Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump rails from 7.2.2.1 to 8.0.1 #594

Merged
merged 3 commits into from
Jan 16, 2025
Merged

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 3, 2025

Trello

Editor's note

I've made a few decisions to accept changes here that were introduced in 7.1.0, but weren't changed in our app. I can't see any reasoning in our git history for why they weren't accepted, so I've opted accept them here. More details in the relevant commit

Dependabot content

Bumps rails from 7.2.2.1 to 8.0.1.

Release notes

Sourced from rails's releases.

8.0.1

Active Support

  • Fix a bug in ERB::Util.tokenize that causes incorrect tokenization when ERB tags are preceeded by multibyte characters.

    Martin Emde

  • Restore the ability to decorate methods generated by class_attribute.

    It always has been complicated to use Module#prepend or an alias method chain to decorate methods defined by class_attribute, but became even harder in 8.0.

    This capability is now supported for both reader and writer methods.

    Jean Boussier

Active Model

  • No changes.

Active Record

  • Fix removing foreign keys with :restrict action for MySQ

    fatkodima

  • Fix a race condition in ActiveRecord::Base#method_missing when lazily defining attributes.

    If multiple thread were concurrently triggering attribute definition on the same model, it could result in a NoMethodError being raised.

    Jean Boussier

  • Fix MySQL default functions getting dropped when changing a column's nullability.

    Bastian Bartmann

  • Fix add_unique_constraint/add_check_constraint/add_foreign_key to be revertible when given invalid options.

    fatkodima

  • Fix asynchronous destroying of polymorphic belongs_to associations.

    fatkodima

  • Fix insert_all to not update existing records.

    fatkodima

... (truncated)

Commits
  • cf6ff17 Preparing for 8.0.1 release
  • 0bba3c2 Merge pull request #53936 from jsharpify/jsharpify/prism-parsing
  • 8521b99 [RF-DOCS] Update Rails Testing Guide [ci skip] (#53872)
  • dbe61a7 Merge pull request #53907 from p8/guides/fix-canonical
  • f8d559d [RF-DOCS] Asset Pipeline Documentation (Propshaft) [ci-skip] (#53875)
  • 2ae1d69 [RF-DOCS] Solid Cache updates in Caching with Rails: An Overview [ci-skip] (...
  • 85bde83 Merge pull request #53926 from Ridhwana/Ridhwana/solid-queue
  • c167cbe Merge pull request #53941 from byroot/rack-server-protocol
  • 656e209 Merge pull request #53940 from mjankowski/rdoc-link-to-add-check-constraint
  • b9608a6 Merge pull request #53937 from fatkodima/mysql-fix-remove-foreign-key-restrict
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies ruby Pull requests that update Ruby code labels Jan 3, 2025
@dependabot dependabot bot force-pushed the dependabot/bundler/rails-8.0.1 branch from e5824ef to 8f10ad9 Compare January 6, 2025 08:38
@brucebolt
Copy link
Member

Covered by this Trello card.

@brucebolt brucebolt marked this pull request as draft January 6, 2025 09:25
@dependabot dependabot bot force-pushed the dependabot/bundler/rails-8.0.1 branch from 8f10ad9 to bd65538 Compare January 8, 2025 09:28
Bumps [rails](https://github.com/rails/rails) from 7.2.2.1 to 8.0.1.
- [Release notes](https://github.com/rails/rails/releases)
- [Commits](rails/rails@v7.2.2.1...v8.0.1)

---
updated-dependencies:
- dependency-name: rails
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@yndajas yndajas force-pushed the dependabot/bundler/rails-8.0.1 branch from 8f2af87 to faf1993 Compare January 13, 2025 12:21
@yndajas yndajas marked this pull request as ready for review January 13, 2025 12:26
I retained the deprecation warnings in dev and test, since it seems
sensible to be warned about deprecated code. Upstream PR that removed
this: rails/rails#51831

In production, I commented out the new setting
`config.silence_healthcheck_path = "/up"`. I don't think we use `/up`
for healthchecks, and I'm not sure that we'd want to silence them

Also in production, a few settings that we never changed from their
defaults were changed in 7.1.0, but not in our app. Our git history
doesn't explain why they were ignored, so I'm updating them now:
- logging settings
- public file server settings
- `config.force_ssl = true`

https://guides.rubyonrails.org/upgrading_ruby_on_rails.html#the-update-task
@yndajas yndajas force-pushed the dependabot/bundler/rails-8.0.1 branch from faf1993 to 069e634 Compare January 13, 2025 12:29
Copy link
Member

@brucebolt brucebolt left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This looks good to me, but I'd suggest trying it out in integration before merging (if you haven't already).

@yndajas yndajas merged commit 2c58f87 into main Jan 16, 2025
12 checks passed
@yndajas yndajas deleted the dependabot/bundler/rails-8.0.1 branch January 16, 2025 10:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies ruby Pull requests that update Ruby code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants