898dfd69fb
Merge pull request #2185 from basecamp/betas
...
Extend the number of Beta environments
2025-12-23 16:38:54 +01:00
037559fb25
Set beta site automatically in deployment
2025-12-23 12:27:03 +01:00
78d3a72cc4
Update script to configure betas load balancers
2025-12-23 12:27:03 +01:00
dbb8113080
Extend the number of Beta environments
2025-12-23 12:27:03 +01:00
3fcf5a9d08
Require authorization for direct uploads
...
Respond with 403 to JSON requests that are unauthorized, instead of
redirecting.
2025-12-23 11:08:51 +01:00
43dd149ff2
Cleanup beta deployment
...
Current beta runs in Chicago only.
2025-12-23 10:17:30 +01:00
378faf8158
Merge pull request #2235 from basecamp/linux-friendly-font-stack
...
Add `Adwaita Sans` to font stack
2025-12-22 19:19:26 -06:00
b044a4b355
Add Adwaita Sans to font stack
...
Even on Linux, Chromium "helps" by mapping `BlinkMacSystemFont` to the
system Helvetica equivalent, "Liberation Sans". But Liberations doesn't
have the 900 font weight that give Fizzy its characteristic chunky look.
Pushing the Gnome deafult, "Adwaita Sans" head of the system fonts for
Mac allows black weight. That's how it worked on Linux until we removed
`system-ui` from the font stack in #2000 . This is largely for Omarchy
users, of which most of our developers are, so it seems fair.
2025-12-22 17:55:49 -06:00
dcb50690a9
Merge pull request #2233 from basecamp/assignee-spacing
...
Replace span with li
2025-12-22 16:08:21 -06:00
ea61907397
Pass in data attribute to partial
2025-12-22 14:43:08 -06:00
348808edc2
Replace span with li
2025-12-22 14:26:03 -06:00
5b61682076
Merge pull request #2160 from nqst/smooth-theme-change
...
Smooth theme switching
2025-12-22 11:43:57 -06:00
72ffc2b974
Merge branch 'main' into smooth-theme-change
2025-12-22 11:34:48 -06:00
806297eb12
Merge pull request #2230 from basecamp/refactor-system-comment-classes
...
Refactor system comment classes
2025-12-22 11:15:48 -06:00
5716303c22
Rename
...
It feels odd to have a `.system` class in the `.comment` namespace.
Might as well make it really obvious if we're going to rename it
2025-12-22 11:12:46 -06:00
563c530e3e
Merge pull request #2213 from basecamp/welcome-letter
...
Stub welcome letter for newly created accounts
2025-12-22 10:17:41 -06:00
83c71ce336
Merge pull request #2228 from basecamp/fix-html-injection-in-webhook-event-descriptions-through-card-titles
...
Fix HTML injection in webhooks through card titles
2025-12-22 12:23:10 +01:00
0df667f4fb
Fix HTML injection in webhooks through card titles
2025-12-22 12:20:32 +01:00
e724b3bf86
Move to variable
2025-12-20 18:19:13 -06:00
71433718d5
Set view-transition-name so it gets calculated in the layer rendering
...
Prevents cards from briefly appearing on top of the letter while they
finish transitioning
2025-12-20 18:16:35 -06:00
bc4745c6ce
Add a test
2025-12-20 18:12:42 -06:00
c33b12aa14
We get this for free
2025-12-20 18:12:34 -06:00
d0587d5db8
turbo:load doesn't seem to be working, try a specific controller method to open it
2025-12-20 18:05:41 -06:00
d4ace2752c
Ensure the flash notice passes through the redirect
2025-12-20 18:04:56 -06:00
c32286da00
Remove second data-action attribute
2025-12-20 17:46:31 -06:00
3b1c67f57d
Undo debug
2025-12-20 17:34:19 -06:00
f2b49d0798
Avoid orphans
2025-12-20 17:34:05 -06:00
69f6149ddc
Updated the welcome message.
2025-12-19 15:29:20 -08:00
10f27f19a6
Add a close button
2025-12-19 15:46:18 -06:00
0adcfabe4c
Stub welcome letter for newly created accounts
2025-12-19 15:36:52 -06:00
641e67dc2e
Remove status from allowed parameters in CardsController#update
...
We don't allow changing the status via this action, and it's confusing
and can lead to cases where someone can set someone's else card as
draft, effectively hiding it.
2025-12-19 22:35:30 +01:00
bd6c1cf34f
Storage: harden reconcile for concurrent writes and fix board transfer ( #2096 )
...
* Storage: harden reconcile for concurrent writes and fix board transfer
Reconcile now uses two-cursor approach: captures cursor before and after
the storage scan, aborting if they differ (entries added during scan).
Job retries 3x with 1-minute waits and limits concurrency to 1 per owner.
Board transfer now correctly moves storage for card description embeds
and comment embeds, not just direct attachments. Uses batched queries
to handle cards with thousands of comments efficiently.
Also fixes N+1 queries in attachment grouping via lookup maps.
* Storage: fix per-attachment reconcile and enforce no blob reuse
The storage ledger tracks per-attachment (not per-blob) as a business
abstraction for quotas. This fixes reconcile to match that model and
adds enforcement to prevent blob reuse in tracked contexts.
* Reconcile now uses joins(:blob).sum() for per-attachment counting
* New validation prevents reusing blobs across tracked attachments
* Race-safe storage_total creation with create_or_find_by
* Job efficiency: skip find_by when object already available
* Backfill script checks per-attachment, not just per-blob
2025-12-19 13:07:32 -08:00
3a41ac3e23
Merge pull request #1941 from basecamp/mobile/native-log-in
...
Mobile: Native log in
2025-12-19 19:26:58 +01:00
0cb4822ae0
Document the new sign in method
2025-12-19 19:21:58 +01:00
ca388c2b84
Replace handle_ naming
2025-12-19 19:21:58 +01:00
df1dfde2b3
Use same constant for fake magic links
2025-12-19 19:21:58 +01:00
3af8bdbe37
Replace FakeMagicLink with a temporary object
2025-12-19 19:21:58 +01:00
52d57c4681
Tidy up session_token
2025-12-19 19:21:57 +01:00
e0270c6c49
Clean up interfaces
...
I talked to the mobile team, and to keep things simple we agreed to send
the token via a cookie.
2025-12-19 19:21:57 +01:00
23fc7b594f
Split tests by controller or responsibility
2025-12-19 19:21:57 +01:00
1a1f4a077b
Simplify auth logic
2025-12-19 19:21:57 +01:00
cddddcf83a
Fix due to unit test when creating with invalid emails
2025-12-19 19:21:57 +01:00
fb487f598c
Restore sessions_controller test on creating invalid email address
2025-12-19 19:21:57 +01:00
be447f90ba
Move magic link api tests to their own files
2025-12-19 19:21:57 +01:00
6be20e215b
Rename test to clarify what they're about
2025-12-19 19:21:57 +01:00
b3c8d02709
Cleanup session creation
2025-12-19 19:21:57 +01:00
6e8d6a3df0
Update to always return a pending auth token for JSON responses.
2025-12-19 19:21:57 +01:00
fbf829b346
Update API test for cross code
2025-12-19 19:21:57 +01:00
9009e0fb49
Change test expectation on single tenant mode account creation
2025-12-19 19:21:57 +01:00
a2333623b6
Add unit tests for the new endpoints
2025-12-19 19:21:57 +01:00
Fernando Álvarez