Recent Releases of https://github.com/carrierwaveuploader/carrierwave
https://github.com/carrierwaveuploader/carrierwave - 3.1.2
Fixed
- Fix failing to remove existing files on updating by
#remove_#{column}=,##{column}_cache=, and#remote_#{column}_url=(@mshibuya 7b2ce50, #2778, #2779)
- Ruby
Published by mshibuya 11 months ago
https://github.com/carrierwaveuploader/carrierwave - 3.1.1
Fixed
- Stop calling #mb_chars, as it is no longer necessary (@chaadow #2773)
- Fix to raise error when imagemagick is missing on Alpine >= 3.19 (@danwilliams-fl #2772)
- Fix #dup with custom serialisation (@nassim-platogo #2771)
- Fix SanitizedFile#read to behave in the same way with IO#read with arguments (@mshibuya 9eace1c, #2770)
- Ruby
Published by mshibuya about 1 year ago
https://github.com/carrierwaveuploader/carrierwave - 3.1.0
Added
- Support for AWS S3 FIPS endpoints (@matt-domsch-sp #2763, 04bfab3, #2762)
- Add CarrierWave::Storage::Fog::File#empty? (@mshibuya 2d1af56, #1926)
- Add support for the
cropprocessing method (@clickworkorange #2721) - Add global
skip_ssrf_protectionconfiguration (@rajyan #2696, #2695)
Changed
- Show warning when conditionals are used with :convert (@mshibuya fb287f3, #2723)
- Rename #version_exists? to #version_active?, to reduce confusion (@mshibuya 21ca90a, #1926)
- Show warning if #filename is safeguarded as in the pre-3.x style (@mshibuya #2718, #2708)
Fixed
- Fix incompatibility with MiniMagick >= 5.0 (@mshibuya a60d8d8, #2761)
- Fix incompatibility with uri gem >= 1.0 (@ollym #2760, #2759)
- Clear download errors on reassigning remote urls (@mshibuya bb8c6e1, #2725)
- Fix version names starting with a non-alphabet character lead to NameError (@r7kamura #2748, #2722)
- Fix Rails 7.2 incompatibility due to incorrect use of ActiveSupport::Deprecation (@mshibuya b25477d, 8761240, #2751)
- Fix assigning a file with the same name not marking the column as changed (@mshibuya 47f1737, #2719)
- Fix content type magic detection for files packaged in .zip (@dzhikvas #2705, #2704)
- Ruby
Published by mshibuya about 1 year ago
https://github.com/carrierwaveuploader/carrierwave - 3.1.0.rc
Added
- Support for AWS S3 FIPS endpoints (@matt-domsch-sp #2763, 04bfab3, #2762)
- Add CarrierWave::Storage::Fog::File#empty? (@mshibuya 2d1af56, #1926)
Changed
- Show warning when conditionals are used with :convert (@mshibuya fb287f3, #2723)
- Rename #version_exists? to #version_active?, to reduce confusion (@mshibuya 21ca90a, #1926)
Fixed
- Fix incompatibility with MiniMagick >= 5.0 (@mshibuya a60d8d8, #2761)
- Fix incompatibility with uri gem >= 1.0 (@ollym #2760, #2759)
- Clear download errors on reassigning remote urls (@mshibuya bb8c6e1, #2725)
- Ruby
Published by mshibuya about 1 year ago
https://github.com/carrierwaveuploader/carrierwave - 3.1.0.beta
Added
- Add support for the
cropprocessing method (@clickworkorange #2721) - Add global
skip_ssrf_protectionconfiguration (@rajyan #2696, #2695)
Changed
Fixed
- Fix version names starting with a non-alphabet character lead to NameError (@r7kamura #2748, #2722)
- Fix Rails 7.2 incompatibility due to incorrect use of ActiveSupport::Deprecation (@mshibuya b25477d, 8761240, #2751)
- Fix assigning a file with the same name not marking the column as changed (@mshibuya 47f1737, #2719)
- Fix content type magic detection for files packaged in .zip (@dzhikvas #2705, #2704)
- Ruby
Published by mshibuya over 1 year ago
https://github.com/carrierwaveuploader/carrierwave - 3.0.7
Security
- Fix Content-Type allowlist bypass vulnerability remained (@mshibuya 00676e2, GHSA-vfmv-jfc5-pjjw)
- Ruby
Published by mshibuya almost 2 years ago
https://github.com/carrierwaveuploader/carrierwave - 2.2.6
Security
- Fix Content-Type allowlist bypass vulnerability remained (@mshibuya 4317871, GHSA-vfmv-jfc5-pjjw)
- Ruby
Published by mshibuya almost 2 years ago
https://github.com/carrierwaveuploader/carrierwave - 3.0.6
Fixed
- Fix #derived_versions and #active_sibling_versions returning an Array where Hash is expected (@mshibuya 46e4f20)
- Fix incompatibility with Marcel 1.0.3 (@schinery #2728, #2729)
