workarea 3.5.8 → 3.5.13

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 4c5f57adc395790c1b1c0ee38d4df100fd69ed61edcec523c67e3c54baff0c03
-  data.tar.gz: b297e3bb0930b1ac73d43f8f4c046dde525e6f06a46d87506b7ac1cf0d5a768f
+  metadata.gz: 4e6e331bdf3b1cac51846183a0632ae3e95e113de1999f30bb963c3172d09dcb
+  data.tar.gz: b4251a0c533eabcfb2beae02870da6f57bc044e10b8e98d130f8af79c6c7cc05
 SHA512:
-  metadata.gz: 3b7405976afecd65f50d657d3dd6987b6d95cd1d416c92d3448d4a8e0679858817dc9046628297d6563d93f63bef0b2187ab9e726094902bde26556035955975
-  data.tar.gz: b92fa9060e3496bba45cb5d69a5db1c85dbd3da7e6be9ab6b068c8f61222c9bc1ff96575a73af3418d451a2ea7d8fc8edff8d716e58a71e9b94e9f2c75990066
+  metadata.gz: dcaafe29a3edde5189212645a476bcbb12a80e46e6dad864564b316540526d65abb5cc7b0c753edc7073809da4f759492761ed02ba06ab9e1e753c34e09fa90c
+  data.tar.gz: 7fa5a3d88404625c106076f9f181d63d41fce388756bf6114733804a947da907eeeacc8653437fd4817a32d3fa7f2bd2d3d04dfd3ffa3c00a1f30a7d718bc888

data/.rubocop.yml

@@ -198,7 +198,7 @@ Layout/SpaceInsideParens:
     - 'core/spec/models/workarea/order/queries_spec.rb'
 
 # Detect hard tabs, no hard tabs.
-Layout/Tab:
+Layout/IndentationStyle:
   Enabled: true
   Exclude:
     - 'core/vendor/active_shipping/lib/active_shipping/carriers/canada_post.rb'

data/CHANGELOG.md

@@ -1,3 +1,350 @@
+Workarea 3.5.13 (2020-06-11)
+--------------------------------------------------------------------------------
+
+*   Fix duplicate products in release previews for featured product changes
+
+    When featured product changes stack in a release, duplicates will show
+    when previewing. This is due to the product's Elasticsearch documents
+    missing changeset IDs for releases scheduled after the release that
+    document is for. This fixes by indexing those release IDs as well.
+
+    Note that this will require a reindex to see the fix immediately. But
+    there's no harm in letting it roll out as products gradually get
+    reindexed.
+
+    Ben Crouse
+
+*   Fix reindexing of featured product resorting within a release
+
+    Resorting featured products within a release causes an inaccurate set of
+    changes from Mongoid's perspective, since it is only looking at what's
+    live vs what's going to be released. The changes within the release
+    aren't represented. This can manifest as incorrect sorts when previewing
+    in the storefront.
+
+    Ben Crouse
+
+*   Add additional append points to admin system.
+
+    Adds append points to product details, product content, variant and inventory sku.
+
+    Jeff Yucis
+
+*   Bump Geocoder
+
+    This fixes an irrelevant bundler-audit CVE warning, and adds/updates a bunch of Geocoder lookup options. See https://github.com/alexreisner/geocoder/blob/master/CHANGELOG.md for more info.
+
+    Ben Crouse
+
+*   Fix releases shifting day on the calendar when scrolling
+
+    This was caused by legacy timezone code that's irrelevant since we
+    shifted to a fix server-side timezone for the admin.
+
+    Ben Crouse
+
+*   Add QueuePauser to pause sidekiq queues, pause for search reindexing
+
+    WORKAREA-236
+
+    Matt Duffy
+
+*   Add index for releasable fields on changets, correct order fraud index
+
+    WORKAREA-235
+
+    Matt Duffy
+
+*   Handle error from attempting to fetch missing S3 CORS configuration
+
+    WORKAREA-234
+
+    Matt Duffy
+
+*   Fix storefront indexing when releases are rescheduled
+
+    When releases get rescheduled, the storefront index can end up with
+    duplicate and/or incorrect entries. This adds a worker which updates the
+    index with minimal querying/updating.
+
+    Ben Crouse
+
+*   Don't assume promo codes for indexing discounts
+
+    A custom discount may be implemented that doesn't use promo codes.
+
+    Ben Crouse
+
+*   Bump rack-attack to latest version
+
+    This fixes rack-attack keys without TTLs set piling up in Redis. This has caused hosting problems.
+
+    Ben Crouse
+
+*   Bump Kaminari dependency to fix security alert
+
+
+    Ben Crouse
+
+*   Fix query caching in Releasable
+
+    When reloading a model to get an instance for a release, if the model
+    had already been loaded, a cached version of the model was returned.
+    This causes incorrect values on the instance you thought you were getting
+    for a release.
+
+    This first manifested as a bug where adding a featured product that
+    had a release change to make it active caused reindexing to make it
+    active but it shouldn't have been.
+
+    Ben Crouse
+
+*   Fix incorrect shipping options error flash message
+
+    A flash error incorrectly showed when the order doesn't require shipping,
+    and addresses are updated.
+
+    Ben Crouse
+
+
+
+Workarea 3.5.12 (2020-05-26)
+--------------------------------------------------------------------------------
+
+*   Fix incorrect import errors
+
+    When an import fails due to a missing `DataFile::Import` document, the
+    `ProcessImport` worker will raise a nil error due to the ensure. This
+    fixes by ensuring the `DocumentNotFound` error gets raised.
+
+    Ben Crouse
+
+*   Remove caching from direct upload CORS requests
+
+    The caching continues to give us problems, and this isn't a high-traffic
+    part of the system so there isn't a practical need for it.
+
+    Ben Crouse
+
+*   Add paranoid fallback for segment metrics lookup
+
+    Although this should never happen, giving a user incorrect segments
+    could have important consequences. If the email cookie is removed or
+    missing for some other reason, it doesn't hurt to fallback to looking up
+    based on the user model (even though this is an additional query) when
+    we know they're logged in.
+
+    Ben Crouse
+
+*   Don't set a blank tracking email in checkout
+
+    Doing this has the potential to create an incorrect tracking email,
+    which could cause a visitor's segments to change in checkout.
+
+    Ben Crouse
+
+
+
+Workarea 3.5.11 (2020-05-13)
+--------------------------------------------------------------------------------
+
+*   Rename index to avoid conflicts in upgrade
+
+    We changed the abaondoned orders index so trying to create indexes after
+    upgrading will cause a conflict due to different indexes with the same
+    name. This renames the index to fix that.
+
+    Ben Crouse
+
+*   Fix comment subscription messaging
+
+    Also improves UI to move the secondary action of
+    subscribing/unsubscribing out of the main area.
+
+    Ben Crouse
+
+*   Correct/clarify Dragonfly configuration warning
+
+
+    Ben Crouse
+
+*   Remove extra order ID cookie
+
+    No need for the extra cookie if the order isn't persisted. Note this
+    doesn't actually affect functionality.
+
+    Ben Crouse
+
+
+
+Workarea 3.5.10 (2020-04-28)
+--------------------------------------------------------------------------------
+
+*   Fix bugs with per_page used in page calculation for search queries
+
+    Even though this shouldn't come from the outside world, it's easy and
+    best to ensure per_page is always a valid number.
+
+    Ben Crouse
+
+*   Skip localized activeness test when localized active fields are off
+
+    Fixes #421
+
+    Ben Crouse
+
+*   Fix accepting per_page param from outside world
+
+    Page size is the most important factor in performance for browse pages,
+    so we don't want these exposed to the outside world out-of-the-box.
