From e06fdc8127eb0995920ffab2142b77c84abfc439 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 23 Jan 2026 23:07:00 +0000
Subject: [PATCH 1/5] chore(deps): update dependency devise to v5

---
 Gemfile      |  2 +-
 Gemfile.lock | 35 ++++++++++++++++++-----------------
 2 files changed, 19 insertions(+), 18 deletions(-)

diff --git a/Gemfile b/Gemfile
index 383126586..ffc1823b3 100644
--- a/Gemfile
+++ b/Gemfile
@@ -6,7 +6,7 @@ gem 'bootsnap', '~> 1.19.0'
 gem 'browser', '~> 6.2.0'
 gem 'cssbundling-rails', '~> 1.4', '>= 1.4.3'
 gem 'dartsass-rails', '~> 0.5.1'
-gem 'devise', '~>4.9.4'
+gem 'devise', '~>5.0.0'
 gem 'devise-i18n', '~>1.15.0'
 gem 'factory_bot_rails', '~> 6.5.1'
 gem 'faker', '~> 3.5.3'
diff --git a/Gemfile.lock b/Gemfile.lock
index e5867c7cd..633068573 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -84,7 +84,7 @@ GEM
     ast (2.4.3)
     awesome_print (1.9.2)
     base64 (0.3.0)
-    bcrypt (3.1.20)
+    bcrypt (3.1.21)
     benchmark (0.5.0)
     better_errors (2.10.1)
       erubi (>= 1.0.0)
@@ -118,7 +118,7 @@ GEM
     coderay (1.1.3)
     colorize (1.1.0)
     concurrent-ruby (1.3.6)
-    connection_pool (2.5.5)
+    connection_pool (3.0.2)
     crass (1.0.6)
     cssbundling-rails (1.4.3)
       railties (>= 6.0.0)
@@ -128,10 +128,10 @@ GEM
     database_consistency (2.1.1)
       activerecord (>= 3.2)
     date (3.5.1)
-    devise (4.9.4)
+    devise (5.0.0)
       bcrypt (~> 3.0)
       orm_adapter (~> 0.1)
-      railties (>= 4.1.0)
+      railties (>= 7.0)
       responders
       warden (~> 1.2.3)
     devise-i18n (1.15.0)
@@ -148,7 +148,7 @@ GEM
     em-websocket (0.5.3)
       eventmachine (>= 0.12.9)
       http_parser.rb (~> 0)
-    erb (6.0.0)
+    erb (6.0.1)
     erubi (1.13.1)
     et-orbi (1.4.0)
       tzinfo
@@ -219,8 +219,8 @@ GEM
     http_parser.rb (0.8.0)
     i18n (1.14.8)
       concurrent-ruby (~> 1.0)
-    io-console (0.8.1)
-    irb (1.15.3)
+    io-console (0.8.2)
+    irb (1.16.0)
       pp (>= 0.6.0)
       rdoc (>= 4.0.0)
       reline (>= 0.4.2)
@@ -257,7 +257,7 @@ GEM
       ffi-compiler (~> 1.0)
       rake (~> 13.0)
     logger (1.7.0)
-    loofah (2.24.1)
+    loofah (2.25.0)
       crass (~> 1.0.2)
       nokogiri (>= 1.12.0)
     lumberjack (1.4.2)
@@ -276,7 +276,8 @@ GEM
     mina (1.2.5)
       rake
     mini_mime (1.1.5)
-    minitest (5.26.2)
+    minitest (6.0.1)
+      prism (~> 1.5)
     mollie-api-ruby (4.18.0)
       bigdecimal (~> 3.1, >= 3.1.8)
       ostruct (~> 0.6.0)
@@ -304,7 +305,7 @@ GEM
     net-ssh (7.3.0)
     netrc (0.11.0)
     nio4r (2.7.5)
-    nokogiri (1.18.10-x86_64-linux-gnu)
+    nokogiri (1.19.0-x86_64-linux-gnu)
       racc (~> 1.4)
     notiffany (0.1.3)
       nenv (~> 0.1)
@@ -354,7 +355,7 @@ GEM
       pry (>= 0.13, < 0.16)
     pry-rails (0.3.11)
       pry (>= 0.13.0)
-    psych (5.2.6)
+    psych (5.3.1)
       date
       stringio
     public_suffix (6.0.2)
@@ -376,7 +377,7 @@ GEM
       rack (>= 3.0.0)
     rack-test (2.2.0)
       rack (>= 1.3)
-    rackup (2.2.1)
+    rackup (2.3.1)
       rack (>= 3)
     rails (7.2.3)
       actioncable (= 7.2.3)
@@ -422,7 +423,7 @@ GEM
     rb-inotify (0.11.1)
       ffi (~> 1.0)
     rb-readline (0.5.5)
-    rdoc (6.16.1)
+    rdoc (7.1.0)
       erb
       psych (>= 4.0.0)
       tsort
@@ -563,9 +564,9 @@ GEM
       net-sftp (>= 2.1.2)
       net-ssh (>= 2.8.0)
       ostruct
-    stringio (3.1.9)
+    stringio (3.2.0)
     terminal-notifier-guard (1.7.0)
-    thor (1.4.0)
+    thor (1.5.0)
     timecop (0.9.10)
     timeliness (0.5.3)
     timeout (0.6.0)
@@ -598,7 +599,7 @@ GEM
       base64
       websocket-extensions (>= 0.1.0)
     websocket-extensions (0.1.5)
-    zeitwerk (2.7.3)
+    zeitwerk (2.7.4)
 
