Commit graph

40483 commits

Author SHA1 Message Date
TheMilek
f4c9bf0ca2
Fix IDOR in checkout address LiveComponent
addressFieldUpdated() used bare find($addressId) allowing any
authenticated customer to load other customers' addresses via
manipulated #[LiveArg]. Replace with findOneByCustomer() to scope
lookup to the current customer.
2026-03-09 13:25:07 +01:00
TheMilek
089dfd6c04
Fix cart authorization bypass 2026-03-09 13:25:06 +01:00
TheMilek
b2bc5bb715
[API] Fix unauthenticated DQL Injection via API Order Filters
Co-Authored-By: Grzegorz Sadowski <sadowskigp@gmail.com>
2026-03-09 13:25:06 +01:00
Sylius Bot
dc10fc2101
Paypal client injection 2026-03-09 13:25:02 +01:00
Serhii Bondarenko
08a3435090 Fix product taxon grid enabled field always showing true
The enabled column path was set to `product` instead of
`product.enabled`, passing the entire Product object to the
boolean template where any non-null object is truthy.
2026-03-09 13:50:58 +02:00
Rafał Jaskulski
8e7371e5c8
[UPMERGE] 2.1 -> 2.2 (#18892)
This PR has been generated automatically.
For more details see
[upmerge_pr.yaml](/Sylius/Sylius/blob/2.3/.github/workflows/upmerge_pr.yaml).

**Remember!** The upmerge should always be merged with using `Merge pull
request` button.

In case of conflicts, please resolve them manually with usign the
following commands:
```
git fetch upstream
gh pr checkout <this-pr-number>
git merge upstream/2.2 -m "Resolve conflicts between 2.1 and 2.2"
```

If you use other name for the upstream remote, please replace `upstream`
with the name of your remote pointing to the `Sylius/Sylius` repository.

Once the conflicts are resolved, please run `git merge --continue` and
push the changes to this PR.
2026-03-09 09:30:02 +01:00
Kamil Grygierzec
d80f949b5a
Fix formatting in UPGRADE-2.0.md (#18844)
| Q               | A
|-----------------|-----
| Branch?         | 2.x
| Bug fix?        | no
| New feature?    | no
| BC breaks?      | no
| Deprecations?   | no
| Related tickets | no
| License         | MIT


<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

* **New Features**
* Added autocomplete functionality and live component support for
enhanced interactivity.
* Introduced Twig hooks and component bundles for improved template
flexibility.
* New messenger transports configured for optimized payment request
handling.

* **Chores**
  * Updated routing configuration for shop and payment operations.

<!-- end of auto-generated comment: release notes by coderabbit.ai -->
2026-03-06 09:14:38 +01:00
Luca
b2409840d6
Fix formatting in UPGRADE-2.0.md 2026-03-06 09:12:45 +01:00
Kamil Grygierzec
ee5eacb355
[UPMERGE] 2.1 -> 2.2 (#18890)
This PR has been generated automatically.
For more details see
[upmerge_pr.yaml](/Sylius/Sylius/blob/2.3/.github/workflows/upmerge_pr.yaml).

**Remember!** The upmerge should always be merged with using `Merge pull
request` button.

In case of conflicts, please resolve them manually with usign the
following commands:
```
git fetch upstream
gh pr checkout <this-pr-number>
git merge upstream/2.2 -m "Resolve conflicts between 2.1 and 2.2"
```

If you use other name for the upstream remote, please replace `upstream`
with the name of your remote pointing to the `Sylius/Sylius` repository.

Once the conflicts are resolved, please run `git merge --continue` and
push the changes to this PR.
2026-03-06 08:42:42 +01:00
TheMilek
5235f8dad6
Resolve conflicts between 2.1 and 2.2 2026-03-06 08:22:28 +01:00
Kamil Grygierzec
646560201b
[BUGFIX] Make GitHub actions green again 2.1 (#18887)
| Q               | A
|-----------------|-----
| Branch?         | 2.1
| Bug fix?        | yes
| New feature?    | no
| BC breaks?      | no
| Deprecations?   | no
| Related tickets | fixes fixes github actions test errors
| License         | MIT

<!--
 - Bug fixes must be submitted against the 1.14 or 2.1 branch
 - Features and deprecations must be submitted against the 2.2 branch
 - Make sure that the correct base branch is set

To be sure you are not breaking any Backward Compatibilities, check the
documentation:

https://docs.sylius.com/en/latest/book/organization/backward-compatibility-promise.html
-->
2026-03-06 08:03:50 +01:00
Mateusz
d54e6394bb Fixed build errors 2026-03-05 15:17:05 +01:00
Kamil Grygierzec
e1f7e1f72d
Remove redundant check with apip4.1.7 in matrix (#18888)
| Q               | A
|-----------------|-----
| Branch?         | 2.1 <!-- see the comment below -->
| Bug fix?        | no
| New feature?    | no
| License         | MIT

<!--
 - Bug fixes must be submitted against the 1.14 or 2.1 branch
 - Features and deprecations must be submitted against the 2.2 branch
 - Make sure that the correct base branch is set

To be sure you are not breaking any Backward Compatibilities, check the
documentation:

https://docs.sylius.com/en/latest/book/organization/backward-compatibility-promise.html
-->
2026-03-05 14:44:51 +01:00
TheMilek
8bc3583636
Remove redundant check with apip4.1.7 in matrix 2026-03-05 14:33:33 +01:00
Kamil Grygierzec
a1cd184a61
[UPMERGE] 2.1 -> 2.2 (#18873)
This PR has been generated automatically.
For more details see
[upmerge_pr.yaml](/Sylius/Sylius/blob/2.3/.github/workflows/upmerge_pr.yaml).

**Remember!** The upmerge should always be merged with using `Merge pull
request` button.

In case of conflicts, please resolve them manually with usign the
following commands:
```
git fetch upstream
gh pr checkout <this-pr-number>
git merge upstream/2.2 -m "Resolve conflicts between 2.1 and 2.2"
```

If you use other name for the upstream remote, please replace `upstream`
with the name of your remote pointing to the `Sylius/Sylius` repository.

Once the conflicts are resolved, please run `git merge --continue` and
push the changes to this PR.
2026-02-26 08:39:42 +01:00
Kamil Grygierzec
15499aaee3
Add conflict to api-platform/serializer 4.2.17 (#18871)
| Q               | A
|-----------------|-----
| Branch?         | 2.1 <!-- see the comment below -->
| Bug fix?        | yes

<!--
 - Bug fixes must be submitted against the 1.14 or 2.1 branch
 - Features and deprecations must be submitted against the 2.2 branch
 - Make sure that the correct base branch is set

To be sure you are not breaking any Backward Compatibilities, check the
documentation:

https://docs.sylius.com/en/latest/book/organization/backward-compatibility-promise.html
-->
2026-02-26 08:21:32 +01:00
TheMilek
430cd0e286
Add conflict to api-platform/serializer 4.2.17 2026-02-25 15:18:01 +01:00
Kamil Grygierzec
c75e792481
[UPMERGE] 2.1 -> 2.2 (#18849)
This PR has been generated automatically.
For more details see
[upmerge_pr.yaml](/Sylius/Sylius/blob/2.3/.github/workflows/upmerge_pr.yaml).

**Remember!** The upmerge should always be merged with using `Merge pull
request` button.

In case of conflicts, please resolve them manually with usign the
following commands:
```
git fetch upstream
gh pr checkout <this-pr-number>
git merge upstream/2.2 -m "Resolve conflicts between 2.1 and 2.2"
```

If you use other name for the upstream remote, please replace `upstream`
with the name of your remote pointing to the `Sylius/Sylius` repository.

Once the conflicts are resolved, please run `git merge --continue` and
push the changes to this PR.
2026-02-19 08:45:18 +01:00
Kamil Grygierzec
1a0e5a981b
Fix Dutch translation for payment method (#18841)
| Q               | A
|-----------------|-----
| Branch?         | 2.1
| Bug fix?        | no
| New feature?    | no
| BC breaks?      | no
| Deprecations?   | no
| Related tickets | fixes #X, partially #Y, mentioned in #Z
| License         | MIT

Minor fix the Dutch translation for payment method.

