Open Food Network

v5.7.5 Breaking

This release includes breaking changes for platform teams planning a safe upgrade.

Published 8h Productivity & Wikis

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

farmers food food-hubs nonprofit rails ruby

+1 more

sustainable-consumption

Affected surfaces

deps

Summary

AI summary

Updates Dependencies 📦, Technical changes 🛠️, and User-facing changes 👀 across a mixed release.

Full changelog

What's Changed

User-facing changes 👀

Fix various broken spec from supplier refactor work by @rioug in https://github.com/openfoodfoundation/openfoodnetwork/pull/14545
Pre-fill new variant fields when adding a variant by @emilythericky in https://github.com/openfoodfoundation/openfoodnetwork/pull/14392

API changes ⚠️

Update and fix DFC Affiliate Sales Data endpoint and specs that were missed in CI by @mkllnk in https://github.com/openfoodfoundation/openfoodnetwork/pull/14544

Technical changes 🛠️

Mark currently broken specs and fail reliably on others by @mkllnk in https://github.com/openfoodfoundation/openfoodnetwork/pull/14538
Turn on inventory feature for inventory test by @rioug in https://github.com/openfoodfoundation/openfoodnetwork/pull/14542
Fix order updater spec by @rioug in https://github.com/openfoodfoundation/openfoodnetwork/pull/14541
Fix tooltip component by @rioug in https://github.com/openfoodfoundation/openfoodnetwork/pull/14540
Fix product scope query spec by @rioug in https://github.com/openfoodfoundation/openfoodnetwork/pull/14543
Fix the mailer host configuration by @rioug in https://github.com/openfoodfoundation/openfoodnetwork/pull/14546
Fix flaky spec by @dacook in https://github.com/openfoodfoundation/openfoodnetwork/pull/14559

Dependencies 📦

Bump stripe from 19.2.1 to 19.3.0 by @dependabot[bot] in https://github.com/openfoodfoundation/openfoodnetwork/pull/14530
Bump @floating-ui/dom from 1.7.6 to 1.8.0 by @dependabot[bot] in https://github.com/openfoodfoundation/openfoodnetwork/pull/14554
Bump aws-sdk-s3 from 1.226.0 to 1.227.0 by @dependabot[bot] in https://github.com/openfoodfoundation/openfoodnetwork/pull/14555
Bump postcss from 8.5.16 to 8.5.19 by @dependabot[bot] in https://github.com/openfoodfoundation/openfoodnetwork/pull/14560
Bump engine.io from 6.6.4 to 6.6.9 by @dependabot[bot] in https://github.com/openfoodfoundation/openfoodnetwork/pull/14561
Bump dompurify from 3.4.11 to 3.4.12 by @dependabot[bot] in https://github.com/openfoodfoundation/openfoodnetwork/pull/14562
Bump shell-quote from 1.8.4 to 1.10.0 by @dependabot[bot] in https://github.com/openfoodfoundation/openfoodnetwork/pull/14565
Bump fast-uri from 3.1.2 to 3.1.4 by @dependabot[bot] in https://github.com/openfoodfoundation/openfoodnetwork/pull/14564
Bump immutable from 5.1.5 to 5.1.9 by @dependabot[bot] in https://github.com/openfoodfoundation/openfoodnetwork/pull/14567
Bump svgo from 4.0.1 to 4.0.2 by @dependabot[bot] in https://github.com/openfoodfoundation/openfoodnetwork/pull/14566
Bump brace-expansion from 1.1.12 to 1.1.16 by @dependabot[bot] in https://github.com/openfoodfoundation/openfoodnetwork/pull/14563

Full Changelog: https://github.com/openfoodfoundation/openfoodnetwork/compare/v5.7.4...v5.7.5

A lemon tart (French: tarte au citron) is a French dessert dish, a variety of tart It has a pastry shell with a lemon flavored filling.

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track Open Food Network

Get notified when new releases ship.

About Open Food Network

Online marketplace for local food. It enables a network of independent online food stores that connect farmers and food hubs with individuals and local businesses.

All releases →