Merge branch 'dev' into merge-release/16.5-20251008101525

Author: klaustopher

.github/workflows/docker-release.yml

@@ -62,10 +62,7 @@ jobs:
           REPOSITORY: opf/helm-charts
           WORKFLOW_ID: core_release.yml
         run: |
-          # FIXME: re-enable once workflows are confirmed to be doing the right thing
-          echo "Would have triggered helm charts release with tag: ${{ needs.compute-inputs.outputs.tag }}"
-          exit 0
           curl -i --fail-with-body -H"authorization: Bearer $TOKEN" \
             -XPOST -H"Accept: application/vnd.github.v3+json" \
             https://api.github.com/repos/$REPOSITORY/actions/workflows/$WORKFLOW_ID/dispatches \
-            -d '{"ref": "main", "inputs": { "tag" : "${{ needs.compute-inputs.outputs.tag }}" }}'
+            -d '{"ref": "main", "inputs": { "tag" : "${{ needs.compute-inputs.outputs.tag }}" }}'

.github/workflows/packager.yml

@@ -0,0 +1,60 @@
+name: Package
+on: 
+  push:
+    branches:
+      - feature/package-via-github-actions
+      - dev
+      - release/*
+      - stable/*
+  workflow_dispatch:
+
+jobs:
+  build:
+    if: github.repository == 'opf/openproject'
+    name: ${{ matrix.target }}
+    runs-on: ubuntu-latest
+    services:
+      postgres:
+        image: postgres:16
+        env:
+          POSTGRES_DB: app
+          POSTGRES_USER: app
+          POSTGRES_PASSWORD: p4ssw0rd
+        ports:
+          - 5432:5432
+    strategy:
+      fail-fast: false
+      matrix:
+        target:
+          - debian:11
+          - debian:12
+          - ubuntu:20.04
+          - ubuntu:22.04
+          - el:9
+          - sles:15
+    steps:
+      - uses: actions/checkout@v5
+        with:
+          fetch-depth: 0
+      - name: Setup
+        id: setup
+        run: |
+          VERSION=$(ruby -r ./lib/open_project/version.rb -e "puts OpenProject::VERSION")
+          echo "version=$VERSION" >> $GITHUB_OUTPUT
+      - name: Package
+        uses: pkgr/action/package@main
+        id: package
+        with:
+          target: ${{ matrix.target }}
+          version: ${{ steps.setup.outputs.version }}
+          debug: true
+          env: |
+            DATABASE_URL=postgres://app:[email protected]:5432/app
+      - name: Publish
+        uses: pkgr/action/publish@main
+        with:
+          target: ${{ matrix.target }}
+          token: ${{ secrets.PACKAGER_PUBLISH_TOKEN }}
+          repository: opf/openproject
+          channel: ${{ github.ref_name }}
+          file: ${{ steps.package.outputs.package_path }}

.github/workflows/test-core.yml

@@ -16,6 +16,7 @@ on:
       - 'help/**'
       - 'packaging/**'
       - '.pkgr.yml'
+      - '.github/workflows/packager.yml'
 
 permissions:
   contents: read

.github/workflows/version-check.yml

@@ -2,7 +2,11 @@ name: Check work package version
 
 on:
   pull_request:
-    types: [labeled, synchronize, ready_for_review]
+    types:
+      - opened
+      - labeled
+      - synchronize
+      - ready_for_review
 
 permissions:
   contents: read # to fetch code (actions/checkout)

Gemfile

@@ -39,7 +39,7 @@ gem "activemodel-serializers-xml", "~> 1.0.1"
 gem "activerecord-import", "~> 2.2.0"
 gem "activerecord-session_store", "~> 2.2.0"
 gem "ox"
-gem "rails", "~> 8.0.2", ">= 8.0.2.1"
+gem "rails", "~> 8.0.3"
 gem "responders", "~> 3.0"
 
 gem "ffi", "~> 1.15"
@@ -82,7 +82,7 @@ gem "htmldiff"
 gem "stringex", "~> 2.8.5"
 
