RubyGems - railties - Versions diffs - 7.1.3.4 → 7.2.0.beta2 - Mend

railties 7.1.3.4 → 7.2.0.beta2

Files changed (124) hide show

data/CHANGELOG.md CHANGED Viewed

@@ -1,893 +1,328 @@
-## Rails 7.1.3.4 (June 04, 2024) ##
+## Rails 7.2.0.beta2 (June 04, 2024) ##
 *   No changes.
-## Rails 7.1.3.3 (May 16, 2024) ##
+## Rails 7.2.0.beta1 (May 29, 2024) ##
-*   No changes.
-## Rails 7.1.3.2 (February 21, 2024) ##
-*   No changes.
-## Rails 7.1.3.1 (February 21, 2024) ##
-*   No changes.
-## Rails 7.1.3 (January 16, 2024) ##
-*   Make sure `config.after_routes_loaded` hook runs on boot.
-    *Rafael Mendonça França*
-*   Fix `config.log_level` not being respected when using a `BroadcastLogger`
-    *Édouard Chin*
-*   Fix isolated engines to take `ActiveRecord::Base.table_name_prefix` into consideration.
-    This will allow for engine defined models, such as inside Active Storage, to respect
-    Active Record table name prefix configuration.
-    *Chedli Bourguiba*
-*   The `bin/rails app:template` command will no longer add potentially unwanted
-    gem platforms via `bundle lock --add-platform=...` commands.
-    *Jonathan Hefner*
-## Rails 7.1.2 (November 10, 2023) ##
-*   Fix running `db:system:change` when app has no Dockerfile.
-    *Hartley McGuire*
-*   If you accessed `config.eager_load_paths` and friends, later changes to
-    `config.paths` were not reflected in the expected auto/eager load paths.
-    Now, they are.
-    This bug has been latent since Rails 3.
-    Fixes #49629.
-    *Xavier Noria*
+*   Create a Dev Container Generator that generates a Dev Container setup based on the current configuration
+    of the application. Usage:
-## Rails 7.1.1 (October 11, 2023) ##
+    `bin/rails devcontainer`
-*   Ensures the Rails generated Dockerfile uses correct ruby version and matches Gemfile.
+    *Andrew Novoselac*
-    *Abhay Nikam*
+*   Add Rubocop and GitHub Actions to plugin generator.
+    This can be skipped using --skip-rubocop and --skip-ci.
+    *Chris Oliver*
-## Rails 7.1.0 (October 05, 2023) ##
+*   Remove support for `oracle`, `sqlserver` and JRuby specific database adapters from the
+    `rails new` and `rails db:system:change` commands.
-*   No changes.
-## Rails 7.1.0.rc2 (October 01, 2023) ##
-*   Always set the Rails logger to be an instance of `ActiveSupport::BroadcastLogger`.
-    *Edouard Chin*
-## Rails 7.1.0.rc1 (September 27, 2023) ##
-*   Require `concurrent-ruby` in `config/puma.rb` so that Puma can boot in
-    production when `WEB_CONCURRENCY` is not explicitly specified.
-    Fixes #49323.
-    *Matt Brictson*
-*   Raise error when generating attribute with dangerous name.
-    The following will now raise an error as `save` and `hash` are already
-    defined by Active Record.
-    ```bash
-    $ bin/rails generate model Post save
-    $ bin/rails generate model Post hash
-    ```
-    *Petrik de Heus*
-## Rails 7.1.0.beta1 (September 13, 2023) ##
-*   Add ability to show slow tests to the test runner
-    ```bash
-    $ bin/test --profile # additionally prints 10 (default) slowest tests
-    # or
-    $ bin/test --profile 20 # prints 20 slowest tests
-    ```
-    *fatkodima*
-*   `rails new --javascript` generator now supports Bun
-    ```bash
-    $ rails new my_new_app --javascript=bun
-    ```
-    *Jason Meller*
-*   bin/setup uses `bun` instead of `yarn` when generated an app with bun
-    Use `bun install` on `bin/setup` when using `bun`.
-    *Cadu Ribeiro*
-*   `config/application.rb` now includes
-    ```ruby
-    config.autoload_lib(ignore: %w(assets tasks))
-    ```
+    The supported options are `sqlite3`, `mysql`, `postgresql` and `trilogy`.
-    In practice, this means that new 7.1 applications autoload from `lib` out of the box.
+    *Andrew Novoselac*
-    *Xavier Noria*
+*   Add options to `bin/rails app:update`.
-*   Add an option to start rails console in sandbox mode by default
+    `bin/rails app:update` now supports the same generic options that generators do:
-    `sandbox_by_default` option is added to start rails console in sandbox
-    mode by default. With this option turned on, `--no-sandbox` must be
-    specified to start rails in non-sandbox mode.
