alchemy_cms 7.4.11 → 7.4.13

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 52b2d590102b1bce5b74aa747fdba21f2787e9d7e0c52683f1015b031a1c2a95
-  data.tar.gz: f6d443d39b565b16749840b5e4fd96008dc3121625dda35c00383fe1fc120547
+  metadata.gz: 27f806a1a21492486b1f8bc57ecb2d38c23064f6bf39b489426b1f916b244165
+  data.tar.gz: cdd3d19162be0606e8d8a91b00a2ee207670c8dd1065e9a886b832295316b4c8
 SHA512:
-  metadata.gz: 1a17e8da83f93f6119043c33551ff650cad6b406df35cd0d3d94c7f2d39c0b091280f88ca12b13860aa81dd951115a4d331ffa9397a621359d73c926a4f74882
-  data.tar.gz: 49f824b5f3b5ebb98b902e2fd9aac50c1f4449ae2d0b455f4dc897f4b1887edb570c6f5cbc74c6a9b4739c2f7047f4ede2bd9c826fad4bdc2d73abab8cacb208
+  metadata.gz: 8e6605933d4e61657bb83dad115f4c29ab676c6eae1df863af973deddedb4c289d8b8b45358b9880aba5ff14b8d73a89a48d9dabc65a721a760c96e3d0d4ce5f
+  data.tar.gz: 90cd853afa25f55975d091f57d7c1d4a769f2f6b2ed12a31b201f9d2038f8ab7507b8a046d8e62cce8b81820beea07a60c33c8946c6d2c93f7c1b0713281b250

data/CHANGELOG.md

@@ -1,5 +1,24 @@
 # Changelog
 
+## 7.4.13 (2026-02-17)
+
+## What's Changed
+* [7.4-stable] fix(LinkDialog): Fix anchor regex to handle hyphens in URL fragments by @alchemycms-bot[bot] in https://github.com/AlchemyCMS/alchemy_cms/pull/3684
+
+
+**Full Changelog**: https://github.com/AlchemyCMS/alchemy_cms/compare/v7.4.12...v7.4.13
+
+## 7.4.12 (2026-01-19)
+
+## What's Changed
+* Fix flaky picture descriptions spec by @tvdeyen in https://github.com/AlchemyCMS/alchemy_cms/pull/3438
+* [7.4-stable] Fix factories by @alchemycms-ci-bot in https://github.com/AlchemyCMS/alchemy_cms/pull/3462
+* [7.4-stable] fix(seeder): Use YAML.safe_load to load users.yml by @alchemycms-bot[bot] in https://github.com/AlchemyCMS/alchemy_cms/pull/3502
+* [7.4-stable] fix(resource_url_proxy): Use send over eval by @alchemycms-ci-bot in https://github.com/AlchemyCMS/alchemy_cms/pull/3564
+
+
+**Full Changelog**: https://github.com/AlchemyCMS/alchemy_cms/compare/v7.4.11...v7.4.12
+
 ## 7.4.11 (2025-10-27)
 
 - [7.4-stable] Only sanitize filenames if not nil [#3437](https://github.com/AlchemyCMS/alchemy_cms/pull/3437) ([tvdeyen](https://github.com/tvdeyen))

data/app/components/alchemy/admin/toolbar_button.rb

@@ -103,7 +103,7 @@ module Alchemy
         action_controller = url.gsub(/\A\//, "").split("/")
         [
           action_controller.last.to_sym,
-          action_controller[0..action_controller.length - 2].join("_").to_sym
+          action_controller[0..-2].join("_").to_sym
         ]
       end
     end

data/app/javascript/alchemy_admin/link_dialog.js

@@ -1,6 +1,11 @@
 import { translate } from "alchemy_admin/i18n"
 import { Dialog } from "alchemy_admin/dialog"
 
+// Matches a URL fragment (#anchor) at the end of a string.
+// Covers RFC 3986 unreserved characters (ALPHA, DIGIT, "-", ".", "_", "~")
+// which are the characters valid in URL fragments and common in DOM element IDs.
+const ANCHOR_REGEX = /#[\w.~-]+$/
+
 // Represents the link Dialog that appears, if a user clicks the link buttons
 // in TinyMCE or on an Ingredient that has links enabled (e.g. Picture)
 //
@@ -103,7 +108,7 @@ export class LinkDialog extends Dialog {
 
     if (linkType === "internal" && elementAnchor.value !== "") {
       // remove possible fragments on the url and attach the fragment (which contains the #)
-      url = url.replace(/#\w+$/, "") + elementAnchor.value
+      url = url.replace(ANCHOR_REGEX, "") + elementAnchor.value
     } else if (linkType === "external" && !url.match(Alchemy.link_url_regexp)) {
       // show validation error and prevent link creation
       this.#showValidationError()

data/lib/alchemy/resources_helper.rb

@@ -23,7 +23,7 @@ module Alchemy
 
     def resource_url_proxy
       if resource_handler.in_engine?
-        eval(resource_handler.engine_name) # rubocop:disable Security/Eval
+        public_send(resource_handler.engine_name)
       else
         main_app
       end

data/lib/alchemy/seeder.rb

@@ -68,7 +68,7 @@ module Alchemy
               "Please use `rake db:reset' if you want to rebuild your database.", :skip
           false
         else
-          users = YAML.load_file(user_seeds_file)
+          users = load_yaml_file(user_seeds_file)
           users.each do |draft|
             user = Alchemy.user_class.create!(draft)
             log "Created user: #{user.try(:email) || user.try(:login) || user.id}"
@@ -83,9 +83,15 @@ module Alchemy
       end
 
       def page_yml
-        @_page_yml ||= YAML.safe_load(
-          page_seeds_file.read,
-          permitted_classes: [Date],
+        @_page_yml ||= load_yaml_file(
+          page_seeds_file
+        )
+      end
+
+      def load_yaml_file(file)
+        YAML.safe_load_file(
+          file,
+          permitted_classes: [Date, Symbol],
           aliases: true
         )
       end

data/lib/alchemy/test_support/factories/language_factory.rb

@@ -3,7 +3,8 @@
 FactoryBot.define do
   factory :alchemy_language, class: "Alchemy::Language" do
     name { "Your Language" }
-    code { ::I18n.available_locales.first.to_s }
+    language_code { "en" }
+    locale { ::I18n.default_locale }
     default { true }
     frontpage_name { "Intro" }
     page_layout { Alchemy::Config.get(:default_language)["page_layout"] }
@@ -14,20 +15,23 @@ FactoryBot.define do
 
     trait :klingon do
       name { "Klingon" }
-      code { "kl" }
+      language_code { "kl" }
+      locale { :kl }
       frontpage_name { "Tuq" }
       default { false }
     end
 
     trait :english do
       name { "English" }
-      code { "en" }
+      language_code { "en" }
+      locale { :en }
       default { false }
     end
 
     trait :german do
       name { "Deutsch" }
-      code { "de" }
+      language_code { "de" }
+      locale { :de }
       default { false }
     end
   end

data/lib/alchemy/test_support/factories/page_factory.rb

@@ -33,6 +33,7 @@ FactoryBot.define do
         public_on { Time.current }
         public_until { nil }
       end
+      published_at { Time.current }
       after(:build) do |page, evaluator|
         page.build_public_version(
           public_on: evaluator.public_on,

data/lib/alchemy/version.rb

@@ -1,7 +1,7 @@
 # frozen_string_literal: true
 
 module Alchemy
-  VERSION = "7.4.11"
+  VERSION = "7.4.13"
 
   def self.version
     VERSION

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: alchemy_cms
 version: !ruby/object:Gem::Version
-  version: 7.4.11
+  version: 7.4.13
 platform: ruby
 authors:
 - Thomas von Deyen
@@ -1409,7 +1409,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements:
 - ImageMagick (libmagick), v6.6 or greater.
-rubygems_version: 3.6.9
+rubygems_version: 4.0.3
 specification_version: 4
 summary: A powerful, userfriendly and flexible CMS for Rails
 test_files: []