🚨 SECURITY RELEASE 🚨

TL;DR

• SECURITY FIX: Added CSRF protection for the following action:

  • marking order's payment as completed
  • marking order's payment as refunded
  • marking product review as accepted
  • marking product review as rejected

Details

• #9475 Make Stalebot less annoying (@Zales0123)
• #9491 [Documentation] Document Forum in the support section (@CoderMaggie)
• #9515 [Documentation] Fix typos (@adrienlucas)
• #9558 Use ...Prototype() instead of prototype('...') in Symfony configuration (@pamil)

🚨 SECURITY RELEASE 🚨

TL;DR

• SECURITY FIX: Added CSRF protection for the following action:

  • marking order's payment as completed
  • marking order's payment as refunded
  • marking product review as accepted
  • marking product review as rejected

Details

• #9475 Make Stalebot less annoying (@Zales0123)
• #9491 [Documentation] Document Forum in the support section (@CoderMaggie)
• #9515 [Documentation] Fix typos (@adrienlucas)
• #9558 Use ...Prototype() instead of prototype('...') in Symfony configuration (@pamil)

🚨 SECURITY RELEASE 🚨

TL;DR

• SECURITY FIX: Added CSRF protection for the following action:

  • marking order's payment as completed
  • marking order's payment as refunded
  • marking product review as accepted
  • marking product review as rejected

Details

• #9475 Make Stalebot less annoying (@Zales0123)
• #9515 [Documentation] Fix typos (@adrienlucas)
• #9491 [Documentation] Document Forum in the support section (@CoderMaggie)

TL;DR

• It's no longer required to put Sylius bundles before Doctrine Bundle (#9527)
• There's an official plugins list in README (#9493)
• ResourceBundle CRUD routing generator works with bundleless templates (#9534)

Details

• #9340 the name of file was wrong in docu (@amirkoklan)
• #9345 [HOTFIX] Missing configuration for channel in sonata (@lchrusciel)
• #9487 Improve use of Semantic's cards in frontend (@mbabker)
• #9488 Describe upgrade process for 1.1.x -> 1.2.0 (@pamil)
• #9493 Document officially supported plugins in the README (@pamil)
• #9527 [ResourceBundle] Fix DoctrineTargetEntitiesResolverPass priority to avoid mapping issues. (@adrienlucas)
• #9534 [ResourceBundle] fix routing templates for sf4 (@loic425)
• #9537 [Admin] Add missing form parameter to sonata form events (@GSadee)
• #9539 [minor] SCA (@kalessil)
• #9540 PHPStan 0.10 upgrade & road to level 2 checks (@pamil)
• #9541 Require Symfony 4.1.1 and remove hotfixes for 4.1.0 (@pamil)
• #9545 Remove duplicated copyright note (@enekochan)
• #9546 Added title to product reviews, fixes #9425 (@richardjohn, @adrienlucas, @Zales0123)
• #9548 Unify catch block in ShopBasedCartContext (@pamil)
• #9550 Mention roadmap in README (@pamil)
• #9552 Lower PHPStan level 2 errors from 222 to 9 (@pamil)
• #9555 Add Sylius/CustomerOrderCancellationPlugin to the list of official plugins (@pamil)

TL;DR

• It's no longer required to put Sylius bundles before Doctrine Bundle (#9527)
• There's an official plugins list in README (#9493)

Details

• #9340 the name of file was wrong in docu (@amirkoklan)
• #9345 [HOTFIX] Missing configuration for channel in sonata (@lchrusciel)
• #9487 Improve use of Semantic's cards in frontend (@mbabker)
• #9493 Document officially supported plugins in the README (@pamil)
• #9527 [ResourceBundle] Fix DoctrineTargetEntitiesResolverPass priority to avoid mapping issues. (@adrienlucas)
• #9537 [Admin] Add missing form parameter to sonata form events (@GSadee)
• #9539 [minor] SCA (@kalessil)
• #9540 PHPStan 0.10 upgrade & road to level 2 checks (@pamil)
• #9546 Added title to product reviews, fixes #9425 (@richardjohn, @adrienlucas, @Zales0123)
• #9548 Unify catch block in ShopBasedCartContext (@pamil)
• #9550 Mention roadmap in README (@pamil)
• #9552 Lower PHPStan level 2 errors from 222 to 9 (@pamil)
• #9555 Add Sylius/CustomerOrderCancellationPlugin to the list of official plugins (@pamil)

TL;DR

• Added hotfixes for Symfony 4.1.0 (#9476)
• See release notes for v1.2.0-RC and v1.2.0-BETA for more information

Details

• #9418 Update Model.ProductOption.yml (@severino32)
• #9419 Moved IE css polyfills (@czende)
• #9424 Lazy load Doctrine event listeners (@teohhanhui)
• #9461 Added note about LiipImagineBundle upgrade (@sweoggy)
• #9464 Fixed typo in PayumController (@qkdreyer)
• #9465 [Documentation] Fix deprecated link to repository (@CoderMaggie)
• #9466 Document "event" option in resource routing (@Zales0123)
• #9467 Update outdated method prototype('array') with arrayPrototype() (@jafaronly)
• #9470 [Documentation] Updated link to Payum docs (@pogorivan)
• #9476 Enhance workarounds while waiting for Symfony 4.1.1 (@pamil)

