Rack Attack Versions Save

What's Changed

• Replace git.io URL by @kyoshidajp in https://github.com/rack/rack-attack/pull/579
• test: update rack-test to v2 from v1 by @grzuy in https://github.com/rack/rack-attack/pull/587
• Update example description to not suggest using a deprecated method by @MaksimAbramchuk in https://github.com/rack/rack-attack/pull/589
• Add note about cache stores and in-memory caches. by @nateberkopec in https://github.com/rack/rack-attack/pull/604
• ci: tests against redis gem v5 by @grzuy in https://github.com/rack/rack-attack/pull/612
• Support rack 3 by @ioquatix in https://github.com/rack/rack-attack/pull/586
• Gem release management. by @ioquatix in https://github.com/rack/rack-attack/pull/614

New Contributors

• @kyoshidajp made their first contribution in https://github.com/rack/rack-attack/pull/579
• @MaksimAbramchuk made their first contribution in https://github.com/rack/rack-attack/pull/589
• @nateberkopec made their first contribution in https://github.com/rack/rack-attack/pull/604

Full Changelog: https://github.com/rack/rack-attack/compare/v6.6.1...v6.7.0

Details in CHANGELOG entry.

Details in CHANGELOG entry.

Details in CHANGELOG entry.

Details in CHANGELOG entry.

Fixed

• Fixed occasional Redis::FutureNotReady error (#445) (@fatkodima)

Fixed

• Remove unintended side-effects on Rails app initialization order. It was potentially affecting the order of config/initializers/* in respect to gems initializers (#457)

Added

• Failsafe on Redis error replies in RedisCacheStoreProxy (#421) (@cristiangreco)
• Rack::Attack middleware is now auto added for Rails 5.1+ apps to simplify gem setup (#431) (@fatkodima)
• You can disable Rack::Attack with Rack::Attack.enabled = false (#431) (@fatkodima)

Added

• Provide throttle discriminator in the env throttle_data

Added

• #blocklist and #safelist name argument (the first one) is now optional.
• Added support to subscribe only to specific event types via ActiveSupport::Notifications, e.g. subscribe to the throttle.rack_attack or the blocklist.rack_attack event.

Changed

• Changed ActiveSupport::Notifications event naming to comply with the recommneded format.

Deprecated

• Subscriptions via ActiveSupport::Notifications to the "rack.attack" event will continue to work (receive event notifications), but it is going to be removed in a future version. Replace the event name with /rack_attack/ to continue to be subscribed to all events, or "throttle.rack_attack" e.g. for specific type of events only.

Removed

• Removed support for ruby 2.2.
• Removed support for obsolete memcache-client as a cache store.
• Removed deprecated methods #blacklist and #whitelist (use #blocklist and #safelist instead).