inventree/InvenTree
2
0
Fork 0
mirror of https://github.com/inventree/InvenTree.git synced 2026-09-10 06:37:17 +00:00
Code Activity
18,172 Commits 11 Branches 171 Tags
0ed2c2951ea7a553b9082a5c4d22b90a19e0756e
Commit Graph
18172 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
github-actions[bot]amanjain57-gifOliverAman Jain
 		0ed2c2951e fix: trigger pricing recalculation when SupplierPart pack_quantity changes (#12421) (#12674) 
* fix: trigger pricing recalculation when SupplierPart is saved or deleted

When a SupplierPart's pack_quantity is updated after price breaks have
already been created, the Part's pricing (and BOM cost rollups for any
assemblies using that part) was not recalculated. This is because there
was no post_save or post_delete signal handler for the SupplierPart model
to trigger schedule_pricing_update on the linked Part.

Added post_save and post_delete signal handlers for SupplierPart that
mirror the existing SupplierPriceBreak signal handlers. The pricing
cascade (via update_assemblies) ensures BOM line costs in parent
assemblies are also updated.

Fixes #12285

* style: fix ruff format issues

* style: apply ruff format with --preview flag (matching project config)

* fix: resolve PartPricing.DoesNotExist in pack_quantity test

The test captured self.part.pricing before any PartPricing row existed,
yielding an unsaved instance; the later refresh_from_db() then raised
DoesNotExist. Re-fetch self.part.pricing after the price break creates
the row, matching the pattern in test_supplier_part_pricing.

---------



(cherry picked from commit be9faff766)

Co-authored-by: amanjain57-gif <aman.jain57@gmail.com>
Co-authored-by: Oliver <oliver.henry.walters@gmail.com>
Co-authored-by: Aman Jain <jainamn@amazon.com>
 2026-08-21 15:25:01 +10:00
Oliver 4a490854c8 Bump InvenTree software version to 1.5.2 (#12660) 2026-08-20 00:23:35 +02:00
Matthias Mair ae97972ba2 [FR] stop shipping docs with packages (#12657) (#12662) 
Fixes #12610

(cherry picked from commit 8f1bb69eba)
 2026-08-20 00:06:26 +02:00
github-actions[bot]dependabot[bot]Matthias Mair
 		84052e1ac8 chore(deps): bump sqlparse from 0.5.5 to 0.6.0 in /src/backend (#12653) (#12659) 
* chore(deps): bump sqlparse from 0.5.5 to 0.6.0 in /src/backend

Bumps [sqlparse](https://github.com/andialbrecht/sqlparse) from 0.5.5 to 0.6.0.
- [Changelog](https://github.com/andialbrecht/sqlparse/blob/master/CHANGELOG)
- [Commits](https://github.com/andialbrecht/sqlparse/compare/0.5.5...0.6.0)

---
updated-dependencies:
- dependency-name: sqlparse
  dependency-version: 0.6.0
  dependency-type: direct:production
...



* fix style

---------




(cherry picked from commit dc9a277478)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Matthias Mair <code@mjmair.com>
1.5.1 		2026-08-19 13:18:52 +10:00
github-actions[bot]anddependabot[bot] 5dacf2dc28 chore(deps): bump python in /contrib/container (#12650) (#12658) 
Bumps python from 3.14.6-slim-trixie to 3.14.7-slim-trixie.

---
updated-dependencies:
- dependency-name: python
  dependency-version: 3.14.7-slim-trixie
  dependency-type: direct:production
  update-type: version-update:semver-patch
...



