Commit graph

40507 commits

Author SHA1 Message Date
Mateusz
0bb7199014 Fix TranslatableDenormalizer for IRI strings and shop customer 404 for guests 2026-03-17 11:25:20 +01:00
Kamil Grygierzec
a18b3e4517
[Admin] Fix product taxon grid enabled field always showing true (#18895)
| Q               | A
|-----------------|-----
| Branch?         | 2.1
| Bug fix?        | yes
| New feature?    | no
| BC breaks?      | no
| Deprecations?   | no
| Related tickets | fixes #18633
| License         | MIT

The `enabled` column in the product taxon grid always displays `true`
regardless of the product's actual enabled status.

The grid's root entity is `ProductTaxon`, not `Product`. The `enabled`
field had `path: product`, which passes the entire `Product` object to
the boolean Twig template. The template does `{% if true == data %}` -
any non-null object is truthy in Twig, so it always evaluates to `true`.

Changed `path: product` to `path: product.enabled` to pass the actual
boolean value.
2026-03-10 17:52:24 +01:00
Kamil Grygierzec
bb17134a98
[CS][DX] Refactor (#18898)
This PR has been generated automatically.
For more details see
[refactor.yaml](/Sylius/Sylius/blob/2.1/.github/workflows/refactor.yaml).
2026-03-10 17:49:02 +01:00
Kamil Grygierzec
1347eb7438
[CS][DX] Refactor (#18899)
This PR has been generated automatically.
For more details see
[refactor.yaml](/Sylius/Sylius/blob/2.1/.github/workflows/refactor.yaml).
2026-03-10 17:48:30 +01:00
Kamil Grygierzec
1c4d73b4a5
[BUGFIX] remove redundant object from PHPDoc union types (#18904)
| Q               | A
|-----------------|-----
| Branch?         | 2.1
| Bug fix?        | yes
| New feature?    | no
| BC breaks?      | no
| Deprecations?   | no
| Related tickets | fixes https://github.com/Sylius/Sylius/issues/18878
| License         | MIT

<!--
 - Bug fixes must be submitted against the 1.14 or 2.1 branch
 - Features and deprecations must be submitted against the 2.2 branch
 - Make sure that the correct base branch is set

To be sure you are not breaking any Backward Compatibilities, check the
documentation:

https://docs.sylius.com/en/latest/book/organization/backward-compatibility-promise.html
-->
2026-03-10 14:03:56 +01:00
Mateusz
e12db9d562 remove redundant object from PHPDoc union types 2026-03-10 12:33:48 +01:00
Sylius Bot
f91ca6d74d [CS][DX] Refactor 2026-03-10 02:55:51 +00:00
Sylius Bot
53dab0aac7 [CS][DX] Refactor 2026-03-10 02:55:51 +00:00
TheMilek
d74860c3d5
Change application's version to v2.2.4-dev 2026-03-09 14:18:00 +01:00
TheMilek
111d96b1be
Generate changelog for v2.2.3 2026-03-09 14:17:03 +01:00
TheMilek
b6c367e447
Change application's version to v2.2.3 2026-03-09 14:09:49 +01:00
Grzegorz Sadowski
2a454ffcb3
[UPMERGE] 2.1 -> 2.2 (#18897)
This PR has been generated automatically.
For more details see
[upmerge_pr.yaml](/Sylius/Sylius/blob/2.3/.github/workflows/upmerge_pr.yaml).

**Remember!** The upmerge should always be merged with using `Merge pull
request` button.

In case of conflicts, please resolve them manually with usign the
following commands:
```
git fetch upstream
gh pr checkout <this-pr-number>
git merge upstream/2.2 -m "Resolve conflicts between 2.1 and 2.2"
```

If you use other name for the upstream remote, please replace `upstream`
with the name of your remote pointing to the `Sylius/Sylius` repository.

Once the conflicts are resolved, please run `git merge --continue` and
push the changes to this PR.
2026-03-09 14:08:08 +01:00
TheMilek
efac58e781
Change application's version to v2.1.13-dev 2026-03-09 13:59:03 +01:00
TheMilek
d8092f21ee
Generate changelog for v2.1.12 2026-03-09 13:58:09 +01:00
TheMilek
6468dc7463
Change application's version to v2.1.12 2026-03-09 13:57:46 +01:00
Jan Goralski
03a5ba111f
Resolve conflicts between 2.1 and 2.2 2026-03-09 13:52:45 +01:00
TheMilek
4e12579d40
Stan and overall build fixes 2026-03-09 13:25:10 +01:00
TheMilek
25b8d77e64
Fix cart authorization bypass fixes 2026-03-09 13:25:09 +01:00
Jan Goralski
c63955badb
Fix too frequent/long requests to GUS 2026-03-09 13:25:09 +01:00
Jan Goralski
9b57e87c23
[Promotion] Fix race condition of usage limit 2026-03-09 13:25:09 +01:00
TheMilek
cb53fce3f5
Fix open redirect 2026-03-09 13:25:08 +01:00
Jan Goralski
abd7f00f68
[Shop] Fix potential XSS in ApiLoginController 2026-03-09 13:25:08 +01:00
Grzegorz Sadowski
1910c015f2
[Admin] Fix XSS in taxon tree and autocompletes 2026-03-09 13:25:07 +01:00
Grzegorz Sadowski
bb2edd2cf1
[Shop] Fix XSS in taxon breadcrumbs 2026-03-09 13:25:07 +01:00
TheMilek
f4c9bf0ca2
Fix IDOR in checkout address LiveComponent
addressFieldUpdated() used bare find($addressId) allowing any
authenticated customer to load other customers' addresses via
manipulated #[LiveArg]. Replace with findOneByCustomer() to scope
lookup to the current customer.
2026-03-09 13:25:07 +01:00
TheMilek
089dfd6c04
Fix cart authorization bypass 2026-03-09 13:25:06 +01:00
TheMilek
b2bc5bb715
[API] Fix unauthenticated DQL Injection via API Order Filters
Co-Authored-By: Grzegorz Sadowski <sadowskigp@gmail.com>
2026-03-09 13:25:06 +01:00
Sylius Bot
dc10fc2101
Paypal client injection 2026-03-09 13:25:02 +01:00
Serhii Bondarenko
08a3435090 Fix product taxon grid enabled field always showing true
The enabled column path was set to `product` instead of
`product.enabled`, passing the entire Product object to the
boolean template where any non-null object is truthy.
2026-03-09 13:50:58 +02:00
Rafał Jaskulski
8e7371e5c8
[UPMERGE] 2.1 -> 2.2 (#18892)
This PR has been generated automatically.
For more details see
[upmerge_pr.yaml](/Sylius/Sylius/blob/2.3/.github/workflows/upmerge_pr.yaml).

**Remember!** The upmerge should always be merged with using `Merge pull
request` button.

In case of conflicts, please resolve them manually with usign the
following commands:
```
git fetch upstream
gh pr checkout <this-pr-number>
git merge upstream/2.2 -m "Resolve conflicts between 2.1 and 2.2"
```

If you use other name for the upstream remote, please replace `upstream`
with the name of your remote pointing to the `Sylius/Sylius` repository.

Once the conflicts are resolved, please run `git merge --continue` and
push the changes to this PR.
2026-03-09 09:30:02 +01:00
Kamil Grygierzec
d80f949b5a
Fix formatting in UPGRADE-2.0.md (#18844)
| Q               | A
|-----------------|-----
| Branch?         | 2.x
| Bug fix?        | no
| New feature?    | no
| BC breaks?      | no
| Deprecations?   | no
| Related tickets | no
| License         | MIT


<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

* **New Features**
* Added autocomplete functionality and live component support for
enhanced interactivity.
* Introduced Twig hooks and component bundles for improved template
flexibility.
* New messenger transports configured for optimized payment request
handling.

* **Chores**
  * Updated routing configuration for shop and payment operations.

<!-- end of auto-generated comment: release notes by coderabbit.ai -->
2026-03-06 09:14:38 +01:00
Luca
b2409840d6
Fix formatting in UPGRADE-2.0.md 2026-03-06 09:12:45 +01:00
Kamil Grygierzec
ee5eacb355
[UPMERGE] 2.1 -> 2.2 (#18890)
This PR has been generated automatically.
For more details see
[upmerge_pr.yaml](/Sylius/Sylius/blob/2.3/.github/workflows/upmerge_pr.yaml).

**Remember!** The upmerge should always be merged with using `Merge pull
request` button.

In case of conflicts, please resolve them manually with usign the
following commands:
```
git fetch upstream
gh pr checkout <this-pr-number>
git merge upstream/2.2 -m "Resolve conflicts between 2.1 and 2.2"
```

If you use other name for the upstream remote, please replace `upstream`
with the name of your remote pointing to the `Sylius/Sylius` repository.

Once the conflicts are resolved, please run `git merge --continue` and
push the changes to this PR.
2026-03-06 08:42:42 +01:00
TheMilek
5235f8dad6
Resolve conflicts between 2.1 and 2.2 2026-03-06 08:22:28 +01:00
Kamil Grygierzec
646560201b
[BUGFIX] Make GitHub actions green again 2.1 (#18887)
| Q               | A
|-----------------|-----
| Branch?         | 2.1
| Bug fix?        | yes
| New feature?    | no
| BC breaks?      | no
| Deprecations?   | no
| Related tickets | fixes fixes github actions test errors
| License         | MIT

<!--
 - Bug fixes must be submitted against the 1.14 or 2.1 branch
 - Features and deprecations must be submitted against the 2.2 branch
 - Make sure that the correct base branch is set

To be sure you are not breaking any Backward Compatibilities, check the
documentation:

https://docs.sylius.com/en/latest/book/organization/backward-compatibility-promise.html
-->
2026-03-06 08:03:50 +01:00
Mateusz
d54e6394bb Fixed build errors 2026-03-05 15:17:05 +01:00
Kamil Grygierzec
e1f7e1f72d
Remove redundant check with apip4.1.7 in matrix (#18888)
| Q               | A
|-----------------|-----
| Branch?         | 2.1 <!-- see the comment below -->
| Bug fix?        | no
| New feature?    | no
| License         | MIT

<!--
 - Bug fixes must be submitted against the 1.14 or 2.1 branch
 - Features and deprecations must be submitted against the 2.2 branch
 - Make sure that the correct base branch is set

To be sure you are not breaking any Backward Compatibilities, check the
documentation:

https://docs.sylius.com/en/latest/book/organization/backward-compatibility-promise.html
-->
2026-03-05 14:44:51 +01:00
TheMilek
8bc3583636
Remove redundant check with apip4.1.7 in matrix 2026-03-05 14:33:33 +01:00
Kamil Grygierzec
a1cd184a61
[UPMERGE] 2.1 -> 2.2 (#18873)
This PR has been generated automatically.
For more details see
[upmerge_pr.yaml](/Sylius/Sylius/blob/2.3/.github/workflows/upmerge_pr.yaml).

**Remember!** The upmerge should always be merged with using `Merge pull
request` button.

In case of conflicts, please resolve them manually with usign the
following commands:
```
git fetch upstream
gh pr checkout <this-pr-number>
git merge upstream/2.2 -m "Resolve conflicts between 2.1 and 2.2"
```

If you use other name for the upstream remote, please replace `upstream`
with the name of your remote pointing to the `Sylius/Sylius` repository.

Once the conflicts are resolved, please run `git merge --continue` and
push the changes to this PR.
2026-02-26 08:39:42 +01:00
Kamil Grygierzec
15499aaee3
Add conflict to api-platform/serializer 4.2.17 (#18871)
| Q               | A
|-----------------|-----
| Branch?         | 2.1 <!-- see the comment below -->
| Bug fix?        | yes

<!--
 - Bug fixes must be submitted against the 1.14 or 2.1 branch
 - Features and deprecations must be submitted against the 2.2 branch
 - Make sure that the correct base branch is set

To be sure you are not breaking any Backward Compatibilities, check the
documentation:

https://docs.sylius.com/en/latest/book/organization/backward-compatibility-promise.html
-->
2026-02-26 08:21:32 +01:00
TheMilek
430cd0e286
Add conflict to api-platform/serializer 4.2.17 2026-02-25 15:18:01 +01:00
Kamil Grygierzec
c75e792481
[UPMERGE] 2.1 -> 2.2 (#18849)
This PR has been generated automatically.
For more details see
[upmerge_pr.yaml](/Sylius/Sylius/blob/2.3/.github/workflows/upmerge_pr.yaml).

**Remember!** The upmerge should always be merged with using `Merge pull
request` button.

In case of conflicts, please resolve them manually with usign the
following commands:
```
git fetch upstream
gh pr checkout <this-pr-number>
git merge upstream/2.2 -m "Resolve conflicts between 2.1 and 2.2"
```

If you use other name for the upstream remote, please replace `upstream`
with the name of your remote pointing to the `Sylius/Sylius` repository.

Once the conflicts are resolved, please run `git merge --continue` and
push the changes to this PR.
2026-02-19 08:45:18 +01:00
Kamil Grygierzec
1a0e5a981b
Fix Dutch translation for payment method (#18841)
| Q               | A
|-----------------|-----
| Branch?         | 2.1
| Bug fix?        | no
| New feature?    | no
| BC breaks?      | no
| Deprecations?   | no
| Related tickets | fixes #X, partially #Y, mentioned in #Z
| License         | MIT

Minor fix the Dutch translation for payment method.

<!--
 - Bug fixes must be submitted against the 1.14 or 2.1 branch
 - Features and deprecations must be submitted against the 2.2 branch
 - Make sure that the correct base branch is set

To be sure you are not breaking any Backward Compatibilities, check the
documentation:

https://docs.sylius.com/en/latest/book/organization/backward-compatibility-promise.html
-->
2026-02-18 10:58:44 +01:00
Jordi Dekker
a15ab45dd3
Fix Dutch translation for payment method 2026-02-18 10:34:23 +01:00
Kamil Grygierzec
0f9ef6b458
[UPMERGE] 2.1 -> 2.2 (#18839)
This PR has been generated automatically.
For more details see
[upmerge_pr.yaml](/Sylius/Sylius/blob/2.3/.github/workflows/upmerge_pr.yaml).

**Remember!** The upmerge should always be merged with using `Merge pull
request` button.

In case of conflicts, please resolve them manually with usign the
following commands:
```
git fetch upstream
gh pr checkout <this-pr-number>
git merge upstream/2.2 -m "Resolve conflicts between 2.1 and 2.2"
```

If you use other name for the upstream remote, please replace `upstream`
with the name of your remote pointing to the `Sylius/Sylius` repository.

Once the conflicts are resolved, please run `git merge --continue` and
push the changes to this PR.
2026-02-18 09:31:35 +01:00
Kamil Grygierzec
88e6f33b67
[Admin] Fix images not being emitted with Webpack 5.105+ (#18832)
| Q               | A
|-----------------|-----
| Branch?         | 2.1
| Bug fix?        | yes
| New feature?    | no
| BC breaks?      | no
| Deprecations?   | no
| Related tickets | 
| License         | MIT

Since webpack 5.105.0, asset modules are considered side-effect free.
This causes admin images imported via import (side-effect-only imports)
to be tree-shaken away, the files are never emitted to the build output.

The shop entrypoint already uses require.context() which is not subject
to this optimization. This change aligns the admin entrypoint with the
same approach.
2026-02-18 08:59:37 +01:00
Grzegorz Sadowski
da7f10f25f
[Admin] Fix images not being emitted with Webpack 5.105+ 2026-02-18 08:36:10 +01:00
Kamil Grygierzec
c34afd53c8
Upgrade BuildTestAppAction from v3.0.1 to v4 (#18836)
| Q               | A
|-----------------|-----
| Branch?         | 2.1 <!-- see the comment below -->
| Bug fix?        | no
| License         | MIT

<!--
 - Bug fixes must be submitted against the 1.14 or 2.1 branch
 - Features and deprecations must be submitted against the 2.2 branch
 - Make sure that the correct base branch is set

To be sure you are not breaking any Backward Compatibilities, check the
documentation:

https://docs.sylius.com/en/latest/book/organization/backward-compatibility-promise.html
-->
2026-02-17 17:51:43 +01:00
TheMilek
ff13424957
Upgrade BuildTestAppAction from v3.0.1 to v4 2026-02-17 16:12:09 +01:00
Rafał Jaskulski
15ee25994a
[UPMERGE] 2.1 -> 2.2 (#18808)
This PR has been generated automatically.
For more details see
[upmerge_pr.yaml](/Sylius/Sylius/blob/2.1/.github/workflows/upmerge_pr.yaml).

**Remember!** The upmerge should always be merged with using `Merge pull
request` button.

In case of conflicts, please resolve them manually with usign the
following commands:
```
git fetch upstream
gh pr checkout <this-pr-number>
git merge upstream/2.2 -m "Resolve conflicts between 2.1 and 2.2"
```

If you use other name for the upstream remote, please replace `upstream`
with the name of your remote pointing to the `Sylius/Sylius` repository.

Once the conflicts are resolved, please run `git merge --continue` and
push the changes to this PR.
2026-02-11 09:17:24 +01:00