v5.3.3 Hummus

Thank you to @deivid-rodriguez for your unprecedented contributions, you've cleaned up a lot of tech debt for which we are truly grateful! 💐 👏

What's Changed

User-facing changes 👀

• Error 500 checking out with Stripe, after navigating back to the Summary page by @chahmedejaz in #13624
• fix table format in edit order page by @guidoDutra in #13627

Technical changes 🛠️

• Follow up to old ofnEmptiesCart to ofnChangeHub rename by @deivid-rodriguez in #13623
• Fix duplicate keys warnings in some views by @deivid-rodriguez in #13599
• Update mini_magick to a version that plays nice with imagemagick v7 by @deivid-rodriguez in #13602
• Upgrade cache format version by @deivid-rodriguez in #13617
• The PROFILE env variable should actually enable, not disable, caching by @deivid-rodriguez in #13600
• Remove unnecessary explicit sleeps by @deivid-rodriguez in #13618
• Silence capybara starting puma during system specs by @deivid-rodriguez in #13604
• Don't run reviewdog on pushes by @deivid-rodriguez in #13622
• Link to Stripe testing wiki page from the cassette regeneration script by @deivid-rodriguez in #13635
• Remove only usage of STRIPE_PUBLIC_TEST_API_KEY env and refactor specs that were using it by @deivid-rodriguez in #13638
• Fix JS error when Stripe connect is disabled but Stripe API keys are setup by @deivid-rodriguez in #13637

Dependencies 📦

• Bump state_machines-activerecord from 0.9.0 to 0.31.0 by @dependabot[bot] in #13616
• Bump webmock from 3.23.1 to 3.25.1 by @dependabot[bot] in #13630
• Bump activerecord-import from 1.6.0 to 2.2.0 by @dependabot[bot] in #13634

Full Changelog: v5.3.2...v5.3.3

v5.3.2 Walnut

Many thanks to @deivid-rodriguez for their first contribution 💐 💐 💐

What's Changed

API changes ⚠️

• Add CQCM staging server to platforms to share data with by @mkllnk in #13513

Technical changes 🛠️

• Clean up request specs testing JSON by @mkllnk in #13587
• Use supported RSpec syntax by @deivid-rodriguez in #13595
• Docker upgrade postgres by @rioug in #13458
• Add env var option for test log level by @dacook in #13576
• [Variant Tags] Remove angular from tag rule admin page by @rioug in #13507
• Fix typo in getting started guide by @deivid-rodriguez in #13594
• Update caniuse-lite to fix bin/webpack-dev-server warnings by @deivid-rodriguez in #13596
• Fix RSpec warning when running Reporting::ReportRenderer.render_as unit spec by @deivid-rodriguez in #13597

Dependencies 📦

• Bump rack from 2.2.19 to 2.2.20 by @dependabot[bot] in #13591
• Bump newrelic_rpm from 9.9.0 to 9.22.0 by @dependabot[bot] in #13590
• Bump flipper from 1.3.0 to 1.3.6 by @dependabot[bot] in #13593
• Bump redis from 5.2.0 to 5.4.1 by @dependabot[bot] in #13601

New Contributors

• @deivid-rodriguez made their first contribution in #13594

Full Changelog: v5.3.1...v5.3.2

v5.3.1 Abalone

What's Changed

User-facing changes 👀

• Add report name and details to CSV export by @garethdavisrogers in #13474

Technical changes 🛠️

• Lock sprockets dependency to major version 3 by @mkllnk in #13516
• Automate Dependabot PRs to Code Review column via GitHub Action by @chahmedejaz in #13546
• Configure rake specs in one place by @mkllnk in #13548
• Remove project write permissions from Dependabot PR workflow by @chahmedejaz in #13570
• Make log-level configurable in staging by @mkllnk in #13564
• Deactivate Puffing Billy to avoid hanging specs by @mkllnk in #13575
• use pull_request_target to run action in context of the base repo rather than forked dependabot repo by @chahmedejaz in #13584

Dependencies 📦

• Bump rspec-rails from 6.1.2 to 7.1.1 by @dependabot[bot] in #13471
• Bump rswag-ui from 2.13.0 to 2.16.0 by @dependabot[bot] in #13472
• Bump rack from 2.2.18 to 2.2.19 by @dependabot[bot] in #13573
• Bump jasmine-core from 5.11.0 to 5.12.0 by @dependabot[bot] in #13565
• Bump rails-i18n from 7.0.9 to 7.0.10 by @dependabot[bot] in #13566
• Bump mime-types from 3.5.2 to 3.7.0 by @dependabot[bot] in #13567
• Bump undercover from 0.7.4 to 0.8.1 by @dependabot[bot] in #13568
• Bump digest from 3.1.1 to 3.2.0 by @dependabot[bot] in #13580

Full Changelog: v5.3.0...v5.3.1

v5.3.0 Ice Cream

What's Changed

Technical changes 🛠️

• Remove Stripe redirect monkeypatch and ensure reliable checkout flow by @chahmedejaz in #13506

Dependencies 📦

• Bump jasmine-core from 5.10.0 to 5.11.0 by @dependabot[bot] in #13551

Full Changelog: v5.2.5...v5.3.0

v5.2.5 Almond Sprouts

What's Changed

User-facing changes 👀

• Fixes Save button does not enable when removing only tag in OC by @cyrillefr in #13404
• Sort product list by 'on hand' amount by @chahmedejaz in #13533