(cherry picked from commit 97a48f7daa)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-19 09:25:02 +10:00
github-actions[bot]andOliver 0acfec3ef0 Improve error handling for unit registry (#12643) (#12645) 
(cherry picked from commit af74f1abf6)

Co-authored-by: Oliver <oliver.henry.walters@gmail.com>
 2026-08-16 12:41:38 +10:00
github-actions[bot]andOliver c977de706a [bug] Fix broken user setting (#12638) (#12639) 
- Closes https://github.com/inventree/InvenTree/issues/12637

(cherry picked from commit 4767edfe1b)

Co-authored-by: Oliver <oliver.henry.walters@gmail.com>
 2026-08-14 09:35:08 +10:00
github-actions[bot]andOliver 6362f59fd5 [bug] Fix ReturnOrder event registration (#12633) (#12636) 
(cherry picked from commit 695b9c1dc2)

Co-authored-by: Oliver <oliver.henry.walters@gmail.com>
 2026-08-13 20:09:56 +10:00
github-actions[bot]andOliver d8e6fdab52 Add docs for return order (#12632) (#12634) 
(cherry picked from commit 13540fceeb)

Co-authored-by: Oliver <oliver.henry.walters@gmail.com>
 2026-08-13 16:03:56 +10:00
github-actions[bot]andOliver 9af445268f [bug] OptionalField race condition (#12627) (#12629) 
* [bug] OptionalField race condition

Fixes subtle bug where OptionalField entries can be  silenty dropped from an API request due to concurrent requests / race conditions

* Additional unit tests

* Additional guard in metadata.py

* include extra kwargs

* Adjust import/exporting options

* Fix attribute sharing across class instances

(cherry picked from commit 2b3283d5d2)

Co-authored-by: Oliver <oliver.henry.walters@gmail.com>
 2026-08-12 19:46:36 +10:00
github-actions[bot]ribseyOliver
 		efb0b94c07 reset errors on update (#12550) (#12630) 
* reset errors on update

* add empty line

---------


(cherry picked from commit f5c4bbc6a8)

Co-authored-by: ribsey <lukas.ribi@gmail.com>
Co-authored-by: Oliver <oliver.henry.walters@gmail.com>
 2026-08-12 17:45:15 +10:00
github-actions[bot]andOliver be566f4e0f [bug] Handle duplicate email addresses for magic links (#12621) (#12622) 
(cherry picked from commit 77d8470141)

Co-authored-by: Oliver <oliver.henry.walters@gmail.com>
 2026-08-12 10:27:03 +10:00
github-actions[bot]FurinaDogFurinaDog
 		ea146937c1 fix: support UUID notification references (#12616) (#12626) 
* fix: support UUID notification references

* test: update notification uid expectation

---------


(cherry picked from commit 55a193e5d7)

Co-authored-by: FurinaDog <feixiang130214@outlook.com>
Co-authored-by: FurinaDog <FurinaDog@users.noreply.github.com>
 2026-08-12 08:55:11 +10:00
Oliver 0a22512ae6 Bump InvenTree software version to 1.5.1 (#12620) 2026-08-11 22:58:17 +10:00
github-actions[bot]andMatthias Mair 6a6736b8d6 fix(frontend): Improve flakiness issues (#12617) (#12619) 
* small improvements to reduce flakiness

* disable throtteling to fix flaking tests

(cherry picked from commit 7a935f6055)

Co-authored-by: Matthias Mair <code@mjmair.com>
1.5.0 		2026-08-11 21:08:24 +10:00
github-actions[bot] e09b4c65c5 New Crowdin translations by GitHub Action (#12535) (#12618) 
(cherry picked from commit f054a487ef)

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
 2026-08-11 21:08:11 +10:00
github-actions[bot]andOliver a369568b68 Update version for @inventreedb/ui (#12611) (#12614) 
* Update version for @inventreedb/ui

* Revert yarn.lock changes

(cherry picked from commit 11a48bffed)

Co-authored-by: Oliver <oliver.henry.walters@gmail.com>
 2026-08-11 13:46:00 +10:00
github-actions[bot]andOliver 9824b228ce [CI] Improve robustness for playwright test (#12612) (#12613) 
(cherry picked from commit a3348248ac)

Co-authored-by: Oliver <oliver.henry.walters@gmail.com>
 2026-08-11 13:45:45 +10:00
github-actions[bot]dependabot[bot]Oliver
 		02c37b09c4 chore(deps): bump dompurify from 3.4.12 to 3.4.13 in /src/frontend (#12592) (#12606) 
Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.4.12 to 3.4.13.
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](https://github.com/cure53/DOMPurify/compare/3.4.12...3.4.13)

---
updated-dependencies:
- dependency-name: dompurify
  dependency-version: 3.4.13
  dependency-type: direct:production
...




