v0.30.0.rc1

Release Notes

1. Upgrade notes

As usual, we recommend that you have a full backup, of the database, application code and static files.

To update, follow these steps:

1.1. Update your ruby version

If you're using rbenv, this is done with the following commands:

rbenv install 3.3.4
rbenv local 3.3.4

You may need to change your .ruby-version file too.

If not, you need to adapt it to your environment. See "2.1. Ruby update to 3.3"

1.2. Update your Gemfile

gem "decidim", "0.30.0.rc1"
gem "decidim-dev", "0.30.0.rc1"

1.3. Run these commands

bundle update decidim
bin/rails decidim:upgrade
bin/rails db:migrate
bin/rails decidim:taxonomies:make_plan # see "3.1. Convert old categorization models (Categories, Scopes, Areas, Participatory Process and Assembly types) into taxonomies"
bin/rails decidim:taxonomies:import_all_plans # see "3.1. Convert old categorization models (Categories, Scopes, Areas, Participatory Process and Assembly types) into taxonomies"
bin/rails decidim:taxonomies:update_all_metrics # see "3.1. Convert old categorization models (Categories, Scopes, Areas, Participatory Process and Assembly types) into taxonomies"
bin/rails decidim:metrics:rebuild[meetings,2019-01-01] # see "3.2. Add Meetings' attendees metric"
bin/rails decidim:upgrade:attachments_cleanup # see "3.3. Clean up orphaned attachment blobs"
bin/rails decidim_proposals:upgrade:set_categories # see "3.5. Amendments category fix" 
bin/rails decidim:upgrade:clean:clean_deleted_users # see "3.6. Clean deleted user records `decidim:upgrade:clean:clean_deleted_users` task"

Change your social login icons in config/secrets.yml. Read more about it at "3.4. Social login changes"

In cases where you have done some developments, please check out these particular sections:

• If you have implemented filtering in your models or you are doing overrides, please check "2.5. Ransack upgrade"
• If you have implemented any of the categorization models (mainly Categories, Scopes, Areas) or have implemented types in Participatory Processes or Assemblies, please check "3.1. Convert old categorization models (Categories, Scopes, Areas, Participatory Process and Assembly types) into taxonomies"
• If you have implemented custom routes, please check "5.2. Changes in the routing"

1.4. Follow the steps and commands detailed in these notes

2. General notes

2.1. Ruby update to 3.3

We have updated the Ruby version to 3.3.4. Upgrading to this version will require either to install this Ruby version on your host, or change the decidim docker image to use ruby:3.3.4.

You can read more about this change on PR #13171.

2.2. Fixes on migration files

Since we have introduced the "Soft delete for spaces and components" #13297, we have noticed there are some migrations that are failing as a result of defaults scopes we added.

To address the issue, we created a script that will update the migration files in your project so that we can fix any migrations that are potentially broken by the code evolution.

We added as part of the upgrade script, so you do not need to do anything about it. You will notice that some of your old migrations will change related to this change.

You can read more about this change on PR #13690.

2.3. Refactor of decidim:upgrade:fix_orphan_categorizations task

As of #13380, the task named decidim:upgrade:fix_orphan_categorizations has been renamed to decidim:upgrade:clean:categories and has been included in the main decidim:upgrade:clean:invalid_records task.

You can read more about this change on PR #13380.

2.4. Cells expiration time

Now the cache expiration time is configurable via initializers/ENV variables.

Decidim uses cache in some HTML views (usually under the cells/ folder). In the past the cache had no expiration time, now it is configurable using the ENV var DECIDIM_CACHE_EXPIRATION_TIME (this var expects an integer specifying the number of minutes for which the cache is valid).

Also note, that now it comes with a default value of 24 hours (1440 minutes).

You can read more about this change on PR #13402.

2.5. Ransack upgrade

As part of Rails upgrade to version 7.1, we upgraded Ransack gem to version 4.2. Ransack has introduced a new security policy that requires mandatory allowlisting for the attributes and associations needed by search engine. If you have a regular Decidim installation, you can skip this step.

If you are a plugin developer, you may need to add the following methods to your searchable models.

If your plugins are extending the filters or search, you may need to override the following methods.

def self.ransackable_attributes(_auth_object = nil)
  []
end

def self.ransackable_associations(_auth_object = nil)
  []
end

You can read more about this change on PR #13196.

3. One time actions

These are one time actions that need to be done after the code is updated in the production database.

3.1. Convert old categorization models (Categories, Scopes, Areas, Participatory Process and Assembly types) into taxonomies

All those models have been deprecated, now a unique entity called "Taxonomies" is used for classifying all the content in Decidim (see https://docs.decidim.org/en/develop/develop/taxonomies.html for reference).

A rake task is available for converting the old classification to the new system composed of taxonomies and taxonomy filters.

In a nutshell, you can run this two-step process with the commands:

First, create the plan for the import:

bin/rails decidim:taxonomies:make_plan

Second, review the created files under the folder tmp/taxonomies/*.json (optional).

Finally, import the taxonomies with:

bin/rails decidim:taxonomies:import_all_plans

Once the import has finished, update the metrics:

bin/rails decidim:taxonomies:update_all_metrics

For more information about this process, please refer to the documentation at https://docs.decidim.org/en/develop/develop/taxonomies.html#_importing_taxonomies_from_old_models_categories_scopes_etc

You can see more details about this change on PR #13669

3.2. Add Meetings' attendees metric

We have added a new metric that indicates how many users have attended your meetings.

If you want to calculate this metric you could run the following command, where 2019-01-01 is the Y-m-d format for the starting date since you want the metric to take effect.

bin/rails decidim:metrics:rebuild[meetings,2019-01-01]

You can see more details about this change on PR #13442

3.3. Clean up orphaned attachment blobs

We have added a new task that helps you clean the orphaned attachment blobs. This task will remove all the attachment blobs that have been created for more than 1 hour and are not yet referenced by any attachment record. This helps cleaning your filesystem of unused files.

You can run the task with the following command:

bin/rails decidim:upgrade:attachments_cleanup

You can see more details about this change on PR #11851

3.4. Social login changes

We have changed the icons for the social logins so they align better with the social networks guidelines (Twitter/X, Facebook, and Google). If you do not use any of these social logins you can skip this step.

If on the other hand you have set up this social logins, you can change it by replacing them in: config/secrets.yml.

For example, where it says:

      icon: google-fill
      icon: facebook-fill
      icon: twitter-x-fill

It now needs to say for the correct path name and updated SVG. Keep in mind the name of the path has changed from icon to icon_path:

      icon_path: "media/images/google.svg"
      icon_path: "media/images/facebook.svg"
      icon_path: "media/images/twitter-x.svg"

The CSS of each omniauth button can be found within decidim-core/app/packs/stylesheets/decidim/_login.scss, variables are used for specific omniauth button background color according to their pack guidelines.

You can read more about this change on PR #13481.

3.5. Amendments category fix

We have identified a bug in the filtering system, as the amendments created did not share the category with the proposal it amended. This fix aims to fix historic data. To fix it, you need to run:

bin/rails decidim_proposals:upgrade:set_categories

You can read more about this change on PR #13395.

3.6. Clean deleted user records decidim:upgrade:clean:clean_deleted_users task

When a user deleted their account, we mistakenly retained some metadata, such as the personal_url and about fields. Going forward, these fields will be automatically cleared upon deletion. To fix this issue for previously deleted accounts, we've added a new rake task that should be run on your production database.

bin/rails decidim:upgrade:clean:clean_deleted_users

You can read more about this change on PR #13624.

4. Scheduled tasks

Nothing.

5. Changes in APIs

5.1. Decidim version number no longer disclosed t...

v0.29.2

1. Upgrade notes

As usual, we recommend that you have a full backup, of the database, application code and static files.

To update, follow these steps:

1.1. Update your Gemfile

gem "decidim", "0.29.2"
gem "decidim-dev", "0.29.2"

1.3. Run these commands

sudo apt install wkhtmltopdf # or the alternative installation process for your operating system. See "2.7. wkhtmltopdf binary change"
bundle update decidim
bin/rails decidim:upgrade
bin/rails db:migrate
bin/rails decidim:upgrade:clean:clean_deleted_users # see  "2.2. Clean deleted user records `decidim:upgrade:clean:clean_deleted_users` task"

1.4. Follow the steps and commands detailed in these notes

2. General notes

2.1. wkhtmltopdf binary change

For improving the support with latest versions of Ubuntu, and keeping a low size in Heroku/Docker images, we removed the wkhtmltopdf-binary gem dependency. This means that your package manager should have the wkhtmltopdf binary installed.

In the case of Ubuntu/Debian, this is done with the following command:

sudo apt install wkhtmltopdf

You can read more about this change on PR #13616.

2.2. Clean deleted user records decidim:upgrade:clean:clean_deleted_users task

When a user deleted their account, we mistakenly retained some metadata, such as the personal_url and about fields. Going forward, these fields will be automatically cleared upon deletion. To fix this issue for previously deleted accounts, we've added a new rake task that should be run on your production database.

bin/rails decidim:upgrade:clean:clean_deleted_users

You can read more about this change on PR #13624.

3. One time actions

Nothing

4. Scheduled tasks

Nothing

Changelog

0.29.2

Added

Nothing.

Changed

Nothing.

Fixed

• Backport 'Update supported versions in docs' to v0.29 #13493
• Backport 'Fix file type in attachment for S3 files' to v0.29 #13495
• decidim-admin, decidim-assemblies, decidim-core, decidim-participatory processes, decidim-proposals: Backport 'Remove host param from url uploader method' to v0.29 #13505
• Backport 'Lock Ubuntu to 22.04 in github actions' to v0.29 #13519
• Backport 'Fix translation bar css' to v0.29 #13518
• Backport 'Fix double encoding specific characters with the external links' to v0.29 #13524
• Backport 'Make the address card shown long locations with the time' to v0.29 #13541
• Backport 'Fix the missing meeting calendar in meetings' lists' to v0.29 #13543
• Backport 'Fix editing the assembly content block "related assemblies"' to v0.29 #13545
• Backport 'Lock @tarekraafat/autocomplete.js version to 10.2.7' to v0.29 #13558
• Backport 'Fix redirect path after blocking an user' to v0.29 #13562
• decidim-accountability, decidim-admin, decidim-core, decidim-proposals: Backport 'Increase Map dimensions ' to v0.29 #13589
• decidim-initiatives: Backport 'Add new print permission in intiatives' to v0.29 #13591
• decidim-initiatives: Backport 'Fix initiative form is not taking into account the scope selected' to v0.29 #13604
• decidim-budgets: Backport 'Fix issues with the budgets proposals import' to v0.29 #13605
• decidim-accountability, decidim-admin, decidim-assemblies, decidim-blogs, decidim-budgets, decidim-conferences, decidim-core, decidim-debates, decidim-forms, decidim-initiatives, decidim-meetings, decidim-pages, decidim-participatory processes, decidim-proposals, decidim-sortitions, decidim-verifications: Backport 'Fix editor image routing' to v0.29 #13607
• decidim-admin: Backport 'Fix newsletter subscriber count' to v0.29 #13610
• decidim-assemblies: Backport 'Fix visibility on transparent assemblies' to v0.29 #13623
• Backport 'Remove wkhtmltopdf-binary gem and wicked configuration' to v0.29 #13620
• decidim-forms: Backport 'Fix asterisk in mandatory answers from surveys' to v0.29 #13630
• decidim-core: Backport 'Profiles message button ' to v0.29 #13638
• decidim-templates: Backport 'Fix display condition answer option' to v0.29 #13642
• decidim-core: Backport 'Fix datetime fields on forms when the organization has a timezone specified' to v0.29 #13643
• Backport 'Sort valuator selectors by valuator name' to v0.29 #13651
• Backport 'Remove personal_url and about fields when users are deleted' to v0.29 #13654
• Backport 'Fix admin proposals filters and sortings' to v0.29 #13659
• decidim-comments: Backport 'Multiple versions of a comment are shown when editing' to v0.29 #13664
• decidim-core: Backport 'Remove additional space from general search for comments that contain links' to v0.29 #13673
• decidim-meetings, decidim-participatory processes: Backport 'Fix missing icons in meetings' to v0.29 #13683
• Backport 'Remove redundant words in jobs.adoc' to v0.29 #13688
• decidim-meetings: Backport 'Fix meeting view when maps are disabled' to v0.29 #13704
• decidim-core: Backport 'Fix calendar failing specs' to v0.29 #13718
• decidim-admin, decidim-initiatives: Backport 'Icons in some Admin dashboard areas are misaligned' to v0.29 #13716
• decidim-proposals: Backport 'Hide the public export for proposals' votes' to v0.29 #13742
• decidim-accountability, decidim-admin, decidim-ai, decidim-api, decidim-assemblies, decidim-blogs, decidim-budgets, decidim-comments, decidim-conferences, decidim-core, decidim-debates, decidim-design, decidim-dev, decidim-forms, decidim-generators, decidim-initiatives, decidim-meetings, decidim-pages, decidim-participatory processes, decidim-proposals, decidim-sortitions, decidim-surveys, decidim-system, decidim-templates, decidim-verifications: Backport 'Clarify license identificator (AGPL-3.0-or-later)' to v0.29 #13747
• decidim-core, decidim-design, decidim-proposals: Backport 'Optimize the proposals loading performance' to v0.29 #13744
• decidim-conferences: Backport 'Fix conference attendence diploma rendering' to v0.29 #13749
• decidim-core: Backport 'Profile tooltip expansion on mobile' to v0.29 #13751
• decidim-debates, decidim-proposals: Backport 'OpenData Export breaks when handling deleted users' to v0.29 #13756
• decidim-accountability, decidim-core, decidim-meetings, decidim-proposals: Backport 'Fix the Diff Render output' to v0.29 #13752
• decidim-admin: Backport 'Do not send newsletters to blocked users' to v0.29 #13762
• Backport 'Add authorization to GraphQL ' to v0.29 #13758
• decidim-accountability, decidim-meetings: Backport 'Fix translations' to v0.29 #13785
• decidim-admin, decidim-core: Backport 'Fix flaky spec when changing the locale of the visitor' to v0.29 #13782
• decidim-admin: Backport 'Fix validation errors on impersonations or transferring users' to v0.29 #13781
• decidim-forms: Backport 'Fix disordered columns in survey export' to v0.29 #13791
• decidim-admin, decidim-core: Backport 'Prevent notifications for blocked users' to v0.29 #13806
• decidim-core, decidim-proposals: Backport 'Fix prevent redirection issue when clicking text or icon within button' to v0.29 [#13811](https://github.com/decidim/...

