Ahmed Ejaz
7415503b63
Update all locales with the latest Transifex translations
2025-10-27 05:55:44 +05:00
Filipe
cc35d118eb
Merge pull request #13627 from guidoDutra/10261/bad-table-format-in-edit-order-page
...
fix table format in edit order page
2025-10-24 13:16:49 +01:00
Maikel
025f8b25b1
Merge pull request #13637 from deivid-rodriguez/fix-missing-stripe-js-error-in-edge-case
...
Fix JS error when Stripe connect is disabled but Stripe API keys are setup
2025-10-22 13:09:58 +11:00
Maikel
3017f61047
Merge pull request #13638 from deivid-rodriguez/refactor-specs
...
Remove only usage of `STRIPE_PUBLIC_TEST_API_KEY` env and refactor specs that were using it
2025-10-22 13:08:31 +11:00
Maikel
8cb3d06f7c
Merge pull request #13635 from deivid-rodriguez/testing-stripe-wiki
...
Link to Stripe testing wiki page from the cassette regeneration script
2025-10-22 13:02:21 +11:00
Maikel
8f442e82ed
Merge pull request #13634 from openfoodfoundation/dependabot/bundler/activerecord-import-2.2.0
...
Bump activerecord-import from 1.6.0 to 2.2.0
2025-10-22 13:00:43 +11:00
David Rodríguez
b28886dd38
Normalize casing
2025-10-21 17:34:40 +02:00
David Rodríguez
bd4f115185
Create account directly with the proper stripe_user_id
2025-10-21 17:34:40 +02:00
David Rodríguez
c43650034f
Remove unnecessary test specific environment variable
2025-10-21 17:34:40 +02:00
David Rodríguez
94bc787283
Remove unused let
2025-10-21 17:34:40 +02:00
David Rodríguez
58851a8e67
Move client_id let to the only spec using it
2025-10-21 17:34:39 +02:00
David Rodríguez
c3e2382600
Move let! to the only spec using it
2025-10-21 17:34:39 +02:00
David Rodríguez
802878b4eb
Fix JS error when Stripe connect is disabled but Stripe API keys are setup
2025-10-21 17:24:34 +02:00
Filipe
69d8fc3cad
Merge pull request #13624 from chahmedejaz/bugfix/13556-fix-500-error-on-stripe-checkout
...
Error 500 checking out with Stripe, after navigating back to the Summary page
2025-10-21 14:34:53 +01:00
David Rodríguez
6a226e476d
Link to Stripe testing wiki page from the cassette regeneration script
...
I think this is the more relevant wiki page for someone looking into
regenerating cassettes.
Also, no need to mention bitwarden explicitly, the wiki page already
explains everything.
2025-10-21 14:38:10 +02:00
dependabot[bot]
479d52a2bb
Bump activerecord-import from 1.6.0 to 2.2.0
...
Bumps [activerecord-import](https://github.com/zdennis/activerecord-import ) from 1.6.0 to 2.2.0.
- [Changelog](https://github.com/zdennis/activerecord-import/blob/master/CHANGELOG.md )
- [Commits](https://github.com/zdennis/activerecord-import/compare/v1.6.0...v2.2.0 )
---
updated-dependencies:
- dependency-name: activerecord-import
dependency-version: 2.2.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-10-21 09:02:00 +00:00
Gaetan Craig-Riou
73688b9544
Merge pull request #13630 from openfoodfoundation/dependabot/bundler/webmock-3.25.1
...
Bump webmock from 3.23.1 to 3.25.1
2025-10-21 10:02:14 +11:00
dependabot[bot]
02ea3cb61c
Bump webmock from 3.23.1 to 3.25.1
...
Bumps [webmock](https://github.com/bblimke/webmock ) from 3.23.1 to 3.25.1.
- [Changelog](https://github.com/bblimke/webmock/blob/master/CHANGELOG.md )
- [Commits](https://github.com/bblimke/webmock/compare/v3.23.1...v3.25.1 )
---
updated-dependencies:
- dependency-name: webmock
dependency-version: 3.25.1
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-10-20 09:26:20 +00:00
Maikel
c7d0594257
Merge pull request #13622 from deivid-rodriguez/no-reviewdog-master
...
Don't run reviewdog on pushes
2025-10-20 16:34:06 +11:00
Maikel
4eee7ad603
Merge pull request #13604 from deivid-rodriguez/silent-puma
...
Silence capybara starting puma during system specs
2025-10-20 16:26:18 +11:00
David Cook
23f7f2974a
Merge pull request #13618 from deivid-rodriguez/remove-unnecessary-sleeps
...
Remove unnecessary explicit sleeps
2025-10-20 16:06:44 +11:00
Maikel
8105b919e0
Merge pull request #13600 from deivid-rodriguez/profile-enables-dev-caching
...
The PROFILE env variable should actually enable, not disable, caching
2025-10-20 16:03:20 +11:00
David Cook
53ef5148e9
Merge pull request #13617 from deivid-rodriguez/upgrade-cache-format-version
...
Upgrade cache format version
2025-10-20 15:41:52 +11:00
David Cook
93e6f9034c
Merge pull request #13602 from deivid-rodriguez/bump-mini_magick
...
Update mini_magick to a version that plays nice with imagemagick v7
2025-10-20 15:26:20 +11:00
David Cook
125a92346c
Merge pull request #13599 from deivid-rodriguez/fix-duplicate-key-warning
...
Fix duplicate keys warnings in some views
2025-10-20 15:21:40 +11:00
Gaetan Craig-Riou
31b8fe16cb
Merge pull request #13623 from deivid-rodriguez/follow-up-to-old-rename
...
Follow up to old ofnEmptiesCart to ofnChangeHub rename
2025-10-20 10:53:47 +11:00
Gaetan Craig-Riou
cbffea8d30
Merge pull request #13616 from openfoodfoundation/dependabot/bundler/state_machines-activerecord-0.31.0
...
Bump state_machines-activerecord from 0.9.0 to 0.31.0
2025-10-20 09:50:30 +11:00
Guido Oliveira
be9da62d98
fix table format in edit order page
2025-10-19 07:58:40 -03:00
filipefurtad0
7320fa3f09
Update all locales with the latest Transifex translations
2025-10-17 10:17:14 +01:00
Ahmed Ejaz
9f6c149735
Add check for payment authorization state in StripeScaPaymentAuthorize and corresponding spec
2025-10-17 05:25:45 +05:00
David Rodríguez
50578647ee
Follow up to old ofnEmptiesCart to ofnChangeHub rename
...
This happened back in 2015 through
9c9051498b , but two places were missed.
One was a code comment so did not affect anything (other than confused
code readers I guess?). The other one did create a regression but was
later fixed by 18d966f0de in 2021.
2025-10-16 12:56:17 +02:00
David Rodríguez
a28f05fddc
Don't run reviewdog on pushes
...
As configured, it's meant to annotate PRs with linter errors (so you
don't have to skim through logs). So it does not make sense for pushes.
In fact, on pushes rubocop action is doing nothing, and prettier action
is failing with:
> reviewdog: this is not PullRequest build.
> sed: couldn't write 80 items to stdout: Broken pipe
2025-10-16 12:34:37 +02:00
Rachel Arnould
c4c266246c
Merge pull request #13507 from rioug/tag-rules-remove-angular
...
[Variant Tags] Remove angular from tag rule admin page
2025-10-15 23:16:05 +02:00
David Rodríguez
d6c044fd5b
Remove unnecessary explicit sleeps
...
Capybara helpers already wait for the content to show up (and we already
have a default of 10 seconds configured), so I don't think waiting more is
actually the problem in these specs.
But if we wanted to wait more, I think it's better to pass the `:wait`
option to capybara matchers, because that's a "maximum waiting value"
but we'll still proceed earlier if the content shows up.
Using the same idea, I changed the positive assertions to happen first,
because negative assertions do spend "max wait time" waiting, while
positive assertions only wait until the content shows up.
2025-10-15 13:09:52 +02:00
David Rodríguez
a75ea5b506
Upgrade cache format version
...
It's supposed to be faster and more compact, and the previous format
will become unsupported in Rails 7.2 as per Rails boot warnings:
> DEPRECATION WARNING: Support for `config.active_support.cache_format_version = 6.1` has been deprecated and will be removed in Rails 7.2.
>
> Check the Rails upgrade guide at https://guides.rubyonrails.org/upgrading_ruby_on_rails.html#new-activesupport-cache-serialization-format
> for more information on how to upgrade.
> (called from <main> at /path/to/config/environment.rb:5)
2025-10-15 12:17:03 +02:00
dependabot[bot]
7f937fd4b1
Bump state_machines-activerecord from 0.9.0 to 0.31.0
...
Bumps [state_machines-activerecord](https://github.com/state-machines/state_machines-activerecord ) from 0.9.0 to 0.31.0.
- [Release notes](https://github.com/state-machines/state_machines-activerecord/releases )
- [Changelog](https://github.com/state-machines/state_machines-activerecord/blob/master/CHANGELOG.md )
- [Commits](https://github.com/state-machines/state_machines-activerecord/compare/v0.9.0...state_machines-activerecord/v0.31.0 )
---
updated-dependencies:
- dependency-name: state_machines-activerecord
dependency-version: 0.31.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-10-15 09:02:41 +00:00
Gaetan Craig-Riou
b4a64185dd
Merge pull request #13576 from dacook/test-log-level
...
Add env var option for test log level
2025-10-15 13:40:23 +11:00
Gaetan Craig-Riou
a905acb56e
Merge pull request #13601 from openfoodfoundation/dependabot/bundler/redis-5.4.1
...
Bump redis from 5.2.0 to 5.4.1
2025-10-15 13:22:37 +11:00
Ahmed Ejaz
067fa80d0f
Merge pull request #13458 from rioug/docker-upgrade-postgres
...
Docker upgrade postgres
2025-10-15 02:24:16 +05:00
David Rodríguez
667ce5eda2
Silence capybara starting puma during system specs
...
##### Before
```
$ bin/rspec spec/system/admin/order_cycles/simple_spec.rb:460
Running via Spring preloader in process 79308
Run options: include {:locations=>{"./spec/system/admin/order_cycles/simple_spec.rb"=>[460]}}
As an administrator
I want to manage simple order cycles
as an enterprise user
that is a manager of the coordinator
when variants are hidden via inventory settings
Capybara starting Puma...
* Version 6.5.0, codename: Sky's Version
* Min threads: 0, max threads: 4
* Listening on http://127.0.0.1:51103
shows a warning when going to 'outgoing products' tab
Finished in 3.95 seconds (files took 0.45949 seconds to load)
1 example, 0 failures
```
##### After
```
$ bin/rspec spec/system/admin/order_cycles/simple_spec.rb:460
Running via Spring preloader in process 79234
Run options: include {:locations=>{"./spec/system/admin/order_cycles/simple_spec.rb"=>[460]}}
As an administrator
I want to manage simple order cycles
as an enterprise user
that is a manager of the coordinator
when variants are hidden via inventory settings
shows a warning when going to 'outgoing products' tab
Finished in 4.03 seconds (files took 0.49981 seconds to load)
1 example, 0 failures
```
2025-10-14 20:34:05 +02:00
dependabot[bot]
980cc9c724
Bump redis from 5.2.0 to 5.4.1
...
Bumps [redis](https://github.com/redis/redis-rb ) from 5.2.0 to 5.4.1.
- [Changelog](https://github.com/redis/redis-rb/blob/master/CHANGELOG.md )
- [Commits](https://github.com/redis/redis-rb/compare/v5.2.0...v5.4.1 )
---
updated-dependencies:
- dependency-name: redis
dependency-version: 5.4.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-10-14 09:01:55 +00:00
David Rodríguez
c72f9477cd
bundle update mini_magick
...
This is mainly to shush a lot of warnings when running the test suite,
like the following:
```
WARNING: The convert command is deprecated in IMv7, use "magick" instead of "convert" or "magick convert"
```
2025-10-14 08:17:12 +02:00
David Rodríguez
8787eed863
The PROFILE env variable should actually enable, not disable, caching
...
I think this may be a typo from 6d8ddd1edac17a431222c86482bceb83e8a7d32f?
2025-10-14 08:03:15 +02:00
David Rodríguez
e2b6199f26
Fix duplicate keys warnings in some views
...
We're passing the `id` key twice, and with different value, resulting in
warnings like:
> /path/to/app/views/producers/index.html.haml:27: warning: key :id is duplicated and overwritten on line 31
Use only the latest value passed to remove the warning.
##### Before
```
$ bundle exec rspec -e "displays in an iframe" -e "logging in with a redirect set"
(...)
Run options: include {:full_description=>/(?-mix:displays\ in\ an\ iframe)|(?-mix:logging\ in\ with\ a\ redirect\ set)/}
Capybara starting Puma...
* Version 6.5.0, codename: Sky's Version
* Min threads: 0, max threads: 4
* Listening on http://127.0.0.1:50292
/path/to/app/views/producers/index.html.haml:27: warning: key :id is duplicated and overwritten on line 31
./path/to/app/views/groups/show.html.haml:68: warning: key :id is duplicated and overwritten on line 72
Modal window with text `Unable to load map. Please check your browser settings and allow 3rd party cookies for this website.` has been opened, but you didn't wrap your code into (`accept_prompt` | `dismiss_prompt` | `accept_confirm` | `dismiss_confirm` | `accept_alert`), accepting by default
.
Finished in 4.54 seconds (files took 4.04 seconds to load)
2 examples, 0 failures
```
##### After
```
$ bundle exec rspec -e "displays in an iframe" -e "logging in with a redirect set"
(...)
Run options: include {:full_description=>/(?-mix:displays\ in\ an\ iframe)|(?-mix:logging\ in\ with\ a\ redirect\ set)/}
Capybara starting Puma...
* Version 6.5.0, codename: Sky's Version
* Min threads: 0, max threads: 4
* Listening on http://127.0.0.1:50256
.Modal window with text `Unable to load map. Please check your browser settings and allow 3rd party cookies for this website.` has been opened, but you didn't wrap your code into (`accept_prompt` | `dismiss_prompt` | `accept_confirm` | `dismiss_confirm` | `accept_alert`), accepting by default
.
Finished in 4.17 seconds (files took 4.1 seconds to load)
2 examples, 0 failures
```
2025-10-14 07:58:32 +02:00
Maikel
49d345e608
Merge pull request #13597 from deivid-rodriguez/fix-rspec-warning
...
Fix RSpec warning when running `Reporting::ReportRenderer.render_as` unit spec
2025-10-14 14:02:42 +11:00
David Cook
12a6f9ac40
Merge pull request #13593 from openfoodfoundation/dependabot/bundler/flipper-1.3.6
...
Bump flipper from 1.3.0 to 1.3.6
2025-10-14 14:02:01 +11:00
Maikel
7d4efe75c3
Merge pull request #13596 from deivid-rodriguez/upgrade-caniuse-lite-to-fix-webpack-warnings
...
Update caniuse-lite to fix `bin/webpack-dev-server` warnings
2025-10-14 14:01:39 +11:00
Maikel
2cd41f3b8f
Merge pull request #13595 from deivid-rodriguez/migrate-old-rspec-syntax
...
Use supported RSpec syntax
2025-10-14 13:52:40 +11:00
Maikel
436d919fc3
Merge pull request #13594 from deivid-rodriguez/typo
...
Fix typo in getting started guide
2025-10-14 13:51:43 +11:00
Maikel Linke
7a12e7426f
Pass actors instead of AR associations to Flipper
...
Apparently they removed support for checking collections of actors.
2025-10-14 13:32:51 +11:00
David Cook
bd58969fb5
Reduce test logging by default
...
These logs are rarely checked, and can take up a lot of disk space.
I wanted to reduce the dev log level too, but then realised it also affects the dev server stdout. So now the other suggestions seem like a good idea.. (eg link development.log to /dev/null)
Oh well, this change will at least reduce one source of unnecessary disk usage in a default installation, so I think worth doing.
2025-10-14 12:30:36 +11:00
David Cook
0a385cc67c
Use same variable name as prod, staging and test
2025-10-14 12:07:12 +11:00
David Cook
be5a630b9d
[fixup] shorter variable name
2025-10-14 12:06:14 +11:00
David Rodríguez
98889365f1
Fix RSpec warning when running Reporting::ReportRenderer.render_as unit spec
...
Before:
```
$ bundle exec rspec -e ".render_as"
(...)
Run options: include {:full_description=>/\.render_as/}
WARNING: Using the `raise_error` matcher without providing a specific error or message risks false positives, since `raise_error` will match when Ruby raises a `NoMethodError`, `NameError` or `ArgumentError`, potentially allowing the expectation to pass without even executing the method you are intending to call. Actual error raised was #<ActionController::BadRequest: report_format should be in [:csv, :json, :html, :xlsx, :pdf]>. Instead consider providing a specific error class or message. This message can be suppressed by setting: `RSpec::Expectations.configuration.on_potential_false_positives = :nothing`. Called from /path/to/spec/lib/reports/report_renderer_spec.rb:34:in `block (3 levels) in <main>'.
.
Finished in 0.02544 seconds (files took 4.08 seconds to load)
1 example, 0 failures
```
After this patch:
```
$ bundle exec rspec -e ".render_as"
(...)
Run options: include {:full_description=>/\.render_as/}
.
Finished in 0.02488 seconds (files took 4.09 seconds to load)
1 example, 0 failures
```
2025-10-13 20:46:15 +02:00
David Rodríguez
9227660faf
Update caniuse-lite to fix bin/webpack-dev-server warnings
...
This is the result of running:
$ npx update-browserslist-db@latest
And fixes warnings like
> Browserslist: caniuse-lite is outdated. Please run:
> npx update-browserslist-db@latest
> Why you should do it regularly: https://github.com/browserslist/update-db#readme
when running `bin/webpack-dev-server`.
2025-10-13 20:27:22 +02:00
David Rodríguez
bdafc1ff02
Use supported RSpec syntax
...
This spec was using a very old syntax no longer supported by RSpec. It's
not currently influencing specs result because the spec running into
the error is currently set as "pending". However, the spec is still run
and the error is still visible.
Fixing the syntax does not fix the spec, but lets it get a bit further.
2025-10-13 16:05:59 +02:00
David Rodríguez
9457b0505d
Fix typo in getting started guide
2025-10-13 15:54:43 +02:00
dependabot[bot]
755116e713
Bump flipper from 1.3.0 to 1.3.6
...
Bumps [flipper](https://github.com/flippercloud/flipper ) from 1.3.0 to 1.3.6.
- [Release notes](https://github.com/flippercloud/flipper/releases )
- [Changelog](https://github.com/flippercloud/flipper/blob/main/Changelog.md )
- [Commits](https://github.com/flippercloud/flipper/compare/v1.3.0...v1.3.6 )
---
updated-dependencies:
- dependency-name: flipper
dependency-version: 1.3.6
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-10-13 09:20:50 +00:00
David Cook
4852ee2c6e
Merge pull request #13587 from mkllnk/json-response
...
Clean up request specs testing JSON
2025-10-13 14:24:26 +11:00
Maikel
9ba215316b
Merge pull request #13513 from mkllnk/add-cqcm-staging-server
...
Add CQCM staging server to platforms to share data with
2025-10-13 13:42:12 +11:00
Maikel
084f7a8a47
Merge pull request #13590 from openfoodfoundation/dependabot/bundler/newrelic_rpm-9.22.0
...
Bump newrelic_rpm from 9.9.0 to 9.22.0
2025-10-13 10:05:50 +11:00
Gaetan Craig-Riou
7c60dfb75c
Merge pull request #13591 from openfoodfoundation/dependabot/bundler/rack-2.2.20
...
Bump rack from 2.2.19 to 2.2.20
2025-10-13 09:55:05 +11:00
dependabot[bot]
e2410105ce
Bump rack from 2.2.19 to 2.2.20
...
Bumps [rack](https://github.com/rack/rack ) from 2.2.19 to 2.2.20.
- [Release notes](https://github.com/rack/rack/releases )
- [Changelog](https://github.com/rack/rack/blob/main/CHANGELOG.md )
- [Commits](https://github.com/rack/rack/compare/v2.2.19...v2.2.20 )
---
updated-dependencies:
- dependency-name: rack
dependency-version: 2.2.20
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-10-10 18:59:10 +00:00
dependabot[bot]
8b0207f4b1
Bump newrelic_rpm from 9.9.0 to 9.22.0
...
Bumps [newrelic_rpm](https://github.com/newrelic/newrelic-ruby-agent ) from 9.9.0 to 9.22.0.
- [Release notes](https://github.com/newrelic/newrelic-ruby-agent/releases )
- [Changelog](https://github.com/newrelic/newrelic-ruby-agent/blob/dev/CHANGELOG.md )
- [Commits](https://github.com/newrelic/newrelic-ruby-agent/compare/9.9.0...9.22.0 )
---
updated-dependencies:
- dependency-name: newrelic_rpm
dependency-version: 9.22.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-10-10 09:02:15 +00:00
Maikel Linke
d3319cfd69
Replace global spec helpers with faster let
2025-10-10 16:44:50 +11:00
Maikel Linke
378b5e656e
Use already parsed JSON in specs
...
Existing helpers provide indifferent access already.
2025-10-10 16:44:08 +11:00
Maikel Linke
b2da57b496
Publish supplier of catalog item
2025-10-10 16:18:22 +11:00
Maikel Linke
c6a34cfe34
Move catalog_item builder into the right module
2025-10-10 16:18:22 +11:00
Maikel Linke
591a279927
DRY controller
2025-10-10 16:18:22 +11:00
Maikel Linke
86774b3e4e
Tell data proxy the enterprise to update
2025-10-10 16:18:22 +11:00
Maikel Linke
2761cee5e6
Publish coordinates of addresses
2025-10-10 16:18:22 +11:00
Maikel Linke
9460d17417
Publish DFC endpoints as JSON
2025-10-10 16:18:22 +11:00
Maikel Linke
404c07a590
Spec DFC endpoint configuration
...
It looks like puma finds the file only under `/.well-known/dfc` and not
`/.well-known/dfc/` with a slash in staging environment while it works
here in dev and test.
And in any case, just placing the file in `public/` doesn't produce the
right content type.
2025-10-10 16:18:22 +11:00
Maikel Linke
f2f0d954c6
Move source of truth of platforms into one place
...
The first test tokens had an inconsistent client_id and I had to
introduce multiple mappings to get the right config. But that has been
harmonised and we can put the config in one place.
2025-10-10 16:18:22 +11:00
Maikel Linke
1028d42e35
Update test token for new dev client id
2025-10-10 16:18:22 +11:00
Maikel Linke
91ad63d1ed
Use test token as source of truth for validity
2025-10-10 16:18:22 +11:00
Maikel Linke
2780ae78f7
Add CQCM production servers
2025-10-10 16:18:21 +11:00
Maikel Linke
bf661159c6
Notify data proxy of permission changes
2025-10-10 16:18:21 +11:00
Maikel Linke
ad78ef14ef
Automate replacement of generated image URLs in Swagger doc
2025-10-10 16:18:21 +11:00
Maikel Linke
c7efa43cdb
Add well-known config for SiB directory proxy
2025-10-10 16:18:21 +11:00
Maikel Linke
df6e553661
Add SuppliedProducts index endpoint
2025-10-10 16:18:21 +11:00
Maikel Linke
4d59343f6c
List enterprises on DFC API
2025-10-10 16:18:21 +11:00
Maikel Linke
44d29e98e0
Fix publishing all enterprises when listing catalog
2025-10-10 16:18:21 +11:00
Maikel Linke
06c27d6aaf
Spec current publish of catalog of all enterprises
2025-10-10 16:18:21 +11:00
Maikel Linke
cb9edfaed8
Show DPM platforms enabled for user
2025-10-10 16:18:21 +11:00
Maikel Linke
51a3085452
Add CQCM staging server to platforms
2025-10-10 16:18:21 +11:00
Maikel
8ccceccd92
Merge pull request #13580 from openfoodfoundation/dependabot/bundler/digest-3.2.0
...
Bump digest from 3.1.1 to 3.2.0
2025-10-10 11:16:05 +11:00
Filipe
5e58f11006
Merge pull request #13474 from garethdavisrogers/add-report-name-and-details
...
Add report name and details
2025-10-09 12:42:22 +01:00
Ahmed Ejaz
5d8ecc5e5c
Merge pull request #13584 from openfoodfoundation/fix/dependabot-pr-error
...
use pull_request_target to run action in context of the base repo rather than forked dependabot repo
2025-10-09 03:37:35 +05:00
Ahmed Ejaz
12e70d729a
use pull_request_target to run action in context of the base repo rather than forked dependabot repo
2025-10-09 03:33:41 +05:00
Gareth Rogers
dc61580da1
Merge branch 'master' into add-report-name-and-details
2025-10-08 17:23:28 -04:00
Gareth
b956d6f21b
Added test coverage, converted instance_double to double as we do not need the actual method
2025-10-08 17:17:04 -04:00
dependabot[bot]
b5e3681eab
Bump digest from 3.1.1 to 3.2.0
...
Bumps [digest](https://github.com/ruby/digest ) from 3.1.1 to 3.2.0.
- [Release notes](https://github.com/ruby/digest/releases )
- [Commits](https://github.com/ruby/digest/compare/v3.1.1...v3.2.0 )
---
updated-dependencies:
- dependency-name: digest
dependency-version: 3.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-10-08 09:02:21 +00:00
Maikel
c45ac93a12
Merge pull request #13575 from mkllnk/hanging-specs
...
Deactivate Puffing Billy to avoid hanging specs
2025-10-08 16:54:18 +11:00
David Cook
60ee33053d
Apply suggestions from code review
2025-10-08 14:15:56 +11:00
David Cook
a4ea311439
Add env var option for test log level
...
The test log level is already debug by default, but perhaps you don't want that because it results in a very large file over time, which isn't automatically cleaned up.
In that case, why not change the default, maybe to :info?
2025-10-08 14:02:05 +11:00
Maikel Linke
5b383237ea
Deactivate Puffing Billy to avoid hanging specs
2025-10-08 13:26:37 +11:00
Maikel
de8029f877
Merge pull request #13564 from mkllnk/config-log
...
Make log-level configurable in staging
2025-10-08 13:24:56 +11:00
Gaetan Craig-Riou
d818162a9f
Merge pull request #13568 from openfoodfoundation/dependabot/bundler/undercover-0.8.1
...
Bump undercover from 0.7.4 to 0.8.1
2025-10-08 09:56:22 +11:00
Gaetan Craig-Riou
9bd4d29027
Merge pull request #13567 from openfoodfoundation/dependabot/bundler/mime-types-3.7.0
...
Bump mime-types from 3.5.2 to 3.7.0
2025-10-08 09:51:59 +11:00
Gaetan Craig-Riou
742d442929
Merge pull request #13566 from openfoodfoundation/dependabot/bundler/rails-i18n-7.0.10
...
Bump rails-i18n from 7.0.9 to 7.0.10
2025-10-08 09:45:04 +11:00
Gaetan Craig-Riou
f08f744077
Merge pull request #13565 from openfoodfoundation/dependabot/npm_and_yarn/jasmine-core-5.12.0
...
Bump jasmine-core from 5.11.0 to 5.12.0
2025-10-08 09:44:05 +11:00
Gaetan Craig-Riou
72ab0ba3f5
Merge pull request #13573 from openfoodfoundation/dependabot/bundler/rack-2.2.19
...
Bump rack from 2.2.18 to 2.2.19
2025-10-08 09:39:42 +11:00
dependabot[bot]
bb4b483469
Bump rack from 2.2.18 to 2.2.19
...
Bumps [rack](https://github.com/rack/rack ) from 2.2.18 to 2.2.19.
- [Release notes](https://github.com/rack/rack/releases )
- [Changelog](https://github.com/rack/rack/blob/main/CHANGELOG.md )
- [Commits](https://github.com/rack/rack/compare/v2.2.18...v2.2.19 )
---
updated-dependencies:
- dependency-name: rack
dependency-version: 2.2.19
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-10-07 19:44:09 +00:00
Gareth Rogers
585073a326
Merge branch 'master' into add-report-name-and-details
2025-10-07 11:02:56 -04:00
Gareth
c3189892af
Removed other rows for now. Can be added in future PRs
2025-10-07 11:01:55 -04:00
Gareth
417011909c
Removed other filter rows. They weren't working and maybe not even relevant. The idea was to include order cycles and distributor ids as well, but it wasn't really requested so I'm taking it out.
2025-10-07 11:01:55 -04:00
Gareth
9ed612410f
Changed default checking behavior of metadata controller
2025-10-07 11:01:55 -04:00
David Cook
7098cf2224
Merge pull request #13570 from openfoodfoundation/task/13521-move-dependabot-to-code-review
...
Remove project write permissions from Dependabot PR workflow
2025-10-07 10:12:55 +11:00
Ahmed Ejaz
4713e9046c
Remove project write permissions from Dependabot PR workflow
2025-10-07 03:57:11 +05:00
David Cook
037030cf60
Merge pull request #13548 from mkllnk/test_rake
...
Configure rake specs in one place
2025-10-07 09:31:02 +11:00
dependabot[bot]
286f05d05c
Bump undercover from 0.7.4 to 0.8.1
...
Bumps [undercover](https://github.com/grodowski/undercover ) from 0.7.4 to 0.8.1.
- [Release notes](https://github.com/grodowski/undercover/releases )
- [Changelog](https://github.com/grodowski/undercover/blob/master/CHANGELOG.md )
- [Commits](https://github.com/grodowski/undercover/compare/v0.7.4...v0.8.1 )
---
updated-dependencies:
- dependency-name: undercover
dependency-version: 0.8.1
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-10-06 09:06:51 +00:00
dependabot[bot]
e9a750ce6d
Bump mime-types from 3.5.2 to 3.7.0
...
Bumps [mime-types](https://github.com/mime-types/ruby-mime-types ) from 3.5.2 to 3.7.0.
- [Changelog](https://github.com/mime-types/ruby-mime-types/blob/main/CHANGELOG.md )
- [Commits](https://github.com/mime-types/ruby-mime-types/compare/v3.5.2...v3.7.0 )
---
updated-dependencies:
- dependency-name: mime-types
dependency-version: 3.7.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-10-06 09:06:17 +00:00
dependabot[bot]
8942f3c72b
Bump rails-i18n from 7.0.9 to 7.0.10
...
Bumps [rails-i18n](https://github.com/svenfuchs/rails-i18n ) from 7.0.9 to 7.0.10.
- [Changelog](https://github.com/svenfuchs/rails-i18n/blob/master/CHANGELOG.md )
- [Commits](https://github.com/svenfuchs/rails-i18n/compare/v7.0.9...v7.0.10 )
---
updated-dependencies:
- dependency-name: rails-i18n
dependency-version: 7.0.10
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-10-06 09:05:35 +00:00
dependabot[bot]
23b2c8e11b
Bump jasmine-core from 5.11.0 to 5.12.0
...
Bumps [jasmine-core](https://github.com/jasmine/jasmine ) from 5.11.0 to 5.12.0.
- [Release notes](https://github.com/jasmine/jasmine/releases )
- [Changelog](https://github.com/jasmine/jasmine/blob/main/RELEASE.md )
- [Commits](https://github.com/jasmine/jasmine/compare/v5.11.0...v5.12.0 )
---
updated-dependencies:
- dependency-name: jasmine-core
dependency-version: 5.12.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-10-06 09:05:06 +00:00
Gaetan Craig-Riou
9a9e9763cc
Merge pull request #13546 from openfoodfoundation/task/13521-move-dependabot-to-code-review
...
Automate Dependabot PRs to Code Review column via GitHub Action
2025-10-06 16:21:14 +11:00
Maikel Linke
90cd2e0ba2
Make log-level configurable in staging
...
The new comment and code come from the Rails 8.0 default files.
2025-10-06 15:20:25 +11:00
Maikel
8c02bde7f2
Merge pull request #13472 from openfoodfoundation/dependabot/bundler/rswag-ui-2.16.0
...
Bump rswag-ui from 2.13.0 to 2.16.0
2025-10-06 15:14:58 +11:00
dependabot[bot]
8c1e0bae92
Bump rswag-ui from 2.13.0 to 2.16.0
...
Bumps [rswag-ui](https://github.com/rswag/rswag ) from 2.13.0 to 2.16.0.
- [Release notes](https://github.com/rswag/rswag/releases )
- [Changelog](https://github.com/rswag/rswag/blob/master/CHANGELOG.md )
- [Commits](https://github.com/rswag/rswag/compare/2.13.0...2.16.0 )
---
updated-dependencies:
- dependency-name: rswag-ui
dependency-version: 2.16.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-10-06 03:54:07 +00:00
Maikel
09c7288b11
Merge pull request #13471 from openfoodfoundation/dependabot/bundler/rspec-rails-7.1.1
...
Bump rspec-rails from 6.1.2 to 7.1.1
2025-10-06 14:51:22 +11:00
dependabot[bot]
d27ffe5fca
Bump rspec-rails from 6.1.2 to 7.1.1
...
Bumps [rspec-rails](https://github.com/rspec/rspec-rails ) from 6.1.2 to 7.1.1.
- [Changelog](https://github.com/rspec/rspec-rails/blob/main/Changelog.md )
- [Commits](https://github.com/rspec/rspec-rails/compare/v6.1.2...v7.1.1 )
---
updated-dependencies:
- dependency-name: rspec-rails
dependency-version: 7.1.1
dependency-type: direct:development
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-10-06 02:34:38 +00:00
David Cook
6c94650e51
Merge pull request #13516 from mkllnk/lock-sprockets
...
Lock sprockets dependency to major version 3
2025-10-06 12:05:10 +11:00
Ahmed Ejaz
79bb469332
Update all locales with the latest Transifex translations
2025-10-06 03:54:40 +05:00
Ahmed Ejaz
2c4df63879
Add permissions for contents, pull-requests, and project in workflow
2025-10-06 03:35:57 +05:00
Ahmed Ejaz
9f5d73184f
Add .secrets file to define GitHub secrets values locally
2025-10-04 19:24:07 +05:00
Ahmed Ejaz
4a5938c0f7
Add installation retrieval mode and payload for Dependabot token generation
2025-10-04 18:50:47 +05:00
Gareth Rogers
f414e04dea
Merge branch 'master' into add-report-name-and-details
2025-10-01 09:54:51 -04:00
Filipe
ef4d3ec138
Merge pull request #13506 from chahmedejaz/task/13505-remove-stripe-redirect-monkey-patch
...
Remove Stripe redirect monkeypatch and ensure reliable checkout flow
2025-10-01 13:03:58 +01:00
Gareth Rogers
0a9eb173ea
Add report name and details to CSV files
2025-10-01 13:59:43 +10:00
Gaetan Craig-Riou
f5a9ec7fa9
Merge pull request #13551 from openfoodfoundation/dependabot/npm_and_yarn/jasmine-core-5.11.0
...
Bump jasmine-core from 5.10.0 to 5.11.0
2025-10-01 09:29:17 +10:00
filipefurtad0
e190b87f12
Update all locales with the latest Transifex translations
2025-09-29 15:54:51 +01:00
Filipe
ff2e0f4d45
Merge pull request #13533 from chahmedejaz/task/13435-sort-products-by-on-hand-amount
...
Sort product list by 'on hand' amount
2025-09-29 15:07:00 +01:00
dependabot[bot]
d50bcbb70a
Bump jasmine-core from 5.10.0 to 5.11.0
...
Bumps [jasmine-core](https://github.com/jasmine/jasmine ) from 5.10.0 to 5.11.0.
- [Release notes](https://github.com/jasmine/jasmine/releases )
- [Changelog](https://github.com/jasmine/jasmine/blob/main/RELEASE.md )
- [Commits](https://github.com/jasmine/jasmine/compare/v5.10.0...v5.11.0 )
---
updated-dependencies:
- dependency-name: jasmine-core
dependency-version: 5.11.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-09-29 10:21:25 +00:00
Ahmed Ejaz
782f813a15
Add Dependabot PR test event and update workflow for token generation
2025-09-29 11:35:48 +05:00
Gaetan Craig-Riou
9b0545c33f
Merge pull request #13550 from openfoodfoundation/dependabot/bundler/rack-2.2.18
...
Bump rack from 2.2.14 to 2.2.18
2025-09-29 09:39:35 +10:00
Gaetan Craig-Riou
55f162ff4a
Create tag when tag input lose focus
...
This reflect the current behaviour of the angular tag input.
Plus fix spec helper.
2025-09-29 09:36:19 +10:00
Gaetan Craig-Riou
ede7650fc9
Replace space by -, to match angular tag functionality
2025-09-29 09:36:12 +10:00
dependabot[bot]
7631fd422e
Bump rack from 2.2.14 to 2.2.18
...
Bumps [rack](https://github.com/rack/rack ) from 2.2.14 to 2.2.18.
- [Release notes](https://github.com/rack/rack/releases )
- [Changelog](https://github.com/rack/rack/blob/main/CHANGELOG.md )
- [Commits](https://github.com/rack/rack/compare/v2.2.14...v2.2.18 )
---
updated-dependencies:
- dependency-name: rack
dependency-version: 2.2.18
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-09-25 17:32:06 +00:00
Gaetan Craig-Riou
c2c2a9503c
Rename stimulus controller based on the new shorter naming
2025-09-24 10:47:59 +10:00
Gaetan Craig-Riou
bc1823e276
Add http error handling
...
Because we are using fetch here to manually request turbo stream we have
to handle errors ourselves.
2025-09-24 10:46:37 +10:00
Gaetan Craig-Riou
01d5830480
Move turbo http error handling to its own file
2025-09-24 10:46:37 +10:00
Gaetan Craig-Riou
bad7369e67
Per review, fix tag rule filter spec
2025-09-24 10:46:37 +10:00
Gaetan Craig-Riou
ab65b2d745
Per review, fix various syntax/misspell
2025-09-24 10:46:37 +10:00
Gaetan Craig-Riou
f38aa73434
Per review, remove test class
...
It's better to use an anonymous class, and it also prevent the test
class from leaking the global namespace
2025-09-24 10:46:37 +10:00
Gaetan Craig-Riou
3862e0206c
Limit to only one tag per tag rule
2025-09-24 10:46:34 +10:00
Gaetan Craig-Riou
3a0722f39c
Remove tag related methods
2025-09-24 10:40:43 +10:00
Gaetan Craig-Riou
42f7f2606b
Remove reordering testing
...
This functionality has been removed
2025-09-24 10:40:43 +10:00
Gaetan Craig-Riou
9d9f7e8717
Remove Angularjs files related to tag rules
2025-09-24 10:40:43 +10:00
Gaetan Craig-Riou
0cf244b211
Document variant filtering rule behavior
...
Add test to conver scenario where we have conficting rules
2025-09-24 10:40:43 +10:00
Gaetan Craig-Riou
646ba18b8a
Fix bug, load tag rule types when update errors
2025-09-24 10:40:43 +10:00
Gaetan Craig-Riou
8bd631fbb7
Clean up tag rule form component template
...
Consolidate everything in one template and move visibility options to
the component.
2025-09-24 10:40:43 +10:00
Gaetan Craig-Riou
5c3acf38d7
Clean up stimulus usage
...
Use value and parameter when possible instead of relying on hidden
input
2025-09-24 10:40:43 +10:00
Gaetan Craig-Riou
afdc40d230
Move helper function to component
...
It's only used in the component so there is no need to keep it as an
helper.
2025-09-24 10:40:43 +10:00
Gaetan Craig-Riou
771573af1c
Fix system spec to work with refactored screen
2025-09-24 10:40:43 +10:00
Gaetan Craig-Riou
953122b6f6
Fix adding new rule
...
We separate the default tag rules and the various tag rule groups by an
index of 1000. This is so the previous group does not overlap with the
current group. Rails will managed the non continusly numbered
tag_rule_attributes param just fine. It saves us from having to manage
the numbering of tag_rule_attributes in javascript
2025-09-24 10:40:43 +10:00
Gaetan Craig-Riou
75325e2935
Consolidate modal to add rule into a component
2025-09-24 10:40:43 +10:00
Gaetan Craig-Riou
7e48007d09
Add new tag group and add rule to tag group
2025-09-24 10:40:43 +10:00
Gaetan Craig-Riou
50ab0a494c
Move tag rule group form to a component
2025-09-24 10:40:43 +10:00
Gaetan Craig-Riou
d3ef744daf
Display existing grouped tag rules
2025-09-24 10:40:43 +10:00
Gaetan Craig-Riou
ccdd12bf59
Small improvment
...
- add value for preferred customer tags
- allow passing html options to preferred customer tags hidden field
2025-09-24 10:40:43 +10:00
Gaetan Craig-Riou
b66b033999
Small improvement
...
- allow passing html options to the hidden field with the tags values,
to be used to add stimulus directive
- dispatch an input event when the hidden field with tags value gets
updated, it allows stimulus controller (or javascript) to react to
update
2025-09-24 10:40:34 +10:00
Gaetan Craig-Riou
35d37639af
Refactor tag rule filter input
...
Consolidated four partials into one
2025-09-24 10:38:53 +10:00
Gaetan Craig-Riou
6790cad089
Add deleting tag rule
...
TagRuleController is now a subclass of Spree::Admin::BaseController
because Admin::ResourceController did not play well with turbo_stream.
And to be honest we did not need all the functionality provided by the
ResourceController
2025-09-24 10:38:53 +10:00
Gaetan Craig-Riou
7087d1b290
Add default tag rule
...
I tried to leverage turbo as much as possible
2025-09-24 10:38:53 +10:00
Gaetan Craig-Riou
8f0cdf8722
Move individual tag rule form to a component
2025-09-24 10:38:53 +10:00
Gaetan Craig-Riou
25f6db09a5
TagListInputComponent removed dependency on the form
...
This allows us to use the component in a context where there is no form
object defined.
2025-09-24 10:38:47 +10:00
Gaetan Craig-Riou
11006c3a60
Display default rule
2025-09-24 10:36:21 +10:00
Gaetan Craig-Riou
b2a3715a8b
Fix bug
...
Don't add a leading coma when the tag list is empty
2025-09-24 10:36:21 +10:00
Gaetan Craig-Riou
693789d526
Merge pull request #13549 from openfoodfoundation/dependabot/npm_and_yarn/leaflet-geosearch-4.2.2
...
Bump leaflet-geosearch from 4.2.1 to 4.2.2
2025-09-24 09:49:41 +10:00
dependabot[bot]
d26b407801
Bump leaflet-geosearch from 4.2.1 to 4.2.2
...
Bumps [leaflet-geosearch](https://github.com/smeijer/leaflet-geosearch ) from 4.2.1 to 4.2.2.
- [Release notes](https://github.com/smeijer/leaflet-geosearch/releases )
- [Commits](https://github.com/smeijer/leaflet-geosearch/compare/v4.2.1...v4.2.2 )
---
updated-dependencies:
- dependency-name: leaflet-geosearch
dependency-version: 4.2.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-09-22 09:12:58 +00:00
Maikel Linke
6d284023fe
Configure rake specs in one place
...
So we don't have to add it to every rake spec file.
2025-09-22 17:27:58 +10:00
Maikel Linke
570b72868b
Simplify task loading code
2025-09-22 17:27:58 +10:00
Maikel Linke
286d9f8e7d
Remove unneeded declaration of Rails environment task in specs
2025-09-22 17:27:58 +10:00
Ahmed Ejaz
b0c3265cdb
update migration test to assert nil cvv_response_message for ineligible payments
2025-09-22 11:57:38 +05:00
Ahmed Ejaz
6bb709e85e
update test description to reflect patching of redirect_auth_url in cvv_result
2025-09-22 11:57:37 +05:00
filipefurtad0
fe257162b7
Update all locales with the latest Transifex translations
2025-09-22 07:56:21 +01:00
Ahmed Ejaz
b510736a8d
refactor migration to use SpreePayment model instead of Spree::Payment
2025-09-22 11:55:43 +05:00
Ahmed Ejaz
2df0078ea9
fix lint issues
2025-09-22 11:55:43 +05:00
Ahmed Ejaz
ca079e6e26
add migration to migrate cvv_message_response value to redirect_auth_url
...
- As per the patch, cvv_message_response contains 3D verification URL for those payments which require it. So need to migrate to the new column to maintain data integrity
2025-09-22 11:55:43 +05:00
Ahmed Ejaz
ac06126f59
replace cvv_response_message usage with redirect_auth_url
2025-09-22 11:55:43 +05:00
Ahmed Ejaz
aecb5f49c9
fix spec as per current response we get for cvv_result
2025-09-22 11:54:20 +05:00
Ahmed Ejaz
a18fd54916
Simplify redirect logic in PaymentsController
2025-09-22 11:54:20 +05:00
Ahmed Ejaz
626b802ea7
add redirect_auth_url column and replace cvv_response_message for redirection
...
- Added redirect_auth_url column to spree_payments table
- Updated payment redirection logic to use redirect_auth_url instead of cvv_response_message
- Cleans up old monkeypatch usage and improves Stripe checkout reliability
2025-09-22 11:54:20 +05:00
Ahmed Ejaz
28ab41c47f
Potential fix for code scanning alert no. 253: Workflow does not contain permissions
...
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
2025-09-18 03:17:22 +05:00
Ahmed Ejaz
17a85e9c1c
Update GitHub Actions workflow to use specific Dependabot token and set organization name explicitly
2025-09-18 03:01:44 +05:00
Maikel
9e746d1b40
Merge pull request #13531 from rioug/better-stimulus-name-for-component
...
Load component stimulus controller with a shorter name
2025-09-17 17:10:37 +10:00
Filipe
273f78b214
Merge pull request #13530 from mkllnk/hub-address-feature
...
Remove retired hub_address feature
2025-09-16 17:23:42 +01:00
Filipe
bd1d9892a2
Merge pull request #13487 from rioug/security-241-fix-url-sanitization
...
Fix url sanitization for Stripe authorisation URL
2025-09-16 16:40:11 +01:00
David Cook
cb825df75b
Merge pull request #13536 from openfoodfoundation/dependabot/npm_and_yarn/leaflet-geosearch-4.2.1
...
Bump leaflet-geosearch from 4.2.0 to 4.2.1
2025-09-16 15:32:29 +10:00
Filipe
bfcadfd7c0
Merge pull request #13404 from cyrillefr/UnsavedChangesMustAppearOnRemovingSingleTagFromOrderCycle
...
Fixes Save button does not enable when removing only tag in OC
2025-09-15 13:27:26 +01:00
dependabot[bot]
255b5f1cd5
Bump leaflet-geosearch from 4.2.0 to 4.2.1
...
Bumps [leaflet-geosearch](https://github.com/smeijer/leaflet-geosearch ) from 4.2.0 to 4.2.1.
- [Release notes](https://github.com/smeijer/leaflet-geosearch/releases )
- [Commits](https://github.com/smeijer/leaflet-geosearch/compare/v4.2.0...v4.2.1 )
---
updated-dependencies:
- dependency-name: leaflet-geosearch
dependency-version: 4.2.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-09-15 09:27:26 +00:00
Ahmed Ejaz
dffcd446fd
Simplify backorderable priority SQL query in product sorting concern
2025-09-15 12:03:04 +05:00
Ahmed Ejaz
1987f0b667
Remove redundant SQL string checks in product sorting specs for clarity
2025-09-15 11:57:33 +05:00
Ahmed Ejaz
0b5efae8c4
Refactor sorting expectations in product_sort_by_stocks_spec for clarity and accuracy
2025-09-15 11:56:07 +05:00
Gaetan Craig-Riou
36bb7cb317
Fix vertical ellipsis menu compoenent spec
2025-09-15 10:46:16 +10:00
Ahmed Ejaz
49dbe1d039
Refactor comments for clarity in product sorting concerns
2025-09-15 02:15:03 +05:00
Ahmed Ejaz
c326aa6b23
Add comprehensive specs for sorting functionality
2025-09-15 01:59:40 +05:00
Ahmed Ejaz
ec91d717c7
Fix default sorting for 'on_hand' column to 'name asc' in admin products table
2025-09-13 01:31:38 +05:00
Ahmed Ejaz
da843d1ba1
Add sorting by stock levels using ransacker and update locale for 'on_hand' header
2025-09-13 01:11:21 +05:00
filipefurtad0
2c4b3ab8fc
Update all locales with the latest Transifex translations
2025-09-12 08:41:29 +01:00
Gaetan Craig-Riou
1c7fbd1d2d
Rename vertical ellipsis menu component files
...
There is no need to have a different name scheme to shorten stimulus
controller name. It's now inline with the other components
2025-09-10 15:27:56 +10:00
Gaetan Craig-Riou
8042dac74f
Fix stimulus controller name to use the shorter version
2025-09-10 15:10:10 +10:00
Gaetan Craig-Riou
ad1ce00223
Generate a better stimulus name for component controller
...
Using the helper `definitionsFromContext` generate quite long name for
stimulus controller in component, ie :
`tag-list-input-component--tag-list-input`.
This custom loader will generate much more readable name, ie L
`tag-list-input`. It's expecting the following pattern :
ofn_component/ofn_controller.js and will fall back to the default
of replacing "_" by "- and "/" by "--" for controller not matching
the pattern.
2025-09-10 15:03:31 +10:00
Maikel Linke
d916ed2c96
Remove retired hub_address feature
2025-09-10 09:59:47 +10:00
Filipe
da66a2947c
Merge pull request #13502 from cillian/replace-darker-background-disable-dynamically-inline-alert-page-alert-directives
...
Replace darker-background, disable-dynamically, inline-alert and page-alert Angular directives
2025-09-08 16:28:51 +01:00
David Cook
646d3b8ed9
Merge pull request #13524 from mkllnk/cleanup
...
Code cleanup
2025-09-08 14:31:34 +10:00
Gaetan Craig-Riou
1f15f094ce
Per review, check the URL is from a stripe subdomain
2025-09-08 11:00:11 +10:00
filipefurtad0
adddee2c3c
Update all locales with the latest Transifex translations
2025-09-05 09:52:44 +01:00
Cillian O'Ruanaidh
74e7bd5172
Update spec/system/consumer/shopping/cart_spec.rb test to use new disabled selector
2025-09-05 09:38:20 +01:00
Cillian O'Ruanaidh
66859f44ca
Include LinkHelper which includes new :link_to_or_disable method to fix spec/views/spree/orders/edit.html.haml_spec.rb test
2025-09-05 09:38:20 +01:00
Cillian O'Ruanaidh
6f7a547e15
Add a :link_to_or_disabled helper method
2025-09-05 09:38:20 +01:00
Cillian O'Ruanaidh
c057c72321
Replace ofn-page-alert angular directive
2025-09-05 09:38:20 +01:00
Cillian O'Ruanaidh
7a3b4d394b
Replace inline-alert angular directive
2025-09-05 09:38:20 +01:00
Cillian O'Ruanaidh
32e3fc0175
Replace disable-dynamically angular directive
2025-09-05 09:38:20 +01:00
Cillian O'Ruanaidh
23c9410a25
Replace darker-background angular directive
2025-09-05 09:38:20 +01:00
Maikel
7e9c5ea58b
Merge pull request #13523 from filipefurtad0/content_spec_html
...
Adds coverage to homepage alert HTML content
2025-09-05 14:35:07 +10:00
Maikel Linke
6c313a1b5a
Remove duplicate include of TimeHelpers in specs
2025-09-05 14:30:46 +10:00
Maikel Linke
244a88a1cd
Removed unused user from report classes
...
We needed them for a feature toggle that doesn't exist anymore.
2025-09-05 14:29:01 +10:00
filipefurtad0
589315780c
Adds coverage to homepage alert HTML content
2025-09-04 19:07:29 +01:00
Ahmed Ejaz
1654bb2b0a
Rename job from 'move-pr-to-project' to 'move-pr-to-code-review' for clarity
2025-09-04 05:57:40 +05:00
Ahmed Ejaz
9f396a40b7
Update condition to move Dependabot PRs to Code Review for bump titles
2025-09-04 05:53:48 +05:00
Ahmed Ejaz
4bf1b7ac08
Add workflow to automatically move Dependabot PRs to Code Review
2025-09-04 05:53:28 +05:00
Gaetan Craig-Riou
2910082584
Merge pull request #13517 from openfoodfoundation/dependabot/npm_and_yarn/jasmine-core-5.10.0
...
Bump jasmine-core from 5.9.0 to 5.10.0
2025-09-03 16:54:57 +10:00
dependabot[bot]
70b5fda632
Bump jasmine-core from 5.9.0 to 5.10.0
...
Bumps [jasmine-core](https://github.com/jasmine/jasmine ) from 5.9.0 to 5.10.0.
- [Release notes](https://github.com/jasmine/jasmine/releases )
- [Changelog](https://github.com/jasmine/jasmine/blob/main/RELEASE.md )
- [Commits](https://github.com/jasmine/jasmine/compare/v5.9.0...v5.10.0 )
---
updated-dependencies:
- dependency-name: jasmine-core
dependency-version: 5.10.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-09-01 18:05:10 +00:00
Maikel Linke
8bc82685ae
Bump sprockets from 3.7.2 to 3.7.5
...
Changelog: https://github.com/rails/sprockets/blob/3.x/CHANGELOG.md
2025-09-01 16:56:22 +10:00
Maikel Linke
63125705ac
Lock version of sprockets
2025-09-01 16:54:44 +10:00
Maikel Linke
9bf2dad343
Update all locales with the latest Transifex translations
2025-08-29 15:15:19 +10:00
David Cook
05b3417f77
Merge pull request #13512 from mkllnk/remove-timecop-usage
...
Remove remaining Timecop usage
2025-08-29 14:09:50 +10:00
Maikel Linke
403aa6ac6f
Remove remaining Timecop usage
2025-08-29 11:16:20 +10:00
Filipe
fbad3ee9f4
Merge pull request #13484 from cesarlr/patch-1
...
Update Gemfile.lock
2025-08-28 19:38:59 +01:00
Filipe
ddb8b2d08f
Merge pull request #13496 from dacook/fix-link
...
Fix link to enterprise payment methods tab
2025-08-28 19:17:37 +01:00
Filipe
42c9ee033a
Merge pull request #13503 from AndreyUsyaev/usandy/fix-i18n-sells-options
...
Fix missed I18n translations for enterprises sells options
2025-08-28 18:50:07 +01:00
Maikel Linke
524634b4ea
Bump wkhtmltopdf-binary from 0.12.6.9 to 0.12.6.10 to support Debian 13
2025-08-28 11:46:21 +01:00
César López Ramírez
0b97171bb0
Update Gemfile.lock
...
Upgrade wkhtmltopdf-binary to support Ubuntu 24.04
2025-08-28 11:46:21 +01:00
Filipe
b0c7e29b0d
Merge pull request #13468 from mkllnk/rails-config-updates
...
Add Rails 7.0 and 7.1 framework defaults
2025-08-28 11:44:44 +01:00
Andrey Usyaev
3d7799df19
Fix code review remarks
2025-08-27 13:21:44 +03:00
Andrey Usyaev
5f02d88a86
Fix missed I18n translations for enterprises sells options
2025-08-27 13:21:44 +03:00
Maikel
bdae8e6478
Merge pull request #13475 from mkllnk/dfc-sib-tokens
...
Accept tokens from Startin'Blox OIDC server
2025-08-27 14:55:30 +10:00
Gaetan Craig-Riou
053ef05baf
Merge pull request #13480 from mkllnk/time-travel
...
Replace Timecop with Rails' time helpers
2025-08-27 09:34:58 +10:00
Ahmed Ejaz
7fcb31d563
Update all locales with the latest Transifex translations
2025-08-25 11:49:44 +05:00
Gaetan Craig-Riou
31a7374808
Merge pull request #13444 from garethdavisrogers/fix-docker-dependency-and-db-dev-env
...
Added cmake dep to dockerfile and added script for db:schema:load tha…
2025-08-25 14:10:10 +10:00
Gareth
e5ce06ae39
Updated branch
2025-08-22 12:49:24 -04:00
Gareth Rogers
5f64204d51
Merge branch 'master' into fix-docker-dependency-and-db-dev-env
2025-08-22 08:31:27 -04:00
Maikel Linke
94b75540e4
Replace Timecop with Rails' time helpers
...
Rails 4.1 added time helpers but we never bothered using them. But now
I'm getting rid of the Timecop dependency and use standard helpers.
Beware though that the new helpers always freeze time. When you travel
to a certain date then the clock stops ticking while Timecop maintained
the passing of time.
The freezing of time could cause problems if you are trying to enforce a
timeout. But all current specs don't seem affected.
In most cases, the freezing will make it easier to avoid flaky specs.
2025-08-22 16:57:04 +10:00
Maikel Linke
6e489d7770
Enforce required DFC permissions
2025-08-22 16:46:59 +10:00
Maikel Linke
81b1169e77
Configure undercover to exclude files
2025-08-22 16:13:20 +10:00
Maikel
4b558b4820
Merge pull request #13501 from openfoodfoundation/dependabot/npm_and_yarn/sha.js-2.4.12
...
Bump sha.js from 2.4.11 to 2.4.12
2025-08-22 16:12:26 +10:00
Maikel
e224b8f63b
Merge pull request #13500 from openfoodfoundation/dependabot/npm_and_yarn/cipher-base-1.0.6
...
Bump cipher-base from 1.0.4 to 1.0.6
2025-08-22 16:11:30 +10:00
Maikel
80bb0606b4
Merge pull request #13499 from openfoodfoundation/dependabot/npm_and_yarn/floating-ui/dom-1.7.4
...
Bump @floating-ui/dom from 1.7.3 to 1.7.4
2025-08-22 15:50:47 +10:00
dependabot[bot]
499fcc791e
Bump sha.js from 2.4.11 to 2.4.12
...
Bumps [sha.js](https://github.com/crypto-browserify/sha.js ) from 2.4.11 to 2.4.12.
- [Changelog](https://github.com/browserify/sha.js/blob/master/CHANGELOG.md )
- [Commits](https://github.com/crypto-browserify/sha.js/compare/v2.4.11...v2.4.12 )
---
updated-dependencies:
- dependency-name: sha.js
dependency-version: 2.4.12
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-08-21 15:48:41 +00:00
dependabot[bot]
30dae3c3ea
Bump cipher-base from 1.0.4 to 1.0.6
...
Bumps [cipher-base](https://github.com/crypto-browserify/cipher-base ) from 1.0.4 to 1.0.6.
- [Changelog](https://github.com/browserify/cipher-base/blob/master/CHANGELOG.md )
- [Commits](https://github.com/crypto-browserify/cipher-base/compare/v1.0.4...v1.0.6 )
---
updated-dependencies:
- dependency-name: cipher-base
dependency-version: 1.0.6
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-08-21 15:23:41 +00:00
dependabot[bot]
af247c32a3
Bump @floating-ui/dom from 1.7.3 to 1.7.4
...
Bumps [@floating-ui/dom](https://github.com/floating-ui/floating-ui/tree/HEAD/packages/dom ) from 1.7.3 to 1.7.4.
- [Release notes](https://github.com/floating-ui/floating-ui/releases )
- [Changelog](https://github.com/floating-ui/floating-ui/blob/master/packages/dom/CHANGELOG.md )
- [Commits](https://github.com/floating-ui/floating-ui/commits/@floating-ui/dom@1.7.4/packages/dom )
---
updated-dependencies:
- dependency-name: "@floating-ui/dom"
dependency-version: 1.7.4
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-08-21 09:48:24 +00:00
Gareth
6f9dcf7e27
remove bundle check
2025-08-20 11:04:40 -04:00
Gareth
2d064bab64
Created a bundler service that runs once removing responsibilities from any other services. The bundler service always runs install which should still be pretty fast if nothing or only a few gems have changed. A healthcheck won't work unless bundler runs continuously which is impractical. Instead, a checksum is generated on bundle install and sentinels in the other services have a definite confirmation that bundle is complete. The nice thing about this approach is that web, webpack, and sidekiq (which share the same bundles dependencies) will not concurrently run bundle install solving dep install redundancies.
2025-08-20 10:13:20 -04:00
Gareth
b69eb9bdff
Specified BUNDLE_PATH AND BUNDLE_APP_CONFIG in Dockerfile
2025-08-20 08:48:21 -04:00
David Cook
f79c1879bd
Test that you can actually get to Stripe to connect your account
...
Well.. almost.
2025-08-20 13:06:59 +10:00
David Cook
646d538a3d
Fix broken link
...
This link would go to the enterprise edit screen, but didn't successfully select the payment methods panel.
Ideally, the spec would try to follow the link and verify that you can see the Connect with Stripe button. But it opens the link in a new tab and I'm not sure how to test that.
2025-08-20 11:54:47 +10:00
David Cook
90288b8cbf
Merge pull request #13492 from chahmedejaz/revert/dependabot/bundler/rexml-3.3.9
...
500 Error preventing check out with Stripe payment method
2025-08-19 10:50:09 +10:00
Ahmed Ejaz
c821b0a285
revert "Bump rexml from 3.2.9 to 3.3.9"
2025-08-19 05:27:58 +05:00
Gareth
b95d798a27
Fixed webpack service so that web relies on its bundles. This has re-enabled JS
2025-08-18 12:24:27 -04:00
Gareth
e1e4aeac1f
Added conditions to sidekiq too as it races db as well. Everything seems functional now
2025-08-18 11:52:52 -04:00
Gareth
c7ae47053e
Added health check to avoid docker container racing
2025-08-18 11:38:57 -04:00
Gareth Rogers
5892ae1800
Merge branch 'master' into fix-docker-dependency-and-db-dev-env
2025-08-18 09:32:21 -04:00
Gaetan Craig-Riou
c37376d67e
Merge pull request #13485 from openfoodfoundation/dependabot/bundler/bullet-8.0.8
...
Bump bullet from 7.1.6 to 8.0.8
2025-08-18 13:58:39 +10:00
Gaetan Craig-Riou
d3a2c09f66
Upgrade to postgres 16
...
Postgres 16 is shipped with Ubuntu 24 which is the version we will be
moving to in production
2025-08-18 10:45:54 +10:00
Gaetan Craig-Riou
d596e692d8
Upgrade postgres to version 14
...
This is the version currently availablein Ubuntu 22
2025-08-18 10:45:24 +10:00
Gaetan Craig-Riou
2df95dcbab
No need to expose the postgres port
...
There is no need to expose the port to the host, all container will be
running in the same network, so they will have access to database port.
2025-08-18 10:45:18 +10:00
Ahmed Ejaz
7aa9b164e6
Add scope for ordering products by stock levels and update admin table header for on_hand sorting
2025-08-17 07:16:46 +05:00
Gareth
74368f939b
By creating the db in the container on composition, the first migration file rejects the schema of the empty database. All I had to do was remove db creation from docker so that db:prepare will default to creating open_food_network_dev from schema.rb rather than perceiving a mismatch from the precreated docker db
2025-08-15 14:23:13 -04:00
Gareth
cb02cd39fe
Reverting unexpected change to schema.rb as requested
2025-08-15 12:27:10 -04:00
dependabot[bot]
49ec5b2089
Bump bullet from 7.1.6 to 8.0.8
...
Bumps [bullet](https://github.com/flyerhzm/bullet ) from 7.1.6 to 8.0.8.
- [Changelog](https://github.com/flyerhzm/bullet/blob/main/CHANGELOG.md )
- [Commits](https://github.com/flyerhzm/bullet/compare/7.1.6...8.0.8 )
---
updated-dependencies:
- dependency-name: bullet
dependency-version: 8.0.8
dependency-type: direct:development
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-08-15 09:56:17 +00:00
Maikel
92ef5fe3d5
Merge pull request #13483 from openfoodfoundation/dependabot/bundler/pdf-reader-2.15.0
...
Bump pdf-reader from 2.12.0 to 2.15.0
2025-08-15 10:29:09 +10:00
Filipe
ae477b7e52
Merge pull request #13455 from kirst-n/13366-only-load-necessary-flatpickr
...
Optimise loading of language-specific date pickers
2025-08-14 23:24:59 +01:00
Filipe
0e191e5fca
Merge pull request #13459 from rioug/13454-fix-redeemeing-voucher-when-using-paypal
...
[VINE] Redeem voucher before redirecting to payment url
2025-08-14 16:30:22 +01:00
dependabot[bot]
64f9ea6fc0
Bump pdf-reader from 2.12.0 to 2.15.0
...
Bumps [pdf-reader](https://github.com/yob/pdf-reader ) from 2.12.0 to 2.15.0.
- [Changelog](https://github.com/yob/pdf-reader/blob/main/CHANGELOG )
- [Commits](https://github.com/yob/pdf-reader/compare/v2.12.0...v2.15.0 )
---
updated-dependencies:
- dependency-name: pdf-reader
dependency-version: 2.15.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-08-14 10:01:32 +00:00
Maikel
058c6749da
Merge pull request #13477 from openfoodfoundation/dependabot/bundler/timecop-0.9.10
...
Bump timecop from 0.9.8 to 0.9.10
2025-08-14 13:20:18 +10:00
Maikel
2d15ec4458
Merge pull request #13478 from openfoodfoundation/dependabot/bundler/activerecord-7.1.5.2
...
Bump activerecord from 7.1.5.1 to 7.1.5.2
2025-08-14 13:18:58 +10:00
dependabot[bot]
56eaa8bb98
Bump activerecord from 7.1.5.1 to 7.1.5.2
...
Bumps [activerecord](https://github.com/rails/rails ) from 7.1.5.1 to 7.1.5.2.
- [Release notes](https://github.com/rails/rails/releases )
- [Changelog](https://github.com/rails/rails/blob/v8.0.2.1/activerecord/CHANGELOG.md )
- [Commits](https://github.com/rails/rails/compare/v7.1.5.1...v7.1.5.2 )
---
updated-dependencies:
- dependency-name: activerecord
dependency-version: 7.1.5.2
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-08-14 01:21:32 +00:00
Gaetan Craig-Riou
118e18a78e
Tighten url validation
...
Per recommendation from https://github.com/openfoodfoundation/openfoodnetwork/security/code-scanning/241
2025-08-13 22:27:42 +10:00
Gaetan Craig-Riou
cbced144d5
Clean up styling
2025-08-13 22:21:35 +10:00
dependabot[bot]
1e1f1e1e1b
Bump timecop from 0.9.8 to 0.9.10
...
Bumps [timecop](https://github.com/travisjeffery/timecop ) from 0.9.8 to 0.9.10.
- [Changelog](https://github.com/travisjeffery/timecop/blob/master/History.md )
- [Commits](https://github.com/travisjeffery/timecop/compare/v0.9.8...v0.9.10 )
---
updated-dependencies:
- dependency-name: timecop
dependency-version: 0.9.10
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-08-13 09:58:01 +00:00
Maikel Linke
1d2115766a
Show product groups to platform user
...
I removed the caching of `managed_enterprises` in Permissions because
it's just a scope and calling it again is very cheap. And that makes the
method a lot easier to read now that we have a conditional here.
Accessing the managed enterprises via the user instead of a separate
scope on the Enterprise model also reduce the SQL queries. We may want
to use this method in more places. I prefer to keep the
admin-conditional in a permissions class instead of in the model.
2025-08-13 15:06:31 +10:00
Maikel Linke
6814ef43f4
Show addresses to platform users
2025-08-13 15:06:25 +10:00
Maikel Linke
c9e8294561
DRY with shared context
2025-08-13 15:02:09 +10:00
Maikel Linke
82d0e1bf68
Show enterprise to authorised platform user
2025-08-13 15:02:09 +10:00
Maikel Linke
b16e541a81
Show DFC catalog to authorised platform
2025-08-13 15:02:09 +10:00
Maikel Linke
c12d494de3
Demonstrate authentication as DFC client app
2025-08-13 15:02:09 +10:00
Maikel Linke
9be27842e1
Accepts tokens from Startin'Blox OIDC server
...
The API controllers don't know the new type of user yet and will raise
errors but we can work on that bit by bit.
2025-08-13 15:02:09 +10:00
Maikel Linke
2a7754edbf
Add test for current token validation
2025-08-13 15:02:09 +10:00
Maikel Linke
cfeafbfc51
Update API docs with latest version
2025-08-13 15:02:08 +10:00
Maikel
1f8a9f9c76
Merge pull request #13470 from openfoodfoundation/dependabot/bundler/rack-2.2.14
...
Bump rack from 2.2.11 to 2.2.14
2025-08-13 12:45:59 +10:00
Maikel
b1893942ac
Merge pull request #13469 from openfoodfoundation/dependabot/bundler/net-imap-0.4.20
...
Bump net-imap from 0.4.10 to 0.4.20
2025-08-13 12:40:50 +10:00
dependabot[bot]
ad59ed4d40
Bump rack from 2.2.11 to 2.2.14
...
Bumps [rack](https://github.com/rack/rack ) from 2.2.11 to 2.2.14.
- [Release notes](https://github.com/rack/rack/releases )
- [Changelog](https://github.com/rack/rack/blob/main/CHANGELOG.md )
- [Commits](https://github.com/rack/rack/compare/v2.2.11...v2.2.14 )
---
updated-dependencies:
- dependency-name: rack
dependency-version: 2.2.14
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-08-13 00:02:14 +00:00
Maikel
8491a167ed
Merge pull request #13350 from mkllnk/dfc-ui
...
Add permission module with example data
2025-08-13 10:00:53 +10:00
Maikel Linke
05b00f16ad
Move config option to a better place
2025-08-12 20:24:16 +10:00
Maikel Linke
78fdaa68c8
Update config files with Rails 7.1 templates
2025-08-12 20:24:16 +10:00
dependabot[bot]
59277292fb
Bump net-imap from 0.4.10 to 0.4.20
...
Bumps [net-imap](https://github.com/ruby/net-imap ) from 0.4.10 to 0.4.20.
