Bump active_model_serializers from 0.10.6 to 0.10.8

[dependabot-preview]

Bumps active_model_serializers from 0.10.6 to 0.10.8.

Changelog

Sourced from active_model_serializers's changelog.

v0.10.8 (2018-11-01)

Features:

• #2279 Support condition options in serializer link statements

Fixes:

• #2296 Fixes #2295 (Hirurg103)
  • Fix finding of namespaced serializer and non-namespaced model.
• #2289 Fixes #2255 (f-mer)
  • Fix autoloading race condition, especially in Rails 5.
• #2299 Fixes #2270 (chau-bao-long via #2276)
  • Fix reflection thread-safety bug

v0.10.7 (2017-11-14)

Regressions Fixed From v0.10.6:

• #2211. Fixes #2125, #2160. (bf4)
  • Fix polymorphic belongs_to tests; passes on v0.10.5, fails on v0.10.6
  • Fix JSON:API polymorphic type regression from v0.10.5
  • Fix JSON:API: for_type_and_id should always inflect_type

    Should Serializer._type ever be inflected?
    Right now, it won't be, but association.serializer._type will be inflected.
    
    That's the current behavior.
    

• #2216. Fixes #2132, #2180. (bf4)
  • Fix JSON:API: Serialize resource type for unpersisted records (blank id)
• #2218. Fixes #2178. (bf4)
  • Fix JSON:API: Make using foreign key on belongs_to opt-in. No effect on polymorphic relationships.

      # set to true to opt-in
      ActiveModelSerializer.config.jsonapi_use_foreign_key_on_belongs_to_relationship = true
    

Features:

• #2136 Enable inclusion of sideloaded relationship objects by key. (caomania)
• #2021 ActiveModelSerializers::Model#attributes. Originally in #1982. (bf4)
• #2130 Allow serialized ID to be overwritten for belongs-to relationships. (greysteil)
• #2189
  Update version constraint for jsonapi-renderer to ['>= 0.1.1.beta1', '< 0.3']
  (tagliala)

Fixes:

• #2022 Mutation of ActiveModelSerializers::Model now changes the attributes. Originally in #1984. (bf4)
• #2200 Fix deserialization of polymorphic relationships. (dennis95stumm)

... (truncated)

Commits

• bc4805c Bump version to v0.10.8
• f1a2ec7 Add change to changelog
• 09264da Merge branch 'fix_thread_safety_bug' into 0-10-stable
• 238d792 Lint per rubocop
• b358271 Note that we dup the entire reflection instance
• c7e847f Fix thread unsafe behavior
• 127b04b Add failing test for reflection thread safety bug
• cb67434 Merge pull request #2279 from mkon/link-conditions
• 572f11b value is always a link
• ca6c009 typos
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge
• @dependabot reopen will reopen this PR if it is closed
• @dependabot ignore this [patch|minor|major] version will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Automerge options (never/patch/minor, and dev/runtime dependencies)
• Pull request limits (per update run and/or open at any time)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

Finally, you can contact us by mentioning @dependabot.

[dependabot-preview]

Superseded by #903.