Update dependency rails to v5

[dev-mend-for-github-com[bot]]

This PR contains the following updates:

Package	Update	Change
rails (source, changelog)	major	'3.0.7' -> '5.2.4.3'

By merging this PR, the issue #8 will be automatically resolved and closed:

Severity	CVSS Score	CVE
High	7.5	CVE-2016-0751
High	7.5	CVE-2016-0752
High	7.3	CVE-2016-2098
Medium	6.5	CVE-2010-3299
Medium	6.5	CVE-2020-8167
Low	3.7	CVE-2011-2197
Low	3.7	CVE-2011-2932
Low	3.7	CVE-2012-1099

---

Release Notes

rails/rails (rails)

### [`v5.2.4.3`](https://redirect.github.com/rails/rails/releases/tag/v5.2.4.3): 5.2.4.3 [Compare Source](https://redirect.github.com/rails/rails/compare/v5.2.4.2...v5.2.4.3) #### Active Support - \[CVE-2020-8165] Deprecate Marshal.load on raw cache read in RedisCacheStore - \[CVE-2020-8165] Avoid Marshal.load on raw cache value in MemCacheStore #### Active Model - No changes. #### Active Record - No changes. #### Action View - \[CVE-2020-8167] Check that request is same-origin prior to including CSRF token in XHRs #### Action Pack - \[CVE-2020-8166] HMAC raw CSRF token before masking it, so it cannot be used to reconstruct a per-form token - \[CVE-2020-8164] Return self when calling #each, #each_pair, and #each_value instead of the raw [@​parameters](https://redirect.github.com/parameters) hash #### Active Job - No changes. #### Action Mailer - No changes. #### Action Cable - No changes. #### Active Storage - \[CVE-2020-8162] Include Content-Length in signature for ActiveStorage direct upload #### Railties - No changes. ### [`v5.2.4.2`](https://redirect.github.com/rails/rails/releases/tag/v5.2.4.2): 5.2.4.2 [Compare Source](https://redirect.github.com/rails/rails/compare/v5.2.4.1...v5.2.4.2) #### Active Support - No changes. #### Active Model - No changes. #### Active Record - No changes. #### Action View - Fix possible XSS vector in `escape_javascript` helper CVE-2020-5267 *Aaron Patterson* #### Action Pack - No changes. #### Active Job - No changes. #### Action Mailer - No changes. #### Action Cable - No changes. #### Active Storage - No changes. #### Railties - No changes. ### [`v5.2.4.1`](https://redirect.github.com/rails/rails/releases/tag/v5.2.4.1): 5.2.4.1 [Compare Source](https://redirect.github.com/rails/rails/compare/v5.2.4...v5.2.4.1) #### Active Support - No changes. #### Active Model - No changes. #### Active Record - No changes. #### Action View - No changes. #### Action Pack - Fix possible information leak / session hijacking vulnerability. The `ActionDispatch::Session::MemcacheStore` is still vulnerable given it requires the gem dalli to be updated as well. CVE-2019-16782. #### Active Job - No changes. #### Action Mailer - No changes. #### Action Cable - No changes. #### Active Storage - No changes. #### Railties - No changes. ### [`v5.2.4`](https://redirect.github.com/rails/rails/releases/tag/v5.2.4): 5.2.4 [Compare Source](https://redirect.github.com/rails/rails/compare/v5.2.3...v5.2.4) #### Active Support - Make ActiveSupport::Logger Fiber-safe. Fixes [#​36752](https://redirect.github.com/rails/rails/issues/36752). Use `Fiber.current.__id__` in `ActiveSupport::Logger#local_level=` in order to make log level local to Ruby Fibers in addition to Threads. Example: logger = ActiveSupport::Logger.new(STDOUT) logger.level = 1 p "Main is debug? #{logger.debug?}" Fiber.new { logger.local_level = 0 p "Thread is debug? #{logger.debug?}" }.resume p "Main is debug? #{logger.debug?}" Before: Main is debug? false Thread is debug? true Main is debug? true After: Main is debug? false Thread is debug? true Main is debug? false *Alexander Varnin* #### Active Model - Type cast falsy boolean symbols on boolean attribute as false. Fixes [#​35676](https://redirect.github.com/rails/rails/issues/35676). *Ryuta Kamizono* #### Active Record - Fix circular `autosave: true` causes invalid records to be saved. Prior to the fix, when there was a circular series of `autosave: true` associations, the callback for a `has_many` association was run while another instance of the same callback on the same association hadn't finished running. When control returned to the first instance of the callback, the instance variable had changed, and subsequent associated records weren't saved correctly. Specifically, the ID field for the `belongs_to` corresponding to the `has_many` was `nil`. Fixes [#​28080](https://redirect.github.com/rails/rails/issues/28080). *Larry Reid* - PostgreSQL: Fix GROUP BY with ORDER BY virtual count attribute. Fixes [#​36022](https://redirect.github.com/rails/rails/issues/36022). *Ryuta Kamizono* - Fix sqlite3 collation parsing when using decimal columns. *Martin R. Schuster* - Make ActiveRecord `ConnectionPool.connections` method thread-safe. Fixes [#​36465](https://redirect.github.com/rails/rails/issues/36465). *Jeff Doering* - Assign all attributes before calling `build` to