decidim-core 0.31.6 → 0.31.8

data/lib/decidim/core.rb

@@ -295,7 +295,7 @@ module Decidim
 
   # Users that have not logged in for this period of time will be deleted
   config_accessor :delete_inactive_users_after_days do
-    Decidim::Env.new("DELETE_INACTIVE_USERS_AFTER_DAYS", 365).to_i
+    Decidim::Env.new("DECIDIM_DELETE_INACTIVE_USERS_AFTER_DAYS", 365).to_i
   end
 
   # The minimum allowed inactivity period for deleting participants.
@@ -486,6 +486,15 @@ module Decidim
     Decidim::Env.new("DECIDIM_THROTTLING_PERIOD", "1").to_i.minutes
   end
 
+  # Max failed attempts for verification code confirmation before lockout.
+  mattr_accessor :verification_max_failed_attempts, default: Decidim::Env.new("DECIDIM_VERIFICATION_MAX_FAILED_ATTEMPTS", "5").to_i
+
+  # Time window after which a locked verification is automatically unlocked.
+  mattr_accessor :verification_unlock_in, default: Decidim::Env.new("DECIDIM_VERIFICATION_UNLOCK_IN", "30").to_i.minutes
+
+  # Time window (in minutes) after which a verification code expires (SMS only).
+  mattr_accessor :verification_code_expiry_minutes, default: Decidim::Env.new("DECIDIM_VERIFICATION_CODE_EXPIRY_MINUTES", "10").to_i
+
   # Time window were users can access the website even if their email is not confirmed.
   config_accessor :unconfirmed_access_for do
     Decidim::Env.new("DECIDIM_UNCONFIRMED_ACCESS_FOR", "0").to_i.days

data/lib/decidim/has_upload_validations.rb

@@ -15,6 +15,7 @@ module Decidim
           file_size: { less_than_or_equal_to: max_size },
           organization_present: true,
           uploader_content_type: true,
+          uploader_image_content: true,
           uploader_image_dimensions: true
         )
 

data/lib/decidim/legacy_form_builder.rb

@@ -31,6 +31,10 @@ module Decidim
         options[:data][:controller] ||= ""
         options[:data][:controller] += " date-picker"
 
+        if (default_time = options.delete(:default_time))
+          options[:data][:default_time] = default_time
+        end
+
         field(attribute, options) do |opts|
           super(attribute, opts)
         end

data/lib/decidim/map/dynamic_map.rb

@@ -30,7 +30,9 @@ module Decidim
       def builder_options
         {
           marker_color: organization.colors.fetch("primary", "#e02d2d"),
-          tile_layer: tile_layer_configuration
+          tile_layer: tile_layer_configuration,
+          zoom_in_text: I18n.t("zoom_in", scope: "decidim.map.dynamic"),
+          zoom_out_text: I18n.t("zoom_out", scope: "decidim.map.dynamic")
         }
       end
 

data/lib/decidim/query_extensions.rb

@@ -54,6 +54,8 @@ module Decidim
     end
 
     def user(id: nil, nickname: nil)
+      return nil if id.blank? && nickname.blank?
+
       Core::UserEntityFinder.new.call(object, { id:, nickname: }, context)
     end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: decidim-core
 version: !ruby/object:Gem::Version
-  version: 0.31.6
+  version: 0.31.8
 platform: ruby
 authors:
 - Josep Jaume Rey Peroy
@@ -10,7 +10,7 @@ authors:
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-07-06 00:00:00.000000000 Z
+date: 2026-10-22 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: concurrent-ruby
@@ -648,6 +648,26 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '6.0'
+- !ruby/object:Gem::Dependency
+  name: rack-proxy
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 0.8.3
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '1.0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 0.8.3
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '1.0'
 - !ruby/object:Gem::Dependency
   name: rails
   requirement: !ruby/object:Gem::Requirement
@@ -828,28 +848,28 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.31.6
+        version: 0.31.8
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.31.6
+        version: 0.31.8
 - !ruby/object:Gem::Dependency
   name: decidim-dev
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.31.6
+        version: 0.31.8
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.31.6
+        version: 0.31.8
 description: Adds core features so other engines can hook into the framework.
 email:
 - josepjaume@gmail.com
@@ -1578,6 +1598,7 @@ files:
 - app/packs/src/decidim/attachments/file_or_link_tabs.js
 - app/packs/src/decidim/attachments/index.js
 - app/packs/src/decidim/callout.js
+- app/packs/src/decidim/callout.test.js
 - app/packs/src/decidim/confirm.js
 - app/packs/src/decidim/confirm.test.js
 - app/packs/src/decidim/controllers/.keep
@@ -1735,6 +1756,7 @@ files:
 - app/packs/src/decidim/refactor/moved/check_boxes_tree.js
 - app/packs/src/decidim/refactor/moved/delayed.js
 - app/packs/src/decidim/refactor/moved/focus_guard.js
+- app/packs/src/decidim/refactor/moved/focus_guard.test.js
 - app/packs/src/decidim/refactor/moved/history.js
 - app/packs/src/decidim/refactor/moved/i18n.js
 - app/packs/src/decidim/refactor/moved/i18n.test.js
@@ -1951,6 +1973,7 @@ files:
 - app/services/decidim/send_push_notification.rb
 - app/services/decidim/settings_change.rb
 - app/services/decidim/static_map_generator.rb
+- app/services/decidim/svg_content_validator.rb
 - app/services/decidim/tokenizer.rb
 - app/services/decidim/traceability.rb
 - app/uploaders/decidim/application_uploader.rb
@@ -1978,6 +2001,7 @@ files:
 - app/validators/translatable_presence_validator.rb
 - app/validators/translated_etiquette_validator.rb
 - app/validators/uploader_content_type_validator.rb
+- app/validators/uploader_image_content_validator.rb
 - app/validators/uploader_image_dimensions_validator.rb
 - app/validators/url_validator.rb
 - app/views/decidim/account/_account_notification.js.erb
@@ -2520,6 +2544,7 @@ files:
 - db/migrate/20250613122148_remove_hashtag_table_from_core.rb
 - db/migrate/20250819110800_convert_private_exports_id_to_uuid.rb
 - db/migrate/20251031150928_add_short_name_to_organization.rb
+- db/migrate/20260909000000_add_failed_attempts_and_locked_at_to_decidim_authorizations.rb
 - db/seeds.rb
 - db/seeds/Exampledocument.pdf
 - db/seeds/avatars/001.jpg