github-mirror/discourse
2
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2024-11-23 06:49:14 +08:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity
88548cef6a
discourse/Gemfile.lock

562 lines
12 KiB
Plaintext
Raw Normal View History

Initial release of Discourse
2013-02-06 03:16:51 +08:00
GEM
Oops, didn't mean to revert to http on rubygems.
2013-03-08 01:20:19 +08:00
remote: https://rubygems.org/
Initial release of Discourse
2013-02-06 03:16:51 +08:00
specs:
DEV: update Rails to version 6.0.1 This version of Rails eliminates a monkey patch that is no longer needed! Additionally it preps us for Ruby 2.7 support.
2019-11-08 13:56:30 +08:00
actionmailer (6.0.1)
actionpack (= 6.0.1)
actionview (= 6.0.1)
activejob (= 6.0.1)
Update gems
2014-09-25 08:28:27 +08:00
mail (~> 2.5, >= 2.5.4)
Upgrade to Rails 5.
2017-08-23 10:58:25 +08:00
rails-dom-testing (~> 2.0)
DEV: update Rails to version 6.0.1 This version of Rails eliminates a monkey patch that is no longer needed! Additionally it preps us for Ruby 2.7 support.
2019-11-08 13:56:30 +08:00
actionpack (6.0.1)
actionview (= 6.0.1)
activesupport (= 6.0.1)
Upgrade to Rails 5.
2017-08-23 10:58:25 +08:00
rack (~> 2.0)
Upgrade Rails to 5.1.4.
2017-10-03 14:56:44 +08:00
rack-test (>= 0.6.3)
Upgrade to Rails 5.
2017-08-23 10:58:25 +08:00
rails-dom-testing (~> 2.0)
DEV: Upgrade Discourse to Rails 6 (#8083) * Adjustments to pass specs on Rails 6.0.0 * Use classic autoloader instead of Zeitwerk * Update Rails 6.0.0 deprecated methods * Rails 6.0.0 not allowing column with integer name * Drop freedom_patches/rails6.rb * Default value for trigger_transactional_callbacks? is true * Bump rspec-rails version to 4.0.0.beta2
2019-09-12 08:41:50 +08:00
rails-html-sanitizer (~> 1.0, >= 1.2.0)
DEV: update Rails to version 6.0.1 This version of Rails eliminates a monkey patch that is no longer needed! Additionally it preps us for Ruby 2.7 support.
2019-11-08 13:56:30 +08:00
actionview (6.0.1)
activesupport (= 6.0.1)
Rails 4 upgrade
2014-05-08 12:14:24 +08:00
builder (~> 3.1)
Upgrade to Rails 5.
2017-08-23 10:58:25 +08:00
erubi (~> 1.4)
rails-dom-testing (~> 2.0)
DEV: Upgrade Discourse to Rails 6 (#8083) * Adjustments to pass specs on Rails 6.0.0 * Use classic autoloader instead of Zeitwerk * Update Rails 6.0.0 deprecated methods * Rails 6.0.0 not allowing column with integer name * Drop freedom_patches/rails6.rb * Default value for trigger_transactional_callbacks? is true * Bump rspec-rails version to 4.0.0.beta2
2019-09-12 08:41:50 +08:00
rails-html-sanitizer (~> 1.1, >= 1.2.0)
DEV: Bump actionview_precompiler from 0.2.1 to 0.2.2 (#8798) Bumps [actionview_precompiler](https://github.com/jhawthorn/actionview_precompiler) from 0.2.1 to 0.2.2. - [Release notes](https://github.com/jhawthorn/actionview_precompiler/releases) - [Commits](https://github.com/jhawthorn/actionview_precompiler/compare/v0.2.1...v0.2.2) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> This is used by unicorn for precompilation of templates, it reduces memory and cpu on unicorn workers that reuse the work. Upgrade is safe only contains Ruby 2.7 fixes
2020-01-29 09:09:56 +08:00
actionview_precompiler (0.2.2)
PREF: optimise preloading application We preload to ensure as much memory as possible is reused from unicorn master to various workers using copy-on-write (sidekiq, unicorn) This migrates the preloading code into the Discourse module for easier reuse and adds 3 notable preloading changes 1. We attempt to localize a string on each site, ensuring we warmup the i18n 2. We preload all our templates (compiling .erb to class) 3. We warm-up our search tokenizer which uses cppjieba which is a large memory consumer, this will only cause a warmup on CJK sites or sites with the special site setting enabled.
2019-10-07 12:33:37 +08:00
actionview (>= 6.0.a)
DEV: Rails 5.2 upgrade and global gem upgrade This updates tests to use latest rails 5 practice and updates ALL dependencies that could be updated Performance testing shows that performance has not regressed if anything it is marginally faster now.
2018-06-05 15:29:17 +08:00
active_model_serializers (0.8.4)
Rails 4 updates
2013-07-24 02:42:52 +08:00
activemodel (>= 3.0)
DEV: update Rails to version 6.0.1 This version of Rails eliminates a monkey patch that is no longer needed! Additionally it preps us for Ruby 2.7 support.
2019-11-08 13:56:30 +08:00
activejob (6.0.1)
activesupport (= 6.0.1)
Upgrade to Rails 5.
2017-08-23 10:58:25 +08:00
globalid (>= 0.3.6)
DEV: update Rails to version 6.0.1 This version of Rails eliminates a monkey patch that is no longer needed! Additionally it preps us for Ruby 2.7 support.
2019-11-08 13:56:30 +08:00
activemodel (6.0.1)
activesupport (= 6.0.1)
activerecord (6.0.1)
activemodel (= 6.0.1)
activesupport (= 6.0.1)
activesupport (6.0.1)
Upgrade to Rails 5.
2017-08-23 10:58:25 +08:00
concurrent-ruby (~> 1.0, >= 1.0.2)
Upgrade to Rails 5.2 take 2.
2018-06-08 09:33:50 +08:00
i18n (>= 0.7, < 2)
Rails 4 upgrade
2014-05-08 12:14:24 +08:00
minitest (~> 5.1)
tzinfo (~> 1.1)
DEV: update Rails to version 6.0.1 This version of Rails eliminates a monkey patch that is no longer needed! Additionally it preps us for Ruby 2.7 support.
2019-11-08 13:56:30 +08:00
zeitwerk (~> 2.2)
DEV: update dependencies This updates some low risk dependencies. Mostly minor changes. Public suffix now requires Ruby 2.3 and up which is not a problem for us.
2019-12-09 16:20:45 +08:00
addressable (2.7.0)
public_suffix (>= 2.0.2, < 5.0)
DEV: upgrade low risk gems This updates a bunch of gems that have very low risk of breaking anything or are mostly used in dev. Overall our goal is to be on latest gems with latest bug fixes so this is us working in that direction.
2019-12-06 14:11:10 +08:00
annotate (3.0.3)
DEV: update minor dependencies These gems have very minor changes, and are low risk updates
2019-04-29 13:00:58 +08:00
activerecord (>= 3.2, < 7.0)
DEV: upgrade low risk gems This updates a bunch of gems that have very low risk of breaking anything or are mostly used in dev. Overall our goal is to be on latest gems with latest bug fixes so this is us working in that direction.
2019-12-06 14:11:10 +08:00
rake (>= 10.4, < 14.0)
try updating rubocop so it does not crash
2018-03-13 14:58:23 +08:00
ast (2.4.0)
DEV: update AWS dependency AWS is a big moving target, this fills gaps in the API. Technically we use such a tiny surface area that it probably does not matter, but it is good to be up to date here.
2019-04-29 13:39:19 +08:00
aws-eventstream (1.0.3)
Build(deps): Bump aws-partitions from 1.267.0 to 1.269.0 (#8786) Bumps [aws-partitions](https://github.com/aws/aws-sdk-ruby) from 1.267.0 to 1.269.0. - [Release notes](https://github.com/aws/aws-sdk-ruby/releases) - [Changelog](https://github.com/aws/aws-sdk-ruby/blob/master/gems/aws-partitions/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-ruby/commits) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-01-28 00:06:05 +08:00
aws-partitions (1.269.0)
Build(deps): Bump aws-sdk-kms from 1.27.0 to 1.28.0 (#8755) Bumps [aws-sdk-kms](https://github.com/aws/aws-sdk-ruby) from 1.27.0 to 1.28.0. - [Release notes](https://github.com/aws/aws-sdk-ruby/releases) - [Changelog](https://github.com/aws/aws-sdk-ruby/blob/master/gems/aws-sdk-kms/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-ruby/compare/1.27.0...1.28.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-01-21 23:09:41 +08:00
aws-sdk-core (3.89.1)
DEV: update AWS dependency AWS is a big moving target, this fills gaps in the API. Technically we use such a tiny surface area that it probably does not matter, but it is good to be up to date here.
2019-04-29 13:39:19 +08:00
aws-eventstream (~> 1.0, >= 1.0.2)
DEV: Bump aws-sdk-sns from 1.13.0 to 1.21.0 (#8490) Bumps [aws-sdk-sns](https://github.com/aws/aws-sdk-ruby) from 1.13.0 to 1.21.0. - [Release notes](https://github.com/aws/aws-sdk-ruby/releases) - [Changelog](https://github.com/aws/aws-sdk-ruby/blob/master/gems/aws-sdk-sns/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-ruby/compare/1.13.0...1.21.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-12-11 22:13:17 +08:00
aws-partitions (~> 1, >= 1.239.0)
DEV: update AWS dependency AWS is a big moving target, this fills gaps in the API. Technically we use such a tiny surface area that it probably does not matter, but it is good to be up to date here.
2019-04-29 13:39:19 +08:00
aws-sigv4 (~> 1.1)
PERF: remove "fog" dependency
2015-05-25 15:57:06 +08:00
jmespath (~> 1.0)
Build(deps): Bump aws-sdk-kms from 1.27.0 to 1.28.0 (#8755) Bumps [aws-sdk-kms](https://github.com/aws/aws-sdk-ruby) from 1.27.0 to 1.28.0. - [Release notes](https://github.com/aws/aws-sdk-ruby/releases) - [Changelog](https://github.com/aws/aws-sdk-ruby/blob/master/gems/aws-sdk-kms/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-ruby/compare/1.27.0...1.28.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-01-21 23:09:41 +08:00
aws-sdk-kms (1.28.0)
Build(deps): Bump aws-sdk-s3 from 1.36.1 to 1.59.0 (#8502) * Build(deps): Bump aws-sdk-s3 from 1.36.1 to 1.59.0 Bumps [aws-sdk-s3](https://github.com/aws/aws-sdk-ruby) from 1.36.1 to 1.59.0. - [Release notes](https://github.com/aws/aws-sdk-ruby/releases) - [Changelog](https://github.com/aws/aws-sdk-ruby/blob/master/gems/aws-sdk-s3/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-ruby/compare/v1.36.1...v1.59.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> * Dependabot/bundler/aws sdk s3 1.59.0 (#8532)
2019-12-12 02:18:11 +08:00
aws-sdk-core (~> 3, >= 3.71.0)
DEV: update AWS dependency AWS is a big moving target, this fills gaps in the API. Technically we use such a tiny surface area that it probably does not matter, but it is good to be up to date here.
2019-04-29 13:39:19 +08:00
aws-sigv4 (~> 1.1)
Build(deps): Bump aws-sdk-s3 from 1.59.1 to 1.60.1 (#8596) Bumps [aws-sdk-s3](https://github.com/aws/aws-sdk-ruby) from 1.59.1 to 1.60.1. - [Release notes](https://github.com/aws/aws-sdk-ruby/releases) - [Changelog](https://github.com/aws/aws-sdk-ruby/blob/master/gems/aws-sdk-s3/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-ruby/compare/v1.59.1...v1.60.1) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-01-07 07:30:14 +08:00
aws-sdk-s3 (1.60.1)
Build(deps): Bump aws-sdk-s3 from 1.36.1 to 1.59.0 (#8502) * Build(deps): Bump aws-sdk-s3 from 1.36.1 to 1.59.0 Bumps [aws-sdk-s3](https://github.com/aws/aws-sdk-ruby) from 1.36.1 to 1.59.0. - [Release notes](https://github.com/aws/aws-sdk-ruby/releases) - [Changelog](https://github.com/aws/aws-sdk-ruby/blob/master/gems/aws-sdk-s3/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-ruby/compare/v1.36.1...v1.59.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> * Dependabot/bundler/aws sdk s3 1.59.0 (#8532)
2019-12-12 02:18:11 +08:00
aws-sdk-core (~> 3, >= 3.83.0)
FEATURE: rake tasks for uploading assets to S3 This opens the door to serving application.js and so on from s3. Also updates s3 gem for some tagging support
2017-10-03 15:00:42 +08:00
aws-sdk-kms (~> 1)
Build(deps): Bump aws-sdk-s3 from 1.36.1 to 1.59.0 (#8502) * Build(deps): Bump aws-sdk-s3 from 1.36.1 to 1.59.0 Bumps [aws-sdk-s3](https://github.com/aws/aws-sdk-ruby) from 1.36.1 to 1.59.0. - [Release notes](https://github.com/aws/aws-sdk-ruby/releases) - [Changelog](https://github.com/aws/aws-sdk-ruby/blob/master/gems/aws-sdk-s3/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-ruby/compare/v1.36.1...v1.59.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> * Dependabot/bundler/aws sdk s3 1.59.0 (#8532)
2019-12-12 02:18:11 +08:00
aws-sigv4 (~> 1.1)
DEV: Bump aws-sdk-sns from 1.13.0 to 1.21.0 (#8490) Bumps [aws-sdk-sns](https://github.com/aws/aws-sdk-ruby) from 1.13.0 to 1.21.0. - [Release notes](https://github.com/aws/aws-sdk-ruby/releases) - [Changelog](https://github.com/aws/aws-sdk-ruby/blob/master/gems/aws-sdk-sns/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-ruby/compare/1.13.0...1.21.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-12-11 22:13:17 +08:00
aws-sdk-sns (1.21.0)
aws-sdk-core (~> 3, >= 3.71.0)
DEV: update AWS dependency AWS is a big moving target, this fills gaps in the API. Technically we use such a tiny surface area that it probably does not matter, but it is good to be up to date here.
2019-04-29 13:39:19 +08:00
aws-sigv4 (~> 1.1)
aws-sigv4 (1.1.0)
aws-eventstream (~> 1.0, >= 1.0.2)
DEV: low risk gem updates This updates another batch of gems that are lowish risk Most of the gem changes are here for Rails 6 / Ruby 2.6.3 support Excon did some stuff around better cipher ordering
2019-04-29 13:33:01 +08:00
barber (0.12.2)
DEV: Rails 5.2 upgrade and global gem upgrade This updates tests to use latest rails 5 practice and updates ALL dependencies that could be updated Performance testing shows that performance has not regressed if anything it is marginally faster now.
2018-06-05 15:29:17 +08:00
ember-source (>= 1.0, < 3.1)
FIX: HTMLBars compilation was broken in production mode
2015-05-07 22:52:31 +08:00
execjs (>= 1.2, < 3)
DEV: low risk gem updates This updates another batch of gems that are lowish risk Most of the gem changes are here for Rails 6 / Ruby 2.6.3 support Excon did some stuff around better cipher ordering
2019-04-29 13:33:01 +08:00
better_errors (2.5.1)
Initial release of Discourse
2013-02-06 03:16:51 +08:00
coderay (>= 1.0.0)
DEV: Rails 5.2 upgrade and global gem upgrade This updates tests to use latest rails 5 practice and updates ALL dependencies that could be updated Performance testing shows that performance has not regressed if anything it is marginally faster now.
2018-06-05 15:29:17 +08:00
erubi (>= 1.0.0)
Gem updates
2014-08-22 08:33:55 +08:00
rack (>= 0.9.0)
FIX: binding_of_caller not working on Ruby 2.5
2018-02-19 05:08:13 +08:00
binding_of_caller (0.8.0)
Wot! Ruby 2.0 support?
2013-02-28 18:27:25 +08:00
debug_inspector (>= 0.0.1)
DEV: upgrade bootsnap This fixes Ruby 2.7 support which we are starting to test
2019-11-08 14:07:58 +08:00
bootsnap (1.4.5)
add bootsnap to speed up test and dev
2017-05-12 01:51:38 +08:00
msgpack (~> 1.0)
Bump jquery-rails from 4.3.3 to 4.3.5 (#8557) Bumps [jquery-rails](https://github.com/rails/jquery-rails) from 4.3.3 to 4.3.5. - [Release notes](https://github.com/rails/jquery-rails/releases) - [Changelog](https://github.com/rails/jquery-rails/blob/master/CHANGELOG.md) - [Commits](https://github.com/rails/jquery-rails/compare/v4.3.3...v4.3.5) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-12-17 01:44:56 +08:00
builder (3.2.4)
DEV: update dependencies Quite a few have popped up due to 2.7 release, all gems being updated have non urgent fixes, but it makes sense to be on latest.
2019-12-31 09:20:10 +08:00
bullet (6.1.0)
Add Bullet gem to detect N+1 queries.
2016-06-28 09:29:42 +08:00
activesupport (>= 3.0.0)
DEV: update more gems including i18n This updates a few more lower risk gems, the main goal here is to have nothing outdated. Avoiding a giant commit is going to make it slightly easier to partially roll back if something goes wrong
2019-02-04 14:54:39 +08:00
uniform_notifier (~> 1.11)
Build(deps-dev): Bump byebug from 11.1.0 to 11.1.1 (#8788) Bumps [byebug](https://github.com/deivid-rodriguez/byebug) from 11.1.0 to 11.1.1. - [Release notes](https://github.com/deivid-rodriguez/byebug/releases) - [Changelog](https://github.com/deivid-rodriguez/byebug/blob/master/CHANGELOG.md) - [Commits](https://github.com/deivid-rodriguez/byebug/compare/v11.1.0...v11.1.1) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-01-28 00:06:17 +08:00
byebug (11.1.1)
FEATURE: Webauthn authenticator management with 2FA login (Security Keys) (#8099) Adds 2 factor authentication method via second factor security keys over [web authn](https://developer.mozilla.org/en-US/docs/Web/API/Web_Authentication_API). Allows a user to authenticate a second factor on login, login-via-email, admin-login, and change password routes. Adds registration area within existing user second factor preferences to register multiple security keys. Supports both external (yubikey) and built-in (macOS/android fingerprint readers).
2019-10-02 10:08:41 +08:00
cbor (0.5.9.6)
Gem updates, all up to latest.
2014-09-25 08:40:35 +08:00
certified (1.0.0)
DEV: gem updates Another group of gems updated, better_errors is fairly safe as its for dev chunky_png fairly safe, used for getting image info from pngs, erubi update is very safe. Sanitize is used by onebox and should always be on latest. Long term we should think of making sanitize an optional dependency on onebox cause we are happy to just provide methods from core to do this and it would remove nokogumbo and sanitize deps.
2019-02-05 09:35:42 +08:00
chunky_png (1.3.11)
update coderay
2018-01-17 12:39:52 +08:00
coderay (1.1.2)
DEV: implementing danger for travis
2018-07-24 22:12:15 +08:00
colored2 (3.1.2)
Removed "shoulda" gem in favor of "shoulda-matchers" and update (#7387) * Update shoulda gem * Remove shoulda gem in favor of shoulda-matchers only
2019-04-18 05:41:37 +08:00
concurrent-ruby (1.1.5)
DEV: Rails 5.2 upgrade and global gem upgrade This updates tests to use latest rails 5 practice and updates ALL dependencies that could be updated Performance testing shows that performance has not regressed if anything it is marginally faster now.
2018-06-05 15:29:17 +08:00
connection_pool (2.2.2)
Build(deps): Bump cose from 0.9.0 to 0.10.0 (#8595) Bumps [cose](https://github.com/cedarcode/cose-ruby) from 0.9.0 to 0.10.0. - [Release notes](https://github.com/cedarcode/cose-ruby/releases) - [Changelog](https://github.com/cedarcode/cose-ruby/blob/master/CHANGELOG.md) - [Commits](https://github.com/cedarcode/cose-ruby/compare/v0.9.0...v0.10.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-12-30 14:10:34 +08:00
cose (0.10.0)
FEATURE: Webauthn authenticator management with 2FA login (Security Keys) (#8099) Adds 2 factor authentication method via second factor security keys over [web authn](https://developer.mozilla.org/en-US/docs/Web/API/Web_Authentication_API). Allows a user to authenticate a second factor on login, login-via-email, admin-login, and change password routes. Adds registration area within existing user second factor preferences to register multiple security keys. Supports both external (yubikey) and built-in (macOS/android fingerprint readers).
2019-10-02 10:08:41 +08:00
cbor (~> 0.5.9)
DEV: gem updates Another group of gems updated, better_errors is fairly safe as its for dev chunky_png fairly safe, used for getting image info from pngs, erubi update is very safe. Sanitize is used by onebox and should always be on latest. Long term we should think of making sanitize an optional dependency on onebox cause we are happy to just provide methods from core to do this and it would remove nokogumbo and sanitize deps.
2019-02-05 09:35:42 +08:00
cppjieba_rb (0.3.3)
Support Ruby 2.4.
2017-04-15 12:11:02 +08:00
crack (0.4.3)
safe_yaml (~> 1.0.0)
Build(deps): Bump onebox from 1.9.24 to 1.9.25 (#8707) Bumps [onebox](https://github.com/discourse/onebox) from 1.9.24 to 1.9.25. - [Release notes](https://github.com/discourse/onebox/releases) - [Changelog](https://github.com/discourse/onebox/blob/master/CHANGELOG.md) - [Commits](https://github.com/discourse/onebox/commits) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-01-13 22:27:16 +08:00
crass (1.0.6)
DEV: Bump css_parser from 1.7.0 to 1.7.1 (#8524) Bumps [css_parser](https://github.com/premailer/css_parser) from 1.7.0 to 1.7.1. - [Release notes](https://github.com/premailer/css_parser/releases) - [Changelog](https://github.com/premailer/css_parser/blob/master/CHANGELOG.md) - [Commits](https://github.com/premailer/css_parser/compare/v1.7.0...v1.7.1) This minor update force UTF-8, this should have not impact on us as we only trade in UTF-8 strings for CSS anyway.
2019-12-11 07:56:53 +08:00
css_parser (1.7.1)
FEATURE: customization of html emails (#7934) This feature adds the ability to customize the HTML part of all emails using a custom HTML template and optionally some CSS to style it. The CSS will be parsed and converted into inline styles because CSS is poorly supported by email clients. When writing the custom HTML and CSS, be aware of what email clients support. Keep customizations very simple. Customizations can be added and edited in Admin > Customize > Email Style. Since the summary email is already heavily styled, there is a setting to disable custom styles for summary emails called "apply custom styles to digest" found in Admin > Settings > Email. As part of this work, RTL locales are now rendered correctly for all emails.
2019-07-31 03:05:08 +08:00
addressable
Update gems in development group.
2017-06-07 10:12:44 +08:00
debug_inspector (0.0.3)
Update RSpec's dependency to fix deprecation warning.
2017-04-26 16:21:51 +08:00
diff-lcs (1.3)
DEV: Verbose mode for `posts:inline_uploads` rake task.
2019-06-07 16:21:37 +08:00
diffy (3.3.0)
FIX: updates discourse-ember-source gem (#8167) This is related to fix made to prevent a crash in iOS 9.5
2019-10-08 08:39:20 +08:00
discourse-ember-source (3.10.0.2)
Bump `discourse_image_optim` which uses a global timeout. Our previous solution has the timeout set at the worker level which means the total timeout would be X timeout secs * N number of workers.
2018-07-09 10:30:18 +08:00
discourse_image_optim (0.26.2)
Install `discourse_image_optim` gem for now.
2017-04-20 14:40:16 +08:00
exifr (~> 1.2, >= 1.2.2)
fspath (~> 3.0)
image_size (~> 1.5)
in_threads (~> 1.3)
progress (~> 3.0, >= 3.0.1)
Build(deps-dev): Bump simplecov from 0.16.1 to 0.17.1 (#8486) Bumps [simplecov](https://github.com/colszowka/simplecov) from 0.16.1 to 0.17.1. - [Release notes](https://github.com/colszowka/simplecov/releases) - [Changelog](https://github.com/colszowka/simplecov/blob/master/CHANGELOG.md) - [Commits](https://github.com/colszowka/simplecov/compare/v0.16.1...v0.17.1) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-12-10 03:32:25 +08:00
docile (1.3.2)
bump email_reply_trimmer
2018-05-17 16:22:53 +08:00
email_reply_trimmer (0.1.12)
DEV: Rails 5.2 upgrade and global gem upgrade This updates tests to use latest rails 5 practice and updates ALL dependencies that could be updated Performance testing shows that performance has not regressed if anything it is marginally faster now.
2018-06-05 15:29:17 +08:00
ember-data-source (3.0.2)
ember-source (>= 2, < 3.0)
DEV: upgrades from Ember 2.13 to Ember 3.5.1 (#6808) Co-Authored-By: Bianca Nenciu <nbianca@users.noreply.github.com> Co-Authored-By: David Taylor <david@taylorhq.com>
2019-01-10 18:06:01 +08:00
ember-handlebars-template (0.8.0)
Update sprockets. (#4167) * Update sass-rails. * FIX: Tilt dependency has been removed from Ember::Handlebars::Template. * Update `DiscourseIIFE` to new Sprockets API. * `Rails.application.assets` returns `nil` in production. * Move sprockets-rails out of the assets group. * Pin ember-rails to 0.18.5 which works with Sprockets 3.x. * Update sprockets to 3.6.0. * Make `DiscourseSassCompiler` work with Sprockets 3. * Use `Sass::Rails::SassImporterGlobbing` instead of haxxing our own. * Moneky patch so that we don't add dependencies for our custom css. * FIX: Missing class. * Upgrade ember-handlebars-template. * FIX: require path needs to share the same root as the folder's path. * Bump discourse-qunit-rails. * Update ember-template-compiler.js to 1.12.2. * `prepend` is private in Ruby 2.0.0.
2016-04-18 10:47:52 +08:00
barber (>= 0.11.0)
DEV: upgrades from Ember 2.13 to Ember 3.5.1 (#6808) Co-Authored-By: Bianca Nenciu <nbianca@users.noreply.github.com> Co-Authored-By: David Taylor <david@taylorhq.com>
2019-01-10 18:06:01 +08:00
sprockets (>= 3.3, < 4.1)
Update sprockets. (#4167) * Update sass-rails. * FIX: Tilt dependency has been removed from Ember::Handlebars::Template. * Update `DiscourseIIFE` to new Sprockets API. * `Rails.application.assets` returns `nil` in production. * Move sprockets-rails out of the assets group. * Pin ember-rails to 0.18.5 which works with Sprockets 3.x. * Update sprockets to 3.6.0. * Make `DiscourseSassCompiler` work with Sprockets 3. * Use `Sass::Rails::SassImporterGlobbing` instead of haxxing our own. * Moneky patch so that we don't add dependencies for our custom css. * FIX: Missing class. * Upgrade ember-handlebars-template. * FIX: require path needs to share the same root as the folder's path. * Bump discourse-qunit-rails. * Update ember-template-compiler.js to 1.12.2. * `prepend` is private in Ruby 2.0.0.
2016-04-18 10:47:52 +08:00
ember-rails (0.18.5)
Update Ember to latest master (RC5)
2013-06-07 05:50:49 +08:00
active_model_serializers
FIX: HTMLBars compilation was broken in production mode
2015-05-07 22:52:31 +08:00
ember-data-source (>= 1.0.0.beta.5)
ember-handlebars-template (>= 0.1.1, < 1.0)
ember-source (>= 1.1.0)
rails 3 gem update (note will be removed at some point)
2013-12-06 14:06:52 +08:00
jquery-rails (>= 1.0.17)
Update Ember to latest master (RC5)
2013-06-07 05:50:49 +08:00
railties (>= 3.1)
DEV: upgrades from Ember 2.13 to Ember 3.5.1 (#6808) Co-Authored-By: Bianca Nenciu <nbianca@users.noreply.github.com> Co-Authored-By: David Taylor <david@taylorhq.com>
2019-01-10 18:06:01 +08:00
ember-source (2.18.2)
DEV: update Rails to version 6.0.1 This version of Rails eliminates a monkey patch that is no longer needed! Additionally it preps us for Ruby 2.7 support.
2019-11-08 13:56:30 +08:00
erubi (1.9.0)
Build(deps): Bump excon from 0.71.1 to 0.72.0 (#8797) Bumps [excon](https://github.com/excon/excon) from 0.71.1 to 0.72.0. - [Release notes](https://github.com/excon/excon/releases) - [Changelog](https://github.com/excon/excon/blob/master/changelog.txt) - [Commits](https://github.com/excon/excon/compare/v0.71.1...v0.72.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-01-29 00:20:54 +08:00
excon (0.72.0)
execjs 2.7 was just released to support mini_racer
2016-05-20 15:06:44 +08:00
execjs (2.7.0)
DEV: low risk gem updates This updates another batch of gems that are lowish risk Most of the gem changes are here for Rails 6 / Ruby 2.6.3 support Excon did some stuff around better cipher ordering
2019-04-29 13:33:01 +08:00
exifr (1.3.6)
DEV: update dependencies This updates some low risk dependencies. Mostly minor changes. Public suffix now requires Ruby 2.3 and up which is not a problem for us.
2019-12-09 16:20:45 +08:00
fabrication (2.21.0)
Use FakeWeb to fake web requests on specs
2013-02-13 18:32:18 +08:00
fakeweb (1.3.0)
Revert Faraday to version 0.17.3
2020-01-24 14:38:56 +08:00
faraday (0.17.3)
Update Gems
2014-02-18 13:02:28 +08:00
multipart-post (>= 1.2, < 3)
gem updates
2015-09-23 14:31:46 +08:00
fast_blank (1.0.0)
Update Gems
2014-02-18 13:02:28 +08:00
fast_xor (1.1.3)
fixed ruby 2.0 p0 bug in fast_stack so re-pushing
2013-09-09 19:19:23 +08:00
rake
rake-compiler
Initial release of Discourse
2013-02-06 03:16:51 +08:00
fast_xs (0.8.0)
DEV: Bump fastimage from 2.1.5 to 2.1.7 This library is used to detect size of images, upgrading a minor version here should be low risk, we have integration tests to detect issues.
2019-12-09 09:49:53 +08:00
fastimage (2.1.7)
Build(deps): Bump ffi from 1.11.3 to 1.12.1 (#8721) Bumps [ffi](https://github.com/ffi/ffi) from 1.11.3 to 1.12.1. - [Release notes](https://github.com/ffi/ffi/releases) - [Changelog](https://github.com/ffi/ffi/blob/master/CHANGELOG.md) - [Commits](https://github.com/ffi/ffi/compare/1.11.3...1.12.1) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-01-21 04:45:55 +08:00
ffi (1.12.1)
upgrade profiling gems
2016-05-13 16:24:15 +08:00
flamegraph (0.9.5)
Bump fspath from 3.1.0 to 3.1.2 (#8564) Bumps [fspath](https://github.com/toy/fspath) from 3.1.0 to 3.1.2. - [Release notes](https://github.com/toy/fspath/releases) - [Commits](https://github.com/toy/fspath/compare/v3.1.0...v3.1.2) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-12-17 04:19:31 +08:00
fspath (3.1.2)
remove gctools (no longer used) add gctracer for debugging
2016-12-20 12:01:36 +08:00
gc_tracer (1.5.1)
DEV: update mini_sql and some other gems Big one is mini_sql, only noticeable change is that the internals now support jruby!
