This release includes 1 breaking change for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
+1 more
Affected surfaces
Summary
AI summaryUpdates Dependencies 📦, Technical changes 🛠️, and Significant changes 🚀 across a mixed release.
Full changelog
What's Changed
Significant changes 🚀
- [Rails upgrade] Upgrade encryption hash by @rioug in https://github.com/openfoodfoundation/openfoodnetwork/pull/14275
User-facing changes 👀
- Ensure owner is always set on variant when validating by @dacook in https://github.com/openfoodfoundation/openfoodnetwork/pull/14330
API changes ⚠️
- Show producer properties as DFC certifications by @mkllnk in https://github.com/openfoodfoundation/openfoodnetwork/pull/14344
Technical changes 🛠️
- Fix NoMethodError when enterprise fee filter params are absent by @nicolasVr in https://github.com/openfoodfoundation/openfoodnetwork/pull/14333
- Upgrade JWT gem by @rioug in https://github.com/openfoodfoundation/openfoodnetwork/pull/14324
- Remove hardcoded links and enable custom links on homepage steps by @dacook in https://github.com/openfoodfoundation/openfoodnetwork/pull/14355
- Rename owner to enterprise by @dacook in https://github.com/openfoodfoundation/openfoodnetwork/pull/14356
Dependencies 📦
- Bump rspec-sql from 0.0.3 to 0.0.4 by @dependabot[bot] in https://github.com/openfoodfoundation/openfoodnetwork/pull/14349
- Bump private_address_check from 0.7.0 to 0.8.0 by @dependabot[bot] in https://github.com/openfoodfoundation/openfoodnetwork/pull/14347
- Bump webpack from 5.107.0 to 5.107.1 by @dependabot[bot] in https://github.com/openfoodfoundation/openfoodnetwork/pull/14350
- Bump sass-embedded from 1.99.0 to 1.100.0 by @dependabot[bot] in https://github.com/openfoodfoundation/openfoodnetwork/pull/14351
- Bump aws-sdk-s3 from 1.223.0 to 1.224.0 by @dependabot[bot] in https://github.com/openfoodfoundation/openfoodnetwork/pull/14352
- Bump the "shakapacker" group with 1 update across multiple ecosystems by @dependabot[bot] in https://github.com/openfoodfoundation/openfoodnetwork/pull/14342
- Bump @swc/core from 1.15.33 to 1.15.40 by @dependabot[bot] in https://github.com/openfoodfoundation/openfoodnetwork/pull/14359
- Bump bootsnap from 1.24.4 to 1.24.5 by @dependabot[bot] in https://github.com/openfoodfoundation/openfoodnetwork/pull/14360
- Bump webpack-assets-manifest from 6.5.1 to 6.5.2 by @dependabot[bot] in https://github.com/openfoodfoundation/openfoodnetwork/pull/14358
- Bump webpack from 5.107.1 to 5.107.2 by @dependabot[bot] in https://github.com/openfoodfoundation/openfoodnetwork/pull/14361
- Bump bullet from 8.1.1 to 8.1.2 by @dependabot[bot] in https://github.com/openfoodfoundation/openfoodnetwork/pull/14362
- Bump terser-webpack-plugin from 5.6.0 to 5.6.1 by @dependabot[bot] in https://github.com/openfoodfoundation/openfoodnetwork/pull/14370
- Bump webpack-cli from 7.0.2 to 7.0.3 by @dependabot[bot] in https://github.com/openfoodfoundation/openfoodnetwork/pull/14369
- Bump stripe from 19.0.0 to 19.2.0 by @dependabot[bot] in https://github.com/openfoodfoundation/openfoodnetwork/pull/14371
- Bump image_processing from 1.14.0 to 2.0.0 by @dependabot[bot] in https://github.com/openfoodfoundation/openfoodnetwork/pull/14348
New Contributors
- @nicolasVr made their first contribution in https://github.com/openfoodfoundation/openfoodnetwork/pull/14333
Full Changelog: https://github.com/openfoodfoundation/openfoodnetwork/compare/v5.5.0...v5.6.0
Breaking Changes
- Rename owner field to enterprise
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Open Food Network
Online marketplace for local food. It enables a network of independent online food stores that connect farmers and food hubs with individuals and local businesses.
Beta — feedback welcome: [email protected]