decidim/decidim v0.27.0.rc1 on GitHub

1. Upgrade notes

As usual, we recommend that you have a full backup, of the database, application code and static files.

To update, follow these steps:

1.1. Update your Gemfile

gem "decidim", "0.27.0.rc1"
gem "decidim-dev", "0.27.0.rc1"

1.2. Run these commands

bundle update decidim
bin/rails decidim:upgrade
bin/rails db:migrate

1.3. Follow the steps and commands detailed in these notes

2. General notes

2.1. Ruby update to 3.0

We have updated the Ruby version to 3.0.2. Upgrading to this version will require either to install the Ruby Version on your host, or change the decidim docker image to use ruby:3.0.2.

You can read more about this change on PR #8452.

2.2. Rails update to 6.1

We have updated the Ruby on Rails version to 6.1. This will be done automatically when doing the bundle update. If you had any code customization you'll probably need to take this into account and update your code. Some important aspects to mention:

ActionMailer - Change default queue name of the deliver (:mailers) job to be the job adapter's default (:default)
ActiveSupport - Remove deprecated fallback to I18n.default_locale when config.i18n.fallbacks is empty. This change should be transparent for all the Decidim users that have configured the Decidim.default_locale
If you are using Spring, it is highly suggested to add the following line at the top of your application's config/spring.rb (especially if you are seeing the following messages in the console ERROR: directory is already being watched!):

require "decidim/spring"

You can read more about this change on PR #8411.

2.3. Data consent change (aka "cookie consent")

Local data consent management has been updated, generally also referred to as "cookie consent". Supported data consent categories are essential, preferences, analytics and marketing.

This feature is many times referred to as "cookie consent" due to historic reasons but in Decidim we prefer to call it "data consent" because this can also include other data stored in the user's browser using its APIs, such as data added to LocalStorage.

As many non-technical people are still more familiar with the "cookie" terminology, the user interface talks only about "Cookie consent" to make it easier to understand for non-technical participants.

Iframe HTML elements that are added with the editor or meeting forms are disabled until data consent is given for all data categories. Scripts that require local data to be stored in the user's browser could be added as follows:

<script type="text/plain" data-consent="marketing">
  console.log("marketing data consent given");
</script>

Note that you need to define the type="text/plain" for the script that adds local data to the user's browser in order to prevent the script from being executed before data consent is given. You should also define the metadata for all the local data that you or your 3rd party scripts are adding to the user's browser.

Mind that we also changed the data consent cookie from "decidim-cc" to "decidim-consent" by default. You can change it on your initializer, or update your legal notice accordingly.

Learn more about Data consent at Decidim Documentation. You can read more about this change on PR #9271.

2.4. Configuration via Environment Variables

We've modified the default installation to configure most of the application through Environment Variables. For existing installations we recommend that you migrate to this new model so its easier to configure your applications.

As an example, after migrating to this, if you want to enable a setting, you'll need to:

a. Set the correct Environment Variable
b. Restart the server

Until now the flow could be something like:

a. Change your initializer
b. Commit to git
c. Push to git server
d. Deploy to the server
e. Restart the server

For migrating:

Backup your config/secrets.yml and config/initializers/decidim.rb
Generate a new decidim app and copy your generated files
Migrate your old settings to the new Environment Variables.

Learn more about Environment Variables at Decidim Documentation. You can read more about this change on PR #8725.

2.5. GraphQL API documentation change

We've replaced the graphql-docs npm package with gem. You shouldn't need to do anything as this will be handled automatically.

The static documentation will be rendered into the app/views/static/api/docs directory, which is being refreshed automatically when you run bin/rails decidim:upgrade.

You can read more about this change on PR #8631.

2.6. Custom icons new uploader

We now only allow PNG images at Favicon so we can provide higher quality versions to mobile devices.

You can read more about this change on PR #8645.

2.7. Strong password rules for admin users

For extra security, there are new password rules for administrator users which are enabled by default. This means that:

This will force the current administrators to change their passwords after 90 days has passed from the previous login.
For development/testing/staging environments this also means that the default user passwords have changed to decidim123456789 to match the minimum length rules for admins.
For consistency reasons, regular users password has also been changed with the seed data.

The relevant Environment Variables are:

Name	Value	Default value
DECIDIM_ADMIN_PASSWORD_STRONG	Enable strong password rules for admin users.	true
DECIDIM_ADMIN_PASSWORD_EXPIRATION_DAYS	Defines how many days admin passwords are valid before they need to be reset.	90
DECIDIM_ADMIN_PASSWORD_REPETITION_TIMES	Defines how many previous passwords are compared against new admin user passwords.	5
DECIDIM_ADMIN_PASSWORD_MIN_LENGTH	The minimum character length for admin user passwords.	15

You can read more about this change on PR #9347.

2.8 Service workers

For the Progressive Web Application related features, like Push Notifications and Add To Home Screen, you'll need to update your webpack configuration:

bin/rails decidim:webpacker:install

You'll need to also add these to your .gitignore:

public/sw.js
public/sw.js.map

These files will be generated by the asset compilation task in your production server. Most of the time this should be handled automatically by your deployment process (like Capistrano or Heroku). In case that you need to run that manually, this is the command:

bin/rails assets:precompile

In your development environment this should be happening automatically behind the scenes or if you are running the ./bin/webpack-dev-server manually, during the recompilation process.

3. One time actions

These are one time actions that need to be done after the code is updated in the production database.

3.1. Moderated content can now be removed from search index

We have fixed a bug where moderated resources weren't removed from the general search index. This will automatically work for new moderated resources. For already existing ones, we have introduced a new task that will remove the moderated content from being displayed in search:

bin/rails decidim:upgrade:moderation:remove_from_search

You can read more about this change on PR #8811.

3.2. New Comments statistics structure

We've fixed the stastics of comments in participatory spaces. You'll need to run the task:

bin/rails decidim_comments:update_participatory_process_in_comments

You can read more about this change on PR #8012.

3.3. Push Notifications

We've implemented Push Notifications for improving the engagement with the platform. To configure it:

3.3.1. Generate the VAPID keys by running the command

bin/rails decidim:pwa:generate_vapid_keys

3.3.2. Copy them to your Environment Variables file

The relevant Environment Variables are:

Name	Value	Default value
VAPID_PUBLIC_KEY	VAPID public key that will be used to sign the Push API requests.
VAPID_PRIVATE_KEY	VAPID private key that will be used to sign the Push API requests.

These will be printed to the console when you run the command instructed in the previous step.

You can read more about this change on PR #8774.

3.4. Categories' description is deprecated

The description field in the categories admin forms has been removed (this applies to any participatory space using categories). For now it's still available in the database, so you can extract it with the following command:

bin/rails runner -e production 'Decidim::Category.pluck(:id, :name, :description).map { |row| puts row.join(";") }'

In the next version (v0.28.0) it will be fully removed from the database.

You can read more about this change on PR #8617.

3.5. Global search user by nickname

We've added the ability to search for a user by nickname. You'll need to update the existing search index by running this in (be aware that it could take a while if your database has a lot of Users!):

bin/rails runner -e production 'Decidim::User.find_each { |u| puts "Processing user #{u.id}" ; u.try_update_index_for_search_resource }'

You can read more about this change on PR #8658.

3.6. Add CORS policy for dynamic file uploads

This release allows Decidim users to upload files to Decidim dynamically from their browsers. If you are using any external file storage providers, such as Amazon S3, Google Cloud Storage or Azure Storage, you need to configure a CORS policy for these service providers to make the uploads work for the end users. If you are using the default configurations with a local file storage, you don't have to do any extra configuration to make this work.

To configure the CORS policy for each 3rd party service, please refer to the Active Storage section of the documentation.

You can read more about this change on PR #8681.

4. Scheduled tasks

Implementers need to configure these changes it in your scheduler task system in the production server. We give the examples with crontab, although alternatively you could use whenever gem or the scheduled jobs of your hosting provider.

4.1. Reminders for participants

We have added the possibility to send reminders for some actions, like pending budgets orders or user generated meetings that weren't closed.

# Generate reminders
4 0 * * * cd /home/user/decidim_application && RAILS_ENV=production bundle exec rake decidim:reminders:all

You can read more about this change on PR #8621.

4.2. Mail Notifications digest

Participants can configure if they want to receive notifications in real-time (one email by any action that they're notified to), or a daily or weekly notifications digest (a highlight with some of the notifications).

# Send notification mail digest daily
5 0 * * * cd /home/user/decidim_application && RAILS_ENV=production bundle exec rake decidim:mailers:notifications_digest_daily

# Send notification mail digest weekly on saturdays
5 0 * * 6 cd /home/user/decidim_application && RAILS_ENV=production bundle exec rake decidim:mailers:notifications_digest_weekly

You can read more about this change on PR #8833.

4.3. Rename data portability to download your data

"Data portability" has been renamed to "Download you data". As this was a scheduled task that was already configured you'll need to change it. Where you had:

# Remove expired data portability files
0 0 * * * cd /home/user/decidim_application && RAILS_ENV=production bundle exec rake decidim:delete_data_portability_files

Changes to:

# Remove expired download your data files
0 0 * * * cd /home/user/decidim_application && RAILS_ENV=production bundle exec rake decidim:delete_download_your_data_files

You can read more about this change on PR #9196.

5. Changes in APIs

5.1. Javascript load at the bottom of the pages

For improving performance and load times, we've moved javascript snippets to the bottom of body sections.

If you are redefining Decidim layout, using partials including javascript packs, or have the "HTML snippet" option enabled, you might need to review them.

Also, you can no longer call jQuery or any other library in your views directly. For example the following snippet won't work:

<script>
$(() => {
  $(".some-element").addClass("page-loadded"); // THIS WON'T WORK!
});
</script>

Instead of that, you should encapsulate it in a content_for(:js_content) block, that will render the snippet
right after javascript bundles have been loaded.

<% content_for(:js_content) do %>
  <script>
    $(() => {
      $(".some-element").addClass("page-loadded");
    });
  </script>
<% end %>

You can read more about this change on PR #9156.

5.2. Dynamic attachment uploads

We've changed the way file uploads work in Decidim. Files are now dynamically uploaded inside the modal so we can give the user immediate feedback on validation. If you didn't have any customization involving file uploads you can ignore this.

There are now two different types of file fields: titled and untitled. Titled file fields related to Decidim::Attachment internally.

To update your module you probably have to update forms and commands related to upload field (also views should be updated in case of titled attachments). After successful a upload and submitting a form, request params should contain signed_id of ActiveStorage::Blob which you need to find the blob at the backend. Some examples:

To update view with titled file field see example: edit_form_fields.html.erb
To update untitled form example: import_form.rb
To update untitled command example: update_account.rb

Learn more about Direct Uploads at Rails Documentation. You can read more about this change on PR #8681.

Module developers should also notice that when using <%= form.upload :file %> in your views, these fields are now automatically converted to dynamic upload fields. Regarding this, you will need to do a couple of changes in your code:

In your form classes, specify the attribute type as Decidim::Attributes::Blob, e.g. attribute :file, Decidim::Attributes::Blob
In your system tests, you might have previously used something like attach_file(:your_form_file, file_fixture("your-test-file.xyz")) to attach your file. Change these to dynamically_attach_file(:your_form_file, file_fixture("your-test-file.xyz")) in order to let the test helper handle the attachment for you as it has a few steps.
In other tests (such as commands, controllers, etc.), you might have previously used something like fixture_file_upload(file_fixture("your-test-file.xyz"), "text/plain"). This will not work anymore after you do the changes in the forms as they now expect either blobs or blob signed ID references. To fix this, replace these with upload_test_file(Rack::Test::UploadedFile.new(file_fixture("your-test-file.xyz"), "text/plain")).
If you need to process files locally within your form classes or commands, you need to include the Decidim::ProcessesFileLocally concern and use the method it provides process_file_locally(blob) to get local access to the files that may be stored at 3rd party file storages. The method takes the ActiveStorage Blob as an argument and yields the path to the local file for the provided block argument.

5.3. `Decidim::Form`s no longer use `Rectify::Form` and `Virtus` should be no longer used

If you don't have any customization involving Forms or Virtus you can ignore this.

As per #8669, your Decidim::Forms will no longer use Rectify::Form or Virtus.model attributes because Virtus is discontinued and Decidim is loosening the dependency on the virtus gem. Instead, the attributes implementation is now based on ActiveModel::Attributes with an integration layer within Decidim that aims to provide as much backwards compatibility as possible with the Virtus.model attributes that were previously used.

For most cases, no changes in the code should be needed but there are specific differences with the implementation which may require changes in the 3rd party code as well. Both Rectify::Form and Virtus will be still available in the core (through the rectify gem) but you should migrate away from them as soon as possible as they may be removed in future versions of Decidim.

There are specific things that you need to change regarding your Form or Virtus.model classes when migrating to Decidim::AttributeObject:

Change all instances of YourForm < Rectify::Form to YourForm < Decidim::Form. It should be very rare to find any classes in your code that inherit directly from Rectify::Form but in case you have used that, replace those references with Decidim::Form.
Change all instances of include Virtus.model to include Decidim::AttributeObject::Model.
For all file objects that may be of type String or ActionDispatch::Http::UploadedFile, remove the String type casting from these attributes as otherwise the uploaded file objects would be converted to strings. In other words, change all attribute :uploaded_image, String definitions within the forms to attribute :uploaded_image which allows them to be of any type.
Change all attribute :attr_name, Hash to attribute :attr_name, Hash[Symbol => ExpectedType] where ExpectedType is the type you are expecting the hash values to be. The new layer will default the hash key types to Symbol and hash value types to Object (= any type). The Virtus Hash attribute did not force any default types for these. It should be preferred to use the actual expected type for the values instead of Object (= any type) to make your code more robust and less buggy.
Change all attribute :attr_name, Array to attribute :attr_name, Array[ExpectedType] where ExpectedType is the type you are expecting the array values to be. It should be preferred to use the actual expected type for the values instead of Object (= any type) to make your code more robust and less buggy.
The original form attribute values are no longer available through the @attr_name instance variables within the Form or Virtus.model classes. Instead, change all these references to @attributes["attr_name"].value in case you want to fetch the original value of the attribute without using its accessor method. Another way is to provide an alias for the original attribute method before overriding it. If you have not overridden the original attribute accessor, simply remove the @ character in front of the attribute name to fetch the attribute value using the original accessor method.
When calling the attributes method of the model/form classes, use strings to refer to the attribute names, not symbols as you might have done with Virtus or Rectify::Form. Change all model.attributes[:attr_name] method calls to model.attributes["attr_name"].
When calling model.attributes.slice(...), you also need to use strings to refer to the attribute keys. Change all instances of model.attributes.slice(:attr1, :attr2) to model.attributes.slice("attr1", "attr2")
If you had overridden any of the Rectify::Form methods within your form classes, remove those overrides. For example, you might have overridden the form_attributes_valid? method which no longer does anything. Instead, define a custom validation in order to add extra validations to your forms.
Very rarely, when defining a an attribute of type Rails::Engine, you need to change attribute :attr_name, Rails::Engine to attribute :attr_name, Rails::Engine, **{}. This is because we want to preserve the method signature against ActiveModel::Attributes for the attribute class method intead of the legacy Virtus.model. There is a limitation in the Ruby language that if the method has default values for the previous arguments and defines keyword arguments, the last argument will always receive a respond_to?(:to_hash) call to it which doesn't work for Rails::Engine (you can try it out in the Rails console by calling Rails::Engine.respond_to?(:to_hash)).
Test all your form and command classes thoroughly to notice any differences between the two implementations. The new layer is a bit more "robust" with some of the type castings, so some things may break during the migration in case you have relied on some of the oversights within Virtus.

5.4. `Rectify::Presenter` deprecated

PR #8758 is deprecating the implementation of Rectify::Presenter in favour of SimpleDelegator

5.5. Searchlight removal

The searchlight gem has been removed in favor of Ransack as of #8748 in order to standardize all searches within Decidim around a single way of performing searches. Ransack was selected as the preferred search backend because it is better maintained and has a larger community of developers around it compared to Searchlight.

Ransack provides a search API that produces the search queries semi-automatically against the available database columns and ActiveRecord scopes made available for the Ransack searches while Searchlight used to require to write all the search logic manually in the search classes. Due to the inner workings of the Ransack gem and for consistency reasons, the following changes have been made for the search filtering:

For search scopes that are doing more than matching against a specific column in the database or require special programming logic during the searches, there is a new scope convention introduced with the with_* and with_any_* scope names. The with_* convention should be used when providing a search scope that searches against one key, such as with_category(1) and the with_any_* convention should be used when providing a search scope that searches against one or multiple keys, such as with_any_category(1, 2, 3).
- An example of such scope is with_any_category provided by the HasCategory concern which searches against the provided category IDs or any sub-category of those category IDs. You can find all the introduced (or changed) scopes by searching for scope :with_ within the Decidim codebase.
- With Searchlight, these search parameters were provided e.g. as category_id which was then used to perform the explained search query manually in the ResourceSearch class which is now used for a different purpose. As the search now happens through Ransack and the ActiveRecord scopes, these parameters have been renamed to better explain what they do. With Ransack, matching e.g. against the category_id_eq key would mean that the search is done against this specific column in the record's database table and only searching for the provided search input (and not e.g. the parent categories in the category case).
The origin scopes provided by Decidim::Authorable and Decidim::Coauthorable have been renamed with the with_ prefix as explained above.
All the filtering key changes have been reflected to the participant filtering views (_filters.html.erb in most modules) as well as the controller methods default_filter_params where applicable.
The default_filter_params method within the participant-facing controllers now defines all the parameters that are allowed in the search queries and only these parameters are passed to the Ransack search. This limitation is made in order to protect the participant views from providing more searching options through the URL parameters than they are supposed to provide. In the past, the Searchlight::Search classes took care of utilizing only the allowed parameters but Ransacker does not have any middle-layer that would do the same, which is why the limitation is done at the controller side.
The search_collection method now defines the base collection used for the searches within the filtering controllers. In previous versions, there used to be a method that defined a search_klass method that defined the Searchlight::Search class to be used as the basis for the search. Now, the search_collection defines the base collection instead against which the Ransack search is run.

3rd party developers that have developed their own modules or customizations for the core controllers or filtering views, should revisit their customizations and make sure they reflect these changes made for the controllers or filtering views. It is suggested to remove the customizations related to the filtering views/controllers and re-do from scratch what needs to be customized in order to ensure full compatibility with the changed filtering APIs. In case you had created your own Searchlight::Search (or ResourceSearch) classes, you should scrap those and start over using Ransack.

More information on using Ransack can be found from the Ransack documentation. You can find examples for filtering in the core filtering views and controllers.

Related changes include:

decidim-core: The Decidim::ActivitySearch class has been rewritten as Decidim::PublicActivities which is now a Rectify::Query class instead of Searchlight::Search class due to the removal of Searchlight at #8748.
decidim-core: The Decidim::ResourceSearch class now inherits from Ransack::Search instead of Searchlight::Search as of #8748. The new ResourceSearch class provides extra search functionality for contextual searches that require context information in addition to the search parameters, such as current user or current component. It has barely anything to do with the ResourceSearch class in the previous versions which contained much more logic. Please review all your search classes that were inheriting from this class. You should migrate your search filtering to Ransack.
decidim-debates, decidim-initiatives, decidim-meetings: The resource search classes Decidim::Debates::DebateSearch, Decidim::Intitatives::InitiativeSearch and Decidim::Meetings::MeetingSearch are rewritten for the Ransack searches due to Searchlight removal at #8748. The role of these classes is now to pass contextual information to the searches, such as the current user. All other search filtering should happen directly through Ransack.
decidim-meetings: The visible_meetings_for scope for the Meeting model has been renamed to visible_for in #8748 for consistency.
decidim-core: The official_origin, participants_origin, user_group_origin and meeting_origin scopes for the Decidim::Authorable and Decidim::Coauthorable concerns have been changed to with_official_origin, with_participants_origin, with_user_group_origin and with_meeting_origin respectively in #8748 for consistency. See the Searchlight removal change notes for reasoning.
decidim-core: Nicknames are now differents case insensitively, a rake task has been created to check every nickname and modify them if some are similar (Launch it with "bundle exec rake decidim:upgrade:fix_nickname_uniqueness"). Routing and mentions has been made case insensitive for every tab in profiles.

