AO3-7231 Upgrade gems and configs to Rails 8.0.x #5515

marcus8448 · 2025-12-19T05:50:29Z

Issue

https://otwarchive.atlassian.net/browse/AO3-7231

Purpose

Upgrade to Rails 8.0.

The upgrade was surprisingly (suspiciously?) straightforward, considering it's a major version bump. I'll add additional notes/comments in a review.

Testing Instructions

TBD, see Jira.

Credit

marcus8448 (he/him)

Looked at all uses of to_time: * used for duration (difference, so zone vs offset doesn't matter) * stored in model/DB (rails converts to UTC) * read from model and sent to akismet (rails converts to UTC) * or just forced to utc strict_freshness: I don't see any issues arising from it Regexp.timeout: in my mind, 1s should be sufficient

better safe than sorry?

marcus8448

Upgrade script wanted puma.rb, but I ignored it per this comment.

It also wanted to set silence_healthcheck_path in production.rb but it doesn't look like we're using the system anyways. (Noting this just in case we want something silenced, but I doubt it.)

marcus8448 · 2025-12-19T05:57:28Z

Gemfile


 # Library for helping run pt-online-schema-change commands:
-gem "departure", "~> 6.8"
+gem "departure", "~> 8.0"


Didn't see anything of note in the changelog. Note that 8.0.1 seems to have not been published to rubygems (if it does get published I would like to pull it in).

marcus8448 · 2025-12-19T05:59:43Z

Gemfile


 group :test do
-  gem "rspec-rails", "~> 6.0"
+  gem "rspec-rails", "~> 8.0"


Changelog, nothing stood out as well.

marcus8448 · 2025-12-19T06:09:55Z

app/models/tagset_models/tag_set.rb

Rails 8.0 now saves the parent model (tag set) before the child model (owned tag set), so we can't always touch it here (after_save). In that case the child model (owned tag set) is going to be saved after anyways, so it's fine to just skip touching.

This change looks to be a side effect of rails/rails#49847, but I think this ordering makes more sense so we were probably just depending on buggy behaviour.
Example, if that explanation doesn't make sense: https://gist.github.com/marcus8448/9459bcc0536f2baf0704cbea91fc9d0b

marcus8448 · 2025-12-19T06:21:16Z

config/environments/development.rb

-  # Raise exceptions for disallowed deprecations.
-  config.active_support.disallowed_deprecation = :raise
-
-  # Tell Active Support which deprecation messages to disallow.
-  config.active_support.disallowed_deprecation_warnings = []
-


Removed from example config, we're not using it anyways.

marcus8448 · 2025-12-19T06:22:14Z

config/environments/development.rb

-  # Enable mailer previews at http://localhost:3000/rails/mailers.
-  config.action_mailer.show_previews = true
-


Enabled by default in development

marcus8448 · 2025-12-19T06:23:29Z

config/environments/development.rb

+  # Append comments with runtime information tags to SQL queries in logs.
+  config.active_record.query_log_tags_enabled = true
+


Example (the /**/ comment):

Tag Load (0.2ms) SELECT `tags`.* FROM `tags` WHERE `tags`.`name` = 'Uncategorized Fandoms' LIMIT 1 /*action='index',application='Otwarchive',controller='home'*/

marcus8448 · 2025-12-19T06:25:12Z

config/environments/development.rb

                         { namespace: "ao3-v2-dev", compress: true, pool: { size: 10 } }
    config.public_file_server.headers = {
-      "Cache-Control" => "public, max-age=#{2.days.to_i}"
+      "cache-control" => "public, max-age=#{2.days.to_i}"


Rack 3 requires all response headers to be downcased (per this Rails commit). Although we haven't updated yet, I don't see any harm from doing that now.

marcus8448 · 2025-12-19T06:26:36Z

config/initializers/filter_parameter_logging.rb

-  :content, :passw, :terms_of_service_non_production, :email, :secret, :token, :_key, :crypt, :salt, :certificate, :otp, :ssn
+  :passw, :email, :secret, :token, :_key, :crypt, :salt, :certificate, :otp, :ssn, :cvv, :cvc,
+  :content, :terms_of_service_non_production


I put our additions onto a new line to make it easier to differentiate from the Rails defaults.

marcus8448 · 2025-12-19T06:27:09Z

public/400.html

Not sure if this file is needed since the app should be able to respond itself.

