{"push_id":997119962,"size":54,"distinct_size":54,"ref":"refs/heads/master","head":"2280c84ffe278fd29217a7997db3739b38dbcc92","before":"6b3176170a35cbd20c8599c31fc5cbe46e02562c","commits":[{"sha":"cd3d89f99422af77fdc96bbd978e40685cb30179","author":{"email":"b1c1d8736f20db3fb6c1c66bb1455ed43909f0d8@jonathanmoss.me","name":"Jon Moss"},"message":"Add `issue_template.md` and `pull_request_template.md`\n\nThis appears to be a new feature of GitHub.\n\nSee these links for more details:\n- https://github.com/dear-github/dear-github/issues/125\n- https://github.com/owncloud/core/issues/new\n- https://github.com/blog/2111-issue-and-pull-request-templates\n\n[ci skip]","distinct":true,"url":"https://api.github.com/repos/akshaymohite/rails/commits/cd3d89f99422af77fdc96bbd978e40685cb30179"},{"sha":"9614f9317fef91ab74aa259f5e7dabb4c9a1d874","author":{"email":"16356534c1589fe78070f5640bedf8614007153c@gmail.com","name":"yuuji.yaginuma"},"message":"correctly check `ApplicationRecord` is exist in moutable engine\n\nFollow up to 1813b29fc7632959800252f36e4b2e6ed4ac7266","distinct":true,"url":"https://api.github.com/repos/akshaymohite/rails/commits/9614f9317fef91ab74aa259f5e7dabb4c9a1d874"},{"sha":"6eb3a1b0587cbad20b180a9d6c7b3a5fbcc91e8b","author":{"email":"f718051dca2b65d8cc58f13363ed9b67ff94dbb3@gmail.com","name":"Egor Homakov"},"message":"HSTS without IncludeSubdomains is often useless\n\n1) Because if you forget to add Secure; to the session cookie, it will leak to http:// subdomain in some cases\r\n2) Because http:// subdomain can Cookie Bomb/cookie force main domain or be used for phishing.\r\n\r\nThat's why *by default* it must include subdomains as it's much more common scenario. Very few websites *intend* to leave their blog.app.com working over http:// while having everything else encrypted. \r\n\r\nYes, many developers forget to add subdomains=true by default, believe me :)","distinct":true,"url":"https://api.github.com/repos/akshaymohite/rails/commits/6eb3a1b0587cbad20b180a9d6c7b3a5fbcc91e8b"},{"sha":"00c4ecf38c303210ceb869cfc6d4c1f9f05b8050","author":{"email":"46912bed2c3b56d601323fb1c76bee025b5234eb@gmail.com","name":"Prathamesh Sonpatki"},"message":"New applications will be generated with ssl_options to enable HSTS with subdomains\n\n- We will reuse config.ssl_options for setting the HSTS settings.","distinct":true,"url":"https://api.github.com/repos/akshaymohite/rails/commits/00c4ecf38c303210ceb869cfc6d4c1f9f05b8050"},{"sha":"9ea8de334e6298210b96ff1ff9c02f266d79b8d2","author":{"email":"46912bed2c3b56d601323fb1c76bee025b5234eb@gmail.com","name":"Prathamesh Sonpatki"},"message":"Old applications will not get the ssl_options initializer\n\n- We will remove the initializer for old apps which are migrated to\n  Rails 5 so that they are not affected by this breaking change.","distinct":true,"url":"https://api.github.com/repos/akshaymohite/rails/commits/9ea8de334e6298210b96ff1ff9c02f266d79b8d2"},{"sha":"31cf0f5571cd845eec8ddbe190ba960d5823ffbc","author":{"email":"46912bed2c3b56d601323fb1c76bee025b5234eb@gmail.com","name":"Prathamesh Sonpatki"},"message":"Added deprecation for older apps\n\n- For old apps which are not setting any value for hsts[:subdomains],\n  a deprecation warning will be shown saying that hsts[:subdomains] will\n  be turned on by default in Rails 5.1. Currently it will be set to\n  false for backward compatibility.