2019-04-29 13:04:19 +08:00
globalid (0.4.2)
More gem updates.
2017-06-08 05:39:54 +08:00
activesupport (>= 4.2.0)
update gems
2015-03-10 08:09:49 +08:00
guess_html_encoding (0.0.11)
Build(deps-dev): Bump webmock from 3.5.1 to 3.7.6 (#8512) Bumps [webmock](https://github.com/bblimke/webmock) from 3.5.1 to 3.7.6. - [Release notes](https://github.com/bblimke/webmock/releases) - [Changelog](https://github.com/bblimke/webmock/blob/master/CHANGELOG.md) - [Commits](https://github.com/bblimke/webmock/compare/v3.5.1...v3.7.6) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-12-11 02:38:03 +08:00
hashdiff (1.0.0)
Bump omniauth-google-oauth2 version
2019-01-01 03:07:18 +08:00
hashie (3.6.0)
DEV: lower highline requirement
2018-06-28 04:50:00 +08:00
highline (1.7.10)
Feature: Push notifications for Android (#5792) * Feature: Push notifications for Android Notification config for desktop and mobile are merged. Desktop notifications stay as they are for desktop views. If mobile mode, push notifications are enabled. Added push notification subscriptions in their own table, rather than through custom fields. Notification banner prompts appear for both mobile and desktop when enabled.
2018-05-05 06:31:48 +08:00
hkdf (0.3.0)
more gem updates
2015-09-23 15:10:15 +08:00
htmlentities (4.3.4)
DEV: update dependencies and add notes about exceptions Previously it was unclear why certain gems are being held back cause Gemfile had no comment explaining it. I tried to add some explanation from memory and remove some exceptions that seemed to be superfluous. This upgrades shoulda to latest, it appears to work once a couple of assertions are removed Also update http accept language used to auto detect language from http header this is tested Zeitwerk small update seems fine
2019-12-06 10:00:16 +08:00
http_accept_language (2.1.1)
Build(deps): Bump i18n from 1.8.0 to 1.8.2 (#8705) Bumps [i18n](https://github.com/svenfuchs/i18n) from 1.8.0 to 1.8.2. - [Release notes](https://github.com/svenfuchs/i18n/releases) - [Changelog](https://github.com/ruby-i18n/i18n/blob/master/CHANGELOG.md) - [Commits](https://github.com/svenfuchs/i18n/compare/v1.8.0...v1.8.2) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-01-21 04:45:02 +08:00
i18n (1.8.2)
DEV: Rails 5.2 upgrade and global gem upgrade This updates tests to use latest rails 5 practice and updates ALL dependencies that could be updated Performance testing shows that performance has not regressed if anything it is marginally faster now.
2018-06-05 15:29:17 +08:00
concurrent-ruby (~> 1.0)
Upgrade image_optim.
2017-04-12 16:56:00 +08:00
image_size (1.5.0)
DEV: update dependencies Quite a few have popped up due to 2.7 release, all gems being updated have non urgent fixes, but it makes sense to be on latest.
2019-12-31 09:20:10 +08:00
in_threads (1.5.4)
DEV: update rubocop to version 0.77 We like to stay as close as possible to latest with rubocop cause the cops get better. This update required some code changes, specifically the default is to avoid explicit returns where implicit is done Also this renames a few rules
2019-12-10 08:48:27 +08:00
jaro_winkler (1.5.4)
DEV: Rails 5.2 upgrade and global gem upgrade This updates tests to use latest rails 5 practice and updates ALL dependencies that could be updated Performance testing shows that performance has not regressed if anything it is marginally faster now.
2018-06-05 15:29:17 +08:00
jmespath (1.4.0)
Bump jquery-rails from 4.3.3 to 4.3.5 (#8557) Bumps [jquery-rails](https://github.com/rails/jquery-rails) from 4.3.3 to 4.3.5. - [Release notes](https://github.com/rails/jquery-rails/releases) - [Changelog](https://github.com/rails/jquery-rails/blob/master/CHANGELOG.md) - [Commits](https://github.com/rails/jquery-rails/compare/v4.3.3...v4.3.5) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-12-17 01:44:56 +08:00
jquery-rails (4.3.5)
Enable newer version of Ember
2016-10-21 01:22:46 +08:00
rails-dom-testing (>= 1, < 3)
FIX: Update vulnerable gems.
2015-12-26 14:02:42 +08:00
railties (>= 4.2.0)
rails 3 gem update (note will be removed at some point)
2013-12-06 14:06:52 +08:00
thor (>= 0.14, < 2.0)
Bump json from 2.2.0 to 2.3.0 (#8563) Bumps [json](https://github.com/flori/json) from 2.2.0 to 2.3.0. - [Release notes](https://github.com/flori/json/releases) - [Changelog](https://github.com/flori/json/blob/master/CHANGES.md) - [Commits](https://github.com/flori/json/compare/v2.2.0...v2.3.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-12-17 02:35:08 +08:00
json (2.3.0)
Bump omniauth-google-oauth2 gem version Pinning to an old version is no longer required following https://github.com/zquestz/omniauth-google-oauth2/commit/8b4d6dafea1e741a34c92d595ffb2e7b99acd874
2019-06-04 02:17:00 +08:00
jwt (2.2.1)
Build(deps): Bump kgio from 2.11.2 to 2.11.3 (#8679) Bumps [kgio](https://yhbt.net/kgio/) from 2.11.2 to 2.11.3. Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-01-23 22:46:50 +08:00
kgio (2.11.3)
DEV: update mini racer version Mini Racer 0.2.5 provides support for libv8 7.3 (so we just upgraded from Chrome 67 -> 73 JS engine wise)
2019-04-29 08:22:27 +08:00
libv8 (7.3.492.27.1)
Build(deps-dev): Bump listen from 3.1.5 to 3.2.1 (#8498) Bumps [listen](https://github.com/guard/listen) from 3.1.5 to 3.2.1. - [Release notes](https://github.com/guard/listen/releases) - [Commits](https://github.com/guard/listen/compare/v3.1.5...v3.2.1) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-12-11 00:48:40 +08:00
listen (3.2.1)
rb-fsevent (~> 0.10, >= 0.10.3)
rb-inotify (~> 0.9, >= 0.9.10)
DEV: update dependencies This updates some low risk dependencies. Mostly minor changes. Public suffix now requires Ruby 2.3 and up which is not a problem for us.
2019-12-09 16:20:45 +08:00
lograge (0.11.2)
DEV: Rails 5.2 upgrade and global gem upgrade This updates tests to use latest rails 5 practice and updates ALL dependencies that could be updated Performance testing shows that performance has not regressed if anything it is marginally faster now.
2018-06-05 15:29:17 +08:00
actionpack (>= 4)
activesupport (>= 4)
railties (>= 4)
EXPERIMENTAL: Allow lograge to be selected as the logging library.
2017-10-27 17:54:45 +08:00
request_store (~> 1.0)
EXPERIMENTAL: Allow Logstash formatter to be enable for lograge logs.
2017-11-01 08:37:11 +08:00
logstash-event (1.2.02)
DEV: Rails 5.2 upgrade and global gem upgrade This updates tests to use latest rails 5 practice and updates ALL dependencies that could be updated Performance testing shows that performance has not regressed if anything it is marginally faster now.
2018-06-05 15:29:17 +08:00
logstash-logger (0.26.1)
EXPERIMENTAL: Allow logs to be shipped via different methods. See https://github.com/dwbutler/logstash-logger#uri-configuration for a list of available methods.
2017-11-14 12:50:26 +08:00
logstash-event (~> 1.2)
DEV: Bump Logster version to 2.5.1 This version has minor follow-up fixes and changes to the pattern grouping feature that was introduced yesterday. See Logster changelog for details: https://github.com/discourse/logster/blob/master/CHANGELOG.md
2019-12-13 17:51:19 +08:00
logster (2.5.1)
DEV: update dependencies This updates some low risk dependencies. Mostly minor changes. Public suffix now requires Ruby 2.3 and up which is not a problem for us.
2019-12-09 16:20:45 +08:00
loofah (2.4.0)
Upgrade Rails to 5.1.4.
2017-10-03 14:56:44 +08:00
crass (~> 1.0.2)
FEATURE: upgrade to Rails 4.2.4
2015-09-23 13:24:30 +08:00
nokogiri (>= 1.5.9)
update memory profiler, oj and lru redux
2015-06-04 23:03:11 +08:00
lru_redux (1.1.0)
FEATURE: improve performance of anonymous cache This commit introduces 2 features: 1. DISCOURSE_COMPRESS_ANON_CACHE (true|false, default false): this allows you to optionally compress the anon cache body entries in Redis, can be useful for high load sites with Redis that lives on a separate server to to webs 2. DISCOURSE_ANON_CACHE_STORE_THRESHOLD (default 2), only pop entries into redis if we observe them more than N times. This avoids situations where a crawler can walk a big pile of topics and store them all in Redis never to be used. Our default anon cache time for topics is only 60 seconds. Anon cache is in place to avoid the "slashdot" effect where a single topic is hit by 100s of people in one minute.
2019-09-04 15:18:32 +08:00
lz4-ruby (0.3.3)
DEV: upgrade mail gem from pre-release 2.7.1 version of the mail gem was released! We no longer need to depend on the pre-release.
2019-02-04 13:10:13 +08:00
mail (2.7.1)
Upgrade Mail gem.
2018-04-04 18:35:40 +08:00
mini_mime (>= 0.1.1)
DEV: update dependencies This updates some more low risk gems, maxmind, hiredis (c wrapper for redis), puma, rbtrace and stackprof.
2019-02-05 08:23:21 +08:00
maxminddb (0.1.22)
DEV: upgrade low risk gems This updates a bunch of gems that have very low risk of breaking anything or are mostly used in dev. Overall our goal is to be on latest gems with latest bug fixes so this is us working in that direction.
2019-12-06 14:11:10 +08:00
memory_profiler (0.9.14)
FIX: update Redis gem to version 4.1.3 I run our benchmark on commit with hiredis and redis-4.1.3 Results: type | hidredis | redis 4.1.3 | percent --- | --- | --- | --- Categories-50 | 49 | 50 | 102.04% Categories-75 | 51 | 51 | 100.00% Categories-90 | 63 | 64 | 101.59% Categories-99 | 86 | 85 | 98.84% Home-50 | 55 | 55 | 100.00% Home-75 | 56 | 57 | 101.79% Home-90 | 68 | 69 | 101.47% Home-99 | 102 | 104 | 101.96% Topic-50 | 36 | 37 | 102.78% Topic-75 | 37 | 37 | 100.00% Topic-90 | 47 | 48 | 102.13% Topic-99 | 60 | 61 | 101.67% Categories-admin-50 | 124 | 117 | 94.35% Categories-admin-75 | 130 | 129 | 99.23% Categories-admin-90 | 147 | 143 | 97.28% Categories-admin-99 | 204 | 199 | 97.55% Home-admin-50 | 146 | 148 | 101.37% Home-admin-75 | 150 | 152 | 101.33% Home-admin-90 | 169 | 168 | 99.41% Home-admin-99 | 232 | 223 | 96.12% Topic-admin-50 | 60 | 61 | 101.67% Topic-admin-75 | 64 | 63 | 98.44% Topic-admin-90 | 76 | 73 | 96.05% Topic-admin-99 | 124 | 94 | 75.81% Load rails | 2412 | 2360 | 97.84% rss | 290204 | 295828 | 101.94% pss | 277948 | 283624 | 102.04% Redis gem is manipulating Redis config https://github.com/redis/redis-rb/blob/master/lib/redis/client.rb#L95 therefore we cannot pass the frozen config object. Pass of the copy of the object is protecting original config
2019-10-21 06:59:24 +08:00
message_bus (2.2.3)
rails 3 gem update (note will be removed at some point)
2013-12-06 14:06:52 +08:00
rack (>= 1.1.3)
UPDATE: omniauth gem and some others needed to update omniauth for security issues
2014-02-24 07:11:16 +08:00
metaclass (0.0.4)
DEV: low risk gem updates This updates another batch of gems that are lowish risk Most of the gem changes are here for Rails 6 / Ruby 2.6.3 support Excon did some stuff around better cipher ordering
2019-04-29 13:33:01 +08:00
method_source (0.9.2)
DEV: Upgrade Discourse to Rails 6 (#8083) * Adjustments to pass specs on Rails 6.0.0 * Use classic autoloader instead of Zeitwerk * Update Rails 6.0.0 deprecated methods * Rails 6.0.0 not allowing column with integer name * Drop freedom_patches/rails6.rb * Default value for trigger_transactional_callbacks? is true * Bump rspec-rails version to 4.0.0.beta2
2019-09-12 08:41:50 +08:00
mini_mime (1.0.2)
DEV: update low risk gems This follows up on 03376224 which reverted the redis update which is not supported, rest of the gems should be fine.(unicorn / nokogiri / sidekiq / pg)
2019-02-05 03:54:10 +08:00
mini_portile2 (2.4.0)
DEV: Bump mini_racer from 0.2.8 to 0.2.9 (#8688) Bumps [mini_racer](https://github.com/discourse/mini_racer) from 0.2.8 to 0.2.9. - [Release notes](https://github.com/discourse/mini_racer/releases) - [Changelog](https://github.com/rubyjs/mini_racer/blob/master/CHANGELOG) - [Commits](https://github.com/discourse/mini_racer/compare/v0.2.8...v0.2.9) Very safe change, adds support for JavaScript Symbol which used to cause segfaults.
2020-01-09 10:11:26 +08:00
mini_racer (0.2.9)
DEV: update mini racer version Mini Racer 0.2.5 provides support for libv8 7.3 (so we just upgraded from Chrome 67 -> 73 JS engine wise)
2019-04-29 08:22:27 +08:00
libv8 (>= 6.9.411)
FEATURE: update mini_scheduler to support history filtering New version of mini scheduler allows you to select the name of a schedule in the history page in `/sidekiq/scheduler/history`. This is handy for quickly looking up timing trends.
2019-09-11 16:43:02 +08:00
mini_scheduler (0.12.2)
Bump mini_scheduler.
2019-01-21 10:57:30 +08:00
sidekiq
Build(deps): Bump mini_sql from 0.2.3 to 0.2.4 (#8757) Bumps [mini_sql](https://github.com/discourse/mini_sql) from 0.2.3 to 0.2.4. - [Release notes](https://github.com/discourse/mini_sql/releases) - [Changelog](https://github.com/discourse/mini_sql/blob/master/CHANGELOG) - [Commits](https://github.com/discourse/mini_sql/compare/v0.2.3...v0.2.4) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-01-21 23:08:53 +08:00
mini_sql (0.2.4)
Update mini_suffix.
2017-11-30 11:13:52 +08:00
mini_suffix (0.3.0)
UX: Replace heuristic solution for extracting root domain.
2017-11-29 16:24:27 +08:00
ffi (~> 1.9)
Build(deps-dev): Bump minitest from 5.13.0 to 5.14.0 (#8703) Bumps [minitest](https://github.com/seattlerb/minitest) from 5.13.0 to 5.14.0. - [Release notes](https://github.com/seattlerb/minitest/releases) - [Changelog](https://github.com/seattlerb/minitest/blob/master/History.rdoc) - [Commits](https://github.com/seattlerb/minitest/compare/v5.13.0...v5.14.0) Very safe change only impacts our test framework.
