Gaetan Craig-Riou
82139a9ac0
Merge pull request #13747 from mkllnk/doc-reset
...
Show reset tasks in task list `./bin/rails -T`
2025-11-24 13:19:33 +11:00
Gaetan Craig-Riou
6d9946c3c6
Merge pull request #13738 from openfoodfoundation/dependabot/bundler/aws-sdk-s3-1.205.0
...
Bump aws-sdk-s3 from 1.151.0 to 1.205.0
2025-11-24 13:17:41 +11:00
Maikel Linke
f58b6bcada
Show reset tasks in task list ./bin/rails -T
...
I wrote them a while ago but noticed only now that they don't show up in
the overview.
2025-11-24 12:59:41 +11:00
Maikel
dc13ef4162
Merge pull request #13743 from deivid-rodriguez/bump-prettier
...
Bump prettier and let Dependabot handle further updates
2025-11-24 12:06:19 +11:00
Maikel
dcb48272f5
Merge pull request #13746 from rioug/security-255-code-injection
...
[Security] Fix potential code injection
2025-11-24 12:01:44 +11:00
Gaetan Craig-Riou
08bc374576
Merge pull request #13740 from openfoodfoundation/dependabot/bundler/image_processing-1.14.0
...
Bump image_processing from 1.12.2 to 1.14.0
2025-11-24 09:48:37 +11:00
Gaetan Craig-Riou
afbf0a5d0e
Merge pull request #13739 from openfoodfoundation/dependabot/bundler/database_cleaner-2.1.0
...
Bump database_cleaner from 2.0.2 to 2.1.0
2025-11-24 09:32:45 +11:00
Gaetan Craig-Riou
7e034a3037
Merge pull request #13737 from openfoodfoundation/dependabot/npm_and_yarn/webpack-4.47.0
...
Bump webpack from 4.46.0 to 4.47.0
2025-11-24 09:21:11 +11:00
Ahmed Ejaz
2db2fb2f11
Update all locales with the latest Transifex translations
v5.3.6
2025-11-24 03:07:32 +05:00
Gaetan Craig-Riou
74d2a94181
Add input validation to prevent code injection
...
Plus spec
2025-11-23 13:46:36 +11:00
rahsheen
7a5b273e71
update specs
2025-11-22 10:51:17 -05:00
rahsheen
0b6e7593db
Set oc.opened at nil when cloning service
2025-11-22 10:51:17 -05:00
David Rodríguez
6d0d91c56a
Let prettier updates be handled by Dependabot
2025-11-21 12:49:44 +01:00
David Rodríguez
a509d49ec6
Bump prettier to 3.6.2
...
And fix new style issues.
2025-11-21 12:49:06 +01:00
Filipe
dddc945c42
Merge pull request #13679 from deivid-rodriguez/customer-edition
...
Improve `/admin/customers` form handling
2025-11-21 10:51:55 +00:00
Filipe
12c0363b7e
Merge pull request #13716 from chahmedejaz/bugfix/13554-sorting-on-demand-products
...
"On hand" value influences sorting of "on demand" products/variants
2025-11-21 10:05:44 +00:00
Gaetan Craig-Riou
bb0903cd4a
Fix rubocop issue
...
And revert the autoformating of short hand rescue
2025-11-21 16:15:47 +11:00
Gaetan Craig-Riou
e93cb485a1
Per review, use exists? so we run only one query
2025-11-21 16:07:46 +11:00
Maikel Linke
fbce264dd7
Adjust webhook URL for Market Organic
2025-11-21 14:16:47 +11:00
Maikel Linke
3c1313bfa0
Add Market Organic as available platform
2025-11-21 14:16:47 +11:00
Maikel Linke
4ca420bd84
Correct needed scope of access token
2025-11-21 14:16:41 +11:00
Maikel Linke
134ea28249
Remove obsolete DPM option
2025-11-21 13:47:00 +11:00
Maikel Linke
78cfc0db65
Replace rubygems.org with gem.coop
...
Several maintainers of RubyGems created gem.coop as a community-governed
service after a takeover by RubyCentral, pushed by Shopify.
We are moving with the community that reflects our values best.
2025-11-21 12:59:30 +11:00
dependabot[bot]
816e06d37c
Bump image_processing from 1.12.2 to 1.14.0
...
Bumps [image_processing](https://github.com/janko/image_processing ) from 1.12.2 to 1.14.0.
- [Changelog](https://github.com/janko/image_processing/blob/master/CHANGELOG.md )
- [Commits](https://github.com/janko/image_processing/compare/v1.12.2...v1.14.0 )
---
updated-dependencies:
- dependency-name: image_processing
dependency-version: 1.14.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-21 01:21:08 +00:00
dependabot[bot]
2e80b7d92f
Bump database_cleaner from 2.0.2 to 2.1.0
...
Bumps [database_cleaner](https://github.com/DatabaseCleaner/database_cleaner ) from 2.0.2 to 2.1.0.
- [Changelog](https://github.com/DatabaseCleaner/database_cleaner/blob/main/History.rdoc )
- [Commits](https://github.com/DatabaseCleaner/database_cleaner/compare/v2.0.2...v2.1.0 )
---
updated-dependencies:
- dependency-name: database_cleaner
dependency-version: 2.1.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-21 01:20:30 +00:00
dependabot[bot]
753173e2be
Bump aws-sdk-s3 from 1.151.0 to 1.205.0
...
Bumps [aws-sdk-s3](https://github.com/aws/aws-sdk-ruby ) from 1.151.0 to 1.205.0.
- [Release notes](https://github.com/aws/aws-sdk-ruby/releases )
- [Changelog](https://github.com/aws/aws-sdk-ruby/blob/version-3/gems/aws-sdk-s3/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-ruby/commits )
---
updated-dependencies:
- dependency-name: aws-sdk-s3
dependency-version: 1.205.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-21 01:19:54 +00:00
dependabot[bot]
c9954f0823
Bump webpack from 4.46.0 to 4.47.0
...
Bumps [webpack](https://github.com/webpack/webpack ) from 4.46.0 to 4.47.0.
- [Release notes](https://github.com/webpack/webpack/releases )
- [Commits](https://github.com/webpack/webpack/compare/v4.46.0...v4.47.0 )
---
updated-dependencies:
- dependency-name: webpack
dependency-version: 4.47.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-21 01:18:20 +00:00
Maikel
80f5fa30c4
Merge pull request #13736 from deivid-rodriguez/unify-dependabot-strategy
...
Unify dependabot strategy
2025-11-21 12:17:15 +11:00
Gaetan Craig-Riou
9194d0ba2b
Merge pull request #13733 from openfoodfoundation/dependabot/bundler/rubocop-1.81.7
...
Bump rubocop from 1.81.6 to 1.81.7
2025-11-21 10:16:12 +11:00
Gaetan Craig-Riou
e00c993a98
Merge pull request #13732 from openfoodfoundation/dependabot/bundler/undercover-0.8.2
...
Bump undercover from 0.8.1 to 0.8.2
2025-11-21 10:11:54 +11:00
Gaetan Craig-Riou
800333f65b
Merge pull request #13731 from openfoodfoundation/dependabot/bundler/arel-helpers-2.17.0
...
Bump arel-helpers from 2.14.0 to 2.17.0
2025-11-21 10:10:33 +11:00
Ahmed Ejaz
64df7cc9bc
Refactor backorderable_name tests for clarity and consistency in product sorting
2025-11-20 06:06:56 +05:00
Ahmed Ejaz
b23fec268e
fix lint issues
2025-11-20 05:08:07 +05:00
Ahmed Ejaz
7b7a7d3418
Add backorderable_name sorting and enhance combined sorting tests
2025-11-20 05:01:08 +05:00
David Rodríguez
6fa99b187d
Unify Dependabot strategy
...
Let's do the same we do for Ruby dependencies.
2025-11-19 14:47:44 +01:00
David Rodríguez
a009dacd41
Pin version of foundation
...
Reading through open issues, I think it's more likely that we end up
removing it rather than upgrading it.
So let's fix it like when we don't want certain dependencies to be
managed by Dependabot.
2025-11-19 14:45:52 +01:00
dependabot[bot]
472ba98ec2
Bump rubocop from 1.81.6 to 1.81.7
...
Bumps [rubocop](https://github.com/rubocop/rubocop ) from 1.81.6 to 1.81.7.
- [Release notes](https://github.com/rubocop/rubocop/releases )
- [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md )
- [Commits](https://github.com/rubocop/rubocop/compare/v1.81.6...v1.81.7 )
---
updated-dependencies:
- dependency-name: rubocop
dependency-version: 1.81.7
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-19 09:02:45 +00:00
dependabot[bot]
91cd3356b0
Bump undercover from 0.8.1 to 0.8.2
...
Bumps [undercover](https://github.com/grodowski/undercover ) from 0.8.1 to 0.8.2.
- [Release notes](https://github.com/grodowski/undercover/releases )
- [Changelog](https://github.com/grodowski/undercover/blob/master/CHANGELOG.md )
- [Commits](https://github.com/grodowski/undercover/compare/v0.8.1...v0.8.2 )
---
updated-dependencies:
- dependency-name: undercover
dependency-version: 0.8.2
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-19 09:02:08 +00:00
dependabot[bot]
67ef142546
Bump arel-helpers from 2.14.0 to 2.17.0
...
Bumps [arel-helpers](https://github.com/camertron/arel-helpers ) from 2.14.0 to 2.17.0.
- [Changelog](https://github.com/camertron/arel-helpers/blob/master/CHANGELOG.md )
- [Commits](https://github.com/camertron/arel-helpers/compare/v2.14.0...v2.17.0 )
---
updated-dependencies:
- dependency-name: arel-helpers
dependency-version: 2.17.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-19 09:01:31 +00:00
Maikel
0aa4993a4d
Merge pull request #13686 from mkllnk/litefarm-market-organic
...
Allow Litefarm and Market.Organic to access DFC API
2025-11-19 15:11:51 +11:00
Gaetan Craig-Riou
98176bd5de
Merge pull request #13730 from openfoodfoundation/dependabot/bundler/redcarpet-3.6.1
...
Bump redcarpet from 3.6.0 to 3.6.1
2025-11-19 10:10:20 +11:00
Gaetan Craig-Riou
dde0e23a79
Merge pull request #13729 from openfoodfoundation/dependabot/bundler/wicked_pdf-2.8.2
...
Bump wicked_pdf from 2.8.1 to 2.8.2
2025-11-19 10:08:42 +11:00
Gaetan Craig-Riou
d1021210e6
Merge pull request #13728 from openfoodfoundation/dependabot/bundler/rubocop-factory_bot-2.28.0
...
Bump rubocop-factory_bot from 2.27.1 to 2.28.0
2025-11-19 10:08:08 +11:00
dependabot[bot]
bfa472a293
Bump redcarpet from 3.6.0 to 3.6.1
...
Bumps [redcarpet](https://github.com/vmg/redcarpet ) from 3.6.0 to 3.6.1.
- [Release notes](https://github.com/vmg/redcarpet/releases )
- [Changelog](https://github.com/vmg/redcarpet/blob/master/CHANGELOG.md )
- [Commits](https://github.com/vmg/redcarpet/compare/v3.6.0...v3.6.1 )
---
updated-dependencies:
- dependency-name: redcarpet
dependency-version: 3.6.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-18 09:02:38 +00:00
dependabot[bot]
9d14c1026c
Bump wicked_pdf from 2.8.1 to 2.8.2
...
Bumps [wicked_pdf](https://github.com/mileszs/wicked_pdf ) from 2.8.1 to 2.8.2.
- [Release notes](https://github.com/mileszs/wicked_pdf/releases )
- [Changelog](https://github.com/mileszs/wicked_pdf/blob/master/CHANGELOG.md )
- [Commits](https://github.com/mileszs/wicked_pdf/commits )
---
updated-dependencies:
- dependency-name: wicked_pdf
dependency-version: 2.8.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-18 09:02:04 +00:00
dependabot[bot]
c653743a56
Bump rubocop-factory_bot from 2.27.1 to 2.28.0
...
Bumps [rubocop-factory_bot](https://github.com/rubocop/rubocop-factory_bot ) from 2.27.1 to 2.28.0.
- [Release notes](https://github.com/rubocop/rubocop-factory_bot/releases )
- [Changelog](https://github.com/rubocop/rubocop-factory_bot/blob/master/CHANGELOG.md )
- [Commits](https://github.com/rubocop/rubocop-factory_bot/compare/v2.27.1...v2.28.0 )
---
updated-dependencies:
- dependency-name: rubocop-factory_bot
dependency-version: 2.28.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-18 09:01:30 +00:00
Gaetan Craig-Riou
28af42371b
Add migration to turn varian tags on
2025-11-18 14:07:59 +11:00
Gaetan Craig-Riou
acfe180e1d
Fix check inventory enabled
...
Inventory cannot be enabled if variant tag is also enabled
Re generated the rubocop todo to account for Product::Importer, it has
too many line but it's temporary. Once the inventory is removed it won't
be an issue anymore
2025-11-18 13:56:46 +11:00
Gaetan Craig-Riou
7d20eb4fea
Add group to enable variant tag for old enterprise
...
It will allow enterprises with inventory enabled but which are not using
the inventory to have variant tag enable.
2025-11-18 13:56:46 +11:00
Filipe
a1ee1eac4c
Merge pull request #13680 from rioug/13674-enable-variant-tag-new-enterprise
...
[Variant tags] Enable variant tag for enterprise created after 11th of August and super admins
2025-11-17 23:05:11 +00:00