2026.06.14

What's Changed

• Add ability to see cancelled requests by @stefannibrasil in #5543
• Add item filter to donations index page by @costajohnt in #5492
• fix-5567 : Update the text in the distribution update mailer ( wording change ) by @mausamp in #5572

New Contributors

• @mausamp made their first contribution in #5572

Full Changelog: 2026.06.07...2026.06.14

2026.06.07

What's Changed

• #5559: Confirmation on partner invite -- wording change by @andoq in #5562
• Clear selected resource when role type changes by @Will-thom in #5574
• Improve Availability date on annual report by @stefannibrasil in #5571
• Hide Cancel button for Fullfilled requests by @stefannibrasil in #5558
• Update text in request for distribution email by @janeewheatley in #5576
• Fix default purchase correction to use recorded location instead of org default (5536) by @cassxw in #5537
• Kits part 2 - KitItem by @dorner in #5517

Internal / Dev updates

• Fixing flaky tests by @dorner in #5555
• Refactor Requests controller by @stefannibrasil in #5563
• Fix drift with models and gemfile for linux by @awwaiid in #5589

Dependency Updates

• Bump geocoder from 1.8.5 to 1.8.6 by @dependabot[bot] in #5553
• Bump annotaterb from 4.20.0 to 4.22.0 by @dependabot[bot] in #5551
• Bump flipper-active_record from 1.4.0 to 1.4.1 by @dependabot[bot] in #5550
• Bump dry-struct from 1.8.0 to 1.8.1 by @dependabot[bot] in #5554
• Bump bootsnap from 1.20.1 to 1.24.1 by @dependabot[bot] in #5549
• Bump flipper-ui from 1.4.0 to 1.4.1 by @dependabot[bot] in #5552
• Bump bugsnag from 6.29.0 to 6.30.0 by @dependabot[bot] in #5547
• Bump strong_migrations from 2.6.0 to 2.7.0 by @dependabot[bot] in #5546
• Bump rubocop-rails from 2.33.4 to 2.34.3 by @dependabot[bot] in #5548
• Bump bootsnap from 1.24.1 to 1.24.5 by @dependabot[bot] in #5579
• Bump aws-sdk-s3 from 1.218.0 to 1.224.0 by @dependabot[bot] in #5582
• Bump jbuilder from 2.14.1 to 2.15.1 by @dependabot[bot] in #5585
• Bump newrelic_rpm from 10.2.0 to 10.5.0 by @dependabot[bot] in #5577
• Bump devise from 5.0.2 to 5.0.4 by @dependabot[bot] in #5578
• Bump devise_invitable from 2.0.11 to 2.0.12 by @dependabot[bot] in #5580
• Bump bullet from 8.1.0 to 8.1.2 by @dependabot[bot] in #5586
• Bump flipper from 1.4.1 to 1.4.2 by @dependabot[bot] in #5583
• Update ferrum double_click helper to use their API by @stefannibrasil in #5588
• Bump clockwork from 3.0.2 to 4.0.1 by @dependabot[bot] in #5581

New Contributors

• @andoq made their first contribution in #5562
• @Will-thom made their first contribution in #5574

Full Changelog: 2026.04.19...2026.06.07

2026.04.19

What's Changed

• Fix IDOR in Requests and Donations controllers (5509) by @cassxw in #5519
• Fix IDOR in Kits, BroadcastAnnouncements, and Distributions controllers by @costajohnt in #5514
• Fix flaky organization_spec.rb and donnation_summary_spec.rb specs by @stefannibrasil in #5521
• fix: use date safely within validation window in organization spec by @costajohnt in #5535
• Bump faker from 3.6.0 to 3.6.1 by @dependabot[bot] in #5526
• Bump standard from 1.52.0 to 1.54.0 by @dependabot[bot] in #5527
• Bump listen from 3.9.0 to 3.10.0 by @dependabot[bot] in #5528
• Bump terser from 1.2.6 to 1.2.7 by @dependabot[bot] in #5533
• Bump aws-sdk-s3 from 1.205.0 to 1.218.0 by @dependabot[bot] in #5534
• Bump newrelic_rpm from 9.24.0 to 10.2.0 by @dependabot[bot] in #5525
• Bump knapsack_pro from 9.2.1 to 9.2.3 by @dependabot[bot] in #5531
• Bump binding_of_caller from 1.0.1 to 2.0.0 by @dependabot[bot] in #5532
• Bump turbo-rails from 2.0.17 to 2.0.23 by @dependabot[bot] in #5529
• Bump strong_migrations from 2.5.0 to 2.5.2 by @dependabot[bot] in #5530

New Contributors

• @costajohnt made their first contribution in #5514

Full Changelog: 2026.03.22...2026.04.19

2026.03.22

What's Changed

• [Usability]: Family Details Search Inputs Position by @stefannibrasil in #5520
• Disallow saving Purchase with a quantity of 0 (5507) by @cassxw in #5510

