Release OpenProject 13.2.0

.git-blame-ignore-revs

@@ -3,3 +3,5 @@
 48a4f1b6adb1e847a90a61f2ab277f28bcd77608
 # Update copyright information for 2023
 21a696ef9b170e14ad2daf53364a4c2113822c2f
+# Update copyright information for 2023
+c795874f7f281297bbd3bad2fdb58b24cb4ce624

.github/workflows/docker.yml

@@ -33,9 +33,6 @@ jobs:
             target: slim
           - platform: linux/amd64
             target: all-in-one
-          - platform: linux/ppc64le
-            bim_support: false
-            target: all-in-one
           - platform: linux/arm64/v8
             bim_support: false
             target: all-in-one

.rubocop.yml

@@ -164,6 +164,10 @@ Rails/I18nLocaleAssignment:
   Exclude:
     - 'spec/**/*.rb'
 
+# Do not bother if `let` statements use an index in their name
+RSpec/IndexedLet:
+  Enabled: false
+
 # The http verbs in Rack::Test do not accept named parameters (params: params)
 Rails/HttpPositionalArguments:
   Exclude:

.ruby-version

@@ -1 +1 @@
-3.2.1
+3.2.2

COPYRIGHT

@@ -1,6 +1,6 @@
 OpenProject is an open source project management software.
 
-Copyright (C) 2012-2023 the OpenProject GmbH
+Copyright (C) 2012-2024 the OpenProject GmbH
 
 This program is free software; you can redistribute it and/or
 modify it under the terms of the GNU General Public License

COPYRIGHT_short

@@ -1,5 +1,5 @@
 OpenProject is an open source project management software.
-Copyright (C) 2012-2023 the OpenProject GmbH
+Copyright (C) 2012-2024 the OpenProject GmbH
 
 This program is free software; you can redistribute it and/or
 modify it under the terms of the GNU General Public License version 3.

Gemfile

@@ -1,6 +1,6 @@
 #-- copyright
 # OpenProject is an open source project management software.
-# Copyright (C) 2012-2023 the OpenProject GmbH
+# Copyright (C) 2012-2024 the OpenProject GmbH
 #
 # This program is free software; you can redistribute it and/or
 # modify it under the terms of the GNU General Public License version 3.
@@ -28,7 +28,11 @@
 
 source 'https://rubygems.org'
 
-ruby '~> 3.2.1'
+# TODO: Once packager.io and heroku buildpacks support bundler 2.4.22,
+# then we can use the new bundler syntax `ruby file: '.ruby-version'`.
+# https://github.com/heroku/heroku-buildpack-ruby/issues/1408#issuecomment-1841596215
+
+ruby File.read('.ruby-version').strip
 
 gem 'actionpack-xml_parser', '~> 2.0.0'
 gem 'activemodel-serializers-xml', '~> 1.0.1'
@@ -79,7 +83,7 @@ gem 'htmldiff'
 gem 'stringex', '~> 2.8.5'
 
 # CommonMark markdown parser with GFM extension
-gem 'commonmarker', '~> 0.23.9'
+gem 'commonmarker', '~> 1.0.3'
 
 # HTML pipeline for transformations on text formatter output
 # such as sanitization or additional features
@@ -123,7 +127,7 @@ gem 'daemons'
 gem 'delayed_cron_job', '~> 0.9.0'
 gem 'delayed_job_active_record', '~> 4.1.5'
 
-gem 'rack-protection', '~> 3.1.0'
+gem 'rack-protection', '~> 3.2.0'
 
 # Rack::Attack is a rack middleware to protect your web app from bad clients.
 # It allows whitelisting, blacklisting, throttling, and tracking based
@@ -152,12 +156,12 @@ gem 'structured_warnings', '~> 0.4.0'
 # don't require by default, instead load on-demand when actually configured
 gem 'airbrake', '~> 13.0.0', require: false
 
-gem 'md_to_pdf', git: 'https://github.com/opf/md-to-pdf', ref: 'cc286655dfa2ea2b30bf2a149063f42f7081aa3d'
+gem 'md_to_pdf', git: 'https://github.com/opf/md-to-pdf', ref: 'bbda8ad0054d465eec01c23fcab5c6d62c7baa44'
 gem 'prawn', '~> 2.4'
 # prawn implicitly depends on matrix gem no longer in ruby core with 3.1
 gem 'matrix', '~> 0.4.2'
 
-gem 'meta-tags', '~> 2.19.0'
+gem 'meta-tags', '~> 2.20.0'
 
 gem "paper_trail", "~> 12.3"
 
@@ -174,11 +178,11 @@ gem 'rails-i18n', '~> 7.0.0'
 gem 'sprockets', '~> 3.7.2' # lock sprockets below 4.0
 gem 'sprockets-rails', '~> 3.4.2'
 
-gem 'puma', '~> 6.3', '>= 6.3.1'
+gem 'puma', '~> 6.4'
 gem 'puma-plugin-statsd', '~> 2.0'
 gem 'rack-timeout', '~> 0.6.3', require: "rack/timeout/base"
 
-gem 'nokogiri', '~> 1.15.1'
+gem 'nokogiri', '~> 1.16.0'
 
 gem 'carrierwave', '~> 1.3.1'
 gem 'carrierwave_direct', '~> 2.1.0'
@@ -209,7 +213,7 @@ gem "appsignal", "~> 3.0", require: false
 
 gem 'view_component'
 # Lookbook
-gem 'lookbook', '~> 2.1.0'
+gem 'lookbook', '~> 2.2.0'
 
 # Require factory_bot for usage with openproject plugins testing
 gem 'factory_bot', '~> 6.4.0', require: false
@@ -218,6 +222,8 @@ gem 'factory_bot_rails', '~> 6.4.0', require: false
 
 gem 'turbo-rails', "~> 1.1"
 
+gem 'httpx'
+
 group :test do
   gem 'launchy', '~> 2.5.0'
   gem 'rack-test', '~> 2.1.0'
@@ -253,11 +259,11 @@ group :test do
   gem 'rails-controller-testing', '~> 1.0.2'
 
   gem 'capybara', '~> 3.39.0'
+  gem 'capybara_accessible_selectors', git: 'https://github.com/citizensadvice/capybara_accessible_selectors', branch: 'main'
   gem 'capybara-screenshot', '~> 1.0.17'
   gem 'cuprite', '~> 0.15.0'
   gem 'selenium-devtools'
-  gem 'selenium-webdriver', '~> 4.15'
-  gem 'capybara_accessible_selectors', git: 'https://github.com/citizensadvice/capybara_accessible_selectors', branch: 'main'
+  gem 'selenium-webdriver', '~> 4.16.0'
 
   gem 'fuubar', '~> 2.5.0'
   gem 'timecop', '~> 0.9.0'
@@ -273,7 +279,7 @@ group :test do
 
   gem 'equivalent-xml', '~> 0.6'
   gem 'json_spec', '~> 1.1.4'
-  gem 'shoulda-matchers', '~> 5.0', require: nil
+  gem 'shoulda-matchers', '~> 6.0', require: nil
 
   gem 'parallel_tests', '~> 4.0'
 end
@@ -325,7 +331,10 @@ group :development, :test do
   gem "erblint-github", require: false
 
   # Brakeman scanner
-  gem 'brakeman', '~> 6.0.0'
+  gem 'brakeman', '~> 6.1.0'
+
+  # i18n-tasks helps find and manage missing and unused translations.
+  gem 'i18n-tasks', '~> 1.0.13'
 end
 
 gem 'bootsnap', '~> 1.17.0', require: false
@@ -372,4 +381,4 @@ end
 
 gem "openproject-octicons", '~>19.8.0'
 gem "openproject-octicons_helper", '~>19.8.0'
-gem "openproject-primer_view_components", '~>0.18.1'
+gem "openproject-primer_view_components", '~>0.20.0'