tighten dependencies

debian/control

@@ -39,53 +39,50 @@ Depends: ${shlibs:Depends}, ${misc:Depends}, ruby | ruby-interpreter,
    ruby-rails-dom-testing (>= 1.0.6-2~),
  ruby-rails-deprecated-sanitizer (>= 1.0.3~),
  ruby-responders (>= 2.0~),
- ruby-sprockets (>= 3.6~),
+ ruby-sprockets (>= 3.7~),
  ruby-default-value-for (>= 3~),
 #ruby-mysql2 | ruby-pg,
- ruby-pg (>= 0.18.4~),
+ ruby-pg (>= 0.19~),
  ruby-rugged (>= 0.26~),
- ruby-grape-route-helpers,
+ ruby-grape-route-helpers (>= 2.1~),
  ruby-faraday (>= 0.12~),
 # Authentication libraries
  ruby-devise (>= 4.2~),
  ruby-doorkeeper (>= 4.2~),
- ruby-doorkeeper-openid-connect,
+ ruby-doorkeeper-openid-connect (>= 1.2~),
  ruby-omniauth (>= 1.4.2~),
  ruby-omniauth-auth0 (>= 1.4.1~),
- ruby-omniauth-azure-oauth2 (>= 0.0.6~),
+ ruby-omniauth-azure-oauth2 (>= 0.0.9~),
  ruby-omniauth-cas3 (>= 1.1.4~),
  ruby-omniauth-facebook (>= 4.0~),
  ruby-omniauth-github (>= 1.1.1~),
  ruby-omniauth-gitlab (>= 1.0.2~),
- ruby-omniauth-google-oauth2 (>= 0.4.1~),
+ ruby-omniauth-google-oauth2 (>= 0.5.2~),
  ruby-omniauth-kerberos (>= 0.3.0-3~),
- ruby-omniauth-oauth2-generic,
+ ruby-omniauth-oauth2-generic (>= 0.2.2~),
  ruby-omniauth-saml (>= 1.7.0~),
  ruby-omniauth-shibboleth (>= 1.2.0~),
  ruby-omniauth-twitter (>= 1.2.0~),
  ruby-omniauth-crowd (>= 2.2.0~),
- ruby-omniauth-authentiq,
+ ruby-omniauth-authentiq (>= 0.3.1~),
  ruby-rack-oauth2 (>= 1.2.1~),
  ruby-jwt (>= 1.5.6~),
 # Spam and anti-bot protection
  ruby-recaptcha (>= 3.0~),
- ruby-akismet,
+ ruby-akismet (>= 2.0~),
 # Two-factor authentication
  ruby-devise-two-factor (>= 3.0~),
  ruby-rqrcode-rails3 (>= 0.1.7~),
  ruby-attr-encrypted (>= 3.0~),
- ruby-u2f,
+ ruby-u2f (>= 0.2.1~),
 # GitLab Pages
- ruby-validates-hostname,
+ ruby-validates-hostname (>= 1.0.6~),
 # Browser detection
  ruby-browser (>= 2.2~),
 # GPG
  ruby-gpgme,
-# Extracting information from a git repository
- ruby-gitlab-git (>= 10.7~),
 # LDAP Auth
-# Debian package includes gitlab patches
+ ruby-omniauth-ldap (>= 2.0.4~),
- ruby-omniauth-ldap (>= 1.0.5-2~),
  ruby-net-ldap,
 # Git Wiki
  ruby-gollum-lib (>= 4.2.1+debian~),
@@ -93,7 +90,7 @@ Depends: ${shlibs:Depends}, ${misc:Depends}, ruby | ruby-interpreter,
