trek 2.2.0 → 2.3.0

data/lib/generators/trek/templates/spec/requests/admin/user_password_resets_spec.rb

@@ -0,0 +1,71 @@
+require "rails_helper"
+
+RSpec.describe "Admin password resets", type: :request do
+  let(:editor) { users.create(role: :editor) }
+
+  it "renders the reset request form" do
+    get new_admin_user_password_reset_path
+
+    expect(response).to have_http_status(:ok)
+  end
+
+  it "emails a reset link to a privileged user" do
+    expect { post admin_user_password_resets_path, params: { email: editor.email } }
+      .to have_enqueued_mail(Admin::PasswordsMailer, :reset)
+  end
+
+  it "sends nothing for an unknown email" do
+    expect { post admin_user_password_resets_path, params: { email: "nobody@example.com" } }
+      .not_to have_enqueued_mail
+  end
+
+  it "answers an unknown email as a known one, so it can't be used to find accounts" do
+    post admin_user_password_resets_path, params: { email: "nobody@example.com" }
+
+    expect(response).to redirect_to(new_admin_user_session_path)
+  end
+
+  it "renders the new password form from a reset link" do
+    get edit_admin_user_password_reset_path(editor.password_reset_token)
+
+    expect(response).to have_http_status(:ok)
+  end
+
+  it "renders the new password form from an invitation link" do
+    get edit_admin_user_password_reset_path(editor.generate_token_for(:invite))
+
+    expect(response).to have_http_status(:ok)
+  end
+
+  it "sends an invalid link back to the reset request form" do
+    get edit_admin_user_password_reset_path("not-a-token")
+
+    expect(response).to redirect_to(new_admin_user_password_reset_path)
+  end
+
+  it "sets the new password" do
+    patch admin_user_password_reset_path(editor.password_reset_token), params: { password: "a brand new password" }
+
+    expect(editor.reload.authenticate("a brand new password")).to be_truthy
+  end
+
+  it "signs the user out everywhere" do
+    post admin_user_session_path, params: { email: editor.email, password: users.password }
+    patch admin_user_password_reset_path(editor.password_reset_token), params: { password: "a brand new password" }
+
+    expect(editor.user_sessions).to be_empty
+  end
+
+  it "sends a password shorter than 8 characters back to the form" do
+    token = editor.password_reset_token
+    patch admin_user_password_reset_path(token), params: { password: "short" }
+
+    expect(response).to redirect_to(edit_admin_user_password_reset_path(token))
+  end
+
+  it "keeps the old password when the new one is too short" do
+    patch admin_user_password_reset_path(editor.password_reset_token), params: { password: "short" }
+
+    expect(editor.reload.authenticate(users.password)).to be_truthy
+  end
+end

data/lib/generators/trek/templates/spec/requests/admin/user_sessions_spec.rb

@@ -0,0 +1,45 @@
+require "rails_helper"
+
+RSpec.describe "Admin sign-in", type: :request do
+  let(:editor) { users.create(role: :editor) }
+
+  it "renders the sign-in form" do
+    get new_admin_user_session_path
+
+    expect(response).to have_http_status(:ok)
+  end
+
+  it "signs a privileged user in and opens the dashboard" do
+    post admin_user_session_path, params: { email: editor.email, password: users.password }
+    follow_redirect!
+
+    expect(response).to have_http_status(:ok)
+  end
+
+  it "refuses a wrong password" do
+    post admin_user_session_path, params: { email: editor.email, password: "not the password" }
+
+    expect(response).to redirect_to(new_admin_user_session_path)
+  end
+
+  it "refuses a user who is not privileged" do
+    reader = users.create(role: :reader)
+    post admin_user_session_path, params: { email: reader.email, password: users.password }
+
+    expect(response).to redirect_to(new_admin_user_session_path)
+  end
+
+  it "sends a signed-out visitor to the sign-in form" do
+    get admin_root_path
+
+    expect(response).to redirect_to(new_admin_user_session_path)
+  end
+
+  it "signs out" do
+    post admin_user_session_path, params: { email: editor.email, password: users.password }
+    delete admin_user_session_path
+    get admin_root_path
+
+    expect(response).to redirect_to(new_admin_user_session_path)
+  end
+end

data/lib/generators/trek/templates/spec/requests/admin/users_spec.rb

@@ -0,0 +1,99 @@
+require "rails_helper"
+
+RSpec.describe "Admin users", type: :request do
+  let(:admin) { users.create(role: :admin, name: "Ada") }
+  let(:editor) { users.create(role: :editor, name: "Grace") }
+
+  def sign_in(user)
+    post admin_user_session_path, params: { email: user.email, password: users.password }
+  end
+
+  context "when signed in as an admin" do
+    before { sign_in(admin) }
+
+    it "lists the privileged users" do
+      editor
+      get admin_users_path
+
+      expect(response.body).to include("Grace")
+    end
+
+    it "leaves the other users out" do
+      users.create(role: :reader, name: "Linus")
+      get admin_users_path
+
+      expect(response.body).not_to include("Linus")
+    end
+
+    it "renders the new user form" do
+      get new_admin_user_path
+
+      expect(response).to have_http_status(:ok)
+    end
+
+    it "creates a user and sends them an invitation" do
+      params = { user: { email: "new@example.com", role: "editor", send_invite: "1" } }
+
+      expect { post admin_users_path, params: }
+        .to change(User, :count).by(1).and have_enqueued_mail(AdminMailer, :invite)
+    end
+
+    it "changes a user's role" do
+      patch admin_user_path(editor), params: { user: { role: "admin" } }
+
+      expect(editor.reload.role).to eq("admin")
+    end
+
+    it "deletes a user" do
+      editor
+
+      expect { delete admin_user_path(editor) }.to change(User, :count).by(-1)
+    end
+  end
+
+  context "when signed in as an editor" do
+    before { sign_in(editor) }
+
+    it "is sent back to the dashboard from the users list" do
+      get admin_users_path
+
+      expect(response).to redirect_to(admin_root_path)
+    end
+
+    it "is sent back to the dashboard from another user's profile" do
+      get admin_user_path(admin)
+
+      expect(response).to redirect_to(admin_root_path)
+    end
+
+    it "is told why they were sent back" do
+      get admin_users_path
+
+      expect(flash[:alert]).to eq(I18n.t!("notices.unauthorized"))
+    end
+
+    it "gets a 403 for a JSON request they aren't allowed" do
+      get admin_users_path(format: :json)
+
+      expect(response).to have_http_status(:forbidden)
+    end
+
+    it "edits their own profile" do
+      patch admin_user_path(editor), params: { user: { name: "Grace H." } }
+
+      expect(editor.reload.name).to eq("Grace H.")
+    end
+
+    it "cannot change their own role" do
+      patch admin_user_path(editor), params: { user: { role: "admin" } }
+
+      expect(editor.reload.role).to eq("editor")
+    end
+
+    it "switches their admin theme" do
+      patch theme_admin_users_path(format: :turbo_stream), params: { theme: "dark" }
+
+      expect(editor.reload.theme).to eq("dark")
+    end
+  end
+end

data/lib/generators/trek/templates/views/admin/user_password_resets/edit.html.slim

@@ -1,6 +1,6 @@
 = render Trek::GateComponent.new
   = form_with url: admin_user_password_reset_path(@token), method: :put do |f|
-    = f.group :password
+    = f.group :password, model_name: User.model_name
       = f.password_field :password,
           required: true,
           autocomplete: "new-password",

data/lib/generators/trek/templates/views/admin/user_password_resets/new.html.slim

@@ -1,6 +1,6 @@
 = render Trek::GateComponent.new
   = form_with url: admin_user_password_resets_path do |f|
-    = f.group :email
+    = f.group :email, model_name: User.model_name
       = f.email_field :email,
           required: true,
           autofocus: true,

data/lib/generators/trek/templates/views/admin/user_sessions/new.html.slim

@@ -1,13 +1,13 @@
 = render Trek::GateComponent.new
   = form_with url: admin_user_session_path do |f|
-    = f.group :email
+    = f.group :email, model_name: User.model_name
       = f.email_field :email,
           required: true,
           autofocus: @email.nil?,
           autocomplete: "username",
           value: @email
 
