0.31 backports

.decidim-version

@@ -1 +1 @@
-0.31.4
+0.31.5

.devcontainer/Dockerfile

@@ -1,8 +1,11 @@
-FROM decidim/decidim:0.22.0-dev
+ARG RUBY_VERSION=3.3.4
+FROM ghcr.io/rails/devcontainer/images/ruby:$RUBY_VERSION
 
-RUN apt-get update && apt-get install -y \
-  vim
+RUN wget -q -O /tmp/google-chrome-key.pub https://dl-ssl.google.com/linux/linux_signing_key.pub \
+    && sudo gpg --dearmor -o /usr/share/keyrings/google-chrome-keyring.gpg /tmp/google-chrome-key.pub \
+    && echo "deb [arch=amd64 signed-by=/usr/share/keyrings/google-chrome-keyring.gpg] http://dl.google.com/linux/chrome/deb/ stable main" | sudo tee /etc/apt/sources.list.d/google-chrome.list \
+    && sudo apt-get update \
+    && sudo apt-get install -y google-chrome-stable libicu-dev \
+    && sudo rm -rf /var/lib/apt/lists/* /tmp/google-chrome-key.pub
 
-ENV EDITOR=vim
-
-RUN sh -c "$(wget -O- https://github.com/deluan/zsh-in-docker/releases/download/v1.1.1/zsh-in-docker.sh)"
+ENV BINDING="0.0.0.0"

.devcontainer/compose.yaml

@@ -0,0 +1,40 @@
+name: "decidim"
+
+services:
+  rails-app:
+    build:
+      context: ..
+      dockerfile: .devcontainer/Dockerfile
+    volumes:
+    - ../:/workspaces/decidim:cached
+    ports:
+      - "${DEVCONTAINER_APP_PORT:-3000}:3000"
+    env_file:
+      - path: ../.env
+        required: false
+    command: sleep infinity
+    depends_on:
+      - redis
+      - postgres
+
+  redis:
+    image: redis:7.2
+    restart: unless-stopped
+    volumes:
+    - redis-data:/data
+
+  postgres:
+    image: postgres:16.1
+    restart: unless-stopped
+    networks:
+      - default
+    volumes:
+      - postgres-data:/var/lib/postgresql/data
+    environment:
+      POSTGRES_USER: postgres
+      POSTGRES_PASSWORD: postgres
+
+volumes:
+  redis-data:
+  postgres-data:
+

.devcontainer/devcontainer.json

@@ -1,21 +1,34 @@
-// For format details, see https://aka.ms/devcontainer.json. For config options, see the README at:
-// https://github.com/microsoft/vscode-dev-containers/tree/v0.140.1/containers/ruby-rails
 {
-	"name": "Ruby on Rails",
-	"workspaceFolder": "/workspace",
-	"service": "rails",
-	"dockerComposeFile": [
-		"docker-compose.yml"
-	],
-	"settings": {
-		"terminal.integrated.shell.linux": "/bin/zsh"
-	},
-	"extensions": [
-		"rebornix.Ruby",
-		"wingrunr21.vscode-ruby",
-		"misogi.ruby-rubocop"
-	],
-	"forwardPorts": [
-		3000
-	],
-}
+  "name": "decidim",
+  "dockerComposeFile": "compose.yaml",
+  "service": "rails-app",
+  "workspaceFolder": "/workspaces/decidim",
+  "features": {
+    "ghcr.io/devcontainers/features/github-cli:1": {},
+    // Do not use bundler cache, to not generate conflicts with develop bundler cache
+    // "ghcr.io/rails/devcontainer/features/bundler-cache:1.0.1": {},
+    "ghcr.io/devcontainers/features/docker-outside-of-docker:1": {
+      "moby": false
+    },
+    "ghcr.io/devcontainers/features/node:1": {
+      "version": "22.14.0"
+    },
+    "ghcr.io/rails/devcontainer/features/activestorage": {},
+    "ghcr.io/rails/devcontainer/features/postgres-client": {}
+  },
+  "containerEnv": {
+    "REDIS_URL": "redis://redis:6379/1",
+    "DECIDIM_SPAM_DETECTION_BACKEND_RESOURCE_URL": "redis://redis:6379/2",
+    "DECIDIM_SPAM_DETECTION_BACKEND_USER_REDIS_URL": "redis://redis:6379/3",
+    "DATABASE_HOST": "postgres",
+    "DATABASE_USERNAME": "postgres",
+    "DATABASE_PASSWORD": "postgres"
+  },
+  "appPort": ["3000:3000"],
+  "forwardPorts": [
+    3000,
+    5432,
+    6379
+  ],
+  "postCreateCommand": "bin/setup --skip-server"
+}