Technical changes 🛠️

• Code cleanup by @mkllnk in #13524
• Replace darker-background, disable-dynamically, inline-alert and page-alert Angular directives by @cillian in #13502
• Fix url sanitization for Stripe authorisation URL by @rioug in #13487
• Remove retired hub_address feature by @mkllnk in #13530
• Adds coverage to homepage alert HTML content by @filipefurtad0 in #13523
• Load component stimulus controller with a shorter name by @rioug in #13531

Dependencies 📦

• Bump jasmine-core from 5.9.0 to 5.10.0 by @dependabot[bot] in #13517
• Bump leaflet-geosearch from 4.2.0 to 4.2.1 by @dependabot[bot] in #13536
• Bump leaflet-geosearch from 4.2.1 to 4.2.2 by @dependabot[bot] in #13549
• Bump rack from 2.2.14 to 2.2.18 by @dependabot[bot] in #13550

Full Changelog: v5.2.4...v5.2.5

v5.2.4 Polenta

What's Changed

User-facing changes 👀

• Fix missed I18n translations for enterprises sells options by @AndreyUsyaev in #13503

API changes ⚠️

• Accept tokens from Startin'Blox OIDC server by @mkllnk in #13475

Technical changes 🛠️

• Replace Timecop with Rails' time helpers by @mkllnk in #13480
• Add Rails 7.0 and 7.1 framework defaults by @mkllnk in #13468
• Fix link to enterprise payment methods tab by @dacook in #13496
• Update Gemfile.lock by @cesarlr in #13484
• Remove remaining Timecop usage by @mkllnk in #13512

New Contributors

• @AndreyUsyaev made their first contribution in #13503
• @cesarlr made their first contribution in #13484

Full Changelog: v5.2.3...v5.2.4

v5.2.3 Naan Paye

What's Changed

Technical changes 🛠️

• Added cmake dep to dockerfile and added script for db:schema:load tha… by @garethdavisrogers in #13444

Dependencies 📦

• Bump @floating-ui/dom from 1.7.3 to 1.7.4 by @dependabot[bot] in #13499
• Bump cipher-base from 1.0.4 to 1.0.6 by @dependabot[bot] in #13500
• Bump sha.js from 2.4.11 to 2.4.12 by @dependabot[bot] in #13501

New Contributors

• @garethdavisrogers made their first contribution in #13444

Full Changelog: v5.2.2...v5.2.3

v5.2.2 Hotfix

Reverting activemerchant and rexml due to a payment issue.

What's Changed

User-facing changes 👀

• 500 Error preventing check out with Stripe payment method by @chahmedejaz in #13492

Dependencies 📦

• Bump bullet from 7.1.6 to 8.0.8 by @dependabot[bot] in #13485

Full Changelog: v5.2.1...v5.2.2

v5.2.1 Watermelon 🍉

@kirst-n made their first contribution in #13455 💐

Description

What's Changed

API changes ⚠️

• Remove Person from product catalog by @mkllnk in #13451

Experimental features for testing 🚧

• Add permission module with example data by @mkllnk in #13350

Technical changes 🛠️

• Report code coverage on rake tasks by @mkllnk in #13447
• Losen engine gemspec requirement for Dependabot by @mkllnk in #13450
• Allow only existing deprecations in Rails 7.1 by @mkllnk in #13453
• Optimise loading of language-specific date pickers by @kirst-n in #13455
• [VINE] Redeem voucher before redirecting to payment url by @rioug in #13459

Dependencies 📦

• Bump nokogiri from 1.16.5 to 1.18.9 by @dependabot[bot] in #13460
• Bump webrick from 1.8.1 to 1.8.2 by @dependabot[bot] in #13461
• Bump rexml from 3.2.9 to 3.3.9 by @dependabot[bot] in #13463
• Bump cgi from 0.3.6 to 0.3.7 by @dependabot[bot] in #13464
• Bump rails-html-sanitizer from 1.6.0 to 1.6.1 by @dependabot[bot] in #13467
• Bump uri from 0.13.0 to 0.13.2 by @dependabot[bot] in #13466
• Bump thor from 1.3.1 to 1.4.0 by @dependabot[bot] in #13462
• Bump fugit from 1.8.1 to 1.11.1 by @dependabot[bot] in #13465
• Bump net-imap from 0.4.10 to 0.4.20 by @dependabot[bot] in #13469
• Bump rack from 2.2.11 to 2.2.14 by @dependabot[bot] in #13470
• Bump activerecord from 7.1.5.1 to 7.1.5.2 by @dependabot[bot] in #13478
• Bump timecop from 0.9.8 to 0.9.10 by @dependabot[bot] in #13477
• Bump pdf-reader from 2.12.0 to 2.15.0 by @dependabot[bot] in #13483

Full Changelog: v5.2.0...v5.2.1

v5.2.0 Kangaroo

What's Changed

ℹ️ Bump Rails to 7.1

This change is only technical but we are bumping the minor version because you will need to install libyaml-dev on your server before deployment. You can do that with ofn-install:

ansible-playbook playbooks/provision.yml -l example_prod -t common

• Install libyaml-dev to build psych gem for Rails 7.1 openfoodfoundation/ofn-install#1011

Technical changes 🛠️

• Remove unused test helper by @mkllnk in #13440
• Add gem puffing-billy to record browser requests by @mkllnk in #13442
• Check more code for coverage by @mkllnk in #13441
• Decommission Old Products UI and Related Code by @chahmedejaz in #13436
• Bump Rails to 7.1 by @chitty in #13232

Dependencies 📦

• Bump tmp from 0.2.1 to 0.2.4 by @dependabot[bot] in #13449

Full Changelog: v5.1.6...v5.2.0