 # CommonMark markdown parser with GFM extension
-gem "commonmarker", "~> 2.4.0"
+gem "commonmarker", "~> 2.4.1"
 
 # HTML pipeline for transformations on text formatter output
 # such as sanitization or additional features
@@ -92,7 +92,7 @@ gem "deckar01-task_list", "~> 2.3.1"
 # Requires escape-utils for faster escaping
 gem "escape_utils", "~> 1.3"
 # Syntax highlighting used in html-pipeline with rouge
-gem "rouge", "~> 4.6.0"
+gem "rouge", "~> 4.6.1"
 # HTML sanitization used for html-pipeline
 gem "sanitize", "~> 7.0.0"
 # HTML autolinking for mails and urls (replaces autolink)
@@ -166,7 +166,7 @@ gem "paper_trail", "~> 16.0.0"
 gem "op-clamav-client", "~> 3.4", require: "clamav"
 
 # Global ID for polymorphic associations
-gem "globalid", "~> 1.2"
+gem "globalid", "~> 1.3"
 
 # Recurring meeting events definition
 gem "ice_cube", "~> 0.17.0"
@@ -194,9 +194,9 @@ gem "carrierwave", "~> 1.3.4"
 gem "carrierwave_direct", "~> 2.1.0"
 gem "fog-aws"
 
-gem "aws-sdk-core", "~> 3.107"
+gem "aws-sdk-core", "~> 3.233"
 # File upload via fog + screenshots on travis
-gem "aws-sdk-s3", "~> 1.91"
+gem "aws-sdk-s3", "~> 1.199"
 
 gem "openproject-token", "~> 7.4.0"
 
@@ -227,7 +227,7 @@ gem "yabeda-rails"
 
 # opentelemetry
 gem "opentelemetry-exporter-otlp", "~> 0.30.0", require: false
-gem "opentelemetry-instrumentation-all", "~> 0.82.0", require: false
+gem "opentelemetry-instrumentation-all", "~> 0.84.0", require: false
 gem "opentelemetry-sdk", "~> 1.9", require: false
 
 gem "view_component", "~> 4.0.2"
@@ -240,11 +240,11 @@ gem "factory_bot", "~> 6.5.0", require: false
 gem "factory_bot_rails", "~> 6.5.0", require: false
 
 gem "turbo_power", "~> 0.7.0"
-gem "turbo-rails", "~> 2.0.0"
+gem "turbo-rails", "~> 2.0.17"
 
 # There is a problem with version 1.4.0. Do not update until you're sure there is no infinite hang
 # happenning in failing tests when WebMock or VCR stub cannot be found.
-gem "httpx", "~> 1.6.1"
+gem "httpx", "~> 1.6.2"
 
 # Brings actual deep freezing to most ruby objects
 gem "ice_nine"
@@ -284,12 +284,12 @@ group :test do
   gem "rails-controller-testing", "~> 1.0.2"
 
   gem "capybara", "~> 3.40.0"
-  gem "capybara_accessible_selectors", git: "https://github.com/citizensadvice/capybara_accessible_selectors", tag: "v0.13.0"
+  gem "capybara_accessible_selectors", git: "https://github.com/citizensadvice/capybara_accessible_selectors", tag: "v0.14.0"
   gem "capybara-screenshot", "~> 1.0.17"
   gem "cuprite", "~> 0.17.0"
   gem "rspec-wait"
   gem "selenium-devtools"
-  gem "selenium-webdriver", "~> 4.20"
+  gem "selenium-webdriver", "~> 4.36"
 
   gem "fuubar", "~> 2.5.0", require: false
   gem "timecop", "~> 0.9.0"
@@ -371,7 +371,7 @@ group :development, :test do
   gem "i18n-tasks", "~> 1.0.13", require: false
 
   # Active Record Doctor helps to keep the database in good shape.
-  gem "active_record_doctor", "~> 1.15.0"
+  gem "active_record_doctor", "~> 2.0.1"
 end
 
 gem "bootsnap", "~> 1.18.0", require: false
@@ -403,7 +403,7 @@ gem "activerecord-nulldb-adapter", "~> 1.1.1"
 
 # Have application level locks on the database to have a mutex shared between workers/hosts.
 # We e.g. employ this to safeguard the creation of journals.
-gem "with_advisory_lock", "~> 7.0.1"
+gem "with_advisory_lock", "~> 7.0.2"
 
 # Load Gemfile.modules explicitly to allow dependabot to work
 eval_gemfile "./Gemfile.modules"
@@ -419,4 +419,4 @@ end
 
 gem "openproject-octicons", "~>19.29.0"
 gem "openproject-octicons_helper", "~>19.29.0"
-gem "openproject-primer_view_components", "~>0.73.1"
+gem "openproject-primer_view_components", "~>0.74.1"