• Fix Action Cable origin check to respect X-Forwarded-Host behind reverse proxies.

  The allow_same_origin_as_host check previously compared against the raw HTTP_HOST header, which fails when a proxy forwards requests with a different internal host. It now uses request.host_with_port, consistent with the rest of Rails.

  Jordan Brough

• Channel generator now detects which JS package manager to use when installing javascript dependencies.

  David Lowenfels

Please check [8-1-stable]) for previous changes.