RubyGems - railties - Versions diffs - 7.1.6 → 7.2.3 - Mend

railties 7.1.6 → 7.2.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (134) hide show

data/CHANGELOG.md CHANGED Viewed

@@ -1,961 +1,398 @@
-## Rails 7.1.6 (October 28, 2025) ##
-*   No changes.
+## Rails 7.2.3 (October 28, 2025) ##
+*   Use `secret_key_base` from ENV or credentials when present locally.
-## Rails 7.1.5.2 (August 13, 2025) ##
+    When ENV["SECRET_KEY_BASE"] or
+    `Rails.application.credentials.secret_key_base` is set for test or
+    development, it is used for the `Rails.config.secret_key_base`,
+    instead of generating a `tmp/local_secret.txt` file.
-*   No changes.
+    *Petrik de Heus*
-## Rails 7.1.5.1 (December 10, 2024) ##
+## Rails 7.2.2.2 (August 13, 2025) ##
 *   No changes.
-## Rails 7.1.5 (October 30, 2024) ##
+## Rails 7.2.2.1 (December 10, 2024) ##
 *   No changes.
-## Rails 7.1.4.2 (October 23, 2024) ##
+## Rails 7.2.2 (October 30, 2024) ##
 *   No changes.
-## Rails 7.1.4.1 (October 15, 2024) ##
+## Rails 7.2.1.2 (October 23, 2024) ##
 *   No changes.
-## Rails 7.1.4 (August 22, 2024) ##
-*   Preserve `--asset-pipeline propshaft` when running `app:update`.
-    *Zacharias Knudsen*
-*   Allow string keys for SQLCommenter.
-    *Ngan Pham*
-*   Fix derived foreign key to return correctly when association id is part of query constraints.
-    *Varun Sharma*
-*   Show warning for `secret_key_base` in development too.
-    *fatkodima*
-*   Fix sanitizer vendor configuration in 7.1 defaults.
-    In apps where `rails-html-sanitizer` was not eagerly loaded, the sanitizer default could end up
-    being Rails::HTML4::Sanitizer when it should be set to `Rails::HTML5::Sanitizer`.
-    *Mike Dalessio*, *Rafael Mendonça França*
-*   Revert the use of `Concurrent.physical_processor_count` in default Puma config
-    While for many people this saves one config to set, for many others using
-    a shared hosting solution, this cause the default configuration to spawn
-    way more workers than reasonable.
-    There is unfortunately no reliable way to detect how many cores an application
-    can realistically use, and even then, assuming the application should use
-    all the machine resources is often wrong.
-    *Jean Boussier*
-## Rails 7.1.3.4 (June 04, 2024) ##
-*   No changes.
-## Rails 7.1.3.3 (May 16, 2024) ##
+## Rails 7.2.1.1 (October 15, 2024) ##
 *   No changes.
-## Rails 7.1.3.2 (February 21, 2024) ##
+## Rails 7.2.1 (August 22, 2024) ##
-*   No changes.
+*   Fix `rails console` for application with non default application constant.
+    The wrongly assumed the Rails application would be named `AppNamespace::Application`,
+    which is the default but not an obligation.
-## Rails 7.1.3.1 (February 21, 2024) ##
+    *Jean Boussier*
-*   No changes.
+*   Fix the default Dockerfile to include the full sqlite3 package.
+    Prior to this it only included `libsqlite3`, so it wasn't enough to
+    run `rails dbconsole`.
-## Rails 7.1.3 (January 16, 2024) ##
+    *Jerome Dalbert*
-*   Make sure `config.after_routes_loaded` hook runs on boot.
+*   Don't update public directory during `app:update` command for API-only Applications.
-    *Rafael Mendonça França*
+    *y-yagi*
-*   Fix `config.log_level` not being respected when using a `BroadcastLogger`
+*   Don't add bin/brakeman if brakeman is not in bundle when upgrading an application.
-    *Édouard Chin*
+    *Etienne Barrié*
-*   Fix isolated engines to take `ActiveRecord::Base.table_name_prefix` into consideration.
-    This will allow for engine defined models, such as inside Active Storage, to respect
-    Active Record table name prefix configuration.
-    *Chedli Bourguiba*
+*   Remove PWA views and routes if its an API only project.
-*   The `bin/rails app:template` command will no longer add potentially unwanted
-    gem platforms via `bundle lock --add-platform=...` commands.
-    *Jonathan Hefner*
-## Rails 7.1.2 (November 10, 2023) ##
+    *Jean Boussier*
-*   Fix running `db:system:change` when app has no Dockerfile.
+*   Simplify generated Puma configuration
-    *Hartley McGuire*
+    *DHH*, *Rafael Mendonça França*
-*   If you accessed `config.eager_load_paths` and friends, later changes to
-    `config.paths` were not reflected in the expected auto/eager load paths.
-    Now, they are.
-    This bug has been latent since Rails 3.
+## Rails 7.2.0 (August 09, 2024) ##
-    Fixes #49629.
+*   The new `bin/rails boot` command boots the application and exits. Supports the
+    standard `-e/--environment` options.