 # Language detection
  ruby-github-linguist (>= 4.7.0~),
 # API
- ruby-grape (>= 0.19.2~),
+ ruby-grape (>= 1.0~),
  ruby-grape-entity (>= 0.6~),
  ruby-rack-cors (>= 1.0~),
 # Disable strong_params so that Mash does not respond to :permitted?
@@ -103,7 +100,7 @@ Depends: ${shlibs:Depends}, ${misc:Depends}, ruby | ruby-interpreter,
 # HAML
  ruby-hamlit (>= 2.8.5~),
 # Files attachments
- ruby-carrierwave (>= 1.1~),
+ ruby-carrierwave (>= 1.2~),
 # Drag and Drop UI
  ruby-dropzonejs-rails (>= 0.7.1~),
 # for backups
@@ -113,18 +110,18 @@ Depends: ${shlibs:Depends}, ${misc:Depends}, ruby | ruby-interpreter,
  ruby-fog-google (>= 0.5~),
  ruby-fog-local (>= 0.3~),
  ruby-fog-openstack (>= 0.1~),
- ruby-fog-rackspace,
+ ruby-fog-rackspace (>= 0.1.1~),
- ruby-fog-aliyun,
+ ruby-fog-aliyun (>=0.2.0~),
 # for Google storage
- ruby-google-api-client,
+ ruby-google-api-client (>= 0.13.6~),
 # for aws storage
  ruby-unf (>= 0.1.4-2~),
 # Seed data
- ruby-seed-fu (>= 2.3.5~),
+ ruby-seed-fu (>= 2.3.7~),
 # Markdown and HTML processing
  ruby-html-pipeline (>= 1.11.0),
  ruby-task-list (>= 2.0~),
- ruby-github-markup (>= 1.5.1~),
+ ruby-github-markup (>= 1.6.2~),
  ruby-redcarpet (>= 3.4~),
  ruby-redcloth (>= 4.3.2-2~),
  ruby-org (>= 0.9.12-2~),
@@ -134,7 +131,7 @@ Depends: ${shlibs:Depends}, ${misc:Depends}, ruby | ruby-interpreter,
  ruby-asciidoctor-plantuml (>= 0.0.7~),
  ruby-rouge (>= 2.0~),
  ruby-truncato (>= 0.7.9~),
- ruby-bootstrap-form,
+ ruby-bootstrap-form (>= 2.7~),
  ruby-nokogiri (>= 1.8~),
 # Diffs
  ruby-diffy (>= 3.1~),
@@ -143,15 +140,13 @@ Depends: ${shlibs:Depends}, ${misc:Depends}, ruby | ruby-interpreter,
  ruby-unicorn-worker-killer (>= 0.4.4~),
 # State machine
  ruby-state-machines-activerecord (>= 0.4.0~),
-# Run events after state machine commits
- ruby-after-commit-queue,
 # Issue tags
  ruby-acts-as-taggable-on (>= 5.0~),
 # Background jobs
  ruby-sidekiq (>= 5.0~),
  ruby-sidekiq-cron (>= 0.6~),
- ruby-redis-namespace,
+ ruby-redis-namespace (>= 1.5.2~),
- ruby-sidekiq-limit-fetch,
+ ruby-sidekiq-limit-fetch (>= 3.4~),
 # Cron Parser
  ruby-rufus-scheduler (>= 3.4~),
 # HTTP requests
@@ -161,21 +156,20 @@ Depends: ${shlibs:Depends}, ${misc:Depends}, ruby | ruby-interpreter,
 # GitLab settings
  ruby-settingslogic (>= 2.0.9~),
 # Linear-time regex library for untrusted regular expressions
- ruby-re2 (>= 1.0~),
+ ruby-re2 (>= 1.1.1~),
 # Misc
  ruby-version-sorter (>= 2.1~),
 # Cache
- ruby-redis-rails (>= 5.0.1~),
+ ruby-redis-rails (>= 5.0.2~),
 # Redis
- ruby-redis,
+ ruby-redis (>= 3.2~),
  ruby-connection-pool (>= 2.0~),
 # HipChat integration
  ruby-hipchat (>= 1.5.0~),
 # JIRA integration
- ruby-jira (>= 1.1.2),
+ ruby-jira (>= 1.4~),
 # Flowdock integration
- ruby-gitlab-flowdock-git-hook (>= 1.0.1-2~),
+ ruby-gitlab-flowdock-git-hook (>= 1.0.1-3~),
-   ruby-grit (>= 2.5.0-5~),
 # Gemnasium integration
  ruby-gemnasium-gitlab-service (>= 0.2~),
 # Slack integration
@@ -185,11 +179,9 @@ Depends: ${shlibs:Depends}, ${misc:Depends}, ruby | ruby-interpreter,
 # FogBugz integration
  ruby-fogbugz (>= 0.2.1-3~),
 # Kubernetes integration
- ruby-kubeclient,
+ ruby-kubeclient (>= 2.2~),
 # d3
- ruby-d3-rails (>= 3.1~),
+ ruby-d3-rails (>= 3.5~),
-# underscore-rails
- ruby-underscore-rails (>= 1.4~),
 # Sanitize user input
  ruby-sanitize (>= 2.0~),
  ruby-babosa (>= 1.0.2~),
@@ -204,27 +196,31 @@ Depends: ${shlibs:Depends}, ${misc:Depends}, ruby | ruby-interpreter,
 # Keyboard shortcuts
  ruby-mousetrap-rails (>= 1.4.6~),
 # Detect and convert string character encoding
- ruby-charlock-holmes (>= 0.7.3~),
+ ruby-charlock-holmes (>= 0.7.5~),
 # Faster JSON
  ruby-oj (>= 2.17.4),
+# Faster blank
+ ruby-fast-blank,
 # Parse time & duration
  ruby-chronic (>= 0.10.2-3~),
- ruby-chronic-duration,
+ ruby-chronic-duration (>= 0.10.6~),
 #
- ruby-webpack-rails,
+ ruby-webpack-rails (>= 0.9.10~),
+# Many node modules are still in NEW, some are yet to be packaged
+# so we use npm to downlod those and hence gitlab is in contrib
  npm,
- ruby-rack-proxy,
+ ruby-rack-proxy (>= 0.6.0~),
 #
  ruby-sass-rails (>= 5.0.6~),
  ruby-uglifier (>= 2.7.2~),
 #
- ruby-addressable (>= 2.3.8~),
+ ruby-addressable (>= 2.5.2~),
  ruby-bootstrap-sass (>= 3.3.0~),
  ruby-font-awesome-rails (>= 4.7~),
  ruby-gemojione (>= 3.3~),
  ruby-gon (>= 6.1~),
  ruby-jquery-atwho-rails (>= 1.3.2~),
- ruby-jquery-rails (>= 4.1~),
+ ruby-jquery-rails (>= 4.3.1~),
  ruby-request-store (>= 1.3~),
  ruby-select2-rails (>= 3.5.9~),
  ruby-virtus (>= 1.0.5-3~),
@@ -237,23 +233,25 @@ Depends: ${shlibs:Depends}, ${misc:Depends}, ruby | ruby-interpreter,
  ruby-parser (>= 3.8.2~),
  ruby-rails-i18n (>= 4.0.9~),
  ruby-gettext-i18n-rails (>= 1.8~),
- ruby-gettext-i18n-rails-js,
+ ruby-gettext-i18n-rails-js (>= 1.2~),
+#
+ ruby-batch-loader (>= 1.2.1~),
 # Perf bar
- ruby-peek,
+ ruby-peek (>= 1.0.1~),
- ruby-peek-gc,
+ ruby-peek-gc (>= 0.0.2~),
- ruby-peek-host,
+ ruby-peek-host (>= 1.0~),
 # ruby-peek-mysql2,
- ruby-peek-performance-bar,
+ ruby-peek-performance-bar (>= 1.3~),
- ruby-peek-pg,
+ ruby-peek-pg (>= 1.3~),
- ruby-peek-rblineprof,
+ ruby-peek-rblineprof (>= 0.2.0~),
- ruby-peek-redis,
+ ruby-peek-redis (>= 1.2~),
- ruby-peek-sidekiq,
+ ruby-peek-sidekiq (>= 1.0.3~),
 # Metrics
  ruby-allocations (>= 1.0~),
  ruby-method-source (>= 0.8.2-2~),
  ruby-influxdb (>= 0.2~),
 # Prometheus
- ruby-prometheus-client-mmap,
+ ruby-prometheus-client-mmap (>= 0.9.1~),
  ruby-raindrops (>= 0.18~),
 #
  ruby-octokit (>= 4.6.2~),
@@ -265,29 +263,34 @@ Depends: ${shlibs:Depends}, ${misc:Depends}, ruby | ruby-interpreter,
 #
  ruby-prof (>= 0.16.2~),
 # OAuth
- ruby-oauth2 (>= 1.3~),
+ ruby-oauth2 (>= 1.4~),
 # Soft deletion
  ruby-paranoia (>= 2.3.1~),
 # Health check
  ruby-health-check (>= 2.6~),
 # System information
  ruby-vmstat (>= 2.3~),
- ruby-sys-filesystem,
+ ruby-sys-filesystem (>= 1.1.6~),
 # SSH host key support
- ruby-net-ssh (>= 1:4.0~),
+ ruby-net-ssh (>= 1:4.1~),
 # Required for ED25519 SSH host key support
  ruby-rbnacl-libsodium,
- ruby-rbnacl,
+ ruby-rbnacl (>= 5.0~),
- ruby-bcrypt-pbkdf,
+ ruby-bcrypt-pbkdf (>= 1.0~),
 # Gitaly GRPC client
- ruby-gitaly (>= 0.26~),
+ ruby-gitaly (>= 0.84~),
+ ruby-google-protobuf,
 #
- ruby-toml-rb,
+ ruby-toml-rb (>= 0.3.15~),
 # Feature toggles
- ruby-flipper,
+ ruby-flipper (>= 0.11.0~),
- ruby-flipper-active-record,
+ ruby-flipper-active-record (>= 0.11.0~),
+ ruby-flipper-active-support-cache-store (>= 0.11.0~),
 # Structured logging
- ruby-lograge,
+ ruby-lograge (>= 0.5~),
+ ruby-grape-logging (>= 1.7~),
+# Asset synchronization
+ ruby-asset-sync (>= 2.2~),
 # Vendored js files
  libjs-jquery-atwho,
  libjs-jquery-caret.js,
@@ -297,8 +300,8 @@ Depends: ${shlibs:Depends}, ${misc:Depends}, ruby | ruby-interpreter,
  libjs-clipboard,
  libjs-chartjs,
  libjs-graphael,
- libjs-fuzzaldrin-plus (>= 0.3.1+git.20161008.da2cb58+dfsg-4~),
  node-lie,
+# node modules
  node-babel-core,
  node-babel-eslint,
  node-babel-loader,