bterkuile/fizzy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
3,149 Commits 1 Branch 0 Tags
38e35826898eefb020fda8564f527de4f70e6d1c
Commit Graph

141 Commits

Author SHA1 Message Date
Mike Dalessio 355823ea27 dep: update rack to 3.1.16 
Addresses:

  Name: rack
  Version: 3.1.15
  CVE: CVE-2025-49007
  GHSA: GHSA-47m2-26rw-j2jw
  Criticality: Unknown
  URL: https://github.com/rack/rack/security/advisories/GHSA-47m2-26rw-j2jw
  Title: ReDoS Vulnerability in Rack::Multipart handle_mime_head
 2025-06-05 14:44:46 -04:00
Jorge Manrubia b7cffc8f09 update lexical 2025-06-03 13:17:03 +02:00
Jorge Manrubia f8dfad8d22 update lexical 2025-06-03 13:13:42 +02:00
Jorge Manrubia 66a3267c4d update lexical 2025-06-03 12:03:49 +02:00
Jorge Manrubia cf5f0a9f3f Set ratio for videos via style 
And update lexical to allow style attributes
 2025-06-03 11:41:10 +02:00
Mike Dalessio 1f694cf7f1 dep: update kamal to edge 
so we can use KAMAL_HOST
 2025-06-02 13:25:28 -04:00
Mike Dalessio e0d23b10f3 dep: bundle update 2025-06-01 17:08:30 -04:00
Mike Dalessio 80e84f31fc dep: add mission_control-jobs 2025-06-01 11:40:35 -04:00
Jorge Manrubia 75832857e3 update lexical 2025-05-31 18:16:06 +02:00
Mike Dalessio a17b024681 Update AR::Tenanted to have tenanted blob keys 
Also, a script to migrate blobs (on disk and in the database) to the
new convention.

