Commit Graph

161 Commits

Author SHA1 Message Date
guido cf56de4682 Ensure the linux version of libv8-node gets installed
mini_racer depends on libv8-node, this uses a compiled binary. Bundler
should automatically install the linux version but instead uses the
linux-musl one.

There are a few issues documenting this behavior

https://github.com/rubyjs/mini_racer/issues/218
https://github.com/rubyjs/libv8-node/issues/5

Setting up the platform will make this usable under linux (ugly, but
a non resolved issue will break deployment with ruby 2.5
2021-12-29 16:49:25 -03:00
Azul 9c526c2514 update: bundler version 2.3.3 2021-12-26 11:00:59 +01:00
Azul 5ab34f7d06 update: sprockets to latest 2021-12-25 22:51:05 +01:00
Azul 2fc7098b0e update: secure_headers to latest 2021-12-25 22:30:37 +01:00
Azul 6c99cdf736 upgrade: rubyzip 2021-12-25 15:54:34 +01:00
Azul 36bb5455f8 upgrade: faker to latest 2021-12-25 15:52:33 +01:00
Azul 71fa9be92c update: minitest to latest 2021-12-24 22:08:23 +01:00
Azul d3b0d828fe upgrade: from therubyracer to mini_racer 2021-12-24 22:05:58 +01:00
Azul cc80e8b506 upgrade: aasm to latest
Main change was to rename may_approve to may_judge.

AASM now adds may_... checks to all transitions.
Since our transition was also called approve
may_approve was getting overwritten
leading to infinite recursion.
2021-12-24 12:00:04 +01:00
Azul e2da8ed0b5 update: pundit to latest 2021-12-24 11:35:56 +01:00
Azul 661d0b3dcf update: mail-gpg to latest 2021-12-24 11:35:56 +01:00
Azul 4857244d67 update: invisible_captcha to latest 2021-12-24 11:35:56 +01:00
Azul b4138d2139 update: acts_as_list to latest 2021-12-24 11:35:53 +01:00
Azul a039c7d023 upgrade: acts-as-taggable-on 2021-12-24 11:32:39 +01:00
Azul 3752a716e4 upgrade: thinking-sphinx to latest
Add Callbacks to Page::Terms according to
https://github.com/pat/thinking-sphinx/releases/tag/v5.0.0
2021-12-24 11:32:39 +01:00
Azul 25b7a27c7d upgrade: haml-rails
Now that we are on rails 5 we can use haml-rails 2
2021-12-18 12:38:26 +01:00
Azul bc122038dd upgrade: i18n to latest 2021-12-18 12:38:26 +01:00
Azul 95c29e126c upgrade faker - required to upgrade i18n
Upgrading within the 1.x series for now.
2021-12-18 12:38:26 +01:00
Azul a341cbff44 upgrade: bootsnap 2021-12-18 12:38:26 +01:00
Azul 407bd859d9 upgrade: rake to latest 2021-12-18 12:38:26 +01:00
Azul 3532df4179 update: all dependencies but sprockets
Sprockets 4 expects a manifest file which we do not have yet.

Also adjust new item form to work.
Somehow haml seems to add a `_new` postfix now
which dom_id does not - causing a missmatch.
2021-12-18 12:37:38 +01:00
Azul 6a04dbf4a7 update mimemagic to latest version 2021-12-18 11:16:55 +01:00
Azul ad0ca3e2b2 upgrade: rails 2020-09-06 13:48:19 +02:00
Azul 2b242886b9 feat: add invisible_captcha on signup form
log signup attempts that fill in the honeypot
without their IP address.
2020-06-20 12:30:09 +02:00
Azul d1eaf4d58a Revert "build(deps): bump actionpack-page_caching from 1.1.1 to 1.2.1"
This reverts commit 1771ec0762.
2020-06-19 19:58:59 +02:00
dependabot[bot] 1771ec0762 build(deps): bump actionpack-page_caching from 1.1.1 to 1.2.1
Bumps [actionpack-page_caching](https://github.com/rails/actionpack-page_caching) from 1.1.1 to 1.2.1.
- [Release notes](https://github.com/rails/actionpack-page_caching/releases)
- [Changelog](https://github.com/rails/actionpack-page_caching/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rails/actionpack-page_caching/compare/v1.1.1...v1.2.1)

