- Update supported Ruby and Rails versions [GH-50]
- Ruby
- Added 2.4.2
- Dropped 2.1
- Updated 2.2.x and 2.3.x families to 2.2.8 and 2.3.5 respectively
- Rails
- Restricted supported version to < 5.1
- Ruby
IMPROVEMENTS
- Added configuration setting for controlling appearance of warning messages about in-memory ciphers [GH-45]
vault-rails
is licensed under Mozilla Public License 2.0, and has been for over 2 years. This patch release updates the gemspec to use the correct SPDX ID string for reporting this license, but no change to the licensing of this gem has occurred. [GH-48]
IMPROVEMENTS
- Add ability to lazy decrypt attributes [GH-41]
IMPROVEMENTS
- Add support for Rail 5 and better testing matrix
BUG FIXES
- Use a pre-configured client to ensure options are inherited from the default client
BREAKING CHANGES
-
The API for configuration now lives under
Vault::Rails
instead ofVault
. Existing users will need to update their configuration as follows:- Vault.configure do |config| + Vault::Rails.configure do |config|
-
Remove testing mode and use an in-memory vault store in development and test instead with the option to disable
-
Load from Vault during initialize and save instead of on each change. This is not necessarily a "breaking" change, but users who were depending on the previous behavior of always making a call to Vault when setting attributes will experience a break. However, the new approach significantly reduces the load on the Vault cluster.
IMPROVEMENTS
- Allow specifying custom serialization options
- Add dirty tracking for Active Record models
- Unset instance variables when
reload
is called for ActiveRecord models - Fix issues that would occur when using multiple threads
- Add support for retries
BUG FIXES
- Update documentation to better describe configuration options
- Update documentation around advanced configuration options
- Update documentation to include example Vault policies for the transit backend
- Do not attempt to read back a secret after writing to the logical backend
- Increase test coverage
- Force character encodings
- Do not automatically mount or create keys (security issue, see README for more information)
- Add testing harness
- Lazy-connect to Vault - this fixes a bug which would require users to run a local Vault installation just to get the Rails application to boot.
- Initial release