Sylius Versions Save

Open Source eCommerce Framework on Symfony

v1.13.1

1 week ago

TL;DR

🔒 This is a security release!

Fixes the following vulnerabilities:

Potential Cross Site Scripting (XSS) via the "Province" field in the Checkout and Address Book
Potential Cross Site Scripting (XSS) via the "Name" field (Taxons, Products, Options, Variants) in the Admin Panel

Details

#16176 [Maintenance][AbstractStateMachine] Add Sylius logo to readme (@Wojdylak)
#16179 [Documentation] Update release cycle and PR template (@GSadee)
#16190 Fix products grid (@kulczy)
#16196 Fix product review validation's notInRangeMessage (@mpysiak)
#16226 Remove unneeded placeholder from zone's scope select (@TheMilek)
#16241 [Security] Fixes for potential XSS in the Checkout, Address Book and Admin Panel (@GSadee)
#16232 [Maintenance] Update docker docs (@Wojdylak)
#16233 Add wider support for deprecation contract (@Jibbarth)

Full Changelog: https://github.com/Sylius/Sylius/compare/v1.13.0...v1.13.1

v1.12.16

1 week ago

TL;DR

🔒 This is a security release!

Fixes the following vulnerabilities:

Details

#16179 [Documentation] Update release cycle and PR template (@GSadee)
#16190 Fix products grid (@kulczy)
#16196 Fix product review validation's notInRangeMessage (@mpysiak)
#16226 Remove unneeded placeholder from zone's scope select (@TheMilek)
#16241 [Security] Fixes for potential XSS in the Checkout, Address Book and Admin Panel (@GSadee)
#16232 [Maintenance] Update docker docs (@Wojdylak)

Full Changelog: https://github.com/Sylius/Sylius/compare/v1.12.15...v1.12.16

v1.13.0

3 weeks ago

v1.12.15

3 weeks ago

Details

#16076 BUGFIX: [AdminBundle] #16031 wrap long text in notes section (@crydotsnake)
#16099 BUGFIX: [ShopBundle] #16068 wrap long text in product description (@crydotsnake)
#15510 [Documentation] Update docs/book/architecture/state_machine.rst (@benbd5, @GSadee)
#16125 [Documentation] Update release dates for 1.13 and 2.0 versions (@GSadee)
#16128 Add twig 3.9.0 conflict (@mpysiak)
#16131 Revert conflict to twig/intl-extra (@GSadee)
#16134 Fix Sylius logo in READMEs of Bundles & Components (@mpysiak)
#16158 Update dead link in drivers.rst (@binhuq)

New Contributors

@binhuq made their first contribution in https://github.com/Sylius/Sylius/pull/16158

Full Changelog: https://github.com/Sylius/Sylius/compare/v1.12.14...v1.12.15

v1.13.0-RC.1

1 month ago

Details

#16073 [API][Shop] Improve Order and Checkout tests (@Wojdylak)
#16076 BUGFIX: [AdminBundle] #16031 wrap long text in notes section (@crydotsnake)
#16086 [API][Maintenance] Remove unnecessary enabled option (@Wojdylak)
#16085 [CS][DX] Refactor
#16092 Minor correction of names (@Wojdylak)
#16099 BUGFIX: [ShopBundle] #16068 wrap long text in product description (@crydotsnake)
#16100 [Maintenance] Add firewall for image resolver (@Wojdylak)
#16103 [Maintenance] Deprecate SyliusLocaleEvents (@NoResponseMate)
#16105 [Maintenance] Update upgrade file (@Wojdylak)
#15510 [Documentation] Update docs/book/architecture/state_machine.rst (@benbd5, @GSadee)
#15443 Use SyliusShop macros instead of SyliusUi in shop templates (@maximehuran)
#15876 [ECS] Add The Nullable Type Declaration For Default Null Value Fixer Rule (@Rafikooo)
#16125 [Documentation] Update release dates for 1.13 and 2.0 versions (@GSadee)

New Contributors

@mihaichitic made their first contribution in https://github.com/Sylius/Sylius/pull/16114

Full Changelog: https://github.com/Sylius/Sylius/compare/v1.13.0-BETA.1...v1.13.0-RC.1

v1.13.0-BETA.1

1 month ago

Details

#15947 [Maintenance] Enhance and Reorganize Upgrade Files (@Rafikooo)
#15982 [Upgrade] Note about Command and Console namespaces (@Rafikooo)
#15949 [API] Administrator and Customer endpoints Reorganization (@Rafikooo)
#15988 Change the default NODE_VERSION to 18 (@jakubtobiasz)
#15989 [Maintenance] Revert deprecating and aliasing PaymentFixture (@NoResponseMate)
#15992 Provide some Bunnyshell images improvements (@jakubtobiasz)
#15993 Bunnyshell improvements for 1.12 (@jakubtobiasz)
#15972 [API] Prevent documenation failing when some endpoints are disabled (@NoResponseMate)
#15997 [Upgrade] Fix State Machine Title Size (@Rafikooo)
#16000 Fix the CODEOWNERS file (@jakubtobiasz)
#16003 Fix the CODEOWNERS file (@jakubtobiasz)
#16011 [Maintenance] Add conflict with api-platform/core 2.7.17 (@Wojdylak)
#16014 [UPMERGE] 1.12 -> 1.13 (@SyliusBot)
#16007 [API][Address] Add missing validations and improve endpoints (@GSadee)
#16013 Prepare Sylius\Behat to be installed as a separate package (@jakubtobiasz)
#16017 [Maintenance] Fix ci (@Wojdylak)
#16018 [UPMERGE] 1.12 -> 1.13 (@SyliusBot)
#16020 [ApiBundle] Allow override properties (@Wojdylak)
#16024 [Maintenance] Revert remove behat steps (@Wojdylak)
#16012 Fix finding json by choice in the Postgres (@jakubtobiasz)
#16008 Replace DC2TYPE:array field types with JSON (@TheMilek)
#16030 [CS][DX] Refactor (@github-actions[@bot])
#16028 [Currency][Locale][Country] Update intl-based validation and cleanup obsolete options (@NoResponseMate)
#16009 [API] Refactor images path resolving (@NoResponseMate)
#16037 [Maintenance][API] Inform about removed configuration node (@NoResponseMate)
#16026 [DOC] Update an access Denied link (@lacpandore)
#16039 [README] Improve visibility of Sylius Plus (@CoderMaggie)
#16021 Revert "Prepare Sylius\Behat to be installed as a separate package" (@Wojdylak)
#16040 [Behat][Maintenance] Split suites (@NoResponseMate)
#16038 [Docs] Improve visibility of Sylius Plus (@CoderMaggie)
#16027 Validate Admin user (@TheMilek)
#16042 [Admin] Improve channel fields validation (@NoResponseMate)
#16022 Validate out of range for channelPricing prices (@TheMilek)
#16050 [API][Shop][ProductReview] Remove status and embed customer's name (@Wojdylak, @GSadee)
#16055 SYL-3329 Fix behat test for SyliusPayPalPlugin (@mpysiak)
#16057 [Api][ProductImage] Add https prefix check (@Wojdylak)
#16033 Cover the max code length validation in bundles (@jakubtobiasz)
#16056 [Api][Admin] Allow using float for ratio in exchange rate (@Wojdylak)
#16044 [API] Expose TaxonImage resource in shop (@NoResponseMate)
#16058 Validate all translatable objects for choosing unexisiting locales in the database (@TheMilek)
#16051 Use Sylius State Machine Abstraction inside the Resource Controller State Machine (@jakubtobiasz)
#16052 Add missing customer validation (@TheMilek)
#16067 Add missing validation for the customers first and last name (@TheMilek)
#16066 [CS][DX] Refactor
#16078 Update the Upmerge workflow (@jakubtobiasz)
#16072 [CS][DX] Refactor
#16043 [Maintenance][API] Secure and cleanup openapi documentation modifiers (@NoResponseMate)
#15923 [FIX] Move a config to the Core (@Prometee, @GSadee)
#16063 [Api][Checkout] Add validation for required address (@Wojdylak)
#16062 Using the service name for the availibilty checker (@mamazu)
#16082 [Inventory] Fix deprecation note of sylius_inventory.checker configuration (@GSadee)

New Contributors

@lacpandore made their first contribution in https://github.com/Sylius/Sylius/pull/16026
@mpysiak made their first contribution in https://github.com/Sylius/Sylius/pull/16055

Full Changelog: https://github.com/Sylius/Sylius/compare/v1.13.0-ALPHA.2...v1.13.0-BETA.1

v1.12.14

1 month ago

Details

#13777 [Locale] Change language negotiation to RFC 4647 based (@gseric)
#15435 [Checkout] Prevent extra fields when login in on addressing page (@Jibbarth)
#15614 [Admin][UI] Fix csrf error breaking admin form (@NoResponseMate)
#15617 Switch JS session Behat driver to the Symfony Panther (@jakubtobiasz)
#15620 Fix CI (@jakubtobiasz)
#15642 [Admin] Add official support submenu in admin panel (@GSadee)
#15656 [AUTO] Updated translations from Crowdin (1.12) (@SyliusBot)
#15672 Typo cart-flow.rst (@zairigimad)
#15687 Fix Typo fixtures.rst (@zairigimad)
#15696 [Admin] Do not disable channel base currency when none set (@NoResponseMate)
#15698 New year 2024! 🥳 (@TheMilek)
#15718 [Documentation] Extend the maintenance date of 1.12 and update future releases (@GSadee)
#15746 Add builds checking whether the frontend can be built with all supported nodejs versions (@jakubtobiasz)
#15749 [AUTO] Updated translations from Crowdin (1.12) ()
#15761 [Admin] Add Sylius certification to menu (@Wojdylak)
#15796 Update codeowners (@jakubtobiasz)
#15805 Update the license years for the last time (@GSadee)
#15806 [Documentation] Fix table of supported versions (@GSadee)
#15815 Update the branch-aliases (@Wojdylak)
#15824 Bump up symfony/flex version (@GSadee)
#15839 [FLYSYSTEM] Add directory visibility as public to local storage (@Wojdylak)
#15853 [ProductAttribute] Use value of options when use "Apply to all" (@Jibbarth)
#15859 FIX zoneMembers not unique ID (@TheMilek)
#15900 BUGFIX: #12681 add missing required class to provincecode select input (@crydotsnake)
#15909 BUGFIX: #15908 [AdminBundle] missing br tag for spacing for product media tab button (@crydotsnake)
#15939 BUGFIX: #15938 [AdminBundle] add spacing between choose file button and uploaded image in image_widget (@crydotsnake)
#15956 Bye Sylius Forum ☠️ (@CoderMaggie)
#15957 Update README.md remove info about forum (@damonsson)
#15968 Remove info about forum from Admin panel and documentation (@GSadee)
#15971 [Docs] Refactor information about GUS (@CoderMaggie)
#15972 [API] Prevent documenation failing when some endpoints are disabled (@NoResponseMate)
#15993 Bunnyshell improvements for 1.12 (@jakubtobiasz)
#16000 Fix the CODEOWNERS file (@jakubtobiasz)
#16003 Fix the CODEOWNERS file (@jakubtobiasz)
#16011 [Maintenance] Add conflict with api-platform/core 2.7.17 (@Wojdylak)
#16017 [Maintenance] Fix ci (@Wojdylak)
#16026 [DOC] Update an access Denied link (@lacpandore)
#16038 [Docs] Improve visibility of Sylius Plus (@CoderMaggie)

New Contributors

@adumas37 made their first contribution in https://github.com/Sylius/Sylius/pull/13043
@gseric made their first contribution in https://github.com/Sylius/Sylius/pull/13777
@crydotsnake made their first contribution in https://github.com/Sylius/Sylius/pull/15900
@lacpandore made their first contribution in https://github.com/Sylius/Sylius/pull/16026

Full Changelog: https://github.com/Sylius/Sylius/compare/v1.12.13...v1.12.14

v1.13.0-ALPHA.2

2 months ago

Details

#15818 [CS][DX] Refactor (@github-actions[@bot])
#15803 Duplicate all serializer groups with sylius prefix (@Rafikooo)
#15824 Bump up symfony/flex version (@GSadee)
#15827 Bump up PHP to 8.1 (@GSadee)
#15829 [CI] Remove unsupported MySQL 5.7 from workflows (@GSadee)
#15828 Bump up Symfony 6 to 6.4 (@GSadee)
#15821 [ApiBundle][Statystics] Add validation (@Wojdylak)
#15830 Bump up Node.js only to supported LTS versions (18 and 20) (@GSadee)
#15788 Fix subresource and resource serialization groups and add missing contract tests (@TheMilek)
#15844 Fix serialization groups config formatting (@TheMilek)
#15794 Usage of E-Mail Managers within CommandHandlers (@Rafikooo)
#15836 Resolve contract tests catalogs (@TheMilek)
#15843 Resolve comments (@TheMilek)
#15839 [FLYSYSTEM] Add directory visibility as public to local storage (@Wojdylak)
#15842 [Promotion] Add form type option to AsPromotionAction attribute (@Wojdylak)
#15857 [Api][ProductTaxon] Disable the ability to update product and taxon fields on productTaxon (@Wojdylak)
#15853 [ProductAttribute] Use value of options when use "Apply to all" (@Jibbarth)
#15861 [API] Cover adjustments serialization on OrderItemUnit and Shipment resources (@Wojdylak)
#15864 [API][Admin][Shop] Fix returned adjustments for order item (@Wojdylak)
#15854 Archiving Cart Promotion (@Wojdylak)
#15865 [API][Shop] Minor clean up of address contract tests (@GSadee)
#15859 FIX zoneMembers not unique ID (@TheMilek)
#15858 Remove missed sm.factory usages (@Wojdylak)
#15871 [API] Add missing shop GET endpoint for province (@GSadee)
#15870 [CS][DX] Refactor (@github-actions[@bot])
#15874 Add missing price history suites (@TheMilek)
#15850 [Behat] Order Token Generation (@Rafikooo)
#15877 [API][Shop] Minor improvements for contact request (@GSadee)
#15872 [API][Shop] Add missing contract test for getting only countries from current channel (@GSadee)
#15873 [API][Shop] Add missing contract test for getting only locales from current channel (@GSadee)
#15875 [API][Shop] Improvements for customer endpoints (@GSadee)
#15866 [API] Improve adjustment endpoints' responses (@GSadee)
#15878 [API][Shop] Improvements for customer account verification (@GSadee)
#15895 Split ci__full.yaml workflow into smaller ones (@jakubtobiasz)
#15897 [Api][Shop][ProductAssociationType] Remove createdAt and updatedAt properties from response (@Wojdylak)
#15898 [Api][Shop][ProductReview] Add test to check email requirement (@Wojdylak)
#15899 [Api][Shop]Improve product taxon tests (@Wojdylak)
#15901 [Api][Shop] Improve product image tests (@Wojdylak)
#15902 [API][Shop] Improve product option tests (@Wojdylak)
#15894 [API][Shop] Improve product attribute tests (@Wojdylak)
#15905 [Api][Shop] Improve product variant tests (@Wojdylak)
#15906 [Api][Shop] Improve catalog promotion tests (@Wojdylak)
#15879 [Api][Shop] Get only accepted review in product (@Wojdylak)
#15900 BUGFIX: #12681 add missing required class to provincecode select input (@crydotsnake)
#15909 BUGFIX: #15908 [AdminBundle] missing br tag for spacing for product media tab button (@crydotsnake)
#15914 Add paths to promotion coupon (@TheMilek)
#15916 Add paths to shipping category (@TheMilek)
#15917 [Api][Admin] Add constraint to product review (@Wojdylak)
#15907 [API] Add missing Admin Orders API contract tests (@Rafikooo)
#15919 Add missing description to shipping method and make calculator serialization name more descriptive (@TheMilek)
#15918 [Api][Admin] Improve product option (@Wojdylak)
#15921 Add paths to tax category (@TheMilek)
#15920 Add paths to tax rate (@TheMilek)
#15925 [Unit][Admin] Missing Product Association Type Translations Test (@Rafikooo)
#15926 [Unit][Admin] Missing Product Attribute Translations Test (@Rafikooo)
#15931 [Unit][Admin] Catalog Promotion Removal Test (@Rafikooo)
#15922 [Unit][Admin] Missing Payments Tests (@Rafikooo)
#15927 [API] Missing AvatarImage Tests (@Rafikooo)
#15924 [Unit][Admin] Missing Payment Methods tests (@Rafikooo)
#15932 [Unit][API] Missing Customer Group Removal Test (@Rafikooo)
#15934 [API][Shop] Remove translations' endpoints (@NoResponseMate)
#15936 [Unit][Admin] Missing Exchange Rate Test (@Rafikooo)
#15935 [Unit][Admin] Missing Customer Tests (@Rafikooo)
#15937 [API][Maintenance] Fix field name in AddressLogEntry serialization (@NoResponseMate)
#15682 Improve Product's show page performance (@jakubtobiasz)
#15956 Bye Sylius Forum ☠️ (@CoderMaggie)
#15957 Update README.md remove info about forum (@damonsson)
#15963 [Maintenance] Update GHA (@NoResponseMate)
#15968 Remove info about forum from Admin panel and documentation (@GSadee)
#15969 [API] Remove experimental tag from ApiBundle (@GSadee)
#15970 [Order] Remove dead argument from OrderRepository::countByCustomerAndCoupon (@NoResponseMate)
#15971 [Docs] Refactor information about GUS (@CoderMaggie)
#15939 BUGFIX: #15938 [AdminBundle] add spacing between choose file button and uploaded image in image_widget (@crydotsnake)
#15696 [Admin] Do not disable channel base currency when none set (@NoResponseMate)

New Contributors

@crydotsnake made their first contribution in https://github.com/Sylius/Sylius/pull/15900

Full Changelog: https://github.com/Sylius/Sylius/compare/v1.13.0-ALPHA.1...v1.13.0-ALPHA.2

v1.13.0-ALPHA.1

3 months ago

v1.12.13

5 months ago

TL;DR

Symfony 6.4 support

Details

#15548 [FIX] Default variant (@Prometee)
#15565 [DOC] Fix display link in authorize page (@Jibbarth)
#15571 Resolve psalm issues (@Wojdylak)
#15580 [DX] Improve ChannelCollector customizability (@coldic3)
#15582 Bye Psalm 👋🏼 (@jakubtobiasz)
#15585 [Fix] Do not show cart id after saving (@NoResponseMate)
#15587 [CI] Update Symfony versions in builds (@GSadee)
#15602 Add the sylius-labs/suite-tags-extension package (@jakubtobiasz)
#15603 Fix build (@jakubtobiasz)

Full Changelog: https://github.com/Sylius/Sylius/compare/v1.12.12...v1.12.13