v1.10.13

Details

• #13601 Use the Gaufrette FilesystemInterface instead of a concrete implementation (@GSadee, @mbabker)
• #13841 [Maintenance] Add note to UPGRADE file about dropping Symfony 5.2 support (@GSadee)
• #13848 [DOCS] Update index tip (@arti0090)
• #13852 [Maintenance] Run the build on tags rather than on releases (@Zales0123)
• #13857 [DOC] Bump minimal PHP version needed to install Sylius (@Roshyo)
• #13865 [Cart] Add Validator for localeCode (@SirDomin)
• #13866 [Maintenance] Relax conflict on liip imagine bundle - rebased version (@Nek-)
• #13867 [Template][Events] Sylius template events - improvements (@ernestWarwas)
• #13870 [ShippingMethod] Change shipping rule to be based on items total instead of order total (@GSadee, @mdevlamynck)
• #13878 [Template] Variant name instead of product name (@ernestWarwas)
• #13886 [Templates][Admin] Refactor order payments template to use events (@coldic3)
• #13888 [Documentation] Fix the description of items total shipping rules (@GSadee)
• #13890 [maintenance]Fix ECS HeaderCommentFixer (@Ferror)
• #13891 [maintenance]Run ECS in parallel (@Ferror)

v1.11.3

Details

• #11850 Fix redirection when there is a trailing slash in the products list path (@loic425)
• #12538 [Behat] Allow to use some useful methods on Order show page (@loic425)
• #13724 Fix disappearing products in Admin Panel when translation for current locale is missing (@jakubtobiasz)
• #13736 [Maintenance] Testing with PHP 8.1 (@loic425)
• #13744 [Maintenance]Ignore phpstan.neon file (@Ferror)
• #13745 [Promotion] Add validation of coupon usage limit per customer (@coldic3)
• #13753 [UI] Replacing the placeholder avatar with an icon (@mamazu)
• #13759 [Behat] Use "When" for user actions where possible (@coldic3)
• #13767 Change sylius.behat.context.ui.email context to sylius.behat.context.api.email (@Ferror)
• #13768 Bump Psalm version to 4.19 (php 8.1 support) (@loic425)
• #13769 [Core][Shipping] Fix estimated shipping costs (@coldic3, @lchrusciel)
• #13770 [ADR] Clean up existing ADRs mostly by updating their statuses (@GSadee)
• #13772 [ADR][API] Update ADR for providing locales after changing the approach (@GSadee)
• #13775 [Behat][API] Change the undefined step to create a configurable product instead of simple one (@GSadee)
• #13779 [Documentation][Plus] Update cookbook about restricting access to the entity (@GSadee)
• #13782 [Plus] Fix Sylius installation guide (@lchrusciel)
• #13787 [ADR] Use raw data in commands and events (@ernestWarwas)
• #13790 [Maintenance] Update UPGRADE-1.11.md (@coldic3)
• #13795 [ADR] Remove flush() from handlers. (@ernestWarwas)
• #13798 [Events] Sylius template event forms (@SirDomin)
• #13799 [Core][Shipping] Deprecate processing shipments before recalculating prices (@coldic3)
• #13801 [Behat] added context to manage non-collection subresources (@emmanuel-tilleuls)
• #13802 [Docs] Add a guide on how to deal with file access problems in the wkhtmltopdf (@coldic3)
• #13803 [Admin][JS] Applying all the options selected for an attribute of type multiple select fixed (@TheMilek)
• #13805 [JS] Not render empty value in multi select autocompletes (@ernestWarwas)
• #13809 [Documentation] Fix build by specifying jinja2 version requirement (@GSadee)
• #13811 [Documentation][Plus] Adjust installation guide after entities refactor (@GSadee)
• #13817 [Admin] Clean up and refactor new template events (@GSadee)
• #13818 [Maintenance] Bump copyright year in docs and license files (@coldic3)
• #13828 [Maintenance] Fix a misleading description (@GSadee)
• #13839 Limit the number of packages build run on 1.10 (@Zales0123)
• #13840 [GitHub Actions] Fix symfony/flex in workflows and invalid EngineInterface namespace (@coldic3)