- Fix assigning a file with the same name not marking the column as changed (@mshibuya 4c65b39, #2719)
- Fix failing to remove files with ActiveRecord 7.1 after_commit order change enabled (@mshibuya 63113e9, #2713)
- Ruby
Published by mshibuya almost 2 years ago
https://github.com/carrierwaveuploader/carrierwave - 2.2.5
Security
- Fix Content-Type allowlist bypass vulnerability, possibly leading to XSS (@mshibuya 39b282d, GHSA-gxhx-g4fq-49hj)
- Ruby
Published by mshibuya almost 2 years ago
https://github.com/carrierwaveuploader/carrierwave - 3.0.5
Fixed
- Remove unnecessary if clause within #filename left in the uploader template (@rajyan #2711)
- Ruby
Published by mshibuya almost 2 years ago
https://github.com/carrierwaveuploader/carrierwave - 3.0.4
Fixed
- Fix model's dirty state remaining after update (@rajyan #2707, #2702)
- Fix #dup modifying the original object (@rajyan #2690, #2706, #2689, #2700)
- Fix #dup not respecting the :mount_on option, causing MissingAttributeError (@marsz #2691)
- Ruby
Published by mshibuya over 2 years ago
https://github.com/carrierwaveuploader/carrierwave - 1.3.4
Fixed
- Fix incompatibility with RMagick >= 3 (@marcogregorius #2699)
- Ruby
Published by mshibuya over 2 years ago
https://github.com/carrierwaveuploader/carrierwave - 3.0.2
Fixed
- Ruby
Published by mshibuya over 2 years ago
https://github.com/carrierwaveuploader/carrierwave - 3.0.1
Fixed
- Fix not respecting the parent's #enable_processing value after reading its own (@mshibuya 2df0f53, #2676)
- Fix NoMethodError when a record is rolled back (@y-yagi #2674, #2675)
- Fix filename suffix being removed due to unnecessary deduplication (@mshibuya d68a111, #2672)
- Fix #dup causing unintended name deduplication of copied files (@mshibuya b732acd, #2670)
- Fix initialization failing when active_support/core_ext is not loaded yet (@mshibuya 875d972)
- Ruby
Published by mshibuya over 2 years ago
https://github.com/carrierwaveuploader/carrierwave - 3.0.0
Added
- Support adding suffix to filename on store when path collides with the existing ones (@mshibuya 07a5632, #1855)
- Add image dimension validation (@TsubasaYoshida #2592, 3b1f8b4)
- Provide validation error details via ActiveModel::Errors#details (@mshibuya 9013999, #2150)
- Support clearing #remote_urls by assigning nil (@mshibuya 8307f93, #2067)
- Support configuration of download retry wait time (@tricknotes #2646)
- Support for ActiveRecord::Base#dup (@mshibuya, @BrianHawley 19b33b8, #2645, #1962)
- Add CarrierWave::Storage::Fog::File#to_file for interface consistency with SanitizedFile (@mshibuya 68ce83a, #1960)
- Allow SanitizedFile to accept read with an optional length and output_buffer arguments (@mshibuya 9096459, #1959)
- Add basename and fix extension value for fog file (@leductienttkt #2587)
- Allow uploaders to accept unless conditions (@Vpatel1093 #2588)
- Add retry option to download from remote url (@tashirosota #2577)
Changed
- Stop relying on ActiveModel::Dirty change tracking for removal of unnecessary files (@mshibuya aac25c1)
- Create versions lazily to reflect subclass configurations properly (@mshibuya 1531a67, #1957, #2619)
- [BREAKING CHANGE] Use the resulting file extension on changing format by :convert (@mshibuya #2659, #2125, #2126, #2254)
- Prioritize Magic-detected content type for spoof-tolerance (@mshibuya a2ca59c, #2570)
- Handle assignments in an ActiveModel::Dirty-friendly way (@mshibuya #2658, #2404, #2409, #2468)
- Give a stable name to classes created by the mount_uploader block (@mshibuya f5b09b8, #2407, #2471)
- Give a stable name to version classes (@mshibuya a9de756, #2407, #2471)
- Completely migrate to allowlist/denylist terminology (@mshibuya 7a40ef7, #2536)
- Remove implementation-dependent information from an error message (@akihikodaki #2499)
- Replace mini_mime with marcel (@pjmartorell #2552)
- [BREAKING CHANGE] Change to store files on after_save hook instead of after_commit, with performing cleanup when transaction is rolled back (@fsateler #2546)
Deprecated
Removed
- Drop support for Ruby < 2.5 and Rails 5.x (@mshibuya 229594f)
