raggedstaff/openfoodnetwork
1
0
Fork 0
mirror of https://github.com/openfoodfoundation/openfoodnetwork synced 2026-02-26 01:33:22 +00:00
Code Issues Packages Projects Releases Wiki Activity
34,866 Commits 17 Branches 454 Tags
f25d51e772d9c1f1fa4f3caa8a7bd9fff7872a88
Commit Graph

34866 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Maikel Linke
f25d51e772 Add 7 day cooldown to Dependabot updates 
This should make us less vulnerable to supply chain attacks:

- https://blog.yossarian.net/2025/11/21/We-should-all-be-using-dependency-cooldowns
 2026-02-02 14:41:30 +11:00
Maikel Linke
7b559e2f83 Update all locales with the latest Transifex translations v5.4.1 2026-01-30 14:08:36 +11:00
Gaetan Craig-Riou
a94ccd4493 Merge pull request #13889 from openfoodfoundation/dependabot/npm_and_yarn/css-loader-7.1.3 
Bump css-loader from 7.1.2 to 7.1.3
 2026-01-30 09:41:52 +11:00
Gaetan Craig-Riou
fc6ed9ab4b Merge pull request #13888 from openfoodfoundation/dependabot/npm_and_yarn/floating-ui/dom-1.7.5 
Bump @floating-ui/dom from 1.7.4 to 1.7.5
 2026-01-30 09:41:02 +11:00
dependabot[bot]
2219513c93 Bump css-loader from 7.1.2 to 7.1.3 
Bumps [css-loader](https://github.com/webpack/css-loader) from 7.1.2 to 7.1.3.
- [Release notes](https://github.com/webpack/css-loader/releases)
- [Changelog](https://github.com/webpack/css-loader/blob/main/CHANGELOG.md)
- [Commits](https://github.com/webpack/css-loader/compare/v7.1.2...v7.1.3)

---
updated-dependencies:
- dependency-name: css-loader
  dependency-version: 7.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-01-28 09:33:05 +00:00
dependabot[bot]
fb713d8721 Bump @floating-ui/dom from 1.7.4 to 1.7.5 
Bumps [@floating-ui/dom](https://github.com/floating-ui/floating-ui/tree/HEAD/packages/dom) from 1.7.4 to 1.7.5.
- [Release notes](https://github.com/floating-ui/floating-ui/releases)
- [Changelog](https://github.com/floating-ui/floating-ui/blob/master/packages/dom/CHANGELOG.md)
- [Commits](https://github.com/floating-ui/floating-ui/commits/HEAD/packages/dom)

---
updated-dependencies:
- dependency-name: "@floating-ui/dom"
  dependency-version: 1.7.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-01-28 09:32:53 +00:00
David Cook
90761e0766 Merge pull request #13886 from mkllnk/setup 
Fail setup script when nodenv is missing
 2026-01-28 14:03:55 +11:00
Maikel Linke
6fb4048bfd Add context: this script will be used to deploy production 2026-01-28 13:47:18 +11:00
Maikel Linke
c3def926f1 Fail setup script when nodenv is missing 2026-01-28 10:40:40 +11:00
Maikel
d6cde5c793 Merge pull request #13873 from mkllnk/cleanup 
Clean up tmp dev files
 2026-01-28 10:38:58 +11:00
David Cook
756e876f61 Update ERD 2026-01-27 14:53:22 +11:00
Rachel Arnould
2a3b076170 Merge pull request #13826 from chahmedejaz/task/13744-add-none-option-in-tags-filter 
Allow to select "none" in variant tags dropdown
 2026-01-26 22:29:59 +01:00
Gaetan Craig-Riou
7e4886ad67 Merge pull request #13878 from openfoodfoundation/dependabot/npm_and_yarn/sass-embedded-1.97.3 
Bump sass-embedded from 1.97.2 to 1.97.3
 2026-01-26 14:27:15 +11:00
dependabot[bot]
9297dbfa63 Bump sass-embedded from 1.97.2 to 1.97.3 
Bumps [sass-embedded](https://github.com/sass/embedded-host-node) from 1.97.2 to 1.97.3.
- [Changelog](https://github.com/sass/embedded-host-node/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sass/embedded-host-node/compare/1.97.2...1.97.3)

---
updated-dependencies:
- dependency-name: sass-embedded
  dependency-version: 1.97.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-01-26 00:15:46 +00:00
Maikel
7bfe51d067 Merge pull request #13849 from rioug/10298-upgrade-to-shakapaker_v7 
Upgrade to shakapaker v7
 2026-01-26 11:14:31 +11:00
Ahmed Ejaz
6ad49cc080 Update all locales with the latest Transifex translations v5.4.0 2026-01-26 03:50:53 +05:00
Rachel Arnould
2a7e8816c0 Merge pull request #13834 from mkllnk/pay-methods 
Simplify code listing available payment method types
 2026-01-23 22:52:29 +01:00
Gaetan Craig-Riou
988f903164 Update locale cache key to invalidate cache 2026-01-23 16:23:14 +01:00
Gaetan Craig-Riou
108e313e48 Remove ci config that was missed during rebase 2026-01-23 16:23:14 +01:00
Gaetan Craig-Riou
e502aad7c9 Coffee scripts are managed by sproket 
There is no need to add coffee script dependencies for webpack
 2026-01-23 16:23:14 +01:00
Gaetan Craig-Riou
9af57e1fc4 Remove deprecated config options 2026-01-23 16:23:14 +01:00
Gaetan Craig-Riou
a0c23825b8 Top level dir is not stripped anymore for static assets 2026-01-23 16:23:14 +01:00
Gaetan Craig-Riou
4e5238d1bb Update dependencies 2026-01-23 16:23:14 +01:00
Gaetan Craig-Riou
26b8f62325 Fix wepack config, move to generateWebpackConfig 2026-01-23 16:23:14 +01:00
Gaetan Craig-Riou
ee087f9eff Change spelling to Shakapacker 2026-01-23 16:23:14 +01:00
Gaetan Craig-Riou
3152362b9d Upgrade to Shakapacker 7.2.3 2026-01-23 16:23:14 +01:00
Rachel Arnould
601c921b4b Merge pull request #13831 from dacook/affiliate-sales-data 
[DFC Anonymized orders endpoint] Fix unit_type for affiliate sales data
 2026-01-23 15:59:49 +01:00
Gaetan Craig-Riou
39fbf01e98 Merge pull request #13876 from openfoodfoundation/dependabot/npm_and_yarn/mini-css-extract-plugin-2.10.0 
Bump mini-css-extract-plugin from 2.9.4 to 2.10.0
 2026-01-23 10:20:46 +11:00
Gaetan Craig-Riou
69586ae5ae Merge pull request #13875 from openfoodfoundation/dependabot/npm_and_yarn/webpack-5.104.1 
Bump webpack from 5.104.0 to 5.104.1
 2026-01-23 10:19:27 +11:00
Gaetan Craig-Riou
c87eb05c0e Merge pull request #13874 from openfoodfoundation/dependabot/npm_and_yarn/babel/core-7.28.6 
Bump @babel/core from 7.28.5 to 7.28.6
 2026-01-23 10:18:30 +11:00
Gaetan Craig-Riou
a1f363c53b Merge pull request #13868 from mkllnk/spec-helper 
Merge and simplify rspec config
 2026-01-23 10:14:53 +11:00
dependabot[bot]
76c6362db0 Bump mini-css-extract-plugin from 2.9.4 to 2.10.0 
Bumps [mini-css-extract-plugin](https://github.com/webpack/mini-css-extract-plugin) from 2.9.4 to 2.10.0.
- [Release notes](https://github.com/webpack/mini-css-extract-plugin/releases)
- [Changelog](https://github.com/webpack/mini-css-extract-plugin/blob/main/CHANGELOG.md)
- [Commits](https://github.com/webpack/mini-css-extract-plugin/compare/v2.9.4...v2.10.0)

---
updated-dependencies:
- dependency-name: mini-css-extract-plugin
  dependency-version: 2.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-01-22 09:32:58 +00:00
dependabot[bot]
5c3308de36 Bump webpack from 5.104.0 to 5.104.1 
Bumps [webpack](https://github.com/webpack/webpack) from 5.104.0 to 5.104.1.
- [Release notes](https://github.com/webpack/webpack/releases)
- [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md)
- [Commits](https://github.com/webpack/webpack/compare/v5.104.0...v5.104.1)

---
updated-dependencies:
- dependency-name: webpack
  dependency-version: 5.104.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-01-22 09:32:50 +00:00
dependabot[bot]
a82b2c2799 Bump @babel/core from 7.28.5 to 7.28.6 
Bumps [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) from 7.28.5 to 7.28.6.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.28.6/packages/babel-core)

---
updated-dependencies:
- dependency-name: "@babel/core"
  dependency-version: 7.28.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-01-22 09:32:43 +00:00
Maikel
4895010fe0 Merge pull request #13872 from openfoodfoundation/dependabot/npm_and_yarn/lodash-4.17.23 
Bump lodash from 4.17.21 to 4.17.23
 2026-01-22 14:36:50 +11:00
Maikel
962097f237 Merge pull request #13871 from openfoodfoundation/dependabot/npm_and_yarn/postcss-preset-env-10.6.1 
Bump postcss-preset-env from 10.5.0 to 10.6.1
 2026-01-22 14:35:59 +11:00
Maikel
941707a0df Merge pull request #13870 from openfoodfoundation/dependabot/npm_and_yarn/sass-embedded-1.97.2 
Bump sass-embedded from 1.96.0 to 1.97.2
 2026-01-22 14:34:31 +11:00
Maikel Linke
85439b4b54 Delete even more tmp dev files 2026-01-22 13:58:46 +11:00
Maikel Linke
35724bec81 Delete generated JS for tests on update 2026-01-22 12:39:10 +11:00
Maikel Linke
6cbc6fbca3 Remove precompiled assets on update 2026-01-22 12:27:04 +11:00
Maikel Linke
b0b03cbb5f Delete old screenshots when updating app 2026-01-22 12:26:08 +11:00
David Cook
f7e119d06f Merge pull request #13869 from openfoodfoundation/dependabot/npm_and_yarn/cross-spawn-7.0.6 
Bump cross-spawn from 7.0.3 to 7.0.6
 2026-01-22 10:19:18 +11:00
dependabot[bot]
52ee5929cf Bump lodash from 4.17.21 to 4.17.23 
Bumps [lodash](https://github.com/lodash/lodash) from 4.17.21 to 4.17.23.
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/compare/4.17.21...4.17.23)

---
updated-dependencies:
- dependency-name: lodash
  dependency-version: 4.17.23
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-01-21 23:05:03 +00:00
dependabot[bot]
1e58882217 Bump postcss-preset-env from 10.5.0 to 10.6.1 
Bumps [postcss-preset-env](https://github.com/csstools/postcss-plugins/tree/HEAD/plugin-packs/postcss-preset-env) from 10.5.0 to 10.6.1.
- [Changelog](https://github.com/csstools/postcss-plugins/blob/main/plugin-packs/postcss-preset-env/CHANGELOG.md)
- [Commits](https://github.com/csstools/postcss-plugins/commits/HEAD/plugin-packs/postcss-preset-env)

---
updated-dependencies:
- dependency-name: postcss-preset-env
  dependency-version: 10.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-01-21 09:32:46 +00:00
dependabot[bot]
ca23f12451 Bump sass-embedded from 1.96.0 to 1.97.2 
Bumps [sass-embedded](https://github.com/sass/embedded-host-node) from 1.96.0 to 1.97.2.
- [Changelog](https://github.com/sass/embedded-host-node/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sass/embedded-host-node/compare/1.96.0...1.97.2)

---
updated-dependencies:
- dependency-name: sass-embedded
  dependency-version: 1.97.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-01-21 09:32:39 +00:00
David Cook
cce37aa915 Add explanation for magic number 2026-01-21 17:09:33 +11:00
dependabot[bot]
f808fe9685 Bump cross-spawn from 7.0.3 to 7.0.6 
Bumps [cross-spawn](https://github.com/moxystudio/node-cross-spawn) from 7.0.3 to 7.0.6.
- [Changelog](https://github.com/moxystudio/node-cross-spawn/blob/master/CHANGELOG.md)
- [Commits](https://github.com/moxystudio/node-cross-spawn/compare/v7.0.3...v7.0.6)

---
updated-dependencies:
- dependency-name: cross-spawn
  dependency-version: 7.0.6
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-01-21 05:18:48 +00:00
Gaetan Craig-Riou
dd5db396b4 Merge pull request #13828 from rioug/10298-upgrade-to-shakapaker 
Upgrade to shakapaker
 2026-01-21 16:17:50 +11:00
David Cook
e121a799ed Refer to unit from variant 
variant_unit was moved to variant as part of product refactor.
Old products probably still had a value there, but new ones would have been appearing with nil.
 2026-01-21 16:10:30 +11:00
David Cook
5dfef4a3ae Add specs for data, with product and variant grouping 
Oh and by the way, we missed something in the product refactor.
 2026-01-21 16:10:30 +11:00