Age | Commit message (Collapse) | Author |
|
[11.7] Security extract pages with rubyzip
See merge request gitlab/gitlabhq!2833
(cherry picked from commit 043aa20e5c2e6bd51fea2184ed91d3aea950dc1a)
1aaec24c Extract GitLab Pages using RubyZip
|
|
Bump CarrierWave to 1.3.1
Closes #56096
See merge request gitlab-org/gitlab-ce!24280
|
|
Bump minitest to 5.11.3 to match Gitaly version
See merge request gitlab-org/gitlab-ce!24070
|
|
This will allow developers to run `bundle install` on both directories
and avoid additional calls to RubyGems for local development. Also sets
up the possibility of improved caching as mentioned in
https://gitlab.com/gitlab-org/gitlab-ce/issues/55843.
|
|
Bump Ruby on Rails to 5.0.7.1
See merge request gitlab-org/gitlab-ce!23396
|
|
Upgrade Omniauth and JWT gems to switch away from Google+ API
Closes #55668
See merge request gitlab-org/gitlab-ce!24068
|
|
Bump database_cleaner version
Closes #55539
See merge request gitlab-org/gitlab-ce!23985
|
|
This prevents us from shipping duplicate versions of this gem.
|
|
* omniauth-google-oauth2: Google will be deprecating its support for the
Google+ API, which currently omniauth-google-oauth2 uses to retrieve
user info. The bump in omniauth-google-oauth2 requires an upgrade to
ruby-jwt v2+ to support the verification of multiple issue providers
(https://github.com/zquestz/omniauth-google-oauth2/pull/345).
* jwt: This has the most number of changes that need to be
reviewed: https://github.com/jwt/ruby-jwt/blob/master/CHANGELOG.md
* oauth2: Needed to support ruby-jwt v2+:
https://github.com/oauth-xx/oauth2/blob/master/CHANGELOG.md
* omniauth-azure-oauth2 needs a version bump to support ruby-jwt v2+.
* omniauth: This version bump only involves backstage improvements:
https://github.com/omniauth/omniauth/releases
Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/55668
|
|
Full list of changes:
https://github.com/carrierwaveuploader/carrierwave/blob/master/CHANGELOG.md
|
|
should fix issue with:
undefined method `schema_migrations_table_name'
for ActiveRecord::Migrator:Class
https://gitlab.com/gitlab-org/gitlab-ee/-/jobs/135978879
|
|
Fix the CVE-2018-16476 vulnerability.
|
|
Fixes: ActionView::Template::Error (undefined method `add_class' for #<Nokogiri::XML::Element:0x0055dbff5252e8>
|
|
|
|
Leave object pools when destroying projects
Closes gitaly#1415
See merge request gitlab-org/gitlab-ce!23869
|
|
This action doesn't lean on reduplication, so a short call can me made
to the Gitaly server to have the object pool remove its remote to the
project pending deletion.
https://gitlab.com/gitlab-org/gitaly/blob/f6cd55357/internal/git/objectpool/link.go#L58
When an object pool doesn't have members, this would invalidate the need
for a pool. So when a project leaves the pool, the pool will be
destroyed on the background.
Fixes: https://gitlab.com/gitlab-org/gitaly/issues/1415
|
|
Fix deprecation: alias_method_chain is deprecated. Please, use Module#prepend instead
See merge request gitlab-org/gitlab-ce!23887
|
|
|
|
Module#prepend instead
|
|
|
|
Contains only minor fixes from 2.7.2:
https://github.com/getsentry/raven-ruby/releases
|
|
|
|
|
|
rspec-parameterized 0.4.0 fails spectacularly with Ruby 2.5.3 with the
following error:
```
RuntimeError:
No such frame, gone beyond end of stack!
```
This happens because of a Ruby bug in
https://bugs.ruby-lang.org/issues/15105. The binding_of_caller gem
induces this failure. This upgrade switches to the binding_of_ninja gem,
which does not have the same problem.
|
|
|
|
|
|
|
|
Commits API: Preserve file content in move operations if unspecified
Closes #52974 et #51083
See merge request gitlab-org/gitlab-ce!23387
|
|
Rack with Unicorn is unable to handle chunked requests due to private `eof?` method.
This exposes `eof?` not changing `rack` behavior.
Issue: https://gitlab.com/gitlab-org/gitlab-ee/issues/8539
|
|
|
|
Upgrade kubeclient to 4.0.0
See merge request gitlab-org/gitlab-ce!23261
|
|
Don't use rugged write-ref anymore
See merge request gitlab-org/gitlab-ce!23286
|
|
Bumps kubeclient and its dependencies from 3.1.0 to 4.0.0.
|
|
|
|
This gem is only used for development, and the latest version has been
tested with Rails 5/Ruby 2.5.
Changes: https://github.com/BetterErrors/better_errors/releases
|
|
This matches the version shipped in gitaly-ruby.
The main changes between 1.1.1 and 1.2.1 are CI-related
improvements:
https://github.com/brianmario/escape_utils/compare/1.1.1...1.2.1
|
|
Bump nokogiri, loofah, and rack gems for security updates
See merge request gitlab-org/gitlab-ce!23204
|
|
loofah: CVE-2018-16468:
https://github.com/flavorjones/loofah/issues/154
nokogiri: CVE-2018-14404 and CVE-2018-14567
https://github.com/sparklemotion/nokogiri/blob/master/CHANGELOG.md
rack: CVE-2018-16471
https://github.com/rack/rack/commit/e5d58031b766e49687157b45edab1b8457d972bd
i18n: https://github.com/svenfuchs/i18n/releases
concurrent-ruby: https://github.com/ruby-concurrency/concurrent-ruby/blob/master/CHANGELOG.md
|
|
See https://github.com/seattlerb/ruby_parser/blob/master/History.rdoc
|
|
'54093-the-default_value_for-gem-doesn-t-handle-actioncontroller-parameters-correctly' into 'master'
Replace the `default_value_for` gem with the `gitlab-default_value_with` gem which handles `ActionController::Parameters` correctly
Closes #54093
See merge request gitlab-org/gitlab-ce!23114
|
|
Update asana to 0.8.1
Closes #54004
See merge request gitlab-org/gitlab-ce!23039
|
|
Improve memory performance by reducing dirty pages before fork
See merge request gitlab-org/gitlab-ce!23169
|
|
Signed-off-by: Takuya Noguchi <takninnovationresearch@gmail.com>
|
|
Update asciidoctor to 1.5.8
Closes #54010
See merge request gitlab-org/gitlab-ce!23047
|
|
The nakayoshi_fork gem works around the lack of a Ruby compacting
garbage collecting by calling GC.start a few times to "promote" the age
of young objects to the maximum age 3. This reduces the number of dirty
pages and consequently improves copy-on-write behavior with unicorn
and other forking Web application servers.
|
|
This forks live at https://github.com/gitlabhq/default_value_for/tree/69-fix-action_controller-parameters-handling
and fixes an issue where default_value_for wouldn't handle
`ActionController::Parameters` correctly with Rails 5.
This fixes https://gitlab.com/gitlab-org/gitlab-ce/issues/54093.
Signed-off-by: Rémy Coutable <remy@rymai.me>
|
|
Signed-off-by: Rémy Coutable <remy@rymai.me>
|
|
Signed-off-by: Takuya Noguchi <takninnovationresearch@gmail.com>
|
|
Switch to Rails 5
Closes #14286 and #48991
See merge request gitlab-org/gitlab-ce!21492
|
|
|