+    * `--force`: Accept all changes to existing files
+    * `--skip`: Refuse all changes to existing files
+    * `--pretend`: Don't make any changes
+    * `--quiet`: Don't output all changes made
-    Note that this option is ignored when rails environment is development
-    or test.
+    *Étienne Barrié*
-    *Shouichi Kamiya*
+*   Implement Rails console commands and helpers with IRB v1.13's extension APIs.
-*   Omit `webdrivers` gem dependency from `Gemfile` template
+    Rails console users will now see `helper`, `controller`, `new_session`, and `app` under
+    IRB help message's `Helper methods` category. And `reload!` command will be displayed under
+    the new `Rails console` commands category.
-    *Sean Doyle*
+    Prior to this change, Rails console's commands and helper methods are added through IRB's
+    private components and don't show up in its help message, which led to poor discoverability.
-*   Support filtering tests by line ranges
+    *Stan Lo*
-    The new syntax allows you to filter tests by line ranges. For example, the
-    following command runs tests from line 10 to 20.
+*   Remove deprecated `Rails::Generators::Testing::Behaviour`.
-    ```bash
-    $ rails test test/models/user_test.rb:10-20
-    ```
+    *Rafael Mendonça França*
-    *Shouichi Kamiya*, *Seonggi Yang*, *oljfte*, *Ryohei UEDA*
+*   Remove deprecated `find_cmd_and_exec` console helper.
-*   Update default scaffold templates to set 303 (See Other) as status code
-    on redirect for the update action for XHR requests other than GET or POST
-    to avoid issues (e.g browsers trying to follow the redirect using the
-    original request method resulting in double PATCH/PUT)
+    *Rafael Mendonça França*
-    *Guillermo Iguaran*
+*   Remove deprecated `Rails.config.enable_dependency_loading`.
-*   The new `config.autoload_lib_once` is similar to `config.autoload_lib`,
-    except that it adds `lib` to `config.autoload_once_paths` instead.
+    *Rafael Mendonça França*
-    By calling `config.autoload_lib_once`, classes and modules in `lib` can be
-    autoloaded, even from application initializers, but won't be reloaded.
+*   Remove deprecated `Rails.application.secrets`.
-    Please, see further details in the [autoloading
-    guide](https://guides.rubyonrails.org/v7.1/autoloading_and_reloading_constants.html).
+    *Rafael Mendonça França*
-    *Xavier Noria*
+*   Generated Gemfile will include `require: "debug/prelude"` for the `debug` gem.
-*   Add `config.action_dispatch.debug_exception_log_level` to configure the log
-    level used by `ActionDispatch::DebugExceptions`.
+    Requiring `debug` gem directly automatically activates it, which could introduce
+    additional overhead and memory usage even without entering a debugging session.
-    The default is `:fatal`, but with `load_defaults "7.1"` the default will be
-    `:error`.
+    By making Bundler require `debug/prelude` instead, developers can keep their access
+    to breakpoint methods like `debugger` or `binding.break`, but the debugger won't be
+    activated until a breakpoint is hit.
-    *Hartley McGuire*
+    *Stan Lo*
-*   Add `DATABASE` option to `railties:install:migrations`
+*   Skip generating a `test` job in ci.yml when a new application is generated with the
+    `--skip-test` option.
-    This allows you to specify which database the migrations should be copied to
-    when running `rails railties:install:migrations`.
+    *Steve Polito*
-    ```bash
-    $ rails railties:install:migrations DATABASE=animals
-    ```
+*   Update the `.node-version` file conditionally generated for new applications to 20.11.1
-    *Matthew Hirst*
+    *Steve Polito*
-*   The new method `config.autoload_lib(ignore:)` provides a simple way to
-    autoload from `lib`:
+*   Fix sanitizer vendor configuration in 7.1 defaults.
-    ```ruby
-    # config/application.rb
-    config.autoload_lib(ignore: %w(assets tasks))
-    ```
+    In apps where rails-html-sanitizer was not eagerly loaded, the sanitizer default could end up
+    being Rails::HTML4::Sanitizer when it should be set to Rails::HTML5::Sanitizer.
-    Please, see further details in the [autoloading
-    guide](https://guides.rubyonrails.org/v7.1/autoloading_and_reloading_constants.html).
+    *Mike Dalessio*, *Rafael Mendonça França*
-    *Xavier Noria*
+*   Set `action_mailer.default_url_options` values in `development` and `test`.
-*   Don't show secret_key_base for `Rails.application.config#inspect`.
+    Prior to this commit, new Rails applications would raise `ActionView::Template::Error`
+    if a mailer included a url built with a `*_path` helper.
-    Before:
+    *Steve Polito*
-    ```ruby
-    Rails.application.config.inspect
-    "#<Rails::Application::Configuration:0x00000001132b02a0 @root=... @secret_key_base=\"b3c631c314c0bbca50c1b2843150fe33\" ... >"
-    ```
+*   Introduce `Rails::Generators::Testing::Assertions#assert_initializer`.
-    After:
+    Compliments the existing `initializer` generator action.
-    ```ruby
-    Rails.application.config.inspect
-    "#<Rails::Application::Configuration:0x00000001132b02a0>"
+    ```rb
+    assert_initializer "mail_interceptors.rb"
     ```
-    *Petrik de Heus*
+    *Steve Polito*
-*   Deprecate calling `Rails.application.secrets`.
+*   Generate a .devcontainer folder and its contents when creating a new app.
-    Rails `secrets` have been deprecated in favor of `credentials`.
-    Calling `Rails.application.secrets` should show a deprecation warning.
+    The .devcontainer folder includes everything needed to boot the app and do development in a remote container.
-    *Petrik de Heus*
+    The container setup includes:
+     - A redis container for Kredis, ActionCable etc.
+     - A database (SQLite, Postgres, MySQL or MariaDB)
+     - A Headless chrome container for system tests
+     - Active Storage configured to use the local disk and with preview features working
-*   Store `secret_key_base` in `Rails.config` for local environments.
+    If any of these options are skipped in the app setup they will not be included in the container configuration.
-    Rails `secrets` have been deprecated in favor of `credentials`.
-    For the local environments the `secret_key_base` is now stored in
-    `Rails.config.secret_key_base` instead of the soft deprecated
-    `Rails.application.secrets.secret_key_base`.
+    These files can be skipped using the `--skip-devcontainer` option.
-    *Petrik de Heus*
+    *Andrew Novoselac & Rafael Mendonça França*
-*   Enable force_ssl=true in production by default: Force all access to the app over SSL,
-    use Strict-Transport-Security, and use secure cookies
+*   Introduce `SystemTestCase#served_by` for configuring the System Test application server.
-    *Justin Searls*, *Aaron Patterson*, *Guillermo Iguaran*, *Vinícius Bispo*
-*   Add engine's draw paths to application route set, so that the application
-    can draw route files defined in engine paths.
-    *Gannon McGibbon*
-*   Support `VISUAL` environment variable for commands which open an editor,
-    and prefer it over `EDITOR`.
-    *Summer ☀️*
-*   Add engine's `test/fixtures` path to `fixture_paths` in `on_load` hook if
-    path exists and is under the Rails application root.
-    *Chris Salzberg*
-*   `bin/rails app:template` now runs `bundle install` and any `after_bundle`
-    blocks after the template is executed.
-    *Jonathan Hefner* and *Gerry Caulfield*
-*   Enable passing column size to migration generator
-    Previously you could pass a limit to the migration generator:
-    `rails generate migration CreateAuthor name:text{65535}`
-    Now, a size attribute can be passed to the migration generator:
-    `rails generate migration CreateAuthor name:text{medium}`
-    This generates a migration which includes the size attribute:
+    By default this is localhost. This method allows the host and port to be specified manually.
     ```ruby
-    class CreateAuthor < ActiveRecord::Migration[7.1]
-      def change
-        create_table :authors do |t|
-          t.text :name, size: :medium
-        end
-      end
+    class ApplicationSystemTestCase < ActionDispatch::SystemTestCase
+      served_by host: "testserver", port: 45678
     end
     ```
-    *Josh Broughton*, *Hartley McGuire*
+    *Andrew Novoselac & Rafael Mendonça França*
-*   Trying to set a config key with the same name of a method now raises:
+*   `bin/rails test` will no longer load files named `*_test.rb` if they are located in the `fixtures` folder.
-    ```ruby
-    config.load_defaults = 7.0
-    # NoMethodError: Cannot assign to `load_defaults`, it is a configuration method
-    ```
-    *Xavier Noria*
-*   Deprecate `secrets:edit/show` and remove `secrets:setup`
-    `bin/rails secrets:setup` has been deprecated since Rails 5.2 in favor of
-    credentials. This command has been removed.
-    `bin/rails secrets:show` and `bin/rails secrets:edit` have been deprecated
-    in favor of credentials.
-    Run `bin/rails credentials:help` for more information
-    *Petrik de Heus*
-*   `bin/rails --help` will now list only framework and plugin commands. Rake
-    tasks defined in `lib/tasks/*.rake` files will no longer be included. For a
-    list of those tasks, use `rake -T`.
-    *Jonathan Hefner*
-*   Allow calling `bin/rails restart` outside of app directory.
+    *Edouard Chin*
-    The following would previously fail with a "No Rakefile found" error.
+*   Ensure logger tags configured with `config.log_tags` are still active in `request.action_dispatch` handlers.
