tilde.news/Gemfile

source "https://rubygems.org"

gem "rails", "~> 7.0.3"

gem "mysql2"

# uncomment to use PostgreSQL
# gem "pg"

# rails
gem 'scenic'
gem 'scenic-mysql_adapter'
gem "activerecord-typedstore"
gem 'sprockets-rails', '2.3.3'

# js
gem "jquery-rails", "~> 4.3"
gem "json"
gem "uglifier", ">= 1.3.0"

# deployment
gem "actionpack-page_caching"
gem "exception_notification"
gem "puma", ">= 5.6.2"

# security
gem "bcrypt", "~> 3.1.2"
gem "rotp"
gem "rqrcode"

# parsing
gem "pdf-reader"
gem "nokogiri", ">= 1.13.6"
gem "htmlentities"
gem "commonmarker", ">= 0.23.4"

# perf
gem 'flamegraph'
gem 'memory_profiler'
gem 'rack-mini-profiler'
gem 'stackprof'

gem "oauth" # for twitter-posting bot
gem "mail" # for parsing incoming mail
gem "ruumba" # tests views
gem "sitemap_generator" # for better search engine indexing
gem "svg-graph", require: 'SVG/Graph/TimeSeries' # for charting, note workaround in lib/time_series.rb
gem 'transaction_retry' # mitigate https://github.com/lobsters/lobsters-ansible/issues/39
gem 'rack-attack' # rate-limiting

group :test, :development do
  gem 'capybara'
  gem 'database_cleaner'
  gem "listen"
  gem 'rspec-rails', '~> 6.0.0.rc1'
  gem "factory_bot_rails"
  gem "rubocop", "0.81", require: false
  gem "rubocop-rails", require: false
  gem "rubocop-rspec", require: false
  gem "faker"
  gem "byebug"
  gem "rb-readline"
  gem "vcr"
  gem "webmock" # used to support vcr
  gem 'simplecov', require: false
end
uglifier 2012-06-30 21:37:09 +00:00			`source "https://rubygems.org"`
initial work on conversion from php tree 2012-06-17 01:15:46 +00:00
Update to Rails 7.0 (#1100) 2022-07-06 14:01:46 +00:00			`gem "rails", "~> 7.0.3"`
initial work on conversion from php tree 2012-06-17 01:15:46 +00:00
unpin mysql2 and update I can't see a reason for us to pin a specific version of this gem. Closes #532 2018-08-15 12:36:59 +00:00			`gem "mysql2"`
back out 9ece666 removing utf8mb4 hacks, no longer needed 2013-05-26 17:32:54 +00:00
update some gems, remove some useless comments from Gemfile 2014-08-01 20:07:20 +00:00			`# uncomment to use PostgreSQL`
add postgresql support 2014-01-09 05:01:45 +00:00			`# gem "pg"`
initial work on conversion from php tree 2012-06-17 01:15:46 +00:00
cache full pages for logged-out visitors without tag filters 2018-05-10 15:09:47 +00:00			`# rails`
Show story and comment replies, tracking unread ones 2018-01-31 13:43:07 +00:00			`gem 'scenic'`
Use `scenic-mysql_adapter` over `senic-mysql` Fixes an irritating bug that kept prefixing the prod database name onto the view, which didn't work in dev. 2018-06-14 13:32:52 +00:00			`gem 'scenic-mysql_adapter'`
cache full pages for logged-out visitors without tag filters 2018-05-10 15:09:47 +00:00			`gem "activerecord-typedstore"`
pin old sprockets As is traditional for every Rails point release, the asset pipeline broke in a new and obtuse way. In this case, by hanging puma indefinitely after serving any page, requiring a kill -9. Pinning an old version; I'll burn 20 hours unfucking whatever new wrong thing it's doing later. The asset pipeline is nine years old. 2020-05-19 23:22:52 +00:00			`gem 'sprockets-rails', '2.3.3'`
Show story and comment replies, tracking unread ones 2018-01-31 13:43:07 +00:00
cache full pages for logged-out visitors without tag filters 2018-05-10 15:09:47 +00:00			`# js`
			`gem "jquery-rails", "~> 4.3"`
			`gem "json"`
			`gem "uglifier", ">= 1.3.0"`
initial work on conversion from php tree 2012-06-17 01:15:46 +00:00
cache full pages for logged-out visitors without tag filters 2018-05-10 15:09:47 +00:00			`# deployment`
			`gem "actionpack-page_caching"`
Revert skylight Closes #454 2018-04-12 20:57:31 +00:00			`gem "exception_notification"`
bump puma for cve 2022-02-15 02:00:41 +00:00			`gem "puma", ">= 5.6.2"`
Revert skylight Closes #454 2018-04-12 20:57:31 +00:00
cache full pages for logged-out visitors without tag filters 2018-05-10 15:09:47 +00:00			`# security`
rename bcrypt, to eliminate the warning that they changed the gem name 2015-03-05 06:33:09 +00:00			`gem "bcrypt", "~> 3.1.2"`
add TOTP-based two-factor authentication option 2017-02-24 18:58:42 +00:00			`gem "rotp"`
			`gem "rqrcode"`
uglifier 2012-06-30 21:37:09 +00:00
cache full pages for logged-out visitors without tag filters 2018-05-10 15:09:47 +00:00			`# parsing`
PDF parsing support for fetch title Merge #707 2020-03-03 02:34:01 +00:00			`gem "pdf-reader"`
bump for potential vulnerability 2022-06-01 11:04:06 +00:00			`gem "nokogiri", ">= 1.13.6"`
rss feeds! 2012-06-30 23:42:53 +00:00			`gem "htmlentities"`
bump commonmarker; rubocop 2022-03-04 13:57:27 +00:00			`gem "commonmarker", ">= 0.23.4"`
drop custom markdowner for rdiscount 2012-07-02 01:09:22 +00:00
replace bullet with mini_profiler 2020-08-27 00:09:40 +00:00			`# perf`
			`gem 'flamegraph'`
			`gem 'memory_profiler'`
			`gem 'rack-mini-profiler'`
			`gem 'stackprof'`

