Skip to content

Conversation

@kaysiz
Copy link
Member

@kaysiz kaysiz commented Jan 16, 2026

Purpose

closes: Add github issue that originated this PR

Approach

Open Questions and Pre-Merge TODOs

Learning

Types of changes

  • Bug fix (non-breaking change which fixes an issue)

  • New feature (non-breaking change which adds functionality)

  • Breaking change (fix or feature that would cause existing functionality to change)

Reviewer, please remember our guidelines:

  • Be humble in the language and feedback you give, ask don't tell.
  • Consider using positive language as opposed to neutral when offering feedback. This is to avoid the negative bias that can occur with neutral language appearing negative.
  • Offer suggestions on how to improve code e.g. simplification or expanding clarity.
  • Ensure you give reasons for the changes you are proposing.

@kaysiz kaysiz changed the title Upgrade ruby and Rails Upgrade: Rails 7.1 → 7.2 & Ruby 3.1.7 → 3.2.9 Jan 23, 2026
@kaysiz kaysiz marked this pull request as ready for review January 23, 2026 09:10
@kaysiz kaysiz self-assigned this Jan 23, 2026
@kaysiz kaysiz requested a review from a team January 23, 2026 09:10

# Force all access to the app over SSL, use Strict-Transport-Security, and use secure cookies.
# config.force_ssl = true
config.force_ssl = true
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

In general this seems like a good idea but will this mess anything up? Does anything post to events directly? And does it use https?

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Isn't the SSL layer provided by the load balancer? If it's expecting to connect internally to the containers on port 80 / without SSL, this could maybe cause an issue?

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Oh wait, despite it saying REST API in the README, this is not actually the api.datacite.org/events endpoint and I just got confused 🫠

Copy link

@jrhoads jrhoads left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I have the comment about SSL that I posted just a couple minutes ago, but if you are confident that I am A-OK going forward,

@kaysiz kaysiz merged commit 9e42537 into main Jan 27, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants