Changelog for
ruby3.1-rubygem-devise-4.9.4-78.1.x86_64.rpm :
* Fri Apr 19 2024 asnAATTcryptomilk.org- Update to version 4.9.4 https://github.com/heartcombo/devise/blob/v4.9.4/CHANGELOG.md
* Tue Nov 14 2023 dan.cermakAATTposteo.net- 4.9.2: https://github.com/heartcombo/devise/blob/main/CHANGELOG.md#492---2023-04-03 4.9.1: https://github.com/heartcombo/devise/blob/v4.9.1/CHANGELOG.md#491---2023-03-31 4.9.0: https://github.com/heartcombo/devise/blob/v4.9.0/CHANGELOG.md#490---2023-02-17
* Tue Jan 25 2022 cooloAATTsuse.comupdated to version 4.8.1 see installed CHANGELOG.md
* Thu Jun 24 2021 cooloAATTsuse.comupdated to version 4.8.0 see installed CHANGELOG.md [#]## unreleased [#]## 4.8.0 - 2021-04-29
* enhancements
* Devise now enables the upgrade of OmniAuth 2+. Previously Devise would raise an error if you\'d try to upgrade. Please note that OmniAuth 2 is considered a security upgrade and recommended to everyone. You can read more about the details (and possible necessary changes to your app as part of the upgrade) in [their release notes](https://github.com/omniauth/omniauth/releases/tag/v2.0.0). [Devise\'s OmniAuth Overview wiki](https://github.com/heartcombo/devise/wiki/OmniAuth:-Overview) was also updated to cover OmniAuth 2.0 requirements. - Note that the upgrade required Devise shared links that initiate the OmniAuth flow to be changed to `method: :post`, which is now a requirement for OmniAuth, part of the security improvement. If you have copied and customized the Devise shared links partial to your app, or if you have other links in your app that initiate the OmniAuth flow, they will have to be updated to use `method: :post`, or changed to use buttons (e.g. `button_to`) to work with OmniAuth 2. (if you\'re using links with `method: :post`, make sure your app has `rails-ujs` or `jquery-ujs` included in order for these links to work properly.) - As part of the OmniAuth 2.0 upgrade you might also need to add the [`omniauth-rails_csrf_protection`](https://github.com/cookpad/omniauth-rails_csrf_protection) gem to your app if you don\'t have it already. (and you don\'t want to roll your own code to verify requests.) Check the OmniAuth v2 release notes for more info.
* Introduce `Lockable#reset_failed_attempts!` model method to reset failed attempts counter to 0 after the user signs in. - This logic existed inside the lockable warden hook and is triggered automatically after the user signs in. The new model method is an extraction to allow you to override it in the application to implement things like switching to a write database if you\'re using the new multi-DB infrastructure from Rails for example, similar to how it\'s already possible with `Trackable#update_tracked_fields!`.
* Add support for Ruby 3.
* Add support for Rails 6.1.
* Move CI to GitHub Actions.
* deprecations
* `Devise::Models::Authenticatable::BLACKLIST_FOR_SERIALIZATION` is deprecated in favor of `Devise::Models::Authenticatable::UNSAFE_ATTRIBUTES_FOR_SERIALIZATION` (AATThanachin)
* Fri Sep 25 2020 cooloAATTsuse.comupdated to version 4.7.3 see installed CHANGELOG.md
* Mon Feb 10 2020 cooloAATTsuse.com- updated to version 4.7.1 see installed CHANGELOG.md [#]## 4.7.1 - 2019-09-06
* bug fixes
* Fix an edge case where records with a blank `confirmation_token` could be confirmed (by AATTtegon)
* Fix typo inside `update_needs_confirmation` i18n key (by AATTlslm) [#]## 4.7.0 - 2019-08-19
* enhancements
* Support Rails 6.0
* Update CI to rails 6.0.0.beta3 (by AATTtunnes)
* refactor method name to be more consistent (by AATTsaiqulhaq)
* Fix rails 6.0.rc1 email uniqueness validation deprecation warning (by AATTVasfed)
* bug fixes
* Add `autocomplete=\"new-password\"` to `password_confirmation` fields (by AATTferrl)
* Fix rails_51_and_up? method for Rails 6.rc1 (by AATTigorkasyanchuk)
* Fri Mar 29 2019 cooloAATTsuse.com- updated to version 4.6.2 see installed CHANGELOG.md [#]## 4.6.2 - 2019-03-26
* bug fixes
* Revert \"Set `encrypted_password` to `nil` when `password` is set to `nil`\" since it broke backward compatibility with existing applications. See more on https://github.com/plataformatec/devise/issues/5033#issuecomment-476386275 (by AATTmracos)
