David Rodríguez
a009dacd41
Pin version of foundation
...
Reading through open issues, I think it's more likely that we end up
removing it rather than upgrading it.
So let's fix it like when we don't want certain dependencies to be
managed by Dependabot.
2025-11-19 14:45:52 +01:00
Maikel
0aa4993a4d
Merge pull request #13686 from mkllnk/litefarm-market-organic
...
Allow Litefarm and Market.Organic to access DFC API
2025-11-19 15:11:51 +11:00
Gaetan Craig-Riou
98176bd5de
Merge pull request #13730 from openfoodfoundation/dependabot/bundler/redcarpet-3.6.1
...
Bump redcarpet from 3.6.0 to 3.6.1
2025-11-19 10:10:20 +11:00
Gaetan Craig-Riou
dde0e23a79
Merge pull request #13729 from openfoodfoundation/dependabot/bundler/wicked_pdf-2.8.2
...
Bump wicked_pdf from 2.8.1 to 2.8.2
2025-11-19 10:08:42 +11:00
Gaetan Craig-Riou
d1021210e6
Merge pull request #13728 from openfoodfoundation/dependabot/bundler/rubocop-factory_bot-2.28.0
...
Bump rubocop-factory_bot from 2.27.1 to 2.28.0
2025-11-19 10:08:08 +11:00
dependabot[bot]
bfa472a293
Bump redcarpet from 3.6.0 to 3.6.1
...
Bumps [redcarpet](https://github.com/vmg/redcarpet ) from 3.6.0 to 3.6.1.
- [Release notes](https://github.com/vmg/redcarpet/releases )
- [Changelog](https://github.com/vmg/redcarpet/blob/master/CHANGELOG.md )
- [Commits](https://github.com/vmg/redcarpet/compare/v3.6.0...v3.6.1 )
---
updated-dependencies:
- dependency-name: redcarpet
dependency-version: 3.6.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-18 09:02:38 +00:00
dependabot[bot]
9d14c1026c
Bump wicked_pdf from 2.8.1 to 2.8.2
...
Bumps [wicked_pdf](https://github.com/mileszs/wicked_pdf ) from 2.8.1 to 2.8.2.
- [Release notes](https://github.com/mileszs/wicked_pdf/releases )
- [Changelog](https://github.com/mileszs/wicked_pdf/blob/master/CHANGELOG.md )
- [Commits](https://github.com/mileszs/wicked_pdf/commits )
---
updated-dependencies:
- dependency-name: wicked_pdf
dependency-version: 2.8.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-18 09:02:04 +00:00
dependabot[bot]
c653743a56
Bump rubocop-factory_bot from 2.27.1 to 2.28.0
...
Bumps [rubocop-factory_bot](https://github.com/rubocop/rubocop-factory_bot ) from 2.27.1 to 2.28.0.
- [Release notes](https://github.com/rubocop/rubocop-factory_bot/releases )
- [Changelog](https://github.com/rubocop/rubocop-factory_bot/blob/master/CHANGELOG.md )
- [Commits](https://github.com/rubocop/rubocop-factory_bot/compare/v2.27.1...v2.28.0 )
---
updated-dependencies:
- dependency-name: rubocop-factory_bot
dependency-version: 2.28.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-18 09:01:30 +00:00
Filipe
a1ee1eac4c
Merge pull request #13680 from rioug/13674-enable-variant-tag-new-enterprise
...
[Variant tags] Enable variant tag for enterprise created after 11th of August and super admins
2025-11-17 23:05:11 +00:00
Gaetan Craig-Riou
84b351e076
Merge pull request #13723 from openfoodfoundation/dependabot/npm_and_yarn/js-yaml-3.14.2
...
Bump js-yaml from 3.14.1 to 3.14.2
2025-11-18 09:51:04 +11:00
dependabot[bot]
02c1b309f3
Bump js-yaml from 3.14.1 to 3.14.2
...
Bumps [js-yaml](https://github.com/nodeca/js-yaml ) from 3.14.1 to 3.14.2.
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md )
- [Commits](https://github.com/nodeca/js-yaml/compare/3.14.1...3.14.2 )
---
updated-dependencies:
- dependency-name: js-yaml
dependency-version: 3.14.2
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-17 22:36:10 +00:00
Gaetan Craig-Riou
58028df3b7
Merge pull request #13721 from openfoodfoundation/dependabot/bundler/newrelic_rpm-9.23.0
...
Bump newrelic_rpm from 9.22.0 to 9.23.0
2025-11-18 09:29:31 +11:00
Gaetan Craig-Riou
638c139bca
Merge pull request #13720 from openfoodfoundation/dependabot/bundler/bugsnag-6.28.0
...
Bump bugsnag from 6.26.4 to 6.28.0
2025-11-18 09:28:23 +11:00
Gaetan Craig-Riou
5adfdf11fb
Merge pull request #13719 from openfoodfoundation/dependabot/bundler/angular_rails_csrf-7.0.2
...
Bump angular_rails_csrf from 6.0.0 to 7.0.2
2025-11-18 09:26:57 +11:00
dependabot[bot]
152a7b7fe9
Bump newrelic_rpm from 9.22.0 to 9.23.0
...
Bumps [newrelic_rpm](https://github.com/newrelic/newrelic-ruby-agent ) from 9.22.0 to 9.23.0.
- [Release notes](https://github.com/newrelic/newrelic-ruby-agent/releases )
- [Changelog](https://github.com/newrelic/newrelic-ruby-agent/blob/dev/CHANGELOG.md )
- [Commits](https://github.com/newrelic/newrelic-ruby-agent/compare/9.22.0...9.23.0 )
---
updated-dependencies:
- dependency-name: newrelic_rpm
dependency-version: 9.23.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-17 09:05:19 +00:00
dependabot[bot]
5c998bfc77
Bump bugsnag from 6.26.4 to 6.28.0
...
Bumps [bugsnag](https://github.com/bugsnag/bugsnag-ruby ) from 6.26.4 to 6.28.0.
- [Release notes](https://github.com/bugsnag/bugsnag-ruby/releases )
- [Changelog](https://github.com/bugsnag/bugsnag-ruby/blob/master/CHANGELOG.md )
- [Commits](https://github.com/bugsnag/bugsnag-ruby/compare/v6.26.4...v6.28.0 )
---
updated-dependencies:
- dependency-name: bugsnag
dependency-version: 6.28.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-17 09:04:19 +00:00
dependabot[bot]
97ca8702d4
Bump angular_rails_csrf from 6.0.0 to 7.0.2
...
Bumps [angular_rails_csrf](https://github.com/jsanders/angular_rails_csrf ) from 6.0.0 to 7.0.2.
- [Release notes](https://github.com/jsanders/angular_rails_csrf/releases )
- [Changelog](https://github.com/bodrovis/angular_rails_csrf/blob/master/CHANGELOG.md )
- [Commits](https://github.com/jsanders/angular_rails_csrf/compare/v6.0.0...v7.0.2 )
---
updated-dependencies:
- dependency-name: angular_rails_csrf
dependency-version: 7.0.2
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-17 09:03:44 +00:00
Maikel
e194ebf0f3
Merge pull request #13552 from openfoodfoundation/dependabot/npm_and_yarn/jest-30.2.0
...
Bump jest from 27.5.1 to 30.2.0
2025-11-17 15:21:57 +11:00
Gaetan Craig-Riou
f6fc8a6993
Merge pull request #13715 from openfoodfoundation/dependabot/bundler/rexml-3.4.2
...
Bump rexml from 3.3.9 to 3.4.2
2025-11-17 15:07:10 +11:00
Gaetan Craig-Riou
cbf6b4462e
Merge pull request #13712 from openfoodfoundation/dependabot/bundler/shoulda-matchers-7.0.1
...
Bump shoulda-matchers from 6.2.0 to 7.0.1
2025-11-17 15:04:52 +11:00
Gaetan Craig-Riou
c03580180a
Merge pull request #13711 from openfoodfoundation/dependabot/bundler/geocoder-1.8.6
...
Bump geocoder from 1.8.3 to 1.8.6
2025-11-17 15:03:06 +11:00
Gaetan Craig-Riou
77b72134d8
Merge pull request #13710 from openfoodfoundation/dependabot/bundler/good_migrations-0.3.1
...
Bump good_migrations from 0.2.1 to 0.3.1
2025-11-17 15:02:16 +11:00
dependabot[bot]
25ac714cc6
Bump rexml from 3.3.9 to 3.4.2
...
Bumps [rexml](https://github.com/ruby/rexml ) from 3.3.9 to 3.4.2.
- [Release notes](https://github.com/ruby/rexml/releases )
- [Changelog](https://github.com/ruby/rexml/blob/master/NEWS.md )
- [Commits](https://github.com/ruby/rexml/compare/v3.3.9...v3.4.2 )
---
updated-dependencies:
- dependency-name: rexml
dependency-version: 3.4.2
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-14 23:10:57 +00:00
Filipe
475e6c33f1
Merge pull request #13498 from chahmedejaz/task/13497-upgrade-activemerchant-gem
...
Upgrade ActiveMerchant to v1.137.0 and rexml to 3.3.9
2025-11-14 23:09:47 +00:00
Ahmed Ejaz
ae70a1372b
Remove version constraints for activemerchant and angular-rails-templates in Gemfile
2025-11-15 01:46:30 +05:00
Ahmed Ejaz
6eb6bf634f
Update activemerchant version constraint to '>= 1.137.0' in Gemfile and Gemfile.lock
2025-11-15 01:46:30 +05:00
Ahmed Ejaz
a82209af85
Update activemerchant version constraint to '~> 1.137.0' in Gemfile and Gemfile.lock
2025-11-15 01:46:30 +05:00
Ahmed Ejaz
ecf0d53f0a
Revert "revert "Bump rexml from 3.2.9 to 3.3.9""
...
This reverts commit c821b0a285 .
2025-11-15 01:46:30 +05:00
Filipe
fc047e3f7c
Merge pull request #13668 from openfoodfoundation/dependabot/npm_and_yarn/leaflet-providers-3.0.0
...
Bump leaflet-providers from 2.0.0 to 3.0.0
2025-11-14 18:21:59 +00:00
Filipe
d9e3076a3b
Merge pull request #13654 from pacodelaluna/check-enterprise-image-logic
...
Improve enterprise images-related logic
2025-11-14 18:15:50 +00:00
Filipe
271e895486
Merge pull request #13676 from deivid-rodriguez/z-index
...
Fix tag rule visibility select box options hidden by save bar
2025-11-14 17:41:52 +00:00
Filipe
3e02a03312
Merge pull request #13650 from rioug/13539-update-variant-multi-producer
...
Fix update multi producer products
2025-11-14 16:56:16 +00:00
dependabot[bot]
ec31ff418d
Bump shoulda-matchers from 6.2.0 to 7.0.1
...
Bumps [shoulda-matchers](https://github.com/thoughtbot/shoulda-matchers ) from 6.2.0 to 7.0.1.
- [Release notes](https://github.com/thoughtbot/shoulda-matchers/releases )
- [Changelog](https://github.com/thoughtbot/shoulda-matchers/blob/main/CHANGELOG.md )
- [Commits](https://github.com/thoughtbot/shoulda-matchers/compare/v6.2.0...v7.0.1 )
---
updated-dependencies:
- dependency-name: shoulda-matchers
dependency-version: 7.0.1
dependency-type: direct:development
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-14 01:38:47 +00:00
dependabot[bot]
22f3577b0d
Bump geocoder from 1.8.3 to 1.8.6
...
Bumps [geocoder](https://github.com/alexreisner/geocoder ) from 1.8.3 to 1.8.6.
