decidim-api 0.28.3 → 0.28.5

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 421212a1da0881514ffec823ebe525130b31d5e3c8e94d9d56463ad54f7081f3
-  data.tar.gz: 593001df947aebcb777d99a65fe492e1ec7269cfd3cfaa79e4c489ed1699988e
+  metadata.gz: '0487271bae8055773c103959c1ff43ce4e71c40912ed2d4bb66242d51bfecc68'
+  data.tar.gz: ab52b494b56688ed26b84aca9489cbbcf88d1264116f38d3947396ecd2f60bfc
 SHA512:
-  metadata.gz: bc2599a9cb051033e289d89541c00e7ce3d795314334001ab4d0839a533a952a825a9c69b7e3a953459d75f77360468a9715c60713365886d64bafd31b752c57
-  data.tar.gz: e0e83a46ffb0a89c5f2942f6be8fb8ef5e55354361405b97e240ebc34e822fb559f2320d1b2ecb020d07b3c8d456cb1cfdb3c231515b7aeeb087cfa10799d01a
+  metadata.gz: 6e3cbbdf893f3357e211c9d7a7c0866330e9fc49e3a39e8c94b1066c8e6a0659aa93a08bad7d3cf5e194096bfc7a714d06d5cc453dc815fa5ce06fc727ee4030
+  data.tar.gz: 2b4a3b7e195512b4869b81e23c08280cd0af282556bd81f687f255637bee91644eeea374726a462a1c449618fe2b31aef249398ee3a736a9e4a652f88a2d3879

data/decidim-api.gemspec

@@ -10,7 +10,7 @@ Gem::Specification.new do |s|
   s.version = Decidim::Api.version
   s.authors = ["Josep Jaume Rey Peroy", "Marc Riera Casals", "Oriol Gual Oliva"]
   s.email = ["josepjaume@gmail.com", "mrc2407@gmail.com", "oriolgual@gmail.com"]
-  s.license = "AGPL-3.0"
+  s.license = "AGPL-3.0-or-later"
   s.homepage = "https://decidim.org"
   s.metadata = {
     "bug_tracker_uri" => "https://github.com/decidim/decidim/issues",
@@ -39,6 +39,7 @@ Gem::Specification.new do |s|
   s.add_dependency "graphql-docs", "~> 3.0.1"
   s.add_dependency "rack-cors", "~> 1.0"
 
+  s.add_development_dependency "decidim-assemblies", Decidim::Api.version
   s.add_development_dependency "decidim-comments", Decidim::Api.version
   s.add_development_dependency "decidim-dev", Decidim::Api.version
   s.add_development_dependency "decidim-participatory_processes", Decidim::Api.version

data/lib/decidim/api/test/component_context.rb

@@ -41,3 +41,438 @@ shared_context "with a graphql decidim component" do
     )
   end
 end
+
+shared_examples "with resource visibility" do
+  let(:process_space_factory) { :participatory_process }
+  let(:space_type) { "participatoryProcess" }
+
+  shared_examples "graphQL visible resource" do
+    it "is visible" do
+      expect(response[space_type]["components"].first[lookout_key]).to eq(query_result)
+    end
+  end
+
+  shared_examples "graphQL hidden space" do
+    it "should not be visible" do
+      expect(response[space_type]).to be_nil
+    end
+  end
+
+  shared_examples "graphQL hidden component" do
+    it "should not be visible" do
+      expect(response[space_type]["components"].first).to be_nil
+    end
+  end
+
+  shared_examples "graphQL resource visible for admin" do
+    context "when the user is admin" do
+      let!(:current_user) { create(:user, :admin, :confirmed, organization: current_organization) }
+
+      it_behaves_like "graphQL visible resource"
+    end
+  end
+
+  shared_examples "graphQL space hidden to visitor" do
+    context "when user is visitor" do
+      let!(:current_user) { nil }
+      it_behaves_like "graphQL hidden space"
+    end
+  end
+
+  context "when space is published" do
+    let!(:participatory_process) { create(process_space_factory, :published, :with_steps, organization: current_organization) }
+
+    context "when component is published" do
+      let!(:current_component) { create(component_factory, :published, participatory_space: participatory_process) }
+
+      it_behaves_like "graphQL resource visible for admin"
+
+      context "when the user is space admin" do
+        let!(:current_user) { create(:user, :confirmed, organization: current_organization) }
+        let!(:role) { create(:participatory_process_user_role, participatory_process:, user: current_user, role: "admin") }
+        it_behaves_like "graphQL visible resource"
+      end
+
+      context "when the user is space collaborator" do
+        let!(:current_user) { create(:user, :confirmed, organization: current_organization) }
+        let!(:role) { create(:participatory_process_user_role, participatory_process:, user: current_user, role: "collaborator") }
+        it_behaves_like "graphQL visible resource"
+      end
+
+      context "when the user is space moderator" do
+        let!(:current_user) { create(:user, :confirmed, organization: current_organization) }
+        let!(:role) { create(:participatory_process_user_role, participatory_process:, user: current_user, role: "moderator") }
+        it_behaves_like "graphQL visible resource"
+      end
+
+      context "when the user is space valuator" do
+        let!(:current_user) { create(:user, :confirmed, organization: current_organization) }
+        let!(:role) { create(:participatory_process_user_role, participatory_process:, user: current_user, role: "valuator") }
+        it_behaves_like "graphQL visible resource"
+      end
+
+      context "when user is visitor" do
+        let!(:current_user) { nil }
+        it_behaves_like "graphQL visible resource"
+      end
+
+      context "when user is member" do
+        let!(:current_user) { create(:user, :confirmed, organization: current_organization) }
+        let!(:participatory_space_private_user) { create(:participatory_space_private_user, user: current_user, privatable_to: participatory_process) }
+        it_behaves_like "graphQL visible resource"
+      end
+
+      context "when user is member" do
+        let!(:current_user) { create(:user, :confirmed, organization: current_organization) }
+        let!(:participatory_space_private_user) { create(:participatory_space_private_user, user: current_user, privatable_to: participatory_process) }
+        it_behaves_like "graphQL visible resource"
+      end
+
+      context "when user is normal user" do
+        let!(:current_user) { create(:user, :confirmed, organization: current_organization) }
+        it_behaves_like "graphQL visible resource"
+      end
+    end
+
+    context "when component is not published" do
+      let!(:current_component) { create(component_factory, :unpublished, participatory_space: participatory_process) }
+
+      it_behaves_like "graphQL resource visible for admin"
+
+      context "when the user is space admin" do
+        let!(:current_user) { create(:user, :confirmed, organization: current_organization) }
+        let!(:role) { create(:participatory_process_user_role, participatory_process:, user: current_user, role: "admin") }
+        it_behaves_like "graphQL visible resource"
+      end
+
+      context "when the user is space collaborator" do
+        let!(:current_user) { create(:user, :confirmed, organization: current_organization) }
+        let!(:role) { create(:participatory_process_user_role, participatory_process:, user: current_user, role: "collaborator") }
+        it_behaves_like "graphQL hidden component"
+      end
+
+      context "when the user is space moderator" do
+        let!(:current_user) { create(:user, :confirmed, organization: current_organization) }