.eslintrc.json

@@ -1,3 +1,45 @@
 {
-  "extends": "@decidim"
+  "extends": "@decidim",
+  "settings": {
+    "react": {
+      "version": "detect"
+    },
+    "import/resolver": {
+      "node": {
+        "extensions": [".js"],
+        "moduleDirectory": [
+          "decidim-accountability/app/packs/",
+          "decidim-admin/app/packs/",
+          "decidim-ai/app/packs/",
+          "decidim-api/app/packs/",
+          "decidim-assemblies/app/packs/",
+          "decidim-blogs/app/packs/",
+          "decidim-budgets/app/packs/",
+          "decidim-collaborative_texts/app/packs/",
+          "decidim-comments/app/packs/",
+          "decidim-conferences/app/packs/",
+          "decidim-core/app/packs/",
+          "decidim-debates/app/packs/",
+          "decidim-demographics/app/packs/",
+          "decidim-design/app/packs/",
+          "decidim-dev/app/packs/",
+          "decidim-elections/app/packs/",
+          "decidim-forms/app/packs/",
+          "decidim-initiatives/app/packs/",
+          "decidim-meetings/app/packs/",
+          "decidim-pages/app/packs/",
+          "decidim-participatory_processes/app/packs/",
+          "decidim-proposals/app/packs/",
+          "decidim-surveys/app/packs/",
+	  "decidim-sortitions/app/packs/",
+          "decidim-system/app/packs/",
+          "decidim-templates/app/packs/",
+          "decidim-verifications/app/packs/",
+          "packages/core/node_modules/",
+          "packages/webpacker/node_modules/",
+          "node_modules/"
+        ]
+      }
+    }
+  }
 }

.github/actions/spelling/expect.txt

@@ -94,6 +94,8 @@ Brakus
 breadcrumb
 browserstack
 bugfixing
+busques
+Butlletins
 byebug
 bytesize
 cacatua
@@ -133,6 +135,7 @@ coauthorabledummy
 cobertura
 codecov
 codefor
+codespace
 CODEOWNERS
 codeql
 coditramuntana
@@ -217,6 +220,7 @@ doesnot
 doggotrainer
 Dokku
 Dota
+dotfiles
 douban
 downvoted
 downvotes
@@ -406,6 +410,7 @@ infob
 informables
 Inici
 iniciar
+iniciat
 inodes
 inputdialog
 inputname
@@ -527,6 +532,7 @@ minuscat
 misogi
 mlat
 mlon
+moby
 Mobi
 modals
 modernizrrc
@@ -653,6 +659,7 @@ pgp
 PGVERSION
 Phargo
 phoe
+pids
 pinterest
 Placeholdit
 plantuml
@@ -879,6 +886,7 @@ trashable
 traslatable
 trgm
 trobada
+trobat
 tsearch
 turbolinks
 Twilio

.github/workflows/test_app.yml

@@ -54,7 +54,7 @@ jobs:
       PARALLEL_TEST_PROCESSORS: 3
     services:
       validator:
-        image: ghcr.io/validator/validator:latest
+        image: ${{ vars.ACTION_ACCESSIBILITY_VALIDATOR_VERSION || 'ghcr.io/validator/validator:latest' }}
         ports: ["8888:8888"]
       postgres:
         image: postgres:14