- [Changelog](https://github.com/alexreisner/geocoder/blob/master/CHANGELOG.md )
- [Commits](https://github.com/alexreisner/geocoder/compare/v1.8.3...v1.8.6 )
---
updated-dependencies:
- dependency-name: geocoder
dependency-version: 1.8.6
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-14 01:36:45 +00:00
dependabot[bot]
9c9773f493
Bump good_migrations from 0.2.1 to 0.3.1
...
Bumps [good_migrations](https://github.com/testdouble/good-migrations ) from 0.2.1 to 0.3.1.
- [Changelog](https://github.com/testdouble/good-migrations/blob/main/CHANGELOG.md )
- [Commits](https://github.com/testdouble/good-migrations/compare/v0.2.1...v0.3.1 )
---
updated-dependencies:
- dependency-name: good_migrations
dependency-version: 0.3.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-14 01:35:47 +00:00
Gaetan Craig-Riou
33cea470ad
Merge pull request #13704 from deivid-rodriguez/more-dependabot
...
Update all webpack related dependencies together
2025-11-14 12:32:34 +11:00
Gaetan Craig-Riou
17ac3507a6
Merge pull request #13701 from openfoodfoundation/dependabot/bundler/angular-rails-templates-1.3.1
...
Bump angular-rails-templates from 1.2.1 to 1.3.1
2025-11-14 12:06:34 +11:00
Gaetan Craig-Riou
7cf0a95688
Merge pull request #13700 from openfoodfoundation/dependabot/bundler/rswag-ui-2.17.0
...
Bump rswag-ui from 2.16.0 to 2.17.0
2025-11-14 11:25:14 +11:00
Gaetan Craig-Riou
c641fae2b9
Merge pull request #13699 from openfoodfoundation/dependabot/bundler/rails-7.1.6
...
Bump rails from 7.1.5.2 to 7.1.6
2025-11-14 11:23:21 +11:00
Gaetan Craig-Riou
526df1cb9c
Merge pull request #13698 from openfoodfoundation/dependabot/bundler/acts-as-taggable-on-13.0.0
...
Bump acts-as-taggable-on from 10.0.0 to 13.0.0
2025-11-14 11:20:47 +11:00
Gaetan Craig-Riou
f4e9daec80
Merge pull request #13706 from deivid-rodriguez/tweak-reviewdog
...
Let reviewdog use github-pr-annotation formatter
2025-11-14 10:44:51 +11:00
Gaetan Craig-Riou
b9a790ba20
Per review, comment out transform configuration
...
We are using the default one, no need to actually specify it, and also
updated the documentaion link to the latest documentation.
2025-11-14 10:32:14 +11:00
Maikel Linke
aaad1bc0b3
Accept short client ids in tokens
2025-11-14 10:00:16 +11:00
Maikel Linke
d7f4a5c874
Allow Market.Organic to access DFC API
2025-11-14 10:00:16 +11:00
Maikel Linke
f8ca8ae942
Trust FDC dev realm to sign tokens
2025-11-14 10:00:16 +11:00
Maikel Linke
2805ea4926
Allow LiteFarm to access DFC API
2025-11-14 10:00:16 +11:00
David Rodríguez
36ac5dc44e
Let reviewdog use github-pr-annotation formatter
...
This is already the default for forked PRs, and most (if not all) PRs to
this repository come from forks anyways.
2025-11-13 20:39:09 +01:00
David Rodríguez
49a976810b
Update all webpack related dependencies together
2025-11-13 08:45:18 +01:00
Gaetan Craig-Riou
b96a0875f3
Turn on cleaning up of globals.
...
It will be come default in future jest release, currently jest isn't
emitting any warning so there is no reason to wait to turn it on.
2025-11-13 09:44:22 +11:00
Gaetan Craig-Riou
4e62e20fa8
Fix test to work with new jsdom restriction
...
since jsdom 21, it's no longer possible to mock window.location
See : https://github.com/jsdom/jsdom/issues/3492
2025-11-11 14:58:48 +11:00