Merge remote-tracking branch 'upstream/pull/5320'

[rails.git] / Gemfile

diff --git a/Gemfile b/Gemfile
index 4699438a12a1be0399e785843e0175edd7e46550..277346b8388df908c3e110cff5b9bbb55a18cf84 100644 (file)
--- a/Gemfile
+++ b/Gemfile
@@ -1,13 +1,8 @@
 source "https://rubygems.org"
 
 # Require rails
 source "https://rubygems.org"
 
 # Require rails

-gem "rails", "6.0.3.3"
-
-# Require things which have moved to gems in ruby 1.9
-gem "bigdecimal", "~> 1.1.0", :platforms => :ruby_19
-
-# Require things which have moved to gems in ruby 2.0
-gem "psych", :platforms => :ruby_20
+gem "rails", "~> 7.2.0"
+gem "turbo-rails"

 
 # Require json for multi_json
 gem "json"
 
 # Require json for multi_json
 gem "json"


@@ -16,10 +11,12 @@ gem "json"
 gem "pg"
 
 # Use SCSS for stylesheets
 gem "pg"
 
 # Use SCSS for stylesheets

-gem "sassc-rails"
+gem "dartsass-sprockets"
+# Pin the dependentent sass-embedded to avoid deprecation warnings in bootstrap
+gem "sass-embedded", "~> 1.64.0"

 
 

-# Use Uglifier as compressor for JavaScript assets
-gem "uglifier", ">= 1.3.0"
+# Use Terser as compressor for JavaScript assets
+gem "terser"

 
 # Use jquery as the JavaScript library
 gem "jquery-rails"
 
 # Use jquery as the JavaScript library
 gem "jquery-rails"


@@ -30,8 +27,9 @@ gem "jbuilder", "~> 2.7"
 # Reduces boot times through caching; required in config/boot.rb
 gem "bootsnap", ">= 1.4.2", :require => false
 
 # Reduces boot times through caching; required in config/boot.rb
 gem "bootsnap", ">= 1.4.2", :require => false
 

-# Use R2 for RTL conversion
-gem "r2", "~> 0.2.7"
+# Use rtlcss for RTL conversion
+gem "mini_racer", "~> 0.9.0"
+gem "rtlcss"

 
 # Use autoprefixer to generate CSS prefixes
 gem "autoprefixer-rails"
 
 # Use autoprefixer to generate CSS prefixes
 gem "autoprefixer-rails"


@@ -39,41 +37,58 @@ gem "autoprefixer-rails"
 # Use image_optim to optimise images
 gem "image_optim_rails"
 
 # Use image_optim to optimise images
 gem "image_optim_rails"
 

+# Use argon2 for password hashing
+gem "argon2"
+
+# Support brotli compression for assets
+gem "sprockets-exporters_pack"
+
+# Restore File.exists? for oauth gem
+gem "file_exists"
+

 # Load rails plugins
 gem "actionpack-page_caching", ">= 1.2.0"
 gem "activerecord-import"
 gem "active_record_union"
 # Load rails plugins
 gem "actionpack-page_caching", ">= 1.2.0"
 gem "activerecord-import"
 gem "active_record_union"

-gem "bootstrap", "~> 4.5.0"
-gem "bootstrap_form", "~> 4.0"
+gem "bootstrap", "~> 5.3.2"
+gem "bootstrap_form", "~> 5.0"

 gem "cancancan"
 gem "cancancan"

-gem "composite_primary_keys", "~> 12.0.0"

 gem "config"
 gem "delayed_job_active_record"
 gem "config"
 gem "delayed_job_active_record"

-gem "dynamic_form"
+gem "dry-validation"
+gem "frozen_record"

 gem "http_accept_language", "~> 2.1.1"
 gem "http_accept_language", "~> 2.1.1"

-gem "i18n-js", ">= 3.0.0"
-gem "oauth-plugin", ">= 0.5.1"
-gem "openstreetmap-deadlock_retry", ">= 1.3.0", :require => "deadlock_retry"
+gem "i18n-js", "~> 3.9.2"
+gem "openstreetmap-deadlock_retry", ">= 1.3.1", :require => "deadlock_retry"

 gem "rack-cors"
 gem "rack-cors"

-gem "rails-i18n", "~> 6.0.0"
+gem "rails-i18n", "~> 7.0.0"
+gem "rails_param"

 gem "rinku", ">= 2.0.6", :require => "rails_rinku"
 gem "rinku", ">= 2.0.6", :require => "rails_rinku"

-gem "strong_migrations"
+gem "strong_migrations", "< 2.0.0"

 gem "validates_email_format_of", ">= 1.5.1"
 
 # Native OSM extensions
 gem "quad_tile", "~> 1.0.1"
 
 # Sanitise URIs
 gem "validates_email_format_of", ">= 1.5.1"
 
 # Native OSM extensions
 gem "quad_tile", "~> 1.0.1"
 
 # Sanitise URIs

+gem "addressable", "~> 2.8"

 gem "rack-uri_sanitizer"
 
