Commit Graph

35107 Commits

Author SHA1 Message Date
dependabot[bot]
8c244e8b56 Bump @babel/plugin-transform-runtime from 7.28.5 to 7.29.0
Bumps [@babel/plugin-transform-runtime](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-runtime) from 7.28.5 to 7.29.0.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.29.0/packages/babel-plugin-transform-runtime)

---
updated-dependencies:
- dependency-name: "@babel/plugin-transform-runtime"
  dependency-version: 7.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-02-10 09:33:14 +00:00
dependabot[bot]
c3cc01c677 Bump tom-select from 2.4.3 to 2.4.5
Bumps [tom-select](https://github.com/orchidjs/tom-select) from 2.4.3 to 2.4.5.
- [Release notes](https://github.com/orchidjs/tom-select/releases)
- [Commits](https://github.com/orchidjs/tom-select/compare/v2.4.3...v2.4.5)

---
updated-dependencies:
- dependency-name: tom-select
  dependency-version: 2.4.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-02-10 09:32:51 +00:00
Gaetan Craig-Riou
c63e60d782 Merge pull request #13910 from openfoodfoundation/dependabot/npm_and_yarn/babel/core-7.29.0
Bump @babel/core from 7.28.6 to 7.29.0
2026-02-10 09:24:06 +11:00
dependabot[bot]
11e8c9456d Bump @babel/core from 7.28.6 to 7.29.0
Bumps [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) from 7.28.6 to 7.29.0.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.29.0/packages/babel-core)

---
updated-dependencies:
- dependency-name: "@babel/core"
  dependency-version: 7.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-02-09 22:10:18 +00:00
Gaetan Craig-Riou
860a21f86f Merge pull request #13909 from openfoodfoundation/dependabot/npm_and_yarn/babel/preset-env-7.29.0
Bump @babel/preset-env from 7.28.6 to 7.29.0
2026-02-10 09:09:09 +11:00
dependabot[bot]
d24af18ff4 Bump @babel/preset-env from 7.28.6 to 7.29.0
Bumps [@babel/preset-env](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-env) from 7.28.6 to 7.29.0.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.29.0/packages/babel-preset-env)

---
updated-dependencies:
- dependency-name: "@babel/preset-env"
  dependency-version: 7.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-02-09 10:39:41 +00:00
David Cook
33b191f439 Merge pull request #13908 from chahmedejaz/bugfix/13776-datetime-format-for-finnish
Update Finnish date and datetime formats in locale file
2026-02-09 10:41:22 +11:00
Ahmed Ejaz
a690d39864 Update Finnish date and datetime formats in locale file 2026-02-08 18:41:49 +05:00
Ahmed Ejaz
7c0586db7b Enhance comment for shouldLoad function 2026-02-08 18:29:55 +05:00
Ahmed Ejaz
461fd00ccd Add specs for non-linked fees by introducing specs for non-admin users. Plus include specs refactoring 2026-02-08 18:06:54 +05:00
Gaetan Craig-Riou
d33cabd6b2 Update all locales with the latest Transifex translations v5.4.2 2026-02-06 12:32:23 +11:00
Gaetan Craig-Riou
7b21a9d30f Merge pull request #13261 from ashishp91/13220-orders-fulfillment-report-product-name-issue
Fix Orders and fulfillment report fetches product name from product list (and not from order)
2026-02-06 12:28:40 +11:00
David Cook
c00e7eeecf Add missing spec 2026-02-06 12:17:03 +11:00
David Cook
afdb044386 Load names from line item where available.
I'm not sure why Arel complained about SQL in the SELECT clause (fields), but not the GROUP BY clause (key_fields). Maybe because it's not susceptible to user injection.

I'm also not sure why I couldn't use the aliases defined in SELECT in the GROUP BY clause, but hey this seems to work.
2026-02-06 12:17:03 +11:00
Ashish Gaur
b98552003c 13220 Add Product name in Order LineItem and update it during order creation
13220 Fixes affiliate sales spec

13220 Use before_create to update product name

13220 Fixes rubocop warnings

13220 Update product_name in line_item in specs

13220 Fix before_create lint

13220 Add spec for checking product_name is not set in reports

13220 Fixes rubocop issue

13220 Add migrations for updating the existing line items

13220 Fixing lint issues

13220 Set product_name in line_item before doing validation

13220 Fix linter issues

13220 Fixes spec

13220 Fixes linter issues

13220 Review comments

13220 Review comments

13220 Add default product name

13220 Use product_name instead of variant product name when using line item

13220 Fix specs

13220 Revert change in affiliate_sales_data_spec

CL-13220 Store variant name in line_item

13220 Default variant name to original variant's full name for line_items

13220 Add missing frozen string literal

13220 Add spec for full_variant_name

13220 Remove UpdateProductNameInLineItems and AddNotNullToProductNameInLineItems migrations

13220 Remove presence validation for product_name

13220 Use full_product_name which defaults to variant product name if empty
2026-02-06 12:17:03 +11:00
David Cook
38f1754738 Add spec
This duplicates the  'returns data' spec above, but will be revelant in the following commits.
2026-02-06 12:17:03 +11:00
Maikel Linke
f872201fef Delete defunct spec
From a comment on Github:

> In this particular case, the spec is broken, actually. I just looked into it and you are right that StripeSCA supports payment profiles but the spec finds that the profile is not stored. And that is because `source.try(:save_requested_by_customer?)` returns false. We only store the profile when the customer is storing their credit card info.
2026-02-06 11:35:24 +11:00
Maikel
ad23735384 Merge pull request #13907 from rioug/use-wicked_pdf-fork
Use wicked pdf fork
2026-02-06 11:23:58 +11:00
Gaetan Craig-Riou
6fd78d4647 Fix typo 2026-02-06 10:46:10 +11:00
Gaetan Craig-Riou
cd3a80c502 Move to using our fork of wicked_pdf
The lastest release wicked pdf does not include a fix to make it
workwith Shakapacker V8 : bce498de54
To we are using our fork for now, which includes said fix
2026-02-06 10:44:00 +11:00
Sigmund Petersen
f8c88ea8c7 Merge pull request #13859 from rioug/10298-upgrade-to-shakapaker_v8
Upgrade to shakapaker v8
2026-02-04 12:51:42 +01:00
Maikel
4ba55c4067 Merge pull request #13898 from dacook/js-error-handler
Fix function call
2026-02-04 12:44:41 +11:00
Maikel
813249bad7 Merge pull request #13897 from arunguleria/13893-products-table-layout-changes
13893-hiding too many columns in Admin product list, the table layout breaks
2026-02-04 12:42:17 +11:00
Maikel Linke
162c58ac39 Check which methods we need to delegate
This implicit delegation makes it impossible to know which code is used
and which code is dead. The refund method is very rarely used though. So
we'll need to wait for a while.
2026-02-04 12:24:50 +11:00
Maikel Linke
02d47d0a0d Remove unused method #payment_profiles_supported?
And useless specs.
2026-02-04 11:37:53 +11:00
Maikel Linke
e86bf441ab Remove last use of #payment_profiles_supported? 2026-02-04 11:30:36 +11:00
Maikel Linke
f9617b8156 Remove broken dead code branch
The StripeSCA method is forwarding all missing methods to the provider
gateway. The ActiveMerchant gateway used to be decorated by our code and
that's how this code may have worked one day. But we removed the
decorator years ago:

- 549610bc35

A bit later we found that refunds are broken with Stripe:

- https://github.com/openfoodfoundation/openfoodnetwork/issues/12843

This commit could potentiall fix that, I guess? I haven't tested that.
It's a rare use case and not the aim of this work.
2026-02-04 11:30:36 +11:00
Maikel Linke
4650e30c09 Remove useless branch on credit method 2026-02-04 11:30:36 +11:00
Maikel Linke
2749965e73 Remove useless branch calling #void
StripeSCA is the only method with a different method signature for
`#void` but the additional parameter wasn't used. So this special case
can just be removed.
2026-02-04 11:30:36 +11:00
Maikel Linke
e87965bda0 Simplify storing of payment profiles
StripeSCA is the only payment method storing profiles following this
logic. This is the first step to remove indirection and let the payment
method handle this instead of the payment decided for the payment
method.
2026-02-04 11:30:36 +11:00
Gaetan Craig-Riou
9f2c35d407 Merge pull request #13901 from openfoodfoundation/dependabot/npm_and_yarn/qs-6.14.1
Bump qs from 6.14.0 to 6.14.1
2026-02-04 10:05:51 +11:00
Maikel
79af9efd29 Merge pull request #13857 from rioug/10298-remove-rails-sass
Remove rails-sass dependency
2026-02-04 09:55:29 +11:00
Ahmed Ejaz
9dcb3ec748 Refactor report routes to use scoped routes for better organization and readability 2026-02-04 03:55:07 +05:00
Ahmed Ejaz
90c23d0245 fix lint issue 2026-02-04 02:26:44 +05:00
Ahmed Ejaz
99e238d92d Improve reports AJAX search safety, permissions, and TomSelect UX
- Sanitize AJAX search queries to safely support wildcard searches (ILIKE)
- Centralize reports search actions in Spree::Ability and reuse across roles
- Fix TomSelect remote loading to fetch on dropdown open and typing
- Surface HTTP errors in TomSelect via showHttpError and improve error handling
- Update dropdown behavior to show proper “no results” feedback
- Move reports AJAX specs to request specs and expand pagination coverage
- Simplify searchable dropdown component attribute passing
2026-02-04 02:25:41 +05:00
Rachel Arnould
b731f9b9e4 Merge pull request #12997 from wandji20/wb-OFN-12794-user
Remove Cable Ready responses from User related controllers
2026-02-03 15:51:11 +01:00
dependabot[bot]
da90cdd9f6 Bump qs from 6.14.0 to 6.14.1
Bumps [qs](https://github.com/ljharb/qs) from 6.14.0 to 6.14.1.
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ljharb/qs/compare/v6.14.0...v6.14.1)

---
updated-dependencies:
- dependency-name: qs
  dependency-version: 6.14.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-02-03 11:31:06 +00:00
Rachel Arnould
f86c925209 Merge pull request #13883 from mkllnk/taler
Add Taler payment method
2026-02-03 12:30:00 +01:00
David Cook
0040e4d454 Fix script
rm: tmp/product_import-20250505-81606-9pucu5: is a directory
2026-02-03 11:33:02 +11:00
David Cook
876d37d19a Fix function call
This function got renamed in 01d5830480, but this call got missed.

I would like to add a spec to cover this, but am not sure exactly how to set it up right now.
I also notice that usage occurs after the preventDefault, and one before. I'm not sure if that matters. I have myself to blame for that inconsistency 🤦
2026-02-02 17:08:24 +11:00
Arun Guleria
36d617bceb 13893-hiding too many columns in Admin product list, the table layout breaks 2026-02-02 10:47:02 +05:30
Gaetan Craig-Riou
7c0528ad83 Merge pull request #13896 from mkllnk/cooldown
Add 7 day cooldown to Dependabot updates
2026-02-02 15:43:34 +11:00
Maikel Linke
f25d51e772 Add 7 day cooldown to Dependabot updates
This should make us less vulnerable to supply chain attacks:

- https://blog.yossarian.net/2025/11/21/We-should-all-be-using-dependency-cooldowns
2026-02-02 14:41:30 +11:00
Ahmed Ejaz
8eb9709a04 Fix specs:
Fix tom_select_options_value to conditionally include 'virtual_scroll' plugin based on remote URL presence
2026-02-01 19:45:39 +05:00
Ahmed Ejaz
5f31baa022 Refactor TomSelectController to enhance remote data loading and update SearchableDropdownComponent options 2026-02-01 19:32:18 +05:00
Maikel Linke
7b559e2f83 Update all locales with the latest Transifex translations v5.4.1 2026-01-30 14:08:36 +11:00
Gaetan Craig-Riou
a94ccd4493 Merge pull request #13889 from openfoodfoundation/dependabot/npm_and_yarn/css-loader-7.1.3
Bump css-loader from 7.1.2 to 7.1.3
2026-01-30 09:41:52 +11:00
Gaetan Craig-Riou
fc6ed9ab4b Merge pull request #13888 from openfoodfoundation/dependabot/npm_and_yarn/floating-ui/dom-1.7.5
Bump @floating-ui/dom from 1.7.4 to 1.7.5
2026-01-30 09:41:02 +11:00
Maikel Linke
c115ab7a0d Translate Taler payment status to error message 2026-01-29 15:07:28 +11:00
Maikel Linke
f3428494fc Better name method spec 2026-01-29 15:07:28 +11:00