dependabot[bot]
|
e5ba0843d8
|
Bump undercover from 0.8.2 to 0.8.3
Bumps [undercover](https://github.com/grodowski/undercover) from 0.8.2 to 0.8.3.
- [Release notes](https://github.com/grodowski/undercover/releases)
- [Changelog](https://github.com/grodowski/undercover/blob/master/CHANGELOG.md)
- [Commits](https://github.com/grodowski/undercover/compare/v0.8.2...v0.8.3)
---
updated-dependencies:
- dependency-name: undercover
dependency-version: 0.8.3
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2025-12-05 09:05:03 +00:00 |
|
Maikel
|
71fe5bc107
|
Merge pull request #13780 from openfoodfoundation/dependabot/bundler/rubocop-rails-2.34.2
Bump rubocop-rails from 2.33.4 to 2.34.2
|
2025-12-05 15:27:29 +11:00 |
|
Gaetan Craig-Riou
|
3c3b591655
|
Updated rubocop_todo to include new cops
|
2025-12-05 11:32:33 +11:00 |
|
dependabot[bot]
|
39c7fbef46
|
Bump rubocop-rails from 2.33.4 to 2.34.2
Bumps [rubocop-rails](https://github.com/rubocop/rubocop-rails) from 2.33.4 to 2.34.2.
- [Release notes](https://github.com/rubocop/rubocop-rails/releases)
- [Changelog](https://github.com/rubocop/rubocop-rails/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rubocop/rubocop-rails/compare/v2.33.4...v2.34.2)
---
updated-dependencies:
- dependency-name: rubocop-rails
dependency-version: 2.34.2
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2025-12-05 11:32:33 +11:00 |
|
Gaetan Craig-Riou
|
cff52beb06
|
Merge pull request #13783 from openfoodfoundation/dependabot/bundler/rubocop-rspec-3.8.0
Bump rubocop-rspec from 3.7.0 to 3.8.0
|
2025-12-05 09:40:43 +11:00 |
|
Gaetan Craig-Riou
|
c4fec2ee76
|
Merge pull request #13782 from openfoodfoundation/dependabot/bundler/spreadsheet_architect-5.1.0
Bump spreadsheet_architect from 5.0.0 to 5.1.0
|
2025-12-05 09:37:59 +11:00 |
|
dependabot[bot]
|
952fc15a64
|
Bump rubocop-rspec from 3.7.0 to 3.8.0
Bumps [rubocop-rspec](https://github.com/rubocop/rubocop-rspec) from 3.7.0 to 3.8.0.
- [Release notes](https://github.com/rubocop/rubocop-rspec/releases)
- [Changelog](https://github.com/rubocop/rubocop-rspec/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rubocop/rubocop-rspec/compare/v3.7.0...v3.8.0)
---
updated-dependencies:
- dependency-name: rubocop-rspec
dependency-version: 3.8.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2025-12-03 09:02:31 +00:00 |
|
dependabot[bot]
|
2cbd5b5255
|
Bump spreadsheet_architect from 5.0.0 to 5.1.0
Bumps [spreadsheet_architect](https://github.com/westonganger/spreadsheet_architect) from 5.0.0 to 5.1.0.
- [Release notes](https://github.com/westonganger/spreadsheet_architect/releases)
- [Changelog](https://github.com/westonganger/spreadsheet_architect/blob/master/CHANGELOG.md)
- [Commits](https://github.com/westonganger/spreadsheet_architect/compare/v5.0.0...v5.1.0)
---
updated-dependencies:
- dependency-name: spreadsheet_architect
dependency-version: 5.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2025-12-03 09:01:45 +00:00 |
|
Gaetan Craig-Riou
|
9f77c5912f
|
Merge pull request #13779 from openfoodfoundation/dependabot/bundler/ffaker-2.25.0
Bump ffaker from 2.23.0 to 2.25.0
|
2025-12-03 13:04:28 +11:00 |
|
Gaetan Craig-Riou
|
1e4c0cb2cc
|
Merge pull request #13778 from openfoodfoundation/dependabot/bundler/bootsnap-1.19.0
Bump bootsnap from 1.18.3 to 1.19.0
|
2025-12-03 11:56:22 +11:00 |
|
Rachel Arnould
|
ded139458d
|
Merge pull request #13759 from drummer83/storno
Add a unique translatable string for the button that cancels an order
|
2025-12-02 15:58:44 +01:00 |
|
dependabot[bot]
|
e5f9c39352
|
Bump ffaker from 2.23.0 to 2.25.0
Bumps [ffaker](https://github.com/ffaker/ffaker) from 2.23.0 to 2.25.0.
- [Release notes](https://github.com/ffaker/ffaker/releases)
- [Changelog](https://github.com/ffaker/ffaker/blob/main/Changelog.md)
- [Commits](https://github.com/ffaker/ffaker/commits)
---
updated-dependencies:
- dependency-name: ffaker
dependency-version: 2.25.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2025-12-02 09:07:17 +00:00 |
|
dependabot[bot]
|
f0554d8ae2
|
Bump bootsnap from 1.18.3 to 1.19.0
Bumps [bootsnap](https://github.com/rails/bootsnap) from 1.18.3 to 1.19.0.
- [Changelog](https://github.com/rails/bootsnap/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rails/bootsnap/compare/v1.18.3...v1.19.0)
---
updated-dependencies:
- dependency-name: bootsnap
dependency-version: 1.19.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2025-12-02 09:03:26 +00:00 |
|
Gaetan Craig-Riou
|
e37caf7a96
|
Merge pull request #13774 from openfoodfoundation/dependabot/bundler/angular-rails-templates-1.4.0
Bump angular-rails-templates from 1.3.1 to 1.4.0
|
2025-12-01 10:37:40 +11:00 |
|
Gaetan Craig-Riou
|
03653bee60
|
Merge pull request #13773 from openfoodfoundation/dependabot/bundler/foreman-0.90.0
Bump foreman from 0.88.1 to 0.90.0
|
2025-12-01 10:36:41 +11:00 |
|
dependabot[bot]
|
7f01658f47
|
Bump angular-rails-templates from 1.3.1 to 1.4.0
Bumps [angular-rails-templates](https://github.com/pitr/angular-rails-templates) from 1.3.1 to 1.4.0.
- [Release notes](https://github.com/pitr/angular-rails-templates/releases)
- [Changelog](https://github.com/pitr/angular-rails-templates/blob/master/CHANGELOG.md)
- [Commits](https://github.com/pitr/angular-rails-templates/compare/v1.3.1...v1.4.0)
---
updated-dependencies:
- dependency-name: angular-rails-templates
dependency-version: 1.4.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2025-11-28 09:03:30 +00:00 |
|
dependabot[bot]
|
7701561755
|
Bump foreman from 0.88.1 to 0.90.0
Bumps [foreman](https://github.com/ddollar/foreman) from 0.88.1 to 0.90.0.
- [Changelog](https://github.com/ddollar/foreman/blob/main/Changelog.md)
- [Commits](https://github.com/ddollar/foreman/compare/v0.88.1...v0.90.0)
---
updated-dependencies:
- dependency-name: foreman
dependency-version: 0.90.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2025-11-28 09:02:50 +00:00 |
|
Maikel Linke
|
0bdee785bb
|
Update all locales with the latest Transifex translations
v5.3.7
|
2025-11-28 12:37:53 +11:00 |
|
Maikel
|
1029b61bb0
|
Merge pull request #13742 from mkllnk/market-organic
Add Market Organic as available platform
|
2025-11-28 12:15:57 +11:00 |
|
Gaetan Craig-Riou
|
065e7a420b
|
Merge pull request #13770 from openfoodfoundation/dependabot/bundler/pagy-9.4.0
Bump pagy from 9.3.4 to 9.4.0
|
2025-11-28 10:32:22 +11:00 |
|
Gaetan Craig-Riou
|
fe4b6accb0
|
Merge pull request #13767 from openfoodfoundation/dependabot/bundler/turbo-rails-2.0.20
Bump turbo-rails from 2.0.5 to 2.0.20
|
2025-11-28 10:28:12 +11:00 |
|
Filipe
|
b3314d7441
|
Merge pull request #13689 from rahsheen/fix/13396-cloned-order-cycles-not-processed
Clear opened_at when cloning order cycle
|
2025-11-27 18:52:09 +00:00 |
|
dependabot[bot]
|
77121dfacf
|
Bump pagy from 9.3.4 to 9.4.0
Bumps [pagy](https://github.com/ddnexus/pagy) from 9.3.4 to 9.4.0.
- [Release notes](https://github.com/ddnexus/pagy/releases)
- [Changelog](https://github.com/ddnexus/pagy/blob/9.4.0/CHANGELOG.md)
- [Commits](https://github.com/ddnexus/pagy/compare/9.3.4...9.4.0)
---
updated-dependencies:
- dependency-name: pagy
dependency-version: 9.4.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2025-11-27 09:02:19 +00:00 |
|
David Cook
|
04323388ad
|
Merge pull request #13766 from openfoodfoundation/dependabot/bundler/combine_pdf-1.0.31
Bump combine_pdf from 1.0.26 to 1.0.31
|
2025-11-27 10:35:15 +11:00 |
|
dependabot[bot]
|
700be792e5
|
Bump turbo-rails from 2.0.5 to 2.0.20
Bumps [turbo-rails](https://github.com/hotwired/turbo-rails) from 2.0.5 to 2.0.20.
- [Release notes](https://github.com/hotwired/turbo-rails/releases)
- [Commits](https://github.com/hotwired/turbo-rails/compare/v2.0.5...v2.0.20)
---
updated-dependencies:
- dependency-name: turbo-rails
dependency-version: 2.0.20
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2025-11-26 09:04:01 +00:00 |
|
dependabot[bot]
|
9f2ece379a
|
Bump combine_pdf from 1.0.26 to 1.0.31
Bumps [combine_pdf](https://github.com/boazsegev/combine_pdf) from 1.0.26 to 1.0.31.
- [Release notes](https://github.com/boazsegev/combine_pdf/releases)
- [Changelog](https://github.com/boazsegev/combine_pdf/blob/master/CHANGELOG.md)
- [Commits](https://github.com/boazsegev/combine_pdf/compare/v1.0.26...v1.0.31)
---
updated-dependencies:
- dependency-name: combine_pdf
dependency-version: 1.0.31
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2025-11-26 09:02:07 +00:00 |
|
Maikel
|
2662371507
|
Merge pull request #13755 from deivid-rodriguez/no-default-stylesheet-media
Pass media attribute explicitly to stylesheet link tags
|
2025-11-26 15:45:46 +11:00 |
|
Maikel
|
24fc3e9e86
|
Merge pull request #13748 from mkllnk/connector
Bump DFC version from 1.14 to 1.16 with new country and phone format
|
2025-11-26 12:32:02 +11:00 |
|
Gaetan Craig-Riou
|
b064173b7a
|
Merge pull request #13758 from openfoodfoundation/dependabot/bundler/debug-1.11.0
Bump debug from 1.9.2 to 1.11.0
|
2025-11-26 10:58:07 +11:00 |
|
Gaetan Craig-Riou
|
f95581cd1f
|
Merge pull request #13756 from openfoodfoundation/dependabot/bundler/whenever-1.1.0
Bump whenever from 1.0.0 to 1.1.0
|
2025-11-26 10:57:13 +11:00 |
|
Konrad
|
b113fe08e1
|
Add a unique translatable string for the button that cancels an order (button at the top of the edit order page) to allow a different translation than the regular 'Cancel' button.
|
2025-11-25 10:20:16 +01:00 |
|
dependabot[bot]
|
93d73f4763
|
Bump debug from 1.9.2 to 1.11.0
Bumps [debug](https://github.com/ruby/debug) from 1.9.2 to 1.11.0.
- [Release notes](https://github.com/ruby/debug/releases)
- [Commits](https://github.com/ruby/debug/compare/v1.9.2...v1.11.0)
---
updated-dependencies:
- dependency-name: debug
dependency-version: 1.11.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2025-11-25 09:06:09 +00:00 |
|
dependabot[bot]
|
154d17969c
|
Bump whenever from 1.0.0 to 1.1.0
Bumps [whenever](https://github.com/javan/whenever) from 1.0.0 to 1.1.0.
- [Release notes](https://github.com/javan/whenever/releases)
- [Changelog](https://github.com/javan/whenever/blob/main/CHANGELOG.md)
- [Commits](https://github.com/javan/whenever/compare/v1.0.0...v1.1.0)
---
updated-dependencies:
- dependency-name: whenever
dependency-version: 1.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2025-11-25 09:01:45 +00:00 |
|
David Rodríguez
|
e32dcd53b5
|
Pass media attribute explicitly to stylesheet link tags
So that we can enable Rails default behavior for potential future such link
tags without changing current behavior.
|
2025-11-25 08:08:59 +01:00 |
|
David Cook
|
44c4a66970
|
Merge pull request #13741 from mkllnk/gem-coop
Replace rubygems.org with gem.coop
|
2025-11-25 13:01:03 +11:00 |
|
Gaetan Craig-Riou
|
d05834b896
|
Merge pull request #13751 from openfoodfoundation/dependabot/bundler/dotenv-3.1.8
Bump dotenv from 3.1.2 to 3.1.8
|
2025-11-25 11:39:29 +11:00 |
|
Gaetan Craig-Riou
|
854e136d09
|
Merge pull request #13750 from openfoodfoundation/dependabot/bundler/flipper-active_record-1.3.6
Bump flipper-active_record from 1.3.0 to 1.3.6
|
2025-11-25 11:37:19 +11:00 |
|
Gaetan Craig-Riou
|
7f3fc4ff91
|
Merge pull request #13749 from openfoodfoundation/dependabot/bundler/view_component-4.1.1
Bump view_component from 3.12.1 to 4.1.1
|
2025-11-25 11:32:31 +11:00 |
|
dependabot[bot]
|
62ae62db5a
|
Bump dotenv from 3.1.2 to 3.1.8
Bumps [dotenv](https://github.com/bkeepers/dotenv) from 3.1.2 to 3.1.8.
- [Release notes](https://github.com/bkeepers/dotenv/releases)
- [Changelog](https://github.com/bkeepers/dotenv/blob/main/Changelog.md)
- [Commits](https://github.com/bkeepers/dotenv/compare/v3.1.2...v3.1.8)
---
updated-dependencies:
- dependency-name: dotenv
dependency-version: 3.1.8
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2025-11-24 09:13:22 +00:00 |
|
dependabot[bot]
|
a6fc49abce
|
Bump flipper-active_record from 1.3.0 to 1.3.6
Bumps [flipper-active_record](https://github.com/flippercloud/flipper) from 1.3.0 to 1.3.6.
- [Release notes](https://github.com/flippercloud/flipper/releases)
- [Changelog](https://github.com/flippercloud/flipper/blob/main/Changelog.md)
- [Commits](https://github.com/flippercloud/flipper/compare/v1.3.0...v1.3.6)
---
updated-dependencies:
- dependency-name: flipper-active_record
dependency-version: 1.3.6
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2025-11-24 09:12:40 +00:00 |
|
dependabot[bot]
|
528c5a3593
|
Bump view_component from 3.12.1 to 4.1.1
Bumps [view_component](https://github.com/viewcomponent/view_component) from 3.12.1 to 4.1.1.
- [Release notes](https://github.com/viewcomponent/view_component/releases)
- [Changelog](https://github.com/ViewComponent/view_component/blob/main/docs/CHANGELOG.md)
- [Commits](https://github.com/viewcomponent/view_component/compare/v3.12.1...v4.1.1)
---
updated-dependencies:
- dependency-name: view_component
dependency-version: 4.1.1
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2025-11-24 09:12:02 +00:00 |
|
Maikel Linke
|
81165cd82b
|
Replace country names with standard ISO code concepts
The DFC version 1.16.0 introduced this new standardisation.
|
2025-11-24 16:59:41 +11:00 |
|
Maikel Linke
|
faf50a1922
|
Bump datafoodconsortium-connector from 1.1.0 to 1.2.0
|
2025-11-24 16:45:06 +11:00 |
|
Maikel Linke
|
5f237adda2
|
Publish phone numbers as objects
The standard introduced this a while ago but I didn't notice.
We have to update integrations like Disco Regen now.
|
2025-11-24 16:44:23 +11:00 |
|
Maikel Linke
|
2e09a96c4b
|
Document new managedBy attribute on DFC API
|
2025-11-24 15:19:34 +11:00 |
|
Gaetan Craig-Riou
|
82139a9ac0
|
Merge pull request #13747 from mkllnk/doc-reset
Show reset tasks in task list `./bin/rails -T`
|
2025-11-24 13:19:33 +11:00 |
|
Gaetan Craig-Riou
|
6d9946c3c6
|
Merge pull request #13738 from openfoodfoundation/dependabot/bundler/aws-sdk-s3-1.205.0
Bump aws-sdk-s3 from 1.151.0 to 1.205.0
|
2025-11-24 13:17:41 +11:00 |
|
Maikel Linke
|
f58b6bcada
|
Show reset tasks in task list ./bin/rails -T
I wrote them a while ago but noticed only now that they don't show up in
the overview.
|
2025-11-24 12:59:41 +11:00 |
|
Maikel
|
dc13ef4162
|
Merge pull request #13743 from deivid-rodriguez/bump-prettier
Bump prettier and let Dependabot handle further updates
|
2025-11-24 12:06:19 +11:00 |
|
Maikel
|
dcb48272f5
|
Merge pull request #13746 from rioug/security-255-code-injection
[Security] Fix potential code injection
|
2025-11-24 12:01:44 +11:00 |
|