 # Omniauth for authentication
 gem "rack-uri_sanitizer"
 
 # Omniauth for authentication

-gem "omniauth"
+gem "multi_json"
+gem "omniauth", "~> 2.0.2"

 gem "omniauth-facebook"
 gem "omniauth-github"
 gem "omniauth-google-oauth2", ">= 0.6.0"
 gem "omniauth-mediawiki", ">= 0.0.4"
 gem "omniauth-facebook"
 gem "omniauth-github"
 gem "omniauth-google-oauth2", ">= 0.6.0"
 gem "omniauth-mediawiki", ">= 0.0.4"

+gem "omniauth-microsoft_graph"

 gem "omniauth-openid"
 gem "omniauth-openid"

-gem "omniauth-windowslive"
+gem "omniauth-rails_csrf_protection", "~> 1.0"
+
+# Doorkeeper for OAuth2
+gem "doorkeeper"
+gem "doorkeeper-i18n"
+gem "doorkeeper-openid_connect"

 
 # Markdown formatting support
 gem "kramdown"
 
 # Markdown formatting support
 gem "kramdown"


@@ -88,9 +103,6 @@ gem "libxml-ruby", ">= 2.0.5", :require => "libxml"
 gem "htmlentities"
 gem "sanitize"
 
 gem "htmlentities"
 gem "sanitize"
 

-# Load SystemTimer for implementing request timeouts
-gem "SystemTimer", ">= 1.1.3", :require => "system_timer", :platforms => :ruby_18
-

 # Load faraday for mockable HTTP client
 gem "faraday"
 
 # Load faraday for mockable HTTP client
 gem "faraday"
 


@@ -101,12 +113,10 @@ gem "maxminddb"
 gem "rotp"
 
 # Load memcache client in case we are using it
 gem "rotp"
 
 # Load memcache client in case we are using it

+gem "connection_pool"

 gem "dalli"
 gem "kgio"
 
 gem "dalli"
 gem "kgio"
 

-# Load secure_headers for Content-Security-Policy support
-gem "secure_headers"
-

 # Load canonical-rails to generate canonical URLs
 gem "canonical-rails"
 
 # Load canonical-rails to generate canonical URLs
 gem "canonical-rails"
 


@@ -117,23 +127,33 @@ gem "logstasher"
 gem "bzip2-ffi"
 gem "ffi-libarchive"
 gem "gd2-ffij", ">= 0.4.0"
 gem "bzip2-ffi"
 gem "ffi-libarchive"
 gem "gd2-ffij", ">= 0.4.0"

-gem "mimemagic"
+gem "marcel"

 
 # Used for browser detection
 
 # Used for browser detection

-gem "browser"
+gem "browser", "< 6" # for ruby 3.1 support

 
 # Used for S3 object storage
 gem "aws-sdk-s3"
 
 # Used to resize user images
 
 # Used for S3 object storage
 gem "aws-sdk-s3"
 
 # Used to resize user images

-gem "mini_magick"
+gem "image_processing"
+
+# Used to validate widths
+gem "unicode-display_width"
+
+# Lock some modules to old versions for ruby 3.1 support
+gem "zeitwerk", "< 2.7"

 
 # Gems useful for development
 group :development do
 
 # Gems useful for development
 group :development do

-  gem "annotate"

   gem "better_errors"
   gem "binding_of_caller"
   gem "better_errors"
   gem "binding_of_caller"

+  gem "danger"
+  gem "danger-auto_label"
+  gem "debug_inspector"
+  gem "i18n-tasks"

   gem "listen"
   gem "listen"

+  gem "overcommit"

   gem "vendorer"
 end
 
   gem "vendorer"
 end
 


@@ -141,16 +161,31 @@ end
 group :test do
   gem "brakeman"
   gem "capybara", ">= 2.15"
 group :test do
   gem "brakeman"
   gem "capybara", ">= 2.15"

-  gem "coveralls", :require => false

   gem "erb_lint", :require => false
   gem "factory_bot_rails"
   gem "erb_lint", :require => false
   gem "factory_bot_rails"

+  gem "jwt"

   gem "minitest", "~> 5.1"
   gem "minitest", "~> 5.1"

-  gem "puma", "~> 4.3"
+  gem "minitest-focus", :require => false
+  gem "puma", "~> 5.6"

   gem "rails-controller-testing"
   gem "rubocop"
   gem "rails-controller-testing"
   gem "rubocop"

+  gem "rubocop-capybara"
+  gem "rubocop-factory_bot"

   gem "rubocop-minitest"
   gem "rubocop-performance"
   gem "rubocop-rails"
   gem "rubocop-minitest"
   gem "rubocop-performance"
   gem "rubocop-rails"

+  gem "rubocop-rake"

   gem "selenium-webdriver"
   gem "selenium-webdriver"

+  gem "simplecov", :require => false
+  gem "simplecov-lcov", :require => false

   gem "webmock"
 end
   gem "webmock"
 end

+
+group :development, :test do
+  gem "annotate"
+  gem "teaspoon"
+  gem "teaspoon-mocha", "~> 2.3.3"
+
+  # See https://guides.rubyonrails.org/debugging_rails_applications.html#debugging-with-the-debug-gem
+  gem "debug", :require => "debug/prelude"
+end