.gitignore

@@ -36,3 +36,4 @@ decidim-packs
 packages/**/package-lock.json
 
 temporary_changelog.md
+.devcontainer/devcontainer.local.*

CHANGELOG.md

@@ -1,5 +1,47 @@
 # Changelog
 
+## [0.31.5](https://github.com/decidim/decidim/tree/0.31.5)
+
+### Added
+
+Nothing.
+
+### Changed
+
+Nothing.
+
+### Fixed
+
+- **decidim-system**: Backport 'Fix one word hostnames for development' to v0.31 [\#16684](https://github.com/decidim/decidim/pull/16684)
+- **decidim-core**: Backport 'Fix flaky spec on `category.erb`' to v0.31 [\#16707](https://github.com/decidim/decidim/pull/16707)
+- **decidim-verifications**: Backport 'Enforce permission check on admins' CSV census' to v0.31 [\#16692](https://github.com/decidim/decidim/pull/16692)
+- **decidim-verifications**: Backport 'Fix multitenant access bug on ID documents verification' to v0.31 [\#16694](https://github.com/decidim/decidim/pull/16694)
+- **decidim-demographics**, **decidim-elections**, **decidim-forms**, **decidim-meetings**, **decidim-surveys**: Backport 'Improve permissions checks in demographics' questionnaire' to v0.31 [\#16682](https://github.com/decidim/decidim/pull/16682)
+- **decidim-admin**, **decidim-conferences**, **decidim-meetings**: Backport 'Refactor autocomplete to use the GraphQL API endpoint' to v0.31 [\#16705](https://github.com/decidim/decidim/pull/16705)
+- **decidim-core**: Backport 'Fix push notifications configuration and registration' to v0.31 [\#16711](https://github.com/decidim/decidim/pull/16711)
+- **decidim-core**: Backport 'Sanitize "static page" content blocks and HTML content block' to v0.31 [\#16715](https://github.com/decidim/decidim/pull/16715)
+- Backport 'Pin workbox-webpack-plugin to v7.3' to v0.31 [\#16745](https://github.com/decidim/decidim/pull/16745)
+- **decidim-generators**: Backport 'Fix spec for full app generator spec' to v0.31 [\#16749](https://github.com/decidim/decidim/pull/16749)
+- **decidim-api**: Backport 'Prevent using JWT against other organizations' to v0.31 [\#16723](https://github.com/decidim/decidim/pull/16723)
+- **decidim-core**: Backport 'Check that the endpoint is supported on Web Push notifications' to v0.31 [\#16747](https://github.com/decidim/decidim/pull/16747)
+- **decidim-assemblies**, **decidim-core**, **decidim-participatory processes**, **decidim-verifications**: Backport 'Introduce PrivateDownload logic for some downloads' to v0.31 [\#16751](https://github.com/decidim/decidim/pull/16751)
+- Fix spellchecker in `release/0.31-stable` [\#16709](https://github.com/decidim/decidim/pull/16709)
+- **decidim-verifications**: Backport 'Enforce permission check on admins' CSV census records' to v0.31 [\#16758](https://github.com/decidim/decidim/pull/16758)
+- **decidim-api**: Backport 'Fix organization access check for logged in API user' to v0.31 [\#16760](https://github.com/decidim/decidim/pull/16760)
+
+### Removed
+
+Nothing.
+
+### Developer improvements
+
+Nothing.
+
+### Internal
+
+- Clean-up the releases notes after v0.31.4 publication [\#16647](https://github.com/decidim/decidim/pull/16647)
+- Backport 'Pin workbox-webpack-plugin to v7.3' to v0.31 [\#16745](https://github.com/decidim/decidim/pull/16745)
+
 ## [0.31.4](https://github.com/decidim/decidim/tree/0.31.4)
 
 ### Added