<!--
 - Bug fixes must be submitted against the 1.14 or 2.1 branch
 - Features and deprecations must be submitted against the 2.2 branch
 - Make sure that the correct base branch is set

To be sure you are not breaking any Backward Compatibilities, check the
documentation:

https://docs.sylius.com/en/latest/book/organization/backward-compatibility-promise.html
-->
2026-02-18 10:58:44 +01:00
Jordi Dekker
a15ab45dd3
Fix Dutch translation for payment method 2026-02-18 10:34:23 +01:00
Kamil Grygierzec
0f9ef6b458
[UPMERGE] 2.1 -> 2.2 (#18839)
This PR has been generated automatically.
For more details see
[upmerge_pr.yaml](/Sylius/Sylius/blob/2.3/.github/workflows/upmerge_pr.yaml).

**Remember!** The upmerge should always be merged with using `Merge pull
request` button.

In case of conflicts, please resolve them manually with usign the
following commands:
```
git fetch upstream
gh pr checkout <this-pr-number>
git merge upstream/2.2 -m "Resolve conflicts between 2.1 and 2.2"
```

If you use other name for the upstream remote, please replace `upstream`
with the name of your remote pointing to the `Sylius/Sylius` repository.

Once the conflicts are resolved, please run `git merge --continue` and
push the changes to this PR.
2026-02-18 09:31:35 +01:00
Kamil Grygierzec
88e6f33b67
[Admin] Fix images not being emitted with Webpack 5.105+ (#18832)
| Q               | A
|-----------------|-----
| Branch?         | 2.1
| Bug fix?        | yes
| New feature?    | no
| BC breaks?      | no
| Deprecations?   | no
| Related tickets | 
| License         | MIT

Since webpack 5.105.0, asset modules are considered side-effect free.
This causes admin images imported via import (side-effect-only imports)
to be tree-shaken away, the files are never emitted to the build output.

The shop entrypoint already uses require.context() which is not subject
to this optimization. This change aligns the admin entrypoint with the
same approach.
2026-02-18 08:59:37 +01:00
Grzegorz Sadowski
da7f10f25f
[Admin] Fix images not being emitted with Webpack 5.105+ 2026-02-18 08:36:10 +01:00
Kamil Grygierzec
c34afd53c8
Upgrade BuildTestAppAction from v3.0.1 to v4 (#18836)
| Q               | A
|-----------------|-----
| Branch?         | 2.1 <!-- see the comment below -->
| Bug fix?        | no
| License         | MIT

<!--
 - Bug fixes must be submitted against the 1.14 or 2.1 branch
 - Features and deprecations must be submitted against the 2.2 branch
 - Make sure that the correct base branch is set

To be sure you are not breaking any Backward Compatibilities, check the
documentation:

https://docs.sylius.com/en/latest/book/organization/backward-compatibility-promise.html
-->
2026-02-17 17:51:43 +01:00
TheMilek
ff13424957
Upgrade BuildTestAppAction from v3.0.1 to v4 2026-02-17 16:12:09 +01:00
Rafał Jaskulski
15ee25994a
[UPMERGE] 2.1 -> 2.2 (#18808)
This PR has been generated automatically.
For more details see
[upmerge_pr.yaml](/Sylius/Sylius/blob/2.1/.github/workflows/upmerge_pr.yaml).

**Remember!** The upmerge should always be merged with using `Merge pull
request` button.

In case of conflicts, please resolve them manually with usign the
following commands:
```
git fetch upstream
gh pr checkout <this-pr-number>
git merge upstream/2.2 -m "Resolve conflicts between 2.1 and 2.2"
```

If you use other name for the upstream remote, please replace `upstream`
with the name of your remote pointing to the `Sylius/Sylius` repository.

Once the conflicts are resolved, please run `git merge --continue` and
push the changes to this PR.
2026-02-11 09:17:24 +01:00
Kamil Grygierzec
cef6f28de1
Apply whitespace trimming to properly handle undefined delivery time (#18779)
| Q               | A
|-----------------|-----
| Branch?         | 2.2
| Bug fix?        |yes
| New feature?    | no
| BC breaks?      | no
| Deprecations?   | no
| Related tickets | fixes #18778 
| License         | MIT

caused by the feature introduced in 2.2 via
https://github.com/Sylius/Sylius/pull/18544


<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

* **Style**
* Refined whitespace handling in delivery time displays for improved
visual formatting and presentation consistency.

<sub>✏️ Tip: You can customize this high-level summary in your review
settings.</sub>

<!-- end of auto-generated comment: release notes by coderabbit.ai -->
2026-02-10 15:08:08 +01:00
Jan Góralski
73b6af1741
Fix after new release of PayumBundle (#18806)
| Q               | A
|-----------------|-----
| Branch?         | 2.1 <!-- see the comment below -->
| Bug fix?        | yes
| New feature?    | no
| BC breaks?      | no
| License         | MIT

<!--
 - Bug fixes must be submitted against the 1.14 or 2.1 branch
 - Features and deprecations must be submitted against the 2.2 branch
 - Make sure that the correct base branch is set

To be sure you are not breaking any Backward Compatibilities, check the
documentation:

https://docs.sylius.com/en/latest/book/organization/backward-compatibility-promise.html
-->
New version of PayumBundle added support for Symfony 8 and migrated from
using xml to yaml in routing. This PR supports loading both files based
on the PayumBundle version
2026-02-10 14:52:28 +01:00
Kamil Grygierzec
3e6a8f4f2a
[Admin] Fix order history address fields not displaying empty values (#18742)
| Q               | A
|-----------------|-----
| Branch?         | 2.1
| Bug fix?        | yes
| New feature?    | na
| BC breaks?      | no
| Deprecations?   | no
| Related tickets | n/a
| License         | MIT

## Summary
Fix address fields in order history not being displayed when they
contain falsy values (empty string, null, 0).
Changed condition from `|default(false)` to `is defined` in all address
detail templates to properly show fields that exist in the log data,
regardless of their value.
## Affected templates
- city, company, country_code, first_name, last_name
  - phone_number, postcode, province_code, province_name, street
2026-02-10 14:41:34 +01:00
TheMilek
607dc04e61
Fix test 2026-02-10 13:58:43 +01:00
TheMilek
7f7412edf8
Fix after after new release of PayumBundle 2026-02-10 13:20:10 +01:00
Kamil Grygierzec
d15aa0c298
[UPMERGE] 2.1 -> 2.2 (#18786)
This PR has been generated automatically.
For more details see
[upmerge_pr.yaml](/Sylius/Sylius/blob/2.1/.github/workflows/upmerge_pr.yaml).

**Remember!** The upmerge should always be merged with using `Merge pull
request` button.

In case of conflicts, please resolve them manually with usign the
following commands:
```
git fetch upstream
gh pr checkout <this-pr-number>
git merge upstream/2.2 -m "Resolve conflicts between 2.1 and 2.2"
```

If you use other name for the upstream remote, please replace `upstream`
with the name of your remote pointing to the `Sylius/Sylius` repository.

Once the conflicts are resolved, please run `git merge --continue` and
push the changes to this PR.
2026-02-05 13:21:06 +01:00
Kamil Grygierzec
bf5eec3c54
Try to fix build after ResourceBundle release (#18785)
| Q               | A
|-----------------|-----
| Branch?         | 2.2 <!-- see the comment below -->
| Bug fix?        | no
| New feature?    | no
| BC breaks?      | no
| License         | MIT

<!--
 - Bug fixes must be submitted against the 1.14 or 2.1 branch
 - Features and deprecations must be submitted against the 2.2 branch
 - Make sure that the correct base branch is set

To be sure you are not breaking any Backward Compatibilities, check the
documentation:

https://docs.sylius.com/en/latest/book/organization/backward-compatibility-promise.html
-->
2026-02-05 08:23:02 +01:00
TheMilek
04c3f80343
Try to fix build after resourceBundle release 2026-02-05 07:56:18 +01:00
Jokūbas
59c73b6e91 Apply whitespace trimming to properly handle undefined delivery time
Resolves #18778
2026-02-01 13:47:13 +02:00
Kamil Grygierzec
e5dbc6fe8b
Remove duplicated serialization group field (#18758)
| Q               | A
|-----------------|-----
| Branch?         | 2.1 <!-- see the comment below -->
| Bug fix?        | yes
| New feature?    | no
| BC breaks?      | no
| Related tickets | fixes https://github.com/Sylius/Sylius/issues/18734
| License         | MIT