TL;DR

• Lots of bugfixes

Details

• #9418 Update Model.ProductOption.yml (@severino32)
• #9419 Moved IE css polyfills (@czende)
• #9424 Lazy load Doctrine event listeners (@teohhanhui)
• #9436 [Addressing] Fix default validation groups of AddressType (@vvasiloi)
• #9440 Fix secret parameter resolving (@pamil)
• #9444 [Documentation] Fixed typo in note about --force-with-lease flag (@pmikolajek)
• #9462 Remove two redundant services from CoreBundle (@jafaronly)
• #9463 Update platform-sh.rst (@antonioperic)
• #9464 Fixed typo in PayumController (@qkdreyer)
• #9465 [Documentation] Fix deprecated link to repository (@CoderMaggie)
• #9466 Document "event" option in resource routing (@Zales0123)
• #9467 Update outdated method prototype('array') with arrayPrototype() (@jafaronly)
• #9470 [Documentation] Updated link to Payum docs (@pogorivan)
• #9477 Remove labels descriptions in docs (@pamil)
• #9480 [docs] Use app/config/routing/admin.yml everywhere (@gido)

TL;DR

• This is the last bugfix release of 1.0 branch
• Lots of bugfixes

Details

• #9418 Update Model.ProductOption.yml (@severino32)
• #9419 Moved IE css polyfills (@czende)
• #9424 Lazy load Doctrine event listeners (@teohhanhui)
• #9436 [Addressing] Fix default validation groups of AddressType (@vvasiloi)
• #9444 [Documentation] Fixed typo in note about --force-with-lease flag (@pmikolajek)
• #9462 Remove two redundant services from CoreBundle (@jafaronly)
• #9464 Fixed typo in PayumController (@qkdreyer)
• #9465 [Documentation] Fix deprecated link to repository (@CoderMaggie)
• #9466 Document "event" option in resource routing (@Zales0123)
• #9467 Update outdated method prototype('array') with arrayPrototype() (@jafaronly)
• #9470 [Documentation] Updated link to Payum docs (@pogorivan)
• #9477 Remove labels descriptions in docs (@pamil)

TL;DR

• Added support for Symfony ^4.1 (#9454)
• Dropped support for Symfony 4.0 (#9454)
• Added ability to use custom services as factories / repositories in ResourceBundle (#9422, #9442)
• Improved default shipping method resolving (#9398)

Details

• #9398 [Core] Default shipping method basing on category fix (@Zales0123, @pamil, @stefandoorn)
• #9422 Add ability to use a custom service as factory (@pamil, @pjedrzejewski)
• #9436 [Addressing] Fix default validation groups of AddressType (@vvasiloi)
• #9440 Fix secret parameter resolving (@pamil)
• #9441 Remove vendorPath command-line argument from root gulpfile (@teohhanhui)
• #9442 Add an ability to use custom resource repositories (@pamil)
• #9444 [Documentation] Fixed typo in note about --force-with-lease flag (@pmikolajek)
• #9454 Symfony 4.1 support (together with dropping Symfony 4.0 support) (@pamil, @Zales0123)
• #9456 Add documentation for using custom repository service in ResourceBundle (@pamil)
• #9458 [docs] fix server:start command (@hiousi)
• #9462 Remove two redundant services from CoreBundle (@jafaronly)
• #9463 Update platform-sh.rst (@antonioperic)

TL;DR

• Symfony 4 support (#9062)
• Liip/ImagineBundle requirement changed from ^1.9 to ^2.0 (#9380)
• Introduced Babel and Gulp 4 in our frontend toolset (#9405)

Details

• #8629 [Shipping][OrderProcessing] Default shipping method fixes (@Zales0123)
• #9019 Return event response for initialize update event (@dannyvw)
• #9162 Update all occurrences of .dev to .test (@jackbentley)
• #9185 [ResourceBundle] Add the controller tag (@dragosprotung)
• #9212 [Reviews] nullable title for reviews (@loic425)
• #9255 Changes form channel color from text to color input type (@Tetragramat)
• #9306 [Resource] Make sure Sylius resources services are public (@Zales0123)
• #9308 [Adjustment] Inject adjustment types that shall be cleared (@Zales0123)
• #9324 ChannelNotFoundException updated to other exceptions' format without BC break (#9324) (@bartoszpietrzak1994)
• #9330 Disable deprecated "form mapping" feature in SonataCoreBundle (@teohhanhui)
• #9366 [BC BREAK] Symfony 4.0 compatibility, part #1 (@pamil)
• #9372 Make subpackages compatible with Symfony 4 (@pamil)
• #9373 Make application compatible with not-yet-released Mink release (@pamil)
• #9377 Make packages require ^1.2 packages (@pamil)
• #9379 Replace outdated "Symfony2" with "Symfony" in package descriptions (@pamil)
• #9380 Use stable Liip/ImagineBundle ^2.0 (@pamil)
• #9382 Define commands as services (@pamil)
• #9383 Use %kernel.project_dir% instead of %kernel.root_dir% (@pamil)
• #9385 Fix %kernel.project_dir% directory usage (@pamil)
• #9386 Use stable Mink BrowserKit driver (@pamil)
• #9405 Upgrade to gulp 4 (@teohhanhui)
• #9410 Fixed missing orderby in product variants (@Bencsi)
• #9426 Random Symfony 4 related fixes (@pamil)
• #9428 Symfony 4: Behat scenarios isolation + random fixes (@pamil)
• #9429 Require passing build for Symfony 4 on Travis (@pamil)