The Artsy Auction Kiosk App.

Artsy

Last update: Dec 25, 2022

Related tags

Overview

Eidolon

The Artsy Auction Kiosk App.

Note: Current development is done on the xcode-9 branch using Xcode 9 (available for download on Apple's developer portal). You can see this issue for more details.

Project Status

Featured in Vogue. Physical enclosure made by Visibility.

Downloading the Code

(Note: if you're an Artsy employee, you'll need to follow these directions instead.)

You'll need a few things before we get started. Make sure you have Xcode installed from the App Store or wherever. Then run the following two commands to install Xcode's command line tools and bundler, if you don't have that yet.

[sudo] gem install bundler
xcode-select --install

The following commands will set up Eidolon with the expectation that you don't have API access and will use blanks for API keys.

git clone https://github.com/artsy/eidolon.git
cd eidolon
bundle install
bundle exec fastlane oss

Alrighty! We're ready to go!

Getting Started

Now that we have the code downloaded, we can run the app using Xcode 9. Make sure to open the Kiosk.xcworkspace workspace, and not the Kiosk.xcodeproj project.

Artsy has licensed fonts for use in this app, but due to the terms of that license, they are not available for open source distribution. This has required us to use private pods. The Podfile deals with the differences transparently.

The Artsy API is private, making it difficult for open source developers to run the app. If you don't have access to the private Artsy fonts pod, then Eidolon infers that it should use stubbed data instead of hitting the live API.

Questions

If you have questions about any aspect of this project, please feel free to open an issue. We'd love to hear from you!

Contributing

This project is being developed by Artsy primarily for its use as Artsy's auction kiosk app, and we are not expecting to have significant community contributions back to it. We are developing this project in the open because it is not part of our core IP, and open source is part of our job. However, if you notice something that is wrong or could be improved, don't hesitate to send us a pull request.

License

MIT License. See LICENSE.

Comments

"make bootstrap" fails

make bootstrap fails. Terminal output pasted below for reference.

new-host-5:eidolon f61lk2d$ pwd /Users/f61lk2d/workspace/iOS sandbox/eidolon new-host-5:eidolon f61lk2d$ ls Gemfile Kiosk.xcworkspace Podfile Gemfile.lock KioskTests Podfile.lock Kiosk LICENSE README.md Kiosk.xcodeproj Makefile docs new-host-5:eidolon f61lk2d$ make bootstrap

Setting up API Keys, leave blank if you don't know.

What is your Artsy API Client Secret? /bin/sh: bundle: command not found make: *** [bootstrap] Error 127

opened by abunur 26
CocoaPods keep fetching Artsy+UIFonts

I know that in your team you guys use Artsy_UIFonts module, while we use Artsy_OSSUIFonts module when building the oss version. Yet when i execute "fastlane oss" or "pod install", cocoapods keep fetching the Artsy+UIFonts module. Is there a cache somewhere. I've tried to delete Pod.lock, not working?

opened by hw-in-github 20
@1aurabrown => Updates to CocoaPods 0.36 Beta 1
In the process of writing that blog post, I thought it'd be prudent to update to the new CocoaPods beta.

The project doesn't currently build – the compiler segfaults. It looks similar to the error we were getting in XCGLogger when optimizations turned on, so through some trial-and-error, I figured out that it was the Pods target itself. Disabling compiler optimization for this target fixed the segfaults – maybe something in cocoapods-keys?

[ ] ~~Disable Pods optimizations using post-install hook~~

[x] Fix UIFonts pod (the resource files aren't being accessed properly, causing a runtime crash)

[x] Investigate why compiler is segfaulting on first-pass but succeeding on subsequent builds

At any rate, I think including an example of how to disable optimizations on a specific pod would be :+1: in the blog post.
opened by ashfurrow 20
Dynamic frameworks load time?

I'm seeing large load times when using dynamic frameworks on my app and decided to check if this was an issue for you guys too.

I could reproduce the issue on an iPad 3 here and sometimes the app won't even launch due to the WatchDog. Am I missing something here? Do you really suffer from this issue too?

This seems to be the same issue as https://github.com/artsy/eigen/issues/586.

opened by marcelofabri 16
@ashfurrow : add CVV to manual card entry

Due to my simulator seemingly not connecting to staging auctions, I haven't been able to actually try this on my own, so it may not quite work. I tried to write it completely analogously to existing code.

opened by acjay 15
bundle install don't work, how to fix on this problem ?

Sample: https://github.com/artsy/eidolon

git clone https://github.com/artsy/eidolon.git cd eidolon bundle install

bundle exec fastlane oss

Uthens-MacBook-Pro:eidolon uthen$ bundle install don't work how to resolve on this problem ?

Last login: Mon Jan 18 22:56:11 on ttys004 Uthens-MacBook-Pro:eidolon uthen$ bundle install Fetching gem metadata from https://rubygems.org/......... Fetching version metadata from https://rubygems.org/... Fetching dependency metadata from https://rubygems.org/.. Fetching https://github.com/ffi/ffi.git fatal: Could not parse object 'd94b923c1f574ff63743f0a3eefc917da03386b9'. Git error: command git reset --hard d94b923c1f574ff63743f0a3eefc917da03386b9 in directory /Users/uthen/.rbenv/versions/2.1.2/lib/ruby/gems/2.1.0/bundler/gems/ffi-d94b923c1f57 has failed. If this error persists you could try removing the cache directory '/Users/uthen/.rbenv/versions/2.1.2/lib/ruby/gems/2.1.0/cache/bundler/git/ffi-7fa1fad54f97b3471351dbde91d8b0a9444ce49e' Uthens-MacBook-Pro:eidolon uthen$

opened by uthens 13
Swallowed error on entering cc

Witnessed a user register, enter a cc, then enter an expiration date, then hit ok and get nothing back. Spinner spinned, then the button came back clickable without any errors. CC seems to have been entered into the system. The only workaround was to take someone's bid on an ipad. Trying to bid again on a kiosk was asking for the cc again, didn't retry.
confirmed bug

opened by dblock 13
@acjay: Adds zip code to manual CC tokenization.

I'm currently getting 401's against the staging API for all requests, so I haven't been able to test this except for the UI. Let me know what you think.

This fixes an issue tracked in Trello at https://trello.com/c/y2CRxXFy/120-kiosk-submit-zip-with-credit-card-registration

opened by ashfurrow 12
@alloy => Manual CC Entry Problem 📱

Crus is that we weren't sending a "complete" event to our finishedSignal once the CC tokenization succeeded. I added tests to ensure that the event is sent if and only if the tokenization succeeds.

I also noticed a few other problems that I fixed and added test for, in separate commits. Should I make things like that separate PRs? Open to advice.

(Note: Circle and Travis are currently both failing to run tests. I've checked that they pass locally.)

Fixes #455.

opened by ashfurrow 11
Manual name entry

This is work for PURCHASE-640 and requires users who skip the credit card swipe to manually enter in their name. ~It's a WIP because it's not done yet.~
Jira Synced

opened by ashfurrow 10
Consolidate Providers with DI
This PR fixes #433 , a long-standing issue that I've been meaning to tackle for a while. Instead of using shared, global state (through fulfillmentNav(), a global-ish function), this uses DI to inject network access into objects.

This PR also removes some old TODOs and does a bit of cleanup around weak references to self that didn't really need to be weak.

I also tried to use the type system a bit to differentiate between regular network access and authenticated network access. Ideally, these would be stored in two separate MoyaTarget enums, grouped by whether or not they required authorization. It only gets hairy because the XApp token would either need to exist on both (or we assume that the XApp token never needs to be refreshed by a network call that needs authorization, a very unlikely situation). Going to take another look tomorrow.

Still to be done:

[x] Two enums.

[x] More manual testing

[ ] Updated unit tests

[ ] ~~I'd like to get rid of the fulfillmentNav() altogether, since it's only being used to pass around the bidDetails, which can be similarly DI'd. But that's a lot lower priority, so maybe next time :wave:~~
opened by ashfurrow 9
Bump addressable from 2.5.2 to 2.8.1
Bumps addressable from 2.5.2 to 2.8.1.

Changelog

Sourced from addressable's changelog.

Addressable 2.8.1

refactor Addressable::URI.normalize_path to address linter offenses (#430)

remove redundant colon in Addressable::URI::CharacterClasses::AUTHORITY regex (#438)

update gemspec to reflect supported Ruby versions (#466, #464, #463)

compatibility w/ public_suffix 5.x (#466, #465, #460)

fixes "invalid byte sequence in UTF-8" exception when unencoding URLs containing non UTF-8 characters (#459)

Ractor compatibility (#449)

use the whole string instead of a single line for template match (#431)

force UTF-8 encoding only if needed (#341)

#460: sporkmonger/addressable#460 #463: sporkmonger/addressable#463 #464: sporkmonger/addressable#464 #465: sporkmonger/addressable#465 #466: sporkmonger/addressable#466