New Contributors

• @remoteclient made their first contribution in #13432
• @jakubtobiasz made their first contribution in #13724
• @Ferror made their first contribution in #13744
• @emmanuel-tilleuls made their first contribution in #13801

v1.10.12

Details

• #11850 Fix redirection when there is a trailing slash in the products list path (@loic425)
• #12538 [Behat] Allow to use some useful methods on Order show page (@loic425)
• #13724 Fix disappearing products in Admin Panel when translation for current locale is missing (@jakubtobiasz)
• #13736 [Maintenance] Testing with PHP 8.1 (@loic425)
• #13744 [Maintenance]Ignore phpstan.neon file (@Ferror)
• #13745 [Promotion] Add validation of coupon usage limit per customer (@coldic3)
• #13753 [UI] Replacing the placeholder avatar with an icon (@mamazu)
• #13759 [Behat] Use "When" for user actions where possible (@coldic3)
• #13767 Change sylius.behat.context.ui.email context to sylius.behat.context.api.email (@Ferror)
• #13768 Bump Psalm version to 4.19 (php 8.1 support) (@loic425)
• #13769 [Core][Shipping] Fix estimated shipping costs (@coldic3, @lchrusciel)
• #13770 [ADR] Clean up existing ADRs mostly by updating their statuses (@GSadee)
• #13779 [Documentation][Plus] Update cookbook about restricting access to the entity (@GSadee)
• #13782 [Plus] Fix Sylius installation guide (@lchrusciel)
• #13787 [ADR] Use raw data in commands and events (@ernestWarwas)
• #13795 [ADR] Remove flush() from handlers. (@ernestWarwas)
• #13798 [Events] Sylius template event forms (@SirDomin)
• #13799 [Core][Shipping] Deprecate processing shipments before recalculating prices (@coldic3)
• #13801 [Behat] added context to manage non-collection subresources (@emmanuel-tilleuls)
• #13802 [Docs] Add a guide on how to deal with file access problems in the wkhtmltopdf (@coldic3)
• #13803 [Admin][JS] Applying all the options selected for an attribute of type multiple select fixed (@TheMilek)
• #13805 [JS] Not render empty value in multi select autocompletes (@ernestWarwas)
• #13809 [Documentation] Fix build by specifying jinja2 version requirement (@GSadee)
• #13811 [Documentation][Plus] Adjust installation guide after entities refactor (@GSadee)
• #13817 [Admin] Clean up and refactor new template events (@GSadee)
• #13818 [Maintenance] Bump copyright year in docs and license files (@coldic3)
• #13839 Limit the number of packages build run on 1.10 (@Zales0123)

New Contributors

• @remoteclient made their first contribution in #13432
• @jakubtobiasz made their first contribution in #13724
• @Ferror made their first contribution in #13744
• @emmanuel-tilleuls made their first contribution in #13801

v1.11.2

TL;DR

🔒 This is a security release!

Fixes the following vulnerabilities:

• Improper sanitize of SVG files during content upload ('Cross-site Scripting') in Sylius/Sylius
• User token not setup to null after reset password
• Add missing HTTP headers to avoid login forms clickjacking
• Exposure of sensitive information by using the back button after logging out in sylius/sylius

Details

• #13432 Update SalesDataProvider.php (@remoteclient)
• #13723 [Docs] Deployment on artifakt (@AdamKasp)
• #13731 [Taxation] Add validation of negative tax rate (@coldic3)
• #13734 [JS] add empty value to autocomplete selects (@SirDomin)
• #13735 [Docs] add note to translation (@AdamKasp)
• #13737 [Admin] Fix undefined labels in taxon autocomplete (@ernestWarwas)
• #13738 [Docs] Synchronous messenger transport (@Rafikooo)
• #13750 [Admin][Shop] placehold.it replaced to local placeholders (@ernestWarwas)
• #13751 [Docs] Blank line removed (@Rafikooo)
• #13756 [GitHub Actions] Change PHP ini values + clear cache (@GSadee)
• #13765 [Security] Fixes for SVG XSS, wrong cache for logged in users and clickjacking (@ernestWarwas, @lchrusciel, @GSadee, @Zales0123, @Rafikooo)
• #13766 [Security][API] passwordResetToken nulled after password is changed (@lchrusciel, @ernestWarwas, @GSadee, @TheMilek)

v1.10.11

TL;DR

🔒 This is a security release!

Fixes the following vulnerabilities:

• Improper sanitize of SVG files during content upload ('Cross-site Scripting') in Sylius/Sylius
• User token not setup to null after reset password
• Add missing HTTP headers to avoid login forms clickjacking
• Exposure of sensitive information by using the back button after logging out in sylius/sylius

Details

• #13432 Update SalesDataProvider.php (@remoteclient)
• #13723 [Docs] Deployment on artifakt (@AdamKasp)
• #13731 [Taxation] Add validation of negative tax rate (@coldic3)
• #13734 [JS] add empty value to autocomplete selects (@SirDomin)
• #13750 [Admin][Shop] placehold.it replaced to local placeholders (@ernestWarwas)
• #13756 [GitHub Actions] Change PHP ini values + clear cache (@GSadee)
• #13765 [Security] Fixes for SVG XSS, wrong cache for logged in users and clickjacking (@ernestWarwas, @lchrusciel, @GSadee, @Zales0123, @Rafikooo)
• #13766 [Security][API] passwordResetToken nulled after password is changed (@lchrusciel, @ernestWarwas, @GSadee, @TheMilek)

v1.9.10

TL;DR

🔒 This is a security release!

Fixes the following vulnerabilities:

• Improper sanitize of SVG files during content upload ('Cross-site Scripting') in Sylius/Sylius
• Add missing HTTP headers to avoid login forms clickjacking
• Exposure of sensitive information by using the back button after logging out in sylius/sylius

Details

• #13275 [Maintenance] Add note about doctrine/dbal requirement (@lchrusciel)
• #13282 [API] Revert changes of checked keys in cart and checkout responses to fix the build (@GSadee)
• #13730 [Maintenance] Add conflict to symfony/framework-bundle to fix problem with solving path prefix in API scenarios (@GSadee)
• #13750 [Admin][Shop] placehold.it replaced to local placeholders (@ernestWarwas)
• #13765 [Security] Fixes for SVG XSS, wrong cache for logged in users and clickjacking (@ernestWarwas, @lchrusciel, @GSadee, @Zales0123, @Rafikooo)

v1.11.1

Details

• #13575 [DX] add correct return type to getAdjustments method (@PILLOWPET)
• #13641 [ADR] Declaring services as public in container (@lchrusciel)
• #13647 Update Sylius supported versions (@Zales0123)
• #13650 [Documentation] Update installation guide for Plus (@GSadee)
• #13651 [Admin][API] Catalog promotion actions validation fixed (@ernestWarwas)
• #13658 [Documentation] Adjust installation guide for Plus on 1.11 (@GSadee)
• #13660 [CLI] Cancel unpaid orders command (@rafalswierczek)
• #13673 [Psalm] Configuration - totallyTyped replaced according to docs to avoid deprecation problem (@ernestWarwas)
• #13676 [Cart] Fix retrieving/overriding cart of logged in user by guest (@SirDomin, @GSadee)
• #13679 [Docs] [AdminBundle] fix minor typo (@gigamarr)
• #13683 Improve verbosity of canceling unpaid orders test (@rafalswierczek)
• #13684 [Product][API][Bug] Fixed product sorting by translated names (@Rafikooo)
• #13687 [Behat][API] Remove duplicated steps in ProductContext (@GSadee)
• #13691 [Docs] Force user to login during checkout (@ernestWarwas)
• #13692 [Admin] Fix for floating point amount on fixed action in catalog promotion. (@ernestWarwas)
• #13695 [Order] Change getters and setters to use a proper flag name (@GSadee)
• #13698 [Docs] Path fix for validator in API force login cookbook (@ernestWarwas)
• #13699 [Documentation] Add reference to the cookbook about forcing login in API (@GSadee)
• #13700 [Order] Fix getters and setters to use a proper flag name after upmerge issue (@GSadee)
• #13704 Update PHP Version in installation doc (@sad270)
• #13708 [Locale] Add header based locale context (@AdamKasp)
• #13715 add dependency injection conflict (@SirDomin)
• #13716 [Documentation] Fix start date of development 1.12 version (@GSadee)
• #13725 [PaypalExpress] Dont take shipping tax adjustment to shipping cost (@SirDomin)
• #13730 [Maintenance] Add conflict to symfony/framework-bundle to fix problem with solving path prefix in API scenarios (@GSadee)
• #13732 [Hot-fix] Conflict with symfony/dependency-injection even more (@Zales0123)

