v5.3.7 Hot chocolate
What's Changed
User-facing changes 👀
API changes ⚠️
Experimental features for testing 🚧
Technical changes 🛠️
- [Security] Fix potential code injection by @rioug in #13746
- Bump prettier and let Dependabot handle further updates by @deivid-rodriguez in #13743
- Show reset tasks in task list
./bin/rails -Tby @mkllnk in #13747 - Replace rubygems.org with gem.coop by @mkllnk in #13741
- Pass media attribute explicitly to stylesheet link tags by @deivid-rodriguez in #13755
Dependencies 📦
- Bump webpack from 4.46.0 to 4.47.0 by @dependabot[bot] in #13737
- Bump database_cleaner from 2.0.2 to 2.1.0 by @dependabot[bot] in #13739
- Bump image_processing from 1.12.2 to 1.14.0 by @dependabot[bot] in #13740
- Bump aws-sdk-s3 from 1.151.0 to 1.205.0 by @dependabot[bot] in #13738
- Bump view_component from 3.12.1 to 4.1.1 by @dependabot[bot] in #13749
- Bump flipper-active_record from 1.3.0 to 1.3.6 by @dependabot[bot] in #13750
- Bump dotenv from 3.1.2 to 3.1.8 by @dependabot[bot] in #13751
- Bump whenever from 1.0.0 to 1.1.0 by @dependabot[bot] in #13756
- Bump debug from 1.9.2 to 1.11.0 by @dependabot[bot] in #13758
- Bump combine_pdf from 1.0.26 to 1.0.31 by @dependabot[bot] in #13766
- Bump turbo-rails from 2.0.5 to 2.0.20 by @dependabot[bot] in #13767
- Bump pagy from 9.3.4 to 9.4.0 by @dependabot[bot] in #13770
New Contributors
Full Changelog: v5.3.6...v5.3.7