e8671d11fa
Improve AGENTS.md with some loki suggestions
...
Suggested by Claude after I yelled at it when it was using string
matching instead of the structured fields.
2025-11-26 17:48:37 -05:00
1534485477
Merge pull request #1735 from basecamp/flavorjones/simplify-current-with-account
...
Simplify Current.with_account and .without_account
2025-11-26 12:32:23 -05:00
9446bc18d2
Simplify Current.with_account and .without_account
...
Co-authored-by: Jeffrey Hardy <jeff@37signals.com >
2025-11-26 12:31:49 -05:00
a9bb534d86
Merge pull request #1734 from basecamp/reactions-polish
...
Reactions polish
2025-11-26 11:31:37 -06:00
e26845709a
Disable focus ring
2025-11-26 11:24:13 -06:00
9ca4cda5e4
Larger emojis in picker, fit on narrow viewports
2025-11-26 11:13:18 -06:00
3e716bfa26
Fix a couple of typos
2025-11-26 13:16:44 +01:00
9c08f68884
Merge pull request #1669 from basecamp/sqlite
...
Sqlite
2025-11-26 10:32:09 +00:00
761f86d78d
Revert unnecessary fixture change
2025-11-26 10:30:02 +00:00
18fa877882
Switch to a pool size of 5
2025-11-26 10:27:06 +00:00
a5fc6eeaec
Update SQLite schema
2025-11-26 10:18:55 +00:00
c4498212dc
Merge branch 'main' into sqlite
...
* main: (116 commits)
Ensure avatar thumbnails are square
Update useragent to recognize twitterbot/facebot
Add defensive styles for non-square avatar images
Update test for copy changes
Missed commit
AI: standardize on https://agents.md
Make it clear this is just notifications, not comprehensive activity
AI: configure MCP servers for Chrome, Grafana, and Sentry (#1727 )
Allow requests from Google Image Proxy
Update to basecamp's useragent fork
Clean up a little bit the CSRF reporting code
Claude: production observability guidance (#1725 )
Prevent autoscroll to the root columns container to prevent jump on page load
Include full name string so you can type your name to filter
Prioritize current user and assigned users in assignment dropdown
Check and report on Sec-Fetch-Site header for forgery protection
bundle update
Bump bootsnap from 1.18.6 to 1.19.0
Bump rails from `077c3ad` to `17f6e00`
Fix cards getting stuck in edit mode
...
2025-11-26 10:07:41 +00:00
b839340cf2
Tidy up modules and on_load points
2025-11-26 10:02:32 +00:00
9c86205510
Enforce SQLite column limits via CHECK constraints
...
Patch the sqlite adapter to add CHECK constraints for string and text
column limits. We'll do them inline, so that any column changes
automatically update the constraints.
2025-11-26 09:50:29 +00:00
e7d716c0f1
Merge pull request #1731 from basecamp/avatar-thumb-aspect-ratio
...
Ensure avatar thumbnails are square
2025-11-26 09:30:33 +00:00
ca5065a378
Ensure avatar thumbnails are square
...
Previously we were fitting the image inside a 256x256 box while keeping
it's original aspect ratio. But this can lead to images that are
squished and/or pixelated when we try to show them inside a square
container in the app.
Instead we can resize them to be square.
2025-11-26 09:21:46 +00:00
e1d356d063
Merge pull request #1730 from basecamp/flavorjones/twitterbot-facebot
...
Update useragent to recognize twitterbot/facebot
2025-11-25 18:09:56 -05:00
60e1751cac
Update useragent to recognize twitterbot/facebot
...
This UA was pulled from our logs.
ref: https://app.fizzy.do/5986089/cards/1775
2025-11-25 18:05:21 -05:00
abbf226c3a
Merge pull request #1729 from basecamp/avatar-bulletproofing
...
Add defensive styles for non-square avatar images
2025-11-25 16:56:02 -06:00
d825447e6b
Add defensive styles for non-square avatar images
2025-11-25 16:51:07 -06:00
64a39b3139
Merge pull request #1726 from basecamp/flavorjones/better-useragent-behavior
...
Allow requests from Google Image Proxy
2025-11-25 17:15:38 -05:00
9a8905dbc1
Merge pull request #1728 from basecamp/update-bundle-mailer
...
Make it clear this is just notifications, not comprehensive activity
2025-11-25 16:12:13 -06:00
88765f5244
Update test for copy changes
2025-11-25 16:10:34 -06:00
426420a406
Missed commit
2025-11-25 14:10:26 -08:00
62fb1a46af
AI: standardize on https://agents.md
2025-11-25 14:09:53 -08:00
154cbf0cde
Make it clear this is just notifications, not comprehensive activity
2025-11-25 16:08:11 -06:00
92199c4ae7
AI: configure MCP servers for Chrome, Grafana, and Sentry ( #1727 )
2025-11-25 13:33:07 -08:00
14650df246
Merge pull request #1723 from basecamp/fix-scroll-jump
...
Prevent autoscroll to the columns container to remove jump on page load
2025-11-25 15:31:26 -06:00
b767d6edcb
Allow requests from Google Image Proxy
...
which should fix email notifications' avatars rendering as broken
images in GMail.
ref: https://app.fizzy.do/5986089/cards/1740
2025-11-25 16:26:15 -05:00
0bf62ba4cf
Update to basecamp's useragent fork
...
and assert it's working by testing for Baidu
2025-11-25 16:18:23 -05:00
fac9f3c369
Clean up a little bit the CSRF reporting code
...
Small follow-up to https://github.com/basecamp/fizzy/pull/1721
2025-11-25 21:28:50 +01:00
525efb2de8
Claude: production observability guidance ( #1725 )
2025-11-25 12:23:01 -08:00
ca10e4ba4e
Prevent autoscroll to the root columns container to prevent jump on page load
...
https://app.fizzy.do/5986089/cards/3160
2025-11-25 21:01:18 +01:00
396c1ffdcf
Merge pull request #1722 from basecamp/fwt-user-list-improvement
...
Prioritize current user and assigned users in assignment dropdown
2025-11-25 14:36:14 -05:00
3d429c1dea
Include full name string so you can type your name to filter
2025-11-25 13:19:33 -06:00
3811088db3
Prioritize current user and assigned users in assignment dropdown
...
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude <noreply@anthropic.com >
2025-11-25 13:46:14 -05:00
d88949288c
Check and report on Sec-Fetch-Site header for forgery protection
...
This is a great, solid alternative to CSRF tokens for CSRF protection
when we aren't worried about older browsers or other kind of actors
doing modifying requests in our app, and could be a good test for future
upstreaming to Rails (although there we'd need to continue using CSRF
tokens or at least letting people opt out manually).
Let's start checking the header and reporting on it when CSRF fails or
when it doesn't match the other checks Rails does, and then promote this
to be the only way to defend from CSRF.
2025-11-25 19:19:50 +01:00
97bcdf1853
Enforce column limits via concern
...
SQLite columns lengths are purely informational, so we'll enforce the
limits via a concern that checks the lengths from the schema.
2025-11-25 15:32:34 +00:00
51860d6c66
Merge pull request #1719 from basecamp/flavorjones/dep-update-20251125
...
bundle update - 20251125
2025-11-25 10:30:51 -05:00
f0a22ea608
bundle update
2025-11-25 10:28:12 -05:00
9707ed0af9
Merge pull request #1615 from basecamp/dependabot/bundler/bootsnap-1.19.0
...
Bump bootsnap from 1.18.6 to 1.19.0
2025-11-25 10:22:47 -05:00
0b4896654a
Merge pull request #1706 from basecamp/dependabot/bundler/rails-17f6e00
...
Bump rails from `077c3ad` to `17f6e00`
2025-11-25 10:21:38 -05:00
62dbae568b
Bump bootsnap from 1.18.6 to 1.19.0
...
Bumps [bootsnap](https://github.com/rails/bootsnap ) from 1.18.6 to 1.19.0.
- [Changelog](https://github.com/rails/bootsnap/blob/main/CHANGELOG.md )
- [Commits](https://github.com/rails/bootsnap/compare/v1.18.6...v1.19.0 )
---
updated-dependencies:
- dependency-name: bootsnap
dependency-version: 1.19.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-25 15:16:29 +00:00
e2f5eaa93f
Bump rails from 077c3ad to 17f6e00
...
Bumps [rails](https://github.com/rails/rails ) from `077c3ad` to `17f6e00`.
- [Release notes](https://github.com/rails/rails/releases )
- [Commits](https://github.com/rails/rails/compare/077c3ad60db4c43cccb8f4637b53b8d8eb7a3c19...17f6e00bce8c35b6c5355450331da170c768e3e0 )
---
updated-dependencies:
- dependency-name: rails
dependency-version: 17f6e00bce8c35b6c5355450331da170c768e3e0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-25 15:14:12 +00:00
8ad59e75d4
Merge pull request #1709 from basecamp/dependabot/bundler/aws-sdk-s3-1.205.0
...
Bump aws-sdk-s3 from 1.201.0 to 1.205.0
2025-11-25 10:13:38 -05:00
1059220b2a
Merge pull request #1626 from basecamp/dependabot/bundler/development-dependencies-a98687e030
...
Bump the development-dependencies group across 1 directory with 3 updates
2025-11-25 10:12:22 -05:00
2c838f2aa2
Merge pull request #1707 from basecamp/dependabot/bundler/prometheus-client-mmap-1.3.0
...
Bump prometheus-client-mmap from 1.2.10 to 1.3.0
2025-11-25 10:11:24 -05:00
0ddf356e7d
Merge pull request #1704 from basecamp/dependabot/bundler/yabeda-puma-plugin-0.9.0
...
Bump yabeda-puma-plugin from 0.8.0 to 0.9.0
2025-11-25 10:10:07 -05:00
17011d4047
Merge pull request #1703 from basecamp/dependabot/bundler/solid_cache-1.0.10
...
Bump solid_cache from 1.0.8 to 1.0.10
2025-11-25 10:08:34 -05:00
213f5749bb
Merge pull request #1708 from basecamp/dependabot/bundler/autotuner-1.1.0
...
Bump autotuner from 1.0.2 to 1.1.0
2025-11-25 10:05:53 -05:00
Mike Dalessio