\n- Adjusted tests to reflect this change.","distinct":true,"url":"https://api.github.com/repos/akshaymohite/rails/commits/31cf0f5571cd845eec8ddbe190ba960d5823ffbc"},{"sha":"ddcb3eaf877300229130648eebde964c9de17274","author":{"email":"46912bed2c3b56d601323fb1c76bee025b5234eb@gmail.com","name":"Prathamesh Sonpatki"},"message":"Add CHANGELOG entry","distinct":true,"url":"https://api.github.com/repos/akshaymohite/rails/commits/ddcb3eaf877300229130648eebde964c9de17274"},{"sha":"4e92fb2097073ba788acbca00a232d07c8b14633","author":{"email":"46912bed2c3b56d601323fb1c76bee025b5234eb@gmail.com","name":"Prathamesh Sonpatki"},"message":"Update documentation and deprecation message","distinct":true,"url":"https://api.github.com/repos/akshaymohite/rails/commits/4e92fb2097073ba788acbca00a232d07c8b14633"},{"sha":"4e82346756bd504ec1ab347f447fc56faa5e006e","author":{"email":"9a6871ff766e8e680e6fb8212a29b3657759e57e@yahoo.com.tw","name":"Stan Lo"},"message":"Update config.force_ssl's documentation","distinct":true,"url":"https://api.github.com/repos/akshaymohite/rails/commits/4e82346756bd504ec1ab347f447fc56faa5e006e"},{"sha":"d0c8117ced31e43af9abb3045fd7506c24ad4219","author":{"email":"9a6871ff766e8e680e6fb8212a29b3657759e57e@yahoo.com.tw","name":"Stan Lo"},"message":"Add config.debug_exception_response_format into configuration guide","distinct":true,"url":"https://api.github.com/repos/akshaymohite/rails/commits/d0c8117ced31e43af9abb3045fd7506c24ad4219"},{"sha":"46cb45df485d6f4d67a8e448a142bcab47fc0f2a","author":{"email":"daab9349e7897953586c7278844811677e111b79@gmail.com","name":"Kasper Timm Hansen"},"message":"Additional review of 6b31761.\n\n* Fixes typos in error message and release notes.\n* Removes unused template test file.","distinct":true,"url":"https://api.github.com/repos/akshaymohite/rails/commits/46cb45df485d6f4d67a8e448a142bcab47fc0f2a"},{"sha":"2fda4e0874a97a76107ab9e88305169f2c625933","author":{"email":"378ef3e7f140926a1b45e233cf8a3a5b6f1bde10@users.noreply.github.com","name":"Andrew White"},"message":"Merge pull request #23874 from st0012/update-documents\n\n[ci skip] Update configuration guide","distinct":true,"url":"https://api.github.com/repos/akshaymohite/rails/commits/2fda4e0874a97a76107ab9e88305169f2c625933"},{"sha":"0379da6abced76835368e7db5fe853571b055391","author":{"email":"ea442e001a5636eeee710090794bb7eb2e3459c8@redhat.com","name":"Joe Rafaniello"},"message":"Fix uniqueness validation with an after_create hook.\n\nrecord.id_was is nil in after_create/after_save, so we should use\nid in these cases.\n\nWhile this logic feels incomplete, the existing update_record uses the same\nlogic:\nhttps://github.com/rails/rails/blob/2fda4e0874a97a76107ab9e88305169f2c625933/activerecord/lib/active_record/relation.rb#L83\n\nThis logic was originally added for a similar problem:\nupdates not working with after_create hook.