workarea 3.4.40 → 3.4.45

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b08db93240b686ce618f7085a8fd9964c1f0fce18c581360f2071b1c9a5a64c8
-  data.tar.gz: 8e7460613beec5cba3e2e7131c80e562a4c072a33087e58c9928b56fa4e66a71
+  metadata.gz: f8c578d3f6ae54da8b8626653682b8a6eb6e8cd482d54f124c620d6d4e1a0514
+  data.tar.gz: 9f78c55818d83fea3dcfd7df34210012d8d7f43abf79582bc9d91ecd070f476b
 SHA512:
-  metadata.gz: c3f2f7511fe32a18f668e8f775451a3b90b96b2327fe7b571d588939884d5b552b28532b449ef9d6ce03ed886aa0dc1129acb95380ece9e6ccec08ae10769531
-  data.tar.gz: ebd7e7fe34e367c343fc5c4da55a0d7535b2a5caac12aa7d09bdf555dfb6ba05c86c4ec78df590e15f422ee817eb388ea4f987ef3fc5149327892124583447f3
+  metadata.gz: 0ee6f81aa9e2e2b77d554ba54405da873ceebd9a06b2434d5a3bf1c21b7a3aa313ddfb3f5fa37fb94c2997a7d01d4c455d61384a92f5d67d3ef32e3ea2329197
+  data.tar.gz: 0f5f2b70ebe4c2414cec2acbaee5f0856778bbd688fcdf3b357a65d77a7e0714645cac655a3defe9f12bc63c65932df807aea5c074063e87bdfb42b91bbae607

data/CHANGELOG.md

@@ -1,3 +1,229 @@
+Workarea 3.4.45 (2021-01-20)
+--------------------------------------------------------------------------------
+
+*   Improve password performance when running tests
+
+    Lowering the bcrypt cost lowers the time required to encrypt a password, at the
+    cost of increasing the speed at which an attacker can try to crack the password.
+    This is an acceptable tradeoff for improving performance of running tests. This
+    shaves about 5 minutes off of the admin tests.
+
+    Hat tip to Jeff Yucis for discovery.
+
+    Ben Crouse
+
+*   Bump redcarpet version to fix security warnings
+
+    Redcarpet released a security fix, so ensure using a version with that fix.
+
+    Redcarpet is only used to render help pages in the admin, so the vulnerability in Workarea is minimal.
+
+    Ben Crouse
+
+*   Improve image URL detection for dialog_buttons
+
+    This only worked if the URL had only one dot (before the file extension)
+    and no query parameters. Run it through the URL parser to provide more
+    robust handling.
+
+    Jonathan Mast
+
+
+
+Workarea 3.4.44 (2020-11-25)
+--------------------------------------------------------------------------------
+
+*   Bump version for release
+
+
+    Ben Crouse
+
+*   Bump jquery-rails to patch XSS vulnerabilities
+
+
+    Ben Crouse
+
+*   Add warning to inform developers why redirects aren't working locally
+
+    This has confused developers a couple of times, so hopefully adding a
+    warning will help.
+
+    Ben Crouse
+
+*   Fix Elasticsearch indexes when changing locales in tests
+
+    This ensures the proper search indexes are in place when you switch
+    locales for an integration test.
+
+    Ben Crouse
+
+*   Prevent Error on Missing Custom Template View Model Class
+
+    Typically, custom product templates use their own subclass of
+    `Workarea::Storefront::ProductViewModel`, but this isn't supposed to be
+    necessary if there's no custom logic that needs to be in the view model
+    layer. However, when developers tried to add a custom template without
+    the view model, they received an error. To prevent this, Workarea will
+    now catch the `NameError` thrown by `Storefront::ProductViewModel.wrap`
+    in the event of a custom product template not having a view model
+    defined.
+
+    WORKAREA-304
+
+    Tom Scott
+
+*   Fix Missing Instance Variable In Cart Items View
+
+    The `@cart` instance variable was only being conditionally defined if
+    `current_order.add_item` succeeded. This caused an error if `#add_item`
+    happens to fail when calling `POST /cart/items` from the storefront,
+    resulting in a 500 error. To prevent this error, the definition of this
+    variable has been moved above the condition.
+
+    WORKAREA-303
+
+    Tom Scott
+
+*   Shorten index name
+
+    Mongo will raise when index names exceed a certain length. For example,
+    having a long Workarea.config.site_name could cause this.
+
+    Ben Crouse
+
+*   Fix missing jump to positions breaking jump to
+
+    Ruby raises when nil is compared, so default these values.
+
+    Ben Crouse
+
+
+
+Workarea 3.4.43 (2020-11-03)
+--------------------------------------------------------------------------------
+
+*   Delete old user metrics after merging
+
+    This will ensure the consistency of user-based reports.
+
+    Ben Crouse
+
+*   Be more specific when matching reverts in changelogs
+
+    This change will allow starting commit messages with the word Revert
+    without the changelog task ignoring the commit.
+
+    Ben Crouse
+
+*   Add metrics explanation for users
+
+    This additional explanation is meant to communicate why customer
+    insights may occasionally mismatch with the orders card.
+
+    Ben Crouse
+
+*   Add Note To Category Default Sort Edit
+
+    The selected `default_sort` of a category will be always used in the
+    storefront. If the category contains featured products, this sort will
+    be labelled "Featured", and this might prove confusing to some admins.
+    To resolve this, add a note just below the dropdown indicating what will
+    occur when products are featured in the category.
+
+    WORKAREA-289
+
+    Tom Scott
+
+*   Include referrer in ending impersonation redirect fallbacks
+
+    When ending an impersonation, this changes to allow redirecting to the referrer
+    if the return_to parameter isn't present. Better UX for ending
+    impersonations while working in the admin.
+
+    WORKAREA-293
+
+    Ben Crouse
+
+*   Merge metrics when a user's email is updated
+
+    This ensures the old metrics info stays around after the email change.
+
+    WORKAREA-294
+
+    Ben Crouse
+
+
+
+Workarea 3.4.42 (2020-10-14)
+--------------------------------------------------------------------------------
+
+*   Prevent Clearing Out Navigable When Saving Taxons
+
+    The `WORKAREA.newNavigationTaxons` module was looking in the wrong place
+    for the selected navigable item, therefore the `selected` var would
+    always return `undefined`, causing the `navigable_id` param to be
+    blank every time. Fix this by querying for the correct DOM node (the
+    `[data-new-navigation-taxon]` element) and pulling the selected ID from
+    its data.
+
+    WORKAREA-297
+    Fixes #534
+
+    Tom Scott
+
+*   Patch RefererParser for Android URLs
+
+    Android App URLs have a special `android-app://` scheme that is rejected
+    by the currently released version of the `referer-parser` gem. The code
+    in this patch already exists in the master branch of the gem, but this
+    has not yet been released, and if Android users browse the storefront it
+    can generate an error when collecting referer information. In case a
+    referer cannot be parsed, Workarea also rescues the error so that
+    checkout requests are not blocked.
+
+    WORKAREA-295
+    Fixes #531
+
+    Tom Scott
+
+*   Try to clarify how to use search synonyms
+
+    There has been repeated confusion around why/how to use synonyms, so this is an attempt to clarify.
+
+    Ben Crouse
+
+
+
+Workarea 3.4.41 (2020-09-30)
+--------------------------------------------------------------------------------
+
+*   Rename Admin::ProductViewModel#options to avoid conflict with normal options method
+
+
+    Matt Duffy
+
+*   Improve clarity of discount verbiage
+
+    This hopes to address some recent confusion around how the discount
+    works.
+
+    Ben Crouse
+
+*   Fix safe navigation method calls
+
+    This will raise if the menu content is nil.
+
+    Ben Crouse
+
+*   Redirect back to the previous page after stopping impersonation
+
+    Currently we redirect to the user's show page, which can be pretty
+    disorienting.
+
+    Ben Crouse
+
+
+
 Workarea 3.4.40 (2020-09-16)
 --------------------------------------------------------------------------------
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: workarea
 version: !ruby/object:Gem::Version
-  version: 3.4.40
+  version: 3.4.45
 platform: ruby
 authors:
 - Ben Crouse
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-09-16 00:00:00.000000000 Z
+date: 2021-01-20 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: workarea-core
@@ -16,56 +16,56 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 3.4.40
+        version: 3.4.45
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 3.4.40
+        version: 3.4.45
 - !ruby/object:Gem::Dependency
   name: workarea-storefront
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 3.4.40
+        version: 3.4.45
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 3.4.40
+        version: 3.4.45
 - !ruby/object:Gem::Dependency
   name: workarea-admin
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 3.4.40
+        version: 3.4.45
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 3.4.40
+        version: 3.4.45
 - !ruby/object:Gem::Dependency
   name: workarea-testing
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 3.4.40
+        version: 3.4.45
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 3.4.40
+        version: 3.4.45
 description: Workarea is an enterprise-grade Ruby on Rails commerce platform.
 email:
 - bcrouse@workarea.com
@@ -97,7 +97,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.0.3
+rubygems_version: 3.2.3
 signing_key: 
 specification_version: 4
 summary: The Workarea Commerce Platform