decidim-core 0.29.3 → 0.30.0.rc1

data/config/locales/zh-TW.yml

@@ -31,8 +31,6 @@ zh-TW:
         personal_url: 個人 URL
         remove_avatar: 刪除頭像
         tos_agreement: 同意服務條款
-      user_group:
-        avatar: 頭像
     models:
       decidim/attachment_created_event: 附件
       decidim/component_published_event: 啟用組件
@@ -57,7 +55,6 @@ zh-TW:
         with_participatory_space: 參與空間
       decidim/user:
         current_password: 目前密碼
-        email: 電子郵件
         name: 暱稱
         password: 密碼
         password_confirmation: 確認密碼
@@ -248,16 +245,13 @@ zh-TW:
       dismiss: 清除通知
     amendments:
       accepted:
-        error: 接受修正案時發生錯誤。
         success: 修正案已成功接受。
       amendable:
         button: 修正 %{model_name}
-        error: 在修改此資源時發生錯誤。
         promote_button: 晉升為 %{model_name}
         promote_confirm_text: 您確定要晉升此修正嗎？
         promote_help_text: 您可以提升此修正，並將其發布為獨立的 %{model_name}.
       created:
-        error: 創建修正案草稿時發生錯誤。
         success: 修正案草稿已成功創建。
       destroy_draft:
         error: 刪除修正案草稿時遇到問題。
@@ -305,7 +299,6 @@ zh-TW:
         error: 更新修正案草稿時遇到問題。
         success: 修正案草稿成功更新。
       withdraw:
-        error: 撤回修正案時發生錯誤.
         success: 修正案已成功撤回.
       wizard_step_form:
         steps:
@@ -339,10 +332,8 @@ zh-TW:
         explanation: 通過輸入以"X"結尾的證件號碼進行驗證
         fields:
           allowed_postal_codes: 允許的郵遞區號（以逗號分隔）
-          allowed_scope_id: 允許的範圍
           document_number: 文件編號
           postal_code: 郵政編碼
-          scope_id: 範圍
         name: 範例授權
       dummy_authorization_workflow:
         name: 虛擬授權工作流程
@@ -433,8 +424,6 @@ zh-TW:
             dummy_global_translatable_text: 虛擬可翻譯文字
             enable_pads_creation: 啟用平板創建
             resources_permissions_enabled: 啟用資源權限
-            scope_id: 範圍
-            scopes_enabled: 啟用範圍
           step:
             amendment_creation_enabled: 創建修正案已啟用
             amendment_promotion_enabled: 修正提案提升功能啟用
@@ -476,8 +465,6 @@ zh-TW:
         view_all: 檢視全部
       metrics:
         name: 組織指標
-      participatory_space_metrics:
-        name: 指標
       static_page:
         section:
           name: 節
@@ -496,9 +483,6 @@ zh-TW:
     core:
       actions:
         unauthorized: 您無權限執行此操作.
-      application_helper:
-        filter_category_values:
-          all: 全部
     devise:
       omniauth_registrations:
         create:
@@ -520,7 +504,6 @@ zh-TW:
           username_help: 在您的帖子中顯示的公開名稱。為確保匿名性，可以是任何名稱。
       sessions:
         new:
-          are_you_new?: 是第一次使用這個平台嗎？
           register: 建立一個帳號
           sign_in_disabled: 你可以使用外部帳戶登入。
       shared:
@@ -537,8 +520,6 @@ zh-TW:
             如果您仍然想避免收到電子報，我們完全理解您的決定。</p>
             <p>感謝您閱讀此內容！</p>
           title: 電子報通知
-        omniauth_buttons:
-          or: 或
     doorkeeper:
       authorizations:
         new:
@@ -556,23 +537,17 @@ zh-TW:
     download_your_data:
       export:
         ready: 準備就緒
-      show:
-        download_data: 下載資料
-        request_data: 請求數據
     editor_images:
       create:
         error: 上傳圖片時發生錯誤.
         success: 圖片上傳成功.
       drag_and_drop_help: 通過拖放或粘貼方式添加圖片。
     endorsement_buttons_cell:
-      already_endorsed: 不喜歡
       endorse: 喜歡！
     endorsements:
       identities:
         done: 已完成
         select_identity: 選擇身份
-    endorsers_list:
-      endorsed_by: 被喜歡...
     errors:
       internal_server_error:
         copied: 文字已複製!
@@ -735,10 +710,7 @@ zh-TW:
           notification_title: 參與者 %{name} (%{nickname}) 已被官方認證。
     export_mailer:
       download_your_data_export:
-        click_button: '點擊下方鏈接下載您的資料。<br/>檔案將可取得直到 %{date}.<br/>您需要 <a href="https://www.7-zip.org/">7-Zip</a> (Windows)，<a href="https://www.keka.io/en/">Keka</a> (MacOS)，或<a href="https://peazip.github.io">PeaZip</a> (Linux) 來打開它。密碼: %{password}'
         download: 下載
-      export:
-        ready: 請查收附上的壓縮檔，這是您的匯出資料。
       subject: 您的匯出檔案 "%{name}" 已準備就緒。
     filters:
       linked_classes:
@@ -821,7 +793,7 @@ zh-TW:
       badges:
         followers:
           conditions:
-            - 積極參與並追蹤其他人，有助於吸引其他人追蹤您。
+          - 積極參與並追蹤其他人，有助於吸引其他人追蹤您。
           description: 當您達到一定數量的追蹤者時，將獲得此徽章。%{organization_name} 是一個社交和政治網絡，藉此平台與其他人溝通，編織您的網絡。
           description_another: 這位參與者有 %{score} 位追隨者。
           description_own: "這位參與者有 %{score} 位追隨者。"
@@ -1220,12 +1192,14 @@ zh-TW:
         conversations: 對話
         followers: 追隨者
         following: 關注
-        group_admins: 管理管理員
-        group_members: 管理成員
         groups: 群組
         members: 成員
         officialized: 正式認證參與者
         send_private_message: 發送私人訊息
+      sidebar:
+        badges:
+          info: 徽章是通過在平台上執行特定活動而獲得的。
+          title: 徽章
       user:
         actions:
           create_user_group: 建立群組
@@ -1233,13 +1207,20 @@ zh-TW:
           edit_user_group: 編輯群組資料
           invite_user: 邀請參與者
           join_user_group: 申請加入群組
-          leave_user_group: 退出群組
           manage_user_group_admins: 管理管理員
           manage_user_group_users: 管理成員
           message: 訊息
-          resend_email_confirmation_instructions: 重新發送電子郵件確認指示
         confirmation_instructions_sent: 電子郵件確認指示已發送.
+        create_user_group: 建立群組
+        edit_profile: 編輯個人資料
+        edit_user_group: 編輯群組資料
         fill_in_email_to_confirm_it: 請填寫您的群組電子郵件以進行確認.
+        invite_user: 邀請參與者
+        join_user_group: 申請加入群組
+        leave_user_group: 退出群組
+        manage_user_group_admins: 管理管理員
+        manage_user_group_users: 管理成員
+        resend_email_confirmation_instructions: 重新發送電子郵件確認指示
     reported_mailer:
       hide:
         hello: 哈囉，%{name},
@@ -1261,23 +1242,13 @@ zh-TW:
         subject: 一個資源已被檢舉。
     reports:
       create:
-        error: 在建立報告時發生錯誤。請再試一次。
         success: 報告已成功建立，將由管理員進行審查。
     resource_endorsements:
       create:
         error: 在連署操作過程中出現問題。
     scopes:
       global: 全域範圍
-      picker:
-        cancel: 取消
-        change: 更改所選範圍
-        choose: 選擇
-        currently_selected: 目前選取的範圍
-        title: 選擇 %{field}
       prompt: 選擇一個範圍
-      scopes: 範圍
-      scopes_picker_input:
-        select_scope: '選擇範圍 (目前: %{current})'
     search:
       results: 搜尋結果
       results_found_for_term: '搜尋結果：%{term}（共找到 %{count} 個結果）'
@@ -1326,20 +1297,18 @@ zh-TW:
       flag_user_modal:
         already_reported: 此內容已被舉報，將由管理員進行審查。
         block: 封鎖此參與者
+        close: 關閉
+        description: 關於該使用者有什麼不適當的行為？
         does_not_belong: 包含非法活動、自殺威脅、個人資訊或其他您認為不適合在%{organization_name} 上的內容。
         hide: 隱藏所有內容
         offensive: 包含種族主義、性別歧視、辱罵、人身攻擊、死亡威脅、自殺要求或任何形式的仇恨言論
         report: 報告
         spam: 包含點閱率誘導、廣告、詐騙或自動腳本。
+        title: 舉報不適當的使用者
       floating_help:
         help: 幫助
       mentions_modal:
         remove_recipient: 移除收件人 %{name}。
-      participatory_space_filters:
-        filters:
-          areas: 區域
-          scope: 範圍
-          select_an_area: 選擇一個地區
       public_participation:
         public_participation: 公開展示我的出席情況。
       reference:
@@ -1367,9 +1336,6 @@ zh-TW:
       pages_count: 頁
       participants_count: 參與者
       users_count: 參與者
-    tags:
-      filter_results_for_category: '篩選類別為 %{resource} 的結果。'
-      filter_results_for_scope: '篩選範圍為 %{resource} 的結果。'
     translation_bar:
       help_text: "<strong>警告：</strong>內容可能會被自動翻譯，並且可能不是100％準確。"
       show_original: 顯示原始文本
@@ -1392,15 +1358,6 @@ zh-TW:
         send: 發送
       update:
         error: 訊息未送出，請稍後再試。
-    user_interests:
-      show:
-        my_interests: 我的興趣
-        no_scopes: 這個組織目前還沒有設定範圍！
-        select_your_interests: 選擇您感興趣的主題，以接收與其相關的活動，並在您的個人檔案時間軸選項卡中查看。
-        update_my_interests: 更新我的興趣
-      update:
-        error: 更新您的興趣時發生問題。
-        success: 您的興趣已成功更新。
     user_report_mailer:
       notify:
         body_1: 使用者 %{user} 已被 %{token} 舉報。
@@ -1650,7 +1607,6 @@ zh-TW:
         cc_by_license: 知識共用授權合約。
         data_consent_settings: Cookie 設定
         decidim_logo: Decidim 商標
-        download_open_data: 下載開放數據檔案
         log_in: 登入
         made_with_open_source: 使用<a target="_blank" href="https://github.com/decidim/decidim">自由軟體</a>建立的網站。
       header:
@@ -1690,7 +1646,6 @@ zh-TW:
         authorizations: 授權
         delete_my_account: 刪除我的帳號
         my_data: 我的資料
-        my_interests: 我的興趣
         notifications_settings: 通知設定
         title: 參與者設定
         user_groups: 群組

data/config/routes.rb

@@ -55,12 +55,7 @@ Decidim::Core::Engine.routes.draw do
 
   resource :locale, only: [:create]
 
-  Decidim.participatory_space_manifests.each do |manifest|
-    mount manifest.context(:public).engine, at: "/", as: "decidim_#{manifest.name}"
-  end
-
-  mount Decidim::Verifications::Engine, at: "/", as: "decidim_verifications"
-  mount Decidim::Comments::Engine, at: "/", as: "decidim_comments"
+  post :locate, to: "geolocation#locate"
 
   Decidim.global_engines.each do |name, engine_data|
     mount engine_data[:engine], at: engine_data[:at], as: name
@@ -94,12 +89,11 @@ Decidim::Core::Engine.routes.draw do
     resource :download_your_data, only: [:show], controller: "download_your_data" do
       member do
         post :export
-        get :download_file
+        get "/:uuid", to: "download_your_data#download_file", as: :download
       end
     end
 
     resources :notifications_subscriptions, param: :auth, only: [:create, :destroy]
-    resource :user_interests, only: [:show, :update]
 
     get "/authorization_modals/:authorization_action/f/:component_id(/:resource_name/:resource_id)", to: "authorization_modals#show", as: :authorization_modal
     get(
@@ -152,15 +146,15 @@ Decidim::Core::Engine.routes.draw do
 
   get "/link", to: "links#new", as: :link
 
-  get "/scopes/picker", to: "scopes#picker", as: :scopes_picker
-
   get "/static_map", to: "static_map#show", as: :static_map
   put "/pages/terms-of-service/accept", to: "tos#accept_tos", as: :accept_tos
 
   match "/404", to: "errors#not_found", via: :all
   match "/500", to: "errors#internal_server_error", via: :all
 
+  get "/open-data", to: "open_data#index", as: :open_data
   get "/open-data/download", to: "open_data#download", as: :open_data_download
+  get "/open-data/download/:resource", to: "open_data#download", as: :open_data_download_resource
 
   resource :follow, only: [:create, :destroy]
   resource :report, only: [:create]

data/db/migrate/20181025082245_add_timestamps_to_components.rb

@@ -7,9 +7,11 @@ class AddTimestampsToComponents < ActiveRecord::Migration[5.2]
 
   def change
     add_timestamps :decidim_components, null: true
+
     # rubocop:disable Rails/SkipsModelValidations
     Component.update_all(created_at: Time.current, updated_at: Time.current)
     # rubocop:enable Rails/SkipsModelValidations
+
     change_column_null :decidim_components, :created_at, false
     change_column_null :decidim_components, :updated_at, false
   end

data/db/migrate/20240628111905_add_visible_to_components.rb

@@ -0,0 +1,7 @@
+# frozen_string_literal: true
+
+class AddVisibleToComponents < ActiveRecord::Migration[7.0]
+  def change
+    add_column :decidim_components, :visible, :boolean, default: true
+  end
+end

data/db/migrate/20240704115429_create_decidim_taxonomies.rb

@@ -0,0 +1,23 @@
+# frozen_string_literal: true
+
+class CreateDecidimTaxonomies < ActiveRecord::Migration[7.0]
+  def change
+    create_table :decidim_taxonomies do |t|
+      t.jsonb :name, null: false, default: {}
+      t.references :decidim_organization, null: false, index: true
+      t.references :parent, index: true
+      t.integer :weight
+      t.integer :children_count, null: false, default: 0
+      t.integer :taxonomizations_count, null: false, default: 0
+      t.timestamps
+    end
+
+    create_table :decidim_taxonomizations do |t|
+      t.references :taxonomy, null: false, index: true
+      t.references :taxonomizable, null: false, polymorphic: true, index: { name: "index_taxonomizations_on_taxonomizable" }
+      t.timestamps
+    end
+
+    add_index :decidim_taxonomizations, [:taxonomy_id, :taxonomizable_id, :taxonomizable_type], name: "index_taxonomizations_on_id_tid_and_ttype", unique: true
+  end
+end

data/db/migrate/20240717093514_add_registered_only_to_decidim_share_tokens.rb

@@ -0,0 +1,7 @@
+# frozen_string_literal: true
+
+class AddRegisteredOnlyToDecidimShareTokens < ActiveRecord::Migration[7.0]
+  def change
+    add_column :decidim_share_tokens, :registered_only, :boolean
+  end
+end

data/db/migrate/20240722215500_change_object_changes_on_versions.rb

@@ -0,0 +1,39 @@
+# frozen_string_literal: true
+
+class ChangeObjectChangesOnVersions < ActiveRecord::Migration[6.1]
+  def up
+    rename_column :versions, :object_changes, :old_object_changes
+    add_column :versions, :object_changes, :jsonb # or :json
+
+    PaperTrail::Version.where.not(old_object_changes: nil).find_each do |version|
+      # This is an adaptation of PaperTrail internal load_changeset method,having in mind that we
+      # need to call also the code from PaperTrail::AttributeSerializer::ObjectChangesAttribute
+      object_changes = ActiveSupport::HashWithIndifferentAccess.new(YAML.unsafe_load(version.old_object_changes))
+      unless version.item_type.constantize.unscoped.find_by(id: version.item_id).nil?
+        # This is the deserialization code from `PaperTrail::AttributeSerializer::ObjectChangesAttribute`
+        # where we skip checking the object changeset column type, as we migrate it from YAML to JSON
+        changes_to_serialize = object_changes.clone
+        if changes_to_serialize.present?
+          serializer = PaperTrail::AttributeSerializers::CastAttributeSerializer.new(version.item_type.constantize)
+          changes_to_serialize.each do |key, change|
+            # `change` is an Array with two elements, representing before and after.
+            object_changes[key] = Array(change).map do |value|
+              serializer.send(:deserialize, key, value)
+            end
+          end
+        end
+      end
+
+      version.update_columns(old_object_changes: nil, object_changes:) # rubocop:disable Rails/SkipsModelValidations
+    rescue NameError
+      Rails.logger.info "Skipping History of #{version.item_type} with id #{version.item_id}"
+    end
+
+    PaperTrail::Version.reset_column_information
+    remove_column :versions, :old_object_changes
+  end
+
+  def down
+    raise ActiveRecord::IrreversibleMigration
+  end
+end

data/db/migrate/20240806065417_create_decidim_taxonomy_filters.rb

@@ -0,0 +1,23 @@
+# frozen_string_literal: true
+
+class CreateDecidimTaxonomyFilters < ActiveRecord::Migration[7.0]
+  def change
+    create_table :decidim_taxonomy_filters do |t|
+      t.references :root_taxonomy, null: false, foreign_key: { to_table: :decidim_taxonomies }
+      t.integer :filter_items_count, null: false, default: 0
+      t.string :space_manifest, null: false
+      t.timestamps
+    end
+
+    create_table :decidim_taxonomy_filter_items do |t|
+      t.references :taxonomy_filter, null: false, index: true
+      t.references :taxonomy_item, null: false, foreign_key: { to_table: :decidim_taxonomies }
+      t.timestamps
+    end
+
+    add_index :decidim_taxonomy_filter_items, [:taxonomy_filter_id, :taxonomy_item_id], name: "index_taxonomy_filter_items_on_filter_id_and_item_id", unique: true
+
+    add_column :decidim_taxonomies, :filters_count, :integer, null: false, default: 0
+    add_column :decidim_taxonomies, :filter_items_count, :integer, null: false, default: 0
+  end
+end

data/db/migrate/20240822161348_add_deleted_at_to_decidim_components.rb

@@ -0,0 +1,8 @@
+# frozen_string_literal: true
+
+class AddDeletedAtToDecidimComponents < ActiveRecord::Migration[7.0]
+  def change
+    add_column :decidim_components, :deleted_at, :datetime
+    add_index :decidim_components, :deleted_at
+  end
+end

data/db/migrate/20240906162524_add_part_of_to_taxonomies.rb

@@ -0,0 +1,26 @@
+# frozen_string_literal: true
+
+class AddPartOfToTaxonomies < ActiveRecord::Migration[7.0]
+  class Taxonomy < ApplicationRecord
+    self.table_name = :decidim_taxonomies
+    belongs_to :parent, class_name: "Taxonomy", optional: true
+  end
+
+  def change
+    add_column :decidim_taxonomies, :part_of, :integer, array: true, default: [], null: false
+    add_index :decidim_taxonomies, :part_of, using: "gin"
+
+    reversible do |dir|
+      dir.up do
+        Taxonomy.find_each do |taxonomy|
+          if taxonomy.parent
+            taxonomy.part_of.clear.append(taxonomy.id).concat(taxonomy.parent.reload.part_of)
+          else
+            taxonomy.part_of.clear.append(taxonomy.id)
+          end
+          taxonomy.save
+        end
+      end
+    end
+  end
+end

data/db/migrate/20241001135825_add_role_to_participatory_space_private_users.rb

@@ -0,0 +1,7 @@
+# frozen_string_literal: true
+
+class AddRoleToParticipatorySpacePrivateUsers < ActiveRecord::Migration[7.0]
+  def change
+    add_column :decidim_participatory_space_private_users, :role, :jsonb
+  end
+end

data/db/migrate/20241001140408_add_published_to_participatory_space_private_users.rb

@@ -0,0 +1,7 @@
+# frozen_string_literal: true
+
+class AddPublishedToParticipatorySpacePrivateUsers < ActiveRecord::Migration[7.0]
+  def change
+    add_column :decidim_participatory_space_private_users, :published, :boolean, default: false
+  end
+end

data/db/migrate/20241022002600_create_private_exports.rb

@@ -0,0 +1,18 @@
+# frozen_string_literal: true
+
+class CreatePrivateExports < ActiveRecord::Migration[7.0]
+  def change
+    create_table :decidim_private_exports, id: :uuid do |t|
+      t.string :export_type, null: false
+      t.string :attached_to_type
+      t.integer :attached_to_id
+      t.string :file
+      t.string :content_type, null: false
+      t.string :file_size, null: false
+      t.datetime :expires_at
+      t.jsonb :metadata, default: {}
+
+      t.timestamps
+    end
+  end
+end

data/db/migrate/20241028114430_add_component_counter_to_taxonomy_filters.rb

@@ -0,0 +1,7 @@
+# frozen_string_literal: true
+
+class AddComponentCounterToTaxonomyFilters < ActiveRecord::Migration[7.0]
+  def change
+    add_column :decidim_taxonomy_filters, :components_count, :integer, null: false, default: 0
+  end
+end

data/db/migrate/20241111104357_add_names_and_space_boolean_to_taxonomy_filters.rb

