Release OpenProject 14.2.0

.dockerignore

@@ -33,6 +33,5 @@ frontend/node_modules
 node_modules
 # travis
 vendor/bundle
-# allow precompiled assets to be injected
-!/public/assets
-!/config/frontend_assets.manifest.json
+/public/assets
+/config/frontend_assets.manifest.json

.git-blame-ignore-revs

@@ -5,8 +5,9 @@
 21a696ef9b170e14ad2daf53364a4c2113822c2f
 # Update copyright information for 2024
 c795874f7f281297bbd3bad2fdb58b24cb4ce624
-# switch to double quotes
+# rubocop autocorrections
 f3c99ee5dded81ad55f2b6f3706216d5fa765677
 5c72ea0046a6b5230bf456f55a296ed6fd579535
 9e4934cd0a468f46d8f0fc0f11ebc2d4216f789c
 6678cab48d443b5782fa93b171d62093819ee4fc
+fa5d03eae00bc8931f99598a74ffd76e0cbca3da

.github/workflows/danger.yml

@@ -17,7 +17,7 @@ jobs:
       - uses: actions/checkout@v4
       - uses: ruby/setup-ruby@v1
         with:
-          ruby-version: '3.3.1'
+          ruby-version: '3.3.2'
       - uses: MeilCli/danger-action@v5
         with:
           danger_file: 'Dangerfile'

.github/workflows/docker.yml

@@ -83,6 +83,7 @@ jobs:
       - name: Precompile assets
         run: |
           ./docker/prod/setup/precompile-assets.sh
+          # public/assets will be saved as artifact, so temporarily copying config file there as well
           cp config/frontend_assets.manifest.json public/assets/frontend_assets.manifest.json
       - uses: actions/upload-artifact@v3
         with:
@@ -142,6 +143,10 @@ jobs:
           ls -al public/
           mv public/assets/frontend_assets.manifest.json config/frontend_assets.manifest.json
           ls -al config/frontend_assets.manifest.json
+          # allow precompiled assets to be injected into docker image
+          echo '' >> .dockerignore
+          echo '!/public/assets' >> .dockerignore
+          echo '!/config/frontend_assets.manifest.json' >> .dockerignore
       - name: Add build information
         run: |
           echo "${{ needs.setup.outputs.checkout_ref }}" > PRODUCT_VERSION

.github/workflows/rubocop-core.yml

@@ -2,11 +2,6 @@ name: rubocop
 
 on:
   pull_request:
-    branches:
-      - dev
-      - release/*
-    paths:
-      - '**.rb'
 
 jobs:
   rubocop:
@@ -15,11 +10,12 @@ jobs:
     steps:
       - uses: actions/checkout@v3
         with:
-          fetch-depth: 0
+          fetch-depth: 2 # we are comparing PR merge head with base
       - uses: ruby/setup-ruby@v1
-      - uses: opf/action-rubocop@v2
+      - uses: opf/action-rubocop@master
         with:
           github_token: ${{ secrets.github_token }}
           rubocop_version: gemfile
-          rubocop_extensions: rubocop-rails:gemfile rubocop-rspec:gemfile
+          rubocop_extensions: rubocop-inflector:gemfile rubocop-performance:gemfile rubocop-rails:gemfile rubocop-rspec:gemfile
           reporter: github-pr-check
+          only_changed: true

.github/workflows/test-core.yml

@@ -44,9 +44,9 @@ jobs:
       uses: runs-on/cache@v4
       with:
         path: cache/bundle
-        key: gem-${{ hashFiles('.ruby-version') }}-${{ hashFiles('Gemfile.lock') }}
+        key: gem-bookworm-${{ hashFiles('.ruby-version') }}-${{ hashFiles('Gemfile.lock') }}
         restore-keys: |
-          gem-${{ hashFiles('.ruby-version') }}-
+          gem-bookworm-${{ hashFiles('.ruby-version') }}-
     - name: Cache NPM
       uses: runs-on/cache@v4
       with:

.ruby-version

@@ -1 +1 @@
-3.3.1
+3.3.2

Gemfile

@@ -36,7 +36,7 @@ ruby File.read(".ruby-version").strip
 
 gem "actionpack-xml_parser", "~> 2.0.0"
 gem "activemodel-serializers-xml", "~> 1.0.1"
-gem "activerecord-import", "~> 1.6.0"
+gem "activerecord-import", "~> 1.7.0"
 gem "activerecord-session_store", "~> 2.1.0"
 gem "ox"
 gem "rails", "~> 7.1.3"
@@ -46,7 +46,7 @@ gem "ffi", "~> 1.15"
 
 gem "rdoc", ">= 2.4.2"
 
-gem "doorkeeper", "~> 5.6.6"
+gem "doorkeeper", "~> 5.7.0"
 # Maintain our own omniauth due to relative URL root issues
 # see upstream PR: https://github.com/omniauth/omniauth/pull/903
 gem "omniauth", git: "https://github.com/opf/omniauth", ref: "fe862f986b2e846e291784d2caa3d90a658c67f0"
@@ -83,7 +83,7 @@ gem "htmldiff"
 gem "stringex", "~> 2.8.5"
 
 # CommonMark markdown parser with GFM extension
-gem "commonmarker", "~> 1.0.3"
+gem "commonmarker", "~> 1.1.3"
 
 # HTML pipeline for transformations on text formatter output
 # such as sanitization or additional features
@@ -157,9 +157,11 @@ gem "structured_warnings", "~> 0.4.0"
 # don't require by default, instead load on-demand when actually configured
 gem "airbrake", "~> 13.0.0", require: false
 
+gem "markly", "~> 0.10" # another markdown parser like commonmarker, but with AST support used in PDF export
 gem "md_to_pdf", git: "https://github.com/opf/md-to-pdf", ref: "8f14736a88ad0064d2a97be108fe7061ffbcee91"
 gem "prawn", "~> 2.4"
 gem "ttfunk", "~> 1.7.0" # remove after https://github.com/prawnpdf/prawn/issues/1346 resolved.
+
 # prawn implicitly depends on matrix gem no longer in ruby core with 3.1
 gem "matrix", "~> 0.4.2"
 
@@ -184,7 +186,7 @@ gem "sprockets-rails", "~> 3.4.2"
 
 gem "puma", "~> 6.4"
 gem "puma-plugin-statsd", "~> 2.0"
-gem "rack-timeout", "~> 0.6.3", require: "rack/timeout/base"
+gem "rack-timeout", "~> 0.7.0", require: "rack/timeout/base"
 
 gem "nokogiri", "~> 1.16.0"
 
@@ -213,7 +215,7 @@ gem "dry-container"
 gem "store_attribute", "~> 1.0"
 
 # Appsignal integration
-gem "appsignal", "~> 3.0", require: false
+gem "appsignal", "~> 3.8.1", require: false
 
 gem "view_component"
 # Lookbook
@@ -384,6 +386,6 @@ gemfiles.each do |file|
   send(:eval_gemfile, file) if File.readable?(file)
 end
 
-gem "openproject-octicons", "~>19.10.0"
-gem "openproject-octicons_helper", "~>19.10.0"
-gem "openproject-primer_view_components", "~>0.29.1"
+gem "openproject-octicons", "~>19.14.0"
+gem "openproject-octicons_helper", "~>19.14.0"
+gem "openproject-primer_view_components", "~>0.33.1"