v0.28.5

Upgrade notes

As usual, we recommend that you have a full backup, of the database, application code and static files.

1.1. Update your Gemfile

gem "decidim", "0.28.5"
gem "decidim-dev", "0.28.5"

1.2. Run commands

sudo apt install wkhtmltopdf # or the alternative installation process for your operating system. See "2.1. wkhtmltopdf binary change"
bundle update decidim
bin/rails decidim:upgrade
bin/rails db:migrate
bin/rails decidim:upgrade:clean:clean_deleted_users # see  "2.2. Clean deleted user records `decidim:upgrade:clean:clean_deleted_users` task"

2. General notes

2.1. wkhtmltopdf binary change

For improving the support with latest versions of Ubuntu, and keeping a low size in Heroku/Docker images, we removed the wkhtmltopdf-binary gem dependency. This means that your package manager should have the wkhtmltopdf binary installed.

In the case of Ubuntu/Debian, this is done with the following command:

sudo apt install wkhtmltopdf

You can read more about this change on PR #13616.

2.2. Clean deleted user records decidim:upgrade:clean:clean_deleted_users task

When a user deleted their account, we mistakenly retained some metadata, such as the personal_url and about fields. Going forward, these fields will be automatically cleared upon deletion. To fix this issue for previously deleted accounts, we've added a new rake task that should be run on your production database.

bin/rails decidim:upgrade:clean:clean_deleted_users

You can read more about this change on PR #13624.

3. One time actions

Nothing.

4. Scheduled tasks

Nothing.

5. Changes in APIs

Nothing.

Changelog

0.28.5

Added

Nothing.

Changed

Nothing.

Fixed

• Backport 'Fix file type in attachment for S3 files' to v0.28 #13496
• Backport 'Update supported versions in docs' to v0.28 #13497
• decidim-admin, decidim-assemblies, decidim-core, decidim-participatory processes, decidim-proposals: Backport 'Remove host param from url uploader method' to v0.28 #13506
• Backport 'Lock Ubuntu to 22.04 in github actions' to v0.28 #13520
• Backport 'Fix double encoding specific characters with the external links' to v0.28 #13525
• Backport 'Fix translation bar css' to v0.28 #13526
• Backport 'Make the address card shown long locations with the time' to v0.28 #13540
• Backport 'Fix the missing meeting calendar in meetings' lists' to v0.28 #13542
• Backport 'Fix editing the assembly content block "related assemblies"' to v0.28 #13544
• Backport 'Lock @tarekraafat/autocomplete.js version to 10.2.7' to v0.28 #13557
• Backport 'Fix redirect path after blocking an user' to v0.28 #13561
• decidim-accountability, decidim-admin, decidim-core, decidim-proposals: Backport 'Increase Map dimensions ' to v0.28 #13588
• decidim-initiatives: Backport 'Add new print permission in intiatives' to v0.28 #13590
• decidim-initiatives: Backport 'Fix initiative form is not taking into account the scope selected' to v0.28 #13603
• decidim-budgets: Backport 'Fix issues with the budgets proposals import' to v0.28 #13606
• decidim-admin: Backport 'Fix newsletter subscriber count' to v0.28 #13609
• decidim-assemblies: Backport 'Fix visibility on transparent assemblies' to v0.28 #13622
• decidim-forms: Backport 'Fix asterisk in mandatory answers from surveys' to v0.28 #13629
• decidim-accountability, decidim-admin, decidim-assemblies, decidim-blogs, decidim-budgets, decidim-conferences, decidim-core, decidim-debates, decidim-forms, decidim-initiatives, decidim-meetings, decidim-pages, decidim-participatory processes, decidim-proposals, decidim-sortitions, decidim-verifications: Backport 'Fix editor image routing' to v0.28 #13608
• decidim-core: Backport 'Profiles message button ' to v0.28 #13637
• decidim-templates: Backport 'Fix display condition answer option' to v0.28 #13641
• Backport 'Remove wkhtmltopdf-binary gem and wicked configuration' to v0.28 #13621
• decidim-core: Backport 'Fix datetime fields on forms when the organization has a timezone specified' to v0.28 #13647
• Backport 'Fix admin proposals filters and sortings' to v0.28 #13658
• Backport 'Sort valuator selectors by valuator name' to v0.28 #13652
• Backport 'Remove personal_url and about fields when users are deleted' to v0.28 #13655
• decidim-comments: Backport 'Multiple versions of a comment are shown when editing' to v0.28 #13663
• decidim-core: Backport 'Remove additional space from general search for comments that contain links' to v0.28 #13672
• decidim-meetings, decidim-participatory processes: Backport 'Fix missing icons in meetings' to v0.28 #13682
• Backport 'Remove redundant words in jobs.adoc' to v0.28 #13687
• decidim-admin, decidim-initiatives: Backport 'Icons in some Admin dashboard areas are misaligned' to v0.28 #13717
• decidim-proposals: Backport 'Hide the public export for proposals' votes' to v0.28 #13743
• decidim-conferences: Backport 'Fix conference attendence diploma rendering' to v0.28 #13750
• decidim-accountability, decidim-admin, decidim-ai, decidim-api, decidim-assemblies, decidim-blogs, decidim-budgets, decidim-comments, decidim-conferences, decidim-core, decidim-debates, decidim-design, decidim-dev, decidim-forms, decidim-generators, decidim-initiatives, decidim-meetings, decidim-pages, decidim-participatory processes, decidim-proposals, decidim-sortitions, decidim-surveys, decidim-system, decidim-templates, decidim-verifications: Backport 'Clarify license identificator (AGPL-3.0-or-later)' to v0.28 #13746
• decidim-core, decidim-design, decidim-proposals: Backport 'Optimize the proposals loading performance' to v0.28 #13745
• decidim-core: Backport 'Profile tooltip expansion on mobile' to v0.28 #13755
• decidim-debates, decidim-proposals: Backport 'OpenData Export breaks when handling deleted users' to v0.28 #13757
• decidim-accountability, decidim-core, decidim-meetings, decidim-proposals: Backport 'Fix the Diff Render output' to v0.28 #13753
• decidim-meetings: Backport 'Fix meeting view when maps are disabled' to v0.28 #13754
• decidim-admin: Backport 'Do not send newsletters to blocked users' to v0.28 #13761
• Backport 'Add authorization to GraphQL ' to v0.28 #13759
• decidim-accountability, decidim-meetings: Backport 'Fix translations' to v0.28 #13784
• decidim-admin, decidim-core: Backport 'Fix flaky spec when changing the locale of the visitor' to v0.28 #13783
• decidim-admin: Backport 'Fix validation errors on impersonations or transferring users' to v0.28 #13780
• decidim-forms: Backport 'Fix disordered columns in survey export' to v0.28 #13790
• decidim-admin, decidim-core: Backport 'Prevent notifications for blocked users' to v0.28 #13807
• decidim-meetings, decidim-proposals: Backport 'Fix proposal map performance with hundreds of markers' to v0.28 #13818
• decidim-core, decidim-proposals: Backport 'Fix prevent redirection issue when clicking text or icon within button' to v0.28 [#13810](#1381...

v0.29.1

Security fixes

This release addresses one security issue:

• GHSA-4294-35vw-7qxg (pending CVE)

The details regarding the security vulnerability will be published on December 2th 2024, which is two months after the release date of this version. For more information, please refer to our Security Policy.

Upgrade notes

As usual, we recommend that you have a full backup, of the database, application code and static files.

To update, follow these steps:

1. Update your Gemfile:

gem "decidim", "0.29.1"
gem "decidim-dev", "0.29.1"

2. Run these commands to upgrade and make sure you get all the latest migrations:

bundle update decidim
bin/rails decidim:upgrade
bin/rails db:migrate
bin/rails decidim_proposals:upgrade:set_categories # see "2.2. Amendments category fix"
bin/rails decidim:upgrade:attachments_cleanup # see "3.1 Clean up orphaned attachment blobs" 

2. General notes

2.1 Allow Cell's cache to expire

Now the cache expiration time is configurable via initializers/ENV variables.

Decidim uses cache in some HTML views (usually under the cells/ folder). In the past the cache had no expiration time, now it is configurable using the ENV var DECIDIM_CACHE_EXPIRATION_TIME (this var expects an integer specifying the number of minutes for which the cache is valid).

Also note, that now it comes with a default value of 24 hours (1440 minutes).

2.2. Amendments category fix

We have identified a bug in the filtering system, as the amendments created did not share the category with the proposal it amended. This fix aims to fix historic data. To fix it, you need to run:

bin/rails decidim_proposals:upgrade:set_categories

You can read more about this change on PR #13395.

3. One time actions

3.1. Clean up orphaned attachment blobs

We have added a new task that helps you clean the orphaned attachment blobs. This task will remove all the attachment blobs that have been created for more than 1 hour and are not yet referenced by any attachment record. This helps cleaning your filesystem of unused files.

You can run the task with the following command:

bin/rails decidim:upgrade:attachments_cleanup

You can see more details about this change on PR #11851

4. Scheduled tasks

Nothing.

5. Changes in APIs

Nothing.

Changelog

Full Changelog: https://github.com/decidim/decidim/compare/v0.29.0..v0.29.1

v0.28.4

Security fixes

This release addresses one security issue:

• GHSA-4294-35vw-7qxg (pending CVE)

The details regarding the security vulnerability will be published on December 2th 2024, which is two months after the release date of this version. For more information, please refer to our Security Policy.

Upgrade notes

As usual, we recommend that you have a full backup, of the database, application code and static files.

To update, follow these steps:

1. Update your Gemfile:

gem "decidim", "0.28.4"
gem "decidim-dev", "0.28.4"

2. Run these commands to upgrade and make sure you get all the latest migrations:

bundle update decidim
bin/rails decidim:upgrade
bin/rails db:migrate
bin/rails decidim_proposals:upgrade:set_categories # see "2.2. Amendments category fix"
bin/rails decidim:upgrade:attachments_cleanup # see "3.1 Clean up orphaned attachment blobs" 

2. General notes

2.1 Allow Cell's cache to expire

Now the cache expiration time is configurable via initializers/ENV variables.

Decidim uses cache in some HTML views (usually under the cells/ folder). In the past the cache had no expiration time, now it is configurable using the ENV var DECIDIM_CACHE_EXPIRATION_TIME (this var expects an integer specifying the number of minutes for which the cache is valid).

Also note, that now it comes with a default value of 24 hours (1440 minutes).

2.2. Amendments category fix

We have identified a bug in the filtering system, as the amendments created did not share the category with the proposal it amended. This fix aims to fix historic data. To fix it, you need to run:

bin/rails decidim_proposals:upgrade:set_categories

You can read more about this change on PR #13395.

3. One time actions

3.1. Clean up orphaned attachment blobs

We have added a new task that helps you clean the orphaned attachment blobs. This task will remove all the attachment blobs that have been created for more than 1 hour and are not yet referenced by any attachment record. This helps cleaning your filesystem of unused files.

You can run the task with the following command:

bin/rails decidim:upgrade:attachments_cleanup

You can see more details about this change on PR #11851

4. Scheduled tasks

Nothing.

5. Changes in APIs

Nothing.

Changelog

Added

Nothing.

Changed

Nothing.

Fixed

• decidim-dev: Backport 'Fix flaky on verifications' code letter system spec' to v0.28 #13390
• decidim-comments, decidim-core: Backport 'Date & Time format in Last Activities' to v0.28 #13388
• decidim-core, decidim-proposals: Backport 'Fix redirections after login with modal' to v0.28 #13386
• decidim-accountability, decidim-core, decidim-meetings: Backport 'Fix tab navigation on filters' to v0.28 #13401
• decidim-admin: Backport 'Fixes admin rights loss when added as private user with case-insensitive email ' to v0.28 #13400
• decidim-core: Backport 'Fix margin in offline page' to v0.28 #13446
• decidim-admin, decidim-core, decidim-verifications: Backport 'Spacing on DOB picker in Authorizations' to v0.28 #13448
• decidim-conferences, decidim-core, decidim-initiatives, decidim-participatory processes: Backport 'Fix showing Conferences and Initiatives in last activities page' to v0.28 #13450
• decidim-assemblies: Backport 'Fix private admin create new assembly ' to v0.28 #13444
• Backport 'Fix display of short bio in conferences' speaker modal' to v0.28 #13469
• decidim-core, decidim-generators: Backport 'Allow to configure the cell cache expiry time' to v0.28 #13454
• decidim-blogs, decidim-core: Backport 'Fix for liking a resource prompts for groups even though groups are disabled' to v0.28 #13459
• decidim-initiatives: Backport 'Fix Stack Level Too Deep on request committee member in initiatives' to v0.28 #13465
• decidim-accountability, decidim-assemblies, decidim-blogs, decidim-core, decidim-debates, decidim-meetings, decidim-participatory processes, decidim-proposals: Backport 'Fix showing spaces in Last Activity page' to v0.28 #13466
• decidim-core, decidim-proposals: Backport 'Fix for creating an amendment in proposals is not cloning the category ' to v0.28 #13457
• decidim-admin, decidim-core: Backport 'Fix regression when there's a disabled button in the upload modal' to v0.28 #13464
• decidim-admin: Backport 'Dropdown select scopes on Newsletters ' to v0.28 #13476
• decidim-core, decidim-dev, decidim-generators, decidim-system: Backport 'Fix issues with customized Omniauth callback handling' to v0.28 #13394
• decidim-core, decidim-dev, decidim-forms, decidim-generators, decidim-initiatives, decidim-meetings, decidim-proposals: Backport 'Remove invalid upload files' to v0.28 #13467

Removed

Nothing.

Developer improvements

• Backport 'Remove invalid upload files' to v0.28 #13467

Internal

Nothing.

Full Changelog: v0.28.3...v0.28.4

v0.29.0

Security fixes

This release addresses two security issues:

• CVE-2024-32034
• CVE-2024-45594

One of these security issues (CVE-2024-32034) was already available in v0.27.7 and v0.28.2, so it will be published on September 16th 2024.

The other security issue (CVE-2024-45594) will be published on November 10th 2024, which is two months after the release date of this version. For more information, please refer to our Security Policy.

Upgrade notes

As usual, we recommend that you have a full backup, of the database, application code and static files.

To update, follow these steps:

1.1. Update your ruby version

If you're using rbenv, this is done with the following commands:

rbenv install 3.2.6
rbenv local 3.2.6

You may need to change your .ruby-version file too.

If not, you need to adapt it to your environment. See "2.1. Ruby update to 3.2"

1.2. Update your Gemfile

gem "decidim", "0.29.0"
gem "decidim-dev", "0.29.0"

1.3. Run these commands

rm config/initializers/carrierwave.rb # see "3.1. CarrierWave removal"
rm babel.config.json # see "3.3. esbuild migration"
wget https://raw.githubusercontent.com/decidim/decidim/develop/decidim-core/lib/decidim/webpacker/webpack/custom.js -O config/webpack/custom.js # see "3.3. esbuild migration"
wget https://raw.githubusercontent.com/decidim/decidim/develop/decidim-core/lib/decidim/webpacker/shakapacker.yml -O config/shakapacker.yml # see "3.3. esbuild migration"
wget https://raw.githubusercontent.com/decidim/decidim/c626489ea235e644e281ecf4bdbcdf112ca6b3d7/decidim-core/db/migrate/20181025082245_add_timestamps_to_components.rb -O $(ls db/migrate/*_add_timestamps_to_components.decidim.rb) # see "2.7. Clean-up invalid resources"
rm Gemfile.lock package-lock.json
sudo apt install p7zip # or the alternative installation process for your operating system. See "2.5. 7zip dependency introduction"
bundle remove spring spring-watcher-listen # see "3.7. Remove spring and spring-watcher-listen from your Gemfile"
bundle remove decidim-elections # see "2.6. Deprecation of the decidim-elections module"
bundle install
bin/rails decidim:upgrade
bin/rails db:migrate
bin/rails decidim:upgrade:clean:invalid_records # see "2.7. Clean-up invalid resources"

1.4. Follow the steps and commands detailed in these notes

2. General notes

2.1. Ruby update to 3.2

We have updated the Ruby version to 3.2.2. Upgrading to this version will require either to install this Ruby version on your host, or change the decidim docker image to use ruby:3.2.2.

You can read more about this change on PR #12199.

2.2. Rails update to 7.0

We have updated the Rails version to 7.0.8.1. You do not need to do anything.

You can read more about this change on PR #12616.

2.3. Removal of the accountability naming customization

We have removed the ability to customize the labels from the Accountability component, as it was not following the recommended way of handling these text customizations. If you want to migrate your current customizations, you can read about Text customizations in Decidim Documentation

You can read more about this change on PR #12853.

2.4. Removal of useless fields

We are removing some useless fields that are leftovers from the Redesign.

For the moment we are leaving the information in your database in case that you want to save it, but in v0.30 these fields we'll be fully removed.

• participatory process table: banner_image. You can read more about this change on PR #13119.
• assemblies table: show_statistics. You can read more about this change on PR #13123.
• participatory process table: show_statistics. You can read more about this change on PR #13123.
• participatory process table: show_metrics. You can read more about this change on PR #13123.

2.5. 7zip dependency introduction

We had to migrate from an unmaintained dependency and do a wrapper for the 7zip command line. This means that you need to install 7zip in your system. You can do it by running:

sudo apt install p7zip

This works for Ubuntu Linux, other operating systems would need to do other command/package.

You can read more about this change on PR #13185.

2.6. Deprecation of the decidim-elections module

In case you had the not officially released decidim-elections module (like in a staging/demo server), you need to remove it from your Gemfile as currently isn't compatible with v0.29.0. We're not planning in maintaining it anymore at least in the near future.

You can read more about this change on PR #12366.

2.7. Clean-up invalid resources

While upgrading various instances to latest Decidim version, we have noticed there are some records that may not be present anymore. As a result, the application would generate a lot of errors, in both f
rontend and Backend.

In order to fix these errors, we have introduced a new rake task, aiming to fix the errors by removing invalid data.

In your console you can run:

bin/rails decidim:upgrade:clean:invalid_records

If you have a big installation having multiple records, many users etc, you can split the clean up task as follows:

bin/rails decidim:upgrade:clean:searchable_resources
bin/rails decidim:upgrade:clean:notifications
bin/rails decidim:upgrade:clean:follows
bin/rails decidim:upgrade:clean:action_logs

Also you need to update a migration that has changed.

wget https://raw.githubusercontent.com/decidim/decidim/c626489ea235e644e281ecf4bdbcdf112ca6b3d7/decidim-core/db/migrate/20181025082245_add_timestamps_to_components.rb -O $(ls db/migrate/*_add_timestamps_to_components.decidim.rb)

You can read more about this change on PR #13237.

3. One time actions

These are one time actions that need to be done after the code is updated in the production database.

3.1. CarrierWave removal

Back in Decidim 0.25 we have added ActiveStorage (via #7902) as main uploader instead of CarrierWave.

We've left some code to ease-up with the migration process during these last versions.

In your application, you need to remove the initializer:

rm config/initializers/carrierwave.rb

You can read more about this change on PR #12200.

3.2. Verifications documents configurations

Until now we have hard-coded the document types for verifications with types from Spain legislation ("DNI, NIE and passport"). We have change it to "Identification number and passport", and allow installations to adapt them to their own needs.

If you want to go back to the old setting, you need to follow these steps:

3.2.1. Add to your config/secrets.yml the decidim.verifications.document_types key

decidim_default: &decidim_default
  application_name: <%%= Decidim::Env.new("DECIDIM_APPLICATION_NAME", "My Application Name").to_json %>
  (...)
  verifications:
    document_types: <%%= Decidim::Env.new("VERIFICATIONS_DOCUMENT_TYPES", %w(identification_number passport)).to_array %>

3.2.2. Add to your config/initializers/decidim.rb the following snippet in the bottom of the file

if Decidim.module_installed? :verifications
  Decidim::Verifications.configure do |config|
    config.document_types = Rails.application.secrets.dig(:verifications, :document_types).presence || %w(identification_number passport)
  end
end

3.2.3. Add the values that you want to define using the environment variable VERIFICATIONS_DOCUMENT_TYPES

VERIFICATIONS_DOCUMENT_TYPES="dni,nie,passport"

3.2.4. Add the translation of these values to your i18n files (i.e. config/locales/en.yml)

en:
  decidim:
    verifications:
        id_documents:
          dni: DNI
          nie: NIE
          passport: Passport

You can read more about this change on PR #12306

3.3. esbuild migration

In order to speed up the asset compilation, we have migrated from babel to esbuild.

There are some small changes that needs to be performed in your application code.

• Remove babel.config.js
• Replace config/webpack/custom.js with the new version.

wget https://raw.githubusercontent.com/decidim/decidim/develop/decidim-core/lib/decidim/webpacker/webpack/custom.js -O config/webpack/custom.js

In case you have modifications in your application's webpack configuration, adapt it by checking out the diff of the changes.

You can read more about this change on PR #12238.

3.4. Allow removal of orphan categories

A bug was identified that prevented the deletion of categories lacking associated resources. This action is a one-time task that must be performed directly in the production database.

bin/rails decidim:upgrade:fix_orphan_categorizations

You can read more abou...

v0.28.3

Security fixes

This release addresses one security issue:

• CVE-2024-45594

The details regarding the security vulnerability will be published on September 16th 2024, which is two months after the release date of this version. For more information, please refer to our Security Policy.

Upgrade notes

As usual, we recommend that you have a full backup, of the database, application code and static files.

To update, follow these steps:

1. Update your Gemfile:

gem "decidim", "0.28.3"
gem "decidim-dev", "0.28.3"

2. Run these commands to upgrade and make sure you get all the latest migrations:

wget https://raw.githubusercontent.com/decidim/decidim/c626489ea235e644e281ecf4bdbcdf112ca6b3d7/decidim-core/db/migrate/20181025082245_add_timestamps_to_components.rb -O $(ls db/migrate/*_add_timestamps_to_components.decidim.rb) # see "2.7. Clean-up invalid resources"
sudo apt install p7zip # or the alternative installation process for your operating system. See "2.1. 7zip dependency introduction"
bundle remove spring spring-watcher-listen # see "3.1. Remove spring and spring-watcher-listen from your Gemfile"
bundle update decidim
bin/rails decidim:upgrade
bin/rails db:migrate
bin/rails decidim:upgrade:clean:invalid_records # see "2.2. Cleanup invalid resources"

2. General notes

2.1. 7zip dependency introduction

We had to migrate from an unmaintained dependency and do a wrapper for the 7zip command line. This means that you need to install 7zip in your system. You can do it by running:

sudo apt install p7zip

This works for Ubuntu Linux, other operating systems would need to do other command/package.

You can read more about this change on PR #13185.

2.2. Cleanup invalid resources

While upgrading various instances to latest Decidim version, we have noticed there are some records that may not be present anymore. As a result, the application would generate a lot of errors, in both frontend and Backend.

In order to fix these errors, we have introduced a new rake task, aiming to fix the errors by removing invalid data.

In your console you can run:

bin/rails decidim:upgrade:clean:invalid_records

If you have a big installation having multiple records, many users etc, you can split the clean up task as follows:

bin/rails decidim:upgrade:clean:searchable_resources
bin/rails decidim:upgrade:clean:notifications
bin/rails decidim:upgrade:clean:follows
bin/rails decidim:upgrade:clean:action_logs

You can read more about this change on PR #13237.

3. One time actions

3.1. Remove spring and spring-watcher-listen from your Gemfile

To simplify the upgrade process, we have decided to add spring and spring-watcher-listener as hard dependencies of decidim-dev.

Before upgrading to this version, make sure you run in your console:

bundle remove spring spring-watcher-listen

You can read more about this change on PR #13235.

4. Scheduled tasks

Nothing.

5. Changes in APIs

Nothing.

Changelog

Added

Nothing.

Changed

Nothing.

Fixed

• decidim-core: Backport 'Prevent cached signed global IDs from expiring' to v0.28 #13232
• decidim-accountability, decidim-admin, decidim-budgets, decidim-conferences, decidim-initiatives, decidim-meetings, decidim-proposals: Backport 'Fix clickable area in dropdowns' to v0.28 #13233
• decidim-core, decidim-elections, decidim-generators: Backport 'Implements 7zip as a CLI wrapper' to v0.28 #13234
• decidim-core: Backport 'Send welcome notifications for omniauth users' to v0.28 #13240
• decidim-admin: Backport 'Pagination and search on conflicts page' to v0.28 #13242
• decidim-meetings: Backport 'Allow admin tags in meeting minutes' to v0.28 #13241
• decidim-admin, decidim-assemblies, decidim-blogs, decidim-conferences, decidim-core, decidim-initiatives, decidim-participatory processes, decidim-system: Backport 'Improve ActiveStorage asset linking performance' to v0.28 #13228
• decidim-admin: Backport 'Overwrite admin "Cell" -helper method' to v0.28 #13262
• Backport 'Lock Chrome and ChromeDriver to 126.0.6478.182' to v0.28 #13309
• Backport 'Fix google-chrome-stable installation in CI' to v0.28 #13327
• decidim-core: Backport 'Fix deprecation warnings from SASS' to v0.28 #13320
• decidim-proposals: Backport 'Fix proposals' preview spacing' to v0.28 #13326
• decidim-core, decidim-proposals: Backport 'Fix character counter disposition and spacing with WYSIWYG' to v0.28 #13325
• decidim-admin, decidim-generators, decidim-proposals, decidim-templates: Backport 'Fix exceptions with decidim-templates when not added explicitly ' to v0.28 #13324
• Backport 'Add overwrite parameter to upload-artifact' to v0.28 #13323
• decidim-admin: Backport 'Fix deleting a component which has reminders associated with it' to v0.28 #13329
• decidim-dev: Backport 'Disable search engine choice window for ChromeDriver in system specs' to v0.28 #13330
• decidim-core: Backport 'Prevent malformed URLs in online/hybrid meetings' to v0.28 #13331
• decidim-dev, decidim-generators: Backport 'Add spring as dependency' to v0.28 #13322
• decidim-assemblies, decidim-budgets, decidim-conferences, decidim-core, decidim-debates, decidim-initiatives, decidim-meetings, decidim-participatory processes, decidim-proposals: Backport 'Fix flaky spec with follow button in participatory spaces' to v0.28 #13346
• decidim-core: Backport 'Fix exporting of the open data file' to v0.28 #13345
• decidim-admin, decidim-assemblies, decidim-blogs, decidim-comments, decidim-conferences, decidim-core, decidim-initiatives, decidim-participatory processes, decidim-proposals: Backport 'Remove pagination configuration initializer' to v0.28 #13321
• decidim-core: Backport 'Fix results per page display in pagination' to v0.28 #13347
• decidim-core, decidim-dev: Backport 'Add manifest name check for spaces and components' to v0.28 #13359

Removed

Nothing.

Developer improvements

• Backport 'Fix clickable area in dropdowns' to v0.28 #13233

Internal

Nothing.

Full Changelog: v0.28.2...v0.28.3

v0.27.9

Upgrade notes

As usual, we recommend that you have a full backup, of the database, application code and static files.

To update, follow these steps:

1. Update your Gemfile:

gem "decidim", "0.27.9"
gem "decidim-dev", "0.27.9"

2. Run these commands to upgrade and make sure you get all the latest migrations:

bundle update decidim
bin/rails decidim:upgrade
bin/rails db:migrate

Changelog

Added

Nothing.

Changed

Nothing.

Fixed

• decidim-admin, decidim-generators, decidim-proposals, decidim-templates: Backport 'Fix exceptions with decidim-templates when not added explicitly ' to v0.27 #13333

Removed

Nothing.

Developer improvements

Nothing.

Internal

Nothing.

Full Changelog: v0.27.8...v0.27.9

v0.27.8

Security fixes

This release addresses one security issue:

• CVE-2024-41673

The details regarding the security vulnerability will be published on September 30th 2024, which is two months after the release date of this version. For more information, please refer to our Security Policy.

Upgrade notes

As usual, we recommend that you have a full backup, of the database, application code and static files.

To update, follow these steps:

1. Update your Gemfile:

gem "decidim", "0.27.8"
gem "decidim-dev", "0.27.8"

2. Run these commands to upgrade and make sure you get all the latest migrations:

bundle update decidim
bin/rails decidim:upgrade
bin/rails db:migrate

Changelog

Added

Nothing.

Changed

Nothing.

Fixed

• Fix malformed URL in version control page #13204

Removed

Nothing.

Developer improvements

Nothing.

Internal

Nothing.

v0.29.0.rc1

Security fixes

This release addresses one security issue:

• CVE-2024-32034

The details regarding the security vulnerability will be published on September 16th 2024, which is two months after the release date of this version. For more information, please refer to our Security Policy.

Upgrade notes

As usual, we recommend that you have a full backup, of the database, application code and static files.

To update, follow these steps:

1.1. Update your ruby version

If you're using rbenv, this is done with the following commands:

rbenv install 3.2.2
rbenv local 3.2.2

You may need to change your .ruby-version file too.

If not, you need to adapt it to your environment. See "2.1. Ruby update to 3.2"

1.2. Update your Gemfile

gem "decidim", "0.29.0.rc1"
gem "decidim-dev", "0.29.0.rc1"

1.3. Run these commands

rm config/initializers/carrierwave.rb # see "3.1. CarrierWave removal"
rm babel.config.json # see "3.3. esbuild migration"
wget https://raw.githubusercontent.com/decidim/decidim/develop/decidim-core/lib/decidim/webpacker/webpack/custom.js -O config/webpack/custom.js # see "3.3. esbuild migration"
wget https://raw.githubusercontent.com/decidim/decidim/c626489ea235e644e281ecf4bdbcdf112ca6b3d7/decidim-core/db/migrate/20181025082245_add_timestamps_to_components.rb -O $(ls db/migrate/*_add_timestamps_to_components.decidim.rb) # see "2.7. Clean-up invalid resources"
rm Gemfile.lock package-lock.json
sudo apt install p7zip # or the alternative installation process for your operating system. See "2.5. 7zip dependency introduction"
bundle remove spring spring-watcher-listen # see "3.7. Remove spring and spring-watcher-listen from your Gemfile"
bundle remove decidim-elections # see "2.6. Deprecation of the decidim-elections module"
bundle install
bin/rails decidim:upgrade
bin/rails db:migrate
bin/rails decidim:upgrade:clean:invalid_records # see "2.7. Clean-up invalid resources"

1.4. Follow the steps and commands detailed in these notes

2. General notes

2.1. Ruby update to 3.2

We have updated the Ruby version to 3.2.2. Upgrading to this version will require either to install this Ruby version on your host, or change the decidim docker image to use ruby:3.2.2.

You can read more about this change on PR #12199.

2.2. Rails update to 7.0

We have updated the Rails version to 7.0.8.1. You do not need to do anything.

You can read more about this change on PR #12616.

2.3. Removal of the accountability naming customization

We have removed the ability to customize the labels from the Accountability component, as it was not following the recommended way of handling these text customizations. If you want to migrate your current customizations, you can read about Text customizations in Decidim Documentation

You can read more about this change on PR #12853.

2.4. Removal of useless fields

We are removing some useless fields that are leftovers from the Redesign.

For the moment we are leaving the information in your database in case that you want to save it, but in v0.30 these fields we'll be fully removed.

• participatory process table: banner_image. You can read more about this change on PR #13119.
• assemblies table: show_statistics. You can read more about this change on PR #13123.
• participatory process table: show_statistics. You can read more about this change on PR #13123.
• participatory process table: show_metrics. You can read more about this change on PR #13123.

2.5. 7zip dependency introduction

We had to migrate from an unmaintained dependency and do a wrapper for the 7zip command line. This means that you need to install 7zip in your system. You can do it by running:

sudo apt install p7zip

This works for Ubuntu Linux, other operating systems would need to do other command/package.

You can read more about this change on PR #13185.

2.6. Deprecation of the decidim-elections module

In case you had the not officially released decidim-elections module (like in a staging/demo server), you need to remove it from your Gemfile as currently isn't compatible with v0.29.0. We're not planning in maintaining it anymore at least in the near future.

You can read more about this change on PR #12366.

2.7. Clean-up invalid resources

While upgrading various instances to latest Decidim version, we have noticed there are some records that may not be present anymore. As a result, the application would generate a lot of errors, in both f
rontend and Backend.

In order to fix these errors, we have introduced a new rake task, aiming to fix the errors by removing invalid data.

In your console you can run:

bin/rails decidim:upgrade:clean:invalid_records

If you have a big installation having multiple records, many users etc, you can split the clean up task as follows:

bin/rails decidim:upgrade:clean:searchable_resources
bin/rails decidim:upgrade:clean:notifications
bin/rails decidim:upgrade:clean:follows
bin/rails decidim:upgrade:clean:action_logs

Also you need to update a migration that has changed.

wget https://raw.githubusercontent.com/decidim/decidim/c626489ea235e644e281ecf4bdbcdf112ca6b3d7/decidim-core/db/migrate/20181025082245_add_timestamps_to_components.rb -O $(ls db/migrate/*_add_timestamps_to_components.decidim.rb)

You can read more about this change on PR #13237.

3. One time actions

These are one time actions that need to be done after the code is updated in the production database.

3.1. CarrierWave removal

Back in Decidim 0.25 we have added ActiveStorage (via #7902) as main uploader instead of CarrierWave.

We've left some code to ease-up with the migration process during these last versions.

In your application, you need to remove the initializer:

rm config/initializers/carrierwave.rb

You can read more about this change on PR #12200.

3.2. Verifications documents configurations

Until now we have hard-coded the document types for verifications with types from Spain legislation ("DNI, NIE and passport"). We have change it to "Identification number and passport", and allow installations to adapt them to their own needs.

If you want to go back to the old setting, you need to follow these steps:

3.2.1. Add to your config/secrets.yml the decidim.verifications.document_types key

decidim_default: &decidim_default
  application_name: <%%= Decidim::Env.new("DECIDIM_APPLICATION_NAME", "My Application Name").to_json %>
  (...)
  verifications:
    document_types: <%%= Decidim::Env.new("VERIFICATIONS_DOCUMENT_TYPES", %w(identification_number passport)).to_array %>

3.2.2. Add to your config/initializers/decidim.rb the following snippet in the bottom of the file

if Decidim.module_installed? :verifications
  Decidim::Verifications.configure do |config|
    config.document_types = Rails.application.secrets.dig(:verifications, :document_types).presence || %w(identification_number passport)
  end
end

3.2.3. Add the values that you want to define using the environment variable VERIFICATIONS_DOCUMENT_TYPES

VERIFICATIONS_DOCUMENT_TYPES="dni,nie,passport"

3.2.4. Add the translation of these values to your i18n files (i.e. config/locales/en.yml)

en:
  decidim:
    verifications:
        id_documents:
          dni: DNI
          nie: NIE
          passport: Passport

You can read more about this change on PR #12306

3.3. esbuild migration

In order to speed up the asset compilation, we have migrated from babel to esbuild.

There are some small changes that needs to be performed in your application code.

• Remove babel.config.js
• Replace config/webpack/custom.js with the new version.

wget https://raw.githubusercontent.com/decidim/decidim/develop/decidim-core/lib/decidim/webpacker/webpack/custom.js -O config/webpack/custom.js

In case you have modifications in your application's webpack configuration, adapt it by checking out the diff of the changes.

You can read more about this change on PR #12238.

3.4. Allow removal of orphan categories

A bug was identified that prevented the deletion of categories lacking associated resources. This action is a one-time task that must be performed directly in the production database.

bin/rails decidim:upgrade:fix_orphan_categorizations

You can read more about this change on PR #12143.

3.5. Improved CSS overrides

We have improved the CSS overriding mechanism. This is what allows you to change the CSS of decidim in your application in a more granular way.

Previously, you could do this by adding CSS rules in the app/packs/stylesheets/decidim/decidim_application.scss file. This file remai...