dependabot-preview[bot]
07cc39a9d7
Bump capybara from 3.31.0 to 3.32.0 ( #7025 )
...
Bumps [capybara](https://github.com/teamcapybara/capybara ) from 3.31.0 to 3.32.0.
- [Release notes](https://github.com/teamcapybara/capybara/releases )
- [Changelog](https://github.com/teamcapybara/capybara/blob/master/History.md )
- [Commits](https://github.com/teamcapybara/capybara/compare/3.31.0...3.32.0 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-04-02 08:21:15 -04:00
Molly Struve
55fe5a40a8
Add Rack::Attack Gem to Throttle Requests, Only Search to start ( #6841 ) [deploy]
...
* throttle requests made to search endpoints
* stub elasticsearch requests in rack attack specs and disable for running specs unless tagged
* use original client IP from fastly to throttle requests to search endpoints
2020-03-30 12:09:40 -04:00
dependabot-preview[bot]
3b15516747
Bump derailed_benchmarks from 1.6.0 to 1.7.0 ( #6864 )
...
Bumps [derailed_benchmarks](https://github.com/schneems/derailed_benchmarks ) from 1.6.0 to 1.7.0.
- [Release notes](https://github.com/schneems/derailed_benchmarks/releases )
- [Changelog](https://github.com/schneems/derailed_benchmarks/blob/master/CHANGELOG.md )
- [Commits](https://github.com/schneems/derailed_benchmarks/compare/v1.6.0...v1.7.0 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-03-26 20:01:46 -04:00
dependabot-preview[bot]
7dd5a2eabf
Bump rspec-rails from 3.9.1 to 4.0.0 ( #6861 )
...
Bumps [rspec-rails](https://github.com/rspec/rspec-rails ) from 3.9.1 to 4.0.0.
- [Release notes](https://github.com/rspec/rspec-rails/releases )
- [Changelog](https://github.com/rspec/rspec-rails/blob/master/Changelog.md )
- [Commits](https://github.com/rspec/rspec-rails/compare/v3.9.1...v4.0.0 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-03-26 16:48:02 -05:00
dependabot-preview[bot]
e6c56d408b
Bump fog-aws from 3.5.2 to 3.6.2 ( #6869 )
...
Bumps [fog-aws](https://github.com/fog/fog-aws ) from 3.5.2 to 3.6.2.
- [Release notes](https://github.com/fog/fog-aws/releases )
- [Changelog](https://github.com/fog/fog-aws/blob/master/CHANGELOG.md )
- [Commits](https://github.com/fog/fog-aws/compare/v3.5.2...v3.6.2 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-03-26 13:10:32 -05:00
dependabot-preview[bot]
f58c7c3148
Bump rubocop-rails from 2.4.2 to 2.5.0 ( #6865 )
...
Bumps [rubocop-rails](https://github.com/rubocop-hq/rubocop-rails ) from 2.4.2 to 2.5.0.
- [Release notes](https://github.com/rubocop-hq/rubocop-rails/releases )
- [Changelog](https://github.com/rubocop-hq/rubocop-rails/blob/master/CHANGELOG.md )
- [Commits](https://github.com/rubocop-hq/rubocop-rails/compare/v2.4.2...v2.5.0 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-03-26 13:10:09 -05:00
dependabot-preview[bot]
0a4d33affe
Bump sidekiq from 6.0.5 to 6.0.6 ( #6867 ) [deploy]
...
Bumps [sidekiq](https://github.com/mperham/sidekiq ) from 6.0.5 to 6.0.6.
- [Release notes](https://github.com/mperham/sidekiq/releases )
- [Changelog](https://github.com/mperham/sidekiq/blob/master/Changes.md )
- [Commits](https://github.com/mperham/sidekiq/compare/v6.0.5...v6.0.6 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-03-26 10:36:52 -05:00
dependabot-preview[bot]
21d4b0229d
Bump webpacker from 5.0.0 to 5.0.1 ( #6863 )
...
Bumps [webpacker](https://github.com/rails/webpacker ) from 5.0.0 to 5.0.1.
- [Release notes](https://github.com/rails/webpacker/releases )
- [Changelog](https://github.com/rails/webpacker/blob/master/CHANGELOG.md )
- [Commits](https://github.com/rails/webpacker/compare/v5.0.0...v5.0.1 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-03-26 09:49:58 -04:00
dependabot-preview[bot]
c64e201c1c
Bump faker from 2.10.2 to 2.11.0 ( #6868 )
...
Bumps [faker](https://github.com/faker-ruby/faker ) from 2.10.2 to 2.11.0.
- [Release notes](https://github.com/faker-ruby/faker/releases )
- [Changelog](https://github.com/faker-ruby/faker/blob/master/CHANGELOG.md )
- [Commits](https://github.com/faker-ruby/faker/compare/v2.10.2...v2.11.0 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-03-26 09:49:15 -04:00
Nick Taylor
be3a1be10f
Upgrade to webpacker 5.0.0 ( #6786 )
2020-03-23 13:23:41 -04:00
Michael Kohl
bdfdc6fa34
Update ruby development dependencies ( #6774 )
2020-03-23 09:26:42 -04:00
rhymes
20fd8cdb92
Replace observers with callbacks and remove rails-observers ( #6675 )
...
* Add test for vomit reactions ping
* Remove reaction observer
* Add tests for new published article ping
* Remove reaction observer
* Remove comment observer
* Fix specs
* Remove rails-observer gem
2020-03-18 09:58:36 +01:00
Nick Taylor
ccf7e6e5bf
Upgrade to webpacker/webpack 4 and Babel 7 ( #6664 )
...
Upgraded to webpacker 4/webpack 4 and Babel 7
2020-03-17 08:20:36 -04:00
dependabot-preview[bot]
1d9c8a8e11
Bump sdoc from 1.0.0 to 1.1.0 ( #6655 ) [deploy]
2020-03-16 14:06:00 -04:00
dependabot[bot]
a0c959e02a
Bump administrate from 0.12.0 to 0.13.0 ( #6631 ) [deploy]
...
Bumps [administrate](https://github.com/thoughtbot/administrate ) from 0.12.0 to 0.13.0.
- [Release notes](https://github.com/thoughtbot/administrate/releases )
- [Changelog](https://github.com/thoughtbot/administrate/blob/master/CHANGELOG.md )
- [Commits](https://github.com/thoughtbot/administrate/compare/v0.12.0...v0.13.0 )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-03-16 12:45:44 -04:00
dependabot-preview[bot]
3282c90e6f
Bump ddtrace from 0.33.0 to 0.33.1 ( #6661 ) [deploy]
2020-03-16 12:13:07 -04:00
dependabot-preview[bot]
339696b305
Bump honeybadger from 4.5.6 to 4.6.0 ( #6656 )
2020-03-16 12:12:47 -04:00
dependabot-preview[bot]
badb179038
Bump rubyzip from 2.2.0 to 2.3.0 ( #6658 )
2020-03-16 12:10:42 -04:00
dependabot-preview[bot]
9a6579cf50
Bump aws-sdk-lambda from 1.36.0 to 1.37.0 ( #6660 ) [deploy]
2020-03-16 11:51:14 -04:00
dependabot-preview[bot]
1da77e462c
Bump recaptcha from 5.3.0 to 5.4.0 ( #6657 )
2020-03-16 11:50:53 -04:00
dependabot-preview[bot]
e2de95b94a
Bump parallel_tests from 2.31.0 to 2.32.0 ( #6659 )
2020-03-16 11:50:22 -04:00
Molly Struve
bd10c9086c
Enable Hypershield in Production Take 2 ( #6628 ) [deploy]
2020-03-16 09:10:01 -05:00
Liz Fong-Jones
239edd5204
use beeline 2.0 ( #6568 ) [deploy]
2020-03-10 12:35:15 -04:00
Mac Siri
8e4905522d
Implement KatexTag ( #6237 ) [deploy]
...
* Install Katex gem
* Add Katex stylesheet and spec
* Implement basic error handling
* Remove comment
* Create more spec
* Update approval file
Changes is due to turning off RedCarpet's superscript feature
* Add instruction to _editor_guide_text
* Serve our own KaTeX css
* Apply Rhyme's suggestion
* Limit Katex's css use
* Update spec
* Add spec
Co-authored-by: Ben Halpern <bendhalpern@gmail.com>
2020-03-09 17:58:54 -04:00
Molly Struve
3fa1287c2d
remove hypershield ( #6554 ) [deploy]
2020-03-09 13:41:20 -04:00
Molly Struve
b43df4aff7
only activate hypershield in production ( #6541 ) [deploy]
2020-03-09 11:31:51 -04:00
dependabot-preview[bot]
952930eb07
Bump ddtrace from 0.32.0 to 0.33.0 ( #6534 ) [deploy]
...
Bumps [ddtrace](https://github.com/DataDog/dd-trace-rb ) from 0.32.0 to 0.33.0.
- [Release notes](https://github.com/DataDog/dd-trace-rb/releases )
- [Changelog](https://github.com/DataDog/dd-trace-rb/blob/master/CHANGELOG.md )
- [Commits](https://github.com/DataDog/dd-trace-rb/compare/v0.32.0...v0.33.0 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-03-09 11:12:50 -04:00
Molly Struve
521cf57e63
Create Hypershield Schema to Shield Sensitive data in Production ( #6461 ) [deploy]
2020-03-09 08:54:31 -04:00
Molly Struve
699820e5e3
install Blazer for querying the database ( #6459 ) [deploy]
2020-03-05 08:07:58 -05:00
Molly Struve
02bc86fb1e
Revert 6395 dependabot/bundler/twilio ruby 5.31.5 ( #6455 )
...
* Revert "Bump twilio-ruby from 5.31.1 to 5.31.5 (#6395 )"
This reverts commit f05a351906
2020-03-04 13:13:49 -05:00
Ben Halpern
1dc1723709
Add field test gem to establish a/b testing ( #6283 ) [deploy]
...
* Initial field test spec work
* Clean up specs
* Fix codeclimage
* Cleanups
* Update names
* Rename and remove need to pass logged in status
* Leadup to prod: two experiments
* Move test logic to controller and add tests
Co-authored-by: Josh Puetz <josh@grorichpuetz.com>
2020-03-03 10:21:29 -05:00
rhymes
eb3339b747
Bump reverse_markdown to 2.0 ( #6419 )
2020-03-03 14:53:55 +01:00
dependabot-preview[bot]
239ab4022c
Bump launchy from 2.4.3 to 2.5.0 ( #6393 )
2020-03-02 12:42:00 -05:00
dependabot-preview[bot]
70939f0c38
Bump better_errors from 2.5.1 to 2.6.0 ( #6396 )
...
Bumps [better_errors](https://github.com/BetterErrors/better_errors ) from 2.5.1 to 2.6.0.
- [Release notes](https://github.com/BetterErrors/better_errors/releases )
- [Commits](https://github.com/BetterErrors/better_errors/compare/v2.5.1...v2.6.0 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-03-02 10:51:24 -05:00
dependabot-preview[bot]
af7f0b0cb9
Bump elasticsearch from 7.4.0 to 7.5.0 ( #6400 )
...
Bumps [elasticsearch](https://github.com/elasticsearch/elasticsearch-ruby ) from 7.4.0 to 7.5.0.
- [Release notes](https://github.com/elasticsearch/elasticsearch-ruby/releases )
- [Changelog](https://github.com/elastic/elasticsearch-ruby/blob/v7.5.0/CHANGELOG.md )
- [Commits](https://github.com/elasticsearch/elasticsearch-ruby/compare/v7.4.0...v7.5.0 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-03-02 10:25:08 -05:00
dependabot-preview[bot]
561af1e7f3
Bump stripe from 5.15.0 to 5.17.0 ( #6391 )
...
Bumps [stripe](https://github.com/stripe/stripe-ruby ) from 5.15.0 to 5.17.0.
- [Release notes](https://github.com/stripe/stripe-ruby/releases )
- [Changelog](https://github.com/stripe/stripe-ruby/blob/master/CHANGELOG.md )
- [Commits](https://github.com/stripe/stripe-ruby/compare/v5.15.0...v5.17.0 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-03-02 10:06:09 -05:00
rhymes
c3e7179f5b
Bump to sprockets 4.0.0 ( #6172 ) [deploy]
...
* Bump to sprocket 4.0.0
* Add manifest.js
* Link internal/layout.css
* Make it more similar to Rails 5.2 default
2020-02-24 18:16:08 -05:00
rhymes
a5588ae430
Enable strong-migrations in all environments ( #6279 ) [deploy]
...
* Enable strong-migrations in production
* Disable environment checks in initializers
* Remove misleading description
2020-02-24 11:12:49 -05:00
dependabot-preview[bot]
21234273b7
Bump ruby-prof from 1.2.0 to 1.3.0 ( #6265 )
...
Bumps [ruby-prof](https://github.com/ruby-prof/ruby-prof ) from 1.2.0 to 1.3.0.
