Commit Graph

Select branches

Hide Pull Requests

copilot/fix-lint-job-failure

dependabot/bundler/debug-1.11.1

dependabot/bundler/importmap-rails-f255e55

dependabot/bundler/sentry-ruby-7.1.0

dependabot/bundler/surfguard-71cac69

dependabot/bundler/turbo-rails-37530c0

dependabot/github_actions/github-actions-e631a66382

faster-once-backups

harden-active-storage-write-auth

main

release-hardening-v2

security/ssrf-ipv6-encapsulation-ranges

security/xss-campaign-campfire-csp-report-only

security/xss-campaign-custom-styles

solid-trifecta

trix-from-gem

#1

#100

#100/merge

#102

#104

#104/merge

#108

#110

#111

#112

#115

#115/merge

#116

#117

#118

#119

#12

#120

#121

#122

#124

#125

#127

#137

#137/merge

#139

#140

#144

#146

#147

#15

#151

#151/merge

#152

#153

#154

#156

#157

#159

#160

#164

#164/merge

#165

#173

#175

#177

#178

#179

#179/merge

#18

#180

#180/merge

#185

#187

#187/merge

#19

#190

#192

#196

#197

#198

#2

#20

#201

#201/merge

#205

#205/merge

#206

#208

#209

#21

#210

#210/merge

#211

#212

#212/merge

#213

#213/merge

#215

#216

#217

#218

#219

#220

#221

#222

#223

#224

#225

#226

#228

#228/merge

#229

#230

#231

#232

#233

#233/merge

#234

#234/merge

#235

#235/merge

#237

#238

#239

#240

#240/merge

#241

#242

#243

#247

#247/merge

#248

#249

#25

#250

#251

#252

#253

#254

#255

#256

#256/merge

#257

#258

#259

#26

#260

#260/merge

#262

#264

#264/merge

#265

#266

#267

#268

#269

#270

#271

#273

#273/merge

#274

#275

#276

#277

#279

#28

#280

#281

#282

#283

#284

#285

#287

#288

#289

#29

#290

#290/merge

#291

#292

#293

#294

#295

#296

#297

#298

#299

#300

#301

#302

#303

#304

#305

#305/merge

#306

#31

#310

#311

#312

#314

#315

#316

#317

#318

#319

#320

#320/merge

#321

#322

#323

#324

#325

#326

#327

#328

#329

#33

#330

#331

#332

#332/merge

#334

#335

#336

#337

#338

#339

#340

#340/merge

#341

#342

#343

#344

#345

#345/merge

#346

#346/merge

#347

#347/merge

#348

#349

#350

#350/merge

#351

#352

#352/merge

#353

#353/merge

#354

#354/merge

#355

#355/merge

#356

#356/merge

#357

#357/merge

#358

#358/merge

#359

#359/merge

#36

#360

#360/merge

#361

#361/merge

#362

#362/merge

#37

#38

#39

#41

#48

#49

#5

#51

#52

#52/merge

#53

#54

#55

#58

#58/merge

#68

#7

#79

#82

#83

#84

#87

#9

#90

#91

#95

#96

#97

v1.3.0

v1.4.0

v1.4.1

v1.4.2

v1.4.3

v1.4.4

v1.4.5

v1.4.6

v1.4.7

v1.4.8

v1.4.9

v1.5.0

v1.5.1

v1.5.2

Mono Color

• 462eff10df Reset former members' connections and grant open rooms in one statement Marcello CostagliolaandClaude Opus 5.5 2026-10-06 14:45:18 +02:00
• 414ff3376e Put the whole unfurl, lookups included, under one deadline Marcello CostagliolaandClaude Opus 5.5 2026-10-06 14:03:26 +02:00
• 7b16014f01 Delete a room's messages in a job, one transaction each Marcello CostagliolaandClaude Opus 5.5 2026-10-05 20:41:55 +02:00
• a196a93ed2 Bound how long link unfurling can hold a request Marcello CostagliolaandClaude Opus 5.5 2026-10-05 03:06:26 +02:00
• 7e5dd695c9 Merge upstream main into reuse-pinned-push-connections Marcello CostagliolaandClaude Opus 5.5 2026-10-06 13:33:38 +02:00
• 8bc6606bcb build(deps-dev): bump debug from 1.11.0 to 1.11.1 dependabot/bundler/debug-1.11.1 dependabot[bot] 2026-10-06 11:06:53 +00:00
• 32b4144b52 Merge pull request #314 from rubys/update-rails-main Rosa Gutierrez 2026-10-06 13:03:59 +02:00
• d2241f16db Merge remote-tracking branch 'upstream/main' into cursor/split-sidebar-membership-queries-8545 Cursor AgentandThomas Klemm 2026-10-05 18:30:41 +00:00
• ff1a742f27 Tell a failed reconnect from a dead idle connection Marcello CostagliolaandClaude Opus 5.5 2026-10-05 18:51:20 +02:00
• 53520d4444 Reuse push connections pinned to the address the guard just approved Marcello CostagliolaandClaude Opus 5.5 2026-10-05 17:59:57 +02:00
• e0c0a1dc79 Check templates with bin/rails herb:check in CI Sam RubyandClaude Opus 5.5 2026-10-05 07:31:49 -04:00
• 9d75c8b7eb Update Rails to main Sam Ruby 2026-10-05 04:46:38 -04:00
• 1cb2f69786 Compile the PWA help and account settings through Herb Sam Ruby 2026-10-04 20:23:44 -04:00
• e07da58668 Rewrite the search entry when the attachment is replaced too Marcello CostagliolaandClaude Opus 5.5 2026-10-05 17:34:06 +02:00
• 20275e1fa7 Render the boosts a message has preloaded instead of querying them again Marcello CostagliolaandClaude Opus 5.5 2026-10-05 17:17:29 +02:00
• d2155e85a0 Merge pull request #306 from namespaceMarcello/post-webhook-attachments-only-on-success Stanko Krtalić 2026-10-05 17:13:57 +02:00
• 5c72c35775 Merge pull request #291 from basecamp/dependabot/bundler/selenium-webdriver-4.49.0 Stanko Krtalić 2026-10-05 17:10:16 +02:00
• 78a84a6ab7 Rewrite a message's search entry only when its body is saved Marcello CostagliolaandClaude Opus 5.5 2026-10-05 17:09:46 +02:00
• 21c49b3ccc Merge pull request #289 from basecamp/dependabot/bundler/faker-3.8.0 Stanko Krtalić 2026-10-05 17:06:49 +02:00
• c09c464e9a Merge pull request #288 from basecamp/dependabot/github_actions/github-actions-e631a66382 Stanko Krtalić 2026-10-05 17:06:28 +02:00
• b39766c8d6 Merge pull request #287 from basecamp/dependabot/bundler/propshaft-dc979db Stanko Krtalić 2026-10-05 17:06:15 +02:00
• b67a0fb706 Merge pull request #285 from cattekin/test-performance Stanko Krtalić 2026-10-05 17:05:57 +02:00
• 4690de5057 Merge pull request #301 from rubys/fix-edge-install-icon-path Stanko Krtalić 2026-10-05 17:04:04 +02:00
• 77c5234cb6 Merge pull request #304 from namespaceMarcello/search-newest-matches-by-rowid Stanko Krtalić 2026-10-05 16:59:44 +02:00
• d485db6038 Count unread rooms for push badges once per batch Marcello CostagliolaandClaude Opus 5.5 2026-10-05 16:49:59 +02:00
• 77d4eb0d3a Merge branch 'main' into cursor/split-sidebar-membership-queries-8545 Thomas Klemm 2026-10-05 17:47:46 +03:00
• 2393f01ba2 Merge pull request #302 from rubys/fix-layout-stray-spans Stanko Krtalić 2026-10-05 16:46:27 +02:00
• d1f09b4276 Merge pull request #297 from namespaceMarcello/check-paging-without-counting Stanko Krtalić 2026-10-05 16:45:50 +02:00
• c761763c8c Cache boosts with their message instead of one by one Marcello CostagliolaandClaude Opus 5.5 2026-10-05 16:40:49 +02:00
• 259c06bea1 Remove trailing whitespace Stanko K.R. 2026-10-05 16:30:18 +02:00
• 02a3922595 Initial plan copilot/fix-lint-job-failure copilot-swe-agent[bot] 2026-10-05 14:25:10 +00:00
• 6913afa864 Merge branch 'main' into check-paging-without-counting Stanko Krtalić 2026-10-05 16:18:32 +02:00
• c73ea37e0c Merge pull request #300 from rubys/fix-autocomplete-json-accept Stanko Krtalić 2026-10-05 16:17:10 +02:00
• e0e31846c9 Merge pull request #299 from rubys/fix-boost-soft-keyboard-action Stanko Krtalić 2026-10-05 16:16:25 +02:00
• f2bdfde610 Merge pull request #298 from namespaceMarcello/search-operator-words Stanko Krtalić 2026-10-05 16:15:23 +02:00
• a740581f20 Keep an unread notice older than the latest read from marking the room Marcello CostagliolaandClaude Opus 5.5 2026-10-05 16:11:37 +02:00
• 288ee9dc5c Merge main, now with the room and creation time index from #295 Marcello CostagliolaandClaude Opus 5.5 2026-10-05 15:57:15 +02:00
• acef0c71cf Merge pull request #295 from namespaceMarcello/messages-room-created-at-index Stanko Krtalić 2026-10-05 15:53:19 +02:00
• ce4c05da81 Apply the same user filter to every page of account members Marcello CostagliolaandClaude Opus 5.5 2026-10-05 15:19:21 +02:00
• f864403c2c List one page of account members at a time Marcello CostagliolaandClaude Opus 5.5 2026-10-05 14:56:22 +02:00
• d6b3dfd64d Compose sidebar lists from existing room scopes Cursor AgentandThomas Klemm 2026-10-05 12:48:29 +00:00
• 88fbeedc75 Avoid a double join alias when loading shared sidebar rooms Cursor AgentandThomas Klemm 2026-10-05 12:36:42 +00:00
• fbeb1ae993 Query sidebar directs and shared rooms separately Cursor AgentandThomas Klemm 2026-10-05 12:35:35 +00:00
• ad541b1c6a Drop the query plan test Marcello CostagliolaandClaude Opus 5.5 2026-10-05 13:59:49 +02:00
• 345e63718f Update README with latest Campfire benchmark comparison (#315) David Heinemeier Hansson 2026-10-05 07:52:23 -04:00
• e12651240c Drop the query plan test Marcello CostagliolaandClaude Opus 5.5 2026-10-05 13:51:56 +02:00
• ca626ea7e2 Find the messages a refresh replaces through an index Marcello CostagliolaandClaude Opus 5.5 2026-10-05 04:48:53 +02:00
• e6de359872 Post a message whose attachment can't be previewed instead of failing Marcello CostagliolaandClaude Opus 5.5 2026-10-05 04:12:44 +02:00
• 33c4b726e7 Find a direct room with one query instead of checking every one Marcello CostagliolaandClaude Opus 5.5 2026-10-05 04:06:17 +02:00
• 6288a10633 Post a webhook reply as an attachment only when the bot answered 200 Marcello CostagliolaandClaude Opus 5.5 2026-10-05 02:58:11 +02:00
• edaab3e5d1 Read the newest search matches off the index instead of sorting them all Marcello CostagliolaandClaude Opus 5.5 2026-10-05 02:50:48 +02:00
• 244e77241b Compile the PWA help and account settings through Herb Sam RubyandClaude Opus 5.5 2026-10-04 20:23:44 -04:00
• 506c2771fe Skip the unread notice for members who have caught up Marcello CostagliolaandClaude Opus 5.5 2026-10-05 02:08:01 +02:00
• 955d799d11 Find the Edge install icon under images/external Sam RubyandClaude Opus 5.5 2026-10-04 20:06:53 -04:00
• 1d39b8cbe1 Drop two unmatched closing spans from the flash Sam RubyandClaude Opus 5.5 2026-10-04 20:06:53 -04:00
• b8be941b99 Ask for JSON when autocompleting people to ping Sam RubyandClaude Opus 5.5 2026-10-04 20:06:53 -04:00
• c057484dfb Wire the inline boost link to the soft keyboard Sam RubyandClaude Opus 5.5 2026-10-04 20:06:53 -04:00
• 74bdbb0764 Keep the room_id index and date the migration in UTC Marcello CostagliolaandClaude Opus 5.5 2026-10-05 01:39:36 +02:00
• 3212a683ee Fan the unread room notice out from a job Marcello CostagliolaandClaude Opus 5.5 2026-10-05 01:17:59 +02:00
• 6cdcb459b9 Search for operator words instead of parsing them Marcello CostagliolaandClaude Opus 5.5 2026-10-05 01:08:53 +02:00
• cf0ba58d8d Check for a second page of messages without counting the room Marcello CostagliolaandClaude Opus 5.5 2026-10-05 01:03:39 +02:00
• 5cb4316133 Index messages by room and creation time Marcello CostagliolaandClaude Opus 5.5 2026-10-05 00:55:24 +02:00
• 254dd1d46f Add Django and Laravel benchmarks and label the baseline Rails (#294) David Heinemeier Hansson 2026-10-04 18:18:31 -04:00
• 6c7f8fa15f Document other Campfire implementations and benchmarks (#293) David Heinemeier Hansson 2026-10-04 14:10:38 -04:00
• 659f95748a Preload only uncached messages and reduce rendering overhead (#292) David Heinemeier Hansson 2026-10-04 12:36:36 -04:00
• 67b6df3847 build(deps-dev): bump selenium-webdriver from 4.35.0 to 4.49.0 dependabot[bot] 2026-10-02 19:36:16 +00:00
