dependabot-preview[bot]
07cc39a9d7
Bump capybara from 3.31.0 to 3.32.0 ( #7025 )
...
Bumps [capybara](https://github.com/teamcapybara/capybara ) from 3.31.0 to 3.32.0.
- [Release notes](https://github.com/teamcapybara/capybara/releases )
- [Changelog](https://github.com/teamcapybara/capybara/blob/master/History.md )
- [Commits](https://github.com/teamcapybara/capybara/compare/3.31.0...3.32.0 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-04-02 08:21:15 -04:00
Molly Struve
55fe5a40a8
Add Rack::Attack Gem to Throttle Requests, Only Search to start ( #6841 ) [deploy]
...
* throttle requests made to search endpoints
* stub elasticsearch requests in rack attack specs and disable for running specs unless tagged
* use original client IP from fastly to throttle requests to search endpoints
2020-03-30 12:09:40 -04:00
dependabot-preview[bot]
3b15516747
Bump derailed_benchmarks from 1.6.0 to 1.7.0 ( #6864 )
...
Bumps [derailed_benchmarks](https://github.com/schneems/derailed_benchmarks ) from 1.6.0 to 1.7.0.
- [Release notes](https://github.com/schneems/derailed_benchmarks/releases )
- [Changelog](https://github.com/schneems/derailed_benchmarks/blob/master/CHANGELOG.md )
- [Commits](https://github.com/schneems/derailed_benchmarks/compare/v1.6.0...v1.7.0 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-03-26 20:01:46 -04:00
dependabot-preview[bot]
7dd5a2eabf
Bump rspec-rails from 3.9.1 to 4.0.0 ( #6861 )
...
Bumps [rspec-rails](https://github.com/rspec/rspec-rails ) from 3.9.1 to 4.0.0.
- [Release notes](https://github.com/rspec/rspec-rails/releases )
- [Changelog](https://github.com/rspec/rspec-rails/blob/master/Changelog.md )
- [Commits](https://github.com/rspec/rspec-rails/compare/v3.9.1...v4.0.0 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-03-26 16:48:02 -05:00
dependabot-preview[bot]
e6c56d408b
Bump fog-aws from 3.5.2 to 3.6.2 ( #6869 )
...
Bumps [fog-aws](https://github.com/fog/fog-aws ) from 3.5.2 to 3.6.2.
- [Release notes](https://github.com/fog/fog-aws/releases )
- [Changelog](https://github.com/fog/fog-aws/blob/master/CHANGELOG.md )
- [Commits](https://github.com/fog/fog-aws/compare/v3.5.2...v3.6.2 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-03-26 13:10:32 -05:00
dependabot-preview[bot]
f58c7c3148
Bump rubocop-rails from 2.4.2 to 2.5.0 ( #6865 )
...
Bumps [rubocop-rails](https://github.com/rubocop-hq/rubocop-rails ) from 2.4.2 to 2.5.0.
- [Release notes](https://github.com/rubocop-hq/rubocop-rails/releases )
- [Changelog](https://github.com/rubocop-hq/rubocop-rails/blob/master/CHANGELOG.md )
- [Commits](https://github.com/rubocop-hq/rubocop-rails/compare/v2.4.2...v2.5.0 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-03-26 13:10:09 -05:00
dependabot-preview[bot]
0a4d33affe
Bump sidekiq from 6.0.5 to 6.0.6 ( #6867 ) [deploy]
...
Bumps [sidekiq](https://github.com/mperham/sidekiq ) from 6.0.5 to 6.0.6.
- [Release notes](https://github.com/mperham/sidekiq/releases )
- [Changelog](https://github.com/mperham/sidekiq/blob/master/Changes.md )
- [Commits](https://github.com/mperham/sidekiq/compare/v6.0.5...v6.0.6 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-03-26 10:36:52 -05:00
dependabot-preview[bot]
f1a2e735c7
Bump guard from 2.16.1 to 2.16.2 ( #6866 )
...
Bumps [guard](https://github.com/guard/guard ) from 2.16.1 to 2.16.2.
- [Release notes](https://github.com/guard/guard/releases )
- [Commits](https://github.com/guard/guard/compare/v2.16.1...v2.16.2 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-03-26 10:30:24 -05:00
dependabot-preview[bot]
21d4b0229d
Bump webpacker from 5.0.0 to 5.0.1 ( #6863 )
...
