pageflow 12.0.4 → 12.1.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
-SHA1:
-  metadata.gz: 92fcaf3b13e2338f71e2316e20bd95b7c69fe365
-  data.tar.gz: f226df2178d2229efafa20f3c2896ad157967012
+SHA256:
+  metadata.gz: 7d99f465f42439888aca879f81c0595e5ee0a41a8a68967c4322ba242fd0b889
+  data.tar.gz: 54ff6f8741c0d62eee7a703c5c29c897c0346e2bd491c5b6f260e8727035259a
 SHA512:
-  metadata.gz: b861ea324064c596c0a2321e7763c562d0f8bd120cd9adc8d59dea538c3263526ebbe5d99fca21ee50a1a15f5b188c03276872b17636a877beee41d542c2d9d5
-  data.tar.gz: a48f37719a21e5f7e8b483f21ba70fb6e7e6908495a766d3a79c28703343c6dc30d77cef1485def75f6fcd2767373200abe5f11586ebbdce04b75079500802c4
+  metadata.gz: 0d565a626a663a773e9be58d56b4b5ef98f1b59bfb6303243cfb1f0a4b432959fbda25f6a2050b38f932633702268f85c488c65c16948975e10d266ba81ea0a9
+  data.tar.gz: fafb8200846112eeea5632ab51bcd304293846ae6ee9dacdc6dd588ebc5d99ab9bdb844170dad8554bcfddf8c75362b79ba02829402578f7908a171b4897b684

data/CHANGELOG.md

@@ -1,404 +1,188 @@
 # CHANGELOG
 
-### Version 12.0.4
+### Version 12.1.0
 
-2017-10-09
+2017-11-07
 
-[Compare changes](https://github.com/codevise/pageflow/compare/v12.0.3...v12.0.4)
+[Compare changes](https://github.com/codevise/pageflow/compare/12-0-stable...v12.1.0)
 
-- Bug fix: Add crossorigin attribute to video tag rendered by helper
-  ([#879](https://github.com/codevise/pageflow/pull/879))
+##### Manual Update Steps
 
-### Version 12.0.3
+- Include HLS in output presences of legacy files
+  ([#872](https://github.com/codevise/pageflow/pull/872),
+   [#867](https://github.com/codevise/pageflow/pull/867))
 
-2017-09-14
+  The database migration for Pageflow 12.0 which updates output
+  presences of existing video files is missing the HLS variant. This
+  causes HLS urls of existing video files to be rendered as
+  `undefined`.
 
-[Compare changes](https://github.com/codevise/pageflow/compare/v12.0.2...v12.0.3)
+  To apply the fix, install migrations and migrate your database. This
+  fix has previously been released as part of version 12.0.2.
 
-- Bug fix: Handle async tech loading in VideoJS 6
-  ([#875](https://github.com/codevise/pageflow/pull/875))
+- Add Resque::Server to the generated routes
+  ([#871](https://github.com/codevise/pageflow/pull/871))
 
-### Version 12.0.2
+  Mounting the Resque web server makes it easier to inspect background
+  workers and restart jobs that have failed. See the issue description
+  of [#856](https://github.com/codevise/pageflow/issues/856) on how to
+  add this to existing apps.
 
-2017-09-13
+##### Notable Changes
 
-[Compare changes](https://github.com/codevise/pageflow/compare/v12.0.1...v12.0.2)
-
-#### Manual Update Step
-
-The database migration for Pageflow 12.0 which updates output
-presences of existing video files is missing the HLS variant. This
-causes HLS urls of existing video files to be rendered as `undefined`.
-([#870](https://github.com/codevise/pageflow/pull/870))
-
-To apply the fix, install migrations and migrate your database.
-
-#### Bug Fixes
-
-- Update videojs and videojs-dash to improve Dash playback
-  ([#843](https://github.com/codevise/pageflow/pull/843))
-- Bug fix: Prevent calling `localeCompare` of null.
-  ([#865](https://github.com/codevise/pageflow/pull/865))
-- Bug fix: Prevent background videos from stopping on fullscreen toggle
-  ([#864](https://github.com/codevise/pageflow/pull/864))
-- Bug fix: Activate text track after it has been added
-  ([#859](https://github.com/codevise/pageflow/pull/859))
-- Bug fix: Fix file type detection for vtt uploads on safari
-  ([#851](https://github.com/codevise/pageflow/pull/851))
-
-### Version 12.0.1
-
-2017-08-25
-
-[Compare changes](https://github.com/codevise/pageflow/compare/v12.0.0...v12.0.1)
-
-#### Security Patch
-
-Prevent escalation of privileges
-([#845](https://github.com/codevise/pageflow/pull/845))
-
-There are two bugs in Pageflow 12.0.0 that allow signed in users
-to escalate their privileges.
-
-* With a manually crafted request, any signed in user can set the
-  admin flag on their own user account.
-
-* With a manually crafted request, a user with account manager role in
-  at least one account, can add users to arbitrary accounts. This can
-  be used to gain account manager privileges in any account.
-
-Affected versions: 12.0.0 (including all release candidates)
-Unaffected version: 0.11.x and older
-Versions fixes: 12.0.1
-
-### Version 12.0.0
-
-2017-08-10
-
-[Compare changes](https://github.com/codevise/pageflow/compare/0-11-stable...v12.0.0)
-
-See
-[changes grouped by release candidates](https://github.com/codevise/pageflow/blob/v12.0.0.rc7/CHANGELOG.md).
-
-#### Breaking Changes
-
-- The `pageflow-react` gem has been merged into the core `pageflow`
-  gem. Remove the `pageflow-react` entry from your `Gemfile` if one
-  exists and make sure you update all gems that depend on
-  `pageflow-react` to versions that only depend on `pageflow` instead.
-  ([#721](https://github.com/codevise/pageflow/pull/721),
-   [#744](https://github.com/codevise/pageflow/pull/744))
-
-  In the Pageflow initializer, delete all lines that register page
-  types from `Pageflow::BuiltInPageType`, i.e. lines of the form:
-
-        config.page_types.register(Pageflow::BuiltInPageType.background_image)
-
-  Insert the following single line instead:
-
-        config.plugin(Pageflow.built_in_page_types_plugin)
-
-  Finally, in `app/assets/javascript/components.js` replace
-
-        //= require pageflow/react/components
-
-  with
-
-        //= require pageflow/components
-
-- The background audio page type has been replaced by the atmo
-  feature. There is a migration turning all background audio pages
-  into background image pages with a atmo audio. The atmo settings are
-  no longer guarded by a feature flag. If you used
-  `Pageflow::Features#enabled_by_default` to enable the feature for
-  all accounts, you need to remove that call from your
-  initializer.
-  ([#748](https://github.com/codevise/pageflow/pull/748))
-
-- All page types that used to support only background images can now
-  display a background video as well. The background video page type
-  accordingly has been removed. There is a migration to turn
-  background video pages into pages with video background type.
-  ([#748](https://github.com/codevise/pageflow/pull/748))
-
-- The built-in widget types must now be registered in the host
-  application.
-  ([#774](https://github.com/codevise/pageflow/pull/774),
-   [#776](https://github.com/codevise/pageflow/pull/776))
-
-  To keep existing functionality from previous Pageflow versions, add
-  this line to the Pageflow initializer in your host application:
-
-        config.plugin(Pageflow.built_in_widget_types_plugin)
-
-- Remove legacy theme files. All themes have to be based on the
-  default theme.
-  ([#768](https://github.com/codevise/pageflow/pull/768))
-
-- Playing DASH videos requires certain CORS headers in the CDN/Amazon
-  S3 responses. See the
-  [bucket configuration section](./doc/setting_up_external_services.md#bucket-configuration)
-  in the "Setting up External Services" guide for details.
-  ([#829](https://github.com/codevise/pageflow/pull/829))
-
-- Switch from `Expires` to `Cache-Control` header for media uploads.
-  ([#753](https://github.com/codevise/pageflow/pull/753))
-
-  It’s recommended you update the files currently stored on S3:
-
-        $ s3cmd --recursive modify --add-header="Cache-Control: public, max-age=31536000" s3://yourbucket/
-        $ s3cmd --recursive modify --remove-header=Expires s3://yourbucket/
-
-  Tread carefully when you do this! As noted in
-  [this StackExchange answer](http://stackoverflow.com/questions/22501465/how-to-add-cache-control-in-aws-s3),
-  we have experienced that some public read permissions were lost
-  after running this script. Test first using just a single object. In
-  the AWS Management Console, you might want to grant public read
-  access on the entire bucket again to be safe.
-
-- If the application uses the `nginx-upload-module`, its configuration
-  needs to be adjusted.
-  ([#814](https://github.com/codevise/pageflow/pull/814))
-
-  Update the location matcher, to prevent routes of the form
-  `../files/image_files/retry` from being matched:
-
-        location ~ ^/editor/entries/[0-9]+/files/[^/]+/?$ {
+- The theme configured on account level now only acts as a default for
+  new entries. After enabling the `selectable_themes` feature, a theme
+  selection dialog is available inside the editor from the "Title and
+  Options > Appearance" tab. The dialog allows configuring the theme
+  on a per revision basis.
+  ([#781](https://github.com/codevise/pageflow/pull/781),
+   [#897](https://github.com/codevise/pageflow/pull/897))
 
 ##### Public Site
 
-- Embed entries as iframes
-  ([#665](https://github.com/codevise/pageflow/pull/665))
-- Use slim controls as android phone player
-  ([#745](https://github.com/codevise/pageflow/pull/745))
-- Ensure public translations fall back to default locale
-  ([#757](https://github.com/codevise/pageflow/pull/757))
-- Buf fix: Preload page background images
-  ([#825](https://github.com/codevise/pageflow/pull/825))
-
-Media stack:
-
-- FullHD/4k video variants
-  ([#653](https://github.com/codevise/pageflow/pull/653),
-   [#741](https://github.com/codevise/pageflow/pull/741),
-   [#752](https://github.com/codevise/pageflow/pull/752))
-- Update Video.js and add Dash support
-  ([#678](https://github.com/codevise/pageflow/pull/678),
-   [#677](https://github.com/codevise/pageflow/pull/677),
-   [#746](https://github.com/codevise/pageflow/pull/746))
-- Allow displaying text tracks on videos and audio pages
-  ([#721](https://github.com/codevise/pageflow/pull/721),
-   [#747](https://github.com/codevise/pageflow/pull/747),
-   [#743](https://github.com/codevise/pageflow/pull/743),
-   [#827](https://github.com/codevise/pageflow/pull/827),
-   [#749](https://github.com/codevise/pageflow/pull/749))
-- Add feature detection for mobile video features
-  ([#742](https://github.com/codevise/pageflow/pull/742))
-- Add ultra variant to image file and video file posters
-  ([#706](https://github.com/codevise/pageflow/pull/706))
-- Bug fix: Fix video loop on safari 10 on el capitan.
-  ([#663](https://github.com/codevise/pageflow/pull/663))
-- Bug fix: Prevent prebuffer/volume fading from failing on dispose
-  ([#719](https://github.com/codevise/pageflow/pull/719))
-- Do not filter sources for audio tags
-  ([#709](https://github.com/codevise/pageflow/pull/709))
-- Bug fix: Continue prebuffer on media tag init
-  ([#740](https://github.com/codevise/pageflow/pull/740))
-
-Theme:
-
-- Add theme option to hide glow behind loading spinner logo
-  ([#675](https://github.com/codevise/pageflow/pull/675))
-- Add logo theme option to fade in with header
-  ([#666](https://github.com/codevise/pageflow/pull/666))
-- Logo theme options
-  ([#733](https://github.com/codevise/pageflow/pull/733))
-- Update to more complete variant of source sans pro font
-  ([#676](https://github.com/codevise/pageflow/pull/676))
-- Allow setting hide text related css classes on wrapper
-  ([#651](https://github.com/codevise/pageflow/pull/651))
-- Use svg icon for slim loading spinner
-  ([#718](https://github.com/codevise/pageflow/pull/718))
-- Allow overriding typography of slim control bar text
-  ([#726](https://github.com/codevise/pageflow/pull/726))
-- Style text track cues
-  ([#713](https://github.com/codevise/pageflow/pull/713))
-- Theme for player controls menu bar
-  ([#717](https://github.com/codevise/pageflow/pull/717))
-- Hide audio page content when text tracks are displayed
-  ([#698](https://github.com/codevise/pageflow/pull/698))
-- Add css class to page background with controls
-  ([#722](https://github.com/codevise/pageflow/pull/722))
-- Bug fix: Fix css class collision in widget scroll indicators
-  ([#667](https://github.com/codevise/pageflow/pull/667))
-- Bug fix: Allow overriding widget theme options
