https://leapgraph.com/graphql-api-security

This article mentions several add-on packages that Reaction may want to use. This issue is simply to investigate whether these vulnerabilities are present and try adding the packages to solve them.

This is the continuation of spree/spree#10849. We still have some jQuery dependant code in the spree_frontend app/assets/javascript directory which we will need to rewrite to pure JS. There's no rationale for using jQuery anymore as all of the features are available in pure JS.

Preconditions (*)

1. Magento 2.3.3 CE & 2.4-

What is the motivation for adding / enhancing this feature?

Write Unit tests for HTTP2 Server Push Module (you can find it on develop branch)

What are the acceptance criteria

• Unit tests for

Is your feature request related to a problem? Please describe.
We held stock for when user check out with product and payment is not yet completed. The stock is held and cannot be used unless payment is completed (which reduces the stock), or if the order is cancelled (which increases the stock).

A small enhancement, like adding in order note that "Stock is held for X minutes for payment"

Sylius version affected: v1.4.4

Description

Sylius says the category is used and cannot be removed, when we try to remove an empty category.

We figured out that we had some products with the taxon as "Main Taxon".

Steps to reproduce

1. Add a taxon, keep it empty of products.
2. Update a product to use the newly created taxon as Main taxon.
3. Try to remove the taxo

Describe the bug

After disabling the feature Stock Management in BO, when I try to create an Order from BO, the qty_in_stock label is still displayed.

Expected behavior

the qty_in_stock label is hidden.

Steps to Reproduce

Steps to reproduce the behavior:

1. BO>CONFIGURE>Product Settings
2. Scroll down to Products stock block
3. Disable th

Solidus Version:
2.11.5, master

ActiveModel::UnknownAttributeError

To Reproduce

Trying to create a product with the permalink attribute included:

curl -si \
--header 'Authorization: Bearer <PLACE_API_KEY_HERE>' \
--header 'content-type: application/json' \
--reque

Currently the folder framework/commerce has the core schema types that must be used by every provider. Currently only some types are available: https://github.com/vercel/commerce/blob/master/framework/commerce/types.ts#L10-L92

MIssing core types should be included there too so we can stop using any in different places on the UI. The task is to replace the types that have a TODO with a pro

Improve the tier prices feature - add info like "Buy 2 in x.xx$ and save x%"

Describe how this feature will help us improve
Describe why do you think this feature is needed.
This component will be needed in MyAccount page or e.g in Header as a logged-in guest.