merge decidim-app 0.27 develop branch

.dockerignore

@@ -1,6 +1,31 @@
-tmp
-public/uploads
 .circleci
 .bundle
 .ruby-version
+.tool-versions
+.overloads
 .git
+.gitignore
+.idea
+.github
+.rubocop*
+.erb-lint.yml
+.env-example
+.env
+.dockerignore
+Procfile
+tmp
+log
+docs
+node_modules
+public/uploads
+storage
+vendor
+public/packs-test
+deploy
+spec
+README.md
+Dockerfile
+docker-compose.prod.yml
+docker-compose.yml
+OVERLOADS.md
+Makefile

.env-example

@@ -1,3 +1,101 @@
+DECIDIM_UNCONFIRMED_ACCESS=
+DECIDIM_SESSION_TIMEOUT=
+ASSET_HOST=
 AWS_ACCESS_KEY_ID=
 AWS_SECRET_ACCESS_KEY=
 SECRET_KEY_BASE=
+GEOCODER_LOOKUP_API_KEY=
+SENTRY_DSN=
+HELP_SCOUT_BEACON_ID_MAIN=
+BACKUP_ENABLED=
+BACKUP_S3SYNC_ENABLED=
+BACKUP_S3SYNC_ACCESS_KEY=
+BACKUP_S3SYNC_SECRET_KEY=
+BACKUP_S3SYNC_BUCKET=
+BACKUP_S3RETENTION_ENABLED=
+INITIATIVES_CREATION_ENABLED=
+INITIATIVES_SIMILARITY_THRESHOLD=
+INITIATIVES_SIMILARITY_LIMIT=
+INITIATIVES_MINIMUM_COMMITTEE_MEMBERS=
+INITIATIVES_DEFAULT_SIGNATURE_TIME_PERIOD_LENGTH=
+INITIATIVES_DEFAULT_COMPONENTS=
+INITIATIVES_FIRST_NOTIFICATION_PERCENTAGE=
+INITIATIVES_SECOND_NOTIFICATION_PERCENTAGE=
+INITIATIVES_STATS_CACHE_EXPIRATION_TIME=
+INITIATIVES_MAX_TIME_IN_VALIDATING_STATE=
+INITIATIVES_PRINT_ENABLED=
+INITIATIVES_DO_NOT_REQUIRE_AUTHORIZATION=
+SPAM_DETECTION_API_AUTH_TOKEN=
+SPAM_DETECTION_API_URL=
+SPAM_DETECTION_NAME=
+SPAM_DETECTION_NICKNAME=
+SPAM_DETECTION_EMAIL=
+PERFORM_BLOCK_USER=
+# CURRENCY - String (default: "€") - Update Decidim's currency
+CURRENCY=
+# THROTTLING_MAX_REQUESTS - Integer - Number of requests per ip
+THROTTLING_MAX_REQUESTS=100
+# THROTTLING_PERIOD - Integer - Period for each IP in minutes
+THROTTLING_PERIOD=1
+# ENABLE_RACK_ATTACK - Binary (Default 1) - Enable or Disable Rack Attack
+# ENABLE_RACK_ATTACK=0
+ENABLE_RACK_ATTACK=1
+# RACK_ATTACK_FAIL2BAN - Binary (Default 1) - Enable or Disable Rack Attack Fail2Ban service
+# RACK_ATTACK_FAIL2BAN=0
+RACK_ATTACK_FAIL2BAN=1
+DEFAULT_LOCALE="en"
+AVAILABLE_LOCALES="fr,en"
+# Force SSL - binary (default: 1)
+# Can be disable for reverse proxy setup
+FORCE_SSL=1
+SENTRY_SIDEKIQ_SAMPLE_RATE=0.1
+SENTRY_SAMPLE_RATE=0.5
+FRIENDLY_SIGNUP_OVERRIDE_PASSWORDS=1
+FRIENDLY_SIGNUP_INSTANT_VALIDATION=1
+FRIENDLY_SIGNUP_HIDE_NICKNAME=1
+FRIENDLY_SIGNUP_USE_CONFIRMATION_CODES=1
+ENABLE_LETTER_OPENER=0
+TRANSLATOR_ENABLED=0
+TRANSLATOR_API_KEY=
+TRANSLATOR_HOST=
+TRANSLATOR_DELAY=0
+GALLERY_ANIMATION_ENABLE=0
+# Deactivate DEFACE when views are already precompiled
+# More information: https://github.com/spree/deface#production--precompiling
+DEFACE_ENABLED=false
+# Admin admin password configurations
+DECIDIM_ADMIN_PASSWORD_EXPIRATION_DAYS=365
+DECIDIM_ADMIN_PASSWORD_MIN_LENGTH=15
+DECIDIM_ADMIN_PASSWORD_REPETITION_TIMES=5
+DECIDIM_ADMIN_PASSWORD_STRONG="false"
+# Puma server configuration
+# PUMA_MIN_THREADS=5
+# PUMA_MAX_THREADS=5
+# PUMA_WORKERS=0
+# PUMA_PRELOAD_APP=false
+
+# RAILS_SESSION_STORE=active_record
+
+## Push notifications (enable when set)
+## Generate values with: bin/rails decidim:pwa:generate_vapid_keys
+# VAPID_PUBLIC_KEY
+# VAPID_PRIVATE_KEY
+RAILS_LOG_LEVEL=warn
+
+# Default notifications sending frequency : (daily, weekly, none, real_time)
+# NOTIFICATIONS_SENDING_FREQUENCY=daily
+
+## SMS Gateway Service (eg: decidim-half_signup)
+# SMS_GATEWAY_SERVICE="Decidim::SmsGatewayService"
+# SMS_GATEWAY_URL="https://sms.gateway.service/api"
+# SMS_GATEWAY_BULK_URL="https://sms.gateway.service/api/bulk"
+# SMS_GATEWAY_USERNAME=
+# SMS_GATEWAY_PASSWORD=
+## Set to replace the organization name
+# SMS_GATEWAY_PLATFORM="hashimoto.local"
+
+#Timeout for the unsubscribe link of the newsletter
+#NEWSLETTERS_UNSUBSCRIBE_TIMEOUT=
+
+# Redirect to the TOS page after signup (default: true)
+# DECIDIM_HALF_SIGNUP_SHOW_TOS_PAGE_AFTER_SIGNUP=true

