Update paper_trail 12.3.0 → 14.0.0 (major)

[depfu]

Here is everything you need to know about this update. Please take a good look at what changed and the test results before merging this pull request.

What changed?

✳️ paper_trail (12.3.0 → 14.0.0) · Repo · Changelog

Release Notes

14.0.0 (from changelog)

Breaking Changes

• #1399 - Same change re: YAML.safe_load as in 13.0.0, but this time for Rails 6.0 and 6.1.
  • This change only affects users whose versions table has object or object_changes columns of type text, and who use the YAML serializer. People who use the JSON serializer, or those with json(b) columns, are unaffected.
  • Please see doc/pt_13_yaml_safe_load.md for details.
• #1406 - Certain Metadata keys are now forbidden, like id, and item_type. These keys are reserved by PT.
  • This change is unlikely to affect anyone. It is not expected that anyone uses these metadata keys. Most people probably don't use PT metadata at all.

Dependencies

• Drop support for Rails 5.2, which reached EoL on 2022-06-01
• Drop support for Ruby 2.6, which reached EoL on 2022-03-31
• Drop support for request_store < 1.4

Added

• None

Fixed

• #1395 - Fix incorrect Version#created_at value when using PaperTrail::RecordTrail#update_columns
• #1404 - Delay referencing ActiveRecord until after Railtie is loaded
• Where possible, methods which are not part of PaperTrail's public API have had their access changed to private. All of these methods had been clearly marked as @api private in the documentation, for years. This is not expected to be a breaking change.

13.0.0 (from changelog)

Breaking Changes

• The default serializer will now use YAML.safe_load unless ActiveRecord.use_yaml_unsafe_load. This change only affects users whose versions table has object or object_changes columns of type text, and who use the YAML serializer. People who use the JSON serializer, or those with json(b) columns, are unaffected. Please see doc/pt_13_yaml_safe_load.md for details.

Added

• None

Fixed

• None

Does any of this look wrong? Please let us know.

Commits

See the full diff on Github. The new version differs by more commits than we can show here.

↗️ request_store (indirect, 1.5.1 → 1.6.0) · Repo

Commits

See the full diff on Github. The new version differs by 23 commits:

• bump version to 1.6.0 in preparation for release
• Update minimum rake version to satisfy Dependabot
• Remove old rubies from CI
• Merge pull request #92 from m-nakamura145/update-ci-matrix
• Add Ruby 3.3 to CI matrix
• Merge pull request #90 from ioquatix/fiber-storage
• Fix test dependency on `Thread.current`.
• Use fiber storage if available.
• Merge pull request #81 from olleolleolle/patch-1
• Drop unused directive 'executables' from gemspec
• Merge pull request #87 from gogainda/patch-2
• Merge branch 'steveklabnik:master' into patch-2
• Merge pull request #83 from olleolleolle/patch-2
• Merge pull request #89 from orien/ruby3.2
• Constrain version of Rake used in dev based on the running Ruby version
• CI: add Ruby 3.2 to the test matrix
• Update ci.yml
• Add CI build status badge to README: [ci skip]
• Merge pull request #82 from olleolleolle/patch-2
• Drop TravisCI badge from README
• Drop unused TravisCI configuration
• CI: Add ruby-head, jruby-head
• Add GitHub Actions CI definition

---

Depfu will automatically keep this PR conflict-free, as long as you don't add any commits to this branch yourself. You can also trigger a rebase manually by commenting with @depfu rebase.

All Depfu comment commands

@​depfu rebase

Rebases against your default branch and redoes this update

@​depfu recreate

Recreates this PR, overwriting any edits that you've made to it

@​depfu merge

Merges this PR once your tests are passing and conflicts are resolved

@​depfu cancel merge

Cancels automatic merging of this PR

@​depfu close

Closes this PR and deletes the branch

@​depfu reopen

Restores the branch and reopens this PR (if it's closed)

@​depfu pause

Ignores all future updates for this dependency and closes this PR

@​depfu pause [minor|major]

Ignores all future minor/major updates for this dependency and closes this PR

@​depfu resume

Future versions of this dependency will create PRs again (leaves this PR as is)