2020-01-13 09:01:40 +08:00
minitest (5.14.0)
DEV: low risk gem updates This updates another batch of gems that are lowish risk Most of the gem changes are here for Rails 6 / Ruby 2.6.3 support Excon did some stuff around better cipher ordering
2019-04-29 13:33:01 +08:00
mocha (1.8.0)
Initial release of Discourse
2013-02-06 03:16:51 +08:00
metaclass (~> 0.0.1)
DEV: Bump mock_redis from 0.19.0 to 0.22.0 (#8504) Bumps [mock_redis](https://github.com/sds/mock_redis) from 0.19.0 to 0.22.0. - [Release notes](https://github.com/sds/mock_redis/releases) - [Changelog](https://github.com/sds/mock_redis/blob/master/CHANGELOG.md) - [Commits](https://github.com/sds/mock_redis/compare/v0.19.0...v0.22.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Mock redis update adds better parity for redis mock, we use it during tests.
2019-12-10 08:36:36 +08:00
mock_redis (0.22.0)
DEV: upgrade bootsnap This fixes Ruby 2.7 support which we are starting to test
2019-11-08 14:07:58 +08:00
msgpack (1.3.1)
Build(deps): Bump multi_json from 1.13.1 to 1.14.1 (#8485) Bumps [multi_json](https://github.com/intridea/multi_json) from 1.13.1 to 1.14.1. - [Release notes](https://github.com/intridea/multi_json/releases) - [Changelog](https://github.com/intridea/multi_json/blob/master/CHANGELOG.md) - [Commits](https://github.com/intridea/multi_json/compare/v1.13.1...v1.14.1) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-12-10 03:30:30 +08:00
multi_json (1.14.1)
Update facebook login gem
2017-03-28 04:51:52 +08:00
multi_xml (0.6.0)
Bump omniauth-google-oauth2 gem version Pinning to an old version is no longer required following https://github.com/zquestz/omniauth-google-oauth2/commit/8b4d6dafea1e741a34c92d595ffb2e7b99acd874
2019-06-04 02:17:00 +08:00
multipart-post (2.1.1)
DEV: Bump mustache from 1.1.0 to 1.1.1 (#8478) Minor update, removes one warning which we have not seen yet.
2019-12-09 11:21:55 +08:00
mustache (1.1.1)
DEV: Bump puma from 3.12.2 to 4.3.1 (#8475) The downside here is that we are now going to require nio4r which requires some native code. It is reasonably low risk though cause puma is very well tested. We use puma mostly in test environments, not in production.
2019-12-09 09:51:41 +08:00
nio4r (2.5.2)
DEV: update dependencies This updates some low risk dependencies. Mostly minor changes. Public suffix now requires Ruby 2.3 and up which is not a problem for us.
2019-12-09 16:20:45 +08:00
nokogiri (1.10.7)
DEV: update low risk gems This follows up on 03376224 which reverted the redis update which is not supported, rest of the gems should be fine.(unicorn / nokogiri / sidekiq / pg)
2019-02-05 03:54:10 +08:00
mini_portile2 (~> 2.4.0)
DEV: update dependencies This updates some low risk dependencies. Mostly minor changes. Public suffix now requires Ruby 2.3 and up which is not a problem for us.
2019-12-09 16:20:45 +08:00
nokogumbo (2.0.2)
DEV: gem updates Another group of gems updated, better_errors is fairly safe as its for dev chunky_png fairly safe, used for getting image info from pngs, erubi update is very safe. Sanitize is used by onebox and should always be on latest. Long term we should think of making sanitize an optional dependency on onebox cause we are happy to just provide methods from core to do this and it would remove nokogumbo and sanitize deps.
2019-02-05 09:35:42 +08:00
nokogiri (~> 1.8, >= 1.8.4)
DEV: Rails 5.2 upgrade and global gem upgrade This updates tests to use latest rails 5 practice and updates ALL dependencies that could be updated Performance testing shows that performance has not regressed if anything it is marginally faster now.
2018-06-05 15:29:17 +08:00
oauth (0.5.4)
Build(deps): Bump omniauth-google-oauth2 from 0.7.0 to 0.8.0 (#8488) Bumps [omniauth-google-oauth2](https://github.com/zquestz/omniauth-google-oauth2) from 0.7.0 to 0.8.0. - [Release notes](https://github.com/zquestz/omniauth-google-oauth2/releases) - [Changelog](https://github.com/zquestz/omniauth-google-oauth2/blob/master/CHANGELOG.md) - [Commits](https://github.com/zquestz/omniauth-google-oauth2/compare/v0.7.0...v0.8.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-12-10 04:13:07 +08:00
oauth2 (1.4.2)
faraday (>= 0.8, < 2.0)
Bump omniauth-google-oauth2 version
2019-01-01 03:07:18 +08:00
jwt (>= 1.0, < 3.0)
UPDATE: omniauth gem and some others needed to update omniauth for security issues
2014-02-24 07:11:16 +08:00
multi_json (~> 1.3)
multi_xml (~> 0.5)
Update facebook login gem
2017-03-28 04:51:52 +08:00
rack (>= 1.2, < 3)
Build(deps): Bump oj from 3.10.0 to 3.10.1 (#8722) Bumps [oj](https://github.com/ohler55/oj) from 3.10.0 to 3.10.1. - [Release notes](https://github.com/ohler55/oj/releases) - [Changelog](https://github.com/ohler55/oj/blob/develop/CHANGELOG.md) - [Commits](https://github.com/ohler55/oj/compare/v3.10.0...v3.10.1) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-01-21 04:44:35 +08:00
oj (3.10.1)
Bump omniauth-google-oauth2 version
2019-01-01 03:07:18 +08:00
omniauth (1.9.0)
hashie (>= 3.4.6, < 3.7.0)
Update facebook login gem
2017-03-28 04:51:52 +08:00
rack (>= 1.6.2, < 3)
DEV: Bump omniauth-facebook from 5.0.0 to 6.0.0 5.0.0 uses Facebook graph API v2.11, which is deprecated from 28th Jan 2020 6.0.0 uses Facebook graph API v3.0, which is supported until July 2020
2020-01-28 18:57:39 +08:00
omniauth-facebook (6.0.0)
Gem updates, all up to latest.
2014-09-25 08:40:35 +08:00
omniauth-oauth2 (~> 1.2)
let's use the latest omniauth-github gem
2017-08-07 16:43:54 +08:00
omniauth-github (1.3.0)
omniauth (~> 1.5)
omniauth-oauth2 (>= 1.4.0, < 2.0)
Build(deps): Bump omniauth-google-oauth2 from 0.7.0 to 0.8.0 (#8488) Bumps [omniauth-google-oauth2](https://github.com/zquestz/omniauth-google-oauth2) from 0.7.0 to 0.8.0. - [Release notes](https://github.com/zquestz/omniauth-google-oauth2/releases) - [Changelog](https://github.com/zquestz/omniauth-google-oauth2/blob/master/CHANGELOG.md) - [Commits](https://github.com/zquestz/omniauth-google-oauth2/compare/v0.7.0...v0.8.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-12-10 04:13:07 +08:00
omniauth-google-oauth2 (0.8.0)
Bump omniauth-google-oauth2 version
2019-01-01 03:07:18 +08:00
jwt (>= 2.0)
Upgrade omniauth-google-oauth2.
2016-01-29 23:14:51 +08:00
omniauth (>= 1.1.1)
Build(deps): Bump omniauth-google-oauth2 from 0.7.0 to 0.8.0 (#8488) Bumps [omniauth-google-oauth2](https://github.com/zquestz/omniauth-google-oauth2) from 0.7.0 to 0.8.0. - [Release notes](https://github.com/zquestz/omniauth-google-oauth2/releases) - [Changelog](https://github.com/zquestz/omniauth-google-oauth2/blob/master/CHANGELOG.md) - [Commits](https://github.com/zquestz/omniauth-google-oauth2/compare/v0.7.0...v0.8.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-12-10 04:13:07 +08:00
omniauth-oauth2 (>= 1.6)
DEV: Rails 5.2 upgrade and global gem upgrade This updates tests to use latest rails 5 practice and updates ALL dependencies that could be updated Performance testing shows that performance has not regressed if anything it is marginally faster now.
2018-06-05 15:29:17 +08:00
omniauth-instagram (1.3.0)
missing gem
2016-03-07 11:30:13 +08:00
omniauth (~> 1)
omniauth-oauth2 (~> 1)
update auth gems
2015-09-23 15:18:43 +08:00
omniauth-oauth (1.1.0)
move all logic to omniauth implement omniauth-facebook / omniauth-twitter
2013-02-12 21:47:22 +08:00
oauth
omniauth (~> 1.0)
Bump omniauth-google-oauth2 version
2019-01-01 03:07:18 +08:00
omniauth-oauth2 (1.6.0)
DEV: Rails 5.2 upgrade and global gem upgrade This updates tests to use latest rails 5 practice and updates ALL dependencies that could be updated Performance testing shows that performance has not regressed if anything it is marginally faster now.
2018-06-05 15:29:17 +08:00
oauth2 (~> 1.1)
Bump omniauth-google-oauth2 version
2019-01-01 03:07:18 +08:00
omniauth (~> 1.9)
use omniauth-openid to replace google id
2013-02-12 14:51:44 +08:00
omniauth-openid (1.0.1)
omniauth (~> 1.0)
rack-openid (~> 1.3.1)
DEV: Rails 5.2 upgrade and global gem upgrade This updates tests to use latest rails 5 practice and updates ALL dependencies that could be updated Performance testing shows that performance has not regressed if anything it is marginally faster now.
2018-06-05 15:29:17 +08:00
omniauth-twitter (1.4.0)
update auth gems
2015-09-23 15:18:43 +08:00
omniauth-oauth (~> 1.1)
FEATURE: Update omniauth twitter as prep for Ruby 2.4 support
2017-01-15 09:10:09 +08:00
rack
Build(deps): Bump onebox from 1.9.24 to 1.9.25 (#8707) Bumps [onebox](https://github.com/discourse/onebox) from 1.9.24 to 1.9.25. - [Release notes](https://github.com/discourse/onebox/releases) - [Changelog](https://github.com/discourse/onebox/blob/master/CHANGELOG.md) - [Commits](https://github.com/discourse/onebox/commits) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-01-13 22:27:16 +08:00
onebox (1.9.25)
addressable (~> 2.7.0)
FIX: Onebox's dependencies were not updated.
2017-04-15 11:39:51 +08:00
htmlentities (~> 4.3)
update onebox
2015-07-22 06:33:09 +08:00
multi_json (~> 1.11)
mustache
FIX: Onebox's dependencies were not updated.
2017-04-15 11:39:51 +08:00
nokogiri (~> 1.7)
bump onebox
2017-01-19 07:28:37 +08:00
sanitize
using redis as backend store
2013-02-13 16:48:44 +08:00
openid-redis-store (0.0.2)
redis
ruby-openid
DEV: update dependencies This updates some more low risk gems, maxmind, hiredis (c wrapper for redis), puma, rbtrace and stackprof.
2019-02-05 08:23:21 +08:00
optimist (3.0.0)
DEV: Bump parallel_tests from 2.28.0 to 2.29.2 (#8484) Bumps [parallel_tests](https://github.com/grosser/parallel_tests) from 2.28.0 to 2.29.2. - [Release notes](https://github.com/grosser/parallel_tests/releases) - [Commits](https://github.com/grosser/parallel_tests/compare/v2.28.0...v2.29.2) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-12-09 18:46:01 +08:00
parallel (1.19.1)
Build(deps-dev): Bump parallel_tests from 2.30.0 to 2.30.1 (#8717) Bumps [parallel_tests](https://github.com/grosser/parallel_tests) from 2.30.0 to 2.30.1. - [Release notes](https://github.com/grosser/parallel_tests/releases) - [Commits](https://github.com/grosser/parallel_tests/compare/v2.30.0...v2.30.1) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-01-23 23:19:14 +08:00
parallel_tests (2.30.1)
DEV: Introduce parallel rspec testing Adds the parallel_tests gem, and redis/postgres configuration for running rspec tests in parallel. To use: ``` rake parallel:rake[db:create] rake parallel:rake[db:migrate] rake parallel:spec ``` This brings the test suite from 12m20s to 3m11s on my macOS machine
2019-04-01 16:27:49 +08:00
parallel
Build(deps): Bump parser from 2.7.0.1 to 2.7.0.2 (#8686) Bumps [parser](https://github.com/whitequark/parser) from 2.7.0.1 to 2.7.0.2. - [Release notes](https://github.com/whitequark/parser/releases) - [Changelog](https://github.com/whitequark/parser/blob/master/CHANGELOG.md) - [Commits](https://github.com/whitequark/parser/compare/v2.7.0.1...v2.7.0.2) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-01-10 23:03:11 +08:00
parser (2.7.0.2)
try updating rubocop so it does not crash
2018-03-13 14:58:23 +08:00
ast (~> 2.4.0)
DEV: Bump pg from 1.2.1 to 1.2.2 (#8685) Bumps [pg](https://github.com/ged/ruby-pg) from 1.2.1 to 1.2.2. - [Release notes](https://github.com/ged/ruby-pg/releases) - [Changelog](https://github.com/ged/ruby-pg/blob/master/History.rdoc) - [Commits](https://github.com/ged/ruby-pg/compare/v1.2.1...v1.2.2) Very safe upgrade, Discourse is not impacted by any of the changes.
2020-01-13 09:02:44 +08:00
pg (1.2.2)
Bump progress from 3.5.0 to 3.5.2 (#8560) Bumps [progress](https://github.com/toy/progress) from 3.5.0 to 3.5.2. - [Release notes](https://github.com/toy/progress/releases) - [Changelog](https://github.com/toy/progress/blob/master/CHANGELOG.markdown) - [Commits](https://github.com/toy/progress/compare/v3.5.0...v3.5.2) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-12-17 02:45:33 +08:00
progress (3.5.2)
DEV: low risk gem updates This updates another batch of gems that are lowish risk Most of the gem changes are here for Rails 6 / Ruby 2.6.3 support Excon did some stuff around better cipher ordering
2019-04-29 13:33:01 +08:00
pry (0.12.2)
Gem updates, all up to latest.
2014-09-25 08:40:35 +08:00
coderay (~> 1.1.0)
DEV: low risk gem updates This updates another batch of gems that are lowish risk Most of the gem changes are here for Rails 6 / Ruby 2.6.3 support Excon did some stuff around better cipher ordering
2019-04-29 13:33:01 +08:00
method_source (~> 0.9.0)
pry-nav (0.3.0)
pry (>= 0.9.10, < 0.13.0)
pry-rails (0.3.9)
DEV: Rails 5.2 upgrade and global gem upgrade This updates tests to use latest rails 5 practice and updates ALL dependencies that could be updated Performance testing shows that performance has not regressed if anything it is marginally faster now.
2018-06-05 15:29:17 +08:00
pry (>= 0.10.4)
Build(deps): Bump public_suffix from 4.0.2 to 4.0.3 (#8663) Bumps [public_suffix](https://github.com/weppos/publicsuffix-ruby) from 4.0.2 to 4.0.3. - [Release notes](https://github.com/weppos/publicsuffix-ruby/releases) - [Changelog](https://github.com/weppos/publicsuffix-ruby/blob/master/CHANGELOG.md) - [Commits](https://github.com/weppos/publicsuffix-ruby/compare/4.0.2...4.0.3) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-01-10 23:04:54 +08:00
public_suffix (4.0.3)
DEV: Bump puma from 3.12.2 to 4.3.1 (#8475) The downside here is that we are now going to require nio4r which requires some native code. It is reasonably low risk though cause puma is very well tested. We use puma mostly in test environments, not in production.
2019-12-09 09:51:41 +08:00
puma (4.3.1)
nio4r (~> 2.0)
DEV: Rails 5.2 upgrade and global gem upgrade This updates tests to use latest rails 5 practice and updates ALL dependencies that could be updated Performance testing shows that performance has not regressed if anything it is marginally faster now.
