Open Food Network

v5.7.3 Breaking

This release includes breaking changes for platform teams planning a safe upgrade.

Published 12d Productivity & Wikis

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

farmers food food-hubs nonprofit rails ruby

+1 more

sustainable-consumption

Summary

AI summary

Updates User-facing changes 👀, API changes ⚠️, and Dependencies 📦 across a mixed release.

Changes in this release

Type	Severity	Summary	CVE
Feature
Feature	Medium	Show carousel of images when multiple images are available. Show carousel of images when multiple images are available. Source: llm_adapter@2026-07-15 Confidence: high	—
Feature	Medium	Prevent admins from viewing carousel in shops. Prevent admins from viewing carousel in shops. Source: llm_adapter@2026-07-15 Confidence: high	—
Feature	Medium	Show negative enterprise fees in shopfront price breakdown. Show negative enterprise fees in shopfront price breakdown. Source: llm_adapter@2026-07-15 Confidence: high	—
Feature	Medium	Import LiteFarm data in v2 format via API. Import LiteFarm data in v2 format via API. Source: llm_adapter@2026-07-15 Confidence: high	—
Feature	Medium	Add customer account transaction authentication. Add customer account transaction authentication. Source: llm_adapter@2026-07-15 Confidence: high	—
Dependency
Dependency	Low	Bump rubocop-capybara from 2.23.0 to 3.0.0. Bump rubocop-capybara from 2.23.0 to 3.0.0. Source: llm_adapter@2026-07-15 Confidence: high	—
Dependency	Low	Bump webpack from 5.107.2 to 5.108.3. Bump webpack from 5.107.2 to 5.108.3. Source: granite4.1:30b@2026-07-15-audit Confidence: low	—
Dependency	Low	Bump webpack-cli from 7.0.3 to 7.1.0. Bump webpack-cli from 7.0.3 to 7.1.0. Source: granite4.1:30b@2026-07-15-audit Confidence: low	—
Dependency	Low	Bump postcss from 8.5.15 to 8.5.16. Bump postcss from 8.5.15 to 8.5.16. Source: granite4.1:30b@2026-07-15-audit Confidence: low	—
Bugfix
Bugfix	Medium	Fix order cycle mail report grouping by product and price. Fix order cycle mail report grouping by product and price. Source: llm_adapter@2026-07-15 Confidence: high	—
Bugfix	Medium	Fix Payments tab redirect for awaiting_return and returned orders. Fix Payments tab redirect for awaiting_return and returned orders. Source: llm_adapter@2026-07-15 Confidence: high	—
Bugfix	Medium	Fix missing description on customer credit transactions created via the API. Fix missing description on customer credit transactions created via the API. Source: llm_adapter@2026-07-15 Confidence: high	—
Bugfix	Medium	Fix flaky system-spec login by binding Warden login to the request. Fix flaky system-spec login by binding Warden login to the request. Source: llm_adapter@2026-07-15 Confidence: high	—

Full changelog

What's Changed

User-facing changes 👀

Show carousel of images when multiple images are available by @chahmedejaz in https://github.com/openfoodfoundation/openfoodnetwork/pull/14337
Prevent admins to be able to view carousel in shops by @chahmedejaz in https://github.com/openfoodfoundation/openfoodnetwork/pull/14495
Fix order cycle mail Report grouping by product and price. by @lufafajoshua in https://github.com/openfoodfoundation/openfoodnetwork/pull/14422
Show negative enterprise fees in shopfront price breakdown by @David-OFN-CA in https://github.com/openfoodfoundation/openfoodnetwork/pull/14396
Fix Payments tab redirect for awaiting_return and returned orders by @NiftyGaloot in https://github.com/openfoodfoundation/openfoodnetwork/pull/14409

API changes ⚠️

Import LiteFarm data in v2 format by @mkllnk in https://github.com/openfoodfoundation/openfoodnetwork/pull/14474
Fix missing description on customer credit transactions created via the API by @emilythericky in https://github.com/openfoodfoundation/openfoodnetwork/pull/14432

Experimental features for testing 🚧

[Sourced variants] Show linked producer by @dacook in https://github.com/openfoodfoundation/openfoodnetwork/pull/14488

Technical changes 🛠️

Fix flaky system-spec login by binding Warden login to the request by @maikels-agent in https://github.com/openfoodfoundation/openfoodnetwork/pull/14463
Customer account transation auth by @dacook in https://github.com/openfoodfoundation/openfoodnetwork/pull/14508

Dependencies 📦

Bump rubocop-capybara from 2.23.0 to 3.0.0 by @dependabot[bot] in https://github.com/openfoodfoundation/openfoodnetwork/pull/14497
Bump webpack from 5.107.2 to 5.108.3 by @dependabot[bot] in https://github.com/openfoodfoundation/openfoodnetwork/pull/14509
Bump webpack-cli from 7.0.3 to 7.1.0 by @dependabot[bot] in https://github.com/openfoodfoundation/openfoodnetwork/pull/14503
Bump postcss from 8.5.15 to 8.5.16 by @dependabot[bot] in https://github.com/openfoodfoundation/openfoodnetwork/pull/14505

New Contributors

@lufafajoshua made their first contribution in https://github.com/openfoodfoundation/openfoodnetwork/pull/14422

Full Changelog: https://github.com/openfoodfoundation/openfoodnetwork/compare/v5.7.2...v5.7.3

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track Open Food Network

Get notified when new releases ship.

About Open Food Network

Online marketplace for local food. It enables a network of independent online food stores that connect farmers and food hubs with individuals and local businesses.

All releases →