Gemfile

source "https://rubygems.org"

git_source(:github) do |repo_name|
  repo_name = "#{repo_name}/#{repo_name}" unless repo_name.include?("/")
  "https://github.com/#{repo_name}.git"
end

# GitHub Packages requires tokens, even for public repositories; so we use git for now
# source "https://rubygems.pkg.github.com/mlibrary" do
#   gem "middle_english_dictionary", "1.9.1"
# end
gem "middle_english_dictionary", git: "https://github.com/mlibrary/middle_english_dictionary", tag: "v1.9.1"

gem "pg"
gem "date_named_file"
gem "zinzout"
gem "solr_cloud-connection", ">=0.6.0"

gem "shrine", "~> 3.6"
gem "aws-sdk-s3", "~> 1.160"
gem "content_disposition", "~> 1.0"
gem "uppy-s3_multipart", "~> 1.2"

gem "ttl_memoizeable"

#####################################
# Try to work around brokenness on
# nectar.
###################################

gem "nio4r", "=2.5.2"
# gem 'puma',  '=4.1.0'
gem "puma", ">= 4.3.5" # https://github.com/advisories/GHSA-w64w-qqph-5gxm

###############################
# SECURITY ALERTS
##############################

# https://nvd.nist.gov/vuln/detail/CVE-2018-16471
# https://github.com/advisories/GHSA-5f9h-9pjv-v6j7
gem "rack", ">= 2.1.4"

# https://github.com/advisories/GHSA-g6wq-qcwm-j5g2
gem "websocket-extensions", ">= 0.1.5"

# https://github.com/advisories/GHSA-r5jw-62xg-j433
gem "kaminari", ">= 1.2.1"

# https://github.com/advisories/GHSA-2p68-f74v-9wc6
gem "activesupport", ">= 5.2.4.3"

# https://github.com/advisories/GHSA-jp5v-5gx4-jmj9
gem "actionpack", ">= 5.2.4.3"

# https://github.com/advisories/GHSA-xq5j-gw7f-jgj8
gem "actionview", ">= 5.2.4.3"

# https://nvd.nist.gov/vuln/detail/CVE-2018-16468
# https://github.com/advisories/GHSA-c3gv-9cxf-6f57
gem "loofah", ">= 2.3.1"

# https://github.com/advisories/GHSA-cr5j-953j-xw5p
# https://github.com/advisories/GHSA-7553-jr98-vx47
gem "nokogiri", ">= 1.10.10"

# https://github.com/advisories/GHSA-r74q-gxcg-73hx
gem "simple_form", "~>5.0"

#############################################
# Non-default stuff added by the Dromedary team
#############################################

# When developing in tandem, a relative path is nice and easy

# Use bundler 2
gem "bundler", "~>2.4.22"

# ,,, and explicitly pull in rake
gem "rake", "~> 13.0"

# Use Ettin for configuration and Canister for DI
#
gem "ettin"
gem "canister"

# Rails
#  https://groups.google.com/forum/#!topic/rubyonrails-security/GN7w9fFAQeI)

gem "rails", "~> 5.0"

# Security vulnerability CVE-2018-3760
gem "sprockets", "~>3.7.2"

# They messed with the auto-suggest code, so we're stuck here for a while
gem "blacklight", "~> 6.15.0"

# For bin/dromedary
gem "hanami-cli", "0.2.0" # peg it until I we can update to 3.

# For truncating html safely (making sure tags are balanced, etc.)
gem "html_truncator", "~>0.2"

# For solr indexing
gem "simple_solr_client", require: false # only for bin/dromedary stuff
gem "traject", require: false # only for indexing
# if defined? JRUBY_VERSION
#   gem 'traject-marc4j_reader'
# end

# Building lists of xpaths
# gem 'xpath_list', git: 'https://github.com/billdueber/xpath_list', require: false # only for data analysis

# Semantic logging?
gem "awesome_print"
gem "semantic_logger"

gem "lograge", ">=0.11.1"

# Contacts Email
gem "mail_form", "~>1.7"
# Extendable layouts
gem "nestive", "0.6.0"

# Use pry for the console
group :development, :test do
  gem "pry-rails"

  # Faster boot times

  gem "listen", require: false
  unless defined? JRUBY_VERSION
    gem "ruby-prof"
    gem "pry-byebug"
  end
end

gem "standard"

#############################################

# Databases

if defined? JRUBY_VERSION
  gem "jdbc-sqlite3"
  gem "jdbc-mysql"
else
  gem "sqlite3", "~>1.3.13"
  # AR won't work with the latest mysql2, apparently
  # See https://stackoverflow.com/questions/49407254/gemloaderror-cant-activate-mysql2-0-5-0-3-18-already-activated-mysq
  gem "mysql2", "< 0.5.0", require: false
end

# JS and CSS
gem "sass-rails", "~> 5.0"
gem "uglifier", ">= 1.3.0"
gem "coffee-rails", "~> 4.2"

# Turbolinks makes navigating your web application faster. Read more: https://github.com/turbolinks/turbolinks
# gem 'turbolinks', '~> 5'
#

# Build JSON APIs with ease. Read more: https://github.com/rails/jbuilder

gem "jbuilder", "~> 2.5"

# Use Redis adapter to run Action Cable in production
# gem 'redis', '~> 3.0'
# Use ActiveModel has_secure_password
# gem 'bcrypt', '~> 3.1.7'

###############################
# Gems for automated indexing #
###############################
gem "prometheus-client", "~> 4.0"
gem "sidekiq"
gem "okcomputer"

# Use Capistrano for deployment
# gem 'capistrano-rails', group: :development

group :development, :test do
  # gem 'capybara', '~> 2.13' # no longer deploying like this.
  gem "selenium-webdriver"
  gem "rspec-rails", "~> 3.6"
end

group :development do
  # Access an IRB console on exception pages or by using <%= console %> anywhere in the code.
  gem "web-console", ">= 3.3.0"
  # RubyMine Docker-Compose Debugging
  gem "debase"
  gem "ruby-debug-ide"
end

group :test do
  gem "simplecov", require: false
  gem "factory_bot_rails", "~> 4.0"
end

# Windows does not include zoneinfo files, so bundle the tzinfo-data gem
gem "tzinfo-data", platforms: [:mingw, :mswin, :x64_mingw, :jruby]

gem "rsolr", ">= 1.0"
gem "jquery-rails"