This repository was archived by the owner on Dec 24, 2019. It is now read-only.
Open
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
We've updated a dependency and here is what you need to know:
Additionally, the update changed a few other dependencies as well:
You should probably take a good look at the info here and the test results before merging this pull request, of course.
What changed?
✳️ rails (5.1.4 → 5.1.6) · Repo
Commits
See the full diff on Github. The new version differs by more commits than we can show here.
Commits
See the full diff on Github. The new version differs by 7 commits:
Preparing for 5.1.6 releaseFix changelog entries of `5-1-stable` [ci skip]Preparing for 5.1.5 releasePreparing for 5.1.5.rc1 releaseMerge pull request #31671 from larskanis/pg-1.0Backport #30748 for redis-rb 4.0 supportMerge pull request #30468 from greysteil/backport-changelog-linksCommits
See the full diff on Github. The new version differs by 6 commits:
Preparing for 5.1.6 releasePreparing for 5.1.5 releasePreparing for 5.1.5.rc1 releaseMerge pull request #30391 from jbourassa/fix-actionmailer-lambda-defaultMerge pull request #30468 from greysteil/backport-changelog-linksFix tests on Mail 2.7Commits
See the full diff on Github. The new version differs by 13 commits:
Preparing for 5.1.6 releaseCache url helpers moduleCheck exclude before flagging cookies as secure in ActionDispatch::SSL (#32262)Preparing for 5.1.5 releasePreparing for 5.1.5.rc1 releaseMerge pull request #31099 from nobu/patch-1Generate tmpname on its ownBackport fix `test_session_store_with_expire_after`Fix optimized url helpers when using relative url rootMerge pull request #30468 from greysteil/backport-changelog-linksMerge pull request #30959 from lostapathy/capybara_versionEnsure local dev and prod puma configs do not clobber ActionDispatch::SystemTesting defaultsMerge branch '5-1-4' into 5-1-stableCommits
See the full diff on Github. The new version differs by 8 commits:
Preparing for 5.1.6 releaseMerge pull request #32282 from javan/fix-digesting-mixed-formatsPreparing for 5.1.5 releasePreparing for 5.1.5.rc1 releaseMerge pull request #29127 from DmytroVasin/rails-ujs-remote-callbacksMerge pull request #30468 from greysteil/backport-changelog-linksMerge pull request #30513 from y-yagi/fix_30444Fix `test_should_sanitize_illegal_style_properties` failureCommits
See the full diff on Github. The new version differs by 6 commits:
Preparing for 5.1.6 releaseFix changelog entries of `5-1-stable` [ci skip]Preparing for 5.1.5 releasePreparing for 5.1.5.rc1 releaseBackport #30748 for redis-rb 4.0 supportMerge pull request #30468 from greysteil/backport-changelog-linksCommits
See the full diff on Github. The new version differs by 6 commits:
Preparing for 5.1.6 releaseMerge pull request #32220 from rails/fix-time-columns-on-sqlite3Preparing for 5.1.5 releasePreparing for 5.1.5.rc1 releaseBackport `Fix to working before/after validation callbacks on multiple contexts.`Merge pull request #30468 from greysteil/backport-changelog-linksCommits
See the full diff on Github. The new version differs by 74 commits:
Preparing for 5.1.6 releaseAdd CHANGELOG entry for #32310 [ci skip]Merge pull request #32310 from sodabrew/mysql2-0.4-0.5Fix failing `QuotingTest#test_quoted_time_utc`Fix multiline expression indexes for postgresql (#31621)Fix MigratorTest#test_migrator_verbosityMerge pull request #32220 from rails/fix-time-columns-on-sqlite3Fix that after commit callbacks on update does not triggered when optimistic locking is enabledIntroduce `_update_row` to decouple optimistic locking concern from `Persistence` module`id_in_database` do not return nil value for persisted recordMerge pull request #31435 from yahonda/deprecated_bigdecimal_newEnsure we don't write virtual attributes on update, tooNever attempt to write virtual attributes to the databaseMerge pull request #28914 from bogdanvlviv/fix-touch-with-optimistic-lockingMerge pull request #28926 from bogdanvlviv/fix-destroy-with-locking_column-value-nullMerge pull request #32161 from aried3r/patch-3Add pg 1.0.0 compatibility to 5.1.5 ChangelogMerge pull request #32005 from maschwenk/ar-distinct-order-count-regressionUse the query cache when connection is already connectedMerge branch '5-1-5' into 5-1-stablePreparing for 5.1.5 releasePERF: Recover marshaling dump/load performance (#31827)Change how `AttributeSet::Builder` receives its defaultsPreparing for 5.1.5.rc1 releaseFix `count(:all)` with eager loading and having an order other than the driving tableFix newly added reflection order when redefining associationMerge pull request #31671 from larskanis/pg-1.0Merge pull request #31423 from bogdanvlviv/fix-protected_environments-with-symbolsUsing table name qualified column names unless having SELECT list explicitlyFix `cache_key` with a relation having distinct and orderMerge pull request #27561 from fishbrain/count-all-in-has-many-associationMerge pull request #27780 from mikelikesbikes/fix-update-attribute-callbacks-issueMerge pull request #29785 from cswilliams/rescue_postgres_connection_errors_on_deallocMerge pull request #31425 from chiastolite/optimize_foregin_keys_queryMerge pull request #31521 from zinovyev/fix-mysql-get-lock-bigintMerge pull request #31607 from fatkodima/fix-sqlite-partial-indexesMerge pull request #31562 from fatkodima/sqlite_migration_compatibilitySQLite: Fix `copy_table` with composite primary keysMerge pull request #25346 from bogdan/correct-tags-count-in-fixturesMerge pull request #31525 from yahonda/5-1-stable_backport_31520Fix `count(:all)` to correctly work `distinct` with custom SELECT listHandle `FrozenError` if it is availableMerge pull request #31428 from yahonda/report_on_exception_true_in_ruby25Merge pull request #31405 from bogdanvlviv/fix-conflicts-counter_cache-with-touch-by-optimistic_lockingMerge pull request #31403 from Edouard-chin/fix-quoted-columnnameMerge pull request #29850 from yahonda/test_with_mariadb_102_on_trustyFix sqlite migrations with custom primary keysMerge pull request #30468 from greysteil/backport-changelog-linksPrevent deadlocks with load interlock and DB lock.Merge pull request #30980 from sobrinho/sobrinho/arel-star-ignored-columnsShould test `LegacyPrimaryKeyTest` to both `V5_0` and `V4_2`Merge pull request #30909 from ahorek/compatibility_fixExtract repeatedly appeared prepending compatible table definitionMerge pull request #29623 from kamipo/should_use_same_connection_in_query_cacheMerge pull request #29609 from tsukasaoishi/query_cache_from_beginningMerge pull request #30928 from Altech/indifferent-ignored-columnsTest `ignored_columns` value is inheritable by subclassesFix deprecation warnings from with_lockMerge pull request #30727 from tgxworld/backport_perf_chanagesBackport #30579Fix longer sequence name detection for serial columns (#28339)Fix collided sequence name detectionMySQL: Don't lose `auto_increment: true` in the `db/schema.rb`Fix `COUNT(DISTINCT ...)` for `GROUP BY` with `ORDER BY` and `LIMIT`Fix "warning: assigned but unused variable - person"Fix preloading association with scope including joinsPERF: Incorrect memoization in `ActiveRecord::Associations::Preloader::Association`.PERF: Recover `ActiveRecord::pluck` performance.Add an extra assertion to ensure dumping schema default as expectedFix `quote_default_expression` for UUID with array defaultMerge pull request #30655 from kuzukuzu/fix_create_join_table_compatibilityMerge pull request #30686 from metaskills/sqlserver-1as1fixMerge pull request #30706 from tgxworld/fix_preload_memoizationMerge branch '5-1-4' into 5-1-stableCommits
See the full diff on Github. The new version differs by 20 commits:
Preparing for 5.1.6 releaseReturn all mappings for a timezone id in `country_zones`Merge branch '5-1-5' into 5-1-stablePreparing for 5.1.5 releaseDon't force people to upgrade i18n gemAdd missing requireMerge pull request #31991 from radar/bump-i18n-to-one-dot-ohMerge pull request #31923 from jdelStrother/duration-deserializationPreparing for 5.1.5.rc1 releaseMerge pull request #31803 from rmosolgo/rm-dependenciesMerge pull request #31624 from y-yagi/fix_minitest_511Handle `FrozenError` if it is availableRevert "Fix test for change to circular loading message"Revert "Add more info to the circular dependency error"Fix test for change to circular loading messageMerge pull request #31433 from jordan-brough/preserve-deprecated-method-visibilityAdd more info to the circular dependency errorMerge pull request #30468 from greysteil/backport-changelog-linksPrevent deadlocks with load interlock and DB lock.Hash#transform_keys is in Ruby 2.5+Commits
See the full diff on Github. The new version differs by 7 commits:
Bump version to 1.7.1Remove one difference from READMEMinor tweak to READMEBump copyright yearMake whitespace handling for <%# %> tags more compatible with Erubis (Fixes #14)Test on ruby 2.5 on Travisremove unnecessary ternary operationCommits
See the full diff on Github. The new version differs by 37 commits:
Bump to 1.0.0Merge pull request #409 from svenfuchs/remove-1.9.3-supportBump to 0.9.5Remove Ruby 1.9.3 supportLock Rake to 12.2.x versionsMerge pull request #408 from wjordan/enforce_available_locales_false_fixstore translations for unavailable locales if enforce_available_locales is falseBump to 0.9.4Merge pull request #407 from fatkodima/fix-key-value-subtreesMerge pull request #406 from jhawthorn/optimize_available_localesFix Chained backend with KeyValueOptimize Backend::Simple#available_localesBump to 0.9.3Merge pull request #395 from stereobooster/interpolate-for-arraysMerge pull request #402 from fatkodima/subtrees-bugMerge pull request #403 from fatkodima/ci-ruby2.5.0CI against ruby 2.5.0Fix issue with disabled subtrees and pluralization for KeyValue backendBump to 0.9.2Merge pull request #400 from fatkodima/fix-t-empty-keysMerge pull request #399 from fatkodima/fix-t-with-falseFix translate with nil and empty keysFix translate with default: [false]Merge pull request #396 from lulalala/fix-lambda-docMerge pull request #398 from stereobooster/ojUse oj if available instead ActiveSupport::JSONDocument about lambda return value also being interpolatedFix lambda document exampleRemove redundant test for lookupFix specs for array interpolationAdd comments exaplining new array behaviour for #interpolateRefactor interpolation methodUpdate interpolation.rbInterpolate now works for arrayMerge pull request #391 from stereobooster/dont-store-tr-for-locales-not-set-as-availableFix CR notesDon't store translations for locales not set as availableRelease Notes
From the Github release:
2.2.2 / 2018-03-22
Make public
Loofah::HTML5::Scrub.force_correct_attribute_escaping!,which was previously a private method. This is so that downstream gems
(like rails-html-sanitizer) can use this logic directly for their own
attribute scrubbers should they need to address CVE-2018-8048.
Commits
See the full diff on Github. The new version differs by 47 commits:
version bump to 2.2.2Make public `force_correct_attribute_escaping!`use VersionInfo.instanceversion bump to 2.2.1update Manifest.txt and CHANGELOG.mdMerge branch 'flavorjones-remediate-attribute-escaping'tests and fix for CVE-2018-8048SECURITY.md to publish vuln reporting processbump the fake gemspecfix remaining rdoc format in READMEfix Hoe config to use README.mdversion bump to v2.2.0finishes previous logical commitconvert README from rdoc to markdownremove travis configupdate CHANGELOGMerge pull request #142 from eventfuel/added_list_type_style_to_css_propswhitelist CSS function `rgb`Added list-type-style as a safe CSS property to whitelist by default (replacement for PR #137)Merge branch 'pr136-block-level'update CHANGELOGtidy elements.rb, cover html5 block elementsupdate CHANGELOGMerge pull request #123 from eventfuel/enable_whitelisting_css_functionsMerge pull request #141 from david-a-wheeler/doc-xxeMerge pull request #138 from rmacklin/fix-inaccurate-example-in-readmeconcourse: fix rubinius buildsDocument doesn't use dangerous Nokogiri configFix inaccurate example in READMEadd html5 block-level elementsfrozen-string-literal support in testsupdate CHANGELOGMerge branch '127-nested-script-tags'handle nested script tagsupdate CHANGELOGMerge pull request #131 from baopham/add-symbolupdate CHANGELOGMerge pull request #134 from MothOnMars/whitelist_mainwhitelist HTML5 <main> elementconcourse: remove serialness of PR buildsconcourse: run PRs on all MRIsnest non-spec tests to avoid duplicate test runsAdd symbol to list of SVG_ELEMENTSMerge pull request #126 from aried3r/patch-1Update CHANGELOG.mdconcourse: add windows testsjruby shouldn't be a blocker to PR success for nowCommits
See the full diff on Github. The new version differs by 57 commits:
v2.3.02018Merge pull request #183 from socketry/allow-interests-nilFix trailing whitespace.Fix C implementation.Also handle nil interests in JRuby implementation.Allow Monitor#interests=nil in pure Ruby implementation.Only update interests if they have changed.Handle Monitor#interests = nilv2.2.0Merge pull request #181 from socketry/rubocop-0-52-1Update to RuboCop 0.52.1Merge pull request #180 from socketry/better-port-h-checkext/nio4r/extconf.rb: check for port_event_t in port.h (fixes #178)Merge pull request #179 from tompng/rb_funcall_fixgem update --system before installadd 2.5.0 to .travis.ymlfix rb_funcall argument(when argc=0)Merge pull request #177 from socketry/fix-jruby-bytebuffer-string-conversionsFix ByteBuffer string conversions on JRubyMerge pull request #175 from olleolleolle/patch-4udp_socket_spec: Not on JRubyTravis: jruby-9.1.15.0Merge pull request #174 from socketry/rubocop-0-51Update RuboCop to 0.51Remove .ruby-versionMerge pull request #170 from HoneyryderChuck/cancelled_keycall SelectionKey#isValid before readyOps, to prevent CancelledKeyExceptiontest inconsistency of readiness when the selectable has been closedadded first draft of testreverted changespreventing CancelledKeyException, which randomly happens when selector selects an already closed keyMerge pull request #173 from socketry/fix-cispec: Use 127.0.0.1 instead of localhost (fixes #172)Merge pull request #171 from olleolleolle/patch-3Travis: latest JRubyMerge pull request #165 from olleolleolle/patch-3Travis: jruby-9.1.13.0Merge pull request #164 from HoneyryderChuck/bufferleakmoved buffer initialization to allocateinitialize buffer, as initialization may fail to mallocate the bufferfree char buffer when cleaning up ByteBuffer objectMerge pull request #162 from larskanis/dont-build-ext-on-windowsDon't build the extension on WindowsMerge pull request #157 from MSP-Greg/mingw_tests_1Windows / MinGW test failure - fix spec_helper.rbMerge pull request #155 from olleolleolle/patch-3Travis: jruby-9.1.12.0Add Appveyor badgeMerge pull request #153 from unak/patch-1Merge branch 'master' into patch-1Merge pull request #154 from socketry/appveyorappveyor.yml: Initial configurationSupport mswinSupport mswinMerge pull request #151 from socketry/configurable-backendsNIO::Selector: Support for enumerating and configuring backendCommits
See the full diff on Github. The new version differs by 29 commits:
version bump to 1.8.2update CHANGELOGupdate CHANGELOGMerge pull request #1713 from sparklemotion/flavorjones-1238-segfault-reparented-entitiesensure EntityReferences ignore malformed childrenupdate CHANGELOGremove hacks to discover the path to `racc`Merge pull request #1704 from larskanis/win-ruby-2.5Appveyor: Add ruby-2.4 and ruby-head to build matrixWindows: Add cross build for ruby-2.5Merge branch '1688-upgrade-libxml-to-2.9.7'update CHANGELOGupdate libxslt from 1.1.30 to 1.1.32update libxml2 from 2.9.5 to 2.9.7update changelogMerge pull request #1674 from larskanis/serialize-default-utf8update changelogMerge pull request #1685 from jeremyevans/openbsdFix a couple of issues on OpenBSDMerge pull request #1676 from andrew-aladev/character-stack-vs-string-bufferreplaced StringBuffer with StringBuilder, because we don't need synchronization in handlerreplaced %i with regular array of symbols to fit ruby-1.9.3concourse: more coverage for PRsadded tests for html and xml sax parsers that will verify the order of parsed text itemsadded helper document that can test a strict order of items produced by parsersreplaced character stack with string buffer, fixed characters population mechanismconcourse: windows 2.4 buildconcourse: libxmlruby jobs repositioned ...Use UTF-8 as default encoding for Node#serializeCommits
See the full diff on Github. The new version differs by 9 commits:
Bumping versionwebrick: remove concurrent-ruby dev dependencyMerge pull request #1190 from hugoabonizio/masterMerge pull request #1193 from tompng/multipart_less_memoryMerge pull request #1192 from jkowens/masterMerge pull request #1179 from tompng/masterMerge pull request #1151 from cremno/simplify-some-string-creationsMerge pull request #1189 from lugray/fix_rack_lockRequire the right file for the digest we're usingRelease Notes
From the Github release:
1.0.0 / 2018-03-27
The first release in the 1.0.0 series. 🎉 For the 1.x releases, we will follow Semantic Versioning very strictly; please keep this in mind when submitting fixes/suggesting changes.
Breaking changes:
(Per Lundberg #223)
Minor enhancements / bug fixes:
(Edouard Chin #201)
sessionduringfollow_redirect!(Alexander Popov #218)
(Timur Platonov #220)
Commits
See the full diff on Github. The new version differs by more commits than we can show here.
Release Notes
From the Github release:
Commits
See the full diff on Github. The new version differs by 16 commits:
Prepare to 1.0.4 releaseMake sure we address CVE-2018-8048Remove rbx since it doesn't seem to install.Merge pull request #66 from fschwahn/improve-testsFix deprecation warning from MinitestMake tests pass again with recent nokogiri versionsRename test to better reflect what is actually testedtyposWe're still testing against ruby 1.9 and 2.0 that aren't supported by nokogiri 1.7activesupport 5 doesn't support ruby < 2.2.2 that are still tested in this repobundle with the newest released bundlerTest against newer released rubies[ci skip] Remove faulty overrides in scrubber example.[ci skip] Change override method in PermitScrubber.Merge pull request #47 from pvalena/patch-1Correct license filenameCommits
See the full diff on Github. The new version differs by 19 commits:
Preparing for 5.1.6 releaseAdd CHANGELOG entry for minimum ruby version checkMerge pull request #32252 from bogdanvlviv/fix-changelogs-of-5-1-stable-30748Compare ruby version with correct wayFix `test_config_another_database` failureMerge pull request #32310 from sodabrew/mysql2-0.4-0.5Fix changelog entries of `5-1-stable` [ci skip]Merge pull request #31901 from Kevinrob/patch-1Preparing for 5.1.5 releasePreparing for 5.1.5.rc1 release`Minitest::Result` can't use in 5-1-stableMerge pull request #31624 from y-yagi/fix_minitest_511Merge pull request #31671 from larskanis/pg-1.0Handle `FrozenError` if it is availableMerge pull request #31355 from rails/fix-rails-env-with-rubyBackport #30748 for redis-rb 4.0 supportMerge pull request #30468 from greysteil/backport-changelog-linksBackport #30579Merge pull request #29146 from y-yagi/fix_29138Commits
See the full diff on Github. The new version differs by 41 commits:
bump version to 12.3.1Fixed rdoc stylerubocop -aMerge pull request #262 from gfx/did_you_mean-v1.2.0support did_you_mean >= v1.2.0 which has a breaking change on formattersMerge pull request #252 from grzuy/fix_multitask_failuresPrefer #refute over negated #assertMerge pull request #259 from grzuy/fix_leading_whitespacesKeep original test case testing spaces in some argumentsMerge pull request #261 from aycabta/use-jruby-9.1.16.0Use JRuby 9.1.16.0Make space trimming consistent for all task arguments. Fixes #260Merge pull request #258 from grzuy/ruby_2_5_ciMerge pull request #254 from grzuy/remove_dup_inclusionmake AppVeyor test with ruby 2.5 alsoRemoves duplicated inclusion of Rake::DSLMerge pull request #256 from ruby/avoid-install-needless-depsTo use gem install insteaad of bundle installMerge pull request #253 from radar/patch-1Remove date field from rake.gemspecDon't run tasks if it depends on already invoked but failed task. Fixes #189rubocop -aMerge pull request #250 from dylanahsmith/re-raise-load-error-without-pathRe-raise a LoadError that didn't come from require in the test loaderMerge pull request #249 from esparta/fix_readme_minimal_ruby_version[skip ci] Fix minimal ruby version on READMErubocop -aMerge remote-tracking branch 'origin/v11'prefer to use %x literal instead of back-tickSupport non-bundler environmentMerge pull request #244 from aycabta/2.5.0Merge pull request #245 from aycabta/force-installation-bundlerForce installation BundlerUse 2.5.0 and more latest Ruby versionsMerge pull request #242 from stomar/ftp-publishingAdd missing information on FTP publishing to READMEMerge pull request #240 from aycabta/jruby-9.1.15.0Use JRuby 9.1.15.0 on .travis.ymlMerge pull request #239 from donv/patch-1[skip-ci] Fixed typobump release dateRelease Notes
From the Github release:
TZInfo v1.2.5 on RubyGems.org
Commits
See the full diff on Github. The new version differs by 10 commits:
Preparing v1.2.5.Update copyright years.Use Ruby 1.8 compatible syntax.Document that utc_offset and std_offset may be inaccurate with zoneinfo.Allow zoneinfo offset derivation to pick a negative std_offset.Don't store lazily-evaluated results if the object has been frozen.Remove unnecessary calls to Country.get in tests.Restore $SAFE after running a safe mode test (if possible).Disable Minitest's use of external diff tools during safe mode tests.Add Ruby 2.5.0 and update to the latest Ruby, JRuby and Rbx releases.Depfu will automatically keep this PR conflict-free, as long as you don't add any commits to this branch yourself. You can also trigger a rebase manually by commenting with
@depfu rebase.