Skip to content

Conversation

@github-actions
Copy link

This PR has been generated automatically.

Remember! The upmerge should always be merged with using Merge pull request button.

In case of conflicts, please resolve them manually with usign the following commands:

git fetch upstream
gh pr checkout <this-pr-number>
git merge upstream/5.0 -m "Resolve conflicts between 4.1 and 5.0"

dpfaffenbauer and others added 24 commits January 20, 2026 08:04
Co-authored-by: dpfaffenbauer <5981845+dpfaffenbauer@users.noreply.github.com>
Co-authored-by: dpfaffenbauer <5981845+dpfaffenbauer@users.noreply.github.com>
Modified objectMultihref.js to iterate through all selected records in
data.records instead of only processing the first record. This enables
users to select multiple data objects (products, categories, customers,
etc.) and drag them all at once into condition lists.

Fixes the issue where each data object had to be added individually to
condition lists in cart price rules, product price rules, shipping rules,
and other rule configurations.

Co-authored-by: dpfaffenbauer <5981845+dpfaffenbauer@users.noreply.github.com>
Co-authored-by: dpfaffenbauer <5981845+dpfaffenbauer@users.noreply.github.com>
…OrderShipmentController

Replace exception messages and stack traces in client responses with generic error
messages. Detailed error information is now logged server-side using LoggerInterface.

Fixes security vulnerability where internal implementation details were exposed to clients.

Co-authored-by: dpfaffenbauer <5981845+dpfaffenbauer@users.noreply.github.com>
Address code review feedback to return appropriate error status code
instead of HTTP 200 when an error occurs during PDF rendering.

Co-authored-by: dpfaffenbauer <5981845+dpfaffenbauer@users.noreply.github.com>
… pattern

Co-authored-by: dpfaffenbauer <5981845+dpfaffenbauer@users.noreply.github.com>
Address code review feedback to use for-of loops for simpler iteration
over data.records arrays in both onNodeOver and onNodeDrop handlers.

Co-authored-by: dpfaffenbauer <5981845+dpfaffenbauer@users.noreply.github.com>
…over

Co-authored-by: dpfaffenbauer <5981845+dpfaffenbauer@users.noreply.github.com>
Fix outdated Menu Bundle docs for ExtJs event handling
…ort-again

Add multi-select drag & drop support for objectMultihref condition lists
Address review feedback to remove logging calls and simplify error responses
while still preventing information exposure.

Co-authored-by: dpfaffenbauer <5981845+dpfaffenbauer@users.noreply.github.com>
Co-authored-by: dpfaffenbauer <5981845+dpfaffenbauer@users.noreply.github.com>
…rkets

Add CLI command for setting up states/regions for additional countries
Co-authored-by: dpfaffenbauer <5981845+dpfaffenbauer@users.noreply.github.com>
[MessengerBundle] Add auto-refresh and chart tooltip
@github-actions
Copy link
Author


Thank you for your submission, we really appreciate it. Like many open-source projects, we ask that you all sign our Contributor License Agreement before we can accept your contribution. You can sign the CLA by just posting a Pull Request Comment same as the below format.


I have read the CLA Document and I hereby sign the CLA


1 out of 2 committers have signed the CLA.
✅ (dpfaffenbauer)[https://github.com/dpfaffenbauer]
❌ @Copilot
You can retrigger this bot by commenting recheck in this Pull Request. Posted by the CLA Assistant Lite bot.

…re-issue

Fix information exposure in OrderInvoiceController and OrderShipmentController
@sonarqubecloud
Copy link

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants