| Commit message (Collapse) | Author | Age | Files | Lines |
|---|
| |\
| |
| |
| |
| |
| |
| | |
Bump jquery-rails to ~> 4.0.0, jquery-ui-rails to ~> 5.0.0
Closes #2859
See merge request !2183
|
| | | |
|
| |/ |
|
| |\
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Explicitly require Nokogiri 1.6.7.1 due to security issue
```
Name: nokogiri
Version: 1.6.7
Advisory: CVE-2015-5312
Criticality: High
URL: https://groups.google.com/forum/#!topic/ruby-security-ann/aSbgDiwb24s
Title: Nokogiri gem contains several vulnerabilities in libxml2
Solution: upgrade to >= 1.6.7.1
```
See merge request !2154
|
| | |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Name: nokogiri
Version: 1.6.7
Advisory: CVE-2015-5312
Criticality: High
URL:
https://groups.google.com/forum/#!topic/ruby-security-ann/aSbgDiwb24s
Title: Nokogiri gem contains several vulnerabilities in libxml2
Solution: upgrade to >= 1.6.7.1
|
| |\ \
| |/
|/| |
|
| | | |
|
| | |
| |
| |
| | |
https://github.com/kickstarter/rack-attack/releases/tag/v4.3.1
|
| | | |
|
| |\ \
| | |
| | |
| | |
| | |
| | |
| | | |
Update rerun to remove celluloid as dependency
After sidekiq 4 migration, we no longer need celluloid. `rerun` recent version also removed it from its dependency, so by getting this MR merged, we can solve #3797
See merge request !2088
|
| | |/ |
|
| |/ |
|
| |
|
|
|
| |
This reverts commit e426c027b0a2a3aa0dea1d833008f2bfd814f483, reversing
changes made to c3676aa156981092b7f03f1a3e74bb819cfa2fc3.
|
| |\
| |
| |
| |
| |
| |
| |
| | |
Bump gitlab_emoji to ~> 0.2.0
A new version of this gem was released October 29th
but was never bumped in GitLab.
See merge request !1994
|
| | | |
|
| |\ \
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Bump devise to 3.5.3 to fix reset token expiring after account creation
Also fixes an incorrect redirect after login with relative URL root:
Closes https://github.com/gitlabhq/gitlabhq/issues/8228
Closes #2750
See merge request !2056
|
| | | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Also fixes an incorrect redirect after login with relative URL root:
Closes https://github.com/gitlabhq/gitlabhq/issues/8228
Closes #2750
|
| |/ / |
|
| | | |
|
| |\ \
| | |
| | |
| | |
| | |
| | |
| | | |
Bump gollum-lib to 4.1.0 and fix dependency mismatch with rouge
Closes #3767
See merge request !2017
|
| | | |
| | |
| | |
| | | |
Closes #3767
|
| |\ \ \
| |/ /
|/| |
| | |
| | |
| | |
| | | |
Serve LFS object
Depends on gitlab-org/gitlab_git!57
See merge request !1976
|
| | |/ |
|
| | | |
|
| |\ \
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Migrate from Sidetiq to Sidekiq-cron
Migrate from Sidetiq to Sidekiq-cron
Updated Sidekiq to 3.5.x
This will solve #2355
See merge request !1982
|
| | |/
| |
| |
| | |
Updated Sidekiq to 3.5.x
|
| |/
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Two issues:
1. The constraints in the resources were incorrect. Here's what it was before:
```
group_milestone GET /groups/:group_id/milestones/:id(.:format) groups/milestones#show {:id=>/[a-zA-Z.0-9_\-]+(?<!\.atom)/, :group_id=>/[a-zA-Z.0-9_\-]+(?<!\.atom)/}
```
In this case, id is actually the title of the milestone, which can be anything at the moment.
After:
```
group_milestone GET /groups/:group_id/milestones/:id(.:format) groups/milestones#show {:id=>/[^\/]+/, :group_id=>/[a-zA-Z.0-9_\-]+(?<!\.atom)/}
```
2. `parameterize` would strip all Unicode characters, leaving a blank string. Rails would report something like:
ActionView::Template::Error (No route matches {:action=>"show", :controller=>"groups/milestones", :group_id=>#<Group id: 48, name: "ops-dev", path: "ops-dev", owner_id: nil, created_at: "2015-11-15 08:55:30", updated_at: "2015-12-02 06:23:26", type: "Group", description: "", avatar: "sha1.c71e73d51af1865c1bbbf6208e10044d46c9bb93.png", public: false>, :id=>"", :title=>"肯定不是中文的问题"} missing required keys: [:id]):
This change uses the babosa library to create a better slug, which surprisingly
isn't actually used by the global milestone controllers. Instead, they use the
title passed as a query string for some reason.
Closes https://github.com/gitlabhq/gitlabhq/issues/9881
Fix constraints
|
| | |
|
| |\
| |
| |
| |
| |
| |
| | |
Rails update to 4.2.4
https://gitlab.com/gitlab-org/gitlab-ce/issues/2694
See merge request !1902
|
| | | |
|
| | | |
|
| | |\ |
|
| | | | |
|
| | | | |
|
| | |/
|/|
| |
| | |
See #2857
|
| |\ \
| | |
| | |
| | |
| | |
| | |
| | | |
Remove enumerize gem
Closes #2803
See merge request !1912
|
| | |/ |
|
| |\ \
| | |
| | |
| | |
| | |
| | |
| | | |
Bump asana to ~> 0.4.0
Closes #2830
See merge request !1911
|
| | |/
| |
| |
| | |
Closes #2830
|
| |/
|
|
| |
Closes #2746
|
| |\
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Bump colorize to ~> 0.7.0
Also removes `colored` which came in during the CI merge and is
redundant.
Closes #2822
See merge request !1895
|
| | |
| |
| |
| |
| |
| |
| | |
Also removes `colored` which came in during the CI merge and is
redundant.
Closes #2822
|
| |\ \
| | |
| | |
| | |
| | |
| | |
| | | |
Bump rack-oauth2 to ~> 1.2.1
Closes #2748
See merge request !1891
|
| | |/ |
|
| |\ \
| | |
| | |
| | |
| | |
| | |
| | | |
Bump creole to ~> 0.5.0
Closes #2815
See merge request !1890
|
| | |/
| |
| |
| | |
Closes #2815
|
| |/
|
|
| |
Closes #2856
|
| |\
| |
| |
| |
| |
| |
| |
| |
| | |
Add bundler-audit to CI
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>
cc @DouweM @rspeicher @vsizov
See merge request !1874
|
| | |
| |
| |
| | |
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>
|
| |/ |
|