@@ -0,0 +1,9 @@
+# frozen_string_literal: true
+
+class AddNamesAndSpaceBooleanToTaxonomyFilters < ActiveRecord::Migration[7.0]
+  def change
+    add_column :decidim_taxonomy_filters, :name, :jsonb, default: {}
+    add_column :decidim_taxonomy_filters, :internal_name, :jsonb, default: {}
+    add_column :decidim_taxonomy_filters, :space_filter, :boolean, null: false, default: false
+  end
+end

data/db/migrate/20241127093708_add_taxonomy_to_metrics.rb

@@ -0,0 +1,7 @@
+# frozen_string_literal: true
+
+class AddTaxonomyToMetrics < ActiveRecord::Migration[7.0]
+  def change
+    add_reference :decidim_metrics, :decidim_taxonomy, index: true
+  end
+end

data/db/migrate/20241204121445_add_participatory_space_manifests_from_taxonomy_filters.rb

@@ -0,0 +1,9 @@
+# frozen_string_literal: true
+
+class AddParticipatorySpaceManifestsFromTaxonomyFilters < ActiveRecord::Migration[7.0]
+  def change
+    remove_column :decidim_taxonomy_filters, :space_manifest
+    remove_column :decidim_taxonomy_filters, :space_filter
+    add_column :decidim_taxonomy_filters, :participatory_space_manifests, :string, array: true, default: [], null: false
+  end
+end

data/decidim-core.gemspec

@@ -22,7 +22,7 @@ Gem::Specification.new do |s|
   s.summary = "The core of the Decidim framework."
   s.description = "Adds core features so other engines can hook into the framework."
   s.license = "AGPL-3.0-or-later"
-  s.required_ruby_version = "~> 3.2.0"
+  s.required_ruby_version = "~> 3.3.0"
 
   s.files = Dir.chdir(__dir__) do
     `git ls-files -z`.split("\x0").select do |f|
@@ -36,57 +36,54 @@ Gem::Specification.new do |s|
 
   s.add_dependency "active_link_to", "~> 1.0"
   s.add_dependency "acts_as_list", "~> 1.0"
-  s.add_dependency "batch-loader", "~> 1.2"
-  s.add_dependency "browser", "~> 2.7"
+  s.add_dependency "batch-loader", "~> 2.0"
+  s.add_dependency "browser", "~> 6.2.0"
   s.add_dependency "cells-erb", "~> 0.1.0"
   s.add_dependency "cells-rails", "~> 0.1.3"
   s.add_dependency "charlock_holmes", "~> 0.7"
+  s.add_dependency "chartkick", "~> 5.1.2"
   s.add_dependency "date_validator", "~> 0.12.0"
   s.add_dependency "devise", "~> 4.7"
-  s.add_dependency "devise-i18n", "~> 1.2", "< 1.11.1"
+  s.add_dependency "devise-i18n", "~> 1.2"
   s.add_dependency "diffy", "~> 3.3"
   s.add_dependency "doorkeeper", "~> 5.6", ">= 5.6.6"
   s.add_dependency "doorkeeper-i18n", "~> 4.0"
   s.add_dependency "file_validators", "~> 3.0"
   s.add_dependency "fog-local", "~> 0.6"
-  s.add_dependency "foundation_rails_helper", "~> 4.0"
   s.add_dependency "geocoder", "~> 1.8"
   s.add_dependency "hashdiff", ">= 0.4.0", "< 2.0.0"
+  s.add_dependency "hexapdf", "~> 1.1.0"
   s.add_dependency "image_processing", "~> 1.2"
   s.add_dependency "invisible_captcha", "~> 0.12"
   s.add_dependency "kaminari", "~> 1.2", ">= 1.2.1"
   s.add_dependency "loofah", "~> 2.19", ">= 2.19.1"
   s.add_dependency "mime-types", ">= 1.16", "< 4.0"
   s.add_dependency "mini_magick", "~> 4.9"
-  s.add_dependency "net-smtp", "~> 0.3.1"
+  s.add_dependency "net-smtp", "~> 0.5.0"
   s.add_dependency "nokogiri", "~> 1.16", ">= 1.16.2"
   s.add_dependency "omniauth", "~> 2.0"
   s.add_dependency "omniauth-facebook", "~> 5.0"
   s.add_dependency "omniauth-google-oauth2", "~> 1.0"
   s.add_dependency "omniauth-rails_csrf_protection", "~> 1.0"
   s.add_dependency "omniauth-twitter", "~> 1.4"
-  s.add_dependency "paper_trail", "~> 12.0"
-  s.add_dependency "pg", "~> 1.4.0", "< 2"
+  s.add_dependency "paper_trail", "~> 16.0"
+  s.add_dependency "paranoia", "~> 3.0.0"
+  s.add_dependency "pg", "~> 1.5.0", "< 2"
   s.add_dependency "pg_search", "~> 2.2"
   s.add_dependency "premailer-rails", "~> 1.10"
-  # We need psych 4+ in order to use the `aliases: true` option,
-  # see https://stackoverflow.com/questions/71191685/visit-psych-nodes-alias-unknown-alias-default-psychbadalias
-  # Also note that we need Rails 6.1.5+,
-  # see https://gist.github.com/yahonda/2776d8d7b6ea7045359f38c10449937b
-  s.add_dependency "psych", "~> 4.0"
   s.add_dependency "rack", "~> 2.2", ">= 2.2.8.1"
   s.add_dependency "rack-attack", "~> 6.0"
   s.add_dependency "rails", "~> 7.0.8"
   s.add_dependency "rails-i18n", "~> 7.0"
-  s.add_dependency "ransack", "~> 3.2.1"
+  s.add_dependency "ransack", "~> 4.2.0"
   s.add_dependency "redis", "~> 4.1"
-  s.add_dependency "request_store", "~> 1.5.0"
+  s.add_dependency "request_store", "~> 1.7.0"
   s.add_dependency "rubyXL", "~> 3.4"
   s.add_dependency "rubyzip", "~> 2.0"
   s.add_dependency "shakapacker", "~> 7.1.0"
-  s.add_dependency "valid_email2", "~> 4.0"
+  s.add_dependency "valid_email2", "~> 7.0"
   s.add_dependency "web-push", "~> 3.0"
-  s.add_dependency "wisper", "~> 2.0"
+  s.add_dependency "wisper", "~> 3.0"
 
   s.add_development_dependency "decidim-api", Decidim::Core.version
   s.add_development_dependency "decidim-dev", Decidim::Core.version

data/lib/decidim/action_authorization.rb

@@ -14,7 +14,7 @@ module Decidim
 
     def action_authorized_to(action, resource: nil, permissions_holder: nil)
       action_authorization_cache[action_authorization_cache_key(action, resource, permissions_holder)] ||=
-        ::Decidim::ActionAuthorizer.new(current_user, action, permissions_holder || resource&.component || current_component, resource).authorize
+        ::Decidim::ActionAuthorizer.new(current_user, action, permissions_holder || resource.try(:component) || current_component, resource).authorize
     end
 
     def action_authorization_cache
@@ -29,7 +29,8 @@ module Decidim
       elsif permissions_holder
         "#{action}-#{permissions_holder.class.name}-#{permissions_holder.id}"
       else
-        "#{action}-#{current_component.id}"
+        component = resource.try(:component) || current_component
+        "#{action}-#{component.id}"
       end
     end
   end

data/lib/decidim/amendable.rb

@@ -57,7 +57,7 @@ module Decidim
         when "participants"
           return only_amendables unless user
 
-          where.not(id: joins(:amendable).where.not("decidim_amendments.decidim_user_id = ?", user.id))
+          where.not(id: joins(:amendable).where.not(decidim_amendments: { decidim_user_id: user.id }))
         else # Assume 'all'
           all
         end