Hi, it’s zzak. Let’s explore this week’s changes in the Rails codebase.

Reduce the frequency of Dependabot updates in new projects.
This changes frequency of Dependabot updates from daily to weekly for freshly generated Rails apps.

Authentication generator’s SessionsController clears browser cache at logout
On logout the SessionsController#destroy action sets a “Clear-Site-Data” header to clear the browser cache. This is in order to prevent possible data leakage after logout via the browser’s “back/forward cache”.

Fix inconsistency between “delete_all” & “update_all” allowed methods
After this change, trying to call update_all with distinct or a CTE (with, with_recursive) is deprecated and will raise an error in Rails 8.2. This is consistent with the behavior of delete_all.

Enable “exists?” queries to be retryable
Previously, #exists? queries could never be retryable because "1 AS one" was passed as a String, which was marked as non-retryable.

Fix incorrect expiration time in ActiveSupport::Cache::Store#fetch
This PR fixes a bug when fetching an expired entry from the cache store, due to the expiration time not being handled correctly.

Don’t include “script” or “style” content to node plain-text conversion
This is a reminder that Action Text content should not be rendered in browsers without additional sanitization first.

Flash.add_flash_types should define helpers as private
This PR restores the pre-Rails 7.0 behavior where notice and alert actions could be defined on a controller, due to the flash helper methods.

Eliminate allocations on Model.respond_to? calls
In an effort to make instantiating models cheaper (for example doing Post.new), respond_to? was optimized to avoid unnecessary allocations during initialization (as well as other queries).

Delegate Active Storage’s Filename “to_str” to “to_s”
This change allows string equality (String#==) to work with ActiveStorage::Filename objects.

Ensure that Active Storage “analyzers” config doesn’t contain nil
You may want to disable Active Storage’s variant processor by setting "config.active_storage.variant_processor = nil", but this would cause other issues when booting Rails before this patch.

You can view the whole list of changes here. We had 31 contributors to the Rails codebase this past week!

Until next time!