3.0.7

Security

• Fix Content-Type allowlist bypass vulnerability remained (@mshibuya 00676e2, GHSA-vfmv-jfc5-pjjw)

2.2.6

Security

• Fix Content-Type allowlist bypass vulnerability remained (@mshibuya 4317871, GHSA-vfmv-jfc5-pjjw)

3.0.6

Fixed

• Fix #derived_versions and #active_sibling_versions returning an Array where Hash is expected (@mshibuya 46e4f20)
• Fix incompatibility with Marcel 1.0.3 (@schinery #2728, #2729)
• Fix assigning a file with the same name not marking the column as changed (@mshibuya 4c65b39, #2719)
• Fix failing to remove files with ActiveRecord 7.1 after_commit order change enabled (@mshibuya 63113e9, #2713)

3.0.5

Fixed

• Remove unnecessary if clause within #filename left in the uploader template (@rajyan #2711)

Security

• Fix Content-Type allowlist bypass vulnerability, possibly leading to XSS (@mshibuya, 863d425, GHSA-gxhx-g4fq-49hj)

2.2.5

Security

• Fix Content-Type allowlist bypass vulnerability, possibly leading to XSS (@mshibuya 39b282d, GHSA-gxhx-g4fq-49hj)

3.0.4

Fixed

• Fix model's dirty state remaining after update (@rajyan #2707, #2702)
• Fix #dup modifying the original object (@rajyan #2690, #2706, #2689, #2700)
• Fix #dup not respecting the :mount_on option, causing MissingAttributeError (@marsz #2691)

1.3.4

Fixed

• Fix incompatibility with RMagick >= 3 (@marcogregorius #2699)

3.0.3

Fixed

• Fix #dup modifying the original object (@mshibuya 37f36f7, #2687)
• Fix wrongly removing files on transaction rollback (@mshibuya, @rajyan eb03fe1, #2686, #2685)

3.0.2

Fixed

• Fix deduplicated filename not being persisted (@mshibuya #2679, #2678, #2677)

3.0.1

Fixed

• Fix not respecting the parent's #enable_processing value after reading its own (@mshibuya 2df0f53, #2676)
• Fix NoMethodError when a record is rolled back (@y-yagi #2674, #2675)
• Fix filename suffix being removed due to unnecessary deduplication (@mshibuya d68a111, #2672)
• Fix #dup causing unintended name deduplication of copied files (@mshibuya b732acd, #2670)
• Fix initialization failing when active_support/core_ext is not loaded yet (@mshibuya 875d972)