Addressable 2.8.0

fixes ReDoS vulnerability in Addressable::Template#match

no longer replaces + with spaces in queries for non-http(s) schemes

fixed encoding ipv6 literals

the :compacted flag for normalized_query now dedupes parameters

fix broken escape_component alias

dropping support for Ruby 2.0 and 2.1

adding Ruby 3.0 compatibility for development tasks

drop support for rack-mount and remove Addressable::Template#generate

performance improvements

switch CI/CD to GitHub Actions

Addressable 2.7.0

added :compacted flag to normalized_query

heuristic_parse handles mailto: more intuitively

dropped explicit support for JRuby 9.0.5.0

compatibility w/ public_suffix 4.x

performance improvements

Addressable 2.6.0

added tld= method to allow assignment to the public suffix

most heuristic_parse patterns are now case-insensitive

heuristic_parse handles more file:// URI variations

fixes bug in heuristic_parse when uri starts with digit

fixes bug in request_uri= with query strings

fixes template issues with nil and ? operator

frozen_string_literal pragmas added

minor performance improvements in regexps

fixes to eliminate warnings

Commits

8657465 Update version, gemspec, and CHANGELOG for 2.8.1 (#474)

4fc5bb6 CI: remove Ubuntu 18.04 job (#473)

860fede Force UTF-8 encoding only if needed (#341)

99810af Merge pull request #431 from ojab/ct-_do_not_parse_multiline_strings

7ce0f48 Merge branch 'main' into ct-_do_not_parse_multiline_strings

7ecf751 Merge pull request #449 from okeeblow/freeze_concatenated_strings

41f12dd Merge branch 'main' into freeze_concatenated_strings

068f673 Merge pull request #459 from jarthod/iso-encoding-problem

b4c9882 Merge branch 'main' into iso-encoding-problem

08d27e8 Merge pull request #471 from sporkmonger/sporkmonger-enable-codeql

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 1
Bump tzinfo from 1.2.7 to 1.2.10
Bumps tzinfo from 1.2.7 to 1.2.10.

Release notes

Sourced from tzinfo's releases.

v1.2.10

Fixed a relative path traversal bug that could cause arbitrary files to be loaded with require when used with RubyDataSource. Please refer to https://github.com/tzinfo/tzinfo/security/advisories/GHSA-5cm2-9h8c-rvfx for details. CVE-2022-31163.

Ignore the SECURITY file from Arch Linux's tzdata package. #134.

TZInfo v1.2.10 on RubyGems.org

v1.2.9

Fixed an incorrect InvalidTimezoneIdentifier exception raised when loading a zoneinfo file that includes rules specifying an additional transition to the final defined offset (for example, Africa/Casablanca in version 2018e of the Time Zone Database). #123.

TZInfo v1.2.9 on RubyGems.org

v1.2.8

Added support for handling "slim" format zoneinfo files that are produced by default by zic version 2020b and later. The POSIX-style TZ string is now used calculate DST transition times after the final defined transition in the file. The 64-bit section is now always used regardless of whether Time has support for 64-bit times. #120.

Rubinius is no longer supported.

TZInfo v1.2.8 on RubyGems.org

Changelog

Sourced from tzinfo's changelog.

Version 1.2.10 - 19-Jul-2022

Fixed a relative path traversal bug that could cause arbitrary files to be loaded with require when used with RubyDataSource. Please refer to https://github.com/tzinfo/tzinfo/security/advisories/GHSA-5cm2-9h8c-rvfx for details. CVE-2022-31163.

Ignore the SECURITY file from Arch Linux's tzdata package. #134.

Version 1.2.9 - 16-Dec-2020

Fixed an incorrect InvalidTimezoneIdentifier exception raised when loading a zoneinfo file that includes rules specifying an additional transition to the final defined offset (for example, Africa/Casablanca in version 2018e of the Time Zone Database). #123.

Version 1.2.8 - 8-Nov-2020

Added support for handling "slim" format zoneinfo files that are produced by default by zic version 2020b and later. The POSIX-style TZ string is now used calculate DST transition times after the final defined transition in the file. The 64-bit section is now always used regardless of whether Time has support for 64-bit times. #120.

Rubinius is no longer supported.

Commits

0814dcd Fix the release date.

fd05e2a Preparing v1.2.10.

b98c32e Merge branch 'fix-directory-traversal-1.2' into 1.2

ac3ee68 Remove unnecessary escaping of + within regex character classes.

9d49bf9 Fix relative path loading tests.

394c381 Remove private_constant for consistency and compatibility.

5e9f990 Exclude Arch Linux's SECURITY file from the time zone index.

17fc9e1 Workaround for 'Permission denied - NUL' errors with JRuby on Windows.

6bd7a51 Update copyright years.

9905ca9 Fix directory traversal in Timezone.get when using Ruby data source

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 1
Bump nokogiri from 1.8.5 to 1.13.6
Bumps nokogiri from 1.8.5 to 1.13.6.

Release notes

Sourced from nokogiri's releases.

1.13.6 / 2022-05-08

Security

[CRuby] Address CVE-2022-29181, improper handling of unexpected data types, related to untrusted inputs to the SAX parsers. See GHSA-xh29-r2w5-wx8m for more information.

Improvements

{HTML4,XML}::SAX::{Parser,ParserContext} constructor methods now raise TypeError instead of segfaulting when an incorrect type is passed.

sha256:

58417c7c10f78cd1c0e1984f81538300d4ea98962cfd3f46f725efee48f9757a nokogiri-1.13.6-aarch64-linux.gem a2b04ec3b1b73ecc6fac619b41e9fdc70808b7a653b96ec97d04b7a23f158dbc nokogiri-1.13.6-arm64-darwin.gem 4437f2d03bc7da8854f4aaae89e24a98cf5c8b0212ae2bc003af7e65c7ee8e27 nokogiri-1.13.6-java.gem 99d3e212bbd5e80aa602a1f52d583e4f6e917ec594e6aa580f6aacc253eff984 nokogiri-1.13.6-x64-mingw-ucrt.gem a04f6154a75b6ed4fe2d0d0ff3ac02f094b54e150b50330448f834fa5726fbba nokogiri-1.13.6-x64-mingw32.gem a13f30c2863ef9e5e11240dd6d69ef114229d471018b44f2ff60bab28327de4d nokogiri-1.13.6-x86-linux.gem 63a2ca2f7a4f6bd9126e1695037f66c8eb72ed1e1740ef162b4480c57cc17dc6 nokogiri-1.13.6-x86-mingw32.gem 2b266e0eb18030763277b30dc3d64337f440191e2bd157027441ac56a59d9dfe nokogiri-1.13.6-x86_64-darwin.gem 3fa37b0c3b5744af45f9da3e4ae9cbd89480b35e12ae36b5e87a0452e0b38335 nokogiri-1.13.6-x86_64-linux.gem b1512fdc0aba446e1ee30de3e0671518eb363e75fab53486e99e8891d44b8587 nokogiri-1.13.6.gem

1.13.5 / 2022-05-04

Security

[CRuby] Vendored libxml2 is updated to address CVE-2022-29824. See GHSA-cgx6-hpwq-fhv5 for more information.

Dependencies

[CRuby] Vendored libxml2 is updated from v2.9.13 to v2.9.14.

Improvements

[CRuby] The libxml2 HTML4 parser no longer exhibits quadratic behavior when recovering some broken markup related to start-of-tag and bare < characters.

Changed

[CRuby] The libxml2 HTML4 parser in v2.9.14 recovers from some broken markup differently. Notably, the XML CDATA escape sequence <![CDATA[ and incorrectly-opened comments will result in HTML text nodes starting with <! instead of skipping the invalid tag. This behavior is a direct result of the quadratic-behavior fix noted above. The behavior of downstream sanitizers relying on this behavior will also change. Some tests describing the changed behavior are in test/html4/test_comments.rb.

... (truncated)

Changelog

Sourced from nokogiri's changelog.

1.13.6 / 2022-05-08

Security

[CRuby] Address CVE-2022-29181, improper handling of unexpected data types, related to untrusted inputs to the SAX parsers. See GHSA-xh29-r2w5-wx8m for more information.

Improvements

{HTML4,XML}::SAX::{Parser,ParserContext} constructor methods now raise TypeError instead of segfaulting when an incorrect type is passed.

1.13.5 / 2022-05-04

Security

[CRuby] Vendored libxml2 is updated to address CVE-2022-29824. See GHSA-cgx6-hpwq-fhv5 for more information.

Dependencies

[CRuby] Vendored libxml2 is updated from v2.9.13 to v2.9.14.

Improvements

[CRuby] The libxml2 HTML parser no longer exhibits quadratic behavior when recovering some broken markup related to start-of-tag and bare < characters.

Changed

[CRuby] The libxml2 HTML parser in v2.9.14 recovers from some broken markup differently. Notably, the XML CDATA escape sequence <![CDATA[ and incorrectly-opened comments will result in HTML text nodes starting with <! instead of skipping the invalid tag. This behavior is a direct result of the quadratic-behavior fix noted above. The behavior of downstream sanitizers relying on this behavior will also change. Some tests describing the changed behavior are in test/html4/test_comments.rb.

1.13.4 / 2022-04-11

Security

Address CVE-2022-24836, a regular expression denial-of-service vulnerability. See GHSA-crjr-9rc5-ghw8 for more information.

[CRuby] Vendored zlib is updated to address CVE-2018-25032. See GHSA-v6gp-9mmm-c6p5 for more information.

[JRuby] Vendored Xerces-J (xerces:xercesImpl) is updated to address CVE-2022-23437. See GHSA-xxx9-3xcr-gjj3 for more information.

[JRuby] Vendored nekohtml (org.cyberneko.html) is updated to address CVE-2022-24839. See GHSA-gx8x-g87m-h5q6 for more information.

Dependencies

[CRuby] Vendored zlib is updated from 1.2.11 to 1.2.12. (See LICENSE-DEPENDENCIES.md for details on which packages redistribute this library.)

[JRuby] Vendored Xerces-J (xerces:xercesImpl) is updated from 2.12.0 to 2.12.2.

[JRuby] Vendored nekohtml (org.cyberneko.html) is updated from a fork of 1.9.21 to 1.9.22.noko2. This fork is now publicly developed at https://github.com/sparklemotion/nekohtml

... (truncated)

Commits

b7817b6 version bump to v1.13.6

61b1a39 Merge pull request #2530 from sparklemotion/flavorjones-check-parse-memory-ty...

83cc451 fix: {HTML4,XML}::SAX::{Parser,ParserContext} check arg types

22c9e5b version bump to v1.13.5

6155881 doc: update CHANGELOG for v1.13.5

c519a47 Merge pull request #2527 from sparklemotion/2525-update-libxml-2_9_14-v1_13_x

66c2886 dep: update libxml2 to v2.9.14

b7c4cc3 test: unpend the LIBXML_LOADED_VERSION test on freebsd

eac7934 dev: require yaml

f3521ba style(rubocop): pend Style/FetchEnvVar for now

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 1
Bump cocoapods-downloader from 1.3.0 to 1.6.3
Bumps cocoapods-downloader from 1.3.0 to 1.6.3.

Release notes

Sourced from cocoapods-downloader's releases.

1.6.3

Enhancements

None.

Bug Fixes

None.

1.6.2

Enhancements

None.

Bug Fixes

None.

1.6.1

Enhancements

None.

Bug Fixes

None.

1.6.0

Enhancements

None.

Bug Fixes

Adds a check for command injections in the input for hg and git.
orta #124

1.5.1

Enhancements

None.

Bug Fixes

Fix "can't modify frozen string" errors when pods are integrated using the branch option
buju77 #10920

1.5.0

... (truncated)

Changelog

Sourced from cocoapods-downloader's changelog.

1.6.3 (2022-04-01)

Enhancements

None.

Bug Fixes

None.

1.6.2 (2022-03-28)

Enhancements

None.

Bug Fixes

None.

1.6.1 (2022-03-23)

Enhancements

None.

Bug Fixes

None.

1.6.0 (2022-03-22)

Enhancements

None.

Bug Fixes

Adds a check for command injections in the input for hg and git.
orta #124

1.5.1 (2021-09-07)

Enhancements

None.

... (truncated)

Commits

c03e2ed Release 1.6.3

f75bccc Disable Bazaar tests due to macOS 12.3 not including python2

52a0d54 Merge pull request #128 from CocoaPods/validate_before_dl

d27c983 Ensure that the git pre-processor doesn't accidentally bail also

3adfe1f [CHANGELOG] Add empty Master section

591167a Release 1.6.2

d2564c3 Merge pull request #127 from CocoaPods/validate_before_dl

99fec61 Switches where we check for invalid input, to move it inside the download fun...

96679f2 [CHANGELOG] Add empty Master section

3a7c54b Release 1.6.1

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 1
Can't build in xCode. It's searching for a Pods folder that doesn't exist

Hi, I'm new to coding, so please be gentle. I've downloaded all the dependencies, and I'm now trying to open this project in xCode, but I keep getting target integrity errors. I'm trying to attach a screenshot of the issue from xCode. Could you offer a solution, please?

It seems to be looking for a "Pods-KioskTest.debug.xcconfig" file in a folder that doesn't exist. How do I get it to stop doing this?

opened by partnerings 8