afc59cd7c9
Hide Previously Seen section when empty
2025-12-10 20:25:58 +01:00
d926617e58
Reuse blank slate styles
2025-12-10 20:24:36 +01:00
4e092407ab
Fix crash due to missing partial
2025-12-10 18:47:00 +01:00
6c73049261
Merge pull request #2053 from basecamp/flavorjones/fix-system-comment-injection
...
Prevent HTML injection into system comments (card activity feed)
2025-12-10 11:01:34 -05:00
e0c821f69b
Autolinking is more robust
...
and handles URLs with CGI params, recognizes more (and multiple)
trailing punctuation marks including entity-encoded punctuation like
`"`.
2025-12-10 10:42:24 -05:00
c5721b8187
Avoid unescaping characters when auto-linking
...
which could lead to Nokogiri unintentionally parsing tags from a
previously-escaped text node.
2025-12-10 10:38:43 -05:00
83360ec6f3
Escape the names used to generate system comments
...
including user names, board titles, column names, and card titles.
2025-12-10 10:38:42 -05:00
fa118a7d83
Add validation for the join code usage limit
...
which is preferred to generating a database error
2025-12-10 10:10:08 -05:00
3257e4a6e9
Inline partials
2025-12-10 15:27:56 +01:00
5ce71bf941
Move Identities to My::Identities
2025-12-10 15:13:35 +01:00
90e6322092
Return no content on update
2025-12-10 15:07:22 +01:00
566def581e
Remove redundant respond_to
2025-12-10 15:05:13 +01:00
79e77a3780
Handle user update failures
2025-12-10 09:23:53 +01:00
8dc6c48db5
Remove composite cache key
...
This prevents jbuilder from fetching multiple records at once, but it's no longer needed as the column and board touch all their associated cards on update so we can remove it
2025-12-10 09:23:53 +01:00
cbbddf9ffe
Add cache directives
2025-12-10 09:23:53 +01:00
7b30ca203e
Add index actions for Comments and Columns
...
Also, fix crash when a deactivated user is serialized (they don't have
an identity).
2025-12-10 09:23:52 +01:00
707bf45063
Add steps to cards
2025-12-10 09:23:52 +01:00
6b229424a3
Lower the number of returned unread notifications
...
After talking to the mobile team we cam to the conclusion that for the API and the mobile apps speed is of the utmost importance when working with notifications. So we agreed to lower the unread notifications limit to 100 like we have in Basecamp. This strikes a balance between speed and usability.
2025-12-10 09:23:52 +01:00
bf51950007
Add API for reading notifications
2025-12-10 09:23:52 +01:00
1a24c1373c
Add API for creating and updating boards
2025-12-10 09:23:52 +01:00
f3ff0c605e
Add pagination to most places and fix cards pagination
2025-12-10 09:23:52 +01:00
eb787fb590
Replace external_account_id with slug
...
The account ID isn't useful on its own since it has to be formatted to be used as part of a URL. Therfore let's return the slug instead.
2025-12-10 09:23:52 +01:00
ba30a301dc
Add API for updating and deactivating users
2025-12-10 09:23:52 +01:00
7a0554774c
Add API for columns
2025-12-10 09:23:52 +01:00
d16b3756de
Add API for reactions
2025-12-10 09:23:52 +01:00
eeed2a8416
Add API for watching cards
2025-12-10 09:23:52 +01:00
ed1002f6c5
Add API for card triage
2025-12-10 09:23:52 +01:00
8a84785056
Add API for tagging cards
2025-12-10 09:23:52 +01:00
c517ef6063
Add API for CRUD actions on steps
2025-12-10 09:23:52 +01:00
8a61ca2a79
Add API for postponing cards
2025-12-10 09:23:52 +01:00
52e65b3c08
Add API for removing card images
2025-12-10 09:23:52 +01:00
1caeea541d
Add API for gilding cards
2025-12-10 09:23:52 +01:00
41115eaf87
Add API for comments CRUD
2025-12-10 09:23:52 +01:00
b4012dfb40
Add API for closing and opening cards
2025-12-10 09:23:52 +01:00
cf52982b8b
Add API for mobing cards between boards
2025-12-10 09:23:52 +01:00
23e6f3b095
Add API for assigning cards
2025-12-10 09:23:52 +01:00
235a94355e
Add card update & delete actions
2025-12-10 09:23:52 +01:00
75f273c6fa
Fix Current not setting a session in some contexts
2025-12-10 09:23:52 +01:00
259707bf70
Fix identity tests
2025-12-10 09:23:52 +01:00
26fc9ecad4
Add an /identity.json endpoint to obtain the identity accounts and users
2025-12-10 09:23:52 +01:00
9fceef16e9
Fix quoting
2025-12-10 09:23:52 +01:00
3f393c1423
Include card description and tags
2025-12-10 09:23:52 +01:00
ae0eaadcdf
Publish any API card as soon as it is created
2025-12-10 09:23:52 +01:00
3c3f098500
Compact
2025-12-10 09:23:52 +01:00
0159f369f4
Only authenticate with bearer token if the header is present
2025-12-10 09:23:52 +01:00
680f9c0c4d
Add top-level API index support for tags
2025-12-10 09:23:52 +01:00
5ad7b973cb
Add API support for users
2025-12-10 09:23:52 +01:00
79fc57a82a
Use built-in authenticate_or_request_with_http_token
...
Hat tip to @adrienpoly
2025-12-10 09:23:52 +01:00
d82093c0cd
Complete the view transition loop
2025-12-10 09:23:52 +01:00
fa2eb06992
Design show view
2025-12-10 09:23:52 +01:00
Alexander Zaytsev