 (September 13, 2023) ##
+
+*   Add ability to show slow tests to the test runner
+
+    ```bash
+    $ bin/test --profile # additionally prints 10 (default) slowest tests
+    # or
+    $ bin/test --profile 20 # prints 20 slowest tests
     ```
 
-    to check if the project structure they were using with the classic
-    autoloader is compatible with `:zeitwerk` mode.
+    *fatkodima*
+
+*   `rails new --javascript` generator now supports Bun
 
-    *Matilda Smeds* & *Xavier Noria*
+    ```bash
+    $ rails new my_new_app --javascript=bun
+    ```
 
-*   Allow loading seeds without ActiveJob.
+    *Jason Meller*
 
-    Fixes #35782
+*   bin/setup uses `bun` instead of `yarn` when generated an app with bun
 
-    *Jeremy Weathers*
+    Use `bun install` on `bin/setup` when using `bun`.
 
-*   `null: false` is set in the migrations by default for column pointed by
-    `belongs_to` / `references` association generated by model generator.
+    *Cadu Ribeiro*
 
-    Also deprecate passing {required} to the model generator.
+*   `config/application.rb` now includes
 
-    *Prathamesh Sonpatki*
+    ```ruby
+    config.autoload_lib(ignore: %w(assets tasks))
+    ```
 
-*   New applications get `config.cache_classes = false` in `config/environments/test.rb`
-    unless `--skip-spring`.
+    In practice, this means that new 7.1 applications autoload from `lib` out of the box.
 
     *Xavier Noria*
 
-*   Autoloading during initialization is deprecated.
+*   Add an option to start rails console in sandbox mode by default
 
-    *Xavier Noria*
+    `sandbox_by_default` option is added to start rails console in sandbox
+    mode by default. With this option turned on, `--no-sandbox` must be
+    specified to start rails in non-sandbox mode.
+
+    Note that this option is ignored when rails environment is development
+    or test.
 
-*   Only force `:async` ActiveJob adapter to `:inline` during seeding.
+    *Shouichi Kamiya*
+
+*   Omit `webdrivers` gem dependency from `Gemfile` template
+
+    *Sean Doyle*
+
+*   Support filtering tests by line ranges
+
+    The new syntax allows you to filter tests by line ranges. For example, the
+    following command runs tests from line 10 to 20.
+
+    ```bash
+    $ rails test test/models/user_test.rb:10-20
+    ```
 
-    *BatedUrGonnaDie*
+    *Shouichi Kamiya*, *Seonggi Yang*, *oljfte*, *Ryohei UEDA*
 
-*   The `connection` option of `rails dbconsole` command is deprecated in
-    favor of `database` option.
+*   Update default scaffold templates to set 303 (See Other) as status code
+    on redirect for the update action for XHR requests other than GET or POST
+    to avoid issues (e.g browsers trying to follow the redirect using the
+    original request method resulting in double PATCH/PUT)
 
-    *Yuji Yaginuma*
+    *Guillermo Iguaran*
 
-*   Replace `chromedriver-helper` gem with `webdrivers` in default Gemfile.
-    `chromedriver-helper` is deprecated as of March 31, 2019 and won't
-    receive any further updates.
+*   The new `config.autoload_lib_once` is similar to `config.autoload_lib`,
+    except that it adds `lib` to `config.autoload_once_paths` instead.
 
-    *Guillermo Iguaran‮*
+    By calling `config.autoload_lib_once`, classes and modules in `lib` can be
+    autoloaded, even from application initializers, but won't be reloaded.
 
-*   Applications running in `:zeitwerk` mode that use `bootsnap` need
-    to upgrade `bootsnap` to at least 1.4.2.
+    Please, see further details in the [autoloading
+    guide](https://guides.rubyonrails.org/v7.1/autoloading_and_reloading_constants.html).
 
     *Xavier Noria*
 
-*   Add `config.disable_sandbox` option to Rails console.
+*   Add `config.action_dispatch.debug_exception_log_level` to configure the log
+    level used by `ActionDispatch::DebugExceptions`.
 
-    This setting will disable `rails console --sandbox` mode, preventing
-    developer from accidentally starting a sandbox console,
-    which when left inactive, can cause the database server to run out of memory.
+    The default is `:fatal`, but with `load_defaults "7.1"` the default will be
+    `:error`.
 
-    *Prem Sichanugrist*
+    *Hartley McGuire*
 
-*   Add `-e/--environment` option to `rails initializers`.
+*   Add `DATABASE` option to `railties:install:migrations`
 
-    *Yuji Yaginuma*
+    This allows you to specify which database the migrations should be copied to
+    when running `rails railties:install:migrations`.