New Contributors

• @PILLOWPET made their first contribution in #13575
• @gigamarr made their first contribution in #13679
• @sad270 made their first contribution in #13704

v1.10.10

Details

• #13575 [DX] add correct return type to getAdjustments method (@PILLOWPET)
• #13641 [ADR] Declaring services as public in container (@lchrusciel)
• #13647 Update Sylius supported versions (@Zales0123)
• #13650 [Documentation] Update installation guide for Plus (@GSadee)
• #13660 [CLI] Cancel unpaid orders command (@rafalswierczek)
• #13676 [Cart] Fix retrieving/overriding cart of logged in user by guest (@SirDomin, @GSadee)
• #13683 Improve verbosity of canceling unpaid orders test (@rafalswierczek)
• #13684 [Product][API][Bug] Fixed product sorting by translated names (@Rafikooo)
• #13695 [Order] Change getters and setters to use a proper flag name (@GSadee)
• #13715 add dependency injection conflict (@SirDomin)
• #13716 [Documentation] Fix start date of development 1.12 version (@GSadee)
• #13725 [PaypalExpress] Dont take shipping tax adjustment to shipping cost (@SirDomin)
• #13730 [Maintenance] Add conflict to symfony/framework-bundle to fix problem with solving path prefix in API scenarios (@GSadee)
• #13732 [Hot-fix] Conflict with symfony/dependency-injection even more (@Zales0123)

New Contributors

• @PILLOWPET made their first contribution in #13575

v1.11.0

TL;DR

• New Catalog Promotions system 🎉 🎉 🎉
• Shop API enhancements 🤖
• Support for Symfony 5.4 🚀
• Bump to PHP 8.0 ⚡

Features

• #12689 [API][Country] Initialize contract tests for api/v2 (@GSadee)
• #12704 [API] Denying usage of coupon for invalid promotion (@Zales0123)
• #12716 [API][ShippingMethod] Add contract test for available shipping methods endpoint (@GSadee)
• #12693 [API] allow extending and overwrite api in yaml + test (@SirDomin)
• #12700 [Docs] Docs customization (@SirDomin)
• #12774 [API] Add Product Image type to responses (@arti0090)
• #12766 [Locale]Available locales in channel by api (@AdamKasp)
• #12780 [Locale ][Api] Get locale refactor api (@AdamKasp)
• #12784 [Documentation][Cookbook] How to add another type of refund? (@GSadee)
• #12805 [Behat][API][Taxes] Turn on chunk of taxation related scenarios (@lchrusciel)
• #12806 [Behat][API][Promotion] Turn on chunk of promotion scenarios (@lchrusciel)
• #12769 [API] Refactor converting arguments of commands from IRIs to identifiers (@Tomanhez, @GSadee)
• #12826 [Documentation] New API described in architecture chapter (@AdamKasp)
• #12834 [Docs] Customization docs + yaml customization (@SirDomin)
• #12847 [API]Product image handling (@arti0090)
• #12851 [Order] Protect processors from execution if the order is in a state different than cart (@GSadee)
• #12854 [SM] Change priorities of State Machine callbacks (@arti0090)
• #12782 [API] Check payment amount (@Tomanhez, @AdamKasp, @GSadee)
• #12862 [API] Add liip image filters to API (@arti0090, @SirDomin)
• #12874 [ORM] add created at index to customer (@SirDomin)
• #12877 [API] add original price to product variant (@SirDomin)
• #12879 [DOCS] How to modify invoices (@arti0090)
• #12887 [DOCS] Generating invoice after payment (@arti0090)
• #12873 [Docs] sylius performance boost (@SirDomin, @arti0090)
• #12884 [Docs] add registration/login examples (@SirDomin, @arti0090)
• #12980 [API] Expose taxon children as IRI in menu endpoint (@lchrusciel)
• #12986 [CatalogPromotion] Creating simple catalog promotion only with code and name (@Arminek, @Tomanhez)
• #12994 Get, Update, Post and delete catalog promotions (@arti0090)
• #12990 [CatalogPromotions] Catalog promotion event (@Tomanhez, @Arminek)
• #13005 [CatalogPromotion][API] Create catalog promotion with translatable fields (@GSadee)
• #13002 [CatalogPromotion] Applying Catalog Promotion with hardcoded rule and action (@Tomanhez, @Zales0123)
• #12085 [Doc] Add contact email (@MatthieuCutin, @CoderMaggie)
• #13009 [CatalogPromotion][API] Add channels to catalog promotion (@GSadee)
• #13008 [Catalog Promotions] Add behat scenarios for endpoints (@arti0090)
• #13011 [CatalogPromotion][API] Add simple validation for creating catalog promotion (@GSadee)
• #13013 [CatalogPromotion][API] Extend the possibility of editing catalog promotion (@GSadee)
• #13015 [CatalogPromotion] Add fixtures for catalog promotion entity (@GSadee)
• #13017 [CatalogPromotion][API] Add scenarios for browsing catalog promotions (@GSadee)
• #13001 [Catalog Promotions] add rule to catalog promotion (@AdamKasp, @SirDomin)
• #13026 [CatalogPromotion][Admin] Add browsing catalog promotions (@GSadee)
• #13014 [CatalogPromotion] Use Catalog Promotion rule during application (@Zales0123)
• #13028 [CatalogPromotion][Admin] Add creating catalog promotion (@GSadee)
• #13034 [CatalogPromotion][Admin] Add editing catalog promotions (@GSadee)
• #13029 Catalog promotions action (@SirDomin, @Zales0123)
• #13036 [CatalogPromotions] Use actions for discount application (@Zales0123)
• #13035 [CatalogPromotions] Inform about promotions applied on variants (@Zales0123)
• #13030 Add validation for Catalog Promotion Rules (@AdamKasp)
• #13052 [CatalogPromotions] Manage rules and actions from UI (@Zales0123)
• #12452 [Doc] Customizing admin routes prefix (@oallain, @CoderMaggie)
• #12892 [DOCS] Add note about docker builder (@arti0090)
• #13060 [CP] Add scenario for Inform about promotions applied on variant (@arti0090)
• #13061 [UI][Behat] tests for editing catalog promotion with rule and action (@SirDomin)
• #13055 [CatalogPromotions] Add fixtures for catalog promotions rules and actions (@Tomanhez)
• #13071 [CatalogPromotion][API] Add validation for creating catalog promotion with actions (@Arminek, @GSadee)
• #13068 [CatalogPromotions][Api] Add test for creation rule (@Tomanhez)
• #13081 [CatalogPromotion][API] Apply catalog promotion in proper channels (@GSadee)
• #13086 [CatalogPromotion][API] Add examples of rules and actions to Swagger (@GSadee)
• #13089 [CatalogPromotions] Add missing description to applied promotions (@arti0090)
• #13084 [DOCS]Add Catalog Promotion documentation (@arti0090)
• #13091 [CatalogPromotions] A...

v1.10.9

Details

• #13421 [Docs] How to customize the invoice logo - updated cookbook (@Rafikooo)
• #13423 [Docs] Customizing Credit Memo's logo (@TheMilek)
• #13431 FIX: Avoid passing empty needle to strpos() (@rimas-kudelis)
• #13498 [Docs] Sylius 1.8 is not supported anymore (@Zales0123)
• #13504 Postpone 1.10 end of maintenance date (@Zales0123)
• #13506 [Docs] How to customize the invoice logo - neatly cut invoice image (@Rafikooo)
• #13513 [Architecture] Do not double install PHP dependencies (@lchrusciel)
• #13514 [Documentation] Update Core Team in our documentation (@lchrusciel)
• #13515 [Maintenance] Replace test-package.sh with native GH Actions (@lchrusciel)
• #13516 [Maintenance] Remove NelmioAlice from the main packages config (@lchrusciel)
• #13517 [Docs] Change the template path in customization (@Roshyo)
• #13519 [Docs] Altered custom invoice logo path (@Rafikooo)
• #13520 change suggested path in refund docs (@AdamKasp)
• #13527 [Minor] Typo fixes in github packages config (@lchrusciel)
• #13535 [Minor] Removal of logic duplication in shipping charges processor (@lchrusciel)
• #13552 Fixing the documentation (1.10) (@mamazu)
• #13553 [Fixtures] USA deleted from the World zone (@TheMilek)
• #13561 [Docs] Mention autoconfiguration case when extending the form (@Zales0123)