unpoly-rails 3.14.2 → 3.15.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: bf27bc74fecd262323239fb583020ddf6d4bba888f7237c10d1d99929e2ffa9c
-  data.tar.gz: 7bf18db6c39dfa7ea1be1a285704e842137218bf36cbe62711bb685875ca8a63
+  metadata.gz: 46756e6ad349d23a8eb423ff84312fb7087d0cd9a264330083f4444bf9f8426f
+  data.tar.gz: 6ebcc0673721029309334e89e19c8e3f951885cc0aa397ea22b0d4ea8d7e077c
 SHA512:
-  metadata.gz: fe6bf77ff3a7619a84748dd77d928be65b1ec5b4b021f2249c9f2f4bdbe748be318297f58985ceb81f6da609a3eba291f7e04a371125806613ae2ed3faf2f942
-  data.tar.gz: 1f7e0ede5f94a1759f789c02047098c8e238723a2b5f8040fe606f18817449acc19b113e439ad995cc8f96becd65d5085b611af42ae913be5883163c4dbcf514
+  metadata.gz: 6c553354ea601cdb7e99537508cc2b334471006b54d49b2e8164e577f68a62e81355b21781b5ef816e744b892c84da94a2f2a58d6905c38a65e7c9c849dfe7f5
+  data.tar.gz: 492853bd0eb78efcd1c07a9da731ffb9d2a69006ab60cf0bbf5c15c8979d40dc586d112290e4d59d271d896dd026f6d871bcada14c82e338b4964a9ee9f5170c