 
+    ```bash
+    $ rails railties:install:migrations DATABASE=animals
+    ```
+
+    *Matthew Hirst*
+
+*   The new method `config.autoload_lib(ignore:)` provides a simple way to
+    autoload from `lib`:
+
+    ```ruby
+    # config/application.rb
+    config.autoload_lib(ignore: %w(assets tasks))
+    ```
+
+    Please, see further details in the [autoloading
+    guide](https://guides.rubyonrails.org/v7.1/autoloading_and_reloading_constants.html).
+
+    *Xavier Noria*
+
+*   Don't show secret_key_base for `Rails.application.config#inspect`.
+
+    Before:
+
+    ```ruby
+    Rails.application.config.inspect
+    "#<Rails::Application::Configuration:0x00000001132b02a0 @root=... @secret_key_base=\"b3c631c314c0bbca50c1b2843150fe33\" ... >"
+    ```
 
-## Rails 6.0.0.beta3 (March 11, 2019) ##
+    After:
 
-*   Generate random development secrets
+    ```ruby
+    Rails.application.config.inspect
+    "#<Rails::Application::Configuration:0x00000001132b02a0>"
+    ```
+
+    *Petrik de Heus*
 
-    A random development secret is now generated to tmp/development_secret.txt
+*   Deprecate calling `Rails.application.secrets`.
 
-    This avoids an issue where development mode servers were vulnerable to
-    remote code execution.
+    Rails `secrets` have been deprecated in favor of `credentials`.
+    Calling `Rails.application.secrets` should show a deprecation warning.
 
-    Fixes CVE-2019-5420
+    *Petrik de Heus*
 
-    *Eileen M. Uchitelle*, *Aaron Patterson*, *John Hawthorn*
+*   Store `secret_key_base` in `Rails.config` for local environments.
 
+    Rails `secrets` have been deprecated in favor of `credentials`.
+    For the local environments the `secret_key_base` is now stored in
+    `Rails.config.secret_key_base` instead of the soft deprecated
+    `Rails.application.secrets.secret_key_base`.
 
-## Rails 6.0.0.beta2 (February 25, 2019) ##
+    *Petrik de Heus*
 
-*   Fix non-symbol access to nested hashes returned from `Rails::Application.config_for`
-    being broken by allowing non-symbol access with a deprecation notice.
+*   Enable force_ssl=true in production by default: Force all access to the app over SSL,
+    use Strict-Transport-Security, and use secure cookies
 
-    *Ufuk Kayserilioglu*
+    *Justin Searls*, *Aaron Patterson*, *Guillermo Iguaran*, *Vinícius Bispo*
 
-*   Fix deeply nested namespace command printing.
+*   Add engine's draw paths to application route set, so that the application
+    can draw route files defined in engine paths.
 
     *Gannon McGibbon*
 
+*   Support `VISUAL` environment variable for commands which open an editor,
+    and prefer it over `EDITOR`.
 
-## Rails 6.0.0.beta1 (January 18, 2019) ##
+    *Summer ☀️*
 
-*   Remove deprecated `after_bundle` helper inside plugins templates.
+*   Add engine's `test/fixtures` path to `fixture_paths` in `on_load` hook if
+    path exists and is under the Rails application root.
 
-    *Rafael Mendonça França*
+    *Chris Salzberg*
 
-*   Remove deprecated support to old `config.ru` that use the application class as argument of `run`.
+*   `bin/rails app:template` now runs `bundle install` and any `after_bundle`
+    blocks after the template is executed.
 
-    *Rafael Mendonça França*
+    *Jonathan Hefner* and *Gerry Caulfield*
 
-*   Remove deprecated `environment` argument from the rails commands.
+*   Enable passing column size to migration generator
 
-    *Rafael Mendonça França*
+    Previously you could pass a limit to the migration generator:
 
-*   Remove deprecated `capify!`.
+    `rails generate migration CreateAuthor name:text{65535}`
 
-    *Rafael Mendonça França*
+    Now, a size attribute can be passed to the migration generator:
 
-*   Remove deprecated `config.secret_token`.
+    `rails generate migration CreateAuthor name:text{medium}`
 
-    *Rafael Mendonça França*
+    This generates a migration which includes the size attribute:
 
-*   Seed database with inline ActiveJob job adapter.
+    ```ruby
+    class CreateAuthor < ActiveRecord::Migration[7.1]
+      def change
+        create_table :authors do |t|
+          t.text :name, size: :medium
+        end
+      end
+    end
+    ```
 
-    *Gannon McGibbon*
+    *Josh Broughton*, *Hartley McGuire*
 
-*   Add `rails db:system:change` command for changing databases.
+*   Trying to set a config key with the same name of a method now raises:
 
+    ```ruby
+    config.load_defaults = 7.0
+    # NoMethodError: Cannot assign to `load_defaults`, it is a configuration method
     ```
-    bin/rails db:system:change --to=postgresql
-       force  config/database.yml
-        gsub  Gemfile
+
+    *Xavier Noria*
+
+*   Deprecate `secrets:edit/show` and remove `secrets:setup`
+
+    `bin/rails secrets:setup` has been deprecated since Rails 5.2 in favor of
+    credentials. This command has been removed.
