actiontext 7.0.8.1 → 7.2.2.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 7fef0f001faabf9fa1e33b44cdc8e1fc3aece932de78ca418187c8725b429f61
-  data.tar.gz: 19abfbfb01e7a37ac120906a35fb40c3b7e787a3d294a249bd50f80c1699b3c2
+  metadata.gz: ae880abbc66a8b853cce05dc41d2962a78d7ce409fb7329a58f39bb1621cf4b2
+  data.tar.gz: 0eed3fd02e87093e9520e90577fe1fd560e0ef7da9eaa7ccb1e49751d50362ba
 SHA512:
-  metadata.gz: 61848f87ea52bf7872122df668d45f986de800726cbb1dc776cee69017abdd844e895de13869a8aea00f3a80148cee7ca7b5bf98fa6c8e17dfe8f11d170d8c27
-  data.tar.gz: cc65cb531964b618ce858cf00cbcbfd4a22540ffe55f7c3302e2ade5b9a1956212ecb8675f8f203766f34c512cf6a412f7a8773ada39c9117ec5b4079e1edc88
+  metadata.gz: 9d2628de4f89b6f688536e657b1e89d058ae119b5c4f253b836cf51b96a35949bccc673e9a86f9e1dbc35013d66651534e1bb94460ce7374b88ef6575f22d5fa
+  data.tar.gz: ad9de254ed7ab1ceb550c44fbae23a594e2abbcaf3533460eb9ecb0544eda5024c6f7c7d3d576c13511bfc11ada6b69f5a75bbf3e1c31cd6afcb1d6121733977

data/CHANGELOG.md

@@ -1,166 +1,85 @@
-## Rails 7.0.8.1 (February 21, 2024) ##
-
-*   No changes.
-
-
-## Rails 7.0.8 (September 09, 2023) ##
-
-*   No changes.
-
-
-## Rails 7.0.7.2 (August 22, 2023) ##
-
-*   No changes.
-
-
-## Rails 7.0.7.1 (August 22, 2023) ##
-
-*   No changes.
-
-
-## Rails 7.0.7 (August 09, 2023) ##
-
-*   No changes.
-
-
-## Rails 7.0.6 (June 29, 2023) ##
-
-*   No changes.
-
-
-## Rails 7.0.5.1 (June 26, 2023) ##
-
-*   No changes.
-
-
-## Rails 7.0.5 (May 24, 2023) ##
-
-*   Fix `ActionText::Attachable#as_json`.
-
-    *Alexandre Ruban*
-
-
-## Rails 7.0.4.3 (March 13, 2023) ##
-
-*   No changes.
-
-
-## Rails 7.0.4.2 (January 24, 2023) ##
-
-*   No changes.
+## Rails 7.2.2.1 (December 10, 2024) ##
 
+*   Update vendored trix version to 2.1.10
 
-## Rails 7.0.4.1 (January 17, 2023) ##
+    *John Hawthorn*
 
-*   No changes.
-
-
-## Rails 7.0.4 (September 09, 2022) ##
-
-*   No changes.
-
-
-## Rails 7.0.3.1 (July 12, 2022) ##
-
-*   No changes.
-
-
-## Rails 7.0.3 (May 09, 2022) ##
-
-*   No changes.
-
-
-## Rails 7.0.2.4 (April 26, 2022) ##
-
-*   No changes.
-
-
-## Rails 7.0.2.3 (March 08, 2022) ##
 
-*   No changes.
-
-
-## Rails 7.0.2.2 (February 11, 2022) ##
+## Rails 7.2.2 (October 30, 2024) ##
 
 *   No changes.
 
 
-## Rails 7.0.2.1 (February 11, 2022) ##
+## Rails 7.2.1.2 (October 23, 2024) ##
 
 *   No changes.
 
 
-## Rails 7.0.2 (February 08, 2022) ##
-
-*   No changes.
-
+## Rails 7.2.1.1 (October 15, 2024) ##
 
-## Rails 7.0.1 (January 06, 2022) ##
+*   Avoid backtracing in plain_text_for_blockquote_node
 
-*   No changes.
+    [CVE-2024-47888]
 
+    *John Hawthorn*
 
-## Rails 7.0.0 (December 15, 2021) ##
+## Rails 7.2.1 (August 22, 2024) ##
 
-*   No changes.
+*   Strip `content` attribute if the key is present but the value is empty
 
+    *Jeremy Green*
 
-## Rails 7.0.0.rc3 (December 14, 2021) ##
 
-*   No changes.
+## Rails 7.2.0 (August 09, 2024) ##
+*   Only sanitize `content` attribute when present in attachments.
 
+    *Petrik de Heus*
 
-## Rails 7.0.0.rc2 (December 14, 2021) ##
+*   Sanitize ActionText HTML ContentAttachment in Trix edit view
+    [CVE-2024-32464]
 
-*   No changes.
+    *Aaron Patterson*, *Zack Deveau*
 
-## Rails 7.0.0.rc1 (December 06, 2021) ##
+*   Use `includes` instead of `eager_load` for `with_all_rich_text`.
 
-*   Fix an issue with how nested lists were displayed when converting to plain text
+    *Petrik de Heus*
 
-    *Matt Swanson*
+*   Delegate `ActionText::Content#deconstruct` to `Nokogiri::XML::DocumentFragment#elements`.
 
-*   Allow passing in a custom `direct_upload_url` or `blob_url_template` to `rich_text_area_tag`.
+    ```ruby
+    content = ActionText::Content.new <<~HTML
+      <h1>Hello, world</h1>
 
-    *Lucas Mansur*
+      <div>The body</div>
+    HTML
 
+    content => [h1, div]
 
-## Rails 7.0.0.alpha2 (September 15, 2021) ##
+    assert_pattern { h1 => { content: "Hello, world" } }
+    assert_pattern { div => { content: "The body" } }
+    ```
 
-*   No changes.
-
-
-## Rails 7.0.0.alpha1 (September 15, 2021) ##
-
-*   Make the Action Text + Trix JavaScript and CSS available through the asset pipeline.
-
-    *DHH*
-
-*   OpenSSL constants are now used for Digest computations.
+    *Sean Doyle*
 
-    *Dirkjan Bussink*
+*   Fix all Action Text database related models to respect
+    `ActiveRecord::Base.table_name_prefix` configuration.
 
-*   Add support for passing `form:` option to `rich_text_area_tag` and
-    `rich_text_area` helpers to specify the `<input type="hidden" form="...">`
-    value.
+    *Chedli Bourguiba*
 
-    *Sean Doyle*
+*   Compile ESM package that can be used directly in the browser as actiontext.esm.js
 
-*   Add `config.action_text.attachment_tag_name`, to specify the HTML tag that contains attachments.
+    *Matias Grunberg*
 
-    *Mark VanLandingham*
+*   Fix using actiontext.js with Sprockets.
 
-*   Expose how we render the HTML _surrounding_ rich text content as an
-    extensible `layouts/action_view/contents/_content.html.erb` template to
-    encourage user-land customizations, while retaining private API control over how
-    the rich text itself is rendered by `action_text/contents/_content.html.erb`
-    partial.
+    *Matias Grunberg*
 
-    *Sean Doyle*
+*   Upgrade Trix to 2.0.7
 
-*   Add `with_all_rich_text` method to eager load all rich text associations on a model at once.
+    *Hartley McGuire*
 
-    *Matt Swanson*, *DHH*
+*   Fix using Trix with Sprockets.
 
+    *Hartley McGuire*
 
-Please check [6-1-stable](https://github.com/rails/rails/blob/6-1-stable/actiontext/CHANGELOG.md) for previous changes.
+Please check [7-1-stable](https://github.com/rails/rails/blob/7-1-stable/actiontext/CHANGELOG.md) for previous changes.

data/MIT-LICENSE

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2020-2022 Basecamp, LLC
+Copyright (c) 37signals LLC
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

data/README.md

@@ -1,8 +1,8 @@
 # Action Text
 
-Action Text brings rich text content and editing to Rails. It includes the [Trix editor](https://trix-editor.org) that handles everything from formatting to links to quotes to lists to embedded images and galleries. The rich text content generated by the Trix editor is saved in its own RichText model that's associated with any existing Active Record model in the application. Any embedded images (or other attachments) are automatically stored using Active Storage and associated with the included RichText model.
+Action Text brings rich text content and editing to \Rails. It includes the [Trix editor](https://trix-editor.org) that handles everything from formatting to links to quotes to lists to embedded images and galleries. The rich text content generated by the Trix editor is saved in its own RichText model that's associated with any existing Active Record model in the application. Any embedded images (or other attachments) are automatically stored using Active Storage and associated with the included RichText model.
 
-You can read more about Action Text in the [Action Text Overview](https://edgeguides.rubyonrails.org/action_text_overview.html) guide.
+You can read more about Action Text in the [Action Text Overview](https://guides.rubyonrails.org/action_text_overview.html) guide.
 
 ## Development