Promote QA → production (10 commits)#784
Merged
Merged
Conversation
) Bumps [typescript](https://github.com/microsoft/TypeScript) from 5.9.3 to 6.0.3. - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](microsoft/TypeScript@v5.9.3...v6.0.3) --- updated-dependencies: - dependency-name: typescript dependency-version: 6.0.3 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
--- updated-dependencies: - dependency-name: Anthropic dependency-version: 12.22.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
--- updated-dependencies: - dependency-name: coverlet.collector dependency-version: 10.0.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…etail (#691) The duplicate-account Detail page only rendered the conflict-matched EmailSources subset, so an admin couldn't see each account's complete email footprint when deciding which to keep. Surface the full picture per account: the raw User.Email Identity column plus every UserEmails row (with Primary/Verified/Google/Provider badges). The data was already loaded via UserInfo; the controller now reuses that fetch and maps it into the view model. The shared conflicting email stays in the top "Email Conflict" card, so the dropped EmailSources subset loses no context. Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
New IMailerAudience targeting "Humans - Marketing no Ticket": users who have explicitly opted in to Marketing (UserInfo.MarketingOptedOut == false, excluding null and true) AND do not hold a ticket in the active vendor event. Lets us mail marketing opt-ins who haven't bought a ticket yet without spamming the ones who already have. Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
…74.0.4150 (#688) --- updated-dependencies: - dependency-name: Google.Apis.CloudIdentity.v1 dependency-version: 1.74.0.4150 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
--- updated-dependencies: - dependency-name: dotnet-stryker dependency-version: 4.14.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [@playwright/test](https://github.com/microsoft/playwright) from 1.58.2 to 1.60.0. - [Release notes](https://github.com/microsoft/playwright/releases) - [Commits](microsoft/playwright@v1.58.2...v1.60.0) --- updated-dependencies: - dependency-name: "@playwright/test" dependency-version: 1.60.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…ng opt-ins (#692) The import pulled the entire MailerLite account, ingesting the non-marketing lists created two days ago and inflating the marketing universe — a GDPR issue. - Scope BuildPlanAsync/ApplyAsync to the "Website" group (resolved by name; throws if absent so it never silently falls back to whole-account). - Add ICommunicationPreferenceService.ResetPreferenceAsync — deletes the CommunicationPreference row (→ null, distinct from opt-out) + repo DeleteByUserAndCategoryAsync. Cache refresh handled by the existing UserInfoSaveChangesInterceptor on delete. - New ResetMarketingFlag outcome: Marketing opt-ins written by the bad import (UpdateSource="MailerLiteSync", opted-in, no prior consent — SubscribedAt null or >= 2026-05-19T00:01:01Z) on people not in the Website group are reset to null. Website members of any status are owned by the import loop (active -> opt-in, unsubscribed/bounced -> opt-out), so explicit unsubscribes stay opt-out rather than being nulled. Re-checked at commit time. - Surface the new category in the /Mailer/Admin/Import preview (summary + detail) and the result summary + >10% drift guard. No EF migration (row deletes only). Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
* chore(deps): Bump Ical.Net from 5.2.1 to 5.2.2 --- updated-dependencies: - dependency-name: Ical.Net dependency-version: 5.2.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> * fix(calendar): use RecurrenceRule singular for Ical.Net 5.2.2 Ical.Net 5.2.2 marks RecurringComponent.RecurrenceRules (the plural collection) [Obsolete], which our warnings-as-errors build promotes to CS0618, failing both `build` and `code-quality` (dotnet format) on the dependency-bump PR. Both call sites only ever added a single pattern, so swap the obsolete `RecurrenceRules.Add(new RecurrencePattern(...))` for the new singular `RecurrenceRule = new RecurrencePattern(...)` the obsolete message points to. - CalendarOccurrenceExpander.cs: recurrence expansion - CalendarService.cs: COUNT-bounded rule end-time computation Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Peter Drier <peter.drier@gmail.com> Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
| <ItemGroup> | ||
| <!-- AI/LLM --> | ||
| <PackageVersion Include="Anthropic" Version="12.11.0" /> | ||
| <PackageVersion Include="Anthropic" Version="12.22.0" /> |
There was a problem hiding this comment.
WARN — About page not updated after NuGet bumps
memory/process/about-page-license-attribution.md — After any NuGet update, src/Humans.Web/Views/About/Index.cshtml must be updated to reflect the new versions and licenses (AGPL-3.0 attribution requirement).
This PR bumps three production NuGet packages without updating the About page:
Anthropic12.11.0 → 12.22.0Ical.Net5.2.1 → 5.2.2Google.Apis.CloudIdentity.v11.74.0.4030 → 1.74.0.4150
Update Views/About/Index.cshtml to reflect the new versions before merging.
|
Reviewed commit 543c884. 1 inline finding posted. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Batched promotion of QA-tested changes from
peterdrier/Humans:mainto production.All issue/PR refs are qualified per
memory/process/issue-refs-qualified.md—peterdrier/Humans#NNNfor peter-fork PRs,nobodies-collective/Humans#NNNfor upstream issues.Commits
543c8846dchore(deps): Bump Ical.Net from 5.2.1 to 5.2.2 (chore(deps): Bump Ical.Net from 5.2.1 to 5.2.2 peterdrier/Humans#689)43a1013c8fix(mailer): scope import to Website group + reset miswritten marketing opt-ins (fix(mailer): scope import to Website group + reset miswritten marketing opt-ins peterdrier/Humans#692)7a2958b5echore(e2e-deps): Bump @playwright/test in /tests/e2e (chore(e2e-deps): Bump @playwright/test from 1.58.2 to 1.60.0 in /tests/e2e peterdrier/Humans#684)d192db106chore(deps): Bump dotnet-stryker from 4.14.1 to 4.14.2 (chore(deps): Bump dotnet-stryker from 4.14.1 to 4.14.2 peterdrier/Humans#687)4b0c4c126chore(deps): Bump Google.Apis.CloudIdentity.v1 from 1.74.0.4030 to 1.74.0.4150 (chore(deps): Bump Google.Apis.CloudIdentity.v1 from 1.74.0.4030 to 1.74.0.4150 peterdrier/Humans#688)e5fc2c093feat(mailer): add MarketingNoTicketAudience (feat(mailer): add MarketingNoTicketAudience peterdrier/Humans#690)fd53382cbfeat(admin): show full User.Email + UserEmails on duplicate-account detail (feat(admin): show full User.Email + UserEmails on duplicate-account detail peterdrier/Humans#691)10a68635cchore(deps): Bump coverlet.collector from 10.0.0 to 10.0.1 (chore(deps): Bump coverlet.collector from 10.0.0 to 10.0.1 peterdrier/Humans#686)719777851chore(deps): Bump Anthropic from 12.11.0 to 12.22.0 (chore(deps): Bump Anthropic from 12.11.0 to 12.22.0 peterdrier/Humans#685)aac89c444chore(e2e-deps): bump typescript from 5.9.3 to 6.0.3 in /tests/e2e (chore(e2e-deps): bump typescript from 5.9.3 to 6.0.3 in /tests/e2e peterdrier/Humans#683)Test plan