v5.4.9 Injected Broast

What's Changed

User-facing changes 👀

• [Admin Products] Action menu fixes by @dacook in #14085
• Fix guest order cancellation redirecting to home page by @gbathree in #14113

Experimental features for testing 🚧

• Prevent creating a linked variant from a linked variant by @dacook in #14118

Technical changes 🛠️

• Fix Admin Bulk Products screen performance issue by @chahmedejaz in #14040
• Replace whenever with sidekiq scheduler by @mkllnk in #14119
• Dependabot cooldown by @dacook in #14126

Dependencies 📦

• Bump node-forge from 1.3.3 to 1.4.0 by @dependabot[bot] in #14109
• Bump pg from 1.6.2 to 1.6.3 by @dependabot[bot] in #14111
• Bump trix from 2.1.17 to 2.1.18 by @dependabot[bot] in #14115
• Bump bootsnap from 1.22.0 to 1.23.0 by @dependabot[bot] in #14112
• Bump active_storage_validations from 3.0.3 to 3.0.4 by @dependabot[bot] in #14116
• Bump whenever from 1.1.0 to 1.1.2 by @dependabot[bot] in #14117
• Bump devise-i18n from 1.15.0 to 1.16.0 by @dependabot[bot] in #14121
• Bump view_component from 4.1.1 to 4.5.0 by @dependabot[bot] in #14122
• Bump aws-sdk-s3 from 1.215.0 to 1.217.0 by @dependabot[bot] in #14129
• Bump rack from 2.2.22 to 2.2.23 by @dependabot[bot] in #14132

Full Changelog: v5.4.8...v5.4.9

v5.4.8 Green Cury

What's Changed

User-facing changes 👀

• Create linked variants by @dacook in #13912
• Fix inline error style in Add Manager dialog by @mvanhorn in #14061
• Fix: unify font-family across all .button elements by @gbathree in #14075
• Credit customers via Taler by @mkllnk in #13962
• Fix Products search timing out when creating a new subscription by @chahmedejaz in #14091
• Use real currency for Taler payments unless using demo backend by @mkllnk in #14101
• Fix authorization for removing enterprise managers for non-admins by @chahmedejaz in #14084

API changes ⚠️

• Add order number to Payment webhook payload by @mvanhorn in #14060

Technical changes 🛠️

• [Spec] Fix flaky order cycle spec by @rioug in #14078
• Fix specs after taler gem update by @mkllnk in #14106

Dependencies 📦

• Bump taler from 0.2.0 to 0.3.0 by @dependabot[bot] in #14064
• Bump i18n-tasks from 1.0.15 to 1.1.2 by @dependabot[bot] in #14079
• Bump private_address_check from 0.5.0 to 0.6.0 by @dependabot[bot] in #14086
• Bump haml from 6.3.0 to 7.2.0 by @dependabot[bot] in #14087
• Bump @babel/runtime from 7.28.6 to 7.29.2 by @dependabot[bot] in #14095
• Bump puffing-billy from 4.0.2 to 4.0.4 by @dependabot[bot] in #14097
• Bump bugsnag from 6.28.0 to 6.29.0 by @dependabot[bot] in #14098
• Bump @babel/preset-env from 7.29.0 to 7.29.2 by @dependabot[bot] in #14096
• Bump undercover from 0.8.3 to 0.8.4 by @dependabot[bot] in #14102
• Bump webmock from 3.26.1 to 3.26.2 by @dependabot[bot] in #14103
• Bump picomatch from 2.3.1 to 2.3.2 by @dependabot[bot] in #14104

New Contributors

• @mvanhorn made their first contribution in #14061
• @gbathree made their first contribution in #14075

Full Changelog: v5.4.7...v5.4.8

---

Green curry is a variety of curry originating from central Thailand. This is a curry based on coconut milk and fresh green chilies, the colour comes out creamy mild green or, as this colour is called in Thai, 'sweet green'.

v5.4.7 Spiegelei

What's Changed

User-facing changes 👀

• Report errors during checkout with Taler to user by @mkllnk in #13961

API changes ⚠️

• Remove compatibility redirect for APIv0 by @mkllnk in #14023

Technical changes 🛠️

• Update release task template by @RachL in #14046
• Expect UI change before emails by @mkllnk in #14020
• Remove dead code from Spree::Money by @mkllnk in #14021
• Use same ubuntu version for linters to share bundler cache by @dacook in #14052
• Fix wkhtmltopdf-binary installation error by @chahmedejaz in #14053
• Bump devise from 4.9.4 to 5.0.3 by @mkllnk in #14054

Dependencies 📦

• Bump puma from 6.5.0 to 7.2.0 by @dependabot[bot] in #14041
• Bump json from 2.18.1 to 2.19.1 by @dependabot[bot] in #14044
• Bump knapsack_pro from 9.2.2 to 9.2.3 by @dependabot[bot] in #14045
• Bump jest-environment-jsdom from 30.2.0 to 30.3.0 by @dependabot[bot] in #14048
• Bump jest from 30.2.0 to 30.3.0 by @dependabot[bot] in #14049
• Bump aws-sdk-s3 from 1.213.0 to 1.215.0 by @dependabot[bot] in #14050
• Bump mini_portile2 from 2.8.6 to 2.8.9 by @dependabot[bot] in #14051
• Bump sass-embedded from 1.97.3 to 1.98.0 by @dependabot[bot] in #14062
• Bump mini-css-extract-plugin from 2.10.0 to 2.10.1 by @dependabot[bot] in #14063
• Bump debug from 1.11.0 to 1.11.1 by @dependabot[bot] in #14065
• Bump loofah from 2.25.0 to 2.25.1 by @dependabot[bot] in #14070
• Bump json from 2.19.1 to 2.19.2 by @dependabot[bot] in #14074
• Bump bcrypt from 3.1.20 to 3.1.22 by @dependabot[bot] in #14076
• Bump flatted from 3.3.3 to 3.4.2 by @dependabot[bot] in #14077

Full Changelog: v5.4.6...v5.4.7

v5.4.6 Croissant

What's Changed

User-facing changes 👀

• [Payment with Credit] Fix manual crediting customer by @rioug in #14022

Technical changes 🛠️

• Fix shared login sessions between staging and production by @AwsAqh in #13975

Dependencies 📦

• Bump @floating-ui/dom from 1.7.5 to 1.7.6 by @dependabot[bot] in #14010
• Bump flipper-ui from 1.3.6 to 1.4.0 by @dependabot[bot] in #14011
• Bump postcss from 8.5.6 to 8.5.8 by @dependabot[bot] in #14009
• Bump terser-webpack-plugin from 5.3.16 to 5.3.17 by @dependabot[bot] in #14024
• Bump aws-sdk-s3 from 1.208.0 to 1.213.0 by @dependabot[bot] in #14026
• Bump trix from 2.1.16 to 2.1.17 by @dependabot[bot] in #14039
• Bump webpack from 5.105.3 to 5.105.4 by @dependabot[bot] in #14025
• Bump valid_email2 from 5.2.3 to 7.0.15 by @dependabot[bot] in #13985

New Contributors

• @AwsAqh made their first contribution in #13975

Full Changelog: v5.4.5...v5.4.6

v5.4.5 Trifle

Congratulations to @pavelk-lab, @zilton7 and @marincarroll for there first contribution 🎉 !

What's Changed

User-facing changes 👀

• White labelling all customer facing emails by @drummer83 in #13248
• 13864-Remove dead feature to re-arrange variants by @arunguleria in #13958
• Repair rounding issue on totals in reports by @pacodelaluna in #13785
• Remove Angular from Enterprise > Settings > Users section by @cillian in #13895
• Payment with credit by @rioug in #13963
• Improve accessibility of admin pagination by @marincarroll in #13702

Technical changes 🛠️

• Fix Rails 7.2 serialize deprecation warnings by @pavelk-lab in #13944
• Replace Angular expand/collapse with native HTML
  /

  for brand story by @pavelk-lab in #13943
• Refactor admin CSS: Promote v3 to canonical admin styles by @prikeshsavla in #13835
• Update release issue template by @RachL in #13979
• Repair ProxyOrder to support order cycle without closing time by @pacodelaluna in #13669
• Fix Spree::CreditCard#brand= deprecation for Rails 7.2 compatibility by @zilton7 in #13951
• Stabilise actions_spec by @mkllnk in #13964
• Add gem for spring to listen to filesystem changes efficiently by @mkllnk in #13987
• 14004 link correct customer to order by @rioug in #14008

