v2.9.1

What's Changed

• Update gemspec by @sej3506 in #1037

Full Changelog: v2.9.0...v2.9.1

v2.9.0

2.9.0 - October 29, 2024

What's Changed

• Bumped actions/checkout from 2 to 4 by @dependabot in (#1031)
• Added Rails 7.2 and Ruby 3.3 to testing matrix by @hasghari in (#1032)
  • This also overhauled the dummy test setup
• Dropped support for Rails 6.1 and Ruby 3.0 (#1036)

Thanks so much to our community contributor Hamed Asghari (@hasghari)! 🎉

v2.8.0

2.8.0 - August 9, 2024

Added

• Feature: Added allow_password_resets config option (#1019)
• Added dependabot (#1028)
• Added a dynamic workflow to update SECURITY.md to match thoughtbot's security template (5a5a625)

Fixed

• Fixed some deprecation warnings (#1018)

Thanks so much to our community contributors Jos O'shea (@whatnotery) and Karine Vieira (@karinevieira)! 🎉

v2.7.2

2.7.2 - June 28, 2024

Fixed

• Fix method redefinition and circular require issues (#1027)
• Fix validating email in strict mode (#976)
• Update the example config in README.md (#977)

Added

• Add specs for email validator strict mode (#1001)
• Create SECURITY.md (#972)

Removed

• Remove Hound README badge (#1020)

Thanks so much to our community contributors Alex Kholodniak (@kholdrex), Hamed Asghari (@hasghari), James Robey (@foucist), and Manuel Meurer (@manuelmeurer)! 🎉

v2.7.1

2.7.1 - May 8, 2024

Fixed

• Updated sqlite3 and erb_lint gems (#1017)

Thank you to our community contributor who provided this fix while attending RailsConf 2024 - Jos O'shea (@whatnotery) 🎉

v2.7.0

2.7.0 - April 19, 2024

Added

• Call dynamic README workflow (#1004)
• Add configuration options for failure method redirects (#1002) Dan Sharp

Fixed

• Update specs to match on translations (#1015)

Removed

• Drop Ruby 2.76 and Rails 6.0 (#1005)

Thank you to our community contributor Dan Sharp (@drsharp)!

v2.6.2

2.6.2 - January 15, 2024

Added

• Add CODEOWNERS file (#994)
• Add support for Rails 7.1 (#995) Samuel Giddens
• Add Ruby 3.2.2 to testing matrix (#991)

Fixed

• Fix typo in Clearance::Token docs (#1000) Gabe Berke-Williams
• Fix for setup & CI for Rails 7.1 support, update "MiniTest" to "Minitest", add handling for different versions of Rack::Utils.set_cookie_header!, remove deprecated active record handling in application.rb (#998)
• Fix broken thoughtbot logo on README.md

Changed

• Replace mentions of NEWS.md with CHANGELOG.md (#982)
• Update argon2 to v2.2.0 (#989) Georg Leciejewski
• Prefer literal hash creation notation (#984) Ivan Marynych

Thank you to our community contributors Samuel (@segiddins), Georg (@schorsch), Ivan (@loqimean), Gabe (@gabebw)!

v2.6.1

2.6.1 - September 23, 2022

• Document how to report security issues
• Only update the env["QUERY_STRING"] if the as parameter is present in
  backdoor middleware

v2.5.0

[2.5.0] - September 10, 2021

Fixed

• Fix open redirect vulnerability

Changed

• Rename default branch to main

v2.4.0

2.4.0 - March 5, 2021

Added

• Optionally use signed cookies to prevent remember token timing attacks. Big thank you for @gingerlime!