Bumps [webpacker](https://github.com/rails/webpacker ) from 5.0.0 to 5.0.1.
- [Release notes](https://github.com/rails/webpacker/releases )
- [Changelog](https://github.com/rails/webpacker/blob/master/CHANGELOG.md )
- [Commits](https://github.com/rails/webpacker/compare/v5.0.0...v5.0.1 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-03-26 09:49:58 -04:00
dependabot-preview[bot]
e2fb9fcdce
Bump autoprefixer-rails from 9.7.4 to 9.7.5 ( #6862 )
...
Bumps [autoprefixer-rails](https://github.com/ai/autoprefixer-rails ) from 9.7.4 to 9.7.5.
- [Release notes](https://github.com/ai/autoprefixer-rails/releases )
- [Changelog](https://github.com/ai/autoprefixer-rails/blob/master/CHANGELOG.md )
- [Commits](https://github.com/ai/autoprefixer-rails/compare/9.7.4...9.7.5 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-03-26 09:49:35 -04:00
dependabot-preview[bot]
c64e201c1c
Bump faker from 2.10.2 to 2.11.0 ( #6868 )
...
Bumps [faker](https://github.com/faker-ruby/faker ) from 2.10.2 to 2.11.0.
- [Release notes](https://github.com/faker-ruby/faker/releases )
- [Changelog](https://github.com/faker-ruby/faker/blob/master/CHANGELOG.md )
- [Commits](https://github.com/faker-ruby/faker/compare/v2.10.2...v2.11.0 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-03-26 09:49:15 -04:00
Michael Kohl
495f797d25
Bump Octokit to 4.0.18 ( #6855 )
2020-03-26 13:47:07 +07:00
Nick Taylor
be3a1be10f
Upgrade to webpacker 5.0.0 ( #6786 )
2020-03-23 13:23:41 -04:00
Michael Kohl
bdfdc6fa34
Update ruby development dependencies ( #6774 )
2020-03-23 09:26:42 -04:00
rhymes
cfba42c07d
Upgrade Rails to 5.2.4.2 to fix CVE-2020-5267 ( #6731 ) [deploy]
2020-03-19 19:21:59 +01:00
dependabot-preview[bot]
0111eb33dd
Bump inline_svg from 1.7.0 to 1.7.1 ( #6718 )
...
Bumps [inline_svg](https://github.com/jamesmartin/inline_svg ) from 1.7.0 to 1.7.1.
- [Release notes](https://github.com/jamesmartin/inline_svg/releases )
- [Changelog](https://github.com/jamesmartin/inline_svg/blob/master/CHANGELOG.md )
- [Commits](https://github.com/jamesmartin/inline_svg/compare/v1.7.0...v1.7.1 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-03-19 13:22:57 -04:00
dependabot-preview[bot]
38ce1c5bee
Bump pg from 1.2.2 to 1.2.3 ( #6717 )
...
Bumps [pg](https://github.com/ged/ruby-pg ) from 1.2.2 to 1.2.3.
- [Release notes](https://github.com/ged/ruby-pg/releases )
- [Changelog](https://github.com/ged/ruby-pg/blob/master/History.rdoc )
- [Commits](https://github.com/ged/ruby-pg/commits )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-03-19 13:22:23 -04:00
Andy Zhao
3412883342
Upgrade recaptcha to 5.4.1 to fix production error ( #6681 ) [deploy]
...
* Use legacy 5.3.0 response param name
* Use latest recaptcha gem
* Remove additional space
* Revert verify_recaptcha workaround
2020-03-18 10:27:48 +01:00
rhymes
20fd8cdb92
Replace observers with callbacks and remove rails-observers ( #6675 )
...
* Add test for vomit reactions ping
* Remove reaction observer
* Add tests for new published article ping
* Remove reaction observer
* Remove comment observer
* Fix specs
* Remove rails-observer gem
2020-03-18 09:58:36 +01:00
Nick Taylor
ccf7e6e5bf
Upgrade to webpacker/webpack 4 and Babel 7 ( #6664 )
...
Upgraded to webpacker 4/webpack 4 and Babel 7
2020-03-17 08:20:36 -04:00
dependabot-preview[bot]
1d9c8a8e11
Bump sdoc from 1.0.0 to 1.1.0 ( #6655 ) [deploy]
2020-03-16 14:06:00 -04:00
dependabot[bot]
a0c959e02a
Bump administrate from 0.12.0 to 0.13.0 ( #6631 ) [deploy]
...
Bumps [administrate](https://github.com/thoughtbot/administrate ) from 0.12.0 to 0.13.0.
- [Release notes](https://github.com/thoughtbot/administrate/releases )
- [Changelog](https://github.com/thoughtbot/administrate/blob/master/CHANGELOG.md )
- [Commits](https://github.com/thoughtbot/administrate/compare/v0.12.0...v0.13.0 )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-03-16 12:45:44 -04:00
dependabot-preview[bot]
3282c90e6f
Bump ddtrace from 0.33.0 to 0.33.1 ( #6661 ) [deploy]
2020-03-16 12:13:07 -04:00
dependabot-preview[bot]
339696b305
Bump honeybadger from 4.5.6 to 4.6.0 ( #6656 )
2020-03-16 12:12:47 -04:00
dependabot-preview[bot]
badb179038
Bump rubyzip from 2.2.0 to 2.3.0 ( #6658 )
2020-03-16 12:10:42 -04:00
dependabot-preview[bot]
9a6579cf50
Bump aws-sdk-lambda from 1.36.0 to 1.37.0 ( #6660 ) [deploy]
2020-03-16 11:51:14 -04:00
dependabot-preview[bot]
1da77e462c
Bump recaptcha from 5.3.0 to 5.4.0 ( #6657 )
2020-03-16 11:50:53 -04:00
dependabot-preview[bot]
e2de95b94a
Bump parallel_tests from 2.31.0 to 2.32.0 ( #6659 )
2020-03-16 11:50:22 -04:00
Molly Struve
bd10c9086c
Enable Hypershield in Production Take 2 ( #6628 ) [deploy]
2020-03-16 09:10:01 -05:00
rhymes
ae1f4faf3a
Upgrade octokit and rouge ( #6623 )
...
* Bump octokit to 4.17.0
* Bump rouge to 3.17.0
2020-03-13 15:15:05 -04:00
rhymes
ea37fe8ff8
Upgrade rspec-rails, ruby-prof and webmock ( #6624 )
...
* Bump rspec-rails to 3.9.1
* Bump ruby-prof to 1.3.1
* Bump webmock to 3.8.3
2020-03-13 15:14:36 -04:00
Liz Fong-Jones
239edd5204
use beeline 2.0 ( #6568 ) [deploy]
2020-03-10 12:35:15 -04:00
Mac Siri
8e4905522d
Implement KatexTag ( #6237 ) [deploy]
...
* Install Katex gem
* Add Katex stylesheet and spec
* Implement basic error handling
* Remove comment
* Create more spec
* Update approval file
Changes is due to turning off RedCarpet's superscript feature
* Add instruction to _editor_guide_text
* Serve our own KaTeX css
* Apply Rhyme's suggestion
* Limit Katex's css use
* Update spec
* Add spec
Co-authored-by: Ben Halpern <bendhalpern@gmail.com>
2020-03-09 17:58:54 -04:00
Molly Struve
3fa1287c2d
remove hypershield ( #6554 ) [deploy]
2020-03-09 13:41:20 -04:00
dependabot-preview[bot]
952930eb07
Bump ddtrace from 0.32.0 to 0.33.0 ( #6534 ) [deploy]
...
Bumps [ddtrace](https://github.com/DataDog/dd-trace-rb ) from 0.32.0 to 0.33.0.
- [Release notes](https://github.com/DataDog/dd-trace-rb/releases )
- [Changelog](https://github.com/DataDog/dd-trace-rb/blob/master/CHANGELOG.md )
- [Commits](https://github.com/DataDog/dd-trace-rb/compare/v0.32.0...v0.33.0 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-03-09 11:12:50 -04:00
dependabot-preview[bot]
ec93710a58
Bump oj from 3.10.3 to 3.10.5 ( #6533 )
...
Bumps [oj](https://github.com/ohler55/oj ) from 3.10.3 to 3.10.5.
- [Release notes](https://github.com/ohler55/oj/releases )
- [Changelog](https://github.com/ohler55/oj/blob/develop/CHANGELOG.md )
- [Commits](https://github.com/ohler55/oj/compare/v3.10.3...v3.10.5 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-03-09 11:12:24 -04:00
Molly Struve
521cf57e63
Create Hypershield Schema to Shield Sensitive data in Production ( #6461 ) [deploy]
2020-03-09 08:54:31 -04:00
Molly Struve
699820e5e3
install Blazer for querying the database ( #6459 ) [deploy]
2020-03-05 08:07:58 -05:00
Molly Struve
02bc86fb1e
Revert 6395 dependabot/bundler/twilio ruby 5.31.5 ( #6455 )
...
* Revert "Bump twilio-ruby from 5.31.1 to 5.31.5 (#6395 )"
This reverts commit f05a351906
2020-03-04 13:13:49 -05:00
Ben Halpern
1dc1723709
Add field test gem to establish a/b testing ( #6283 ) [deploy]
...
* Initial field test spec work
* Clean up specs
* Fix codeclimage
* Cleanups
* Update names
* Rename and remove need to pass logged in status
* Leadup to prod: two experiments
* Move test logic to controller and add tests
Co-authored-by: Josh Puetz <josh@grorichpuetz.com>
2020-03-03 10:21:29 -05:00
dependabot-preview[bot]
f05a351906
Bump twilio-ruby from 5.31.1 to 5.31.5 ( #6395 )
2020-03-03 09:22:38 -05:00
rhymes
ea0c062ef7
Bump omniauth to 1.9.1 ( #6420 )
2020-03-03 09:17:15 -05:00
rhymes
eb3339b747
Bump reverse_markdown to 2.0 ( #6419 )
2020-03-03 14:53:55 +01:00
dependabot-preview[bot]
bfaa9b5f4f
Bump google-api-client from 0.37.1 to 0.37.2 ( #6394 ) [deploy]
2020-03-02 12:51:53 -05:00
dependabot-preview[bot]
239ab4022c
Bump launchy from 2.4.3 to 2.5.0 ( #6393 )
2020-03-02 12:42:00 -05:00
dependabot-preview[bot]
1c9ed1a6b3
Bump oj from 3.10.2 to 3.10.3 ( #6398 )
2020-03-02 11:19:11 -05:00
dependabot-preview[bot]
dd210e89fd
Bump nokogiri from 1.10.8 to 1.10.9 ( #6392 )
...
Bumps [nokogiri](https://github.com/sparklemotion/nokogiri ) from 1.10.8 to 1.10.9.
- [Release notes](https://github.com/sparklemotion/nokogiri/releases )
- [Changelog](https://github.com/sparklemotion/nokogiri/blob/v1.10.9/CHANGELOG.md )
- [Commits](https://github.com/sparklemotion/nokogiri/compare/v1.10.8...v1.10.9 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-03-02 11:16:08 -05:00
dependabot-preview[bot]
b3c07fd850
Bump bootsnap from 1.4.5 to 1.4.6 ( #6397 ) [deploy]
...
Bumps [bootsnap](https://github.com/Shopify/bootsnap ) from 1.4.5 to 1.4.6.
- [Release notes](https://github.com/Shopify/bootsnap/releases )
- [Changelog](https://github.com/Shopify/bootsnap/blob/master/CHANGELOG.md )
- [Commits](https://github.com/Shopify/bootsnap/compare/v1.4.5...v1.4.6 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-03-02 10:52:40 -05:00
dependabot-preview[bot]
70939f0c38
Bump better_errors from 2.5.1 to 2.6.0 ( #6396 )
...
Bumps [better_errors](https://github.com/BetterErrors/better_errors ) from 2.5.1 to 2.6.0.
- [Release notes](https://github.com/BetterErrors/better_errors/releases )
- [Commits](https://github.com/BetterErrors/better_errors/compare/v2.5.1...v2.6.0 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-03-02 10:51:24 -05:00
dependabot-preview[bot]
af7f0b0cb9
Bump elasticsearch from 7.4.0 to 7.5.0 ( #6400 )
...
Bumps [elasticsearch](https://github.com/elasticsearch/elasticsearch-ruby ) from 7.4.0 to 7.5.0.
- [Release notes](https://github.com/elasticsearch/elasticsearch-ruby/releases )
- [Changelog](https://github.com/elastic/elasticsearch-ruby/blob/v7.5.0/CHANGELOG.md )
- [Commits](https://github.com/elasticsearch/elasticsearch-ruby/compare/v7.4.0...v7.5.0 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2020-03-02 10:25:08 -05:00