data/CHANGELOG.md

@@ -0,0 +1,317 @@
+# Changelog
+
+Changes to the unpoly-rails gem. For changes to Unpoly itself, see https://unpoly.com/changes.
+
+Each release also bundles Unpoly's frontend files for the asset pipeline. If your app installs Unpoly from npm, only the server-side changes matter to you, and any recent gem version will do.
+
+
+## 3.15.0
+
+- Bundles Unpoly 3.15.0 for the asset pipeline.
+- `up.layer.open` converts snake_case option names to Unpoly's camelCase names, e.g. `:on_accepted_reload` becomes `onAcceptedReload`. Keys inside the `:context` option are passed through unchanged.
+- Fix Unpoly params being lost when redirecting to a URL with a `#hash`. The params were appended after the hash, so changes like a new target, events or context changes did not survive the redirect.
+- A `#hash` in a redirect URL is kept for fragment updates, e.g. `redirect_to post_path(@post, anchor: 'comments')`. The gem passes it as a `_up_location_hash` param and echoes it in the [`X-Up-Location`](https://unpoly.com/api/X-Up-Location) header after the redirect. Unpoly then reveals the element with that ID and shows the `#hash` in the address bar. Requires Unpoly 3.15 or later.
+- The gem now includes source maps for the bundled frontend files.
+- The gem's metadata links to unpoly.com, the changelog, the source code and the issue tracker.
+- Fix deprecated helpers like `up.cache.clear` or `up.render_nothing` raising a `NoMethodError` on Rails 7.2+. On Rails 7.1+, the gem's deprecation warnings now follow your app's deprecation settings.
+
+
+## 3.14.3
+
+- Bundles Unpoly 3.14.3 for the asset pipeline.
+
+
+## 3.14.2
+
+- Bundles Unpoly 3.14.2 for the asset pipeline.
+
+
+## 3.14.1
+
+- Bundles Unpoly 3.14.1 for the asset pipeline.
+
+
+## 3.14.0
+
+- Bundles Unpoly 3.14.0 for the asset pipeline.
+
+
+## 3.12.0
+
+- Bundles Unpoly 3.12.0 for the asset pipeline.
+
+
+## 3.11.0
+
+- New `up.layer.open` renders the response in a new overlay, using an [`X-Up-Open-Layer`](https://unpoly.com/api/X-Up-Open-Layer) header. Overlay options like `mode: 'drawer'` can be passed as keyword arguments.
+- New `up.origin_layer.mode`, `up.origin_layer.root?` and `up.origin_layer.overlay?` tell you about the layer that caused the request, using the [`X-Up-Origin-Mode`](https://unpoly.com/api/X-Up-Origin-Mode) header.
+- `up.cache.keep`, `up.cache.expire(false)` and `up.cache.evict(false)` no longer set a response header and print a deprecation warning. The server can no longer prevent the client-side cache from being expired or evicted.
+- Bundles Unpoly 3.11.0 for the asset pipeline.
+
+
+## 3.10.2
+
+- Bundles Unpoly 3.10.2 for the asset pipeline.
+
+
+## 3.10.0
+
+- No longer send empty response headers like `X-Up-Events: []`.
+- When redirecting, no longer add empty params like `_up_context_changes=%7B%7D` or `_up_events=%5B%5D` to the redirect URL.
+- Bundles Unpoly 3.10.0 for the asset pipeline.
+
+
+## 3.9.5
+
+- Bundles Unpoly 3.9.5 for the asset pipeline.
+
+
+## 3.9.3.1
+
+- Preserve an `X-Up-Target` changed by the server through a redirect. The original target, which the browser re-sends with the redirected request, no longer overrides it.
+
+
+## 3.9.3
+
+- Bundles Unpoly 3.9.3 for the asset pipeline.
+
+
+## 3.9.2.1
+
+- Ignore nested values in `_up_*` params (e.g. `_up_context_changes[foo]=bar`) instead of raising an error. These are often sent by security scanners. The value is logged as an error.
+
+
+## 3.9.2
+
+- Bundles Unpoly 3.9.2 for the asset pipeline.
+
+
+## 3.9.1
+
+- Bundles Unpoly 3.9.1 for the asset pipeline.
+
+
+## 3.9.0
+
+- Bundles Unpoly 3.9.0 for the asset pipeline.
+
+
+## 3.8.0.1
+
+- Loading the gem no longer loads `ActionController::Base` early, before your app's configuration is applied. The controller extensions are now added with `ActiveSupport.on_load(:action_controller_base)`.
+
+
+## 3.8.0
+
+- Bundles Unpoly 3.8.0 for the asset pipeline.
+
+
+## 3.7.3.2
+
+- `up.target?` now returns `true` for optional targets, e.g. when the request targets `#foo:maybe` and you test for `#foo`.
+
+
+## 3.7.3.1
+
+- When an `X-Up-*` header that should contain a JSON object contains another JSON value (like an array or a string), log an error and use an empty hash.
+
+
+## 3.7.3
+
+- Bundles Unpoly 3.7.3 for the asset pipeline.
+
+
+## 3.7.2
+
+- Bundles Unpoly 3.7.2 for the asset pipeline.
+
+
+## 3.7.1
+
+- Bundles Unpoly 3.7.1 for the asset pipeline.
+
+
+## 3.7.0.1
+
+- Re-release of 3.7.0 without changes, to make RubyGems redistribute the gem.
+
+
+## 3.7.0
+
+- Bundles Unpoly 3.7.0 for the asset pipeline.
+
+
+## 3.6.1.1
+
