Commit graph

195 commits

Author SHA1 Message Date
James Mason
96d5994673 CVE-2018-8048: Update loofah
re: https://hakiri.io/github/openSUSE/osem/master/b9be152113970d3a286254a6bd9f143590bfe241/warnings?name=Cross-Site+Scripting
2018-03-22 09:39:59 +01:00
Nemo
b9be152113 [deps] Updates delayed_job
- Fixes issues wth Ruby 2.5.0
2018-03-18 23:13:07 +01:00
James Mason
73c5c3c97a Allow root URL to redirect to a conference via ENV var. 2018-03-15 01:24:49 +01:00
James Mason
f062f7f4ee Reduce deprecation warnings 2018-03-15 01:20:57 +01:00
Godfrey Chan
0c8095493a Skylight instrumentation
This allows individual installations to optionally collect performance
data using [Skylight for Open Source](https://www.skylight.io/oss).
2018-02-22 21:08:24 -08:00
James Mason
d8f3933dc0 Update Nokogiri
re: CVE-2017-15412
2018-02-14 11:02:17 +01:00
James Mason
f0c3fc357b Fold call for papers & call for tracks into one splashpage section 2017-12-22 10:48:55 -08:00
James Mason
7f2346650f Configure cache stores
rely on RAM caching for devel, and optionally a memcached server in production
2017-12-22 10:48:55 -08:00
rishabh92
8f6eeaaf45 Fix commercials does not accept slideshare https url
Updated ruby-oembed to latest version 0.12.0, issue was due to ruby-oembed version 0.8.14 not accepting https slideshare links.
Fixes #1775
2017-12-19 09:42:18 +02:00
AEtherC0r3
efaf07178f Upgrade to Rails 5
Update config with rails app:update
Update schema.rb rails db:migrate
Add puma
Make jobs and models inherit from ApplicationJob and ApplicationRecord
Update acts_as_list to 0.9.7 in order to fix
"undefined method `sanitize_sql_hash_for_conditions'" error
Update web-console to 2.3.0 to fix a 500 internal server error
Replace before_filter with before_action
Add rails-controller-testing gem
Add prepend: :true to protect_from_forgery in ApplicationController to
avoid ActionController::InvalidAuthenticityToken exceptions
Remove activeuuid
Update formtastic to 3.1.5 to fix deprecation warnings and issues
with the Input class
Update ahoy_matey to 1.6.0
Update cancancan to 2.0.0 to fix issues with malformed sql queries
Fix program spec
Fix issue with the picture being nil in admin/Organizations#new and #edit
and Organizations#show
Fix ActiveRecord::Base.raise_in_transactional_callbacks= deprecation
warning by removing an unnecessary line in application.rb
Fix failing versions specs
2017-12-11 20:58:04 +02:00
rahul2240
9cf3f63bae Update rubocop to 0.51.0
Rubocop is updated to version 0.51 from 0.49
2017-11-28 16:17:11 +05:30
Ana María Martínez Gómez
9885b3617f Update yajl-ruby to 1.3.1
There is a security vulnerability in yajl-ruby 1.3.0:

In the yajl-ruby gem 1.3.0 for Ruby, when a crafted JSON file is
supplied to `Yajl::Parser.new.parse`, the whole ruby process crashes
with a `SIGABRT` in the `yajl_string_decode` function in
`yajl_encode.c`. This results in the whole ruby process terminating and
potentially a denial of service.

Reference:

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16516
2017-11-17 10:07:02 +01:00
James Mason
0aa782711d
Use 'Feature's to toggle optional functionality
TODO: Wrap every incomplete project in a feature, and _turn it off_.
2017-11-03 20:40:36 -07:00
James Mason
a7fce677fc
Add reCAPTCHA support to registration.
Because I *hate* spam bots.
2017-11-03 20:36:57 -07:00
James Mason
f2b5c2627c Require a version of nokogiri with known vulnerabilities resolved
re: https://hakiri.io/github/openSUSE/osem/master/78eb58c93eb766505dd12319d0502c10b40a811f/warnings/b532fbd10b687d
2017-10-13 15:21:34 +03:00
Ana María Martínez Gómez
9f8836732d Update mariadb to 10.2 to solve Travis failures
Our test suite is failing in Travis as it complains about not finding
`libmysqlclient-dev` which is needed for mysql2. But installing
`libmysqlclient-dev` conflicts with MariaDB 10.1. So I updated MariaDB
to 10.2 and mysql to the last version as the old one is not compatible
with MariaDB 10.2. The missed `libmysqlclient-dev` is not needed any
more.
2017-09-12 13:29:16 +02:00
namangupta01
b4d376e7be expected_string_default_error is fixed 2017-09-12 12:11:43 +03:00
AEtherC0r3
9b7562fe2e Update autoprefixer-rails to 7.1.1 2017-08-07 12:23:01 +03:00
AEtherC0r3
cb8010bafe Update omniauth-oauth2 to 1.4.0 2017-08-07 12:23:01 +03:00
AEtherC0r3
2824336ead Update sprockets to 3.7.1 2017-08-07 12:23:01 +03:00
AEtherC0r3
2799653124 Update omniauth to 1.6.1 2017-08-07 12:23:01 +03:00
AEtherC0r3
4e1d45382c Update awesome_nested_set to 3.1.3 2017-08-07 12:23:01 +03:00
AEtherC0r3
57f450e857 Update delayed_job_active_record to 4.1.2 2017-08-07 12:23:01 +03:00
AEtherC0r3
7e2bb8043f Update coffee-rails to 4.2.2 2017-08-07 12:23:01 +03:00
AEtherC0r3
d9649a4446 Update jquery-rails to 4.3.1 2017-08-07 12:23:01 +03:00
AEtherC0r3
f74f2d3f52 Update responders to 2.4.0 2017-08-07 12:23:01 +03:00
AEtherC0r3
d94fdb2a28 Update dotenv-rails to 2.2.1 2017-08-07 12:23:01 +03:00
AEtherC0r3
da8b72343b Update font-awesome-rails to 4.7.0.2 2017-08-07 12:23:01 +03:00
AEtherC0r3
a4b82bc830 Update sass-rails to 5.0.6 2017-08-07 12:23:01 +03:00
rahul
5c0a565e8d webmock updated
Updated Webmock as previous version was not compatible with the new gems
2017-07-16 22:57:51 +05:30
rahul
d4d1512c61 Updated rspec-rails and guard rspec
Updated this gem to fix nomethoderror old version of rspec use last_comment method which is deprecated in latest versions
2017-07-16 22:43:56 +05:30
rahul
a6f9fdbb43 Updated rails to 4.2.8
Rails update to 4.2.8 is necessary to get rid of Bignum and Fixnum warnings.
Ruby had two visible Integer classes: Fixnum and Bignum.
Ruby 2.4 unifies them into Integer. All C extensions which touch the Fixnum or Bignum class need to be fixed.
2017-07-16 22:43:01 +05:30
rahul
7f28ff3ac9 Updated rdoc-generator-fivefish gem
This update is required to update yajl-ruby 1.2 to yajl-ruby 1.3 that support ruby 2.4
2017-07-16 22:39:11 +05:30
Hernan Schmidt
b2bd6080c2 Update Rubocop to 0.49.1 2017-07-14 15:16:43 +02:00
Hernan Schmidt
8652a5cb78 Update Byebug to latest version 2017-07-12 16:40:13 +02:00
shlok007
b33e9ed28e fix revision count and drop observers 2017-07-09 03:36:57 +05:30
siddhantbajaj
4c957a8b17 Updated Paper Trail 2017-07-07 14:22:02 +05:30
siddhantbajaj
b9a540f4e2 Sample prototype for ticket pdf
Added verticl layout of ticket pdf without QR code.
2017-07-05 16:39:31 +05:30
AEtherC0r3
5f3b48c9f7 Update shoulda-matchers to 2.8 2017-06-27 21:16:46 +03:00
shlok007
58c80f1447 update nokogiri to 1.8.0 2017-06-14 22:12:10 +05:30
mdeniz
ebe1ca374d Fix the Travis failure in the last PR about axlsx dependencies 2017-06-09 14:41:51 +02:00
Agrim Mittal
605a1a9c5f Add haml-lint gem
Added haml_lint gem v0.24.0
2017-04-26 18:27:20 +05:30
Agrim Mittal
c27ab2d4a9 update to rubocop v0.48.1
Updated other gems(nokogiri rails-dom-testing) to be able to update rubocop
2017-04-20 14:58:00 +05:30
Eugene Dubinin
790e2fd3a2 implement manual event management and support for multiple speakers per event 2017-04-13 17:15:21 +03:00
gotens1211
a1d9cc39f9 Fixes #1402 Updated nokogiri in gemfile.lock 2017-03-25 09:18:17 +05:30
gotens1211
2353fd812e updated rubyzip gem in Gemfile.lock 2017-03-03 17:01:38 +05:30
gotens1211
c1b81755c9 Implementing Countable.js to count words.
Changed the words_count method to work with countable.js

Added the gem for countable.js
2017-03-01 19:15:19 +05:30
Stella Rouzi
8b5d6603af Merge pull request #1254 from shlok007/devise
Updated devise to 4.2.0
2017-03-01 13:29:44 +02:00
shlok007
84f4743648 update rolify to 5.1.0 2017-02-17 02:52:11 +05:30
shlok007
296eefd1c2 updated devise to 4.2.0 2017-01-21 12:12:19 +05:30