From 0bfa7cd15dc702a2481f24913c2c4cf62a1c485b Mon Sep 17 00:00:00 2001
From: moveson <mark.oveson@gmail.com>
Date: Tue, 18 Aug 2026 09:43:38 -0600
Subject: [PATCH 1/2] Remove the concealed checkbox from the Person form

Person#concealed is publication state maintained automatically by the
EventGroupQuery.set_concealed cascade (a person is concealed when all
of their event groups are concealed). Hand-editing it invites confusion
with the actual privacy controls (obscure_name, hide_age) and gets
overwritten by the next cascade run, so remove it from the form and
from the permitted parameters.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
---
 app/parameters/person_parameters.rb | 2 +-
 app/views/people/_form.html.erb     | 9 ---------
 2 files changed, 1 insertion(+), 10 deletions(-)

diff --git a/app/parameters/person_parameters.rb b/app/parameters/person_parameters.rb
index b96a6b775..cfb177f96 100644
--- a/app/parameters/person_parameters.rb
+++ b/app/parameters/person_parameters.rb
@@ -1,7 +1,7 @@
 class PersonParameters < BaseParameters
   def self.permitted
     [:id, :slug, :city, :state_code, :country_code, :first_name, :last_name, :gender, :email, :phone, :birthdate,
-     :concealed, :hide_age, :obscure_name, :photo]
+     :hide_age, :obscure_name, :photo]
   end
 
   def self.permitted_query
diff --git a/app/views/people/_form.html.erb b/app/views/people/_form.html.erb
index b52b2552a..e0eb683fb 100644
--- a/app/views/people/_form.html.erb
+++ b/app/views/people/_form.html.erb
@@ -72,15 +72,6 @@
       </div>
     </div>
 
-    <% if current_user&.admin? %>
-      <div class="row">
-        <div class="col-md-3 mb-3">
-          <%= f.label :concealed, "Concealed (unsearchable)?", class: "me-2" %>
-          <%= f.check_box :concealed %>
-        </div>
-      </div>
-    <% end %>
-
     <br>
     <div class="row">
       <div class="col-md-2 mb-3">

From b1427d7be7f16765d21ca838248a42ace9920278 Mon Sep 17 00:00:00 2001
From: moveson <mark.oveson@gmail.com>
Date: Tue, 18 Aug 2026 09:51:54 -0600
Subject: [PATCH 2/2] Bump mail to 2.9.1 to clear GHSA-mvxr-6m87-mv2q

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
---
 Gemfile.lock | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Gemfile.lock b/Gemfile.lock
index 905f525d6..735e06008 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -370,7 +370,7 @@ GEM
       rails (>= 7.0.0)
       stimulus-rails
       turbo-rails
-    mail (2.9.0)
+    mail (2.9.1)
       logger
       mini_mime (>= 0.1.1)
       net-imap