CHANGELOG.md

Rails 7.0.10 (October 28, 2025)

• No changes.

Rails 7.0.9 (October 28, 2025)

• No changes.

Rails 7.0.8.7 (December 10, 2024)

• No changes.

Rails 7.0.8.6 (October 23, 2024)

• No changes.

Rails 7.0.8.5 (October 15, 2024)

• No changes.

Rails 7.0.8.4 (June 04, 2024)

• No changes.

Rails 7.0.8.3 (May 17, 2024)

• No changes.

Rails 7.0.8.2 (May 16, 2024)

• No changes.

Rails 7.0.8.1 (February 21, 2024)

• No changes.

Rails 7.0.8 (September 09, 2023)

• Omit webdrivers gem dependency from Gemfile template

  Sean Doyle

Rails 7.0.7.2 (August 22, 2023)

• No changes.

Rails 7.0.7.1 (August 22, 2023)

• No changes.

Rails 7.0.7 (August 09, 2023)

• Update default scaffold templates to set 303 (See Other) as status code on redirect for the update action for XHR requests other than GET or POST to avoid issues (e.g browsers trying to follow the redirect using the original request method resulting in double PATCH/PUT)

  Guillermo Iguaran

Rails 7.0.6 (June 29, 2023)

• Avoid escaping paths when editing credentials.

  Jonathan Hefner

Rails 7.0.5.1 (June 26, 2023)

• No changes.

Rails 7.0.5 (May 24, 2023)

• Add puma app server to Gemfile in order to start test/dummy.

  Donapieppo

• Rails console now disables IRB's autocompletion feature in production by default.

  Setting IRB_USE_AUTOCOMPLETE=true can override this default.

  Stan Lo

• Send 303 See Other status code back for the destroy action on newly generated scaffold controllers.

  Tony Drake

Rails 7.0.4.3 (March 13, 2023)

• No changes.

Rails 7.0.4.2 (January 24, 2023)

• No changes.

Rails 7.0.4.1 (January 17, 2023)

• No changes.

Rails 7.0.4 (September 09, 2022)

• config.allow_concurrency = false now use a Monitor instead of a Mutex

  This allows to enable config.active_support.executor_around_test_case even when config.allow_concurrency is disabled.

  Jean Boussier

• Skip Active Storage and Action Mailer if Active Job is skipped.

  Étienne Barrié

• Correctly check if frameworks are disabled when running app:update.

  Étienne Barrié and Paulo Barros

• Fixed config.active_support.cache_format_version never being applied.

  Rails 7.0 shipped with a new serializer for Rails.cache, but the associated config wasn't working properly. Note that even after this fix, it can only be applied from the application.rb file.

  Alex Ghiculescu

Rails 7.0.3.1 (July 12, 2022)

• No changes.

Rails 7.0.3 (May 09, 2022)

• If reloading and eager loading are both enabled, after a reload Rails eager loads again the application code.

  Xavier Noria

• Use controller_class_path in Rails::Generators::NamedBase#route_url

  The route_url method now returns the correct path when generating a namespaced controller with a top-level model using --model-name.

  Previously, when running this command:

  bin/rails generate scaffold_controller Admin/Post --model-name Post

  the comments above the controller action would look like:

  # GET /posts
  def index
    @posts = Post.all
  end

  afterwards, they now look like this:

  # GET /admin/posts
  def index
    @posts = Post.all
  end

  Fixes #44662.

  Andrew White

Rails 7.0.2.4 (April 26, 2022)

• No changes.

Rails 7.0.2.3 (March 08, 2022)

• No changes.

Rails 7.0.2.2 (February 11, 2022)

• No changes.

Rails 7.0.2.1 (February 11, 2022)

• No changes.

Rails 7.0.2 (February 08, 2022)

• No changes.

Rails 7.0.1 (January 06, 2022)

• Prevent duplicate entries in plugin Gemfile.

  Jonathan Hefner

• Fix asset pipeline errors for plugin dummy apps.

  Jonathan Hefner

• Fix generated route revocation.

  Jonathan Hefner

• Addresses an issue in which Sidekiq jobs could not reload certain namespaces.

  See fxn/zeitwerk#198 for details.

  Xavier Noria

• Fix plugin generator to a plugin that pass all the tests.

  Rafael Mendonça França

Rails 7.0.0 (December 15, 2021)

• No changes.

Rails 7.0.0.rc3 (December 14, 2021)

• Allow localhost with a port by default in development

  [Fixes: #43864]

Rails 7.0.0.rc2 (December 14, 2021)

• No changes

Rails 7.0.0.rc1 (December 06, 2021)

• Remove deprecated config in dbconsole.

  Rafael Mendonça França

• Change default X-XSS-Protection header to disable XSS auditor

  This header has been deprecated and the XSS auditor it triggered has been removed from all major modern browsers (in favour of Content Security Policy) that implemented this header to begin with (Firefox never did).