generate sitemaps Google's indexing of the site is very spotty, and this seems a lot easier than improving our builtin search engine. 2018-08-01 03:05:11 +00:00			`gem "oauth" # for twitter-posting bot`
			`gem "mail" # for parsing incoming mail`
test transaction_retry gem for mitigating deadlocks https://github.com/lobsters/lobsters-ansible/issues/39 2019-10-18 02:29:36 +00:00			`gem "ruumba" # tests views`
generate sitemaps Google's indexing of the site is very spotty, and this seems a lot easier than improving our builtin search engine. 2018-08-01 03:05:11 +00:00			`gem "sitemap_generator" # for better search engine indexing`
add stats page 2020-07-03 23:29:24 +00:00			`gem "svg-graph", require: 'SVG/Graph/TimeSeries' # for charting, note workaround in lib/time_series.rb`
test transaction_retry gem for mitigating deadlocks https://github.com/lobsters/lobsters-ansible/issues/39 2019-10-18 02:29:36 +00:00			`gem 'transaction_retry' # mitigate https://github.com/lobsters/lobsters-ansible/issues/39`
Configure Rack::Attack to block misbehaving clients 2021-05-23 23:19:14 +00:00			`gem 'rack-attack' # rate-limiting`
Migrate deprecated form_tag and form_for to form_with See next commit for note on running view style checks. 2018-12-09 15:51:30 +00:00
exception notification 2012-06-30 21:42:07 +00:00			`group :test, :development do`
high-value end-to-end happy path specs Viewing homepage, ubmitting a story, viewing a story as a logged-in or logged-out user, and submitting a comment. Also allows posting comments without JavaScript. I wanted smoke tests for the highest-traffic endpoints that tend to throw me a few hundred emails if they hit exceptions in production. 2018-04-18 15:06:09 +00:00			`gem 'capybara'`
Switch to database cleaner approach for cleaning up test data While the previous approach of hand-rolling test data cleanup + setup works it’s prone to become insufficient with regards to future test scenarios. Recent commits 6a6da094 and later 4620a9221 highlight the issue. Using the database cleaner gem provides a cleaner (pun intended) approach to setup a clean room environment before and after each specific test. Annotating specs with with `:js` or `truncate` will switch from a transaction based cleanup strategy to a truncation based one to enable feature/request specs for which a web server is spun up in separate process by RSpec, in other words the process executing the spec is not the same as the process handling the request so RSpec/DatabaseCleaner wouldn’t know when to rollback the transaction. The downside of this approach might be that RSpec takes a few more seconds to run all specs. 2018-10-21 10:24:04 +00:00			`gem 'database_cleaner'`
rails complains that this is missing 2018-06-23 01:17:02 +00:00			`gem "listen"`
Update to Rails 7.0 (#1100) 2022-07-06 14:01:46 +00:00			`gem 'rspec-rails', '~> 6.0.0.rc1'`
replace abandoned Machinist gem with FactoryBot PR #507 2018-06-14 13:34:59 +00:00			`gem "factory_bot_rails"`
bump rails; rubocop cleanup 2020-05-19 00:28:26 +00:00			`gem "rubocop", "0.81", require: false`
use rubocop-rails the next version of rubocop 0.72 will remove the rails cops https://github.com/rubocop-hq/rubocop/blob/master/manual/migrate_rails_cops.md 2019-06-13 14:19:32 +00:00			`gem "rubocop-rails", require: false`
bump factory_bot_rails also fix deprecations: ``` To automatically update from static attributes to dynamic ones, install rubocop-rspec and run: rubocop \ --require rubocop-rspec \ --only FactoryBot/AttributeDefinedStatically \ --auto-correct ``` 2018-08-16 12:54:27 +00:00			`gem "rubocop-rspec", require: false`
Add task to generate test data 2014-07-07 08:15:28 +00:00			`gem "faker"`
Ruby 2.7 and bundle update 2020-05-19 04:20:03 +00:00			`gem "byebug"`
filter by tag and domain when searching for comments 2018-06-11 23:28:11 +00:00			`gem "rb-readline"`
fix keybase spec 2020-06-11 22:30:25 +00:00			`gem "vcr"`
			`gem "webmock" # used to support vcr`
add simplecov (#862) 100% test coverage is not a goal in and of itself. 2020-08-19 23:24:04 +00:00			`gem 'simplecov', require: false`
exception notification 2012-06-30 21:42:07 +00:00			`end`