From 712231298e71cdd8b3d7d8015f3d188eca937387 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 3 Apr 2026 16:37:47 +0000 Subject: [PATCH 1/6] Bump lodash from 4.17.23 to 4.18.1 Bumps [lodash](https://github.com/lodash/lodash) from 4.17.23 to 4.18.1. - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](https://github.com/lodash/lodash/compare/4.17.23...4.18.1) --- updated-dependencies: - dependency-name: lodash dependency-version: 4.18.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] --- package-lock.json | 9 ++++++--- 1 file changed, 6 insertions(+), 3 deletions(-) diff --git a/package-lock.json b/package-lock.json index d76ec74e4..402853678 100644 --- a/package-lock.json +++ b/package-lock.json @@ -24,6 +24,9 @@ "gulp-sass": "^6.0.1", "postcss-discard-comments": "^7.0.3", "vinyl-source-stream": "^2.0.0" + }, + "engines": { + "node": "^22.22.0" } }, "node_modules/@ampproject/remapping": { @@ -5068,9 +5071,9 @@ } }, "node_modules/lodash": { - "version": "4.17.23", - "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.23.tgz", - "integrity": "sha512-LgVTMpQtIopCi79SJeDiP0TfWi5CNEc/L/aRdTh3yIvmZXTnheWpKjSZhnvMl8iXbC1tFg9gdHHDMLoV7CnG+w==", + "version": "4.18.1", + "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.18.1.tgz", + "integrity": "sha512-dMInicTPVE8d1e5otfwmmjlxkZoUpiVLwyeTdUsi/Caj/gfzzblBcCE5sRHV/AsjuCmxWrte2TNGSYuCeCq+0Q==", "dev": true, "license": "MIT" }, From 67a0b932abf43fe12559779a059944eafc364416 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 25 Mar 2026 23:24:00 +0000 Subject: [PATCH 2/6] Bump picomatch from 2.3.1 to 2.3.2 Bumps [picomatch](https://github.com/micromatch/picomatch) from 2.3.1 to 2.3.2. - [Release notes](https://github.com/micromatch/picomatch/releases) - [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md) - [Commits](https://github.com/micromatch/picomatch/compare/2.3.1...2.3.2) --- updated-dependencies: - dependency-name: picomatch dependency-version: 2.3.2 dependency-type: indirect ... Signed-off-by: dependabot[bot] --- package-lock.json | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/package-lock.json b/package-lock.json index 402853678..8ec045301 100644 --- a/package-lock.json +++ b/package-lock.json @@ -5680,9 +5680,9 @@ "license": "ISC" }, "node_modules/picomatch": { - "version": "2.3.1", - "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-2.3.1.tgz", - "integrity": "sha512-JU3teHTNjmE2VCGFzuY8EXzCDVwEqB2a8fsIvwaStHhAWJEeVd1o1QD80CU6+ZdEXXSLbSsuLwJjkCBWqRQUVA==", + "version": "2.3.2", + "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-2.3.2.tgz", + "integrity": "sha512-V7+vQEJ06Z+c5tSye8S+nHUfI51xoXIXjHQ99cQtKUkQqqO1kO/KCJUfZXuB47h/YBlDhah2H3hdUGXn8ie0oA==", "dev": true, "license": "MIT", "engines": { From 395d70ac4ef2ae4f194c30651c46d3e0fa476678 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 4 Mar 2026 23:22:37 +0000 Subject: [PATCH 3/6] Bump immutable from 5.1.1 to 5.1.5 Bumps [immutable](https://github.com/immutable-js/immutable-js) from 5.1.1 to 5.1.5. - [Release notes](https://github.com/immutable-js/immutable-js/releases) - [Changelog](https://github.com/immutable-js/immutable-js/blob/main/CHANGELOG.md) - [Commits](https://github.com/immutable-js/immutable-js/compare/v5.1.1...v5.1.5) --- updated-dependencies: - dependency-name: immutable dependency-version: 5.1.5 dependency-type: indirect ... Signed-off-by: dependabot[bot] --- package-lock.json | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/package-lock.json b/package-lock.json index 8ec045301..9a845803e 100644 --- a/package-lock.json +++ b/package-lock.json @@ -4592,9 +4592,9 @@ "license": "BSD-3-Clause" }, "node_modules/immutable": { - "version": "5.1.1", - "resolved": "https://registry.npmjs.org/immutable/-/immutable-5.1.1.tgz", - "integrity": "sha512-3jatXi9ObIsPGr3N5hGw/vWWcTkq6hUYhpQz4k0wLC+owqWi/LiugIw9x0EdNZ2yGedKN/HzePiBvaJRXa0Ujg==", + "version": "5.1.5", + "resolved": "https://registry.npmjs.org/immutable/-/immutable-5.1.5.tgz", + "integrity": "sha512-t7xcm2siw+hlUM68I+UEOK+z84RzmN59as9DZ7P1l0994DKUWV7UXBMQZVxaoMSRQ+PBZbHCOoBt7a2wxOMt+A==", "dev": true, "license": "MIT" }, From a08bc8970fb3fad230fd71d315bf70a1bd910247 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 15 Apr 2026 13:53:16 +0000 Subject: [PATCH 4/6] Bump undici from 6.22.0 to 6.25.0 Bumps [undici](https://github.com/nodejs/undici) from 6.22.0 to 6.25.0. - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](https://github.com/nodejs/undici/compare/v6.22.0...v6.25.0) --- updated-dependencies: - dependency-name: undici dependency-version: 6.25.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] --- package-lock.json | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/package-lock.json b/package-lock.json index 9a845803e..9597f1029 100644 --- a/package-lock.json +++ b/package-lock.json @@ -7334,9 +7334,9 @@ } }, "node_modules/undici": { - "version": "6.22.0", - "resolved": "https://registry.npmjs.org/undici/-/undici-6.22.0.tgz", - "integrity": "sha512-hU/10obOIu62MGYjdskASR3CUAiYaFTtC9Pa6vHyf//mAipSvSQg6od2CnJswq7fvzNS3zJhxoRkgNVaHurWKw==", + "version": "6.25.0", + "resolved": "https://registry.npmjs.org/undici/-/undici-6.25.0.tgz", + "integrity": "sha512-ZgpWDC5gmNiuY9CnLVXEH8rl50xhRCuLNA97fAUnKi8RRuV4E6KG31pDTsLVUKnohJE0I3XDrTeEydAXRw47xg==", "dev": true, "license": "MIT", "engines": { From 63a82bff8a09d9bb69fbd0a19fe800e823b698d0 Mon Sep 17 00:00:00 2001 From: Shelley Nason Date: Fri, 17 Apr 2026 17:00:08 -0400 Subject: [PATCH 5/6] Add a rake task for check_expiring_forms --- lib/tasks/scheduled_jobs.rake | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/lib/tasks/scheduled_jobs.rake b/lib/tasks/scheduled_jobs.rake index a8e8b488d..caeb22e09 100644 --- a/lib/tasks/scheduled_jobs.rake +++ b/lib/tasks/scheduled_jobs.rake @@ -48,4 +48,8 @@ namespace :scheduled_jobs do @submissions.delete_all puts "Deleted #{@submissions.size} Trashed Submissions" end + + task check_expiring_forms: :environment do + ScheduledTask.check_expiring_forms + end end From 0cf6eae9727d237225c2c52f9c28ddd4c88e3c85 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 24 Apr 2026 15:10:00 -0400 Subject: [PATCH 6/6] Bump erb from 6.0.2 to 6.0.4 in the bundler group across 1 directory (#2024) Bumps the bundler group with 1 update in the / directory: [erb](https://github.com/ruby/erb). Updates `erb` from 6.0.2 to 6.0.4 - [Release notes](https://github.com/ruby/erb/releases) - [Changelog](https://github.com/ruby/erb/blob/master/NEWS.md) - [Commits](https://github.com/ruby/erb/compare/v6.0.2...v6.0.4) --- updated-dependencies: - dependency-name: erb dependency-version: 6.0.4 dependency-type: indirect dependency-group: bundler ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- Gemfile.lock | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Gemfile.lock b/Gemfile.lock index 4335655d7..62e1968cf 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -219,7 +219,7 @@ GEM dotenv (3.1.8) drb (2.2.3) dumb_delegator (1.1.0) - erb (6.0.2) + erb (6.0.4) erubi (1.13.1) excon (1.3.0) logger