\n\nSee: 482f8c15b1d699c95bfbc3d836f674a09c0d9031\n\nFollowup to #23581\nFixes #23844","distinct":true,"url":"https://api.github.com/repos/akshaymohite/rails/commits/0379da6abced76835368e7db5fe853571b055391"},{"sha":"d57fa1fbf3a11da1d326eb36191b754c0738e14e","author":{"email":"ebd73beb044ee5759f027a56464cea105bbc60a7@gmail.com","name":"claudiob"},"message":"Doc: update routes guides for Rails 5\n\n[ci skip]","distinct":true,"url":"https://api.github.com/repos/akshaymohite/rails/commits/d57fa1fbf3a11da1d326eb36191b754c0738e14e"},{"sha":"569dc54a151175c22f5dcff3811dbaeecfbfd12d","author":{"email":"ebd73beb044ee5759f027a56464cea105bbc60a7@gmail.com","name":"claudiob"},"message":"Doc: update AC::Parameters guides for Rails 5\n\n[ci skip]","distinct":true,"url":"https://api.github.com/repos/akshaymohite/rails/commits/569dc54a151175c22f5dcff3811dbaeecfbfd12d"},{"sha":"1f8ce32edcce503490aa873dd49788c6fd79c135","author":{"email":"ebd73beb044ee5759f027a56464cea105bbc60a7@users.noreply.github.com","name":"Claudio B"},"message":"Merge pull request #23889 from claudiob/fix-getting-started\n\nDoc: update guides for Rails 5","distinct":true,"url":"https://api.github.com/repos/akshaymohite/rails/commits/1f8ce32edcce503490aa873dd49788c6fd79c135"},{"sha":"6216a092ccfe6422f113db906a52fe8ffdafdbe6","author":{"email":"f80d0ca101e967b50b730ddf8e8aca0de85e8df6@trebex.net","name":"Matthew Draper"},"message":"Revert \"Update Session to utilize indiffernt access\"\n\nThis reverts commit 45a75a3fcc96b22954caf69be2df4e302b134d7a.\n\nHWIAs are better than silently deeply-stringified hashes... but that's a\nreaction to a shortcoming of one particular session store: we should not\nbreak the basic behaviour of other, more featureful, session stores in\nthe process.\n\nFixes #23884","distinct":true,"url":"https://api.github.com/repos/akshaymohite/rails/commits/6216a092ccfe6422f113db906a52fe8ffdafdbe6"},{"sha":"ee5b621e2f8fde380ea4bc75b0b9d6f98499f511","author":{"email":"f80d0ca101e967b50b730ddf8e8aca0de85e8df6@trebex.net","name":"Matthew Draper"},"message":"Revert \"Merge pull request #20851 from tomprats/indifferent-sessions\"\n\nThis reverts commit 22db455dbe9c26fe6d723cac0758705d9943ea4b, reversing\nchanges made to 40be61dfda1e04c3f306022a40370862e3a2ce39.\n\nThis finishes off what I meant to do in 6216a092ccfe6422f113db906a52fe8ffdafdbe6.","distinct":true,"url":"https://api.github.com/repos/akshaymohite/rails/commits/ee5b621e2f8fde380ea4bc75b0b9d6f98499f511"},{"sha":"fcec068bf913d74146703a02388608aa54d4f3a8","author":{"email":"f80d0ca101e967b50b730ddf8e8aca0de85e8df6@trebex.net","name":"Matthew Draper"},"message":"Merge pull request #23887 from jrafanie/fix_uniqueness_validation_on_after_create\n\nFix uniqueness validation with an after_create hook.","distinct":true,"url":"https://api.github.com/repos/akshaymohite/rails/commits/fcec068bf913d74146703a02388608aa54d4f3a8"},{"sha":"1cc96c2e5fe08bc69bd768febbb5e3150343aa30","author":{"email":"84c66fc058fe65d1bb08ca33b21bfe0fa5cb8f17@gmail.com","name":"Rafael França"},"message":"Merge pull request #23846 from y-yagi/correctly_check_ApplicationRecord_in_mountable_engine\n\ncorrectly check `ApplicationRecord` is exist in moutable engine","distinct":true,"url":"https://api.github.com/repos/akshaymohite/rails/commits/1cc96c2e5fe08bc69bd768febbb5e3150343aa30"}]}