`permit!` is intended to mark all instances of `ActionController::Parameters` as permitted, however nested arrays of params were not being marked permitted because the method did shallow iteration.
This fixes that by flattening the array before calling `permit!` on all each item.

At SuSE, `$HOST` is set by default and is equal to `$HOSTNAME`.
https://www.suse.com/documentation/sled11/book_sle_admin/data/sec_adm_variables.html

Therefore, by default, it binds to hostname instead of `localhost`.
This seems not to be appropriate as default behavior.

In order to avoid the name of the environment variable being used,
I changed the environment variable from `HOST` to `BINDING`.

Fixes #29516.

Fix redis store clear keys outside the namespace

Add missing `require "benchmark"`

Namespace not working in RedisCacheStore#clear method. Bacause

    namespace = merged_options(options)[namespace]

is always nil, Correct is

    namespace = merged_options(options)[:namespace]

Fix broken nodocs

Merge pull request #32553 from raderj89/jaredrader/update-docs-ActiveJob__Serializers__ObjectSerializer#deserialize-for-pr

fix spelling in docs for ActiveJob::Serializers::ObjectSerializer#deserialize

This commit fixes all references in the codebase missing a trailing :,
which causes the nodoc not to actually work :) [skip ci]

Add .keep exception for storage folder

Update security.md with latest underground market prices

Legit, but really an excuse to trigger the master hook in the docs server.

Updated underground market prices according to the 2017 Symantec ISTR (was previously citing the 2008 report)

Fixes https://github.com/rails/rails/issues/32546 by including the `.keep` file in the .gitignore, bringing the `storage` folder in line with the `tmp` and `log` folders.

`SecureRandom.byes` was added in Ruby 2.4. So, 5-2-stable build is broken
because using `SecureRandom.bytes`.
https://travis-ci.org/rails/rails/jobs/365740667

Also, `SecureRandom.byes` seems to an undocumented method.
If need random binary strings, should use `SecureRandom.random_bytes`.
https://github.com/ruby/ruby/blob/trunk/lib/securerandom.rb

Ok so apparently you can not just have a `default:` that manually is
merged in with YAML but you can also have a special "shared" config that
is automatically merged.

Example:

```
shared:
  adapter: mysql2
  host: <%= ENV["DB_HOST"] || "localhost" %>
  username: root
  connect_timeout: 0
  pool: 100
  reconnect: true

development:
  database: development_db
  adapter: mysql2
```

To fix, only create a DatabaseConfig object when an adapter, database,
or URL are present.

The merging behavior for `shared` doesn't work with a 3-tier config. I
don't think it worked before this change either - since Rails doesn't
know which point to merge it in. That's something we may have to fix
with the refactoring I'm working on.

Add WebSocket URI support to CSP DSL mappings

Don't doc _original_sum_with_required_identity

Fix ActiveSupport::Cache compression

It's not public API so don't document it.

Merge pull request #32542 from teddywing/active-support-cache-store--fix-end-tag-in-read-method-documentation

Cache::Store#read: Fix fixed-width end tag in docs

Define callbacks on descendants.

* Fix the ending `</tt>` tag for `:expires_in`. Otherwise, the "or" is
  set in fixed-width also.
* Re-wrap paragraph to 80 columns.

[ci skip]

(See previous commit for a description of the issue)

On Rails 5.2, when compression is enabled (which it is by default),
the actual value being written to the underlying storage is actually
_bigger_ than the uncompressed raw value.

This is because the `@marshaled_value` instance variable (typically)
gets serialized with the entry object, which is then written to the
underlying storage, essentially double-storing every value (once
uncompressed, once possibly compressed).

This regression was introduced in #32254.

Fix MySpace Samy worm link [ci skip]

The old link https://samy.pl/popular/tech.html is 404 not found.

Merge pull request #32536 from lsylvester/fix-immutable-relation-error-with-http-caching-and-collection-caching

Fix ActiveRecord::ImmutableRelation is raised when collection caching and HTTP caching are used together

don't check for immutability when setting skip_preloading as it doesn't effect the arel and the arel may already be generated by fresh_when

Use frozen string literal

See https://github.com/rails/rails-docs-server/pull/8 for reason.

[ci skip]

The issue was fixed with https://github.com/petergoldstein/dalli/pull/679,
and a new version containing that fix was released.

Fix turbolinks warning in railties test

* Upgrade turbolinks from v5.0.1 to v5.1.0
* Fix warning in railties test

    lib/turbolinks/assertions.rb:17:
    warning: assigned but unused variable - visit_action

Include default headers by default in API mode

[ci skip]