+
+    `bin/rails secrets:show` and `bin/rails secrets:edit` have been deprecated
+    in favor of credentials.
+
+    Run `bin/rails credentials:help` for more information
+
+    *Petrik de Heus*
+
+*   `bin/rails --help` will now list only framework and plugin commands. Rake
+    tasks defined in `lib/tasks/*.rake` files will no longer be included. For a
+    list of those tasks, use `rake -T`.
+
+    *Jonathan Hefner*
+
+*   Allow calling `bin/rails restart` outside of app directory.
+
+    The following would previously fail with a "No Rakefile found" error.
+
+    ```bash
+    $ blog/bin/rails restart
     ```
 
-    The change command copies a template `config/database.yml` with
-    the target database adapter into your app, and replaces your database gem
-    with the target database gem.
+    *Petrik de Heus*
 
-    *Gannon McGibbon*
+*   Support prerelease rubies in Gemfile template if RubyGems version is 3.3.13 or higher.
 
-*   Add `rails test:channels`.
+    *Yasuo Honda*, *David Rodríguez*
 
-    *bogdanvlviv*
+*   Autoloading setup honors root directories manually set by the user.
 
-*   Use original `bundler` environment variables during the process of generating a new rails project.
+    This is relevant for custom namespaces. For example, if you'd like classes
+    and modules under `app/services` to be defined in the `Services` namespace
+    without an extra `app/services/services` directory, this is now enough:
 
-    *Marco Costa*
+    ```ruby
+    # config/initializers/autoloading.rb
 
-*   Send Active Storage analysis and purge jobs to dedicated queues by default.
+    # The namespace has to exist.
+    #
+    # In this example we define the module on the spot. Could also be created
+    # elsewhere and its definition loaded here with an ordinary `require`. In
+    # any case, `push_dir` expects a class or module object.
+    module Services; end
 
-    Analysis jobs now use the `:active_storage_analysis` queue, and purge jobs
-    now use the `:active_storage_purge` queue. This matches Action Mailbox,
-    which sends its jobs to dedicated queues by default.
+    Rails.autoloaders.main.push_dir("#{Rails.root}/app/services", namespace: Services)
+    ```
 
-    *George Claghorn*
+    Check the autoloading guide for further details.
 
-*   Add `rails test:mailboxes`.
+    *Xavier Noria*
 
-    *George Claghorn*
+*   Railties now requires the irb gem as a dependency, which means when you install Rails, irb will also
+    be installed as a gem. Rails will then use the installed version of irb for its console instead of
+    relying on Ruby's built-in version.
+    This ensures that Rails has access to the most up-to-date and reliable version of irb for its console.
 
-*   Introduce guard against DNS rebinding attacks.
+    *Stan Lo*
 
-    The `ActionDispatch::HostAuthorization` is a new middleware that prevents
-    against DNS rebinding and other `Host` header attacks. It is included in
-    the development environment by default with the following configuration:
+*   Use infinitive form for all rails command descriptions verbs.
 
-        Rails.application.config.hosts = [
-          IPAddr.new("0.0.0.0/0"), # All IPv4 addresses.
-          IPAddr.new("::/0"),      # All IPv6 addresses.
-          "localhost"              # The localhost reserved domain.
-        ]
+    *Petrik de Heus*
 
-    In other environments `Rails.application.config.hosts` is empty and no
-    `Host` header checks will be done. If you want to guard against header
-    attacks on production, you have to manually permit the allowed hosts
-    with:
+*   Credentials commands (e.g. `bin/rails credentials:edit`) now respect
+    `config.credentials.content_path` and `config.credentials.key_path` when set
+    in `config/application.rb` or `config/environments/#{Rails.env}.rb`.
 
-        Rails.application.config.hosts << "product.com"
+    Before:
 
-    The host of a request is checked against the `hosts` entries with the case
-    operator (`#===`), which lets `hosts` support entries of type `Regexp`,
-    `Proc` and `IPAddr` to name a few. Here is an example with a regexp.
+      * `bin/rails credentials:edit` ignored `RAILS_ENV`, and would always edit
+        `config/credentials.yml.enc`.
 
-        # Allow requests from subdomains like `www.product.com` and
-        # `beta1.product.com`.
-        Rails.application.config.hosts << /.*\.product\.com/
+      * `bin/rails credentials:edit --environment foo` would create and edit
+        `config/credentials/foo.yml.enc`.
 
-    A special case is supported that allows you to permit all sub-domains:
+      * If `config.credentials.content_path` or `config.credentials.key_path`
+        was set, `bin/rails credentials:edit` could not be used to edit the
+        credentials.  Editing credentials required using `bin/rails
+        encrypted:edit path/to/credentials --key path/to/key`.
 
-        # Allow requests from subdomains like `www.product.com` and
-        # `beta1.product.com`.
-        Rails.application.config.hosts << ".product.com"
+    After:
 
-    *Genadi Samokovarov*
+      * `bin/rails credentials:edit` will edit the credentials file that the app
+        would load for the current `RAILS_ENV`.
 
-*   Remove redundant suffixes on generated helpers.
+      * `bin/rails credentials:edit` respects `config.credentials.content_path`
+        and `config.credentials.key_path` when set in `config/application.rb`
+        or `config/environments/#{Rails.env}.rb`.
 
-    *Gannon McGibbon*
+      * `bin/rails credentials:edit --environment foo` will create and edit
+        `config/credentials/foo.yml.enc` _if_ `config.credentials.content_path`
+        has not been set for the `foo` environment.  Ultimately, it will edit
+        the credentials file that the app would load for the `foo` environment.
 
-*   Remove redundant suffixes on generated integration tests.
+    *Jonathan Hefner*
 
-    *Gannon McGibbon*
+*   Add descriptions for non-Rake commands when running `rails -h`.
 
-*   Fix boolean interaction in scaffold system tests.
+    *Petrik de Heus*
 
-    *Gannon McGibbon*
+*   Show relevant commands when calling help
 
-*   Remove redundant suffixes on generated system tests.
+    When running `rails -h` or just `rails` outside a Rails application,
+    Rails outputs all options for running the `rails new` command. This can be
+    confusing to users when they probably want to see the common Rails commands.
 
-    *Gannon McGibbon*
+    Instead, we should always show the common commands when running `rails -h`
+    inside or outside a Rails application.
 
-*   Add an `abort_on_failure` boolean option to the generator method that shell
-    out (`generate`, `rake`, `rails_command`) to abort the generator if the
-    command fails.
+    As the relevant commands inside a Rails application differ from the
+    commands outside an application, the help USAGE file has been split to
+    show the most relevant commands for the context.
 
-    *David Rodríguez*
+    *Petrik de Heus*
 
-*   Remove `app/assets` and `app/javascript` from `eager_load_paths` and `autoload_paths`.
+*   Add Rails::HealthController#show and map it to /up for newly generated applications.
+    Load balancers and uptime monitors all need a basic endpoint to tell whether the app is up.
+    This is a good starting point that'll work in many situations.
 
-    *Gannon McGibbon*
+    *DHH*
 
-*   Use Ids instead of memory addresses when displaying references in scaffold views.
+*   Only use HostAuthorization middleware if `config.hosts` is not empty
 
-    Fixes #29200.
+    *Hartley McGuire*
 
-    *Rasesh Patel*
+*   Raise an exception when a `before_action`'s "only" or "except" filter
+    options reference an action that doesn't exist. This will be enabled by
+    default but can be overridden via config.
 
-*   Adds support for multiple databases to `rails db:migrate:status`.
-    Subtasks are also added to get the status of individual databases (eg. `rails db:migrate:status:animals`).
+    ```ruby
+    # config/environments/production.rb
+    config.action_controller.raise_on_missing_callback_actions = false
+    ```
 
-    *Gannon McGibbon*
+    *Jess Bees*
+
+*   Use physical processor count as the default Puma worker count in production.
+    This can be overridden by setting `ENV["WEB_CONCURRENCY"]` or editing the
+    generated "config/puma.rb" directly.
+
+    *DHH*
+
+*   Add Docker files by default to new apps: Dockerfile, .dockerignore, bin/docker-entrypoint.
+    These files can be skipped with `--skip-docker`. They're intended as a starting point for
+    a production deploy of the application. Not intended for development (see Docked Rails for that).
+
+    Example:
 
-*   Use Webpacker by default to manage app-level JavaScript through the new app/javascript directory.
-    Sprockets is now solely in charge, by default, of compiling CSS and other static assets.
-    Action Cable channel generators will create ES6 stubs rather than use CoffeeScript.
-    Active Storage, Action Cable, Turbolinks, and Rails-UJS are loaded by a new application.js pack.
-    Generators no longer generate JavaScript stubs.
+    ```bash
+    $ docker build -t app .
+    $ docker volume create app-storage
+    $ docker run --rm -it -v app-storage:/rails/storage -p 3000:3000 --env RAILS_MASTER_KEY=<see config/master.key> app
+    ```
+
+    You can also start a console or a runner from this image:
+
+    ```bash
+    $ docker run --rm -it -v app-storage:/rails/storage --env RAILS_MASTER_KEY=<see config/master.key> app console
+    ```
+
+    To create a multi-platform image on Apple Silicon to deploy on AMD or Intel and push to Docker Hub for user/app:
+
+    ```bash
+    $ docker login -u <user>
+    $ docker buildx create --use
+    $ docker buildx build --push --platform=linux/amd64,linux/arm64 -t <user/image> .
