- - Action Cable client now tracks pending subscriptions, adds random jitter and exponential backoff for reconnections, ships an ESM bundle, renames files, and drops IE11 support.
- - Broad deprecations and removals across Rails (Action Mailbox env vars, ActionMailer delivery jobs, Poltergeist/Webkit drivers, IE hacks, SERVER_ADDR header) plus new defaults like always‑enabled CSRF token config and timeout defaults.
- - Security and observability upgrades: stricter open‑redirect protection, static ParseError messages, Server‑Timing middleware, Trusted Types headers, enhanced logging controls, and a new middleware delete! method.