actiontext 7.0.8.7 → 7.2.2.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 24518302c3909a97a1cd36a9ab7945be3f08ba7fc64e4157c9bcbb569ea48c28
-  data.tar.gz: 5c0568c1d862c1e7f7b0039548cb529fed8d7fcd0cb161d174738c9d16afc3ec
+  metadata.gz: ae880abbc66a8b853cce05dc41d2962a78d7ce409fb7329a58f39bb1621cf4b2
+  data.tar.gz: 0eed3fd02e87093e9520e90577fe1fd560e0ef7da9eaa7ccb1e49751d50362ba
 SHA512:
-  metadata.gz: da7bdf7d7b57e394fc7cca3e4b4a4f256265f1c1cbda0e917f0ddbb9ff2e0af01d865b8db69dcf31c694b1534b5561e0fffbe71cc0349d0781cb09b378d9d303
-  data.tar.gz: fb280fe4907385d2afef2f634badca0c2064b5597fce3e45fc5b4e60b3f089f6cd8cb4ace96ae82685d2b5ec5b5024723c0257a28e2e833206dbaac412828498
+  metadata.gz: 9d2628de4f89b6f688536e657b1e89d058ae119b5c4f253b836cf51b96a35949bccc673e9a86f9e1dbc35013d66651534e1bb94460ce7374b88ef6575f22d5fa
+  data.tar.gz: ad9de254ed7ab1ceb550c44fbae23a594e2abbcaf3533460eb9ecb0544eda5024c6f7c7d3d576c13511bfc11ada6b69f5a75bbf3e1c31cd6afcb1d6121733977

data/CHANGELOG.md

@@ -1,203 +1,85 @@
-## Rails 7.0.8.7 (December 10, 2024) ##
+## Rails 7.2.2.1 (December 10, 2024) ##
 
-*   Update vendored trix version to 1.3.4
+*   Update vendored trix version to 2.1.10
 
     *John Hawthorn*
 
 
-## Rails 7.0.8.6 (October 23, 2024) ##
+## Rails 7.2.2 (October 30, 2024) ##
 
 *   No changes.
 
 
-## Rails 7.0.8.5 (October 15, 2024) ##
-
-*   Avoid backtracing in plain_text_for_blockquote_node
-
-    [CVE-2024-47888]
-
-
-## Rails 7.0.8.4 (June 04, 2024) ##
-
-*   No changes.
-
-
-## Rails 7.0.8.3 (May 17, 2024) ##
-
-*   Fix vendored trix.css to be correct file.
-
-    *Hartley McGuire*
-
-## Rails 7.0.8.2 (May 16, 2024) ##
-
-*   Upgrade Trix to 1.3.2 to fix [CVE-2024-34341](https://github.com/basecamp/trix/security/advisories/GHSA-qjqp-xr96-cj99).
-
-    *Rafael Mendonça França*
-
-
-## Rails 7.0.8.1 (February 21, 2024) ##
-
-*   No changes.
-
-
-## Rails 7.0.8 (September 09, 2023) ##
-
-*   No changes.
-
-
-## Rails 7.0.7.2 (August 22, 2023) ##
-
-*   No changes.
-
-
-## Rails 7.0.7.1 (August 22, 2023) ##
-
-*   No changes.
-
-
-## Rails 7.0.7 (August 09, 2023) ##
-
-*   No changes.
-
-
-## Rails 7.0.6 (June 29, 2023) ##
-
-*   No changes.
-
-
-## Rails 7.0.5.1 (June 26, 2023) ##
-
-*   No changes.
-
-
-## Rails 7.0.5 (May 24, 2023) ##
-
-*   Fix `ActionText::Attachable#as_json`.
-
-    *Alexandre Ruban*
-
-
-## Rails 7.0.4.3 (March 13, 2023) ##
-
-*   No changes.
-
-
-## Rails 7.0.4.2 (January 24, 2023) ##
+## Rails 7.2.1.2 (October 23, 2024) ##
 
 *   No changes.
 
 
-## Rails 7.0.4.1 (January 17, 2023) ##
+## Rails 7.2.1.1 (October 15, 2024) ##
 
-*   No changes.
-
-
-## Rails 7.0.4 (September 09, 2022) ##
-
-*   No changes.
-
-
-## Rails 7.0.3.1 (July 12, 2022) ##
-
-*   No changes.
-
-
-## Rails 7.0.3 (May 09, 2022) ##
-
-*   No changes.
-
-
-## Rails 7.0.2.4 (April 26, 2022) ##
-
-*   No changes.
-
-
-## Rails 7.0.2.3 (March 08, 2022) ##
-
-*   No changes.
-
-
-## Rails 7.0.2.2 (February 11, 2022) ##
-
-*   No changes.
-
-
-## Rails 7.0.2.1 (February 11, 2022) ##
-
-*   No changes.
-
-
-## Rails 7.0.2 (February 08, 2022) ##
-
-*   No changes.
-
-
-## Rails 7.0.1 (January 06, 2022) ##
-
-*   No changes.
-
-
-## Rails 7.0.0 (December 15, 2021) ##
-
-*   No changes.
+*   Avoid backtracing in plain_text_for_blockquote_node
 
+    [CVE-2024-47888]
 
-## Rails 7.0.0.rc3 (December 14, 2021) ##
+    *John Hawthorn*
 
-*   No changes.
+## Rails 7.2.1 (August 22, 2024) ##
 
+*   Strip `content` attribute if the key is present but the value is empty
 
-## Rails 7.0.0.rc2 (December 14, 2021) ##
+    *Jeremy Green*
 
-*   No changes.
 
