railspress-engine 1.4.1 → 1.4.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 4832e9331e7dd8cd0c22cfcff629686af94a9320f528c618b3b186e25661856e
-  data.tar.gz: 73e508e5a8746f2f20c0aec946741eae5f3e774791cccc4aa9ab1636b7471517
+  metadata.gz: 5a843f07c6d903605a67314573c816bbff6099640947e622e9c59a89ff88cbea
+  data.tar.gz: 17f4e1697c1dd88947460d5e93cb42cee3652677ce69fc456e4da1821e56b9b1
 SHA512:
-  metadata.gz: e3f106699162ca08c399b2026a6d688884baa12b51662e364148a2c551898f3cd63a0ffa45f1e23f32a2cf98cfb5a34f111161d6194466b33da5e82898b46ff9
-  data.tar.gz: bbadd8b060ec358f648fe79ddaf10dd4f2c1f7b03dcfcae0e8fc6da0ada6a8a46557c64fe256e8eda79703d2911c404fadec90e95ba79892270faacecb5318c4
+  metadata.gz: 9bb75c97d3ace5d1fb54d6281d6ce4c2d17ac29cfd3d71821ba92cb22ecb7b4634a60b1015b0226755b52bc75e778d5ef9f1062976382843a03faa6b686990c8
+  data.tar.gz: 2aaca7f4a20c3f875bac0c37817f5eadb853c317ef72bf9d00100ad5ddf865ed000214b8e0e15155dd90033b21a1b1426a7ce3f576d610e5819398e6aa535ca7

data/README.md

@@ -5,7 +5,7 @@
 
 <p align="center">
   <a href="https://rubygems.org/gems/railspress-engine"><img src="https://img.shields.io/gem/v/railspress-engine.svg?style=flat&bump=true" alt="Gem Version"></a>
-  <img src="https://img.shields.io/badge/Rails-8.1%2B-red.svg?style=flat" alt="Rails 8.1+">
+  <img src="https://img.shields.io/badge/Rails-8.1.3.1%2B-red.svg?style=flat" alt="Rails 8.1.3.1+">
   <img src="https://img.shields.io/badge/Ruby-3.3%2B-red.svg?style=flat" alt="Ruby 3.3+">
   <a href="https://osaasy.dev/"><img src="https://img.shields.io/badge/License-O'Saasy-blue.svg?style=flat" alt="License"></a>
 </p>
@@ -78,7 +78,7 @@ Most content doesn't fit neatly into "blog posts." A portfolio piece isn't a pos
 
 ## Requirements
 
-- Rails 8.1+
+- Rails 8.1.3.1+
 - Ruby 3.3+
 - ActionText
 - Active Storage
@@ -94,21 +94,19 @@ rails active_storage:install
 
 ### Image variants
 
-RailsPress can generate resized image variants for post header images and image helpers. Active Storage needs an image processor for this; RailsPress does not install one for your application.
+RailsPress can generate resized image variants for post header images and image helpers. RailsPress includes a secure version of `image_processing`, but Active Storage still needs a processor gem and its native system library.
 
-Choose one processor and add the corresponding gems to your application's `Gemfile`:
+Choose one processor and add its gem to your application's `Gemfile`:
 
 ```ruby
-# Recommended for new Rails 8.1+ applications
-gem "image_processing", "~> 2.0"
-gem "ruby-vips", "~> 2.0"
+# Recommended for Rails 8.1.3.1+ applications
+gem "ruby-vips", "~> 2.2", ">= 2.2.1"
 
 # Or use ImageMagick instead
-# gem "image_processing", "~> 2.0"
 # gem "mini_magick", "~> 5.0"
 ```
 
-Install the matching system library in every environment where variants are generated: [libvips](https://www.libvips.org/) for `ruby-vips`, or [ImageMagick](https://imagemagick.org/) for `mini_magick`. If your app uses ImageMagick, select it explicitly:
+Install the matching system library in every environment where variants are generated: libvips `8.13+` for `ruby-vips`, or [ImageMagick](https://imagemagick.org/) for `mini_magick`. Rails and ruby-vips cannot safely block untrusted libvips operations on older libvips releases. If your app uses ImageMagick, select it explicitly:
 
 ```ruby
 # config/application.rb

data/app/controllers/railspress/admin/posts_controller.rb

@@ -9,15 +9,15 @@ module Railspress
         @direction = params[:direction].presence || "desc"
 
         @posts = Post.includes(:category, :tags)
-                     .search(params[:q])
+                     .rp_search(params[:q])
                      .by_category(params[:category_id])
                      .by_status(params[:status])
                      .sorted_by(@sort, @direction)
 
         @total_count = @posts.count
         @page = [ params[:page].to_i, 1 ].max
-        @total_pages = (@total_count.to_f / Post::PER_PAGE).ceil
-        @posts = @posts.page(@page)
+        @total_pages = (@total_count.to_f / Post.rp_per_page_count).ceil
+        @posts = @posts.rp_page(@page)
 
         @categories = Category.ordered
       end

data/app/controllers/railspress/api/v1/posts_controller.rb

@@ -102,8 +102,8 @@ module Railspress
         end
 
         def per_page
-          requested = params.fetch(:per, Railspress::Post.per_page_count).to_i
-          requested = Railspress::Post.per_page_count if requested <= 0
+          requested = params.fetch(:per, Railspress::Post.rp_per_page_count).to_i
+          requested = Railspress::Post.rp_per_page_count if requested <= 0
           [ requested, 100 ].min
         end
 

data/app/models/railspress/post.rb

@@ -74,14 +74,22 @@ module Railspress
     before_save :set_published_at
     before_save :set_reading_time, if: -> { reading_time.blank? && content.present? }
 
-    # Generic scopes (ordered, recent) and pagination (page) provided by Entity concern
+    # Generic scopes (ordered, recent) and pagination (rp_page) provided by Entity concern
     # Post-specific scopes below:
     scope :published, -> { where(status: :published).where(published_at: ..Time.current) }
     scope :drafts, -> { where(status: :draft) }
     scope :scheduled, -> { where(status: :published).where("published_at > ?", Time.current) }
     scope :live, -> { published }  # Alias for semantic clarity
     scope :by_author, ->(author) { where(author_id: author.id) }
-    scope :search, ->(query) { where("title ILIKE ?", "%#{query}%") if query.present? }
+    scope :rp_search, ->(query) {
+      query.present? ? where(arel_table[:title].matches("%#{query}%", nil, false)) : all
+    }
+    unless respond_to?(:search)
+      scope :search, ->(query) {
+        Railspress.deprecator.warn("search is deprecated and will be removed in RailsPress 2.0; use rp_search instead")
+        rp_search(query)
+      }
+    end
     scope :by_category, ->(category_id) { where(category_id: category_id) if category_id.present? }
     scope :by_status, ->(status) {
       case status.to_s

data/lib/railspress/engine.rb

@@ -2,6 +2,10 @@ module Railspress
   class Engine < ::Rails::Engine
     isolate_namespace Railspress
 
+    initializer "railspress.deprecator" do |app|
+      app.deprecators[:railspress] = Railspress.deprecator
+    end
+
     # Register engine assets with the asset pipeline (Propshaft)
     initializer "railspress.assets" do |app|
       if app.config.respond_to?(:assets)
@@ -15,8 +19,6 @@ module Railspress
 
     # Make CMS helper available to host application views (or stub when disabled)
     initializer "railspress.cms_helper" do
-      ActiveSupport::Dependencies.require_dependency(root.join("app/helpers/railspress/cms_helper").to_s)
-
       ActiveSupport.on_load(:action_view) do
         if Railspress.cms_enabled?
           include Railspress::CmsHelper

data/lib/railspress/entity.rb

@@ -149,6 +149,22 @@ module Railspress
       # Default scopes available to all entities
       scope :ordered, -> { order(created_at: :desc) }
       scope :recent, -> { ordered.limit(10) }
+
+      unless respond_to?(:page)
+        scope :page, ->(page_number) {
+          Railspress.deprecator.warn("page is deprecated and will be removed in RailsPress 2.0; use rp_page instead")
+          rp_page(page_number)
+        }
+      end
+
+      unless respond_to?(:per_page_count)
+        define_singleton_method(:per_page_count) do
+          Railspress.deprecator.warn(
+            "per_page_count is deprecated and will be removed in RailsPress 2.0; use rp_per_page_count instead"
+          )
+          rp_per_page_count
+        end
+      end
     end
 
     # Default pagination - can be overridden in model
@@ -156,13 +172,13 @@ module Railspress
 
     class_methods do
       # Simple pagination for index views
-      def page(page_number)
+      def rp_page(page_number)
         page_number = [ page_number.to_i, 1 ].max
-        offset((page_number - 1) * per_page_count).limit(per_page_count)
+        offset((page_number - 1) * rp_per_page_count).limit(rp_per_page_count)
       end
 
       # Allow models to override PER_PAGE
-      def per_page_count
+      def rp_per_page_count
         const_defined?(:PER_PAGE, false) ? const_get(:PER_PAGE) : Railspress::Entity::PER_PAGE
       end
 

data/lib/railspress/version.rb

@@ -1,3 +1,3 @@
 module Railspress
-  VERSION = "1.4.1"
+  VERSION = "1.4.3"
 end

data/lib/railspress.rb

@@ -1,4 +1,6 @@
 require "railspress/version"
+require "active_support/deprecation"
+require "railspress/cms_helper"
 require "railspress/engine"
 require "railspress/entity"
 require "lexxy"
@@ -194,6 +196,10 @@ module Railspress
   end
 
   class << self
+    def deprecator
+      @deprecator ||= ActiveSupport::Deprecation.new("2.0", "RailsPress")
+    end
+
     def configuration
       @configuration ||= Configuration.new
     end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: railspress-engine
 version: !ruby/object:Gem::Version
-  version: 1.4.1
+  version: 1.4.3
 platform: ruby
 authors:
 - Avi Flombaum
@@ -15,28 +15,48 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '8.1'
+        version: 8.1.3.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '8.1'
+        version: 8.1.3.1
 - !ruby/object:Gem::Dependency
   name: lexxy
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '0'
+        version: 0.9.29
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '0'
+        version: 0.9.29
+- !ruby/object:Gem::Dependency
+  name: image_processing
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.0'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 2.0.3
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.0'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 2.0.3
 - !ruby/object:Gem::Dependency
   name: rubyzip
   requirement: !ruby/object:Gem::Requirement
@@ -187,7 +207,6 @@ files:
 - app/controllers/railspress/application_controller.rb
 - app/helpers/railspress/admin_helper.rb
 - app/helpers/railspress/application_helper.rb
-- app/helpers/railspress/cms_helper.rb
 - app/javascript/railspress/controllers/cms_inline_editor_controller.js
 - app/javascript/railspress/controllers/content_element_form_controller.js
 - app/javascript/railspress/controllers/crop_controller.js
@@ -308,15 +327,16 @@ files:
 - lib/railspress-engine.rb
 - lib/railspress.rb
 - lib/railspress/cms.rb
+- lib/railspress/cms_helper.rb
 - lib/railspress/engine.rb
 - lib/railspress/entity.rb
 - lib/railspress/version.rb
 - lib/tasks/railspress_tasks.rake
-homepage: https://github.com/aviflombaum/railspress-engine
+homepage: https://railspress.org
 licenses:
 - Nonstandard
 metadata:
-  homepage_uri: https://github.com/aviflombaum/railspress-engine
+  homepage_uri: https://railspress.org
   source_code_uri: https://github.com/aviflombaum/railspress-engine
   changelog_uri: https://github.com/aviflombaum/railspress-engine/blob/main/CHANGELOG.md
   rubygems_mfa_required: 'true'
@@ -352,7 +372,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 4.0.14
+rubygems_version: 4.0.18
 specification_version: 4
 summary: A mountable blog + CMS engine for Rails 8+
 test_files: []