+    ```
+
+    *DHH, Sam Ruby*
+
+*   Add ENV["SECRET_KEY_BASE_DUMMY"] for starting production environment with a generated secret base key,
+    which can be used to run tasks like `assets:precompile` without making the RAILS_MASTER_KEY available
+    to the build process.
+
+    Dockerfile layer example:
+
+    ```
+    RUN SECRET_KEY_BASE_DUMMY=1 bundle exec rails assets:precompile
+    ```
+
+    *DHH*
+
+*   Show descriptions for all commands in Rails help
+
+    When calling `rails help` most commands missed their description. We now
+    show the same descriptions as shown in `rails -T`.
+
+    *Petrik de Heus*
+
+*   Always generate the storage/ directory with rails new to ensure there's a stable place to
+    put permanent files, and a single mount point for containers to map. Then default sqlite3 databases
+    to live there instead of db/, which is only meant for configuration, not data.
+
+    *DHH*
+
+*   Rails console now disables `IRB`'s autocompletion feature in production by default.
+
+    Setting `IRB_USE_AUTOCOMPLETE=true` can override this default.
+
+    *Stan Lo*
+
+*   Add `config.precompile_filter_parameters`, which enables precompilation of
+    `config.filter_parameters` using `ActiveSupport::ParameterFilter.precompile_filters`.
+    Precompilation can improve filtering performance, depending on the quantity
+    and types of filters.
+
+    `config.precompile_filter_parameters` defaults to `true` for
+    `config.load_defaults 7.1` and above.
 
-    *DHH*, *Lachlan Sylvester*
+    *Jonathan Hefner*
 
-*   Add `database` (aliased as `db`) option to model generator to allow
-    setting the database. This is useful for applications that use
-    multiple databases and put migrations per database in their own directories.
+*   Add `after_routes_loaded` hook to `Rails::Railtie::Configuration` for
+    engines to add a hook to be called after application routes have been
+    loaded.
 
+    ```ruby
+    MyEngine.config.after_routes_loaded do
+      # code that must happen after routes have been loaded
+    end
     ```
-    bin/rails g model Room capacity:integer --database=kingston
-          invoke  active_record
-          create    db/kingston_migrate/20180830151055_create_rooms.rb
+
+    *Chris Salzberg*
+
+*   Send 303 See Other status code back for the destroy action on newly generated
+    scaffold controllers.
+
+    *Tony Drake*
+
+*   Add `Rails.application.deprecators` as a central point to manage deprecators
+    for an application.
+
+    Individual deprecators can be added and retrieved from the collection:
+
+    ```ruby
+    Rails.application.deprecators[:my_gem] = ActiveSupport::Deprecation.new("2.0", "MyGem")
+    Rails.application.deprecators[:other_gem] = ActiveSupport::Deprecation.new("3.0", "OtherGem")
+    ```
+
+    And the collection's configuration methods affect all deprecators in the
+    collection:
+
+    ```ruby
+    Rails.application.deprecators.debug = true
+
+    Rails.application.deprecators[:my_gem].debug
+    # => true
+    Rails.application.deprecators[:other_gem].debug
+    # => true
+    ```
+
+    Additionally, all deprecators in the collection can be silenced for the
+    duration of a given block:
+
+    ```ruby
+    Rails.application.deprecators.silence do
+      Rails.application.deprecators[:my_gem].warn    # => silenced (no warning)
+      Rails.application.deprecators[:other_gem].warn # => silenced (no warning)
+    end
+    ```
+
+    *Jonathan Hefner*
+
+*   Move dbconsole logic to Active Record connection adapter.
+
+    Instead of hosting the connection logic in the command object, the
+    database adapter should be responsible for connecting to a console session.
+    This patch moves #find_cmd_and_exec to the adapter and exposes a new API to
+    lookup the adapter class without instantiating it.
+
+    *Gannon McGibbon*, *Paarth Madan*
+
+*   Add `Rails.application.message_verifiers` as a central point to configure
+    and create message verifiers for an application.
+
+    This allows applications to, for example, rotate old `secret_key_base`
+    values:
+
+    ```ruby
+    config.before_initialize do |app|
+      app.message_verifiers.rotate(secret_key_base: "old secret_key_base")
+    end
+    ```
+
+    And for libraries to create preconfigured message verifiers:
+
+    ```ruby
+    ActiveStorage.verifier = Rails.application.message_verifiers["ActiveStorage"]
     ```
 
-    Because rails scaffolding uses the model generator, you can
-    also specify a database with the scaffold generator.
+    *Jonathan Hefner*
+
+*   Support MySQL's ssl-mode option for the dbconsole command.
+
+    Verifying the identity of the database server requires setting the ssl-mode
+    option to VERIFY_CA or VERIFY_IDENTITY. This option was previously ignored
+    for the dbconsole command.
+
+    *Petrik de Heus*
+
+*   Delegate application record generator description to orm hooked generator.
 
     *Gannon McGibbon*
 
-*   Raise an error when "recyclable cache keys" are being used by a cache store
-    that does not explicitly support it. Custom cache keys that do support this feature
-    can bypass this error by implementing the `supports_cache_versioning?` method on their
-    class and returning a truthy value.
+*   Show BCC recipients when present in Action Mailer previews.
+
+    *Akshay Birajdar*
+
+*   Extend `routes --grep` to also filter routes by matching against path.
 
-    *Richard Schneeman*
+    Example:
 
-*   Support environment specific credentials overrides.
+    ```bash
+    $ bin/rails routes --grep /cats/1
+    Prefix Verb   URI Pattern         Controller#Action
+       cat GET    /cats/:id(.:format) cats#show
+           PATCH  /cats/:id(.:format) cats#update
+           PUT    /cats/:id(.:format) cats#update
+           DELETE /cats/:id(.:format) cats#destroy
+    ```
+
+    *Orhan Toy*
+
+*   Improve `rails runner` output when given a file path that doesn't exist.
 
-    So any environment will look for `config/credentials/#{Rails.env}.yml.enc` and fall back
-    to `config/credentials.yml.enc`.
+    *Tekin Suleyman*
 
-    The encryption key can be in `ENV["RAILS_MASTER_KEY"]` or `config/credentials/production.key`.
+*   `config.allow_concurrency = false` now use a `Monitor` instead of a `Mutex`
 
-    Environment credentials overrides can be edited with `rails credentials:edit --environment production`.
-    If no override is set up for the passed environment, it will be created.
+    This allows to enable `config.active_support.executor_around_test_case` even
+    when `config.allow_concurrency` is disabled.
 
-    Additionally, the default lookup paths can be overwritten with these configs:
+    *Jean Boussier*
 
-    - `config.credentials.content_path`
-    - `config.credentials.key_path`
+*   Add `routes --unused` option to detect extraneous routes.
 
-    *Wojciech Wnętrzak*
+    Example:
 
-*   Make `ActiveSupport::Cache::NullStore` the default cache store in the test environment.
+    ```bash
+    $ bin/rails routes --unused
 
-    *Michael C. Nelson*
+    Found 2 unused routes:
 
-*   Emit warning for unknown inflection rule when generating model.
+    Prefix Verb URI Pattern    Controller#Action
+       one GET  /one(.:format) action#one
+       two GET  /two(.:format) action#two
+    ```
+
+    *Gannon McGibbon*
 
-    *Yoshiyuki Kinjo*
+*   Add `--parent` option to controller generator to specify parent class of job.
 
-*   Add `database` (aliased as `db`) option to migration generator.
+    Example:
 
-    If you're using multiple databases and have a folder for each database
-    for migrations (ex db/migrate and db/new_db_migrate) you can now pass the
-    `--database` option to the generator to make sure the the migration
-    is inserted into the correct folder.
+    `bin/rails g controller admin/users --parent=admin_controller` generates:
 
+    ```ruby
+    class Admin::UsersController < AdminController
+      # ...
+    end
     ```
-    rails g migration CreateHouses --database=kingston
-      invoke  active_record
-      create    db/kingston_migrate/20180830151055_create_houses.rb
+
+    *Gannon McGibbon*
+
+*   In-app custom credentials templates are now supported.  When a credentials
+    file does not exist, `rails credentials:edit` will now try to use
+    `lib/templates/rails/credentials/credentials.yml.tt` to generate the
+    credentials file, before falling back to the default template.
+
+    This allows e.g. an open-source Rails app (which would not include encrypted
+    credentials files in its repo) to include a credentials template, so that
+    users who install the app will get a custom pre-filled credentials file when
+    they run `rails credentials:edit`.
+
+    *Jonathan Hefner*
+
+*   Except for `dev` and `test` environments, newly generated per-environment
+    credentials files (e.g. `config/credentials/production.yml.enc`) now include
+    a `secret_key_base` for convenience, just as `config/credentials.yml.enc`
+    does.
+
+    *Jonathan Hefner*
+
+*   `--no-*` options now work with the app generator's `--minimal` option, and
+    are both comprehensive and precise.  For example:
+
+    ```bash
+    $ rails new my_cool_app --minimal
+    Based on the specified options, the following options will also be activated:
+
+      --skip-active-job [due to --minimal]
+      --skip-action-mailer [due to --skip-active-job, --minimal]
+      --skip-active-storage [due to --skip-active-job, --minimal]
+      --skip-action-mailbox [due to --skip-active-storage, --minimal]
+      --skip-action-text [due to --skip-active-storage, --minimal]
+      --skip-javascript [due to --minimal]
+      --skip-hotwire [due to --skip-javascript, --minimal]
+      --skip-action-cable [due to --minimal]
+      --skip-bootsnap [due to --minimal]
+      --skip-dev-gems [due to --minimal]
+      --skip-system-test [due to --minimal]
+
+    ...
+
+    $ rails new my_cool_app --minimal --no-skip-active-storage
+    Based on the specified options, the following options will also be activated:
+
+      --skip-action-mailer [due to --minimal]
+      --skip-action-mailbox [due to --minimal]
+      --skip-action-text [due to --minimal]
+      --skip-javascript [due to --minimal]
+      --skip-hotwire [due to --skip-javascript, --minimal]
+      --skip-action-cable [due to --minimal]
+      --skip-bootsnap [due to --minimal]
+      --skip-dev-gems [due to --minimal]
+      --skip-system-test [due to --minimal]
+
+    ...
     ```
 
-    *Eileen M. Uchitelle*
+    *Brad Trick* and *Jonathan Hefner*
+
+*   Add `--skip-dev-gems` option to app generator to skip adding development
+    gems (like `web-console`) to the Gemfile.
+
+    *Brad Trick*
+
+*   Skip Active Storage and Action Mailer if Active Job is skipped.
 
-*   Deprecate `rake routes` in favor of `rails routes`.
+    *Étienne Barrié*
 
-    *Yuji Yaginuma*
+*   Correctly check if frameworks are disabled when running app:update.
 
-*   Deprecate `rake initializers` in favor of `rails initializers`.
+    *Étienne Barrié* and *Paulo Barros*
 
-    *Annie-Claude Côté*
+*   Delegate model generator description to orm hooked generator.
 
-*   Deprecate `rake dev:cache` in favor of `rails dev:cache`.
+    *Gannon McGibbon*
 
-    *Annie-Claude Côté*
+*   Execute `rails runner` scripts inside the executor.
 
-*   Deprecate `rails notes` subcommands in favor of passing an `annotations` argument to `rails notes`.
+    Enables error reporting, query cache, etc.
 
-    The following subcommands are replaced by passing `--annotations` or `-a` to `rails notes`:
-    - `rails notes:custom ANNOTATION=custom` is deprecated in favor of using `rails notes -a custom`.
-    - `rails notes:optimize` is deprecated in favor of using `rails notes -a OPTIMIZE`.
-    - `rails notes:todo` is deprecated in favor of  using`rails notes -a TODO`.
-    - `rails notes:fixme` is deprecated in favor of using `rails notes -a FIXME`.
+    *Jean Boussier*
 
-    *Annie-Claude Côté*
+*   Avoid booting in development then test for test tasks.
 
-*   Deprecate `SOURCE_ANNOTATION_DIRECTORIES` environment variable used by `rails notes`
-    through `Rails::SourceAnnotationExtractor::Annotation` in favor of using `config.annotations.register_directories`.
+    Running one of the rails test subtasks (e.g. test:system, test:models) would
+    go through Rake and cause the app to be booted twice. Now all the test:*
+    subtasks are defined as Thor tasks and directly load the test environment.
 
-    *Annie-Claude Côté*
+    *Étienne Barrié*
 
-*   Deprecate `rake notes` in favor of `rails notes`.
+*   Deprecate `Rails::Generators::Testing::Behaviour` in favor of `Rails::Generators::Testing::Behavior`.
 
-    *Annie-Claude Côté*
+    *Gannon McGibbon*
 
-*   Don't generate unused files in `app:update` task.
+*   Allow configuration of logger size for local and test environments
 
-    Skip the assets' initializer when sprockets isn't loaded.
+    `config.log_file_size`
 
-    Skip `config/spring.rb` when spring isn't loaded.
+    Defaults to `100` megabytes.
 
-    Skip yarn's contents when yarn integration isn't used.
+    *Bernie Chiu*
 
-    *Tsukuru Tanimichi*
+*   Enroll new apps in decrypted diffs of credentials by default.  This behavior
+    can be opted out of with the app generator's `--skip-decrypted-diffs` flag.
 
-*   Make the master.key file read-only for the owner upon generation on
-    POSIX-compliant systems.
+    *Jonathan Hefner*
 
-    Previously:
+*   Support declarative-style test name filters with `bin/rails test`.
 
-        $ ls -l config/master.key
-        -rw-r--r--   1 owner  group      32 Jan 1 00:00 master.key
+    This makes it possible to run a declarative-style test such as:
 
-    Now:
+    ```ruby
+    class MyTest < ActiveSupport::TestCase
+      test "does something" do
+        # ...
+      end
+    end
+    ```
 
-        $ ls -l config/master.key
-        -rw-------   1 owner  group      32 Jan 1 00:00 master.key
+    Using its declared name:
 
-    Fixes #32604.
+    ```bash
+    $ bin/rails test test/my_test.rb -n "does something"
+    ```
 
-    *Jose Luis Duran*
+    Instead of having to specify its expanded method name:
 
-*   Deprecate support for using the `HOST` environment variable to specify the server IP.
+    ```bash
+    $ bin/rails test test/my_test.rb -n test_does_something
+    ```
 
-    The `BINDING` environment variable should be used instead.
+    *Jonathan Hefner*
 
-    Fixes #29516.
+*   Add `--js` and `--skip-javascript` options to `rails new`
 
-    *Yuji Yaginuma*
+    `--js` alias to `rails new --javascript ...`
 
-*   Deprecate passing Rack server name as a regular argument to `rails server`.
+    Same as `-j`, e.g. `rails new --js esbuild ...`
 
-    Previously:
+    `--skip-js` alias to `rails new --skip-javascript ...`
 
-        $ bin/rails server thin
+    Same as `-J`, e.g. `rails new --skip-js ...`
 
-    There wasn't an explicit option for the Rack server to use, now we have the
-    `--using` option with the `-u` short switch.
+    *Dorian Marié*
 
-    Now:
+*   Allow relative paths with leading dot slash to be passed to `rails test`.
 
-        $ bin/rails server -u thin
+    Fix `rails test ./test/model/post_test.rb` to run a single test file.
 
-    This change also improves the error message if a missing or mistyped rack
-    server is given.
+    *Shouichi Kamiya* and *oljfte*
 
-    *Genadi Samokovarov*
+*   Deprecate `config.enable_dependency_loading`. This flag addressed a limitation of the `classic` autoloader and has no effect nowadays. To fix this deprecation, please just delete the reference.
 
-*   Add "rails routes --expanded" option to output routes in expanded mode like
-    "psql --expanded". Result looks like:
+    *Xavier Noria*
 
+*   Define `config.enable_reloading` to be `!config.cache_classes` for a more intuitive name. While `config.enable_reloading` and `config.reloading_enabled?` are preferred from now on, `config.cache_classes` is supported for backwards compatibility.
+
+    *Xavier Noria*
+
+*   Add JavaScript dependencies installation on bin/setup
+
+    Add  `yarn install` to bin/setup when using esbuild, webpack, or rollout.
+
+    *Carlos Ribeiro*
+
+*   Use `controller_class_path` in `Rails::Generators::NamedBase#route_url`
+
+    The `route_url` method now returns the correct path when generating
+    a namespaced controller with a top-level model using `--model-name`.
+
+    Previously, when running this command:
+
+    ```bash
+    $ bin/rails generate scaffold_controller Admin/Post --model-name Post
     ```
-    $ rails routes --expanded
-    --[ Route 1 ]------------------------------------------------------------
-    Prefix            | high_scores
-    Verb              | GET
-    URI               | /high_scores(.:format)
-    Controller#Action | high_scores#index
-    --[ Route 2 ]------------------------------------------------------------
-    Prefix            | new_high_score
-    Verb              | GET
-    URI               | /high_scores/new(.:format)
-    Controller#Action | high_scores#new
+
+    the comments above the controller action would look like:
+
+    ``` ruby
+    # GET /posts
+    def index
+      @posts = Post.all
+    end
     ```
 
-    *Benoit Tigeot*
+    afterwards, they now look like this:
+
+    ``` ruby
+    # GET /admin/posts
+    def index
+      @posts = Post.all
+    end
+    ```
+
+    Fixes #44662.
+
+    *Andrew White*
+
+*   No longer add autoloaded paths to `$LOAD_PATH`.
+
+    This means it won't be possible to load them with a manual `require` call, the class or module can be referenced instead.
+
+    Reducing the size of `$LOAD_PATH` speed-up `require` calls for apps not using `bootsnap`, and reduce the
+    size of the `bootsnap` cache for the others.
+
+    *Jean Boussier*
+
+*   Remove default `X-Download-Options` header
+
+    This header is currently only used by Internet Explorer which
+    will be discontinued in 2022 and since Rails 7 does not fully
+    support Internet Explorer this header should not be a default one.
+
+    *Harun Sabljaković*
+
+*   Add .node-version files for Rails apps that use Node.js
 
-*   Rails 6 requires Ruby 2.5.0 or newer.
+    Node version managers that make use of this file:
+      https://github.com/shadowspawn/node-version-usage#node-version-file-usage
 
-    *Jeremy Daer*, *Kasper Timm Hansen*
+    The generated Dockerfile will use the same node version.
 
+    *Sam Ruby*
 
-Please check [5-2-stable](https://github.com/rails/rails/blob/5-2-stable/railties/CHANGELOG.md) for previous changes.
+Please check [7-0-stable](https://github.com/rails/rails/blob/7-0-stable/railties/CHANGELOG.md) for previous changes.