Release 5.0.0 · activerecord-hackery/ransack

Breaking changes

LIKE wildcards are now escaped on every adapter, with an explicit ESCAPE clause. cont, start, end and their i_/not_/_any/_all variants treat the search term literally; % and _ typed by a user no longer act as wildcards on SQLite and other backends. Use matches to pass a pattern. — #1682, fixes #1581
The ActionView::Helpers::Tags::Base#value monkey patch is removed. It let Rails reach private Kernel methods on any form object and broke unrelated forms in host apps (text_field :test raised ArgumentError). — #1690, closes #1485, relates to #1215
Combinators are validated and normalised. 'OR', :or and 'Or' all mean or instead of silently becoming AND; under ransack! / ignore_unknown_conditions: false an unrecognised combinator raises Ransack::InvalidSearchError at any nesting depth. — #1694, closes #1465
postgres_fields_sort_option is renamed fields_sort_option (the old name still works). NULLS FIRST / NULLS LAST now go through Arel and work on any backend that supports them, not only PostgreSQL. — #1696, closes #1463

ignore_blank_values config option: treat blank values as filters (for JSON APIs) instead of ignoring them (the default, for HTML forms). Typed columns treat a blank as NULL. — #1683, closes #722, #1664
Length predicates: length_eq, length_lt, length_lteq, length_gt, length_gteq. — #1697, closes #1492, #1655
Trilogy adapter support, with a CI job to prove it. — #1698, closes #1500, #1501
enum attributes can be searched by label. — #1665
Nested groupings in longhand (groupings: / conditions: / combinator:), and long-form condition keys (attributes: / predicate: / values:). — #1430, #1694
NULLS FIRST / NULLS LAST on every backend Arel supports. — #1696

Fix low-level c: API silently dropping conditions when a:/v: are arrays of envelope hashes — #1675, closes #1150
Prune blank conditions from the c: API at every nesting depth, without mutating the caller's params — #1687, closes #1653
Strip whitespace at every level of the params, not just the top — #1688, closes #1414, #1502
Make search_form_for / search_form_with / turbo_search_form_for honour a per-search search_key — #1676, closes #1118
Read a form field's value back through ransack_alias, so aliased fields survive a round-trip — #1693, closes #689, #1529
Fix ActiveModel::RangeError when a huge integer is searched across multiple attributes in one condition — #1691, closes #1523
Make _present / _blank produce only IS [NOT] NULL on non-string columns — #1678, closes #1552
Fix ransackable_attributes not handling symbol arrays — #1539, closes #1538
Fix scopes inside groupings being silently dropped — #1673, closes #1339, #1490
Fix a deprecation warning and a correctness bug with arel_extensions >= 2.2 — #1679
Cast SQL Server's :datetimeoffset to time — #1689, closes #1479
Remove duplicate definitions causing method-redefined warnings — #1677, closes #1434
Keep an explicit nil inside an array from discarding the whole condition, for custom predicates — #1657

Respect config.active_record.permanent_connection_checkout: lib/ no longer calls the deprecated ActiveRecord::Base.connection, and metadata lookups no longer lease a connection. — #1692, closes #1570

New sections on the advanced search parameter structure, combinators, blank values, whitespace stripping, LIKE wildcards, enum attributes, length predicates, sorting NULLs, and symbol allowlists. — #1695 and the PRs above

Releases are published to RubyGems from GitHub Releases via Trusted Publishing — #1681
CI on Rails 8.1 with Ruby 3.3, 3.4 and 4.0; Trilogy job added — #1667, #1698
Development dependency sqlite3 bumped for CVE-2026-54619 — #1685
The v5.0.0 branch was consolidated into main — #1647