- Remove support for Merb (@seuros #2566)
Fixed
- Fix CarrierWave::Storage::Fog::File#read breaking when the file doesn't exist (@mshibuya 246eb01, #2524)
- Fix to preserve the original URI as much as possible on download (@mshibuya 2f3afaf, #2631)
- Fix not to invoke content type detection on #copy_to as it's costly (@mshibuya 6c6e2dc, #2465)
- Fix calling #=~ on non-String breaking in Ruby 3.2 (@aubinlrx #2653, fd03ddd)
- Fix #clean_cache! to respect the uploader's root, not the global one (@sawasaki-narumi #2652, 3cb9992, #2113)
- Fix to use helper method #fog_provider instead of checking #fog_credentials (@joshuamsager #2660)
- Fix being unable to delete a file by assigning nil (@mshibuya f8ea354, #2654, #2613)
- Fix to raise exception when ImageMagick is not installed (@mshibuya d90c399, #2060)
- Fix to remove unnecessary floodfill in CarrierWave::RMagick#resize_and_pad (@mshibuya f34a9bd)
- Fix
#{column}_cache=fails to be stored when set as a nested attribute (@mshibuya e84d11e, #2206) - Fix to use AWS S3 regional endpoints when using virtual-hosted style (@mshibuya 8dace34, #2523)
- Fix to respect condition on processing a derived version (@mshibuya 1fecddc, #2516)
- Fix #recreate_versions! affecting the original file (@mshibuya a67bfb6, 5f00715, #2480, #2655)
- Fix
remove_#{column}!doesn't remove the file immediately (@mshibuya b719fb3, #2540) - Fix column value populated without a file when using filename override (@mshibuya f1eff6e, #2284)
- Fix boolean configurations couldn't be set to false on a per-uploader basis (@megane42 #2642)
- Fix #clean_cache! breaking with directories that doesn't conform to CarrierWave's cache_id format (@BrianHawley #2641)
- Add Workaround for 'undefined method closed?' error caused by ssrf_filter 1.1 (@mshibuya 65bf0d9, #2628)
- Fix Ruby 2.7 keyword argument warning in uploader process (@nachiket87 #2636, #2635)
- Raise DownloadError when no content is returned (@BrianHawley #2633, #2632)
- Add workaround for the API change in ssrf_filter 1.1 (@BrianHawley #2629, #2625)
- Fix Content-Type not being copied when using fog-google (@smnscp #2614)
- Fix failing to save after limiting the columns with ActiveRecord's #select (@wonda-tea-coffee #2613, #2608)
- Fix content type detection for JSON files (@smnscp #2618)
- Remove invalid byte sequences from the sanitized filename (@alexdunae #2606)
- Fix issue with copying a fog file larger than 5GB (@slonopotamus #2583)
- Stop closing StringIO-based file after CarrierWave::SanitizedFile#read (@aleksandrs-ledovskis #2571)
- Ruby
Published by mshibuya over 2 years ago
https://github.com/carrierwaveuploader/carrierwave - 3.0.0.rc
Added
- Support adding suffix to filename on store when path collides with the existing ones (@mshibuya 07a5632, #1855)
- Add image dimension validation (@TsubasaYoshida #2592, 3b1f8b4)
- Provide validation error details via ActiveModel::Errors#details (@mshibuya 9013999, #2150)
- Support clearing #remote_urls by assigning nil (@mshibuya 8307f93, #2067)
- Support configuration of download retry wait time (@tricknotes #2646)
- Support for ActiveRecord::Base#dup (@mshibuya, @BrianHawley 19b33b8, #2645, #1962)
- Add CarrierWave::Storage::Fog::File#to_file for interface consistency with SanitizedFile (@mshibuya 68ce83a, #1960)
- Allow SanitizedFile to accept read with an optional length and output_buffer arguments (@mshibuya 9096459, #1959)
Changed
- Stop relying on ActiveModel::Dirty change tracking for removal of unnecessary files (@mshibuya aac25c1)
- Create versions lazily to reflect subclass configurations properly (@mshibuya 1531a67, #1957, #2619)
- [BREAKING CHANGE] Use the resulting file extension on changing format by :convert (@mshibuya #2659, #2125, #2126, #2254)
- Prioritize Magic-detected content type for spoof-tolerance (@mshibuya a2ca59c, #2570)
- Handle assignments in an ActiveModel::Dirty-friendly way (@mshibuya #2658, #2404, #2409, #2468)
- Give a stable name to classes created by the mount_uploader block (@mshibuya f5b09b8, #2407, #2471)
- Give a stable name to version classes (@mshibuya a9de756, #2407, #2471)