New Contributors

• @stefannibrasil made their first contribution in #5520
• @cassxw made their first contribution in #5510

Full Changelog: 2026.03.15...2026.03.22

2026.03.15

What's Changed

• Add a new filter to distributions (and CSV) for reporting category by @awwaiid in #5512

Internal / Dev Changes

• Bump shoulda-matchers from 6.5.0 to 7.0.1 by @dependabot[bot] in #5496
• Bump pg from 1.6.2 to 1.6.3 by @dependabot[bot] in #5497
• Bump web-console from 4.2.1 to 4.3.0 by @dependabot[bot] in #5498
• Bump omniauth-google-oauth2 from 1.2.1 to 1.2.2 by @dependabot[bot] in #5501
• Bump flipper-ui from 1.3.6 to 1.4.0 by @dependabot[bot] in #5504
• Bump pry-doc from 1.6.0 to 1.7.0 by @dependabot[bot] in #5500
• Bump puma from 7.1.0 to 7.2.0 by @dependabot[bot] in #5503
• Bump devise from 5.0.0 to 5.0.2 by @dependabot[bot] in #5505
• Fix: make copyright year dynamic by @sean-dickinson in #5513
• Fix flaky tests by @dorner in #5516

Full Changelog: 2026.03.01...2026.03.15

2026.03.01

What's Changed

• refactor(tests): Fix flaky ItemizableUpdateService test by @Sergio-Mira in #5479
• Request Item → Item Request by @awwaiid in #5196
• 3652 #1: kits to items by @dorner in #5426

Full Changelog: 2026.02.15...2026.03.01

2026.02.15

What's Changed

• Fix broken call with Devise 5 by @dorner in #5494

Full Changelog: 2026.02.08...2026.02.15

2026.02.08

What's Changed

• Itemizable checks if the storage location changes, and updates inventory by @Budmin in #5481

Internal Changes

• #4941 Remove unused and broken shared 'not signed in' auth specs by @Sergio-Mira in #5480
• Bump nokogiri from 1.18.10 to 1.19.0 by @dependabot[bot] in #5482
• Bump money-rails from 2.0.0 to 3.0.0 by @dependabot[bot] in #5483
• Bump debug from 1.11.0 to 1.11.1 by @dependabot[bot] in #5484
• Bump bugsnag from 6.28.0 to 6.29.0 by @dependabot[bot] in #5487
• Bump knapsack_pro from 8.4.0 to 9.2.1 by @dependabot[bot] in #5489
• Bump faker from 3.5.3 to 3.6.0 by @dependabot[bot] in #5485
• Bump pdf-reader from 2.15.0 to 2.15.1 by @dependabot[bot] in #5486
• Bump importmap-rails from 2.2.2 to 2.2.3 by @dependabot[bot] in #5491
• Bump devise from 4.9.4 to 5.0.0 by @dependabot[bot] in #5488
• Bump brakeman from 7.1.0 to 8.0.1 by @dependabot[bot] in #5490

New Contributors

• @Sergio-Mira made their first contribution in #5480

Full Changelog: 2026.01.25...2026.02.08

2026.01.25

What's Changed

• Switch to in-memory item selection to speed up export by @awwaiid in #5478
• #4948 - Fixing the sorting issues within parts of the app - part 1 of X by @kellis5137 in #5299
• #5223 error message on nonvisible item request by @Budmin in #5405

Internal changes

• Bump simple_form from 5.3.1 to 5.4.0 by @dependabot[bot] in #5452
• #3805 partial Don't set partner_id when inviting existing users as partners. by @cielf in #5427
• Remove unused date range params from partners csv export link by @coalest in #4996
• Bump money-rails from 1.15.0 to 2.0.0 by @dependabot[bot] in #5472
• #3805 partial cleaning up partner profile by @cielf in #5424

Full Changelog: 2026.01.04...2026.01.25

2026.01.04

What's Changed

• Bump rubocop-rails from 2.25.1 to 2.33.4 by @dependabot[bot] in #5459
• Bump standard-performance from 1.8.0 to 1.9.0 by @dependabot[bot] in #5469
• Bump newrelic_rpm from 9.23.0 to 9.24.0 by @dependabot[bot] in #5467
• Bump dotenv-rails from 3.1.8 to 3.2.0 by @dependabot[bot] in #5474
• Bump bootsnap from 1.18.6 to 1.20.1 by @dependabot[bot] in #5468
• Bump matrix from 0.4.2 to 0.4.3 by @dependabot[bot] in #5471
• Bump jbuilder from 2.13.0 to 2.14.1 by @dependabot[bot] in #5470
• Bump faker from 3.5.2 to 3.5.3 by @dependabot[bot] in #5475
• Bump omniauth-rails_csrf_protection from 2.0.0 to 2.0.1 by @dependabot[bot] in #5473

Full Changelog: 2025.12.16...2026.01.04