citizenlab

citizenlab copied to clipboard

Bump omniauth-rails_csrf_protection from 0.1.2 to 1.0.2 in /back

1

Bumps [omniauth-rails_csrf_protection](https://github.com/cookpad/omniauth-rails_csrf_protection) from 0.1.2 to 1.0.2. Release notes Sourced from omniauth-rails_csrf_protection's releases. Version 1.0.2 Update supported Ruby and Rails versions. Ensure the library is working correctly in a multi-threaded environment....

dependabot[bot]

Bump pundit from 2.3.2 to 2.5.0 in /back

1

Bumps [pundit](https://github.com/varvet/pundit) from 2.3.2 to 2.5.0. Changelog Sourced from pundit's changelog. 2.5.0 (2025-03-03) Added Add Pundit::Authorization#pundit_reset! hook to reset the policy and policy scope cache. #830 Add links to gemspec....

dependabot[bot]

Bump jwt-decode from 3.1.2 to 4.0.0 in /front

1

Bumps [jwt-decode](https://github.com/auth0/jwt-decode) from 3.1.2 to 4.0.0. Release notes Sourced from jwt-decode's releases. v4.0.0 A new version of the library, including a couple of improvements: No longer include a polyfill for...

dependabot[bot]

TAN-3625 Matrix field report builder group support

1

# Changelog

sebastienhoorens

[TAN-3358] Upgrade to Rails 7.2

1

# Changelog

adessy

[TAN-3358] Upgrade `ros-apartment` to v3.2.0

1

# Changelog ## Technical - [TAN-3358] Upgrade `ros-apartment` to v3.2.0. This is a prerequisite for upgrading Rails to v7.2 (or v8.0).

adessy

Putting this on hold for now because there is currently [no precompiled version of `grpc` compatible with Ruby 3.4](https://github.com/CitizenLabDotCo/citizenlab/pull/9993), and compiling the native extensions locally takes too much time. **Next...

adessy

Bump @rollup/plugin-typescript from 9.0.2 to 12.1.2 in /front

1

Bumps [@rollup/plugin-typescript](https://github.com/rollup/plugins/tree/HEAD/packages/typescript) from 9.0.2 to 12.1.2. Changelog Sourced from @​rollup/plugin-typescript's changelog. v12.1.2 2024-12-15 Bugfixes fix: path validation issue in validatePaths function (#1800) v12.1.1 2024-10-16 Bugfixes fix: allow for files to...

dependabot[bot]

Bump yup from 0.32.11 to 1.6.1 in /front

1

Bumps [yup](https://github.com/jquense/yup) from 0.32.11 to 1.6.1. Release notes Sourced from yup's releases. v1 Because I finally got around to it jquense/yup#1906 v1.0.0-beta.7 Fixes published artifacts for the main field v1.0.0-beta.5...

dependabot[bot]

TAN-3350 - Refactor sso & verification methods with clearer structure and more code sharing

2

- New `IdMethod` module as the root for all omniauth & verification methods - Both omniauth and verification are now both included in the same way as modules instead of...

jamesspeake