5
3
mirror of https://github.com/tildeverse/lobsters synced 2024-06-14 21:16:37 +00:00
Commit Graph

132 Commits

Author SHA1 Message Date
Peter Bhat Harkins
ece146bddd bump rails 2022-01-18 22:02:13 -06:00
Peter Bhat Harkins
e797af2cb3 rm good_migrations
My opinion has changed over the years; I don't see value in maintaining
migrations when prod must be the single source of truth on the schema. Better
to pull the schema from prod than maintain a brittle set of scripts to
reproduce it.
2022-01-04 05:47:36 -06:00
Peter Bhat Harkins
431e67aec3 bump to Rails 6.1.4 2021-10-26 20:54:45 -05:00
Peter Bhat Harkins
666a90bd9c bump puma for CVE-2019-16770 2021-05-23 23:35:54 -05:00
Hunter Madison
b8d91ca3c3 Configure Rack::Attack to block misbehaving clients 2021-05-23 23:32:18 -05:00
Peter Bhat Harkins
9341274bc4 bump oauth for CVE-2016-11086 2021-05-16 09:59:13 -05:00
Peter Bhat Harkins
5530adf3e1 bump rails 2021-05-16 09:57:44 -05:00
Peter Bhat Harkins
3b6b4eed80 bump nokogiri for GHSA-vr8q-g5c7-m54m 2021-01-16 12:19:55 -06:00
Peter Bhat Harkins
b1048fa7c9 update for cve 2020-09-10 07:42:53 -05:00
Peter Bhat Harkins
3ee84d4a47 replace bullet with mini_profiler 2020-08-27 18:48:45 -05:00
Gabriel Baldão
36677b1d06
add simplecov (#862)
100% test coverage is not a goal in and of itself.
2020-08-19 23:24:04 +00:00
Alessandro Minali
142edb664e
Remove 'dynamic_form' (#888)
Old, unmaintained dep for trivial code.
2020-08-19 13:58:43 +00:00
Peter Bhat Harkins
8f2f91ab9a bump Rails version for CVE 2020-08-18 20:38:06 -05:00
Thomas Dziedzic
89d6d84f9c
Rails 6 (#723) 2020-08-19 01:24:25 +00:00
Peter Bhat Harkins
0a5b1b1023 add stats page 2020-07-03 18:29:24 -05:00
Peter Bhat Harkins
3f41dc300b bump rack for cve 2020-06-27 08:38:33 -05:00
Thomas Dziedzic
b32bac90b4 fix keybase spec 2020-06-13 02:12:49 +00:00
Peter Bhat Harkins
6fa449cc91 bump for cve 2020-06-07 14:36:52 -05:00
Peter Bhat Harkins
77c483fe64 rm scout 2020-06-02 22:05:40 -05:00
Peter Bhat Harkins
dba2d722d6 bump puma 2020-05-31 22:22:43 -05:00
Peter Bhat Harkins
b5f3ed8de5 pin old sprockets
As is traditional for every Rails point release, the asset pipeline broke in a
new and obtuse way. In this case, by hanging puma indefinitely after serving
any page, requiring a kill -9. Pinning an old version; I'll burn 20 hours
unfucking whatever new wrong thing it's doing later.

