Closed dependabot[bot] closed 4 years ago
@dependabot[bot] needs to request domain review. @dependabot[bot] isn't a platform reviewer and needs to request platform review.
/domain @smudge /platform @smudge
Needs somebody from @smudge to claim domain review Needs somebody from @smudge to claim platform review
Use the shovel operator to claim, e.g.:
@myname << domain && platform
<< domain LGTM && platform LGTM
Approved! :clap: :taco: :sparkles:
Bumps simple_form from 3.5.0 to 5.0.1.
Changelog
*Sourced from [simple_form's changelog](https://github.com/plataformatec/simple_form/blob/master/CHANGELOG.md).* > ## 5.0.1 > > ### Bug fix > * Replace `_url` with `remote_url` when trying to guess file inputs [@tegon](https://github.com/tegon). This has the side-effect of changing carrierwave's support from `0.2.1` to `0.2.2`. > > ## 5.0.0 > > ### Enhancements > * Set multiple attribute for grouped selects also. [@ollym](https://github.com/ollym) > * Removes or renames label classes. [Abduvakilov](https://github.com/Abduvakilov) > * Support to label custom classes for inline collections. [@feliperenan](https://github.com/feliperenan) > * Update bootstrap generator template to match v4.3.x. [@m5o](https://github.com/m5o) > * Allow "required" attribute in generated select elements of PriorityInput. [@mcountis](https://github.com/mcountis) > > ### Bug fix > * Do not call `#send` in form object to check whether the attribute is a file input. [@tegon](https://github.com/tegon) > > ## Deprecations > * The config `SimpleForm.file_methods` is deprecated and it has no effect. Simple Form now supports automatically discover of file inputs for the following Gems: activestorage, carrierwave, paperclip, refile and shrine. If you are using a custom method that is not from one of the supported Gems, please change your forms to pass the input type explicitly: > > ```erb > <%= form.input :avatar, as: :file %> > ``` > > See http://blog.plataformatec.com.br/2019/09/incorrect-access-control-in-simple-form-cve-2019-16676 for more information. > > ## 4.1.0 > > ### Enhancements > * Guess input type more carefully. [@sringling](https://github.com/sringling) > * Allow custom error on forms without model. [@victorperez](https://github.com/victorperez) > * Do not support Ruby < 2.3 anymore. [@gssbzn](https://github.com/gssbzn) > * Add color input type. [@gssbzn](https://github.com/gssbzn) > > ### Bug fix > * Improve disabled option to input_field. [@betelgeuse](https://github.com/betelgeuse) > * Memoize `input_html_classes` in `SimpleForm::Inputs::Base`. [@RigoTheDev](https://github.com/RigoTheDev) > * Fix column type citext HTML5 input type bug. [@brucew](https://github.com/brucew) > * Use form attribute in the nested boolean hidden field when it is given. [@feliperenan](https://github.com/feliperenan) > > ## 4.0.1 > > ### Bug fix > * Do not support Rails 4 anymore. [@rafaelfranca](https://github.com/rafaelfranca) > * Add missing comma. [@vill](https://github.com/vill) > > ## 4.0.0 > > ### Enhancements > * Add bootstrap v4.1 generator template. [@m5o](https://github.com/m5o) > ... (truncated)Commits
- [`40fa2de`](https://github.com/plataformatec/simple_form/commit/40fa2de8adcc88e6e51f24ae93074405cab58e9b) Prepare for `5.0.1` release - [`9385f4e`](https://github.com/plataformatec/simple_form/commit/9385f4e6973c446ac327818f42f65e79906c5fb1) Merge pull request [#1674](https://github-redirect.dependabot.com/plataformatec/simple_form/issues/1674) from plataformatec/let-remote-url - [`a8064eb`](https://github.com/plataformatec/simple_form/commit/a8064eb12b2dc6429b9d1fe5cd0bc01dc58f71b9) Update lib/simple_form/form_builder.rb - [`98ee97d`](https://github.com/plataformatec/simple_form/commit/98ee97d0578d0d1eae79e69172eee2bc517d33f1) Update CHANGELOG.md [ci skip] - [`9c47121`](https://github.com/plataformatec/simple_form/commit/9c47121662f37ed5a6fd8f375d1ad2639021702b) Replace `_url` with `remote_url` - [`67deb18`](https://github.com/plataformatec/simple_form/commit/67deb189c92b12e7e569f83195423b1c4319f92b) Merge pull request [#1673](https://github-redirect.dependabot.com/plataformatec/simple_form/issues/1673) from aried3r/patch-1 - [`dae7ec1`](https://github.com/plataformatec/simple_form/commit/dae7ec196b3ea451e11cffa3e0e9f6ae4a5ba208) Add required Ruby version to .gemspec file - [`440ed5f`](https://github.com/plataformatec/simple_form/commit/440ed5f2fe093d9066940ab6979099a409576ad9) Include information about security issues in README.md and - [`8c91bd7`](https://github.com/plataformatec/simple_form/commit/8c91bd76a5052ddf3e3ab9fd8333f9aa7b2e2dd6) Don't call `#send` in form object to build file inputs - [`62408e8`](https://github.com/plataformatec/simple_form/commit/62408e80ae0f7c69784d887e26117e2c8eeb8199) Remove `ruby-head` jobs - Additional commits viewable in [compare view](https://github.com/plataformatec/simple_form/compare/v3.5.0...v5.0.1)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Betterment/test_track/network/alerts).