Pull Request Explorer

Summary

Release 3.22.59

This release updates dependencies and bumps the version to 3.22.59, ensuring compatibility and stability for users.

Health Assessment

• • Quick release with minimal changes and fast review, indicating a straightforward version bump.

Summary

Add --repo flag to gh pr create

Fixes release process by enabling pull request creation when multiple origins are configured, preventing errors during automated releases.

Health Assessment

• • Fast cycle time of 1.1 hours, immediate review, minimal changes, low risk.

Summary

Remove deprecated shopDomainUpdate mutation

Eliminates unused mutation and related types, simplifying the API and clarifying domain configuration via the PUBLIC_URL environment variable.

Health Assessment

• • Quick removal of deprecated code with minimal review indicates a low-risk refactor.

Summary

Make checkoutCreate lines optional

Allows checkout creation without specifying lines, improving developer experience.

Health Assessment

• • Fast review and merge, minimal rework, small to medium scope, low risk.

Summary

Fix frequent SQL timeouts during test cleanups

This change eliminates flaky test failures caused by SQL timeouts during teardown, improving CI reliability and developer productivity.

Health Assessment

• • Quick resolution with minimal rework; PR merged within 3.5 hours, indicating efficient review and low complexity.

Summary

Remove deprecated orderSettingsUpdate mutation

Eliminates obsolete mutation and related types, simplifying the API and encouraging use of channelUpdate for order settings.

Health Assessment

• • PR was merged quickly with minimal rework, indicating a smooth review process and low friction.

Summary

Add identifier field to AppExtension

Adds an optional, app‑defined identifier to AppExtension, giving apps a stable handle to reference their own extensions and improving integration consistency.

Health Assessment

• • The PR required multiple iterations after the initial review, indicating complex changes and a higher likelihood of integration issues.

Summary

Deprecate OBSERVABILITY event type and permission

Marks the observability GraphQL API surface as deprecated ahead of removal in Saleor 3.24, preserving runtime functionality.

Health Assessment

• • Rapid review and single commit indicate low complexity and high confidence in the deprecation change.

Summary

Deprecate OBSERVABILITY event type and MANAGE_OBSERVABILITY permission

Deprecated the OBSERVABILITY event type and permission to prepare for removal in Saleor 3.24, ensuring backward compatibility and clear deprecation warnings for clients.

Health Assessment

• • Single commit with quick review and minimal changes, indicating a low‑risk maintenance update.

Summary

Release 3.23.18

This release updates the platform with bug fixes and new shop settings, improving account security and token management.

Health Assessment

• • Quick release with minimal changes and fast review, indicating a low-risk update.

Summary

Disallow confirmAccount on disabled accounts

Prevents inactive accounts from reactivating or confirming again, improving security and data integrity.

Health Assessment

• • Quick fix with minimal changes, resolved in a single review cycle.

Summary

Disallow confirmAccount on disabled accounts

Prevents inactive accounts from calling the confirmAccount mutation, reducing the risk of unintended reactivation and ensuring account integrity.

Health Assessment

• • The PR was resolved in a single commit with a quick review cycle, indicating a straightforward fix with minimal impact on the codebase.

Summary

Prevent confirmAccount on disabled accounts

Stops inactive users from reactivating or confirming accounts, enhancing security and preventing accidental reactivation.

Health Assessment

• • Quick fix with minimal changes and tests, merged within a day.

Summary

Add Shop.name update via shopSettingsUpdate

Enables updating the shop's name through the shopSettingsUpdate mutation, improving consistency and aligning with frontend expectations.

Health Assessment

• • PR added a new input field and updated mutation logic with minimal changes, resolved a missing feature, and included tests. The review cycle was straightforward with a single round of feedback.

Summary

Enable shop name updates via API

Adds ability for merchants to change their shop name through the shopSettingsUpdate mutation, improving administrative flexibility and aligning API with dashboard capabilities.

Health Assessment

• • Fast review and merge with minimal changes indicates a straightforward feature addition.

Summary

Add random filename into gzip responses

Adds randomization to gzip response filenames to prevent attackers from inferring content length, enhancing security.

Health Assessment

• • Fast review and merge cycle, minimal code churn, comprehensive tests ensure reliability.

Summary

Bump actions/checkout to v7.0.0

Updates the GitHub Actions checkout to the latest version, improving compatibility and security for CI workflows.

Health Assessment

• • Quick merge with minimal changes indicates low risk and straightforward dependency update.

Summary

Disallow confirmAccount on disabled accounts

This change stops inactive accounts from calling the confirmAccount mutation, preventing accidental reactivation. It also blocks already confirmed accounts from re-confirming, maintaining data consistency.

Health Assessment

• • Quick fix with minimal rework, merged within 1.6 hours, indicating efficient review and low complexity.

Summary

Health Assessment

Summary

Separate token scopes for improved security

Enhances token security by isolating scopes, reducing risk of privilege escalation.

Health Assessment

• • The PR was reviewed and merged within 1.7 hours, indicating minimal friction and a straightforward implementation.

Summary

Add token scope separation for improved security

Enhances token security by isolating scopes, reducing risk of privilege escalation.

Health Assessment

• • Quick review and merge indicate a straightforward change with minimal risk.

Summary

Separate token scopes for improved security

This change refines token generation by assigning distinct scopes, enhancing security and permission granularity for account operations.

Health Assessment

• • Quick review and merge, minimal rework, indicating a straightforward change with low risk.

Summary

Health Assessment

Summary

Bump pytest-django to 4.12.0

Update test dependency to support Python 3.14 and Django 6.0, ensuring compatibility and new features.

Health Assessment

• • Long cycle time due to automated dependency update; minimal code changes; low risk.

Summary

Remove obsolete ADDED_IN annotations

This change removes obsolete version annotations from the GraphQL layer, keeping the schema accurate for supported Saleor versions.

Health Assessment

• • The PR involved a large refactor of GraphQL annotations across many files, taking almost 8 days to merge with a single review cycle, indicating moderate review friction but high scope.

Summary

Health Assessment

Summary

Health Assessment

Summary

Health Assessment

Summary

Bump Django to v5.2.16

Updates Django dependency to the latest patch, applying security and bug fixes without changing application behavior.

Health Assessment

• • Quick dependency bump merged within 30 minutes, indicating low complexity and minimal risk.

Summary

Bump Django to v5.2.16

Updates Django to the latest patch version, improving security and stability for the platform.

Health Assessment

• • Quick dependency bump with minimal changes and fast review, indicating low risk.

Summary

Bump Django to v5.2.16

Updates Django to the latest patch, ensuring security and compatibility for the platform.

Health Assessment

• • Quick review and merge indicate a straightforward dependency bump with minimal risk.

Summary

Bump Django to v5.2.16

Update Django dependency to the latest patch, enhancing security and compatibility.

Health Assessment

• • Rapid merge with minimal changes indicates low risk and efficient process.

Summary

Health Assessment

Summary

Add token scopes to isolate password reset tokens

This change introduces distinct token scopes for password reset and confirmation flows, preventing token reuse across unrelated actions and maintaining backward compatibility with legacy tokens. It also adds temporary legacy generators to support existing tokens for 3 days.

Health Assessment

• • Fast cycle time and minimal review rounds indicate smooth integration. The change is a small backend refactor with clear backward‑compatibility safeguards.

Summary

Remove unnecessary pytest run-slow argument

Simplifies test suite by eliminating a rarely used flag, reducing CI overhead and preventing accidental omission of a slow test.

Health Assessment

• • Quick review and merge within an hour, indicating low complexity and high confidence.

Summary

Release 3.23.16 with timeout fixes and dev containers

This release addresses timeout issues for AWS SQS and Google PubSub message sending, and introduces support for running multiple development containers in parallel to improve local development workflows.

Health Assessment

• • PR merged quickly with minimal changes and no significant review friction, indicating a straightforward release update.

Summary

Release 3.22.57

This release updates dependencies and adds support for parallel development containers, improving reliability and developer experience.

Health Assessment

• • Quick release with minimal changes, fast review and merge, low risk.

Summary

Release 3.21.63 with timeout fixes and parallel dev containers

This release updates dependencies, adds timeout handling for AWS SQS and Google PubSub message sends, and introduces support for running multiple development containers in parallel, improving reliability and developer workflow.

Health Assessment

• • Fast cycle time and minimal changes indicate a low‑risk, well‑controlled release.

Summary

bump types-six from 1.17.0.20250515 to 1.17.0.20260518

Updates the types-six dependency to the latest version, ensuring type stubs remain current for the project.

Health Assessment

• • Quick dependency bump with minimal changes, merged without review.

Summary

Add common deadline for sending webhooks in threads

Prevents indefinite hangs during webhook processing by enforcing a timeout, improving reliability and system stability.

Health Assessment

• • Fast review and merge with minimal changes, indicating low complexity and risk.

Summary

Add timeout handling for SQS and PubSub

This change adds timeout handling for message delivery to AWS SQS and Google PubSub, preventing hanging requests and improving system reliability.

Health Assessment

• • Quick review and merge indicate a straightforward fix with minimal risk.

Summary

Add timeout handling for SQS and PubSub message sends

Improves reliability by ensuring message send attempts to AWS SQS and Google PubSub fail after a predictable timeout, preventing indefinite retries.

Health Assessment

• • Quick turnaround with minimal changes; PR merged within 4 hours, indicating smooth review and low complexity.

Summary

Add timeout handling for SQS and PubSub message sends

Ensures message sends to AWS SQS and Google PubSub time out predictably, improving reliability and preventing hanging operations.

Health Assessment

• • Quick turnaround with minimal changes; single commit; no major rework.

Summary

Make SQS and PubSub message timeouts predictable

This change guarantees that webhook message sends to AWS SQS and Google PubSub will time out consistently, improving reliability and predictability of webhook processing. By disabling internal retries and aligning timeouts with the webhook retry mechanism, it reduces latency and simplifies failure handling.

Health Assessment

• • The PR was reviewed quickly and merged after a single commit, indicating a straightforward change with minimal friction.

Summary

Bump GitHub Actions dependencies

Updates GitHub Actions workflows to newer action versions, ensuring CI pipelines use the latest features and security patches.

Health Assessment

• • Long review cycle due to automated dependency update; minimal changes and quick merge after review.

Summary

Enable parallel dev containers for Git worktrees

Adds support for running multiple development containers in parallel, improving local development workflow for Git worktrees.

Health Assessment

• • Review was delayed until near merge, indicating low priority or automated review.

Summary

Enable parallel dev containers for Git worktrees

This change lets developers run database, cache, and test containers concurrently, speeding up local development. It also supports efficient use of Git worktrees.

Health Assessment

• • The PR had a long review time but no rework, indicating a straightforward, low-risk merge.

Summary

Enable parallel dev containers for Git worktrees

Allows developers to run database, cache, and test containers concurrently in separate worktrees, improving isolation and speed of development.

Health Assessment

• • Review was delayed until near merge, indicating low priority; small devops change keeps risk low.

Summary

Bump memray, pytest, python-dotenv

Updates dependencies to address security CVEs and modernize configuration.

Health Assessment

• • Quick dependency bump with minimal changes and fast review, indicating low risk.

Summary

Release 3.23.15

Updated dependencies and version for Saleor, improving stability and security.

Health Assessment

• • Quick release with minimal changes, no review friction.