The setting will be undeprecated and enabled by default in Rails 8.2 https://redirect.github.com/rails/rails/commit/a477a3273c3c71305cc8ae1835638dc75184ad9d

marcus8448 · 2026-01-10T06:31:26Z

Gemfile

-gem "rails", "~> 7.2"
-gem "rails-i18n"
+gem "rails", "~> 8.0.0"
+gem "rails-i18n", "~> 8.0", git: "https://github.com/svenfuchs/rails-i18n", ref: "54c1c7c2fdcc311427ec6f1dadd298a60db1ddef"


Crashes without an unreleased bugfix. Technically this version targets rails 8.1 though, so we might want to fork and pull in a version with just the patch?

marcus8448 · 2026-01-10T06:38:49Z

config/initializers/active_job_enqueue_after_commit.rb

+# always enable enqueue_after_transaction_commit
+# TODO: remove for rails 8.2! https://github.com/rails/rails/commit/a477a3273c3c71305cc8ae1835638dc75184ad9d
+Rails.application.config.after_initialize do
+  ActiveSupport.on_load(:active_job) do
+    ActiveJob::Base.enqueue_after_transaction_commit = true
+  end
+end


This is a manual re-implementation of what the deprecated config.active_job.enqueue_after_transaction_commit = :always did.

The global option is going to be undeprecated and enabled by default in Rails 8.2, so I don't see any reason to not continue with the current behaviour.

marcus8448 · 2026-01-10T06:49:41Z

config/application.rb

    # in config/environments, which are processed later.

-    config.load_defaults 7.2
+    config.load_defaults 8.0


New framework defaults

### # Specifies whether `to_time` methods preserve the UTC offset of their receivers or preserves the timezone. # If set to `:zone`, `to_time` methods will use the timezone of their receivers. # If set to `:offset`, `to_time` methods will use the UTC offset. # If `false`, `to_time` methods will convert to the local system UTC offset instead. #++ Rails.application.config.active_support.to_time_preserves_timezone = :zone

I looked at all the uses of to_time and nothing stood out as being timezone (vs offset) dependent. Anything coming into or out of the database is normalized to UTC anyways and duration calculations shouldn't care about the zone.

### # When both `If-Modified-Since` and `If-None-Match` are provided by the client # only consider `If-None-Match` as specified by RFC 7232 Section 6. # If set to `false` both conditions need to be satisfied. #++ Rails.application.config.action_dispatch.strict_freshness = true

I don't see anything wrong with this.

### # Set `Regexp.timeout` to `1`s by default to improve security over Regexp Denial-of-Service attacks. #++ Regexp.timeout = 1

I think 1s should be plenty of time. Do we have any important complex regexps?

marcus8448 added 7 commits December 17, 2025 21:00

AO3-7231 Bump Rails version, run update task

fecbdd4

AO3-7231 Temporarily use alternative rails-i18n source

8fd90f0

AO3-7231 Don't touch owned tag set if it hasn't been persisted yet

b119a34

AO3-7231 Set 8.0 defaults

0f97a02

AO3-7231 Try deleting enqueue_after_transaction_commit?

691cfe8

AO3-7231 Set enqueue_after_transaction_commit on jobs

579fc0e

better safe than sorry?

github-actions bot added Gem Updates Awaiting Review labels Dec 19, 2025

marcus8448 commented Dec 19, 2025

View reviewed changes

marcus8448 added 4 commits December 18, 2025 22:54

AO3-7231 Rubocop

8bf5c17

Merge branch 'master' into AO3-7231

7e33f1e

AO3-7231 Pull from main rails-i18n repository

3c079f5

AO3-7231 Always enable enqueue_after_transaction_commit

c3f8b1c

The setting will be undeprecated and enabled by default in Rails 8.2 https://redirect.github.com/rails/rails/commit/a477a3273c3c71305cc8ae1835638dc75184ad9d

marcus8448 commented Jan 10, 2026

View reviewed changes

		# Enable mailer previews at http://localhost:3000/rails/mailers.
		config.action_mailer.show_previews = true

		# Append comments with runtime information tags to SQL queries in logs.
		config.active_record.query_log_tags_enabled = true

AO3-7231 Upgrade gems and configs to Rails 8.0.x #5515

Are you sure you want to change the base?

AO3-7231 Upgrade gems and configs to Rails 8.0.x #5515

Uh oh!

Conversation

marcus8448 commented Dec 19, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Issue

Purpose

Testing Instructions

Credit

Uh oh!

marcus8448 left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

marcus8448 Jan 10, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

marcus8448 commented Dec 19, 2025 •

edited

Loading

marcus8448 left a comment •

edited

Loading

marcus8448 Jan 10, 2026 •

edited

Loading