 PLATFORMS
   x86_64-linux
@@ -617,7 +618,7 @@ DEPENDENCIES
   cssbundling-rails (~> 1.4, >= 1.4.3)
   dartsass-rails (~> 0.5.1)
   database_consistency (~> 2.1.1)
-  devise (~> 4.9.4)
+  devise (~> 5.0.0)
   devise-i18n (~> 1.15.0)
   dotenv-rails (~> 3.2.0)
   factory_bot_rails (~> 6.5.1)

From c4317a3061587e425121967f71da0f9633538779 Mon Sep 17 00:00:00 2001
From: Lodewiges <jamestreeg@gmail.com>
Date: Sun, 1 Feb 2026 21:21:59 +0100
Subject: [PATCH 2/5] add maxium length for a password

---
 app/models/sofia_account.rb | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/app/models/sofia_account.rb b/app/models/sofia_account.rb
index 7159ec9b5..ad49a725d 100644
--- a/app/models/sofia_account.rb
+++ b/app/models/sofia_account.rb
@@ -6,7 +6,7 @@ class SofiaAccount < OmniAuth::Identity::Models::ActiveRecord
   validates :user, uniqueness: true # rubocop:disable Rails/UniqueValidationWithoutIndex
   validates :username, presence: true, uniqueness: true
   # the presence of :password is already checked by omniauth-sofia-account itself
-  validates :password, length: { minimum: 12 }, allow_nil: true
+  validates :password, length: { minimum: 12, maximum: 128 }, allow_nil: true
 
   auth_key :username # specifies the field within the model that will be used during the login process as username
 

From 4874535e1d24a3b8afaf3dbcfe4a48938a2769d3 Mon Sep 17 00:00:00 2001
From: Lodewiges <jamestreeg@gmail.com>
Date: Sun, 1 Feb 2026 21:57:53 +0100
Subject: [PATCH 3/5] add trace for depencies debugging

---
 Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Dockerfile b/Dockerfile
index 09412c1c2..b9b4ee8db 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -51,7 +51,7 @@ COPY . /app/
 
 # Precompile assets after copying app because whole Rails pipeline is needed.
 RUN if [ "$RAILS_ENV" != 'development' ] && [ "$RAILS_ENV" != 'test' ]; then \
-    SECRET_KEY_BASE_DUMMY=1 bundle exec rails assets:precompile; \
+    SECRET_KEY_BASE_DUMMY=1 bundle exec rails assets:precompile --trace; \
   else \
     echo "Skipping assets:precompile"; \
   fi

From 9935c7d3e4f89761c43450a9cb393ea171adeeb4 Mon Sep 17 00:00:00 2001
From: Lodewiges <jamestreeg@gmail.com>
Date: Sun, 1 Feb 2026 22:08:26 +0100
Subject: [PATCH 4/5] maybe this fixes it

---
 config/application.rb | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/config/application.rb b/config/application.rb
index 9883b0502..a1ce4b211 100644
--- a/config/application.rb
+++ b/config/application.rb
@@ -6,6 +6,9 @@
 # you've limited to :test, :development, or :production.
 Bundler.require(*Rails.groups)
 
+# Ensure connection_pool 3.x compatibility for early cache store setup
+require_relative 'initializers/connection_pool_compat'
+
 module Sofia
   class Application < Rails::Application
     # Initialize configuration defaults for originally generated Rails version.

From 4ef0e6689bdae81edbdda6d2c94c19ee6732d113 Mon Sep 17 00:00:00 2001
From: Lodewiges <jamestreeg@gmail.com>
Date: Sun, 1 Feb 2026 22:21:59 +0100
Subject: [PATCH 5/5] fix publish image

---
 Dockerfile            | 2 +-
 Gemfile.lock          | 2 +-
 config/application.rb | 3 ---
 3 files changed, 2 insertions(+), 5 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index b9b4ee8db..09412c1c2 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -51,7 +51,7 @@ COPY . /app/
 
 # Precompile assets after copying app because whole Rails pipeline is needed.
 RUN if [ "$RAILS_ENV" != 'development' ] && [ "$RAILS_ENV" != 'test' ]; then \
-    SECRET_KEY_BASE_DUMMY=1 bundle exec rails assets:precompile --trace; \
+    SECRET_KEY_BASE_DUMMY=1 bundle exec rails assets:precompile; \
   else \
     echo "Skipping assets:precompile"; \
   fi
diff --git a/Gemfile.lock b/Gemfile.lock
index 633068573..db564837b 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -118,7 +118,7 @@ GEM
     coderay (1.1.3)
     colorize (1.1.0)
     concurrent-ruby (1.3.6)
-    connection_pool (3.0.2)
+    connection_pool (2.5.5)
     crass (1.0.6)
     cssbundling-rails (1.4.3)
       railties (>= 6.0.0)
diff --git a/config/application.rb b/config/application.rb
index a1ce4b211..9883b0502 100644
--- a/config/application.rb
+++ b/config/application.rb
@@ -6,9 +6,6 @@
 # you've limited to :test, :development, or :production.
 Bundler.require(*Rails.groups)
 
-# Ensure connection_pool 3.x compatibility for early cache store setup
-require_relative 'initializers/connection_pool_compat'
-
 module Sofia
   class Application < Rails::Application
     # Initialize configuration defaults for originally generated Rails version.