https://leapgraph.com/graphql-api-security

This article mentions several add-on packages that Reaction may want to use. This issue is simply to investigate whether these vulnerabilities are present and try adding the packages to solve them.

Getting an error here when using the remove_promotion_line_items method. Seems like it should be using variant rather than item
https://github.com/spree/spree/blob/8ca9ec736a471b66f66d718b157be69946f8c5fc/core/app/models/spree/promotion_handler/coupon.rb#L78

Sylius version affected: v1.4.4

Description

Sylius says the category is used and cannot be removed, when we try to remove an empty category.

We figured out that we had some products with the taxon as "Main Taxon".

Steps to reproduce

1. Add a taxon, keep it empty of products.
2. Update a product to use the newly created taxon as Main taxon.
3. Try to remove the taxo

Improve the tier prices feature - add info like "Buy 2 in x.xx$ and save x%"