ensure the child record is visible in `before_add` and `after_add` callbacks for `has_many :through` associations. Fixes [#​33249](https://redirect.github.com/rails/rails/issues/33249). *Ryan H. Kerr* #### Action View - Allow programmatic click events to trigger Rails UJS click handlers. Programmatic click events (eg. ones generated by `Rails.fire(link, "click")`) don't specify a button. These events were being incorrectly stopped by code meant to ignore scroll wheel and right clicks introduced in [#​34573](https://redirect.github.com/rails/rails/issues/34573). *Sudara Williams* #### Action Pack - No changes. #### Active Job - No changes. #### Action Mailer - No changes. #### Action Cable - No changes. #### Active Storage - No changes. #### Railties - Use original `bundler` environment variables during the process of generating a new rails project. *Marco Costa* - Allow loading seeds without ActiveJob. Fixes [#​35782](https://redirect.github.com/rails/rails/issues/35782) *Jeremy Weathers* - Only force `:async` ActiveJob adapter to `:inline` during seeding. *BatedUrGonnaDie* ### [`v5.2.3`](https://redirect.github.com/rails/rails/releases/tag/v5.2.3): 5.2.3 [Compare Source](https://redirect.github.com/rails/rails/compare/v5.2.2.1...v5.2.3) #### Active Support - Add `ActiveSupport::HashWithIndifferentAccess#assoc`. `assoc` can now be called with either a string or a symbol. *Stefan Schüßler* - Fix `String#safe_constantize` throwing a `LoadError` for incorrectly cased constant references. *Keenan Brock* - Allow Range#=== and Range#cover? on Range `Range#cover?` can now accept a range argument like `Range#include?` and `Range#===`. `Range#===` works correctly on Ruby 2.6. `Range#include?` is moved into a new file, with these two methods. *utilum* - If the same block is `included` multiple times for a Concern, an exception is no longer raised. *Mark J. Titorenko*, *Vlad Bokov* #### Active Model - Fix date value when casting a multiparameter date hash to not convert from Gregorian date to Julian date. Before: Day.new({"day(1i)"=>"1", "day(2i)"=>"1", "day(3i)"=>"1"}) => # After: Day.new({"day(1i)"=>"1", "day(2i)"=>"1", "day(3i)"=>"1"}) => # Fixes [#​28521](https://redirect.github.com/rails/rails/issues/28521). *Sayan Chakraborty* - Fix numericality equality validation of `BigDecimal` and `Float` by casting to `BigDecimal` on both ends of the validation. *Gannon McGibbon* #### Active Record - Fix different `count` calculation when using `size` with manual `select` with DISTINCT. Fixes [#​35214](https://redirect.github.com/rails/rails/issues/35214). *Juani Villarejo* - Fix prepared statements caching to be enabled even when query caching is enabled. *Ryuta Kamizono* - Don't allow `where` with invalid value matches to nil values. Fixes [#​33624](https://redirect.github.com/rails/rails/issues/33624). *Ryuta Kamizono* - Restore an ability that class level `update` without giving ids. Fixes [#​34743](https://redirect.github.com/rails/rails/issues/34743). *Ryuta Kamizono* - Fix join table column quoting with SQLite. *Gannon McGibbon* - Ensure that `delete_all` on collection proxy returns affected count. *Ryuta Kamizono* - Reset scope after delete on collection association to clear stale offsets of removed records. *Gannon McGibbon* #### Action View - Prevent non-primary mouse keys from triggering Rails UJS click handlers. Firefox fires click events even if the click was triggered by non-primary mouse keys such as right- or scroll-wheel-clicks. For example, right-clicking a link such as the one described below (with an underlying ajax request registered on click) should not cause that request to occur. <%= link_to 'Remote', remote_path, class: 'remote', remote: true, data: { type: :json } %> Fixes [#​34541](https://redirect.github.com/rails/rails/issues/34541) *Wolfgang Hobmaier* #### Action Pack - Allow using combine the Cache Control `public` and `no-cache` headers. Before this change, even if `public` was specified for Cache Control header, it was excluded when `no-cache` was included. This fixed to keep `public` header as is. Fixes [#​34780](https://redirect.github.com/rails/rails/issues/34780). *Yuji Yaginuma* - Allow `nil` params for `ActionController::TestCase`. *Ryo Nakamura* #### Active Job - No changes. #### Action Mailer - No changes. #### Action Cable - No changes. #### Active Storage - No changes. #### Railties - Seed database with inline ActiveJob job adapter. *Gannon McGibbon* - Fix boolean interaction in scaffold system tests. *Gannon McGibbon* ### [`v5.2.2.1`](https://redirect.github.com/rails/rails/compare/v5.2.2...v5.2.2.1) [Compare Source](https://redirect.github.com/rails/rails/compare/v5.2.2...v5.2.2.1) ### [`v5.2.2`](https://redirect.github.com/rails/rails/releases/tag/v5.2.2): 5.2.2 [Compare Source](https://redirect.github.com/rails/rails/compare/v5.2.1.1...v5.2.2) #### Active Support - Fix bug where `#to_options` for `ActiveSupport::HashWithIndifferentAccess` would not act as alias for `#symbolize_keys`. *Nick Weiland* - Improve the logic that detects non-autoloaded constants. *Jan Habermann*, *Xavier Noria* - Fix bug where `URI.unescape` would fail with mixed Unicode/escaped character input: URI.unescape("\xe3\x83\x90") # => "バ" URI.unescape("%E3%83%90") # => "バ" URI.unescape("\xe3\x83\x90%E3%83%90") # => Encoding::CompatibilityError *Ashe Connor*, *Aaron Patterson* #### Active Model - Fix numericality validator to still use value before type cast except Active Record. Fixes [#​33651](https://redirect.github.com/rails/rails/issues/33651), [#​33686](https://redirect.github.com/rails/rails/issues/33686). *Ryuta Kamizono* #### Active Record - Do not ignore the scoping with query methods in the scope block. *Ryuta Kamizono* - Allow aliased attributes to be used in `#update_columns` and `#update`. *Gannon McGibbon* - Allow spaces in postgres table names. Fixes issue where "user post" is misinterpreted as ""user"."post"" when quoting table names with the postgres adapter. *Gannon McGibbon* - Cached columns_hash fields should be excluded from ResultSet#column_types PR [#​34528](https://redirect.github.com/rails/rails/issues/34528) addresses the inconsistent behaviour when attribute is defined for an ignored column. The following test was passing for SQLite and MySQL, but failed for PostgreSQL: ```ruby class DeveloperName < ActiveRecord::Type::String def deserialize(value) "Developer: #{value}" end end class AttributedDeveloper < ActiveRecord::Base self.table_name = "developers" attribute :name, DeveloperName.new self.ignored_columns += ["name"] end developer = AttributedDeveloper.create developer.update_column :name, "name" loaded_developer = AttributedDeveloper.where(id: developer.id).select("*").first puts loaded_developer.name # should be "Developer: name" but it's just "name" ``` *Dmitry Tsepelev* - Values of enum are frozen, raising an error when attempting to modify them. *Emmanuel Byrd* - `update_columns` now correctly raises `ActiveModel::MissingAttributeError` if the attribute does not exist. *Sean Griffin* - Do not use prepared statement in queries that have a large number of binds. *Ryuta Kamizono* - Fix query cache to load before first request. *Eileen M. Uchitelle* - Fix collection cache key with limit and custom select to avoid ambiguous timestamp column error. Fixes [#​33056](https://redirect.github.com/rails/rails/issues/33056). *Federico Martinez* - Fix duplicated record creation when using nested attributes with `create_with`. *Darwin Wu* - Fix regression setting children record in parent `before_save` callback. *Guo Xiang Tan* - Prevent leaking of user's DB credentials on `rails db:create` failure. *bogdanvlviv* - Clear mutation tracker before continuing the around callbacks. *Yuya Tanaka* - Prevent deadlocks when waiting for connection from pool. *Brent Wheeldon* - Avoid extra scoping when using `Relation#update` that was causing this method to change the current scope. *Ryuta Kamizono* - Fix numericality validator not to be affected by custom getter. *Ryuta Kamizono* - Fix bulk change table ignores comment option on PostgreSQL. *Yoshiyuki Kinjo* #### Action View - No changes. #### Action Pack - Reset Capybara sessions if failed system test screenshot raising an exception. Reset Capybara sessions if `take_failed_screenshot` raise exception in system test `after_teardown`. *Maxim Perepelitsa* - Use request object for context if there's no controller There is no controller instance when using a redirect route or a mounted rack application so pass the request object as the context when resolving dynamic CSP sources in this scenario. Fixes [#​34200](https://redirect.github.com/rails/rails/issues/34200). *Andrew White* - Apply mapping to symbols returned from dynamic CSP sources Previously if a dynamic source returned a symbol such as :self it would be converted to a string implicity, e.g: policy.default_src -> { :self } would generate the header: Content-Security-Policy: default-src self and now it generates: Content-Security-Policy: default-src 'self' *Andrew White* - Fix `rails routes -c` for controller name consists of multiple word. *Yoshiyuki Kinjo* - Call the `#redirect_to` block in controller context. *Steven Peckins* #### Active Job - Make sure `assert_enqueued_with()` & `assert_performed_with()` work reliably with hash arguments. *Sharang Dashputre* - Restore `ActionController::Parameters` support to `ActiveJob::Arguments.serialize`. *Bernie Chiu* - Restore `HashWithIndifferentAccess` support to `ActiveJob::Arguments.deserialize`. *Gannon McGibbon* - Include deserialized arguments in job instances returned from `assert_enqueued_with` and `assert_performed_with` *Alan Wu* - Increment execution count before deserialize arguments. Currently, the execution count increments after deserializes arguments. Therefore, if an error occurs with deserialize, it retries indefinitely. *Yuji Yaginuma* #### Action Mailer - No changes. #### Action Cable - No changes. #### Active Storage - Support multiple submit buttons in Active Storage forms. *Chrıs Seelus* - Fix `ArgumentError` when uploading to amazon s3 *Hiroki Sanpei* - Add a foreign-key constraint to the `active_storage_attachments` table for blobs. *George Claghorn* - Discard `ActiveStorage::PurgeJobs` for missing blobs. *George Claghorn* - Fix uploading Tempfiles to Azure Storage. *George Claghorn* #### Railties - Disable content security policy for mailer previews. *Dylan Reile* - Log the remote IP address of clients behind a proxy. *Atul Bhosale* ### [`v5.2.1.1`](https://redirect.github.com/rails/rails/compare/v5.2.1...v5.2.1.1) [Compare Source](https://redirect.github.com/rails/rails/compare/v5.2.1...v5.2.1.1) ### [`v5.2.1`](https://redirect.github.com/rails/rails/compare/v5.2.0...v5.2.1) [Compare Source](https://redirect.github.com/rails/rails/compare/v5.2.0...v5.2.1) ### [`v5.2.0`](https://redirect.github.com/rails/rails/compare/v5.1.7...v5.2.0) [Compare Source](https://redirect.github.com/rails/rails/compare/v5.1.7...v5.2.0) ### [`v5.1.7`](https://redirect.github.com/rails/rails/releases/tag/v5.1.7): 5.1.7 [Compare Source](https://redirect.github.com/rails/rails/compare/v5.1.6.2...v5.1.7) #### Active Support - No changes. #### Active Model - No changes. #### Active Record - Fix `touch` option to behave consistently with `Persistence#touch` method. *Ryuta Kamizono* - Back port Rails 5.2 `reverse_order` Arel SQL literal fix. *Matt Jones*, *Brooke Kuhlmann* - `becomes` should clear the mutation tracker which is created in `after_initialize`. Fixes [#​32867](https://redirect.github.com/rails/rails/issues/32867). *Ryuta Kamizono* #### Action View - Fix issue with `button_to`'s `to_form_params` `button_to` was throwing exception when invoked with `params` hash that contains symbol and string keys. The reason for the exception was that `to_form_params` was comparing the given symbol and string keys. The issue is fixed by turning all keys to strings inside `to_form_params` before comparing them. *Georgi Georgiev* #### Action Pack - No changes. #### Active Job - No changes. #### Action Mailer - No changes. #### Action Cable - No changes. #### Railties - No changes. ### [`v5.1.6.2`](https://redirect.github.com/rails/rails/compare/v5.1.6.1...v5.1.6.2) [Compare Source](https://redirect.github.com/rails/rails/compare/v5.1.6.1...v5.1.6.2) ### [`v5.1.6.1`](https://redirect.github.com/rails/rails/compare/v5.1.6...v5.1.6.1) [Compare Source](https://redirect.github.com/rails/rails/compare/v5.1.6...v5.1.6.1) ### [`v5.1.6`](https://redirect.github.com/rails/rails/compare/v5.1.5...v5.1.6) [Compare Source](https://redirect.github.com/rails/rails/compare/v5.1.5...v5.1.6) ### [`v5.1.5`](https://redirect.github.com/rails/rails/compare/v5.1.4...v5.1.5) [Compare Source](https://redirect.github.com/rails/rails/compare/v5.1.4...v5.1.5) ### [`v5.1.4`](https://redirect.github.com/rails/rails/compare/v5.1.3...v5.1.4) [Compare Source](https://redirect.github.com/rails/rails/compare/v5.1.3...v5.1.4) ### [`v5.1.3`](https://redirect.github.com/rails/rails/compare/v5.1.2...v5.1.3) [Compare Source](https://redirect.github.com/rails/rails/compare/v5.1.2...v5.1.3) ### [`v5.1.2`](https://redirect.github.com/rails/rails/compare/v5.1.1...v5.1.2) [Compare Source](https://redirect.github.com/rails/rails/compare/v5.1.1...v5.1.2) ### [`v5.1.1`](https://redirect.github.com/rails/rails/compare/v5.1.0...v5.1.1) [Compare Source](https://redirect.github.com/rails/rails/compare/v5.1.0...v5.1.1) ### [`v5.1.0`](https://redirect.github.com/rails/rails/compare/v5.0.7.2...v5.1.0) [Compare Source](https://redirect.github.com/rails/rails/compare/v5.0.7.2...v5.1.0) ### [`v5.0.7.2`](https://redirect.github.com/rails/rails/compare/v5.0.7.1...v5.0.7.2) [Compare Source](https://redirect.github.com/rails/rails/compare/v5.0.7.1...v5.0.7.2) ### [`v5.0.7.1`](https://redirect.github.com/rails/rails/compare/v5.0.7...v5.0.7.1) [Compare Source](https://redirect.github.com/rails/rails/compare/v5.0.7...v5.0.7.1) ### [`v5.0.7`](https://redirect.github.com/rails/rails/compare/v5.0.6...v5.0.7) [Compare Source](https://redirect.github.com/rails/rails/compare/v5.0.6...v5.0.7) ### [`v5.0.6`](https://redirect.github.com/rails/rails/compare/v5.0.5...v5.0.6) [Compare Source](https://redirect.github.com/rails/rails/compare/v5.0.5...v5.0.6) ### [`v5.0.5`](https://redirect.github.com/rails/rails/compare/v5.0.4...v5.0.5) [Compare Source](https://redirect.github.com/rails/rails/compare/v5.0.4...v5.0.5) ### [`v5.0.4`](https://redirect.github.com/rails/rails/compare/v5.0.3...v5.0.4) [Compare Source](https://redirect.github.com/rails/rails/compare/v5.0.3...v5.0.4) ### [`v5.0.3`](https://redirect.github.com/rails/rails/compare/v5.0.2...v5.0.3) [Compare Source](https://redirect.github.com/rails/rails/compare/v5.0.2...v5.0.3) ### [`v5.0.2`](https://redirect.github.com/rails/rails/compare/v5.0.1...v5.0.2) [Compare Source](https://redirect.github.com/rails/rails/compare/v5.0.1...v5.0.2) ### [`v5.0.1`](https://redirect.github.com/rails/rails/compare/v5.0.0.1...v5.0.1) [Compare Source](https://redirect.github.com/rails/rails/compare/v5.0.0.1...v5.0.1) ### [`v5.0.0.1`](https://redirect.github.com/rails/rails/compare/v5.0.0...v5.0.0.1) [Compare Source](https://redirect.github.com/rails/rails/compare/v5.0.0...v5.0.0.1) ### [`v5.0.0`](https://redirect.github.com/rails/rails/compare/v4.2.11.3...v5.0.0) [Compare Source](https://redirect.github.com/rails/rails/compare/v4.2.11.3...v5.0.0) ### [`v4.2.11.3`](https://redirect.github.com/rails/rails/releases/tag/v4.2.11.3): 4.2.11.3 [Compare Source](https://redirect.github.com/rails/rails/compare/v4.2.11.2...v4.2.11.3) #### Action Mailer - No changes. #### Action Pack - No changes. #### Action View - Backport a missing commit for \[CVE-2020-8163] #### Active Job - No changes. #### Active Model - No changes. #### Active Record - No changes. #### Active Support - No changes. #### Railties - No changes. ### [`v4.2.11.2`](https://redirect.github.com/rails/rails/releases/tag/v4.2.11.2): 4.2.11.2 [Compare Source](https://redirect.github.com/rails/rails/compare/v4.2.11.1...v4.2.11.2) #### Action Mailer - No changes. #### Action Pack - No changes. #### Action View - Restrict local variable names in templates \[CVE-2020-8163] #### Active Job - No changes. #### Active Model - No changes. #### Active Record - No changes. #### Active Support - No changes. #### Railties - No changes. ### [`v4.2.11.1`](https://redirect.github.com/rails/rails/compare/v4.2.11...v4.2.11.1) [Compare Source](https://redirect.github.com/rails/rails/compare/v4.2.11...v4.2.11.1) ### [`v4.2.11`](https://redirect.github.com/rails/rails/compare/v4.2.10...v4.2.11) [Compare Source](https://redirect.github.com/rails/rails/compare/v4.2.10...v4.2.11) ### [`v4.2.10`](https://redirect.github.com/rails/rails/compare/v4.2.9...v4.2.10) [Compare Source](https://redirect.github.com/rails/rails/compare/v4.2.9...v4.2.10) ### [`v4.2.9`](https://redirect.github.com/rails/rails/compare/v4.2.8...v4.2.9) [Compare Source](https://redirect.github.com/rails/rails/compare/v4.2.8...v4.2.9) ### [`v4.2.8`](https://redirect.github.com/rails/rails/compare/v4.2.7.1...v4.2.8) [Compare Source](https://redirect.github.com/rails/rails/compare/v4.2.7.1...v4.2.8) ### [`v4.2.7.1`](https://redirect.github.com/rails/rails/compare/v4.2.7...v4.2.7.1) [Compare Source](https://redirect.github.com/rails/rails/compare/v4.2.7...v4.2.7.1) ### [`v4.2.7`](https://redirect.github.com/rails/rails/compare/v4.2.6...v4.2.7) [Compare Source](https://redirect.github.com/rails/rails/compare/v4.2.6...v4.2.7) ### [`v4.2.6`](https://redirect.github.com/rails/rails/compare/v4.2.5.2...v4.2.6) [Compare Source](https://redirect.github.com/rails/rails/compare/v4.2.5.2...v4.2.6) ### [`v4.2.5.2`](https://redirect.github.com/rails/rails/compare/v4.2.5.1...v4.2.5.2) [Compare Source](https://redirect.github.com/rails/rails/compare/v4.2.5.1...v4.2.5.2) ### [`v4.2.5.1`](https://redirect.github.com/rails/rails/compare/v4.2.5...v4.2.5.1) [Compare Source](https://redirect.github.com/rails/rails/compare/v4.2.5...v4.2.5.1) ### [`v4.2.5`](https://redirect.github.com/rails/rails/compare/v4.2.4...v4.2.5) [Compare Source](https://redirect.github.com/rails/rails/compare/v4.2.4...v4.2.5) ### [`v4.2.4`](https://redirect.github.com/rails/rails/compare/v4.2.3...v4.2.4) [Compare Source](https://redirect.github.com/rails/rails/compare/v4.2.3...v4.2.4) ### [`v4.2.3`](https://redirect.github.com/rails/rails/compare/v4.2.2...v4.2.3) [Compare Source](https://redirect.github.com/rails/rails/compare/v4.2.2...v4.2.3) ### [`v4.2.2`](https://redirect.github.com/rails/rails/compare/v4.2.1...v4.2.2) [Compare Source](https://redirect.github.com/rails/rails/compare/v4.2.1...v4.2.2) ### [`v4.2.1`](https://redirect.github.com/rails/rails/compare/v4.2.0...v4.2.1) [Compare Source](https://redirect.github.com/rails/rails/compare/v4.2.0...v4.2.1) ### [`v4.2.0`](https://redirect.github.com/rails/rails/compare/v4.1.16...v4.2.0) [Compare Source](https://redirect.github.com/rails/rails/compare/v4.1.16...v4.2.0) ### [`v4.1.16`](https://redirect.github.com/rails/rails/compare/v4.1.15...v4.1.16) [Compare Source](https://redirect.github.com/rails/rails/compare/v4.1.15...v4.1.16) ### [`v4.1.15`](https://redirect.github.com/rails/rails/compare/v4.1.14.2...v4.1.15) [Compare Source](https://redirect.github.com/rails/rails/compare/v4.1.14.2...v4.1.15) ### [`v4.1.14.2`](https://redirect.github.com/rails/rails/compare/v4.1.14.1...v4.1.14.2) [Compare