(cherry picked from commit ff16349129)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Oliver <oliver.henry.walters@gmail.com>
 2026-08-11 08:55:05 +10:00
github-actions[bot]andOliver 7e206547a2 Fix for API exception_handler (#12604) (#12605) 
- Only log unhandled exceptions to sentry.io
- Check for valid handling first
- Report second

(cherry picked from commit 1020ed3009)

Co-authored-by: Oliver <oliver.henry.walters@gmail.com>
 2026-08-11 08:54:48 +10:00
Oliver d9a5d96d8d Bump version number to 1.5.0 (#12602) 
* Bump version number to 1.5.0

* Add release date
 2026-08-10 21:57:43 +10:00
Matthias Mair 324b0ca012 feat(backend): add throtteling by default (#11951) 
* feat(backend): add throtteling by default

* add changelog entry

* ignore throtetling in debug mode

* increase threshold
 2026-08-10 18:41:15 +10:00
Oliver 1b20920e4a [security] Additional SSRF protections (#12595) 
Tighten SSRF protections when fetching from external URLs
 2026-08-10 18:32:49 +10:00
dependabot[bot]andMatthias Mair edae156439 chore(deps): bump pypdf from 6.14.2 to 6.15.0 in /src/backend (#12594) 
* chore(deps): bump pypdf from 6.14.2 to 6.15.0 in /src/backend

Bumps [pypdf](https://github.com/py-pdf/pypdf) from 6.14.2 to 6.15.0.
- [Release notes](https://github.com/py-pdf/pypdf/releases)
- [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md)
- [Commits](https://github.com/py-pdf/pypdf/compare/6.14.2...6.15.0)

---
updated-dependencies:
- dependency-name: pypdf
  dependency-version: 6.15.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

* fix style

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Matthias Mair <code@mjmair.com>
 2026-08-10 16:13:05 +10:00
dependabot[bot]andMatthias Mair a384576cff chore(deps): bump gitpython from 3.1.57 to 3.1.58 in /docs (#12593) 
* chore(deps): bump gitpython from 3.1.57 to 3.1.58 in /docs

Bumps [gitpython](https://github.com/gitpython-developers/GitPython) from 3.1.57 to 3.1.58.
- [Release notes](https://github.com/gitpython-developers/GitPython/releases)
- [Changelog](https://github.com/gitpython-developers/GitPython/blob/main/CHANGES)
- [Commits](https://github.com/gitpython-developers/GitPython/compare/3.1.57...3.1.58)

---
updated-dependencies:
- dependency-name: gitpython
  dependency-version: 3.1.58
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

* fix style

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Matthias Mair <code@mjmair.com>
 2026-08-10 15:53:21 +10:00
Oliver e55a6e78d2 [UI] Bulk Delete Enhancements (#12601) 
* Add optional filtering for bulkDelete

* Enhanced pre-form content
 2026-08-10 15:53:03 +10:00
siddhartha28andSiddhartha Ravilla 76bce6a7b1 Fix Install Stock Items shows only selected parts (#12596) 
* Bug Fix Install Stock Item showing variant stock when BOM disallows variants

* Add regression test for include_variants stock filter

---------

Co-authored-by: Siddhartha Ravilla <ravilla.si@northeastern.edu>
 2026-08-09 17:57:18 +10:00
Jayasreejayasree723Oliver
 		214f472ec9 Fix test result ordering by test timestamps (#12533) 
* Fix test result ordering by test timestamps

* Refractor test result comparison helper

* Apply formatting fixes

* Fix frontend formatting

* Avoid mutating test result records

* Add migration for test result ordering

* Retry documentation build

---------

Co-authored-by: jayasree723 <confidentlehmann@tomorjerry.com>
Co-authored-by: Oliver <oliver.henry.walters@gmail.com>
 2026-08-09 09:56:48 +10:00
Oliver afcc89ecfb Data import fix (#12568) 
* Specify JSON encoder for data import fields

- Fixes encoding issues when importing from XLSX file

* Add regression test

* Fix faulty error handler

* Fix for unit test
 2026-08-09 08:19:19 +10:00
Oliver 901dc024c0 [bug] Fix for plugin fetching (#12590) 
- Prevent operation on stale plugin
 2026-08-09 08:19:01 +10:00
OliverandMatthias Mair eb37082149 [docker] Include pip license file (#12583) 
* [docker] Include pip license file

This file has been missing in production builds

* Add CI test

* Update contrib/container/Dockerfile

Co-authored-by: Matthias Mair <code@mjmair.com>

* Fix typo

* path fix

* More pathing fixes

---------

Co-authored-by: Matthias Mair <code@mjmair.com>
 2026-08-09 07:27:15 +10:00
Oliver bc150e09e8 [docs] Improve setup guide for non-standard hosting (#12588) 
* [docs] Updated docs for complex server setups

Ref: https://github.com/inventree/InvenTree/discussions/12538

* Add FAQ entry
 2026-08-09 07:26:56 +10:00
Oliver 61fe3c9ce5 [bug] Fix PartStocktakeSerializer (#12587) 
Closes https://github.com/inventree/InvenTree/issues/12555
 2026-08-09 07:26:37 +10:00
OliverandMatthias Mair 94024ad23e [bug] Validate location when completing build outputs (#12570) 
* [bug] Validate location when completing build outputs

- Cannot be structural

* Fix unit test

---------

Co-authored-by: Matthias Mair <code@mjmair.com>
 2026-08-08 23:27:53 +10:00
Oliver c0ed42549f [API] Restrict barcode scan history (#12569) 
- A non-staff user can only view their own results
 2026-08-08 21:56:47 +10:00
Oliver 28fea388f6 [bug] Handle deleted Part (#12578) 2026-08-08 21:56:25 +10:00
Oliver 6cdc21c308 [sentry] Do not report MethodNotAllowed (#12584) 2026-08-08 20:51:21 +10:00
Oliver 21819ebc78 Fix flaky test on sqlite (#12582) 2026-08-08 20:27:50 +10:00
Oliver 5c798f4237 [bug] Fix part duplicate checks (#12574) 
* [bug] Fix part duplicate checks

* Additional unit tests
 2026-08-08 19:11:46 +10:00
Oliver cf2f64c83a [bug] Fix getLogoImage helper (#12577) 
* [bug] Fix getLogoImage helper

- Do not return a file:// URI

* cleanup code
 2026-08-08 19:11:32 +10:00
Oliver f1e6ec249d [bug] Fix post-delete actions (#12575) 
- Check that underlying part is still available
 2026-08-08 17:58:21 +10:00
Oliver 9b5c69da26 [bug] excel encoding for data import (#12576) 
- Handle different encoding types for excel import
- Fail cleanly if cannot read file
 2026-08-08 17:58:01 +10:00
Oliver fe82ff1f9e [refactor] Improve efficiency of check_missing_pricing (#12572) 2026-08-08 17:17:20 +10:00
Oliver 66b95cde5b [API] Handle AppRegistryNotReady (#12571) 
Explicit handling for AppRegistryNotReady error
 2026-08-08 16:11:30 +10:00
Oliver 358c464349 Barcode API bugs (#12565) 
* Add explicit permission checks for barcode scanning

- Previous role_required attribute did not do anything

* Additional unit tests
 2026-08-08 14:17:50 +10:00
Oliver ad818889df Deduplicate part pricing updates per session (#12564) 2026-08-08 12:27:32 +10:00
Oliver badf7ab300 Handle missing part (#12566) 
Part instance may have already been deleted in post_delete hook for related models.
 2026-08-08 12:27:19 +10:00
Oliver 02ee7ca2a1 Fix permissions for group and RuleSet endpoints (#12563) 
- Require StaffRole in addition to is_staff
 2026-08-08 10:43:15 +10:00
dependabot[bot]andMatthias Mair 4a7970b61f chore(deps): bump cryptography from 49.0.0 to 50.0.0 in /src/backend (#12546) 
* chore(deps): bump cryptography from 49.0.0 to 50.0.0 in /src/backend

Bumps [cryptography](https://github.com/pyca/cryptography) from 49.0.0 to 50.0.0.
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pyca/cryptography/compare/49.0.0...50.0.0)

---
updated-dependencies:
- dependency-name: cryptography
  dependency-version: 50.0.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

* fix style

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Matthias Mair <code@mjmair.com>
 2026-08-05 21:27:27 +12:00
dependabot[bot]andMatthias Mair 0c99ecdc35 chore(deps): bump the dependencies group with 7 updates (#12541) 
* chore(deps): bump the dependencies group with 7 updates

Bumps the dependencies group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [docker/login-action](https://github.com/docker/login-action) | `4.4.0` | `4.5.2` |
| [oasdiff/oasdiff-action/diff](https://github.com/oasdiff/oasdiff-action) | `0.1.6` | `0.1.10` |
| [CodSpeedHQ/action](https://github.com/codspeedhq/action) | `4.18.5` | `4.19.1` |
| [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action) | `0.6.0` | `0.6.1` |
| [ossf/scorecard-action](https://github.com/ossf/scorecard-action) | `2.4.3` | `2.4.4` |
| [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) | `4.37.1` | `4.37.3` |
| [actions/stale](https://github.com/actions/stale) | `10.4.0` | `11.0.0` |


Updates `docker/login-action` from 4.4.0 to 4.5.2
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/af1e73f918a031802d376d3c8bbc3fe56130a9b0...371161bbe7024a29a25c5e19bfcbc0804fe9ad2c)

Updates `oasdiff/oasdiff-action/diff` from 0.1.6 to 0.1.10
- [Release notes](https://github.com/oasdiff/oasdiff-action/releases)
- [Commits](https://github.com/oasdiff/oasdiff-action/compare/024f6c399f9a21ada1addb0f9a36ce1bfac995f1...0ab8ad204b00d25acc5ae87106281433e288d0c1)

Updates `CodSpeedHQ/action` from 4.18.5 to 4.19.1
- [Release notes](https://github.com/codspeedhq/action/releases)
- [Changelog](https://github.com/CodSpeedHQ/action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codspeedhq/action/compare/f99becdce5e5d51fd556489ebef684f4ecfd6286...f22792bfac16f3e14eb9fbea76f4a48e9cc22b93)

Updates `zizmorcore/zizmor-action` from 0.6.0 to 0.6.1
- [Release notes](https://github.com/zizmorcore/zizmor-action/releases)
- [Commits](https://github.com/zizmorcore/zizmor-action/compare/6599ee8b7a49aef6a770f63d261d214911a7ce02...6fc4b006235f201fdab3722e17240ab420d580e5)

Updates `ossf/scorecard-action` from 2.4.3 to 2.4.4
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](https://github.com/ossf/scorecard-action/compare/4eaacf0543bb3f2c246792bd56e8cdeffafb205a...2d1146689b8cda280b9bc96326124645441f03bc)

Updates `github/codeql-action/upload-sarif` from 4.37.1 to 4.37.3
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/7188fc363630916deb702c7fdcf4e481b751f97a...e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81)

Updates `actions/stale` from 10.4.0 to 11.0.0
- [Release notes](https://github.com/actions/stale/releases)
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/stale/compare/1e223db275d687790206a7acac4d1a11bd6fe629...4391f3da665fdf50b6810c1a66712fb9ba21aa93)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-version: 4.5.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: oasdiff/oasdiff-action/diff
  dependency-version: 0.1.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: CodSpeedHQ/action
  dependency-version: 4.19.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: zizmorcore/zizmor-action
  dependency-version: 0.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: ossf/scorecard-action
  dependency-version: 2.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: github/codeql-action/upload-sarif
  dependency-version: 4.37.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: actions/stale
  dependency-version: 11.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>

* Update qc_checks.yaml

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Matthias Mair <code@mjmair.com>
 2026-08-05 07:35:40 +12:00