Commit Graph

7717 Commits

Author SHA1 Message Date
Jeremy Daer b755b3fead Robots, begone (#1812)
* robots.txt: "Please, don't come in." If a page is directly linked, the
  URL can still appear in search results, though.
* X-Robots-Tag: "If you're here, forget what you saw." Works even if the
  crawler ignores robots.txt or reaches a page via external link. Can
  remove already-indexed pages.
* Public boards may not be indexed. They're meant for "anyone with the
  link" private sharing, not worldwide publishing.
2025-12-02 13:35:58 -08:00
Kevin McConnell 72f87f2d8f Merge pull request #1815 from basecamp/fix-ios-login
Allow typing magic links on mobile
2025-12-02 20:38:21 +00:00
Kevin McConnell cdc1f9b143 Allow typing magic links on mobile
When typing a magic link, rather than pasting it, iOS seems to send
`keydown.enter`, and we weren't submitting the form in that case.

Changed to submit the form in either case, and use the state of the
input target to help guard against double submissions.
2025-12-02 20:09:26 +00:00
Stanko Krtalić d7153e5146 Merge pull request #1811 from basecamp/contributing-guide
Add contributing guide
2025-12-02 20:47:27 +01:00
Stanko K.R. 8bc2b7c8c8 Add contributing guide 2025-12-02 20:37:58 +01:00
Mike Dalessio bf858c8e02 Merge pull request #1810 from basecamp/flavorjones/disconnect-cable-on-deactivation
Disconnect action cable when user is deactivated
2025-12-02 14:32:08 -05:00
Mike Dalessio a2e024c1b5 Disconnect action cable when user is deactivated
ref: https://app.fizzy.do/5986089/cards/2785
2025-12-02 14:26:04 -05:00
Stanko Krtalić 7f5213d715 Merge pull request #1804 from basecamp/add-automated-docker-image-builds
Disable ARM image builds
2025-12-02 19:00:26 +01:00
Stanko K.R. fc8ca04c05 Disable ARM image builds 2025-12-02 18:59:40 +01:00
Stanko Krtalić 0a752a4f2c Merge pull request #1803 from basecamp/add-automated-docker-image-builds
Add automated Docker image builds
2025-12-02 18:53:37 +01:00
Stanko K.R. 94d1a1e10a Disable image builds for PRs 2025-12-02 18:51:07 +01:00
Stanko K.R. 07ee2908a0 Add libssl-dev 2025-12-02 18:50:54 +01:00
Jason Zimdars 8f73fa41ef Merge pull request #1802 from basecamp/nav-hotkeys
Make the jump nav hotkeys look like the others
2025-12-02 11:48:02 -06:00
Stanko K.R. 2d0110963a Add automated Docker image builds 2025-12-02 18:42:51 +01:00
Jason Zimdars 88c602412d Merge branch 'main' into nav-hotkeys 2025-12-02 11:40:45 -06:00
Jason Zimdars da59bafa5c Make the jump nav hotkeys look like the others 2025-12-02 11:36:06 -06:00
Jorge Manrubia 3a85da4a79 Merge pull request #1800 from basecamp/fix-broadcast
Scope general broadcasts by account
2025-12-02 18:16:32 +01:00
Mike Dalessio bec75ce1cc Merge pull request #1799 from basecamp/flavorjones/saas-gc-tuning
Bump fizzy-saas for tuning of GC params
2025-12-02 12:13:23 -05:00
Jorge Manrubia dfe8e7bd5d Scope general broadcasts by account
Because DoS ourselves is not fun
2025-12-02 18:10:49 +01:00
Mike Dalessio ca7ada5e47 Bump fizzy-saas for tuning of GC params 2025-12-02 12:10:29 -05:00
Jorge Manrubia 32fe4339ee Remove general broadcast temporarily 2025-12-02 18:03:19 +01:00
Jorge Manrubia f64d5841b6 Merge pull request #1786 from basecamp/dependabot/bundler/rqrcode-3.1.1
Bump rqrcode from 3.1.0 to 3.1.1
2025-12-02 17:32:58 +01:00
Jorge Manrubia ca60760504 Merge pull request #1784 from basecamp/dependabot/bundler/sqlite3-2.8.1
Bump sqlite3 from 2.8.0 to 2.8.1
2025-12-02 17:32:50 +01:00
Jorge Manrubia 40301ffa8f Merge pull request #1782 from basecamp/dependabot/bundler/development-dependencies-b9e97ca7ce
Bump bundler-audit from 0.9.2 to 0.9.3 in the development-dependencies group
2025-12-02 17:32:43 +01:00
David Heinemeier Hansson ff496f915b Merge pull request #1797 from marcoroth/herb
Address HTML markup issues reported by Herb
2025-12-02 08:30:47 -08:00
Marco Roth 2f88908cdf Address HTML markup issues reported by Herb 2025-12-02 17:23:51 +01:00
Mike Dalessio f038e61dab Merge pull request #1796 from basecamp/flavorjones/dashboard-last-10
Add recent signups to the dashboard
2025-12-02 11:21:06 -05:00
Mike Dalessio 69b701c035 Add recent signups to the dashboard 2025-12-02 11:18:46 -05:00
Kevin McConnell 60e7e9ffd8 Merge pull request #1733 from basecamp/allow-all-signups
Remove basic auth restriction on signup
2025-12-02 15:46:04 +00:00
Mike Dalessio 8f4b1a1ecd Merge pull request #1794 from basecamp/flavorjones/warn-expiration
Add an expiration note to emails and the magic link page.
2025-12-02 10:41:48 -05:00
Jorge Manrubia 662b0655c8 Merge pull request #1795 from basecamp/update-gem
Update to latest fizzy-saas gem
2025-12-02 16:16:36 +01:00
Jason Zimdars 8c1d3c6c42 Copy edits 2025-12-02 09:08:57 -06:00
Jorge Manrubia 8d1a09808f Update gem 2025-12-02 15:51:23 +01:00
Mike Dalessio 80a6ffc55e Add an expiration note to emails and the magic link page.
ref: https://app.fizzy.do/5986089/cards/3211
2025-12-02 08:41:00 -05:00
Kevin McConnell 3eef2a4463 Merge pull request #1793 from basecamp/dont-compress-exports
Don't compress attachments in export
2025-12-02 11:52:51 +00:00
Kevin McConnell f7e2b4e0ba Don't compress attachments in export
Since they are typically images and videos, which are already
compressed.
2025-12-02 10:39:56 +00:00
dependabot[bot] a3127e8fc1 Bump rqrcode from 3.1.0 to 3.1.1
Bumps [rqrcode](https://github.com/whomwah/rqrcode) from 3.1.0 to 3.1.1.
- [Release notes](https://github.com/whomwah/rqrcode/releases)
- [Changelog](https://github.com/whomwah/rqrcode/blob/main/CHANGELOG.md)
- [Commits](https://github.com/whomwah/rqrcode/compare/v3.1.0...v3.1.1)

---
updated-dependencies:
- dependency-name: rqrcode
  dependency-version: 3.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-12-02 09:58:52 +00:00
Kevin McConnell d24726c1d3 Merge pull request #1768 from basecamp/data-exports
Add "data export" feature
2025-12-02 09:56:40 +00:00
Jorge Manrubia 8bc42a857d Merge pull request #1792 from basecamp/magic-secure
Protect against sharing the magic link in development
2025-12-02 10:54:23 +01:00
Jorge Manrubia c9ebb79dbd Add some protections around sharing the magic link in development 2025-12-02 10:51:14 +01:00
Jorge Manrubia e1989bdef1 Merge pull request #1791 from basecamp/extract-method
Extract method
2025-12-02 10:26:24 +01:00
Jorge Manrubia 23576d13ff Extract method 2025-12-02 10:22:40 +01:00
Stanko Krtalić 058285fa64 Merge pull request #1790 from basecamp/stricter-webhook-destination-checks
Prohibit link local addresses
2025-12-02 10:21:45 +01:00
Stanko K.R. 78c6751fa0 Prohibit link local addresses 2025-12-02 09:32:15 +01:00
Kevin McConnell b9899e7154 Fix test 2025-12-02 08:26:09 +00:00
Stanko K.R. b97877dc30 Remove basic auth restriction on signup 2025-12-02 09:12:47 +01:00
Kevin McConnell 9ae9e67d24 Remove all credentials files 2025-12-02 09:11:37 +01:00
Jorge Manrubia 6d90a47c1b Merge pull request #1788 from basecamp/comments-refresh-edit
Fix: edit comment button disappears when morphing the page
2025-12-02 09:06:34 +01:00
Jason Zimdars 9aeb0b5544 Merge pull request #1789 from basecamp/update-playground
Remove line breaks, update back button copy
2025-12-02 00:27:36 -06:00
Jorge Manrubia f385a971d7 Remove comment--mine classes (not used) 2025-12-02 07:07:52 +01:00