[BREAKING CHANGE] Multiple file uploader now keeps successful files on update, only discarding failed ones(@mshibuya7db9195d)
[BREAKING CHANGE] #remote_#{column}_urls= was changed to preserve precedent updates(@mshibuya8f18a95b)
#serializable_hash now returns string for version keys(@schovi#2246)
Use the MimeMagic gem to inspect file headers for the mime type. This allows for mitigation of CVE-2016-3714, in combination with a content_type_whitelist(@locriani#1934)
Replace mime-types dependency with mini_mime to save memory(@bradleypriest#2292)
Delegate MiniMagick processing to ImageProcessing gem(@janko#2298)
Handle ActiveRecord transaction correctly, not storing or removing files on rollback(@skosh#2209)
Deprecated
fog_provider configuration was deprecated and has no effect, just adding fog providers to Gemfile will load them(@mshibuyaca201ee2)
CarrierWave::Uploader::Base#sanitized_file was deprecated, use #file instead(@mshibuya28190e99)
[BREAKING CHANGE] Multiple file uploader now keeps successful files on update, only discarding failed ones(@mshibuya7db9195d)
[BREAKING CHANGE] #remote_#{column}_urls= was changed to preserve precedent updates(@mshibuya8f18a95b)
#serializable_hash now returns string for version keys(@schovi#2246)
Use the MimeMagic gem to inspect file headers for the mime type. This allows for mitigation of CVE-2016-3714, in combination with a content_type_whitelist(@locriani#1934)
Replace mime-types dependency with mini_mime to save memory(@bradleypriest#2292)
Delegate MiniMagick processing to ImageProcessing gem(@janko#2298)
Handle ActiveRecord transaction correctly, not storing or removing files on rollback(@skosh#2209)
Deprecated
fog_provider configuration was deprecated and has no effect, just adding fog providers to Gemfile will load them(@mshibuyaca201ee2)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language
- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language
- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language
- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/RenanRodriguesRecife/if977_equipe2/network/alerts).
Bumps carrierwave from 1.3.1 to 2.1.1.
Release notes
Sourced from carrierwave's releases.
Changelog
Sourced from carrierwave's changelog.
... (truncated)
Commits
003e2ceVersion 2.1.115bcf8dFix Code Injection vulnerability in CarrierWave::RMagicke0f79e3Fix SSRF vulnerability in the remote file download feature3356634Version 2.1.08964775Merge pull request #2444 from inkoop/backblaze-private-bucket-support9a37fc9Test against Ruby 2.73dfaceabackblaze authenticated_url spec addedcaf9018merged mastere39194fMerge pull request #2438 from jaredbeck/patch-221a0061Merge pull request #2439 from Bonias/aws-use-proper-region-for-path-style-urlDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/RenanRodriguesRecife/if977_equipe2/network/alerts).