Dependencies 📦

• Bump minimatch from 3.1.2 to 3.1.5 by @dependabot[bot] in #13977
• Bump i18n from 1.14.7 to 1.14.8 by @dependabot[bot] in #13957
• Bump pdf-reader from 2.15.0 to 2.15.1 by @dependabot[bot] in #13984
• Bump hotkeys-js from 4.0.0 to 4.0.1 by @dependabot[bot] in #13983
• Bump tom-select from 2.5.1 to 2.5.2 by @dependabot[bot] in #13982
• Bump hotkeys-js from 4.0.1 to 4.0.2 by @dependabot[bot] in #13988
• Bump vcr from 6.3.1 to 6.4.0 by @dependabot[bot] in #13989
• Bump svgo from 4.0.0 to 4.0.1 by @dependabot[bot] in #13990
• Bump immutable from 5.1.4 to 5.1.5 by @dependabot[bot] in #13991
• Bump dompurify from 3.3.1 to 3.3.2 by @dependabot[bot] in #14003
• Bump webpack from 5.105.2 to 5.105.3 by @dependabot[bot] in #14005
• Bump turbo-rails from 2.0.20 to 2.0.23 by @dependabot[bot] in #14006

New Contributors

• @pavelk-lab made their first contribution in #13944
• @zilton7 made their first contribution in #13951
• @marincarroll made their first contribution in #13702

Full Changelog: v5.4.4...v5.4.5

---

Trifle is a layered dessert of English origin. The usual ingredients are a thin layer of ladyfingers or sponge cake soaked in sherry or another fortified wine, a fruit element (fresh or jelly), custard and whipped cream layered in that ascending order in a glass dish.

https://en.wikipedia.org/wiki/Trifle

v5.4.4 Karelian pie

What's Changed

User-facing changes 👀

• Persist tag filters when updating a product by @chahmedejaz in #13934
• Add "void" action to Taler payment admin page by @mkllnk in #13945
• Update Finnish date and datetime formats in locale file by @chahmedejaz in #13960

Technical changes 🛠️

• Remove unnecessary erb compilation on JS file by @mkllnk in #13946

Dependencies 📦

• Bump webpack from 5.105.1 to 5.105.2 by @dependabot[bot] in #13947
• Bump ajv from 6.12.6 to 6.14.0 by @dependabot[bot] in #13950
• Bump sidekiq-scheduler from 5.0.3 to 6.0.1 by @dependabot[bot] in #13948
• Bump webpack-sources from 3.3.3 to 3.3.4 by @dependabot[bot] in #13953
• Bump postcss-loader from 8.2.0 to 8.2.1 by @dependabot[bot] in #13952
• Bump cuprite from 0.15 to 0.17 by @dependabot[bot] in #13709
• Bump css-loader from 7.1.3 to 7.1.4 by @dependabot[bot] in #13956

Full Changelog: v5.4.3...v5.4.4

v5.4.3 Pakora

What's Changed

User-facing changes 👀

• Update Finnish date and datetime formats in locale file by @chahmedejaz in #13908
• Faster page loads for previously unusable Enterprise Fee reports by @chahmedejaz in #13823
• Stop pre-selecting Paypal when creating a payment method by @mkllnk in #13920

Technical changes 🛠️

• Allow S3-compatible provider for db2fog configuration by @pacodelaluna in #13919
• Upgrade redis-github-action to 1.8.1 by @rioug in #13923
• Simplify refund logic by @mkllnk in #13902
• Bump rack from 2.2.21 to 2.2.22 by @mkllnk in #13937
• Bump faraday from 2.9.0 to 2.14.1 by @mkllnk in #13940

Dependencies 📦

• Bump @babel/preset-env from 7.28.6 to 7.29.0 by @dependabot[bot] in #13909
• Bump @babel/core from 7.28.6 to 7.29.0 by @dependabot[bot] in #13910
• Bump tom-select from 2.4.3 to 2.4.5 by @dependabot[bot] in #13913
• Bump @babel/plugin-transform-runtime from 7.28.5 to 7.29.0 by @dependabot[bot] in #13914
• Bump webpack from 5.104.1 to 5.105.0 by @dependabot[bot] in #13918
• Bump qs from 6.14.1 to 6.14.2 by @dependabot[bot] in #13921
• Bump sass-loader from 16.0.6 to 16.0.7 by @dependabot[bot] in #13924
• Bump responders from 3.1.1 to 3.2.0 by @dependabot[bot] in #13791
• Bump bullet from 8.0.8 to 8.1.0 by @dependabot[bot] in #13801
• Bump active_storage_validations from 3.0.2 to 3.0.3 by @dependabot[bot] in #13809
• Bump omniauth-rails_csrf_protection from 1.0.2 to 2.0.1 by @dependabot[bot] in #13825
• Bump rubocop-rspec from 3.8.0 to 3.9.0 by @dependabot[bot] in #13926
• Bump bootsnap from 1.19.0 to 1.22.0 by @dependabot[bot] in #13927
• Bump pry from 0.15.2 to 0.16.0 by @dependabot[bot] in #13928
• Bump tom-select from 2.4.5 to 2.4.6 by @dependabot[bot] in #13925
• Bump listen from 3.9.0 to 3.10.0 by @dependabot[bot] in #13931
• Bump knapsack_pro from 8.4.0 to 9.2.2 by @dependabot[bot] in #13936
• Bump webpack from 5.105.0 to 5.105.1 by @dependabot[bot] in #13935
• Bump spring from 4.4.0 to 4.4.2 by @dependabot[bot] in #13938
• Bump rubocop from 1.81.7 to 1.84.2 by @dependabot[bot] in #13930
• Bump tom-select from 2.4.6 to 2.5.1 by @dependabot[bot] in #13941
• Bump rubocop-rails from 2.34.2 to 2.34.3 by @dependabot[bot] in #13942
• Bump hotkeys-js from 3.13.15 to 4.0.0 by @dependabot[bot] in #13820

Full Changelog: v5.4.2...v5.4.3

v5.4.2 Black Forest Cake

What's Changed

User-facing changes 👀

• Add Taler payment method by @mkllnk in #13883
• 13893-hiding too many columns in Admin product list, the table layout breaks by @arunguleria in #13897
• Fix Orders and fulfillment report fetches product name from product list (and not from order) by @ashishp91 in #13261

Technical changes 🛠️

• Add 7 day cooldown to Dependabot updates by @mkllnk in #13896
• Remove Cable Ready responses from User related controllers by @wandji20 in #12997
• Remove rails-sass dependency by @rioug in #13857
• Fix function call by @dacook in #13898
• Upgrade to shakapaker v8 by @rioug in #13859
• Use wicked pdf fork by @rioug in #13907

Dependencies 📦

• Bump qs from 6.14.0 to 6.14.1 by @dependabot[bot] in #13901

Full Changelog: v5.4.1...v5.4.2

---

v5.4.1 Flädlesuppe

What's Changed

User-facing changes 👀

• Allow to select "none" in variant tags dropdown by @chahmedejaz in #13826

Technical changes 🛠️

• Upgrade to shakapaker v7 by @rioug in #13849
• Clean up tmp dev files by @mkllnk in #13873
• Fail setup script when nodenv is missing by @mkllnk in #13886

Dependencies 📦

• Bump sass-embedded from 1.97.2 to 1.97.3 by @dependabot[bot] in #13878
• Bump @floating-ui/dom from 1.7.4 to 1.7.5 by @dependabot[bot] in #13888
• Bump css-loader from 7.1.2 to 7.1.3 by @dependabot[bot] in #13889

Full Changelog: v5.4.0...v5.4.1

• https://en.wikipedia.org/wiki/Fl%C3%A4dle

v5.4.0 BBQ

What's Changed

User-facing changes 👀

• [VINE] Show helpful message if voucher expired by @dacook in #13528

API changes ⚠️

• [DFC Anonymized orders endpoint] Fix unit_type for affiliate sales data by @dacook in #13831

Technical changes 🛠️

• Remove unused switch to allow checkout on failures by @mkllnk in #13862
• Bump Ruby from 3.3.10 to 3.4.8 by @mkllnk in #13861
• Upgrade to shakapaker by @rioug in #13828
• Merge and simplify rspec config by @mkllnk in #13868
• Simplify code listing available payment method types by @mkllnk in #13834

Dependencies 📦

• Bump cross-spawn from 7.0.3 to 7.0.6 by @dependabot[bot] in #13869
• Bump sass-embedded from 1.96.0 to 1.97.2 by @dependabot[bot] in #13870
• Bump postcss-preset-env from 10.5.0 to 10.6.1 by @dependabot[bot] in #13871
• Bump lodash from 4.17.21 to 4.17.23 by @dependabot[bot] in #13872
• Bump @babel/core from 7.28.5 to 7.28.6 by @dependabot[bot] in #13874
• Bump webpack from 5.104.0 to 5.104.1 by @dependabot[bot] in #13875
• Bump mini-css-extract-plugin from 2.9.4 to 2.10.0 by @dependabot[bot] in #13876

Full Changelog: v5.3.11...v5.4.0