[dependabot]

Bumps devise_invitable from 2.0.12 to 3.0.0.

Changelog

Sourced from devise_invitable's changelog.

3.0.0

• Drop support for Ruby < 2.7, Rails < 7.0, and Devise < 5.0
• Store invitations in a shared devise_invitations table/collection with polymorphic invitable and invited_by associations, allowing multiple invitations and inviters for the same resource (#228, #388)
• Defer resource creation until invitation acceptance by default. Add create_resource_on_invitation to optionally create placeholder resources immediately; additional resource attributes require this option
• Add invitation_pending? and prevent pending placeholders from authenticating through both password validation and active_for_authentication?
• Accept only the invitation whose token was used and supersede other pending invitations. Direct registration supersedes matching invitations without marking them accepted
• Make the install generator create the shared invitations store through ORM hooks. The model generator now only adds :invitable and no longer creates per-model invitation-column migrations
• Add devise_invitable:upgrade MODEL to generate an Active Record data migration from the legacy per-model columns, with --invite-keys support
• Add devise_invitable:migrate_invitations[MODEL] for Mongoid legacy-data upgrades; Mongoid indexes continue to be created with db:mongoid:create_indexes

2.0.14

• Fix NameError when Devise.parent_mailer is an application mailer (#930)

2.0.13

• Avoid loading Action Mailer and Active Job before application initialization (#926)
• Test against Devise 5 while retaining support for Devise 4.6 and newer
• Fix email interpolation in the Hong Kong and Taiwanese Chinese translations (#927)

Commits

• c809696 bump to 3.0.0
• b38b81a fix for mongoid
• 931c759 fix tests and fix for mongoid
• dad75d8 Separate Invitations table (closes #388)
• ee87c04 fix tests and test with rails 8.1 too
• 2a722d9 add note about security risks of using the instance method to invite
• ed590d6 Bump actions/checkout from 5 to 7
• 924335f Bump actions/setup-node from 4 to 7
• 99af9b2 bump to 2.0.14
• 37f3735 Bump actions/checkout from 5 to 6
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)