• 957c9da9c4 build(deps-dev): bump faker from 3.5.2 to 3.8.0 dependabot[bot] 2026-10-02 19:34:50 +00:00
• 862e128722 build(deps): bump ruby/setup-ruby dependabot[bot] 2026-10-02 19:34:48 +00:00
• 26c70b3254 build(deps): bump propshaft from e49a9de to dc979db dependabot[bot] 2026-10-02 19:34:42 +00:00
• ae149fca92 Hash fixture passwords at minimum bcrypt cost Edward Tippett 2026-09-22 23:05:28 +07:00
• 90b330024d Merge pull request #284 from basecamp/mention-menu-spacing v1.5.1 Stanko Krtalić 2026-09-26 13:03:34 +02:00
• e5cfffda67 Check the registry login before releasing Stanko K.R. 2026-09-26 11:16:03 +02:00
• 87ba7aa3cc Keep the message body list styles out of the mention menu Stanko K.R. 2026-09-26 11:16:03 +02:00
• 12249b9b3a Merge pull request #283 from basecamp/composer-drafts v1.5.0 Stanko Krtalić 2026-09-26 10:43:55 +02:00
• 5c5821a395 Keep an unsent message as a draft while switching rooms Stanko K.R. 2026-09-26 10:38:13 +02:00
• 8fa6138fb9 Merge pull request #254 from basecamp/dependabot/bundler/web-push-3.1.0 Stanko Krtalić 2026-09-26 10:28:20 +02:00
• beaf467a38 Merge pull request #257 from basecamp/dependabot/bundler/mocha-3.1.0 Stanko Krtalić 2026-09-26 10:27:58 +02:00
• 9a258bd1a0 Merge pull request #224 from basecamp/replace-trix-with-lexxy Stanko Krtalić 2026-09-26 10:27:29 +02:00
• f8e36e9761 Merge pull request #282 from basecamp/dependabot/bundler/rubyzip-3.4.0 Stanko Krtalić 2026-09-26 10:23:25 +02:00
• 83e7a7f4c9 Merge pull request #281 from basecamp/dependabot/github_actions/github-actions-f89073ee97 Stanko Krtalić 2026-09-26 10:23:12 +02:00
• eadbaab7d2 Merge pull request #262 from excid3/redis-url-env Stanko Krtalić 2026-09-26 10:22:53 +02:00
• b5d3543e64 Test that Trix-formatted messages render and survive editing Stanko K.R. 2026-09-26 10:21:40 +02:00
• 1694accbf8 Let tables through the message sanitizers Stanko K.R. 2026-09-26 10:04:38 +02:00
• 8bdff5ddc6 Run the link preview hardening tests against both stored forms Stanko K.R. 2026-09-26 09:51:05 +02:00
• 6acad0549d Rebuild every attachment before editing a message Stanko K.R. 2026-09-26 09:51:05 +02:00
• 6e7dd2fa0a build(deps-dev): bump rubyzip from 3.0.2 to 3.4.0 dependabot[bot] 2026-09-26 07:33:43 +00:00
• eab554aa4b Adapt the Lexxy composer to main's link preview hardening Stanko K.R. 2026-09-26 09:26:53 +02:00
• 1bb7ef7c17 Fix Codex's code review comments Stanko K.R. 2026-07-20 18:37:43 +02:00
• c38e77a897 Ensure backwards compatibility with Trix Stanko K.R. 2026-07-20 17:56:05 +02:00
• 9b1602d088 Polish Stanko K.R. 2026-07-20 15:35:13 +02:00
• 47bc5f5425 Replace Trix with Lexxy Stanko K.R. 2026-07-20 15:10:54 +02:00
• 07f2482970 build(deps): bump the github-actions group with 4 updates dependabot[bot] 2026-09-25 19:35:29 +00:00
• 91d294f4a0 Mint the tampered attachable sgid without extending a Room Sam RubyandClaude Opus 5.5 2026-09-23 07:45:57 -04:00
• 9ff6b4a381 Keep .claude out of the Docker build context (#266) Jeremy Daer 2026-09-22 14:09:33 -05:00
• e3b4cbc674 Bump surfguard to the published 0.2.0 (#271) Jeremy Daer 2026-09-22 14:09:24 -05:00
• b7da9c63f7 build(deps): bump zizmorcore/zizmor-action in the github-actions group (#277) dependabot[bot] 2026-09-22 14:09:10 -05:00
• ed0f9a5dba Merge pull request #279 from rubys/attachment-test-without-extend Rosa Gutierrez 2026-09-20 21:08:13 +02:00
• 0ed0af44ef Mint the tampered sgid without extending a Room Sam Ruby 2026-09-20 11:19:14 -04:00
• 9c8f4cd272 Keep the CSP nonce cookie off public cacheable responses security/xss-campaign-campfire-csp-report-only Jeremy Daer 2026-09-13 17:01:24 -07:00
• 977cbcd135 Merge pull request #276 from basecamp/card-7348960853-room-render-injection Rosa Gutierrez 2026-09-11 21:29:14 +02:00