CHANGELOG.rdoc in devise-2.2.8 vs CHANGELOG.rdoc in devise-3.0.0.rc
- old
+ new
@@ -1,25 +1,9 @@
-== 2.2.8
+== 3.0.0.rc
-Security announcement: http://blog.plataformatec.com.br/2013/11/e-mail-enumeration-in-devise-in-paranoid-mode
-
-* bug fix
- * Avoid e-mail enumeration on sign in when in paranoid mode
-
-== 2.2.7
-
-* bug fix
- * Do not confirm account after reset password
-
-== 2.2.6
-
-* bug fix
- * Skip storage for cookies on unverified requests
-
-== 2.2.5
-
-* bug fix
- * Clean up CSRF token after authentication (by @homakov). Notice this change will clean up the CSRF Token after authentication (sign in, sign up, etc). So if you are using AJAX for such features, you will need to fetch a new CSRF token from the server.
+* enhancements
+ * Rails 4 and Strong Parameters compatibility. (@carlosantoniodasilva, @josevalim, @latortuga, @lucasmazza, @nashby, @rafaelfranca, @spastorino)
+ * Drop support for Rails < 3.2 and Ruby < 1.9.3.
== 2.2.4
* enhancements
* Add `destroy_with_password` to `DatabaseAuthenticatable`. Allows destroying a record when `:current_password` matches, similarly to how `update_with_password` works. (by @michiel3)