ref: https://37s.fizzy.37signals.com/collections/7/cards/246
 2025-05-30 15:54:31 -04:00
Jorge Manrubia 92ba876b25 update lexical 2025-05-30 11:55:28 +02:00
Jorge Manrubia 40e2dcae0b Update lexical to support placeholders and style them up 2025-05-30 11:07:42 +02:00
Jorge Manrubia 694c05b78f update lexical 2025-05-30 10:28:01 +02:00
Jorge Manrubia 9135d13f76 Update to latest 2025-05-29 23:38:55 +02:00
Jorge Manrubia 80c78ea56f Update to latest 2025-05-29 22:30:09 +02:00
Jorge Manrubia dec696b64f Update lexical to fix hangs when creating cards 2025-05-29 22:25:37 +02:00
Jorge Manrubia 0e5bb87bc6 update lexical 2025-05-29 16:33:04 +02:00
Jorge Manrubia f405c364ac update lexical 2025-05-29 16:31:16 +02:00
Jorge Manrubia fa04016cbe Revert "Revert "Replace House with Lexical"" 2025-05-29 14:25:16 +02:00
Jorge Manrubia 08d8b2e5ff Revert "Replace House with Lexical" 2025-05-29 14:22:27 +02:00
Jorge Manrubia c1f1183bb0 Update actiontext lexical 2025-05-29 13:39:15 +02:00
Jorge Manrubia 0acfe2bcb7 Update lexical 2025-05-29 13:32:38 +02:00
Jorge Manrubia 1e18fa87a9 Update lexical 2025-05-29 13:01:29 +02:00
Jorge Manrubia 6c8c9d30d1 Fix merge issues 2025-05-29 12:51:12 +02:00
Mike Dalessio 8e873693bb dep: bump active_record-tenanted to fix URI support 2025-05-28 11:12:16 -04:00
Mike Dalessio 75b7935185 Merge pull request #536 from basecamp/flavorjones/bump-ar-tenanted-20250527 
dep: update AR::Tenanted to support database URIs
 2025-05-27 14:20:49 -04:00
Mike Dalessio 5f63bc6809 dep: update AR::Tenanted to support database URIs 
ref: https://37s.fizzy.37signals.com/collections/7/cards/649
 2025-05-27 14:18:39 -04:00
Jason Zimdars d17134cb5c Detect platform and label the correct hotkey shortcut 
Yes, Platform Agent is overkill for just this but there isn't a one-size JS solution for updating both input placeholders and other HTML text and we're likely to need it later for other things like displaying platform-specific PWA prompts.
 2025-05-27 12:14:24 -05:00
Mike Dalessio 4300c37bb5 dep: update dependencies 
- [ ] drb: 2.2.1 -> 2.2.3
  - used by active_record-tenanted, geared_pagination, importmap-rails, jbuilder, kamal, propshaft, rails, rails_structured_logging, sentry-rails, solid_cable, solid_cache, solid_queue, stimulus-rails, turbo-rails
- [ ] erb:  -> 5.0.1
  - used by active_record-tenanted, importmap-rails, propshaft, rails, rails_structured_logging, sentry-rails, solid_cable, solid_cache, solid_queue, stimulus-rails, turbo-rails
- [ ] loofah: 2.24.0 -> 2.24.1
  - used by active_record-tenanted, importmap-rails, jbuilder, propshaft, rails, rails_structured_logging, sentry-rails, solid_cable, solid_cache, solid_queue, stimulus-rails, turbo-rails
- [ ] mini_portile2: 2.8.8 -> 2.8.9
  - used by active_record-tenanted, importmap-rails, jbuilder, propshaft, rails, rails_structured_logging, sentry-rails, solid_cable, solid_cache, solid_queue, sqlite3, stimulus-rails, turbo-rails
- [ ] psych: 5.2.3 -> 5.2.6
  - used by active_record-tenanted, importmap-rails, propshaft, rails, rails_structured_logging, sentry-rails, solid_cable, solid_cache, solid_queue, stimulus-rails, turbo-rails
- [ ] rack: 3.1.14 -> 3.1.15
  - used by active_record-tenanted, importmap-rails, propshaft, rails, rails_structured_logging, sentry-rails, solid_cable, solid_cache, solid_queue, stimulus-rails, turbo-rails
- [ ] rails-dom-testing: 2.2.0 -> 2.3.0
  - used by active_record-tenanted, importmap-rails, jbuilder, propshaft, rails, rails_structured_logging, sentry-rails, solid_cable, solid_cache, solid_queue, stimulus-rails, turbo-rails
- [ ] rdoc: 6.13.1 -> 6.14.0
  - used by active_record-tenanted, importmap-rails, propshaft, rails, rails_structured_logging, sentry-rails, solid_cable, solid_cache, solid_queue, stimulus-rails, turbo-rails
- [ ] zeitwerk: 2.7.2 -> 2.7.3
  - used by active_record-tenanted, importmap-rails, kamal, propshaft, rails, rails_structured_logging, ruby_llm, sentry-rails, solid_cable, solid_cache, solid_queue, stimulus-rails, turbo-rails
- [ ] action_text-trix:  -> 2.1.15
  - used by rails, rails_structured_logging
- [ ] net-imap: 0.5.7 -> 0.5.8
  - used by rails, rails_structured_logging
- [ ] sentry-ruby: 5.23.0 -> 5.24.0
  - used by sentry-rails
 2025-05-23 09:01:51 -04:00
Jorge Manrubia 541f24ab0b Limit the tokens we send for embeds 
See insight by Donal here https://github.com/basecamp/fizzy/pull/483#discussion_r2084766023
 2025-05-16 16:39:18 +02:00
Jorge Manrubia b8f94c4ecb Add VCR and some initial tests 2025-05-16 13:29:18 +02:00
Jorge Manrubia 5425b03af4 Remove platforms incompatible with sqlite-vec 2025-05-16 13:29:18 +02:00
Jorge Manrubia 67984bf589 WIP for LLM experiment 2025-05-16 13:29:18 +02:00
Kevin McConnell 95f0f10f2f Update Kamal to 2.6.0 2025-05-14 09:51:37 +01:00
Mike Dalessio 71590f9e12 dep: update rack and rack-session 
to address:

- https://github.com/basecamp/fizzy/security/dependabot/25
- https://github.com/basecamp/fizzy/security/dependabot/26
 2025-05-12 15:06:17 -04:00
Mike Dalessio 8f66a481d2 dep: update active_record-tenanted to fix tenant migration in test 
ref: https://37s.fizzy.37signals.com/collections/693169862/cards/999009012
 2025-04-30 07:43:43 -04:00
Mike Dalessio e3a7eae3a0 dep: bump dependencies 2025-04-29 05:31:28 -04:00
Mike Dalessio 94b1082091 dep: bump AR::Tenanted to avoid errors on a fresh deploy 
ref: https://37s.fizzy.37signals.com/collections/693169862/cards/999008994
ref: https://github.com/basecamp/active_record-tenanted/pull/88
 2025-04-28 15:01:56 -04:00
Mike Dalessio 579c76f58a dep: AR::Tenanted: no implicit db migrations 
ref: https://github.com/basecamp/active_record-tenanted/pull/86
ref: https://37s.fizzy.37signals.com/collections/693169862/cards/999008694
 2025-04-24 15:07:08 -04:00
Mike Dalessio 344e79c06c dep: update AR::Tenanted to fix production deploy migrations 2025-04-23 23:08:27 -04:00
Mike Dalessio 6ae00d12cd dep: update active_record-tenanted 
to a version that preserves current tenant across console reloads in development
 2025-04-23 16:52:14 -04:00
Mike Dalessio 93cec7beb9 Update to latest AR::Tenanted to pick up some db task improvements 
Notably, `db:migrate` will run tenanted database migrations in
production now.
 2025-04-23 15:47:46 -04:00
Mike Dalessio 28ce005e8a dep: update rails to 0ed3cd46 
which includes the fix for a stable schema cache file.
 2025-04-23 14:06:44 -04:00
dependabot[bot] 682da733da Bump nokogiri from 1.18.7 to 1.18.8 
Bumps [nokogiri](https://github.com/sparklemotion/nokogiri) from 1.18.7 to 1.18.8.
- [Release notes](https://github.com/sparklemotion/nokogiri/releases)
- [Changelog](https://github.com/sparklemotion/nokogiri/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sparklemotion/nokogiri/compare/v1.18.7...v1.18.8)

---
updated-dependencies:
- dependency-name: nokogiri
  dependency-version: 1.18.8
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-04-22 04:58:30 +00:00
Mike Dalessio 01d741b3f4 dep: update rails 2025-04-21 13:03:49 -04:00
David Heinemeier Hansson 883a225946 Use upstreamed assert_in_body 2025-04-19 10:08:08 +02:00
Mike Dalessio 30b6dcad05 dep: update active_record-tenanted to 8758240b 2025-04-07 11:33:55 -04:00
Mike Dalessio 1b6daa55c6 dep: bump Rails to 32d96235 2025-04-07 09:55:28 -04:00
dependabot[bot] d2e4b0e9a3 Bump the development-dependencies group across 1 directory with 2 updates 
Bumps the development-dependencies group with 2 updates in the / directory: [brakeman](https://github.com/presidentbeef/brakeman) and [selenium-webdriver](https://github.com/SeleniumHQ/selenium).


Updates `brakeman` from 7.0.0 to 7.0.2
- [Release notes](https://github.com/presidentbeef/brakeman/releases)
- [Changelog](https://github.com/presidentbeef/brakeman/blob/main/CHANGES.md)
- [Commits](https://github.com/presidentbeef/brakeman/compare/v7.0.0...v7.0.2)

Updates `selenium-webdriver` from 4.30.1 to 4.31.0
- [Release notes](https://github.com/SeleniumHQ/selenium/releases)
- [Changelog](https://github.com/SeleniumHQ/selenium/blob/trunk/rb/CHANGES)
- [Commits](https://github.com/SeleniumHQ/selenium/commits/selenium-4.31.0)

---
updated-dependencies:
- dependency-name: brakeman
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: selenium-webdriver
  dependency-version: 4.31.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-04-05 15:23:15 +00:00
David Heinemeier Hansson 537cb7680e Add Bundler Audit for Local CI 2025-04-05 17:20:51 +02:00