     *Xavier Noria*
-## Rails 7.1.1 (October 11, 2023) ##
-*   Ensures the Rails generated Dockerfile uses correct ruby version and matches Gemfile.
-    *Abhay Nikam*
-## Rails 7.1.0 (October 05, 2023) ##
-*   No changes.
-## Rails 7.1.0.rc2 (October 01, 2023) ##
-*   Always set the Rails logger to be an instance of `ActiveSupport::BroadcastLogger`.
-    *Edouard Chin*
-## Rails 7.1.0.rc1 (September 27, 2023) ##
+*   Create a Dev Container Generator that generates a Dev Container setup based on the current configuration
+    of the application. Usage:
-*   Require `concurrent-ruby` in `config/puma.rb` so that Puma can boot in
-    production when `WEB_CONCURRENCY` is not explicitly specified.
+    `bin/rails devcontainer`
-    Fixes #49323.
+    *Andrew Novoselac*
-    *Matt Brictson*
+*   Add Rubocop and GitHub Actions to plugin generator.
+    This can be skipped using --skip-rubocop and --skip-ci.
-*   Raise error when generating attribute with dangerous name.
+    *Chris Oliver*
-    The following will now raise an error as `save` and `hash` are already
-    defined by Active Record.
+*   Remove support for `oracle`, `sqlserver` and JRuby specific database adapters from the
+    `rails new` and `rails db:system:change` commands.
-    ```bash
-    $ bin/rails generate model Post save
-    $ bin/rails generate model Post hash
-    ```
-    *Petrik de Heus*
-## Rails 7.1.0.beta1 (September 13, 2023) ##
-*   Add ability to show slow tests to the test runner
-    ```bash
-    $ bin/test --profile # additionally prints 10 (default) slowest tests
-    # or
-    $ bin/test --profile 20 # prints 20 slowest tests
-    ```
-    *fatkodima*
+    The supported options are `sqlite3`, `mysql`, `postgresql` and `trilogy`.
-*   `rails new --javascript` generator now supports Bun
+    *Andrew Novoselac*
-    ```bash
-    $ rails new my_new_app --javascript=bun
-    ```
-    *Jason Meller*
-*   bin/setup uses `bun` instead of `yarn` when generated an app with bun
+*   Add options to `bin/rails app:update`.
-    Use `bun install` on `bin/setup` when using `bun`.
+    `bin/rails app:update` now supports the same generic options that generators do:
-    *Cadu Ribeiro*
+    * `--force`: Accept all changes to existing files
+    * `--skip`: Refuse all changes to existing files
+    * `--pretend`: Don't make any changes
+    * `--quiet`: Don't output all changes made
-*   `config/application.rb` now includes
-    ```ruby
-    config.autoload_lib(ignore: %w(assets tasks))
-    ```
-    In practice, this means that new 7.1 applications autoload from `lib` out of the box.
-    *Xavier Noria*
-*   Add an option to start rails console in sandbox mode by default
-    `sandbox_by_default` option is added to start rails console in sandbox
-    mode by default. With this option turned on, `--no-sandbox` must be
-    specified to start rails in non-sandbox mode.
-    Note that this option is ignored when rails environment is development
-    or test.
+    *Étienne Barrié*
-    *Shouichi Kamiya*
+*   Implement Rails console commands and helpers with IRB v1.13's extension APIs.
-*   Omit `webdrivers` gem dependency from `Gemfile` template
+    Rails console users will now see `helper`, `controller`, `new_session`, and `app` under
+    IRB help message's `Helper methods` category. And `reload!` command will be displayed under
+    the new `Rails console` commands category.
-    *Sean Doyle*
+    Prior to this change, Rails console's commands and helper methods are added through IRB's
+    private components and don't show up in its help message, which led to poor discoverability.
-*   Support filtering tests by line ranges
+    *Stan Lo*
-    The new syntax allows you to filter tests by line ranges. For example, the
-    following command runs tests from line 10 to 20.
+*   Remove deprecated `Rails::Generators::Testing::Behaviour`.
-    ```bash
-    $ rails test test/models/user_test.rb:10-20
-    ```
+    *Rafael Mendonça França*
-    *Shouichi Kamiya*, *Seonggi Yang*, *oljfte*, *Ryohei UEDA*
+*   Remove deprecated `find_cmd_and_exec` console helper.
-*   Update default scaffold templates to set 303 (See Other) as status code
-    on redirect for the update action for XHR requests other than GET or POST
-    to avoid issues (e.g browsers trying to follow the redirect using the
-    original request method resulting in double PATCH/PUT)
+    *Rafael Mendonça França*
-    *Guillermo Iguaran*
+*   Remove deprecated `Rails.config.enable_dependency_loading`.
-*   The new `config.autoload_lib_once` is similar to `config.autoload_lib`,
-    except that it adds `lib` to `config.autoload_once_paths` instead.
+    *Rafael Mendonça França*
-    By calling `config.autoload_lib_once`, classes and modules in `lib` can be
-    autoloaded, even from application initializers, but won't be reloaded.
+*   Remove deprecated `Rails.application.secrets`.
-    Please, see further details in the [autoloading
-    guide](https://guides.rubyonrails.org/v7.1/autoloading_and_reloading_constants.html).
