publiclab / mapknitter

Upload your own aerial images, position (rubbersheet) them in a web interface over existing map data, and share via web or composite and export for print.
http://mapknitter.org
GNU General Public License v3.0
267 stars 207 forks source link

Bump rails from 5.2.8 to 7.0.3 #1721

Closed dependabot[bot] closed 2 years ago

dependabot[bot] commented 2 years ago

Bumps rails from 5.2.8 to 7.0.3.

Release notes

Sourced from rails's releases.

7.0.3

Active Support

  • No changes.

Active Model

  • No changes.

Active Record

  • Some internal housekeeping on reloads could break custom respond_to? methods in class objects that referenced reloadable constants. See #44125 for details.

    Xavier Noria

  • Fixed MariaDB default function support.

    Defaults would be written wrong in "db/schema.rb" and not work correctly if using db:schema:load. Further more the function name would be added as string content when saving new records.

    kaspernj

  • Fix remove_foreign_key with :if_exists option when foreign key actually exists.

    fatkodima

  • Remove --no-comments flag in structure dumps for PostgreSQL

    This broke some apps that used custom schema comments. If you don't want comments in your structure dump, you can use:

    ActiveRecord::Tasks::DatabaseTasks.structure_dump_flags = ['--no-comments']
    

    Alex Ghiculescu

  • Use the model name as a prefix when filtering encrypted attributes from logs.

    For example, when encrypting Person#name it will add person.name as a filter parameter, instead of just name. This prevents unintended filtering of parameters with a matching name in other models.

... (truncated)

Commits
  • 3872bc0 Preparing for 7.0.3 release
  • 74beedc Remove incorrect tests
  • 54bd582 Merge pull request #44947 from jasonkarns/patch-3
  • 082e929 Merge pull request #45027 from rails/fix-tag-helper-regression
  • cd7700b Merge pull request #45016 from adrianna-chang-shopify/ac-fix-strict-loading-p...
  • f99f422 Merge pull request #45018 from lucthev/lt/strict-false
  • fd7dc8f Merge pull request #45013 from JohnAnon9771/fix/doc-active-record-querying
  • ae98f49 Merge pull request #44777 from jean-francois-labbe/main
  • 3594d29 Merge pull request #44956 from sato11/document-uses_transaction
  • 2722895 Emphasize cacheable objects in guide and API docs [ci-skip]
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
gitpod-io[bot] commented 2 years ago

codeclimate[bot] commented 2 years ago

Code Climate has analyzed commit 7b77b477 and detected 14 issues on this pull request.

Here's the issue category breakdown:

Category Count
Security 14

Note: there are 11 critical issues.

View more on Code Climate.

jywarren commented 2 years ago

@dependabot ignore this dependency

dependabot[bot] commented 2 years ago

OK, I won't notify you about rails again, unless you re-open this PR or update it yourself. 😢