2018-06-05 15:29:17 +08:00
r2 (0.2.7)
DEV: revert upgrade of rack to version 2.0.8 We can not upgrade rack cause it breaks Sidekiq web. I can not find a trivial fix short of disabling sessions in Sidekiq which is a security concern. We need to figure out how to reuse sessions with our Rails application in Sidekiq. This gets extra complex cause we use a special cookie store for sessions. https://github.com/discourse/discourse/blob/9e399b42b96f115a8367c368862d62aeecfac680/lib/discourse_cookie_store.rb#L3-L21
2020-01-13 15:07:16 +08:00
rack (2.0.8)
Build(deps): Bump rack-mini-profiler from 1.1.4 to 1.1.5 (#8800) Bumps [rack-mini-profiler](https://github.com/MiniProfiler/rack-mini-profiler) from 1.1.4 to 1.1.5. - [Release notes](https://github.com/MiniProfiler/rack-mini-profiler/releases) - [Changelog](https://github.com/MiniProfiler/rack-mini-profiler/blob/master/CHANGELOG.md) - [Commits](https://github.com/MiniProfiler/rack-mini-profiler/compare/v1.1.4...v1.1.5) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-01-29 00:21:57 +08:00
rack-mini-profiler (1.1.5)
FEATURE: upgrade rack-mini-profiler new version is collapsed so screen does not fill with timings. expands on click
2016-03-06 19:22:45 +08:00
rack (>= 1.2.0)
use omniauth-openid to replace google id
2013-02-12 14:51:44 +08:00
rack-openid (1.3.1)
rack (>= 1.1.0)
ruby-openid (>= 2.1.8)
DEV: Bump rack-protection from 2.0.7 to 2.0.8.1 (#8648) Bumps [rack-protection](https://github.com/sinatra/sinatra) from 2.0.7 to 2.0.8.1. - [Release notes](https://github.com/sinatra/sinatra/releases) - [Changelog](https://github.com/sinatra/sinatra/blob/master/CHANGELOG.md) - [Commits](https://github.com/sinatra/sinatra/compare/v2.0.7...v2.0.8.1) Minor performance update and Ruby 2.7 deprecation removal.
2020-01-06 14:11:37 +08:00
rack-protection (2.0.8.1)
Initial release of Discourse
2013-02-06 03:16:51 +08:00
rack
DEV: upgrade Rails to version 5.2.2
2018-12-10 08:29:18 +08:00
rack-test (1.1.0)
Upgrade Rails to 5.1.4.
2017-10-03 14:56:44 +08:00
rack (>= 1.0, < 3)
Upgrade to Rails 5.
2017-08-23 10:58:25 +08:00
rails-dom-testing (2.0.3)
activesupport (>= 4.2.0)
nokogiri (>= 1.6)
DEV: update Rails to version 6.0.1 This version of Rails eliminates a monkey patch that is no longer needed! Additionally it preps us for Ruby 2.7 support.
2019-11-08 13:56:30 +08:00
rails-html-sanitizer (1.3.0)
loofah (~> 2.3)
DEV: update rails multisite This gives us Rails 6 support, should not impact existing behavior
2019-04-29 14:23:13 +08:00
rails_multisite (2.0.7)
activerecord (> 4.2, < 7)
railties (> 4.2, < 7)
DEV: update Rails to version 6.0.1 This version of Rails eliminates a monkey patch that is no longer needed! Additionally it preps us for Ruby 2.7 support.
2019-11-08 13:56:30 +08:00
railties (6.0.1)
actionpack (= 6.0.1)
activesupport (= 6.0.1)
Upgrade to Rails 5.
2017-08-23 10:58:25 +08:00
method_source
Initial release of Discourse
2013-02-06 03:16:51 +08:00
rake (>= 0.8.7)
DEV: Upgrade Discourse to Rails 6 (#8083) * Adjustments to pass specs on Rails 6.0.0 * Use classic autoloader instead of Zeitwerk * Update Rails 6.0.0 deprecated methods * Rails 6.0.0 not allowing column with integer name * Drop freedom_patches/rails6.rb * Default value for trigger_transactional_callbacks? is true * Bump rspec-rails version to 4.0.0.beta2
2019-09-12 08:41:50 +08:00
thor (>= 0.20.3, < 2.0)
try updating rubocop so it does not crash
2018-03-13 14:58:23 +08:00
rainbow (3.0.0)
Build(deps): Bump raindrops from 0.19.0 to 0.19.1 (#8680) Bumps [raindrops](https://yhbt.net/raindrops/) from 0.19.0 to 0.19.1. Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-01-23 22:47:01 +08:00
raindrops (0.19.1)
DEV: upgrade low risk gems This updates a bunch of gems that have very low risk of breaking anything or are mostly used in dev. Overall our goal is to be on latest gems with latest bug fixes so this is us working in that direction.
2019-12-06 14:11:10 +08:00
rake (13.0.1)
DEV: Bump rake-compiler from 1.0.8 to 1.1.0 (#8636) Bumps [rake-compiler](https://github.com/luislavena/rake-compiler) from 1.0.8 to 1.1.0. - [Release notes](https://github.com/luislavena/rake-compiler/releases) - [Changelog](https://github.com/rake-compiler/rake-compiler/blob/master/History.txt) - [Commits](https://github.com/luislavena/rake-compiler/compare/v1.0.8...v1.1.0) Ruby 2.7 support.
2020-01-06 14:12:28 +08:00
rake-compiler (1.1.0)
add fast xor, we need really fast xor to keep our password function honest.
2013-03-08 21:54:40 +08:00
rake
DEV: Rails 5.2 upgrade and global gem upgrade This updates tests to use latest rails 5 practice and updates ALL dependencies that could be updated Performance testing shows that performance has not regressed if anything it is marginally faster now.
2018-06-05 15:29:17 +08:00
rb-fsevent (0.10.3)
DEV: update dependencies Quite a few have popped up due to 2.7 release, all gems being updated have non urgent fixes, but it makes sense to be on latest.
2019-12-31 09:20:10 +08:00
rb-inotify (0.10.1)
DEV: Update sassc gem
2019-03-21 00:04:26 +08:00
ffi (~> 1.0)
DEV: update dependencies This updates some more low risk gems, maxmind, hiredis (c wrapper for redis), puma, rbtrace and stackprof.
2019-02-05 08:23:21 +08:00
rbtrace (0.4.11)
rails 3 gem update (note will be removed at some point)
2013-12-06 14:06:52 +08:00
ffi (>= 1.0.6)
msgpack (>= 0.4.3)
DEV: update dependencies This updates some more low risk gems, maxmind, hiredis (c wrapper for redis), puma, rbtrace and stackprof.
2019-02-05 08:23:21 +08:00
optimist (>= 3.0.0)
Use rchardet instead of charlock_holmes gem
2018-07-31 18:02:18 +08:00
rchardet (1.8.0)
FIX: update Redis gem to version 4.1.3 I run our benchmark on commit with hiredis and redis-4.1.3 Results: type | hidredis | redis 4.1.3 | percent --- | --- | --- | --- Categories-50 | 49 | 50 | 102.04% Categories-75 | 51 | 51 | 100.00% Categories-90 | 63 | 64 | 101.59% Categories-99 | 86 | 85 | 98.84% Home-50 | 55 | 55 | 100.00% Home-75 | 56 | 57 | 101.79% Home-90 | 68 | 69 | 101.47% Home-99 | 102 | 104 | 101.96% Topic-50 | 36 | 37 | 102.78% Topic-75 | 37 | 37 | 100.00% Topic-90 | 47 | 48 | 102.13% Topic-99 | 60 | 61 | 101.67% Categories-admin-50 | 124 | 117 | 94.35% Categories-admin-75 | 130 | 129 | 99.23% Categories-admin-90 | 147 | 143 | 97.28% Categories-admin-99 | 204 | 199 | 97.55% Home-admin-50 | 146 | 148 | 101.37% Home-admin-75 | 150 | 152 | 101.33% Home-admin-90 | 169 | 168 | 99.41% Home-admin-99 | 232 | 223 | 96.12% Topic-admin-50 | 60 | 61 | 101.67% Topic-admin-75 | 64 | 63 | 98.44% Topic-admin-90 | 76 | 73 | 96.05% Topic-admin-99 | 124 | 94 | 75.81% Load rails | 2412 | 2360 | 97.84% rss | 290204 | 295828 | 101.94% pss | 277948 | 283624 | 102.04% Redis gem is manipulating Redis config https://github.com/redis/redis-rb/blob/master/lib/redis/client.rb#L95 therefore we cannot pass the frozen config object. Pass of the copy of the object is protecting original config
2019-10-21 06:59:24 +08:00
redis (4.1.3)
DEV: upgrade redis-namespace gem New release has a few extra commands namespaced, nothing we use. Also added a comment about why this is explicitly required.
2019-12-12 10:35:43 +08:00
redis-namespace (1.7.0)
Update Redis gems.
2018-04-20 12:49:36 +08:00
redis (>= 3.0.4)
Build(deps): Bump request_store from 1.4.1 to 1.5.0 (#8608) Bumps [request_store](https://github.com/steveklabnik/request_store) from 1.4.1 to 1.5.0. - [Release notes](https://github.com/steveklabnik/request_store/releases) - [Commits](https://github.com/steveklabnik/request_store/compare/v1.4.1...v1.5.0) request_store is a side dependency that is only used for lograge support, not expecting this to break anything.
2019-12-30 14:07:37 +08:00
request_store (1.5.0)
DEV: Rails 5.2 upgrade and global gem upgrade This updates tests to use latest rails 5 practice and updates ALL dependencies that could be updated Performance testing shows that performance has not regressed if anything it is marginally faster now.
2018-06-05 15:29:17 +08:00
rack (>= 1.4)
DEV: update minor dependencies These gems have very minor changes, and are low risk updates
2019-04-29 13:00:58 +08:00
rinku (2.0.6)
Build(deps): Bump rotp from 3.3.1 to 5.1.0 (#8477) * Build(deps): Bump rotp from 3.3.1 to 5.1.0 Bumps [rotp](https://github.com/mdp/rotp) from 3.3.1 to 5.1.0. - [Release notes](https://github.com/mdp/rotp/releases) - [Changelog](https://github.com/mdp/rotp/blob/master/CHANGELOG.md) - [Commits](https://github.com/mdp/rotp/compare/v3.3.1...v5.1.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> * Fix breaking ROTP changes
2019-12-09 12:29:48 +08:00
rotp (5.1.0)
addressable (~> 2.5)
Build(deps): Bump rqrcode from 0.10.1 to 1.1.2 (#8497) Bumps [rqrcode](https://github.com/whomwah/rqrcode) from 0.10.1 to 1.1.2. - [Release notes](https://github.com/whomwah/rqrcode/releases) - [Commits](https://github.com/whomwah/rqrcode/commits) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-12-10 22:49:20 +08:00
rqrcode (1.1.2)
FEATURE: Implement 2factor login TOTP implemented review items. Blocking previous codes - valid 2-factor auth tokens can only be authenticated once/30 seconds. I played with updating the “last used” any time the token was attempted but that seemed to be overkill, and frustrating as to why a token would fail. Translatable texts. Move second factor logic to a helper class. Move second factor specific controller endpoints to its own controller. Move serialization logic for 2-factor details in admin user views. Add a login ember component for de-duplication Fix up code formatting Change verbiage of google authenticator add controller tests: second factor controller tests change email tests change password tests admin login tests add qunit tests - password reset, preferences fix: check for 2factor on change email controller fix: email controller - only show second factor errors on attempt fix: check against 'true' to enable second factor. Add modal for explaining what 2fa with links to Google Authenticator/FreeOTP add two factor to email signin link rate limit if second factor token present add rate limiter test for second factor attempts
2017-12-22 09:18:12 +08:00
chunky_png (~> 1.0)
Build(deps): Bump rqrcode from 0.10.1 to 1.1.2 (#8497) Bumps [rqrcode](https://github.com/whomwah/rqrcode) from 0.10.1 to 1.1.2. - [Release notes](https://github.com/whomwah/rqrcode/releases) - [Commits](https://github.com/whomwah/rqrcode/commits) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-12-10 22:49:20 +08:00
rqrcode_core (~> 0.1)
rqrcode_core (0.1.1)
Build(deps-dev): Bump rspec from 3.8.0 to 3.9.0 (#8487) Bumps [rspec](https://github.com/rspec/rspec) from 3.8.0 to 3.9.0. - [Release notes](https://github.com/rspec/rspec/releases) - [Commits](https://github.com/rspec/rspec/compare/v3.8.0...v3.9.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-12-10 03:34:30 +08:00
rspec (3.9.0)
rspec-core (~> 3.9.0)
rspec-expectations (~> 3.9.0)
rspec-mocks (~> 3.9.0)
DEV: Bump rspec-core from 3.9.0 to 3.9.1 (#8637) Bumps [rspec-core](https://github.com/rspec/rspec-core) from 3.9.0 to 3.9.1. - [Release notes](https://github.com/rspec/rspec-core/releases) - [Changelog](https://github.com/rspec/rspec-core/blob/master/Changelog.md) - [Commits](https://github.com/rspec/rspec-core/compare/v3.9.0...v3.9.1) Test only dependency, low risk.
2019-12-31 08:49:21 +08:00
rspec-core (3.9.1)
rspec-support (~> 3.9.1)
Build(deps-dev): Bump rspec from 3.8.0 to 3.9.0 (#8487) Bumps [rspec](https://github.com/rspec/rspec) from 3.8.0 to 3.9.0. - [Release notes](https://github.com/rspec/rspec/releases) - [Commits](https://github.com/rspec/rspec/compare/v3.8.0...v3.9.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-12-10 03:34:30 +08:00
rspec-expectations (3.9.0)
Update rspec to rspec 3.2.0
2015-04-26 06:29:43 +08:00
diff-lcs (>= 1.2.0, < 2.0)
Build(deps-dev): Bump rspec from 3.8.0 to 3.9.0 (#8487) Bumps [rspec](https://github.com/rspec/rspec) from 3.8.0 to 3.9.0. - [Release notes](https://github.com/rspec/rspec/releases) - [Commits](https://github.com/rspec/rspec/compare/v3.8.0...v3.9.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-12-10 03:34:30 +08:00
rspec-support (~> 3.9.0)
DEV: Bump rspec-html-matchers from 0.9.1 to 0.9.2 (#8525) Bumps [rspec-html-matchers](https://github.com/kucaahbe/rspec-html-matchers) from 0.9.1 to 0.9.2. - [Release notes](https://github.com/kucaahbe/rspec-html-matchers/releases) - [Changelog](https://github.com/kucaahbe/rspec-html-matchers/blob/master/CHANGELOG.md) - [Commits](https://github.com/kucaahbe/rspec-html-matchers/compare/v0.9.1...v0.9.2) Low risk update, only impacts tests.
2019-12-11 07:55:25 +08:00
rspec-html-matchers (0.9.2)
FIX: allow emoji class when crawling embedded content, add rspc-html-matchers
2015-09-25 06:20:59 +08:00
nokogiri (~> 1)
Update gems in development group.
2017-06-07 10:12:44 +08:00
rspec (>= 3.0.0.a, < 4)
Build(deps): Bump rspec-mocks from 3.9.0 to 3.9.1 (#8644) Bumps [rspec-mocks](https://github.com/rspec/rspec-mocks) from 3.9.0 to 3.9.1. - [Release notes](https://github.com/rspec/rspec-mocks/releases) - [Changelog](https://github.com/rspec/rspec-mocks/blob/master/Changelog.md) - [Commits](https://github.com/rspec/rspec-mocks/compare/v3.9.0...v3.9.1) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-01-07 08:12:04 +08:00
rspec-mocks (3.9.1)
Update rspec to rspec 3.2.0
2015-04-26 06:29:43 +08:00
diff-lcs (>= 1.2.0, < 2.0)
Build(deps-dev): Bump rspec from 3.8.0 to 3.9.0 (#8487) Bumps [rspec](https://github.com/rspec/rspec) from 3.8.0 to 3.9.0. - [Release notes](https://github.com/rspec/rspec/releases) - [Commits](https://github.com/rspec/rspec/compare/v3.8.0...v3.9.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-12-10 03:34:30 +08:00
rspec-support (~> 3.9.0)
DEV: Upgrade Discourse to Rails 6 (#8083) * Adjustments to pass specs on Rails 6.0.0 * Use classic autoloader instead of Zeitwerk * Update Rails 6.0.0 deprecated methods * Rails 6.0.0 not allowing column with integer name * Drop freedom_patches/rails6.rb * Default value for trigger_transactional_callbacks? is true * Bump rspec-rails version to 4.0.0.beta2
2019-09-12 08:41:50 +08:00
rspec-rails (4.0.0.beta2)
actionpack (>= 4.2)
activesupport (>= 4.2)
railties (>= 4.2)
rspec-core (~> 3.8)
rspec-expectations (~> 3.8)
rspec-mocks (~> 3.8)
rspec-support (~> 3.8)
DEV: Bump rspec-support from 3.9.0 to 3.9.2 (#8628) Bumps [rspec-support](https://github.com/rspec/rspec-support) from 3.9.0 to 3.9.2. - [Release notes](https://github.com/rspec/rspec-support/releases) - [Changelog](https://github.com/rspec/rspec-support/blob/master/Changelog.md) - [Commits](https://github.com/rspec/rspec-support/compare/v3.9.0...v3.9.2) Minor test only update, also cleans up Ruby 2.7 support
2019-12-31 08:45:43 +08:00
rspec-support (3.9.2)
Add RTL support to Discourse CSS pre-processing using the RTLit gem and configurable via discourse.conf
2014-08-08 14:31:31 +08:00
rtlit (0.0.5)
DEV: Bump rubocop from 0.78.0 to 0.79.0 (#8667) Bumps [rubocop](https://github.com/rubocop-hq/rubocop) from 0.78.0 to 0.79.0. - [Release notes](https://github.com/rubocop-hq/rubocop/releases) - [Changelog](https://github.com/rubocop-hq/rubocop/blob/master/CHANGELOG.md) - [Commits](https://github.com/rubocop-hq/rubocop/compare/v0.78.0...v0.79.0) Changes seem pretty safe, nothing should impact Discourse. Merging so we are on latest version.
2020-01-08 14:09:24 +08:00
rubocop (0.79.0)
DEV: Rails 5.2 upgrade and global gem upgrade This updates tests to use latest rails 5 practice and updates ALL dependencies that could be updated Performance testing shows that performance has not regressed if anything it is marginally faster now.
2018-06-05 15:29:17 +08:00
jaro_winkler (~> 1.5.1)
Install rubocop in development mode.
2017-08-01 09:51:44 +08:00
parallel (~> 1.10)
DEV: Bump rubocop from 0.78.0 to 0.79.0 (#8667) Bumps [rubocop](https://github.com/rubocop-hq/rubocop) from 0.78.0 to 0.79.0. - [Release notes](https://github.com/rubocop-hq/rubocop/releases) - [Changelog](https://github.com/rubocop-hq/rubocop/blob/master/CHANGELOG.md) - [Commits](https://github.com/rubocop-hq/rubocop/compare/v0.78.0...v0.79.0) Changes seem pretty safe, nothing should impact Discourse. Merging so we are on latest version.
2020-01-08 14:09:24 +08:00
parser (>= 2.7.0.1)
try updating rubocop so it does not crash
2018-03-13 14:58:23 +08:00
rainbow (>= 2.2.2, < 4.0)
Install rubocop in development mode.
2017-08-01 09:51:44 +08:00
ruby-progressbar (~> 1.7)
DEV: update rubocop - take 2
2019-05-17 20:13:25 +08:00
unicode-display_width (>= 1.4.0, < 1.7)
bump rubocop-discourse to 1.0.2 for NoURIEscapeEncode cop
2019-12-12 12:30:27 +08:00
rubocop-discourse (1.0.2)
DEV: Use rubocop-discourse gem to add custom chdir cop Followup to b27e009655a866973f04e16f6694b8ab853124d3
2019-11-18 23:39:41 +08:00
rubocop (>= 0.69.0)
Build(deps): Bump ruby-openid from 2.7.0 to 2.9.2 (#8476) Bumps [ruby-openid](https://github.com/openid/ruby-openid) from 2.7.0 to 2.9.2. - [Release notes](https://github.com/openid/ruby-openid/releases) - [Changelog](https://github.com/openid/ruby-openid/blob/master/CHANGELOG.md) - [Commits](https://github.com/openid/ruby-openid/compare/v2.7.0...v2.9.2) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-12-09 18:40:50 +08:00
ruby-openid (2.9.2)
Build(deps-dev): Bump ruby-prof from 1.1.0 to 1.2.0 (#8778) Bumps [ruby-prof](https://github.com/ruby-prof/ruby-prof) from 1.1.0 to 1.2.0. - [Release notes](https://github.com/ruby-prof/ruby-prof/releases) - [Changelog](https://github.com/ruby-prof/ruby-prof/blob/master/CHANGES) - [Commits](https://github.com/ruby-prof/ruby-prof/compare/1.1.0...1.2.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-01-25 01:55:08 +08:00
ruby-prof (1.2.0)
DEV: update rubocop to version 0.77 We like to stay as close as possible to latest with rubocop cause the cops get better. This update required some code changes, specifically the default is to avoid explicit returns where implicit is done Also this renames a few rules
2019-12-10 08:48:27 +08:00
ruby-progressbar (1.10.1)
Gem updates, all up to latest.
2014-09-25 08:40:35 +08:00
ruby-readability (0.7.0)
Drop Rails3 support
2014-02-18 00:44:28 +08:00
guess_html_encoding (>= 0.0.4)
Gem updates, all up to latest.
2014-09-25 08:40:35 +08:00
nokogiri (>= 1.6.0)
Build(deps): Bump rubyzip from 2.0.0 to 2.1.0 (#8785) Bumps [rubyzip](https://github.com/rubyzip/rubyzip) from 2.0.0 to 2.1.0. - [Release notes](https://github.com/rubyzip/rubyzip/releases) - [Changelog](https://github.com/rubyzip/rubyzip/blob/master/Changelog.md) - [Commits](https://github.com/rubyzip/rubyzip/compare/v2.0.0...v2.1.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-01-28 04:55:55 +08:00
rubyzip (2.1.0)
DEV: update minor dependencies These gems have very minor changes, and are low risk updates
2019-04-29 13:00:58 +08:00
safe_yaml (1.0.5)
FEATURE: Improve GitHub commit, PR and issue onebox rendering Bump onebox version to include new github rendering, and add relevant CSS Avatars are reduced in size significantly, and icons are added to easily differentiate PRs and commits. The 'Issue:' prefix is removed from issue oneboxes, to make them consistent with commits and PRs.
2019-10-08 02:26:10 +08:00
sanitize (5.1.0)
more gem updates
2015-09-23 15:10:15 +08:00
crass (~> 1.0.2)
DEV: gem updates Another group of gems updated, better_errors is fairly safe as its for dev chunky_png fairly safe, used for getting image info from pngs, erubi update is very safe. Sanitize is used by onebox and should always be on latest. Long term we should think of making sanitize an optional dependency on onebox cause we are happy to just provide methods from core to do this and it would remove nokogumbo and sanitize deps.
2019-02-05 09:35:42 +08:00
nokogiri (>= 1.8.0)
nokogumbo (~> 2.0)
DEV: Revert 3 dependabot suggestions (#8506)
2019-12-10 06:40:54 +08:00
sassc (2.0.1)
DEV: Update sassc gem
2019-03-21 00:04:26 +08:00
ffi (~> 1.9)
DEV: Revert 3 dependabot suggestions (#8506)
2019-12-10 06:40:54 +08:00
rake
DEV: Bump sassc-rails from 2.1.1 to 2.1.2 (#8501) Bumps [sassc-rails](https://github.com/sass/sassc-rails) from 2.1.1 to 2.1.2. - [Release notes](https://github.com/sass/sassc-rails/releases) - [Commits](https://github.com/sass/sassc-rails/compare/v2.1.1...v2.1.2) Minor fixes in the gem
2019-12-10 08:50:34 +08:00
sassc-rails (2.1.2)
FIX: Add `sassc-rails` for plugins using sprockets to compile scss This did not affect core because we have a custom stylesheet pipeline
2019-03-22 07:23:29 +08:00
railties (>= 4.0.0)
sassc (>= 2.0)
sprockets (> 3.0)
sprockets-rails
tilt
DEV: Rails 5.2 upgrade and global gem upgrade This updates tests to use latest rails 5 practice and updates ALL dependencies that could be updated Performance testing shows that performance has not regressed if anything it is marginally faster now.
2018-06-05 15:29:17 +08:00
seed-fu (2.3.9)
More gem updates.
2017-06-08 05:39:54 +08:00
activerecord (>= 3.1)
activesupport (>= 3.1)
DEV: Bump shoulda-matchers from 4.1.2 to 4.2.0 (#8689) Bumps [shoulda-matchers](https://github.com/thoughtbot/shoulda-matchers) from 4.1.2 to 4.2.0. - [Release notes](https://github.com/thoughtbot/shoulda-matchers/releases) - [Changelog](https://github.com/thoughtbot/shoulda-matchers/blob/master/NEWS.md) - [Commits](https://github.com/thoughtbot/shoulda-matchers/compare/v4.1.2...v4.2.0) Mostly about updating gem dependencies, only used in dev, very safe upgrade.
2020-01-13 09:04:31 +08:00
shoulda-matchers (4.2.0)
DEV: update dependencies and add notes about exceptions Previously it was unclear why certain gems are being held back cause Gemfile had no comment explaining it. I tried to add some explanation from memory and remove some exceptions that seemed to be superfluous. This upgrades shoulda to latest, it appears to work once a couple of assertions are removed Also update http accept language used to auto detect language from http header this is tested Zeitwerk small update seems fine
2019-12-06 10:00:16 +08:00
activesupport (>= 4.2.0)
DEV: Bump sidekiq from 6.0.3 to 6.0.4 (#8611) Bumps [sidekiq](https://github.com/mperham/sidekiq) from 6.0.3 to 6.0.4. - [Release notes](https://github.com/mperham/sidekiq/releases) - [Changelog](https://github.com/mperham/sidekiq/blob/master/Changes.md) - [Commits](https://github.com/mperham/sidekiq/compare/v6.0.3...v6.0.4) Minor update which seems very safe.
2019-12-30 13:36:23 +08:00
sidekiq (6.0.4)
DEV: Bump sidekiq from 5.2.7 to 6.0.3 (#8499) Bumps [sidekiq](https://github.com/mperham/sidekiq) from 5.2.7 to 6.0.3. - [Release notes](https://github.com/mperham/sidekiq/releases) - [Changelog](https://github.com/mperham/sidekiq/blob/master/Changes.md) - [Commits](https://github.com/mperham/sidekiq/compare/v5.2.7...v6.0.3) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> The big thing for us with this update is that it makes sidekiq a bit faster.
2019-12-10 09:05:02 +08:00
connection_pool (>= 2.2.2)
rack (>= 2.0.0)
rack-protection (>= 2.0.0)
redis (>= 4.1.0)
Build(deps-dev): Bump simplecov from 0.16.1 to 0.17.1 (#8486) Bumps [simplecov](https://github.com/colszowka/simplecov) from 0.16.1 to 0.17.1. - [Release notes](https://github.com/colszowka/simplecov/releases) - [Changelog](https://github.com/colszowka/simplecov/blob/master/CHANGELOG.md) - [Commits](https://github.com/colszowka/simplecov/compare/v0.16.1...v0.17.1) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-12-10 03:32:25 +08:00
simplecov (0.17.1)
DEV: Add simplecov as test dependency (#7271)
2019-04-01 13:00:11 +08:00
docile (~> 1.1)
json (>= 1.8, < 3)
simplecov-html (~> 0.10.0)
simplecov-html (0.10.2)
DEV: add a note about sprockets being held back We want to upgrade to version 4, but it does not work atm.
2019-12-10 09:31:16 +08:00
sprockets (3.7.2)
Update sprockets. (#4167) * Update sass-rails. * FIX: Tilt dependency has been removed from Ember::Handlebars::Template. * Update `DiscourseIIFE` to new Sprockets API. * `Rails.application.assets` returns `nil` in production. * Move sprockets-rails out of the assets group. * Pin ember-rails to 0.18.5 which works with Sprockets 3.x. * Update sprockets to 3.6.0. * Make `DiscourseSassCompiler` work with Sprockets 3. * Use `Sass::Rails::SassImporterGlobbing` instead of haxxing our own. * Moneky patch so that we don't add dependencies for our custom css. * FIX: Missing class. * Upgrade ember-handlebars-template. * FIX: require path needs to share the same root as the folder's path. * Bump discourse-qunit-rails. * Update ember-template-compiler.js to 1.12.2. * `prepend` is private in Ruby 2.0.0.
2016-04-18 10:47:52 +08:00
concurrent-ruby (~> 1.0)
rack (> 1, < 3)
DEV: Rails 5.2 upgrade and global gem upgrade This updates tests to use latest rails 5 practice and updates ALL dependencies that could be updated Performance testing shows that performance has not regressed if anything it is marginally faster now.
2018-06-05 15:29:17 +08:00
sprockets-rails (3.2.1)
Update sprockets. (#4167) * Update sass-rails. * FIX: Tilt dependency has been removed from Ember::Handlebars::Template. * Update `DiscourseIIFE` to new Sprockets API. * `Rails.application.assets` returns `nil` in production. * Move sprockets-rails out of the assets group. * Pin ember-rails to 0.18.5 which works with Sprockets 3.x. * Update sprockets to 3.6.0. * Make `DiscourseSassCompiler` work with Sprockets 3. * Use `Sass::Rails::SassImporterGlobbing` instead of haxxing our own. * Moneky patch so that we don't add dependencies for our custom css. * FIX: Missing class. * Upgrade ember-handlebars-template. * FIX: require path needs to share the same root as the folder's path. * Bump discourse-qunit-rails. * Update ember-template-compiler.js to 1.12.2. * `prepend` is private in Ruby 2.0.0.
2016-04-18 10:47:52 +08:00
actionpack (>= 4.0)
activesupport (>= 4.0)
sprockets (>= 3.0.0)
DEV: low risk gem updates This updates another batch of gems that are lowish risk Most of the gem changes are here for Rails 6 / Ruby 2.6.3 support Excon did some stuff around better cipher ordering
2019-04-29 13:33:01 +08:00
sshkey (2.0.0)
DEV: Bump stackprof from 0.2.14 to 0.2.15 (#8584) Bumps [stackprof](https://github.com/tmm1/stackprof) from 0.2.14 to 0.2.15. - [Release notes](https://github.com/tmm1/stackprof/releases) - [Changelog](https://github.com/tmm1/stackprof/blob/master/CHANGELOG.md) - [Commits](https://github.com/tmm1/stackprof/compare/v0.2.14...v0.2.15) Very safe change only used for diagnostics.
2019-12-30 13:42:16 +08:00
stackprof (0.2.15)
Build(deps-dev): Bump test-prof from 0.10.1 to 0.10.2 (#8676) Bumps [test-prof](https://github.com/palkan/test-prof) from 0.10.1 to 0.10.2. - [Release notes](https://github.com/palkan/test-prof/releases) - [Changelog](https://github.com/palkan/test-prof/blob/master/CHANGELOG.md) - [Commits](https://github.com/palkan/test-prof/compare/v0.10.1...v0.10.2) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-01-10 23:03:56 +08:00
test-prof (0.10.2)
Build(deps): Bump thor from 1.0.0 to 1.0.1 (#8572) Bumps [thor](https://github.com/erikhuda/thor) from 1.0.0 to 1.0.1. - [Release notes](https://github.com/erikhuda/thor/releases) - [Changelog](https://github.com/erikhuda/thor/blob/master/CHANGELOG.md) - [Commits](https://github.com/erikhuda/thor/compare/v1.0.0...v1.0.1) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-12-18 22:55:18 +08:00
thor (1.0.1)
Upgrade Rails to 4.2.8.
2017-04-13 10:17:09 +08:00
thread_safe (0.3.6)
DEV: Bump tilt from 2.0.9 to 2.0.10 (#8479) Minor update, removes a Ruby 2.7 deprecation.
2019-12-09 11:22:55 +08:00
tilt (2.0.10)
DEV: Bump tzinfo from 1.2.5 to 1.2.6 (#8635) Bumps [tzinfo](https://github.com/tzinfo/tzinfo) from 1.2.5 to 1.2.6. - [Release notes](https://github.com/tzinfo/tzinfo/releases) - [Changelog](https://github.com/tzinfo/tzinfo/blob/master/CHANGES.md) - [Commits](https://github.com/tzinfo/tzinfo/compare/v1.2.5...v1.2.6) Pretty safe update, deals with Ruby 2.7 and corrects a minor internal bug
2019-12-31 08:48:37 +08:00
tzinfo (1.2.6)
Rails 4 upgrade
2014-05-08 12:14:24 +08:00
thread_safe (~> 0.1)
Build(deps-dev): Bump uglifier from 4.1.20 to 4.2.0 (#8510) Bumps [uglifier](https://github.com/lautis/uglifier) from 4.1.20 to 4.2.0. - [Release notes](https://github.com/lautis/uglifier/releases) - [Changelog](https://github.com/lautis/uglifier/blob/master/CHANGELOG.md) - [Commits](https://github.com/lautis/uglifier/compare/v4.1.20...v4.2.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-12-10 22:28:15 +08:00
uglifier (4.2.0)
update gems
2016-05-23 10:23:15 +08:00
execjs (>= 0.3.0, < 3)
Gem updates, all up to latest.
2014-09-25 08:40:35 +08:00
unf (0.1.4)
rails 3 gem update (note will be removed at some point)
2013-12-06 14:06:52 +08:00
unf_ext
DEV: update minor dependencies These gems have very minor changes, and are low risk updates
2019-04-29 13:00:58 +08:00
unf_ext (0.0.7.6)
Build(deps): Bump unicode-display_width from 1.6.0 to 1.6.1 (#8756) Bumps [unicode-display_width](https://github.com/janlelis/unicode-display_width) from 1.6.0 to 1.6.1. - [Release notes](https://github.com/janlelis/unicode-display_width/releases) - [Changelog](https://github.com/janlelis/unicode-display_width/blob/master/CHANGELOG.md) - [Commits](https://github.com/janlelis/unicode-display_width/compare/v1.6.0...v1.6.1) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-01-21 23:08:24 +08:00
unicode-display_width (1.6.1)
DEV: Bump unicorn from 5.5.1 to 5.5.2 (#8602) Bumps [unicorn](https://bogomips.org/unicorn/) from 5.5.1 to 5.5.2. This contains a fix for: https://github.com/defunkt/unicorn/commit/024f7a8c8c780b6eae4f952dd6ef86dca8036cb6 Specifically its around operation when you use the ruby tainting feature (which will soon be removed) Update has no actual impact on Discourse.
2019-12-30 14:06:00 +08:00
unicorn (5.5.2)
added sample unicorn config added utility to measure real memory usage don't require thin by default
2013-07-07 12:30:52 +08:00
kgio (~> 2.6)
raindrops (~> 0.7)
DEV: upgrade low risk gems This updates a bunch of gems that have very low risk of breaking anything or are mostly used in dev. Overall our goal is to be on latest gems with latest bug fixes so this is us working in that direction.
2019-12-06 14:11:10 +08:00
uniform_notifier (1.13.0)
Build(deps-dev): Bump webmock from 3.7.6 to 3.8.0 (#8728) Bumps [webmock](https://github.com/bblimke/webmock) from 3.7.6 to 3.8.0. - [Release notes](https://github.com/bblimke/webmock/releases) - [Changelog](https://github.com/bblimke/webmock/blob/master/CHANGELOG.md) - [Commits](https://github.com/bblimke/webmock/compare/v3.7.6...v3.8.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-01-23 23:19:28 +08:00
webmock (3.8.0)
Support Ruby 2.4.
2017-04-15 12:11:02 +08:00
addressable (>= 2.3.6)
crack (>= 0.3.2)
Build(deps-dev): Bump webmock from 3.5.1 to 3.7.6 (#8512) Bumps [webmock](https://github.com/bblimke/webmock) from 3.5.1 to 3.7.6. - [Release notes](https://github.com/bblimke/webmock/releases) - [Changelog](https://github.com/bblimke/webmock/blob/master/CHANGELOG.md) - [Commits](https://github.com/bblimke/webmock/compare/v3.5.1...v3.7.6) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-12-11 02:38:03 +08:00
hashdiff (>= 0.4.0, < 2.0.0)
Build(deps): Bump webpush from 0.3.8 to 1.0.0 (#8511) Bumps [webpush](https://github.com/zaru/webpush) from 0.3.8 to 1.0.0. - [Release notes](https://github.com/zaru/webpush/releases) - [Changelog](https://github.com/zaru/webpush/blob/master/CHANGELOG.md) - [Commits](https://github.com/zaru/webpush/compare/v0.3.8...v1.0.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2019-12-11 04:56:52 +08:00
webpush (1.0.0)
Feature: Push notifications for Android (#5792) * Feature: Push notifications for Android Notification config for desktop and mobile are merged. Desktop notifications stay as they are for desktop views. If mobile mode, push notifications are enabled. Added push notification subscriptions in their own table, rather than through custom fields. Notification banner prompts appear for both mobile and desktop when enabled.
2018-05-05 06:31:48 +08:00
hkdf (~> 0.2)
FIX: Push notifications didn't work anymore
2019-01-10 05:07:10 +08:00
jwt (~> 2.0)
DEV: Replace Overcommit with Lefthook (#7826) Overcommit uses prebuilt hooks and require global installation. To avoid this issues replace it with Lefthook. Lefthook will be installed with npm packages. New contributors will have fully consistent git hooks.
2019-07-02 17:29:52 +08:00
yaml-lint (0.0.10)
DEV: update dependencies and add notes about exceptions Previously it was unclear why certain gems are being held back cause Gemfile had no comment explaining it. I tried to add some explanation from memory and remove some exceptions that seemed to be superfluous. This upgrades shoulda to latest, it appears to work once a couple of assertions are removed Also update http accept language used to auto detect language from http header this is tested Zeitwerk small update seems fine
2019-12-06 10:00:16 +08:00
zeitwerk (2.2.2)
Initial release of Discourse
2013-02-06 03:16:51 +08:00
PLATFORMS
ruby
DEPENDENCIES
DEV: update Rails to version 6.0.1 This version of Rails eliminates a monkey patch that is no longer needed! Additionally it preps us for Ruby 2.7 support.
2019-11-08 13:56:30 +08:00
actionmailer (= 6.0.1)
actionpack (= 6.0.1)
actionview (= 6.0.1)
PREF: optimise preloading application We preload to ensure as much memory as possible is reused from unicorn master to various workers using copy-on-write (sidekiq, unicorn) This migrates the preloading code into the Discourse module for easier reuse and adds 3 notable preloading changes 1. We attempt to localize a string on each site, ensuring we warmup the i18n 2. We preload all our templates (compiling .erb to class) 3. We warm-up our search tokenizer which uses cppjieba which is a large memory consumer, this will only cause a warmup on CJK sites or sites with the special site setting enabled.
2019-10-07 12:33:37 +08:00
actionview_precompiler
AMS 0.8.3 was released with the patch we want
2015-04-24 04:20:53 +08:00
active_model_serializers (~> 0.8.3)
DEV: update Rails to version 6.0.1 This version of Rails eliminates a monkey patch that is no longer needed! Additionally it preps us for Ruby 2.7 support.
2019-11-08 13:56:30 +08:00
activemodel (= 6.0.1)
activerecord (= 6.0.1)
activesupport (= 6.0.1)
FIX: require: false for rotp gem (#8540) The ROTP gem is only used in a very small amount of places in the app, we don't need to globally require it. Also set the Addressable gem to not have a specific version range, as it has not been a problem yet. Some slight refactoring of UserSecondFactor here too to use SecondFactorManager to avoid code repetition
2019-12-17 08:33:51 +08:00
addressable
rails 3 gem update (note will be removed at some point)
2013-12-06 14:06:52 +08:00
annotate
FEATURE: rake tasks for uploading assets to S3 This opens the door to serving application.js and so on from s3. Also updates s3 gem for some tagging support
2017-10-03 15:00:42 +08:00
aws-sdk-s3
FEATURE: AWS SNS bounce notifications webhooks
2019-02-14 04:26:40 +08:00
aws-sdk-sns
Update Ember to latest master (RC5)
2013-06-07 05:50:49 +08:00
barber
Initial release of Discourse
2013-02-06 03:16:51 +08:00
better_errors
binding_of_caller
proper bootsnap release
2017-05-27 01:26:45 +08:00
bootsnap
Add Bullet gem to detect N+1 queries.
2016-06-28 09:29:42 +08:00
bullet
DEV: Add byebug.
2015-08-14 11:59:06 +08:00
byebug
FEATURE: Webauthn authenticator management with 2FA login (Security Keys) (#8099) Adds 2 factor authentication method via second factor security keys over [web authn](https://developer.mozilla.org/en-US/docs/Web/API/Web_Authentication_API). Allows a user to authenticate a second factor on login, login-via-email, admin-login, and change password routes. Adds registration area within existing user second factor preferences to register multiple security keys. Supports both external (yubikey) and built-in (macOS/android fingerprint readers).
2019-10-02 10:08:41 +08:00
cbor
Initial release of Discourse
2013-02-06 03:16:51 +08:00
certified
DEV: Add rake task to check locale files for errors
2018-09-05 05:57:20 +08:00
colored2
FEATURE: Webauthn authenticator management with 2FA login (Security Keys) (#8099) Adds 2 factor authentication method via second factor security keys over [web authn](https://developer.mozilla.org/en-US/docs/Web/API/Web_Authentication_API). Allows a user to authenticate a second factor on login, login-via-email, admin-login, and change password routes. Adds registration area within existing user second factor preferences to register multiple security keys. Supports both external (yubikey) and built-in (macOS/android fingerprint readers).
2019-10-02 10:08:41 +08:00
cose
Replace rmmseg gem for cppjieba_rb since better dictionary (#5006) * Rename locale to ts config in search module to make it clear * Replace rmmese-cpp for cppjieba_rb
2017-08-01 03:28:48 +08:00
cppjieba_rb
FEATURE: customization of html emails (#7934) This feature adds the ability to customize the HTML part of all emails using a custom HTML template and optionally some CSS to style it. The CSS will be parsed and converted into inline styles because CSS is poorly supported by email clients. When writing the custom HTML and CSS, be aware of what email clients support. Keep customizations very simple. Customizations can be added and edited in Admin > Customize > Email Style. Since the summary email is already heavily styled, there is a setting to disable custom styles for summary emails called "apply custom styles to digest" found in Admin > Settings > Email. As part of this work, RTL locales are now rendered correctly for all emails.
2019-07-31 03:05:08 +08:00
css_parser
DEV: Verbose mode for `posts:inline_uploads` rake task.
2019-06-07 16:21:37 +08:00
diffy
DEV: Upgrades to Ember 3.10 (#7871) Co-Authored-By: majakomel <maja.komel@gmail.com>
2019-07-16 18:45:15 +08:00
discourse-ember-source (~> 3.10.0)
Install `discourse_image_optim` gem for now.
2017-04-20 14:40:16 +08:00
discourse_image_optim
DEV: update dependencies and add notes about exceptions Previously it was unclear why certain gems are being held back cause Gemfile had no comment explaining it. I tried to add some explanation from memory and remove some exceptions that seemed to be superfluous. This upgrades shoulda to latest, it appears to work once a couple of assertions are removed Also update http accept language used to auto detect language from http header this is tested Zeitwerk small update seems fine
2019-12-06 10:00:16 +08:00
email_reply_trimmer
DEV: upgrades from Ember 2.13 to Ember 3.5.1 (#6808) Co-Authored-By: Bianca Nenciu <nbianca@users.noreply.github.com> Co-Authored-By: David Taylor <david@taylorhq.com>
2019-01-10 18:06:01 +08:00
ember-handlebars-template (= 0.8.0)
Update sprockets. (#4167) * Update sass-rails. * FIX: Tilt dependency has been removed from Ember::Handlebars::Template. * Update `DiscourseIIFE` to new Sprockets API. * `Rails.application.assets` returns `nil` in production. * Move sprockets-rails out of the assets group. * Pin ember-rails to 0.18.5 which works with Sprockets 3.x. * Update sprockets to 3.6.0. * Make `DiscourseSassCompiler` work with Sprockets 3. * Use `Sass::Rails::SassImporterGlobbing` instead of haxxing our own. * Moneky patch so that we don't add dependencies for our custom css. * FIX: Missing class. * Upgrade ember-handlebars-template. * FIX: require path needs to share the same root as the folder's path. * Bump discourse-qunit-rails. * Update ember-template-compiler.js to 1.12.2. * `prepend` is private in Ruby 2.0.0.
2016-04-18 10:47:52 +08:00
ember-rails (= 0.18.5)
PERF: remove "fog" dependency
2015-05-25 15:57:06 +08:00
excon
execjs 2.7 was just released to support mini_racer
2016-05-20 15:06:44 +08:00
execjs
Don't pin version of `Fabrication` gem.
2018-05-28 15:09:02 +08:00
fabrication
DEV: update dependencies and add notes about exceptions Previously it was unclear why certain gems are being held back cause Gemfile had no comment explaining it. I tried to add some explanation from memory and remove some exceptions that seemed to be superfluous. This upgrades shoulda to latest, it appears to work once a couple of assertions are removed Also update http accept language used to auto detect language from http header this is tested Zeitwerk small update seems fine
2019-12-06 10:00:16 +08:00
fakeweb
gem updates, stop sourcing some stuff from github uglifier v2
2013-04-08 07:42:39 +08:00
fast_blank
rails 3 gem update (note will be removed at some point)
2013-12-06 14:06:52 +08:00
fast_xor
Initial release of Discourse
2013-02-06 03:16:51 +08:00
fast_xs
Drop the fork usage of fastimage (#5461) Fork is not needed anymore since fastimage 2.1.1 has been released with the needed PR merged in.
2018-01-04 16:53:53 +08:00
fastimage
rails 3 gem update (note will be removed at some point)
2013-12-06 14:06:52 +08:00
flamegraph
remove gctools (no longer used) add gctracer for debugging
2016-12-20 12:01:36 +08:00
gc_tracer
DEV: lower highline requirement
2018-06-28 04:50:00 +08:00
highline (~> 1.7.0)
Added code block normalization routing for import
2014-06-06 08:34:21 +08:00
htmlentities
DEV: update dependencies and add notes about exceptions Previously it was unclear why certain gems are being held back cause Gemfile had no comment explaining it. I tried to add some explanation from memory and remove some exceptions that seemed to be superfluous. This upgrades shoulda to latest, it appears to work once a couple of assertions are removed Also update http accept language used to auto detect language from http header this is tested Zeitwerk small update seems fine
2019-12-06 10:00:16 +08:00
http_accept_language
Upgrade the Listen gem
2017-04-13 22:26:07 +08:00
listen
EXPERIMENTAL: Allow lograge to be selected as the logging library.
2017-10-27 17:54:45 +08:00
lograge
EXPERIMENTAL: Allow Logstash formatter to be enable for lograge logs.
2017-11-01 08:37:11 +08:00
logstash-event
EXPERIMENTAL: Allow logs to be shipped via different methods. See https://github.com/dwbutler/logstash-logger#uri-configuration for a list of available methods.
2017-11-14 12:50:26 +08:00
logstash-logger
Fix broken Gemfile.lock.
2017-12-04 11:28:45 +08:00
logster
lru cache added
2013-04-24 09:59:59 +08:00
lru_redux
FEATURE: improve performance of anonymous cache This commit introduces 2 features: 1. DISCOURSE_COMPRESS_ANON_CACHE (true|false, default false): this allows you to optionally compress the anon cache body entries in Redis, can be useful for high load sites with Redis that lives on a separate server to to webs 2. DISCOURSE_ANON_CACHE_STORE_THRESHOLD (default 2), only pop entries into redis if we observe them more than N times. This avoids situations where a crawler can walk a big pile of topics and store them all in Redis never to be used. Our default anon cache time for topics is only 60 seconds. Anon cache is in place to avoid the "slashdot" effect where a single topic is hit by 100s of people in one minute.
2019-09-04 15:18:32 +08:00
lz4-ruby
DEV: upgrade mail gem from pre-release 2.7.1 version of the mail gem was released! We no longer need to depend on the pre-release.
2019-02-04 13:10:13 +08:00
mail
FEATURE: Show "Recently used devices" in user preferences (#6335) * FEATURE: Added MaxMindDb to resolve IP information. * FEATURE: Added browser detection based on user agent. * FEATURE: Added recently used devices in user preferences. * DEV: Added acceptance test for recently used devices. * UX: Do not show 'Show more' button if there aren't more tokens. * DEV: Fix unit tests. * DEV: Make changes after code review. * Add more detailed unit tests. * Improve logging messages. * Minor coding style fixes. * DEV: Use DropdownSelectBoxComponent and run Prettier. * DEV: Fix unit tests.
2018-10-09 22:21:41 +08:00
maxminddb
memory_profiler should be shipped with mini profiler
2014-05-08 11:49:34 +08:00
memory_profiler
DEV: update mini_racer and message_bus Two very low risk updates, message_bus has been released no need to depend on pre-release. mini_racer update is for a very minor change (shared isolates are not used in discourse so it is not a fix we technically need)
2019-02-04 14:46:38 +08:00
message_bus
FIX: pull hotlinked images even when they have no extension
2017-06-13 19:27:05 +08:00
mini_mime
FEATURE: upgrade from therubyracer to mini_racer This pushes our internal V8 JavaScript engine from Chrome 32 to 50. It also resolves some long standing issues we had with the old wrapper.
2016-05-19 20:25:08 +08:00
mini_racer
REFACTOR: extract scheduler to the mini_scheduler gem
2018-08-01 05:12:55 +08:00
mini_scheduler
DEV: remove exec_sql and replace with mini_sql Introduce new patterns for direct sql that are safe and fast. MiniSql is not prone to memory bloat that can happen with direct PG usage. It also has an extremely fast materializer and very a convenient API - DB.exec(sql, *params) => runs sql returns row count - DB.query(sql, *params) => runs sql returns usable objects (not a hash) - DB.query_hash(sql, *params) => runs sql returns an array of hashes - DB.query_single(sql, *params) => runs sql and returns a flat one dimensional array - DB.build(sql) => returns a sql builder See more at: https://github.com/discourse/mini_sql
2018-06-19 14:13:14 +08:00
mini_sql
UX: Replace heuristic solution for extracting root domain.
2017-11-29 16:24:27 +08:00
mini_suffix
add minitest
2013-02-24 07:24:28 +08:00
minitest
DEV: forgot to check in lockfile updates lock file to properly match the generated one.
2019-12-11 09:45:42 +08:00
mocha (= 1.8.0)
mock redis for mock redis goodness
2013-07-29 10:23:21 +08:00
mock_redis
Initial release of Discourse
2013-02-06 03:16:51 +08:00
multi_json
mustache
update nokogiri to stable
2016-06-07 14:54:36 +08:00
nokogiri
Initial release of Discourse
2013-02-06 03:16:51 +08:00
oj
use omniauth-openid to replace google id
2013-02-12 14:51:44 +08:00
omniauth
move all logic to omniauth implement omniauth-facebook / omniauth-twitter
2013-02-12 21:47:22 +08:00
omniauth-facebook
let's use the latest omniauth-github gem
2017-08-07 16:43:54 +08:00
omniauth-github
Bump omniauth-google-oauth2 gem version Pinning to an old version is no longer required following https://github.com/zquestz/omniauth-google-oauth2/commit/8b4d6dafea1e741a34c92d595ffb2e7b99acd874
2019-06-04 02:17:00 +08:00
omniauth-google-oauth2
missing gem
2016-03-07 11:30:13 +08:00
omniauth-instagram
Authenticate with Discourse via OAuth2 See https://github.com/michaelkirk/discourse_oauth2_example for an example of how you might integrate your existing oauth2 provider's authentication via a Discourse plugin.
2013-08-18 12:43:59 +08:00
omniauth-oauth2
use omniauth-openid to replace google id
2013-02-12 14:51:44 +08:00
omniauth-openid
move all logic to omniauth implement omniauth-facebook / omniauth-twitter
2013-02-12 21:47:22 +08:00
omniauth-twitter
DEV: update dependencies and add notes about exceptions Previously it was unclear why certain gems are being held back cause Gemfile had no comment explaining it. I tried to add some explanation from memory and remove some exceptions that seemed to be superfluous. This upgrades shoulda to latest, it appears to work once a couple of assertions are removed Also update http accept language used to auto detect language from http header this is tested Zeitwerk small update seems fine
2019-12-06 10:00:16 +08:00
onebox
using redis as backend store
2013-02-13 16:48:44 +08:00
openid-redis-store
DEV: Introduce parallel rspec testing Adds the parallel_tests gem, and redis/postgres configuration for running rspec tests in parallel. To use: ``` rake parallel:rake[db:create] rake parallel:rake[db:migrate] rake parallel:spec ``` This brings the test suite from 12m20s to 3m11s on my macOS machine
2019-04-01 16:27:49 +08:00
parallel_tests
DEV: remove exec_sql and replace with mini_sql Introduce new patterns for direct sql that are safe and fast. MiniSql is not prone to memory bloat that can happen with direct PG usage. It also has an extremely fast materializer and very a convenient API - DB.exec(sql, *params) => runs sql returns row count - DB.query(sql, *params) => runs sql returns usable objects (not a hash) - DB.query_hash(sql, *params) => runs sql returns an array of hashes - DB.query_single(sql, *params) => runs sql and returns a flat one dimensional array - DB.build(sql) => returns a sql builder See more at: https://github.com/discourse/mini_sql
2018-06-19 14:13:14 +08:00
pg
Make pry a bit more useful
2013-05-25 04:35:16 +08:00
pry-nav
Initial release of Discourse
2013-02-06 03:16:51 +08:00
pry-rails
add a soft puma dependency so people can run Discourse on puma
2013-08-29 13:26:27 +08:00
puma
DEV: update dependencies and add notes about exceptions Previously it was unclear why certain gems are being held back cause Gemfile had no comment explaining it. I tried to add some explanation from memory and remove some exceptions that seemed to be superfluous. This upgrades shoulda to latest, it appears to work once a couple of assertions are removed Also update http accept language used to auto detect language from http header this is tested Zeitwerk small update seems fine
2019-12-06 10:00:16 +08:00
r2
DEV: revert upgrade of rack to version 2.0.8 We can not upgrade rack cause it breaks Sidekiq web. I can not find a trivial fix short of disabling sessions in Sidekiq which is a security concern. We need to figure out how to reuse sessions with our Rails application in Sidekiq. This gets extra complex cause we use a special cookie store for sessions. https://github.com/discourse/discourse/blob/9e399b42b96f115a8367c368862d62aeecfac680/lib/discourse_cookie_store.rb#L3-L21
2020-01-13 15:07:16 +08:00
rack (= 2.0.8)
Drop Rails3 support
2014-02-18 00:44:28 +08:00
rack-mini-profiler
Declare rack-protection dependency explicitely
2013-10-29 08:00:31 +08:00
rack-protection
Fix Gemfile.lock.
2018-02-12 14:08:02 +08:00
rails_multisite
DEV: update Rails to version 6.0.1 This version of Rails eliminates a monkey patch that is no longer needed! Additionally it preps us for Ruby 2.7 support.
2019-11-08 13:56:30 +08:00
railties (= 6.0.1)
Initial release of Discourse
2013-02-06 03:16:51 +08:00
rake
rb-fsevent
gem downgrade to keep guard happy
2013-04-26 11:57:50 +08:00
rb-inotify (~> 0.9)
rails 3 gem update (note will be removed at some point)
2013-12-06 14:06:52 +08:00
rbtrace
Use rchardet instead of charlock_holmes gem
2018-07-31 18:02:18 +08:00
rchardet
DEV: update dependencies and add notes about exceptions Previously it was unclear why certain gems are being held back cause Gemfile had no comment explaining it. I tried to add some explanation from memory and remove some exceptions that seemed to be superfluous. This upgrades shoulda to latest, it appears to work once a couple of assertions are removed Also update http accept language used to auto detect language from http header this is tested Zeitwerk small update seems fine
2019-12-06 10:00:16 +08:00
redis
FEATURE: upgrade to Sidekiq 4
2016-01-01 12:40:12 +08:00
redis-namespace
Initial release of Discourse
2013-02-06 03:16:51 +08:00
rinku
FEATURE: Implement 2factor login TOTP implemented review items. Blocking previous codes - valid 2-factor auth tokens can only be authenticated once/30 seconds. I played with updating the “last used” any time the token was attempted but that seemed to be overkill, and frustrating as to why a token would fail. Translatable texts. Move second factor logic to a helper class. Move second factor specific controller endpoints to its own controller. Move serialization logic for 2-factor details in admin user views. Add a login ember component for de-duplication Fix up code formatting Change verbiage of google authenticator add controller tests: second factor controller tests change email tests change password tests admin login tests add qunit tests - password reset, preferences fix: check for 2factor on change email controller fix: email controller - only show second factor errors on attempt fix: check against 'true' to enable second factor. Add modal for explaining what 2fa with links to Google Authenticator/FreeOTP add two factor to email signin link rate limit if second factor token present add rate limiter test for second factor attempts
2017-12-22 09:18:12 +08:00
rotp
rqrcode
Upgrade rspec to 3.4.0.
2016-05-30 11:38:04 +08:00
rspec
FIX: allow emoji class when crawling embedded content, add rspc-html-matchers
2015-09-25 06:20:59 +08:00
rspec-html-matchers
DEV: Upgrade Discourse to Rails 6 (#8083) * Adjustments to pass specs on Rails 6.0.0 * Use classic autoloader instead of Zeitwerk * Update Rails 6.0.0 deprecated methods * Rails 6.0.0 not allowing column with integer name * Drop freedom_patches/rails6.rb * Default value for trigger_transactional_callbacks? is true * Bump rspec-rails version to 4.0.0.beta2
2019-09-12 08:41:50 +08:00
rspec-rails (= 4.0.0.beta2)
Add RTL support to Discourse CSS pre-processing using the RTLit gem and configurable via discourse.conf
2014-08-08 14:31:31 +08:00
rtlit
Install rubocop in development mode.
2017-08-01 09:51:44 +08:00
rubocop
DEV: Use rubocop-discourse gem to add custom chdir cop Followup to b27e009655a866973f04e16f6694b8ab853124d3
2019-11-18 23:39:41 +08:00
rubocop-discourse
Install Ruby-Prof.
2017-09-05 14:55:20 +08:00
ruby-prof
My patch was accepted and pushed into the gem :)
2014-04-15 12:45:00 +08:00
ruby-readability
FEATURE: Gz to zip for exports (#7889) * Revert "Revert "FEATURE: admin/user exports are compressed using the zip format (#7784)"" This reverts commit f89bd555763bd61a130145d2eff6c2ee75fe6b06. * Replace .tar.zip with .zip
2019-07-18 20:34:48 +08:00
rubyzip
Initial release of Discourse
2013-02-06 03:16:51 +08:00
sanitize
DEV: Lock sassc gem at version 2.0.1 with note (#8523)
2019-12-11 22:22:39 +08:00
sassc (= 2.0.1)
FIX: Add `sassc-rails` for plugins using sprockets to compile scss This did not affect core because we have a custom stylesheet pipeline
2019-03-22 07:23:29 +08:00
sassc-rails
Update seed-fu with PG10 support. https://meta.discourse.org/t/discourse-appears-to-be-broken-with-postgres-10/71723
2017-11-27 10:26:59 +08:00
seed-fu
DEV: update dependencies and add notes about exceptions Previously it was unclear why certain gems are being held back cause Gemfile had no comment explaining it. I tried to add some explanation from memory and remove some exceptions that seemed to be superfluous. This upgrades shoulda to latest, it appears to work once a couple of assertions are removed Also update http accept language used to auto detect language from http header this is tested Zeitwerk small update seems fine
2019-12-06 10:00:16 +08:00
shoulda-matchers
UPDATE: sidekiq
2014-02-24 07:00:25 +08:00
sidekiq
DEV: Add simplecov as test dependency (#7271)
2019-04-01 13:00:11 +08:00
simplecov
DEV: add a note about sprockets being held back We want to upgrade to version 4, but it does not work atm.
2019-12-10 09:31:16 +08:00
sprockets (= 3.7.2)
Upgrade to Rails 5.
2017-08-23 10:58:25 +08:00
sprockets-rails
FEATURE: allow themes to live in private git repos This feature allows themes sourced from git to live on private servers, it automatically generates key pairs.
2018-03-09 13:14:21 +08:00
sshkey
Add some Ruby 2.1 specific Gems, get people to upgrade bundler
2014-02-18 10:24:42 +08:00
stackprof
Added test-prof as a dependency (#7395) test-prof is a collection of tools for analyzing test-suite performance.
2019-04-19 16:52:31 +08:00
test-prof
FIX: Add `thor` to Gemfile. We need it for our CLI tool.
2017-03-03 02:35:47 +08:00
thor
remove sinatra
2017-06-20 01:49:11 +08:00
tilt
Initial release of Discourse
2013-02-06 03:16:51 +08:00
uglifier
rails 3 gem update (note will be removed at some point)
2013-12-06 14:06:52 +08:00
unf
added sample unicorn config added utility to measure real memory usage don't require thin by default
2013-07-07 12:30:52 +08:00
unicorn
Support Ruby 2.4.
2017-04-15 12:11:02 +08:00
webmock
Update Gemfile.lock.
2018-05-07 17:09:58 +08:00
webpush
DEV: Replace Overcommit with Lefthook (#7826) Overcommit uses prebuilt hooks and require global installation. To avoid this issues replace it with Lefthook. Lefthook will be installed with npm packages. New contributors will have fully consistent git hooks.
2019-07-02 17:29:52 +08:00
yaml-lint
correct file size and add note about impending breakage of image_optim
2015-09-10 12:37:46 +08:00
BUNDLED WITH
DEV: Update Bundler (#8583) * DEV: Update Bundler Latest RubyGems 3.1.1 vendors bundler 2.1.0 *again*. And our base image build system even updates it to 2.1.1. After that it is unable to run a simple `bundle install` because of version mismatch. Updating bundler to the one that comes with our enforced Ruby version solves this. * DEV: Update bundler in CI too
2019-12-20 03:25:33 +08:00
2.1.1
Reference in New Issue Copy Permalink