+    *Rafael Mendonça França*
-    *Xavier Noria*
+*   Generated Gemfile will include `require: "debug/prelude"` for the `debug` gem.
-*   Add `config.action_dispatch.debug_exception_log_level` to configure the log
-    level used by `ActionDispatch::DebugExceptions`.
+    Requiring `debug` gem directly automatically activates it, which could introduce
+    additional overhead and memory usage even without entering a debugging session.
-    The default is `:fatal`, but with `load_defaults "7.1"` the default will be
-    `:error`.
+    By making Bundler require `debug/prelude` instead, developers can keep their access
+    to breakpoint methods like `debugger` or `binding.break`, but the debugger won't be
+    activated until a breakpoint is hit.
-    *Hartley McGuire*
+    *Stan Lo*
-*   Add `DATABASE` option to `railties:install:migrations`
+*   Skip generating a `test` job in ci.yml when a new application is generated with the
+    `--skip-test` option.
-    This allows you to specify which database the migrations should be copied to
-    when running `rails railties:install:migrations`.
+    *Steve Polito*
-    ```bash
-    $ rails railties:install:migrations DATABASE=animals
-    ```
+*   Update the `.node-version` file conditionally generated for new applications to 20.11.1
-    *Matthew Hirst*
+    *Steve Polito*
-*   The new method `config.autoload_lib(ignore:)` provides a simple way to
-    autoload from `lib`:
+*   Fix sanitizer vendor configuration in 7.1 defaults.
-    ```ruby
-    # config/application.rb
-    config.autoload_lib(ignore: %w(assets tasks))
-    ```
+    In apps where rails-html-sanitizer was not eagerly loaded, the sanitizer default could end up
+    being Rails::HTML4::Sanitizer when it should be set to Rails::HTML5::Sanitizer.
-    Please, see further details in the [autoloading
-    guide](https://guides.rubyonrails.org/v7.1/autoloading_and_reloading_constants.html).
+    *Mike Dalessio*, *Rafael Mendonça França*
-    *Xavier Noria*
+*   Set `action_mailer.default_url_options` values in `development` and `test`.
-*   Don't show secret_key_base for `Rails.application.config#inspect`.
+    Prior to this commit, new Rails applications would raise `ActionView::Template::Error`
+    if a mailer included a url built with a `*_path` helper.
-    Before:
+    *Steve Polito*
-    ```ruby
-    Rails.application.config.inspect
-    "#<Rails::Application::Configuration:0x00000001132b02a0 @root=... @secret_key_base=\"b3c631c314c0bbca50c1b2843150fe33\" ... >"
-    ```
+*   Introduce `Rails::Generators::Testing::Assertions#assert_initializer`.
-    After:
+    Compliments the existing `initializer` generator action.
-    ```ruby
-    Rails.application.config.inspect
-    "#<Rails::Application::Configuration:0x00000001132b02a0>"
+    ```rb
+    assert_initializer "mail_interceptors.rb"
     ```
-    *Petrik de Heus*
-*   Deprecate calling `Rails.application.secrets`.
-    Rails `secrets` have been deprecated in favor of `credentials`.
-    Calling `Rails.application.secrets` should show a deprecation warning.
-    *Petrik de Heus*
-*   Store `secret_key_base` in `Rails.config` for local environments.
-    Rails `secrets` have been deprecated in favor of `credentials`.
-    For the local environments the `secret_key_base` is now stored in
-    `Rails.config.secret_key_base` instead of the soft deprecated
-    `Rails.application.secrets.secret_key_base`.
-    *Petrik de Heus*
-*   Enable force_ssl=true in production by default: Force all access to the app over SSL,
-    use Strict-Transport-Security, and use secure cookies
-    *Justin Searls*, *Aaron Patterson*, *Guillermo Iguaran*, *Vinícius Bispo*
-*   Add engine's draw paths to application route set, so that the application
-    can draw route files defined in engine paths.
-    *Gannon McGibbon*
+    *Steve Polito*
-*   Support `VISUAL` environment variable for commands which open an editor,
-    and prefer it over `EDITOR`.
+*   Generate a .devcontainer folder and its contents when creating a new app.
-    *Summer ☀️*
+    The .devcontainer folder includes everything needed to boot the app and do development in a remote container.
-*   Add engine's `test/fixtures` path to `fixture_paths` in `on_load` hook if
-    path exists and is under the Rails application root.
+    The container setup includes:
+     - A redis container for Kredis, ActionCable etc.
+     - A database (SQLite, Postgres, MySQL or MariaDB)
+     - A Headless chrome container for system tests
+     - Active Storage configured to use the local disk and with preview features working
-    *Chris Salzberg*
+    If any of these options are skipped in the app setup they will not be included in the container configuration.
-*   `bin/rails app:template` now runs `bundle install` and any `after_bundle`
-    blocks after the template is executed.
+    These files can be skipped using the `--skip-devcontainer` option.
-    *Jonathan Hefner* and *Gerry Caulfield*
+    *Andrew Novoselac & Rafael Mendonça França*
-*   Enable passing column size to migration generator
+*   Introduce `SystemTestCase#served_by` for configuring the System Test application server.
-    Previously you could pass a limit to the migration generator:
-    `rails generate migration CreateAuthor name:text{65535}`
-    Now, a size attribute can be passed to the migration generator:
-    `rails generate migration CreateAuthor name:text{medium}`
-    This generates a migration which includes the size attribute:
+    By default this is localhost. This method allows the host and port to be specified manually.
     ```ruby
-    class CreateAuthor < ActiveRecord::Migration[7.1]
-      def change
-        create_table :authors do |t|
-          t.text :name, size: :medium
-        end
-      end
+    class ApplicationSystemTestCase < ActionDispatch::SystemTestCase
+      served_by host: "testserver", port: 45678
     end
     ```
-    *Josh Broughton*, *Hartley McGuire*
-*   Trying to set a config key with the same name of a method now raises:
-    ```ruby
-    config.load_defaults = 7.0
-    # NoMethodError: Cannot assign to `load_defaults`, it is a configuration method
-    ```
-    *Xavier Noria*
-*   Deprecate `secrets:edit/show` and remove `secrets:setup`
-    `bin/rails secrets:setup` has been deprecated since Rails 5.2 in favor of
-    credentials. This command has been removed.
+    *Andrew Novoselac & Rafael Mendonça França*
-    `bin/rails secrets:show` and `bin/rails secrets:edit` have been deprecated
-    in favor of credentials.
+*   `bin/rails test` will no longer load files named `*_test.rb` if they are located in the `fixtures` folder.
-    Run `bin/rails credentials:help` for more information
-    *Petrik de Heus*
-*   `bin/rails --help` will now list only framework and plugin commands. Rake
-    tasks defined in `lib/tasks/*.rake` files will no longer be included. For a
-    list of those tasks, use `rake -T`.
-    *Jonathan Hefner*
-*   Allow calling `bin/rails restart` outside of app directory.
+    *Edouard Chin*
-    The following would previously fail with a "No Rakefile found" error.
+*   Ensure logger tags configured with `config.log_tags` are still active in `request.action_dispatch` handlers.
-    ```bash
-    $ blog/bin/rails restart
-    ```
+    *KJ Tsanaktsidis*
-    *Petrik de Heus*
+*   Setup jemalloc in the default Dockerfile for memory optimization.
-*   Support prerelease rubies in Gemfile template if RubyGems version is 3.3.13 or higher.
+    *Matt Almeida*, *Jean Boussier*
-    *Yasuo Honda*, *David Rodríguez*
+*   Commented out lines in .railsrc file should not be treated as arguments when using
+    rails new generator command. Update ARGVScrubber to ignore text after `#` symbols.
-*   Autoloading setup honors root directories manually set by the user.
+    *Willian Tenfen*
-    This is relevant for custom namespaces. For example, if you'd like classes
-    and modules under `app/services` to be defined in the `Services` namespace
-    without an extra `app/services/services` directory, this is now enough:
+*   Skip CSS when generating APIs.
-    ```ruby
-    # config/initializers/autoloading.rb
+    *Ruy Rocha*
-    # The namespace has to exist.
-    #
-    # In this example we define the module on the spot. Could also be created
-    # elsewhere and its definition loaded here with an ordinary `require`. In
-    # any case, `push_dir` expects a class or module object.
-    module Services; end
+*   Rails console now indicates application name and the current Rails environment:
-    Rails.autoloaders.main.push_dir("#{Rails.root}/app/services", namespace: Services)
+    ```txt
+    my-app(dev)> # for RAILS_ENV=development
+    my-app(test)> # for RAILS_ENV=test
+    my-app(prod)> # for RAILS_ENV=production
+    my-app(my_env)> # for RAILS_ENV=my_env
     ```
-    Check the autoloading guide for further details.
-    *Xavier Noria*
+    The application name is derived from the application's module name from `config/application.rb`.
+    For example, `MyApp` will displayed as `my-app` in the prompt.
-*   Railties now requires the irb gem as a dependency, which means when you install Rails, irb will also
-    be installed as a gem. Rails will then use the installed version of irb for its console instead of
-    relying on Ruby's built-in version.
-    This ensures that Rails has access to the most up-to-date and reliable version of irb for its console.
+    Additionally, the environment name will be colorized when the environment is
+    `development` (blue), `test` (blue), or `production` (red), if your
+    terminal supports it.
     *Stan Lo*
-*   Use infinitive form for all rails command descriptions verbs.
-    *Petrik de Heus*
-*   Credentials commands (e.g. `bin/rails credentials:edit`) now respect
-    `config.credentials.content_path` and `config.credentials.key_path` when set
-    in `config/application.rb` or `config/environments/#{Rails.env}.rb`.
-    Before:
+*   Ensure `autoload_paths`, `autoload_once_paths`, `eager_load_paths`, and
+    `load_paths` only have directories when initialized from engine defaults.
-      * `bin/rails credentials:edit` ignored `RAILS_ENV`, and would always edit
-        `config/credentials.yml.enc`.
+    Previously, files under the `app` directory could end up there too.
-      * `bin/rails credentials:edit --environment foo` would create and edit
-        `config/credentials/foo.yml.enc`.
+    *Takumasa Ochi*
-      * If `config.credentials.content_path` or `config.credentials.key_path`
-        was set, `bin/rails credentials:edit` could not be used to edit the
-        credentials.  Editing credentials required using `bin/rails
-        encrypted:edit path/to/credentials --key path/to/key`.
+*   Prevent unnecessary application reloads in development.
-    After:
+    Previously, some files outside autoload paths triggered unnecessary reloads.
+    With this fix, application reloads according to `Rails.autoloaders.main.dirs`,
+    thereby preventing unnecessary reloads.
-      * `bin/rails credentials:edit` will edit the credentials file that the app
-        would load for the current `RAILS_ENV`.
+    *Takumasa Ochi*
-      * `bin/rails credentials:edit` respects `config.credentials.content_path`
-        and `config.credentials.key_path` when set in `config/application.rb`
-        or `config/environments/#{Rails.env}.rb`.
+*   Use `oven-sh/setup-bun` in GitHub CI when generating an app with Bun.
-      * `bin/rails credentials:edit --environment foo` will create and edit
-        `config/credentials/foo.yml.enc` _if_ `config.credentials.content_path`
-        has not been set for the `foo` environment.  Ultimately, it will edit
-        the credentials file that the app would load for the `foo` environment.
+    *TangRufus*
-    *Jonathan Hefner*
+*   Disable `pidfile` generation in the `production` environment.
-*   Add descriptions for non-Rake commands when running `rails -h`.
+    *Hans Schnedlitz*
-    *Petrik de Heus*
-*   Show relevant commands when calling help
-    When running `rails -h` or just `rails` outside a Rails application,
-    Rails outputs all options for running the `rails new` command. This can be
-    confusing to users when they probably want to see the common Rails commands.
+*   Set `config.action_view.annotate_rendered_view_with_filenames` to `true` in
+    the `development` environment.
-    Instead, we should always show the common commands when running `rails -h`
-    inside or outside a Rails application.
+    *Adrian Marin*
-    As the relevant commands inside a Rails application differ from the
-    commands outside an application, the help USAGE file has been split to
-    show the most relevant commands for the context.
-    *Petrik de Heus*
+*   Support the `BACKTRACE` environment variable to turn off backtrace cleaning.
-*   Add Rails::HealthController#show and map it to /up for newly generated applications.
-    Load balancers and uptime monitors all need a basic endpoint to tell whether the app is up.
-    This is a good starting point that'll work in many situations.
+    Useful for debugging framework code:
-    *DHH*
-*   Only use HostAuthorization middleware if `config.hosts` is not empty
+    ```sh
+    BACKTRACE=1 bin/rails server
+    ```
-    *Hartley McGuire*
+    *Alex Ghiculescu*
-*   Raise an exception when a `before_action`'s "only" or "except" filter
-    options reference an action that doesn't exist. This will be enabled by
-    default but can be overridden via config.
+*   Raise `ArgumentError` when reading `config.x.something` with arguments:
     ```ruby
-    # config/environments/production.rb
-    config.action_controller.raise_on_missing_callback_actions = false
+    config.x.this_works.this_raises true # raises ArgumentError
     ```
-    *Jess Bees*
+    *Sean Doyle*
-*   Use physical processor count as the default Puma worker count in production.
-    This can be overridden by setting `ENV["WEB_CONCURRENCY"]` or editing the
-    generated "config/puma.rb" directly.
+*   Add default PWA files for manifest and service-worker that are served from `app/views/pwa` and can be dynamically rendered through ERB. Mount these files explicitly at the root with default routes in the generated routes file.
     *DHH*
-*   Add Docker files by default to new apps: Dockerfile, .dockerignore, bin/docker-entrypoint.
-    These files can be skipped with `--skip-docker`. They're intended as a starting point for
-    a production deploy of the application. Not intended for development (see Docked Rails for that).
-    Example:
-    ```bash
-    $ docker build -t app .
-    $ docker volume create app-storage
-    $ docker run --rm -it -v app-storage:/rails/storage -p 3000:3000 --env RAILS_MASTER_KEY=<see config/master.key> app
-    ```
-    You can also start a console or a runner from this image:
-    ```bash
-    $ docker run --rm -it -v app-storage:/rails/storage --env RAILS_MASTER_KEY=<see config/master.key> app console
-    ```
-    To create a multi-platform image on Apple Silicon to deploy on AMD or Intel and push to Docker Hub for user/app:
-    ```bash
-    $ docker login -u <user>
-    $ docker buildx create --use
-    $ docker buildx build --push --platform=linux/amd64,linux/arm64 -t <user/image> .
-    ```
-    *DHH, Sam Ruby*
-*   Add ENV["SECRET_KEY_BASE_DUMMY"] for starting production environment with a generated secret base key,
-    which can be used to run tasks like `assets:precompile` without making the RAILS_MASTER_KEY available
-    to the build process.
-    Dockerfile layer example:
-    ```
-    RUN SECRET_KEY_BASE_DUMMY=1 bundle exec rails assets:precompile
-    ```
+*   Updated system tests to now use headless Chrome by default for the new applications.
     *DHH*
-*   Show descriptions for all commands in Rails help
-    When calling `rails help` most commands missed their description. We now
-    show the same descriptions as shown in `rails -T`.
-    *Petrik de Heus*
-*   Always generate the storage/ directory with rails new to ensure there's a stable place to
-    put permanent files, and a single mount point for containers to map. Then default sqlite3 databases
-    to live there instead of db/, which is only meant for configuration, not data.
+*   Add GitHub CI files for Dependabot, Brakeman, RuboCop, and running tests by default. Can be skipped with `--skip-ci`.
     *DHH*
-*   Rails console now disables `IRB`'s autocompletion feature in production by default.
-    Setting `IRB_USE_AUTOCOMPLETE=true` can override this default.
-    *Stan Lo*
-*   Add `config.precompile_filter_parameters`, which enables precompilation of
-    `config.filter_parameters` using `ActiveSupport::ParameterFilter.precompile_filters`.
-    Precompilation can improve filtering performance, depending on the quantity
-    and types of filters.
-    `config.precompile_filter_parameters` defaults to `true` for
-    `config.load_defaults 7.1` and above.
-    *Jonathan Hefner*
-*   Add `after_routes_loaded` hook to `Rails::Railtie::Configuration` for
-    engines to add a hook to be called after application routes have been
-    loaded.
-    ```ruby
-    MyEngine.config.after_routes_loaded do
-      # code that must happen after routes have been loaded
-    end
-    ```
-    *Chris Salzberg*
-*   Send 303 See Other status code back for the destroy action on newly generated
-    scaffold controllers.
+*   Add Brakeman by default for static analysis of security vulnerabilities. Allow skipping with `--skip-brakeman option`.
-    *Tony Drake*
+    *vipulnsward*
-*   Add `Rails.application.deprecators` as a central point to manage deprecators
-    for an application.
-    Individual deprecators can be added and retrieved from the collection:
-    ```ruby
-    Rails.application.deprecators[:my_gem] = ActiveSupport::Deprecation.new("2.0", "MyGem")
-    Rails.application.deprecators[:other_gem] = ActiveSupport::Deprecation.new("3.0", "OtherGem")
-    ```
+*   Add RuboCop with rules from `rubocop-rails-omakase` by default. Skip with `--skip-rubocop`.
-    And the collection's configuration methods affect all deprecators in the
-    collection:
-    ```ruby
-    Rails.application.deprecators.debug = true
-    Rails.application.deprecators[:my_gem].debug
-    # => true
-    Rails.application.deprecators[:other_gem].debug
-    # => true
-    ```
-    Additionally, all deprecators in the collection can be silenced for the
-    duration of a given block:
-    ```ruby
-    Rails.application.deprecators.silence do
-      Rails.application.deprecators[:my_gem].warn    # => silenced (no warning)
-      Rails.application.deprecators[:other_gem].warn # => silenced (no warning)
-    end
-    ```
-    *Jonathan Hefner*
-*   Move dbconsole logic to Active Record connection adapter.
-    Instead of hosting the connection logic in the command object, the
-    database adapter should be responsible for connecting to a console session.
-    This patch moves #find_cmd_and_exec to the adapter and exposes a new API to
-    lookup the adapter class without instantiating it.
-    *Gannon McGibbon*, *Paarth Madan*
-*   Add `Rails.application.message_verifiers` as a central point to configure
-    and create message verifiers for an application.
-    This allows applications to, for example, rotate old `secret_key_base`
-    values:
-    ```ruby
-    config.before_initialize do |app|
-      app.message_verifiers.rotate(secret_key_base: "old secret_key_base")
-    end
-    ```
-    And for libraries to create preconfigured message verifiers:
-    ```ruby
-    ActiveStorage.verifier = Rails.application.message_verifiers["ActiveStorage"]
-    ```
-    *Jonathan Hefner*
-*   Support MySQL's ssl-mode option for the dbconsole command.
-    Verifying the identity of the database server requires setting the ssl-mode
-    option to VERIFY_CA or VERIFY_IDENTITY. This option was previously ignored
-    for the dbconsole command.
-    *Petrik de Heus*
-*   Delegate application record generator description to orm hooked generator.
-    *Gannon McGibbon*
-*   Show BCC recipients when present in Action Mailer previews.
-    *Akshay Birajdar*
-*   Extend `routes --grep` to also filter routes by matching against path.
-    Example:
-    ```bash
-    $ bin/rails routes --grep /cats/1
-    Prefix Verb   URI Pattern         Controller#Action
-       cat GET    /cats/:id(.:format) cats#show
-           PATCH  /cats/:id(.:format) cats#update
-           PUT    /cats/:id(.:format) cats#update
-           DELETE /cats/:id(.:format) cats#destroy
-    ```
+    *DHH* and *zzak*
-    *Orhan Toy*
+*   Use `bin/rails runner --skip-executor` to not wrap the runner script with an
+    Executor.
-*   Improve `rails runner` output when given a file path that doesn't exist.
+    *Ben Sheldon*
-    *Tekin Suleyman*
-*   `config.allow_concurrency = false` now use a `Monitor` instead of a `Mutex`
-    This allows to enable `config.active_support.executor_around_test_case` even
-    when `config.allow_concurrency` is disabled.
-    *Jean Boussier*
-*   Add `routes --unused` option to detect extraneous routes.
-    Example:
-    ```bash
-    $ bin/rails routes --unused
-    Found 2 unused routes:
-    Prefix Verb URI Pattern    Controller#Action
-       one GET  /one(.:format) action#one
-       two GET  /two(.:format) action#two
-    ```
-    *Gannon McGibbon*
-*   Add `--parent` option to controller generator to specify parent class of job.
-    Example:
-    `bin/rails g controller admin/users --parent=admin_controller` generates:
-    ```ruby
-    class Admin::UsersController < AdminController
-      # ...
-    end
-    ```
-    *Gannon McGibbon*
-*   In-app custom credentials templates are now supported.  When a credentials
-    file does not exist, `rails credentials:edit` will now try to use
-    `lib/templates/rails/credentials/credentials.yml.tt` to generate the
-    credentials file, before falling back to the default template.
-    This allows e.g. an open-source Rails app (which would not include encrypted
-    credentials files in its repo) to include a credentials template, so that
-    users who install the app will get a custom pre-filled credentials file when
-    they run `rails credentials:edit`.
-    *Jonathan Hefner*
-*   Except for `dev` and `test` environments, newly generated per-environment
-    credentials files (e.g. `config/credentials/production.yml.enc`) now include
-    a `secret_key_base` for convenience, just as `config/credentials.yml.enc`
-    does.
-    *Jonathan Hefner*
-*   `--no-*` options now work with the app generator's `--minimal` option, and
-    are both comprehensive and precise.  For example:
-    ```bash
-    $ rails new my_cool_app --minimal
-    Based on the specified options, the following options will also be activated:
-      --skip-active-job [due to --minimal]
-      --skip-action-mailer [due to --skip-active-job, --minimal]
-      --skip-active-storage [due to --skip-active-job, --minimal]
-      --skip-action-mailbox [due to --skip-active-storage, --minimal]
-      --skip-action-text [due to --skip-active-storage, --minimal]
-      --skip-javascript [due to --minimal]
-      --skip-hotwire [due to --skip-javascript, --minimal]
-      --skip-action-cable [due to --minimal]
-      --skip-bootsnap [due to --minimal]
-      --skip-dev-gems [due to --minimal]
-      --skip-system-test [due to --minimal]
-    ...
-    $ rails new my_cool_app --minimal --no-skip-active-storage
-    Based on the specified options, the following options will also be activated:
-      --skip-action-mailer [due to --minimal]
-      --skip-action-mailbox [due to --minimal]
-      --skip-action-text [due to --minimal]
-      --skip-javascript [due to --minimal]
-      --skip-hotwire [due to --skip-javascript, --minimal]
-      --skip-action-cable [due to --minimal]
-      --skip-bootsnap [due to --minimal]
-      --skip-dev-gems [due to --minimal]
-      --skip-system-test [due to --minimal]
-    ...
-    ```
-    *Brad Trick* and *Jonathan Hefner*
-*   Add `--skip-dev-gems` option to app generator to skip adding development
-    gems (like `web-console`) to the Gemfile.
-    *Brad Trick*
-*   Skip Active Storage and Action Mailer if Active Job is skipped.
-    *Étienne Barrié*
-*   Correctly check if frameworks are disabled when running app:update.
+*   Fix isolated engines to take `ActiveRecord::Base.table_name_prefix` into consideration.
-    *Étienne Barrié* and *Paulo Barros*
+    This will allow for engine defined models, such as inside Active Storage, to respect
+    Active Record table name prefix configuration.
-*   Delegate model generator description to orm hooked generator.
+    *Chedli Bourguiba*
-    *Gannon McGibbon*
+*   Fix running `db:system:change` when the app has no Dockerfile.
-*   Execute `rails runner` scripts inside the executor.
+    *Hartley McGuire*
-    Enables error reporting, query cache, etc.
+*   In Action Mailer previews, list inline attachments separately from normal
+    attachments.
-    *Jean Boussier*
+    For example, attachments that were previously listed like
-*   Avoid booting in development then test for test tasks.
+      > Attachments: logo.png file1.pdf file2.pdf
-    Running one of the rails test subtasks (e.g. test:system, test:models) would
-    go through Rake and cause the app to be booted twice. Now all the test:*
-    subtasks are defined as Thor tasks and directly load the test environment.
+    will now be listed like
-    *Étienne Barrié*
+      > Attachments: file1.pdf file2.pdf (Inline: logo.png)
-*   Deprecate `Rails::Generators::Testing::Behaviour` in favor of `Rails::Generators::Testing::Behavior`.
+    *Christian Schmidt* and *Jonathan Hefner*
-    *Gannon McGibbon*
+*   In mailer preview, only show SMTP-To if it differs from the union of To, Cc and Bcc.
-*   Allow configuration of logger size for local and test environments
+    *Christian Schmidt*
-    `config.log_file_size`
+*   Enable YJIT by default on new applications running Ruby 3.3+.
-    Defaults to `100` megabytes.