+        let!(:role) { create(:participatory_process_user_role, participatory_process:, user: current_user, role: "moderator") }
+        it_behaves_like "graphQL hidden component"
+      end
+
+      context "when the user is space valuator" do
+        let!(:current_user) { create(:user, :confirmed, organization: current_organization) }
+        let!(:role) { create(:participatory_process_user_role, participatory_process:, user: current_user, role: "valuator") }
+        it_behaves_like "graphQL visible resource"
+      end
+
+      context "when user is visitor" do
+        let!(:current_user) { nil }
+
+        it_behaves_like "graphQL hidden component"
+      end
+
+      context "when user is normal user" do
+        let!(:current_user) { create(:user, :confirmed, organization: current_organization) }
+        it_behaves_like "graphQL hidden component"
+      end
+
+      context "when user is member" do
+        let!(:current_user) { create(:user, :confirmed, organization: current_organization) }
+        let!(:participatory_space_private_user) { create(:participatory_space_private_user, user: current_user, privatable_to: participatory_process) }
+        it_behaves_like "graphQL hidden component"
+      end
+    end
+  end
+
+  context "when space is published, private and transparent" do
+    let(:process_space_factory) { :assembly }
+    let(:space_type) { "assembly" }
+
+    let(:participatory_process_query) do
+      %(
+      assembly(id: #{participatory_process.id}) {
+        components(filter: {type: "#{component_type}"}){
+          id
+          name {
+            translation(locale: "#{locale}")
+          }
+          weight
+          __typename
+          ...fooComponent
+        }
+        id
+      }
+    )
+    end
+    let!(:participatory_process) { create(process_space_factory, :published, :private, :transparent, organization: current_organization) }
+
+    context "when component is published" do
+      let!(:current_component) { create(component_factory, :published, participatory_space: participatory_process) }
+
+      it_behaves_like "graphQL resource visible for admin"
+
+      context "when the user is space admin" do
+        let!(:current_user) { create(:user, :confirmed, organization: current_organization) }
+        let!(:role) { create(:assembly_user_role, assembly: participatory_process, user: current_user, role: "admin") }
+        it_behaves_like "graphQL visible resource"
+      end
+
+      context "when the user is space collaborator" do
+        let!(:current_user) { create(:user, :confirmed, organization: current_organization) }
+        let!(:role) { create(:assembly_user_role, assembly: participatory_process, user: current_user, role: "collaborator") }
+        it_behaves_like "graphQL visible resource"
+      end
+
+      context "when the user is space moderator" do
+        let!(:current_user) { create(:user, :confirmed, organization: current_organization) }
+        let!(:role) { create(:assembly_user_role, assembly: participatory_process, user: current_user, role: "moderator") }
+        it_behaves_like "graphQL visible resource"
+      end
+
+      context "when the user is space valuator" do
+        let!(:current_user) { create(:user, :confirmed, organization: current_organization) }
+        let!(:role) { create(:assembly_user_role, assembly: participatory_process, user: current_user, role: "valuator") }
+        it_behaves_like "graphQL visible resource"
+      end
+
+      context "when user is visitor" do
+        let!(:current_user) { nil }
+        it_behaves_like "graphQL visible resource"
+      end
+
+      context "when user is member" do
+        let!(:current_user) { create(:user, :confirmed, organization: current_organization) }
+        let!(:participatory_space_private_user) { create(:assembly_private_user, user: current_user, privatable_to: participatory_process) }
+        it_behaves_like "graphQL visible resource"
+      end
+
+      context "when user is normal user" do
+        let!(:current_user) { create(:user, :confirmed, organization: current_organization) }
+        it_behaves_like "graphQL visible resource"
+      end
+    end
+
+    context "when component is not published" do
+      let!(:current_component) { create(component_factory, :unpublished, participatory_space: participatory_process) }
+
+      it_behaves_like "graphQL resource visible for admin"
+
+      context "when the user is space admin" do
+        let!(:current_user) { create(:user, :confirmed, organization: current_organization) }
+        let!(:role) { create(:assembly_user_role, assembly: participatory_process, user: current_user, role: "admin") }
+        it_behaves_like "graphQL visible resource"
+      end
+
+      context "when the user is space collaborator" do
+        let!(:current_user) { create(:user, :confirmed, organization: current_organization) }
+        let!(:role) { create(:assembly_user_role, assembly: participatory_process, user: current_user, role: "collaborator") }
+        it_behaves_like "graphQL visible resource"
+      end
+
+      context "when the user is space moderator" do
+        let!(:current_user) { create(:user, :confirmed, organization: current_organization) }