-    ```bash
-    $ blog/bin/rails restart
-    ```
+    *KJ Tsanaktsidis*
-    *Petrik de Heus*
+*   Setup jemalloc in the default Dockerfile for memory optimization.
-*   Support prerelease rubies in Gemfile template if RubyGems version is 3.3.13 or higher.
+    *Matt Almeida*, *Jean Boussier*
-    *Yasuo Honda*, *David Rodríguez*
+*   Commented out lines in .railsrc file should not be treated as arguments when using
+    rails new generator command. Update ARGVScrubber to ignore text after `#` symbols.
-*   Autoloading setup honors root directories manually set by the user.
+    *Willian Tenfen*
-    This is relevant for custom namespaces. For example, if you'd like classes
-    and modules under `app/services` to be defined in the `Services` namespace
-    without an extra `app/services/services` directory, this is now enough:
+*   Skip CSS when generating APIs.
-    ```ruby
-    # config/initializers/autoloading.rb
+    *Ruy Rocha*
-    # The namespace has to exist.
-    #
-    # In this example we define the module on the spot. Could also be created
-    # elsewhere and its definition loaded here with an ordinary `require`. In
-    # any case, `push_dir` expects a class or module object.
-    module Services; end
+*   Rails console now indicates application name and the current Rails environment:
-    Rails.autoloaders.main.push_dir("#{Rails.root}/app/services", namespace: Services)
+    ```txt
+    my-app(dev)> # for RAILS_ENV=development
+    my-app(test)> # for RAILS_ENV=test
+    my-app(prod)> # for RAILS_ENV=production
+    my-app(my_env)> # for RAILS_ENV=my_env
     ```
-    Check the autoloading guide for further details.
+    The application name is derived from the application's module name from `config/application.rb`.
+    For example, `MyApp` will displayed as `my-app` in the prompt.
-    *Xavier Noria*
-*   Railties now requires the irb gem as a dependency, which means when you install Rails, irb will also
-    be installed as a gem. Rails will then use the installed version of irb for its console instead of
-    relying on Ruby's built-in version.
-    This ensures that Rails has access to the most up-to-date and reliable version of irb for its console.
+    Additionally, the environment name will be colorized when the environment is
+    `development` (blue), `test` (blue), or `production` (red), if your
+    terminal supports it.
     *Stan Lo*
-*   Use infinitive form for all rails command descriptions verbs.
-    *Petrik de Heus*
-*   Credentials commands (e.g. `bin/rails credentials:edit`) now respect
-    `config.credentials.content_path` and `config.credentials.key_path` when set
-    in `config/application.rb` or `config/environments/#{Rails.env}.rb`.
-    Before:
+*   Ensure `autoload_paths`, `autoload_once_paths`, `eager_load_paths`, and
+    `load_paths` only have directories when initialized from engine defaults.
-      * `bin/rails credentials:edit` ignored `RAILS_ENV`, and would always edit
-        `config/credentials.yml.enc`.
+    Previously, files under the `app` directory could end up there too.
-      * `bin/rails credentials:edit --environment foo` would create and edit
-        `config/credentials/foo.yml.enc`.
+    *Takumasa Ochi*
-      * If `config.credentials.content_path` or `config.credentials.key_path`
-        was set, `bin/rails credentials:edit` could not be used to edit the
-        credentials.  Editing credentials required using `bin/rails
-        encrypted:edit path/to/credentials --key path/to/key`.
+*   Prevent unnecessary application reloads in development.
-    After:
+    Previously, some files outside autoload paths triggered unnecessary reloads.
+    With this fix, application reloads according to `Rails.autoloaders.main.dirs`,
+    thereby preventing unnecessary reloads.
-      * `bin/rails credentials:edit` will edit the credentials file that the app
-        would load for the current `RAILS_ENV`.
+    *Takumasa Ochi*
-      * `bin/rails credentials:edit` respects `config.credentials.content_path`
-        and `config.credentials.key_path` when set in `config/application.rb`
-        or `config/environments/#{Rails.env}.rb`.
+*   Use `oven-sh/setup-bun` in GitHub CI when generating an app with Bun.
-      * `bin/rails credentials:edit --environment foo` will create and edit
-        `config/credentials/foo.yml.enc` _if_ `config.credentials.content_path`
-        has not been set for the `foo` environment.  Ultimately, it will edit
-        the credentials file that the app would load for the `foo` environment.
+    *TangRufus*
-    *Jonathan Hefner*
+*   Disable `pidfile` generation in the `production` environment.
-*   Add descriptions for non-Rake commands when running `rails -h`.
+    *Hans Schnedlitz*
-    *Petrik de Heus*
+*   Set `config.action_view.annotate_rendered_view_with_filenames` to `true` in
+    the `development` environment.
-*   Show relevant commands when calling help
+    *Adrian Marin*
-    When running `rails -h` or just `rails` outside a Rails application,
-    Rails outputs all options for running the `rails new` command. This can be
-    confusing to users when they probably want to see the common Rails commands.
+*   Support the `BACKTRACE` environment variable to turn off backtrace cleaning.
-    Instead, we should always show the common commands when running `rails -h`
-    inside or outside a Rails application.
+    Useful for debugging framework code:
-    As the relevant commands inside a Rails application differ from the
-    commands outside an application, the help USAGE file has been split to
-    show the most relevant commands for the context.
-    *Petrik de Heus*
-*   Add Rails::HealthController#show and map it to /up for newly generated applications.
-    Load balancers and uptime monitors all need a basic endpoint to tell whether the app is up.
-    This is a good starting point that'll work in many situations.
-    *DHH*
-*   Only use HostAuthorization middleware if `config.hosts` is not empty
+    ```sh
+    BACKTRACE=1 bin/rails server
+    ```
-    *Hartley McGuire*
+    *Alex Ghiculescu*
-*   Raise an exception when a `before_action`'s "only" or "except" filter
-    options reference an action that doesn't exist. This will be enabled by
-    default but can be overridden via config.
+*   Raise `ArgumentError` when reading `config.x.something` with arguments:
     ```ruby
-    # config/environments/production.rb
-    config.action_controller.raise_on_missing_callback_actions = false
+    config.x.this_works.this_raises true # raises ArgumentError
     ```
-    *Jess Bees*
+    *Sean Doyle*
-*   Use physical processor count as the default Puma worker count in production.
-    This can be overridden by setting `ENV["WEB_CONCURRENCY"]` or editing the
-    generated "config/puma.rb" directly.
+*   Add default PWA files for manifest and service-worker that are served from `app/views/pwa` and can be dynamically rendered through ERB. Mount these files explicitly at the root with default routes in the generated routes file.
     *DHH*
-*   Add Docker files by default to new apps: Dockerfile, .dockerignore, bin/docker-entrypoint.
-    These files can be skipped with `--skip-docker`. They're intended as a starting point for
-    a production deploy of the application. Not intended for development (see Docked Rails for that).
-    Example:
-    ```bash
-    $ docker build -t app .
-    $ docker volume create app-storage
-    $ docker run --rm -it -v app-storage:/rails/storage -p 3000:3000 --env RAILS_MASTER_KEY=<see config/master.key> app
-    ```
-    You can also start a console or a runner from this image:
-    ```bash
-    $ docker run --rm -it -v app-storage:/rails/storage --env RAILS_MASTER_KEY=<see config/master.key> app console
-    ```
-    To create a multi-platform image on Apple Silicon to deploy on AMD or Intel and push to Docker Hub for user/app:
-    ```bash
-    $ docker login -u <user>
-    $ docker buildx create --use
-    $ docker buildx build --push --platform=linux/amd64,linux/arm64 -t <user/image> .
-    ```
-    *DHH, Sam Ruby*
-*   Add ENV["SECRET_KEY_BASE_DUMMY"] for starting production environment with a generated secret base key,
-    which can be used to run tasks like `assets:precompile` without making the RAILS_MASTER_KEY available
-    to the build process.
-    Dockerfile layer example:
-    ```
-    RUN SECRET_KEY_BASE_DUMMY=1 bundle exec rails assets:precompile
-    ```
+*   Updated system tests to now use headless Chrome by default for the new applications.
     *DHH*
-*   Show descriptions for all commands in Rails help
-    When calling `rails help` most commands missed their description. We now
-    show the same descriptions as shown in `rails -T`.
-    *Petrik de Heus*
-*   Always generate the storage/ directory with rails new to ensure there's a stable place to
-    put permanent files, and a single mount point for containers to map. Then default sqlite3 databases
-    to live there instead of db/, which is only meant for configuration, not data.
+*   Add GitHub CI files for Dependabot, Brakeman, RuboCop, and running tests by default. Can be skipped with `--skip-ci`.
     *DHH*
-*   Rails console now disables `IRB`'s autocompletion feature in production by default.
-    Setting `IRB_USE_AUTOCOMPLETE=true` can override this default.
-    *Stan Lo*
-*   Add `config.precompile_filter_parameters`, which enables precompilation of
-    `config.filter_parameters` using `ActiveSupport::ParameterFilter.precompile_filters`.
-    Precompilation can improve filtering performance, depending on the quantity
-    and types of filters.
-    `config.precompile_filter_parameters` defaults to `true` for
-    `config.load_defaults 7.1` and above.
-    *Jonathan Hefner*
-*   Add `after_routes_loaded` hook to `Rails::Railtie::Configuration` for
-    engines to add a hook to be called after application routes have been
-    loaded.