+- Parse `X-Up-Target` and `Vary` headers without a regular expression that could be slow for long header values.
+
+
+## 3.6.1
+
+- Bundles Unpoly 3.6.1 for the asset pipeline.
+
+
+## 3.6.0
+
+- Fix an error for requests whose URL contains `_up_` in its path, but has no query string.
+- Bundles Unpoly 3.6.0 for the asset pipeline.
+
+
+## 3.5.2
+
+- Bundles Unpoly 3.5.2 for the asset pipeline.
+
+
+## 3.5.1
+
+- Bundles Unpoly 3.5.1 for the asset pipeline.
+
+
+## 3.5.0
+
+- Bundles Unpoly 3.5.0 for the asset pipeline.
+
+
+## 3.3.0.1
+
+- Malformed JSON in `X-Up-*` headers no longer raises an error. It is logged as an error and ignored. Security scanners often send such headers.
+
+
+## 3.3.0
+
+- Bundles Unpoly 3.3.0 for the asset pipeline.
+
+
+## 3.2.2.1
+
+- New `up.validate_name?('email')` tests whether a given field is being [validated](https://unpoly.com/api/X-Up-Validate).
+- Fix `up.validate_name` raising a `NameError` (broken since 3.0.0).
+
+
+## 3.2.2
+
+- Bundles Unpoly 3.2.2 for the asset pipeline.
+
+
+## 3.2.1
+
+- Bundles Unpoly 3.2.1 for the asset pipeline.
+
+
+## 3.2.0
+
+- Bundles Unpoly 3.2.0 for the asset pipeline.
+
+
+## 3.1.1
+
+- Bundles Unpoly 3.1.1 for the asset pipeline.
+
+
+## 3.1.0
+
+- Bundles Unpoly 3.1.0 for the asset pipeline.
+
+
+## 3.0.0
+
+- New `up.validate_names` returns the names of all fields that triggered a [validation](https://unpoly.com/api/X-Up-Validate). Unpoly 3 may batch multiple validations into a single request.
+- Removed `up.validate`. Use `up.validate_name` or `up.validate_names` instead.
+- New `up.cache.expire` and `up.cache.evict` control the client-side cache, using the [`X-Up-Expire-Cache`](https://unpoly.com/api/X-Up-Expire-Cache) and [`X-Up-Evict-Cache`](https://unpoly.com/api/X-Up-Evict-Cache) headers. Expired pages can still be rendered and are then revalidated. Evicted pages are erased from the cache.
+- Deprecated `up.cache.clear`. Use `up.cache.expire` instead.
+- Deprecated `up.cache.keep`. Use `up.cache.expire(false)` instead.
+- Reading an Unpoly request header through a helper like `up.target` or `up.layer.mode` now adds that header to the `Vary` response header. To read a header without setting `Vary`, e.g. for logging, wrap your code in an `up.no_vary { ... }` block.
+- Deprecated `up.render_nothing`. Use `head(:no_content)` instead. `up.render_nothing` now responds with `204 No Content` by default.
+- Deprecated `up.reload?` and `up.reload_from_time`. Unpoly sends standard `If-Modified-Since` and `If-None-Match` headers when reloading a fragment, so you can use Rails' conditional GET helpers like `fresh_when` or `stale?`.
+- `X-Up-Title` is now sent as a JSON-encoded string, so non-ASCII characters can be escaped.
+- When redirecting, only headers set by the server (like events, context changes, cache commands or a changed target) are preserved as `_up_*` params. Request headers set by Unpoly are re-sent by the browser.
+- Includes the fixes from 2.7.1.1 to 2.7.2.2.
+- Bundles Unpoly 3.0.0 for the asset pipeline.
+
+
+## 2.7.2.2
+
+- Only send an `X-Up-Location` header when the request URL contains `_up_*` params that must be removed.
+
+
+## 2.7.2.1
+
+- Escape non-ASCII characters in JSON response headers like `X-Up-Events`, `X-Up-Context` or `X-Up-Accept-Layer`, so they can be transported over HTTP.
+
+
+## 2.7.2
+
+- Bundles Unpoly 2.7.2 for the asset pipeline.
+
+
+## 2.7.1.1
+
+- Fix the serialization of array params (like `ids[]=1&ids[]=2`) in the `X-Up-Location` header.
+
+
+## 2.7.1
+
+- Bundles Unpoly 2.7.1 for the asset pipeline.
+
+
+## 2.7.0
+
+- Bundles Unpoly 2.7.0 for the asset pipeline.
+
+
+## 2.6.1
+
+- Bundles Unpoly 2.6.1 for the asset pipeline.
+
+
+## 2.6.0
+
+- Bundles Unpoly 2.6.0 for the asset pipeline.
+
+
+## 2.5.3
+
+- Bundles Unpoly 2.5.3 for the asset pipeline.
+
+
+## 2.5.2
+
+- Bundles Unpoly 2.5.2 for the asset pipeline.
+
+
+## 2.5.1
+
+- Bundles Unpoly 2.5.1 for the asset pipeline.
+
+
+## 2.5.0
+
+- Bundles Unpoly 2.5.0 for the asset pipeline.
+
+
+## 2.4.1
+
+- Bundles Unpoly 2.4.1 for the asset pipeline.
+
+
+## 2.4.0
+
+- Bundles Unpoly 2.4.0 for the asset pipeline.
+
+
+## 2.3.0
+
+- New `up.safe_callback` helper prefixes a JavaScript callback with the response's CSP nonce. This lets callback attributes like `[up-on-loaded]` run with a [strict Content Security Policy](https://unpoly.com/learn/script-security).
+- Bundles Unpoly 2.3.0 for the asset pipeline.
+
+
+## 2.2.1
+
+- Bundles Unpoly 2.2.1 for the asset pipeline.
+
+
+## 2.2.0
+
+- First release from the separate unpoly-rails repository.
+- Supports Rails 3.2 again. Version 2.1.0 required Rails 4.2.
+- Bundles Unpoly 2.2.0 for the asset pipeline.

data/README.md

@@ -1,11 +1,11 @@
 unpoly-rails: Ruby on Rails bindings for Unpoly
 ===============================================
 
-[Unpoly](https://unpoly.com) is an [unobtrusive JavaScript](https://en.wikipedia.org/wiki/Unobtrusive_JavaScript) framework for server-side web applications.
+[Unpoly](https://unpoly.com) is the missing application layer for HTML. It expands what links, forms and server-rendered pages can do, while your application stays on the server.
 
-The `unpoly-rails` gem helps integrating Unpoly with [Ruby on Rails](https://rubyonrails.org/) applications.
+The `unpoly-rails` gem helps you integrate Unpoly with [Ruby on Rails](https://rubyonrails.org/) applications.
 
-This branch tracks the next major version, Unpoly **3.x**.\
+This branch is for Unpoly **3.x**.\
 If you're using Unpoly **2.x**, use the [`2.x-stable`](https://github.com/unpoly/unpoly-rails/tree/2.x-stable) branch.\
 If you're using Unpoly **1.x** or **0.x**, use the [`1.x-stable`](https://github.com/unpoly/unpoly/tree/1.x-stable/lib/unpoly/rails) branch in the [`unpoly`](https://github.com/unpoly/unpoly-rails/tree/2.x-stable) repository.
 
@@ -27,7 +27,7 @@ Installing frontend assets
 
 ### With npm
 
-If you're using a build tool like [esbuild](https://esbuild.github.io/) or [Webpacker](https://edgeguides.rubyonrails.org/webpacker.html), install the [`unpoly` npm package](https://unpoly.com/install/npm) to get Unpoly's frontend files.
+If you're using a build tool like [esbuild](https://esbuild.github.io/) or [Webpacker](https://edgeguides.rubyonrails.org/webpacker.html), install the [`unpoly` npm package](https://unpoly.com/learn/install#npm) to get Unpoly's frontend files.
 
 Now `import` Unpoly from your `application.js` pack:
 
@@ -36,7 +36,7 @@ import 'unpoly/unpoly.js'
 import 'unpoly/unpoly.css'
 ```
 
-You may need to import [additional files](https://unpoly.com/install), e.g. when migrating from an old Unpoly version.
+You may need to import [additional files](https://unpoly.com/learn/install), e.g. when migrating from an old Unpoly version.
 
 
 ### With the Asset Pipeline
@@ -57,24 +57,24 @@ Also add the following line to your `application.css` manifest:
  */
 ```
 
-You may need to require [additional files](https://unpoly.com/install), e.g. when migrating from an old Unpoly version.
+You may need to require [additional files](https://unpoly.com/learn/install), e.g. when migrating from an old Unpoly version.
 
 
 Server protocol helpers
 -----------------------
 
-This `unpoly-rails` gem implements the <a href="https://unpoly.com/up.protocol">optional server protocol</a> by providing the following helper methods to your controllers, views and helpers.
+This `unpoly-rails` gem implements the <a href="https://unpoly.com/api/up.protocol">optional server protocol</a> by providing the following helper methods to your controllers, views and helpers.
 
 
 ### Detecting a fragment update
 
-Use `up?` to test whether the current request is a [fragment update](https://unpoly.com/up.link):
+Use `up?` to test whether the current request is a [fragment update](https://unpoly.com/api/up.link):
 
 ```ruby
 up? # => true or false
 ```
 
-To retrieve the CSS selector that is being [updated](https://unpoly.com/up.link), use `up.target`:
+To retrieve the CSS selector that is being [updated](https://unpoly.com/api/up.link), use `up.target`:
 
 ```ruby
 up.target # => '.content'
@@ -158,7 +158,7 @@ class UsersController < ApplicationController
 end
 ```
 
-If you wish to emit an event on the current [layer](https://unpoly.com/up.layer)
+If you wish to emit an event on the current [layer](https://unpoly.com/api/up.layer)
 instead of the `document`, use `up.layer.emit`:
 
 ```ruby
@@ -174,7 +174,7 @@ end
 
 ### Detecting an Unpoly form validation
 
-To test whether the current request is a [form validation](https://unpoly.com/input-up-validate):
+To test whether the current request is a [form validation](https://unpoly.com/api/up-validate):
 
 ```ruby
 up.validate?
@@ -201,7 +201,7 @@ class UsersController < ApplicationController
 end
 ```
 
-You may also access the [names of the fields that triggered the validation request](https://unpoly.com/X-Up-Validate):
+You may also access the [names of the fields that triggered the validation request](https://unpoly.com/api/X-Up-Validate):
 
 ```ruby
 up.validate_names # => ['email', 'password']
@@ -216,7 +216,7 @@ up.validate_name?('email') # => true
 
 ### Detecting a fragment reload
 
-When Unpoly [reloads](https://unpoly.com/up.reload) or [polls](https://unpoly.com/up-poll) a fragment, the server will often render the same HTML. You can configure your controller actions to only render HTML if the underlying content changed since an earlier request.
+When Unpoly [reloads](https://unpoly.com/api/up.reload) or [polls](https://unpoly.com/api/up-poll) a fragment, the server will often render the same HTML. You can configure your controller actions to only render HTML if the underlying content changed since an earlier request.
 
 Only rendering when needed saves <b>CPU time</b> on your server, which spends most of its response time rendering HTML. This also reduces the <b>bandwidth cost</b> for a request/response exchange to **~1 KB**.
 
@@ -244,7 +244,7 @@ end
 
 ### Allowing callbacks with a strict CSP
 
-When your Content Security Policy disallows `eval()`, Unpoly cannot directly run callbacks HTML attributes. This affects `[up-]` attributes like `[up-on-loaded]` or `[up-on-accepted]`. See [Unpoly's CSP guide](https://unpoly.com/csp) for details.
+When your Content Security Policy disallows `eval()`, Unpoly cannot directly run callbacks HTML attributes. This affects `[up-]` attributes like `[up-on-loaded]` or `[up-on-accepted]`. See [Unpoly's CSP guide](https://unpoly.com/learn/script-security) for details.
 
 The following callback would crash the fragment update with an error like `Uncaught EvalError: call to Function() blocked by CSP`:
 
@@ -278,7 +278,7 @@ Note that fragment updates may target different layers for successful (HTTP stat
 
 #### `up.layer.mode`
 
-Returns the [mode](https://unpoly.com/up.layer.mode) of the targeted layer (e.g. `"root"` or `"modal"`).
+Returns the [mode](https://unpoly.com/api/up.layer.mode) of the targeted layer (e.g. `"root"` or `"modal"`).
 
 #### `up.layer.root?`
 
@@ -290,12 +290,12 @@ Returns whether the targeted layer is an overlay (not the root layer).
 
 #### `up.layer.context`
 
-Returns the [context](https://unpoly.com/up.context) object of the targeted layer.
+Returns the [context](https://unpoly.com/api/up.context) object of the targeted layer.
 See documentation for `up.context`, which is an alias for `up.layer.context`.
 
 #### `up.layer.accept(value)`
 
-[Accepts](https://unpoly.com/up.layer.accept) the current overlay.
+[Accepts](https://unpoly.com/api/up.layer.accept) the current overlay.
 
 Does nothing if the root layer is targeted.
 
@@ -304,7 +304,7 @@ Your action should either call `up.render_nothing` or respond with `text/html` c
 
 #### `up.layer.dismiss(value)`
 
-[Dismisses](https://unpoly.com/up.layer.dismisses) the current overlay.
+[Dismisses](https://unpoly.com/api/up.layer.dismiss) the current overlay.
 
 Does nothing if the root layer is targeted.
 
@@ -313,11 +313,11 @@ Your action should either call `up.render_nothing` or respond with `text/html` c
 
 #### `up.layer.emit(type, options)`
 
-[Emits an event](https://unpoly.com/up.layer.emit) on the targeted layer.
+[Emits an event](https://unpoly.com/api/up.layer.emit) on the targeted layer.
 
 #### `up.fail_layer.mode`
 
-Returns the [mode](https://unpoly.com/up.layer.mode) of the layer targeted for a failed response.
+Returns the [mode](https://unpoly.com/api/up.layer.mode) of the layer targeted for a failed response.
 
 #### `up.fail_layer.root?`
 
@@ -329,11 +329,11 @@ Returns whether the layer targeted for a failed response is an overlay.
 
 #### `up.fail_layer.context`
 
-Returns the [context](https://unpoly.com/up.context) object of the layer targeted for a failed response.
+Returns the [context](https://unpoly.com/api/up.context) object of the layer targeted for a failed response.
 
 #### `up.origin_layer.mode`
 
-Returns the [mode](https://unpoly.com/up.layer.mode) of the layer that caused the request.
+Returns the [mode](https://unpoly.com/api/up.layer.mode) of the layer that caused the request.
 
 #### `up.origin_layer.root?`
 
@@ -346,40 +346,57 @@ Returns whether the layer that caused the request is an overlay.
 
 ### Opening a new overlay
 
-You can request the frontend to [render your response in a new overlay](https://unpoly.com/X-Up-Open-Layer):
+You can request the frontend to [render your response in a new overlay](https://unpoly.com/api/X-Up-Open-Layer):
 
 ```ruby
 up.layer.open
 ```
 
 This will discard the [initial request target](#detecting-a-fragment-update)
-and render your response into [`:main`](https://unpoly.com/main). You can pass an explicit
+and render your response into [`:main`](https://unpoly.com/api/main). You can pass an explicit
 target as a `:target` option:
 
 ```ruby
 up.layer.open(target: '#overlay')
 ```
 
-Any [visual layer options](https://unpoly.com/customizing-overlays) can be also be passed as keyword arguments:
+Any [visual layer options](https://unpoly.com/learn/customizing-overlays) can also be passed as keyword arguments:
 
 
 ```ruby
 up.layer.open(mode: 'drawer', position: 'right')
 ```
 
+To run code when the overlay is accepted, pass a [callback](https://unpoly.com/api/X-Up-Open-Layer#callbacks) as a string of JavaScript.
+Wrap it in [`up.safe_callback`](#allowing-callbacks-with-a-strict-csp) so it also runs with a strict CSP:
+
+```ruby
+up.layer.open(on_accepted: up.safe_callback("up.reload('.company-list')"))
+```
+
+To only reload an element after the overlay is accepted, pass its selector as `:on_accepted_reload`.
+This runs no JavaScript, so it needs no `up.safe_callback`:
+
+```ruby
+up.layer.open(on_accepted_reload: '.company-list')
+```
+
+Option names are converted to Unpoly's camelCase names, e.g. `:on_accepted_reload` becomes `onAcceptedReload`.
+Keys inside the `:context` option are passed through unchanged.
+
 
 ### Expiring the client-side cache
 
-The Unpoly frontend [caches server responses](https://unpoly.com/caching) for a few minutes, making requests to these URLs return instantly.
-Only `GET` requests are cached. The entire cache is expired after every non-`GET` request (like `POST` or `PUT`).
+The Unpoly frontend [caches server responses](https://unpoly.com/learn/caching) for a few minutes, making requests to these URLs return instantly.
+Only `GET` requests are cached. When the frontend sends a non-`GET` request (like `POST` or `PUT`), it expires the entire cache.
 