Added

decidim-core: Implement service workers and custom offline fallback page #8594
decidim-core: Add emojis to Conversations #8735
decidim-budgets, decidim-core: Add reminders for pending orders in budgets #8621
decidim-core: Add favicon pwa uploader and icons in manifest #8645
decidim-core: Allow users to be searched by nickname #8663
decidim-core: Add items to set a splash screen #8649
decidim-core: Add VAPID keys' generator for webpush notifications #8738
decidim-core: Add anchors on the homepage #8756
decidim-admin, decidim-assemblies, decidim-participatory processes: Add a privacy warning on non-transparent private spaces #8753
decidim-core: Show the Add2HomeScreen option in compatible browsers #8736
decidim-assemblies: Allow assembly admins administer children assemblies #8773
decidim-core: Dynamic attachment uploads #8681
decidim-participatory processes: Create process types to allow filtering Processes by them #8583
decidim-core: Accessible character counter for screen readers #9009
decidim-budgets, decidim-core: Show users own voting activity #8914
decidim-core: Add autocomplete attribute to Devise fields #9038
decidim-core: Allow admins to disable email notifications for reported users #9072
decidim-meetings: Add reminders for publishing reports to meeting authors #8757
decidim-meetings: Export calendar improvements #9035
decidim-core: Remove all the private participants from a participatory space #8866
decidim-core: Performance: replace moment by dayjs #9161
decidim-assemblies, decidim-conferences, decidim-core, decidim-meetings, decidim-participatory processes: Homepage optimization: tune images' caches and query includes #9145
decidim-accountability, decidim-assemblies, decidim-conferences, decidim-core, decidim-elections, decidim-meetings, decidim-proposals: Cache highlighted resources for components cells #9143
decidim-core: Can resend and cancel email confirmation #8996
decidim-core: Performance optimization: load JavaScript at page's bottom #9156
decidim-meetings: Configure online meetings embedded services with ENV vars #9219
decidim-elections: Add an option to hide the "Can I vote?" page #9191
decidim-core: Add autocomplete in user account #9217
decidim-budgets: Bulk actions for budgeting projects in admin panel #8986
decidim-comments: Load comments with ajax #9144
decidim-admin, decidim-participatory processes: Add admin log when importing, exporting and duplicating a process #9244
decidim-core: Mail notifications digest #8833
decidim-core: Send push notifications to client #8774
decidim-admin, decidim-core: Add admin log when updating component or its permissions #9270
decidim-admin, decidim-core: Add admin log when creating, updating or deleting attachment collections #9276
decidim-initiatives: Add admin log when creating, updating or deleting initiative types #9310
decidim-admin: Add admin log when creating, updating or deleting scope types #9312
decidim-accountability: Add admin log when creating, updating or deleting accountability's status #9320
decidim-admin, decidim-assemblies: Add admin log when duplicating, exporting or importing assemblies #9338
decidim-admin: Add admin log when creating, updating or deleting area types #9316
decidim-accountability, decidim-admin: Add admin log when creating, updating or deleting accountability's timeline entries #9321
decidim-admin, decidim-core: Add admin log when creating, updating or deleting attachments #9282
decidim-core: Group creator can leave group #9315
decidim-meetings: Short URLs to fix long export calendar URLs #9383
decidim-core: Accept and reject cookies #9271
decidim-admin: Add admin log when creating, updating or deleting categories #9317
decidim-admin: Add admin log when updating external domains or help sections #9339
decidim-templates: Add admin log when creating, deleting, duplicating and updating templates #9363
decidim-forms: Add admin log when updating survey questionnaire #9385
decidim-meetings: Add admin log when updating the meeting questionnaire #9273
decidim-admin, decidim-core: Add admin log when exporting a component #9390
decidim-blogs: Add admin log when creating, updating and deleting blog posts #9386
decidim-comments, decidim-initiatives: Add configuration option for initiative type to deactivate comments #9318
decidim-initiatives: Add order setting to initiatives #9377
decidim-api, decidim-blogs: Add official blog posts #9429
decidim-core: External link improvements #9402
decidim-admin, decidim-core: Strong passwords for admins #9347
decidim-budgets: Add geocoding to budgets projects #9280

Changed

decidim-admin: Change default sort order on admin moderations #8667
decidim-debates, decidim-meetings, decidim-proposals: Replace 'citizens' terminology with 'participants' #8697
decidim-core, decidim-elections, decidim-initiatives, decidim-proposals, decidim-system, decidim-verifications: Change to a inclusive language: replace he/she/his/her with they/their #8684
decidim-generators: Make Decidim fully configurable via ENV vars #8725
decidim-core: Replace Decidim mentions in UI with 'the platform' #8827
decidim-admin: Clarify the locales on the list of admins #8838
decidim-core: Display friendly report reason and details in moderation emails #8840
decidim-comments: Show hidden comments replies #8828
decidim-generators: Make Decidim fully configurable via ENV vars part II #8990
Reduce d3 bundle size #9034
decidim-elections: Add help text when verifying your vote #9190
decidim-accountability: Add timeline entry title in Accountability projects #9127
decidim-core: Rename data portability to download your data #9196
decidim-elections: Better wording when verifying an offline voter #9357
decidim-initiatives: Add signature collection period title in header #9314

Fixed

decidim-admin, decidim-assemblies, decidim-budgets, decidim-conferences, decidim-consultations, decidim-core, decidim-elections, decidim-forms, decidim-initiatives, decidim-meetings, decidim-participatory processes, decidim-proposals: Fix deprecation warnings from rails 6.1 update (#8610) #8610
decidim-core: Remove 'required field' explanation from conversation textearea #8701
decidim-core: Fix some non-localized user emails #8719
decidim-meetings: Fix for preview unpublished meetings by admin user #8713
decidim-participatory processes: Fix order by weight in processes groups' processes content block #8734
decidim-admin, decidim-core: Change scope picker button to disabled when necessary #8733
decidim-comments: Add emojis when user edits a comment #8731
decidim-admin, decidim-meetings, decidim-proposals: Fix reporting a proposal when author is a meeting #8737
decidim-core: Don't display blocked users in mentions #8687
decidim-core: Properly mark sender and recipient in Conversation #8742
decidim-proposals: Fix geocoding NaN values #8762
decidim-core: Add "nofollow noopener" rel to the profile personal URL #8779
decidim-generators: Add .keep file to empty directory to include on git committing #8786
decidim-core: Fix reminder manifest, replace virtus with attribute object #8785
decidim-core: Fix avatar upload validation errors are displayed twice #8794
decidim-meetings: Fix displaying hidden meetings in homepage's "upcoming meetings" content block #8809
decidim-meetings, decidim-participatory processes: Fix displaying hidden meetings in processes group's "upcoming meetings" content block #8818
decidim-participatory processes: Fix characters not encoded in highlighted participatory process group title #8820
decidim-initiatives: Fix scope validation on initiative's creation #8755
decidim-generators: Add natively a .keep file to empty directory to include on git committing #8830
decidim-core, decidim-meetings, decidim-proposals: Fix displaying hidden related resources #8812
decidim-consultations, decidim-core, decidim-elections: Fix report moderation for all the spaces #8813
decidim-meetings, decidim-participatory processes: Fix displaying hidden meetings in show process page #8823
decidim-accountability: Fix accountability text search #8831
decidim-assemblies, decidim-conferences, decidim-consultations, decidim-proposals: Fix notifications when there is a note proposal in other spaces than processes #8822
decidim-core: Fix activity cell disappearing author images #8826
decidim-accountability: Fix accountability categories' colors #8844
decidim-meetings: Fix displaying hidden resources in global search #8811
decidim-assemblies: Fix assemblies title when there are unpublished children #8855
decidim-debates: Remove actions from debates' cards #8854
decidim-core: Fix cache_hash generation in AuthorCell #8852
decidim-proposals: Fix answered proposals display #8851
decidim-comments: Show hidden comments replies #8828
decidim-meetings: Fix meetings iframe embed code #8875
decidim-core: Fix the way the results are displayed in search page #8873
decidim-meetings: Fix display warning message in meetings #8872
decidim-core: Translate the remove recipient button correctly for new conversation #8894
decidim-core: Fix diff mode selector accessibility #8879
decidim-core: Add a unique title to the new group page #8882
decidim-core: Fix illogical heading order for the versions list #8880
decidim-core: Improve logo link aria label #8878
decidim-core: Add the "choose language" string in all locales to the language chooser #8883
decidim-core: Change the correct element type for the change password button #8890
decidim-budgets: Fix duplicate ID on the budgets index page #8908
decidim-core: Fix accessibility issue related to the documents collection toggle #8907
decidim-participatory processes: Fix heading order in the process steps page #8906
decidim-elections: Fix illogical heading orders in the elections component #8905
decidim-forms: Fix the form questionnaires heading orders #8903
decidim-budgets: Fix the illogical heading orders with the budget component views #8904
decidim-core: Fix the component index views heading order for the subtitle change #8902
decidim-comments: Fix comments heading order #8876
decidim-proposals: Fix display withdraw warning message in proposals #8870
decidim-core: Make the button link font weight consistent with normal links #8891
decidim-proposals: Fix illogical heading order for a single proposal #8877
decidim-core: Fix the HTML diff mode accessibility #8915
decidim-assemblies, decidim-core, decidim-initiatives, decidim-participatory processes: Change the participatory space header's subtitle element to a <p> to fix heading order issues #8901
decidim-comments: Fix Foundation Abide errors for Rails remote (AJAX) forms #8889
decidim-core: Fix logical heading order for the endorsers list #8892
decidim-comments, decidim-core: Fix emoji picker hiding Foundation Abide form errors #8886
decidim-comments: Fix budget hard dependency and caching flag issues in comments #8899
decidim-core: Fix diff mode selector roles and tabindexes #8912
decidim-consultations: Fix heading order in the consultation question page #8920
decidim-meetings: Fix the meetings export to also include unpublished meetings #8874
decidim-initiatives: Fix initiatives signatures issues #8448
decidim-initiatives: Fix link to docs in initiatives admin #8921
decidim-core: Fix translatable presence validator for hyphenated locales #8795
decidim-participatory processes: Fix processes creation form with stats, metrics and announcements #8925
decidim-system, decidim-verifications: Fix verification report with multitenants: notify it only to admins of that organization #8929
decidim-core: Fix officialized user event missing translations #8927
decidim-verifications: Fix email for verification conflict with managed users #8926
decidim-core: Fix profile notifications #8943
decidim-elections: Add a subtitle to votings page #8919
decidim-assemblies, decidim-participatory processes: Add a subtitle to assemblies and processes pages #8918
decidim-meetings: Truncate the meetings card description #8954
decidim-proposals: Fix proposals' cards with big images #8952
decidim-core: Add missing reveal__title classes #8958
decidim-core: Fix multiple mentions correct focus on element (recipient) removal #8959
decidim-core: Add missing 'Locale' string in i18n in account page #8969
decidim-core: Fix main navigation aria-current attribute #8968
decidim-core: Fix mobile nav keyboard focus #8962
decidim-core: Remove the label from the dropdown menu opener #8972
decidim-blogs, decidim-core, decidim-debates, decidim-proposals: Fix for endorsed_by with other user group's member #8967
decidim-proposals: Fix footer actions caching on proposals' card #8987
decidim-initiatives: Show signatures in answered initiatives #8747
decidim-api, decidim-meetings, decidim-proposals: Fix API when meetings have proposal linking disabled #8971
decidim-meetings, decidim-proposals: Fix proposals seeds after reordering of modules loading #8993
decidim-core: Show character counter when replying to message #8922
decidim-core: Fix character counter with emoji picker close to maximum characters #8916
decidim-budgets, decidim-core, decidim-debates, decidim-meetings, decidim-proposals: Fix cache URLs on cards #8988
decidim-core: Fix submit form with enter when there are attachments #9019