* Sat Mar 02 2019 cooloAATTsuse.com- updated to version 4.6.1 see installed CHANGELOG.md [#]## 4.6.1 - 2019-02-11
* bug fixes
* Check if `root_path` is defined with `#respond_to?` instead of `#present` (by AATTtegon) [#]## 4.6.0 - 2019-02-07
* enhancements
* Allow to skip email and password change notifications (by AATTiorme1)
* Include the use of `nil` for `allow_unconfirmed_access_for` in the docs (by AATTjoaumg)
* Ignore useless files into the `.gem` file (by AATThuacnlee)
* Explain the code that prevents enumeration attacks inside `Devise::Strategies::DatabaseAuthenticatable` (by AATTtegon)
* Refactor the `devise_error_messages!` helper to render a partial (by AATTprograhamer)
* Add an option (`Devise.sign_in_after_change_password`) to not automatically sign in a user after changing a password (by AATTknjko)
* bug fixes
* Fix missing comma in Simple Form generator (by AATTcolinross)
* Fix error with migration generator in Rails 6 (by AATToystersauce8)
* Set `encrypted_password` to `nil` when `password` is set to `nil` (by AATTsivagollapalli)
* Consider whether the request supports flash messages inside `Devise::Controllers::Helpers#is_flashing_format?` (by AATTcolinross)
* Fix typo inside `Devise::Generators::ControllersGenerator` (by AATTkopylovvlad)
* Sanitize parameters inside `Devise::Models::Authenticatable#find_or_initialize_with_errors` (by AATTrlue)
* `#after_database_authentication` callback was not called after authentication on password reset (by AATTkanmaniselvan)
* Fix corner case when `#confirmation_period_valid?` was called at the same second as `confirmation_sent_at` was set. Mostly true for date types that only have second precisions. (by AATTstanhu)
* Fix unclosed `li` tag in `error_messages` partial (by AATTmracos)
* Fix Routes issue when devise engine is mounted in another engine on Rails versions lower than 5.1 (by AATTa-barbieri)
* Make `#increment_failed_attempts` concurrency safe (by AATTtegon)
* Apply Test Helper fix to Rails 6.0 as well as 5.x (by AATTmatthewrudy)
* deprecations
* The second argument of `DatabaseAuthenticatable`\'s `#update_with_password` and `#update_without_password` is deprecated and will be removed in the next major version. It was added to support a feature deprecated in Rails 4, so you can safely remove it from your code. (by AATTihatov08)
* The `DeviseHelper.devise_error_messages!` is deprecated and will be removed in the next major version. Use the `devise/shared/error_messages` partial instead. (by AATTmracos)
* Wed Sep 05 2018 cooloAATTsuse.com- updated to version 4.5.0 see installed CHANGELOG.md [#]## 4.5.0 - 2018-08-15
* enhancements
* Use `before_action` instead of `before_filter` (by AATTedenthecat)
* Allow people to extend devise failure app, through invoking `ActiveSupport.run_load_hooks` once `Devise::FailureApp` is loaded (by AATTwnm)
* Use `update` instead of `update_attributes` (by AATTkoic)
* Split IP resolution from `update_tracked_fields` (by AATTmckramer)
* upgrade dependencies for rails and responders (by AATTlancecarlson)
* Add `autocomplete=\"new-password\"` to new password fields (by AATTgssbzn)
* Add `autocomplete=\"current-password\"` to current password fields (by AATTgssbzn)
* Remove redundant `self` from `database_authenticatable` module (by AATTabhishekkanojia)
* Update `simple_form` templates with changes from https://github.com/plataformatec/devise/commit/16b3d6d67c7e017d461ea17ed29ea9738dc77e83 and https://github.com/plataformatec/devise/commit/6260c29a867b9a656f1e1557abe347a523178fab (by AATTgssbzn)
* Remove `:trackable` from the default modules in the generators, to be more GDPR-friendly (by AATTfakenine)
* bug fixes
* Use same string on failed login regardless of whether account exists when in paranoid mode (by AATTTonyMK9068)
* Fix error when params is not a hash inside `Devise::ParameterSanitizer` (by AATTb0nn1e)
* Look for `secret_key_base` inside `Rails.application` (by AATTgencer)
* Ensure `Devise::ParameterFilter` does not add missing keys when called with a hash that has a `default` / `default_proc` configured (by AATTjoshpencheon)
* Adds `is_navigational_format?` check to `after_sign_up_path_for` to keep consistency (by AATTiorme1)
