workarea 3.5.20 → 3.5.26

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a9d83e57ebc873715ffec1c8778eb615e64940d7f17f0e128b9c8e835dd05d37
-  data.tar.gz: 8fffe204d6291e53c8759be61fa69ef39d8c664c8dd737fefb5e06e7dd43543a
+  metadata.gz: f42e213059ebf1794607344c7d2856f0f98a0b0ac12d8de1ab21abb02e38505e
+  data.tar.gz: a150c7f60093d7dd7e0ed0f4220a019aa99e0f7298c7a31025101806d6923985
 SHA512:
-  metadata.gz: 3fe1377da5e3edb38651952dae858fd68605bdc6eef028d54ee8aa40d0b99aae18eeda3b37a46929e9d9ffd7a7398e92587ac333e294c92baf014773bc93d4bd
-  data.tar.gz: 49471d87ab03ac22ec521fda60d88da4b6669b02e9fff287e9e47a12e3de4e847dc5ccd329bba5aac5f2c5e53b588ead7e54bef0d851bede0486e8e26f0fa40a
+  metadata.gz: dc9282e336f33c8b3e490ce2f2da809b9a2744f886a7b9f6cd571abc8b39f22036ab1a3e05615b4fb45bb42e1790e88851b1b37ae05db86a0a83644bccf2680d
+  data.tar.gz: 0d09997d7f26555ae68837581898f9b7e2de78b10c05051d1cc7e5c04ee55116d50331466f71753de5d84020ae721e03c05258aa8471a7b418c9fd4650a0bed0

data/CHANGELOG.md

@@ -1,3 +1,321 @@
+Workarea 3.5.26 (2021-01-20)
+--------------------------------------------------------------------------------
+
+*   Improve password performance when running tests
+
+    Lowering the bcrypt cost lowers the time required to encrypt a password, at the
+    cost of increasing the speed at which an attacker can try to crack the password.
+    This is an acceptable tradeoff for improving performance of running tests. This
+    shaves about 5 minutes off of the admin tests.
+
+    Hat tip to Jeff Yucis for discovery.
+
+    Ben Crouse
+
+*   Bump redcarpet version to fix security warnings
+
+    Redcarpet released a security fix, so ensure using a version with that fix.
+
+    Redcarpet is only used to render help pages in the admin, so the vulnerability in Workarea is minimal.
+
+    Ben Crouse
+
+*   Improve image URL detection for dialog_buttons
+
+    This only worked if the URL had only one dot (before the file extension)
+    and no query parameters. Run it through the URL parser to provide more
+    robust handling.
+
+    Jonathan Mast
+
+*   Improve image URL detection for dialog_buttons
+
+    This only worked if the URL had only one dot (before the file extension)
+    and no query parameters. Run it through the URL parser to provide more
+    robust handling.
+
+    Jonathan Mast
+
+*   Bump version for release
+
+
+    Ben Crouse
+
+
+
+Workarea 3.5.25 (2020-12-23)
+--------------------------------------------------------------------------------
+
+*   Fix admin indexing for embedded model changes
+
+    When embedded models are changed, their root documents weren't being
+    reindexed for admin search. This PR ensures admin indexing happens
+    correctly.
+
+    Ben Crouse
+
+*   Index search customizations, handle missing search models for changeset releasables
+
+    WORKAREA-322
+
+    Matt Duffy
+
+*   Move release undo changeset building to sidekiq for large changesets
+
+    WORKAREA-316
+
+    Matt Duffy
+
+*   Fix undo releases not causing models to reindex
+
+    Because the changeset is the only getting saved when building an undo,
+    admin reindexing for the affected models isn't happening. This change
+    triggers callbacks to ensure any related side-effects happen.
+
+    Ben Crouse
+
+*   Use inline_svg fallback for missing releasable icons
+
+    WORKAREA-310
+
+    Matt Duffy
+
+*   Simplify undo releases, allow multiple undo releases from a single release
+
+    WORKAREA-316
+
+    Matt Duffy
+
+*   Update display of release changeset to handle large changesets
+
+    WORKAREA-310
+
+    Matt Duffy
+
+*   Allow admin config array fields to define a values type
+
+    WORKAREA-311
+
+    Matt Duffy
+
+*   Check if a releasable has a localized active field before redefining it
+
+    If Workarea.config.localized_active_field is set to false, the active
+    field is redefined for each Releasable model to ensure the configuration
+    is honored. With inherited models like discounts, this can cause the
+    redefintion of active multiple times causing it to override custom active
+    behaviors for segments. Only redefining the method if its currently in
+    the models localized_fields list should ensure this does not happen.
+
+    WORKAREA-309
+
+    Matt Duffy
+
+*   Update releasable active test to work without localized active fields
+
+    WORKAREA-309
+
+    Matt Duffy
+
+
+
+Workarea 3.5.24 (2020-12-22)
+--------------------------------------------------------------------------------
+
+Due to a mistake releasing this gem, it has been yanked. See v3.5.25 instead.
+
+
+
+Workarea 3.5.23 (2020-11-25)
+--------------------------------------------------------------------------------
+
+*   Bump jquery-rails to patch XSS vulnerabilities
+
+
+    Ben Crouse
+
+*   Add warning to inform developers why redirects aren't working locally
+
+    This has confused developers a couple of times, so hopefully adding a
+    warning will help.
+
+    Ben Crouse
+
+*   Fix Elasticsearch indexes when changing locales in tests
+
+    This ensures the proper search indexes are in place when you switch
+    locales for an integration test.
+
+    Ben Crouse
+
+*   Prevent Error on Missing Custom Template View Model Class
+
+    Typically, custom product templates use their own subclass of
+    `Workarea::Storefront::ProductViewModel`, but this isn't supposed to be
+    necessary if there's no custom logic that needs to be in the view model
+    layer. However, when developers tried to add a custom template without
+    the view model, they received an error. To prevent this, Workarea will
+    now catch the `NameError` thrown by `Storefront::ProductViewModel.wrap`
+    in the event of a custom product template not having a view model
+    defined.
+
+    WORKAREA-304
+
+    Tom Scott
+
+*   Fix Missing Instance Variable In Cart Items View
+
+    The `@cart` instance variable was only being conditionally defined if
+    `current_order.add_item` succeeded. This caused an error if `#add_item`
+    happens to fail when calling `POST /cart/items` from the storefront,
+    resulting in a 500 error. To prevent this error, the definition of this
+    variable has been moved above the condition.
+
+    WORKAREA-303
+
+    Tom Scott
+
+*   Shorten index name
+
+    Mongo will raise when index names exceed a certain length. For example,
+    having a long Workarea.config.site_name could cause this.
+
+    Ben Crouse
+
+*   Fix missing jump to positions breaking jump to
+
+    Ruby raises when nil is compared, so default these values.
+
+    Ben Crouse
+
+
+
+Workarea 3.5.22 (2020-11-03)
+--------------------------------------------------------------------------------
+
+*   Only merge recent views on tracking updates
+
+    Merging all metrics has caused a lot of confusion in testing, and the
+    only core use-case this matters for is recent views. So this change only
+    merges recent views when metrics are updated.
+
+    Ben Crouse
+
+*   Delete old user metrics after merging
+
+    This will ensure the consistency of user-based reports.
+
+    Ben Crouse
+
+*   Be more specific when matching reverts in changelogs
+
+    This change will allow starting commit messages with the word Revert
+    without the changelog task ignoring the commit.
+
+    Ben Crouse
+
+*   Add metrics explanation for users
+
+    This additional explanation is meant to communicate why customer
+    insights may occasionally mismatch with the orders card.
+
+    Ben Crouse
+
+*   Add Note To Category Default Sort Edit
+
+    The selected `default_sort` of a category will be always used in the
+    storefront. If the category contains featured products, this sort will
+    be labelled "Featured", and this might prove confusing to some admins.
+    To resolve this, add a note just below the dropdown indicating what will
+    occur when products are featured in the category.
+
+    WORKAREA-289
+
+    Tom Scott
+
+*   Include referrer in ending impersonation redirect fallbacks
+
+    When ending an impersonation, this changes to allow redirecting to the referrer
+    if the return_to parameter isn't present. Better UX for ending
+    impersonations while working in the admin.
+
+    WORKAREA-293
+
+    Ben Crouse
+
+*   Merge metrics when a user's email is updated
+
+    This ensures the old metrics info stays around after the email change.
+
+    WORKAREA-294
+
+    Ben Crouse
+
+*   Fix release changeset indexing code duplication
+
+    Cleanup duplicate logic so decoration for product indexes can happen in
+    a single place.
+
+    WORKAREA-292
+
+    Ben Crouse
+
+
+
+Workarea 3.5.21 (2020-10-14)
+--------------------------------------------------------------------------------
+
+*   Prevent Clearing Out Navigable When Saving Taxons
+
+    The `WORKAREA.newNavigationTaxons` module was looking in the wrong place
+    for the selected navigable item, therefore the `selected` var would
+    always return `undefined`, causing the `navigable_id` param to be
+    blank every time. Fix this by querying for the correct DOM node (the
+    `[data-new-navigation-taxon]` element) and pulling the selected ID from
+    its data.
+
+    WORKAREA-297
+    Fixes #534
+
+    Tom Scott
+
+*   Make CSV test more robust to decorations
+
+    Improve this test so decorating ApplicationDocument to add a field won't
+    cause the test to break.
+
+    Ben Crouse
+
+*   Refactor product entries to allow accessing logic per-product
+
+    This allows easier reuse of this logic, specifically for the site
+    builder plugin we're working on.
+
+    Ben Crouse
+
+*   Fix Test That Will Never Fail
+
+    This test for the `StatusReporter` worker asserted `2`, which will never
+    fail because `2` will never be falsy. Updated the assertion to use the
+    intended `assert_equals`
+
+    Tom Scott
+
+*   Fix skip services
+
+    This was broken due to the admin-based configuration looking for a Mongo
+    connection.
+
+    Ben Crouse
+
+*   Try to clarify how to use search synonyms
+
+    There has been repeated confusion around why/how to use synonyms, so this is an attempt to clarify.
+
+    Ben Crouse
+
+
+
 Workarea 3.5.20 (2020-09-30)
 --------------------------------------------------------------------------------
 
@@ -47,44 +365,6 @@ Workarea 3.5.20 (2020-09-30)
 
     Jonathan Mast
 
-*   Update docs/source/articles/decorate-and-write-tests.html.md
-
-    Co-authored-by: Ben Crouse <bcrouse@workarea.com>
-
-    Tom Scott
-
-*   Update docs/source/articles/decorate-and-write-tests.html.md
-
-    Co-authored-by: Ben Crouse <bcrouse@workarea.com>
-
-    Tom Scott
-
-*   Update docs/source/articles/http-caching.html.md
-
-    Co-authored-by: Ben Crouse <bcrouse@workarea.com>
-
-    Tom Scott
-
-*   Notate Rack::Cache Ignore Params In Documentation
-
-    Add documentation explaining why one might want to ignore query string
-    params in `Rack::Cache`, how to do it in a Workarea environment, and
-    which plugins will do it for you.
-
-    WORKAREA-287
-
-    Tom Scott
-
-*   Clarify Test Setup and Teardown in Documentation
-
-    Add documentation explaining why the `setup` and `teardown` macros are
-    recommended for use with Workarea to set up and teardown tests, as well
-    as some clear examples of how to do this properly.
-
-    WORKAREA-271
-
-    Tom Scott
-
 *   Handle `nil` Percentages in Tax Rates UI
 
     The `TaxApplication` module already handles percentages that are not

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: workarea
 version: !ruby/object:Gem::Version
-  version: 3.5.20
+  version: 3.5.26
 platform: ruby
 authors:
 - Ben Crouse
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-09-30 00:00:00.000000000 Z
+date: 2021-01-20 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: workarea-core
@@ -16,56 +16,56 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 3.5.20
+        version: 3.5.26
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 3.5.20
+        version: 3.5.26
 - !ruby/object:Gem::Dependency
   name: workarea-storefront
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 3.5.20
+        version: 3.5.26
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 3.5.20
+        version: 3.5.26
 - !ruby/object:Gem::Dependency
   name: workarea-admin
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 3.5.20
+        version: 3.5.26
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 3.5.20
+        version: 3.5.26
 - !ruby/object:Gem::Dependency
   name: workarea-testing
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 3.5.20
+        version: 3.5.26
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 3.5.20
+        version: 3.5.26
 description: Workarea is an enterprise-grade Ruby on Rails commerce platform.
 email:
 - bcrouse@workarea.com
@@ -97,7 +97,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.0.3
+rubygems_version: 3.2.3
 signing_key: 
 specification_version: 4
 summary: The Workarea Commerce Platform