-    = f.group :password
+    = f.group :password, model_name: User.model_name
       = f.password_field :password,
           required: true,
           autofocus: @email.present?,

data/lib/generators/trek/templates/views/admin/users/theme.turbo_stream.slim

@@ -0,0 +1,2 @@
+= turbo_stream.replace Trek::ThemeHelper::THEME_ICON_ID do
+  = theme_icon(Current.user.theme)

data/lib/generators/trek/upgrade/v2_generator.rb

@@ -60,6 +60,9 @@ module Trek
             content.sub!(/^#{key}:\n/, "") if YAML.safe_load(content)&.fetch(key, :absent).nil?
           end
           content.gsub!(/\n{3,}/, "\n\n")
+          # No blank line left at the end where a removed block was: `preapprove_npm_package` appends
+          # its own, and a second run would otherwise collapse the double blank line it makes.
+          content.sub!(/\n+\z/, "\n")
 
           create_file ".yarnrc.yml", content, force: true
         rescue Psych::Exception

data/lib/tasks/trek/attachments.rake

@@ -0,0 +1,18 @@
+namespace :trek do
+  namespace :attachments do
+    desc "Promote Shrine attachments left in the cache storage (DRY_RUN=1 only lists them)"
+    task promote_cached: :environment do
+      # Loads every model, so that all attachments are found
+      Rails.application.eager_load!
+
+      statuses = Hash.new(0)
+
+      Trek::CachedAttachments.new.promote(dry_run: ENV["DRY_RUN"].present?) do |entry|
+        statuses[entry.status] += 1
+        puts [entry.status, "#{entry.record.class.name}##{entry.record.id}.#{entry.name}", entry.file.id].join("\t")
+      end
+
+      puts statuses.empty? ? "No attachment left in the cache storage." : statuses.map { "#{_2} #{_1}" }.join(", ")
+    end
+  end
+end

data/lib/trek/cached_attachments.rb

@@ -0,0 +1,53 @@
+module Trek
+  # Finds the records whose Shrine attachments still point to the temporary cache storage —
+  # files whose promotion was skipped — and promotes those whose cached file still exists.
+  class CachedAttachments
+    Entry = Struct.new(:record, :name, :file, :status, keyword_init: true)
+
+    def self.default_models
+      ActiveRecord::Base.descendants.select do |model|
+        !model.abstract_class? && model == model.base_class && model.table_exists?
+      end
+    end
+
+    def initialize(models = self.class.default_models)
+      @models = models
+    end
+
+    # Yields an Entry per cached attachment, whose status is :promoted, :promotable (dry run),
+    # :missing (the cached file is gone) or :changed (the record changed during promotion).
+    def promote(dry_run: false)
+      return enum_for(:promote, dry_run:) unless block_given?
+
+      each_cached_attachment do |record, name|
+        attacher = record.public_send(:"#{name}_attacher")
+
+        yield Entry.new(record:, name:, file: attacher.file, status: promote_attacher(attacher, dry_run:))
+      end
+    end
+
+    private
+
+    def promote_attacher(attacher, dry_run:)
+      return :missing unless attacher.file.exists?
+      return :promotable if dry_run
+
+      attacher.atomic_promote
+      :promoted
+    rescue Shrine::AttachmentChanged
+      :changed
+    end
+
+    def each_cached_attachment(&)
+      @models.each do |model|
+        model.ancestors.grep(Shrine::Attachment).each do |attachment|
+          name = attachment.attachment_name
+          column = model.connection.quote_column_name(:"#{name}_data")
+          cache_key = attachment.options.fetch(:cache, :cache).to_s
+
+          model.where("#{column}::jsonb ->> 'storage' = ?", cache_key).find_each { |record| yield record, name }
+        end
+      end
+    end
+  end
+end

data/lib/trek/saved_attachments_reload.rb

@@ -0,0 +1,44 @@
+# frozen_string_literal: true
+
+module Trek
+  # Shrine plugin keeping, across a reload, the attachers whose file was saved with the record.
+  #
+  # Shrine's `activerecord` plugin resets every attacher when the record is reloaded, which is
+  # right for an explicit reload but loses a pending attachment when something reloads the record
+  # *during* the save: closure_tree does exactly that in its `after_save` callback when it
+  # reorders siblings (on create, or when the parent changes) on a numerically ordered tree.
+  # The attacher is then no longer `changed?` when Shrine's `after_commit` runs, so the file is
+  # never promoted from the temporary `cache` storage to `store` and breaks once the cache is
+  # cleaned up.
+  #
+  # An attachment that was *not* saved is still discarded, as on any reload.
+  module SavedAttachmentsReload
+    module ReloadGuard
+      def reload(...)
+        saved_attachers = instance_variables.filter_map do |ivar|
+          attacher = instance_variable_get(ivar)
+          [ivar, attacher.dup] if attacher.is_a?(::Shrine::Attacher) && attacher.changed?
+        end
+
+        super.tap do
+          saved_attachers.each do |ivar, attacher|
+            # Only the attacher whose file is the one now in the column: anything else was
+            # assigned but not saved, and a reload drops it.
+            instance_variable_set(ivar, attacher) if attacher.file == instance_variable_get(ivar).file
+          end
+        end
+      end
+    end
+
+    module AttachmentMethods
+      def included(model)
+        super
+
+        # Prepended rather than included: Shrine's own `reload` is defined on this attachment
+        # module, which the model includes — a prepended module wraps it whatever the order the
+        # model includes its concerns in.
+        model.prepend(ReloadGuard)
+      end
+    end
+  end
+end

data/lib/trek/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Trek
-  VERSION = "2.2.0"
+  VERSION = "2.3.0"
 end

data/lib/trek.rb

@@ -19,12 +19,15 @@ require "shrine"
 require "shrine/plugins/blurhash"
 require "slim-rails"
 require "strip_attributes"
+require "turbo-rails"
 require "view_component"
 require "view_component/form"
 
 module Trek
+  require_relative "trek/cached_attachments"
   require_relative "trek/engine"
   require_relative "trek/i18n_keys_resolver"
+  require_relative "trek/saved_attachments_reload"
   require_relative "trek/typography_formatter"
   require_relative "trek/version"
 

data/package.json

@@ -1,6 +1,6 @@
 {
   "name": "trek",
-  "version": "2.2.0",
+  "version": "2.3.0",
   "description": "A modern content management & back-office system for Ruby on Rails",
   "homepage": "https://trek.etamin.studio",
   "license": "MIT",

data/postcss.config.js

@@ -1,6 +1,42 @@
+// Radix Colors only ship light (`:root, .light-theme`) and dark (`.dark-theme`)
+// variables, with no way to follow the system preference
+// (https://github.com/radix-ui/colors/issues/26). Copy every rule targeting
+// `.dark-theme` into a `prefers-color-scheme: dark` media query, with
+// `.auto-theme` in place of `.dark-theme`. The media query is appended last so
+// it wins over the light defaults, and each rule keeps its enclosing at-rules
+// (e.g. the Display P3 `@supports`/`@media` blocks).
+const DARK_THEME = /\.dark-theme(?![\w-])/;
+const autoDarkTheme = {
+  postcssPlugin: "auto-dark-theme",
+  OnceExit(root, { AtRule }) {
+    const media = new AtRule({
+      name: "media",
+      params: "(prefers-color-scheme: dark)",
+    });
+
+    root.walkRules((rule) => {
+      const selectors = rule.selectors
+        .filter((selector) => DARK_THEME.test(selector))
+        .map((selector) => selector.replace(DARK_THEME, ".auto-theme"));
+      if (!selectors.length) return;
+
+      let node = rule.clone({ selectors });
+      let parent = rule.parent;
+      while (parent.type === "atrule") {
+        node = parent.clone({ nodes: [] }).append(node);
+        parent = parent.parent;
+      }
+      media.append(node);
+    });
+
+    if (media.nodes?.length) root.append(media);
+  },
+};
+
 module.exports = {
   plugins: [
     require("postcss-import"),
+    autoDarkTheme,
     // call the `postcss-modules` plugin ourselves
     require("postcss-modules")({
       generateScopedName: (name, filename, _css) => {

data/trek.gemspec

@@ -39,6 +39,10 @@ Gem::Specification.new do |spec|
   spec.add_dependency "http_accept_language", "~> 2.1"
   spec.add_dependency "i18n-tasks", "~> 1.0"
   spec.add_dependency "image_processing", "~> 1.8"
+  # json 3's `JSON.parse` takes keyword options only, but ActiveSupport (up to 8.1.3.1) passes them
+  # positionally, which breaks `db/schema.rb` for jsonb columns with a default. Lift once Rails
+  # supports json 3 (spec/dummy/generated_files_spec.rb checks the schema dump).
+  spec.add_dependency "json", "< 3"
   spec.add_dependency "kaminari"
   spec.add_dependency "listen"
   spec.add_dependency "lookbook", ">= 2.3.13"
@@ -53,6 +57,7 @@ Gem::Specification.new do |spec|
   spec.add_dependency "shrine-blurhash", "~> 0.2"
   spec.add_dependency "slim-rails", "~> 4.0"
   spec.add_dependency "strip_attributes", "~> 2.0"
+  spec.add_dependency "turbo-rails", ">= 1.0"
   spec.add_dependency "view_component", "< 5.0"
   spec.add_dependency "view_component-form", "~> 0.3"
   spec.add_dependency "zeitwerk", "~> 2.6"

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: trek
 version: !ruby/object:Gem::Version
-  version: 2.2.0
+  version: 2.3.0
 platform: ruby
 authors:
 - Mohamed Bengrich
@@ -180,6 +180,20 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '1.8'
+- !ruby/object:Gem::Dependency
+  name: json
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '3'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '3'
 - !ruby/object:Gem::Dependency
   name: kaminari
   requirement: !ruby/object:Gem::Requirement
@@ -382,6 +396,20 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '2.0'
+- !ruby/object:Gem::Dependency
+  name: turbo-rails
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '1.0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '1.0'
 - !ruby/object:Gem::Dependency
   name: view_component
   requirement: !ruby/object:Gem::Requirement
@@ -459,13 +487,16 @@ files:
 - app/assets/icons/trek/check.svg
 - app/assets/icons/trek/chevron-double-left.svg
 - app/assets/icons/trek/chevron-double-right.svg
+- app/assets/icons/trek/chevron-down.svg
 - app/assets/icons/trek/chevron-left.svg
 - app/assets/icons/trek/chevron-right.svg
+- app/assets/icons/trek/chevron-up.svg
 - app/assets/icons/trek/close.svg
 - app/assets/icons/trek/cursor.svg
 - app/assets/icons/trek/danger.svg
 - app/assets/icons/trek/download.svg
 - app/assets/icons/trek/eraser.svg
+- app/assets/icons/trek/external.svg
 - app/assets/icons/trek/eye.svg
 - app/assets/icons/trek/grid.svg
 - app/assets/icons/trek/hr.svg
@@ -487,7 +518,9 @@ files:
 - app/assets/icons/trek/reorder.svg
 - app/assets/icons/trek/return.svg
 - app/assets/icons/trek/search.svg
-- app/assets/icons/trek/theme.svg
+- app/assets/icons/trek/theme-auto.svg
+- app/assets/icons/trek/theme-dark.svg
+- app/assets/icons/trek/theme-light.svg
 - app/assets/icons/trek/undo.svg
 - app/assets/images/trek/favicon.png
 - app/assets/images/trek/favicon.svg
@@ -528,6 +561,10 @@ files:
 - app/components/trek/dialog_component/dialog_component.css
 - app/components/trek/dialog_component/dialog_component.html.slim
 - app/components/trek/dialog_component/dialog_component.js
+- app/components/trek/dropdown_component.rb
+- app/components/trek/dropdown_component/dropdown_component.css
+- app/components/trek/dropdown_component/dropdown_component.html.slim
+- app/components/trek/dropdown_component/dropdown_component.js
 - app/components/trek/entries/item_component.rb
 - app/components/trek/entries/item_component/item_component.css
 - app/components/trek/entries/item_component/item_component.html.slim
@@ -715,6 +752,7 @@ files:
 - app/policies/trek/preview_policy.rb
 - app/policies/trek/resource_policy.rb
 - app/policies/trek/user_policy.rb
+- app/uploaders/audio_uploader.rb
 - app/uploaders/image_uploader.rb
 - app/uploaders/model_image_uploader.rb
 - app/uploaders/record_image_uploader.rb
@@ -800,6 +838,7 @@ files:
 - lib/generators/trek/install/admin_generator.rb
 - lib/generators/trek/install/agents_generator.rb
 - lib/generators/trek/install/application_generator.rb
+- lib/generators/trek/install/appsignal_generator.rb
 - lib/generators/trek/install/assets_generator.rb
 - lib/generators/trek/install/attachments_generator.rb
 - lib/generators/trek/install/authentication_generator.rb
@@ -823,6 +862,7 @@ files:
 - lib/generators/trek/install/mailer_generator.rb
 - lib/generators/trek/install/makefile_generator.rb
 - lib/generators/trek/install/menu_node_generator.rb
+- lib/generators/trek/install/model_specs_generator.rb
 - lib/generators/trek/install/package_json_generator.rb
 - lib/generators/trek/install/page_generator.rb
 - lib/generators/trek/install/postcss_generator.rb
@@ -850,6 +890,7 @@ files:
 - lib/generators/trek/templates/Makefile
 - lib/generators/trek/templates/README.md
 - lib/generators/trek/templates/components/index.js
+- lib/generators/trek/templates/config/appsignal.rb.tt
 - lib/generators/trek/templates/config/i18n-tasks.yml.erb
 - lib/generators/trek/templates/controllers/admin/base_controller.rb
 - lib/generators/trek/templates/controllers/admin/dashboards_controller.rb
@@ -861,9 +902,14 @@ files:
 - lib/generators/trek/templates/controllers/admin/user_password_resets_controller.rb
 - lib/generators/trek/templates/controllers/admin/user_sessions_controller.rb
 - lib/generators/trek/templates/controllers/admin/users_controller.rb
+- lib/generators/trek/templates/controllers/concerns/appsignal_context.rb
 - lib/generators/trek/templates/controllers/concerns/trek/authentication.rb
+- lib/generators/trek/templates/db/seeds/setup/fragments.rb
+- lib/generators/trek/templates/db/seeds/setup/users.rb
+- lib/generators/trek/templates/db/seeds/test/cases/page_tree.rb
 - lib/generators/trek/templates/helpers/application_helper.rb
 - lib/generators/trek/templates/helpers/external_link_path_helper.rb
+- lib/generators/trek/templates/initializers/appsignal_context.rb
 - lib/generators/trek/templates/initializers/healthcheck.rb
 - lib/generators/trek/templates/initializers/shrine.rb
 - lib/generators/trek/templates/javascript/application.js
@@ -911,7 +957,24 @@ files:
 - lib/generators/trek/templates/policies/page.rb
 - lib/generators/trek/templates/policies/preview.rb
 - lib/generators/trek/templates/policies/user.rb
+- lib/generators/trek/templates/spec/fixtures/files/image.png
+- lib/generators/trek/templates/spec/fixtures/files/sound.mp3
+- lib/generators/trek/templates/spec/models/page_spec.rb
+- lib/generators/trek/templates/spec/models/user_spec.rb
+- lib/generators/trek/templates/spec/policies/admin/external_link_policy_spec.rb
+- lib/generators/trek/templates/spec/policies/admin/fragment_policy_spec.rb
+- lib/generators/trek/templates/spec/policies/admin/page_policy_spec.rb
+- lib/generators/trek/templates/spec/policies/admin/preview_policy_spec.rb
+- lib/generators/trek/templates/spec/policies/admin/tag_category_policy_spec.rb
+- lib/generators/trek/templates/spec/policies/admin/tag_policy_spec.rb
+- lib/generators/trek/templates/spec/policies/admin/user_policy_spec.rb
+- lib/generators/trek/templates/spec/requests/admin/fragments_spec.rb
 - lib/generators/trek/templates/spec/requests/admin/n_plus_one_spec.rb
+- lib/generators/trek/templates/spec/requests/admin/pages_spec.rb
+- lib/generators/trek/templates/spec/requests/admin/uploads_spec.rb
+- lib/generators/trek/templates/spec/requests/admin/user_password_resets_spec.rb
+- lib/generators/trek/templates/spec/requests/admin/user_sessions_spec.rb
+- lib/generators/trek/templates/spec/requests/admin/users_spec.rb
 - lib/generators/trek/templates/views/admin/dashboards/index.html.slim
 - lib/generators/trek/templates/views/admin/fragments/_form.html.slim
 - lib/generators/trek/templates/views/admin/fragments/_fragment.json.jb
@@ -944,14 +1007,18 @@ files:
 - lib/generators/trek/templates/views/admin/users/index.html.slim
 - lib/generators/trek/templates/views/admin/users/new.html.slim
 - lib/generators/trek/templates/views/admin/users/show.html.slim
+- lib/generators/trek/templates/views/admin/users/theme.turbo_stream.slim
 - lib/generators/trek/templates/views/admin_mailer/invite.en.html.slim
 - lib/generators/trek/templates/views/admin_mailer/invite.en.text.erb
 - lib/generators/trek/templates/views/admin_mailer/invite.fr.html.slim
 - lib/generators/trek/templates/views/admin_mailer/invite.fr.text.erb
 - lib/generators/trek/upgrade/v2_generator.rb
+- lib/tasks/trek/attachments.rake
 - lib/trek.rb
+- lib/trek/cached_attachments.rb
 - lib/trek/engine.rb
 - lib/trek/i18n_keys_resolver.rb
+- lib/trek/saved_attachments_reload.rb
 - lib/trek/typography_formatter.rb
 - lib/trek/version.rb
 - netlify.toml
@@ -981,7 +1048,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 4.0.16
+rubygems_version: 4.0.20
 specification_version: 4
 summary: A modern content management & back-office system for Ruby on Rails
 test_files: []