* Tue Mar 20 2018 factory-autoAATTkulow.org- updated to version 4.4.3 see installed CHANGELOG.md [#]## 4.4.3 - 2018-03-17
* bug fixes
* Fix undefined method `rails5?` for Devise::Test:Module (by AATTtegon)
* Fix: secret key was being required to be set inside credentials on Rails 5.2 (by AATTtegon) [#]## 4.4.2 - 2018-03-15
* enhancements
* Support for :credentials on Rails v5.2.x. (by AATTgencer)
* Improve documentation about the test suite. (by AATTtegon)
* Test with Rails 5.2.rc1 on Travis. (by AATTjcoyne)
* Allow test with Rails 6. (by AATTFudoshiki)
* Creating a new section for controller configuration on `devise.rb` template (by AATTDanilo-Araujo-Silva)
* bug fixes
* Preserve content_type for unauthenticated tests (by AATTgmcnaughton)
* Check if the resource is persisted in `update_tracked_fields!` instead of performing validations (by AATTtegon)
* Revert \"Replace log_process_action to append_info_to_payload\" (by AATTtegon)
* Thu Feb 08 2018 factory-autoAATTkulow.org- updated to version 4.4.1 see installed CHANGELOG.md [#]## 4.4.1 - 2018-01-23
* bug fixes
* Ensure Gemspec is loaded as utf-8. (by AATTsegiddins)
* Fix `ActiveRecord` check on `Confirmable`. (by AATTtegon)
* Fix `signed_in?` docs without running auth hooks. by (AATTmachty)
* Tue Jan 16 2018 msabateAATTsuse.com- Updated to version 4.4.0
* enhancements
* Add `frozen_string_literal` pragma comment to all Ruby files. (by AATTpat)
* Use `set_flash_method!` instead of `set_flash_method` in `Devise::OmniauthCallbacksController#failure`. (by AATTsaichander17)
* Clarify how `store_location_for` modifies URIs. (by AATTolivierlacan)
* Move `failed_attempts` increment into its own function. by (AATTmobilutz)
* Add `autocomplete=\"email\"` to email fields. by (AATTMikeRogers0)
* Add the ability to change the default migrations path introduced in Rails 5.0.3. (by AATTalexhifer)
* Delete unnecessary condition for helper method. (by AATTdavydovanton)
* Support `id: :uuid` option for migrations. (by AATTfilip373)
* bug fixes
* Fix syntax for MRI 2.5.0. (by AATTpat)
* Validations were being ignored on singup in the `Trackable#update_tracked_fields!` method. (by AATTAshleyFoster)
* Do not modify options for `#serializable_hash`. (by AATTguigs)
* Email confirmations were being sent on sign in/sign out for application using `mongoid` and `mongoid-paperclip` gems. This is because previously we were checking if a model is from Active Record by checking if the method `after_commit` was defined - since `mongoid` doesn\' have one - but `mongoid-paperclip` gem does define one, which cause this issue. (by AATTfjg)
* Tue Jan 09 2018 cooloAATTsuse.com- updated to version 4.4.0 see installed CHANGELOG.md [#]## Unreleased [#]## 4.4.0 - 2017-12-29
* enhancements
* Add `frozen_string_literal` pragma comment to all Ruby files. (by AATTpat)
* Use `set_flash_method!` instead of `set_flash_method` in `Devise::OmniauthCallbacksController#failure`. (by AATTsaichander17)
* Clarify how `store_location_for` modifies URIs. (by AATTolivierlacan)
* Move `failed_attempts` increment into its own function. by (AATTmobilutz)
* Add `autocomplete=\"email\"` to email fields. by (AATTMikeRogers0)
* Add the ability to change the default migrations path introduced in Rails 5.0.3. (by AATTalexhifer)
* Delete unnecessary condition for helper method. (by AATTdavydovanton)
* Support `id: :uuid` option for migrations. (by AATTfilip373)
* bug fixes
* Fix syntax for MRI 2.5.0. (by AATTpat)
* Validations were being ignored on singup in the `Trackable#update_tracked_fields!` method. (by AATTAshleyFoster)
* Do not modify options for `#serializable_hash`. (by AATTguigs)
* Email confirmations were being sent on sign in/sign out for application using `mongoid` and `mongoid-paperclip` gems. This is because previously we were checking if a model is from Active Record by checking if the method `after_commit` was defined - since `mongoid` doesn\' have one - but `mongoid-paperclip` gem does define one, which cause this issue. (by AATTfjg)
* Tue May 23 2017 cooloAATTsuse.com- updated to version 4.3.0 see installed CHANGELOG.md [#]## 4.3.0 - 2017-05-14
* Enhancements
* Dependency support added for Rails 5.1.x.
* Thu Mar 16 2017 cooloAATTsuse.com- updated to version 4.2.1 see installed CHANGELOG.md
* Sat Jul 02 2016 cooloAATTsuse.com- updated to version 4.2.0 see installed CHANGELOG.md [#]## Unreleased [#]## 4.2.0 - 2016-07-01
* removals
* Remove the deprecated `Devise::ParameterSanitizer` API from Devise 3. Please use the `#permit` and `#sanitize` methods over `#for`.
* Remove the deprecated OmniAuth URL helpers. Use the fully qualified helpers (`user_facebook_omniauth_authorize_path`) over the scope based helpers ( `user_omniauth_authorize_path(:facebook)`).
* Remove the `Devise.bcrypt` method, use `Devise::Encryptor.digest` instead.
* Remove the `Devise::Models::Confirmable#confirm!` method, use `confirm` instead.
* Remove the `Devise::Models::Recoverable#reset_password!` method, use `reset_password` instead.
* Remove the `Devise::Models::Recoverable#after_password_reset` method.
* bug fixes
* Fix an `ActionDispatch::IllegalStateError` when testing controllers with Rails 5 rc 2(by AATThamadata).
* Use `ActiveSupport.on_load` hooks to include Devise on `ActiveRecord` and `Mongoid`, avoiding autoloading these constants too soon (by AATTlucasmazza, AATTrafaelfranca).
* enhancements
* Display the minimum password length on `registrations/edit` view (by AATTYanchek99).
* You can disable Devise\'s routes reloading on boot by through the `reload_routes = false` config. This can reduce the time taken to boot the application but it might trigger some errors if you application (mostly your controllers) requires that Devise mappings be loaded during boot time (by AATTsidonath).
* Added `Devise::Test::IntegrationHelpers` to bypass the sign in process using Warden test API (by AATTlucasmazza).
* Define `inspect` in `Devise::Models::Authenticatable` to help ensure password hashes aren\'t included in exceptions or otherwise accidentally serialized (by AATTtkrajcar).
* Add missing support of `Rails.application.config.action_controller.relative_url_root` (by AATTkosdiamantis).
* deprecations
* `Devise::TestHelpers` is deprecated in favor of `Devise::Test::ControllerHelpers` (by AATTlucasmazza).
* The `sign_in` test helper has changed to use keyword arguments when passing a scope. `sign_in :admin, users(:alice)` should be rewritten as `sign_in users(:alice), scope: :admin` (by AATTlucasmazza).
* The option `bypass` of `Devise::Controllers::SignInOut#sign_in` method is deprecated in favor of `Devise::Controllers::SignInOut#bypass_sign_in` method (by AATTulissesalmeida).
* Sat May 21 2016 cooloAATTsuse.com- updated to version 4.1.1 see installed CHANGELOG.md
* Tue Apr 19 2016 cooloAATTsuse.com- updated to version 4.0.0 see installed CHANGELOG.md
* Tue Feb 02 2016 cooloAATTsuse.com- updated to version 3.5.6 see installed CHANGELOG.md [#]## 3.5.6 - 2016-01-02
* bug fixes
* Fix type coercion of the rememberable timestamp stored on cookies.
* Mon Jan 25 2016 cooloAATTsuse.com- updated to version 3.5.5 see installed CHANGELOG.md [#]## 3.5.5 - 2016-22-01
* bug fixes
* Bring back remember_expired? implementation
* Ensure timeouts are not triggered if remember me is being used
* Thu Jan 21 2016 cooloAATTsuse.com- updated to version 3.5.4 see installed CHANGELOG.md
* Sat Dec 12 2015 cooloAATTsuse.com- updated to version 3.5.3 see installed CHANGELOG.md [#]## Unreleased [#]## 3.5.3 - 2015-12-10
* bug fixes
* Fix password reset for records where `confirmation_required?` is disabled and `confirmation_sent_at` is nil. (by AATTandygeers)
* Allow resources with no `email` field to be recoverable (and do not clear the reset password token if the model was already persisted). (by AATTseddy, AATTstanhu)
* enhancements
* Upon setting `Devise.send_password_change_notification = true` a user will receive notification when their password has been changed.
* Tue Aug 11 2015 cooloAATTsuse.com- updated to version 3.5.2 see installed CHANGELOG.md [#]## 3.5.2 - 2015-08-10
* enhancements
* Perform case insensitive basic authorization matching
* Big fixes
* Do not use digests for password confirmation token
* Fix infinite redirect in Rails 4.2 authenticated routes
* Autoload Devise::Encryptor to avoid errors on thread-safe mode
* Thu May 28 2015 cooloAATTsuse.com- updated to version 3.5.1 see installed CHANGELOG.md
* Tue Feb 10 2015 cooloAATTsuse.com- updated to version 3.4.1
* Mon Oct 13 2014 cooloAATTsuse.com- adapt to new rubygem packaging