+        let!(:role) { create(:assembly_user_role, assembly: participatory_process, user: current_user, role: "moderator") }
+        it_behaves_like "graphQL hidden component"
+      end
+
+      context "when the user is space valuator" do
+        let!(:current_user) { create(:user, :confirmed, organization: current_organization) }
+        let!(:role) { create(:assembly_user_role, assembly: participatory_process, user: current_user, role: "valuator") }
+        it_behaves_like "graphQL visible resource"
+      end
+
+      context "when user is visitor" do
+        let!(:current_user) { nil }
+        it_behaves_like "graphQL hidden component"
+      end
+
+      context "when user is normal user" do
+        let!(:current_user) { create(:user, :confirmed, organization: current_organization) }
+        it_behaves_like "graphQL hidden component"
+      end
+
+      context "when user is member" do
+        let!(:current_user) { create(:user, :confirmed, organization: current_organization) }
+        let!(:participatory_space_private_user) { create(:assembly_private_user, user: current_user, privatable_to: participatory_process) }
+        it_behaves_like "graphQL hidden component"
+      end
+    end
+  end
+
+  context "when space is published but private" do
+    let!(:participatory_process) { create(process_space_factory, :published, :private, :with_steps, organization: current_organization) }
+
+    context "when component is published" do
+      let!(:current_component) { create(component_factory, :published, participatory_space: participatory_process) }
+
+      it_behaves_like "graphQL resource visible for admin"
+
+      context "when the user is space admin" do
+        let!(:current_user) { create(:user, :confirmed, organization: current_organization) }
+        let!(:role) { create(:participatory_process_user_role, participatory_process:, user: current_user, role: "admin") }
+        it_behaves_like "graphQL hidden space"
+      end
+
+      context "when the user is space collaborator" do
+        let!(:current_user) { create(:user, :confirmed, organization: current_organization) }
+        let!(:role) { create(:participatory_process_user_role, participatory_process:, user: current_user, role: "collaborator") }
+        it_behaves_like "graphQL hidden space"
+      end
+
+      context "when the user is space moderator" do
+        let!(:current_user) { create(:user, :confirmed, organization: current_organization) }
+        let!(:role) { create(:participatory_process_user_role, participatory_process:, user: current_user, role: "moderator") }
+
+        it_behaves_like "graphQL hidden space"
+      end
+
+      context "when the user is space valuator" do
+        let!(:current_user) { create(:user, :confirmed, organization: current_organization) }
+        let!(:role) { create(:participatory_process_user_role, participatory_process:, user: current_user, role: "valuator") }
+        it_behaves_like "graphQL hidden space"
+      end
+
+      it_behaves_like "graphQL space hidden to visitor"
+
+      context "when user is normal user" do
+        let!(:current_user) { create(:user, :confirmed, organization: current_organization) }
+        it_behaves_like "graphQL hidden space"
+      end
+
+      context "when user is member" do
+        let!(:current_user) { create(:user, :confirmed, organization: current_organization) }
+        let!(:participatory_space_private_user) { create(:participatory_space_private_user, user: current_user, privatable_to: participatory_process) }
+        it_behaves_like "graphQL visible resource"
+      end
+    end
+
+    context "when component is not published" do
+      let!(:current_component) { create(component_factory, :unpublished, participatory_space: participatory_process) }
+
+      it_behaves_like "graphQL resource visible for admin"
+
+      context "when the user is space admin" do
+        let!(:current_user) { create(:user, :confirmed, organization: current_organization) }
+        let!(:role) { create(:participatory_process_user_role, participatory_process:, user: current_user, role: "admin") }
+        it_behaves_like "graphQL hidden space"
+      end
+
+      context "when the user is space collaborator" do
+        let!(:current_user) { create(:user, :confirmed, organization: current_organization) }
+        let!(:role) { create(:participatory_process_user_role, participatory_process:, user: current_user, role: "collaborator") }
+        it_behaves_like "graphQL hidden space"
+      end
+
+      context "when the user is space moderator" do
+        let!(:current_user) { create(:user, :confirmed, organization: current_organization) }
+        let!(:role) { create(:participatory_process_user_role, participatory_process:, user: current_user, role: "moderator") }
+        it_behaves_like "graphQL hidden space"
+      end
+
+      context "when the user is space valuator" do
+        let!(:current_user) { create(:user, :confirmed, organization: current_organization) }
+        let!(:role) { create(:participatory_process_user_role, participatory_process:, user: current_user, role: "valuator") }
+        it_behaves_like "graphQL hidden space"
+      end
