`ActionDispatch::ShowExceptions` overwrites `PATH_INFO` with the status code
for the exception defined in `ExceptionWrapper`, so the path the user was
visiting when an exception occurred was not previously available to any custom
exceptions_app.

The original `PATH_INFO` is now stashed in
`env["action_dispatch.original_path"]`.

Fix tests broken in #16149

Refactor Hash#transform_values and Hash#transform_values!

[Bug report templates] Added rack master to the Gemfile [ci skip]

Conflicts:
	activerecord/lib/active_record/base.rb

This reverts commit 0f6b101e.

Reason: It's better to let `unscope` be documented. We can add a
separate section for `except`.

Just so it's clearer what's going on in the following assertion.

/cc #11993 @robin850

Silence Downloader's output

Fixing typo in comment

Use NameError#name to assert raised error.

This output isn't used anywhere for assertions so we can simply remove
it. The introducing commit was f238d495.

Don't rely on the column SQL type for bit string quoting

Use a type object for type casting behavior on SQLite3

[Guides] Sentence break for clarity [ci-skip]

Fix incorrect unsubscription.

Use `#bytesize` instead of `#size` when checking for cookie overflow

Although the cookie values happens to be ASCII strings because they are
Base64 encoded, it is semantically incorrect to check for the number of the
characters in the cookie, when we actually want to check for the number of the
bytes it consists of.

Furthermore it is unecessary coupling with the current implementation that
uses Base64 for encoding the values.

Also reordered some of the items to put newer ones on top (same order as
CHANGELOGs), which makes it easier to diff while we are still working on it.

Removed the single space character for Safari

`render nothing: true` or rendering a `nil` body no longer add a single
space to the response body.

The old behavior was added as a workaround for a bug in an early version of
Safari, where the HTTP headers are not returned correctly if the response
body has a 0-length. This is been fixed since and the workaround is no
longer necessary.

Use `render body: ' '` if the old behavior is desired.

  Address CVE-2014-4671 (JSONP Flash exploit)

* 'rosetta_flash' of https://github.com/gcampbell/rails:
  Address CVE-2014-4671 (JSONP Flash exploit)

Conflicts:
	actionpack/CHANGELOG.md

Force encoding of US-ASCII to UTF-8 in unescape_uri.

Because URI paths may contain non US-ASCII characters we need to force
the encoding of any unescaped URIs to UTF-8 if they are US-ASCII.
This essentially replicates the functionality of the monkey patch to
URI.parser.unescape in active_support/core_ext/uri.rb.

Fixes #16104.

[ci skip] Fixed link to strong params in Getting Started section 5.6.

[ci skip] Document millisecond precision change in ActiveSupport::TimeWithZone#as_json

Reduce number of subscriptions created.

Since 68574151 we are using #safe_join to
join the content when an Array is given, so we must include the dependent
module here to make sure it's available when this module is used alone.

This was making Simple Form tests to fail with current master due to the
missing dependency.