decidim 0.26.2 → 0.26.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e85c73da0320bfee1b42c6529cbeec6b39a32b4c9d85c2d44368000a08f5e5e8
-  data.tar.gz: 00ea21f9dbc54c585756c0b1805cb53adf063ff5eb6224e44631903fa5dedc5a
+  metadata.gz: b05ff78a830cd0c3b2b02fc1f3d2540517d1bf70bb95fce804715beab56a3cfa
+  data.tar.gz: 8033e9f9356c0712d5df776cc8309bc00badc86d51114c14cb9434403b9abfce
 SHA512:
-  metadata.gz: 2b3011c7d57b4231f8d1018a3007c37d4b2091c0b294a1e5d1ef6b920c9c9c945a0cd05fa8c40aca0eacc678e5b05fb1547e98648d67072a6157a168445009c9
-  data.tar.gz: 353c8b6cbb1fd04f94f857520a94f9e1f9657344b6d2495ef4e72fecfcfcdfe2d7fa961e99e1cf639cf3370842d5250098e6fbe7bc5e88d8cd303445b886978e
+  metadata.gz: 873906750e104a011464cccd733ed983c85e3a0b16e8bd0896cf9a42d51b7064d16bffd426a18b7cbf9dcf8d45b1e8881581207c2e1d20c5159484492eec7613
+  data.tar.gz: f5d109a05780a8f0677b27f7c8ffe1f7d4dd233523a1891c11be6e7ea457cbe29abfbd2a44b0bc062b662663d22948e7672f75eb4c5fb146f8c02e5970e1e91f

data/Rakefile

@@ -57,14 +57,32 @@ task :uninstall_all do
 end
 
 desc "Pushes a new build for each gem and package."
-task release_all: [:update_versions, :check_locale_completeness] do
-  Decidim::GemManager.run_all("rake release")
-  Decidim::GemManager.run_packages("npm publish --access public")
+task release_all: [:update_versions, :check_uncommitted_changes, :check_locale_completeness] do
+  commands = {}
+  Decidim::GemManager.all_dirs { |dir| commands[dir] = "rake release" }
+  Decidim::GemManager.package_dirs { |dir| commands[dir] = "npm publish --access public" }
+
+  commands.each do |dir, command|
+    status = Decidim::GemManager.run_at(dir, command)
+
+    break if !status && Decidim::GemManager.fail_fast?
+  end
+end
+
+desc "Makes sure there are no uncommitted changes."
+task :check_uncommitted_changes do
+  unless system("git diff --exit-code --quiet")
+    puts "There are uncommitted changes, run `git diff` to see them."
+    abort "Please commit your changes before release!"
+  end
 end
 
 desc "Makes sure all official locales are complete and clean."
 task :check_locale_completeness do
-  system({ "ENFORCED_LOCALES" => "en,ca,es", "SKIP_NORMALIZATION" => "true" }, "rspec spec/i18n_spec.rb")
+  unless system({ "ENFORCED_LOCALES" => "en,ca,es", "SKIP_NORMALIZATION" => "true" }, "rspec spec/i18n_spec.rb")
+    puts "The officially supported locales have problems in them."
+    abort "Please correct these problems by following the instructions from the above outputs before release!"
+  end
 end
 
 load "decidim-dev/lib/tasks/generators.rake"

data/docs/antora.yml

@@ -1,6 +1,6 @@
 name: en
 title: "Decidim Documentation"
-version: master
+version: v0.26
 asciidoc:
   attributes:
     page-lang: en@

data/lib/decidim/gem_manager.rb

@@ -132,20 +132,31 @@ module Decidim
 
       def run_all(command, out: $stdout, include_root: true)
         all_dirs(include_root: include_root) do |dir|
-          status = new(dir).run(command, out: out)
+          status = run_at(dir, command, out: out)
 
-          break unless status || ENV["FAIL_FAST"] == "false"
+          break if !status && fail_fast?
         end
       end
 
       def run_packages(command, out: $stdout)
         package_dirs do |dir|
-          status = new(dir).run(command, out: out)
+          status = run_at(dir, command, out: out)
 
-          break unless status || ENV["FAIL_FAST"] == "false"
+          break if !status && fail_fast?
         end
       end
 
+      def run_at(dir, command, out: $stdout)
+        attempts = 0
+        until (status = new(dir).run(command, out: out))
+          attempts += 1
+
+          break if attempts > Decidim::GemManager.retry_times
+        end
+
+        status
+      end
+
       def version
         @version ||= File.read(version_file).strip
       end
@@ -177,6 +188,14 @@ module Decidim
         a_version.gsub(/\.pre/, "-pre").gsub(/\.dev/, "-dev").gsub(/.rc(\d*)/, "-rc\\1")
       end
 
+      def fail_fast?
+        ENV.fetch("FAIL_FAST", nil) != "false"
+      end
+
+      def retry_times
+        ENV.fetch("RETRY_TIMES", 10).to_i
+      end
+
       private
 
       def root

data/lib/decidim/version.rb

@@ -3,6 +3,6 @@
 # This holds the decidim version and the faker version it uses.
 module Decidim
   def self.version
-    "0.26.2"
+    "0.26.4"
   end
 end

data/package-lock.json

@@ -21439,12 +21439,12 @@
     },
     "packages/browserslist-config": {
       "name": "@decidim/browserslist-config",
-      "version": "0.26.2",
+      "version": "0.26.4",
       "license": "AGPL-3.0"
     },
     "packages/core": {
       "name": "@decidim/core",
-      "version": "0.26.2",
+      "version": "0.26.4",
       "license": "AGPL-3.0",
       "dependencies": {
         "@joeattardi/emoji-button": "^4.6.0",
@@ -21499,7 +21499,7 @@
     },
     "packages/dev": {
       "name": "@decidim/dev",
-      "version": "0.26.2",
+      "version": "0.26.4",
       "dev": true,
       "license": "AGPL-3.0",
       "dependencies": {
@@ -21508,7 +21508,7 @@
     },
     "packages/elections": {
       "name": "@decidim/elections",
-      "version": "0.26.2",
+      "version": "0.26.4",
       "license": "AGPL-3.0",
       "dependencies": {
         "@decidim/decidim-bulletin_board": "0.22.3",
@@ -21518,7 +21518,7 @@
     },
     "packages/eslint-config": {
       "name": "@decidim/eslint-config",
-      "version": "0.26.2",
+      "version": "0.26.4",
       "dev": true,
       "license": "AGPL-3.0",
       "peerDependencies": {
@@ -21535,7 +21535,7 @@
     },
     "packages/stylelint-config": {
       "name": "@decidim/stylelint-config",
-      "version": "0.26.2",
+      "version": "0.26.4",
       "dev": true,
       "license": "AGPL-3.0",
       "peerDependencies": {
@@ -21544,7 +21544,7 @@
     },
     "packages/webpacker": {
       "name": "@decidim/webpacker",
-      "version": "0.26.2",
+      "version": "0.26.4",
       "license": "AGPL-3.0",
       "dependencies": {
         "@babel/core": "^7.13.13",

data/packages/browserslist-config/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@decidim/browserslist-config",
   "description": "The Browserslist configuration for Decidim",
-  "version": "0.26.2",
+  "version": "0.26.4",
   "repository": {
     "url": "git@github.com:decidim/decidim.git",
     "type": "git",

data/packages/core/node_modules/@rails/activestorage/CHANGELOG.md

@@ -0,0 +1,306 @@
+## Rails 6.1.4 (June 24, 2021) ##
+
+*   The parameters sent to `ffmpeg` for generating a video preview image are now
+    configurable under `config.active_storage.video_preview_arguments`.
+
+    *Brendon Muir*
+
+*   Fix Active Storage update task when running in an engine.
+
+    Justin Malčić*
+
+*   Don't raise an error if the mime type is not recognized.
+
+    Fixes #41777.
+
+    *Alex Ghiculescu*
+
+*   `ActiveStorage::PreviewError` is raised when a previewer is unable to generate a preview image.
+
+    *Alex Robbin*
+
+*   respond with 404 given invalid variation key when asking for representations.
+
+    *George Claghorn*
+
+*   `Blob` creation shouldn't crash if no service selected.
+
+    *Alex Ghiculescu*
+
+
+## Rails 6.1.3.2 (May 05, 2021) ##
+
+*   No changes.
+
+
+## Rails 6.1.3.1 (March 26, 2021) ##
+
+*  Marcel is upgraded to version 1.0.0 to avoid a dependency on GPL-licensed
+   mime types data.
+
+   *George Claghorn*
+
+
+## Rails 6.1.3 (February 17, 2021) ##
+
+*   No changes.
+
+
+## Rails 6.1.2.1 (February 10, 2021) ##
+
+*   No changes.
+
+
+## Rails 6.1.2 (February 09, 2021) ##
+
+*   No changes.
+
+
+## Rails 6.1.1 (January 07, 2021) ##
+
+*   Fix S3 multipart uploads when threshold is larger than file.
+
+    *Matt Muller*
+
+
+## Rails 6.1.0 (December 09, 2020) ##
+
+*   Change default queue name of the analysis (`:active_storage_analysis`) and
+    purge (`:active_storage_purge`) jobs to be the job adapter's default (`:default`).
+
+    *Rafael Mendonça França*
+
+*   Implement `strict_loading` on ActiveStorage associations.
+
+    *David Angulo*
+
+*   Remove deprecated support to pass `:combine_options` operations to `ActiveStorage::Transformers::ImageProcessing`.
+
+    *Rafael Mendonça França*
+
+*   Remove deprecated `ActiveStorage::Transformers::MiniMagickTransformer`.
+
+    *Rafael Mendonça França*
+
+*   Remove deprecated `config.active_storage.queue`.
+
+    *Rafael Mendonça França*
+
+*   Remove deprecated `ActiveStorage::Downloading`.
+
+    *Rafael Mendonça França*
+
+*   Add per-environment configuration support
+
+    *Pietro Moro*
+
+*   The Poppler PDF previewer renders a preview image using the original
+    document's crop box rather than its media box, hiding print margins. This
+    matches the behavior of the MuPDF previewer.
+
+    *Vincent Robert*
+
+*   Touch parent model when an attachment is purged.
+
+    *Víctor Pérez Rodríguez*
+
+*   Files can now be served by proxying them from the underlying storage service
+    instead of redirecting to a signed service URL. Use the
+    `rails_storage_proxy_path` and `_url` helpers to proxy an attached file:
+
+    ```erb
+    <%= image_tag rails_storage_proxy_path(@user.avatar) %>
+    ```
+
+    To proxy by default, set `config.active_storage.resolve_model_to_route`:
+
+    ```ruby
+    # Proxy attached files instead.
+    config.active_storage.resolve_model_to_route = :rails_storage_proxy
+    ```
+
+    ```erb
+    <%= image_tag @user.avatar %>
+    ```
+
+    To redirect to a signed service URL when the default file serving strategy
+    is set to proxying, use the `rails_storage_redirect_path` and `_url` helpers:
+
+    ```erb
+    <%= image_tag rails_storage_redirect_path(@user.avatar) %>
+    ```
+
+    *Jonathan Fleckenstein*
+
+*   Add `config.active_storage.web_image_content_types` to allow applications
+    to add content types (like `image/webp`) in which variants can be processed,
+    instead of letting those images be converted to the fallback PNG format.
+
+    *Jeroen van Haperen*
+
+*   Add support for creating variants of `WebP` images out of the box.
+
+    *Dino Maric*
+
+*   Only enqueue analysis jobs for blobs with non-null analyzer classes.
+
+    *Gannon McGibbon*
+
+*   Previews are created on the same service as the original blob.
+
+    *Peter Zhu*
+
+*   Remove unused `disposition` and `content_type` query parameters for `DiskService`.
+
+    *Peter Zhu*
+
+*   Use `DiskController` for both public and private files.
+
+    `DiskController` is able to handle multiple services by adding a
+    `service_name` field in the generated URL in `DiskService`.
+
+    *Peter Zhu*
+
+*   Variants are tracked in the database to avoid existence checks in the storage service.
+
+    *George Claghorn*
+
+*   Deprecate `service_url` methods in favour of `url`.
+
+    Deprecate `Variant#service_url` and `Preview#service_url` to instead use
+    `#url` method to be consistent with `Blob`.
+
+    *Peter Zhu*
+
+*   Permanent URLs for public storage blobs.
+
+    Services can be configured in `config/storage.yml` with a new key
+    `public: true | false` to indicate whether a service holds public
+    blobs or private blobs. Public services will always return a permanent URL.
+
+    Deprecates `Blob#service_url` in favor of `Blob#url`.
+
+    *Peter Zhu*
+
+*   Make services aware of configuration names.
+
+    *Gannon McGibbon*
+
+*   The `Content-Type` header is set on image variants when they're uploaded to third-party storage services.
+
+    *Kyle Ribordy*
+
+*   Allow storage services to be configured per attachment.
+
+    ```ruby
+    class User < ActiveRecord::Base
+      has_one_attached :avatar, service: :s3
+    end
+
+    class Gallery < ActiveRecord::Base
+      has_many_attached :photos, service: :s3
+    end
+    ```
+
+    *Dmitry Tsepelev*
+
+*   You can optionally provide a custom blob key when attaching a new file:
+
+    ```ruby
+    user.avatar.attach key: "avatars/#{user.id}.jpg",
+      io: io, content_type: "image/jpeg", filename: "avatar.jpg"
+    ```
+
+    Active Storage will store the blob's data on the configured service at the provided key.
+
+    *George Claghorn*
+
+*   Replace `Blob.create_after_upload!` with `Blob.create_and_upload!` and deprecate the former.
+
+    `create_after_upload!` has been removed since it could lead to data
+    corruption by uploading to a key on the storage service which happened to
+    be already taken. Creating the record would then correctly raise a
+    database uniqueness exception but the stored object would already have
+    overwritten another. `create_and_upload!` swaps the order of operations
+    so that the key gets reserved up-front or the uniqueness error gets raised,
+    before the upload to a key takes place.
+
+    *Julik Tarkhanov*
+
+*   Set content disposition in direct upload using `filename` and `disposition` parameters to `ActiveStorage::Service#headers_for_direct_upload`.
+
+    *Peter Zhu*
+
+*   Allow record to be optionally passed to blob finders to make sharding
+    easier.
+
+    *Gannon McGibbon*
+
+*   Switch from `azure-storage` gem to `azure-storage-blob` gem for Azure service.
+
+    *Peter Zhu*
+
+*   Add `config.active_storage.draw_routes` to disable Active Storage routes.
+
+    *Gannon McGibbon*
+
+*   Image analysis is skipped if ImageMagick returns an error.
+
+    `ActiveStorage::Analyzer::ImageAnalyzer#metadata` would previously raise a
+    `MiniMagick::Error`, which caused persistent `ActiveStorage::AnalyzeJob`
+    failures. It now logs the error and returns `{}`, resulting in no metadata
+    being added to the offending image blob.
+
+    *George Claghorn*
+
+*   Method calls on singular attachments return `nil` when no file is attached.
+
+    Previously, assuming the following User model, `user.avatar.filename` would
+    raise a `Module::DelegationError` if no avatar was attached:
+
+    ```ruby
+    class User < ApplicationRecord
+      has_one_attached :avatar
+    end
+    ```
+
+    They now return `nil`.
+
+    *Matthew Tanous*
+
+*   The mirror service supports direct uploads.
+
+    New files are directly uploaded to the primary service. When a
+    directly-uploaded file is attached to a record, a background job is enqueued
+    to copy it to each secondary service.
+
+    Configure the queue used to process mirroring jobs by setting
+    `config.active_storage.queues.mirror`. The default is `:active_storage_mirror`.
+
+    *George Claghorn*
+
+*   The S3 service now permits uploading files larger than 5 gigabytes.
+
+    When uploading a file greater than 100 megabytes in size, the service
+    transparently switches to [multipart uploads](https://docs.aws.amazon.com/AmazonS3/latest/dev/mpuoverview.html)
+    using a part size computed from the file's total size and S3's part count limit.
+
+    No application changes are necessary to take advantage of this feature. You
+    can customize the default 100 MB multipart upload threshold in your S3
+    service's configuration:
+
+    ```yaml
+    production:
+      service: s3
+      access_key_id: <%= Rails.application.credentials.dig(:aws, :access_key_id) %>
+      secret_access_key: <%= Rails.application.credentials.dig(:aws, :secret_access_key) %>
+      region: us-east-1
+      bucket: my-bucket
+      upload:
+        multipart_threshold: <%= 250.megabytes %>
+    ```
+
+    *George Claghorn*
+
+
+Please check [6-0-stable](https://github.com/rails/rails/blob/6-0-stable/activestorage/CHANGELOG.md) for previous changes.

data/packages/core/node_modules/@rails/activestorage/README.md

@@ -0,0 +1,194 @@
+# Active Storage
+
+Active Storage makes it simple to upload and reference files in cloud services like [Amazon S3](https://aws.amazon.com/s3/), [Google Cloud Storage](https://cloud.google.com/storage/docs/), or [Microsoft Azure Storage](https://azure.microsoft.com/en-us/services/storage/), and attach those files to Active Records. Supports having one main service and mirrors in other services for redundancy. It also provides a disk service for testing or local deployments, but the focus is on cloud storage.
+
+Files can be uploaded from the server to the cloud or directly from the client to the cloud.
+
+Image files can furthermore be transformed using on-demand variants for quality, aspect ratio, size, or any other [MiniMagick](https://github.com/minimagick/minimagick) or [Vips](https://www.rubydoc.info/gems/ruby-vips/Vips/Image) supported transformation.
+
+You can read more about Active Storage in the [Active Storage Overview](https://edgeguides.rubyonrails.org/active_storage_overview.html) guide.
+
+## Compared to other storage solutions
+
+A key difference to how Active Storage works compared to other attachment solutions in Rails is through the use of built-in [Blob](https://github.com/rails/rails/blob/main/activestorage/app/models/active_storage/blob.rb) and [Attachment](https://github.com/rails/rails/blob/main/activestorage/app/models/active_storage/attachment.rb) models (backed by Active Record). This means existing application models do not need to be modified with additional columns to associate with files. Active Storage uses polymorphic associations via the `Attachment` join model, which then connects to the actual `Blob`.
+
+`Blob` models store attachment metadata (filename, content-type, etc.), and their identifier key in the storage service. Blob models do not store the actual binary data. They are intended to be immutable in spirit. One file, one blob. You can associate the same blob with multiple application models as well. And if you want to do transformations of a given `Blob`, the idea is that you'll simply create a new one, rather than attempt to mutate the existing one (though of course you can delete the previous version later if you don't need it).
+
+## Installation
+
+Run `bin/rails active_storage:install` to copy over active_storage migrations.
+
+NOTE: If the task cannot be found, verify that `require "active_storage/engine"` is present in `config/application.rb`.
+
+## Examples
+
+One attachment:
+
+```ruby
+class User < ApplicationRecord
+  # Associates an attachment and a blob. When the user is destroyed they are
+  # purged by default (models destroyed, and resource files deleted).
+  has_one_attached :avatar
+end
+
+# Attach an avatar to the user.
+user.avatar.attach(io: File.open("/path/to/face.jpg"), filename: "face.jpg", content_type: "image/jpg")
+
+# Does the user have an avatar?
+user.avatar.attached? # => true
+
+# Synchronously destroy the avatar and actual resource files.
+user.avatar.purge
+
+# Destroy the associated models and actual resource files async, via Active Job.
+user.avatar.purge_later
+
+# Does the user have an avatar?
+user.avatar.attached? # => false
+
+# Generate a permanent URL for the blob that points to the application.
+# Upon access, a redirect to the actual service endpoint is returned.
+# This indirection decouples the public URL from the actual one, and
+# allows for example mirroring attachments in different services for
+# high-availability. The redirection has an HTTP expiration of 5 min.
+url_for(user.avatar)
+
+class AvatarsController < ApplicationController
+  def update
+    # params[:avatar] contains an ActionDispatch::Http::UploadedFile object
+    Current.user.avatar.attach(params.require(:avatar))
+    redirect_to Current.user
+  end
+end
+```
+
+Many attachments:
+
+```ruby
+class Message < ApplicationRecord
+  has_many_attached :images
+end
+```
+
+```erb
+<%= form_with model: @message, local: true do |form| %>
+  <%= form.text_field :title, placeholder: "Title" %><br>
+  <%= form.text_area :content %><br><br>
+
+  <%= form.file_field :images, multiple: true %><br>
+  <%= form.submit %>
+<% end %>
+```
+
+```ruby
+class MessagesController < ApplicationController
+  def index
+    # Use the built-in with_attached_images scope to avoid N+1
+    @messages = Message.all.with_attached_images
+  end
+
+  def create
+    message = Message.create! params.require(:message).permit(:title, :content)
+    message.images.attach(params[:message][:images])
+    redirect_to message
+  end
+
+  def show
+    @message = Message.find(params[:id])
+  end
+end
+```
+
+Variation of image attachment:
+
+```erb
+<%# Hitting the variant URL will lazy transform the original blob and then redirect to its new service location %>
+<%= image_tag user.avatar.variant(resize_to_limit: [100, 100]) %>
+```
+
+## File serving strategies
+
+Active Storage supports two ways to serve files: redirecting and proxying.
+
+### Redirecting
+
+Active Storage generates stable application URLs for files which, when accessed, redirect to signed, short-lived service URLs. This relieves application servers of the burden of serving file data. It is the default file serving strategy.
+
+When the application is configured to proxy files by default, use the `rails_storage_redirect_path` and `_url` route helpers to redirect instead:
+
+```erb
+<%= image_tag rails_storage_redirect_path(@user.avatar) %>
+```
+
+### Proxying
+
+Optionally, files can be proxied instead. This means that your application servers will download file data from the storage service in response to requests. This can be useful for serving files from a CDN.
+
+Explicitly proxy attachments using the `rails_storage_proxy_path` and `_url` route helpers:
+
+```erb
+<%= image_tag rails_storage_proxy_path(@user.avatar) %>
+```
+
+Or configure Active Storage to use proxying by default:
+
+```ruby
+# config/initializers/active_storage.rb
+Rails.application.config.active_storage.resolve_model_to_route = :rails_storage_proxy
+```
+
+## Direct uploads
+
+Active Storage, with its included JavaScript library, supports uploading directly from the client to the cloud.
+
+### Direct upload installation
+
+1. Include `activestorage.js` in your application's JavaScript bundle.
+
+    Using the asset pipeline:
+    ```js
+    //= require activestorage
+    ```
+    Using the npm package:
+    ```js
+    import * as ActiveStorage from "@rails/activestorage"
+    ActiveStorage.start()
+    ```
+2. Annotate file inputs with the direct upload URL.
+
+    ```ruby
+    <%= form.file_field :attachments, multiple: true, direct_upload: true %>
+    ```
+3. That's it! Uploads begin upon form submission.
+
+### Direct upload JavaScript events
+
+| Event name | Event target | Event data (`event.detail`) | Description |
+| --- | --- | --- | --- |
+| `direct-uploads:start` | `<form>` | None | A form containing files for direct upload fields was submitted. |
+| `direct-upload:initialize` | `<input>` | `{id, file}` | Dispatched for every file after form submission. |
+| `direct-upload:start` | `<input>` | `{id, file}` | A direct upload is starting. |
+| `direct-upload:before-blob-request` | `<input>` | `{id, file, xhr}` | Before making a request to your application for direct upload metadata. |
+| `direct-upload:before-storage-request` | `<input>` | `{id, file, xhr}` | Before making a request to store a file. |
+| `direct-upload:progress` | `<input>` | `{id, file, progress}` | As requests to store files progress. |
+| `direct-upload:error` | `<input>` | `{id, file, error}` | An error occurred. An `alert` will display unless this event is canceled. |
+| `direct-upload:end` | `<input>` | `{id, file}` | A direct upload has ended. |
+| `direct-uploads:end` | `<form>` | None | All direct uploads have ended. |
+
+## License
+
+Active Storage is released under the [MIT License](https://opensource.org/licenses/MIT).
+
+## Support
+
+API documentation is at:
+
+* https://api.rubyonrails.org
+
+Bug reports for the Ruby on Rails project can be filed here:
+
+* https://github.com/rails/rails/issues
+
+Feature requests should be discussed on the rails-core mailing list here:
+
+* https://discuss.rubyonrails.org/c/rubyonrails-core