IntenseWebs/discourse
3
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2024-11-22 17:06:31 -06:00
Code Issues Packages Projects Releases Wiki Activity
0e6a8757fe
discourse/Gemfile.lock

Ignoring revisions in .git-blame-ignore-revs. Click here to bypass and see the normal blame view.

610 lines
14 KiB
Plaintext
Raw Normal View History

DEV: Update mail and use fork (#10639) Version 2.8 brings some changes to how address fields are handled and this commits updates that and should also include a fix which handles encoded attachment filenames. The fork contains a bugfix to correctly decode mail attachments.
2021-02-18 12:15:02 -06:00
GIT
remote: https://github.com/discourse/mail.git
revision: 5b700fc95ee66378e0cf2559abc73c8bc3062a4b
specs:
mail (2.8.0.edge)
mini_mime (>= 0.1.1)
Initial release of Discourse
2013-02-05 13:16:51 -06:00
GEM
Oops, didn't mean to revert to http on rubygems.
2013-03-07 11:20:19 -06:00
remote: https://rubygems.org/
Initial release of Discourse
2013-02-05 13:16:51 -06:00
specs:
SECURITY: Bump Rails to 6.1.3.2 (#12963) Includes fixes for - CVE-2021-22902 - CVE-2021-22903 - CVE-2021-22904 - CVE-2021-22885 https://github.com/rails/rails/blob/v6.1.3.2/actionpack/CHANGELOG.md
2021-05-06 06:41:45 -05:00
actionmailer (6.1.3.2)
actionpack (= 6.1.3.2)
actionview (= 6.1.3.2)
activejob (= 6.1.3.2)
activesupport (= 6.1.3.2)
Update gems
2014-09-24 19:28:27 -05:00
mail (~> 2.5, >= 2.5.4)
Upgrade to Rails 5.
2017-08-22 21:58:25 -05:00
rails-dom-testing (~> 2.0)
SECURITY: Bump Rails to 6.1.3.2 (#12963) Includes fixes for - CVE-2021-22902 - CVE-2021-22903 - CVE-2021-22904 - CVE-2021-22885 https://github.com/rails/rails/blob/v6.1.3.2/actionpack/CHANGELOG.md
2021-05-06 06:41:45 -05:00
actionpack (6.1.3.2)
actionview (= 6.1.3.2)
activesupport (= 6.1.3.2)
DEV: Upgrade Rails to 6.1.3.1 (#12688) Rails 6.1.3.1 deprecates a few API and has some internal changes that break our tests suite, so this commit fixes all the deprecations and errors and now Discourse should be fully compatible with Rails 6.1.3.1. We also have a new release of the rails_failover gem that's compatible with Rails 6.1.3.1.
2021-04-21 04:36:32 -05:00
rack (~> 2.0, >= 2.0.9)
Upgrade Rails to 5.1.4.
2017-10-03 01:56:44 -05:00
rack-test (>= 0.6.3)
Upgrade to Rails 5.
2017-08-22 21:58:25 -05:00
rails-dom-testing (~> 2.0)
DEV: Upgrade Discourse to Rails 6 (#8083) * Adjustments to pass specs on Rails 6.0.0 * Use classic autoloader instead of Zeitwerk * Update Rails 6.0.0 deprecated methods * Rails 6.0.0 not allowing column with integer name * Drop freedom_patches/rails6.rb * Default value for trigger_transactional_callbacks? is true * Bump rspec-rails version to 4.0.0.beta2
2019-09-11 19:41:50 -05:00
rails-html-sanitizer (~> 1.0, >= 1.2.0)
SECURITY: Bump Rails to 6.1.3.2 (#12963) Includes fixes for - CVE-2021-22902 - CVE-2021-22903 - CVE-2021-22904 - CVE-2021-22885 https://github.com/rails/rails/blob/v6.1.3.2/actionpack/CHANGELOG.md
2021-05-06 06:41:45 -05:00
actionview (6.1.3.2)
activesupport (= 6.1.3.2)
Rails 4 upgrade
2014-05-07 23:14:24 -05:00
builder (~> 3.1)
Upgrade to Rails 5.
2017-08-22 21:58:25 -05:00
erubi (~> 1.4)
rails-dom-testing (~> 2.0)
DEV: Upgrade Discourse to Rails 6 (#8083) * Adjustments to pass specs on Rails 6.0.0 * Use classic autoloader instead of Zeitwerk * Update Rails 6.0.0 deprecated methods * Rails 6.0.0 not allowing column with integer name * Drop freedom_patches/rails6.rb * Default value for trigger_transactional_callbacks? is true * Bump rspec-rails version to 4.0.0.beta2
2019-09-11 19:41:50 -05:00
rails-html-sanitizer (~> 1.1, >= 1.2.0)
Build(deps): Bump actionview_precompiler from 0.2.2 to 0.2.3 Bumps [actionview_precompiler](https://github.com/jhawthorn/actionview_precompiler) from 0.2.2 to 0.2.3. - [Release notes](https://github.com/jhawthorn/actionview_precompiler/releases) - [Commits](https://github.com/jhawthorn/actionview_precompiler/compare/v0.2.2...v0.2.3) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-10-22 13:45:12 -05:00
actionview_precompiler (0.2.3)
PREF: optimise preloading application We preload to ensure as much memory as possible is reused from unicorn master to various workers using copy-on-write (sidekiq, unicorn) This migrates the preloading code into the Discourse module for easier reuse and adds 3 notable preloading changes 1. We attempt to localize a string on each site, ensuring we warmup the i18n 2. We preload all our templates (compiling .erb to class) 3. We warm-up our search tokenizer which uses cppjieba which is a large memory consumer, this will only cause a warmup on CJK sites or sites with the special site setting enabled.
2019-10-06 23:33:37 -05:00
actionview (>= 6.0.a)
DEV: Rails 5.2 upgrade and global gem upgrade This updates tests to use latest rails 5 practice and updates ALL dependencies that could be updated Performance testing shows that performance has not regressed if anything it is marginally faster now.
2018-06-05 02:29:17 -05:00
active_model_serializers (0.8.4)
Rails 4 updates
2013-07-23 13:42:52 -05:00
activemodel (>= 3.0)
SECURITY: Bump Rails to 6.1.3.2 (#12963) Includes fixes for - CVE-2021-22902 - CVE-2021-22903 - CVE-2021-22904 - CVE-2021-22885 https://github.com/rails/rails/blob/v6.1.3.2/actionpack/CHANGELOG.md
2021-05-06 06:41:45 -05:00
activejob (6.1.3.2)
activesupport (= 6.1.3.2)
Upgrade to Rails 5.
2017-08-22 21:58:25 -05:00
globalid (>= 0.3.6)
SECURITY: Bump Rails to 6.1.3.2 (#12963) Includes fixes for - CVE-2021-22902 - CVE-2021-22903 - CVE-2021-22904 - CVE-2021-22885 https://github.com/rails/rails/blob/v6.1.3.2/actionpack/CHANGELOG.md
2021-05-06 06:41:45 -05:00
activemodel (6.1.3.2)
activesupport (= 6.1.3.2)
activerecord (6.1.3.2)
activemodel (= 6.1.3.2)
activesupport (= 6.1.3.2)
activesupport (6.1.3.2)
Upgrade to Rails 5.
2017-08-22 21:58:25 -05:00
concurrent-ruby (~> 1.0, >= 1.0.2)
DEV: Upgrade Rails to 6.1.3.1 (#12688) Rails 6.1.3.1 deprecates a few API and has some internal changes that break our tests suite, so this commit fixes all the deprecations and errors and now Discourse should be fully compatible with Rails 6.1.3.1. We also have a new release of the rails_failover gem that's compatible with Rails 6.1.3.1.
2021-04-21 04:36:32 -05:00
i18n (>= 1.6, < 2)
minitest (>= 5.1)
tzinfo (~> 2.0)
zeitwerk (~> 2.3)
DEV: update dependencies This updates some low risk dependencies. Mostly minor changes. Public suffix now requires Ruby 2.3 and up which is not a problem for us.
2019-12-09 02:20:45 -06:00
addressable (2.7.0)
public_suffix (>= 2.0.2, < 5.0)
DEV: Bump annotate from 3.1.0 to 3.1.1 (#9261) Bumps [annotate](https://github.com/ctran/annotate_models) from 3.1.0 to 3.1.1. - [Release notes](https://github.com/ctran/annotate_models/releases) - [Changelog](https://github.com/ctran/annotate_models/blob/develop/CHANGELOG.md) - [Commits](https://github.com/ctran/annotate_models/compare/v3.1.0...v3.1.1) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com> Very safe upgrade, annotate only used in dev
2020-03-24 00:23:16 -05:00
annotate (3.1.1)
DEV: update minor dependencies These gems have very minor changes, and are low risk updates
2019-04-29 00:00:58 -05:00
activerecord (>= 3.2, < 7.0)
DEV: upgrade low risk gems This updates a bunch of gems that have very low risk of breaking anything or are mostly used in dev. Overall our goal is to be on latest gems with latest bug fixes so this is us working in that direction.
2019-12-06 00:11:10 -06:00
rake (>= 10.4, < 14.0)
Build(deps): Bump ast from 2.4.1 to 2.4.2 (#11825) Bumps [ast](https://github.com/whitequark/ast) from 2.4.1 to 2.4.2. - [Release notes](https://github.com/whitequark/ast/releases) - [Changelog](https://github.com/whitequark/ast/blob/master/CHANGELOG.md) - [Commits](https://github.com/whitequark/ast/compare/v2.4.1...v2.4.2) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-01-24 15:45:44 -06:00
ast (2.4.2)
Build(deps): Bump aws-eventstream from 1.1.0 to 1.1.1 (#12290) Bumps [aws-eventstream](https://github.com/aws/aws-sdk-ruby) from 1.1.0 to 1.1.1. - [Release notes](https://github.com/aws/aws-sdk-ruby/releases) - [Changelog](https://github.com/aws/aws-sdk-ruby/blob/master/gems/aws-eventstream/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-ruby/compare/1.1.0...1.1.1) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-03-04 15:31:16 -06:00
aws-eventstream (1.1.1)
FIX: bump aws-sdk-s3 and aws-sdk-sns (#12333) The reason to update is that I want to install aws-sdk-sqs in a plugin and it relies on the newest version of aws-sdk-core https://github.com/aws/aws-sdk-ruby/blob/version-3/gems/aws-sdk-sqs/aws-sdk-sqs.gemspec#L28
2021-03-10 09:31:27 -06:00
aws-partitions (1.432.0)
aws-sdk-core (3.112.1)
Build(deps): Bump aws-sdk-s3 from 1.61.2 to 1.62.0 (#9479) Bumps [aws-sdk-s3](https://github.com/aws/aws-sdk-ruby) from 1.61.2 to 1.62.0. - [Release notes](https://github.com/aws/aws-sdk-ruby/releases) - [Changelog](https://github.com/aws/aws-sdk-ruby/blob/master/gems/aws-sdk-s3/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-ruby/commits/v1.62.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-04-20 15:06:38 -05:00
aws-eventstream (~> 1, >= 1.0.2)
DEV: Bump aws-sdk-sns from 1.13.0 to 1.21.0 (#8490) Bumps [aws-sdk-sns](https://github.com/aws/aws-sdk-ruby) from 1.13.0 to 1.21.0. - [Release notes](https://github.com/aws/aws-sdk-ruby/releases) - [Changelog](https://github.com/aws/aws-sdk-ruby/blob/master/gems/aws-sdk-sns/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-ruby/compare/1.13.0...1.21.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-12-11 08:13:17 -06:00
aws-partitions (~> 1, >= 1.239.0)
DEV: update AWS dependency AWS is a big moving target, this fills gaps in the API. Technically we use such a tiny surface area that it probably does not matter, but it is good to be up to date here.
2019-04-29 00:39:19 -05:00
aws-sigv4 (~> 1.1)
PERF: remove "fog" dependency
2015-05-25 02:57:06 -05:00
jmespath (~> 1.0)
FIX: bump aws-sdk-s3 and aws-sdk-sns (#12333) The reason to update is that I want to install aws-sdk-sqs in a plugin and it relies on the newest version of aws-sdk-core https://github.com/aws/aws-sdk-ruby/blob/version-3/gems/aws-sdk-sqs/aws-sdk-sqs.gemspec#L28
2021-03-10 09:31:27 -06:00
aws-sdk-kms (1.42.0)
aws-sdk-core (~> 3, >= 3.112.0)
DEV: update AWS dependency AWS is a big moving target, this fills gaps in the API. Technically we use such a tiny surface area that it probably does not matter, but it is good to be up to date here.
2019-04-29 00:39:19 -05:00
aws-sigv4 (~> 1.1)
FIX: bump aws-sdk-s3 and aws-sdk-sns (#12333) The reason to update is that I want to install aws-sdk-sqs in a plugin and it relies on the newest version of aws-sdk-core https://github.com/aws/aws-sdk-ruby/blob/version-3/gems/aws-sdk-sqs/aws-sdk-sqs.gemspec#L28
2021-03-10 09:31:27 -06:00
aws-sdk-s3 (1.90.0)
aws-sdk-core (~> 3, >= 3.112.0)
FEATURE: rake tasks for uploading assets to S3 This opens the door to serving application.js and so on from s3. Also updates s3 gem for some tagging support
2017-10-03 02:00:42 -05:00
aws-sdk-kms (~> 1)
Build(deps): Bump aws-sdk-s3 from 1.36.1 to 1.59.0 (#8502) * Build(deps): Bump aws-sdk-s3 from 1.36.1 to 1.59.0 Bumps [aws-sdk-s3](https://github.com/aws/aws-sdk-ruby) from 1.36.1 to 1.59.0. - [Release notes](https://github.com/aws/aws-sdk-ruby/releases) - [Changelog](https://github.com/aws/aws-sdk-ruby/blob/master/gems/aws-sdk-s3/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-ruby/compare/v1.36.1...v1.59.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> * Dependabot/bundler/aws sdk s3 1.59.0 (#8532)
2019-12-11 12:18:11 -06:00
aws-sigv4 (~> 1.1)
FIX: bump aws-sdk-s3 and aws-sdk-sns (#12333) The reason to update is that I want to install aws-sdk-sqs in a plugin and it relies on the newest version of aws-sdk-core https://github.com/aws/aws-sdk-ruby/blob/version-3/gems/aws-sdk-sqs/aws-sdk-sqs.gemspec#L28
2021-03-10 09:31:27 -06:00
aws-sdk-sns (1.38.0)
aws-sdk-core (~> 3, >= 3.112.0)
DEV: update AWS dependency AWS is a big moving target, this fills gaps in the API. Technically we use such a tiny surface area that it probably does not matter, but it is good to be up to date here.
2019-04-29 00:39:19 -05:00
aws-sigv4 (~> 1.1)
FIX: bump aws-sdk-s3 and aws-sdk-sns (#12333) The reason to update is that I want to install aws-sdk-sqs in a plugin and it relies on the newest version of aws-sdk-core https://github.com/aws/aws-sdk-ruby/blob/version-3/gems/aws-sdk-sqs/aws-sdk-sqs.gemspec#L28
2021-03-10 09:31:27 -06:00
aws-sigv4 (1.2.3)
Build(deps): Bump aws-sigv4 from 1.1.4 to 1.2.0 (#10070) Bumps [aws-sigv4](https://github.com/aws/aws-sdk-ruby) from 1.1.4 to 1.2.0. - [Release notes](https://github.com/aws/aws-sdk-ruby/releases) - [Changelog](https://github.com/aws/aws-sdk-ruby/blob/master/gems/aws-sigv4/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-ruby/compare/1.1.4...1.2.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-06-18 10:11:17 -05:00
aws-eventstream (~> 1, >= 1.0.2)
DEV: low risk gem updates This updates another batch of gems that are lowish risk Most of the gem changes are here for Rails 6 / Ruby 2.6.3 support Excon did some stuff around better cipher ordering
2019-04-29 00:33:01 -05:00
barber (0.12.2)
DEV: Rails 5.2 upgrade and global gem upgrade This updates tests to use latest rails 5 practice and updates ALL dependencies that could be updated Performance testing shows that performance has not regressed if anything it is marginally faster now.
2018-06-05 02:29:17 -05:00
ember-source (>= 1.0, < 3.1)
FIX: HTMLBars compilation was broken in production mode
2015-05-07 09:52:31 -05:00
execjs (>= 1.2, < 3)
Build(deps-dev): Bump better_errors from 2.9.0 to 2.9.1 (#11134) Bumps [better_errors](https://github.com/BetterErrors/better_errors) from 2.9.0 to 2.9.1. - [Release notes](https://github.com/BetterErrors/better_errors/releases) - [Commits](https://github.com/BetterErrors/better_errors/compare/v2.9.0...v2.9.1) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-11-05 08:52:51 -06:00
better_errors (2.9.1)
Initial release of Discourse
2013-02-05 13:16:51 -06:00
coderay (>= 1.0.0)
DEV: Rails 5.2 upgrade and global gem upgrade This updates tests to use latest rails 5 practice and updates ALL dependencies that could be updated Performance testing shows that performance has not regressed if anything it is marginally faster now.
2018-06-05 02:29:17 -05:00
erubi (>= 1.0.0)
Gem updates
2014-08-21 19:33:55 -05:00
rack (>= 0.9.0)
Build(deps-dev): Bump binding_of_caller from 0.8.0 to 1.0.0 (#11595) Bumps [binding_of_caller](https://github.com/banister/binding_of_caller) from 0.8.0 to 1.0.0. - [Release notes](https://github.com/banister/binding_of_caller/releases) - [Commits](https://github.com/banister/binding_of_caller/compare/v0.8.0...v1.0.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-12-28 15:27:06 -06:00
binding_of_caller (1.0.0)
Wot! Ruby 2.0 support?
2013-02-28 04:27:25 -06:00
debug_inspector (>= 0.0.1)
Build(deps): Bump bootsnap from 1.7.4 to 1.7.5 (#12944) Bumps [bootsnap](https://github.com/Shopify/bootsnap) from 1.7.4 to 1.7.5. - [Release notes](https://github.com/Shopify/bootsnap/releases) - [Changelog](https://github.com/Shopify/bootsnap/blob/master/CHANGELOG.md) - [Commits](https://github.com/Shopify/bootsnap/compare/v1.7.4...v1.7.5) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-05-04 17:45:01 -05:00
bootsnap (1.7.5)
add bootsnap to speed up test and dev
2017-05-11 12:51:38 -05:00
msgpack (~> 1.0)
Bump jquery-rails from 4.3.3 to 4.3.5 (#8557) Bumps [jquery-rails](https://github.com/rails/jquery-rails) from 4.3.3 to 4.3.5. - [Release notes](https://github.com/rails/jquery-rails/releases) - [Changelog](https://github.com/rails/jquery-rails/blob/master/CHANGELOG.md) - [Commits](https://github.com/rails/jquery-rails/compare/v4.3.3...v4.3.5) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-12-16 11:44:56 -06:00
builder (3.2.4)
Build(deps-dev): Bump bullet from 6.1.3 to 6.1.4 (#12235) Bumps [bullet](https://github.com/flyerhzm/bullet) from 6.1.3 to 6.1.4. - [Release notes](https://github.com/flyerhzm/bullet/releases) - [Changelog](https://github.com/flyerhzm/bullet/blob/master/CHANGELOG.md) - [Commits](https://github.com/flyerhzm/bullet/compare/6.1.3...6.1.4) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-02-28 18:09:39 -06:00
bullet (6.1.4)
Add Bullet gem to detect N+1 queries.
2016-06-27 20:29:42 -05:00
activesupport (>= 3.0.0)
DEV: update more gems including i18n This updates a few more lower risk gems, the main goal here is to have nothing outdated. Avoiding a giant commit is going to make it slightly easier to partially roll back if something goes wrong
2019-02-04 00:54:39 -06:00
uniform_notifier (~> 1.11)
Build(deps-dev): Bump byebug from 11.1.2 to 11.1.3 Bumps [byebug](https://github.com/deivid-rodriguez/byebug) from 11.1.2 to 11.1.3. - [Release notes](https://github.com/deivid-rodriguez/byebug/releases) - [Changelog](https://github.com/deivid-rodriguez/byebug/blob/master/CHANGELOG.md) - [Commits](https://github.com/deivid-rodriguez/byebug/compare/v11.1.2...v11.1.3) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-04-23 17:13:35 -05:00
byebug (11.1.3)
FEATURE: Webauthn authenticator management with 2FA login (Security Keys) (#8099) Adds 2 factor authentication method via second factor security keys over [web authn](https://developer.mozilla.org/en-US/docs/Web/API/Web_Authentication_API). Allows a user to authenticate a second factor on login, login-via-email, admin-login, and change password routes. Adds registration area within existing user second factor preferences to register multiple security keys. Supports both external (yubikey) and built-in (macOS/android fingerprint readers).
2019-10-01 21:08:41 -05:00
cbor (0.5.9.6)
Gem updates, all up to latest.
2014-09-24 19:40:35 -05:00
certified (1.0.0)
Build(deps): Bump chunky_png from 1.3.15 to 1.4.0 (#11593) Bumps [chunky_png](https://github.com/wvanbergen/chunky_png) from 1.3.15 to 1.4.0. - [Release notes](https://github.com/wvanbergen/chunky_png/releases) - [Changelog](https://github.com/wvanbergen/chunky_png/blob/master/CHANGELOG.rdoc) - [Commits](https://github.com/wvanbergen/chunky_png/compare/v1.3.15...v1.4.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-12-28 15:27:31 -06:00
chunky_png (1.4.0)
Build(deps): Bump coderay from 1.1.2 to 1.1.3 (#9943) Bumps [coderay](https://github.com/rubychan/coderay) from 1.1.2 to 1.1.3. - [Release notes](https://github.com/rubychan/coderay/releases) - [Changelog](https://github.com/rubychan/coderay/blob/master/Changes.textile) - [Commits](https://github.com/rubychan/coderay/compare/v1.1.2...v1.1.3) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-06-01 09:21:46 -05:00
coderay (1.1.3)
DEV: implementing danger for travis
2018-07-24 09:12:15 -05:00
colored2 (3.1.2)
Build(deps): Bump concurrent-ruby from 1.1.7 to 1.1.8 (#11776) Bumps [concurrent-ruby](https://github.com/ruby-concurrency/concurrent-ruby) from 1.1.7 to 1.1.8. - [Release notes](https://github.com/ruby-concurrency/concurrent-ruby/releases) - [Changelog](https://github.com/ruby-concurrency/concurrent-ruby/blob/master/CHANGELOG.md) - [Commits](https://github.com/ruby-concurrency/concurrent-ruby/compare/v1.1.7...v1.1.8) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-01-20 18:02:22 -06:00
concurrent-ruby (1.1.8)
Build(deps): Bump connection_pool from 2.2.4 to 2.2.5 (#12710) Bumps [connection_pool](https://github.com/mperham/connection_pool) from 2.2.4 to 2.2.5. - [Release notes](https://github.com/mperham/connection_pool/releases) - [Changelog](https://github.com/mperham/connection_pool/blob/master/Changes.md) - [Commits](https://github.com/mperham/connection_pool/compare/v2.2.4...v2.2.5) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-04-15 03:15:49 -05:00
connection_pool (2.2.5)
Build(deps): Bump cose from 1.1.0 to 1.2.0 (#10223) Bumps [cose](https://github.com/cedarcode/cose-ruby) from 1.1.0 to 1.2.0. - [Release notes](https://github.com/cedarcode/cose-ruby/releases) - [Changelog](https://github.com/cedarcode/cose-ruby/blob/master/CHANGELOG.md) - [Commits](https://github.com/cedarcode/cose-ruby/compare/v1.1.0...v1.2.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-07-13 11:30:39 -05:00
cose (1.2.0)
FEATURE: Webauthn authenticator management with 2FA login (Security Keys) (#8099) Adds 2 factor authentication method via second factor security keys over [web authn](https://developer.mozilla.org/en-US/docs/Web/API/Web_Authentication_API). Allows a user to authenticate a second factor on login, login-via-email, admin-login, and change password routes. Adds registration area within existing user second factor preferences to register multiple security keys. Supports both external (yubikey) and built-in (macOS/android fingerprint readers).
2019-10-01 21:08:41 -05:00
cbor (~> 0.5.9)
Build(deps): Bump cose from 1.0.0 to 1.1.0 (#10203) Bumps [cose](https://github.com/cedarcode/cose-ruby) from 1.0.0 to 1.1.0. - [Release notes](https://github.com/cedarcode/cose-ruby/releases) - [Changelog](https://github.com/cedarcode/cose-ruby/blob/master/CHANGELOG.md) - [Commits](https://github.com/cedarcode/cose-ruby/compare/v1.0.0...v1.1.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-07-09 13:13:32 -05:00
openssl-signature_algorithm (~> 1.0)
DEV: gem updates Another group of gems updated, better_errors is fairly safe as its for dev chunky_png fairly safe, used for getting image info from pngs, erubi update is very safe. Sanitize is used by onebox and should always be on latest. Long term we should think of making sanitize an optional dependency on onebox cause we are happy to just provide methods from core to do this and it would remove nokogumbo and sanitize deps.
2019-02-04 19:35:42 -06:00
cppjieba_rb (0.3.3)
DEV: Bump crack from 0.4.4 to 0.4.5 (#11579) Bumps [crack](https://github.com/jnunemaker/crack) from 0.4.4 to 0.4.5. - [Release notes](https://github.com/jnunemaker/crack/releases) - [Changelog](https://github.com/jnunemaker/crack/blob/master/History) - [Commits](https://github.com/jnunemaker/crack/commits) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-12-28 20:57:30 -06:00
crack (0.4.5)
rexml
Build(deps): Bump onebox from 1.9.24 to 1.9.25 (#8707) Bumps [onebox](https://github.com/discourse/onebox) from 1.9.24 to 1.9.25. - [Release notes](https://github.com/discourse/onebox/releases) - [Changelog](https://github.com/discourse/onebox/blob/master/CHANGELOG.md) - [Commits](https://github.com/discourse/onebox/commits) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-01-13 08:27:16 -06:00
crass (1.0.6)
Build(deps): Bump css_parser from 1.8.0 to 1.9.0 (#11983) Bumps [css_parser](https://github.com/premailer/css_parser) from 1.8.0 to 1.9.0. - [Release notes](https://github.com/premailer/css_parser/releases) - [Changelog](https://github.com/premailer/css_parser/blob/master/CHANGELOG.md) - [Commits](https://github.com/premailer/css_parser/compare/v1.8.0...v1.9.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-02-04 15:45:19 -06:00
css_parser (1.9.0)
FEATURE: customization of html emails (#7934) This feature adds the ability to customize the HTML part of all emails using a custom HTML template and optionally some CSS to style it. The CSS will be parsed and converted into inline styles because CSS is poorly supported by email clients. When writing the custom HTML and CSS, be aware of what email clients support. Keep customizations very simple. Customizations can be added and edited in Admin > Customize > Email Style. Since the summary email is already heavily styled, there is a setting to disable custom styles for summary emails called "apply custom styles to digest" found in Admin > Settings > Email. As part of this work, RTL locales are now rendered correctly for all emails.
2019-07-30 14:05:08 -05:00
addressable
Build(deps): Bump debug_inspector from 1.0.0 to 1.1.0 (#12499) Bumps [debug_inspector](https://github.com/banister/debug_inspector) from 1.0.0 to 1.1.0. - [Release notes](https://github.com/banister/debug_inspector/releases) - [Commits](https://github.com/banister/debug_inspector/compare/v1.0.0...v1.1.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-03-24 03:08:53 -05:00
debug_inspector (1.1.0)
Build(deps): Bump diff-lcs from 1.4.3 to 1.4.4 (#10155) Bumps [diff-lcs](https://github.com/halostatue/diff-lcs) from 1.4.3 to 1.4.4. - [Release notes](https://github.com/halostatue/diff-lcs/releases) - [Changelog](https://github.com/halostatue/diff-lcs/blob/master/History.md) - [Commits](https://github.com/halostatue/diff-lcs/compare/v1.4.3...v1.4.4) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-07-02 09:03:10 -05:00
diff-lcs (1.4.4)
Build(deps): Bump diffy from 3.3.0 to 3.4.0 Bumps [diffy](https://github.com/samg/diffy) from 3.3.0 to 3.4.0. - [Release notes](https://github.com/samg/diffy/releases) - [Changelog](https://github.com/samg/diffy/blob/main/CHANGELOG) - [Commits](https://github.com/samg/diffy/compare/3.3.0...3.4.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-08-07 11:30:56 -05:00
diffy (3.4.0)
DEV: Switch over to a fork of ember-rails We are switching over to a fork because we are currently on a pinned version of ember-rails 0.18.5 which is pretty old. Upgrading to the latest version causes many things to break which isn't really worth the time to debug while we plan to completely switch over to ember-cli somewhat soonish. Our fork contains a single cherry-pick commit https://github.com/emberjs/ember-rails/pull/534 which will fix an issue when running the `rails g migration` command and it spits out a bunch of deprecation warnings.
2020-09-04 14:29:51 -05:00
discourse-ember-rails (0.18.6)
active_model_serializers
ember-data-source (>= 1.0.0.beta.5)
ember-handlebars-template (>= 0.1.1, < 1.0)
ember-source (>= 1.1.0)
jquery-rails (>= 1.0.17)
railties (>= 3.1)
Build(deps): Bump discourse-ember-source from 3.12.2.2 to 3.12.2.3 (#12368) Bumps [discourse-ember-source](https://github.com/discourse/discourse-ember-source) from 3.12.2.2 to 3.12.2.3. - [Release notes](https://github.com/discourse/discourse-ember-source/releases) - [Commits](https://github.com/discourse/discourse-ember-source/commits/v3.12.2.3) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-03-11 16:53:25 -06:00
discourse-ember-source (3.12.2.3)
Build(deps): Bump discourse-fonts from 0.0.7 to 0.0.8 (#12372) Bumps [discourse-fonts](https://github.com/discourse/discourse-fonts) from 0.0.7 to 0.0.8. - [Release notes](https://github.com/discourse/discourse-fonts/releases) - [Commits](https://github.com/discourse/discourse-fonts/compare/v0.0.7...v0.0.8) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-03-11 17:13:57 -06:00
discourse-fonts (0.0.8)
Build(deps-dev): Bump discourse_dev from 0.2.0 to 0.2.1 (#13002) Bumps [discourse_dev](https://github.com/discourse/discourse_dev) from 0.2.0 to 0.2.1. - [Release notes](https://github.com/discourse/discourse_dev/releases) - [Commits](https://github.com/discourse/discourse_dev/compare/v0.2.0...v0.2.1) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-05-10 05:32:16 -05:00
discourse_dev (0.2.1)
DEV: add `discourse_dev` gem in development dependencies. (#12285) For more details visit https://github.com/discourse/discourse_dev
2021-03-04 11:34:51 -06:00
faker (~> 2.16)
Bump `discourse_image_optim` which uses a global timeout. Our previous solution has the timeout set at the worker level which means the total timeout would be X timeout secs * N number of workers.
2018-07-08 21:30:18 -05:00
discourse_image_optim (0.26.2)
Install `discourse_image_optim` gem for now.
2017-04-20 01:40:16 -05:00
exifr (~> 1.2, >= 1.2.2)
fspath (~> 3.0)
image_size (~> 1.5)
in_threads (~> 1.3)
progress (~> 3.0, >= 3.0.1)
Build(deps): Bump docile from 1.3.5 to 1.4.0 (#13050) Bumps [docile](https://github.com/ms-ati/docile) from 1.3.5 to 1.4.0. - [Release notes](https://github.com/ms-ati/docile/releases) - [Changelog](https://github.com/ms-ati/docile/blob/main/HISTORY.md) - [Commits](https://github.com/ms-ati/docile/compare/v1.3.5...v1.4.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-05-12 18:03:57 -05:00
docile (1.4.0)
DEV: Add schema checking to api doc testing (#11721) * DEV: Add schema checking to api doc testing This commit improves upon rswag which lacks schema checking. rswag really only checks that the https status matches, but this change adds in the json-schema_builder gem which also has schema validation. Now we can define schemas for each of our requests/responses in the `spec/requests/api/schemas` directory which will make our documentation specs a lot cleaner. If we update a serializer by either adding or removing an attribute the tests will now fail (this is a good thing!). Also if you change the type of an attribute say from an array to a string the tests will now fail. This will help significantly with keeping the docs in sync with actual code changes! Now if you change how an endpoint will respond you will have to update the docs too in order for the tests to pass. :D This PR is inspired by: https://www.tealhq.com/post/how-teal-keeps-their-api-tests-and-documentation-in-sync * Swap out json schema validator gem Swapped out the outdated json-schema_builder gem with the json_schemer gem. * Add validation fields to schema In order to have "strict" validation we need to add `additionalProperties: false` to the schema, and we need to specify which attributes are required. Updated the debugging test output to print out the error details if there are any.
2021-01-21 17:28:08 -06:00
ecma-re-validator (0.3.0)
regexp_parser (~> 2.0)
Bump email_reply_trimmer from 0.1.12 to 0.1.13 (#9980) Bumps [email_reply_trimmer](https://github.com/discourse/email_reply_trimmer) from 0.1.12 to 0.1.13. - [Release notes](https://github.com/discourse/email_reply_trimmer/releases) - [Commits](https://github.com/discourse/email_reply_trimmer/commits/v0.1.13) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-06-05 09:00:59 -05:00
email_reply_trimmer (0.1.13)
DEV: Rails 5.2 upgrade and global gem upgrade This updates tests to use latest rails 5 practice and updates ALL dependencies that could be updated Performance testing shows that performance has not regressed if anything it is marginally faster now.
2018-06-05 02:29:17 -05:00
ember-data-source (3.0.2)
ember-source (>= 2, < 3.0)
DEV: upgrades from Ember 2.13 to Ember 3.5.1 (#6808) Co-Authored-By: Bianca Nenciu <nbianca@users.noreply.github.com> Co-Authored-By: David Taylor <david@taylorhq.com>
2019-01-10 04:06:01 -06:00
ember-handlebars-template (0.8.0)
Update sprockets. (#4167) * Update sass-rails. * FIX: Tilt dependency has been removed from Ember::Handlebars::Template. * Update `DiscourseIIFE` to new Sprockets API. * `Rails.application.assets` returns `nil` in production. * Move sprockets-rails out of the assets group. * Pin ember-rails to 0.18.5 which works with Sprockets 3.x. * Update sprockets to 3.6.0. * Make `DiscourseSassCompiler` work with Sprockets 3. * Use `Sass::Rails::SassImporterGlobbing` instead of haxxing our own. * Moneky patch so that we don't add dependencies for our custom css. * FIX: Missing class. * Upgrade ember-handlebars-template. * FIX: require path needs to share the same root as the folder's path. * Bump discourse-qunit-rails. * Update ember-template-compiler.js to 1.12.2. * `prepend` is private in Ruby 2.0.0.
2016-04-17 21:47:52 -05:00
barber (>= 0.11.0)
DEV: upgrades from Ember 2.13 to Ember 3.5.1 (#6808) Co-Authored-By: Bianca Nenciu <nbianca@users.noreply.github.com> Co-Authored-By: David Taylor <david@taylorhq.com>
2019-01-10 04:06:01 -06:00
sprockets (>= 3.3, < 4.1)
ember-source (2.18.2)
Build(deps): Bump erubi from 1.9.0 to 1.10.0 Bumps [erubi](https://github.com/jeremyevans/erubi) from 1.9.0 to 1.10.0. - [Release notes](https://github.com/jeremyevans/erubi/releases) - [Changelog](https://github.com/jeremyevans/erubi/blob/master/CHANGELOG) - [Commits](https://github.com/jeremyevans/erubi/compare/1.9.0...1.10.0) Signed-off-by: dependabot[bot] <support@github.com>
2020-11-15 15:03:38 -06:00
erubi (1.10.0)
Build(deps): Bump excon from 0.80.1 to 0.81.0 (#12885) Bumps [excon](https://github.com/excon/excon) from 0.80.1 to 0.81.0. - [Release notes](https://github.com/excon/excon/releases) - [Changelog](https://github.com/excon/excon/blob/master/changelog.txt) - [Commits](https://github.com/excon/excon/compare/v0.80.1...v0.81.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-04-28 19:01:32 -05:00
excon (0.81.0)
Build(deps): Bump execjs from 2.8.0 to 2.8.1 (#13063) Bumps [execjs](https://github.com/rails/execjs) from 2.8.0 to 2.8.1. - [Release notes](https://github.com/rails/execjs/releases) - [Commits](https://github.com/rails/execjs/compare/v2.8.0...v2.8.1) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-05-14 04:36:35 -05:00
execjs (2.8.1)
Build(deps): Bump exifr from 1.3.8 to 1.3.9 (#10958) Bumps [exifr](https://github.com/remvee/exifr) from 1.3.8 to 1.3.9. - [Release notes](https://github.com/remvee/exifr/releases) - [Changelog](https://github.com/remvee/exifr/blob/master/CHANGELOG) - [Commits](https://github.com/remvee/exifr/compare/release-1.3.8...release-1.3.9) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-10-19 10:48:33 -05:00
exifr (1.3.9)
Build(deps-dev): Bump fabrication from 2.21.1 to 2.22.0 (#12529) Bumps [fabrication](https://github.com/paulelliott/fabrication) from 2.21.1 to 2.22.0. - [Release notes](https://github.com/paulelliott/fabrication/releases) - [Changelog](https://github.com/paulelliott/fabrication/blob/master/Changelog.markdown) - [Commits](https://github.com/paulelliott/fabrication/commits) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-03-26 08:03:08 -05:00
fabrication (2.22.0)
Build(deps): Bump faker from 2.16.0 to 2.17.0 (#12396) Bumps [faker](https://github.com/faker-ruby/faker) from 2.16.0 to 2.17.0. - [Release notes](https://github.com/faker-ruby/faker/releases) - [Changelog](https://github.com/faker-ruby/faker/blob/master/CHANGELOG.md) - [Commits](https://github.com/faker-ruby/faker/compare/v2.16.0...v2.17.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-03-15 05:10:33 -05:00
faker (2.17.0)
DEV: add `discourse_dev` gem in development dependencies. (#12285) For more details visit https://github.com/discourse/discourse_dev
2021-03-04 11:34:51 -06:00
i18n (>= 1.6, < 2)
Use FakeWeb to fake web requests on specs
2013-02-13 04:32:18 -06:00
fakeweb (1.3.0)
Build(deps): Bump faraday from 1.3.0 to 1.4.1 (#12748) Bumps [faraday](https://github.com/lostisland/faraday) from 1.3.0 to 1.4.1. - [Release notes](https://github.com/lostisland/faraday/releases) - [Changelog](https://github.com/lostisland/faraday/blob/main/CHANGELOG.md) - [Commits](https://github.com/lostisland/faraday/compare/v1.3.0...v1.4.1) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-04-19 03:13:56 -05:00
faraday (1.4.1)
faraday-excon (~> 1.1)
Build(deps): Bump faraday from 1.2.0 to 1.3.0 (#11614) Bumps [faraday](https://github.com/lostisland/faraday) from 1.2.0 to 1.3.0. - [Release notes](https://github.com/lostisland/faraday/releases) - [Changelog](https://github.com/lostisland/faraday/blob/master/CHANGELOG.md) - [Commits](https://github.com/lostisland/faraday/compare/v1.2.0...v1.3.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-01-04 05:36:22 -06:00
faraday-net_http (~> 1.0)
Build(deps): Bump faraday from 1.3.0 to 1.4.1 (#12748) Bumps [faraday](https://github.com/lostisland/faraday) from 1.3.0 to 1.4.1. - [Release notes](https://github.com/lostisland/faraday/releases) - [Changelog](https://github.com/lostisland/faraday/blob/main/CHANGELOG.md) - [Commits](https://github.com/lostisland/faraday/compare/v1.3.0...v1.4.1) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-04-19 03:13:56 -05:00
faraday-net_http_persistent (~> 1.1)
Update Gems
2014-02-17 23:02:28 -06:00
multipart-post (>= 1.2, < 3)
Build(deps): Bump faraday from 1.3.0 to 1.4.1 (#12748) Bumps [faraday](https://github.com/lostisland/faraday) from 1.3.0 to 1.4.1. - [Release notes](https://github.com/lostisland/faraday/releases) - [Changelog](https://github.com/lostisland/faraday/blob/main/CHANGELOG.md) - [Commits](https://github.com/lostisland/faraday/compare/v1.3.0...v1.4.1) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-04-19 03:13:56 -05:00
ruby2_keywords (>= 0.0.4)
faraday-excon (1.1.0)
Build(deps): Bump faraday-net_http from 1.0.0 to 1.0.1 (#11695) Bumps [faraday-net_http](https://github.com/lostisland/faraday-net_http) from 1.0.0 to 1.0.1. - [Release notes](https://github.com/lostisland/faraday-net_http/releases) - [Commits](https://github.com/lostisland/faraday-net_http/compare/v1.0.0...v1.0.1) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-01-12 15:31:59 -06:00
faraday-net_http (1.0.1)
Build(deps): Bump faraday from 1.3.0 to 1.4.1 (#12748) Bumps [faraday](https://github.com/lostisland/faraday) from 1.3.0 to 1.4.1. - [Release notes](https://github.com/lostisland/faraday/releases) - [Changelog](https://github.com/lostisland/faraday/blob/main/CHANGELOG.md) - [Commits](https://github.com/lostisland/faraday/compare/v1.3.0...v1.4.1) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-04-19 03:13:56 -05:00
faraday-net_http_persistent (1.1.0)
gem updates
2015-09-23 01:31:46 -05:00
fast_blank (1.0.0)
Initial release of Discourse
2013-02-05 13:16:51 -06:00
fast_xs (0.8.0)
Build(deps): Bump fastimage from 2.2.2 to 2.2.3 (#12236) Bumps [fastimage](https://github.com/sdsykes/fastimage) from 2.2.2 to 2.2.3. - [Release notes](https://github.com/sdsykes/fastimage/releases) - [Commits](https://github.com/sdsykes/fastimage/compare/v2.2.2...v2.2.3) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-02-28 18:13:11 -06:00
fastimage (2.2.3)
Build(deps): Bump ffi from 1.14.2 to 1.15.0 Bumps [ffi](https://github.com/ffi/ffi) from 1.14.2 to 1.15.0. - [Release notes](https://github.com/ffi/ffi/releases) - [Changelog](https://github.com/ffi/ffi/blob/master/CHANGELOG.md) - [Commits](https://github.com/ffi/ffi/compare/1.14.2...v1.15.0) Signed-off-by: dependabot[bot] <support@github.com>
2021-03-07 15:01:49 -06:00
ffi (1.15.0)
Bump fspath from 3.1.0 to 3.1.2 (#8564) Bumps [fspath](https://github.com/toy/fspath) from 3.1.0 to 3.1.2. - [Release notes](https://github.com/toy/fspath/releases) - [Commits](https://github.com/toy/fspath/compare/v3.1.0...v3.1.2) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-12-16 14:19:31 -06:00
fspath (3.1.2)
remove gctools (no longer used) add gctracer for debugging
2016-12-19 22:01:36 -06:00
gc_tracer (1.5.1)
DEV: update mini_sql and some other gems Big one is mini_sql, only noticeable change is that the internals now support jruby!
2019-04-29 00:04:19 -05:00
globalid (0.4.2)
More gem updates.
2017-06-07 16:39:54 -05:00
activesupport (>= 4.2.0)
update gems
2015-03-09 19:09:49 -05:00
guess_html_encoding (0.0.11)
DEV: Add schema checking to api doc testing (#11721) * DEV: Add schema checking to api doc testing This commit improves upon rswag which lacks schema checking. rswag really only checks that the https status matches, but this change adds in the json-schema_builder gem which also has schema validation. Now we can define schemas for each of our requests/responses in the `spec/requests/api/schemas` directory which will make our documentation specs a lot cleaner. If we update a serializer by either adding or removing an attribute the tests will now fail (this is a good thing!). Also if you change the type of an attribute say from an array to a string the tests will now fail. This will help significantly with keeping the docs in sync with actual code changes! Now if you change how an endpoint will respond you will have to update the docs too in order for the tests to pass. :D This PR is inspired by: https://www.tealhq.com/post/how-teal-keeps-their-api-tests-and-documentation-in-sync * Swap out json schema validator gem Swapped out the outdated json-schema_builder gem with the json_schemer gem. * Add validation fields to schema In order to have "strict" validation we need to add `additionalProperties: false` to the schema, and we need to specify which attributes are required. Updated the debugging test output to print out the error details if there are any.
2021-01-21 17:28:08 -06:00
hana (1.3.7)
Build(deps): Bump hashdiff from 1.0.0 to 1.0.1 (#9068) Bumps [hashdiff](https://github.com/liufengyun/hashdiff) from 1.0.0 to 1.0.1. - [Release notes](https://github.com/liufengyun/hashdiff/releases) - [Changelog](https://github.com/liufengyun/hashdiff/blob/master/changelog.md) - [Commits](https://github.com/liufengyun/hashdiff/commits) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-03-02 13:31:19 -06:00
hashdiff (1.0.1)
DEV: Bump Hashie and Faraday (#9583) These were previously pinned due to a dependency in the zendesk plugin. That has now been resolved.
2020-04-29 06:55:30 -05:00
hashie (4.1.0)
DEV: Upgrade highline gem to latest (#10471) Currently we have pinned highline to version 1.7.0. This is the gem that we use to have an interactive command line for tasks like `rake admin:create`. Upgrading to the latest version 2.0.3 will remove ruby 2.7 deprecation warnings. I'm not sure why *this* gem was pinned. I manually executed a couple of our rake tasks that use this and everything seems fine.
2020-08-19 10:15:23 -05:00
highline (2.0.3)
Feature: Push notifications for Android (#5792) * Feature: Push notifications for Android Notification config for desktop and mobile are merged. Desktop notifications stay as they are for desktop views. If mobile mode, push notifications are enabled. Added push notification subscriptions in their own table, rather than through custom fields. Notification banner prompts appear for both mobile and desktop when enabled.
2018-05-04 17:31:48 -05:00
hkdf (0.3.0)
more gem updates
2015-09-23 02:10:15 -05:00
htmlentities (4.3.4)
DEV: update dependencies and add notes about exceptions Previously it was unclear why certain gems are being held back cause Gemfile had no comment explaining it. I tried to add some explanation from memory and remove some exceptions that seemed to be superfluous. This upgrades shoulda to latest, it appears to work once a couple of assertions are removed Also update http accept language used to auto detect language from http header this is tested Zeitwerk small update seems fine
2019-12-05 20:00:16 -06:00
http_accept_language (2.1.1)
Build(deps): Bump i18n from 1.8.9 to 1.8.10 (#12576) Bumps [i18n](https://github.com/ruby-i18n/i18n) from 1.8.9 to 1.8.10. - [Release notes](https://github.com/ruby-i18n/i18n/releases) - [Changelog](https://github.com/ruby-i18n/i18n/blob/master/CHANGELOG.md) - [Commits](https://github.com/ruby-i18n/i18n/compare/v1.8.9...v1.8.10) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-03-31 18:39:01 -05:00
i18n (1.8.10)
DEV: Rails 5.2 upgrade and global gem upgrade This updates tests to use latest rails 5 practice and updates ALL dependencies that could be updated Performance testing shows that performance has not regressed if anything it is marginally faster now.
2018-06-05 02:29:17 -05:00
concurrent-ruby (~> 1.0)
Upgrade image_optim.
2017-04-12 03:56:00 -05:00
image_size (1.5.0)
DEV: update dependencies Quite a few have popped up due to 2.7 release, all gems being updated have non urgent fixes, but it makes sense to be on latest.
2019-12-30 19:20:10 -06:00
in_threads (1.5.4)
DEV: Rails 5.2 upgrade and global gem upgrade This updates tests to use latest rails 5 practice and updates ALL dependencies that could be updated Performance testing shows that performance has not regressed if anything it is marginally faster now.
2018-06-05 02:29:17 -05:00
jmespath (1.4.0)
Build(deps): Bump jquery-rails from 4.3.5 to 4.4.0 (#9709) Bumps [jquery-rails](https://github.com/rails/jquery-rails) from 4.3.5 to 4.4.0. - [Release notes](https://github.com/rails/jquery-rails/releases) - [Changelog](https://github.com/rails/jquery-rails/blob/master/CHANGELOG.md) - [Commits](https://github.com/rails/jquery-rails/compare/v4.3.5...v4.4.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-05-08 12:50:56 -05:00
jquery-rails (4.4.0)
Enable newer version of Ember
2016-10-20 12:22:46 -05:00
rails-dom-testing (>= 1, < 3)
FIX: Update vulnerable gems.
2015-12-26 00:02:42 -06:00
railties (>= 4.2.0)
rails 3 gem update (note will be removed at some point)
2013-12-06 00:06:52 -06:00
thor (>= 0.14, < 2.0)
Build(deps): Bump json from 2.4.1 to 2.5.1 (#11564) Bumps [json](https://github.com/flori/json) from 2.4.1 to 2.5.1. - [Release notes](https://github.com/flori/json/releases) - [Changelog](https://github.com/flori/json/blob/master/CHANGES.md) - [Commits](https://github.com/flori/json/compare/v2.4.1...v2.5.1) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-12-23 05:32:15 -06:00
json (2.5.1)
DEV: Add rswag to aid in api documention (#9546) Adding in rswag will allow us to write spec files to document and test our api.
2020-04-27 17:40:07 -05:00
json-schema (2.8.1)
addressable (>= 2.4)
Build(deps-dev): Bump json_schemer from 0.2.17 to 0.2.18 (#12234) Bumps [json_schemer](https://github.com/davishmcclurg/json_schemer) from 0.2.17 to 0.2.18. - [Release notes](https://github.com/davishmcclurg/json_schemer/releases) - [Commits](https://github.com/davishmcclurg/json_schemer/compare/v0.2.17...v0.2.18) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-03-01 04:56:29 -06:00
json_schemer (0.2.18)
DEV: Add schema checking to api doc testing (#11721) * DEV: Add schema checking to api doc testing This commit improves upon rswag which lacks schema checking. rswag really only checks that the https status matches, but this change adds in the json-schema_builder gem which also has schema validation. Now we can define schemas for each of our requests/responses in the `spec/requests/api/schemas` directory which will make our documentation specs a lot cleaner. If we update a serializer by either adding or removing an attribute the tests will now fail (this is a good thing!). Also if you change the type of an attribute say from an array to a string the tests will now fail. This will help significantly with keeping the docs in sync with actual code changes! Now if you change how an endpoint will respond you will have to update the docs too in order for the tests to pass. :D This PR is inspired by: https://www.tealhq.com/post/how-teal-keeps-their-api-tests-and-documentation-in-sync * Swap out json schema validator gem Swapped out the outdated json-schema_builder gem with the json_schemer gem. * Add validation fields to schema In order to have "strict" validation we need to add `additionalProperties: false` to the schema, and we need to specify which attributes are required. Updated the debugging test output to print out the error details if there are any.
2021-01-21 17:28:08 -06:00
ecma-re-validator (~> 0.3)
hana (~> 1.3)
regexp_parser (~> 2.0)
uri_template (~> 0.7)
Build(deps): Bump jwt from 2.2.2 to 2.2.3 (#12775) Bumps [jwt](https://github.com/jwt/ruby-jwt) from 2.2.2 to 2.2.3. - [Release notes](https://github.com/jwt/ruby-jwt/releases) - [Changelog](https://github.com/jwt/ruby-jwt/blob/master/CHANGELOG.md) - [Commits](https://github.com/jwt/ruby-jwt/compare/v2.2.2...v2.2.3) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-04-21 02:56:32 -05:00
jwt (2.2.3)
Build(deps): Bump kgio from 2.11.2 to 2.11.3 (#8679) Bumps [kgio](https://yhbt.net/kgio/) from 2.11.2 to 2.11.3. Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-01-23 08:46:50 -06:00
kgio (2.11.3)
DEV: Update libv8-node (#12869)
2021-04-28 09:13:09 -05:00
libv8-node (15.14.0.1)
libv8-node (15.14.0.1-arm64-darwin-20)
libv8-node (15.14.0.1-x86_64-darwin-18)
libv8-node (15.14.0.1-x86_64-darwin-19)
libv8-node (15.14.0.1-x86_64-darwin-20)
libv8-node (15.14.0.1-x86_64-linux)
Build(deps-dev): Bump listen from 3.5.0 to 3.5.1 (#12561) Bumps [listen](https://github.com/guard/listen) from 3.5.0 to 3.5.1. - [Release notes](https://github.com/guard/listen/releases) - [Commits](https://github.com/guard/listen/compare/v3.5.0...v3.5.1) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-03-31 09:45:06 -05:00
listen (3.5.1)
Build(deps-dev): Bump listen from 3.1.5 to 3.2.1 (#8498) Bumps [listen](https://github.com/guard/listen) from 3.1.5 to 3.2.1. - [Release notes](https://github.com/guard/listen/releases) - [Commits](https://github.com/guard/listen/compare/v3.1.5...v3.2.1) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-12-10 10:48:40 -06:00
rb-fsevent (~> 0.10, >= 0.10.3)
rb-inotify (~> 0.9, >= 0.9.10)
DEV: update dependencies This updates some low risk dependencies. Mostly minor changes. Public suffix now requires Ruby 2.3 and up which is not a problem for us.
2019-12-09 02:20:45 -06:00
lograge (0.11.2)
DEV: Rails 5.2 upgrade and global gem upgrade This updates tests to use latest rails 5 practice and updates ALL dependencies that could be updated Performance testing shows that performance has not regressed if anything it is marginally faster now.
2018-06-05 02:29:17 -05:00
actionpack (>= 4)
activesupport (>= 4)
railties (>= 4)
EXPERIMENTAL: Allow lograge to be selected as the logging library.
2017-10-27 04:54:45 -05:00
request_store (~> 1.0)
EXPERIMENTAL: Allow Logstash formatter to be enable for lograge logs.
2017-10-31 19:37:11 -05:00
logstash-event (1.2.02)
DEV: Rails 5.2 upgrade and global gem upgrade This updates tests to use latest rails 5 practice and updates ALL dependencies that could be updated Performance testing shows that performance has not regressed if anything it is marginally faster now.
2018-06-05 02:29:17 -05:00
logstash-logger (0.26.1)
EXPERIMENTAL: Allow logs to be shipped via different methods. See https://github.com/dwbutler/logstash-logger#uri-configuration for a list of available methods.
2017-11-13 22:50:26 -06:00
logstash-event (~> 1.2)
Build(deps): Bump logster from 2.9.5 to 2.9.6 (#12149) Bumps [logster](https://github.com/discourse/logster) from 2.9.5 to 2.9.6. - [Release notes](https://github.com/discourse/logster/releases) - [Changelog](https://github.com/discourse/logster/blob/master/CHANGELOG.md) - [Commits](https://github.com/discourse/logster/compare/v2.9.5...v2.9.6) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-02-19 12:24:58 -06:00
logster (2.9.6)
Build(deps): Bump loofah from 2.9.0 to 2.9.1 (#12646) Bumps [loofah](https://github.com/flavorjones/loofah) from 2.9.0 to 2.9.1. - [Release notes](https://github.com/flavorjones/loofah/releases) - [Changelog](https://github.com/flavorjones/loofah/blob/main/CHANGELOG.md) - [Commits](https://github.com/flavorjones/loofah/compare/v2.9.0...v2.9.1) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-04-08 06:04:00 -05:00
loofah (2.9.1)
Upgrade Rails to 5.1.4.
2017-10-03 01:56:44 -05:00
crass (~> 1.0.2)
FEATURE: upgrade to Rails 4.2.4
2015-09-23 00:24:30 -05:00
nokogiri (>= 1.5.9)
update memory profiler, oj and lru redux
2015-06-04 10:03:11 -05:00
lru_redux (1.1.0)
FEATURE: improve performance of anonymous cache This commit introduces 2 features: 1. DISCOURSE_COMPRESS_ANON_CACHE (true|false, default false): this allows you to optionally compress the anon cache body entries in Redis, can be useful for high load sites with Redis that lives on a separate server to to webs 2. DISCOURSE_ANON_CACHE_STORE_THRESHOLD (default 2), only pop entries into redis if we observe them more than N times. This avoids situations where a crawler can walk a big pile of topics and store them all in Redis never to be used. Our default anon cache time for topics is only 60 seconds. Anon cache is in place to avoid the "slashdot" effect where a single topic is hit by 100s of people in one minute.
2019-09-04 02:18:32 -05:00
lz4-ruby (0.3.3)
DEV: update dependencies This updates some more low risk gems, maxmind, hiredis (c wrapper for redis), puma, rbtrace and stackprof.
2019-02-04 18:23:21 -06:00
maxminddb (0.1.22)
Build(deps): Bump memory_profiler from 0.9.14 to 1.0.0 (#11397) Bumps [memory_profiler](https://github.com/SamSaffron/memory_profiler) from 0.9.14 to 1.0.0. - [Release notes](https://github.com/SamSaffron/memory_profiler/releases) - [Changelog](https://github.com/SamSaffron/memory_profiler/blob/master/CHANGELOG.md) - [Commits](https://github.com/SamSaffron/memory_profiler/compare/v0.9.14...v1.0.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-12-02 20:10:11 -06:00
memory_profiler (1.0.0)
Build(deps): Bump message_bus from 3.3.4 to 3.3.5 (#12883) Bumps [message_bus](https://github.com/SamSaffron/message_bus) from 3.3.4 to 3.3.5. - [Release notes](https://github.com/SamSaffron/message_bus/releases) - [Changelog](https://github.com/discourse/message_bus/blob/master/CHANGELOG) - [Commits](https://github.com/SamSaffron/message_bus/compare/v3.3.4...v3.3.5) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-04-29 09:55:23 -05:00
message_bus (3.3.5)
rails 3 gem update (note will be removed at some point)
2013-12-06 00:06:52 -06:00
rack (>= 1.1.3)
DEV: pry-nav was holding back on pry upgrades pry-nav is not yet supported on latest pry, this holds off on upgrading pry, which in turn holds off on upgrading deps Stripping pry-nav for now till it works with latest pry
2020-04-29 18:40:50 -05:00
method_source (1.0.0)
Build(deps): Bump mini_mime from 1.0.3 to 1.1.0 (#12607) Bumps [mini_mime](https://github.com/discourse/mini_mime) from 1.0.3 to 1.1.0. - [Release notes](https://github.com/discourse/mini_mime/releases) - [Changelog](https://github.com/discourse/mini_mime/blob/master/CHANGELOG) - [Commits](https://github.com/discourse/mini_mime/compare/v1.0.3...v1.1.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-04-06 06:04:26 -05:00
mini_mime (1.1.0)
Build(deps): Bump mini_portile2 from 2.5.0 to 2.5.1 (#12886) Bumps [mini_portile2](https://github.com/flavorjones/mini_portile) from 2.5.0 to 2.5.1. - [Release notes](https://github.com/flavorjones/mini_portile/releases) - [Changelog](https://github.com/flavorjones/mini_portile/blob/main/CHANGELOG.md) - [Commits](https://github.com/flavorjones/mini_portile/compare/v2.5.0...v2.5.1) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-04-28 19:00:54 -05:00
mini_portile2 (2.5.1)
Build(deps): Bump mini_racer from 0.3.1 to 0.4.0 (#12681) Bumps [mini_racer](https://github.com/discourse/mini_racer) from 0.3.1 to 0.4.0. - [Release notes](https://github.com/discourse/mini_racer/releases) - [Changelog](https://github.com/rubyjs/mini_racer/blob/master/CHANGELOG) - [Commits](https://github.com/discourse/mini_racer/compare/v0.3.1...v0.4.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-04-13 11:25:34 -05:00
mini_racer (0.4.0)
libv8-node (~> 15.14.0.0)
DEV: Bump mini_scheduler from 0.12.3 to 0.13.0 (#11381) Bumps [mini_scheduler](https://github.com/discourse/mini_scheduler) from 0.12.3 to 0.13.0. - [Release notes](https://github.com/discourse/mini_scheduler/releases) - [Changelog](https://github.com/discourse/mini_scheduler/blob/master/CHANGELOG.md) - [Commits](https://github.com/discourse/mini_scheduler/compare/v0.12.3...v0.13.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-12-07 17:11:57 -06:00
mini_scheduler (0.13.0)
sidekiq (>= 4.2.3)
DEV: upgrade mini_sql (#12465) * DEV: upgrade mini_sql Even though we are not planning on using this quite yet, mini_sql now supports prepared statements. Would like this upgrade merged so we can do some benchmarking. Note, this will not work with pg_bouncer, but sites that are not using it may benefit from the feature. * implement multisite friendly prepared statements
2021-03-23 16:48:04 -05:00
mini_sql (1.1.3)
Build(deps): Bump mini_suffix from 0.3.0 to 0.3.2 (#11839) Bumps [mini_suffix](https://github.com/discourse/mini_suffix) from 0.3.0 to 0.3.2. - [Release notes](https://github.com/discourse/mini_suffix/releases) - [Changelog](https://github.com/discourse/mini_suffix/blob/master/CHANGELOG.md) - [Commits](https://github.com/discourse/mini_suffix/commits/v0.3.2) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-01-25 12:25:40 -06:00
mini_suffix (0.3.2)
UX: Replace heuristic solution for extracting root domain.
2017-11-29 02:24:27 -06:00
ffi (~> 1.9)
Build(deps-dev): Bump minitest from 5.14.3 to 5.14.4 (#12202) Bumps [minitest](https://github.com/seattlerb/minitest) from 5.14.3 to 5.14.4. - [Release notes](https://github.com/seattlerb/minitest/releases) - [Changelog](https://github.com/seattlerb/minitest/blob/master/History.rdoc) - [Commits](https://github.com/seattlerb/minitest/compare/v5.14.3...v5.14.4) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-02-24 15:21:10 -06:00
minitest (5.14.4)
Build(deps-dev): Bump mocha from 1.11.2 to 1.12.0 (#11573) Bumps [mocha](https://github.com/freerange/mocha) from 1.11.2 to 1.12.0. - [Release notes](https://github.com/freerange/mocha/releases) - [Changelog](https://github.com/freerange/mocha/blob/main/RELEASE.md) - [Commits](https://github.com/freerange/mocha/compare/v1.11.2...v1.12.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-12-23 15:58:40 -06:00
mocha (1.12.0)
Build(deps-dev): Bump mock_redis from 0.27.3 to 0.28.0 (#12923)
2021-05-02 18:20:51 -05:00
mock_redis (0.28.0)
Build(deps-dev): Bump mock_redis from 0.27.0 to 0.27.2 (#11664) Bumps [mock_redis](https://github.com/sds/mock_redis) from 0.27.0 to 0.27.2. - [Release notes](https://github.com/sds/mock_redis/releases) - [Changelog](https://github.com/sds/mock_redis/blob/master/CHANGELOG.md) - [Commits](https://github.com/sds/mock_redis/compare/v0.27.0...v0.27.2) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-01-07 15:32:28 -06:00
ruby2_keywords
DEV: Update msgpack to 1.4.2. It seems like 1.4.1 was yanked.
2021-01-31 21:40:39 -06:00
msgpack (1.4.2)
Build(deps): Bump multi_json from 1.14.1 to 1.15.0 (#10215) Bumps [multi_json](https://github.com/intridea/multi_json) from 1.14.1 to 1.15.0. - [Release notes](https://github.com/intridea/multi_json/releases) - [Changelog](https://github.com/intridea/multi_json/blob/master/CHANGELOG.md) - [Commits](https://github.com/intridea/multi_json/commits) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-07-13 14:33:49 -05:00
multi_json (1.15.0)
Update facebook login gem
2017-03-27 15:51:52 -05:00
multi_xml (0.6.0)
Bump omniauth-google-oauth2 gem version Pinning to an old version is no longer required following https://github.com/zquestz/omniauth-google-oauth2/commit/8b4d6dafea1e741a34c92d595ffb2e7b99acd874
2019-06-03 13:17:00 -05:00
multipart-post (2.1.1)
DEV: Bump mustache from 1.1.0 to 1.1.1 (#8478) Minor update, removes one warning which we have not seen yet.
2019-12-08 21:21:55 -06:00
mustache (1.1.1)
Build(deps): Bump nio4r from 2.5.5 to 2.5.7 (#12289) Bumps [nio4r](https://github.com/socketry/nio4r) from 2.5.5 to 2.5.7. - [Release notes](https://github.com/socketry/nio4r/releases) - [Changelog](https://github.com/socketry/nio4r/blob/master/CHANGES.md) - [Commits](https://github.com/socketry/nio4r/compare/v2.5.5...v2.5.7) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-03-04 15:39:04 -06:00
nio4r (2.5.7)
Build(deps): Bump nokogiri from 1.11.2 to 1.11.3 (#12645) Bumps [nokogiri](https://github.com/sparklemotion/nokogiri) from 1.11.2 to 1.11.3. - [Release notes](https://github.com/sparklemotion/nokogiri/releases) - [Changelog](https://github.com/sparklemotion/nokogiri/blob/main/CHANGELOG.md) - [Commits](https://github.com/sparklemotion/nokogiri/compare/v1.11.2...v1.11.3) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-04-08 06:03:42 -05:00
nokogiri (1.11.3)
Build(deps): Bump nokogiri from 1.10.10 to 1.11.0 (#11629) Bumps [nokogiri](https://github.com/sparklemotion/nokogiri) from 1.10.10 to 1.11.0. - [Release notes](https://github.com/sparklemotion/nokogiri/releases) - [Changelog](https://github.com/sparklemotion/nokogiri/blob/master/CHANGELOG.md) - [Commits](https://github.com/sparklemotion/nokogiri/compare/v1.10.10...v1.11.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-01-05 10:12:05 -06:00
mini_portile2 (~> 2.5.0)
racc (~> 1.4)
Build(deps): Bump nokogiri from 1.11.2 to 1.11.3 (#12645) Bumps [nokogiri](https://github.com/sparklemotion/nokogiri) from 1.11.2 to 1.11.3. - [Release notes](https://github.com/sparklemotion/nokogiri/releases) - [Changelog](https://github.com/sparklemotion/nokogiri/blob/main/CHANGELOG.md) - [Commits](https://github.com/sparklemotion/nokogiri/compare/v1.11.2...v1.11.3) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-04-08 06:03:42 -05:00
nokogiri (1.11.3-arm64-darwin)
DEV: Update Gemfile.lock for arm64-darwin-20 (#11865) After this, the only remaining issue preventing Discourse from booting on apple silicon is mini_racer/libv8. See upstream discussion at https://github.com/rubyjs/mini_racer/pull/186 for an experimental solution.
2021-01-27 09:20:29 -06:00
racc (~> 1.4)
Build(deps): Bump nokogiri from 1.11.2 to 1.11.3 (#12645) Bumps [nokogiri](https://github.com/sparklemotion/nokogiri) from 1.11.2 to 1.11.3. - [Release notes](https://github.com/sparklemotion/nokogiri/releases) - [Changelog](https://github.com/sparklemotion/nokogiri/blob/main/CHANGELOG.md) - [Commits](https://github.com/sparklemotion/nokogiri/compare/v1.11.2...v1.11.3) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-04-08 06:03:42 -05:00
nokogiri (1.11.3-x86_64-darwin)
Build(deps): Bump nokogiri from 1.10.10 to 1.11.0 (#11629) Bumps [nokogiri](https://github.com/sparklemotion/nokogiri) from 1.10.10 to 1.11.0. - [Release notes](https://github.com/sparklemotion/nokogiri/releases) - [Changelog](https://github.com/sparklemotion/nokogiri/blob/master/CHANGELOG.md) - [Commits](https://github.com/sparklemotion/nokogiri/compare/v1.10.10...v1.11.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-01-05 10:12:05 -06:00
racc (~> 1.4)
Build(deps): Bump nokogiri from 1.11.2 to 1.11.3 (#12645) Bumps [nokogiri](https://github.com/sparklemotion/nokogiri) from 1.11.2 to 1.11.3. - [Release notes](https://github.com/sparklemotion/nokogiri/releases) - [Changelog](https://github.com/sparklemotion/nokogiri/blob/main/CHANGELOG.md) - [Commits](https://github.com/sparklemotion/nokogiri/compare/v1.11.2...v1.11.3) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-04-08 06:03:42 -05:00
nokogiri (1.11.3-x86_64-linux)
Build(deps): Bump nokogiri from 1.10.10 to 1.11.0 (#11629) Bumps [nokogiri](https://github.com/sparklemotion/nokogiri) from 1.10.10 to 1.11.0. - [Release notes](https://github.com/sparklemotion/nokogiri/releases) - [Changelog](https://github.com/sparklemotion/nokogiri/blob/master/CHANGELOG.md) - [Commits](https://github.com/sparklemotion/nokogiri/compare/v1.10.10...v1.11.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-01-05 10:12:05 -06:00
racc (~> 1.4)
DEV: Bump nokogumbo from 2.0.4 to 2.0.5 (#12461) Bumps [nokogumbo](https://github.com/rubys/nokogumbo) from 2.0.4 to 2.0.5. - [Release notes](https://github.com/rubys/nokogumbo/releases) - [Changelog](https://github.com/rubys/nokogumbo/blob/master/CHANGELOG.md) - [Commits](https://github.com/rubys/nokogumbo/compare/v2.0.4...v2.0.5) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-03-21 19:30:29 -05:00
nokogumbo (2.0.5)
DEV: gem updates Another group of gems updated, better_errors is fairly safe as its for dev chunky_png fairly safe, used for getting image info from pngs, erubi update is very safe. Sanitize is used by onebox and should always be on latest. Long term we should think of making sanitize an optional dependency on onebox cause we are happy to just provide methods from core to do this and it would remove nokogumbo and sanitize deps.
2019-02-04 19:35:42 -06:00
nokogiri (~> 1.8, >= 1.8.4)
Build(deps): Bump oauth from 0.5.5 to 0.5.6 (#12595)
2021-04-05 04:04:05 -05:00
oauth (0.5.6)
Build(deps): Bump oauth2 from 1.4.4 to 1.4.7 (#12462) Bumps [oauth2](https://github.com/oauth-xx/oauth2) from 1.4.4 to 1.4.7. - [Release notes](https://github.com/oauth-xx/oauth2/releases) - [Changelog](https://github.com/oauth-xx/oauth2/blob/master/CHANGELOG.md) - [Commits](https://github.com/oauth-xx/oauth2/compare/v1.4.4...v1.4.7) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-03-22 03:24:34 -05:00
oauth2 (1.4.7)
Build(deps): Bump omniauth-google-oauth2 from 0.7.0 to 0.8.0 (#8488) Bumps [omniauth-google-oauth2](https://github.com/zquestz/omniauth-google-oauth2) from 0.7.0 to 0.8.0. - [Release notes](https://github.com/zquestz/omniauth-google-oauth2/releases) - [Changelog](https://github.com/zquestz/omniauth-google-oauth2/blob/master/CHANGELOG.md) - [Commits](https://github.com/zquestz/omniauth-google-oauth2/compare/v0.7.0...v0.8.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-12-09 14:13:07 -06:00
faraday (>= 0.8, < 2.0)
Bump omniauth-google-oauth2 version
2018-12-31 13:07:18 -06:00
jwt (>= 1.0, < 3.0)
UPDATE: omniauth gem and some others needed to update omniauth for security issues
2014-02-23 17:11:16 -06:00
multi_json (~> 1.3)
multi_xml (~> 0.5)
Update facebook login gem
2017-03-27 15:51:52 -05:00
rack (>= 1.2, < 3)
Build(deps): Bump oj from 3.11.3 to 3.11.5 (#12732) Bumps [oj](https://github.com/ohler55/oj) from 3.11.3 to 3.11.5. - [Release notes](https://github.com/ohler55/oj/releases) - [Changelog](https://github.com/ohler55/oj/blob/develop/CHANGELOG.md) - [Commits](https://github.com/ohler55/oj/compare/v3.11.3...v3.11.5) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-04-16 07:41:39 -05:00
oj (3.11.5)
DEV: Bump omniauth from 1.9.0 to 1.9.1
2020-03-16 08:12:10 -05:00
omniauth (1.9.1)
hashie (>= 3.4.6)
Update facebook login gem
2017-03-27 15:51:52 -05:00
rack (>= 1.6.2, < 3)
Build(deps): Bump omniauth-facebook from 7.0.0 to 8.0.0 (#10964) Bumps [omniauth-facebook](https://github.com/simi/omniauth-facebook) from 7.0.0 to 8.0.0. - [Release notes](https://github.com/simi/omniauth-facebook/releases) - [Changelog](https://github.com/simi/omniauth-facebook/blob/master/CHANGELOG.md) - [Commits](https://github.com/simi/omniauth-facebook/compare/v7.0.0...v8.0.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-10-20 05:03:59 -05:00
omniauth-facebook (8.0.0)
Gem updates, all up to latest.
2014-09-24 19:40:35 -05:00
omniauth-oauth2 (~> 1.2)
DEV: Bump omniauth-github from 1.3.0 to 1.4.0 (#8924) This switches the github API access to use header-based authentication, rather than the deprecated parameter-based method
2020-02-11 03:36:41 -06:00
omniauth-github (1.4.0)
let's use the latest omniauth-github gem
2017-08-07 03:43:54 -05:00
omniauth (~> 1.5)
omniauth-oauth2 (>= 1.4.0, < 2.0)
Build(deps): Bump omniauth-google-oauth2 from 0.8.1 to 0.8.2 (#12405) Bumps [omniauth-google-oauth2](https://github.com/zquestz/omniauth-google-oauth2) from 0.8.1 to 0.8.2. - [Release notes](https://github.com/zquestz/omniauth-google-oauth2/releases) - [Changelog](https://github.com/zquestz/omniauth-google-oauth2/blob/master/CHANGELOG.md) - [Commits](https://github.com/zquestz/omniauth-google-oauth2/compare/v0.8.1...v0.8.2) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-03-15 16:34:14 -05:00
omniauth-google-oauth2 (0.8.2)
Bump omniauth-google-oauth2 version
2018-12-31 13:07:18 -06:00
jwt (>= 2.0)
Build(deps): Bump omniauth-google-oauth2 from 0.8.0 to 0.8.1 (#11479) Bumps [omniauth-google-oauth2](https://github.com/zquestz/omniauth-google-oauth2) from 0.8.0 to 0.8.1. - [Release notes](https://github.com/zquestz/omniauth-google-oauth2/releases) - [Changelog](https://github.com/zquestz/omniauth-google-oauth2/blob/master/CHANGELOG.md) - [Commits](https://github.com/zquestz/omniauth-google-oauth2/compare/v0.8.0...v0.8.1) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-12-14 04:35:50 -06:00
oauth2 (~> 1.1)
Build(deps): Bump omniauth-google-oauth2 from 0.8.1 to 0.8.2 (#12405) Bumps [omniauth-google-oauth2](https://github.com/zquestz/omniauth-google-oauth2) from 0.8.1 to 0.8.2. - [Release notes](https://github.com/zquestz/omniauth-google-oauth2/releases) - [Changelog](https://github.com/zquestz/omniauth-google-oauth2/blob/master/CHANGELOG.md) - [Commits](https://github.com/zquestz/omniauth-google-oauth2/compare/v0.8.1...v0.8.2) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-03-15 16:34:14 -05:00
omniauth (~> 1.1)
Build(deps): Bump omniauth-google-oauth2 from 0.7.0 to 0.8.0 (#8488) Bumps [omniauth-google-oauth2](https://github.com/zquestz/omniauth-google-oauth2) from 0.7.0 to 0.8.0. - [Release notes](https://github.com/zquestz/omniauth-google-oauth2/releases) - [Changelog](https://github.com/zquestz/omniauth-google-oauth2/blob/master/CHANGELOG.md) - [Commits](https://github.com/zquestz/omniauth-google-oauth2/compare/v0.7.0...v0.8.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-12-09 14:13:07 -06:00
omniauth-oauth2 (>= 1.6)
Build(deps): Bump omniauth-oauth from 1.1.0 to 1.2.0 (#11890) Bumps [omniauth-oauth](https://github.com/intridea/omniauth-oauth) from 1.1.0 to 1.2.0. - [Release notes](https://github.com/intridea/omniauth-oauth/releases) - [Commits](https://github.com/intridea/omniauth-oauth/compare/v1.1.0...v1.2.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-01-29 05:34:18 -06:00
omniauth-oauth (1.2.0)
move all logic to omniauth implement omniauth-facebook / omniauth-twitter
2013-02-12 07:47:22 -06:00
oauth
Build(deps): Bump omniauth-oauth from 1.1.0 to 1.2.0 (#11890) Bumps [omniauth-oauth](https://github.com/intridea/omniauth-oauth) from 1.1.0 to 1.2.0. - [Release notes](https://github.com/intridea/omniauth-oauth/releases) - [Commits](https://github.com/intridea/omniauth-oauth/compare/v1.1.0...v1.2.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-01-29 05:34:18 -06:00
omniauth (>= 1.0, < 3)
Build(deps): Bump omniauth-oauth2 from 1.7.0 to 1.7.1 (#11687) Bumps [omniauth-oauth2](https://github.com/omniauth/omniauth-oauth2) from 1.7.0 to 1.7.1. - [Release notes](https://github.com/omniauth/omniauth-oauth2/releases) - [Commits](https://github.com/omniauth/omniauth-oauth2/compare/v1.7.0...v1.7.1) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-01-11 15:53:07 -06:00
omniauth-oauth2 (1.7.1)
Build(deps): Bump omniauth-oauth2 from 1.6.0 to 1.7.0 Bumps [omniauth-oauth2](https://github.com/omniauth/omniauth-oauth2) from 1.6.0 to 1.7.0. - [Release notes](https://github.com/omniauth/omniauth-oauth2/releases) - [Commits](https://github.com/omniauth/omniauth-oauth2/compare/v1.6.0...v1.7.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-08-11 10:43:49 -05:00
oauth2 (~> 1.4)
Build(deps): Bump omniauth-oauth2 from 1.7.0 to 1.7.1 (#11687) Bumps [omniauth-oauth2](https://github.com/omniauth/omniauth-oauth2) from 1.7.0 to 1.7.1. - [Release notes](https://github.com/omniauth/omniauth-oauth2/releases) - [Commits](https://github.com/omniauth/omniauth-oauth2/compare/v1.7.0...v1.7.1) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-01-11 15:53:07 -06:00
omniauth (>= 1.9, < 3)
DEV: Rails 5.2 upgrade and global gem upgrade This updates tests to use latest rails 5 practice and updates ALL dependencies that could be updated Performance testing shows that performance has not regressed if anything it is marginally faster now.
2018-06-05 02:29:17 -05:00
omniauth-twitter (1.4.0)
update auth gems
2015-09-23 02:18:43 -05:00
omniauth-oauth (~> 1.1)
FEATURE: Update omniauth twitter as prep for Ruby 2.4 support
2017-01-14 19:10:09 -06:00
rack
DEV: bundle update onebox (#13059)
2021-05-13 14:34:36 -05:00
onebox (2.2.15)
Build(deps): Bump onebox from 1.9.24 to 1.9.25 (#8707) Bumps [onebox](https://github.com/discourse/onebox) from 1.9.24 to 1.9.25. - [Release notes](https://github.com/discourse/onebox/releases) - [Changelog](https://github.com/discourse/onebox/blob/master/CHANGELOG.md) - [Commits](https://github.com/discourse/onebox/commits) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-01-13 08:27:16 -06:00
addressable (~> 2.7.0)
FIX: Onebox's dependencies were not updated.
2017-04-14 22:39:51 -05:00
htmlentities (~> 4.3)
update onebox
2015-07-21 17:33:09 -05:00
multi_json (~> 1.11)
mustache
FIX: Onebox's dependencies were not updated.
2017-04-14 22:39:51 -05:00
nokogiri (~> 1.7)
bump onebox
2017-01-18 17:28:37 -06:00
sanitize
Build(deps): Bump openssl-signature_algorithm from 1.0.0 to 1.1.1 (#12056) Bumps [openssl-signature_algorithm](https://github.com/cedarcode/openssl-signature_algorithm) from 1.0.0 to 1.1.1. - [Release notes](https://github.com/cedarcode/openssl-signature_algorithm/releases) - [Changelog](https://github.com/cedarcode/openssl-signature_algorithm/blob/master/CHANGELOG.md) - [Commits](https://github.com/cedarcode/openssl-signature_algorithm/compare/v1.0.0...v1.1.1) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-02-11 16:33:06 -06:00
openssl (2.2.0)
openssl-signature_algorithm (1.1.1)
openssl (~> 2.0)
DEV: Bump optimist from 3.0.0 to 3.0.1 (#9476) Bumps [optimist](https://github.com/ManageIQ/optimist) from 3.0.0 to 3.0.1. Mostly about fixing tests and adding a license file
2020-04-21 00:32:24 -05:00
optimist (3.0.1)
Build(deps): Bump parallel from 1.20.0 to 1.20.1 (#11316) Bumps [parallel](https://github.com/grosser/parallel) from 1.20.0 to 1.20.1. - [Release notes](https://github.com/grosser/parallel/releases) - [Commits](https://github.com/grosser/parallel/compare/v1.20.0...v1.20.1) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-11-22 15:48:25 -06:00
parallel (1.20.1)
Build(deps-dev): Bump parallel_tests from 3.6.0 to 3.7.0 (#12657) Bumps [parallel_tests](https://github.com/grosser/parallel_tests) from 3.6.0 to 3.7.0. - [Release notes](https://github.com/grosser/parallel_tests/releases) - [Changelog](https://github.com/grosser/parallel_tests/blob/master/CHANGELOG.md) - [Commits](https://github.com/grosser/parallel_tests/compare/v3.6.0...v3.7.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-04-09 05:03:19 -05:00
parallel_tests (3.7.0)
DEV: Introduce parallel rspec testing Adds the parallel_tests gem, and redis/postgres configuration for running rspec tests in parallel. To use: ``` rake parallel:rake[db:create] rake parallel:rake[db:migrate] rake parallel:spec ``` This brings the test suite from 12m20s to 3m11s on my macOS machine
2019-04-01 03:27:49 -05:00
parallel
Build(deps): Bump parser from 3.0.1.0 to 3.0.1.1 (#12926)
2021-05-02 18:18:53 -05:00
parser (3.0.1.1)
Build(deps): Bump parser from 2.7.1.3 to 2.7.1.4 (#10096) Bumps [parser](https://github.com/whitequark/parser) from 2.7.1.3 to 2.7.1.4. - [Release notes](https://github.com/whitequark/parser/releases) - [Changelog](https://github.com/whitequark/parser/blob/master/CHANGELOG.md) - [Commits](https://github.com/whitequark/parser/compare/v2.7.1.3...v2.7.1.4) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-06-22 11:39:59 -05:00
ast (~> 2.4.1)
DEV: Bump pg from 1.2.2 to 1.2.3 (#9235) Bumps [pg](https://github.com/ged/ruby-pg) from 1.2.2 to 1.2.3. - [Release notes](https://github.com/ged/ruby-pg/releases) - [Changelog](https://github.com/ged/ruby-pg/blob/master/History.rdoc) - [Commits](https://github.com/ged/ruby-pg/commits) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com> Pretty safe, adds protection for 2 possible segfaults.
2020-03-24 00:25:52 -05:00
pg (1.2.3)
Build(deps): Bump progress from 3.5.2 to 3.6.0 (#12596)
2021-04-04 17:45:09 -05:00
progress (3.6.0)
DEV: pry-nav was holding back on pry upgrades pry-nav is not yet supported on latest pry, this holds off on upgrading pry, which in turn holds off on upgrading deps Stripping pry-nav for now till it works with latest pry
2020-04-29 18:40:50 -05:00
pry (0.13.1)
coderay (~> 1.1)
method_source (~> 1.0)
DEV: Add pry-byebug and optionally require pry behind a ENV var for better spec debugging (#9984) We removed pry-nav a while back because it is not up to date with pry but it is super useful. Luckily pry-byebug is here to save us all from Satan's power. To get this to work you need to add the following to your $HOME/.pryrc file. ``` if defined?(PryByebug) Pry.commands.alias_command 'c', 'continue' Pry.commands.alias_command 's', 'step' Pry.commands.alias_command 'n', 'next' Pry.commands.alias_command 'f', 'finish' end Pry::Commands.command /^$/, "repeat last command" do pry_instance.run_command Pry.history.to_a.last end ``` The require-ing of pry, pry-rails, and pry-byebug in specs is controlled by the IMPROVED_SPEC_DEBUGGING flag (disabled by default).
2020-06-04 21:30:34 -05:00
pry-byebug (3.9.0)
byebug (~> 11.0)
pry (~> 0.13.0)
DEV: low risk gem updates This updates another batch of gems that are lowish risk Most of the gem changes are here for Rails 6 / Ruby 2.6.3 support Excon did some stuff around better cipher ordering
2019-04-29 00:33:01 -05:00
pry-rails (0.3.9)
DEV: Rails 5.2 upgrade and global gem upgrade This updates tests to use latest rails 5 practice and updates ALL dependencies that could be updated Performance testing shows that performance has not regressed if anything it is marginally faster now.
2018-06-05 02:29:17 -05:00
pry (>= 0.10.4)
Build(deps): Bump public_suffix from 4.0.5 to 4.0.6 Bumps [public_suffix](https://github.com/weppos/publicsuffix-ruby) from 4.0.5 to 4.0.6. - [Release notes](https://github.com/weppos/publicsuffix-ruby/releases) - [Changelog](https://github.com/weppos/publicsuffix-ruby/blob/master/CHANGELOG.md) - [Commits](https://github.com/weppos/publicsuffix-ruby/compare/v4.0.5...v4.0.6) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-09-02 17:18:26 -05:00
public_suffix (4.0.6)
Build(deps): Bump puma from 5.3.0 to 5.3.1 (#13038) Bumps [puma](https://github.com/puma/puma) from 5.3.0 to 5.3.1. - [Release notes](https://github.com/puma/puma/releases) - [Changelog](https://github.com/puma/puma/blob/master/History.md) - [Commits](https://github.com/puma/puma/compare/v5.3.0...v5.3.1) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-05-11 19:03:16 -05:00
puma (5.3.1)
DEV: Bump puma from 3.12.2 to 4.3.1 (#8475) The downside here is that we are now going to require nio4r which requires some native code. It is reasonably low risk though cause puma is very well tested. We use puma mostly in test environments, not in production.
2019-12-08 19:51:41 -06:00
nio4r (~> 2.0)
DEV: Rails 5.2 upgrade and global gem upgrade This updates tests to use latest rails 5 practice and updates ALL dependencies that could be updated Performance testing shows that performance has not regressed if anything it is marginally faster now.
2018-06-05 02:29:17 -05:00
r2 (0.2.7)
Build(deps): Bump nokogiri from 1.10.10 to 1.11.0 (#11629) Bumps [nokogiri](https://github.com/sparklemotion/nokogiri) from 1.10.10 to 1.11.0. - [Release notes](https://github.com/sparklemotion/nokogiri/releases) - [Changelog](https://github.com/sparklemotion/nokogiri/blob/master/CHANGELOG.md) - [Commits](https://github.com/sparklemotion/nokogiri/compare/v1.10.10...v1.11.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-01-05 10:12:05 -06:00
racc (1.5.2)
DEV: upgrade rack to version 2.2.3 This is very minor, see: https://github.com/advisories/GHSA-j6w9-fv6q-3q52 An attacker can elevate own cookie usage to bypass server cookie restrictions Technically this is a security commit, but the surface area is extremely low, we do not expect any real world impact.
2020-07-08 01:42:31 -05:00
rack (2.2.3)
Build(deps): Bump rack-mini-profiler from 2.3.1 to 2.3.2 (#12911) Bumps [rack-mini-profiler](https://github.com/MiniProfiler/rack-mini-profiler) from 2.3.1 to 2.3.2. - [Release notes](https://github.com/MiniProfiler/rack-mini-profiler/releases) - [Changelog](https://github.com/MiniProfiler/rack-mini-profiler/blob/master/CHANGELOG.md) - [Commits](https://github.com/MiniProfiler/rack-mini-profiler/compare/v2.3.1...v2.3.2) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-04-30 05:26:29 -05:00
rack-mini-profiler (2.3.2)
FEATURE: upgrade rack-mini-profiler new version is collapsed so screen does not fill with timings. expands on click
2016-03-06 05:22:45 -06:00
rack (>= 1.2.0)
Build(deps): Bump rack-protection from 2.0.8.1 to 2.1.0 Bumps [rack-protection](https://github.com/sinatra/sinatra) from 2.0.8.1 to 2.1.0. - [Release notes](https://github.com/sinatra/sinatra/releases) - [Changelog](https://github.com/sinatra/sinatra/blob/master/CHANGELOG.md) - [Commits](https://github.com/sinatra/sinatra/compare/v2.0.8.1...v2.1.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-09-04 13:53:57 -05:00
rack-protection (2.1.0)
Initial release of Discourse
2013-02-05 13:16:51 -06:00
rack
DEV: upgrade Rails to version 5.2.2
2018-12-09 18:29:18 -06:00
rack-test (1.1.0)
Upgrade Rails to 5.1.4.
2017-10-03 01:56:44 -05:00
rack (>= 1.0, < 3)
Upgrade to Rails 5.
2017-08-22 21:58:25 -05:00
rails-dom-testing (2.0.3)
activesupport (>= 4.2.0)
nokogiri (>= 1.6)
DEV: update Rails to version 6.0.1 This version of Rails eliminates a monkey patch that is no longer needed! Additionally it preps us for Ruby 2.7 support.
2019-11-07 23:56:30 -06:00
rails-html-sanitizer (1.3.0)
loofah (~> 2.3)
DEV: Upgrade Rails to 6.1.3.1 (#12688) Rails 6.1.3.1 deprecates a few API and has some internal changes that break our tests suite, so this commit fixes all the deprecations and errors and now Discourse should be fully compatible with Rails 6.1.3.1. We also have a new release of the rails_failover gem that's compatible with Rails 6.1.3.1.
2021-04-21 04:36:32 -05:00
rails_failover (0.7.3)
DEV: Use rails_failover gem for ActiveRecord and Redis failover handling
2020-06-11 00:45:46 -05:00
activerecord (~> 6.0)
Build(deps): Bump rails_failover from 0.6.1 to 0.6.2 (#11350) Bumps rails_failover from 0.6.1 to 0.6.2. Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-11-25 05:21:50 -06:00
concurrent-ruby
DEV: Use rails_failover gem for ActiveRecord and Redis failover handling
2020-06-11 00:45:46 -05:00
railties (~> 6.0)
DEV: Upgrade Rails to 6.1.3.1 (#12688) Rails 6.1.3.1 deprecates a few API and has some internal changes that break our tests suite, so this commit fixes all the deprecations and errors and now Discourse should be fully compatible with Rails 6.1.3.1. We also have a new release of the rails_failover gem that's compatible with Rails 6.1.3.1.
2021-04-21 04:36:32 -05:00
rails_multisite (3.0.0)
Build(deps): Bump rails_multisite from 2.0.7 to 2.1.0 (#9083) Bumps [rails_multisite]() from 2.0.7 to 2.1.0. Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-03-02 04:34:17 -06:00
activerecord (> 5.0, < 7)
railties (> 5.0, < 7)
SECURITY: Bump Rails to 6.1.3.2 (#12963) Includes fixes for - CVE-2021-22902 - CVE-2021-22903 - CVE-2021-22904 - CVE-2021-22885 https://github.com/rails/rails/blob/v6.1.3.2/actionpack/CHANGELOG.md
2021-05-06 06:41:45 -05:00
railties (6.1.3.2)
actionpack (= 6.1.3.2)
activesupport (= 6.1.3.2)
Upgrade to Rails 5.
2017-08-22 21:58:25 -05:00
method_source
Initial release of Discourse
2013-02-05 13:16:51 -06:00
rake (>= 0.8.7)
DEV: Upgrade Rails to 6.1.3.1 (#12688) Rails 6.1.3.1 deprecates a few API and has some internal changes that break our tests suite, so this commit fixes all the deprecations and errors and now Discourse should be fully compatible with Rails 6.1.3.1. We also have a new release of the rails_failover gem that's compatible with Rails 6.1.3.1.
2021-04-21 04:36:32 -05:00
thor (~> 1.0)
try updating rubocop so it does not crash
2018-03-13 01:58:23 -05:00
rainbow (3.0.0)
Build(deps): Bump raindrops from 0.19.0 to 0.19.1 (#8680) Bumps [raindrops](https://yhbt.net/raindrops/) from 0.19.0 to 0.19.1. Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-01-23 08:47:01 -06:00
raindrops (0.19.1)
Build(deps): Bump rake from 13.0.2 to 13.0.3 (#11549) Bumps [rake](https://github.com/ruby/rake) from 13.0.2 to 13.0.3. - [Release notes](https://github.com/ruby/rake/releases) - [Changelog](https://github.com/ruby/rake/blob/master/History.rdoc) - [Commits](https://github.com/ruby/rake/compare/v13.0.2...v13.0.3) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-12-21 15:32:27 -06:00
rake (13.0.3)
Build(deps-dev): Bump rb-fsevent from 0.10.4 to 0.11.0 (#12998) Bumps [rb-fsevent](https://github.com/thibaudgg/rb-fsevent) from 0.10.4 to 0.11.0. - [Release notes](https://github.com/thibaudgg/rb-fsevent/releases) - [Commits](https://github.com/thibaudgg/rb-fsevent/compare/v0.10.4...v0.11.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-05-10 03:25:42 -05:00
rb-fsevent (0.11.0)
DEV: update dependencies Quite a few have popped up due to 2.7 release, all gems being updated have non urgent fixes, but it makes sense to be on latest.
2019-12-30 19:20:10 -06:00
rb-inotify (0.10.1)
DEV: Update sassc gem
2019-03-20 11:04:26 -05:00
ffi (~> 1.0)
DEV: Bump rbtrace from 0.4.13 to 0.4.14 (#10361) Bumps [rbtrace](https://github.com/tmm1/rbtrace) from 0.4.13 to 0.4.14. - [Release notes](https://github.com/tmm1/rbtrace/releases) - [Commits](https://github.com/tmm1/rbtrace/compare/v0.4.13...v0.4.14) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-08-03 20:42:10 -05:00
rbtrace (0.4.14)
rails 3 gem update (note will be removed at some point)
2013-12-06 00:06:52 -06:00
ffi (>= 1.0.6)
msgpack (>= 0.4.3)
DEV: update dependencies This updates some more low risk gems, maxmind, hiredis (c wrapper for redis), puma, rbtrace and stackprof.
2019-02-04 18:23:21 -06:00
optimist (>= 3.0.0)
Use rchardet instead of charlock_holmes gem
2018-07-31 05:02:18 -05:00
rchardet (1.8.0)
Build(deps): Bump redis from 4.2.4 to 4.2.5 (#11301) Bumps [redis](https://github.com/redis/redis-rb) from 4.2.4 to 4.2.5. - [Release notes](https://github.com/redis/redis-rb/releases) - [Changelog](https://github.com/redis/redis-rb/blob/master/CHANGELOG.md) - [Commits](https://github.com/redis/redis-rb/compare/v4.2.4...v4.2.5) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-11-20 08:33:18 -06:00
redis (4.2.5)
Build(deps): Bump redis-namespace from 1.8.0 to 1.8.1 (#11982) Bumps [redis-namespace](https://github.com/resque/redis-namespace) from 1.8.0 to 1.8.1. - [Release notes](https://github.com/resque/redis-namespace/releases) - [Changelog](https://github.com/resque/redis-namespace/blob/master/CHANGELOG.md) - [Commits](https://github.com/resque/redis-namespace/compare/v1.8.0...v1.8.1) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-02-04 15:45:30 -06:00
redis-namespace (1.8.1)
Update Redis gems.
2018-04-19 23:49:36 -05:00
redis (>= 3.0.4)
Build(deps): Bump regexp_parser from 2.0.3 to 2.1.1 (#12191) Bumps [regexp_parser](https://github.com/ammar/regexp_parser) from 2.0.3 to 2.1.1. - [Release notes](https://github.com/ammar/regexp_parser/releases) - [Changelog](https://github.com/ammar/regexp_parser/blob/master/CHANGELOG.md) - [Commits](https://github.com/ammar/regexp_parser/compare/v2.0.3...v2.1.1) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-02-24 06:26:30 -06:00
regexp_parser (2.1.1)
Build(deps): Bump request_store from 1.4.1 to 1.5.0 (#8608) Bumps [request_store](https://github.com/steveklabnik/request_store) from 1.4.1 to 1.5.0. - [Release notes](https://github.com/steveklabnik/request_store/releases) - [Commits](https://github.com/steveklabnik/request_store/compare/v1.4.1...v1.5.0) request_store is a side dependency that is only used for lograge support, not expecting this to break anything.
2019-12-30 00:07:37 -06:00
request_store (1.5.0)
DEV: Rails 5.2 upgrade and global gem upgrade This updates tests to use latest rails 5 practice and updates ALL dependencies that could be updated Performance testing shows that performance has not regressed if anything it is marginally faster now.
2018-06-05 02:29:17 -05:00
rack (>= 1.4)
Build(deps): Bump rexml from 3.2.4 to 3.2.5 (#12606) Bumps [rexml](https://github.com/ruby/rexml) from 3.2.4 to 3.2.5. - [Release notes](https://github.com/ruby/rexml/releases) - [Changelog](https://github.com/ruby/rexml/blob/master/NEWS.md) - [Commits](https://github.com/ruby/rexml/compare/v3.2.4...v3.2.5) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-04-06 06:25:03 -05:00
rexml (3.2.5)
DEV: update minor dependencies These gems have very minor changes, and are low risk updates
2019-04-29 00:00:58 -05:00
rinku (2.0.6)
Build(deps): Bump rotp from 6.1.0 to 6.2.0 Bumps [rotp](https://github.com/mdp/rotp) from 6.1.0 to 6.2.0. - [Release notes](https://github.com/mdp/rotp/releases) - [Changelog](https://github.com/mdp/rotp/blob/master/CHANGELOG.md) - [Commits](https://github.com/mdp/rotp/commits) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-09-30 09:27:08 -05:00
rotp (6.2.0)
Build(deps): Bump rqrcode from 1.2.0 to 2.0.0 (#12962) Bumps [rqrcode](https://github.com/whomwah/rqrcode) from 1.2.0 to 2.0.0. - [Release notes](https://github.com/whomwah/rqrcode/releases) - [Changelog](https://github.com/whomwah/rqrcode/blob/master/CHANGELOG.md) - [Commits](https://github.com/whomwah/rqrcode/compare/v1.2.0...v2.0.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-05-06 09:13:52 -05:00
rqrcode (2.0.0)
FEATURE: Implement 2factor login TOTP implemented review items. Blocking previous codes - valid 2-factor auth tokens can only be authenticated once/30 seconds. I played with updating the “last used” any time the token was attempted but that seemed to be overkill, and frustrating as to why a token would fail. Translatable texts. Move second factor logic to a helper class. Move second factor specific controller endpoints to its own controller. Move serialization logic for 2-factor details in admin user views. Add a login ember component for de-duplication Fix up code formatting Change verbiage of google authenticator add controller tests: second factor controller tests change email tests change password tests admin login tests add qunit tests - password reset, preferences fix: check for 2factor on change email controller fix: email controller - only show second factor errors on attempt fix: check against 'true' to enable second factor. Add modal for explaining what 2fa with links to Google Authenticator/FreeOTP add two factor to email signin link rate limit if second factor token present add rate limiter test for second factor attempts
2017-12-21 19:18:12 -06:00
chunky_png (~> 1.0)
Build(deps): Bump rqrcode from 1.2.0 to 2.0.0 (#12962) Bumps [rqrcode](https://github.com/whomwah/rqrcode) from 1.2.0 to 2.0.0. - [Release notes](https://github.com/whomwah/rqrcode/releases) - [Changelog](https://github.com/whomwah/rqrcode/blob/master/CHANGELOG.md) - [Commits](https://github.com/whomwah/rqrcode/compare/v1.2.0...v2.0.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-05-06 09:13:52 -05:00
rqrcode_core (~> 1.0)
rqrcode_core (1.0.0)
Build(deps-dev): Bump rspec from 3.9.0 to 3.10.0 Bumps [rspec](https://github.com/rspec/rspec) from 3.9.0 to 3.10.0. - [Release notes](https://github.com/rspec/rspec/releases) - [Commits](https://github.com/rspec/rspec/compare/v3.9.0...v3.10.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-10-30 10:56:06 -05:00
rspec (3.10.0)
rspec-core (~> 3.10.0)
rspec-expectations (~> 3.10.0)
rspec-mocks (~> 3.10.0)
Build(deps): Bump rspec-core from 3.10.0 to 3.10.1 (#11585) Bumps [rspec-core](https://github.com/rspec/rspec-core) from 3.10.0 to 3.10.1. - [Release notes](https://github.com/rspec/rspec-core/releases) - [Changelog](https://github.com/rspec/rspec-core/blob/main/Changelog.md) - [Commits](https://github.com/rspec/rspec-core/compare/v3.10.0...v3.10.1) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-12-28 10:19:33 -06:00
rspec-core (3.10.1)
Build(deps-dev): Bump rspec from 3.9.0 to 3.10.0 Bumps [rspec](https://github.com/rspec/rspec) from 3.9.0 to 3.10.0. - [Release notes](https://github.com/rspec/rspec/releases) - [Commits](https://github.com/rspec/rspec/compare/v3.9.0...v3.10.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-10-30 10:56:06 -05:00
rspec-support (~> 3.10.0)
Build(deps-dev): Bump rspec-rails from 4.0.1 to 4.0.2 (#11583) Bumps [rspec-rails](https://github.com/rspec/rspec-rails) from 4.0.1 to 4.0.2. - [Release notes](https://github.com/rspec/rspec-rails/releases) - [Changelog](https://github.com/rspec/rspec-rails/blob/main/Changelog.md) - [Commits](https://github.com/rspec/rspec-rails/compare/v4.0.1...v4.0.2) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-12-28 10:45:41 -06:00
rspec-expectations (3.10.1)
Update rspec to rspec 3.2.0
2015-04-25 17:29:43 -05:00
diff-lcs (>= 1.2.0, < 2.0)
Build(deps-dev): Bump rspec from 3.9.0 to 3.10.0 Bumps [rspec](https://github.com/rspec/rspec) from 3.9.0 to 3.10.0. - [Release notes](https://github.com/rspec/rspec/releases) - [Commits](https://github.com/rspec/rspec/compare/v3.9.0...v3.10.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-10-30 10:56:06 -05:00
rspec-support (~> 3.10.0)
Build(deps-dev): Bump rspec-html-matchers from 0.9.2 to 0.9.4 (#10842) Bumps [rspec-html-matchers](https://github.com/kucaahbe/rspec-html-matchers) from 0.9.2 to 0.9.4. - [Release notes](https://github.com/kucaahbe/rspec-html-matchers/releases) - [Changelog](https://github.com/kucaahbe/rspec-html-matchers/blob/master/CHANGELOG.md) - [Commits](https://github.com/kucaahbe/rspec-html-matchers/compare/v0.9.2...v0.9.4) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-10-07 08:51:10 -05:00
rspec-html-matchers (0.9.4)
FIX: allow emoji class when crawling embedded content, add rspc-html-matchers
2015-09-24 17:20:59 -05:00
nokogiri (~> 1)
Update gems in development group.