The asset pipeline is nine years old.
2020-05-19 18:22:52 -05:00
Peter Bhat Harkins
87f2404c08 Ruby 2.7 and bundle update 2020-05-18 23:20:03 -05:00
Peter Bhat Harkins
2d374f01d0 match ruby version for byebug 2020-05-18 19:44:46 -05:00
Peter Bhat Harkins
0105930afa bump rails; rubocop cleanup 2020-05-18 19:28:26 -05:00
Peter Bhat Harkins
e2ea9decb2 noreferrer 2020-05-16 14:44:25 -05:00
Peter Bhat Harkins
f09aba2ad8 bump rails 2020-05-16 09:13:44 -05:00
Peter Bhat Harkins
789ccf0724 bump rails to 5.2.4.2 2020-05-05 21:20:17 -05:00
Peter Bhat Harkins
8a46f78cf6 bump for DOS CVE 2020-03-02 20:37:21 -06:00
Peter Bhat Harkins
5f50c79a20 PDF parsing support for fetch title
Merge #707
2020-03-02 20:34:45 -06:00
Peter Bhat Harkins
9b4382a21d bump rubocop 2020-02-10 06:50:41 -06:00
Peter Bhat Harkins
aa5b0788e7 bump to Rails 5.2.4.1 2020-02-05 08:27:32 -06:00
Peter Bhat Harkins
9d9050f57f bump for security release 2019-12-25 12:50:17 -06:00
Peter Bhat Harkins
dc4cbc9017 bump loofah dep for vuln 2019-11-11 21:57:06 -06:00
Matthew Chigira
2b6a569a3b Update Scout gem to 2.6.2 for timeline (#773) 2019-10-21 20:46:17 -07:00
Peter Bhat Harkins
21c69e29bf test transaction_retry gem for mitigating deadlocks
https://github.com/lobsters/lobsters-ansible/issues/39
2019-10-17 21:29:36 -05:00
Thomas Dziedzic
d5016368e5 bump rubocop (#753) 2019-10-06 17:01:18 -07:00
Peter Bhat Harkins
be1bec2a74 bump for vulnerability 2019-08-21 08:27:20 -05:00
Thomas Dziedzic
1310166d74 Fix 2fa (#701) 2019-07-10 05:42:43 -07:00
Thomas Dziedzic
c143fbcc8b mass bump (#694)
After this `bundle outdated` shows only 2 packages:

1. capybara which depends on ruby >= 2.4, should be bumped for the rails 6 update
2. tzinfo which is locked to 1.x by activesupport
2019-06-29 07:20:47 -07:00
Peter Bhat Harkins
1b448d916e
bump rubocop (#690) 2019-06-18 06:54:27 -07:00
Thomas Dziedzic
d0d2c9b1f9 silence warning about git vs https (#689) 2019-06-18 06:00:17 -07:00
Peter Bhat Harkins
1989831e72 rm sqlite
We haven't attempted to maintain support for it as we've increased our custom
SQL, and it's long been best practice in Rails to use the same database system
in dev as prod.
2019-06-14 09:24:12 -05:00
Thomas Dziedzic
a075903a2f use rubocop-rails
the next version of rubocop 0.72 will remove the rails cops

https://github.com/rubocop-hq/rubocop/blob/master/manual/migrate_rails_cops.md
2019-06-13 09:19:32 -05:00
Thomas Dziedzic
0289386d57 bump rubocop and rubocop-rails 2019-06-13 08:53:09 -05:00
Casey R
5288928056 add scout gem for perf study (#674)
https://lobste.rs/s/5hshvd/proposal_lobste_rs_performance_analysis

Sister sites, you probably want to just ignore/revert this commit.
2019-05-08 22:22:04 +00:00
Peter Bhat Harkins
356cd601c5 bump rails for vulns
https://weblog.rubyonrails.org/2019/3/13/Rails-4-2-5-1-5-1-6-2-have-been-released/
2019-03-13 12:53:56 -05:00
Abdullah Samman
089f3475ba Migrate deprecated form_tag and form_for to form_with
See next commit for note on running view style checks.
2018-12-09 09:51:30 -06:00
Peter Bhat Harkins
c1ef5b5b29 bundle update 2018-11-19 20:40:37 -06:00
ur5us
ff5b7373b5 Switch to database cleaner approach for cleaning up test data
While the previous approach of hand-rolling test data cleanup + setup works
it’s prone to become insufficient with regards to future test scenarios. Recent
commits 6a6da094 and later 4620a9221 highlight the issue.

Using the database cleaner gem provides a cleaner (pun intended) approach to
setup a clean room environment before and after each specific test.

Annotating specs with with `:js` or `truncate` will switch from a transaction
based cleanup strategy to a truncation based one to enable feature/request specs
for which a web server is spun up in separate process by RSpec, in other words
the process executing the spec is not the same as the process handling the
request so RSpec/DatabaseCleaner wouldn’t know when to rollback the transaction.

The downside of this approach might be that RSpec takes a few more seconds to
run all specs.
2018-11-07 07:45:02 -06:00
Peter Bhat Harkins
386a3452b9 bump dependencies for rack CVEs
https://groups.google.com/forum/#!topic/rubyonrails-security/GKsAFT924Ag
https://groups.google.com/forum/#!topic/rubyonrails-security/U_x-YkfuVTg
2018-11-05 17:15:31 -06:00