- [Release notes](https://github.com/ruby-prof/ruby-prof/releases )
- [Changelog](https://github.com/ruby-prof/ruby-prof/blob/master/CHANGES )
- [Commits](https://github.com/ruby-prof/ruby-prof/compare/1.2.0...1.3.0 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-02-24 11:12:24 -05:00
dependabot-preview[bot]
6907aef386
Bump aws-sdk-lambda from 1.35.0 to 1.36.0 ( #6270 )
...
Bumps [aws-sdk-lambda](https://github.com/aws/aws-sdk-ruby ) from 1.35.0 to 1.36.0.
- [Release notes](https://github.com/aws/aws-sdk-ruby/releases )
- [Changelog](https://github.com/aws/aws-sdk-ruby/blob/master/gems/aws-sdk-lambda/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-ruby/compare/v1.35.0...v1.36.0 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-02-24 11:12:05 -05:00
dependabot-preview[bot]
0ed64a928e
Bump google-api-client from 0.37.0 to 0.37.1 ( #6263 )
...
Bumps [google-api-client](https://github.com/google/google-api-ruby-client ) from 0.37.0 to 0.37.1.
- [Release notes](https://github.com/google/google-api-ruby-client/releases )
- [Changelog](https://github.com/googleapis/google-api-ruby-client/blob/master/CHANGELOG.md )
- [Commits](https://github.com/google/google-api-ruby-client/compare/0.37.0...0.37.1 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-02-24 09:04:01 -05:00
dependabot-preview[bot]
9c2d33c91a
Bump algoliasearch-rails from 1.23.2 to 1.24.0 ( #6269 )
...
Bumps [algoliasearch-rails](https://github.com/algolia/algoliasearch-rails ) from 1.23.2 to 1.24.0.
- [Release notes](https://github.com/algolia/algoliasearch-rails/releases )
- [Changelog](https://github.com/algolia/algoliasearch-rails/blob/master/ChangeLog )
- [Commits](https://github.com/algolia/algoliasearch-rails/compare/1.23.2...1.24.0 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-02-24 09:03:31 -05:00
dependabot-preview[bot]
653806f359
Bump httparty from 0.17.3 to 0.18.0 ( #6273 )
...
Bumps [httparty](https://github.com/jnunemaker/httparty ) from 0.17.3 to 0.18.0.
- [Release notes](https://github.com/jnunemaker/httparty/releases )
- [Changelog](https://github.com/jnunemaker/httparty/blob/master/Changelog.md )
- [Commits](https://github.com/jnunemaker/httparty/compare/v0.17.3...v0.18.0 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-02-24 09:03:13 -05:00
rhymes
168f5c597c
Bump Twitter to 7.0 and refactor TwitterBot ( #6246 ) [deploy]
2020-02-24 08:34:41 -05:00
rhymes
ca8ea0874d
Upgrade Stripe to version 5 ( #6181 )
...
* Upgrade stripe and stripe-ruby-mock
* Replace .all with .list
* Replace .delete with .detach_source and add tests
* Fix credits spec
* Refactor StripeActiveCardsController to use Payments::Customer and fix specs
* Use the right notice to show feedback to the user
2020-02-20 14:19:52 -05:00
rhymes
bc385ae6d5
Switch decorators to Rails builtin decorations - take 2 ( #6125 ) [deploy]
...
* Revert "Revert "[deploy] Switch decorators from Draper to Rails builtin decorations (#6040 )" (#6122 ) [deploy]"
This reverts commit d438349550
2020-02-19 15:30:53 -05:00
rhymes
77725ccbdc
Upgrade gems ( #6171 )
...
* Bump to brakeman 4.8.0
* Bump to carrierwave 2.1.0
* Bump to dry-struct 1.3.0
* Bump to google-api-client 0.37.0
* Bump to nokogiri 1.10.8
* Bump to rubyzip 2.2.0
* Bump to shoulda-matchers 4.3.0
* Bump to sidekiq 6.0.5
* Lock to simplecov 0.17.1
2020-02-19 09:43:38 -05:00
rhymes
a56eb8fab0
Enable CORS on public API endpoints ( #6116 ) [deploy]
...
* Enable CORS for public API
* Add specs for Articles API
* Mention CORS in the API docs
2020-02-18 10:47:07 -05:00
dependabot-preview[bot]
102dd5c4f2
Bump rouge from 3.15.0 to 3.16.0 ( #6100 )
2020-02-17 12:05:25 -05:00
dependabot-preview[bot]
492e31126e
Bump counter_culture from 2.2.4 to 2.3.0 ( #6106 )
2020-02-17 12:02:02 -05:00