2017-06-06 21:12:44 -05:00
rspec (>= 3.0.0.a, < 4)
Build(deps): Bump rspec-mocks from 3.10.1 to 3.10.2 (#11907) Bumps [rspec-mocks](https://github.com/rspec/rspec-mocks) from 3.10.1 to 3.10.2. - [Release notes](https://github.com/rspec/rspec-mocks/releases) - [Changelog](https://github.com/rspec/rspec-mocks/blob/main/Changelog.md) - [Commits](https://github.com/rspec/rspec-mocks/compare/v3.10.1...v3.10.2) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-01-31 15:42:54 -06:00
rspec-mocks (3.10.2)
Update rspec to rspec 3.2.0
2015-04-25 17:29:43 -05:00
diff-lcs (>= 1.2.0, < 2.0)
Build(deps-dev): Bump rspec from 3.9.0 to 3.10.0 Bumps [rspec](https://github.com/rspec/rspec) from 3.9.0 to 3.10.0. - [Release notes](https://github.com/rspec/rspec/releases) - [Commits](https://github.com/rspec/rspec/compare/v3.9.0...v3.10.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-10-30 10:56:06 -05:00
rspec-support (~> 3.10.0)
Build(deps-dev): Bump rspec-rails from 5.0.0 to 5.0.1 (#12443) Bumps [rspec-rails](https://github.com/rspec/rspec-rails) from 5.0.0 to 5.0.1. - [Release notes](https://github.com/rspec/rspec-rails/releases) - [Changelog](https://github.com/rspec/rspec-rails/blob/main/Changelog.md) - [Commits](https://github.com/rspec/rspec-rails/compare/v5.0.0...v5.0.1) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-03-18 19:55:42 -05:00
rspec-rails (5.0.1)
Build(deps-dev): Bump rspec-rails from 4.1.0 to 5.0.0 (#12329) Bumps [rspec-rails](https://github.com/rspec/rspec-rails) from 4.1.0 to 5.0.0. - [Release notes](https://github.com/rspec/rspec-rails/releases) - [Changelog](https://github.com/rspec/rspec-rails/blob/main/Changelog.md) - [Commits](https://github.com/rspec/rspec-rails/compare/v4.1.0...v5.0.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-03-09 15:34:53 -06:00
actionpack (>= 5.2)
activesupport (>= 5.2)
railties (>= 5.2)
Build(deps-dev): Bump rspec-rails from 4.0.1 to 4.0.2 (#11583) Bumps [rspec-rails](https://github.com/rspec/rspec-rails) from 4.0.1 to 4.0.2. - [Release notes](https://github.com/rspec/rspec-rails/releases) - [Changelog](https://github.com/rspec/rspec-rails/blob/main/Changelog.md) - [Commits](https://github.com/rspec/rspec-rails/compare/v4.0.1...v4.0.2) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-12-28 10:45:41 -06:00
rspec-core (~> 3.10)
rspec-expectations (~> 3.10)
rspec-mocks (~> 3.10)
rspec-support (~> 3.10)
Build(deps): Bump rspec-support from 3.10.1 to 3.10.2 (#11908) Bumps [rspec-support](https://github.com/rspec/rspec-support) from 3.10.1 to 3.10.2. - [Release notes](https://github.com/rspec/rspec-support/releases) - [Changelog](https://github.com/rspec/rspec-support/blob/main/Changelog.md) - [Commits](https://github.com/rspec/rspec-support/compare/v3.10.1...v3.10.2) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-01-31 15:42:36 -06:00
rspec-support (3.10.2)
Build(deps-dev): Bump rswag-specs from 2.3.3 to 2.4.0 (#12022) Bumps [rswag-specs](https://github.com/rswag/rswag) from 2.3.3 to 2.4.0. - [Release notes](https://github.com/rswag/rswag/releases) - [Changelog](https://github.com/rswag/rswag/blob/master/CHANGELOG.md) - [Commits](https://github.com/rswag/rswag/compare/2.3.3...2.4.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-02-10 05:13:46 -06:00
rswag-specs (2.4.0)
DEV: Add rswag to aid in api documention (#9546) Adding in rswag will allow us to write spec files to document and test our api.
2020-04-27 17:40:07 -05:00
activesupport (>= 3.1, < 7.0)
json-schema (~> 2.2)
railties (>= 3.1, < 7.0)
Add RTL support to Discourse CSS pre-processing using the RTLit gem and configurable via discourse.conf
2014-08-08 01:31:31 -05:00
rtlit (0.0.5)
Build(deps): Bump rubocop from 1.13.0 to 1.14.0 Bumps [rubocop](https://github.com/rubocop/rubocop) from 1.13.0 to 1.14.0. - [Release notes](https://github.com/rubocop/rubocop/releases) - [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md) - [Commits](https://github.com/rubocop/rubocop/compare/v1.13.0...v1.14.0) Signed-off-by: dependabot[bot] <support@github.com>
2021-05-05 17:21:39 -05:00
rubocop (1.14.0)
Install rubocop in development mode.
2017-07-31 20:51:44 -05:00
parallel (~> 1.10)
Build(deps): Bump unicode-display_width from 1.7.0 to 2.0.0 (#11662) Bumps [unicode-display_width](https://github.com/janlelis/unicode-display_width) from 1.7.0 to 2.0.0. - [Release notes](https://github.com/janlelis/unicode-display_width/releases) - [Changelog](https://github.com/janlelis/unicode-display_width/blob/main/CHANGELOG.md) - [Commits](https://github.com/janlelis/unicode-display_width/compare/v1.7.0...v2.0.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-01-07 15:31:21 -06:00
parser (>= 3.0.0.0)
try updating rubocop so it does not crash
2018-03-13 01:58:23 -05:00
rainbow (>= 2.2.2, < 4.0)
DEV: Bump rubocop from 1.5.1 to 1.5.2 (#11414) Bumps [rubocop](https://github.com/rubocop-hq/rubocop) from 1.5.1 to 1.5.2. - [Release notes](https://github.com/rubocop-hq/rubocop/releases) - [Changelog](https://github.com/rubocop-hq/rubocop/blob/master/CHANGELOG.md) - [Commits](https://github.com/rubocop-hq/rubocop/compare/v1.5.1...v1.5.2) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-12-07 17:11:31 -06:00
regexp_parser (>= 1.8, < 3.0)
Build(deps-dev): Bump rubocop from 0.79.0 to 0.80.0 (#8997) Bumps [rubocop](https://github.com/rubocop-hq/rubocop) from 0.79.0 to 0.80.0. - [Release notes](https://github.com/rubocop-hq/rubocop/releases) - [Changelog](https://github.com/rubocop-hq/rubocop/blob/master/CHANGELOG.md) - [Commits](https://github.com/rubocop-hq/rubocop/compare/v0.79.0...v0.80.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: Robin Ward <robin.ward@gmail.com>
2020-02-19 13:36:37 -06:00
rexml
Build(deps): Bump rubocop from 1.13.0 to 1.14.0 Bumps [rubocop](https://github.com/rubocop/rubocop) from 1.13.0 to 1.14.0. - [Release notes](https://github.com/rubocop/rubocop/releases) - [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md) - [Commits](https://github.com/rubocop/rubocop/compare/v1.13.0...v1.14.0) Signed-off-by: dependabot[bot] <support@github.com>
2021-05-05 17:21:39 -05:00
rubocop-ast (>= 1.5.0, < 2.0)
Install rubocop in development mode.
2017-07-31 20:51:44 -05:00
ruby-progressbar (~> 1.7)
Build(deps): Bump unicode-display_width from 1.7.0 to 2.0.0 (#11662) Bumps [unicode-display_width](https://github.com/janlelis/unicode-display_width) from 1.7.0 to 2.0.0. - [Release notes](https://github.com/janlelis/unicode-display_width/releases) - [Changelog](https://github.com/janlelis/unicode-display_width/blob/main/CHANGELOG.md) - [Commits](https://github.com/janlelis/unicode-display_width/compare/v1.7.0...v2.0.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-01-07 15:31:21 -06:00
unicode-display_width (>= 1.4.0, < 3.0)
Build(deps): Bump rubocop-ast from 1.4.1 to 1.5.0 (#12924)
2021-05-02 18:20:06 -05:00
rubocop-ast (1.5.0)
parser (>= 3.0.1.1)
Build(deps-dev): Bump rubocop-discourse from 2.4.0 to 2.4.1 (#11151) Bumps [rubocop-discourse](https://github.com/discourse/rubocop-discourse) from 2.4.0 to 2.4.1. - [Release notes](https://github.com/discourse/rubocop-discourse/releases) - [Commits](https://github.com/discourse/rubocop-discourse/compare/v2.4.0...v2.4.1) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-11-06 13:54:21 -06:00
rubocop-discourse (2.4.1)
DEV: Update rubocop-discourse from 2.3.2 to 2.4.0 (#11079) Also fixes whitespace related issues raised by rubocop.
2020-10-30 09:04:29 -05:00
rubocop (>= 1.1.0)
Build(deps-dev): Bump rubocop-discourse from 2.4.0 to 2.4.1 (#11151) Bumps [rubocop-discourse](https://github.com/discourse/rubocop-discourse) from 2.4.0 to 2.4.1. - [Release notes](https://github.com/discourse/rubocop-discourse/releases) - [Commits](https://github.com/discourse/rubocop-discourse/compare/v2.4.0...v2.4.1) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-11-06 13:54:21 -06:00
rubocop-rspec (>= 2.0.0)
Build(deps): Bump rubocop-rspec from 2.2.0 to 2.3.0 (#12884) Bumps [rubocop-rspec](https://github.com/rubocop/rubocop-rspec) from 2.2.0 to 2.3.0. - [Release notes](https://github.com/rubocop/rubocop-rspec/releases) - [Changelog](https://github.com/rubocop/rubocop-rspec/blob/master/CHANGELOG.md) - [Commits](https://github.com/rubocop/rubocop-rspec/compare/v2.2.0...v2.3.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-04-28 19:03:02 -05:00
rubocop-rspec (2.3.0)
DEV: Update rubocop-discourse from 2.3.2 to 2.4.0 (#11079) Also fixes whitespace related issues raised by rubocop.
2020-10-30 09:04:29 -05:00
rubocop (~> 1.0)
Build(deps-dev): Bump rubocop-discourse from 2.4.0 to 2.4.1 (#11151) Bumps [rubocop-discourse](https://github.com/discourse/rubocop-discourse) from 2.4.0 to 2.4.1. - [Release notes](https://github.com/discourse/rubocop-discourse/releases) - [Commits](https://github.com/discourse/rubocop-discourse/compare/v2.4.0...v2.4.1) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-11-06 13:54:21 -06:00
rubocop-ast (>= 1.1.0)
Build(deps-dev): Bump ruby-prof from 1.4.2 to 1.4.3 (#12101) Bumps [ruby-prof](https://github.com/ruby-prof/ruby-prof) from 1.4.2 to 1.4.3. - [Release notes](https://github.com/ruby-prof/ruby-prof/releases) - [Changelog](https://github.com/ruby-prof/ruby-prof/blob/master/CHANGES) - [Commits](https://github.com/ruby-prof/ruby-prof/compare/1.4.2...1.4.3) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-02-17 08:56:10 -06:00
ruby-prof (1.4.3)
Build(deps): Bump ruby-progressbar from 1.10.1 to 1.11.0 (#11613) Bumps [ruby-progressbar](https://github.com/jfelchner/ruby-progressbar) from 1.10.1 to 1.11.0. - [Release notes](https://github.com/jfelchner/ruby-progressbar/releases) - [Changelog](https://github.com/jfelchner/ruby-progressbar/blob/master/CHANGELOG.md) - [Commits](https://github.com/jfelchner/ruby-progressbar/compare/releases/v1.10.1...releases/v1.11.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-01-04 05:11:06 -06:00
ruby-progressbar (1.11.0)
Gem updates, all up to latest.
2014-09-24 19:40:35 -05:00
ruby-readability (0.7.0)
Drop Rails3 support
2014-02-17 10:44:28 -06:00
guess_html_encoding (>= 0.0.4)
Gem updates, all up to latest.
2014-09-24 19:40:35 -05:00
nokogiri (>= 1.6.0)
Build(deps): Bump ruby2_keywords from 0.0.2 to 0.0.4 Bumps [ruby2_keywords](https://github.com/ruby/ruby2_keywords) from 0.0.2 to 0.0.4. - [Release notes](https://github.com/ruby/ruby2_keywords/releases) - [Commits](https://github.com/ruby/ruby2_keywords/commits) Signed-off-by: dependabot[bot] <support@github.com>
2021-01-19 15:05:53 -06:00
ruby2_keywords (0.0.4)
Build(deps): Bump rubyzip from 2.2.0 to 2.3.0 (#9208) Bumps [rubyzip](https://github.com/rubyzip/rubyzip) from 2.2.0 to 2.3.0. - [Release notes](https://github.com/rubyzip/rubyzip/releases) - [Changelog](https://github.com/rubyzip/rubyzip/blob/master/Changelog.md) - [Commits](https://github.com/rubyzip/rubyzip/compare/v2.2.0...v2.3.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-03-16 07:17:41 -05:00
rubyzip (2.3.0)
Build(deps): Bump sanitize from 5.2.2 to 5.2.3 (#11697) Bumps [sanitize](https://github.com/rgrove/sanitize) from 5.2.2 to 5.2.3. - [Release notes](https://github.com/rgrove/sanitize/releases) - [Changelog](https://github.com/rgrove/sanitize/blob/master/HISTORY.md) - [Commits](https://github.com/rgrove/sanitize/compare/v5.2.2...v5.2.3) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-01-12 15:42:03 -06:00
sanitize (5.2.3)
more gem updates
2015-09-23 02:10:15 -05:00
crass (~> 1.0.2)
DEV: gem updates Another group of gems updated, better_errors is fairly safe as its for dev chunky_png fairly safe, used for getting image info from pngs, erubi update is very safe. Sanitize is used by onebox and should always be on latest. Long term we should think of making sanitize an optional dependency on onebox cause we are happy to just provide methods from core to do this and it would remove nokogumbo and sanitize deps.
2019-02-04 19:35:42 -06:00
nokogiri (>= 1.8.0)
nokogumbo (~> 2.0)
Revert "DEV: upgrades sassc to 2.4.0 (#10447)" We suspect it could be the cause of some issues with themes. This reverts commit 2fac77cc488011925d8d972595c997bd0cef869f.
2020-08-21 11:23:01 -05:00
sassc (2.0.1)
DEV: Update sassc gem
2019-03-20 11:04:26 -05:00
ffi (~> 1.9)
Revert "DEV: upgrades sassc to 2.4.0 (#10447)" We suspect it could be the cause of some issues with themes. This reverts commit 2fac77cc488011925d8d972595c997bd0cef869f.
2020-08-21 11:23:01 -05:00
rake
DEV: Bump sassc-rails from 2.1.1 to 2.1.2 (#8501) Bumps [sassc-rails](https://github.com/sass/sassc-rails) from 2.1.1 to 2.1.2. - [Release notes](https://github.com/sass/sassc-rails/releases) - [Commits](https://github.com/sass/sassc-rails/compare/v2.1.1...v2.1.2) Minor fixes in the gem
2019-12-09 18:50:34 -06:00
sassc-rails (2.1.2)
FIX: Add `sassc-rails` for plugins using sprockets to compile scss This did not affect core because we have a custom stylesheet pipeline
2019-03-21 18:23:29 -05:00
railties (>= 4.0.0)
sassc (>= 2.0)
sprockets (> 3.0)
sprockets-rails
tilt
DEV: Rails 5.2 upgrade and global gem upgrade This updates tests to use latest rails 5 practice and updates ALL dependencies that could be updated Performance testing shows that performance has not regressed if anything it is marginally faster now.
2018-06-05 02:29:17 -05:00
seed-fu (2.3.9)
More gem updates.
2017-06-07 16:39:54 -05:00
activerecord (>= 3.1)
activesupport (>= 3.1)
Build(deps-dev): Bump shoulda-matchers from 4.5.0 to 4.5.1 (#11826) Bumps [shoulda-matchers](https://github.com/thoughtbot/shoulda-matchers) from 4.5.0 to 4.5.1. - [Release notes](https://github.com/thoughtbot/shoulda-matchers/releases) - [Changelog](https://github.com/thoughtbot/shoulda-matchers/blob/master/CHANGELOG.md) - [Commits](https://github.com/thoughtbot/shoulda-matchers/compare/v4.5.0...v4.5.1) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-01-24 15:44:45 -06:00
shoulda-matchers (4.5.1)
DEV: update dependencies and add notes about exceptions Previously it was unclear why certain gems are being held back cause Gemfile had no comment explaining it. I tried to add some explanation from memory and remove some exceptions that seemed to be superfluous. This upgrades shoulda to latest, it appears to work once a couple of assertions are removed Also update http accept language used to auto detect language from http header this is tested Zeitwerk small update seems fine
2019-12-05 20:00:16 -06:00
activesupport (>= 4.2.0)
Build(deps): Bump sidekiq from 6.2.0 to 6.2.1 (#12644) Bumps [sidekiq](https://github.com/mperham/sidekiq) from 6.2.0 to 6.2.1. - [Release notes](https://github.com/mperham/sidekiq/releases) - [Changelog](https://github.com/mperham/sidekiq/blob/master/Changes.md) - [Commits](https://github.com/mperham/sidekiq/compare/v6.2.0...v6.2.1) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-04-08 06:05:59 -05:00
sidekiq (6.2.1)
DEV: Bump sidekiq from 5.2.7 to 6.0.3 (#8499) Bumps [sidekiq](https://github.com/mperham/sidekiq) from 5.2.7 to 6.0.3. - [Release notes](https://github.com/mperham/sidekiq/releases) - [Changelog](https://github.com/mperham/sidekiq/blob/master/Changes.md) - [Commits](https://github.com/mperham/sidekiq/compare/v5.2.7...v6.0.3) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> The big thing for us with this update is that it makes sidekiq a bit faster.
2019-12-09 19:05:02 -06:00
connection_pool (>= 2.2.2)
DEV: Bump sidekiq from 6.0.4 to 6.0.5 (#8964) Bumps [sidekiq](https://github.com/mperham/sidekiq) from 6.0.4 to 6.0.5. - [Release notes](https://github.com/mperham/sidekiq/releases) - [Changelog](https://github.com/mperham/sidekiq/blob/master/Changes.md) - [Commits](https://github.com/mperham/sidekiq/compare/v6.0.4...v6.0.5) Changes are safe, mostly around 2.7 support
2020-02-13 21:53:31 -06:00
rack (~> 2.0)
Build(deps): Bump sidekiq from 6.0.7 to 6.1.1 Bumps [sidekiq](https://github.com/mperham/sidekiq) from 6.0.7 to 6.1.1. - [Release notes](https://github.com/mperham/sidekiq/releases) - [Changelog](https://github.com/mperham/sidekiq/blob/master/Changes.md) - [Commits](https://github.com/mperham/sidekiq/compare/v6.0.7...v6.1.1) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-08-24 14:23:58 -05:00
redis (>= 4.2.0)
Build(deps-dev): Bump simplecov from 0.21.1 to 0.21.2 (#11676) Bumps [simplecov](https://github.com/simplecov-ruby/simplecov) from 0.21.1 to 0.21.2. - [Release notes](https://github.com/simplecov-ruby/simplecov/releases) - [Changelog](https://github.com/simplecov-ruby/simplecov/blob/main/CHANGELOG.md) - [Commits](https://github.com/simplecov-ruby/simplecov/compare/v0.21.1...v0.21.2) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-01-10 17:23:10 -06:00
simplecov (0.21.2)
DEV: Add simplecov as test dependency (#7271)
2019-04-01 00:00:11 -05:00
docile (~> 1.1)
Build(deps-dev): Bump simplecov from 0.18.1 to 0.18.2 (#8945) Bumps [simplecov](https://github.com/colszowka/simplecov) from 0.18.1 to 0.18.2. - [Release notes](https://github.com/colszowka/simplecov/releases) - [Changelog](https://github.com/colszowka/simplecov/blob/master/CHANGELOG.md) - [Commits](https://github.com/colszowka/simplecov/compare/v0.18.1...v0.18.2) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-02-12 12:51:21 -06:00
simplecov-html (~> 0.11)
Build(deps-dev): Bump simplecov from 0.19.1 to 0.20.0 Bumps [simplecov](https://github.com/simplecov-ruby/simplecov) from 0.19.1 to 0.20.0. - [Release notes](https://github.com/simplecov-ruby/simplecov/releases) - [Changelog](https://github.com/simplecov-ruby/simplecov/blob/main/CHANGELOG.md) - [Commits](https://github.com/simplecov-ruby/simplecov/compare/v0.19.1...v0.20.0) Signed-off-by: dependabot[bot] <support@github.com>
2020-11-29 15:02:46 -06:00
simplecov_json_formatter (~> 0.1)
Build(deps): Bump simplecov-html from 0.12.2 to 0.12.3 Bumps [simplecov-html](https://github.com/simplecov-ruby/simplecov-html) from 0.12.2 to 0.12.3. - [Release notes](https://github.com/simplecov-ruby/simplecov-html/releases) - [Changelog](https://github.com/simplecov-ruby/simplecov-html/blob/main/CHANGELOG.md) - [Commits](https://github.com/simplecov-ruby/simplecov-html/compare/v0.12.2...v0.12.3) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-09-23 12:07:24 -05:00
simplecov-html (0.12.3)
Build(deps): Bump simplecov_json_formatter from 0.1.2 to 0.1.3 (#12934) Bumps [simplecov_json_formatter](https://github.com/fede-moya/simplecov_json_formatter) from 0.1.2 to 0.1.3. - [Release notes](https://github.com/fede-moya/simplecov_json_formatter/releases) - [Changelog](https://github.com/codeclimate-community/simplecov_json_formatter/blob/master/CHANGELOG.md) - [Commits](https://github.com/fede-moya/simplecov_json_formatter/commits) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-05-03 22:13:50 -05:00
simplecov_json_formatter (0.1.3)
DEV: add a note about sprockets being held back We want to upgrade to version 4, but it does not work atm.
2019-12-09 19:31:16 -06:00
sprockets (3.7.2)
Update sprockets. (#4167) * Update sass-rails. * FIX: Tilt dependency has been removed from Ember::Handlebars::Template. * Update `DiscourseIIFE` to new Sprockets API. * `Rails.application.assets` returns `nil` in production. * Move sprockets-rails out of the assets group. * Pin ember-rails to 0.18.5 which works with Sprockets 3.x. * Update sprockets to 3.6.0. * Make `DiscourseSassCompiler` work with Sprockets 3. * Use `Sass::Rails::SassImporterGlobbing` instead of haxxing our own. * Moneky patch so that we don't add dependencies for our custom css. * FIX: Missing class. * Upgrade ember-handlebars-template. * FIX: require path needs to share the same root as the folder's path. * Bump discourse-qunit-rails. * Update ember-template-compiler.js to 1.12.2. * `prepend` is private in Ruby 2.0.0.
2016-04-17 21:47:52 -05:00
concurrent-ruby (~> 1.0)
rack (> 1, < 3)
Build(deps): Bump sprockets-rails from 3.2.1 to 3.2.2 Bumps [sprockets-rails](https://github.com/rails/sprockets-rails) from 3.2.1 to 3.2.2. - [Release notes](https://github.com/rails/sprockets-rails/releases) - [Commits](https://github.com/rails/sprockets-rails/compare/v3.2.1...v3.2.2) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-09-12 02:41:09 -05:00
sprockets-rails (3.2.2)
Update sprockets. (#4167) * Update sass-rails. * FIX: Tilt dependency has been removed from Ember::Handlebars::Template. * Update `DiscourseIIFE` to new Sprockets API. * `Rails.application.assets` returns `nil` in production. * Move sprockets-rails out of the assets group. * Pin ember-rails to 0.18.5 which works with Sprockets 3.x. * Update sprockets to 3.6.0. * Make `DiscourseSassCompiler` work with Sprockets 3. * Use `Sass::Rails::SassImporterGlobbing` instead of haxxing our own. * Moneky patch so that we don't add dependencies for our custom css. * FIX: Missing class. * Upgrade ember-handlebars-template. * FIX: require path needs to share the same root as the folder's path. * Bump discourse-qunit-rails. * Update ember-template-compiler.js to 1.12.2. * `prepend` is private in Ruby 2.0.0.
2016-04-17 21:47:52 -05:00
actionpack (>= 4.0)
activesupport (>= 4.0)
sprockets (>= 3.0.0)
DEV: low risk gem updates This updates another batch of gems that are lowish risk Most of the gem changes are here for Rails 6 / Ruby 2.6.3 support Excon did some stuff around better cipher ordering
2019-04-29 00:33:01 -05:00
sshkey (2.0.0)
Build(deps): Bump stackprof from 0.2.16 to 0.2.17 (#12935) Bumps [stackprof](https://github.com/tmm1/stackprof) from 0.2.16 to 0.2.17. - [Release notes](https://github.com/tmm1/stackprof/releases) - [Changelog](https://github.com/tmm1/stackprof/blob/master/CHANGELOG.md) - [Commits](https://github.com/tmm1/stackprof/compare/v0.2.16...v0.2.17) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-05-03 22:01:53 -05:00
stackprof (0.2.17)
Build(deps-dev): Bump test-prof from 1.0.4 to 1.0.5 Bumps [test-prof](https://github.com/test-prof/test-prof) from 1.0.4 to 1.0.5. - [Release notes](https://github.com/test-prof/test-prof/releases) - [Changelog](https://github.com/test-prof/test-prof/blob/master/CHANGELOG.md) - [Commits](https://github.com/test-prof/test-prof/compare/v1.0.4...v1.0.5) Signed-off-by: dependabot[bot] <support@github.com>
2021-05-13 17:04:12 -05:00
test-prof (1.0.5)
Build(deps): Bump thor from 1.0.1 to 1.1.0 (#11778) Bumps [thor](https://github.com/erikhuda/thor) from 1.0.1 to 1.1.0. - [Release notes](https://github.com/erikhuda/thor/releases) - [Changelog](https://github.com/erikhuda/thor/blob/master/CHANGELOG.md) - [Commits](https://github.com/erikhuda/thor/compare/v1.0.1...v1.1.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-01-20 17:56:24 -06:00
thor (1.1.0)
DEV: Bump tilt from 2.0.9 to 2.0.10 (#8479) Minor update, removes a Ruby 2.7 deprecation.
2019-12-08 21:22:55 -06:00
tilt (2.0.10)
DEV: Upgrade Rails to 6.1.3.1 (#12688) Rails 6.1.3.1 deprecates a few API and has some internal changes that break our tests suite, so this commit fixes all the deprecations and errors and now Discourse should be fully compatible with Rails 6.1.3.1. We also have a new release of the rails_failover gem that's compatible with Rails 6.1.3.1.
2021-04-21 04:36:32 -05:00
tzinfo (2.0.4)
concurrent-ruby (~> 1.0)
Build(deps-dev): Bump uglifier from 4.1.20 to 4.2.0 (#8510) Bumps [uglifier](https://github.com/lautis/uglifier) from 4.1.20 to 4.2.0. - [Release notes](https://github.com/lautis/uglifier/releases) - [Changelog](https://github.com/lautis/uglifier/blob/master/CHANGELOG.md) - [Commits](https://github.com/lautis/uglifier/compare/v4.1.20...v4.2.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-12-10 08:28:15 -06:00
uglifier (4.2.0)
update gems
2016-05-22 21:23:15 -05:00
execjs (>= 0.3.0, < 3)
Gem updates, all up to latest.
2014-09-24 19:40:35 -05:00
unf (0.1.4)
rails 3 gem update (note will be removed at some point)
2013-12-06 00:06:52 -06:00
unf_ext
Build(deps): Bump unf_ext from 0.0.7.6 to 0.0.7.7 (#9306) Bumps [unf_ext](https://github.com/knu/ruby-unf_ext) from 0.0.7.6 to 0.0.7.7. - [Release notes](https://github.com/knu/ruby-unf_ext/releases) - [Changelog](https://github.com/knu/ruby-unf_ext/blob/master/CHANGELOG.md) - [Commits](https://github.com/knu/ruby-unf_ext/commits) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-03-30 10:18:31 -05:00
unf_ext (0.0.7.7)
Build(deps): Bump unicode-display_width from 1.7.0 to 2.0.0 (#11662) Bumps [unicode-display_width](https://github.com/janlelis/unicode-display_width) from 1.7.0 to 2.0.0. - [Release notes](https://github.com/janlelis/unicode-display_width/releases) - [Changelog](https://github.com/janlelis/unicode-display_width/blob/main/CHANGELOG.md) - [Commits](https://github.com/janlelis/unicode-display_width/compare/v1.7.0...v2.0.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-01-07 15:31:21 -06:00
unicode-display_width (2.0.0)
DEV: Bump unicorn from 5.8.0 to 6.0.0 (#12430) Bumps [unicorn](https://yhbt.net/unicorn/) from 5.8.0 to 6.0.0. Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-03-18 00:08:51 -05:00
unicorn (6.0.0)
added sample unicorn config added utility to measure real memory usage don't require thin by default
2013-07-06 23:30:52 -05:00
kgio (~> 2.6)
raindrops (~> 0.7)
Build(deps): Bump uniform_notifier from 1.14.1 to 1.14.2 (#12516) Bumps [uniform_notifier](https://github.com/flyerhzm/uniform_notifier) from 1.14.1 to 1.14.2. - [Release notes](https://github.com/flyerhzm/uniform_notifier/releases) - [Changelog](https://github.com/flyerhzm/uniform_notifier/blob/master/CHANGELOG.md) - [Commits](https://github.com/flyerhzm/uniform_notifier/compare/v1.14.1...v1.14.2) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-03-24 16:54:11 -05:00
uniform_notifier (1.14.2)
DEV: Add schema checking to api doc testing (#11721) * DEV: Add schema checking to api doc testing This commit improves upon rswag which lacks schema checking. rswag really only checks that the https status matches, but this change adds in the json-schema_builder gem which also has schema validation. Now we can define schemas for each of our requests/responses in the `spec/requests/api/schemas` directory which will make our documentation specs a lot cleaner. If we update a serializer by either adding or removing an attribute the tests will now fail (this is a good thing!). Also if you change the type of an attribute say from an array to a string the tests will now fail. This will help significantly with keeping the docs in sync with actual code changes! Now if you change how an endpoint will respond you will have to update the docs too in order for the tests to pass. :D This PR is inspired by: https://www.tealhq.com/post/how-teal-keeps-their-api-tests-and-documentation-in-sync * Swap out json schema validator gem Swapped out the outdated json-schema_builder gem with the json_schemer gem. * Add validation fields to schema In order to have "strict" validation we need to add `additionalProperties: false` to the schema, and we need to specify which attributes are required. Updated the debugging test output to print out the error details if there are any.
2021-01-21 17:28:08 -06:00
uri_template (0.7.0)
Build(deps-dev): Bump webmock from 3.12.1 to 3.12.2 (#12541) Bumps [webmock](https://github.com/bblimke/webmock) from 3.12.1 to 3.12.2. - [Release notes](https://github.com/bblimke/webmock/releases) - [Changelog](https://github.com/bblimke/webmock/blob/master/CHANGELOG.md) - [Commits](https://github.com/bblimke/webmock/compare/v3.12.1...v3.12.2) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-03-28 16:58:09 -05:00
webmock (3.12.2)
Support Ruby 2.4.
2017-04-14 23:11:02 -05:00
addressable (>= 2.3.6)
crack (>= 0.3.2)
Build(deps-dev): Bump webmock from 3.5.1 to 3.7.6 (#8512) Bumps [webmock](https://github.com/bblimke/webmock) from 3.5.1 to 3.7.6. - [Release notes](https://github.com/bblimke/webmock/releases) - [Changelog](https://github.com/bblimke/webmock/blob/master/CHANGELOG.md) - [Commits](https://github.com/bblimke/webmock/compare/v3.5.1...v3.7.6) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-12-10 12:38:03 -06:00
hashdiff (>= 0.4.0, < 2.0.0)
Build(deps): Bump webpush from 1.0.0 to 1.1.0 (#11250) Bumps [webpush](https://github.com/zaru/webpush) from 1.0.0 to 1.1.0. - [Release notes](https://github.com/zaru/webpush/releases) - [Changelog](https://github.com/zaru/webpush/blob/master/CHANGELOG.md) - [Commits](https://github.com/zaru/webpush/compare/v1.0.0...v1.1.0) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-11-16 15:56:28 -06:00
webpush (1.1.0)
Feature: Push notifications for Android (#5792) * Feature: Push notifications for Android Notification config for desktop and mobile are merged. Desktop notifications stay as they are for desktop views. If mobile mode, push notifications are enabled. Added push notification subscriptions in their own table, rather than through custom fields. Notification banner prompts appear for both mobile and desktop when enabled.
2018-05-04 17:31:48 -05:00
hkdf (~> 0.2)
FIX: Push notifications didn't work anymore
2019-01-09 15:07:10 -06:00
jwt (~> 2.0)
DEV: Switch our fast_xor gem for xorcist (#10565) * DEV: Switch our fast_xor gem for xorcist We use the `xor` function as part of password hashing and we want to use a faster version than the native ruby xor'ing feature so we use a gem for this. fast_xor has been abandoned, and xorcist fixed our initial holdup for switching in https://github.com/fny/xorcist/issues/4 xorcist also has jruby support so we can remove our jruby fallback logic. * Move using statement inside of class
2020-08-31 14:20:44 -05:00
xorcist (1.1.2)
DEV: Replace Overcommit with Lefthook (#7826) Overcommit uses prebuilt hooks and require global installation. To avoid this issues replace it with Lefthook. Lefthook will be installed with npm packages. New contributors will have fully consistent git hooks.
2019-07-02 04:29:52 -05:00
yaml-lint (0.0.10)
Build(deps): Bump rails_failover from 0.6.2 to 0.6.3 (#11419) Bumps rails_failover from 0.6.2 to 0.6.3. Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-12-07 11:29:01 -06:00
zeitwerk (2.4.2)
Initial release of Discourse
2013-02-05 13:16:51 -06:00
PLATFORMS
DEV: Update Gemfile.lock for arm64-darwin-20 (#11865) After this, the only remaining issue preventing Discourse from booting on apple silicon is mini_racer/libv8. See upstream discussion at https://github.com/rubyjs/mini_racer/pull/186 for an experimental solution.
2021-01-27 09:20:29 -06:00
arm64-darwin-20
Initial release of Discourse
2013-02-05 13:16:51 -06:00
ruby
DEV: add support for macOS in bundler (#11600) see: https://github.com/discourse/discourse/commit/39ba1ae2b52fbb4ec03df390a4516e2b2414c315
2020-12-28 22:39:50 -06:00
x86_64-darwin-18
x86_64-darwin-19
x86_64-darwin-20
DEV: added platform support to bundler (#11599) see: https://bundler.io/blog/2020/12/09/bundler-v2-2.html New version of bundler includes explicit callouts for each platform supported This means we need to bundle on all our supported platforms, the number should be fairly low as x86 linux covers most
2020-12-28 22:12:30 -06:00
x86_64-linux
Initial release of Discourse
2013-02-05 13:16:51 -06:00
DEPENDENCIES
SECURITY: Bump Rails to 6.1.3.2 (#12963) Includes fixes for - CVE-2021-22902 - CVE-2021-22903 - CVE-2021-22904 - CVE-2021-22885 https://github.com/rails/rails/blob/v6.1.3.2/actionpack/CHANGELOG.md
2021-05-06 06:41:45 -05:00
actionmailer (= 6.1.3.2)
actionpack (= 6.1.3.2)
actionview (= 6.1.3.2)
PREF: optimise preloading application We preload to ensure as much memory as possible is reused from unicorn master to various workers using copy-on-write (sidekiq, unicorn) This migrates the preloading code into the Discourse module for easier reuse and adds 3 notable preloading changes 1. We attempt to localize a string on each site, ensuring we warmup the i18n 2. We preload all our templates (compiling .erb to class) 3. We warm-up our search tokenizer which uses cppjieba which is a large memory consumer, this will only cause a warmup on CJK sites or sites with the special site setting enabled.
2019-10-06 23:33:37 -05:00
actionview_precompiler
AMS 0.8.3 was released with the patch we want
2015-04-23 15:20:53 -05:00
active_model_serializers (~> 0.8.3)
SECURITY: Bump Rails to 6.1.3.2 (#12963) Includes fixes for - CVE-2021-22902 - CVE-2021-22903 - CVE-2021-22904 - CVE-2021-22885 https://github.com/rails/rails/blob/v6.1.3.2/actionpack/CHANGELOG.md
2021-05-06 06:41:45 -05:00
activemodel (= 6.1.3.2)
activerecord (= 6.1.3.2)
activesupport (= 6.1.3.2)
FIX: require: false for rotp gem (#8540) The ROTP gem is only used in a very small amount of places in the app, we don't need to globally require it. Also set the Addressable gem to not have a specific version range, as it has not been a problem yet. Some slight refactoring of UserSecondFactor here too to use SecondFactorManager to avoid code repetition
2019-12-16 18:33:51 -06:00
addressable
rails 3 gem update (note will be removed at some point)
2013-12-06 00:06:52 -06:00
annotate
FEATURE: rake tasks for uploading assets to S3 This opens the door to serving application.js and so on from s3. Also updates s3 gem for some tagging support
2017-10-03 02:00:42 -05:00
aws-sdk-s3
FEATURE: AWS SNS bounce notifications webhooks
2019-02-13 14:26:40 -06:00
aws-sdk-sns
Update Ember to latest master (RC5)
2013-06-06 16:50:49 -05:00
barber
Initial release of Discourse
2013-02-05 13:16:51 -06:00
better_errors
binding_of_caller
proper bootsnap release
2017-05-26 12:26:45 -05:00
bootsnap
Add Bullet gem to detect N+1 queries.
2016-06-27 20:29:42 -05:00
bullet
DEV: Add byebug.
2015-08-13 22:59:06 -05:00
byebug
FEATURE: Webauthn authenticator management with 2FA login (Security Keys) (#8099) Adds 2 factor authentication method via second factor security keys over [web authn](https://developer.mozilla.org/en-US/docs/Web/API/Web_Authentication_API). Allows a user to authenticate a second factor on login, login-via-email, admin-login, and change password routes. Adds registration area within existing user second factor preferences to register multiple security keys. Supports both external (yubikey) and built-in (macOS/android fingerprint readers).
2019-10-01 21:08:41 -05:00
cbor
Initial release of Discourse
2013-02-05 13:16:51 -06:00
certified
DEV: Add rake task to check locale files for errors
2018-09-04 16:57:20 -05:00
colored2
FEATURE: Webauthn authenticator management with 2FA login (Security Keys) (#8099) Adds 2 factor authentication method via second factor security keys over [web authn](https://developer.mozilla.org/en-US/docs/Web/API/Web_Authentication_API). Allows a user to authenticate a second factor on login, login-via-email, admin-login, and change password routes. Adds registration area within existing user second factor preferences to register multiple security keys. Supports both external (yubikey) and built-in (macOS/android fingerprint readers).
2019-10-01 21:08:41 -05:00
cose
Replace rmmseg gem for cppjieba_rb since better dictionary (#5006) * Rename locale to ts config in search module to make it clear * Replace rmmese-cpp for cppjieba_rb
2017-07-31 14:28:48 -05:00
cppjieba_rb
FEATURE: customization of html emails (#7934) This feature adds the ability to customize the HTML part of all emails using a custom HTML template and optionally some CSS to style it. The CSS will be parsed and converted into inline styles because CSS is poorly supported by email clients. When writing the custom HTML and CSS, be aware of what email clients support. Keep customizations very simple. Customizations can be added and edited in Admin > Customize > Email Style. Since the summary email is already heavily styled, there is a setting to disable custom styles for summary emails called "apply custom styles to digest" found in Admin > Settings > Email. As part of this work, RTL locales are now rendered correctly for all emails.
2019-07-30 14:05:08 -05:00
css_parser
DEV: Verbose mode for `posts:inline_uploads` rake task.
2019-06-07 03:21:37 -05:00
diffy
DEV: Switch over to a fork of ember-rails We are switching over to a fork because we are currently on a pinned version of ember-rails 0.18.5 which is pretty old. Upgrading to the latest version causes many things to break which isn't really worth the time to debug while we plan to completely switch over to ember-cli somewhat soonish. Our fork contains a single cherry-pick commit https://github.com/emberjs/ember-rails/pull/534 which will fix an issue when running the `rails g migration` command and it spits out a bunch of deprecation warnings.
2020-09-04 14:29:51 -05:00
discourse-ember-rails (= 0.18.6)
DEV: Upgrade Ember to version 3.12.2 (#8753) * DEV: Use Ember 3.12.2 * Add Ember version to ThemeField's DEPENDENT_CONSTANTS * DEV: Use `id` instead of `elementId` (See: https://github.com/emberjs/ember.js/issues/18147) * FIX: Don't leak event listeners (bug introduced in 999e2ff)
2020-02-05 07:51:00 -06:00
discourse-ember-source (~> 3.12.2)
FEATURE: Add site setting and wizard step to set base font (#10250) Co-authored-by: Neil Lalonde <neillalonde@gmail.com>
2020-08-31 05:14:09 -05:00
discourse-fonts
DEV: add `discourse_dev` gem in development dependencies. (#12285) For more details visit https://github.com/discourse/discourse_dev
2021-03-04 11:34:51 -06:00
discourse_dev
Install `discourse_image_optim` gem for now.
2017-04-20 01:40:16 -05:00
discourse_image_optim
DEV: update dependencies and add notes about exceptions Previously it was unclear why certain gems are being held back cause Gemfile had no comment explaining it. I tried to add some explanation from memory and remove some exceptions that seemed to be superfluous. This upgrades shoulda to latest, it appears to work once a couple of assertions are removed Also update http accept language used to auto detect language from http header this is tested Zeitwerk small update seems fine
2019-12-05 20:00:16 -06:00
email_reply_trimmer
DEV: upgrades from Ember 2.13 to Ember 3.5.1 (#6808) Co-Authored-By: Bianca Nenciu <nbianca@users.noreply.github.com> Co-Authored-By: David Taylor <david@taylorhq.com>
2019-01-10 04:06:01 -06:00
ember-handlebars-template (= 0.8.0)
PERF: remove "fog" dependency
2015-05-25 02:57:06 -05:00
excon
execjs 2.7 was just released to support mini_racer
2016-05-20 02:06:44 -05:00
execjs
Don't pin version of `Fabrication` gem.
