| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
loofah: CVE-2018-16468:
https://github.com/flavorjones/loofah/issues/154
nokogiri: CVE-2018-14404 and CVE-2018-14567
https://github.com/sparklemotion/nokogiri/blob/master/CHANGELOG.md
rack: CVE-2018-16471
https://github.com/rack/rack/commit/e5d58031b766e49687157b45edab1b8457d972bd
i18n: https://github.com/svenfuchs/i18n/releases
concurrent-ruby: https://github.com/ruby-concurrency/concurrent-ruby/blob/master/CHANGELOG.md
|
|\
| |
| |
| |
| |
| |
| |
| |
| | |
'54093-the-default_value_for-gem-doesn-t-handle-actioncontroller-parameters-correctly' into 'master'
Replace the `default_value_for` gem with the `gitlab-default_value_with` gem which handles `ActionController::Parameters` correctly
Closes #54093
See merge request gitlab-org/gitlab-ce!23114
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
This forks live at https://github.com/gitlabhq/default_value_for/tree/69-fix-action_controller-parameters-handling
and fixes an issue where default_value_for wouldn't handle
`ActionController::Parameters` correctly with Rails 5.
This fixes https://gitlab.com/gitlab-org/gitlab-ce/issues/54093.
Signed-off-by: Rémy Coutable <remy@rymai.me>
|
|\ \
| | |
| | |
| | |
| | |
| | |
| | | |
Update asana to 0.8.1
Closes #54004
See merge request gitlab-org/gitlab-ce!23039
|
| | |
| | |
| | |
| | | |
Signed-off-by: Takuya Noguchi <takninnovationresearch@gmail.com>
|
|\ \ \
| |/ /
|/| |
| | |
| | | |
Improve memory performance by reducing dirty pages before fork
See merge request gitlab-org/gitlab-ce!23169
|
| |/
| |
| |
| |
| |
| |
| |
| | |
The nakayoshi_fork gem works around the lack of a Ruby compacting
garbage collecting by calling GC.start a few times to "promote" the age
of young objects to the maximum age 3. This reduces the number of dirty
pages and consequently improves copy-on-write behavior with unicorn
and other forking Web application servers.
|
|\ \
| |/
|/|
| |
| |
| |
| | |
Update asciidoctor to 1.5.8
Closes #54010
See merge request gitlab-org/gitlab-ce!23047
|
| |
| |
| |
| | |
Signed-off-by: Takuya Noguchi <takninnovationresearch@gmail.com>
|
|/
|
|
| |
Signed-off-by: Rémy Coutable <remy@rymai.me>
|
|\
| |
| |
| |
| |
| |
| | |
Switch to Rails 5
Closes #14286 and #48991
See merge request gitlab-org/gitlab-ce!21492
|
| |
| |
| |
| |
| | |
* updates Gemfile
* uses Rails 5 unless explicitly disabled
|
|/ |
|
|\
| |
| |
| |
| |
| |
| | |
Update haml_lint to 0.28.0
Closes #53289
See merge request gitlab-org/gitlab-ce!22660
|
| |
| |
| |
| | |
Signed-off-by: Takuya Noguchi <takninnovationresearch@gmail.com>
|
|\ \
| | |
| | |
| | |
| | |
| | |
| | | |
Update ffaker to 2.10.0
Closes #53291
See merge request gitlab-org/gitlab-ce!22661
|
| |/
| |
| |
| | |
Signed-off-by: Takuya Noguchi <takninnovationresearch@gmail.com>
|
|\ \
| | |
| | |
| | |
| | |
| | |
| | | |
Add Discord integration
Closes #21635
See merge request gitlab-org/gitlab-ce!22684
|
| | | |
|
| | | |
|
| | |
| | |
| | |
| | | |
See https://gitlab.com/gitlab-org/gitlab-ce/issues/53082
|
|\ \ \
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
Add endpoint to update a git submodule reference
Closes #41213
See merge request gitlab-org/gitlab-ce!20949
|
| |/ /
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
This new endpoint allow users to update a submodule's reference.
The MR involves adding a new operation RPC operation in gitaly-proto
(see gitlab-org/gitaly-proto!233) and change Gitaly to use this
new version (see gitlab-org/gitaly!936).
See gitlab-org/gitlab-ce!20949
|
|\ \ \
| |/ /
|/| |
| | |
| | |
| | |
| | | |
Remove asset_sync gem and related code
Closes omnibus-gitlab#3872
See merge request gitlab-org/gitlab-ce!22610
|
| | |
| | |
| | |
| | |
| | | |
Reverting https://gitlab.com/gitlab-org/gitlab-ce/merge_requests/15734 .
We are not using asset sync currently.
|
| |/
|/|
| |
| | |
Signed-off-by: Takuya Noguchi <takninnovationresearch@gmail.com>
|
|/
|
|
|
|
| |
This allows us (and others) to test drive Puma without it affecting all
users. Puma can be enabled by setting the environment variable
"EXPERIMENTAL_PUMA" to a non empty value.
|
|
|
|
|
|
|
|
|
| |
It looks like gRPC may have worked around
https://github.com/google/protobuf/issues/4210 via
https://github.com/grpc/grpc/pull/14634.
This is needed to support Ruby 2.5
(https://gitlab.com/gitlab-org/gitlab-ce/merge_requests/22555).
|
|\
| |
| |
| |
| |
| |
| | |
Remove gitlab-grit as a transitive dependency of GitLab
Closes #44361
See merge request gitlab-org/gitlab-ce!22373
|
| |
| |
| |
| |
| |
| |
| |
| | |
Removing this dependency also allows us to remove a transitive
dependency on gitlab_grit - which is the whole point of this exercise.
I don't think we can EOL gitlab_grit until it's removed as a dependency
from gitaly-ruby, but this at least gets it out of gitlab-ce.
|
| |
| |
| |
| |
| | |
This allows us to avoid one transitive dependency on gitlab-grit. The
aim is to remove all transitive dependencies.
|
|\ \
| |/
|/|
| |
| | |
Use grpc v1.15.x
See merge request gitlab-org/gitlab-ce!22350
|
| | |
|
|/
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
This saves about 128 MB of baseline RAM usage per Unicorn and
Sidekiq process (!).
Linguist wasn't detecting languages anymore from CE/EE since
9ae8b57467ac8b38f1fa9020a466d94a93cbb9dd. However, Linguist::BlobHelper
was still being depended on by BlobLike and others.
This removes the Linguist gem, given it isn't required anymore.
EscapeUtils were pulled in as dependency, but given Banzai depends on
it, it is now added explicitly.
Previously, Linguist was used to detect the best ACE mode. Instead,
we rely on ACE to guess the best mode based on the file extension.
|
|\
| |
| |
| |
| | |
Add reliable sidekiq fetcher
See merge request gitlab-org/gitlab-ce!21715
|
| | |
|
| |
| |
| |
| |
| |
| |
| |
| | |
Cleanup code, and refactor tests that still use Rugged. After this, there should
be no Rugged code that access the instance's repositories on non-test
environments. There is still some rugged code for other tasks like the
repository import task, but since it doesn't access any repository storage path
it can stay.
|
|\ \
| | |
| | |
| | |
| | |
| | |
| | | |
Adds list_last_commits_for_tree as the method call for the Gitaly ListLastCommitsForTree RPC
Closes #37433
See merge request gitlab-org/gitlab-ce!21921
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Implements list_last_commits_for_tree to communicate with the
ListLastCommitsForTree Gitaly RPC
Bumps the Gitaly server version
Bumps the Gitaly-Proto gem version
|
|\ \ \
| |/ /
| | |
| | | |
# Conflicts:
# Gemfile.lock
|
| |\ \
| | |/
| |/|
| | |
| | |
| | |
| | | |
Update grape to 1.1.0 to address a XSS vulnerability
Closes #51299
See merge request gitlab-org/gitlab-ce!21639
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
See
https://github.com/ruby-grape/grape/blob/master/CHANGELOG.md#110-842018.
This fixes https://gitlab.com/gitlab-org/gitlab-ce/issues/51299.
Signed-off-by: Rémy Coutable <remy@rymai.me>
|
| | |
| | |
| | |
| | | |
We remove this feature as it never worked properly
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
The reason for removing this gem is that it's not being maintained
anymore. It uses `alias_method_chain` which is deprecated in rails 5
(and removed in 5.1), the issue is pending upstream (including
a fix) - https://github.com/suranyami/peek-sidekiq/issues/3 for a while.
Peek-sidekiq is used in performance bar for displaying sidekiq
statistics.
|
| |/
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
The most significant change in this version is that the default
concurrency has been lowered from 25 to 10 (https://github.com/mperham/sidekiq/issues/3892).
This doesn't affect omnibus-gitlab because the concurrency is controlled via a
setting that defaults to 25 anyway and is passed in via the `-c` command-line
parameter.
However, source installations (including the GDK) will have to either specify
the concurrency in `sidekiq.yml` or use the `-c` option.
Full list of changes: https://github.com/mperham/sidekiq/blob/master/Changes.md
|
| | |
|
| |\
| | |
| | |
| | |
| | |
| | |
| | | |
Fix attachments not displaying inline with Google Cloud Storage
Closes #49957
See merge request gitlab-org/gitlab-ce!21265
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
There were several issues:
1. With Google Cloud Storage, we can't override the Content-Type with
Response-Content-Type once it is set. Setting the value to
`application/octet-stream` doesn't buy us anything. GCS defaults to
`application/octet-stream`, and AWS uses `binary/octet-stream`. Just remove
this `Content-Type` when we upload new files.
2. CarrierWave and fog-google need to support query parameters:
https://github.com/fog/fog-google/pull/409/files, https://github.com/carrierwaveuploader/carrierwave/pull/2332/files.
CarrierWave has been monkey-patched until an official release.
3. Workhorse also needs to remove the Content-Type header in the request
(https://gitlab.com/gitlab-org/gitlab-workhorse/blob/ef80978ff89e628c8eeb66556720e30587d3deb6/internal/objectstore/object.go#L66),
or we'll get a 403 error when uploading due to signed URLs not matching the headers.
Upgrading to Workhorse 6.1.0 for https://gitlab.com/gitlab-org/gitlab-workhorse/merge_requests/297
will make Workhorse use the headers that are used by Rails.
Closes #49957
|
| |/
| |
| |
| | |
Full list of changes: https://github.com/fnando/browser/blob/master/CHANGELOG.md
|
| |\
| | |
| | |
| | |
| | | |
Enable JUnit results for rspec
See merge request gitlab-org/gitlab-ce!21449
|