-The server may override these defaults. For instance, the server can expire Unpoly's client-side response cache, even for `GET` requests:
+The server can expire additional cache entries, even after a `GET` request:
 
 ```ruby
 up.cache.expire
 ```
 
-You may also expire a single URL or [URL pattern](https://unpoly.com/url-patterns):
+You may also expire a single URL or [URL pattern](https://unpoly.com/api/url-patterns):
 
 ```ruby
 up.cache.expire('/notes/*')
@@ -388,9 +405,7 @@ up.cache.expire('/notes/*')
 
 ### Evicting pages from the client-side cache
 
-Instead of *expiring* pages from the cache you may also *evict*. The difference is that expired pages can still be rendered instantly and are then [revalidated](/caching#revalidation) with the server. Evicted pages are erased from the cache.
-
-You may also expire all entries matching an [URL pattern](https://unpoly.com/url-patterns):
+Instead of *expiring* pages from the cache you may also *evict*. The difference is that expired pages can still be rendered instantly and are then [revalidated](https://unpoly.com/learn/caching#revalidation) with the server. Evicted pages are erased from the cache.
 
 To evict the entire client-side cache:
 
@@ -398,7 +413,7 @@ To evict the entire client-side cache:
 up.cache.evict
 ```
 
-You may also evict a single URL or [URL pattern](https://unpoly.com/url-patterns):
+You may also evict a single URL or [URL pattern](https://unpoly.com/api/url-patterns):
 
 ```ruby
 up.cache.evict('/notes/*')
@@ -408,12 +423,16 @@ up.cache.evict('/notes/*')
 ### Unpoly headers are preserved through redirects
 
 `unpoly-rails` patches [`redirect_to`](https://api.rubyonrails.org/classes/ActionController/Redirecting.html#method-i-redirect_to)
-so [Unpoly-related request and response headers](https://unpoly.com/up.protocol) are preserved for the action you redirect to.
+so [Unpoly-related request and response headers](https://unpoly.com/api/up.protocol) are preserved for the action you redirect to.
+
+A `#hash` in the redirect URL is also kept for fragment updates, e.g. `redirect_to post_path(@post, anchor: 'comments')`.
+Unpoly could otherwise not see it, as the browser follows the redirect in the background.
+With Unpoly 3.15 or later, the element with that ID is revealed and the `#hash` shows in the address bar.
 
 
 ### Accessing Unpoly request headers automatically sets a `Vary` response header
 
-Accessing [Unpoly-related request headers](https://unpoly.com/up.protocol) through helper methods like `up.target` will automatically add a [`Vary`](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Vary) response header. This is to indicate that the request header influenced the response and the response should be cached separately for each request header value.
+Accessing [Unpoly-related request headers](https://unpoly.com/api/up.protocol) through helper methods like `up.target` will automatically add a [`Vary`](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Vary) response header. This is to indicate that the request header influenced the response and the response should be cached separately for each request header value.
 
 For example, a controller may access the request's `X-Up-Mode` through the `up.layer.mode` helper:
 
@@ -467,11 +486,11 @@ The reason for this is that some browsers remember the method of the initial pag
 
 ### Working with context
 
-Calling `up.context` will return the [context](https://unpoly.com/up.context) object of the targeted layer.
+Calling `up.context` will return the [context](https://unpoly.com/api/up.context) object of the targeted layer.
 
 The context is a JSON object shared between the frontend and the server.
 It persists for a series of Unpoly navigation, but is cleared when the user makes a full page load.
-Different Unpoly [layers](https://unpoly.com/up.layer) will usually have separate context objects,
+Different Unpoly [layers](https://unpoly.com/api/up.layer) will usually have separate context objects,
 although layers may choose to share their context scope.
 
 You may read and change the context object. Changes will be sent to the frontend with your response.
@@ -516,7 +535,7 @@ What you still need to do manually
 
 ### Failed form submissions must return a non-200 status code
 
-Unpoly lets you submit forms via AJAX by using the [`form[up-submit]`](https://unpoly.com/form-up-submit) selector or [`up.submit()`](https://unpoly.com/up.submit) function.
+Unpoly lets you submit forms via AJAX by using the [`form[up-submit]`](https://unpoly.com/api/up-submit) selector or [`up.submit()`](https://unpoly.com/api/up.submit) function.
 
 For Unpoly to be able to detect a failed form submission,
 the form must be re-rendered with a non-200 HTTP status code.
@@ -549,13 +568,15 @@ Before you create a pull request, please have some discussion about the proposed
 
 ### Running tests
 
-- Install the Ruby version from `.ruby-version` (currently 2.3.8)
-- Install Bundler by running `gem install bundler`
+- Install the Ruby version from `.ruby-version` (currently 3.4.12)
+- Install the Bundler version from `Gemfile.lock` by running `gem install bundler -v 2.6.9` (Ruby 3.4 already ships with it)
 - Install dependencies by running `bundle install`
 - Run `bundle exec rspec`
 
 The tests run against a minimal Rails app that lives in `spec/dummy`.
 
+GitHub Actions runs the tests on every push and pull request (see `.github/workflows/test.yml`).
+
 ### Making a new release
 
 Install the `unpoly-rails` and [`unpoly`](https://github.com/unpoly/unpoly) repositories into the same parent folder:

data/assets/unpoly/unpoly-bootstrap3.css.map

@@ -0,0 +1 @@
+{"version":3,"file":"unpoly-bootstrap3.css","mappings":"AAGE;;;;;;EAEE;EACA;EACA;AAEJ,C","sources":["webpack://unpoly/./src/unpoly-bootstrap3.sass"],"sourcesContent":["up-modal,\nup-drawer,\nup-popup\n  .container,\n  .container-fluid\n    padding-left: 0  // the overlay box already has a padding\n    padding-right: 0 // the overlay box already has a padding\n    max-width: none  // the overlay box already as a max-width\n"],"names":[],"sourceRoot":""}

data/assets/unpoly/unpoly-bootstrap3.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"unpoly-bootstrap3.js","mappings":";;;;;;;;AAAA;;;;;;UCAA;UACA;;UAEA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;;UAEA;UACA;;UAEA;UACA;UACA;;;;;WCtBA;WACA;WACA;WACA,uDAAuD,iBAAiB;WACxE;WACA,gDAAgD,aAAa;WAC7D,E;;;;;;;ACLA,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC;AAG9C,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC;AAE7C,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC;AAErD,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,aAAa,CAAC;AAEpD,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,mBAAmB,CAAC;AAC9D,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,oBAAoB,CAAC,IAAI,CAAC,sBAAsB,CAAC;AACpE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,sBAAsB,CAAC,IAAI,CAAC,mBAAmB,EAAE,sBAAsB,CAAC;AAE3F,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI,CACtC,KAAK,EACL,gCAAgC,CACjC;AAED,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,uBAAuB,CAAC,IAAI,CAC1C,sBAAsB,EACtB,wBAAwB,EACxB,8BAA8B,CAC/B;AAED,mBAAO,CAAC,CAA0B,CAAC","sources":["webpack://unpoly/./src/unpoly-bootstrap3.sass?1785","webpack://unpoly/webpack/bootstrap","webpack://unpoly/webpack/runtime/make namespace object","webpack://unpoly/./src/unpoly-bootstrap3.js"],"sourcesContent":["// extracted by mini-css-extract-plugin\nexport {};","// The module cache\nvar __webpack_module_cache__ = {};\n\n// The require function\nfunction __webpack_require__(moduleId) {\n\t// Check if module is in cache\n\tvar cachedModule = __webpack_module_cache__[moduleId];\n\tif (cachedModule !== undefined) {\n\t\treturn cachedModule.exports;\n\t}\n\t// Create a new module (and put it into the cache)\n\tvar module = __webpack_module_cache__[moduleId] = {\n\t\t// no module.id needed\n\t\t// no module.loaded needed\n\t\texports: {}\n\t};\n\n\t// Execute the module function\n\t__webpack_modules__[moduleId](module, module.exports, __webpack_require__);\n\n\t// Return the exports of the module\n\treturn module.exports;\n}\n\n","// define __esModule on exports\n__webpack_require__.r = (exports) => {\n\tif(typeof Symbol !== 'undefined' && Symbol.toStringTag) {\n\t\tObject.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });\n\t}\n\tObject.defineProperty(exports, '__esModule', { value: true });\n};","// Bootstrap uses the class `active` to highlight the current section of a navigation bar.\nup.status.config.currentClasses.push('active')\n\n// Bootstrap uses the class `active` to force a button's active state.\nup.status.config.activeClasses.push('active')\n\nup.status.config.navSelectors.push('.nav', '.navbar')\n\nup.form.config.groupSelectors.unshift('.form-group')\n\nup.viewport.config.fixedTopSelectors.push('.navbar-fixed-top')\nup.viewport.config.fixedBottomSelectors.push('.navbar-fixed-bottom')\nup.viewport.config.anchoredRightSelectors.push('.navbar-fixed-top', '.navbar-fixed-bottom')\n\nup.fragment.config.badTargetClasses.push(\n  'row',\n  /^col(-xs|-sm|-md|-lg)?(-\\d+)?$/\n)\n\nup.layer.config.foreignOverlaySelectors.push(\n  '.modal:not(up-modal)',\n  '.popover:not(up-popup)',\n  '.dropdown-menu:not(up-popup)'\n)\n\nrequire('./unpoly-bootstrap3.sass')\n"],"names":[],"sourceRoot":""}

data/assets/unpoly/unpoly-bootstrap3.min.css.map

@@ -0,0 +1 @@
+{"version":3,"file":"unpoly-bootstrap3.min.css","mappings":"AAGE,4IAEE,eACA,gBACA,e","sources":["webpack://unpoly/./src/unpoly-bootstrap3.sass"],"sourcesContent":["up-modal,\nup-drawer,\nup-popup\n  .container,\n  .container-fluid\n    padding-left: 0  // the overlay box already has a padding\n    padding-right: 0 // the overlay box already has a padding\n    max-width: none  // the overlay box already as a max-width\n"],"names":[],"sourceRoot":""}

data/assets/unpoly/unpoly-bootstrap3.min.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"unpoly-bootstrap3.min.js","mappings":"8CACIA,EAA2B,CAAC,EAGhC,SAASC,EAAoBC,GAE5B,IAAIC,EAAeH,EAAyBE,GAC5C,QAAqBE,IAAjBD,EACH,OAAOA,EAAaE,QAGrB,IAAIC,EAASN,EAAyBE,GAAY,CAGjDG,QAAS,CAAC,GAOX,OAHAE,EAAoBL,GAAUI,EAAQA,EAAOD,QAASJ,GAG/CK,EAAOD,OACf,CCrBAJ,EAAoBO,EAAKH,IACH,oBAAXI,QAA0BA,OAAOC,aAC1CC,OAAOC,eAAeP,EAASI,OAAOC,YAAa,CAAEG,MAAO,WAE7DF,OAAOC,eAAeP,EAAS,IAAc,CAAEQ,OAAO,KCJvDC,GAAGC,OAAOC,OAAOC,eAAeC,KAAK,UAGrCJ,GAAGC,OAAOC,OAAOG,cAAcD,KAAK,UAEpCJ,GAAGC,OAAOC,OAAOI,aAAaF,KAAK,OAAQ,WAE3CJ,GAAGO,KAAKL,OAAOM,eAAeC,QAAQ,eAEtCT,GAAGU,SAASR,OAAOS,kBAAkBP,KAAK,qBAC1CJ,GAAGU,SAASR,OAAOU,qBAAqBR,KAAK,wBAC7CJ,GAAGU,SAASR,OAAOW,uBAAuBT,KAAK,oBAAqB,wBAEpEJ,GAAGc,SAASZ,OAAOa,iBAAiBX,KAClC,MACA,kCAGFJ,GAAGgB,MAAMd,OAAOe,wBAAwBb,KACtC,uBACA,yBACA,gCAGF,EAAQ,I","sources":["webpack://unpoly/webpack/bootstrap","webpack://unpoly/webpack/runtime/make namespace object","webpack://unpoly/./src/unpoly-bootstrap3.js"],"sourcesContent":["// The module cache\nvar __webpack_module_cache__ = {};\n\n// The require function\nfunction __webpack_require__(moduleId) {\n\t// Check if module is in cache\n\tvar cachedModule = __webpack_module_cache__[moduleId];\n\tif (cachedModule !== undefined) {\n\t\treturn cachedModule.exports;\n\t}\n\t// Create a new module (and put it into the cache)\n\tvar module = __webpack_module_cache__[moduleId] = {\n\t\t// no module.id needed\n\t\t// no module.loaded needed\n\t\texports: {}\n\t};\n\n\t// Execute the module function\n\t__webpack_modules__[moduleId](module, module.exports, __webpack_require__);\n\n\t// Return the exports of the module\n\treturn module.exports;\n}\n\n","// define __esModule on exports\n__webpack_require__.r = (exports) => {\n\tif(typeof Symbol !== 'undefined' && Symbol.toStringTag) {\n\t\tObject.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });\n\t}\n\tObject.defineProperty(exports, '__esModule', { value: true });\n};","// Bootstrap uses the class `active` to highlight the current section of a navigation bar.\nup.status.config.currentClasses.push('active')\n\n// Bootstrap uses the class `active` to force a button's active state.\nup.status.config.activeClasses.push('active')\n\nup.status.config.navSelectors.push('.nav', '.navbar')\n\nup.form.config.groupSelectors.unshift('.form-group')\n\nup.viewport.config.fixedTopSelectors.push('.navbar-fixed-top')\nup.viewport.config.fixedBottomSelectors.push('.navbar-fixed-bottom')\nup.viewport.config.anchoredRightSelectors.push('.navbar-fixed-top', '.navbar-fixed-bottom')\n\nup.fragment.config.badTargetClasses.push(\n  'row',\n  /^col(-xs|-sm|-md|-lg)?(-\\d+)?$/\n)\n\nup.layer.config.foreignOverlaySelectors.push(\n  '.modal:not(up-modal)',\n  '.popover:not(up-popup)',\n  '.dropdown-menu:not(up-popup)'\n)\n\nrequire('./unpoly-bootstrap3.sass')\n"],"names":["__webpack_module_cache__","__webpack_require__","moduleId","cachedModule","undefined","exports","module","__webpack_modules__","r","Symbol","toStringTag","Object","defineProperty","value","up","status","config","currentClasses","push","activeClasses","navSelectors","form","groupSelectors","unshift","viewport","fixedTopSelectors","fixedBottomSelectors","anchoredRightSelectors","fragment","badTargetClasses","layer","foreignOverlaySelectors"],"sourceRoot":""}

data/assets/unpoly/unpoly-bootstrap4.css.map

@@ -0,0 +1 @@
+{"version":3,"file":"unpoly-bootstrap4.css","mappings":"AAGE;;;;;;EAEE;EACA;EACA;AAEJ,C","sources":["webpack://unpoly/./src/unpoly-bootstrap4.sass"],"sourcesContent":["up-modal,\nup-drawer,\nup-popup\n  .container,\n  .container-fluid\n    padding-left: 0  // the overlay box already has a padding\n    padding-right: 0 // the overlay box already has a padding\n    max-width: none  // the overlay box already as a max-width\n"],"names":[],"sourceRoot":""}