- [Release notes](https://github.com/ruby/net-imap/releases )
- [Commits](https://github.com/ruby/net-imap/compare/v0.4.10...v0.4.20 )
---
updated-dependencies:
- dependency-name: net-imap
dependency-version: 0.4.20
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-08-12 06:54:11 +00:00
Maikel Linke
e8813833fa
Add Rails 7.1 framework defaults template
2025-08-12 15:43:45 +10:00
Gaetan Craig-Riou
354a7ab687
Merge pull request #13465 from openfoodfoundation/dependabot/bundler/fugit-1.11.1
...
Bump fugit from 1.8.1 to 1.11.1
2025-08-12 15:06:20 +10:00
Gaetan Craig-Riou
a5a1ee9bd9
Merge pull request #13462 from openfoodfoundation/dependabot/bundler/thor-1.4.0
...
Bump thor from 1.3.1 to 1.4.0
2025-08-12 15:02:23 +10:00
Gaetan Craig-Riou
ad3f78ef69
Merge pull request #13466 from openfoodfoundation/dependabot/bundler/uri-0.13.2
...
Bump uri from 0.13.0 to 0.13.2
2025-08-12 14:58:40 +10:00
Gaetan Craig-Riou
e02497b163
Merge pull request #13467 from openfoodfoundation/dependabot/bundler/rails-html-sanitizer-1.6.1
...
Bump rails-html-sanitizer from 1.6.0 to 1.6.1
2025-08-12 14:57:59 +10:00
Gaetan Craig-Riou
7d2d94398f
Merge pull request #13464 from openfoodfoundation/dependabot/bundler/cgi-0.3.7
...
Bump cgi from 0.3.6 to 0.3.7
2025-08-12 14:49:47 +10:00
Gaetan Craig-Riou
0ecf004ff2
Merge pull request #13463 from openfoodfoundation/dependabot/bundler/rexml-3.3.9
...
Bump rexml from 3.2.9 to 3.3.9
2025-08-12 14:48:06 +10:00
dependabot[bot]
444f448207
Bump rails-html-sanitizer from 1.6.0 to 1.6.1
...
Bumps [rails-html-sanitizer](https://github.com/rails/rails-html-sanitizer ) from 1.6.0 to 1.6.1.
- [Release notes](https://github.com/rails/rails-html-sanitizer/releases )
- [Changelog](https://github.com/rails/rails-html-sanitizer/blob/main/CHANGELOG.md )
- [Commits](https://github.com/rails/rails-html-sanitizer/compare/v1.6.0...v1.6.1 )
---
updated-dependencies:
- dependency-name: rails-html-sanitizer
dependency-version: 1.6.1
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-08-12 04:31:53 +00:00
dependabot[bot]
d9381b23d7
Bump uri from 0.13.0 to 0.13.2
...
Bumps [uri](https://github.com/ruby/uri ) from 0.13.0 to 0.13.2.
- [Release notes](https://github.com/ruby/uri/releases )
- [Commits](https://github.com/ruby/uri/compare/v0.13.0...v0.13.2 )
---
updated-dependencies:
- dependency-name: uri
dependency-version: 0.13.2
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-08-12 04:31:50 +00:00
dependabot[bot]
6a9a2884d6
Bump fugit from 1.8.1 to 1.11.1
...
Bumps [fugit](https://github.com/floraison/fugit ) from 1.8.1 to 1.11.1.
- [Changelog](https://github.com/floraison/fugit/blob/master/CHANGELOG.md )
- [Commits](https://github.com/floraison/fugit/compare/v1.8.1...v1.11.1 )
---
updated-dependencies:
- dependency-name: fugit
dependency-version: 1.11.1
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-08-12 04:31:11 +00:00
dependabot[bot]
70edd4b898
Bump cgi from 0.3.6 to 0.3.7
...
Bumps [cgi](https://github.com/ruby/cgi ) from 0.3.6 to 0.3.7.
- [Release notes](https://github.com/ruby/cgi/releases )
- [Commits](https://github.com/ruby/cgi/compare/v0.3.6...v0.3.7 )
---
updated-dependencies:
- dependency-name: cgi
dependency-version: 0.3.7
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-08-12 04:31:07 +00:00
dependabot[bot]
b57a2befd9
Bump rexml from 3.2.9 to 3.3.9
...
Bumps [rexml](https://github.com/ruby/rexml ) from 3.2.9 to 3.3.9.
- [Release notes](https://github.com/ruby/rexml/releases )
- [Changelog](https://github.com/ruby/rexml/blob/master/NEWS.md )
- [Commits](https://github.com/ruby/rexml/compare/v3.2.9...v3.3.9 )
---
updated-dependencies:
- dependency-name: rexml
dependency-version: 3.3.9
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-08-12 04:27:20 +00:00
dependabot[bot]
fef9a78198
Bump thor from 1.3.1 to 1.4.0
...
Bumps [thor](https://github.com/rails/thor ) from 1.3.1 to 1.4.0.
- [Release notes](https://github.com/rails/thor/releases )
- [Commits](https://github.com/rails/thor/compare/v1.3.1...v1.4.0 )
---
updated-dependencies:
- dependency-name: thor
dependency-version: 1.4.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-08-12 04:24:48 +00:00
Maikel
dd86736170
Merge pull request #13461 from openfoodfoundation/dependabot/bundler/webrick-1.8.2
...
Bump webrick from 1.8.1 to 1.8.2
2025-08-12 13:54:23 +10:00
Maikel
0d8c7ef118
Merge pull request #13460 from openfoodfoundation/dependabot/bundler/nokogiri-1.18.9
...
Bump nokogiri from 1.16.5 to 1.18.9
2025-08-12 13:52:57 +10:00
dependabot[bot]
20730b8768
Bump webrick from 1.8.1 to 1.8.2
...
Bumps [webrick](https://github.com/ruby/webrick ) from 1.8.1 to 1.8.2.
- [Release notes](https://github.com/ruby/webrick/releases )
- [Commits](https://github.com/ruby/webrick/compare/v1.8.1...v1.8.2 )
---
updated-dependencies:
- dependency-name: webrick
dependency-version: 1.8.2
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-08-12 03:43:07 +00:00
dependabot[bot]
ad7c69189b
Bump nokogiri from 1.16.5 to 1.18.9
...
Bumps [nokogiri](https://github.com/sparklemotion/nokogiri ) from 1.16.5 to 1.18.9.
- [Release notes](https://github.com/sparklemotion/nokogiri/releases )
- [Changelog](https://github.com/sparklemotion/nokogiri/blob/main/CHANGELOG.md )
- [Commits](https://github.com/sparklemotion/nokogiri/compare/v1.16.5...v1.18.9 )
---
updated-dependencies:
- dependency-name: nokogiri
dependency-version: 1.18.9
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-08-12 03:22:15 +00:00
Maikel Linke
a5f44cb9b2
Update inflection config to Rails 7.0 template
2025-08-12 12:49:06 +10:00
Maikel Linke
97d21d8cbe
Update parameter filtering to Rails 7.0 template
2025-08-12 12:45:48 +10:00
Maikel Linke
7afdd13b64
Update CSP config with Rails 7.0 template
2025-08-12 12:41:24 +10:00
Maikel Linke
54c446f0a3
Update asset config to Rails 7.0 templates
2025-08-12 12:30:30 +10:00
Maikel Linke
4454c90575
Update test config with Rails 7.0 template
2025-08-12 12:22:23 +10:00
Maikel Linke
dd3a61acdf
Update production config with Rails 7.0 default
2025-08-12 12:10:22 +10:00
Maikel Linke
6d8ddd1eda
Update development config with Rails 7.0 defaults
2025-08-12 12:10:19 +10:00
Maikel Linke
b8e8ab15d1
Update environment config with Rails 7.0 default
2025-08-12 11:06:33 +10:00
Maikel Linke
bf1d2f3620
Update boot config from Rails 7.0 template
2025-08-12 10:59:46 +10:00
Maikel Linke
43026ddc6a
Update application config with Rails 7.0 defaults
2025-08-12 10:56:34 +10:00
Maikel Linke
18b83d2423
Add Rails 7.0 framework defaults templates
2025-08-12 10:42:37 +10:00
Maikel Linke
3a72aefc1c
Fail test when timeout reached
...
In this example it didn't matter but if we re-use the helper then it
needs to raise an error after the timeout has been reached.
2025-08-12 09:54:48 +10:00
David Cook
e855ea0dbd
Merge pull request #13453 from mkllnk/rails-7.1
...
Allow only existing deprecations in Rails 7.1
2025-08-12 09:44:25 +10:00
David Cook
1eba950e19
Merge pull request #13451 from mkllnk/remove-person
...
Remove Person from product catalog
2025-08-12 09:42:40 +10:00
David Cook
9cd04c087e
Merge pull request #13450 from mkllnk/engine-ruby-version
...
Losen engine gemspec requirement for Dependabot
2025-08-12 09:40:01 +10:00
David Cook
459d25e533
Merge pull request #13447 from mkllnk/cover-rake
...
Report code coverage on rake tasks
2025-08-12 09:37:51 +10:00
Kirst
b06e562425
Remove flatpickr controller test that isn't useful based on feedback
2025-08-11 20:29:11 +10:00
Kirst
2936cfebca
Remove I18n assignment from flatpickr controller test from feedback
2025-08-11 20:29:11 +10:00
Kirst
b8ad428b5d
Load only specified flatpickr locale
...
Dynamically import only the requested flatpickr locale.
English locale is bundled by default, so passing null triggers flatpickr's built-in English fallback without an explicit import.
2025-08-11 20:28:47 +10:00
Maikel Linke
ca34d24847
Replace long waits with better polling
...
Capybara polls under the hood as well. So we do something similar here
but tailored to the tested code. This reduced the test run time on my
machine from 35 seconds to 15 seconds.
2025-08-11 17:07:44 +10:00
Maikel Linke
6e581fce75
Remove unnecessary styling
...
The early dev versions of the DPM needed these styles. Now the module
looks fine without any additional styles.
2025-08-11 16:29:08 +10:00
Gaetan Craig-Riou
66041061fb
Redeem VINE voucher before redirecting to payment url
...
When using paypal, we need to redeem the voucher before redirecting to
the payment gateway url, otherwise the voucher will never get redeemed.
2025-08-11 16:28:04 +10:00
Maikel Linke
e54c27c900
Use more precise regex
2025-08-11 16:23:08 +10:00
Maikel Linke
b3d3d6bf06
Allow DPM feature for specific users
2025-08-11 15:25:50 +10:00
Maikel Linke
5876c52318
Test all known scopes
2025-08-11 15:15:00 +10:00
Maikel Linke
842f4ae40e
Re-enable CSRF check supported by DPM now
2025-08-11 15:13:35 +10:00
Maikel Linke
342ef4e9eb
Complete smoke test of DFC data sharing
...
Working within a shadow root of the web component isn't well supported
by Capybara and I needed to find some workarounds. It's not pretty but
it works (on my machine). *fingers crossed*
2025-08-08 14:00:41 +10:00
Maikel Linke
210201514e
Add gem capybara-shadowdom to access web component
2025-08-08 14:00:41 +10:00
Maikel Linke
2d3f18a71b
Load DFC Permissions module in system spec
...
But we can't access the inside of the component yet.
2025-08-08 14:00:41 +10:00
Maikel Linke
9d284b7110
Set language to display scope labels
2025-08-08 14:00:41 +10:00
Maikel Linke
994f1ca6c6
Update scope ids
2025-08-08 14:00:41 +10:00
Maikel Linke
f65e4797cf
Add feature toggle for DFC dev platform
2025-08-08 14:00:40 +10:00
Maikel Linke
52aeec5ac4
Update and list scopes for real
2025-08-08 14:00:40 +10:00
Maikel Linke
7032b3f463
Add endpoint to update scopes of platform
...
Dummy implementation only.
2025-08-08 14:00:40 +10:00
Maikel Linke
c26686b430
Add DfcPermission model to persist granted scopes
2025-08-08 14:00:38 +10:00
Maikel Linke
60c8f4ee20
Add DFC API endpoint for listing platforms
...
Only listing example JSON for now.
This is not part of the official DFC API but it's a DFC-related API and
therefore we put it in the same namespace.
The DFC Permission Module will make authenticated requests to grant
certain platforms certain permissions.
2025-08-08 14:00:01 +10:00
Maikel Linke
25f396c126
Add permission module with example data
...
It's basically just copied from the Readme file still pointing to the
development server and it's not interacting with OFN just yet.
2025-08-08 14:00:01 +10:00
Maikel Linke
0166abcd2a
Remove deprecated and unnecessary config
2025-08-08 11:18:34 +10:00
Maikel Linke
4cd0071dd4
Allow only existing deprecations
...
* Allow deprecated cache_format_version
* Allow deprecated Rails.application.secrets
* Allow deprecated Passing the class as positional argument
* Allow deprecated alias_attribute with non-attribute targets
* Allow deprecated model aliases
* Allow deprecated action_dispatch.show_exceptions
2025-08-08 11:17:41 +10:00
Maikel Linke
32c96b72ad
Update all locales with the latest Transifex translations
2025-08-08 10:24:04 +10:00
Maikel
30701d61e2
Merge pull request #13232 from chitty/rails7.1
...
Bump Rails to 7.1
2025-08-08 10:09:58 +10:00
Carlos Chitty
45b712ddcd
Set latest invoce date explicitly in Orders::GenerateInvoiceService test
...
Solves CI failure:
https://github.com/openfoodfoundation/openfoodnetwork/actions/runs/14760883756/job/41441014958?pr=13232
2025-08-07 17:44:52 +02:00
Carlos Chitty
3153e99497
Update OpenOrderCycleJob test "syncing remote products" to expect 58 queries instead of 59
...
The main point of the test is to alert us if the query count increased (https://github.com/openfoodfoundation/openfoodnetwork/pull/13232#discussion_r2199896280 ).
The missing query in rails 7.1:
Spree::StockItem Load SELECT "spree_stock_items"."id", "spree_stock_items"."variant_id", "spree_stock_items"."count_on_hand", "spree_stock_items"."created_at", "spree_stock_items"."updated_at", "spree_stock_items"."backorderable", "spree_stock_items"."deleted_at", "spree_stock_items"."lock_version" FROM "spree_stock_items" WHERE "spree_stock_items"."id" = $1 LIMIT $2 FOR UPDATE
2025-08-07 17:44:52 +02:00
Carlos Chitty
a2f263e081
User Rails.env.local?
...
https://github.com/rails/rails/pull/46786
Solves rubocop failure in rails 7.1 bump branch https://github.com/openfoodfoundation/openfoodnetwork/actions/runs/14739687970/job/41374340281?pr=13232
2025-08-07 17:44:52 +02:00
Carlos Chitty
3cb6a2617b
Do not fail tests on deprecation warnings for the next rails version (7.2)
2025-08-07 17:44:52 +02:00
Carlos Chitty
420deca437
Bump rails from 7.0.8 to 7.1.5.1
2025-08-07 17:44:52 +02:00
Filipe
76aebf8a72
Merge pull request #13436 from chahmedejaz/task/13432-decommission-old-products-screen
...
Decommission Old Products UI and Related Code
2025-08-07 17:39:43 +02:00
Maikel Linke
1ec570375f
Remove Person from product catalog
...
Early versions of the DFC standard demanded that all data is published
in relationship to the authenticated user. But that is not necessary
anymore and can add complications when a platform is authenticated as
client user.
2025-08-07 14:56:35 +10:00
Maikel Linke
75c33b29d5
Losen engine gemspec requirement for Dependabot
...
Dependabot doesn't seem to be able to resolve the version correctly. We
got this message:
```
Could not find compatible versions
Because every version of web depends on Ruby = 0.0.1
and Gemfile depends on web >= 0,
Ruby = 0.0.1 is required.
So, because current Ruby version is = 3.1.4,
version solving has failed.
```
2025-08-07 12:59:32 +10:00
Maikel
1bfff91c72
Merge pull request #13449 from openfoodfoundation/dependabot/npm_and_yarn/tmp-0.2.4
...
Bump tmp from 0.2.1 to 0.2.4
2025-08-07 10:24:15 +10:00
Maikel Linke
d469552afc
Fix schema version
2025-08-07 10:13:14 +10:00
Gareth
3750898c44
Looks like db:prepare never fully ran and that's why it did not work. The issue seems to be using foreman with web, webpack, and sidekiq in the same script. Though not dependent on each other, the build order or port assignment was causing web to exit early upon build
2025-08-06 15:21:30 -04:00
Gareth
d34f8900d7
divided foreman queued services into 3 containers. Web was exiting seemingly at random and seems to be a conflict between web, web-pack, and sidekiq being run through foreman. The division into 3 dev containers has been very consistent in building the project correctly
2025-08-06 15:05:45 -04:00
dependabot[bot]
e6cffde8fb
Bump tmp from 0.2.1 to 0.2.4
...
Bumps [tmp](https://github.com/raszi/node-tmp ) from 0.2.1 to 0.2.4.
- [Changelog](https://github.com/raszi/node-tmp/blob/master/CHANGELOG.md )
- [Commits](https://github.com/raszi/node-tmp/compare/v0.2.1...v0.2.4 )
---
updated-dependencies:
- dependency-name: tmp
dependency-version: 0.2.4
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-08-06 18:31:11 +00:00
Maikel
910ded1a8c
Typo
...
[skip ci]
2025-08-05 13:49:44 +10:00
Maikel Linke
2555a9e710
Ignore breaking code coverage for coverage spec
...
When we test our code coverage compilation, it breaks the code coverage
report for the current rspec process. By running that code separately,
we gain a correct coverage report for the rest of the code again.
So unfortunately, we can't report on the code coverage of this
particular task and have to ignore it. But at least CI depends on the
correct function of this task and would fail if it didn't work.
2025-08-05 12:45:05 +10:00
Maikel Linke
f532c4712e
Load rake tasks only once for code coverage
...
Apparently, Rake's way of reloading the task code confuses the code
coverage report. Code tested by rake task specs was not recognised as
covered even though it was.
2025-08-05 12:44:13 +10:00
Gaetan Craig-Riou
3af28c4b5b
Merge pull request #13441 from mkllnk/cover-more
...
Check more code for coverage
2025-08-04 16:49:56 +10:00
David Cook
63b864253d
Merge pull request #13442 from mkllnk/puffing-billy
...
Add gem puffing-billy to record browser requests
2025-08-04 12:35:34 +10:00
David Cook
8efeec4301
Merge pull request #13440 from mkllnk/tidy
...
Remove unused test helper
2025-08-04 12:03:43 +10:00
Maikel Linke
bed33928e0
Declare simplecov as direct dependency
...
The undercover docs recommended to remove it from the Gemfile but that's
only valid if you use only undercover. We do rely directly on the
simplecov gem to generate reports though.
2025-08-04 11:55:26 +10:00
Maikel Linke
bb7a31b286
Update all locales with the latest Transifex translations
2025-08-01 12:37:40 +10:00
Ahmed Ejaz
75b2fe1dd4
revert API removals
2025-08-01 01:48:21 +05:00
Maikel Linke
c0924fbe5e
Use new Undercover formatter for :nocov: support
2025-07-31 14:56:17 +10:00
Maikel Linke
d72bc49409
Compare coverage to upstream master when on fork
2025-07-31 14:56:17 +10:00
Maikel Linke
06867ff7ea
Remove unnecessary simplecov filters
...
* /schemas doesn't exist.
* /lib/generators doesn't exist.
* /vendor doesn't contain rb files.
* /public doesn't contain rb files.
* /swagger doesn't contain rb files.
* /log doens't contain rb files.
2025-07-31 14:56:17 +10:00
Maikel Linke
76a1fe7767
Ignore inaccurate coverage of rake tasks
...
I tried several ways to get code coverage for rake tasks but I haven't
succeeded yet. Somehow rake is confusing simplecov.
2025-07-31 14:56:11 +10:00
Maikel Linke
3363c523ea
Check more code for coverage
...
* ApplicationJob should be covered by tests.
* Spec should all be executed, except `xit` which should be avoided and
can be flagged.
2025-07-31 14:53:51 +10:00
Maikel
91628f8daa
Merge pull request #13443 from openfoodfoundation/dependabot/npm_and_yarn/floating-ui/dom-1.7.3
...
Bump @floating-ui/dom from 1.7.2 to 1.7.3
2025-07-31 11:52:14 +10:00
Gareth
addf36a304
dummy commit for docker token check
2025-07-30 20:44:05 -04:00
Gareth
6a912b7d8c
Added cmake dep to dockerfile and added script for db:schema:load that runs only if the schema is different than the latest migration
2025-07-30 20:12:53 -04:00
dependabot[bot]
f3dfbab109
Bump @floating-ui/dom from 1.7.2 to 1.7.3
...
Bumps [@floating-ui/dom](https://github.com/floating-ui/floating-ui/tree/HEAD/packages/dom ) from 1.7.2 to 1.7.3.
- [Release notes](https://github.com/floating-ui/floating-ui/releases )
- [Changelog](https://github.com/floating-ui/floating-ui/blob/master/packages/dom/CHANGELOG.md )
- [Commits](https://github.com/floating-ui/floating-ui/commits/@floating-ui/dom@1.7.3/packages/dom )
---
updated-dependencies:
- dependency-name: "@floating-ui/dom"
dependency-version: 1.7.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-07-30 10:00:39 +00:00
Maikel Linke
d01474ebcd
Ignore Chrome's automatic requests to Google services
2025-07-30 12:25:34 +10:00
Maikel Linke
a062a7b697
Add Billy proxy to Chrome in system specs
...
And demonstrate the use of puffing-billy browser proxy.
Billy can cache and record responses to browser requests. For that to
work we need to allow network connections and disable VCR. But instead I
found that the Billy proxy is just like any other Ruby backend code and
its connections can be recorded with VCR instead.
And instead of stubbing requests via Billy.proxy, we can use standard
Webmock `stub_request`. Now we use puffing-billy just to relay browser
requests via our Ruby app.
2025-07-29 14:37:27 +10:00
Maikel Linke
fe8b805e1f
Add gem puffing-billy
2025-07-29 14:37:27 +10:00
Maikel Linke
f3f43225cb
Remove unused test helper
2025-07-29 13:42:51 +10:00
Maikel
65604f5b04
Merge pull request #13437 from dacook/remove-unused-method
...
Remove unused method
2025-07-28 16:29:15 +10:00
David Cook
661bb29029
Remove unused method
...
The name doesn't appear in the codebase so I guess it's unused.
2025-07-28 13:19:16 +10:00
Gaetan Craig-Riou
b725697972
Merge pull request #13433 from mkllnk/inventory-switch-august-4
...
Disable inventory only for future enterprises
2025-07-28 12:02:54 +10:00
David Cook
b8546db1e5
Update date for 11th Aug
2025-07-28 11:43:31 +10:00
Gaetan Craig-Riou
bc25a5ecd6
Merge pull request #13428 from openfoodfoundation/dependabot/npm_and_yarn/jasmine-core-5.9.0
...
Bump jasmine-core from 5.8.0 to 5.9.0
2025-07-28 11:37:48 +10:00
Gaetan Craig-Riou
71de96e0a6
Merge pull request #13430 from openfoodfoundation/dependabot/npm_and_yarn/form-data-3.0.4
...
Bump form-data from 3.0.1 to 3.0.4
2025-07-28 10:50:12 +10:00
David Cook
23bcdc1cb7
Merge pull request #13434 from mkllnk/private-address-test
...
Provide open port for private address test
2025-07-28 09:27:07 +10:00
David Cook
60ac1c9fbe
Merge pull request #13414 from mkllnk/remove-unused-hub
...
Remove unused instance variable
2025-07-28 09:22:15 +10:00
Ahmed Ejaz
fcd4d073c4
Update all locales with the latest Transifex translations
2025-07-27 08:02:49 +05:00
Ahmed Ejaz
df4cf4b768
Fix specs
2025-07-27 07:58:04 +05:00
Ahmed Ejaz
3f39d94bd3
Remove conditional rendering for previous page icon in pagination
2025-07-27 07:21:10 +05:00
Ahmed Ejaz
acfe3f6589
Remove admin_style_v3 feature toggle and related conditional logic
2025-07-27 07:20:16 +05:00
Ahmed Ejaz
1717c5376b
Remove deprecated migrations for admin style v3 activation
2025-07-27 07:11:07 +05:00
Ahmed Ejaz
1426b6eeb7
Remove legacy admin styles in favor of v3 styling
...
Completes migration to the new admin v3 styling system by:
- Removing conditional stylesheet inclusion in admin head
- Deleting all legacy admin style files and components
- Making admin-style-v3 the default and only stylesheet
This change reduces maintenance overhead and simplifies the admin styling codebase by removing the old styling system that was being conditionally loaded based on feature flags.
2025-07-27 07:02:53 +05:00
Ahmed Ejaz
188b2eb754
Simplify pagination next button by removing conditional icon rendering
2025-07-27 06:44:02 +05:00
Ahmed Ejaz
6e055ddbdf
Remove icon parameters from admin navigation tabs for simplification
2025-07-27 06:32:44 +05:00
Ahmed Ejaz
025fc784a8
Refactor products_return_to_url method to remove url_filters parameter and simplify usage in views
2025-07-27 06:26:12 +05:00
Ahmed Ejaz
fefd0239e6
Remove unused product image controller and directive; delete product image update route
2025-07-27 06:15:14 +05:00
Ahmed Ejaz
0fa67c69fd
Remove bulk product update functionality
...
Removes the bulk product update feature and its associated components:
- Removes Angular-based bulk product editing controller and views
- Deletes bulk product API endpoints and related controller actions
- Removes product cloning and variant deletion functionality
- Removes associated JavaScript tests and specs
This appears to be part of a larger effort to modernize/simplify the product management interface, removing legacy Angular-based bulk editing in favor of a different approach.
2025-07-27 06:03:14 +05:00
Ahmed Ejaz
44cbe55c96
Update product routes and views for consistency and clarity
2025-07-27 05:25:50 +05:00
Filipe
56d3ac247d
Merge pull request #13426 from cyrillefr/AlignPriceColumnTextToTheLeft
...
Align Cart Price column texts to the left
2025-07-24 22:51:36 +01:00
Filipe
0ed08f8f9d
Merge pull request #13402 from mkllnk/hub-address
...
Hide the delivery address for pickup on checkout summary
2025-07-24 19:57:31 +01:00
Maikel Linke
667b49b7f1
Show hub address for pickup only when feature enabled
2025-07-24 15:24:32 +10:00
Maikel Linke
dd6d1ea64b
Provide open port for private address test
2025-07-24 14:19:32 +10:00
Maikel Linke
f0dd1885c9
Fix: Check feature toggle for hub early
2025-07-24 13:41:26 +10:00
Maikel Linke
05b6200c8f
Remove unused instance variable
...
I noticed this when reviewing another pull request.
2025-07-24 13:37:14 +10:00
Maikel Linke
fcd6897240
Prepare delivery details partial for conditional display
2025-07-24 13:30:40 +10:00
Maikel Linke
c23c773942
Simplify view code
2025-07-24 13:30:39 +10:00
Maikel
7af960fceb
Merge pull request #13409 from filipefurtad0/sets_docker_no_sandbox_option_chrome
...
[Cuprite setup] Adds a DOCKER variable, to disable sandbox mode for system tests
2025-07-24 13:12:15 +10:00
Maikel Linke
45a0705379
Disable inventory only for future enterprises
2025-07-24 13:00:14 +10:00
Ahmed Ejaz
6da1200b64
Refactor product routes to remove feature toggle constraints and simplify access
2025-07-24 02:30:37 +05:00
Gaetan Craig-Riou
1cf31f4028
Merge pull request #13431 from dacook/bump-undercover
...
Bump undercover to 0.7.4
2025-07-23 10:36:19 +10:00
David Cook
6df71f28ca
Bump undercover to 0.7.4
...
And its dependencies.
2025-07-23 09:42:06 +10:00
dependabot[bot]
9272d6d82f
Bump form-data from 3.0.1 to 3.0.4
...
Bumps [form-data](https://github.com/form-data/form-data ) from 3.0.1 to 3.0.4.
- [Release notes](https://github.com/form-data/form-data/releases )
- [Changelog](https://github.com/form-data/form-data/blob/v3.0.4/CHANGELOG.md )
- [Commits](https://github.com/form-data/form-data/compare/v3.0.1...v3.0.4 )
---
updated-dependencies:
- dependency-name: form-data
dependency-version: 3.0.4
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-07-21 22:56:43 +00:00
Filipe
a8114e42a7
Merge pull request #13381 from rioug/add-feature-flag-inventory
...
Add feature flag to enable inventory
2025-07-21 17:59:54 +01:00
dependabot[bot]
17e02e7304
Bump jasmine-core from 5.8.0 to 5.9.0
...
Bumps [jasmine-core](https://github.com/jasmine/jasmine ) from 5.8.0 to 5.9.0.
- [Release notes](https://github.com/jasmine/jasmine/releases )
- [Changelog](https://github.com/jasmine/jasmine/blob/main/RELEASE.md )
- [Commits](https://github.com/jasmine/jasmine/compare/v5.8.0...v5.9.0 )
---
updated-dependencies:
- dependency-name: jasmine-core
dependency-version: 5.9.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-07-21 10:36:34 +00:00
Gaetan Craig-Riou
6ba80f57b3
Disable Choose products from when inventory disabled
2025-07-21 13:47:28 +10:00
Gaetan Craig-Riou
d90200fb3f
Disable Coordinator inventory when inventory is off
2025-07-21 11:41:30 +10:00
cyrillefr
08114b495a
Align Cart Price column texts to the left
2025-07-17 14:17:57 +02:00
filipefurtad0
7b6b3d907c
Update all locales with the latest Transifex translations
2025-07-15 18:58:34 +01:00
cyrillefr
8011449ce7
Adding a spec with one single tag
...
- need to add ids to ru the spec
2025-07-14 18:15:01 +02:00
Filipe
cf9ffd8931
Merge pull request #13419 from chahmedejaz/bugfix/13416-orders-page-inaccessible-by-admins
...
Orders page inaccessible as superadmin (error 504)
2025-07-14 13:50:51 +01:00
Ahmed Ejaz
e6b9373570
Refactor line items search to improve security and maintainability
...
Moves search field configuration from frontend to backend to prevent potential security issues with exposing internal field names. The change also improves maintainability by centralizing search logic in the controller.
Adds conditional logic to use name_alias for non-admin users when searching distributor names, enhancing data access control.
2025-07-13 18:07:14 +05:00
Ahmed Ejaz
ec44947b37
Add special handling for admin users in order permissions
...
Modifies order and line item permission logic to give admin users full access to all orders and line items, bypassing the regular complex joins queries to get orders editable by producers. These complex joins are needed for regular users but for user admins we need to return all orders.
2025-07-13 05:34:55 +05:00
Gaetan Craig-Riou
c0639b37bb
Merge pull request #13412 from openfoodfoundation/dependabot/npm_and_yarn/hotkeys-js-3.13.15
...
Bump hotkeys-js from 3.13.14 to 3.13.15
2025-07-12 14:47:40 +10:00
filipefurtad0
38388be4da
Only the .env.test.local file (not tracked) should be changed
...
This prevents contributors from inadvertently committing changes on the .env.test file (which is tracked)
Reverts changes to .env.test and changes README.md accordingly
2025-07-10 19:53:00 +01:00
filipefurtad0
352f1ba900
Adds a DOCKER env variable, to disable sandbox mode for system tests
...
Fixes rubocop offense - || instead of or
Comments out the DOCKER variable
Corrects the syntax for Markdown inline code
2025-07-10 19:53:00 +01:00
dependabot[bot]
7a0ecc777a
Bump hotkeys-js from 3.13.14 to 3.13.15
...
Bumps [hotkeys-js](https://github.com/jaywcjlove/hotkeys-js ) from 3.13.14 to 3.13.15.
- [Release notes](https://github.com/jaywcjlove/hotkeys-js/releases )
- [Commits](https://github.com/jaywcjlove/hotkeys-js/compare/v3.13.14...v3.13.15 )
---
updated-dependencies:
- dependency-name: hotkeys-js
dependency-version: 3.13.15
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-07-09 09:41:28 +00:00
Gaetan Craig-Riou
aeefe841bf
Merge pull request #13403 from chitty/cch/image_variant_url_for
...
Do not try to generate a URL for unpersisted blobs in development/test environment
2025-07-09 14:15:07 +10:00
Gaetan Craig-Riou
70757ccdef
Add migration to enable inventory for existing Enterprises
2025-07-09 13:48:53 +10:00
Gaetan Craig-Riou
7450f8a530
Fix spec, enable inventory when needed
2025-07-09 13:43:18 +10:00
Gaetan Craig-Riou
618d597f6d
ScopeVariantToHub require an Enterprise object
...
The hub parameter is used to check if inventory is enabled, so it breaks
if we just pass an id
2025-07-09 13:43:18 +10:00
Gaetan Craig-Riou
b7f969eed9
Move the inventory feature check to ScopeVariantToHub
...
Per review, the check is done on the same enterprise as the one use to
initialize ScopeVariantToHub. So it makes sense to move the actual
feature check to ScopeVariantToHub#scope
2025-07-09 13:43:12 +10:00
Gaetan Craig-Riou
b28e30cb6c
Inventory is disabled by default
...
It will be enabled on release for existing Enterprises, we can use the
added group "enterprise_created_before_2025_07_04" to do so.
2025-07-09 11:35:27 +10:00
Gaetan Craig-Riou
681eee9309
Scope variant only when inventory is enabled
...
This wasn't pick up our specs, so I am not actually sure it's
usefull.Still for consistency sake we don't want to scope if inventory
is disabled
2025-07-09 11:35:26 +10:00
Gaetan Craig-Riou
6937a133ae
Move inventory enabled check to OpenFoodNetwork::ScopeVariantToHub
2025-07-09 11:35:26 +10:00
Gaetan Craig-Riou
ddc45e1cd8
Post rebase, fix inventory landing page spec
2025-07-09 11:35:26 +10:00
Gaetan Craig-Riou
28a11f1fee
Enabled inventory by default
...
Currently inventory is enabled by default, but we enventually want to
disabled it by default. So we disable inventory for specs, it will be
enabled on specific specs to test inventory related code path.
2025-07-09 11:35:26 +10:00
Gaetan Craig-Riou
1c4febd332
Enable inventory for variant override test
2025-07-09 11:35:26 +10:00
Gaetan Craig-Riou
9e1de75db6
Scope variant only when inventory is enabled
2025-07-09 11:35:26 +10:00
Gaetan Craig-Riou
8829f6ad03
Only scope variant when inventory is enabled
2025-07-09 11:35:26 +10:00
Gaetan Craig-Riou
6212cd4d07
Only add variant override permission if inventory enabled
...
The permission shoul not be needed if inventory is disabled, but it will
prevent importing into the inventory if somehow we try to import into
inventory with inventory disabled.
2025-07-09 11:35:26 +10:00
Gaetan Craig-Riou
29a24b7305
Scope variant to hub only when inventory enabled
2025-07-09 11:35:26 +10:00
Gaetan Craig-Riou
7c31c951a1
Refactor spec to use instance_double
2025-07-09 11:35:26 +10:00
Gaetan Craig-Riou
33bac6f816
Fix specs to take into account inventory feature
2025-07-09 11:35:26 +10:00
Gaetan Craig-Riou
a6f0a36b6d
Enable inventory feature for inventory related specs
2025-07-09 11:35:26 +10:00
Gaetan Craig-Riou
b253950075
Add feature flag for variant override specs
2025-07-09 11:35:26 +10:00
Gaetan Craig-Riou
b19b987ed0
Remove variant rule type when inventory disabled
2025-07-09 11:35:26 +10:00
Gaetan Craig-Riou
dc84d32028
Disable link to inventory related settings for enterprise
...
Metrics/CyclomaticComplexity is disabled on `enterprise_side_menu_items`
because even though there is a lot of branching it's still readable
2025-07-09 11:35:26 +10:00
Gaetan Craig-Riou
82c99891eb
Only scope with variant override when inventory enabled
2025-07-09 11:35:26 +10:00
Gaetan Craig-Riou
f30b899569
Disable inventory option for product import
2025-07-09 11:35:26 +10:00
Gaetan Craig-Riou
cd8b7cd239
First step disable inventory
2025-07-09 11:35:26 +10:00
David Cook
d80481a106
Merge pull request #13405 from openfoodfoundation/dependabot/npm_and_yarn/floating-ui/dom-1.7.2
...
Bump @floating-ui/dom from 1.7.1 to 1.7.2
2025-07-08 09:52:28 +10:00
David Cook
174be39c5e
Merge pull request #13399 from openfoodfoundation/dependabot/npm_and_yarn/pbkdf2-3.1.3
...
Bump pbkdf2 from 3.1.1 to 3.1.3
2025-07-08 09:38:12 +10:00
Ahmed Ejaz
5f694276f1
Update all locales with the latest Transifex translations
2025-07-07 03:53:59 +05:00
Filipe
affb5d7281
Merge pull request #13338 from chahmedejaz/task/13287-add-producer-seller-ability-to-edit-orders
...
Allow producer who are also seller to edit their products on hubs' orders
2025-07-04 14:26:39 +01:00
Maikel
87b9eeb2f1
Merge pull request #13407 from rioug/fix-undercover-ci-step
...
CI - Do not run undercover CI step on the master branch
2025-07-02 11:04:29 +10:00
Gaetan Craig-Riou
81c75b2b71
Do not run undercover on the master branch
...
No need to compare master to itself.
2025-07-02 10:12:28 +10:00
dependabot[bot]
ec6d490676
Bump @floating-ui/dom from 1.7.1 to 1.7.2
...
Bumps [@floating-ui/dom](https://github.com/floating-ui/floating-ui/tree/HEAD/packages/dom ) from 1.7.1 to 1.7.2.
- [Release notes](https://github.com/floating-ui/floating-ui/releases )
- [Changelog](https://github.com/floating-ui/floating-ui/blob/master/packages/dom/CHANGELOG.md )
- [Commits](https://github.com/floating-ui/floating-ui/commits/@floating-ui/dom@1.7.2/packages/dom )
---
updated-dependencies:
- dependency-name: "@floating-ui/dom"
dependency-version: 1.7.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-06-30 12:15:11 +00:00
cyrillefr
be0894653a
Fixes Save button does not enable when removing only tag in OC
2025-06-30 12:41:41 +02:00
Ahmed Ejaz
838e88a502
Refactor display_value_for_producer method to use Spree::Ability for supplier edit permissions
2025-06-29 19:41:41 +05:00
Ahmed Ejaz
4b19d38c58
Refactor variant creation in hub actions spec to use supplier association for clarity
2025-06-29 19:13:44 +05:00
Ahmed Ejaz
7725fae992
Refactor order cycle and order management abilities to improve producer edit permissions
2025-06-29 19:13:31 +05:00
Carlos Chitty
b43fa55a7b
Do not try to generate a URL for unpersisted blobs in development/test environment
...
Explicitly raise an error in `image_variant_url_for` if an Active Storage variant's blob is not persisted.
This addresses `ArgumentError`/`URI::InvalidURIError` in Rails 7.1, which occurs when attempting to generate a URL for an unsaved Active Storage blob. By raising, we ensure existing error handling in calling methods (e.g., `Spree::Image#url`) can provide graceful fallbacks (default image URLs).
This should only affect test and development environments where blobs may not be immediately persisted. Tests in `SuppliedProductImporter` have been updated to reflect this behavior.
References:
- Suggestion: https://github.com/openfoodfoundation/openfoodnetwork/pull/13232#discussion_r2071116581
- Example of failing test due to this: https://github.com/openfoodfoundation/openfoodnetwork/actions/runs/14739687958/job/41374346184?pr=13232
- Related: https://github.com/rails/rails/issues/50234
2025-06-27 15:05:52 -04:00
dependabot[bot]
d5c79be7d9
Bump pbkdf2 from 3.1.1 to 3.1.3
...
---
updated-dependencies:
- dependency-name: pbkdf2
dependency-version: 3.1.3
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-06-24 09:47:41 +00:00
Ahmed Ejaz
1b9d64ad5e
Refactor search functionality in variants controller spec to include order_id for improved filtering
2025-06-21 16:39:15 +05:00
Ahmed Ejaz
c648249160
Refactor order view specs to improve clarity in expectations
2025-06-21 16:19:31 +05:00
Ahmed Ejaz
765ce68c11
Add order_id to order controller, variant autocomplete, and search parameters for improved order management
2025-06-21 16:19:31 +05:00
Ahmed Ejaz
020d90b957
Enhance line item management abilities by consolidating permissions for Spree::Order
2025-06-21 16:19:31 +05:00
Ahmed Ejaz
8d407b1dc9
Fix lint issues
2025-06-21 16:19:31 +05:00
Ahmed Ejaz
fe1b8aaab3
Add hub actions spec for producer order management functionality
2025-06-21 16:19:31 +05:00
Ahmed Ejaz
ade35f2fa2
Fixes specs and update code respectively
2025-06-21 16:19:31 +05:00
Ahmed Ejaz
cd01a27bdd
Add distributor_name_alias to searchable attributes and implement ransacker for filtering line items
2025-06-21 16:19:31 +05:00
Ahmed Ejaz
2f9c856645
Refactors order and line item permissions logic
...
Simplifies permission checking by:
- Extracting common managed/coordinated orders logic into separate method
- Combining producer-editable and managed/coordinated order clauses
- Merging producer and admin line item permission checks into single query
2025-06-21 16:19:31 +05:00
Ahmed Ejaz
8e8878e43a
Add search_variants_as parameter to variant search functionality
2025-06-21 16:19:31 +05:00
Ahmed Ejaz
a37e08c2fd
Refactor order management permissions for producers
...
Introduces granular permissions control for producers editing orders:
- Adds new :edit_as_producer_only permission for suppliers
- Refactors ability checks to clearly separate producer vs admin/distributor access
- Updates order views to properly restrict actions based on user role
- Prevents admins from being restricted by producer-only edit mode
2025-06-21 16:16:58 +05:00