-    ```ruby
-    MyEngine.config.after_routes_loaded do
-      # code that must happen after routes have been loaded
-    end
-    ```
-    *Chris Salzberg*
-*   Send 303 See Other status code back for the destroy action on newly generated
-    scaffold controllers.
-    *Tony Drake*
-*   Add `Rails.application.deprecators` as a central point to manage deprecators
-    for an application.
-    Individual deprecators can be added and retrieved from the collection:
-    ```ruby
-    Rails.application.deprecators[:my_gem] = ActiveSupport::Deprecation.new("2.0", "MyGem")
-    Rails.application.deprecators[:other_gem] = ActiveSupport::Deprecation.new("3.0", "OtherGem")
-    ```
-    And the collection's configuration methods affect all deprecators in the
-    collection:
-    ```ruby
-    Rails.application.deprecators.debug = true
-    Rails.application.deprecators[:my_gem].debug
-    # => true
-    Rails.application.deprecators[:other_gem].debug
-    # => true
-    ```
-    Additionally, all deprecators in the collection can be silenced for the
-    duration of a given block:
-    ```ruby
-    Rails.application.deprecators.silence do
-      Rails.application.deprecators[:my_gem].warn    # => silenced (no warning)
-      Rails.application.deprecators[:other_gem].warn # => silenced (no warning)
-    end
-    ```
-    *Jonathan Hefner*
-*   Move dbconsole logic to Active Record connection adapter.
-    Instead of hosting the connection logic in the command object, the
-    database adapter should be responsible for connecting to a console session.
-    This patch moves #find_cmd_and_exec to the adapter and exposes a new API to
-    lookup the adapter class without instantiating it.
-    *Gannon McGibbon*, *Paarth Madan*
-*   Add `Rails.application.message_verifiers` as a central point to configure
-    and create message verifiers for an application.
-    This allows applications to, for example, rotate old `secret_key_base`
-    values:
-    ```ruby
-    config.before_initialize do |app|
-      app.message_verifiers.rotate(secret_key_base: "old secret_key_base")
-    end
-    ```
-    And for libraries to create preconfigured message verifiers:
-    ```ruby
-    ActiveStorage.verifier = Rails.application.message_verifiers["ActiveStorage"]
-    ```
-    *Jonathan Hefner*
-*   Support MySQL's ssl-mode option for the dbconsole command.
-    Verifying the identity of the database server requires setting the ssl-mode
-    option to VERIFY_CA or VERIFY_IDENTITY. This option was previously ignored
-    for the dbconsole command.
-    *Petrik de Heus*
-*   Delegate application record generator description to orm hooked generator.
-    *Gannon McGibbon*
-*   Show BCC recipients when present in Action Mailer previews.
-    *Akshay Birajdar*
-*   Extend `routes --grep` to also filter routes by matching against path.
-    Example:
-    ```bash
-    $ bin/rails routes --grep /cats/1
-    Prefix Verb   URI Pattern         Controller#Action
-       cat GET    /cats/:id(.:format) cats#show
-           PATCH  /cats/:id(.:format) cats#update
-           PUT    /cats/:id(.:format) cats#update
-           DELETE /cats/:id(.:format) cats#destroy
-    ```
+*   Add Brakeman by default for static analysis of security vulnerabilities. Allow skipping with `--skip-brakeman option`.
-    *Orhan Toy*
+    *vipulnsward*
-*   Improve `rails runner` output when given a file path that doesn't exist.
+*   Add RuboCop with rules from `rubocop-rails-omakase` by default. Skip with `--skip-rubocop`.
-    *Tekin Suleyman*
+    *DHH* and *zzak*
-*   `config.allow_concurrency = false` now use a `Monitor` instead of a `Mutex`
+*   Use `bin/rails runner --skip-executor` to not wrap the runner script with an
+    Executor.
-    This allows to enable `config.active_support.executor_around_test_case` even
-    when `config.allow_concurrency` is disabled.
+    *Ben Sheldon*
-    *Jean Boussier*
-*   Add `routes --unused` option to detect extraneous routes.
-    Example:
-    ```bash
-    $ bin/rails routes --unused
-    Found 2 unused routes:
-    Prefix Verb URI Pattern    Controller#Action
-       one GET  /one(.:format) action#one
-       two GET  /two(.:format) action#two
-    ```
-    *Gannon McGibbon*
-*   Add `--parent` option to controller generator to specify parent class of job.
-    Example:
-    `bin/rails g controller admin/users --parent=admin_controller` generates:
-    ```ruby
-    class Admin::UsersController < AdminController
-      # ...
-    end
-    ```
-    *Gannon McGibbon*
-*   In-app custom credentials templates are now supported.  When a credentials
-    file does not exist, `rails credentials:edit` will now try to use
-    `lib/templates/rails/credentials/credentials.yml.tt` to generate the
-    credentials file, before falling back to the default template.
