Jeremy Woertink (@jwoertink)

Release 0.30.0 (#1680) * bump versions for next release * update shard versions to latest

Alex Piechowski (@grepsedawk)

Add Lucky::CookieJar#[] and #[]= (#1678)

Jeremy Woertink (@jwoertink)

Added remote_ip to request object (#1675) * Updating RemoteIpHandler to now include habitat config for the header name where the IP value comes from. Added new remote_ip method to give you access to the raw string. Fixes #1643 * Updating so there's only 1 header to check. Now using the last IP in the header list as per the linked article in the comments.

Jeremy Woertink (@jwoertink)

reworks the message verifier to remove the magic -- character. (#1674) * reworks the message verifier to remove the magic -- character. This should stop random failures caused by duplicating the magic character. Fixes #1595 * adding in a deprecated method to attemp decoding legacy tokens. This should help with the transition to new tokens. * swap checking for the new token before trying legacy token with the message verifier * adding specs for verify_raw and updating so it runs the new method first before falling back to legacy checks

Jeremy Woertink (@jwoertink)

Adds a new security header for Content-Security-Policy. Fixes #1664 (#1673)

Jeremy Woertink (@jwoertink)

removing links to master branch. Found a few outdated links too (#1667)

Alex Piechowski (@grepsedawk)

Add changelog for X-Forwarded-Proto matching (#1665)

Alex Piechowski (@grepsedawk)

Change ForceSSLHandler#secure? to use == instead of regex (#1662) It's more clear and 52x faster in majority of scenarios (matches) and 24x faster on redirects (mismatches) It also does remove case insensitive searching, but it discussion on the PR luckyframework#1662 stated this should be okay functionality to change

Matthew McGarvey (@matthewmcgarvey)

More accurately parse json values for params (#1661)

Matthew McGarvey (@matthewmcgarvey)

Allow forgery protection to be enabled/disabled app-wide (#1657)

Sergey Kojin (@skojin)

make done compiling message more visible (#1606) (#1653)

Rémy Marronnier (@rmarronnier)

Extract Turbolinks code into a single module (#1650)

Russ Smith (@russ)

Allowing for rounding up on hours. (#1651) Ref #1649

Jeremy Woertink (@jwoertink)

Add Crystal 1.3.0 to the CI (#1646) * bump the crystal versions to be last in that minor series. Adding 1.3.0 to the matrix * Just use the min and max versions we support plus nightly * we really only need to check format and lint on latest Crystal * just mention latest here

Matthew McGarvey (@matthewmcgarvey)

Lucky::Router refactor (#1645)

Matthew McGarvey (@matthewmcgarvey)

Update Lucky::BaseHTTPClient to make requests to app directly (#1644)

Matthew McGarvey (@matthewmcgarvey)

Fix formatting issue with Crystal 1.3 (#1642)

Colin Key (@colinkey)

Adds previous_url method to url_helpers (#1641) * Adds previous_url method to url_helpers * Fix formatting in url_helpers_spec * Adds example to doc for previous_url

Matthew McGarvey (@matthewmcgarvey)

Improve error message creating route links (#1639)

Matthew McGarvey (@matthewmcgarvey)

Remove custom error on default_format macro (#1638)

Colin Key (@colinkey)

Update links for discord and code of conduct (#1633) * Updates most discord links to the chat url on the official site * Updates links to code of conduct and repo in contributing.md

Alex Piechowski (@grepsedawk)

Fix empty response_id () when response_id is empty (#1630) Resolves #1626

Jeremy Woertink (@jwoertink)

Missed a commit in the 0.29 update (#1627)

Jeremy Woertink (@jwoertink)

UPGRADE_NOTES for 0.29 (#1624) * Adding initial start for upgrading to 0.29 * a few more changes to the upgrades notes * A few more upgrade notes

Jeremy Woertink (@jwoertink)

Adding changes to CHANGELOG for 0.29 release (#1623)

Jeremy Woertink (@jwoertink)

Fixing outdated examples

Jeremy Woertink (@jwoertink)

bump versions for next release (#1625)