{"push_id":956643229,"size":116,"distinct_size":116,"ref":"refs/heads/database_comments","head":"dbdcc54b763b0d9f62e23d981731d406619a0a89","before":"51857c396c8339c711476e35564c81315e7da9ec","commits":[{"sha":"55cba0dd45aa8cc57d4f2a2e5cf3d662ef4a091a","author":{"email":"93935de911735bedec3a24b7de4012b25050e9a2@gmail.com","name":"Aditya Prakash"},"message":"Improvement in ActiveRecord::Persistence doc [ci skip]","distinct":true,"url":"https://api.github.com/repos/Envek/rails/commits/55cba0dd45aa8cc57d4f2a2e5cf3d662ef4a091a"},{"sha":"837e40dcac023319a0bfc38240761d4352b73b99","author":{"email":"7c01f30b2c4fe570dad62a4b3813501624fbdd3c@gmail.com","name":"Dave Gynn"},"message":"restore ability to pass extra options to cache stores\n\nThe `cache` helper methods should pass any extra options\nto the cache store. For example :expires_in would be a\nvalid option if memcache was the cache store. The change\nin commit da16745 broke the ability to pass any options\nother than :skip_digest and :virtual_path. This PR\nrestores that functionality and adds a test for it.","distinct":true,"url":"https://api.github.com/repos/Envek/rails/commits/837e40dcac023319a0bfc38240761d4352b73b99"},{"sha":"8897e05ea31186bfa2a05fd9658b2dc5a5d6264a","author":{"email":"a1b4a5d79a04170be8c419b6b204d1834682e890@gmail.com","name":"schneems"},"message":"[close #23009] Limit key length\n\nMysql has a weird bug where it cannot index a string column of utf8mb4 if it is over a certain character limit. To get compatibility with msql we can add a limit to the key column. 191 characters is a very long key, it seems reasonable to limit across all adapters since using a longer key wouldn't be supported in mysql.\n\nThanks to @kamipo for the original PR and the test refactoring.\n\nConversation: https://github.com/rails/rails/pull/23009#issuecomment-171416629","distinct":true,"url":"https://api.github.com/repos/Envek/rails/commits/8897e05ea31186bfa2a05fd9658b2dc5a5d6264a"},{"sha":"82dc7786297a20a7a32e6bee7884ec1d4335410e","author":{"email":"5126686fa623549768e4998503dd9df08f03b4d1@gmail.com","name":"James Coleman"},"message":"Clarify DatabaseStatements#execute docs re: memory usage.","distinct":true,"url":"https://api.github.com/repos/Envek/rails/commits/82dc7786297a20a7a32e6bee7884ec1d4335410e"},{"sha":"17e6f1507b7f2c2a883c180f4f9548445d6dfbda","author":{"email":"7bbcc45b0f8f88a262415b9271579a59b891be2e@gmail.com","name":"Aaron Patterson"},"message":"use secure string comparisons for basic auth username / password\n\nthis will avoid timing attacks against applications that use basic auth.\n\nCVE-2015-7576","distinct":true,"url":"https://api.github.com/repos/Envek/rails/commits/17e6f1507b7f2c2a883c180f4f9548445d6dfbda"},{"sha":"51313c21a63c3ed47ba20df3ad7f26a45d5bf684","author":{"email":"7bbcc45b0f8f88a262415b9271579a59b891be2e@gmail.com","name":"Aaron Patterson"},"message":"stop caching mime types globally\n\nUnknown mime types should not be cached globally.  This global cache\nleads to a memory leak and a denial of service vulnerability.\n\nCVE-2016-0751","distinct":true,"url":"https://api.github.com/repos/Envek/rails/commits/51313c21a63c3ed47ba20df3ad7f26a45d5bf684"},{"sha":"0fde6f554b75b13b0435dd70f1c3ec02bc209e0d","author":{"email":"04e27b64dd7b04ba9bd9c95fb094c9f24aaee88b@pixeltrix.co.uk","name":"Andrew White"},"message":"Don't short-circuit reject_if proc\n\nWhen updating an associated record via nested attribute hashes the\nreject_if proc could be bypassed if the _destroy flag was set in the\nattribute hash and allow_destroy was set to false.\n\nThe fix is to only short-circuit if the _destroy flag is set and the\noption allow_destroy is set to true. It also fixes an issue where\na new record wasn't created if _destroy was set and the option\nallow_destroy was set to false.\n\nCVE-2015-7577","distinct":true,"url":"https://api.github.com/repos/Envek/rails/commits/0fde6f554b75b13b0435dd70f1c3ec02bc209e0d"},{"sha":"b7758b40fc035a47f6843158155606d455314c42","author":{"email":"7bbcc45b0f8f88a262415b9271579a59b891be2e@gmail.com","name":"Aaron Patterson"},"message":"allow :file to be outside rails root, but anything else must be inside the rails view directory\n\nCVE-2016-0752","distinct":true,"url":"https://api.github.com/repos/Envek/rails/commits/b7758b40fc035a47f6843158155606d455314c42"},{"sha":"4642d68d8021893c69bfd16ed6e926ae03a6d777","author":{"email":"7bbcc45b0f8f88a262415b9271579a59b891be2e@gmail.com","name":"Aaron Patterson"},"message":"Eliminate instance level writers for class accessors\n\nInstance level writers can have an impact on how the Active Model /\nRecord objects are saved.  Specifically, they can be used to bypass\nvalidations.  This is a problem if mass assignment protection is\ndisabled and specific attributes are passed to the constructor.\n\nCVE-2016-0753","distinct":true,"url":"https://api.github.com/repos/Envek/rails/commits/4642d68d8021893c69bfd16ed6e926ae03a6d777"},{"sha":"6026b37ffc1a9b5d3ea1c1c7812a3950495d7877","author":{"email":"7d8f52fe2a5e13656d86fcf6ac2c742ec11f40b8@gmail.com","name":"Vipul A M"},"message":"Pass 2 over testing guide\n- Grammar fixes\n- Wordsmitting\n- Fixed wrong statement about association usage in fixtures\n- Changed association name from 'one' to 'first' instead\n- More consistent usage of we/our\n- Mentions assert_select is below, not already covered in Integration test.\n\n[ci skip]","distinct":true,"url":"https://api.github.com/repos/Envek/rails/commits/6026b37ffc1a9b5d3ea1c1c7812a3950495d7877"},{"sha":"9433dde5d1ff33731e5a928166c1b9192bca92ae","author":{"email":"b1c1d8736f20db3fb6c1c66bb1455ed43909f0d8@jonathanmoss.me","name":"Jon Moss"},"message":"Remove empty lines in Rails development logger\n\nThis is causing bugs like #23215 to occur, due to the extra spaces being\ninserted. Also, this is fixed upstream in the upcoming release of\nSprockets 4.","distinct":true,"url":"https://api.github.com/repos/Envek/rails/commits/9433dde5d1ff33731e5a928166c1b9192bca92ae"},{"sha":"ceea3811e2631a16455a40ca5d865a17bee01592","author":{"email":"acb0485d844224f71261a737461d16e1584df021@users.noreply.github.com","name":"Jon Moss"},"message":"Merge pull request #23208 from vipulnsward/testing-pass-2\n\nPass 2 over testing guide","distinct":true,"url":"https://api.github.com/repos/Envek/rails/commits/ceea3811e2631a16455a40ca5d865a17bee01592"},{"sha":"4962b44755722eec4a18e52b96ee8fb557ca351d","author":{"email":"a1b4a5d79a04170be8c419b6b204d1834682e890@gmail.com","name":"Richard Schneeman"},"message":"Merge pull request #23161 from schneems/schneems/fix-mysql-internalmetadata\n\n[close #23009] Limit key length","distinct":true,"url":"https://api.github.com/repos/Envek/rails/commits/4962b44755722eec4a18e52b96ee8fb557ca351d"},{"sha":"c7281b37ac35dd5522b1333a5c89bb399e566b93","author":{"email":"7d8f52fe2a5e13656d86fcf6ac2c742ec11f40b8@gmail.com","name":"Vipul A M"},"message":"Fix nodoc to internal class error document some of them\n\n[ci skip]\nFixes #20808\n\n[Vipul A M & Julio Lopez]","distinct":true,"url":"https://api.github.com/repos/Envek/rails/commits/c7281b37ac35dd5522b1333a5c89bb399e566b93"},{"sha":"14e92bac1a4c199e5e8936c6bdc64420293ea6d1","author":{"email":"acb0485d844224f71261a737461d16e1584df021@users.noreply.github.com","name":"Jon Moss"},"message":"Merge pull request #23226 from vipulnsward/20808-fix\n\nFix nodoc to internal class error document some of them","distinct":true,"url":"https://api.github.com/repos/Envek/rails/commits/14e92bac1a4c199e5e8936c6bdc64420293ea6d1"},{"sha":"23c36725a0fa097cbfde0a3661fa21e9470d0a48","author":{"email":"7bbcc45b0f8f88a262415b9271579a59b891be2e@gmail.com","name":"Aaron Patterson"},"message":"fix version update task to deal with .beta1.1","distinct":true,"url":"https://api.github.com/repos/Envek/rails/commits/23c36725a0fa097cbfde0a3661fa21e9470d0a48"},{"sha":"908c011395cc9e3ea1bb195f9d1bd30a9d9df98f","author":{"email":"7bbcc45b0f8f88a262415b9271579a59b891be2e@gmail.com","name":"Aaron Patterson"},"message":"bumping version","distinct":true,"url":"https://api.github.com/repos/Envek/rails/commits/908c011395cc9e3ea1bb195f9d1bd30a9d9df98f"},{"sha":"6dfab475ca230dfcad7a603483431c8e7a8f908e","author":{"email":"7bbcc45b0f8f88a262415b9271579a59b891be2e@gmail.com","name":"Aaron Patterson"},"message":"Merge branch '5-0-beta-sec'\n\n* 5-0-beta-sec:\n  bumping version\n  fix version update task to deal with .beta1.1\n  Eliminate instance level writers for class accessors\n  allow :file to be outside rails root, but anything else must be inside the rails view directory\n  Don't short-circuit reject_if proc\n  stop caching mime types globally\n  use secure string comparisons for basic auth username / password","distinct":true,"url":"https://api.github.com/repos/Envek/rails/commits/6dfab475ca230dfcad7a603483431c8e7a8f908e"},{"sha":"38492590cf30bae0f4817c610bc0237ccdea7c1a","author":{"email":"4df7f3dad182da66af235a1249daf95d26b3dee6@gmail.com","name":"Genadi Samokovarov"},"message":"Introduce new welcome page for new projects\n\nAs requested by David in 23233.","distinct":true,"url":"https://api.github.com/repos/Envek/rails/commits/38492590cf30bae0f4817c610bc0237ccdea7c1a"},{"sha":"943bb6d7acb7ab1c9a6ac32ddad604c52356748e","author":{"email":"bca6f4261a19f75277fe4325de3272d15492eb61@gmail.com","name":"Ryuta Kamizono"},"message":"Update `Gemfile.lock`","distinct":true,"url":"https://api.github.com/repos/Envek/rails/commits/943bb6d7acb7ab1c9a6ac32ddad604c52356748e"}]}