Source](https://redirect.github.com/rails/rails/compare/v4.1.14.1...v4.1.14.2) ### [`v4.1.14.1`](https://redirect.github.com/rails/rails/compare/v4.1.14...v4.1.14.1) [Compare Source](https://redirect.github.com/rails/rails/compare/v4.1.14...v4.1.14.1) ### [`v4.1.14`](https://redirect.github.com/rails/rails/compare/v4.1.13...v4.1.14) [Compare Source](https://redirect.github.com/rails/rails/compare/v4.1.13...v4.1.14) ### [`v4.1.13`](https://redirect.github.com/rails/rails/compare/v4.1.12...v4.1.13) [Compare Source](https://redirect.github.com/rails/rails/compare/v4.1.12...v4.1.13) ### [`v4.1.12`](https://redirect.github.com/rails/rails/compare/v4.1.11...v4.1.12) [Compare Source](https://redirect.github.com/rails/rails/compare/v4.1.11...v4.1.12) ### [`v4.1.11`](https://redirect.github.com/rails/rails/compare/v4.1.10...v4.1.11) [Compare Source](https://redirect.github.com/rails/rails/compare/v4.1.10...v4.1.11) ### [`v4.1.10`](https://redirect.github.com/rails/rails/compare/v4.1.9...v4.1.10) [Compare Source](https://redirect.github.com/rails/rails/compare/v4.1.9...v4.1.10) ### [`v4.1.9`](https://redirect.github.com/rails/rails/compare/v4.1.8...v4.1.9) [Compare Source](https://redirect.github.com/rails/rails/compare/v4.1.8...v4.1.9) ### [`v4.1.8`](https://redirect.github.com/rails/rails/compare/v4.1.7.1...v4.1.8) [Compare Source](https://redirect.github.com/rails/rails/compare/v4.1.7.1...v4.1.8) ### [`v4.1.7.1`](https://redirect.github.com/rails/rails/compare/v4.1.7...v4.1.7.1) [Compare Source](https://redirect.github.com/rails/rails/compare/v4.1.7...v4.1.7.1) ### [`v4.1.7`](https://redirect.github.com/rails/rails/compare/v4.1.6...v4.1.7) [Compare Source](https://redirect.github.com/rails/rails/compare/v4.1.6...v4.1.7) ### [`v4.1.6`](https://redirect.github.com/rails/rails/compare/v4.1.5...v4.1.6) [Compare Source](https://redirect.github.com/rails/rails/compare/v4.1.5...v4.1.6) ### [`v4.1.5`](https://redirect.github.com/rails/rails/compare/v4.1.4...v4.1.5) [Compare Source](https://redirect.github.com/rails/rails/compare/v4.1.4...v4.1.5) ### [`v4.1.4`](https://redirect.github.com/rails/rails/compare/v4.1.3...v4.1.4) [Compare Source](https://redirect.github.com/rails/rails/compare/v4.1.3...v4.1.4) ### [`v4.1.3`](https://redirect.github.com/rails/rails/compare/v4.1.2...v4.1.3) [Compare Source](https://redirect.github.com/rails/rails/compare/v4.1.2...v4.1.3) ### [`v4.1.2`](https://redirect.github.com/rails/rails/compare/v4.1.1...v4.1.2) [Compare Source](https://redirect.github.com/rails/rails/compare/v4.1.1...v4.1.2) ### [`v4.1.1`](https://redirect.github.com/rails/rails/compare/v4.1.0...v4.1.1) [Compare Source](https://redirect.github.com/rails/rails/compare/v4.1.0...v4.1.1) ### [`v4.1.0`](https://redirect.github.com/rails/rails/compare/v4.0.13...v4.1.0) [Compare Source](https://redirect.github.com/rails/rails/compare/v4.0.13...v4.1.0) ### [`v4.0.13`](https://redirect.github.com/rails/rails/compare/v4.0.12...v4.0.13) [Compare Source](https://redirect.github.com/rails/rails/compare/v4.0.12...v4.0.13) ### [`v4.0.12`](https://redirect.github.com/rails/rails/compare/v4.0.11.1...v4.0.12) [Compare Source](https://redirect.github.com/rails/rails/compare/v4.0.11.1...v4.0.12) ### [`v4.0.11.1`](https://redirect.github.com/rails/rails/compare/v4.0.11...v4.0.11.1) [Compare Source](https://redirect.github.com/rails/rails/compare/v4.0.11...v4.0.11.1) ### [`v4.0.11`](https://redirect.github.com/rails/rails/compare/v4.0.10...v4.0.11) [Compare Source](https://redirect.github.com/rails/rails/compare/v4.0.10...v4.0.11) ### [`v4.0.10`](https://redirect.github.com/rails/rails/compare/v4.0.9...v4.0.10) [Compare Source](https://redirect.github.com/rails/rails/compare/v4.0.9...v4.0.10) ### [`v4.0.9`](https://redirect.github.com/rails/rails/compare/v4.0.8...v4.0.9) [Compare Source](https://redirect.github.com/rails/rails/compare/v4.0.8...v4.0.9) ### [`v4.0.8`](https://redirect.github.com/rails/rails/compare/v4.0.7...v4.0.8) [Compare Source](https://redirect.github.com/rails/rails/compare/v4.0.7...v4.0.8) ### [`v4.0.7`](https://redirect.github.com/rails/rails/compare/v4.0.6...v4.0.7) [Compare Source](https://redirect.github.com/rails/rails/compare/v4.0.6...v4.0.7) ### [`v4.0.6`](https://redirect.github.com/rails/rails/compare/v4.0.5...v4.0.6) [Compare Source](https://redirect.github.com/rails/rails/compare/v4.0.5...v4.0.6) ### [`v4.0.5`](https://redirect.github.com/rails/rails/compare/v4.0.4...v4.0.5) [Compare Source](https://redirect.github.com/rails/rails/compare/v4.0.4...v4.0.5) ### [`v4.0.4`](https://redirect.github.com/rails/rails/compare/v4.0.3...v4.0.4) [Compare Source](https://redirect.github.com/rails/rails/compare/v4.0.3...v4.0.4) ### [`v4.0.3`](https://redirect.github.com/rails/rails/compare/v4.0.2...v4.0.3) [Compare Source](https://redirect.github.com/rails/rails/compare/v4.0.2...v4.0.3) ### [`v4.0.2`](https://redirect.github.com/rails/rails/compare/v4.0.1...v4.0.2) [Compare Source](https://redirect.github.com/rails/rails/compare/v4.0.1...v4.0.2) ### [`v4.0.1`](https://redirect.github.com/rails/rails/compare/v4.0.0...v4.0.1) [Compare Source](https://redirect.github.com/rails/rails/compare/v4.0.0...v4.0.1) ### [`v4.0.0`](https://redirect.github.com/rails/rails/compare/v3.2.22.5...v4.0.0) [Compare Source](https://redirect.github.com/rails/rails/compare/v3.2.22.5...v4.0.0) ### [`v3.2.22.5`](https://redirect.github.com/rails/rails/compare/v3.2.22.4...v3.2.22.5) [Compare Source](https://redirect.github.com/rails/rails/compare/v3.2.22.4...v3.2.22.5) ### [`v3.2.22.4`](https://redirect.github.com/rails/rails/compare/v3.2.22.3...v3.2.22.4) [Compare Source](https://redirect.github.com/rails/rails/compare/v3.2.22.3...v3.2.22.4) ### [`v3.2.22.3`](https://redirect.github.com/rails/rails/compare/v3.2.22.2...v3.2.22.3) [Compare Source](https://redirect.github.com/rails/rails/compare/v3.2.22.2...v3.2.22.3) ### [`v3.2.22.2`](https://redirect.github.com/rails/rails/compare/v3.2.22.1...v3.2.22.2) [Compare Source](https://redirect.github.com/rails/rails/compare/v3.2.22.1...v3.2.22.2) ### [`v3.2.22.1`](https://redirect.github.com/rails/rails/compare/v3.2.22...v3.2.22.1) [Compare Source](https://redirect.github.com/rails/rails/compare/v3.2.22...v3.2.22.1) ### [`v3.2.22`](https://redirect.github.com/rails/rails/compare/v3.2.21...v3.2.22) [Compare Source](https://redirect.github.com/rails/rails/compare/v3.2.21...v3.2.22) ### [`v3.2.21`](https://redirect.github.com/rails/rails/compare/v3.2.20...v3.2.21) [Compare Source](https://redirect.github.com/rails/rails/compare/v3.2.20...v3.2.21) ### [`v3.2.20`](https://redirect.github.com/rails/rails/compare/v3.2.19...v3.2.20) [Compare Source](https://redirect.github.com/rails/rails/compare/v3.2.19...v3.2.20) ### [`v3.2.19`](https://redirect.github.com/rails/rails/compare/v3.2.18...v3.2.19) [Compare Source](https://redirect.github.com/rails/rails/compare/v3.2.18...v3.2.19) ### [`v3.2.18`](https://redirect.github.com/rails/rails/compare/v3.2.17...v3.2.18) [Compare Source](https://redirect.github.com/rails/rails/compare/v3.2.17...v3.2.18) ### [`v3.2.17`](https://redirect.github.com/rails/rails/compare/v3.2.16...v3.2.17) [Compare Source](https://redirect.github.com/rails/rails/compare/v3.2.16...v3.2.17) ### [`v3.2.16`](https://redirect.github.com/rails/rails/compare/v3.2.15...v3.2.16) [Compare Source](https://redirect.github.com/rails/rails/compare/v3.2.15...v3.2.16) ### [`v3.2.15`](https://redirect.github.com/rails/rails/compare/v3.2.14...v3.2.15) [Compare Source](https://redirect.github.com/rails/rails/compare/v3.2.14...v3.2.15) ### [`v3.2.14`](https://redirect.github.com/rails/rails/compare/v3.2.13...v3.2.14) [Compare Source](https://redirect.github.com/rails/rails/compare/v3.2.13...v3.2.14) ### [`v3.2.13`](https://redirect.github.com/rails/rails/compare/v3.2.12...v3.2.13) [Compare Source](https://redirect.github.com/rails/rails/compare/v3.2.12...v3.2.13) ### [`v3.2.12`](https://redirect.github.com/rails/rails/compare/v3.2.11...v3.2.12) [Compare Source](https://redirect.github.com/rails/rails/compare/v3.2.11...v3.2.12) ### [`v3.2.11`](https://redirect.github.com/rails/rails/compare/v3.2.10...v3.2.11) [Compare Source](https://redirect.github.com/rails/rails/compare/v3.2.10...v3.2.11) ### [`v3.2.10`](https://redirect.github.com/rails/rails/compare/v3.2.9...v3.2.10) [Compare Source](https://redirect.github.com/rails/rails/compare/v3.2.9...v3.2.10) ### [`v3.2.9`](https://redirect.github.com/rails/rails/compare/v3.2.8...v3.2.9) [Compare Source](https://redirect.github.com/rails/rails/compare/v3.2.8...v3.2.9) ### [`v3.2.8`](https://redirect.github.com/rails/rails/compare/v3.2.7...v3.2.8) [Compare Source](https://redirect.github.com/rails/rails/compare/v3.2.7...v3.2.8) ### [`v3.2.7`](https://redirect.github.com/rails/rails/compare/v3.2.6...v3.2.7) [Compare Source](https://redirect.github.com/rails/rails/compare/v3.2.6...v3.2.7) ### [`v3.2.6`](https://redirect.github.com/rails/rails/compare/v3.2.5...v3.2.6) [Compare Source](https://redirect.github.com/rails/rails/compare/v3.2.5...v3.2.6) ### [`v3.2.5`](https://redirect.github.com/rails/rails/compare/v3.2.4...v3.2.5) [Compare Source](https://redirect.github.com/rails/rails/compare/v3.2.4...v3.2.5) ### [`v3.2.4`](https://redirect.github.com/rails/rails/compare/v3.2.3...v3.2.4) [Compare Source](https://redirect.github.com/rails/rails/compare/v3.2.3...v3.2.4) ### [`v3.2.3`](https://redirect.github.com/rails/rails/compare/v3.2.2...v3.2.3) [Compare Source](https://redirect.github.com/rails/rails/compare/v3.2.2...v3.2.3) ### [`v3.2.2`](https://redirect.github.com/rails/rails/compare/v3.2.1...v3.2.2) [Compare Source](https://redirect.github.com/rails/rails/compare/v3.2.1...v3.2.2) ### [`v3.2.1`](https://redirect.github.com/rails/rails/compare/v3.2.0...v3.2.1) [Compare Source](https://redirect.github.com/rails/rails/compare/v3.2.0...v3.2.1) ### [`v3.2.0`](https://redirect.github.com/rails/rails/compare/v3.1.12...v3.2.0) [Compare Source](https://redirect.github.com/rails/rails/compare/v3.1.12...v3.2.0) ### [`v3.1.12`](https://redirect.github.com/rails/rails/compare/v3.1.11...v3.1.12) [Compare Source](https://redirect.github.com/rails/rails/compare/v3.1.11...v3.1.12) ### [`v3.1.11`](https://redirect.github.com/rails/rails/compare/v3.1.10...v3.1.11) [Compare Source](https://redirect.github.com/rails/rails/compare/v3.1.10...v3.1.11) ### [`v3.1.10`](https://redirect.github.com/rails/rails/compare/v3.1.9...v3.1.10) [Compare Source](https://redirect.github.com/rails/rails/compare/v3.1.9...v3.1.10) ### [`v3.1.9`](https://redirect.github.com/rails/rails/compare/v3.1.8...v3.1.9) [Compare Source](https://redirect.github.com/rails/rails/compare/v3.1.8...v3.1.9) ### [`v3.1.8`](https://redirect.github.com/rails/rails/compare/v3.1.7...v3.1.8) [Compare Source](https://redirect.github.com/rails/rails/compare/v3.1.7...v3.1.8) ### [`v3.1.7`](https://redirect.github.com/rails/rails/compare/v3.1.6...v3.1.7) [Compare Source](https://redirect.github.com/rails/rails/compare/v3.1.6...v3.1.7) ### [`v3.1.6`](https://redirect.github.com/rails/rails/compare/v3.1.5...v3.1.6) [Compare Source](https://redirect.github.com/rails/rails/compare/v3.1.5...v3.1.6) ### [`v3.1.5`](https://redirect.github.com/rails/rails/compare/v3.1.4...v3.1.5) [Compare Source](https://redirect.github.com/rails/rails/compare/v3.1.4...v3.1.5) ### [`v3.1.4`](https://redirect.github.com/rails/rails/compare/v3.1.3...v3.1.4) [Compare Source](https://redirect.github.com/rails/rails/compare/v3.1.3...v3.1.4) ### [`v3.1.3`](https://redirect.github.com/rails/rails/compare/v3.1.2...v3.1.3) [Compare Source](https://redirect.github.com/rails/rails/compare/v3.1.2...v3.1.3) ### [`v3.1.2`](https://redirect.github.com/rails/rails/compare/v3.1.1...v3.1.2) [Compare Source](https://redirect.github.com/rails/rails/compare/v3.1.1...v3.1.2) ### [`v3.1.1`](https://redirect.github.com/rails/rails/compare/v3.1.0...v3.1.1) [Compare Source](https://redirect.github.com/rails/rails/compare/v3.1.0...v3.1.1) ### [`v3.1.0`](https://redirect.github.com/rails/rails/compare/v3.0.20...v3.1.0) [Compare Source](https://redirect.github.com/rails/rails/compare/v3.0.20...v3.1.0) ### [`v3.0.20`](https://redirect.github.com/rails/rails/compare/v3.0.19...v3.0.20) [Compare Source](https://redirect.github.com/rails/rails/compare/v3.0.19...v3.0.20) ### [`v3.0.19`](https://redirect.github.com/rails/rails/compare/v3.0.18...v3.0.19) [Compare Source](https://redirect.github.com/rails/rails/compare/v3.0.18...v3.0.19) ### [`v3.0.18`](https://redirect.github.com/rails/rails/compare/v3.0.17...v3.0.18) [Compare Source](https://redirect.github.com/rails/rails/compare/v3.0.17...v3.0.18) ### [`v3.0.17`](https://redirect.github.com/rails/rails/compare/v3.0.16...v3.0.17) [Compare Source](https://redirect.github.com/rails/rails/compare/v3.0.16...v3.0.17) ### [`v3.0.16`](https://redirect.github.com/rails/rails/compare/v3.0.15...v3.0.16) [Compare Source](https://redirect.github.com/rails/rails/compare/v3.0.15...v3.0.16) ### [`v3.0.15`](https://redirect.github.com/rails/rails/compare/v3.0.14...v3.0.15) [Compare Source](https://redirect.github.com/rails/rails/compare/v3.0.14...v3.0.15) ### [`v3.0.14`](https://redirect.github.com/rails/rails/compare/v3.0.13...v3.0.14) [Compare Source](https://redirect.github.com/rails/rails/compare/v3.0.13...v3.0.14) ### [`v3.0.13`](https://redirect.github.com/rails/rails/compare/v3.0.12...v3.0.13) [Compare Source](https://redirect.github.com/rails/rails/compare/v3.0.12...v3.0.13) ### [`v3.0.12`](https://redirect.github.com/rails/rails/compare/v3.0.11...v3.0.12) [Compare Source](https://redirect.github.com/rails/rails/compare/v3.0.11...v3.0.12) ### [`v3.0.11`](https://redirect.github.com/rails/rails/compare/v3.0.10...v3.0.11) [Compare Source](https://redirect.github.com/rails/rails/compare/v3.0.10...v3.0.11) ### [`v3.0.10`](https://redirect.github.com/rails/rails/compare/v3.0.9...v3.0.10) [Compare Source](https://redirect.github.com/rails/rails/compare/v3.0.9...v3.0.10) ### [`v3.0.9`](https://redirect.github.com/rails/rails/compare/v3.0.8...v3.0.9) [Compare Source](https://redirect.github.com/rails/rails/compare/v3.0.8...v3.0.9) ### [`v3.0.8`](https://redirect.github.com/rails/rails/compare/v3.0.7...v3.0.8) [Compare Source](https://redirect.github.com/rails/rails/compare/v3.0.7...v3.0.8)

---

• [ ] If you want to rebase/retry this PR, check this box

[dev-mend-for-github-com[bot]]

⚠ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: Gemfile.lock

installing v2 tool bundler v2.4.8
linking tool bundler v2.4.8

/usr/local/buildpack/utils/linking.sh: line 18: /usr/local/bin/bundle: Permission denied