CHANGELOG.rdoc in devise-2.2.8 vs CHANGELOG.rdoc in devise-3.0.0.rc

- old
+ new

@@ -1,25 +1,9 @@ -== 2.2.8 +== 3.0.0.rc -Security announcement: http://blog.plataformatec.com.br/2013/11/e-mail-enumeration-in-devise-in-paranoid-mode - -* bug fix - * Avoid e-mail enumeration on sign in when in paranoid mode - -== 2.2.7 - -* bug fix - * Do not confirm account after reset password - -== 2.2.6 - -* bug fix - * Skip storage for cookies on unverified requests - -== 2.2.5 - -* bug fix - * Clean up CSRF token after authentication (by @homakov). Notice this change will clean up the CSRF Token after authentication (sign in, sign up, etc). So if you are using AJAX for such features, you will need to fetch a new CSRF token from the server. +* enhancements + * Rails 4 and Strong Parameters compatibility. (@carlosantoniodasilva, @josevalim, @latortuga, @lucasmazza, @nashby, @rafaelfranca, @spastorino) + * Drop support for Rails < 3.2 and Ruby < 1.9.3. == 2.2.4 * enhancements * Add `destroy_with_password` to `DatabaseAuthenticatable`. Allows destroying a record when `:current_password` matches, similarly to how `update_with_password` works. (by @michiel3)