trusty-cms 8.0 → 8.1.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 77d3850c23f30e1a9654c68e84bf5f34c3c7ebd3f0deaf5baadd91a34423eb3f
-  data.tar.gz: d21af2702b713670e01cd1f33ae95e8d2ea9803e1134921a8d76f90e2d75ec0d
+  metadata.gz: '09a975dbfdff3498fab3bcc60a600da1b0da0a5f0129f0d70df7b9db6bb1b1cc'
+  data.tar.gz: f6be37f3b4528ec731cf84640a125b7ef01bc9ab62e075f0f4a2c6a049723fd1
 SHA512:
-  metadata.gz: 4847f7ef1367b73749feead54eae6d0c7ffa76d953b6ac6dd0c29af23cdfe11b0b4c9a26e8a9018b0d0200ae30818f65cb6aba4be1bc3e41a5e4c4089ac0cd0f
-  data.tar.gz: bdd09ed13ebc928624962d5d44b0eb82d63694a55a9fbcd5b50584a206ae998c81f5f68353c97738cb0a1e6c84f2fe158cb222bd37f22c3798f932f6346fbc07
+  metadata.gz: 023a11dd1d3377191a5f4bdb80490b452a8c789f89a637c90f96163e11a2a5b9f283b59e08cbd7fea89a656fd1523194a2dd85a08e41b757bfbd1e06aca96181
+  data.tar.gz: 3f0bd848d25abc30b4dffc21f3d504ff187710bf460e7fd902071f1fe81100a905689f2ad6eacd7135313052ac0d3265d9ee5835a6db10eed4024a2c7db140bb

data/Gemfile

@@ -19,9 +19,9 @@ group :development, :test do
   gem 'factory_bot_rails', '6.5.1'
   gem 'file_validators'
   gem 'jsbundling-rails', '~> 1.3'
-  gem 'launchy', '~> 3.0.1'
+  gem 'launchy', '~> 3.1.1'
   gem 'mysql2'
-  gem 'paper_trail', '~> 16.0.0'
+  gem 'paper_trail', '~> 17.0.0'
   gem 'paper_trail-association_tracking', '~> 2.3.0'
   gem 'poltergeist', '~> 1.18.1'
   gem 'pry-byebug'

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    trusty-cms (8.0)
+    trusty-cms (8.1.0)
       RedCloth (= 4.3.4)
       activestorage-validator
       acts_as_list (>= 0.9.5, < 1.3.0)
@@ -15,8 +15,8 @@ PATH
       diffy
       drb
       execjs (~> 2.7)
-      haml (~> 6.3.0)
-      haml-rails (~> 2.1)
+      haml (>= 6.3, < 7.4)
+      haml-rails (>= 2.1, < 4.0)
       highline (>= 1.7.8, < 3.2.0)
       image_processing
       kraken-io
@@ -24,13 +24,13 @@ PATH
       mini_racer
       mutex_m
       mysql2
-      paper_trail (~> 16.0.0)
+      paper_trail (~> 17.0.0)
       paper_trail-association_tracking (>= 2.2.1, < 2.4.0)
       psych (= 5.4.0)
       rack (>= 2.0.1, < 3.2.0)
       rack-cache (~> 1.7)
       radius (~> 0.8)
-      rails (~> 8.0.0)
+      rails (~> 8.1.0)
       rake (< 14.0)
       ransack (~> 4.2.1)
       rdoc (>= 5.1, < 9.0)
@@ -47,29 +47,31 @@ GEM
   remote: https://rubygems.org/
   specs:
     RedCloth (4.3.4)
-    actioncable (8.0.5.1)
-      actionpack (= 8.0.5.1)
-      activesupport (= 8.0.5.1)
+    action_text-trix (2.1.19)
+      railties
+    actioncable (8.1.3.1)
+      actionpack (= 8.1.3.1)
+      activesupport (= 8.1.3.1)
       nio4r (~> 2.0)
       websocket-driver (>= 0.6.1)
       zeitwerk (~> 2.6)
-    actionmailbox (8.0.5.1)
-      actionpack (= 8.0.5.1)
-      activejob (= 8.0.5.1)
-      activerecord (= 8.0.5.1)
-      activestorage (= 8.0.5.1)
-      activesupport (= 8.0.5.1)
+    actionmailbox (8.1.3.1)
+      actionpack (= 8.1.3.1)
+      activejob (= 8.1.3.1)
+      activerecord (= 8.1.3.1)
+      activestorage (= 8.1.3.1)
+      activesupport (= 8.1.3.1)
       mail (>= 2.8.0)
-    actionmailer (8.0.5.1)
-      actionpack (= 8.0.5.1)
-      actionview (= 8.0.5.1)
-      activejob (= 8.0.5.1)
-      activesupport (= 8.0.5.1)
+    actionmailer (8.1.3.1)
+      actionpack (= 8.1.3.1)
+      actionview (= 8.1.3.1)
+      activejob (= 8.1.3.1)
+      activesupport (= 8.1.3.1)
       mail (>= 2.8.0)
       rails-dom-testing (~> 2.2)
-    actionpack (8.0.5.1)
-      actionview (= 8.0.5.1)
-      activesupport (= 8.0.5.1)
+    actionpack (8.1.3.1)
+      actionview (= 8.1.3.1)
+      activesupport (= 8.1.3.1)
       nokogiri (>= 1.8.5)
       rack (>= 2.2.4)
       rack-session (>= 1.0.1)
@@ -77,44 +79,45 @@ GEM
       rails-dom-testing (~> 2.2)
       rails-html-sanitizer (~> 1.6)
       useragent (~> 0.16)
-    actiontext (8.0.5.1)
-      actionpack (= 8.0.5.1)
-      activerecord (= 8.0.5.1)
-      activestorage (= 8.0.5.1)
-      activesupport (= 8.0.5.1)
+    actiontext (8.1.3.1)
+      action_text-trix (~> 2.1.15)
+      actionpack (= 8.1.3.1)
+      activerecord (= 8.1.3.1)
+      activestorage (= 8.1.3.1)
+      activesupport (= 8.1.3.1)
       globalid (>= 0.6.0)
       nokogiri (>= 1.8.5)
-    actionview (8.0.5.1)
-      activesupport (= 8.0.5.1)
+    actionview (8.1.3.1)
+      activesupport (= 8.1.3.1)
       builder (~> 3.1)
       erubi (~> 1.11)
       rails-dom-testing (~> 2.2)
       rails-html-sanitizer (~> 1.6)
-    activejob (8.0.5.1)
-      activesupport (= 8.0.5.1)
+    activejob (8.1.3.1)
+      activesupport (= 8.1.3.1)
       globalid (>= 0.3.6)
-    activemodel (8.0.5.1)
-      activesupport (= 8.0.5.1)
-    activerecord (8.0.5.1)
-      activemodel (= 8.0.5.1)
-      activesupport (= 8.0.5.1)
+    activemodel (8.1.3.1)
+      activesupport (= 8.1.3.1)
+    activerecord (8.1.3.1)
+      activemodel (= 8.1.3.1)
+      activesupport (= 8.1.3.1)
       timeout (>= 0.4.0)
-    activestorage (8.0.5.1)
-      actionpack (= 8.0.5.1)
-      activejob (= 8.0.5.1)
-      activerecord (= 8.0.5.1)
-      activesupport (= 8.0.5.1)
+    activestorage (8.1.3.1)
+      actionpack (= 8.1.3.1)
+      activejob (= 8.1.3.1)
+      activerecord (= 8.1.3.1)
+      activesupport (= 8.1.3.1)
       marcel (~> 1.0)
     activestorage-validator (0.8.0)
       rails (>= 7.2.0)
-    activesupport (8.0.5.1)
+    activesupport (8.1.3.1)
       base64
-      benchmark (>= 0.3)
       bigdecimal
       concurrent-ruby (~> 1.0, >= 1.3.1)
       connection_pool (>= 2.2.5)
       drb
       i18n (>= 1.6, < 2)
+      json
       logger (>= 1.4.2)
       minitest (>= 5.1)
       securerandom (>= 0.3)
@@ -129,7 +132,6 @@ GEM
       public_suffix (>= 2.0.2, < 8.0)
     base64 (0.3.0)
     bcrypt (3.1.22)
-    benchmark (0.5.0)
     bigdecimal (4.1.2)
     builder (3.3.0)
     byebug (13.0.0)
@@ -180,7 +182,7 @@ GEM
     diff-lcs (1.6.2)
     diffy (3.4.4)
     drb (2.2.3)
-    erb (6.0.6)
+    erb (6.0.7)
     erubi (1.13.1)
     execjs (2.10.1)
     factory_bot (6.6.0)
@@ -203,11 +205,12 @@ GEM
       mime-types (>= 1.0)
     globalid (1.4.0)
       activesupport (>= 6.1)
-    haml (6.3.1)
+    haml (7.3.0)
+      prism (>= 1.1.0)
       temple (>= 0.8.2)
       thor
       tilt
-    haml-rails (2.1.0)
+    haml-rails (3.1.0)
       actionpack (>= 5.1)
       activesupport (>= 5.1)
       haml (>= 4.0.6)
@@ -221,7 +224,7 @@ GEM
     i18n (1.15.2)
       concurrent-ruby (~> 1.0)
     image_processing (2.0.2)
-    io-console (0.8.2)
+    io-console (0.9.2)
     irb (1.18.0)
       pp (>= 0.6.0)
       prism (>= 1.3.0)
@@ -235,9 +238,10 @@ GEM
       httparty
       json
       multipart-post
-    launchy (3.0.1)
+    launchy (3.1.1)
       addressable (~> 2.8)
       childprocess (~> 5.0)
+      logger (~> 1.6)
     libv8-node (24.12.0.1)
     libv8-node (24.12.0.1-aarch64-linux)
     libv8-node (24.12.0.1-aarch64-linux-musl)
@@ -307,8 +311,8 @@ GEM
     nokogiri (1.19.4-x86_64-linux-musl)
       racc (~> 1.4)
     orm_adapter (0.5.0)
-    paper_trail (16.0.0)
-      activerecord (>= 6.1)
+    paper_trail (17.0.0)
+      activerecord (>= 7.1)
       request_store (~> 1.4)
     paper_trail-association_tracking (2.3.0)
       paper_trail (>= 12.0)
@@ -343,20 +347,20 @@ GEM
     rackup (2.3.1)
       rack (>= 3)
     radius (0.8.0)
-    rails (8.0.5.1)
-      actioncable (= 8.0.5.1)
-      actionmailbox (= 8.0.5.1)
-      actionmailer (= 8.0.5.1)
-      actionpack (= 8.0.5.1)
-      actiontext (= 8.0.5.1)
-      actionview (= 8.0.5.1)
-      activejob (= 8.0.5.1)
-      activemodel (= 8.0.5.1)
-      activerecord (= 8.0.5.1)
-      activestorage (= 8.0.5.1)
-      activesupport (= 8.0.5.1)
+    rails (8.1.3.1)
+      actioncable (= 8.1.3.1)
+      actionmailbox (= 8.1.3.1)
+      actionmailer (= 8.1.3.1)
+      actionpack (= 8.1.3.1)
+      actiontext (= 8.1.3.1)
+      actionview (= 8.1.3.1)
+      activejob (= 8.1.3.1)
+      activemodel (= 8.1.3.1)
+      activerecord (= 8.1.3.1)
+      activestorage (= 8.1.3.1)
+      activesupport (= 8.1.3.1)
       bundler (>= 1.15.0)
-      railties (= 8.0.5.1)
+      railties (= 8.1.3.1)
     rails-dom-testing (2.3.0)
       activesupport (>= 5.0.0)
       minitest
@@ -366,9 +370,9 @@ GEM
       nokogiri (>= 1.15.7, != 1.16.7, != 1.16.6, != 1.16.5, != 1.16.4, != 1.16.3, != 1.16.2, != 1.16.1, != 1.16.0.rc1, != 1.16.0)
     rails-observers (0.1.5)
       activemodel (>= 4.0)
-    railties (8.0.5.1)
-      actionpack (= 8.0.5.1)
-      activesupport (= 8.0.5.1)
+    railties (8.1.3.1)
+      actionpack (= 8.1.3.1)
+      activesupport (= 8.1.3.1)
       irb (~> 1.13)
       rackup (>= 1.0.0)
       rake (>= 12.2)
@@ -380,7 +384,7 @@ GEM
       activerecord (>= 6.1.5)
       activesupport (>= 6.1.5)
       i18n
-    rbs (4.1.2)
+    rbs (4.1.3)
       logger
       prism (>= 1.6.0)
       tsort
@@ -390,7 +394,7 @@ GEM
       rbs (>= 4.0.0)
       tsort
     regexp_parser (2.12.0)
-    reline (0.6.3)
+    reline (0.7.0)
       io-console (~> 0.5)
     request_store (1.7.0)
       rack (>= 1.4)
@@ -451,7 +455,7 @@ GEM
     ssrf_filter (1.5.0)
     stringex (2.8.6)
     stringio (3.2.0)
-    temple (0.10.4)
+    temple (0.10.6)
     thor (1.5.0)
     tilt (2.8.0)
     timeout (0.6.1)
@@ -495,9 +499,9 @@ DEPENDENCIES
   factory_bot_rails (= 6.5.1)
   file_validators
   jsbundling-rails (~> 1.3)
-  launchy (~> 3.0.1)
+  launchy (~> 3.1.1)
   mysql2
-  paper_trail (~> 16.0.0)
+  paper_trail (~> 17.0.0)
   paper_trail-association_tracking (~> 2.3.0)
   poltergeist (~> 1.18.1)
   pry-byebug

data/app/helpers/admin/pages_helper.rb

@@ -19,11 +19,22 @@ module Admin::PagesHelper
   end
 
   def parent_page_options(current_site, page)
-    parent_pages = []
-    parent_pages.concat(Page.parent_pages(current_site.homepage_id))
-    parent_pages << page.parent if page.parent
-    selected_page_id = page.parent_id
-    options_for_select(parent_pages.map { |p| [p.title, p.id] }, selected_page_id)
+    parent_pages = Page.parent_pages(current_site.homepage_id).to_a
+    parent_pages << page.parent if page.parent && parent_pages.exclude?(page.parent)
+    # A page can never be its own parent. For a site's root page this would
+    # otherwise set parent_id to itself and create an infinite loop in the tree.
+    parent_pages.reject! { |p| p.id == page.id }
+    # The root (top) page of a site must have no parent, so give it a blank
+    # option. Without one the browser submits the first option on save, which
+    # gives the root page a parent and breaks the whole site.
+    return options_for_select([[t('select.none'), '']], '') if root_page?(current_site, page)
+
+    options = parent_pages.map { |p| [p.title, p.id] }
+    options_for_select(options, page.parent.id)
+  end
+
+  def root_page?(current_site, page)
+    page.id.present? && page.id == current_site.homepage_id
   end
 
   def revert_confirmation_message(version)

data/config/application.rb

@@ -19,10 +19,6 @@ module TrustyCms
     include TrustyCms::Initializer
     config.load_defaults 8.0
 
-    # Rails 8.1 will make `to_time` always preserve the receiver's timezone.
-    # Opt in now to silence the deprecation and get the new behavior.
-    config.active_support.to_time_preserves_timezone = :zone
-
     Rails.autoloaders.log!
     # Enable the asset pipeline
     config.assets.enabled = true

data/lib/trusty_cms/available_locales.rb

@@ -5,7 +5,7 @@ module TrustyCms::AvailableLocales
     available_locales = {}
     TrustyCms.configuration.i18n.load_path.each do |path|
       if File.exist?(path) && path !~ /_available_tags/
-        locale_yaml = YAML.load_file(path)
+        locale_yaml = YAML.load_file(path, aliases: true)
         stem = File.basename(path, '.yml')
         if locale_yaml[stem] && lang = locale_yaml[stem]['this_file_language']
           available_locales[lang] = stem

data/lib/trusty_cms/setup.rb

@@ -145,7 +145,7 @@ module TrustyCms
     end
 
     def load_template_file(filename)
-      YAML.load_file(filename)
+      YAML.load_file(filename, aliases: true)
     end
 
     def create_records(template)

data/lib/trusty_cms/task_support.rb

@@ -3,7 +3,7 @@ module TrustyCms
     class << self
       def establish_connection
         unless ActiveRecord::Base.connected?
-          connection_hash = YAML.load_file("#{Rails.root}/config/database.yml").to_hash
+          connection_hash = YAML.load_file("#{Rails.root}/config/database.yml", aliases: true).to_hash
           env_connection = connection_hash[Rails.env]
           ActiveRecord::Base.establish_connection(env_connection)
         end
@@ -23,7 +23,7 @@ module TrustyCms
           begin
             TrustyCms::Config.transaction do
               TrustyCms::Config.delete_all if clear
-              configs = YAML.load(YAML.load_file(path))
+              configs = YAML.load(YAML.load_file(path), aliases: true)
               configs.each do |key, value|
                 c = TrustyCms::Config.find_or_initialize_by_key(key)
                 c.value = value

data/lib/trusty_cms/version.rb

@@ -1,3 +1,3 @@
 module TrustyCms
-  VERSION = '8.0'.freeze
+  VERSION = '8.1.0'.freeze
 end

data/spec/controllers/admin/pages_controller_spec.rb

@@ -116,18 +116,27 @@ RSpec.describe Admin::PagesController, type: :controller do
   end
 
   describe 'GET #search' do
-    it 'returns matching pages when a query is present' do
-      create(:page, title: 'Findable', slug: 'findable', parent: home)
+    # The suite-wide stub returns nil, which the real Page.current_site can't do:
+    # the multi-site extension defines it as `@current_site ||= Site.default`, and
+    # Site.default ends in a catchall it creates. #search is the one action that
+    # reads it, so stub it faithfully here and let the fallback actually run.
+    let(:site) { create(:site) }
 
-      get :search, params: { site_id: nil, search: { query: 'Findable' } }
+    before { allow(Page).to receive(:current_site).and_return(site) }
+
+    it 'falls back to the current site when no site_id is given' do
+      create(:page, title: 'Findable', slug: 'findable', parent: home, site_id: site.id)
+
+      get :search, params: { search: { query: 'Findable' } }
 
       expect(response).to have_http_status(:ok)
+      expect(controller.instance_variable_get(:@site_id)).to eq(site.id)
       titles = controller.instance_variable_get(:@pages).map(&:title)
       expect(titles).to include('Findable')
     end
 
     it 'does not run a query when none is given' do
-      get :search, params: { site_id: '' }
+      get :search
       expect(controller.instance_variable_get(:@pages)).to be_nil
     end
   end
@@ -142,21 +151,17 @@ RSpec.describe Admin::PagesController, type: :controller do
   end
 
   describe 'PUT #restore' do
-    # NOTE: latent bug / Rails 8 upgrade blocker — restore_page_version calls
-    # PaperTrail's `reify`, which YAML-loads the stored version. Under Psych 4+
-    # (psych 5.4 is pinned) safe-loading rejects ActiveSupport::TimeWithZone
-    # because no permitted classes are configured, so restoring any page that has
-    # a timestamp in its versioned state raises Psych::DisallowedClass. Page
-    # restore is effectively broken until paper_trail's serializer is configured
-    # with permitted classes (e.g. via ActiveRecord::Base.yaml_column_permitted_classes
-    # or a custom serializer). Characterizing current behavior.
-    it 'currently fails to reify a versioned page (Psych safe-load blocker)' do
+    # reify YAML-loads the stored version under Psych 4+ safe-load, which needs
+    # ActiveSupport::TimeWithZone (and friends) in
+    # ActiveRecord.yaml_column_permitted_classes — configured in the dummy app.
+    it 'reifies the prior version and redirects to edit' do
       page = create(:page, title: 'V1', parent: home)
       PaperTrail.request(whodunnit: admin.id.to_s) { page.update!(title: 'V2') }
 
-      expect {
-        put :restore, params: { id: page.id, version_index: 1 }
-      }.to raise_error(Psych::DisallowedClass, /TimeWithZone/)
+      put :restore, params: { id: page.id, version_index: 1 }
+
+      expect(response).to redirect_to(edit_admin_page_path(page))
+      expect(page.reload.title).to eq('V1')
     end
   end
 end

data/spec/dummy/config/application.rb

@@ -41,8 +41,7 @@ module TrustyCms
 
     config.encoding = 'utf-8'
     config.time_zone = 'UTC'
-    # Rails 8.1 will make `to_time` always preserve the receiver's timezone.
-    config.active_support.to_time_preserves_timezone = :zone
+
     # Skip frameworks you're not going to use (only works if using vendor/rails).
     # To use Rails without a database, you must remove the Active Record framework
     # config.frameworks -= [ :action_mailer ]
@@ -121,6 +120,11 @@ module TrustyCms
       end
     end
 
+    config.active_record.yaml_column_permitted_classes = [
+      Symbol, Date, Time, ActiveSupport::TimeWithZone, ActiveSupport::TimeZone,
+      ActiveSupport::HashWithIndifferentAccess, BigDecimal
+    ]
+
     config.to_prepare do
       extension_loader.deactivate_extensions
       extension_loader.load_extensions

data/spec/helpers/admin/pages_helper_spec.rb

@@ -72,6 +72,36 @@ describe Admin::PagesHelper, type: :helper do
       expect(html).to include('Home')
       expect(html).to include("value=\"#{home.id}\"")
     end
+
+    it 'offers a blank parent option for the site root page' do
+      home = FactoryBot.create(:home, title: 'Home')
+      current_site = double('Site', homepage_id: home.id)
+      allow(Page).to receive(:parent_pages).with(home.id).and_return([home])
+
+      html = helper.parent_page_options(current_site, home)
+      expect(html).to include('<option selected="selected" value="">&lt;none&gt;</option>')
+    end
+
+    it 'never lists the root page as a candidate for its own parent' do
+      home = FactoryBot.create(:home, title: 'Home')
+      current_site = double('Site', homepage_id: home.id)
+      allow(Page).to receive(:parent_pages).with(home.id).and_return([home])
+
+      html = helper.parent_page_options(current_site, home)
+
+      expect(html).not_to include("value=\"#{home.id}\"")
+    end
+
+    it 'does not offer a blank parent option for non-root pages' do
+      home = FactoryBot.create(:home, title: 'Home')
+      child = FactoryBot.create(:page, title: 'Child', slug: 'child', parent: home)
+      current_site = double('Site', homepage_id: home.id)
+      allow(Page).to receive(:parent_pages).with(home.id).and_return([home])
+
+      html = helper.parent_page_options(current_site, child)
+
+      expect(html).not_to include('<option value="">')
+    end
   end
 
   describe '#revert_confirmation_message' do

data/spec/spec_helper.rb

@@ -13,9 +13,9 @@ SimpleCov::Formatter::LcovFormatter.config do |config|
 end
 
 SimpleCov.configure do
-  add_filter %r{^/lib/generators/}
-  add_filter 'lib/trusty_cms/setup.rb'
-  add_filter %r{/templates/}   # generated-app boilerplate
+  skip %r{^/lib/generators/}
+  skip 'lib/trusty_cms/setup.rb'
+  skip %r{/templates/}   # generated-app boilerplate
 end
 
 SimpleCov.formatter = SimpleCov::Formatter::MultiFormatter.new([

data/trusty_cms.gemspec

@@ -37,8 +37,8 @@ a general purpose content management system--not merely a blogging engine.'
   s.add_dependency 'diffy'
   s.add_dependency 'drb'
   s.add_dependency 'execjs', '~> 2.7'
-  s.add_dependency 'haml', '~> 6.3.0'
-  s.add_dependency 'haml-rails', '~> 2.1'
+  s.add_dependency 'haml', '>= 6.3', '< 7.4'
+  s.add_dependency 'haml-rails', '>= 2.1', '< 4.0'
   s.add_dependency 'highline', '>= 1.7.8', '< 3.2.0'
   s.add_dependency 'image_processing'
   s.add_dependency 'kraken-io'
@@ -46,13 +46,13 @@ a general purpose content management system--not merely a blogging engine.'
   s.add_dependency 'mini_racer'
   s.add_dependency 'mutex_m'
   s.add_dependency 'mysql2'
-  s.add_dependency 'paper_trail', '~> 16.0.0'
+  s.add_dependency 'paper_trail', '~> 17.0.0'
   s.add_dependency 'paper_trail-association_tracking', '>= 2.2.1', '< 2.4.0'
   s.add_dependency 'psych', '5.4.0'
   s.add_dependency 'rack', '>= 2.0.1', '< 3.2.0'
   s.add_dependency 'rack-cache', '~> 1.7'
   s.add_dependency 'radius', '~> 0.8'
-  s.add_dependency 'rails', '~> 8.0.0'
+  s.add_dependency 'rails', '~> 8.1.0'
   s.add_dependency 'rake', '< 14.0'
   s.add_dependency 'ransack', '~> 4.2.1'
   s.add_dependency 'rdoc', '>= 5.1', '< 9.0'

data/yarn.lock

@@ -1671,9 +1671,9 @@ fast-glob@^3.2.5, fast-glob@^3.2.9:
     micromatch "^4.0.8"
 
 fast-uri@^3.0.1:
-  version "3.1.4"
-  resolved "https://registry.yarnpkg.com/fast-uri/-/fast-uri-3.1.4.tgz#3b3daf9ce68f41f956df0b505132c0cfce9ec7af"
-  integrity sha512-8JnbkQ4juDyvYs4mgFGQqg4yCYtFDtUtmp2QIQq11ZZe5CFQ5wcqm1rqDgAh/QdMySuBnPzMUiJUNZG5N/AiQw==
+  version "3.1.5"
+  resolved "https://registry.yarnpkg.com/fast-uri/-/fast-uri-3.1.5.tgz#610f37419a030270430cecd68d74e3d4d96725d0"
+  integrity sha512-gHwA1O9LDIcKunMKhObS/HimwtehO1nPUECKAu5TpKgaO19fcWEl4bliWe1jWxVFvIXztJjjQ4L8XQ1EU9f7Jw==
 
 fastest-levenshtein@^1.0.12:
   version "1.0.16"

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: trusty-cms
 version: !ruby/object:Gem::Version
-  version: '8.0'
+  version: 8.1.0
 platform: ruby
 authors:
 - TrustyCms CMS dev team
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-08-07 00:00:00.000000000 Z
+date: 2026-09-16 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activestorage-validator
@@ -194,30 +194,42 @@ dependencies:
   name: haml
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '6.3'
+    - - "<"
       - !ruby/object:Gem::Version
-        version: 6.3.0
+        version: '7.4'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '6.3'
+    - - "<"
       - !ruby/object:Gem::Version
-        version: 6.3.0
+        version: '7.4'
 - !ruby/object:Gem::Dependency
   name: haml-rails
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
         version: '2.1'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '4.0'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
         version: '2.1'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '4.0'
 - !ruby/object:Gem::Dependency
   name: highline
   requirement: !ruby/object:Gem::Requirement
@@ -328,14 +340,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 16.0.0
+        version: 17.0.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 16.0.0
+        version: 17.0.0
 - !ruby/object:Gem::Dependency
   name: paper_trail-association_tracking
   requirement: !ruby/object:Gem::Requirement
@@ -424,14 +436,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 8.0.0
+        version: 8.1.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 8.0.0
+        version: 8.1.0
 - !ruby/object:Gem::Dependency
   name: rake
   requirement: !ruby/object:Gem::Requirement