<!--
 - Bug fixes must be submitted against the 1.14 or 2.1 branch
 - Features and deprecations must be submitted against the 2.2 branch
 - Make sure that the correct base branch is set

To be sure you are not breaking any Backward Compatibilities, check the
documentation:

https://docs.sylius.com/en/latest/book/organization/backward-compatibility-promise.html
-->
2026-01-29 15:21:35 +01:00
TheMilek
f554e5593d
Remove duplicated serialization group field, along with redundant sylius:shop:order:show 2026-01-29 14:56:08 +01:00
Jan Góralski
bb1be130d8
[UPMERGE] 2.1 -> 2.2 (#18748)
This PR has been generated automatically.
For more details see
[upmerge_pr.yaml](/Sylius/Sylius/blob/2.1/.github/workflows/upmerge_pr.yaml).

**Remember!** The upmerge should always be merged with using `Merge pull
request` button.

In case of conflicts, please resolve them manually with usign the
following commands:
```
git fetch upstream
gh pr checkout <this-pr-number>
git merge upstream/2.2 -m "Resolve conflicts between 2.1 and 2.2"
```

If you use other name for the upstream remote, please replace `upstream`
with the name of your remote pointing to the `Sylius/Sylius` repository.

Once the conflicts are resolved, please run `git merge --continue` and
push the changes to this PR.
2026-01-23 16:45:57 +01:00
Kamil Grygierzec
71b03d78d0
Fix panther build (#18747)
| Q               | A
|-----------------|-----
| Branch?         | 2.1 <!-- see the comment below -->
| Bug fix?        | no
| New feature?    | no
| BC breaks?      | no
| License         | MIT

<!--
 - Bug fixes must be submitted against the 1.14 or 2.1 branch
 - Features and deprecations must be submitted against the 2.2 branch
 - Make sure that the correct base branch is set

To be sure you are not breaking any Backward Compatibilities, check the
documentation:

https://docs.sylius.com/en/latest/book/organization/backward-compatibility-promise.html
-->
2026-01-23 15:26:07 +01:00
TheMilek
af1b55c2d9
Fix panther build 2026-01-23 15:07:21 +01:00
Wojdylak
9570821d27
[Admin] Fix order history address fields not displaying empty values 2026-01-21 08:36:27 +01:00
Grzegorz Sadowski
4d180fe195
Change application's version to v2.2.3-dev 2026-01-20 12:55:04 +01:00
Grzegorz Sadowski
1526386af7
Generate changelog for v2.2.2 2026-01-20 12:54:31 +01:00
Grzegorz Sadowski
443e263770
Change application's version to v2.2.2 2026-01-20 12:52:56 +01:00
Grzegorz Sadowski
b720639a24
Merge branch '2.1' into 2.2
* 2.1:
  Change application's version to v2.1.12-dev
  Generate changelog for v2.1.11
  Change application's version to v2.1.11
2026-01-20 12:52:29 +01:00
Grzegorz Sadowski
3f8d0c1906
Change application's version to v2.1.12-dev 2026-01-20 12:51:00 +01:00
Grzegorz Sadowski
ee37fd326a
Generate changelog for v2.1.11 2026-01-20 12:50:21 +01:00
Grzegorz Sadowski
8cd3f79a25
Change application's version to v2.1.11 2026-01-20 12:49:05 +01:00
Grzegorz Sadowski
b92fa2216d
Merge branch '2.1' into 2.2
* 2.1:
  Change application's version to v1.14.17-dev
  Generate changelog for v1.14.16
  Change application's version to v1.14.16
2026-01-20 12:48:30 +01:00
Grzegorz Sadowski
dda36b8d7f
Merge branch '1.14' into 2.1
* 1.14:
  Change application's version to v1.14.17-dev
  Generate changelog for v1.14.16
  Change application's version to v1.14.16
2026-01-20 12:47:43 +01:00