Pull Request Explorer

Summary

Release 3.23.31

Release 3.23.31 includes bug fixes for product media creation, address validation, and GraphQL subscription handling.

Health Assessment

• • Fast, single-commit release with minimal changes and no review friction.

Summary

Return NOT_FOUND on concurrent product deletion

Ensures product media creation fails gracefully when a product is deleted during upload, preventing foreign key errors and improving API reliability.

Health Assessment

• • Long review cycle indicates complexity or low priority; single commit suggests minimal rework.

Summary

Handle product deletion during media creation

Ensures the API returns NOT_FOUND if a product is deleted while creating media, preventing foreign key errors and improving reliability.

Health Assessment

• • Quick fix of a concurrency bug with minimal code changes; low risk and fast turnaround.

Summary

Allow skipping address validation in customerCreate and customerUpdate

Adds the ability for staff to skip address validation when creating or updating customers, streamlining workflows and reducing friction in the admin interface.

Health Assessment

• • The PR was reviewed and merged within 1.1 hours, indicating a smooth, low‑risk change with minimal impact on the codebase.

Summary

Allow skipping address validation in customerCreate and customerUpdate

Enables the skipValidation flag for address input in customer creation and update mutations, improving flexibility for user management without changing permissions.

Health Assessment

• • Quick turnaround with minimal rework indicates a straightforward bug fix.

Summary

Remove obsolete attribute flags from sample data

This PR cleans up sample data by removing deprecated attribute fields, preventing database errors during data population and tests.

Health Assessment

• • Quick fix with minimal changes, resolved in under 30 minutes, indicating efficient review and low complexity.

Summary

Update oss sample db

Adds comprehensive sample data to the open-source database, aligning it with the cloud version to improve developer experience and testing. The update includes realistic products, media, promotions, tax configurations, and vouchers, reducing setup time for developers.

Health Assessment

• • Long cycle time and large code changes suggest significant effort and potential risk; review was delayed, indicating possible blocker or low priority.

Summary

Remove deprecated Sendgrid email plugin

Eliminates an unused SendGrid plugin and its dependencies, simplifying the codebase and reducing maintenance overhead.

Health Assessment

• • Fast cycle time and minimal review suggest confidence in the removal; large code deletion was straightforward with no reported issues.

Summary

Remove attribute presentation flags from ORM

This change removes legacy presentation flag fields from the Attribute model, simplifying the data schema and improving performance for attribute queries.

Health Assessment

• • The PR had a long cycle time and review period, indicating significant coordination and testing effort for the migration and related tests.

Summary

Remove no-op discounted-price compat tasks

Drop obsolete Celery tasks to clean up code and reduce maintenance overhead.

Health Assessment

• • Quick review and merge within 4 hours, minimal code churn, straightforward removal of dead code.

Summary

Remove unused taxed_prices template tag

Clean up legacy server-rendered storefront code, removing unused template tag and HTML template, reducing codebase size and potential maintenance overhead.

Health Assessment

• • Quick cleanup with single commit, minimal review, fast merge.

Summary

Reject GraphQL subscription operations sent over HTTP

Blocks GraphQL subscription operations sent via HTTP, returning a clear error and logging metrics, improving API security and reliability.

Health Assessment

• • Quick fix with minimal changes, resolved in a single commit and review, indicating low complexity and risk.

Summary

Reject HTTP GraphQL subscription operations

Prevents accidental execution of subscription operations over HTTP, improving security and stability.

Health Assessment

• • Quick resolution with minimal changes, indicating a straightforward bug fix.

Summary

Release 3.23.30

This release delivers critical bug fixes for file attribute handling and image decoding limits, enhancing stability and performance for end‑users.

Health Assessment

• • Rapid release with minimal changes and no significant rework.

Summary

Add image size limits

Adds support for limiting the size of images uploaded prior to loading them, improving validation and preventing large uploads.

Health Assessment

• • The PR was reviewed and merged within 20 hours, indicating a smooth review process and low complexity.

Summary

Remove permission-restricted file cleanup in mutations

This change eliminates the need for clients to have permission to delete attribute values when updating files, simplifying client logic and reducing permission overhead.

Health Assessment

• • The PR was reviewed and merged within minutes, indicating a straightforward change with minimal risk.

Summary

Remove detached FILE attribute values in mutations

This change cleans up orphaned FILE attribute values during object updates, eliminating the need for clients to use the restricted attributeValueDelete permission, simplifying file management and reducing permission overhead.

Health Assessment

• • Long review cycle and large code change suggest significant complexity and potential risk; the PR required extended review time before merging.

Summary

Limit image pixel decoding to prevent OOM

Adds a pixel limit to image decoding, preventing memory exhaustion and improving stability for large images.

Health Assessment

• • Quick, single-commit fix with minimal review, indicating low complexity and risk.

Summary

Limit image pixel decoding to prevent OOM

Prevents out‑of‑memory crashes by bounding decoded image size, improving stability for image uploads.

Health Assessment

• • Quick turnaround with minimal rework, indicating a straightforward bug fix.

Summary

Add image pixel limit to prevent OOM

Prevents memory exhaustion from oversized images, ensuring stable uploads and thumbnail generation.

Health Assessment

• • The PR addressed a critical memory issue by adding pixel limit validation, required multiple iterations after review, and took over 11 days to merge, indicating significant complexity and risk.

Summary

bump pytest-cov from 6.3.0 to 7.1.0

Updates the test coverage tool to the latest version, ensuring accurate coverage metrics and compatibility with new features.

Health Assessment

• • Quick dependency bump with minimal changes, merged within hours.

Summary

bump requests-hardened from 1.3.0b1 to 1.3.0

Updates the requests-hardened library to the latest patch, improving security and bug fixes.

Health Assessment

• • Fast merge with minimal changes, typical dependency bump.

Summary

build(deps): bump phonenumberslite from 9.0.32 to 9.0.36

Updates the phonenumberslite dependency to a newer version, ensuring compatibility and security.

Health Assessment

• • Quick dependency update with minimal review, indicating low risk and efficient process.

Summary

Release version 3.22.68

This release updates dependencies and fixes migration issues, improving stability and performance for users.

Health Assessment

• • Release PR with minimal code changes, merged quickly after a single review cycle.

Summary

Remove deprecated preorder GraphQL API

Eliminates legacy preorder endpoints, reducing maintenance overhead and simplifying the API surface for customers.

Health Assessment

• • The PR had a long cycle time and required multiple merge commits after the initial review, indicating significant rework and potential blockers. The large number of deletions and file changes suggest a high-impact refactor that may affect downstream consumers.

Summary

build(deps-dev): bump pytest-memray from 1.8.0 to 1.9.0

Updates the pytest-memray development dependency to the latest patch, ensuring compatibility with newer Python versions and improved memory leak detection.

Health Assessment

• • Long cycle time due to automated dependabot PRs; minimal code changes; low risk.

Summary

Bump sendgrid dependency

Updates the SendGrid library to the latest patch, ensuring compatibility and security fixes for email delivery.

Health Assessment

• • The dependency update was merged after a 9‑day cycle, indicating a slow review process, but the change itself is minimal and low risk.

Summary

Bump pre-commit dependency to 4.6.1

Updates the pre-commit tool to the latest patch, ensuring improved performance and bug fixes for the development workflow.

Health Assessment

• • Dependency bump took over two days, but no review or rework, indicating a straightforward update.

Summary

Release 3.23.29

This release updates dependencies, fixes migration issues, and improves logging and test reliability, ensuring stable operation for production deployments.

Health Assessment

• • Rapid release with minimal changes and quick review indicates a low-risk, routine maintenance update.

Summary

Update migrations skill

Update skill based on internal doc from Notion

Health Assessment

• • Long cycle time due to merging main branches; no review comments; likely a straightforward documentation update.

Summary

Upgrade uvicorn to 0.52.1

Updates the ASGI server to a newer version, improving performance and security while maintaining compatibility.

Health Assessment

• • Fast review and merge with minimal changes indicates low complexity and risk.

Summary

Map JSON log levelname to level field

Ensures consistent log level mapping for JSON logs, improving log parsing and monitoring.

Health Assessment

• • Quick fix with minimal changes, merged within 30 minutes of opening.

Summary

Map JSON log levelname to level

Updates logging to map levelname to level for consistency across JSON logs, improving log parsing and monitoring.

Health Assessment

• • Quick backport with minimal changes, fast review and merge.

Summary

Map log levelname to level for platform compatibility

Ensures log severity mapping works across platforms like Dash0, improving observability.

Health Assessment

• • Rapid review and merge with minimal changes indicate low complexity and risk.