Skip to content
This repository was archived by the owner on Feb 27, 2025. It is now read-only.
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
107 commits
Select commit Hold shift + click to select a range
79a87a6
Merge pull request #30 from denny/main
weatherpixie May 12, 2021
8c69126
Bump puma from 5.3.0 to 5.3.1
dependabot[bot] May 18, 2021
f8bc51b
Bump nokogiri from 1.11.3 to 1.11.4
dependabot[bot] May 18, 2021
653c676
Merge pull request #31 from 38degrees/dependabot/bundler/puma-5.3.1
May 20, 2021
c6605c9
Merge pull request #32 from 38degrees/dependabot/bundler/nokogiri-1.11.4
May 20, 2021
2df9700
Sentry config
May 26, 2021
6448a51
Merge pull request #33 from 38degrees/chore/sentry
Jun 2, 2021
d601bdb
Re-add blank entry to Gemfile.lock
Jun 2, 2021
430f332
Specifiy ruby version in Gemfile
Jun 2, 2021
c9df445
trying to update addressable
weatherpixie Jul 14, 2021
8467c52
Merge pull request #34 from 38degrees/dependabot-addressable
weatherpixie Jul 14, 2021
aabe21c
specs thing
weatherpixie Jul 14, 2021
1d57425
Merge pull request #35 from 38degrees/dependabot-addressable
weatherpixie Jul 14, 2021
e474665
* allow a custom header to be specified that will be used to fetch t…
shinyshez Sep 7, 2021
9fd54ad
* set headers and add success case test
shinyshez Sep 7, 2021
9a239ff
* make rubohitler happy
shinyshez Sep 7, 2021
95836e3
* try different way of setting header
shinyshez Sep 7, 2021
af2578a
* very simple support for running rubocop, tests and app within docker
shinyshez Sep 8, 2021
85b47d2
* Add SKIP_AUTH flag to aid local dev and testing
shinyshez Sep 13, 2021
822f847
* comment fix, remove redundent sudo
shinyshez Sep 13, 2021
49d5c4c
* remove redendent webdriver install as its included in circleci image
shinyshez Sep 13, 2021
10b5cbe
* avoid stale X11 lock files
shinyshez Sep 14, 2021
a1dc516
* empty permitted ips disables features, so put in an ip
shinyshez Sep 14, 2021
bc676f0
* more useful debug logging
shinyshez Sep 14, 2021
26a99a3
* store test logs
shinyshez Sep 14, 2021
2c9c4db
* store test logs
shinyshez Sep 14, 2021
019fd9d
* store test logs
shinyshez Sep 14, 2021
5a50e81
* debugging to help circlci troubleshooting
shinyshez Sep 14, 2021
56f8c12
* set SKIP_AUTH=true for circleci tests to match local
shinyshez Sep 14, 2021
4868c15
* remove temp logging
shinyshez Sep 14, 2021
c910641
* heroku spec dance
shinyshez Sep 14, 2021
bac72c6
* heroku spec dance
shinyshez Sep 14, 2021
b2e51cf
Merge pull request #36 from 38degrees/feature/flexible-ip-check
weatherpixie Sep 14, 2021
e5aa481
Bump nokogiri from 1.11.4 to 1.12.5
dependabot[bot] Sep 27, 2021
91c08fd
Merge pull request #37 from 38degrees/dependabot/bundler/nokogiri-1.12.5
Sep 29, 2021
72e09ac
Bump puma from 5.3.1 to 5.5.1
dependabot[bot] Oct 12, 2021
3efcf33
Merge pull request #38 from 38degrees/dependabot/bundler/puma-5.5.1
weatherpixie Nov 17, 2021
3c58703
trying some package upgrades
weatherpixie Nov 18, 2021
e5dff4b
circle ci ruby version
weatherpixie Nov 18, 2021
4e274f5
rubocop
weatherpixie Nov 18, 2021
270f641
rubocop
weatherpixie Nov 18, 2021
b0d4b3f
rubocop ignores
weatherpixie Nov 18, 2021
a24ae96
adding todo file
weatherpixie Nov 18, 2021
0dc6bf1
trying to update omniauth
weatherpixie Nov 22, 2021
5d84028
trying kt paperclip
weatherpixie Nov 22, 2021
a621603
rubocop
weatherpixie Nov 22, 2021
ad7f05f
putting paperclipmeta back
weatherpixie Nov 22, 2021
2d16d9a
newer paperclip
weatherpixie Nov 22, 2021
1e188b6
new paperclip meta
weatherpixie Nov 23, 2021
bc21a14
comments about why paperclipmeta ;)
weatherpixie Nov 23, 2021
f617aa5
grammar
weatherpixie Nov 23, 2021
dc2b4a5
sanity ;)
weatherpixie Nov 23, 2021
7f7b316
Merge pull request #39 from 38degrees/ruby-upgrade-3
weatherpixie Nov 23, 2021
68f595d
Bump puma from 5.5.2 to 5.6.2
dependabot[bot] Feb 11, 2022
68819aa
Merge pull request #40 from 38degrees/dependabot/bundler/puma-5.6.2
Feb 15, 2022
fd8529d
Update rails from 6.1.4.1 to 6.1.4.6
Feb 17, 2022
f68115e
Merge pull request #41 from 38degrees/chore/update-rails-6.1.4.6
Feb 17, 2022
8bb0045
Bump nokogiri from 1.13.1 to 1.13.2
dependabot[bot] Feb 26, 2022
c576e29
Merge pull request #42 from 38degrees/dependabot/bundler/nokogiri-1.13.2
tomm Mar 8, 2022
39a068a
Bump puma from 5.6.2 to 5.6.4
dependabot[bot] Mar 30, 2022
209622d
Merge pull request #43 from 38degrees/dependabot/bundler/puma-5.6.4
weatherpixie Apr 1, 2022
2c120d9
Bump nokogiri from 1.13.2 to 1.13.4
dependabot[bot] Apr 12, 2022
647a296
Merge pull request #44 from 38degrees/dependabot/bundler/nokogiri-1.13.4
weatherpixie Apr 25, 2022
d923045
updating rails
weatherpixie Apr 25, 2022
305120c
Merge pull request #45 from 38degrees/chore/dependabot
weatherpixie Apr 25, 2022
b4500f8
upgrade rails
weatherpixie May 3, 2022
98c6741
Merge pull request #46 from 38degrees/chore/updaterails2
weatherpixie May 3, 2022
b7026d6
Bump nokogiri from 1.13.4 to 1.13.6
dependabot[bot] May 24, 2022
ace2e18
Merge pull request #48 from 38degrees/dependabot/bundler/nokogiri-1.13.6
May 27, 2022
f07de9c
updating rack and others as a side effect
weatherpixie Jun 6, 2022
0d6554b
Merge branch 'main' into chore/update-rack
weatherpixie Jun 6, 2022
02e1e0f
Merge pull request #49 from 38degrees/chore/update-rack
weatherpixie Jun 7, 2022
427abb4
update Gemfile.lock
weatherpixie Jul 7, 2022
8c879c5
Merge pull request #50 from 38degrees/chore/jmespath
weatherpixie Jul 7, 2022
05e9dc5
updating rails
weatherpixie Jul 8, 2022
79e6c9a
Merge pull request #51 from 38degrees/chore/upgraderails
weatherpixie Jul 8, 2022
2d7a407
Bump nokogiri from 1.13.6 to 1.13.9
dependabot[bot] Oct 21, 2022
847e645
Merge pull request #52 from 38degrees/dependabot/bundler/nokogiri-1.13.9
weatherpixie Nov 8, 2022
f5fd7f4
Add storage.yml file required by rails 6.1 and pass csrf token to goo…
weatherpixie Jan 19, 2023
5f7097c
trello ibtc3t5m: apply dependabot security patches Jan 2023 (#54)
nicduke38degrees Jan 19, 2023
7a2e433
update rails (and get other stuff for free)
weatherpixie Mar 3, 2023
2fbcd7c
ran rubocop
weatherpixie Mar 6, 2023
2d9b3bd
rubocop todo
weatherpixie Mar 6, 2023
4f9649e
Merge pull request #57 from 38degrees/upgrade-rails
weatherpixie Mar 6, 2023
bbd2910
SCTTR-157 add github workflow config to auto-approve and auto-merge d…
nicduke38degrees Jul 24, 2023
2173d2e
adjust rails dependency in Gemfile to allow updating to latest patch …
nicduke38degrees Jul 24, 2023
c07570a
Merge branch 'main' of github.com:38degrees/MahBucket
nicduke38degrees Jul 24, 2023
dc6c109
Bump rails to fix security advisory CVE-2023-28120
nicduke38degrees Jul 24, 2023
2c5ba89
SCTTR-157 update dependabot workflow to use webhooks
nicduke38degrees Jul 24, 2023
174b19d
SCTRR-157 replace dependabot workflow with reference to reusable one
nicduke38degrees Jul 25, 2023
82fea28
correct github workflow file reference in workflow
nicduke38degrees Jul 25, 2023
750d598
Bump puma from 5.6.5 to 5.6.7
dependabot[bot] Aug 19, 2023
326c224
Bump nokogiri from 1.15.3 to 1.16.2
dependabot[bot] Feb 15, 2024
41b5ac5
Merge branch 'dependabot/bundler/nokogiri-1.16.2' into DEVOPS-29/mahb…
Tim-Langford Feb 15, 2024
7253fd0
Bump puma from 5.6.5 to 5.6.8
dependabot[bot] Feb 15, 2024
5ffe5fe
Merge branch 'dependabot/bundler/puma-5.6.8' into DEVOPS-29/mahbucket…
Tim-Langford Feb 15, 2024
8da7a89
Merge pull request #63 from 38degrees/DEVOPS-29/mahbucket-maintainanc…
Tim-Langford Feb 19, 2024
d40fbca
Bump puma from 5.6.8 to 5.6.9
dependabot[bot] Sep 20, 2024
979c6e7
Merge pull request #66 from 38degrees/dependabot/bundler/puma-5.6.9
shinyshez Nov 13, 2024
2671b8d
Upgrade project to use ruby 3.3.5
duknic Dec 2, 2024
e3e83ad
update webdriver dependency and bundler versions
duknic Dec 2, 2024
20248c2
Delete now unused Dockerfile and adjust docker-compose to use without…
duknic Dec 2, 2024
ffe4117
update capybara to support latest selenium-webdriver version
duknic Dec 2, 2024
0ba8ba7
Merge pull request #67 from 38degrees/upgrade-to-ruby-3-3-5
duknic Jan 14, 2025
749ac9e
Revert "Merge pull request #67 from 38degrees/upgrade-to-ruby-3-3-5"
duknic Jan 14, 2025
bb8fe56
Merge pull request #68 from 38degrees/revert-ruby-3-3-5-change
duknic Jan 14, 2025
3e738a3
Reverts previously reverted Ruby 3.3.5 upgrade change
duknic Jan 23, 2025
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
9 changes: 6 additions & 3 deletions .circleci/config.yml
Original file line number Diff line number Diff line change
Expand Up @@ -4,17 +4,18 @@

version: 2.1
orbs:
ruby: circleci/ruby@1.1.1
ruby: circleci/ruby@2.2.1
jobs:
build:
docker:
- image: circleci/ruby:2.7.3-node-browsers
- image: cimg/ruby:3.3.5-browsers
environment:
- RACK_ENV=test
- RAILS_ENV=test
- DATABASE_URL=postgres://testuser:testpass@127.0.0.1:5432/mahbucket_test
- SKIP_AUTH=true

- image: circleci/postgres:10-alpine-ram
- image: cimg/postgres:10.20
environment:
- POSTGRES_USER=testuser
- POSTGRES_PASSWORD=testpass
Expand All @@ -37,3 +38,5 @@ jobs:

- ruby/rubocop-check
- ruby/rspec-test
- store_artifacts:
path: ./log/
11 changes: 11 additions & 0 deletions .github/workflows/dependabot-auto-approve-and-merge.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,11 @@
name: Dependabot auto-approve and auto-merge
on: pull_request

permissions:
contents: write
pull-requests: write

jobs:
dependabot-workflow:
uses: 38degrees/github-workflows/.github/workflows/dependabot-auto-approve-and-merge.yml@main

4 changes: 3 additions & 1 deletion .rubocop.yml
Original file line number Diff line number Diff line change
@@ -1,3 +1,5 @@
inherit_from: .rubocop_todo.yml

require:
- rubocop-performance
- rubocop-rails
Expand Down Expand Up @@ -33,7 +35,7 @@ Metrics/BlockLength:
# This set of tests use IP addresses for good reasons
Style/IpAddresses:
Exclude:
- spec/features/ip_restrictions_spec.rb
- spec/requests/ip_restrictions_spec.rb

# This might be worth enabling at some point?
Bundler/GemVersion:
Expand Down
30 changes: 30 additions & 0 deletions .rubocop_todo.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,30 @@
# This configuration was generated by
# `rubocop --auto-gen-config`
# on 2023-03-06 15:31:07 UTC using RuboCop version 1.47.0.
# The point is for the user to remove these configuration records
# one by one as the offenses are removed from the code base.
# Note that changes in the inspected code, or installation of new
# versions of RuboCop, may require this file to be generated again.

