Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Upgrade application to Rails 6.0 #2245

Merged
merged 18 commits into from
Aug 24, 2020
Merged

Upgrade application to Rails 6.0 #2245

merged 18 commits into from
Aug 24, 2020

Conversation

pixeltrix
Copy link
Contributor

No description provided.

@bevanloon bevanloon temporarily deployed to govuk-static-upgrade-to-a9oidd July 27, 2020 18:33 Inactive
@bevanloon bevanloon temporarily deployed to govuk-static-upgrade-to-a9oidd July 27, 2020 18:45 Inactive
Use the Gemfile.lock to manage the versions instead which should make
it easier to upgrade as it allows bundler a wider set of versions to
resolve the dependencies.

Keep the rails constraint so that the current version can be identified.
Remove unused gems and helpers from test base class.
The Rakefile is loaded automatically by the rake command and
is not designed to be executed directly.
Rails 4.0 and later disable rack-cache by default.
Note that the specs can't run in random order due to cookies being
carried over between specs.
The bug with subresource integrity BOMs was fixed in Firefox 52.
This is now required in the Gemfile from commit 2a5c239.
Individual changes reviewed to ensure that application behaviour
is maintained and any obsolete configuration options are removed.
Otherwise the Rails route mapper will raise an error on a missing
:controller key in the route definition.
Using a sass css compressor causes a scss file to be processed twice
(once to build, once to compress) which breaks the usage of "unquote"
to use CSS that has same function names as SCSS such as max.
Calling `render file:` with a relative path has been deprecated so use
`render template:` with the same path which finds the layout anyway.
Rails 6.0 adds a host authentication middleware that limits access by
default to 0.0.0.0/0, ::/0 and localhost. This commit adds the dev.gov.uk
hosts for the application to that list. There's no need to add the hosts
in production since the middleware is primarily to prevent DNS rebinding
attacks against a Rails application running locally.
Once the app is configured to load the latest defaults there is no
need for the new defaults initializer as it only serves as a guide
whilst upgrading the application.
The Rails secrets feature has been deprecated and will be removed in
an upcoming release. Rails 6.0 will generate a secret_key_base file
in the tmp directory in development and test environments and use the
SECRET_KEY_BASE environment variable in production.
Inline with the suggestion in alphagov/govuk-rfcs#126 update the
remaining minor dependencies when doing a framework upgrade.
@pixeltrix pixeltrix merged commit 44930a6 into master Aug 24, 2020
@pixeltrix pixeltrix deleted the upgrade-to-rails-6 branch August 24, 2020 08:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants