railties 8.1.0 → 8.1.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ad8da0555d797f82b2d0201539e2b87d71a4a034693160ce5f1a695bb2fba206
-  data.tar.gz: 7141209b64c173556b4e68710077f2020a0e4d1f78849f189b618ae5aadf0323
+  metadata.gz: ad06383ebe43275c8480b20d685bb24fdc80aa69a356d1993ab326cc2e02af20
+  data.tar.gz: f99ebe1113417a9c4fb9e29799ded20ffb610aabccacb115d0736ebc0978dfa0
 SHA512:
-  metadata.gz: eb16ac913da82747b4d06e8c7578ccc830219010f1ef5846305f2f6640a84f08df45f191f76899b6449d7dd85903a7e89f236b33cb8c83daef7f46863f86cf6f
-  data.tar.gz: badbe8ab05d917deed317baf5d1b8adbb339c95ed6bd0ea01f13c6d61ff41d270e49b27624d0d27f94625bb26466f141506638b44c6e2936b5b99d281f748fb5
+  metadata.gz: 0473b71e3c66b2eb9674b8b94ff40b6a353665d9a9d2f1f7fe972b8dcc944061ce4410571456f89e9aed3f55b2b5dc5b8f9a79a90cf3966f714932b5a49f3440
+  data.tar.gz: 80338fca595869f2068f85dabea6b910f958b1f7083c4675ab9a31df04a958c4e73c12f7de91f8749d30f11a3fffc335c33f8ce9d9318aac86e6f3a9b9ff647f

data/CHANGELOG.md

@@ -1,3 +1,11 @@
+## Rails 8.1.1 (October 28, 2025) ##
+
+*   Do not assume and force SSL in production by default when using Kamal, to allow for out of the box Kamal deployments.
+
+    It is still recommended to assume and force SSL in production as soon as you can.
+
+    *Jerome Dalbert*
+
 ## Rails 8.1.0 (October 22, 2025) ##
 
 *   Suggest `bin/rails action_text:install` from Action Dispatch error page

data/lib/rails/gem_version.rb

@@ -9,7 +9,7 @@ module Rails
   module VERSION
     MAJOR = 8
     MINOR = 1
-    TINY  = 0
+    TINY  = 1
     PRE   = nil
 
     STRING = [MAJOR, MINOR, TINY, PRE].compact.join(".")

data/lib/rails/generators/rails/app/templates/config/ci.rb.tt

@@ -18,14 +18,16 @@ CI.run do
 <% unless options.skip_brakeman? -%>
   step "Security: Brakeman code analysis", "bin/brakeman --quiet --no-pager --exit-on-warn --exit-on-error"
 <% end -%>
+<% unless options[:skip_test] -%>
 <% if options[:api] || options[:skip_system_test] -%>
   step "Tests: Rails", "bin/rails test"
 <% else %>
   step "Tests: Rails", "bin/rails test"
   step "Tests: System", "bin/rails test:system"
 <% end -%>
-<% unless options.skip_active_record?  -%>
+<% unless options.skip_active_record? -%>
   step "Tests: Seeds", "env RAILS_ENV=test bin/rails db:seed:replant"
+<% end -%>
 <% end -%>
 
   # Optional: set a green GitHub commit status to unblock PR merge.

data/lib/rails/generators/rails/app/templates/config/deploy.yml.tt

@@ -14,9 +14,12 @@ servers:
   #   cmd: bin/jobs
 
 # Enable SSL auto certification via Let's Encrypt and allow for multiple apps on a single web server.
-# Remove this section when using multiple web servers and ensure you terminate SSL at your load balancer.
+# If used with Cloudflare, set encryption mode in SSL/TLS setting to "Full" to enable CF-to-app encryption.
+#
+# Using an SSL proxy like this requires turning on config.assume_ssl and config.force_ssl in production.rb!
+#
+# Don't use this when deploying to multiple web servers (then you have to terminate SSL at your load balancer).
 #
-# Note: If using Cloudflare, set encryption mode in SSL/TLS setting to "Full" to enable CF-to-app encryption.
 # proxy:
 #   ssl: true
 #   host: app.example.com

data/lib/rails/generators/rails/app/templates/config/environments/production.rb.tt

@@ -29,10 +29,18 @@ Rails.application.configure do
 
   <%- end -%>
   # Assume all access to the app is happening through a SSL-terminating reverse proxy.
+  <%- if skip_kamal? -%>
   config.assume_ssl = true
+  <%- else -%>
+  # config.assume_ssl = true
+  <%- end -%>
 
   # Force all access to the app over SSL, use Strict-Transport-Security, and use secure cookies.
+  <%- if skip_kamal? -%>
   config.force_ssl = true
+  <%- else -%>
+  # config.force_ssl = true
+  <%- end -%>
 
   # Skip http-to-https redirect for the default health check endpoint.
   # config.ssl_options = { redirect: { exclude: ->(request) { request.path == "/up" } } }

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: railties
 version: !ruby/object:Gem::Version
-  version: 8.1.0
+  version: 8.1.1
 platform: ruby
 authors:
 - David Heinemeier Hansson
@@ -15,28 +15,28 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 8.1.0
+        version: 8.1.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 8.1.0
+        version: 8.1.1
 - !ruby/object:Gem::Dependency
   name: actionpack
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 8.1.0
+        version: 8.1.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 8.1.0
+        version: 8.1.1
 - !ruby/object:Gem::Dependency
   name: rackup
   requirement: !ruby/object:Gem::Requirement
@@ -133,14 +133,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 8.1.0
+        version: 8.1.1
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 8.1.0
+        version: 8.1.1
 description: 'Rails internals: application bootup, plugins, generators, and rake tasks.'
 email: david@loudthinking.com
 executables:
@@ -508,10 +508,10 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/rails/rails/issues
-  changelog_uri: https://github.com/rails/rails/blob/v8.1.0/railties/CHANGELOG.md
-  documentation_uri: https://api.rubyonrails.org/v8.1.0/
+  changelog_uri: https://github.com/rails/rails/blob/v8.1.1/railties/CHANGELOG.md
+  documentation_uri: https://api.rubyonrails.org/v8.1.1/
   mailing_list_uri: https://discuss.rubyonrails.org/c/rubyonrails-talk
-  source_code_uri: https://github.com/rails/rails/tree/v8.1.0/railties
+  source_code_uri: https://github.com/rails/rails/tree/v8.1.1/railties
   rubygems_mfa_required: 'true'
 rdoc_options:
 - "--exclude"