Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump rodauth-rails from 1.15.2 to 2.0.0 #45

Merged
merged 1 commit into from
Dec 17, 2024

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 17, 2024

Bumps rodauth-rails from 1.15.2 to 2.0.0.

Release notes

Sourced from rodauth-rails's releases.

2.0.0

Breaking changes

  • The sequel-activerecord_connection, bcrypt and tilt gems are now optional dependencies. For new projects, rodauth:install will automatically add them to your Gemfile.

    For existing projects, you should add them back as needed:

    $ bundle add sequel-activerecord_connection # unless you're using Sequel as your primary ORM
    $ bundle add after_commit_everywhere # not needed on Rails 7.2+
    $ bundle add bcrypt # unless you're using argon2
    $ bundle add tilt # not needed if you're not rendering any built-in view/email templates and have Roda rendering disabled, see https://github.com/janko/rodauth-rails/wiki/Skip-Tilt 
  • The built-in #current_account controller method has been removed. It has been soft-deprecated for a while now, but it's not ergonomic enough for secondary Rodauth configurations.

    Existing applications should define their own that delegate to rodauth.rails_account, for example:

    class ApplicationController < ActionController::Base
      private
      # primary configuration
      def current_account
        rodauth.rails_account
      end
    end
    class Admin::ApplicationController < ActionController::Base
      private
      # secondary configuration
      def current_admin
        rodauth(:admin).rails_account
      end
    end
  • Removed deprecated Rodauth::Rails::Model class. This shouldn't affect you if you've been using Rodauth::Rails.model.

  • Removed deprecated Rodauth::Rails.authenticated routing constraint. You should be using Rodauth::Rails.authenticate instead.

  • Support for Rails 5.0 has been dropped.

  • Support for Ruby 2.5 has been dropped.

Other improvements

  • The --jwt option for the rodauth:install generator automatically adds the jwt gem to the Gemfile.

  • The --argon2 option for the rodauth:install generator automatically adds the argon2 gem to the Gemfile.

... (truncated)

Commits
  • 65bf4ce Bump to 2.0.0
  • f978f2b Remove local after_commit_everywhere dependency
  • 16ec096 Fix link
  • bc8b5f6 Add note about rack-attack
  • cfba571 Fix gem assertions on older Rails versions
  • 4853c7d Drop Rails 5.0 support
  • d032d12 Drop support for Ruby 2.5
  • b0c7a81 Skip install instructions if JSON/JWT was specified
  • 0c06558 Automatically add argon2 and JWT gems to Gemfile
  • 63fb437 Add check constraint for valid email on AR migration
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [rodauth-rails](https://github.com/janko/rodauth-rails) from 1.15.2 to 2.0.0.
- [Release notes](https://github.com/janko/rodauth-rails/releases)
- [Commits](janko/rodauth-rails@v1.15.2...v2.0.0)

---
updated-dependencies:
- dependency-name: rodauth-rails
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Dec 17, 2024
@siasmj siasmj merged commit 8aef033 into main Dec 17, 2024
6 checks passed
@dependabot dependabot bot deleted the dependabot/bundler/rodauth-rails-2.0.0 branch December 17, 2024 15:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant