Sylius releases

What's Changed

• Fix problem with empty taxon product index by @tomkalon in https://github.com/Sylius/Sylius/pull/18579
• TASK: improve german translations for CH, DE, and AT by @crydotsnake in https://github.com/Sylius/Sylius/pull/18932
• fix: add default filter to breadcrumbs configuration title to prevent ScalarDataBag exception by @camilleislasse in https://github.com/Sylius/Sylius/pull/18933
• Fix build after APIPlatform 4.3.2 release by @TheMilek in https://github.com/Sylius/Sylius/pull/18943
• [UPMERGE] 2.1 -> 2.2 by @SyliusBot in https://github.com/Sylius/Sylius/pull/18925
• Add payment enabled in channel validation by @marekrzytki in https://github.com/Sylius/Sylius/pull/18941
• [BUGFIX] Allow updating provinceName when provinceCode is null in API by @rust-le in https://github.com/Sylius/Sylius/pull/18926
• [UPMERGE] 2.1 -> 2.2 by @SyliusBot in https://github.com/Sylius/Sylius/pull/18949
• [BUGFIX] Make mailer services public to allow usage in state machine callbacks by @rust-le in https://github.com/Sylius/Sylius/pull/18953
• [UPMERGE] 2.1 -> 2.2 by @SyliusBot in https://github.com/Sylius/Sylius/pull/18954
• Resolve flash alert correctly without breaking translation by @TheMilek in https://github.com/Sylius/Sylius/pull/18961
• [UPMERGE] 2.1 -> 2.2 by @SyliusBot in https://github.com/Sylius/Sylius/pull/18964
• Restore missing page titles for admin resource show pages by @marekrzytki in https://github.com/Sylius/Sylius/pull/18940
• Unified name translations handling in admin grid index by @pbalcerzak in https://github.com/Sylius/Sylius/pull/18922
• [UPMERGE] 2.1 -> 2.2 by @SyliusBot in https://github.com/Sylius/Sylius/pull/18968
• Allow choosing different payment method with skip payment step when it gets disabled by @TheMilek in https://github.com/Sylius/Sylius/pull/18965
• Add missing status code mapping for OrderItemNotFoundException by @marekrzytki in https://github.com/Sylius/Sylius/pull/18969
• Add email validation constraints to cart update by @marekrzytki in https://github.com/Sylius/Sylius/pull/18970
• Fix admin templates by @loic425 in https://github.com/Sylius/Sylius/pull/18972
• [UPMERGE] 2.1 -> 2.2 by @SyliusBot in https://github.com/Sylius/Sylius/pull/18973
• [API] Make API Platform resource command classes overridable via container parameters by @Prometee in https://github.com/Sylius/Sylius/pull/18958
• Unify Tests directory with tests by @TheMilek in https://github.com/Sylius/Sylius/pull/18974
• [UPMERGE] 2.1 -> 2.2 by @SyliusBot in https://github.com/Sylius/Sylius/pull/18975
• [UPMERGE] 2.1 -> 2.2 by @SyliusBot in https://github.com/Sylius/Sylius/pull/18976

New Contributors

• @camilleislasse made their first contribution in https://github.com/Sylius/Sylius/pull/18933

Full Changelog: https://github.com/Sylius/Sylius/compare/v2.2.4...v2.2.5

What's Changed

• Fix problem with empty taxon product index by @tomkalon in https://github.com/Sylius/Sylius/pull/18579
• fix: add default filter to breadcrumbs configuration title to prevent ScalarDataBag exception by @camilleislasse in https://github.com/Sylius/Sylius/pull/18933
• Fix build after APIPlatform 4.3.2 release by @TheMilek in https://github.com/Sylius/Sylius/pull/18943
• Add payment enabled in channel validation by @marekrzytki in https://github.com/Sylius/Sylius/pull/18941
• [BUGFIX] Allow updating provinceName when provinceCode is null in API by @rust-le in https://github.com/Sylius/Sylius/pull/18926
• [BUGFIX] Make mailer services public to allow usage in state machine callbacks by @rust-le in https://github.com/Sylius/Sylius/pull/18953
• Resolve flash alert correctly without breaking translation by @TheMilek in https://github.com/Sylius/Sylius/pull/18961
• Restore missing page titles for admin resource show pages by @marekrzytki in https://github.com/Sylius/Sylius/pull/18940
• Unified name translations handling in admin grid index by @pbalcerzak in https://github.com/Sylius/Sylius/pull/18922
• Allow choosing different payment method with skip payment step when it gets disabled by @TheMilek in https://github.com/Sylius/Sylius/pull/18965
• Add missing status code mapping for OrderItemNotFoundException by @marekrzytki in https://github.com/Sylius/Sylius/pull/18969
• Add email validation constraints to cart update by @marekrzytki in https://github.com/Sylius/Sylius/pull/18970
• Fix admin templates by @loic425 in https://github.com/Sylius/Sylius/pull/18972
• Unify Tests directory with tests by @TheMilek in https://github.com/Sylius/Sylius/pull/18974

New Contributors

• @camilleislasse made their first contribution in https://github.com/Sylius/Sylius/pull/18933

Full Changelog: https://github.com/Sylius/Sylius/compare/v2.1.13...v2.1.14

What's Changed

• [BUGFIX] remove redundant object from PHPDoc union types by @rust-le in https://github.com/Sylius/Sylius/pull/18904
• [CS][DX] Refactor by @github-actions[bot] in https://github.com/Sylius/Sylius/pull/18899
• [CS][DX] Refactor by @github-actions[bot] in https://github.com/Sylius/Sylius/pull/18898
• [Admin] Fix product taxon grid enabled field always showing true by @serhiilabs in https://github.com/Sylius/Sylius/pull/18895
• [BUGFIX] fix build errors by @rust-le in https://github.com/Sylius/Sylius/pull/18911
• [UPMERGE] 2.1 -> 2.2 by @SyliusBot in https://github.com/Sylius/Sylius/pull/18902
• Telemetry improvements 2.1 by @TheMilek in https://github.com/Sylius/Sylius/pull/18920
• [UPMERGE] 2.1 -> 2.2 by @SyliusBot in https://github.com/Sylius/Sylius/pull/18923

New Contributors

• @serhiilabs made their first contribution in https://github.com/Sylius/Sylius/pull/18895

Full Changelog: https://github.com/Sylius/Sylius/compare/v2.2.3...v2.2.4

What's Changed

• [BUGFIX] remove redundant object from PHPDoc union types by @rust-le in https://github.com/Sylius/Sylius/pull/18904
• [CS][DX] Refactor by @github-actions[bot] in https://github.com/Sylius/Sylius/pull/18899
• [Admin] Fix product taxon grid enabled field always showing true by @serhiilabs in https://github.com/Sylius/Sylius/pull/18895
• [BUGFIX] fix build errors by @rust-le in https://github.com/Sylius/Sylius/pull/18911
• Telemetry improvements 2.1 by @TheMilek in https://github.com/Sylius/Sylius/pull/18920

New Contributors

• @serhiilabs made their first contribution in https://github.com/Sylius/Sylius/pull/18895

Full Changelog: https://github.com/Sylius/Sylius/compare/v2.1.12...v2.1.13

What's Changed

• Telemetry improvements 2.0 by @TheMilek in https://github.com/Sylius/Sylius/pull/18919

Full Changelog: https://github.com/Sylius/Sylius/compare/v2.0.16...v2.0.17

What's Changed

• Telemetry improvements 1.14 by @TheMilek in https://github.com/Sylius/Sylius/pull/18918

Full Changelog: https://github.com/Sylius/Sylius/compare/v1.14.18...v1.14.19

What's Changed

• Telemetry improvements 1.13 by @TheMilek in https://github.com/Sylius/Sylius/pull/18917

Full Changelog: https://github.com/Sylius/Sylius/compare/v1.13.15...v1.13.16

What's Changed

• Telemetry improvements 1.11 by @TheMilek in https://github.com/Sylius/Sylius/pull/18916

Full Changelog: https://github.com/Sylius/Sylius/compare/v1.11.17...v1.11.18

What's Changed

• Telemetry improvements 1.10 by @TheMilek in https://github.com/Sylius/Sylius/pull/18915

Full Changelog: https://github.com/Sylius/Sylius/compare/v1.10.16...v1.10.17

What's Changed

• Telemetry improvements 1.9 by @TheMilek in https://github.com/Sylius/Sylius/pull/18914

Full Changelog: https://github.com/Sylius/Sylius/compare/v1.9.12...v1.9.13

Details

• #18908 Telemetry improvements (@TheMilek)

Full Changelog: https://github.com/Sylius/Sylius/compare/v1.12.23...v1.12.24

TL;DR

🔒 This is a security release!

Fixes the following vulnerabilities:

• Open Redirect via Referer Header
• DQL Injection via API Order Filters
• Promotion Usage Limit Bypass via Race Condition
• IDOR in Cart and Checkout LiveComponents
• Missing Authorization in API v2 Add Item Endpoint
• XSS Vulnerability in Checkout Login Form
• Authenticated Stored XSS

Details

• #18747 Fix panther build (@TheMilek)
• #18758 Remove duplicated serialization group field (@TheMilek)
• #18785 Try to fix build after ResourceBundle release (@TheMilek)
• #18742 [Admin] Fix order history address fields not displaying empty values (@Wojdylak)
• #18806 Fix after new release of PayumBundle (@TheMilek)
• #18836 Upgrade BuildTestAppAction from v3.0.1 to v4 (@TheMilek)
• #18832 [Admin] Fix images not being emitted with Webpack 5.105+ (@GSadee)
• #18841 Fix Dutch translation for payment method (@JordiDekker)
• #18871 Add conflict to api-platform/serializer 4.2.17 (@TheMilek)
• #18888 Remove redundant check with apip4.1.7 in matrix (@TheMilek)
• #18887 [BUGFIX] Make GitHub actions green again 2.1 (@rust-le)
• #18844 Fix formatting in UPGRADE-2.0.md (@LucaGallinari)

Full Changelog: https://github.com/Sylius/Sylius/compare/v2.2.2...v2.2.3

TL;DR

🔒 This is a security release!

Fixes the following vulnerabilities:

• Open Redirect via Referer Header
• DQL Injection via API Order Filters
• Promotion Usage Limit Bypass via Race Condition
• IDOR in Cart and Checkout LiveComponents
• Missing Authorization in API v2 Add Item Endpoint
• XSS Vulnerability in Checkout Login Form
• Authenticated Stored XSS

Details

• #18747 Fix panther build (@TheMilek)
• #18758 Remove duplicated serialization group field (@TheMilek)
• #18785 Try to fix build after ResourceBundle release (@TheMilek)
• #18742 [Admin] Fix order history address fields not displaying empty values (@Wojdylak)
• #18806 Fix after new release of PayumBundle (@TheMilek)
• #18836 Upgrade BuildTestAppAction from v3.0.1 to v4 (@TheMilek)
• #18832 [Admin] Fix images not being emitted with Webpack 5.105+ (@GSadee)
• #18841 Fix Dutch translation for payment method (@JordiDekker)
• #18871 Add conflict to api-platform/serializer 4.2.17 (@TheMilek)
• #18888 Remove redundant check with apip4.1.7 in matrix (@TheMilek)
• #18887 [BUGFIX] Make GitHub actions green again 2.1 (@rust-le)
• #18844 Fix formatting in UPGRADE-2.0.md (@LucaGallinari)

Full Changelog: https://github.com/Sylius/Sylius/compare/v2.1.11...v2.1.12

TL;DR

🔒 This is a security release!

Fixes the following vulnerabilities:

• Open Redirect via Referer Header
• DQL Injection via API Order Filters
• Promotion Usage Limit Bypass via Race Condition
• IDOR in Cart and Checkout LiveComponents
• Missing Authorization in API v2 Add Item Endpoint
• XSS Vulnerability in Checkout Login Form
• Authenticated Stored XSS

Full Changelog: https://github.com/Sylius/Sylius/compare/v2.0.15...v2.0.16

TL;DR

🔒 This is a security release!

Fixes the following vulnerabilities:

• Open Redirect via Referer Header
• DQL Injection via API Order Filters
• Promotion Usage Limit Bypass via Race Condition

Full Changelog: https://github.com/Sylius/Sylius/compare/v1.14.17...v1.14.18

TL;DR

🔒 This is a security release!