  OWASP suggests setting this header to '0' to disable the default behaviour on old browsers as it can introduce additional security issues.

  Added the new behaviour as a framework default from Rails 7.0.

  Christian Sutter

• Scaffolds now use date_field, time_field and datetime_field instead of date_select, time_select and datetime_select; thus providing native date/time pickers.

  Martijn Lafeber

• Fix a regression in which autoload paths were initialized too late.

  Xavier Noria

Rails 7.0.0.alpha2 (September 15, 2021)

• Fix activestorage dependency in the npm package.

  Rafael Mendonça França

Rails 7.0.0.alpha1 (September 15, 2021)

• New and upgraded Rails apps no longer generate config/initializers/application_controller_renderer.rb or config/initializers/cookies_serializer.rb

  The default value for cookies_serializer (:json) has been moved to config.load_defaults("7.0"). The new framework defaults file can be used to upgrade the serializer.

  Alex Ghiculescu

• New applications get a dependency on the new debug gem, replacing byebug.

  Xavier Noria

• Add SSL support for postgresql in bin/rails dbconsole.

  Fixes #43114.

  Michael Bayucot

• Add support for comments above gem declaration in Rails application templates, e.g. gem("nokogiri", comment: "For XML").

  Linas Juškevičius

• The setter config.autoloader= has been deleted. zeitwerk is the only available autoloading mode.

  Xavier Noria

• config.autoload_once_paths can be configured in the body of the application class defined in config/application.rb or in the configuration for environments in config/environments/*.

  Similarly, engines can configure that collection in the class body of the engine class or in the configuration for environments.

  After that, the collection is frozen, and you can autoload from those paths. They are managed by the Rails.autoloaders.once autoloader, which does not reload, only autoloads/eager loads.

  Xavier Noria

• During initialization, you cannot autoload reloadable classes or modules like application models, unless they are wrapped in a to_prepare block. For example, from config/initializers/*, or in application, engines, or railties initializers.

  Please check the autoloading guide for details.

  Xavier Noria

• While they are allowed to have elements in common, it is no longer required that config.autoload_once_paths is a subset of config.autoload_paths. The former are managed by the once autoloader. The main autoloader manages the latter minus the former.

  Xavier Noria

• Show Rake task description if command is run with -h.

  Adding -h (or --help) to a Rails command that's a Rake task now outputs the task description instead of the general Rake help.

  Petrik de Heus

• Add missing plugin new command to help.

  *Petrik de Heus

• Fix config_for error when there's only a shared root array.

  Loïc Delmaire

• Raise an error in generators if an index type is invalid.

  Petrik de Heus

• package.json now uses a strict version constraint for Rails JavaScript packages on new Rails apps.

  Zachary Scott, Alex Ghiculescu

• Modified scaffold generator template so that running rails g scaffold Author no longer generates tests called "creating a Author", "updating a Author", and "destroying a Author".

  Fixes #40744.

  Michael Duchemin

• Raise an error in generators if a field type is invalid.

  Petrik de Heus

• bin/rails tmp:clear deletes also files and directories in tmp/storage.

  George Claghorn

• Fix compatibility with psych >= 4.

  Starting in Psych 4.0.0 YAML.load behaves like YAML.safe_load. To preserve compatibility Rails.application.config_for now uses YAML.unsafe_load if available.

  Jean Boussier

• Allow loading nested locales in engines.

  Gannon McGibbon

• Ensure Rails.application.config_for always cast hashes to ActiveSupport::OrderedOptions.

  Jean Boussier

• Remove Rack::Runtime from the default middleware stack and deprecate referencing it in middleware operations without adding it back.

  Hartley McGuire

• Allow adding additional authorized hosts in development via ENV['RAILS_DEVELOPMENT_HOSTS'].

  Josh Abernathy, Debbie Milburn

• Add app concern and test keepfiles to generated engine plugins.

  Gannon McGibbon

• Stop generating a license for in-app plugins.

  Gannon McGibbon

• rails app:update no longer prompts you to overwrite files that are generally modified in the course of developing a Rails app. See #41083 for the full list of changes.

  Alex Ghiculescu

• Change default branch for new Rails projects and plugins to main.

  Prateek Choudhary

• The new method Rails.benchmark gives you a quick way to measure and log the execution time taken by a block:

  def test_expensive_stuff
    Rails.benchmark("test_expensive_stuff") { ... }
  end
  

  This functionality was available in some contexts only before.

  Simon Perepelitsa

• Applications generated with --skip-sprockets no longer get app/assets/config/manifest.js and app/assets/stylesheets/application.css.

  Cindy Gao

• Add support for stylesheets and ERB views to rails stats.

  Joel Hawksley

• Allow appended root routes to take precedence over internal welcome controller.

  Gannon McGibbon

Please check 6-1-stable for previous changes.