-## Rails 7.0.0.rc1 (December 06, 2021) ##
+## Rails 7.2.0 (August 09, 2024) ##
+*   Only sanitize `content` attribute when present in attachments.
 
-*   Fix an issue with how nested lists were displayed when converting to plain text
+    *Petrik de Heus*
 
-    *Matt Swanson*
+*   Sanitize ActionText HTML ContentAttachment in Trix edit view
+    [CVE-2024-32464]
 
-*   Allow passing in a custom `direct_upload_url` or `blob_url_template` to `rich_text_area_tag`.
+    *Aaron Patterson*, *Zack Deveau*
 
-    *Lucas Mansur*
+*   Use `includes` instead of `eager_load` for `with_all_rich_text`.
 
+    *Petrik de Heus*
 
-## Rails 7.0.0.alpha2 (September 15, 2021) ##
+*   Delegate `ActionText::Content#deconstruct` to `Nokogiri::XML::DocumentFragment#elements`.
 
-*   No changes.
+    ```ruby
+    content = ActionText::Content.new <<~HTML
+      <h1>Hello, world</h1>
 
+      <div>The body</div>
+    HTML
 
-## Rails 7.0.0.alpha1 (September 15, 2021) ##
+    content => [h1, div]
 
-*   Make the Action Text + Trix JavaScript and CSS available through the asset pipeline.
+    assert_pattern { h1 => { content: "Hello, world" } }
+    assert_pattern { div => { content: "The body" } }
+    ```
 
-    *DHH*
-
-*   OpenSSL constants are now used for Digest computations.
+    *Sean Doyle*
 
-    *Dirkjan Bussink*
+*   Fix all Action Text database related models to respect
+    `ActiveRecord::Base.table_name_prefix` configuration.
 
-*   Add support for passing `form:` option to `rich_text_area_tag` and
-    `rich_text_area` helpers to specify the `<input type="hidden" form="...">`
-    value.
+    *Chedli Bourguiba*
 
-    *Sean Doyle*
+*   Compile ESM package that can be used directly in the browser as actiontext.esm.js
 
-*   Add `config.action_text.attachment_tag_name`, to specify the HTML tag that contains attachments.
+    *Matias Grunberg*
 
-    *Mark VanLandingham*
+*   Fix using actiontext.js with Sprockets.
 
-*   Expose how we render the HTML _surrounding_ rich text content as an
-    extensible `layouts/action_view/contents/_content.html.erb` template to
-    encourage user-land customizations, while retaining private API control over how
-    the rich text itself is rendered by `action_text/contents/_content.html.erb`
-    partial.
+    *Matias Grunberg*
 
-    *Sean Doyle*
+*   Upgrade Trix to 2.0.7
 
-*   Add `with_all_rich_text` method to eager load all rich text associations on a model at once.
+    *Hartley McGuire*
 
-    *Matt Swanson*, *DHH*
+*   Fix using Trix with Sprockets.
 
+    *Hartley McGuire*
 
-Please check [6-1-stable](https://github.com/rails/rails/blob/6-1-stable/actiontext/CHANGELOG.md) for previous changes.
+Please check [7-1-stable](https://github.com/rails/rails/blob/7-1-stable/actiontext/CHANGELOG.md) for previous changes.

data/MIT-LICENSE

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2020-2022 Basecamp, LLC
+Copyright (c) 37signals LLC
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

data/README.md

@@ -1,8 +1,8 @@
 # Action Text
 
-Action Text brings rich text content and editing to Rails. It includes the [Trix editor](https://trix-editor.org) that handles everything from formatting to links to quotes to lists to embedded images and galleries. The rich text content generated by the Trix editor is saved in its own RichText model that's associated with any existing Active Record model in the application. Any embedded images (or other attachments) are automatically stored using Active Storage and associated with the included RichText model.
+Action Text brings rich text content and editing to \Rails. It includes the [Trix editor](https://trix-editor.org) that handles everything from formatting to links to quotes to lists to embedded images and galleries. The rich text content generated by the Trix editor is saved in its own RichText model that's associated with any existing Active Record model in the application. Any embedded images (or other attachments) are automatically stored using Active Storage and associated with the included RichText model.
 
-You can read more about Action Text in the [Action Text Overview](https://edgeguides.rubyonrails.org/action_text_overview.html) guide.
+You can read more about Action Text in the [Action Text Overview](https://guides.rubyonrails.org/action_text_overview.html) guide.
 
 ## Development