https://leapgraph.com/graphql-api-security

This article mentions several add-on packages that Reaction may want to use. This issue is simply to investigate whether these vulnerabilities are present and try adding the packages to solve them.

Getting an error here when using the remove_promotion_line_items method. Seems like it should be using variant rather than item
https://github.com/spree/spree/blob/8ca9ec736a471b66f66d718b157be69946f8c5fc/core/app/models/spree/promotion_handler/coupon.rb#L78

As you might know, Google recently introduced a new ranking factor and that is CLS - Cumulative Layout Shift.
I have done few tests on default magento 2 stores and each of them fails the t

What is the motivation for adding / enhancing this feature?

Write Unit tests for HTTP2 Server Push Module (you can find it on develop branch)

What are the acceptance criteria

• Unit tests for

Prerequisites (mark completed items with an [x]):

• I have have carried out troubleshooting steps and I believe I have found a bug.
• I have searched for similar bugs in both open and closed issues and cannot find a duplicate.

Describe the bug
I believe the function WC_Product_Importer::get_percentage_complete incorrectly overestimates the completion of the product import p

Sylius version affected: v1.4.4

Description

Sylius says the category is used and cannot be removed, when we try to remove an empty category.

We figured out that we had some products with the taxon as "Main Taxon".

Steps to reproduce

1. Add a taxon, keep it empty of products.
2. Update a product to use the newly created taxon as Main taxon.
3. Try to remove the taxo

Is your feature request related to a problem?

Improve the information displayed in the checkout when a product is without stock

From https://www.prestashop.com/forums/topic/1041442-nobody-can-figure-it-out-we-need-a-specialist/

Describe the solution you'd like

Display the combination from the product without stock.

Additional context

Which one is the product withou

A while ago, we converted API controller specs into requests specs, see #2052. But those specs still have references from their old "life" that we can clean a little bit with a small effort.

In fact, their filenames still have the _controller_ part, which makes no sense now. Eg. solidus/api/spec/requests/spree/api/addresses_controller_spec.rb

Also, they contain references to the previo

Currently the folder framework/commerce has the core schema types that must be used by every provider. Currently only some types are available: https://github.com/vercel/commerce/blob/master/framework/commerce/types.ts#L10-L92

MIssing core types should be included there too so we can stop using any in different places on the UI. The task is to replace the types that have a TODO with a pro

Improve the tier prices feature - add info like "Buy 2 in x.xx$ and save x%"

Describe the bug
Our form example should have native select - SfSelect. There is SfComponentSelect right now.

How to reproduce
Steps to reproduce the behavior:

1. Go to Form
2. See select