Open Food Network

v5.7.2 Breaking

This release includes 1 breaking change for platform teams planning a safe upgrade.

Published 19d Productivity & Wikis

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

farmers food food-hubs nonprofit rails ruby

+1 more

sustainable-consumption

Affected surfaces

auth deps

Summary

AI summary

Updates Dependencies 📦, Technical changes 🛠️, and API changes ⚠️ across a mixed release.

Full changelog

What's Changed

API changes ⚠️

Apply DFCv2 migration to all rendered data for v2 requests by @mkllnk in https://github.com/openfoodfoundation/openfoodnetwork/pull/14461
[API v0] Fix permission to update product by @rioug in https://github.com/openfoodfoundation/openfoodnetwork/pull/14473

Experimental features for testing 🚧

[Sourced variants] Read only variants by @rioug in https://github.com/openfoodfoundation/openfoodnetwork/pull/14469

Technical changes 🛠️

Fix bulk order management flaky spec by @rioug in https://github.com/openfoodfoundation/openfoodnetwork/pull/14411
[Sourced variants] updates by @dacook in https://github.com/openfoodfoundation/openfoodnetwork/pull/14472
[Sourced variant] Rename owner to enterprise2 by @dacook in https://github.com/openfoodfoundation/openfoodnetwork/pull/14357
[Sourced Variants] Separate variant ownership from producer - Part 2 by @dacook in https://github.com/openfoodfoundation/openfoodnetwork/pull/14393
Expire sessions after one month of inactivity by @David-OFN-CA in https://github.com/openfoodfoundation/openfoodnetwork/pull/14395

Dependencies 📦

Bump aws-sdk-s3 from 1.225.0 to 1.226.0 by @dependabot[bot] in https://github.com/openfoodfoundation/openfoodnetwork/pull/14470
Bump rubocop from 1.87.0 to 1.88.0 by @dependabot[bot] in https://github.com/openfoodfoundation/openfoodnetwork/pull/14471
Bump rails-erd from 1.7.2 to 2.0.1 by @dependabot[bot] in https://github.com/openfoodfoundation/openfoodnetwork/pull/14429
Bump state_machines-activerecord from 0.31.0 to 0.200.0 by @dependabot[bot] in https://github.com/openfoodfoundation/openfoodnetwork/pull/14475
Bump i18n from 1.14.8 to 1.15.2 by @dependabot[bot] in https://github.com/openfoodfoundation/openfoodnetwork/pull/14476
Bump rspec-rails from 7.1.1 to 8.0.4 by @dependabot[bot] in https://github.com/openfoodfoundation/openfoodnetwork/pull/14477
Bump js-yaml from 3.14.2 to 3.15.0 by @dependabot[bot] in https://github.com/openfoodfoundation/openfoodnetwork/pull/14481
Bump rubocop-rails from 2.35.4 to 2.35.5 by @dependabot[bot] in https://github.com/openfoodfoundation/openfoodnetwork/pull/14486
Bump @swc/core from 1.15.41 to 1.15.43 by @dependabot[bot] in https://github.com/openfoodfoundation/openfoodnetwork/pull/14484

Full Changelog: https://github.com/openfoodfoundation/openfoodnetwork/compare/v5.7.1...v5.7.2

Gratin dauphinois is a French gratin of sliced raw potatoes baked in cream, from the Dauphiné region in south-eastern France.

Breaking Changes

[Sourced variant] Rename owner to enterprise2

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track Open Food Network

Get notified when new releases ship.

About Open Food Network

Online marketplace for local food. It enables a network of independent online food stores that connect farmers and food hubs with individuals and local businesses.

All releases →