-  ([#723](https://github.com/codevise/pageflow/pull/723))
-- Bug fix: Mark %pageflow_widget_margin_right optional
-  ([#773](https://github.com/codevise/pageflow/pull/773))
-
-JavaScript API:
-
-- Allow to programatically re-enable atmo on mobile devices
-  ([#670](https://github.com/codevise/pageflow/pull/670))
-- Trigger event when widgets are updated
-  ([#712](https://github.com/codevise/pageflow/pull/712))
-- Trigger event when slideshow is resized
-  ([#707](https://github.com/codevise/pageflow/pull/707))
-- Only fire hidetext events on state changes
-  ([#701](https://github.com/codevise/pageflow/pull/701))
-- Trigger event when seed data is available
-  ([#687](https://github.com/codevise/pageflow/pull/687))
-- Ensure page is unprepared if it was not activated
-  ([#650](https://github.com/codevise/pageflow/pull/650))
-
-Seed data:
-
-- Reorganize file seed data
-  ([#686](https://github.com/codevise/pageflow/pull/686))
-- Add video file url to templates and json
-  ([#714](https://github.com/codevise/pageflow/pull/714))
-- Add is_ready flag to file json representation
-  ([#704](https://github.com/codevise/pageflow/pull/704))
-- Include entry slug in common seed
-  ([#702](https://github.com/codevise/pageflow/pull/702))
-- Render storylines as array in seed data
-  ([#680](https://github.com/codevise/pageflow/pull/680))
-- Bug fix: Set position for seeded chapters
-  ([#643](https://github.com/codevise/pageflow/pull/643))
-
-Widgets:
-
-- Player controls improvements
-  ([#699](https://github.com/codevise/pageflow/pull/699),
-   [#720](https://github.com/codevise/pageflow/pull/720),
-   [#739](https://github.com/codevise/pageflow/pull/739),
-   [#751](https://github.com/codevise/pageflow/pull/751))
-- Prevent videojs controls from being displayed
-  ([#697](https://github.com/codevise/pageflow/pull/697))
-- Remove jQuery widgets formerly used by player controls
-  ([#756](https://github.com/codevise/pageflow/pull/756))
-- Bug fix: Prevent line wrap in scroll indicator
-  ([#729](https://github.com/codevise/pageflow/pull/729))
-- Bug fix: Fix sharing menu in mobile navigation
-  ([#661](https://github.com/codevise/pageflow/pull/661))
-- Bug fix: Fix page widget index for analytics adapters
-  ([#652](https://github.com/codevise/pageflow/pull/652))
-- Bug fix: Extend Facebook in-app browser fix to iOS platform
-  ([#637](https://github.com/codevise/pageflow/pull/637))
-- Bug fix: Use entry locale in CloseButton translations
-  ([#760](https://github.com/codevise/pageflow/pull/760))
+- Use page from url hash es landing page
+  ([#832](https://github.com/codevise/pageflow/pull/832))
+- Do not record history when changing pages via scrolling
+  ([#831](https://github.com/codevise/pageflow/pull/831))
+- Improve text tracks and info box display logic
+  ([#826](https://github.com/codevise/pageflow/pull/826))
+- Bug fix: Fix order of public i18n fallback
+  ([#883](https://github.com/codevise/pageflow/pull/883))
+- Bug fix: Prevent display of NaN duration in video controls
+  ([#878](https://github.com/codevise/pageflow/pull/878))
+- Bug fix: Prevent 404 when share image has been deleted
+  ([#816](https://github.com/codevise/pageflow/pull/816))
 
 ##### Admin
 
-- Role based account memberships
-  ([#634](https://github.com/codevise/pageflow/pull/634),
-   [#641](https://github.com/codevise/pageflow/pull/641),
-   [#640](https://github.com/codevise/pageflow/pull/640),
-   [#769](https://github.com/codevise/pageflow/pull/769),
-   [#766](https://github.com/codevise/pageflow/pull/766))
+- Use searchable select boxes in admin forms
+  ([#888](https://github.com/codevise/pageflow/pull/888))
+- Remove sensitive data from active admin downloads
+  ([#899](https://github.com/codevise/pageflow/pull/899))
+- Add config option to prevent multi account users
+  ([#848](https://github.com/codevise/pageflow/pull/848),
+   [#868](https://github.com/codevise/pageflow/pull/868))
+- Add config options to restrict account manager permissions
+  ([#849](https://github.com/codevise/pageflow/pull/849))
+- Fix N+1 query in account admin users tab
+  ([#877](https://github.com/codevise/pageflow/pull/877))
+- Bug fix: Hide restore link and snapshot button for entry previewers
+  ([#853](https://github.com/codevise/pageflow/pull/853))
+- Bug fix: Use copy of current_user in profile form
+  ([#850](https://github.com/codevise/pageflow/pull/850))
+- Bug fix: Ensure new entry button is hidden for editors
+  ([#847](https://github.com/codevise/pageflow/pull/847))
+- Bug fix: Show folder edit button only for publishers and above
+  ([#838](https://github.com/codevise/pageflow/pull/838))
+- Bug fix: Allow :create entry only for publishers on accounts, not on entries
+  ([#836](https://github.com/codevise/pageflow/pull/836))
 
 ##### Editor
 
-- File configuration
-  ([#654](https://github.com/codevise/pageflow/pull/654),
-   [#703](https://github.com/codevise/pageflow/pull/703),
-   [#673](https://github.com/codevise/pageflow/pull/673))
-- Add alt text attribute to files
-  ([#685](https://github.com/codevise/pageflow/pull/685))
-- Manage text track files as nested files
-  ([#660](https://github.com/codevise/pageflow/pull/660),
-   [#684](https://github.com/codevise/pageflow/pull/684),
-   [#683](https://github.com/codevise/pageflow/pull/683),
-   [#682](https://github.com/codevise/pageflow/pull/682),
-   [#688](https://github.com/codevise/pageflow/pull/688),
-   [#716](https://github.com/codevise/pageflow/pull/716))
-- File filters
-  ([#659](https://github.com/codevise/pageflow/pull/659))
-- Let file selection handler abort navigation
-  ([#736](https://github.com/codevise/pageflow/pull/736))
-- Add background inputs group
-  ([#711](https://github.com/codevise/pageflow/pull/711))
-- Improve editor page lifecycle during delete
-  ([#710](https://github.com/codevise/pageflow/pull/710))
-- Make editor play nicely with Redux
-  ([#700](https://github.com/codevise/pageflow/pull/700))
-- Improve html translation support in i18nUtils
-  ([#671](https://github.com/codevise/pageflow/pull/671))
-- Add interpolation support for i18nUtils.findTranslation
-  ([#648](https://github.com/codevise/pageflow/pull/648))
-- Bug fix: Use correct Backbone sync parameter to trigger retry
-  ([#696](https://github.com/codevise/pageflow/pull/696))
-- Bug fix: Do not overwrite file rights when polling
-  ([#715](https://github.com/codevise/pageflow/pull/715))
-- Bug fix: Improve special character handling in formDataUtils
-  ([#690](https://github.com/codevise/pageflow/pull/690))
-
-Backbone Views:
-
-- Improve DropDownButton
-  ([#681](https://github.com/codevise/pageflow/pull/681))
-- Ensure select input view displays default
-  ([#725](https://github.com/codevise/pageflow/pull/725))
-- Add disabled option to referenceinputview
-  ([#734](https://github.com/codevise/pageflow/pull/734))
-- Bug fix: Fix ensureValueDefined option of SelectInputView
-  ([#755](https://github.com/codevise/pageflow/pull/755))
-
-Help:
-
-- Allow external links in editor help
-  ([#649](https://github.com/codevise/pageflow/pull/649))
-- Add inline help for background inputs
-  ([#728](https://github.com/codevise/pageflow/pull/728))
-- Add help entry for text tracks
-  ([#727](https://github.com/codevise/pageflow/pull/727))
-- Improve inline help for rights and alt text field
-  ([#724](https://github.com/codevise/pageflow/pull/724))
+- Widget configuration
+  ([#694](https://github.com/codevise/pageflow/pull/694),
+   [#809](https://github.com/codevise/pageflow/pull/809))
+- Bug fix: Ensure page order in editor preview stays up to date
+  ([#898](https://github.com/codevise/pageflow/pull/898))
+- Bug fix: Switch off file meta data edit links when uploading
+  ([#857](https://github.com/codevise/pageflow/pull/857))
+- Bug fix: Improve polling for HostedFile state
+  ([#822](https://github.com/codevise/pageflow/pull/822))
+- Bug fix: Handle undefined page title.
+  ([#763](https://github.com/codevise/pageflow/pull/763))
+
+##### Media Stack
+
+- Use relative urls inside dash and hls playlists
+  ([#842](https://github.com/codevise/pageflow/pull/842))
+- Use web audio api for volume fading if available
+  ([#800](https://github.com/codevise/pageflow/pull/800),
+   [#863](https://github.com/codevise/pageflow/pull/863))
+
+##### File Processing
+
+- Add panorama_mask image file style
+  ([#830](https://github.com/codevise/pageflow/pull/830))
+- Bug fix: Make url template generation more robust
+  ([#876](https://github.com/codevise/pageflow/pull/876))
 
 ##### Rails Engine
 
-- Introduce conditional thumbnail candidates
-  ([#705](https://github.com/codevise/pageflow/pull/705))
-- Add option to skip smil output
-  ([#645](https://github.com/codevise/pageflow/pull/645))
-- Improve hls options fallback
-  ([#708](https://github.com/codevise/pageflow/pull/708))
-- Export `measure` from `react-measure`
-  ([#823](https://github.com/codevise/pageflow/pull/823))
-- Link to plugins wiki page from readme
-  ([#674](https://github.com/codevise/pageflow/pull/674))
-- Allow using `state_machine_job` gem 1.x
-  ([#819](https://github.com/codevise/pageflow/pull/819))
-- Improve `pageflow-support` gem
-  ([#818](https://github.com/codevise/pageflow/pull/818))
+- Themes can now be guarded by feature flags
+  ([#765](https://github.com/codevise/pageflow/pull/765))
+- Extend EncodingConfirmation by public account attribute
+  ([#817](https://github.com/codevise/pageflow/pull/817))
+- Extend query interface
+  ([#815](https://github.com/codevise/pageflow/pull/815))
+- Accept options for accounts admin menu via config
+  ([#811](https://github.com/codevise/pageflow/pull/811))
+- Add placeholder options to textareainputview
+  ([#807](https://github.com/codevise/pageflow/pull/807))
+- Call hook on entry publication
+  ([#806](https://github.com/codevise/pageflow/pull/806))
+- Add rake task and resque job to delete old auto snapshots
+  ([#861](https://github.com/codevise/pageflow/pull/861),
+   [#882](https://github.com/codevise/pageflow/pull/882))
+- Generate a secure password in the seeds
+  ([#775](https://github.com/codevise/pageflow/pull/775))
+
+##### Theme Options
+
+- Allow specifying opacity of image variant logo
+  ([#799](https://github.com/codevise/pageflow/pull/799))
+- Allow setting size of custom loading spinner background
+  ([#798](https://github.com/codevise/pageflow/pull/798))
+- Add theme option to right align logo in desktop layout
+  ([#797](https://github.com/codevise/pageflow/pull/797))
+- Add theme option to hide scroll indicator
+  ([#790](https://github.com/codevise/pageflow/pull/790))
+- Make content text max width configurable
+  ([#780](https://github.com/codevise/pageflow/pull/780),
+   [#804](https://github.com/codevise/pageflow/pull/804))
+
+##### Documentation
+
+- Import nginx-upload-module guide from wiki
+  ([#814](https://github.com/codevise/pageflow/pull/814),
+   [#821](https://github.com/codevise/pageflow/pull/821))
+- Add documentation for versioning policy
+  ([#866](https://github.com/codevise/pageflow/pull/866))
+- Fix small typos
+  ([#787](https://github.com/codevise/pageflow/pull/787))
 
 ##### Internals
 
-- Use doclets.io for javascript api reference
-  ([#644](https://github.com/codevise/pageflow/pull/644))
-- Git ignore coverage directory
-  ([#647](https://github.com/codevise/pageflow/pull/647))
-- Use only one jshint config for hound
-  ([#658](https://github.com/codevise/pageflow/pull/658))
-- Do not warn about missing frozen string comment
-  ([#646](https://github.com/codevise/pageflow/pull/646))
-- Update travis ruby version to 2.1.7
-  ([#695](https://github.com/codevise/pageflow/pull/695))
-- Remove cargo-culted @body_class
-  ([#616](https://github.com/codevise/pageflow/pull/616))
-- Remove unneeded loop
-  ([#578](https://github.com/codevise/pageflow/pull/578))
-- Use create instead of build_stubbed in EditLock tests
-  ([#689](https://github.com/codevise/pageflow/pull/689))
-- Update semmy
-  ([#820](https://github.com/codevise/pageflow/pull/820))
-- Upgrade to Sinon 2
-  ([#777](https://github.com/codevise/pageflow/pull/777))
-- Use correct matcher to expect destroyed record
-  ([#750](https://github.com/codevise/pageflow/pull/750))
-- Bug fix: Handle symbolized keys in mailer options
-  ([#693](https://github.com/codevise/pageflow/pull/693))
+- Precompile assets in Travis run
+  ([#873](https://github.com/codevise/pageflow/pull/873))
+- Test workflow improvements
+  ([#803](https://github.com/codevise/pageflow/pull/803))
+- Generate admins with account membership in specs
+  ([#840](https://github.com/codevise/pageflow/pull/840))
+- Use rails 4.2.9 in tests
+  ([#837](https://github.com/codevise/pageflow/pull/837))
+- Clean up memberships admin code
+  ([#835](https://github.com/codevise/pageflow/pull/835))
+- Basic tests for UsersTab add user button
+  ([#805](https://github.com/codevise/pageflow/pull/805))
+- Use codevise/teaspoon for logging backtraces on console
+  ([#786](https://github.com/codevise/pageflow/pull/786))
+- Split vendored code from our own
+  ([#885](https://github.com/codevise/pageflow/pull/885))
+- Introduce ApplicationRecord
+  ([#889](https://github.com/codevise/pageflow/pull/889))
+- Move configuration into a concern
+  ([#794](https://github.com/codevise/pageflow/pull/794))
+- Read the attribute instead of super
+  ([#810](https://github.com/codevise/pageflow/pull/810))
+- Destroy widgets when parent subject is destroyed
+  ([#834](https://github.com/codevise/pageflow/pull/834))
+- Fix dummy app generation on Travis for Rubygems 2.7
+  ([#893](https://github.com/codevise/pageflow/pull/893))
+- Update contents of gemspec
+  ([#891](https://github.com/codevise/pageflow/pull/891))
+- Bug fix: Work around breaking change in resque_mailer 2.4.3
+  ([#894](https://github.com/codevise/pageflow/pull/894))
 
 See
-[0-11-stable](https://github.com/codevise/pageflow/blob/0-11-stable/CHANGELOG.md)
+[12-0-stable](https://github.com/codevise/pageflow/blob/12-0-stable/CHANGELOG.md)
 branch for previous changes.

data/README.md

@@ -50,7 +50,7 @@ Pageflow assumes the following choice of libraries:
 
 Pageflow runs in environments with:
 
-* Ruby >= 2.1
+* Ruby >= 2.1 (see `.travis.yml` for supported versions)
 * Node >= 6.9.5
 * Rails 4.2
 * Redis server (for Resque)
@@ -82,10 +82,15 @@ the database:
 
 ### Gem Dependencies
 
-Add this line to your application's Gemfile:
+Add these lines to your application's Gemfile, replacing `X.Y.Z` with
+the current Pageflow version number. It is recommended to depend on a
+specific minor version using the pessimistic version constraint
+operator. See Pageflow's
+[versioning policy](https://github.com/codevise/pageflow/blob/master/doc/versioning_policy.md)
+for details.
 
     # Gemfile
-    gem 'pageflow'
+    gem 'pageflow', '~> X.Y.Z'
 
     # Required for Rails 4.2 compatibility
     gem 'state_machine', git: 'https://github.com/codevise/state_machine.git'
@@ -151,11 +156,27 @@ Consider using the [foreman gem](https://github.com/ddollar/foreman) to start al
 these processes (including the Rails server) with a single command in your
 development environment.
 
+The built-in Resque web server is mounted at `/background_jobs`. Use it to
+inspect the state of background jobs, and restart failed jobs. This functionality
+is only available for admins.
+
 ## Troubleshooting
 
 If you run into problems during the installation of Pageflow, please refer to the [Troubleshooting](https://github.com/codevise/pageflow/wiki/Troubleshooting) wiki
 page. If that doesn't help, consider [filing an issue](https://github.com/codevise/pageflow/issues?state=open).
 
+## Security Policy
+
+For major security issues, at least the current release series and the
+last major series will receive patches and new versions.
+
+Security related announcements will be posted to the
+[`ruby-security-ann`](https://groups.google.com/forum/#!forum/ruby-security-ann)
+mailing list.
+
+If you have found a security related bug, please contact
+`info(at)codevise.de` instead of creating a publicly visible issue.
+
 ## Special Thanks
 
 We would like to express our special thanks to the following services

data/Rakefile

@@ -20,8 +20,8 @@ Semmy::Tasks.install do |config|
   config.source_files_with_docs_tags = '{app,lib,node_package/src}/**/*.{js,jsx,rb,scss}'
 end
 
-require File.expand_path('spec/support/pageflow/rails_version', File.dirname(__FILE__))
-APP_RAKEFILE = File.expand_path("../spec/dummy/rails-#{Pageflow::RailsVersion.detect}/Rakefile", __FILE__)
+require File.expand_path('spec/support/pageflow/dummy/app', File.dirname(__FILE__))
+APP_RAKEFILE = File.expand_path("../#{Pageflow::Dummy::App.new.directory}/Rakefile", __FILE__)
 
 load 'rails/tasks/engine.rake' if File.exists?(APP_RAKEFILE)
 load File.expand_path('lib/tasks/pageflow_tasks.rake', File.dirname(__FILE__))