Bump ransack from 4.4.3 to 5.0.0

[dependabot]

Bumps ransack from 4.4.3 to 5.0.0.

Release notes

Sourced from ransack's releases.

5.0.0

Breaking changes

• LIKE wildcards are now escaped on every adapter, with an explicit ESCAPE clause. cont, start, end and their i_/not_/_any/_all variants treat the search term literally; % and _ typed by a user no longer act as wildcards on SQLite and other backends. Use matches to pass a pattern. — #1682, fixes #1581
• The ActionView::Helpers::Tags::Base#value monkey patch is removed. It let Rails reach private Kernel methods on any form object and broke unrelated forms in host apps (text_field :test raised ArgumentError). — #1690, closes #1485, relates to #1215
• Combinators are validated and normalised. 'OR', :or and 'Or' all mean or instead of silently becoming AND; under ransack! / ignore_unknown_conditions: false an unrecognised combinator raises Ransack::InvalidSearchError at any nesting depth. — #1694, closes #1465
• postgres_fields_sort_option is renamed fields_sort_option (the old name still works). NULLS FIRST / NULLS LAST now go through Arel and work on any backend that supports them, not only PostgreSQL. — #1696, closes #1463

Features

• ignore_blank_values config option: treat blank values as filters (for JSON APIs) instead of ignoring them (the default, for HTML forms). Typed columns treat a blank as NULL. — #1683, closes #722, #1664
• Length predicates: length_eq, length_lt, length_lteq, length_gt, length_gteq. — #1697, closes #1492, #1655
• Trilogy adapter support, with a CI job to prove it. — #1698, closes #1500, #1501
• enum attributes can be searched by label. — #1665
• Nested groupings in longhand (groupings: / conditions: / combinator:), and long-form condition keys (attributes: / predicate: / values:). — #1430, #1694
• NULLS FIRST / NULLS LAST on every backend Arel supports. — #1696

Bug fixes

• Fix low-level c: API silently dropping conditions when a:/v: are arrays of envelope hashes — #1675, closes #1150
• Prune blank conditions from the c: API at every nesting depth, without mutating the caller's params — #1687, closes #1653
• Strip whitespace at every level of the params, not just the top — #1688, closes #1414, #1502
• Make search_form_for / search_form_with / turbo_search_form_for honour a per-search search_key — #1676, closes #1118
• Read a form field's value back through ransack_alias, so aliased fields survive a round-trip — #1693, closes #689, #1529
• Fix ActiveModel::RangeError when a huge integer is searched across multiple attributes in one condition — #1691, closes #1523
• Make _present / _blank produce only IS [NOT] NULL on non-string columns — #1678, closes #1552
• Fix ransackable_attributes not handling symbol arrays — #1539, closes #1538
• Fix scopes inside groupings being silently dropped — #1673, closes #1339, #1490
• Fix a deprecation warning and a correctness bug with arel_extensions >= 2.2 — #1679
• Cast SQL Server's :datetimeoffset to time — #1689, closes #1479
• Remove duplicate definitions causing method-redefined warnings — #1677, closes #1434
• Keep an explicit nil inside an array from discarding the whole condition, for custom predicates — #1657

Compatibility

• Respect config.active_record.permanent_connection_checkout: lib/ no longer calls the deprecated ActiveRecord::Base.connection, and metadata lookups no longer lease a connection. — #1692, closes #1570

Documentation

• New sections on the advanced search parameter structure, combinators, blank values, whitespace stripping, LIKE wildcards, enum attributes, length predicates, sorting NULLs, and symbol allowlists. — #1695 and the PRs above

Infrastructure

• Releases are published to RubyGems from GitHub Releases via Trusted Publishing — #1681
• CI on Rails 8.1 with Ruby 3.3, 3.4 and 4.0; Trilogy job added — #1667, #1698
• Development dependency sqlite3 bumped for CVE-2026-54619 — #1685
• The v5.0.0 branch was consolidated into main — #1647

Changelog

Sourced from ransack's changelog.

Version 1.6.5 - 2015-03-28 - Rails 5.0.0 update

Added

• [WIP/experimental] Add compatibility with Rails 5/master and Arel 7.

• Update the Contributing Guide with detailed steps for contributing to Ransack.

• Broaden the test suite database options in schema.rb and add code documentation.

• Improve the header message when running tests.

  Jon Atack

• Allow :wants_array to be set to false in the predicate options (#32).

  Michael Pavling

• Add a failing spec for issue #374.

  Jamie Davidson, Jon Atack

Fixed

• Stop relying on Active Record::relation#where_values which are deprecated in Rails 5.

• Make the test for passing search arguments to a ransacker (ransacker_args) work correctly with Sqlite3.

  Jon Atack

Changed

• Stop CI testing for Rails 3.0 to reduce the size of the Travis test matrix.

  Jon Atack

Version 1.6.4 - 2015-03-20 - Rails 4.2.1 update

• ActionView patch to maintain compatibility with Rails 4.2.1 released today.

  Jon Atack

• Enable scoping I18n by 'ransack.models' (#514).

... (truncated)

Commits

• 05c8fe5 Merge pull request #1647 from activerecord-hackery/v5.0.0
• 3508e85 Update configuration documentation (#1671)
• d04282a Add pending spec capturing issue #1553 (#1672)
• 23a609b Fix scopes inside groupings being silently dropped (#1339, #1490) (#1673)
• e82f6ba support enum (#1665)
• 4d76089 Add CI with Rails 8.1 and Ruby 3.3.x, 3.4.x and 4.0.1 (#1667)
• 271cb42 Revise CHANGELOG for versioning and support updates (#1648)
• f0f8b5e Add DeepWiki badge (#1643)
• f44a375 Update gem release docs (#1646)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #9.