Devise, Simple Form, Responders, and more OSS ❤️.
Joined June 2020
- Tweets37
- Following1
- Followers239
- Likes17
Devise v5.0.4 is out! Fixes a security issue with timeoutable and the Referrer header on non-GET requests.
github.com/heartcombo/devise…
Devise v5.0.3 released, fixing a security issue with (re)confirmable "change email" feature, which would allow confirming an email they don't own.
github.com/heartcombo/devise…
Finally got this deployed somewhere else, which is going to be "good enough" for now:
simple-form-bootstrap-gi9v.o…
Devise v5.0.1 released with a minor fix for auth translation keys in certain languages, introduced by v5.
e.g. German E-Mail was being converted to E-mail in the flash message when auth was invalid.
github.com/heartcombo/devise…
Devise v5.0 rc was just released, with a ton of enhancements, bug fixes, and a few potential breaking changes too, including dropping support for older Ruby/Rails versions.
Give it a try, and please report back if you hit anything.
github.com/heartcombo/devise…
Happy New Year! 🎇
SimpleForm v5.3.1 was just released, reverting a change that was meant to speed up input mapping lookup, since that broke some custom input lookup.
github.com/heartcombo/simple…
We will also be dropping support to Rails versions < 6 and Ruby versions < 2.7 soon.
If your app uses one of the soon-to-be-dropped Ruby/Rails versions, we strongly encourage to plan the upgrade.
❤️💚💙💛🧡 retweeted
I've got a Devise branch with Rails 7.1 tests green / deprecation free, if anyone wants to give it a try: github.com/heartcombo/devise…
Note: This is based on the current v4.9.2, not main, and is likely going to become a `4-stable` branch going forward.
We received report of another library that "broke" with release v4.9.1 due to relying on a `nodoc` / non-public method `Devise.activerecord51?`, so we released a new version v4.9.2 bringing that back with a deprecation warning, to make it easier for people to upgrade for now.
It looks like this release broke `devise-security` due to usage of a `:nodoc:` (non-public) method that was removed/refactored: github.com/heartcombo/devise…
If you run into issues and we can't get an update on devise-security (or some other library relying on that), let us know.
Devise v4.9.1 released, fixing an issue with custom recall logic performing redirects in the failure app, improved support when both AR & Mongoid are loaded, respect per-model "sign_in_after_reset_password" config, and a couple other improvements.
github.com/heartcombo/devise…
It looks like this release broke `devise-security` due to usage of a `:nodoc:` (non-public) method that was removed/refactored: github.com/heartcombo/devise…
If you run into issues and we can't get an update on devise-security (or some other library relying on that), let us know.
Devise v4.9.0 was just released with improved Turbo integration out of the box. Please check the Changelog and the linked wiki there for more info on the upgrade, and report if you run into any issues.
github.com/heartcombo/devise…
This is now on the main Devise branch. Hoping for a new release soon, but I'll let it sit there for a bit more in case someone still wants to give it a shot and provide any feedback.
Looking for some more volunteers to test Devise + Turbo integration: github.com/heartcombo/devise…
Check the readme/changelog, and report back if you run into any issues. (please don't run this in production! at least not yet, you've been warned haha.)
❤️💜💛💚💙
MailForm v1.10.0 released adding support to multiple files through a single attachment.
github.com/heartcombo/mail_f…
Responders v3.1.0 containing these changes was released, in preparation for Devise + Hotwire/Turbo support.
Responders has had a change in `main` branch for about a year that changes the status codes of error responses to be 422 Unprocessable Entity.
We're working on making that configurable so that existing apps can upgrade more easily without breaking things.
github.com/heartcombo/respon…
