Merge branch 'develop' into sidebar/collapse-conditionally

Author: nicolachr

CHANGELOG

@@ -10,12 +10,20 @@
     - Rename addon upload/parent nodes and add icons
     - Update associated evidence, notes and child nodes' updated_at columns on node merge
     - Warn on node merge that methodology will not be copied
+  - Show don't gate:
+    - Issue Library
+    - Ticketing integrations
+    - Word/Excel templates
   - Sidebar: 
     - Add resize functionality
+  - Textile:
+    - Add support for paragraph alignment
+    - Add support for image resizing, alignment, and borders
     - Keep sidebar open when editing issues in large viewports
   - Wizard:
     - Add analytics sharing step
     - Mark as done after Kit step, without waiting for the background job.
+    - Update Welcome kit with OWASP Top 10:2025 methodology
   - [entity]:
     - [future tense verb] [feature]
   - Upgraded gems:
@@ -47,7 +55,6 @@ v4.19.0 (November 2025)
   - Editor: Add inline code, and highlight code buttons to the toolbar
   - Layout: Improve primary action visibility for Evidence, Issues, Methodologies, Notes, and Node Properties
   - Navigation: Move Trash and Project Configurations in main navigation bar
-  - Textile: Add support for paragraph alignment
   - [entity]:
     - [future tense verb] [feature]
   - Upgraded gems:

Dockerfile

@@ -10,9 +10,12 @@ apt-get install --no-install-recommends -y curl git libjemalloc2 libvips && \
 apt-get install --no-install-recommends -y redis-server sqlite3 && \
 rm -rf /var/lib/apt/lists /var/cache/apt/archives
 
-# Set production environment
+# This can be overriden to build the Sandbox image
+ARG BUNDLE_GEMFILE="Gemfile"
+
 ENV RAILS_ENV="production" \
     BUNDLE_DEPLOYMENT="1" \
+    BUNDLE_GEMFILE=$BUNDLE_GEMFILE \
     BUNDLE_PATH="/usr/local/bundle" \
     BUNDLE_WITHOUT="development test" \
     # RAILS_SERVE_STATIC_FILES  is enabled to let Rails serve static files since we're not using Nginx
@@ -28,7 +31,7 @@ RUN apt-get update -qq && \
 # Copy files to build layer that are needed to run `bundle install` & install app gems
 # engines/ is needed to resolve built-in engines in Gemfile
 # version.rb is needed to resolve built-in engine versions in their respective .gemspecs
-COPY Gemfile Gemfile.lock Gemfile.plugins ./
+COPY Gemfile Gemfile.lock Gemfile.plugins Gemfile.sandbox Gemfile.sandbox.lock ./
 COPY engines ./engines
 COPY lib/dradis/ce/version.rb ./lib/dradis/ce/version.rb
 
@@ -50,7 +53,7 @@ RUN mkdir -p app/views/tmp \
     storage
 
 # Precompile bootsnap code for faster boot times
-RUN bundle exec bootsnap precompile app/ lib/
+RUN bundle exec bootsnap precompile app/ engines/ lib/
 
 # Precompile assets for production without requiring secret RAILS_MASTER_KEY
 RUN SECRET_KEY_BASE_DUMMY=1 ./bin/rails assets:precompile

Gemfile.sandbox

@@ -0,0 +1,9 @@
+# This Gemfile extends the base Gemfile with Sandbox-specific dependencies
+eval_gemfile 'Gemfile'
+
+gem 'dradis-sandbox', path: 'engines/dradis-sandbox'
+
+# Telemetry
+gem 'sentry-ruby'
+gem 'sentry-rails'
+gem 'stackprof'