Fixed
- Fix CarrierWave::Storage::Fog::File#read breaking when the file doesn't exist (@mshibuya 246eb01, #2524)
- Fix to preserve the original URI as much as possible on download (@mshibuya 2f3afaf, #2631)
- Fix not to invoke content type detection on #copy_to as it's costly (@mshibuya 6c6e2dc, #2465)
- Fix calling #=~ on non-String breaking in Ruby 3.2 (@aubinlrx #2653, fd03ddd)
- Fix #clean_cache! to respect the uploader's root, not the global one (@sawasaki-narumi #2652, 3cb9992, #2113)
- Fix to use helper method #fog_provider instead of checking #fog_credentials (@joshuamsager #2660)
- Fix being unable to delete a file by assigning nil (@mshibuya f8ea354, #2654, #2613)
- Fix to raise exception when ImageMagick is not installed (@mshibuya d90c399, #2060)
- Fix to remove unnecessary floodfill in CarrierWave::RMagick#resize_and_pad (@mshibuya f34a9bd)
- Fix
#{column}_cache=fails to be stored when set as a nested attribute (@mshibuya e84d11e, #2206) - Fix to use AWS S3 regional endpoints when using virtual-hosted style (@mshibuya 8dace34, #2523)
- Fix to respect condition on processing a derived version (@mshibuya 1fecddc, #2516)
- Fix #recreate_versions! affecting the original file (@mshibuya a67bfb6, 5f00715, #2480, #2655)
- Fix
remove_#{column}!doesn't remove the file immediately (@mshibuya b719fb3, #2540) - Fix column value populated without a file when using filename override (@mshibuya f1eff6e, #2284)
- Fix boolean configurations couldn't be set to false on a per-uploader basis (@megane42 #2642)
- Fix #clean_cache! breaking with directories that doesn't conform to CarrierWave's cache_id format (@BrianHawley #2641)
- Ruby
Published by mshibuya over 2 years ago
https://github.com/carrierwaveuploader/carrierwave - 2.2.4
Fixed
- Ruby
Published by mshibuya over 2 years ago
https://github.com/carrierwaveuploader/carrierwave - 1.3.3
Fixed
- Fix Ruby 2.7 deprecation warning on Mounter#remove? (@kaoru #2644)
- Limit ssrf_filter to < 1.1.0 due to the breaking changes at 1.1.0 (@marcogregorius #2640)
- Ruby
Published by mshibuya about 3 years ago
https://github.com/carrierwaveuploader/carrierwave - 3.0.0.beta
Added
- Add basename and fix extension value for fog file (@leductienttkt #2587)
- Allow uploaders to accept unless conditions (@Vpatel1093 #2588)
- Add retry option to download from remote url (@tashirosota #2577)
Deprecated
Changed
- Completely migrate to allowlist/denylist terminology (@mshibuya 7a40ef7, #2536)
- Remove implementation-dependent information from an error message (@akihikodaki #2499)
- Replace mini_mime with marcel (@pjmartorell #2552)
- [BREAKING CHANGE] Change to store files on after_save hook instead of after_commit, with performing cleanup when transaction is rolled back (@fsateler #2546)
Removed
- Drop support for Ruby < 2.5 and Rails 5.x (@mshibuya 229594f)
- Remove support for Merb (@seuros #2566)
Fixed
- Add Workaround for 'undefined method closed?' error caused by ssrf_filter 1.1 (@mshibuya 65bf0d9, #2628)
- Fix Ruby 2.7 keyword argument warning in uploader process (@nachiket87 #2636, #2635)
- Raise DownloadError when no content is returned (@BrianHawley #2633, #2632)
- Add workaround for the API change in ssrf_filter 1.1 (@BrianHawley #2629, #2625)
- Fix Content-Type not being copied when using fog-google (@smnscp #2614)
- Fix failing to save after limiting the columns with ActiveRecord's #select (@wonda-tea-coffee #2613, #2608)
- Fix content type detection for JSON files (@smnscp #2618)
- Remove invalid byte sequences from the sanitized filename (@alexdunae #2606)
- Fix issue with copying a fog file larger than 5GB (@slonopotamus #2583)
- Stop closing StringIO-based file after CarrierWave::SanitizedFile#read (@aleksandrs-ledovskis #2571)
- Ruby
Published by mshibuya over 3 years ago
https://github.com/carrierwaveuploader/carrierwave - 2.2.2
Fixed
- Fix
no implicit conversion of CSV into Stringerror when parsing a CSV object (@pjmartorell #2562, #2559)
- Ruby
Published by mshibuya almost 5 years ago
https://github.com/carrierwaveuploader/carrierwave - 2.2.1
Changed
Fixed
- Fog storage's #clean_cache! breaks when non-cache objects exist in cache_dir (@mshibuya 42c620a1, #2532)
- Ruby
Published by mshibuya almost 5 years ago
https://github.com/carrierwaveuploader/carrierwave - 2.0.0
Added
- Append, reorder, and remove-single-file feature for multiple file uploader(@mshibuya #2401)
- Allow retrieval of uploader index within uploaders(@mshibuya #1771)
- Add ability to customize downloaders(@mshibuya #1636)
- Support internationalized domain names for downloader(@mshibuya #2086)
- Support authenticated_url for Aliyun provider(@Nitrino #2381)
- Support passing options to authenticated_url for OpenStack provider(@stanhu #2377)
- Support authenticated_url for AzureRM provider(@Nitrino #2375)
- Allow custom expires_at when building an authenticated_url(@stephankaag #2397)
Changed
- [BREAKING CHANGE] Use the storage given by
storageconfiguration also forcache_storageunless explicitly specified(@mshibuya 629afecb) - Improve Fog initialization(@mshibuya #2395)
- [BREAKING CHANGE] Multiple file uploader now keeps successful files on update, only discarding failed ones(@mshibuya 7db9195d)
- [BREAKING CHANGE]
#remote_#{column}_urls=was changed to preserve precedent updates(@mshibuya 8f18a95b) #serializable_hashnow returns string for version keys(@schovi #2246)- Use the MimeMagic gem to inspect file headers for the mime type. This allows for mitigation of CVE-2016-3714, in combination with a
content_type_whitelist(@locriani #1934) - Replace mime-types dependency with mini_mime to save memory(@bradleypriest #2292)
- Delegate MiniMagick processing to ImageProcessing gem(@janko #2298)
- Handle ActiveRecord transaction correctly, not storing or removing files on rollback(@skosh #2209)
Deprecated
fog_providerconfiguration was deprecated and has no effect, just adding fog providers toGemfilewill load them(@mshibuya ca201ee2)CarrierWave::Uploader::Base#sanitized_filewas deprecated, use#fileinstead(@mshibuya 28190e99)
Removed
- Remove support for Rails 4.x and Ruby 2.0/2.1 (@mshibuya bada043f)
Fixed
- Fix deleting files twice when marked for removal(@mshibuya 67800fde)
- Fix
uploader.cache!loads entire contents of file into memory(@mshibuya #2136) - Do not trigger *_will_change! when file is not to be removed(@mshibuya #2323)
- Allow deleting all files for multiple file upload(@mshibuya #1990)
- Failing to retrieve unquoted filenames from Content-Disposition(@mshibuya #2364)
- Fix
#clean_cache!breaking with old format of cache id(@mshibuya aab402fb) - Fix
#exists?returning true after Fog file deletion(@mshibuya #2387) - Make
#identifieravailable for a retrieved file(@mshibuya #1581) - Make cache id generation less predictable(@mshibuya #2326)
- Uploaders not being cleared when
#reloador#initialize_dupare overridden in model(@mshibuya #2379) - Fix
#content_typereturning false, instead of nil(@longkt90 #2384) - Preserve connection cache when eagar-loading fog(@dmitryshagin #2383)
#recreate_versions!ignored:from_versionwhen versions to recreate are given(@hedgesky #1879 #1164)
- Ruby
Published by mshibuya about 5 years ago
https://github.com/carrierwaveuploader/carrierwave - 2.0.1
Fixed
- Fix
#{column}_cacheunintentionally removing files on assigning empty string(@mshibuya 22e8005e, #2412)
- Ruby
Published by mshibuya about 5 years ago
https://github.com/carrierwaveuploader/carrierwave - 2.0.2
Fixed
- Ruby
Published by mshibuya about 5 years ago
https://github.com/carrierwaveuploader/carrierwave - 2.1.0
Added
- Support authenticated_url for Blackblaze provider(@kevivmatrix #2444)
Fixed
- Fix Ruby 2.7 deprecations(@mshibuya 9a37fc9e)
- Fix S3 path-style URL for host with dots for buckets that are placed in other regions than us-east-1(@Bonias #2439)
- Make MiniMagick::Image constant absolute to prevent misleading 'uninitialized constant' error(@p8 #2437)
- Ruby
Published by mshibuya about 5 years ago
https://github.com/carrierwaveuploader/carrierwave - 1.3.2
Fixed
- Fix Ruby 2.7 deprecations(@aubinlrx #2462)
Security
- Fix Code Injection vulnerability in CarrierWave::RMagick (@mshibuya eb9346df, GHSA-cf3w-g86h-35x4)
- Fix SSRF vulnerability in the remote file download feature (@mshibuya 91714add, GHSA-fwcm-636p-68r5)
- Ruby
Published by mshibuya about 5 years ago
https://github.com/carrierwaveuploader/carrierwave - 2.1.1
Security
- Fix Code Injection vulnerability in CarrierWave::RMagick (@mshibuya 15bcf8d8, GHSA-cf3w-g86h-35x4)
- Fix SSRF vulnerability in the remote file download feature (@mshibuya e0f79e36, GHSA-fwcm-636p-68r5)
- Ruby
Published by mshibuya about 5 years ago
https://github.com/carrierwaveuploader/carrierwave - 2.2.0
Added
- libvips support through ImageProcessing::Vips and ruby-vips (@rhymes #2500, e8421978, 4ae8dc64)
- Provide alternatives to whitelist/blacklist terminology as allowlist/denylist, while old ones are still available but deprecated (@grantbdev #2442, 4c3cac75, #2491)
- Support for the latest version of RMagick (@mshibuya 88f24451)
Deprecated
#(content_type|extension)_whitelist,#(content_type|extension)_blacklistare deprecated. Use#(content_type|extension)_allowlistand#(content_type|extension)_denylistinstead (@grantbdev #2442, 4c3cac75)
Fixed
- Calculate Fog expiration taking DST into account (@mshibuya, f90e14ca, #2059)
- Set correct content type on copy of fog files (@ZuevEvgenii #2503, 6682f7ac, #2487)
- Fix fog-google support to pass acl_header for public read if fog is public (@yosiat #2525, #2426)
- Fix various URL escape issues by escaping on URI parse error only (@mshibuya 3faf7491, #2457, #2473)
- Fix instance variables
@versions_to_*not initialized warning (@mshibuya c10b82ed, #2493) - Fix
SanitizedFile#move_towrongly detects content_type based on the path before move (@mshibuya a42e1b4c, #2495) - Fix returning invalid content type on text files (@inkstak #2474, #2424)
- Skip content type and extension filters where possible (@alexpooley #2464)
- Fix file's
#urlbeing called twice, which might be costly for non-local files (@skyeagle #2519) - Fix mime type detection failing with types which contain
+symbol, such asimage/svg+xml(@sylvainbx #2489) - Fix
#cached?to return boolean instead of@cache_idvalue (@kmiyake #2510) - Fix mime type detection for MS Office files (@anthonypenner #2447)
Security
- Fix Code Injection vulnerability in CarrierWave::RMagick (@mshibuya 387116f5, GHSA-cf3w-g86h-35x4)
- Fix SSRF vulnerability in the remote file download feature (@mshibuya 012702eb, GHSA-fwcm-636p-68r5)
- Ruby
Published by mshibuya about 5 years ago
https://github.com/carrierwaveuploader/carrierwave - 2.0.0.rc
Added
- Append, reorder, and remove-single-file feature for multiple file uploader(@mshibuya #2401)
- Allow retrieval of uploader index within uploaders(@mshibuya #1771)
- Add ability to customize downloaders(@mshibuya #1636)
- Support internationalized domain names for downloader(@mshibuya #2086)
- Support authenticated_url for Aliyun provider(@Nitrino #2381)
- Support passing options to authenticated_url for OpenStack provider(@stanhu #2377)
- Support authenticated_url for AzureRM provider(@Nitrino #2375)
- Allow custom expires_at when building an authenticated_url(@stephankaag #2397)
Changed
- Use the storage given by
storageconfiguration also forcache_storageunless explicitly specified(@mshibuya 629afecb) - Improve Fog initialization(@mshibuya #2395)
- [BREAKING CHANGE] Multiple file uploader now keeps successful files on update, only discarding failed ones(@mshibuya 7db9195d)
- [BREAKING CHANGE]
#remote_#{column}_urls=was changed to preserve precedent updates(@mshibuya 8f18a95b) #serializable_hashnow returns string for version keys(@schovi #2246)- Use the MimeMagic gem to inspect file headers for the mime type. This allows for mitigation of CVE-2016-3714, in combination with a
content_type_whitelist(@locriani #1934) - Replace mime-types dependency with mini_mime to save memory(@bradleypriest #2292)
- Delegate MiniMagick processing to ImageProcessing gem(@janko #2298)
- Handle ActiveRecord transaction correctly, not storing or removing files on rollback(@skosh #2209)
Deprecated
fog_providerconfiguration was deprecated and has no effect, just adding fog providers toGemfilewill load them(@mshibuya ca201ee2)CarrierWave::Uploader::Base#sanitized_filewas deprecated, use#fileinstead(@mshibuya 28190e99)
Removed
- Remove support for Rails 4.x and Ruby 2.0/2.1 (@mshibuya bada043f)
Fixed
- Fix deleting files twice when marked for removal(@mshibuya 67800fde)
- Fix
uploader.cache!loads entire contents of file into memory(@mshibuya #2136) - Do not trigger *_will_change! when file is not to be removed(@mshibuya #2323)
- Allow deleting all files for multiple file upload(@mshibuya #1990)
- Failing to retrieve unquoted filenames from Content-Disposition(@mshibuya #2364)
- Fix
#clean_cache!breaking with old format of cache id(@mshibuya aab402fb) - Fix
#exists?returning true after Fog file deletion(@mshibuya #2387) - Make
#identifieravailable for a retrieved file(@mshibuya #1581) - Make cache id generation less predictable(@mshibuya #2326)
- Uploaders not being cleared when
#reloador#initialize_dupare overridden in model(@mshibuya #2379) - Fix
#content_typereturning false, instead of nil(@longkt90 #2384) - Preserve connection cache when eagar-loading fog(@dmitryshagin #2383)
#recreate_versions!ignored:from_versionwhen versions to recreate are given(@hedgesky #1879 #1164)
- Ruby
Published by mshibuya over 6 years ago
https://github.com/carrierwaveuploader/carrierwave - v0.10.0
- [changed] Memoize uploaders and uploader_options (Derek Parker and Joshua Davey from Hashrocket)
- [changed] Don't force pad background color to white in
resize_and_pad(@fnordfish) - [changed] Remove auth access information when parsing URL for filename (@nddeluca)
- [changed] Read Content type from cached and uploaded file, adds mime-types as hard dependency
- [added] Added authenticated_url functionality for Openstack storage (@snoopie)
- [added] Add Polish I18n translations for errors (@ArturT)
- [added] Add Greek locale for error messages (@agorf)
- [added] Add French locale for error messages (@gdurelle)
- [added] Add Japanese locale for error messages (@tomodian)
- [added] Add Norwegian locale for error messages (@theodorton)
- [added] Add Portuguese locale for error messages (@pedrosmmoreira)
- [fixed] Overridden serializable_hash accepts an options hash (@bensie)
- [fixed] Fog connection object performance issues (@taavo)
- [fixed] Delete Tempfile after manipulate with MiniMagick (@dimko)
- [fixed] Ensure #remove_#{column} and #remove_#{column} return false after committing with ActiveRecord (@bensie)
- [fixed] Fix issue with content-disposition existing with no filename when downloading, reports that Google does this (@hasghari / @bensie / @taavo)
- Ruby
Published by bensie about 12 years ago
https://github.com/carrierwaveuploader/carrierwave - v0.9.0
- [BREAKING CHANGE] Use integer time (UTC) to generate cache IDs [@bensie]
- [changed] Recommend using ActionController::Base.helpers instead of Sprockets::Rails::Helper for asset pipeline [@c0]
- [changed] Lots of URL encoding fixes [@taavo]
- [added] Added #version_exists? method [@tmaier]
- [added] Added configuration param (:fog_use_ssl_for_aws) to disable SSL for public_url [@pbzymek]
- [added] Add Dutch i18n translations for errors [@vanderhoorn]
- [added] Add Czech i18n translations for errors [@elmariofredo]
- [added] Add German i18n translations for errors [@felixbuenemann]
- [fixed] Gemspec error in Ruby 2.0.0 [@sanemat]
- [fixed] Fixed bug in serializing to xml or json where both :only and :except are passed [@Knack]
- [fixed] Fix recreate_versions! when version if proc returns false [@arthurnn]
- Ruby
Published by bensie over 12 years ago
https://github.com/carrierwaveuploader/carrierwave - v0.6.0
- [BREAKING CHANGE] Require Rails 3.2 or Rails master (4.0) - depends on activesupport/activemodel [bensie]
- [BREAKING CHANGE] Remove :S3 storage option in favor of Fog [bensie]
- [BREAKING CHANGE] Remove :CloudFiles storage option in favor of Fog [bensie]
- [changed] JSON / XML serialization hashes are consistent and work as expected with ActiveRecord's serializable_hash [bensie]
- [added] fog_host now accepts a proc (useful for dynamic asset servers) [jtrim]
- [added] Add ability to process a version from an existing version so you aren't always crunching the original, large file [ferblape]
- [added] Allow brackets in remote URLs [ngauthier]
- [added] CarrierWave::Storage::Fog::File#exists? to check the existence of the file without needing to fetch it [bensie]
- [added] Gravity option on resize_to_fill (minimagick) [TheOddLinguist]
- [added] Add query options for s3 to support response headers overwriting [meceo]
- [added] Make storages File#url methods to work without any params [meceo]
- [added] Set the CarrierWave.root correctly if Padrino is defined [futurechimp]
- [added] Cache fog connections for improved performance [labocho]
- [fixed] Fix slow fetching of content-length on remote file [geemus]
- [fixed] Fog remote specs now passing and depend on Fog >= 1.3.1 [geemus]
- [fixed] Fix an issue where multi-page PDFs can't be converted with RMagick [chanind]
- [fixed] MiniMagick expects string args to mogrify commands [bensie]
- [fixed] With Active Record ORM, setting remote_url marks mounted column as dirty [trevorturk]
- [fixed] Fix possible race condition with CarrierWave.root [bensie]
- [fixed] ActiveSupport::Memoizable deprecation warning [slbug]
- Ruby
Published by bensie over 12 years ago
https://github.com/carrierwaveuploader/carrierwave - v0.6.1
- [fixed] Calling #serializable_hash with no options [matthewrudy]
- Ruby
Published by bensie over 12 years ago
https://github.com/carrierwaveuploader/carrierwave - v0.6.2
- [fixed] Don't double-generate cache_id [skyeagle]
- [added] Escape plus signs (+) in remote URLs [adrianpike]
- [added] Enhance multi-page PDF support in RMagick [xtreme-tanzeeb-khalili]
- Ruby
Published by bensie over 12 years ago
https://github.com/carrierwaveuploader/carrierwave - v0.7.0
- [BREAKING CHANGE] Rename 'fog_host' config option to 'asset_host' and add support for file storage [DouweM]
- [changed] Changed after_destroy with after_commit ... :on => :destroy [Cristian Sorinel]
- [changed] Do not handle any special cases for URL handling, keep the existing escape/unescape functionality and allow overriding [bensie]
- [changed] Activerecord-deprecated_finders gem was renamed [bensie]
- [changed] Removed unnecessary present? method from ActiveSupport [Yauheni Kryudziuk]
- [changed] Use AWS S3 subdomain URL when directory name contains a period. [DouweM]
- [added] Added resize_to_geometry_string RMagick method that will scale image [wprater]
- [added] Made feature to blacklist certain extensions [thiagofm]
- [added] Parse and pass fog_host option to ::Fog::Storage [Yauheni Kryudziuk]
- [added] Add serialization spec for multiple uploaders. [malclocke]
- [added] Add :read option to manipulate! [xtreme-tanzeeb-khalili]
- [added] Add binary/octet-stream as generic mime type. [phiggins]
- [added] Add 'fog_endpoint' config option to set an alternate Fog host. [DouweM]
- [fixed] Fixed can't convert File into String [jnimety]
- [fixed] Fixed an issue when parsing URL w/o schema. [Yauheni Kryudziuk]
- [fixed] Fix reference to column in serializable_hash [malclocke]
- [fixed] Fix inconsistence in file API [oelmekki]
- Ruby
Published by bensie over 12 years ago
https://github.com/carrierwaveuploader/carrierwave - v0.7.1
- [added] add a override to allow fog configuration per uploader [dei79]
- [fixed] Fix a regression when removing uploads [mattolson]
- Ruby
Published by bensie over 12 years ago
https://github.com/carrierwaveuploader/carrierwave - v0.8.0
- [BREAKING CHANGE] Remove 'fog_endpoint' in favor of 'host' and/or 'endpoint' in fog_credentials [bensie]
- [changed] Remove autoload in favor of standard 'require' to help with thread safety [bensie]
- [added] Allow recreating only specified versions instead of all versions [div]
- [added] Add support for S3-compliant storage APIs that are not actually S3 [neuhausler]
- [added] Add #extension CarrierWave::Storage::Fog::File for fetching a file extension [sweatypitts]
- [fixed] Marshaling uploader objects no longer raises a TypeError on anonymous classes [bensie]
- Ruby
Published by bensie over 12 years ago