Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump rodauth-rails from 1.3.1 to 1.6.0 #189

Closed
wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 14, 2022

Bumps rodauth-rails from 1.3.1 to 1.6.0.

Release notes

Sourced from rodauth-rails's releases.

v1.6.0

  • The current_account controller method doesn't redirect to the login page anymore when the current account was not found (not logged in, closed account, or deleted account record), and instead it returns nil in this case. This should make the behaviour less surprising, and work better with gems such as Audited, which expects the method for retrieving the current account to return nil.

    Applications that currently rely on current_account to redirect when there is no current account will need to be updated. In most cases, replacing rodauth.require_authenication with rodauth.require_account should be sufficient, with the active_sessions feature being a more robust solution. Given that the current_account method will clear the session if it contains the account ID of a closed/deleted account, any errors that happen should disappear on next page visit.

  • The gem now works without Action Mailer being loaded. In this case, no email configuration is changed, so Rodauth's default behaviour will be called, which is to use the Mail gem directly. Loading the Mail gem can be skipped by setting require_mail? false in the Rodauth configuration.

  • The Active Record migrations should now generate functional schema when using the activerecord-sqlserver-adapter gem, by avoiding creating IDENTITY columns for tables where the id column is both a primary and foreign key.

  • The configuration name in the generated RodauthMailer methods is now a required argument, which should avoid Rubocop complaints.

v1.5.5

  • The #current_account method doesn't raise ArgumentError anymore when called without being logged in (thanks to @​benkoshy).
  • The rodauth:views generator now aborts when unknown feature was specified.
  • The rodauth:migration generator now aborts when unknown feature was specified.

v1.5.4

  • When using Sequel as the primary database library, the generated migration now stores password hashes in the accounts table (instead of in a separate table), and creates an integer status column, which is compatible with the generated configuration and consistent with Active Record.

  • The generated accounts.yml fixture now uses enum string values for status column, e.g. "verified" instead of 2.

  • The fixture is now generated in test/fixtures instead of app/test/fixtures, and when using RSpec it's generated in spec/fixtures (thanks to @​benkoshy).

v1.5.3

Yanked

v1.5.2

  • The list of endpoints in rodauth:routes now includes available HTTP verbs, and excludes routes that have been disabled (by setting *_route configuration to nil).

    GET/POST  /login                   rodauth.login_path
    GET/POST  /create-account          rodauth.create_account_path
    GET/POST  /verify-account-resend   rodauth.verify_account_resend_path
    GET/POST  /verify-account          rodauth.verify_account_path
    POST      /email-auth-request      rodauth.email_auth_request_path
    GET/POST  /email-auth              rodauth.email_auth_path
    GET/POST  /remember                rodauth.remember_path
    GET/POST  /logout                  rodauth.logout_path
    GET/POST  /reset-password-request  rodauth.reset_password_request_path
    GET/POST  /reset-password          rodauth.reset_password_path
    GET/POST  /change-password         rodauth.change_password_path
    GET/POST  /change-login            rodauth.change_login_path
    GET/POST  /verify-login-change     rodauth.verify_login_change_path
    GET/POST  /confirm-password        rodauth.confirm_password_path
    GET       /multifactor-manage      rodauth.two_factor_manage_path
    GET       /multifactor-auth        rodauth.two_factor_auth_path
    GET/POST  /multifactor-disable     rodauth.two_factor_disable_path
    GET/POST  /otp-auth                rodauth.otp_auth_path
    GET/POST  /otp-setup               rodauth.otp_setup_path
    GET/POST  /otp-disable             rodauth.otp_disable_path
    GET/POST  /sms-request             rodauth.sms_request_path
    GET/POST  /sms-auth                rodauth.sms_auth_path
    GET/POST  /sms-setup               rodauth.sms_setup_path
    

... (truncated)

Changelog

Sourced from rodauth-rails's changelog.

1.6.0 (2022-09-14)

  • Avoid creating IDENTITY columns for primary foreign keys on SQL Server with Active Record (@​janko)

  • Make configuration name argument required in generated RodauthMailer (@​janko)

  • Make the Rails integration work without Action Mailer loaded (@​janko)

  • Don't redirect to login page when account is missing in current_account method (@​janko)

1.5.5 (2022-08-04)

  • Don't raise ArgumentError when calling #current_account without being logged in (@​benkoshy)

  • Abort rodauth:views generator when unknown feature was specified (@​janko)

  • Abort rodauth:migration generator when unknown feature was specified (@​janko)

1.5.4 (2022-07-21)

  • Generate account fixtures in spec/fixtures directory when using RSpec (@​benkoshy)

  • Generate account fixtures in test/fixtures directory instead of app/test/fixtures (@​benkoshy)

  • Use string status column values in generated accounts fixture (@​janko)

  • Create integer status column in generated Sequel migration (@​janko)

  • Store password hash in accounts table in generated Sequel migration (@​janko)

1.5.3 (2022-07-21)

Yanked

1.5.2 (2022-07-03)

  • Bump Rodauth dependency version to 2.25+ (@​janko)

  • Generate fixture file for accounts on rodauth:install (@​benkoshy)

  • Fix error about undefined controller_path method in newrelic_rpm gem instrumentation (@​janko)

  • Don't display disabled routes in rodauth:routes (@​janko)

  • Display HTTP verbs of endpoints in rodauth:routes rake task (@​janko)

1.5.1 (2022-06-19)

  • Fix syntax for creating citext PG extension in Sequel base migration (@​Empact)

... (truncated)

Commits
  • 925c0ba Bump to 1.6.0
  • bbbb94c Make migrations work for Microsoft SQL Server
  • 31d6ffe Add changelog entries for recent changes
  • 523c2a0 Make configuration name argument required in RodauthMailer
  • 4ec21ff Don't redirect to login page on missing current account
  • cd5a39c Skip mailer setup when Action Mailer is not loaded
  • d1d3dd4 Bump to 1.5.5
  • 7712bc5 Simplify tests for #rails_account and add changelog entry
  • 97597aa fix: bug - rails_account should return nil when logged_in? == false (#140)
  • 0312bf2 Allow running tests on TruffleRuby
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [rodauth-rails](https://github.com/janko/rodauth-rails) from 1.3.1 to 1.6.0.
- [Release notes](https://github.com/janko/rodauth-rails/releases)
- [Changelog](https://github.com/janko/rodauth-rails/blob/main/CHANGELOG.md)
- [Commits](janko/rodauth-rails@v1.3.1...v1.6.0)

---
updated-dependencies:
- dependency-name: rodauth-rails
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Sep 14, 2022
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Sep 19, 2022

Superseded by #190.

@dependabot dependabot bot closed this Sep 19, 2022
@dependabot dependabot bot deleted the dependabot/bundler/rodauth-rails-1.6.0 branch September 19, 2022 22:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants