Commit Graph
5667 Commits
Author SHA1 Message Date
James Smith d93bc396da give collection and creator caber permissions 2024-08-30 14:45:19 +01:00
James Smith 4000da163d Add test to make sure models and users have caber permissions 2024-08-30 14:45:19 +01:00
James Smith 62ff0b2f32 models can have permissions granted on them 2024-08-30 14:45:19 +01:00
James Smith 551e8e7a83 users can be granted permissions on things 2024-08-30 14:45:19 +01:00
James Smith c12a9612bb install caber and set permission types 2024-08-30 14:45:19 +01:00
James Smith 0d8733d03c add caber gem for ReBAC auth 2024-08-30 14:45:18 +01:00
James Smith 1b3499c07f Merge pull request #2586 from manyfold3d/ruby-3.3.4
Update to Ruby 3.3.4
2024-08-27 14:31:07 +01:00
James Smith 5f7061d342 update to Ruby 3.3.4 2024-08-27 14:26:40 +01:00
James Smith f764f521c6 Merge pull request #2584 from manyfold3d/latest-alpine
Upgrade to latest alpine release
2024-08-27 14:25:14 +01:00
dependabot[bot] 4f9362cebd Merge pull request #2575 from manyfold3d/dependabot/bundler/rubocop-rails-2.26.0 2024-08-27 13:21:30 +00:00
James Smith bbc7ef690d go back to latest alpine release 2024-08-27 14:17:06 +01:00
James Smith c1d60dd04f lint: rails.root path globs 2024-08-27 14:16:19 +01:00
James Smith 1e49dd3b54 Merge pull request #2519 from manyfold3d/dependabot/bundler/sqlite3-2.0.4
Bump sqlite3 from 1.7.3 to 2.0.4
2024-08-27 13:25:55 +01:00
dependabot[bot] 18629d951a Bump sqlite3 from 1.7.3 to 2.0.4
Bumps [sqlite3](https://github.com/sparklemotion/sqlite3-ruby) from 1.7.3 to 2.0.4.
- [Release notes](https://github.com/sparklemotion/sqlite3-ruby/releases)
- [Changelog](https://github.com/sparklemotion/sqlite3-ruby/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sparklemotion/sqlite3-ruby/compare/v1.7.3...v2.0.4)

---
updated-dependencies:
- dependency-name: sqlite3
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-27 12:22:31 +00:00
James Smith 441e23319f Merge pull request #2569 from manyfold3d/dependabot/bundler/rails-7.1.4
Bump rails from 7.1.3.4 to 7.1.4
2024-08-27 13:21:21 +01:00
James Smith 858b996c2e update to latest data_migrate gem for newer Rails fixes 2024-08-27 13:17:08 +01:00
dependabot[bot] 17e2ae64ef Bump rails from 7.1.3.4 to 7.1.4
Bumps [rails](https://github.com/rails/rails) from 7.1.3.4 to 7.1.4.
- [Release notes](https://github.com/rails/rails/releases)
- [Commits](https://github.com/rails/rails/compare/v7.1.3.4...v7.1.4)

---
updated-dependencies:
- dependency-name: rails
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-27 11:39:16 +00:00
James Smith aa6fcffa53 Merge pull request #2578 from manyfold3d/dependabot/bundler/acts-as-taggable-on-11.0.0
Bump acts-as-taggable-on from 10.0.0 to 11.0.0
2024-08-27 12:37:58 +01:00
dependabot[bot] 024e4ef7ac Merge pull request #2583 from manyfold3d/dependabot/bundler/pundit-2.4.0 2024-08-27 09:49:11 +00:00
dependabot[bot] 721d86adc0 Merge pull request #2582 from manyfold3d/dependabot/bundler/view_component-3.14.0 2024-08-27 09:47:52 +00:00
dependabot[bot] 5f35b6628f Bump pundit from 2.3.2 to 2.4.0
Bumps [pundit](https://github.com/varvet/pundit) from 2.3.2 to 2.4.0.
- [Changelog](https://github.com/varvet/pundit/blob/main/CHANGELOG.md)
- [Commits](https://github.com/varvet/pundit/compare/v2.3.2...v2.4.0)

---
updated-dependencies:
- dependency-name: pundit
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-27 09:45:07 +00:00
dependabot[bot] 00ad24fd67 Bump view_component from 3.13.0 to 3.14.0
Bumps [view_component](https://github.com/viewcomponent/view_component) from 3.13.0 to 3.14.0.
- [Release notes](https://github.com/viewcomponent/view_component/releases)
- [Changelog](https://github.com/ViewComponent/view_component/blob/main/docs/CHANGELOG.md)
- [Commits](https://github.com/viewcomponent/view_component/compare/v3.13.0...v3.14.0)

---
updated-dependencies:
- dependency-name: view_component
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-27 09:44:20 +00:00
dependabot[bot] b2384f4982 Merge pull request #2580 from manyfold3d/dependabot/npm_and_yarn/notus.sh/cocooned-2.3.0 2024-08-26 09:59:06 +00:00
dependabot[bot] be9badb8f1 Bump @notus.sh/cocooned from 2.2.1 to 2.3.0
Bumps [@notus.sh/cocooned](https://github.com/notus-sh/cocooned) from 2.2.1 to 2.3.0.
- [Changelog](https://github.com/notus-sh/cocooned/blob/main/CHANGELOG.md)
- [Commits](https://github.com/notus-sh/cocooned/compare/v2.2.1...v2.3.0)

---
updated-dependencies:
- dependency-name: "@notus.sh/cocooned"
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-26 09:54:28 +00:00
dependabot[bot] 6b791c5554 Merge pull request #2579 from manyfold3d/dependabot/npm_and_yarn/npm_and_yarn-07a849e1ae 2024-08-26 09:22:09 +00:00
dependabot[bot] 8353d072f5 Bump micromatch from 4.0.5 to 4.0.8 in the npm_and_yarn group
Bumps the npm_and_yarn group with 1 update: [micromatch](https://github.com/micromatch/micromatch).


Updates `micromatch` from 4.0.5 to 4.0.8
- [Release notes](https://github.com/micromatch/micromatch/releases)
- [Changelog](https://github.com/micromatch/micromatch/blob/4.0.8/CHANGELOG.md)
- [Commits](https://github.com/micromatch/micromatch/compare/4.0.5...4.0.8)

---
updated-dependencies:
- dependency-name: micromatch
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-26 09:17:11 +00:00
dependabot[bot] 90480e4e11 Merge pull request #2577 from manyfold3d/dependabot/bundler/activeadmin-3.2.4 2024-08-26 09:16:20 +00:00
dependabot[bot] 03bbdce3ac Merge pull request #2576 from manyfold3d/dependabot/bundler/cocooned-2.3.0 2024-08-26 09:16:11 +00:00
dependabot[bot] 4901787933 Bump acts-as-taggable-on from 10.0.0 to 11.0.0
Bumps [acts-as-taggable-on](https://github.com/mbleigh/acts-as-taggable-on) from 10.0.0 to 11.0.0.
- [Release notes](https://github.com/mbleigh/acts-as-taggable-on/releases)
- [Changelog](https://github.com/mbleigh/acts-as-taggable-on/blob/master/CHANGELOG.md)
- [Commits](https://github.com/mbleigh/acts-as-taggable-on/compare/v10.0.0...v11.0.0)

---
updated-dependencies:
- dependency-name: acts-as-taggable-on
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-26 09:12:15 +00:00
dependabot[bot] e0ed5ec3f3 Bump activeadmin from 3.2.3 to 3.2.4
Bumps [activeadmin](https://github.com/activeadmin/activeadmin) from 3.2.3 to 3.2.4.
- [Release notes](https://github.com/activeadmin/activeadmin/releases)
- [Changelog](https://github.com/activeadmin/activeadmin/blob/master/CHANGELOG.md)
- [Commits](https://github.com/activeadmin/activeadmin/compare/v3.2.3...v3.2.4)

---
updated-dependencies:
- dependency-name: activeadmin
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-26 09:11:55 +00:00
dependabot[bot] 273f335424 Bump cocooned from 2.2.1 to 2.3.0
Bumps [cocooned](https://github.com/notus-sh/cocooned) from 2.2.1 to 2.3.0.
- [Changelog](https://github.com/notus-sh/cocooned/blob/main/CHANGELOG.md)
- [Commits](https://github.com/notus-sh/cocooned/compare/v2.2.1...v2.3.0)

---
updated-dependencies:
- dependency-name: cocooned
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-26 09:11:29 +00:00
dependabot[bot] d053aae795 Bump rubocop-rails from 2.25.1 to 2.26.0
Bumps [rubocop-rails](https://github.com/rubocop/rubocop-rails) from 2.25.1 to 2.26.0.
- [Release notes](https://github.com/rubocop/rubocop-rails/releases)
- [Changelog](https://github.com/rubocop/rubocop-rails/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rubocop/rubocop-rails/compare/v2.25.1...v2.26.0)

---
updated-dependencies:
- dependency-name: rubocop-rails
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-26 09:11:07 +00:00
dependabot[bot] 07219d3ac6 Merge pull request #2570 from manyfold3d/dependabot/npm_and_yarn/rails/ujs-7.1.400 2024-08-23 09:24:09 +00:00
dependabot[bot] 6cc1d1921c Bump @rails/ujs from 7.1.3 to 7.1.400
Bumps [@rails/ujs](https://github.com/rails/rails) from 7.1.3 to 7.1.400.
- [Release notes](https://github.com/rails/rails/releases)
- [Commits](https://github.com/rails/rails/commits)

---
updated-dependencies:
- dependency-name: "@rails/ujs"
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-23 09:19:45 +00:00
dependabot[bot] c14709b6ea Merge pull request #2568 from manyfold3d/dependabot/bundler/brakeman-6.2.1 2024-08-23 09:07:20 +00:00
dependabot[bot] f10025c49d Bump brakeman from 6.1.2 to 6.2.1
Bumps [brakeman](https://github.com/presidentbeef/brakeman) from 6.1.2 to 6.2.1.
- [Release notes](https://github.com/presidentbeef/brakeman/releases)
- [Changelog](https://github.com/presidentbeef/brakeman/blob/main/CHANGES.md)
- [Commits](https://github.com/presidentbeef/brakeman/compare/v6.1.2...v6.2.1)

---
updated-dependencies:
- dependency-name: brakeman
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-23 09:02:47 +00:00
dependabot[bot] 211db335a5 Merge pull request #2567 from manyfold3d/dependabot/bundler/bundler-6e3bc67060 2024-08-22 21:04:29 +00:00
dependabot[bot] ccd1ed3816 Bump rexml from 3.3.5 to 3.3.6 in the bundler group
Bumps the bundler group with 1 update: [rexml](https://github.com/ruby/rexml).


Updates `rexml` from 3.3.5 to 3.3.6
- [Release notes](https://github.com/ruby/rexml/releases)
- [Changelog](https://github.com/ruby/rexml/blob/master/NEWS.md)
- [Commits](https://github.com/ruby/rexml/compare/v3.3.5...v3.3.6)

---
updated-dependencies:
- dependency-name: rexml
  dependency-type: indirect
  dependency-group: bundler
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-22 20:59:38 +00:00
James Smith a6df70bef4 Merge pull request #2565 from manyfold3d/enable-single-user-instance-federation
Allow federation on single-user instances
2024-08-22 16:57:53 +01:00
James Smith be25f94d7d allow single-user-mode federation 2024-08-22 16:51:54 +01:00
James Smith c45837c47a Merge pull request #2564 from manyfold3d/auto-create-actors
Create actor for default user if missing on create activities
v0.76.1
2024-08-22 11:44:20 +01:00
James Smith dfdf08de95 Merge pull request #2563 from manyfold3d/dependabot/github_actions/paambaati/codeclimate-action-9.0.0
Bump paambaati/codeclimate-action from 8.0.0 to 9.0.0
2024-08-22 11:39:04 +01:00
James Smith d7d50ae743 Create actor for default user if missing on create activities
resolves #2556
2024-08-22 11:38:31 +01:00
dependabot[bot] 1c220dfd6d Bump paambaati/codeclimate-action from 8.0.0 to 9.0.0
Bumps [paambaati/codeclimate-action](https://github.com/paambaati/codeclimate-action) from 8.0.0 to 9.0.0.
- [Release notes](https://github.com/paambaati/codeclimate-action/releases)
- [Changelog](https://github.com/paambaati/codeclimate-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/paambaati/codeclimate-action/compare/v8.0.0...v9.0.0)

---
updated-dependencies:
- dependency-name: paambaati/codeclimate-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-22 09:52:12 +00:00
James Smith 43e59682eb Merge pull request #2560 from AevumDecessus/federails_mariadb
Remove foreign key before dropping index
2024-08-22 10:22:16 +01:00
James Smith fc96831a22 Merge pull request #2562 from manyfold3d/include-scheme-in-federails-config
Include scheme in federails site host config
2024-08-22 10:20:30 +01:00
James Smith 614512637d include scheme in federails site host config
I think this is temporary, it feels like a bug
2024-08-22 10:16:58 +01:00
James Smith 501ac5f277 Merge pull request #2561 from manyfold3d/allow-non-ssl-healthcheck
Exclude healthcheck endpoint from forced SSL
2024-08-22 10:05:58 +01:00
James Smith f8b8651053 exclude healthcheck endpoint from forced SSL
so that proxies can use it
2024-08-22 09:54:59 +01:00
AevumDecessus 9f630596a7 Remove foreign key before dropping index
Should help resolve #2515

Re-Add foreign key after replacing index, otherwise migration
20240731165646 fails due to line 4
2024-08-21 17:04:00 -04:00