.erb-lint.yml

@@ -0,0 +1,30 @@
+---
+
+linters:
+  ExtraNewline:
+    enabled: true
+
+  FinalNewline:
+    enabled: true
+
+  SpaceAroundErbTag:
+    enabled: true
+
+  AllowedScriptType:
+    enabled: true
+    allowed_types:
+      - text/javascript
+      - text/template
+
+  Rubocop:
+    enabled: true
+
+    rubocop_config:
+      AllCops:
+        DisabledByDefault: true
+
+      Style/StringLiterals:
+        EnforcedStyle: double_quotes
+
+      Layout/SpaceInsideHashLiteralBraces:
+        Enabled: true

.github/ISSUE_TEMPLATE/bug_report.md

@@ -0,0 +1,34 @@
+---
+name: Bug report
+about: Create a report to help us improve
+
+---
+
+**Describe the bug**
+A clear and concise description of what the bug is.
+
+**To Reproduce**
+Steps to reproduce the behavior:
+1. Go to '...'
+2. Click on '....'
+3. Scroll down to '....'
+4. See error
+
+**Expected behavior**
+A clear and concise description of what you expected to happen.
+
+**Screenshots**
+If applicable, add screenshots to help explain your problem.
+
+**Stacktrace**
+If applicable, add the error stacktrace to help explain your problem.
+
+**Extra data (please complete the following information):**
+- Device: [e.g. iPhone6, Desktop]
+- Device OS: [e.g. iOS8.1, Windows 10]
+- Browser: [e.g. Chrome, Firefox, Safari]
+- Decidim Version: [e.g. 0.10]
+- Decidim installation: [e.g. Metadecidim]
+
+**Additional context**
+Add any other context about the problem here. For instance, add Metadecidim link. 

.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,25 @@
+#### :tophat: Description
+*Please describe your pull request.*
+
+#### :pushpin: Related Issues
+*Link your PR to an issue*
+- Related to #?
+- Fixes #?
+- [Notion card]()
+
+#### Testing
+*Describe the best way to test or validate your PR.*
+
+Example:
+* Log in as admin
+* Access Backoffice
+* Go to organization settings
+* See ...
+
+#### Tasks
+- [ ] Add specs
+- [ ] Add note about overrides in OVERLOADS.md
+- [ ] In case of new dependencies or version bump, update related documentation
+
+### :camera: Screenshots
+*Please add screenshots of the changes you're proposing if related to the UI*

.github/upload_coverage.sh

@@ -0,0 +1,14 @@
+#!/bin/bash
+
+REPORT_NAME=$1
+EVENT_PAYLOAD_FILE=$2
+
+PRID=`jq ".number // .check_run.pull_requests[0].number" $EVENT_PAYLOAD_FILE`
+SHA=`jq -r ".pull_request.head.sha // .check_run.head_sha // .after" $EVENT_PAYLOAD_FILE`
+
+if [ $PRID = "null" ]
+then
+  bash <(curl -s https://codecov.io/bash) -n $REPORT_NAME -C $SHA
+else
+  bash <(curl -s https://codecov.io/bash) -n $REPORT_NAME -C $SHA -P $PRID
+fi