Rails: The deprecated config.paper_trail configuration technique has been removed. This configuration object was deprecated in 10.2.0. It only had one key, config.paper_trail.enabled. Please review docs section 2.d. Turning PaperTrail Off for alternatives.
Added
where_object_changes_from queries for versions where the object's attributes changed from one set of known values to any other set of values.
Fixed
#1281 Rails: Instead of an Engine, PT now provides a Railtie, which is simpler.
Expand kwargs passed to save_with_version using double splat operator - Rails 6.1 compatibility
#1287 - Fix 'rails db:migrate' error when run against an app with mysql2 adapter
Dependencies
Drop support for ruby 2.4 (reached EoL on 2020-03-31)
#1399 - Same
change re: YAML.safe_load as in 13.0.0, but this time for Rails 6.0 and 6.1.
This change only affects users whose versions table has object or
object_changes columns of type text, and who use the YAML serializer. People
who use the JSON serializer, or those with json(b) columns, are unaffected.
#1406 -
Certain [Metadata][1] keys are now forbidden, like id, and item_type.
These keys are reserved by PT.
This change is unlikely to affect anyone. It is not expected that anyone
uses these metadata keys. Most people probably don't use PT metadata at all.
Dependencies
Drop support for Rails 5.2, which reached EoL on 2022-06-01
Drop support for Ruby 2.6, which reached EoL on 2022-03-31
Drop support for request_store < 1.4
Added
None
Fixed
#1395 -
Fix incorrect Version#created_at value when using
PaperTrail::RecordTrail#update_columns
#1404 -
Delay referencing ActiveRecord until after Railtie is loaded
Where possible, methods which are not part of PaperTrail's public API have
had their access changed to private. All of these methods had been clearly
marked as @api private in the documentation, for years. This is not expected
to be a breaking change.
13.0.0 (2022-08-15)
Breaking Changes
For Rails >= 7.0, the default serializer will now use YAML.safe_load unless
ActiveRecord.use_yaml_unsafe_load. This change only affects users whose
versions table has object or object_changes columns of type text, and
who use the YAML serializer. People who use the JSON serializer, or those with
json(b) columns, are unaffected. Please see
https://github.com/paper-trail-gem/paper_trail/blob/master/doc/pt_13_yaml_safe_load.md for details.
Use after_save instead of after_commit for clear_scope_changed callback #407 (@Flixt)
Rename add_to_list_top and add_to_list_bottom private methods to avoid_collision that handles both cases as well as the case where :add_new_at is nil. Setting an explicit position when :add_new_at is nil will now shuffle other items out of the way if necessary. This may break existing workarounds you have in place to deal with this bug. #411. ([brendon])
Revert "Add support for CLDR data in I18n::Backend::Pluralization" by @radar in ruby-i18n/i18n#633 -- this was causing breaking changes unintentionally.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/polarbeardesign/dds_app/network/alerts).
Bumps jquery-rails, rails, paper_trail, exception_notification, acts_as_list and i18n. These dependencies needed to be updated together. Updates
jquery-railsfrom 3.1.5 to 4.5.1Changelog
Sourced from jquery-rails's changelog.
... (truncated)
Commits
de8792dRelease v4.5.1 with jquery 3.6.1 and jquery-ujs 1.2.37e6f508Update jquery-ujs to latest v1.2.3a80d74bUpdate jQuery to latest v3.6.1153d9ffFix changelog typo [ci skip]5cb8af2Release v4.5.0 with jQuery 3.6.08cd051aUpdate jQuery to 3.6.0a8b003dRelease v4.4.090826fdBump jQuery version to 3.5.1ad3227eTest against latest Ruby versions6361d43Merge pull request #269 from repinel/fix-unescape-jsUpdates
railsfrom 3.2.22 to 7.0.4.3Release notes
Sourced from rails's releases.
... (truncated)
Commits
c15ee6ePreparing for 7.0.4.3 release73009eaIgnore certain data-* attributes in rails-ujs when element is contenteditable3468503Implement SafeBuffer#bytesplice7c70791Version 7.0.4.21d6de16Merge pull request #47087 from jhawthorn/cookie_domain23e0345Version 7.0.4.1d7aba06Make sanitize_as_sql_comment more strict8d82687Avoid regex backtracking on If-None-Match header2164d4fAvoid regex backtracking in Inflector.underscorecd46b0eUse string#split instead of regex for domain partsUpdates
paper_trailfrom 4.0.2 to 14.0.0Release notes
Sourced from paper_trail's releases.
... (truncated)
Changelog
Sourced from paper_trail's changelog.
... (truncated)
Commits
1aa0945Release 14.0.0edefe81Drop support for request_store < 1.481822faLint: Rails/RedundantForeignKeye98e639Lint: Rails/RakeEnvironment3ad8bf2Regen rubocop todo3885128Lint: Rails/NegateIncludef5e129fLint: Rails/ApplicationRecord71f5212Make some api-private methods actually private9a48fafDoc: Mention PT 14 YAML.safe_loade059109GHA: upgrade to actions/stale@v6, add exempt-issue-labels optionUpdates
exception_notificationfrom 3.0.1 to 4.5.0Changelog
Sourced from exception_notification's changelog.
... (truncated)
Commits
13bd47dMerge pull request #527 from mschnitzer/master092d399Delete travis config60cbe96Reflect current GitHub actions build status in README01874d9Update release date for upcoming 4.5.0 release7337212Highlight that Rails versions below 5.2 are no longer supported5eaea31Merge pull request #524 from Cyberwatch/refactor_tests84f4be8Add net-smtp to be compatible with ruby 3.17d3c321Use github action for testing and update test suite10272f9Merge pull request #526 from mschnitzer/prepare_for_4.5.009fb4a4Merge pull request #523 from Cyberwatch/update_rails_7Updates
acts_as_listfrom 0.2.0 to 1.1.0Changelog
Sourced from acts_as_list's changelog.
... (truncated)
Commits
5d5e506Version 1.1.09180a74Avoid collision when add_new_at is nil (#411)c56edafUse after_save instead of after_commit for clear_scope_changed callback (#407)c1e60aeAdd Ruby 3.2 to the CI matrix (#408)ddbba24Bump actions/checkout from 2 to 3 (#402)a6106c0Migrate CI to GitHub Actions (#401)db89982Improve readability by keeping parity with the rest of the doc (#398)d4732a4Merge branch 'master' of https://github.com/brendon/acts_as_list474621fVersion 1.0.419a251fAdd Tests ruby 2.7 and 3.0 for integration test (#393)Updates
i18nfrom 0.6.11 to 1.13.0Release notes
Sourced from i18n's releases.
... (truncated)
Commits
b9b79abBump to 1.13.0b4cd00dMerge pull request #649 from fatkodima/fix-interpolate-same-objectbe2f3a0Return same string object when no interpolations were madef75520aMerge pull request #651 from fatkodima/optimizationsac2592fMerge pull request #650 from fatkodima/stub_const048af5cOptimizeI18n.t288868eProperly stub constants42052e8Merge pull request #637 from movermeyer/movermeyer/nested_pluralization_with_...c635958Merge pull request #647 from misdoro/exists_scoped94228cMerge pull request #634 from movermeyer/movermeyer/explicit_0_1_and_lateral_i...Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/polarbeardesign/dds_app/network/alerts).