# Offense count: 6
Capybara/SpecificMatcher:
Exclude:
- 'spec/features/user_views_items_spec.rb'
- 'spec/requests/ip_restrictions_spec.rb'

# Offense count: 1
# Configuration parameters: EnforcedStyle.
# SupportedStyles: slashes, arguments
Rails/FilePath:
Exclude:
- 'spec/rails_helper.rb'

# Offense count: 3
Rails/I18nLocaleTexts:
Exclude:
- 'app/controllers/items_controller.rb'

# Offense count: 1
Style/TopLevelMethodDefinition:
Exclude:
- 'spec/support/capybara.rb'
1 change: 0 additions & 1 deletion .ruby-version

This file was deleted.

35 changes: 22 additions & 13 deletions Gemfile
Original file line number Diff line number Diff line change
@@ -1,38 +1,44 @@
ruby "3.3.5"

source 'https://rubygems.org' do
gem 'rails', '~> 6.0.3'
gem 'rails', '~> 6.1.7'

# Use postgres as the database for Active Record
gem 'pg'
# Use Puma as the app server
gem 'puma', '~> 5.6'
# Use SCSS for stylesheets
gem 'sass-rails', '~> 6.0'
gem 'sass-rails'
# Use Uglifier as compressor for JavaScript assets
gem 'uglifier', '>= 1.3.0'
gem 'uglifier'
# Use CoffeeScript for .coffee assets and views
gem 'coffee-rails', '~> 5.0'
gem 'coffee-rails'

# Use jquery as the JavaScript library
gem 'jquery-rails'
# Turbolinks makes navigating your web application faster. Read more: https://github.com/turbolinks/turbolinks
gem 'turbolinks', '~> 5'
gem 'turbolinks'
# Build JSON APIs with ease. Read more: https://github.com/rails/jbuilder
gem 'jbuilder', '~> 2.10'
gem 'jbuilder'
# Use Redis adapter to run Action Cable in production
# gem 'redis', '~> 3.0'
# Use ActiveModel has_secure_password
# gem 'bcrypt', '~> 3.1.7'

# Authenticate via Google OAuth
gem 'omniauth', '~> 1.9.1'
gem 'omniauth', '~> 2.0'
gem 'omniauth-google-oauth2'
gem 'omniauth-rails_csrf_protection'
gem 'repost'

# Store files on Amazon S3
gem 'aws-sdk-s3'
gem 'paperclip', '~> 6.1.0'
gem 'paperclip-meta'

# Paperclip is no longer maintained and isn't compatible with Ruby 3.
# We switched to kt-paperclip. Sadly we use paperclip-meta for width and height
# which is tied to the original paperclip. The author refused the PR that fixes this
# so we're now using a version that someone else has fixed!
gem "kt-paperclip", '>= 7.0.1'
gem 'paperclip-meta', git: 'https://github.com/GoodMeasuresLLC/paperclip-meta'
# Add tag features
gem 'acts-as-taggable-on'

Expand All @@ -42,6 +48,10 @@ source 'https://rubygems.org' do
# New Relic monitoring
gem 'newrelic_rpm'

# Error reporting
gem 'sentry-rails'
gem 'sentry-ruby'

# https://github.com/advisories/GHSA-vr8q-g5c7-m54m
gem "nokogiri", ">= 1.11.0.rc4"

Expand All @@ -51,11 +61,11 @@ source 'https://rubygems.org' do
gem 'bundler-audit', require: false
gem 'capybara'
gem 'pry-rails'
gem 'rspec-rails', '~> 4.0'
gem 'rspec-rails'
end

group :development do
gem 'listen', '~> 3.2.1'
gem 'listen'
gem 'rails-erd'
gem 'rubocop', require: false
gem 'rubocop-performance', require: false
Expand All @@ -70,6 +80,5 @@ source 'https://rubygems.org' do
gem 'rspec'
gem 'rspec_junit_formatter'
gem 'selenium-webdriver'
gem 'webdrivers', '~> 4.4'
end
end
Loading