Release 2026.04.19 · rubyforgood/human-essentials

What's Changed

Fix IDOR in Requests and Donations controllers (5509) by @cassxw in #5519
Fix IDOR in Kits, BroadcastAnnouncements, and Distributions controllers by @costajohnt in #5514
Fix flaky organization_spec.rb and donnation_summary_spec.rb specs by @stefannibrasil in #5521
fix: use date safely within validation window in organization spec by @costajohnt in #5535
Bump faker from 3.6.0 to 3.6.1 by @dependabot[bot] in #5526
Bump standard from 1.52.0 to 1.54.0 by @dependabot[bot] in #5527
Bump listen from 3.9.0 to 3.10.0 by @dependabot[bot] in #5528
Bump terser from 1.2.6 to 1.2.7 by @dependabot[bot] in #5533
Bump aws-sdk-s3 from 1.205.0 to 1.218.0 by @dependabot[bot] in #5534
Bump newrelic_rpm from 9.24.0 to 10.2.0 by @dependabot[bot] in #5525
Bump knapsack_pro from 9.2.1 to 9.2.3 by @dependabot[bot] in #5531
Bump binding_of_caller from 1.0.1 to 2.0.0 by @dependabot[bot] in #5532
Bump turbo-rails from 2.0.17 to 2.0.23 by @dependabot[bot] in #5529
Bump strong_migrations from 2.5.0 to 2.5.2 by @dependabot[bot] in #5530

Full Changelog: 2026.03.22...2026.04.19