Signed-off-by: dependabot[bot] <support@github.com>
2020-05-14 09:46:16 +02:00
Azul e7836a304a update: bundle 2020-04-25 13:13:00 +02:00
Azul 3cdfff6b48 update: secure_headers 2020-04-25 13:11:41 +02:00
Azul 77c52affd8 upgrade: rake 2020-04-25 12:48:18 +02:00
Azul 44b0bca0db update: json gem 2020-04-25 12:46:07 +02:00
Azul 89610392d7 update: rails 2020-04-25 12:41:29 +02:00
Azul ea057c4c17 upgrade: all dependencies 2019-11-23 21:42:22 +01:00
Azul 4e88d3715e upgrade: nokogiri security fix 2019-08-23 11:42:15 +02:00
dgt 9237d2730f Update: Add some new Rails 5.2 config params 2019-08-23 11:42:15 +02:00
dgt 52f64b10af Update Rails to 5.2
also update db/schema.rb
2019-08-23 11:42:15 +02:00
dgt 4d4b4fe581 Fix: security update for nokogiri
Advisory: CVE-2019-11068
Criticality: Unknown
URL: https://github.com/sparklemotion/nokogiri/issues/1892
2019-08-23 11:42:15 +02:00
Azul 3c37911b98 upgrade: crabgrass media to 0.3.1
This includes a fix that will prevent libre office from stalling
2019-08-23 11:42:15 +02:00
dgt 28a6e56c08 update rubocop.yml and remove obsolete loofah entry from Gemfile 2019-08-23 11:42:15 +02:00
dgt 03a80251b5 Upgrade to Rails 5.1
and fixed wiki versioning test

Rails 5.1 last steps

crabgrass_media from rubygems
remove controller test for task sorting - not possible to test xhr request without route in new parameter syntax
remove new framework defaults initializer file

Final step of upgrade to rails 5.1

we only test on stretch, because we need ruby >= 2.2.2
update dependencies by running bundle update
and fix gallery_image_controller_test

Also write db/schema.rb with rails 5
2019-08-23 11:42:12 +02:00
dgt e853c2e9d9 Use prototype-rails branch for rails 5.X and hide actions which cannot be hidden by hide_action anymore 2019-08-23 10:43:01 +02:00
dgt 2cddb2f6fa Update ActsAsTaggableOn
results in failing versions_controller_test.rb
seems to be related to schema update
2019-08-23 10:43:01 +02:00
dgt 939fa3d1d1 Some preparations for rails 5.1
update some gems, replace before_filter / after_filter by before_action / after_action
and some more config changes (mostly commented out) and scripts generated by rails app:update task
2019-08-23 10:43:01 +02:00
dgt eee8c84178 Preparation for Rails 5
first make everything work locally with rails 5.0
test do not pass on CI yet because the test task has to be rewritten

- update dependecies
- run rails app:update task: update config, generate intitializers etc.
- the method hide_action is not available in rails anymore
- ActionController::Parameters have to be converted to a hash
- protect_from_forgery now defaults to prepend:false
2019-08-23 10:43:01 +02:00
Azul 828dec19b7 upgrade: cg media
Version 0.2.1 of crabgrass-media has a fix
for failing libre office converter runs.
2019-04-19 01:39:07 +02:00
Azul e85fa554d6 upgrade: rails 4.2.11.1 2019-03-21 22:43:18 +01:00
dgt 5c8e88456f Fix: security update to rails 4.2.11
updates active job (Fix CVE-2018-16476)
updates loofah (Fix CVE-2018-16468)
2018-11-28 11:54:49 +01:00
dgt ff3d3f1f95 Update rack
CVE-2018-16471
Criticality: Unknown
URL: https://groups.google.com/forum/#!topic/ruby-security-ann/NAalCee8n6o
Title: Possible XSS vulnerability in Rack
2018-11-07 09:55:48 +01:00
dgt 4eb13372f6 Fix: Update loofah
loofah Version: 2.2.2 Advisory: CVE-2018-16468 Criticality: Unknown URL: https://github.com/flavorjones/loofah/issues/154 Title: Loofah XSS Vulnerability Solution: upgrade to >= 2.2.3
2018-11-06 09:04:45 +01:00
dgt 9c7a85cccd Update nokogiri 2018-10-10 17:19:41 +02:00
dgt 0d9ca3146f Update ffi and rubyzip 2018-10-04 23:02:31 +02:00