Fixes the following vulnerabilities:

• Open Redirect via Referer Header
• DQL Injection via API Order Filters
• Promotion Usage Limit Bypass via Race Condition

Full Changelog: https://github.com/Sylius/Sylius/compare/v1.13.14...v1.13.15

TL;DR

🔒 This is a security release!

Fixes the following vulnerabilities:

• Open Redirect via Referer Header
• DQL Injection via API Order Filters
• Promotion Usage Limit Bypass via Race Condition

Full Changelog: https://github.com/Sylius/Sylius/compare/v1.12.22...v1.12.23

TL;DR

🔒 This is a security release!

Fixes the following vulnerabilities:

• Open Redirect via Referer Header
• DQL Injection via API Order Filters
• Promotion Usage Limit Bypass via Race Condition
• Potential Cross Site Scripting (XSS) via the "Province" field in the Checkout and Address Book
• Potential Cross Site Scripting (XSS) via the "Name" field (Taxons, Products, Options, Variants) in the Admin Panel
• Ability to Retrieve Adjustments with Incremental Integer ID

Full Changelog: https://github.com/Sylius/Sylius/compare/v1.11.16...v1.11.17

TL;DR

🔒 This is a security release!

Fixes the following vulnerabilities:

• Open Redirect via Referer Header
• DQL Injection via API Order Filters
• Promotion Usage Limit Bypass via Race Condition
• Potential Cross Site Scripting (XSS) via the "Province" field in the Checkout and Address Book
• Potential Cross Site Scripting (XSS) via the "Name" field (Taxons, Products, Options, Variants) in the Admin Panel
• Ability to Retrieve Adjustments with Incremental Integer ID

Full Changelog: https://github.com/Sylius/Sylius/compare/v1.10.15...v1.10.16

TL;DR

🔒 This is a security release!

Fixes the following vulnerabilities:

• Open Redirect via Referer Header
• DQL Injection via API Order Filters
• Promotion Usage Limit Bypass via Race Condition
• Potential Cross Site Scripting (XSS) via the "Province" field in the Checkout and Address Book
• Potential Cross Site Scripting (XSS) via the "Name" field (Taxons, Products, Options, Variants) in the Admin Panel
• Ability to Retrieve Adjustments with Incremental Integer ID

Full Changelog: https://github.com/Sylius/Sylius/compare/v1.9.11...v1.9.12

TL;DR

Fixed Sylius HTTP client injection in Payum gateway configuration

Full Changelog: https://github.com/Sylius/Sylius/compare/v1.14.16...v1.14.17

TL;DR

Fixed Sylius HTTP client injection in Payum gateway configuration

Full Changelog: https://github.com/Sylius/Sylius/compare/v1.13.13...v1.13.14

TL;DR

Fixed Sylius HTTP client injection in Payum gateway configuration

Full Changelog: https://github.com/Sylius/Sylius/compare/v1.12.21...v1.12.22

TL;DR

• Introduced anonymous telemetry to help us better understand how Sylius is used and improve the platform
• Fixed Sylius HTTP client injection in Payum gateway configuration

Full Changelog: https://github.com/Sylius/Sylius/compare/v1.11.15...v1.11.16

TL;DR

• Introduced anonymous telemetry to help us better understand how Sylius is used and improve the platform
• Fixed Sylius HTTP client injection in Payum gateway configuration

Details

• [CS][DX] Refactor by @github-actions[bot] in https://github.com/Sylius/Sylius/pull/14029
• [Maintenance] Remove 1.10 branch from scheduled ECS refactor by @GSadee in https://github.com/Sylius/Sylius/pull/14032
• Remove auto commenting feature on 1.10 & 1.11 as well by @Zales0123 in https://github.com/Sylius/Sylius/pull/14047

Full Changelog: https://github.com/Sylius/Sylius/compare/v1.10.14...v1.10.15

TL;DR

• Introduced anonymous telemetry to help us better understand how Sylius is used and improve the platform
• Fixed Sylius HTTP client injection in Payum gateway configuration

