- Dropped support for Active Record < 7.2 and Ruby < 3.3
- Added warning for
download_chunkmethod - Fixed error for
downloadmethod with block - Dropped support for Active Record < 7.1 and Ruby < 3.2
- Added support for Ruby 3.4
- Improved
attributes,attribute_names, andhas_attribute?when ciphertext attributes not loaded - Removed deprecated
lockbox_encrypts(usehas_encryptedinstead) - Dropped support for Active Record < 7 and Ruby < 3.1
- Dropped support for Mongoid < 8
- Fixed error message for previews for Active Storage 7.1.4
- Added support for Active Record 7.2
- Added support for Mongoid 9
- Fixed error when
decryption_keyoption is a proc or symbol and returnsnil
- Added warning for encrypting store attributes
- Fixed issue with serialized attributes
- Fixed error with
arrayandhashtypes and no default column serializer with Rails 7.1 - Fixed Action Text deserialization with Rails 7.1
- Added support for CarrierWave 3
- Made it easier to rotate master key
- Added
associated_dataoption for database fields and files - Added
decimaltype - Added
encode_attributesoption - Fixed deprecation warnings with Rails 7.1
- Fixed error when migrating to
array,hash, andjsontypes
- Fixed error when
StringIOnot loaded
- Added support for
insert,insert_all,insert_all!,upsert, andupsert_all
- Deprecated
encryptsin favor ofhas_encryptedto avoid conflicting with Active Record encryption - Deprecated
lockbox_encryptsin favor ofhas_encrypted - Fixed error with
pluck - Restored warning for attributes with
defaultoption - Dropped support for Active Record < 5.2 and Ruby < 2.6
- Fixed issue with
encryptsloading model schema early - Removed warning for attributes with
defaultoption
- Added warning for attributes with
defaultoption - Removed warning for Active Record 5.0 (still supported)
- Fixed
attribute?method forbooleanandintegertypes
- Fixed issue with
pluckextension not loading in some cases
- Fixed in place changes in callbacks
- Fixed
[]method for encrypted attributes
- Fixed empty arrays and hashes
- Fixed content type for CarrierWave 2.2.1
- Added
inettype - Fixed error when
lockboxkey in Rails credentials has a string value - Fixed deprecation warning with Active Record 6.1
- Added integration with Rails credentials
- Added warning for unsupported versions of Active Record
- Fixed in place changes for Active Record 6.1
- Fixed error with
content_typemethod for CarrierWave < 2
- Added
encryptedflag to Active Storage metadata - Added encrypted columns to
filter_attributes - Improved
inspectmethod
- Improved error messages for hybrid cryptography
- Changed warning to error when no attributes specified
- Fixed issue with
pluckwhen migrating - Fixed error with
key_tableandkey_attributeoptions withprevious_versions
- Added
key_tableandkey_attributeoptions toprevious_versions - Added
encrypted_attributeoption - Added support for encrypting empty string
- Improved
inspectfor models with encrypted attributes
- Added
key_tableandkey_attributeoptions - Added warning when no attributes specified
- Fixed error when Active Support partially loaded
- Added
lockbox_optionsmethod to encrypted CarrierWave uploaders - Improved attribute loading when no decryption key specified
- Added support for
update_columnandupdate_columns
- Improved error message for non-string values
- Fixed error with migrating Action Text
- Fixed error with migrating serialized attributes
- Added support for
pluck
- Improved error message for bad key length
- Fixed missing attribute error
- Added experimental support for migrating Active Storage files
- Fixed
metadatasupport for Active Storage
- Added support for Action Text
- Added warning if unencrypted column exists and not migrating
- Load encrypted attributes when
attributescalled - Added support for migrating and rotating relations
- Removed deprecated
attached_encryptedmethod - Removed legacy
attr_encryptedencryptor
- Added Active Support notifications for Active Storage and Carrierwave
- Fixed content type detection for Active Storage and CarrierWave
- Fixed decryption with Active Storage 6 and
attachment.open
- Added
arraytype - Fixed serialize error with
jsontype - Fixed empty hash with
hashtype
- Fixed
migrating: truewithvalidate: false - Fixed serialization when migrating certain column types
- Improved performance of
rotatefor attributes with blind indexes - Added warning when decrypting previous value fails
- Added
encodeoption toLockbox::Encryptor - Added support for
master_keyinprevious_versions - Added
Lockbox.rotatemethod - Improved performance of
migratemethod - Added generator for audits
- Fixed encoding for
encrypt_ioanddecrypt_ioin Ruby 2.7 - Fixed deprecation warnings in Ruby 2.7
- Added support for custom types
- Added support for virtual attributes
- Made many Mongoid methods consistent with unencrypted columns
- Made
wasandin_databasemethods consistent with unencrypted columns before an update - Made
restoremethods restore ciphertext - Fixed virtual attribute being saved with
nilfor Mongoid - Changed
Lockboxto module
- Made
model.attribute?consistent with unencrypted columns - Added
decrypt_strmethod - Improved fixtures for attributes with
typeoption
- Added support for Mongoid
- Added
encrypt_ioanddecrypt_iomethods - Made it easier to rotate algorithms with master key
- Fixed error with migrate and default scope
- Fixed encryption with Active Storage 6 and
record.create!
- Added time type
- Added support for rotating padding with same key
- Fixed
OpenSSL::KDFerror on some platforms - Fixed UTF-8 error
- Fixed error with models that have attachments but no encrypted attachments
- Added support for types
- Added support for serialized attributes
- Added support for padding
- Added
encodeoption for binary columns
- Added
encryptsmethod for database fields - Added
encrypts_attachedmethod - Added
generate_keymethod - Added support for XSalsa20
- Added support for hybrid cryptography
- Added support for database fields
- First release