2018-05-28 02:09:02 -05:00
fabrication
DEV: update dependencies and add notes about exceptions Previously it was unclear why certain gems are being held back cause Gemfile had no comment explaining it. I tried to add some explanation from memory and remove some exceptions that seemed to be superfluous. This upgrades shoulda to latest, it appears to work once a couple of assertions are removed Also update http accept language used to auto detect language from http header this is tested Zeitwerk small update seems fine
2019-12-05 20:00:16 -06:00
fakeweb
gem updates, stop sourcing some stuff from github uglifier v2
2013-04-07 18:42:39 -05:00
fast_blank
Initial release of Discourse
2013-02-05 13:16:51 -06:00
fast_xs
Drop the fork usage of fastimage (#5461) Fork is not needed anymore since fastimage 2.1.1 has been released with the needed PR merged in.
2018-01-04 02:53:53 -06:00
fastimage
remove gctools (no longer used) add gctracer for debugging
2016-12-19 22:01:36 -06:00
gc_tracer
DEV: Upgrade highline gem to latest (#10471) Currently we have pinned highline to version 1.7.0. This is the gem that we use to have an interactive command line for tasks like `rake admin:create`. Upgrading to the latest version 2.0.3 will remove ruby 2.7 deprecation warnings. I'm not sure why *this* gem was pinned. I manually executed a couple of our rake tasks that use this and everything seems fine.
2020-08-19 10:15:23 -05:00
highline
Added code block normalization routing for import
2014-06-05 19:34:21 -05:00
htmlentities
DEV: update dependencies and add notes about exceptions Previously it was unclear why certain gems are being held back cause Gemfile had no comment explaining it. I tried to add some explanation from memory and remove some exceptions that seemed to be superfluous. This upgrades shoulda to latest, it appears to work once a couple of assertions are removed Also update http accept language used to auto detect language from http header this is tested Zeitwerk small update seems fine
2019-12-05 20:00:16 -06:00
http_accept_language
DEV: upgrade json gem and add explicit dependency json is shipped out of sync with Ruby. Even though we use OJ for many things we still use the json gem sometimes, this ensures we use the latest https://github.com/discourse/discourse/blob/b8b29e79ad5341ee5a3c533b990434cc4feb42b3/config/initializers/100-oj.rb#L9-L9
2020-03-23 23:21:50 -05:00
json
DEV: Add schema checking to api doc testing (#11721) * DEV: Add schema checking to api doc testing This commit improves upon rswag which lacks schema checking. rswag really only checks that the https status matches, but this change adds in the json-schema_builder gem which also has schema validation. Now we can define schemas for each of our requests/responses in the `spec/requests/api/schemas` directory which will make our documentation specs a lot cleaner. If we update a serializer by either adding or removing an attribute the tests will now fail (this is a good thing!). Also if you change the type of an attribute say from an array to a string the tests will now fail. This will help significantly with keeping the docs in sync with actual code changes! Now if you change how an endpoint will respond you will have to update the docs too in order for the tests to pass. :D This PR is inspired by: https://www.tealhq.com/post/how-teal-keeps-their-api-tests-and-documentation-in-sync * Swap out json schema validator gem Swapped out the outdated json-schema_builder gem with the json_schemer gem. * Add validation fields to schema In order to have "strict" validation we need to add `additionalProperties: false` to the schema, and we need to specify which attributes are required. Updated the debugging test output to print out the error details if there are any.
2021-01-21 17:28:08 -06:00
json_schemer
Upgrade the Listen gem
2017-04-13 09:26:07 -05:00
listen
EXPERIMENTAL: Allow lograge to be selected as the logging library.
2017-10-27 04:54:45 -05:00
lograge
EXPERIMENTAL: Allow Logstash formatter to be enable for lograge logs.
2017-10-31 19:37:11 -05:00
logstash-event
EXPERIMENTAL: Allow logs to be shipped via different methods. See https://github.com/dwbutler/logstash-logger#uri-configuration for a list of available methods.
2017-11-13 22:50:26 -06:00
logstash-logger
Fix broken Gemfile.lock.
2017-12-03 21:28:45 -06:00
logster
FEATURE: Treat site settings as plain text and add a new HTML type. (#12618) To add an extra layer of security, we sanitize settings before shipping them to the client. We don't sanitize those that have the "html" type. The CookedPostProcessor already uses Loofah for sanitization, so I chose to also use it for this. I added it to our gemfile since we installed it as a transitive dependency.
2021-04-07 10:51:19 -05:00
loofah
lru cache added
2013-04-23 20:59:59 -05:00
lru_redux
FEATURE: improve performance of anonymous cache This commit introduces 2 features: 1. DISCOURSE_COMPRESS_ANON_CACHE (true|false, default false): this allows you to optionally compress the anon cache body entries in Redis, can be useful for high load sites with Redis that lives on a separate server to to webs 2. DISCOURSE_ANON_CACHE_STORE_THRESHOLD (default 2), only pop entries into redis if we observe them more than N times. This avoids situations where a crawler can walk a big pile of topics and store them all in Redis never to be used. Our default anon cache time for topics is only 60 seconds. Anon cache is in place to avoid the "slashdot" effect where a single topic is hit by 100s of people in one minute.
2019-09-04 02:18:32 -05:00
lz4-ruby
DEV: Update mail and use fork (#10639) Version 2.8 brings some changes to how address fields are handled and this commits updates that and should also include a fix which handles encoded attachment filenames. The fork contains a bugfix to correctly decode mail attachments.
2021-02-18 12:15:02 -06:00
mail!
FEATURE: Show "Recently used devices" in user preferences (#6335) * FEATURE: Added MaxMindDb to resolve IP information. * FEATURE: Added browser detection based on user agent. * FEATURE: Added recently used devices in user preferences. * DEV: Added acceptance test for recently used devices. * UX: Do not show 'Show more' button if there aren't more tokens. * DEV: Fix unit tests. * DEV: Make changes after code review. * Add more detailed unit tests. * Improve logging messages. * Minor coding style fixes. * DEV: Use DropdownSelectBoxComponent and run Prettier. * DEV: Fix unit tests.
2018-10-09 09:21:41 -05:00
maxminddb
memory_profiler should be shipped with mini profiler
2014-05-07 22:49:34 -05:00
memory_profiler
DEV: update mini_racer and message_bus Two very low risk updates, message_bus has been released no need to depend on pre-release. mini_racer update is for a very minor change (shared isolates are not used in discourse so it is not a fix we technically need)
2019-02-04 00:46:38 -06:00
message_bus
FIX: pull hotlinked images even when they have no extension
2017-06-13 06:27:05 -05:00
mini_mime
FEATURE: upgrade from therubyracer to mini_racer This pushes our internal V8 JavaScript engine from Chrome 32 to 50. It also resolves some long standing issues we had with the old wrapper.
2016-05-19 07:25:08 -05:00
mini_racer
REFACTOR: extract scheduler to the mini_scheduler gem
2018-07-31 16:12:55 -05:00
mini_scheduler
DEV: remove exec_sql and replace with mini_sql Introduce new patterns for direct sql that are safe and fast. MiniSql is not prone to memory bloat that can happen with direct PG usage. It also has an extremely fast materializer and very a convenient API - DB.exec(sql, *params) => runs sql returns row count - DB.query(sql, *params) => runs sql returns usable objects (not a hash) - DB.query_hash(sql, *params) => runs sql returns an array of hashes - DB.query_single(sql, *params) => runs sql and returns a flat one dimensional array - DB.build(sql) => returns a sql builder See more at: https://github.com/discourse/mini_sql
2018-06-19 01:13:14 -05:00
mini_sql
UX: Replace heuristic solution for extracting root domain.
2017-11-29 02:24:27 -06:00
mini_suffix
add minitest
2013-02-23 17:24:28 -06:00
minitest
DEV: Update mocha (#9490) The spec that was blocking the update was fixed in c08753dc3431ce2f85916b5a7e68db52891917d8.
2020-04-21 11:32:42 -05:00
mocha
mock redis for mock redis goodness
2013-07-28 21:23:21 -05:00
mock_redis
Initial release of Discourse
2013-02-05 13:16:51 -06:00
multi_json
mustache
update nokogiri to stable
2016-06-07 01:54:36 -05:00
nokogiri
Initial release of Discourse
2013-02-05 13:16:51 -06:00
oj
use omniauth-openid to replace google id
2013-02-12 00:51:44 -06:00
omniauth
move all logic to omniauth implement omniauth-facebook / omniauth-twitter
2013-02-12 07:47:22 -06:00
omniauth-facebook
let's use the latest omniauth-github gem
2017-08-07 03:43:54 -05:00
omniauth-github
Bump omniauth-google-oauth2 gem version Pinning to an old version is no longer required following https://github.com/zquestz/omniauth-google-oauth2/commit/8b4d6dafea1e741a34c92d595ffb2e7b99acd874
2019-06-03 13:17:00 -05:00
omniauth-google-oauth2
Authenticate with Discourse via OAuth2 See https://github.com/michaelkirk/discourse_oauth2_example for an example of how you might integrate your existing oauth2 provider's authentication via a Discourse plugin.
2013-08-17 23:43:59 -05:00
omniauth-oauth2
move all logic to omniauth implement omniauth-facebook / omniauth-twitter
2013-02-12 07:47:22 -06:00
omniauth-twitter
DEV: update dependencies and add notes about exceptions Previously it was unclear why certain gems are being held back cause Gemfile had no comment explaining it. I tried to add some explanation from memory and remove some exceptions that seemed to be superfluous. This upgrades shoulda to latest, it appears to work once a couple of assertions are removed Also update http accept language used to auto detect language from http header this is tested Zeitwerk small update seems fine
2019-12-05 20:00:16 -06:00
onebox
DEV: Introduce parallel rspec testing Adds the parallel_tests gem, and redis/postgres configuration for running rspec tests in parallel. To use: ``` rake parallel:rake[db:create] rake parallel:rake[db:migrate] rake parallel:spec ``` This brings the test suite from 12m20s to 3m11s on my macOS machine
2019-04-01 03:27:49 -05:00
parallel_tests
DEV: remove exec_sql and replace with mini_sql Introduce new patterns for direct sql that are safe and fast. MiniSql is not prone to memory bloat that can happen with direct PG usage. It also has an extremely fast materializer and very a convenient API - DB.exec(sql, *params) => runs sql returns row count - DB.query(sql, *params) => runs sql returns usable objects (not a hash) - DB.query_hash(sql, *params) => runs sql returns an array of hashes - DB.query_single(sql, *params) => runs sql and returns a flat one dimensional array - DB.build(sql) => returns a sql builder See more at: https://github.com/discourse/mini_sql
2018-06-19 01:13:14 -05:00
pg
DEV: Add pry-byebug and optionally require pry behind a ENV var for better spec debugging (#9984) We removed pry-nav a while back because it is not up to date with pry but it is super useful. Luckily pry-byebug is here to save us all from Satan's power. To get this to work you need to add the following to your $HOME/.pryrc file. ``` if defined?(PryByebug) Pry.commands.alias_command 'c', 'continue' Pry.commands.alias_command 's', 'step' Pry.commands.alias_command 'n', 'next' Pry.commands.alias_command 'f', 'finish' end Pry::Commands.command /^$/, "repeat last command" do pry_instance.run_command Pry.history.to_a.last end ``` The require-ing of pry, pry-rails, and pry-byebug in specs is controlled by the IMPROVED_SPEC_DEBUGGING flag (disabled by default).
2020-06-04 21:30:34 -05:00
pry-byebug
Initial release of Discourse
2013-02-05 13:16:51 -06:00
pry-rails
add a soft puma dependency so people can run Discourse on puma
2013-08-29 00:26:27 -05:00
puma
DEV: update dependencies and add notes about exceptions Previously it was unclear why certain gems are being held back cause Gemfile had no comment explaining it. I tried to add some explanation from memory and remove some exceptions that seemed to be superfluous. This upgrades shoulda to latest, it appears to work once a couple of assertions are removed Also update http accept language used to auto detect language from http header this is tested Zeitwerk small update seems fine
2019-12-05 20:00:16 -06:00
r2
DEV: upgrade rack to version 2.2.3 This is very minor, see: https://github.com/advisories/GHSA-j6w9-fv6q-3q52 An attacker can elevate own cookie usage to bypass server cookie restrictions Technically this is a security commit, but the surface area is extremely low, we do not expect any real world impact.
2020-07-08 01:42:31 -05:00
rack
Drop Rails3 support
2014-02-17 10:44:28 -06:00
rack-mini-profiler
Declare rack-protection dependency explicitely
2013-10-28 19:00:31 -05:00
rack-protection
DEV: Use rails_failover gem for ActiveRecord and Redis failover handling
2020-06-11 00:45:46 -05:00
rails_failover
Fix Gemfile.lock.
2018-02-12 00:08:02 -06:00
rails_multisite
SECURITY: Bump Rails to 6.1.3.2 (#12963) Includes fixes for - CVE-2021-22902 - CVE-2021-22903 - CVE-2021-22904 - CVE-2021-22885 https://github.com/rails/rails/blob/v6.1.3.2/actionpack/CHANGELOG.md
2021-05-06 06:41:45 -05:00
railties (= 6.1.3.2)
Initial release of Discourse
2013-02-05 13:16:51 -06:00
rake
rb-fsevent
rails 3 gem update (note will be removed at some point)
2013-12-06 00:06:52 -06:00
rbtrace
Use rchardet instead of charlock_holmes gem
2018-07-31 05:02:18 -05:00
rchardet
DEV: update dependencies and add notes about exceptions Previously it was unclear why certain gems are being held back cause Gemfile had no comment explaining it. I tried to add some explanation from memory and remove some exceptions that seemed to be superfluous. This upgrades shoulda to latest, it appears to work once a couple of assertions are removed Also update http accept language used to auto detect language from http header this is tested Zeitwerk small update seems fine
2019-12-05 20:00:16 -06:00
redis
FEATURE: upgrade to Sidekiq 4
2015-12-31 22:40:12 -06:00
redis-namespace
Initial release of Discourse
2013-02-05 13:16:51 -06:00
rinku
DEV: Bump rotp gem to latest version (#10472) The rotp gem is currently pinned to version 5.1.0 and this will bump it up to version 6.0.1. Follow up to: 85d4370f791a2e6e17a50cd9ab5de44cd1fcc0d2 because this issue we were waiting on is now closed: https://github.com/mdp/rotp/issues/98 Because version 6 is now encoding the params I needed to update the tests as well.
2020-08-19 10:16:33 -05:00
rotp
FEATURE: Implement 2factor login TOTP implemented review items. Blocking previous codes - valid 2-factor auth tokens can only be authenticated once/30 seconds. I played with updating the “last used” any time the token was attempted but that seemed to be overkill, and frustrating as to why a token would fail. Translatable texts. Move second factor logic to a helper class. Move second factor specific controller endpoints to its own controller. Move serialization logic for 2-factor details in admin user views. Add a login ember component for de-duplication Fix up code formatting Change verbiage of google authenticator add controller tests: second factor controller tests change email tests change password tests admin login tests add qunit tests - password reset, preferences fix: check for 2factor on change email controller fix: email controller - only show second factor errors on attempt fix: check against 'true' to enable second factor. Add modal for explaining what 2fa with links to Google Authenticator/FreeOTP add two factor to email signin link rate limit if second factor token present add rate limiter test for second factor attempts
2017-12-21 19:18:12 -06:00
rqrcode
Upgrade rspec to 3.4.0.
2016-05-29 22:38:04 -05:00
rspec
FIX: allow emoji class when crawling embedded content, add rspc-html-matchers
2015-09-24 17:20:59 -05:00
rspec-html-matchers
DEV: update rspec dependencies rspec-rails 4.0 was released so we no longer need to depend on a beta version. Also updates minor on a bunch of rspec gems. Thanks to @ryanwi for raising this.
2020-05-04 00:20:30 -05:00
rspec-rails
DEV: Add rswag to aid in api documention (#9546) Adding in rswag will allow us to write spec files to document and test our api.
2020-04-27 17:40:07 -05:00
rswag-specs
Add RTL support to Discourse CSS pre-processing using the RTLit gem and configurable via discourse.conf
2014-08-08 01:31:31 -05:00
rtlit
DEV: Use rubocop-discourse gem to add custom chdir cop Followup to b27e009655a866973f04e16f6694b8ab853124d3
2019-11-18 09:39:41 -06:00
rubocop-discourse
Install Ruby-Prof.
2017-09-05 01:55:20 -05:00
ruby-prof
My patch was accepted and pushed into the gem :)
2014-04-14 23:45:00 -05:00
ruby-readability
FEATURE: Gz to zip for exports (#7889) * Revert "Revert "FEATURE: admin/user exports are compressed using the zip format (#7784)"" This reverts commit f89bd555763bd61a130145d2eff6c2ee75fe6b06. * Replace .tar.zip with .zip
2019-07-18 07:34:48 -05:00
rubyzip
Revert "DEV: upgrades sassc to 2.4.0 (#10447)" We suspect it could be the cause of some issues with themes. This reverts commit 2fac77cc488011925d8d972595c997bd0cef869f.
2020-08-21 11:23:01 -05:00
sassc (= 2.0.1)
FIX: Add `sassc-rails` for plugins using sprockets to compile scss This did not affect core because we have a custom stylesheet pipeline
2019-03-21 18:23:29 -05:00
sassc-rails
Update seed-fu with PG10 support. https://meta.discourse.org/t/discourse-appears-to-be-broken-with-postgres-10/71723
2017-11-26 20:26:59 -06:00
seed-fu
DEV: update dependencies and add notes about exceptions Previously it was unclear why certain gems are being held back cause Gemfile had no comment explaining it. I tried to add some explanation from memory and remove some exceptions that seemed to be superfluous. This upgrades shoulda to latest, it appears to work once a couple of assertions are removed Also update http accept language used to auto detect language from http header this is tested Zeitwerk small update seems fine
2019-12-05 20:00:16 -06:00
shoulda-matchers
UPDATE: sidekiq
2014-02-23 17:00:25 -06:00
sidekiq
DEV: Add simplecov as test dependency (#7271)
2019-04-01 00:00:11 -05:00
simplecov
DEV: add a note about sprockets being held back We want to upgrade to version 4, but it does not work atm.
2019-12-09 19:31:16 -06:00
sprockets (= 3.7.2)
Upgrade to Rails 5.
2017-08-22 21:58:25 -05:00
sprockets-rails
FEATURE: allow themes to live in private git repos This feature allows themes sourced from git to live on private servers, it automatically generates key pairs.
2018-03-08 23:14:21 -06:00
sshkey
Add some Ruby 2.1 specific Gems, get people to upgrade bundler
2014-02-17 20:24:42 -06:00
stackprof
Added test-prof as a dependency (#7395) test-prof is a collection of tools for analyzing test-suite performance.
2019-04-19 03:52:31 -05:00
test-prof
FIX: Add `thor` to Gemfile. We need it for our CLI tool.
2017-03-02 12:35:47 -06:00
thor
Initial release of Discourse
2013-02-05 13:16:51 -06:00
uglifier
rails 3 gem update (note will be removed at some point)
2013-12-06 00:06:52 -06:00
unf
added sample unicorn config added utility to measure real memory usage don't require thin by default
2013-07-06 23:30:52 -05:00
unicorn
Support Ruby 2.4.
2017-04-14 23:11:02 -05:00
webmock
Update Gemfile.lock.
2018-05-07 04:09:58 -05:00
webpush
DEV: Switch our fast_xor gem for xorcist (#10565) * DEV: Switch our fast_xor gem for xorcist We use the `xor` function as part of password hashing and we want to use a faster version than the native ruby xor'ing feature so we use a gem for this. fast_xor has been abandoned, and xorcist fixed our initial holdup for switching in https://github.com/fny/xorcist/issues/4 xorcist also has jruby support so we can remove our jruby fallback logic. * Move using statement inside of class
2020-08-31 14:20:44 -05:00
xorcist
DEV: Replace Overcommit with Lefthook (#7826) Overcommit uses prebuilt hooks and require global installation. To avoid this issues replace it with Lefthook. Lefthook will be installed with npm packages. New contributors will have fully consistent git hooks.
2019-07-02 04:29:52 -05:00
yaml-lint
correct file size and add note about impending breakage of image_optim
2015-09-09 23:37:46 -05:00
BUNDLED WITH
SECURITY: Bump Rails to 6.1.3.2 (#12963) Includes fixes for - CVE-2021-22902 - CVE-2021-22903 - CVE-2021-22904 - CVE-2021-22885 https://github.com/rails/rails/blob/v6.1.3.2/actionpack/CHANGELOG.md
2021-05-06 06:41:45 -05:00
2.2.16
Reference in New Issue Copy Permalink