To update, follow these steps:
- Update your
Gemfile:
gem "decidim", "0.25.1"
gem "decidim-dev", "0.25.1"- Run these commands to upgrade and make sure you get all the latest migrations:
bundle update decidim
bin/rails decidim:upgrade
bin/rails db:migrateAdded
Register assets paths
To prevent Zeitwerk from trying to autoload classes from the app/packs folder, it's necesary to register these paths for each module and for the application using the method Decidim.register_assets_path on initializers. This is explained in the webpacker migration guides for applications and modules), and was implemented in #8449.
Unconfirmed access disabled by default
As per #8233, by default all participants must confirm their email account to sign in. Implementors can change this setting as a initializer configuration:
Changed
Nothing.
Fixed
- decidim-proposals: Backport: Any user can access proposal's pages representing the "create a proposal" steps (#8390) #8407
- Backport "Increase text contrast in current phase of a participatory process" #8436
- decidim-core: Backport "Include only public entities in the following page" to 0.25 #8406
- decidim-generators: Backport "Fix railties requirements on created applications" #8439
- decidim-blogs: Backport "Add missing translations" #8441
- decidim-core: Backport "Fix javascript exception when geocoding proposals is disabled" #8437
- decidim-core: Force Rails version to 6.0 #8440
- Backport "Fix CVE-2021-41136" #8443
- decidim-comments: Backport "Refresh comments component after updating" to v0.25 #8446
- decidim-core: Backport "Fix webpacker issue when using zeitwerk" to 0.25 #8447
- decidim-core: Backport "Improve Zeitwerk assets paths to ignore" to 0.25 #8454
Improved
- decidim-core: Backport "Enforce redirects to include the organization host" to 0.25 #8405
- decidim-core: Backport: Disallow redirection to the host when performing redirect_back #8402
- decidim-core: Backport "Update omniauth gem and dependencies" #8442
Removed
Nothing.