Oppgraderer Loomio fra v3.0.14 til v3.0.21 #26

Open
gingermusketeer wants to merge 3 commits from oppgrader-loomio into main

Release Summaries

loomio-deploy (481288689fe54bded0689ba1c31aff319b018541 -> c976fbd20ad4c457c50e6b629b65c8128a1f96c0)

  • Add guidance for disabling a feature.
  • Add WEB_CONCURRENCY=auto Puma setting.
  • Remove unused flag FEATURES_DISABLE_PUBLIC_GROUPS (commented as disable /explore in env_template).
  • Add env option to prevent users editing profile attributes when SSO controls identity (LOOMIO_SSO_FORCE_USER_ATTRS).
  • Consolidate containers by removing channels container and running hocuspocus from the Loomio image.
  • Add LOOMIO_VERIFY_PARTICIPANTS_ADMIN_ONLY env option.
  • Add persistent volume for JS assets so assets survive deploys.
  • Update OAuth env docs to include OAUTH_ATTR_PICTURE and document OIDC defaults.
  • Files changed in compare: README.md, docker-compose.yml, env_template.

Loomio (v3.0.15 -> v3.0.21)

  • v3.0.15:
    • Rails 8 upgrade and SSO feature updates.
    • With FEATURES_DISABLE_EMAIL_LOGIN=1, first-time SSO users are created and signed in directly (no link/create account screen and no Terms acceptance step).
    • Add LOOMIO_SSO_FORCE_USER_ATTRS=1 option to prevent users changing SSO-controlled profile fields (name, email, username).
    • Group settings behavior updates:
      • "Anyone can join" flow supported for registered users.
      • Explore/directory listing behavior configurable with FEATURES_EXPLORE_PUBLIC_GROUPS=1.
    • Upgrade note repeated in release: loomio-deploy needs Redis 8.4.
  • v3.0.16:
    • Fixes issues that broke v3.0.15.
    • App boot fix for Redis and Sidekiq connection_pool incompatibility.
    • Google SSO fix.
    • Upgrade note repeated: loomio-deploy needs Redis 8.4.
  • v3.0.17:
    • Fix duplicate-email crashes in OAuth and SAML SSO authentication.
    • Remove unused canViewPublicGroups code.
    • Prevent non-members from seeing tags on closed groups.
    • Remove hiredis gem.
  • v3.0.18:
    • Rewrites SSO sign-in/sign-up linking flow:
      • Existing Loomio sessions no longer auto-link to SSO identities.
      • First-time SSO sign-ins create a new account directly.
    • Add LOOMIO_RESTRICT_EXPLORE_TO_SIGNED_IN_USERS.
    • Add polls to vote-on page.
    • Replace "invite-only" terminology with "direct discussions" wording.
    • Fix missing translation on invite-only discussions page.
  • v3.0.19:
    • Remove ability to set profile picture from SSO provider list on change picture form.
    • Large test-suite migration from rspec to minitest, reducing CI runtime significantly.
    • Release note caveat: app version string still reported 3.0.18 in that release.
  • v3.0.20:
    • Convert HAML server-rendered templates to Phlex.
    • Replace SocketIO with ActionCable and remove loomio_channel_server dependency.
    • Move hocuspocus server into main Loomio repository.
    • Move Matrix bot notification handling into Rails app.
    • Deployment note: old server setup can still work but may leave unused services.
    • Architectural simplification direction noted (fewer repos/containers; future path toward SolidCache/SolidQueue).
    • Bugfixes/improvements listed in release:
      • Fix OAuth login selecting orphan identities instead of linked identities.
      • Use user name rather than initials in avatar email/print partial.
      • Add LOOMIO_VERIFY_PARTICIPANTS_ADMIN_ONLY to restrict "verify participants" to admins.
      • Show specific error details in flash messages instead of generic form errors.
      • Add ability to remove group logo and cover photo in group settings.
  • v3.0.21:
    • Discussion and poll template UX updates.
    • New template button opens example templates as a starting point.
    • Fewer discussion templates by default.
    • Sense Check poll option updates.
    • Materialize default discussion templates as DB records.
    • Add opening_at for scheduled poll voting.
    • Poll template updates.
    • Fix minor security issue where group members could infer secret subgroup names via reports controller responses.
## Release Summaries ### loomio-deploy (481288689fe54bded0689ba1c31aff319b018541 -> c976fbd20ad4c457c50e6b629b65c8128a1f96c0) - Add guidance for disabling a feature. - Add WEB_CONCURRENCY=auto Puma setting. - Remove unused flag FEATURES_DISABLE_PUBLIC_GROUPS (commented as disable /explore in env_template). - Add env option to prevent users editing profile attributes when SSO controls identity (LOOMIO_SSO_FORCE_USER_ATTRS). - Consolidate containers by removing channels container and running hocuspocus from the Loomio image. - Add LOOMIO_VERIFY_PARTICIPANTS_ADMIN_ONLY env option. - Add persistent volume for JS assets so assets survive deploys. - Update OAuth env docs to include OAUTH_ATTR_PICTURE and document OIDC defaults. - Files changed in compare: README.md, docker-compose.yml, env_template. ### Loomio (v3.0.15 -> v3.0.21) - v3.0.15: - Rails 8 upgrade and SSO feature updates. - With FEATURES_DISABLE_EMAIL_LOGIN=1, first-time SSO users are created and signed in directly (no link/create account screen and no Terms acceptance step). - Add LOOMIO_SSO_FORCE_USER_ATTRS=1 option to prevent users changing SSO-controlled profile fields (name, email, username). - Group settings behavior updates: - "Anyone can join" flow supported for registered users. - Explore/directory listing behavior configurable with FEATURES_EXPLORE_PUBLIC_GROUPS=1. - Upgrade note repeated in release: loomio-deploy needs Redis 8.4. - v3.0.16: - Fixes issues that broke v3.0.15. - App boot fix for Redis and Sidekiq connection_pool incompatibility. - Google SSO fix. - Upgrade note repeated: loomio-deploy needs Redis 8.4. - v3.0.17: - Fix duplicate-email crashes in OAuth and SAML SSO authentication. - Remove unused canViewPublicGroups code. - Prevent non-members from seeing tags on closed groups. - Remove hiredis gem. - v3.0.18: - Rewrites SSO sign-in/sign-up linking flow: - Existing Loomio sessions no longer auto-link to SSO identities. - First-time SSO sign-ins create a new account directly. - Add LOOMIO_RESTRICT_EXPLORE_TO_SIGNED_IN_USERS. - Add polls to vote-on page. - Replace "invite-only" terminology with "direct discussions" wording. - Fix missing translation on invite-only discussions page. - v3.0.19: - Remove ability to set profile picture from SSO provider list on change picture form. - Large test-suite migration from rspec to minitest, reducing CI runtime significantly. - Release note caveat: app version string still reported 3.0.18 in that release. - v3.0.20: - Convert HAML server-rendered templates to Phlex. - Replace SocketIO with ActionCable and remove loomio_channel_server dependency. - Move hocuspocus server into main Loomio repository. - Move Matrix bot notification handling into Rails app. - Deployment note: old server setup can still work but may leave unused services. - Architectural simplification direction noted (fewer repos/containers; future path toward SolidCache/SolidQueue). - Bugfixes/improvements listed in release: - Fix OAuth login selecting orphan identities instead of linked identities. - Use user name rather than initials in avatar email/print partial. - Add LOOMIO_VERIFY_PARTICIPANTS_ADMIN_ONLY to restrict "verify participants" to admins. - Show specific error details in flash messages instead of generic form errors. - Add ability to remove group logo and cover photo in group settings. - v3.0.21: - Discussion and poll template UX updates. - New template button opens example templates as a starting point. - Fewer discussion templates by default. - Sense Check poll option updates. - Materialize default discussion templates as DB records. - Add opening_at for scheduled poll voting. - Poll template updates. - Fix minor security issue where group members could infer secret subgroup names via reports controller responses.
Owner

Har lest gjennom og ser bra ut for meg, med forebehold om at jeg ikke er kjent med Ansible eller konfigurering av Loomio

Har lest gjennom og ser bra ut for meg, med forebehold om at jeg ikke er kjent med Ansible eller konfigurering av Loomio
This pull request doesn't have enough approvals yet. 0 of 1 approvals granted.
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin oppgrader-loomio:oppgrader-loomio
git switch oppgrader-loomio
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
2 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
datakollektivet/systemer!26
No description provided.