This release includes 1 breaking change for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
+1 more
Affected surfaces
Summary
AI summaryUpdates Dependencies 📦, User-facing changes 👀, and Technical changes 🛠️ across a mixed release.
Full changelog
What's Changed
User-facing changes 👀
- Fix: truncate adjustment labels that exceed the database column limit by @gbathree in https://github.com/openfoodfoundation/openfoodnetwork/pull/14175
- Allow deleting customers with zero credit balance by @chahmedejaz in https://github.com/openfoodfoundation/openfoodnetwork/pull/14460
- Pluralize remaining_in_stock translation key by @David-OFN-CA in https://github.com/openfoodfoundation/openfoodnetwork/pull/14397
API changes ⚠️
- Remove api_v1 feature toggle, making API v1 generally available by @emilythericky in https://github.com/openfoodfoundation/openfoodnetwork/pull/14408
Technical changes 🛠️
- Fix flaky customer-name sorting specs in bulk_actions_spec by @maikels-agent in https://github.com/openfoodfoundation/openfoodnetwork/pull/14442
- Bump bundler from 4.0.12 to 4.0.14 by @mkllnk in https://github.com/openfoodfoundation/openfoodnetwork/pull/14456
- Reduce default order factory line_items_count from 5 to 1 by @maikels-agent in https://github.com/openfoodfoundation/openfoodnetwork/pull/14455
Dependencies 📦
- Bump @swc/core from 1.15.40 to 1.15.41 by @dependabot[bot] in https://github.com/openfoodfoundation/openfoodnetwork/pull/14428
- Bump image_processing from 2.0.1 to 2.0.2 by @dependabot[bot] in https://github.com/openfoodfoundation/openfoodnetwork/pull/14430
- Bump dompurify from 3.4.10 to 3.4.11 by @dependabot[bot] in https://github.com/openfoodfoundation/openfoodnetwork/pull/14443
- Bump webpack-dev-server from 5.2.4 to 5.2.5 by @dependabot[bot] in https://github.com/openfoodfoundation/openfoodnetwork/pull/14445
- Bump faraday from 2.14.2 to 2.14.3 by @dependabot[bot] in https://github.com/openfoodfoundation/openfoodnetwork/pull/14447
- Bump nokogiri from 1.19.3 to 1.19.4 by @dependabot[bot] in https://github.com/openfoodfoundation/openfoodnetwork/pull/14448
- Bump concurrent-ruby from 1.3.6 to 1.3.7 by @dependabot[bot] in https://github.com/openfoodfoundation/openfoodnetwork/pull/14446
- Bump rubocop-rspec from 3.9.0 to 3.10.2 by @dependabot[bot] in https://github.com/openfoodfoundation/openfoodnetwork/pull/14431
- Bump stripe from 19.2.0 to 19.2.1 by @dependabot[bot] in https://github.com/openfoodfoundation/openfoodnetwork/pull/14451
- Bump activesupport from 7.2.3 to 7.2.3.1 by @dependabot[bot] in https://github.com/openfoodfoundation/openfoodnetwork/pull/14457
- Bump http-proxy-middleware from 2.0.9 to 2.0.10 by @dependabot[bot] in https://github.com/openfoodfoundation/openfoodnetwork/pull/14458
- Bump shoulda-matchers from 7.0.1 to 8.0.1 by @dependabot[bot] in https://github.com/openfoodfoundation/openfoodnetwork/pull/14462
- Bump json from 2.19.8 to 2.19.9 by @dependabot[bot] in https://github.com/openfoodfoundation/openfoodnetwork/pull/14467
- Bump datafoodconsortium-connector from 2.0.0.pre.beta4 to 2.0.0.pre.beta8 by @dependabot[bot] in https://github.com/openfoodfoundation/openfoodnetwork/pull/14452
Full Changelog: https://github.com/openfoodfoundation/openfoodnetwork/compare/v5.7.0...v5.7.1
Breaking Changes
- Removed api_v1 feature toggle, making API v1 generally available
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Open Food Network
Online marketplace for local food. It enables a network of independent online food stores that connect farmers and food hubs with individuals and local businesses.
Beta — feedback welcome: [email protected]