Merge branch 'main' into ca-mongoid

Author: carlosantoniodasilva

.github/workflows/test.yml

@@ -9,9 +9,11 @@ jobs:
           - Gemfile
           - gemfiles/Gemfile-rails-main
           - gemfiles/Gemfile-rails-7-0
-          - gemfiles/Gemfile-rails-6-1
-          - gemfiles/Gemfile-rails-6-0
+          - gemfiles/Gemfile-rails-7-1
+          - gemfiles/Gemfile-rails-7-2
+          - gemfiles/Gemfile-rails-8-0
         ruby:
+          - '3.4'
           - '3.3'
           - '3.2'
           - '3.1'
@@ -21,14 +23,28 @@ jobs:
           - DEVISE_ORM=active_record
           - DEVISE_ORM=mongoid
         exclude:
+          - gemfile: Gemfile
+            ruby: '3.1'
+          - gemfile: Gemfile
+            ruby: '3.0'
+          - gemfile: Gemfile
+            ruby: '2.7'
+          - gemfile: gemfiles/Gemfile-rails-main
+            ruby: '3.1'
           - gemfile: gemfiles/Gemfile-rails-main
-            ruby: '2.7' # Rails > 7.1 supports Ruby >= 3.1
+            ruby: '3.0'
           - gemfile: gemfiles/Gemfile-rails-main
-            ruby: '3.0' # Rails > 7.1 supports Ruby >= 3.1
-          - gemfile: gemfiles/Gemfile-rails-6-0
-            ruby: '3.2'
-          - gemfile: gemfiles/Gemfile-rails-6-0
+            ruby: '2.7'
+          - gemfile: gemfiles/Gemfile-rails-8-0
             ruby: '3.1'
+          - gemfile: gemfiles/Gemfile-rails-8-0
+            ruby: '3.0'
+          - gemfile: gemfiles/Gemfile-rails-8-0
+            ruby: '2.7'
+          - gemfile: gemfiles/Gemfile-rails-7-2
+            ruby: '3.0'
+          - gemfile: gemfiles/Gemfile-rails-7-2
+            ruby: '2.7'
     runs-on: ubuntu-latest
     env: # $BUNDLE_GEMFILE must be set at the job level, so it is set for all steps
       BUNDLE_GEMFILE: ${{ matrix.gemfile }}
@@ -38,6 +54,6 @@ jobs:
         with:
           ruby-version: ${{ matrix.ruby }}
           bundler-cache: true # runs bundle install and caches installed gems automatically
-      - uses: supercharge/mongodb-github-action@1.10.0
+      - uses: supercharge/mongodb-github-action@1.11.0
         if: ${{ matrix.env == 'DEVISE_ORM=mongoid' }}
       - run: bundle exec rake

CHANGELOG.md

@@ -2,11 +2,39 @@
 
 * breaking changes
   * Drop support to Ruby < 2.7
-  * Drop support to Rails < 6.0
+  * Drop support to Rails < 7.0
+  * Remove `SecretKeyFinder` and use `app.secret_key_base` as the default secret key for `Devise.secret_key` if a custom `Devise.secret_key` is not provided.
+
+    This is potentially a breaking change because Devise previously used the following order to find a secret key:
+
+    ```
+    app.credentials.secret_key_base > app.secrets.secret_key_base > application.config.secret_key_base > application.secret_key_base
+    ```
+
+    Now, it always uses `application.secret_key_base`. Make sure you're using the same secret key after the upgrade; otherwise, previously generated tokens for `recoverable`, `lockable`, and `confirmable` will be invalid.
+    https://github.com/heartcombo/devise/pull/5645
 
 * enhancements
   * Removed deprecations warning output for `Devise::Models::Authenticatable::BLACKLIST_FOR_SERIALIZATION` (@soartec-lab)
-  * Reenable Mongoid test suite across all Rails 6+ versions, to ensure we continue supporting it. Changes to dirty tracking to support Mongoid 8.0+. [#5568](https://github.com/heartcombo/devise/pull/5568)
+  * Add Rails 8 support.
+    - Routes are lazy-loaded by default in test and development environments now so Devise loads them before `Devise.mappings` call.
+  * Add Ruby 3.4 support.
+  * Password length validator is changed from
+
+    ```
+    validates_length_of :password, within: password_length, allow_blank: true`
+    ```
+
+    to
+
+    ```
+    validates_length_of :password, minimum: proc { password_length.min }, maximum: proc { password_length.max }, allow_blank: true
+    ```
+
+    so it's possible to override `password_length` at runtime. (@manojmj92)
+  * Reenable Mongoid test suite across all Rails 7+ versions, to ensure we continue supporting it. Changes to dirty tracking to support Mongoid 8.0+. [#5568](https://github.com/heartcombo/devise/pull/5568)
+* bug fixes
+  * Make `Devise` work without `ActionMailer` when `Zeitwerk` autoloader is used.
 
 Please check [4-stable](https://github.com/heartcombo/devise/blob/4-stable/CHANGELOG.md)
 for previous changes.

CODE_OF_CONDUCT.md

@@ -17,6 +17,6 @@ Project maintainers have the right and responsibility to remove, edit, or reject
 
 This code of conduct applies both within project spaces and in public spaces when an individual is representing the project or its community.
 
-Instances of abusive, harassing, or otherwise unacceptable behavior may be reported by sending an email to [heartcombo@googlegroups.com](heartcombo@googlegroups.com) or contacting one or more of the project maintainers.
+Instances of abusive, harassing, or otherwise unacceptable behavior may be reported by sending an email to [heartcombo.oss@gmail.com](heartcombo.oss@gmail.com) or contacting one or more of the project maintainers.
 
 This Code of Conduct is adapted from the [Contributor Covenant](http://contributor-covenant.org), version 1.2.0, available at [http://contributor-covenant.org/version/1/2/0/](http://contributor-covenant.org/version/1/2/0/)

CONTRIBUTING.md

@@ -30,7 +30,7 @@ the project wiki, documentation and source code first, or try to ask your questi
 on [Stack Overflow](http://stackoverflow.com/questions/tagged/devise).
 
 **If you find a security bug, do not report it through GitHub. Please send an
-e-mail to [heartcombo@googlegroups.com](mailto:heartcombo@googlegroups.com)
+e-mail to [heartcombo.oss@gmail.com](mailto:heartcombo.oss@gmail.com)
 instead.**
 
 ## Sending Pull Requests

Gemfile

@@ -4,28 +4,28 @@ source "https://rubygems.org"
 
 gemspec
 
-gem "rails", "~> 7.1.0"
 gem "omniauth"
 gem "omniauth-oauth2"
+gem "rails", "~> 8.1.0.rc1"
 gem "rdoc"
 
 gem "rails-controller-testing", github: "rails/rails-controller-testing"
 
 gem "responders", "~> 3.1"
 
 group :test do
+  gem "mocha", "~> 2.1", require: false
   gem "omniauth-facebook"
   gem "omniauth-openid"
   gem "rexml"
   gem "timecop"
-  gem "webrat", "0.7.3", require: false
-  gem "mocha", "~> 2.1", require: false
+  gem "webrat"
 end
 
 platforms :ruby do
   gem "sqlite3"
 end
 
 group :mongoid do
-  gem "mongoid", "~> 8.1"
+  gem "mongoid", "~> 9.0"
 end