Full Changelog: https://github.com/Sylius/Sylius/compare/v1.9.10...v1.9.11

Details

• #18691 [CS][DX] Refactor
• #18690 [CS][DX] Refactor
• #18689 [CS][DX] Refactor
• #18693 [CI] Standardize job timeouts to 15 minutes (@Rafikooo)
• #18703 [Deps] Allow psr/http-message ^2.0 (@Rafikooo)
• #18716 Try to fix build with PHP 8.5 and 8.4 (@TheMilek)
• #18707 [DX] Update branch aliases to 1.14-dev (@Rafikooo)
• #18721 Fix tests application error templates (@loic425)
• #16892 [FIXTURES] Fix menu taxon code (@TheMilek)
• #18366 Fix ro PayumBundle Translation (@revoltek-daniel)
• #18725 Bugfix/merged overrides missing operations (@TheMilek)
• #18702 [Composer] Remove outdated twig/twig conflicts from bundles (@Rafikooo)
• #18722 [API] Payment Request fix default action when IRI is given (@Prometee)
• #18732 Make PostgreSQL telemetry migration extend dedicated abstract (@TheMilek)
• #18369 Add form help rendering to forms (@tomkalon)
• #18735 [CS][DX] Refactor
• #18726 [Channel] Resolve localhost equivalents when matching channel by hostname (@Rafikooo)
• #18708 [DX] Improve AI contribution guidelines (@Rafikooo)
• #18711 Fix typo in first_name.html.twig (@LucaGallinari)
• #18736 TASK: [2.2] [UiBundle] adjust translations for admin password reset page (@crydotsnake)
• #18565 Add ternary operator to fix related with empty key (@michalkaczmarek-bitbag)
• #18572 Bugfix/fix autocomplete in admin to be case insensitive (@michalkaczmarek-bitbag)

New Contributors

• @LucaGallinari made their first contribution in https://github.com/Sylius/Sylius/pull/18711

Full Changelog: https://github.com/Sylius/Sylius/compare/v2.2.1...v2.2.2

Details

• #18691 [CS][DX] Refactor
• #18689 [CS][DX] Refactor
• #18703 [Deps] Allow psr/http-message ^2.0 (@Rafikooo)
• #18716 Try to fix build with PHP 8.5 and 8.4 (@TheMilek)
• #18707 [DX] Update branch aliases to 1.14-dev (@Rafikooo)
• #18721 Fix tests application error templates (@loic425)
• #16892 [FIXTURES] Fix menu taxon code (@TheMilek)
• #18366 Fix ro PayumBundle Translation (@revoltek-daniel)
• #18725 Bugfix/merged overrides missing operations (@TheMilek)
• #18702 [Composer] Remove outdated twig/twig conflicts from bundles (@Rafikooo)
• #18722 [API] Payment Request fix default action when IRI is given (@Prometee)
• #18732 Make PostgreSQL telemetry migration extend dedicated abstract (@TheMilek)
• #18369 Add form help rendering to forms (@tomkalon)
• #18735 [CS][DX] Refactor
• #18565 Add ternary operator to fix related with empty key (@michalkaczmarek-bitbag)
• #18572 Bugfix/fix autocomplete in admin to be case insensitive (@michalkaczmarek-bitbag)

Full Changelog: https://github.com/Sylius/Sylius/compare/v2.1.10...v2.1.11

Details

• #18691 [CS][DX] Refactor
• #18703 [Deps] Allow psr/http-message ^2.0 (@Rafikooo)
• #18707 [DX] Update branch aliases to 1.14-dev (@Rafikooo)
• #16892 [FIXTURES] Fix menu taxon code (@TheMilek)
• #18366 Fix ro PayumBundle Translation (@revoltek-daniel)
• #18725 Bugfix/merged overrides missing operations (@TheMilek)
• #18702 [Composer] Remove outdated twig/twig conflicts from bundles (@Rafikooo)
• #18732 Make PostgreSQL telemetry migration extend dedicated abstract (@TheMilek)
• #18369 Add form help rendering to forms (@tomkalon)

Full Changelog: https://github.com/Sylius/Sylius/compare/v1.14.15...v1.14.16