+      it_behaves_like "graphQL space hidden to visitor"
+
+      context "when user is member" do
+        let!(:current_user) { create(:user, :confirmed, organization: current_organization) }
+        let!(:participatory_space_private_user) { create(:participatory_space_private_user, user: current_user, privatable_to: participatory_process) }
+        it_behaves_like "graphQL hidden component"
+      end
+      context "when user is normal user" do
+        let!(:current_user) { create(:user, :confirmed, organization: current_organization) }
+        it_behaves_like "graphQL hidden space"
+      end
+    end
+  end
+
+  context "when space is unpublished" do
+    let(:participatory_process) { create(process_space_factory, :unpublished, :with_steps, organization: current_organization) }
+
+    context "when component is published" do
+      let!(:current_component) { create(component_factory, :published, participatory_space: participatory_process) }
+
+      it_behaves_like "graphQL resource visible for admin"
+
+      context "when the user is space admin" do
+        let!(:current_user) { create(:user, :confirmed, organization: current_organization) }
+        let!(:role) { create(:participatory_process_user_role, participatory_process:, user: current_user, role: "admin") }
+        it_behaves_like "graphQL hidden space"
+      end
+
+      context "when the user is space collaborator" do
+        let!(:current_user) { create(:user, :confirmed, organization: current_organization) }
+        let!(:role) { create(:participatory_process_user_role, participatory_process:, user: current_user, role: "collaborator") }
+        it_behaves_like "graphQL hidden space"
+      end
+
+      context "when the user is space moderator" do
+        let!(:current_user) { create(:user, :confirmed, organization: current_organization) }
+        let!(:role) { create(:participatory_process_user_role, participatory_process:, user: current_user, role: "moderator") }
+        it_behaves_like "graphQL hidden space"
+      end
+
+      context "when the user is space valuator" do
+        let!(:current_user) { create(:user, :confirmed, organization: current_organization) }
+        let!(:role) { create(:participatory_process_user_role, participatory_process:, user: current_user, role: "valuator") }
+        it_behaves_like "graphQL hidden space"
+      end
+
+      it_behaves_like "graphQL space hidden to visitor"
+
+      context "when user is member" do
+        let!(:current_user) { create(:user, :confirmed, organization: current_organization) }
+        let!(:participatory_space_private_user) { create(:participatory_space_private_user, user: current_user, privatable_to: participatory_process) }
+        it_behaves_like "graphQL hidden space"
+      end
+
+      context "when user is normal user" do
+        let!(:current_user) { create(:user, :confirmed, organization: current_organization) }
+        it_behaves_like "graphQL hidden space"
+      end
+    end
+
+    context "when component is not published" do
+      let!(:current_component) { create(component_factory, :unpublished, participatory_space: participatory_process) }
+
+      it_behaves_like "graphQL resource visible for admin"
+
+      context "when the user is space admin" do
+        let!(:current_user) { create(:user, :confirmed, organization: current_organization) }
+        let!(:role) { create(:participatory_process_user_role, participatory_process:, user: current_user, role: "admin") }
+        it_behaves_like "graphQL hidden space"
+      end
+
+      context "when the user is space collaborator" do
+        let!(:current_user) { create(:user, :confirmed, organization: current_organization) }
+        let!(:role) { create(:participatory_process_user_role, participatory_process:, user: current_user, role: "collaborator") }
+        it_behaves_like "graphQL hidden space"
+      end
+
+      context "when the user is space moderator" do
+        let!(:current_user) { create(:user, :confirmed, organization: current_organization) }
+        let!(:role) { create(:participatory_process_user_role, participatory_process:, user: current_user, role: "moderator") }
+        it_behaves_like "graphQL hidden space"
+      end
+
+      context "when the user is space valuator" do
+        let!(:current_user) { create(:user, :confirmed, organization: current_organization) }
+        let!(:role) { create(:participatory_process_user_role, participatory_process:, user: current_user, role: "valuator") }
+        it_behaves_like "graphQL hidden space"
+      end
+      it_behaves_like "graphQL space hidden to visitor"
+
+      context "when user is member" do
+        let!(:current_user) { create(:user, :confirmed, organization: current_organization) }
+        let!(:participatory_space_private_user) { create(:participatory_space_private_user, user: current_user, privatable_to: participatory_process) }
+        it_behaves_like "graphQL hidden space"
+      end
+
+      context "when user is normal user" do
+        let!(:current_user) { create(:user, :confirmed, organization: current_organization) }
+
+        it_behaves_like "graphQL hidden space"
+      end
+    end
+  end
+end

data/lib/decidim/api/test/type_context.rb

@@ -2,7 +2,8 @@
 
 shared_context "with a graphql class type" do
   let!(:current_organization) { create(:organization) }
-  let!(:current_user) { create(:user, organization: current_organization) }
+  let!(:current_user) { create(:user, :confirmed, organization: current_organization) }
+  let!(:current_component) { create(:component) }
   let(:model) { OpenStruct.new({}) }
   let(:type_class) { described_class }
   let(:variables) { {} }

data/lib/decidim/api/types/base_object.rb

@@ -5,6 +5,76 @@ module Decidim
     module Types
       class BaseObject < GraphQL::Schema::Object
         field_class Types::BaseField
+
+        def self.authorized?(object, context)
+          chain = []
+
+          subject = determine_subject_name(object)
+          context[subject] = object
+
+          chain.unshift(allowed_to?(:read, :participatory_space, object, context)) if object.respond_to?(:participatory_space)
+          chain.unshift(allowed_to?(:read, :component, object, context)) if object.respond_to?(:component) && object.component.present?
+
+          super && chain.all?
+        end
+
+        def self.determine_subject_name(object)
+          object.class.name.split("::").last.underscore.to_sym
+        end
+
+        # This is a simplified adaptation of allowed_to? from NeedsPermission concern
+        # @param action [Symbol] The action performed. Most cases the action is :read
+        # @param subject [Object] The name of the subject. Ex: :participatory_space, :component, or object
+        # @param object [ActiveModel::Base] The object that is being represented.
+        # @param context [GraphQL::Query::Context] The GraphQL context
+        #
+        # @return Boolean
+        def self.allowed_to?(action, subject, object, context)
+          unless subject.is_a?(::Symbol)
+            subject = determine_subject_name(object)
+            context[subject] = object
+          end
+
+          permission_action = Decidim::PermissionAction.new(scope: :public, action:, subject:)
+
+          permission_chain(object).inject(permission_action) do |current_permission_action, permission_class|
+            permission_class.new(
+              context[:current_user],
+              current_permission_action,
+              local_context(object, context)
+            ).permissions
+          end.allowed?
+        end
+
+        # Injects into context object current_participatory_space and current_component keys as they are needed
+        #
+        # @param object [ActiveModel::Base] The object that is being represented.
+        # @param context [GraphQL::Query::Context] The GraphQL context
+        #
+        # @return Hash
+        def self.local_context(object, context)
+          context[:current_participatory_space] = object.participatory_space if object.respond_to?(:participatory_space)
+          context[:current_component] = object.component if object.respond_to?(:component) && object.component.present?
+
+          context.to_h
+        end
+
+        # Creates the permission chain arrau that contains all the permission classes required to authorize a certain resource
+        # We are using unshift as we need the Admin and base permissions to be last in the chain
+        # @param object [ActiveModel::Base] The object that is being represented.
+        #
+        # @return [Decidim::DefaultPermissions]
+        def self.permission_chain(object)
+          permissions = [
+            Decidim::Admin::Permissions,
+            Decidim::Permissions
+          ]
+
+          permissions.unshift(object.participatory_space.manifest.permissions_class) if object.respond_to?(:participatory_space)
+          permissions.unshift(object.component.manifest.permissions_class) if object.respond_to?(:component) && object.component.present?
+
+          permissions
+        end
       end
     end
   end

data/lib/decidim/api/version.rb

@@ -4,7 +4,7 @@ module Decidim
   # This holds the decidim-api version.
   module Api
     def self.version
-      "0.28.3"
+      "0.28.5"
     end
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: decidim-api
 version: !ruby/object:Gem::Version
-  version: 0.28.3
+  version: 0.28.5
 platform: ruby
 authors:
 - Josep Jaume Rey Peroy
@@ -10,7 +10,7 @@ authors:
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2024-09-10 00:00:00.000000000 Z
+date: 2025-02-12 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: commonmarker
@@ -38,14 +38,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.28.3
+        version: 0.28.5
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.28.3
+        version: 0.28.5
 - !ruby/object:Gem::Dependency
   name: graphql
   requirement: !ruby/object:Gem::Requirement
@@ -88,48 +88,62 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '1.0'
+- !ruby/object:Gem::Dependency
+  name: decidim-assemblies
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 0.28.5
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 0.28.5
 - !ruby/object:Gem::Dependency
   name: decidim-comments
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.28.3
+        version: 0.28.5
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.28.3
+        version: 0.28.5
 - !ruby/object:Gem::Dependency
   name: decidim-dev
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.28.3
+        version: 0.28.5
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.28.3
+        version: 0.28.5
 - !ruby/object:Gem::Dependency
   name: decidim-participatory_processes
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.28.3
+        version: 0.28.5
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.28.3
+        version: 0.28.5
 description: API engine for decidim
 email:
 - josepjaume@gmail.com
@@ -182,7 +196,7 @@ files:
 - lib/tasks/decidim_api_docs.rake
 homepage: https://decidim.org
 licenses:
-- AGPL-3.0
+- AGPL-3.0-or-later
 metadata:
   bug_tracker_uri: https://github.com/decidim/decidim/issues
   documentation_uri: https://docs.decidim.org/