+
+    Ben Crouse
+
+*   Update grammar for consistency
+
+
+    Ben Crouse
+
+*   Corrected no_available_shipping_options translation typo (#418)
+
+
+    JurgenHahn
+
+*   Fix fullfilment shipped mailer template
+
+    Fullfilment shipped mailer template is using cancellation header.
+
+    heyqule
+
+*   Improve visual design of most discounted products insight
+
+
+    Ben Crouse
+
+*   Change HashUpdate to use the setter instead of mutation
+
+    Simply mutating the value doesn't work when the field is localized.
+    Mongoid's localization behavior only kicks in when you use the setter.
+
+    Ben Crouse
+
+*   Allow setting locale fallbacks for a test
+
+    This is useful if you want to test fallback behavior. Tests in base
+    should be agnostic to whether fallbacks are available or not.
+
+    Ben Crouse
+
+*   Fix locale fallback getting unexpectedly autloaded
+
+    This can happen in the middle of a test suite, causing apparently random
+    test failure. This freedom patch prevents fallbacks from autoloading.
+    We want to let the implementation make that decision.
+
+    Ben Crouse
+
+
+Workarea 3.5.9 (2020-04-15)
+--------------------------------------------------------------------------------
+
+*   Fix harded JS path for admin jump to dropdown
+
+    This prevents locale from being included in the path to load results.
+    Ben Crouse
+
+*   Fix index serialization not happening per-locale
+
+    Previously, indexing was using the same document per-locale. This was
+    masked by Mongoid loading data from the cached document to look correct
+    in most browse scenarios. This fixes it to serialize per-locale so each
+    locale has a separate representation of the document.
+    Ben Crouse
+
+*   Fix Mongoid not returning defaults for localized fields
+
+    If a locale is missing from the translations hash, Mongoid returns nil
+    instead of the default specified on the field. That causes all kinds of
+    errors.
+    Ben Crouse
+
+*   Fix duplicate key errors in metrics synchronization
+
+    It's important this be kept in sync as real-time as possible, so we need
+    to avoid the Sidekiq retry delay where possible.
+    Ben Crouse
+
+*   Fix index serialization not happening per-locale
+
+    Previously, indexing was using the same document per-locale. This was
+    masked by Mongoid loading data from the cached document to look correct
+    in most browse scenarios. This fixes it to serialize per-locale so each
+    locale has a separate representation of the document.
+    Ben Crouse
+
+*   Fix Mongoid not returning defaults for localized fields
+
+    If a locale is missing from the translations hash, Mongoid returns nil
+    instead of the default specified on the field. That causes all kinds of
+    errors.
+    Ben Crouse
+
+*   Tighten up segment geolocation matching rule
+
+    This was playing a little fast and loose with matching, causing CA to
+    match for California and Canada, IL to match for Illinois and Israel,
+    etc.
+
+    Matching only based on IDs chosen from the UI fixes these problems.
+    Ben Crouse
+
+*   Don't include locale in hidden fields for switching locales
+
+    This can result in duplicate and conflicting locale params in the query
+    string, which can cause the incorrect locale to be selected.
+    Ben Crouse
+
+*   Fix locale not passed through in return redirect when not in URL
+
+    If a return_to parameter is generated without the locale, and a request
+    includes a parameter to switch locale, the locale is dropped causing the
+    request to revert to the default locale.
+
+    The original observed bug is switching locale in content editing and
+    seeing the request to save always redirect to the default locale.
+    Ben Crouse
+
+*   Fix locales not in cache varies
+
+    To ensure all cache varies correctly by locales, it's important that
+    locale be part of the Rack env's `workarea.cache_varies`. To do this, we
+    need to move setting the locale into middleware (where the varies is
+    set).
+    Ben Crouse
+
+*   Add missing append points to option-based product templates
+
+    This append point was only in the generic template, but is useful for
+    plugins.
+    Ben Crouse
+
+*   Fix dev env autoloading problem with Categorization
+
+    Ben Crouse
+
+*   Fix product search entries flattening
+
+    When entries are overridden to return multiple results _and_ there are
+    release changes for the product, the results weren't being flattened.
+
+    Fixes #405
+    Ben Crouse
+
+*   Don't allow more than one valid password reset token per-user
+
+    Ben Crouse
+
+
+
 Workarea 3.5.8 (2020-03-31)
 --------------------------------------------------------------------------------
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: workarea
 version: !ruby/object:Gem::Version
-  version: 3.5.8
+  version: 3.5.13
 platform: ruby
 authors:
 - Ben Crouse
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-03-31 00:00:00.000000000 Z
+date: 2020-06-11 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: workarea-core
@@ -16,56 +16,56 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 3.5.8
+        version: 3.5.13
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 3.5.8
+        version: 3.5.13
 - !ruby/object:Gem::Dependency
   name: workarea-storefront
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 3.5.8
+        version: 3.5.13
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 3.5.8
+        version: 3.5.13
 - !ruby/object:Gem::Dependency
   name: workarea-admin
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 3.5.8
+        version: 3.5.13
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 3.5.8
+        version: 3.5.13
 - !ruby/object:Gem::Dependency
   name: workarea-testing
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 3.5.8
+        version: 3.5.13
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 3.5.8
+        version: 3.5.13
 description: Workarea is an enterprise-grade Ruby on Rails commerce platform.
 email:
 - bcrouse@workarea.com