+    This can be disabled by setting `Rails.application.config.yjit = false`
-    *Bernie Chiu*
+    *Jean Boussier*, *Rafael Mendonça França*
-*   Enroll new apps in decrypted diffs of credentials by default.  This behavior
-    can be opted out of with the app generator's `--skip-decrypted-diffs` flag.
+*   In Action Mailer previews, show date from message `Date` header if present.
-    *Jonathan Hefner*
+    *Sampat Badhe*
-*   Support declarative-style test name filters with `bin/rails test`.
+*   Exit with non-zero status when the migration generator fails.
-    This makes it possible to run a declarative-style test such as:
+    *Katsuhiko YOSHIDA*
-    ```ruby
-    class MyTest < ActiveSupport::TestCase
-      test "does something" do
-        # ...
-      end
-    end
-    ```
+*   Use numeric UID and GID in Dockerfile template.
-    Using its declared name:
+    The Dockerfile generated by `rails new` sets the default user and group
+    by name instead of UID:GID. This can cause the following error in Kubernetes:
-    ```bash
-    $ bin/rails test test/my_test.rb -n "does something"
     ```
-    Instead of having to specify its expanded method name:
-    ```bash
-    $ bin/rails test test/my_test.rb -n test_does_something
+    container has runAsNonRoot and image has non-numeric user (rails), cannot verify user is non-root
     ```
-    *Jonathan Hefner*
-*   Add `--js` and `--skip-javascript` options to `rails new`
-    `--js` alias to `rails new --javascript ...`
-    Same as `-j`, e.g. `rails new --js esbuild ...`
-    `--skip-js` alias to `rails new --skip-javascript ...`
-    Same as `-J`, e.g. `rails new --skip-js ...`
-    *Dorian Marié*
-*   Allow relative paths with leading dot slash to be passed to `rails test`.
-    Fix `rails test ./test/model/post_test.rb` to run a single test file.
-    *Shouichi Kamiya* and *oljfte*
-*   Deprecate `config.enable_dependency_loading`. This flag addressed a limitation of the `classic` autoloader and has no effect nowadays. To fix this deprecation, please just delete the reference.
-    *Xavier Noria*
-*   Define `config.enable_reloading` to be `!config.cache_classes` for a more intuitive name. While `config.enable_reloading` and `config.reloading_enabled?` are preferred from now on, `config.cache_classes` is supported for backwards compatibility.
-    *Xavier Noria*
-*   Add JavaScript dependencies installation on bin/setup
+    This change sets default user and group by their numeric values.
-    Add  `yarn install` to bin/setup when using esbuild, webpack, or rollout.
+    *Ivan Fedotov*
-    *Carlos Ribeiro*
+*   Disallow invalid values for rails new options.
-*   Use `controller_class_path` in `Rails::Generators::NamedBase#route_url`
+    The `--database`, `--asset-pipeline`, `--css`, and `--javascript` options
+    for `rails new` take different arguments. This change validates them.
-    The `route_url` method now returns the correct path when generating
-    a namespaced controller with a top-level model using `--model-name`.
+    *Tony Drake*, *Akhil G Krishnan*, *Petrik de Heus*
-    Previously, when running this command:
+*   Conditionally print `$stdout` when invoking `run_generator`.
-    ```bash
-    $ bin/rails generate scaffold_controller Admin/Post --model-name Post
-    ```
+    In an effort to improve the developer experience when debugging
+    generator tests, we add the ability to conditionally print `$stdout`
+    instead of capturing it.
-    the comments above the controller action would look like:
+    This allows for calls to `binding.irb` and `puts` work as expected.
-    ``` ruby
-    # GET /posts
-    def index
-      @posts = Post.all
-    end
+    ```sh
+    RAILS_LOG_TO_STDOUT=true ./bin/test test/generators/actions_test.rb
     ```
-    afterwards, they now look like this:
-    ``` ruby
-    # GET /admin/posts
-    def index
-      @posts = Post.all
-    end
-    ```
-    Fixes #44662.
-    *Andrew White*
-*   No longer add autoloaded paths to `$LOAD_PATH`.
-    This means it won't be possible to load them with a manual `require` call, the class or module can be referenced instead.
-    Reducing the size of `$LOAD_PATH` speed-up `require` calls for apps not using `bootsnap`, and reduce the
-    size of the `bootsnap` cache for the others.
-    *Jean Boussier*
-*   Remove default `X-Download-Options` header
-    This header is currently only used by Internet Explorer which
-    will be discontinued in 2022 and since Rails 7 does not fully
-    support Internet Explorer this header should not be a default one.
-    *Harun Sabljaković*
-*   Add .node-version files for Rails apps that use Node.js
-    Node version managers that make use of this file:
-      https://github.com/shadowspawn/node-version-usage#node-version-file-usage
+    *Steve Polito*
-    The generated Dockerfile will use the same node version.
+*   Remove the option `config.public_file_server.enabled` from the generators
+    for all environments, as the value is the same in all environments.
-    *Sam Ruby*
+    *Adrian Hirt*
-Please check [7-0-stable](https://github.com/rails/rails/blob/7-0-stable/railties/CHANGELOG.md) for previous changes.
+Please check [7-1-stable](https://github.com/rails/rails/blob/7-1-stable/railties/CHANGELOG.md) for previous changes.