decidim-core: Fix Devise flash messages translation #9025
decidim-admin: Add missing 'Locale' string in i18n in selective newsletter #9037
decidim-core: Disable new conversation next button when no users selected #9024
decidim-core: Fix social share button sharing (Can't find variable: SocialShareButton console error) #9041
decidim-meetings: Use published meetings scope on processes landing and proposal's form #9023
decidim-core: Require omniauth/rails_csrf_protection explicitly #9053
decidim-core: Fix session cookie SameSite policy #9051
decidim-conferences: Fix conference partner logo is not optional on create #9045
decidim-comments, decidim-core, decidim-proposals: Add noreferrer and ugc to links #9047
decidim-proposals: Create admin log records when proposals are imported from a file #9006
decidim-meetings: Remove presenters in the meetings admin backoffice #9052
decidim-meetings: Fix submit in meetings admin form #9061
decidim-core, decidim-proposals: Fix amendable events title #9050
decidim-assemblies, decidim-conferences, decidim-consultations, decidim-core, decidim-initiatives, decidim-participatory processes: Fix Twitter hashtag search when it starts with a number #9039
decidim-initiatives: Remove 'edit link' in topbar for initiative's authors #8997
decidim-comments, decidim-core, decidim-meetings: Fix timeout in comment view and during meetings #9070
decidim-core: Dont add external link container inside editor #9095
decidim-core, decidim-dev: VAPID key generator availabe in core #9107
decidim-assemblies: Allow assembly admins to manage components in child assemblies #8955
decidim-core: Add base URI to meta image URLs #9125
decidim-elections: Clarify message to user when checking census #9112
decidim-elections: Fix attachments when called from Cells #9136
decidim-participatory processes: Fix processes count in processes group title cell #9087
decidim-meetings: Do not send upcoming meeting notification for hidden or withdrawn meetings #9134
decidim-elections: Improve wording when casting your vote #9098
decidim-core: Prevent race condition between prevenTimeout and show modal #9092
decidim-generators: Fix app generator when creating a development_app #9142
decidim-meetings: Fix meetings minutes migration #9148
decidim-core: Enforce password validation rules on 'Forgot your password?' form #9090
decidim-proposals: Add 'not answered' as a possible answer in proposals #9021
decidim-budgets: Fix vote reminder email urls #9152
decidim-meetings: Move modal to body and fix condition #9158
decidim-assemblies, decidim-proposals: Fix absolute urls on 'create assembly member' and proposals' 'collaborative drafts' events #9146
decidim-accountability, decidim-consultations: Fix components navbar in consultations mobile #9155
decidim-core: Show only current organization in verification conflicts with multitenants #9033
decidim-elections: Send email to newly added trustees #9100
decidim-meetings: Fix registration type field highlighted in admin meeting creation form #9160
decidim-core: Fix displaying blocked users in account follow pages #9164
decidim-core: Separate validation messages for image dimensions and size #9165
decidim-core: Fix notifications where resources are missing #9183
decidim-core: Fix encoding organization name in A2HS #9184
decidim-surveys: Fix contradictory form errors on survey form #9186
decidim-admin, decidim-elections: Fix newsletters and Decidim Votings #9188
decidim-meetings: Fix typo in meeting's copy calendar string #9193
decidim-initiatives: Fix typo and improves copy in initiatives admin #9194
decidim-system: Enforce password validation rules on system admins #9207
decidim-initiatives: Add edit and delete actions in InitiativeType admin table #9151
decidim-surveys: Clarify unregistered answers on surveys behavior #9205
decidim-elections: Fix voting with single election #9097
decidim-admin: Fix invalid translation call #9218
decidim-initiatives: Fix initiative print link, margin, and organization logo #9162
decidim-elections: Fix election label translations #9102
decidim-elections: Remove show more button on elections #9103
decidim-surveys: Fix survey activity log entries #9173
decidim-core: Fix dynamic validation and title change for titled attachments #9175
decidim-budgets: Remove beforeunload confirmation panel from the budgets voting #9224
decidim-core: Fix nicknames uniqueness with different cases #8792
decidim-core: Fix Leaflet trying to load "infinite amount of tiles" #9233
decidim-verifications: Allow to renew expired verifications (if renewable) #8192
decidim-elections: Correctly show trustees and votings menu #9192
decidim-core: Fix hashtag parsing on URLs with fragments #9221
decidim-comments, decidim-core: Add missing events locales #9199
decidim-conferences: Make conference's partners logos always mandatory #9214
decidim-admin: Fix margin around warning message in colour settings #9278
decidim-comments, decidim-core: Don't show deleted resources in last activities #9293
decidim-elections: Hide more information link when there's no description on an election #9099
decidim-admin: Fix local storage protocol options for uploaders #9285
decidim-admin, decidim-assemblies, decidim-budgets, decidim-core, decidim-elections, decidim-meetings, decidim-pages, decidim-proposals: Apply crowdin feedback #9301
decidim-participatory processes: Update file validation for process import #9236
decidim-core: Fix user interests #9225
decidim-elections: Add error message when adding question and election has started #9189
decidim-elections: Fix HTML safe content in election voting #9210
decidim-elections: Fix ActionLog when a ballot style is deleted #9355
decidim-elections: Enforce YYYYmmdd format in birthdate when uploading census #9354
decidim-elections: Only show that the code can be requested via SMS if its true #9353
decidim-meetings: Short URLs to fix long export calendar URLs #9383
decidim-core: Fix for internal links not displaying on page title #9228
decidim-elections: Fix regular expression on census check #9352
decidim-budgets, decidim-proposals: Add missing translation keys proposals import and proposals picker #9359
decidim-consultations: Return 404 when there isn't a consultation #9374
decidim-consultations: Return 404 when there isn't a question #9375
decidim-elections: Return 404 when there isn't a voting in elections_log #9376
decidim-proposals: Fix proposals creation with Participatory Texts #9381
decidim-forms, decidim-meetings, decidim-surveys: Fix rollback questionnaire answer when file is invalid #9361
decidim-core: Create tempfile when Active Storage service doesn't implement path_for method #9362
decidim-core: Fix / Expose createMapController properly to let overriding #9425
decidim-elections: Capture unhandled errors from JS promises and inform the user #9430
decidim-elections: Make sure component is published when starting an election #9358
decidim-elections: Remove description from questions in elections #9401
decidim-initiatives: Return 404 when there isn't an initiative #9427
decidim-core, decidim-meetings, decidim-proposals: Fix email subject when resource title has special characters #9392
decidim-core, decidim-generators: Fix service worker cache in development environment #9424
decidim-core: Prevent users to validate nicknames/emails taken by user groups (#9452) #9452
decidim-elections: Fix hardcoded hour in election dashboard (#9465) #9465

Removed

decidim-meetings: Clean meetings form with registrations #8500
decidim-core: Remove 'required field' explanation from conversation textearea #8701
decidim-admin, decidim-assemblies, decidim-conferences, decidim-participatory processes: Remove category description #8617
decidim-core: The rectify gem has been removed from the stack as of #9101. If you are a library developer, replace any Rectify::Query with Decidim::Query, replace any Rectify::Command with Decidim::Command. Replace any Rectify::Presenter with SimpleDelegator (Already deprecated in #8758)
decidim-core: The searchlight gem has been removed in favor of Ransach as of #8748. Please review the Changed notes regarding the required changes. Please review all your search classes that were inheriting from Searchlight::Search. You should migrate your search filtering to Ransack.
decidim-core: The search_params and default_search_params methods within the participant-facing controllers are now removed in favor of using filter_params and default_filter_params as of #8748. The duplicate methods were redundant after the Ransack migration which is why they were removed. In case you had overridden these methods in your controllers, they no longer do anything. In case you were calling these methods before, you will now receive a NoMethodError because they are removed. Please use filter_params and default_filter_params instead.
decidim-accountability, decidim-assemblies, decidim-budgets, decidim-consultations, decidim-core, decidim-elections, decidim-initiatives, decidim-participatory_processes, decidim-proposals, decidim-sortitions: The search service classes inheriting from Searchlight::Search that are no longer necessary due to the Ransack migration have been removed in all modules as of #8748. This includes Decidim::Accountability::ResultSearch, Decidim::Assemblies::AssemblySearch, Decidim::Budgets::ProjectSearch, Decidim::Consultations::ConsultationSearch, Decidim::HomeActivitySearch, Decidim::ParticipatorySpaceSearch, Decidim::Elections::ElectionsSearch, Decidim::Votings::VotingSearch, Decidim::Meetings::Directory::MeetingSearch, Decidim::ParticipatoryProcesses::ParticipatoryProcessesSearch, Decidim::Proposals::CollaborativeDraftSearch, Decidim::Proposals::ProposalSearch and Decidim::Sortitions::SortitionSearch.

Developer improvements

Replace graphql-docs npm package with gem #8631
Migrate from Virtus to ActiveModel::Attributes (and get rid of Rectify::Form) #8669
Replace various autocomplete solutions #8524
Fix webpacker generator for modules #8715
Add parallel_tests for test suite in CI #8678
Replace searchlight with ransack which is already a core dependency #8748
Update docs in Webpacker app migration #8881
Move VAPID keys generators to core #8923
Update docs in Webpacker app migration (part II) #8911
Fix Devise configs that depend on Decidim configs #9014
Update rails to 6.1 #8411
Add useful error for custom-authorizations development #8834
Prevent Faker Address country_code from raising RetryLimitExceeded #9036
Fix Spring errors with Rails 6.1 #9032
Disable webpack-dev-server overlay #9082
Make frontend development 10-12x faster (compile SCSS through sass-embedded) #9081
Fix webpacker configuration when sass-loader is not available #9149
Remove Rectify Gem dependency #9101
Fix webpacker thread safety #9203
Fix budget amounts in project seeds #9174
Update ruby to 3.0 #8452
Remove unused helper method from UserInterestsController #9237
Light refactor for fetching admins #9287
Fix local storage protocol options for uploaders #9285
Add empty database (aka no seed) installation manual #9349
Bump letter_opener_web from 1.3 to 2.0 #9395
Change docs to use decidim_system:create_admin command #9372
Add documentation for logic customization #9325
External link improvements #9402
Improve asset routing logic #9403
Remove the threads limit from the Capybara Puma server #9422

Previous versions

Please check release/0.26-stable for previous changes.