-    This allows e.g. an open-source Rails app (which would not include encrypted
-    credentials files in its repo) to include a credentials template, so that
-    users who install the app will get a custom pre-filled credentials file when
-    they run `rails credentials:edit`.
-    *Jonathan Hefner*
-*   Except for `dev` and `test` environments, newly generated per-environment
-    credentials files (e.g. `config/credentials/production.yml.enc`) now include
-    a `secret_key_base` for convenience, just as `config/credentials.yml.enc`
-    does.
-    *Jonathan Hefner*
-*   `--no-*` options now work with the app generator's `--minimal` option, and
-    are both comprehensive and precise.  For example:
-    ```bash
-    $ rails new my_cool_app --minimal
-    Based on the specified options, the following options will also be activated:
-      --skip-active-job [due to --minimal]
-      --skip-action-mailer [due to --skip-active-job, --minimal]
-      --skip-active-storage [due to --skip-active-job, --minimal]
-      --skip-action-mailbox [due to --skip-active-storage, --minimal]
-      --skip-action-text [due to --skip-active-storage, --minimal]
-      --skip-javascript [due to --minimal]
-      --skip-hotwire [due to --skip-javascript, --minimal]
-      --skip-action-cable [due to --minimal]
-      --skip-bootsnap [due to --minimal]
-      --skip-dev-gems [due to --minimal]
-      --skip-system-test [due to --minimal]
-    ...
-    $ rails new my_cool_app --minimal --no-skip-active-storage
-    Based on the specified options, the following options will also be activated:
-      --skip-action-mailer [due to --minimal]
-      --skip-action-mailbox [due to --minimal]
-      --skip-action-text [due to --minimal]
-      --skip-javascript [due to --minimal]
-      --skip-hotwire [due to --skip-javascript, --minimal]
-      --skip-action-cable [due to --minimal]
-      --skip-bootsnap [due to --minimal]
-      --skip-dev-gems [due to --minimal]
-      --skip-system-test [due to --minimal]
-    ...
-    ```
-    *Brad Trick* and *Jonathan Hefner*
-*   Add `--skip-dev-gems` option to app generator to skip adding development
-    gems (like `web-console`) to the Gemfile.
-    *Brad Trick*
-*   Skip Active Storage and Action Mailer if Active Job is skipped.
-    *Étienne Barrié*
-*   Correctly check if frameworks are disabled when running app:update.
+*   Fix isolated engines to take `ActiveRecord::Base.table_name_prefix` into consideration.
-    *Étienne Barrié* and *Paulo Barros*
+    This will allow for engine defined models, such as inside Active Storage, to respect
+    Active Record table name prefix configuration.
-*   Delegate model generator description to orm hooked generator.
+    *Chedli Bourguiba*
-    *Gannon McGibbon*
+*   Fix running `db:system:change` when the app has no Dockerfile.
-*   Execute `rails runner` scripts inside the executor.
+    *Hartley McGuire*
-    Enables error reporting, query cache, etc.
+*   In Action Mailer previews, list inline attachments separately from normal
+    attachments.
-    *Jean Boussier*
+    For example, attachments that were previously listed like
-*   Avoid booting in development then test for test tasks.
+      > Attachments: logo.png file1.pdf file2.pdf
-    Running one of the rails test subtasks (e.g. test:system, test:models) would
-    go through Rake and cause the app to be booted twice. Now all the test:*
-    subtasks are defined as Thor tasks and directly load the test environment.
+    will now be listed like
-    *Étienne Barrié*
+      > Attachments: file1.pdf file2.pdf (Inline: logo.png)
-*   Deprecate `Rails::Generators::Testing::Behaviour` in favor of `Rails::Generators::Testing::Behavior`.
+    *Christian Schmidt* and *Jonathan Hefner*
-    *Gannon McGibbon*
+*   In mailer preview, only show SMTP-To if it differs from the union of To, Cc and Bcc.
-*   Allow configuration of logger size for local and test environments
+    *Christian Schmidt*
-    `config.log_file_size`
+*   Enable YJIT by default on new applications running Ruby 3.3+.
-    Defaults to `100` megabytes.
+    This can be disabled by setting `Rails.application.config.yjit = false`
-    *Bernie Chiu*
+    *Jean Boussier*, *Rafael Mendonça França*
-*   Enroll new apps in decrypted diffs of credentials by default.  This behavior
-    can be opted out of with the app generator's `--skip-decrypted-diffs` flag.
+*   In Action Mailer previews, show date from message `Date` header if present.
-    *Jonathan Hefner*
+    *Sampat Badhe*
-*   Support declarative-style test name filters with `bin/rails test`.
+*   Exit with non-zero status when the migration generator fails.
-    This makes it possible to run a declarative-style test such as:
+    *Katsuhiko YOSHIDA*
-    ```ruby
-    class MyTest < ActiveSupport::TestCase
-      test "does something" do
-        # ...
-      end
-    end
-    ```
+*   Use numeric UID and GID in Dockerfile template.
-    Using its declared name:
+    The Dockerfile generated by `rails new` sets the default user and group
+    by name instead of UID:GID. This can cause the following error in Kubernetes:
-    ```bash
-    $ bin/rails test test/my_test.rb -n "does something"
     ```
-    Instead of having to specify its expanded method name:
-    ```bash
-    $ bin/rails test test/my_test.rb -n test_does_something
+    container has runAsNonRoot and image has non-numeric user (rails), cannot verify user is non-root
     ```
-    *Jonathan Hefner*
-*   Add `--js` and `--skip-javascript` options to `rails new`
-    `--js` alias to `rails new --javascript ...`
-    Same as `-j`, e.g. `rails new --js esbuild ...`
-    `--skip-js` alias to `rails new --skip-javascript ...`
-    Same as `-J`, e.g. `rails new --skip-js ...`
-    *Dorian Marié*
-*   Allow relative paths with leading dot slash to be passed to `rails test`.
-    Fix `rails test ./test/model/post_test.rb` to run a single test file.
-    *Shouichi Kamiya* and *oljfte*
-*   Deprecate `config.enable_dependency_loading`. This flag addressed a limitation of the `classic` autoloader and has no effect nowadays. To fix this deprecation, please just delete the reference.
-    *Xavier Noria*
-*   Define `config.enable_reloading` to be `!config.cache_classes` for a more intuitive name. While `config.enable_reloading` and `config.reloading_enabled?` are preferred from now on, `config.cache_classes` is supported for backwards compatibility.
-    *Xavier Noria*
-*   Add JavaScript dependencies installation on bin/setup
+    This change sets default user and group by their numeric values.
-    Add  `yarn install` to bin/setup when using esbuild, webpack, or rollout.
+    *Ivan Fedotov*
-    *Carlos Ribeiro*
+*   Disallow invalid values for rails new options.
-*   Use `controller_class_path` in `Rails::Generators::NamedBase#route_url`
+    The `--database`, `--asset-pipeline`, `--css`, and `--javascript` options
+    for `rails new` take different arguments. This change validates them.
-    The `route_url` method now returns the correct path when generating
-    a namespaced controller with a top-level model using `--model-name`.
+    *Tony Drake*, *Akhil G Krishnan*, *Petrik de Heus*
-    Previously, when running this command:
+*   Conditionally print `$stdout` when invoking `run_generator`.
-    ```bash
-    $ bin/rails generate scaffold_controller Admin/Post --model-name Post
-    ```
-    the comments above the controller action would look like:
-    ``` ruby
-    # GET /posts
-    def index
-      @posts = Post.all
-    end
-    ```
+    In an effort to improve the developer experience when debugging
+    generator tests, we add the ability to conditionally print `$stdout`
+    instead of capturing it.
-    afterwards, they now look like this:
+    This allows for calls to `binding.irb` and `puts` work as expected.
-    ``` ruby
-    # GET /admin/posts
-    def index
-      @posts = Post.all
-    end
+    ```sh
+    RAILS_LOG_TO_STDOUT=true ./bin/test test/generators/actions_test.rb
     ```
-    Fixes #44662.
-    *Andrew White*
-*   No longer add autoloaded paths to `$LOAD_PATH`.
-    This means it won't be possible to load them with a manual `require` call, the class or module can be referenced instead.
-    Reducing the size of `$LOAD_PATH` speed-up `require` calls for apps not using `bootsnap`, and reduce the
-    size of the `bootsnap` cache for the others.
-    *Jean Boussier*
-*   Remove default `X-Download-Options` header
-    This header is currently only used by Internet Explorer which
-    will be discontinued in 2022 and since Rails 7 does not fully
-    support Internet Explorer this header should not be a default one.
-    *Harun Sabljaković*
-*   Add .node-version files for Rails apps that use Node.js
-    Node version managers that make use of this file:
-      https://github.com/shadowspawn/node-version-usage#node-version-file-usage
+    *Steve Polito*
-    The generated Dockerfile will use the same node version.
+*   Remove the option `config.public_file_server.enabled` from the generators
+    for all environments, as the value is the same in all environments.
-    *Sam Ruby*
+    *Adrian Hirt*
-Please check [7-0-stable](https://github.com/rails/rails/blob/7-0-stable/railties/CHANGELOG.md) for previous changes.
+Please check [7-1-stable](https://github.com/rails/rails/blob/7-1-stable/railties/CHANGELOG.md) for previous changes.