2318 Commits

Author SHA1 Message Date
Dombi Attila 5a14af6e0d Merge pull request #23630 from opf/task/op-19483-introduce-bundler-cooldown
[OP-19483] Introduce Bundler cooldown
2026-06-11 10:47:57 +03:00
dependabot[bot] 267894f5fc Bump doorkeeper from 5.9.1 to 5.9.2
Bumps [doorkeeper](https://github.com/doorkeeper-gem/doorkeeper) from 5.9.1 to 5.9.2.
- [Release notes](https://github.com/doorkeeper-gem/doorkeeper/releases)
- [Changelog](https://github.com/doorkeeper-gem/doorkeeper/blob/main/CHANGELOG.md)
- [Commits](https://github.com/doorkeeper-gem/doorkeeper/compare/v5.9.1...v5.9.2)

---
updated-dependencies:
- dependency-name: doorkeeper
  dependency-version: 5.9.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-11 05:34:55 +00:00
Jens Ulferts 813223f5b6 Merge pull request #23646 from opf/dependabot/bundler/dev/good_job-4.19.0
Bump good_job from 4.18.2 to 4.19.0
2026-06-10 09:02:54 +02:00
Jens Ulferts d686256d85 Merge pull request #23650 from opf/dependabot/bundler/dev/retriable-3.8.0
Bump retriable from 3.5.1 to 3.8.0
2026-06-10 09:02:41 +02:00
dependabot[bot] f922881bff Bump retriable from 3.5.1 to 3.8.0
Bumps [retriable](https://github.com/kamui/retriable) from 3.5.1 to 3.8.0.
- [Release notes](https://github.com/kamui/retriable/releases)
- [Changelog](https://github.com/kamui/retriable/blob/main/CHANGELOG.md)
- [Commits](https://github.com/kamui/retriable/compare/v3.5.1...v3.8.0)

---
updated-dependencies:
- dependency-name: retriable
  dependency-version: 3.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-10 05:41:03 +00:00
dependabot[bot] 39047595c5 Bump oj from 3.17.1 to 3.17.3
Bumps [oj](https://github.com/ohler55/oj) from 3.17.1 to 3.17.3.
- [Release notes](https://github.com/ohler55/oj/releases)
- [Changelog](https://github.com/ohler55/oj/blob/develop/CHANGELOG.md)
- [Commits](https://github.com/ohler55/oj/compare/v3.17.1...v3.17.3)

---
updated-dependencies:
- dependency-name: oj
  dependency-version: 3.17.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-10 05:36:01 +00:00
dependabot[bot] 3ed42c1c25 Bump good_job from 4.18.2 to 4.19.0
Bumps [good_job](https://github.com/bensheldon/good_job) from 4.18.2 to 4.19.0.
- [Release notes](https://github.com/bensheldon/good_job/releases)
- [Changelog](https://github.com/bensheldon/good_job/blob/main/CHANGELOG.md)
- [Commits](https://github.com/bensheldon/good_job/compare/v4.18.2...v4.19.0)

---
updated-dependencies:
- dependency-name: good_job
  dependency-version: 4.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-10 05:35:12 +00:00
Dombi Attila dbd101b164 Ignore cooldown for our gems, same as the dependabot config. 2026-06-09 17:02:26 +03:00
Dombi Attila 15af95dee0 [OP-19483] Introduce Bundler cooldown
https://community.openproject.org/wp/OP-19483
2026-06-09 15:44:49 +03:00
dependabot[bot] 8998fa0606 Bump retriable from 3.5.0 to 3.5.1
Bumps [retriable](https://github.com/kamui/retriable) from 3.5.0 to 3.5.1.
- [Release notes](https://github.com/kamui/retriable/releases)
- [Changelog](https://github.com/kamui/retriable/blob/main/CHANGELOG.md)
- [Commits](https://github.com/kamui/retriable/compare/v3.5.0...v3.5.1)

---
updated-dependencies:
- dependency-name: retriable
  dependency-version: 3.5.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-09 05:41:32 +00:00
dependabot[bot] 6eb2cc7d15 Bump retriable from 3.4.1 to 3.5.0
Bumps [retriable](https://github.com/kamui/retriable) from 3.4.1 to 3.5.0.
- [Release notes](https://github.com/kamui/retriable/releases)
- [Changelog](https://github.com/kamui/retriable/blob/main/CHANGELOG.md)
- [Commits](https://github.com/kamui/retriable/compare/v3.4.1...v3.5.0)

---
updated-dependencies:
- dependency-name: retriable
  dependency-version: 3.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-08 07:51:20 +00:00
dependabot[bot] c16cfcd516 Bump mcp from 0.16.0 to 0.17.0
Bumps [mcp](https://github.com/modelcontextprotocol/ruby-sdk) from 0.16.0 to 0.17.0.
- [Release notes](https://github.com/modelcontextprotocol/ruby-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/ruby-sdk/blob/main/CHANGELOG.md)
- [Commits](https://github.com/modelcontextprotocol/ruby-sdk/compare/v0.16.0...v0.17.0)

---
updated-dependencies:
- dependency-name: mcp
  dependency-version: 0.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-03 22:29:57 +00:00
Alexander Brandon Coles ba80c908ca Merge pull request #21480 from opf/dependabot/bundler/dev/capybara_accessible_selectors-v0.16.0
Bump capybara_accessible_selectors from v0.15.0 to v0.16.0
2026-06-01 12:31:49 +02:00
ulferts 5e68a83fff bump view_component 2026-06-01 09:41:46 +02:00
ulferts 3bc0fba959 bump opentelemetry-instrumentation-all & opentelemetry-instrumentation-trilogy 2026-06-01 09:41:46 +02:00
Henriette Darge 0f6e27bc49 Merge remote-tracking branch 'origin/release/17.5' into dev 2026-06-01 08:40:50 +02:00
Behrokh Satarnejad f171909599 Bump Primer to 0.86.2 version (#23459)
ump primer to 0.86.2
2026-06-01 08:04:21 +02:00
dependabot[bot] 953c96d605 Bump capybara_accessible_selectors from v0.15.0 to v0.16.0
Bumps [capybara_accessible_selectors](https://github.com/citizensadvice/capybara_accessible_selectors) from v0.15.0 to v0.16.0.
- [Release notes](https://github.com/citizensadvice/capybara_accessible_selectors/releases)
- [Changelog](https://github.com/citizensadvice/capybara_accessible_selectors/blob/main/CHANGELOG.md)
- [Commits](https://github.com/citizensadvice/capybara_accessible_selectors/compare/5b9ce7840d04270e99f4f0cb03989e05437326a6...568699fc71b6648e7186a4ac77bba072447c131e)

---
updated-dependencies:
- dependency-name: capybara_accessible_selectors
  dependency-version: 568699fc71b6648e7186a4ac77bba072447c131e
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-29 18:52:57 +02:00
dependabot[bot] 85b8acc2ba Bump mcp from 0.15.0 to 0.16.0
Bumps [mcp](https://github.com/modelcontextprotocol/ruby-sdk) from 0.15.0 to 0.16.0.
- [Release notes](https://github.com/modelcontextprotocol/ruby-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/ruby-sdk/blob/main/CHANGELOG.md)
- [Commits](https://github.com/modelcontextprotocol/ruby-sdk/compare/v0.15.0...v0.16.0)

---
updated-dependencies:
- dependency-name: mcp
  dependency-version: 0.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-28 09:59:52 +00:00
dependabot[bot] 13f6a6bf06 Bump carrierwave from 2.2.6 to 2.2.7
Bumps [carrierwave](https://github.com/carrierwaveuploader/carrierwave) from 2.2.6 to 2.2.7.
- [Release notes](https://github.com/carrierwaveuploader/carrierwave/releases)
- [Changelog](https://github.com/carrierwaveuploader/carrierwave/blob/master/CHANGELOG.md)
- [Commits](https://github.com/carrierwaveuploader/carrierwave/compare/v2.2.6...v2.2.7)

---
updated-dependencies:
- dependency-name: carrierwave
  dependency-version: 2.2.7
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-28 09:25:12 +02:00
Alexander Brandon Coles 5dec26a16c Revert "bump parallel_tests & turbo_tests"
This update broke logging of RSpec seed/shard/processes, critical for
reproducing and debugging CI failures locally.

Example:

    Process 3: TEST_ENV_NUMBER=3 RUBYOPT=-I/usr/local/bundle/bundler/gems/turbo_tests-c1c4707f536a/lib -r/usr/local/bundle/gems/bundler-4.0.9/lib/bundler/setup -W0 RSPEC_SILENCE_FILTER_ANNOUNCEMENTS=1 /usr/local/bundle/gems/bundler-4.0.9/exe/bundle exec rspec --seed 31239 --format TurboTests::JsonRowsFormatter --out tmp/test-pipes/subprocess-3 --format ParallelTests::RSpec::RuntimeLogger --out spec/support/runtime-logs/turbo_runtime_features.log modules/bim/spec/features/bcf/api_authorization_spec.rb modules/bim/spec/features/model_management_spec.rb modules/budgets/spec/features/budgets/attachment_upload_spec.rb modules/meeting/spec/features/structured_meetings/work_package_meetings_tab_spec.rb modules/my_page/spec/features/my/my_page_spec.rb modules/storages/spec/features/delete_project_storage_and_file_links_spec.rb modules/two_factor_authentication/spec/features/login/login_without_2fa_spec.rb spec/features/admin/custom_fields/projects/format_fields/boolean_spec.rb spec/features/admin/custom_fields/projects/format_fields/version_spec.rb spec/features/auth/consent_auth_stage_spec.rb spec/features/auth/lost_password_spec.rb spec/features/global_roles/global_role_assignment_spec.rb spec/features/my/disable_keyboard_shortcuts_spec.rb spec/features/projects/project_autocomplete_spec.rb spec/features/projects/project_custom_fields/overview_page/widget_spec.rb spec/features/security/session_ttl_spec.rb spec/features/wiki/attachment_upload_spec.rb spec/features/work_packages/share/enterprise_restriction_spec.rb spec/features/work_packages/table/scheduling/manual_scheduling_spec.rb spec/features/work_packages/work_package_workflow_form_spec.rb

This reverts commit 3ee9107ff5.
2026-05-25 14:53:42 +00:00
dependabot[bot] f8d3488bce Bump rubocop-rails from 2.35.1 to 2.35.2 (#23330)
Bumps [rubocop-rails](https://github.com/rubocop/rubocop-rails) from 2.35.1 to 2.35.2.
- [Release notes](https://github.com/rubocop/rubocop-rails/releases)
- [Changelog](https://github.com/rubocop/rubocop-rails/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rubocop/rubocop-rails/compare/v2.35.1...v2.35.2)

---
updated-dependencies:
- dependency-name: rubocop-rails
  dependency-version: 2.35.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-25 12:42:23 +02:00
Jan Sandbrink c6b88a2893 Merge pull request #23279 from opf/dependabot/bundler/dev/mcp-0.15.0
Bump mcp from 0.14.0 to 0.15.0
2026-05-21 14:27:17 +02:00
ulferts 0b7a866065 Merge remote-tracking branch 'origin/dev' into feature/74147-bring-sprint-sharing-safe-to-corporate-plan 2026-05-20 21:27:34 +02:00
dependabot[bot] f6bb72a109 Bump mcp from 0.14.0 to 0.15.0
Bumps [mcp](https://github.com/modelcontextprotocol/ruby-sdk) from 0.14.0 to 0.15.0.
- [Release notes](https://github.com/modelcontextprotocol/ruby-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/ruby-sdk/blob/main/CHANGELOG.md)
- [Commits](https://github.com/modelcontextprotocol/ruby-sdk/compare/v0.14.0...v0.15.0)

---
updated-dependencies:
- dependency-name: mcp
  dependency-version: 0.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-19 18:19:33 +00:00
Alexander Brandon Coles dfa82bbaf0 Update Octicons to v19.35.0
Introduces op-flag icon.

See opf/openproject-octicons#203
2026-05-19 14:41:47 +02:00
Oliver Günther 96d703d863 Merge remote-tracking branch 'origin/release/17.4' into dev 2026-05-19 11:09:41 +02:00
Oliver Günther 0b08d49f0c Merge remote-tracking branch 'origin/release/17.3' into release/17.4 2026-05-19 11:09:30 +02:00
Oliver Günther ecfe44b22f Add missing msgpack require 2026-05-19 11:08:53 +02:00
ulferts a814de03f9 bump opentelemetry-exporter-otlp 2026-05-18 11:27:59 +02:00
ulferts 10f3df13b9 bump view_component 2026-05-18 10:45:39 +02:00
ulferts 994d827912 bump rubocop-rails 2026-05-18 10:45:01 +02:00
ulferts 206ccd80ff bump friendly_id 2026-05-18 10:44:12 +02:00
ulferts 9fb04299d9 bump closure_tree 2026-05-18 10:43:34 +02:00
ulferts 2f92fffd38 bump factory_bot 2026-05-18 10:40:27 +02:00
ulferts eb09ce0c1b enterprise banner with fallback on sprint sharing settings 2026-05-18 10:06:45 +02:00
dependabot[bot] fd32949633 Bump commonmarker from 2.8.1 to 2.8.2 (#23220)
Bumps [commonmarker](https://github.com/gjtorikian/commonmarker) from 2.8.1 to 2.8.2.
- [Release notes](https://github.com/gjtorikian/commonmarker/releases)
- [Changelog](https://github.com/gjtorikian/commonmarker/blob/main/CHANGELOG.md)
- [Commits](https://github.com/gjtorikian/commonmarker/compare/v2.8.1...v2.8.2)

---
updated-dependencies:
- dependency-name: commonmarker
  dependency-version: 2.8.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-15 15:44:01 +02:00
Marcello Rocha eea1aa6549 Deal with the move of Container into Dry::Core (#23189) 2026-05-13 11:27:24 +02:00
dependabot[bot] c64bd18f6c Bump closure_tree from 9.6.1 to 9.6.2 (#23173)
Bumps [closure_tree](https://github.com/ClosureTree/closure_tree) from 9.6.1 to 9.6.2.
- [Release notes](https://github.com/ClosureTree/closure_tree/releases)
- [Changelog](https://github.com/ClosureTree/closure_tree/blob/master/CHANGELOG.md)
- [Commits](https://github.com/ClosureTree/closure_tree/compare/closure_tree/v9.6.1...closure_tree/v9.6.2)

---
updated-dependencies:
- dependency-name: closure_tree
  dependency-version: 9.6.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-12 13:31:56 +02:00
Jens Ulferts b85fb98e13 Merge pull request #23164 from opf/fix/bump_parallel_tests
bump parallel_tests & turbo_tests
2026-05-12 08:31:10 +02:00
ulferts 3ee9107ff5 bump parallel_tests & turbo_tests 2026-05-11 17:47:27 +02:00
dependabot[bot] 9d59d17a7e Bump puma from 7.2.0 to 8.0.0
Bumps [puma](https://github.com/puma/puma) from 7.2.0 to 8.0.0.
- [Release notes](https://github.com/puma/puma/releases)
- [Changelog](https://github.com/puma/puma/blob/main/History.md)
- [Commits](https://github.com/puma/puma/compare/v7.2.0...v8.0.0)

---
updated-dependencies:
- dependency-name: puma
  dependency-version: 8.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-11 08:22:01 +00:00
dependabot[bot] 9d38e23de7 Bump view_component from 4.8.0 to 4.9.0 (#23148)
Bumps [view_component](https://github.com/viewcomponent/view_component) from 4.8.0 to 4.9.0.
- [Release notes](https://github.com/viewcomponent/view_component/releases)
- [Changelog](https://github.com/ViewComponent/view_component/blob/main/docs/CHANGELOG.md)
- [Commits](https://github.com/viewcomponent/view_component/compare/v4.8.0...v4.9.0)

---
updated-dependencies:
- dependency-name: view_component
  dependency-version: 4.9.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-10 18:58:13 +02:00
Henriette Darge 701b5d3a5d Use quick filter slot for meetings filter 2026-05-07 11:29:21 +02:00
Jan Sandbrink 7833d21c55 Merge pull request #23069 from opf/remove-bootsnap
Remove Bootsnap
2026-05-06 14:34:22 +02:00
Jan Sandbrink ba2cec4629 Remove Bootsnap
It's a gem that is intimately coupled with the
implementation of Ruby, which adds chances to
introduce errors in random pieces of code that
would not exist otherwise.

Capturing the room temperature among core contributors
to OpenProject showed that no one was there to defend
the presence of Bootsnap and some people (including myself)
had an opinion on removing it.
2026-05-06 07:52:03 +02:00
dependabot[bot] 3a4ba271e4 Bump good_job from 4.18.1 to 4.18.2
Bumps [good_job](https://github.com/bensheldon/good_job) from 4.18.1 to 4.18.2.
- [Release notes](https://github.com/bensheldon/good_job/releases)
- [Changelog](https://github.com/bensheldon/good_job/blob/main/CHANGELOG.md)
- [Commits](https://github.com/bensheldon/good_job/compare/v4.18.1...v4.18.2)

---
updated-dependencies:
- dependency-name: good_job
  dependency-version: 4.18.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-05 06:11:24 +00:00
dependabot[bot] 40754ac7ba Bump good_job from 4.16.0 to 4.18.1
Bumps [good_job](https://github.com/bensheldon/good_job) from 4.16.0 to 4.18.1.
- [Release notes](https://github.com/bensheldon/good_job/releases)
- [Changelog](https://github.com/bensheldon/good_job/blob/main/CHANGELOG.md)
- [Commits](https://github.com/bensheldon/good_job/compare/v4.16.0...v4.18.1)

---
updated-dependencies:
- dependency-name: good_job
  dependency-version: 4.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-04 06:02:44 +00:00
ulferts c34f7ee14a bump view_component 2026-04-30 15:24:47 +02:00
ulferts e0c40c3476 bump opentelemetry-instrumentation-all 2026-04-30 15:24:47 +02:00