2026.09.20

What's Changed

• Make item dropdown width responsive to window resizing (5556) by @augustocbx in #5602
• Make generated URLs domain-agnostic by @awwaiid in #5722
• Add filters to distribution by county and take into account kitted items by @cielf in #5541

Bulk User Guide Updates

• User guide: fix typos, broken links and stale labels by @awwaiid in #5709
• User guide: document per-Item request limits (#5386) by @awwaiid in #5710
• User guide: document Partner phone number (#5674) by @awwaiid in #5711
• User guide: document organization-level reminder email switches (#5686) by @awwaiid in #5712
• User guide: Request export columns and cancellation email recipients (#5681, #5606) by @awwaiid in #5713
• User guide: Audit 'Submit for final approval' and 'Pending Finalization' status (#5692) by @awwaiid in #5714
• User guide: Transfers 'Undo' button (#5604) by @awwaiid in #5715
• User guide: document features the guide had not caught up with by @awwaiid in #5716
• User guide: refresh Getting Started and Everyday Essentials screenshots by @awwaiid in #5717
• User guide: refresh Partner Management screenshots by @awwaiid in #5718
• User guide: refresh Inventory and Custom Units screenshots by @awwaiid in #5719
• docs: describe the agent-driven user guide sweep and add screenshot utilities by @awwaiid in #5721

Internal updates

• Bump newrelic_rpm from 10.6.0 to 10.7.1 by @dependabot[bot] in #5697
• Bump puma from 7.2.0 to 8.0.2 by @dependabot[bot] in #5698
• Bump simplecov from 0.22.0 to 1.1.1 by @dependabot[bot] in #5699
• Bump brakeman from 8.0.5 to 8.0.6 by @dependabot[bot] in #5700
• Bump sprockets from 4.2.2 to 4.4.1 by @dependabot[bot] in #5701
• Bump shoulda-matchers from 7.0.1 to 8.0.1 by @dependabot[bot] in #5702
• Bump terser from 1.2.7 to 1.2.8 by @dependabot[bot] in #5703
• Bump lograge from 0.14.0 to 0.15.0 by @dependabot[bot] in #5705
• Bump aws-sdk-s3 from 1.228.1 to 1.229.0 by @dependabot[bot] in #5706
• Bump rack-mini-profiler from 4.0.1 to 5.0.0 by @dependabot[bot] in #5704
• docs: add csv/base64/bigdecimal gems so Jekyll runs on Ruby 3.4 by @awwaiid in #5708

Full Changelog: 2026.08.30...2026.09.20

2026.08.30

What's Changed

• Prevent AccountRequest and Audit status changes from happening when they shouldn't be changed by @stefannibrasil in #5587
• Add filters to product drive participant list by @stefannibrasil in #5629
• Fix table alignment bug by @Jberma23 in #5639
• Upgrade Rails to 8.1.3.1 to address Brakeman EOL warning by @rodrigovirgilio in #5657
• Fix flaky system specs by @rodrigovirgilio in #5653
• Update readme by @awwaiid in #5658
• Relax CSRF origin check for tunnels/Codespaces via TUNNEL env var by @awwaiid in #5671
• Modified the header by @ashvarpe in #5673
• Resolves #5663 - Removing an icon that does not do a thing by @LizPrescott in #5676
• Makes db/seeds.rb task idempotent by @armahillo in #5669
• Migrates Wiki to docs/wiki folder by @armahillo in #5672
• 5663: A few more views contained the non-functional file icon by @LizPrescott in #5677
• fix bug where cancellations can take place without a reason by @Jberma23 in #5641
• Add coverage for enable packs feature where it's missing by @stefannibrasil in #5643
• Update schema to match prod by @awwaiid in #5675
• Add phone number to partners table by @caseyvaughn in #5674
• Added Columns to csv "Requestor Email" "Comments" by @ashvarpe in #5681
• adding fix for new request bug by @Jberma23 in #5633
• Bump to later schema date by @awwaiid in #5682
• Remove enable_packs feature flag (builds on #5642) by @awwaiid in #5685
• We no longer need enable packs to be Flippered by @stefannibrasil in #5642
• update password reset email to include datetime and signature by @ruestitch in #5689
• Natural Alphabetization of Product drive oarticipants by @StephanieFarid in #5684
• Resolves #5668 Org level disable reminder emails by @LizPrescott in #5686
• Rename audit status confimr to pending finalization by @ashvarpe in #5692
• Fix lockout from stale session[:current_role] when a different user signs in by @awwaiid in #5690
• added markdown files for mailer templates to docs by @StephanieFarid in #5693
• #5568 Fix kit allocation/deallocation history display direction (fixes #5568) by @rodrigovirgilio in #5628
• Send request cancellation email to the request sender as well as the partner (5564) by @augustocbx in #5606
• Enable csv import of partners with six fields by @McEileen in #5171
• Reorder and relabel transfer action buttons to Undo (5560) by @augustocbx in #5604
• [4987] Annual Reports range Export by @douten in #5274
• Allow a hard limit on number of specific items per request by @embarnard in #5386
• Resolves #5688 Camera now opens on barcode_items/new by @LizPrescott in #5695

New Contributors

• @Jberma23 made their first contribution in #5639
• @ashvarpe made their first contribution in #5673
• @caseyvaughn made their first contribution in #5674
• @StephanieFarid made their first contribution in #5684
• @douten made their first contribution in #5274

Full Changelog: 2026.08.02...2026.08.30

2026.08.02

What's Changed

• Visual Indicator for CSV downloads by @angyb00 in #5542
• Removes the kit value/visibility copy based on prod data validation by @awwaiid in #5635
• Bug-5152-update-donations-export-to-include-inactive-unused-items by @bsbonus in #5200
• Bug-5152-update-purchase-export-with-inactive-unpurchased-items by @bsbonus in #5201
• Bug-5152 Updates storage_location export to pull in all org items, no… by @bsbonus in https://github.com/rubyforgood/human-
• 5152 update requests export with inactive items by @bsbonus in #5211

Internal / Dev tools

• Replace Kits with KitItems by @dorner in #5597
  essentials/pull/5210
• Dev container: fix arm64 build (arch-aware Chrome) and pin postgres:16 by @NickHeiner in #5600
• Bump faker from 3.6.1 to 3.8.0 by @dependabot[bot] in #5644
• Bump rails-erd from 2.0.2 to 2.1.0 by @dependabot[bot] in #5645
• Bump brakeman from 8.0.2 to 8.0.5 by @dependabot[bot] in #5646
• Bump aws-sdk-s3 from 1.224.0 to 1.228.1 by @dependabot[bot] in #5647
• Bump nokogiri from 1.19.0 to 1.19.4 by @dependabot[bot] in #5648
• Bump icalendar from 2.12.1 to 2.12.3 by @dependabot[bot] in #5649
• Bump standard from 1.54.0 to 1.56.0 by @dependabot[bot] in #5650
• Bump strong_migrations from 2.7.0 to 2.8.0 by @dependabot[bot] in #5651
• Bump webmock from 3.26.1 to 3.26.2 by @dependabot[bot] in #5652

New Contributors

• @NickHeiner made their first contribution in #5600
• @angyb00 made their first contribution in #5542

Full Changelog: 2026.07.19...2026.08.02

2026.07.19

What's Changed

• Generalize duplicate modal and use it for kits by @jparcill in #5538
• add stars to required fields in product drive participants create view by @meamalpb in #5601
• feat: Add export product drive participants button by @mausamp in #5596
• Move Date column to first position in Donations table by @NamHT4Devlop in #5599
• Add Drive Participant column to the donation details page (5590) by @augustocbx in #5598
• Fix 500 on open-ended date input in donations#index (5608) by @augustocbx in #5614

System updates / Internal

• Bump capybara-screenshot from 1.0.26 to 1.0.27 by @dependabot[bot] in #5625
• Bump rails-erd from 1.7.2 to 2.0.2 by @dependabot[bot] in #5624
• Bump flipper-ui from 1.4.1 to 1.4.2 by @dependabot[bot] in #5622
• Bump knapsack_pro from 9.2.3 to 10.0.1 by @dependabot[bot] in #5623
• Bump newrelic_rpm from 10.5.0 to 10.6.0 by @dependabot[bot] in #5620
• Bump recaptcha from 5.21.1 to 5.21.2 by @dependabot[bot] in #5619
• Bump jwt from 3.1.2 to 3.2.0 by @dependabot[bot] in #5621
• Bump stackprof from 0.2.27 to 0.2.28 by @dependabot[bot] in #5617
• Bump discard from 1.4.0 to 2.0.0 by @dependabot[bot] in #5618
• #5615 Fix field selector in kit duplicate items spec by @rodrigovirgilio in #5627

New Contributors

• @NamHT4Devlop made their first contribution in #5599
• @augustocbx made their first contribution in #5598

Full Changelog: 2026.06.14...2026.07.19

2026.06.14

What's Changed

• Add ability to see cancelled requests by @stefannibrasil in #5543
• Add item filter to donations index page by @costajohnt in #5492
• fix-5567 : Update the text in the distribution update mailer ( wording change ) by @mausamp in #5572

New Contributors

• @mausamp made their first contribution in #5572

Full Changelog: 2026.06.07...2026.06.14

2026.06.07

What's Changed

• #5559: Confirmation on partner invite -- wording change by @andoq in #5562
• Clear selected resource when role type changes by @Will-thom in #5574
• Improve Availability date on annual report by @stefannibrasil in #5571
• Hide Cancel button for Fullfilled requests by @stefannibrasil in #5558
• Update text in request for distribution email by @janeewheatley in #5576
• Fix default purchase correction to use recorded location instead of org default (5536) by @cassxw in #5537
• Kits part 2 - KitItem by @dorner in #5517

Internal / Dev updates

• Fixing flaky tests by @dorner in #5555
• Refactor Requests controller by @stefannibrasil in #5563
• Fix drift with models and gemfile for linux by @awwaiid in #5589

Dependency Updates

• Bump geocoder from 1.8.5 to 1.8.6 by @dependabot[bot] in #5553
• Bump annotaterb from 4.20.0 to 4.22.0 by @dependabot[bot] in #5551
• Bump flipper-active_record from 1.4.0 to 1.4.1 by @dependabot[bot] in #5550
• Bump dry-struct from 1.8.0 to 1.8.1 by @dependabot[bot] in #5554
• Bump bootsnap from 1.20.1 to 1.24.1 by @dependabot[bot] in #5549
• Bump flipper-ui from 1.4.0 to 1.4.1 by @dependabot[bot] in #5552
• Bump bugsnag from 6.29.0 to 6.30.0 by @dependabot[bot] in #5547
• Bump strong_migrations from 2.6.0 to 2.7.0 by @dependabot[bot] in #5546
• Bump rubocop-rails from 2.33.4 to 2.34.3 by @dependabot[bot] in #5548
• Bump bootsnap from 1.24.1 to 1.24.5 by @dependabot[bot] in #5579
• Bump aws-sdk-s3 from 1.218.0 to 1.224.0 by @dependabot[bot] in #5582
• Bump jbuilder from 2.14.1 to 2.15.1 by @dependabot[bot] in #5585
• Bump newrelic_rpm from 10.2.0 to 10.5.0 by @dependabot[bot] in #5577
• Bump devise from 5.0.2 to 5.0.4 by @dependabot[bot] in #5578
• Bump devise_invitable from 2.0.11 to 2.0.12 by @dependabot[bot] in #5580
• Bump bullet from 8.1.0 to 8.1.2 by @dependabot[bot] in #5586
• Bump flipper from 1.4.1 to 1.4.2 by @dependabot[bot] in #5583
• Update ferrum double_click helper to use their API by @stefannibrasil in #5588
• Bump clockwork from 3.0.2 to 4.0.1 by @dependabot[bot] in #5581

New Contributors

• @andoq made their first contribution in #5562
• @Will-thom made their first contribution in #5574

Full Changelog: 2026.04.19...2026.06.07

2026.04.19

What's Changed

• Fix IDOR in Requests and Donations controllers (5509) by @cassxw in #5519
• Fix IDOR in Kits, BroadcastAnnouncements, and Distributions controllers by @costajohnt in #5514
• Fix flaky organization_spec.rb and donnation_summary_spec.rb specs by @stefannibrasil in #5521
• fix: use date safely within validation window in organization spec by @costajohnt in #5535
• Bump faker from 3.6.0 to 3.6.1 by @dependabot[bot] in #5526
• Bump standard from 1.52.0 to 1.54.0 by @dependabot[bot] in #5527
• Bump listen from 3.9.0 to 3.10.0 by @dependabot[bot] in #5528
• Bump terser from 1.2.6 to 1.2.7 by @dependabot[bot] in #5533
• Bump aws-sdk-s3 from 1.205.0 to 1.218.0 by @dependabot[bot] in #5534
• Bump newrelic_rpm from 9.24.0 to 10.2.0 by @dependabot[bot] in #5525
• Bump knapsack_pro from 9.2.1 to 9.2.3 by @dependabot[bot] in #5531
• Bump binding_of_caller from 1.0.1 to 2.0.0 by @dependabot[bot] in #5532
• Bump turbo-rails from 2.0.17 to 2.0.23 by @dependabot[bot] in #5529
• Bump strong_migrations from 2.5.0 to 2.5.2 by @dependabot[bot] in #5530

New Contributors

• @costajohnt made their first contribution in #5514

Full Changelog: 2026.03.22...2026.04.19

2026.03.22

What's Changed

• [Usability]: Family Details Search Inputs Position by @stefannibrasil in #5520
• Disallow saving Purchase with a quantity of 0 (5507) by @cassxw in #5510

New Contributors

• @stefannibrasil made their first contribution in #5520
• @cassxw made their first contribution in #5510

Full Changelog: 2026.03.15...2026.03.22

2026.03.15

What's Changed

• Add a new filter to distributions (and CSV) for reporting category by @awwaiid in #5512

Internal / Dev Changes

• Bump shoulda-matchers from 6.5.0 to 7.0.1 by @dependabot[bot] in #5496
• Bump pg from 1.6.2 to 1.6.3 by @dependabot[bot] in #5497
• Bump web-console from 4.2.1 to 4.3.0 by @dependabot[bot] in #5498
• Bump omniauth-google-oauth2 from 1.2.1 to 1.2.2 by @dependabot[bot] in #5501
• Bump flipper-ui from 1.3.6 to 1.4.0 by @dependabot[bot] in #5504
• Bump pry-doc from 1.6.0 to 1.7.0 by @dependabot[bot] in #5500
• Bump puma from 7.1.0 to 7.2.0 by @dependabot[bot] in #5503
• Bump devise from 5.0.0 to 5.0.2 by @dependabot[bot] in #5505
• Fix: make copyright year dynamic by @sean-dickinson in #5513
• Fix flaky tests by @dorner in #5516

Full Changelog: 2026.03.01...2026.03.15

2026.03.01

What's Changed

• refactor(tests): Fix flaky ItemizableUpdateService test by @Sergio-Mira in #5479
• Request Item → Item Request by @awwaiid in #5196
• 3652 #1: kits to items by @dorner in #5426

Full Changelog: 2026.02.15...2026.03.01