* realign user API endpoints to make it clearer which one are only applicable to the current user
* fix name
* bump api
* fix test
* fix reference
* fix test exception
* update ref
* reduce breakage
* re-add legacy urls till next `breaking`
* move action to post endpoint
* use default return code
* remove custom permissions on notifications endpoint
* add api bump
* update link
* fix assertation
* fix test to use post - this was refactored
* move to router based path building
* fix url names
* fix import
* fix test helper
* fix test
* more test fixes
* fix api response
* remove url patch
* bump api version
* reduce diff
* Fix version tag
* fix schema generation errors
* adjust texts
* fix tests
* add test for notification behavior / readakk
* add todo for wrong endpoint
* rename
* adjust docstring
* fix outstanding permission todo - this pattern should be changed in the API
* docs: add more details around staff / superuser roles and their dangers
* make clear that staff users are dangerous
* make distinction clearer in API
* add error code and frontend warning about running with staff / admin user
* fix test
* bump api
* adapt banner warning
* make banner locally disableable
* add global option to disable elevated user alert
* bump ty - there is better django support now
* more fixes
* fix usage of types
* add missing type
* fix access
* ensure itteration is safe
* fix uncombat decimal usage
* ?potential breaking: change access key
* remove now obsolete igtnore
* ignore errors on StdImageField
* remove usage of unkonw parameter
* fix diff error
* fix schema creation
* fix coverage quirk
* those are unneeded now?
* this seem to have been an issue with 3.12; not occuring on 3.14
* ignore pydantiics
* ignore edge cases for now
* include isGenerating fix
* make typing python 3.11 compatible
* fix more errors
* [bug] Users cannot create their own API tokens
Fixes#11486
* fix detection of metadata
* make easier to read
* add handler for IsAuthenticated
* use correct method
* fix style see #11487
* add frontend test
* make test more reliable?
* re-enable codspeed
* fix style
* use 2 step check
* use more verbose syntax
* run performance even if not needed otherwise
* fix possible injection
* another possible injection
* fix syntax
* run python api instead of backend perf test forced
* only submit tests when running in correct enviroment
* [FR] ensure restore of backups only works in correct enviroments
Fixes#11214
* update PR nbr
* fix wrong ty detection
* fix link
* ensure tracing does not enagage while running backup ops
* fix import
* remove debugging string
* add error codes
* add tests for backup and restore
* complete test for restore
* we do not need e2e on every matrix entry
there is no realy db dep here
* fix changelog format
* add flag to allow bypass
* make INVENTREE_WEB_PORT more usefull
* Update contrib/container/docker-compose.yml
Co-authored-by: Philipp Fruck <dev@p-fruck.de>
* revert change
* Fix indentation for environment variable in docker-compose
---------
Co-authored-by: Philipp Fruck <dev@p-fruck.de>
* Bump version number to 1.2.0 (#11299)
* Bump version number to 1.2.0
* Update CHANGELOG.md
* Update base image in Dockerfile
Updated base image to the latest version as of 2026-02-12.
* Fix for devcontainer build (#11311) (#11312)
- Install yarn a different way
(cherry picked from commit 2a613809ec)
Co-authored-by: Oliver <oliver.henry.walters@gmail.com>
---------
Co-authored-by: Oliver <oliver.henry.walters@gmail.com>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
* add better tracing through the frontend
* extend allowed headers
* add endpoint to end the trace
* end traces correctly in backend
* end trace
* early cop-out if not tracing is enabled
* Update API version link for v447
* add more debugging and remove possible problematic inheritance
* remove unused functions
* remove extra conversion
* ensure cirrect type is used
---------
Co-authored-by: Oliver <oliver.henry.walters@gmail.com>
* small refactor
* add inventree vendor extension
* bump api version
* Add control over schema to settings
* add more details
* disable config as requested
* adjust 3.14 diff
* cleanup diff
* add docs on the new feature
* revert bumping of api version - there is no cahnge by default
* feat: matrix testing
* remove unneeded args
* remove hashes for now
* remove require-hashes for now
* try manually fixing cffi for now
* remove wrong cache syntax
* remove cache for now
* move to 3.14?
* make version specific install req
* re-add hashes
* Revert "remove require-hashes for now"
This reverts commit 7a7e12130a.
* also compile requirements-dev
* move more install commands
* fix generation setting
* more logging
* remove cache exception
* remove cffi fix
* remove hash inforcement for now
* remove dev for now
* default to 3.14 to val
* Revert "default to 3.14 to val"
This reverts commit 7a28e46604.
* fix constraints
* remove pin requirement from plugins.txt
* do not use uv for now
* do not use uv for now
* fix test file format
* revert small change
* use 3.14 for benchmarks
* keep tests on 3.11
* use invoke for install
* try 3.14 for performance testing again
* prolong time for slower CI on 3.14
* adjust dep versions
* Keep performance ci on 3.12
Updated the Python version in the QC checks workflow.
* Add a explicit confirm when MFA Enforcing is turned on
https://github.com/inventree/InvenTree/issues/10754
* add error boundary for the case of a login enforcement
* ensure registration setup is redirected to
* fix auth url
* adjust error boundary
* update test
* be more specific in enforcement flow
* ensure we log the admin also out immidiatly after removing all mfa
* small cleanup
* sml chg
* fix execution order issues
* clean up args
* cleanup
* add test for mfa change logout
* fix IP in test
* add option to require an explicit confirm
* adapt ui to ask before patching
* bump API version
* reduce noise in docker
* refactor path infos
* add more info during local frontend build
* add frontend info during release build
* ignore "special" import
* change var name
* Matmair/issue10740 (#497)
* reduce noise in docker
* refactor path infos
* add more info during local frontend build
* add frontend info during release build
* Revert "Matmair/issue10740 (#497)" (#498)
This reverts commit 415c52813b.
* bum pre-commit and update to new formatting rule
* fix style
* replace individual metadata endpoints with a generic endpoint an a lot of permanent redirects
* remove more names
* reduce duplication more
* remove now unneeded tests
* update remaining tests to use urls
* bump api
* follow redirects in tests
* reduce new fncs
* fix redirect setup
* fix test
* update to fix schema collissions
* fix permission check
* simplify and fix lookup
* clone fork for now
* add changelog entry
* update api version date
* remove temporary change to python lib
* update docs
* Matmair/issue10740 (#497)
* reduce noise in docker
* refactor path infos
* add more info during local frontend build
* add frontend info during release build
* Revert "Matmair/issue10740 (#497)" (#498)
This reverts commit 415c52813b.
* use walltime
* switch measure mode
* dummy change
* dummy change
* ensure npm works
* pin needed version
* split out performance test to also use walltime
* roll back split, is too slow
---------
Co-authored-by: Oliver <oliver.henry.walters@gmail.com>
* feat(backend): add performance test
ref #11002
* feat(backend): add performance test (#486)
* chore(deps): bump the dependencies group across 1 directory with 2 updates (#11003)
* chore(deps): bump the dependencies group across 1 directory with 2 updates
Bumps the dependencies group with 2 updates in the /src/backend directory: [django-q2](https://github.com/GDay/django-q2) and [sentry-sdk](https://github.com/getsentry/sentry-python).
Updates `django-q2` from 1.8.0 to 1.9.0
- [Release notes](https://github.com/GDay/django-q2/releases)
- [Changelog](https://github.com/django-q2/django-q2/blob/master/CHANGELOG.md)
- [Commits](https://github.com/GDay/django-q2/compare/v1.8.0...v1.9.0)
Updates `sentry-sdk` from 2.46.0 to 2.47.0
- [Release notes](https://github.com/getsentry/sentry-python/releases)
- [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md)
- [Commits](https://github.com/getsentry/sentry-python/compare/2.46.0...2.47.0)
---
updated-dependencies:
- dependency-name: django-q2
dependency-version: 1.9.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: dependencies
- dependency-name: sentry-sdk
dependency-version: 2.47.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: dependencies
...
Signed-off-by: dependabot[bot] <support@github.com>
* fix style
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Matthias Mair <code@mjmair.com>
* Rearrange python package installs in are metal setup (#11005)
* Reorder pip installation steps in bare metal setup
* Reorder pip installation steps in bare metal setup
* remove unused lines
* Fix docs formatting (#11008)
* Remove prefetch_related from parametric data filter (#11007)
- Not required as we do not process the parameter fields in python
* [refactor] Generic status API (#11009)
* Fix docs formatting
* [refactor] cache custom states
- Generic state API endpoint executed query for each state type
- We can run a single database query and cache these in memory
- Reduces query time by ~50%
* [refactor] Build list (#11010)
- Prefetch project_code
- Annotate parameter data
* Improve the documentation installation instructions. (#11011)
Co-authored-by: Mitch Davis <mjd@afork.com>
* [refactor] Improve primary_address annotation for Company API (#11006)
* Refactor primary_address annotation
- Remove SerializerMethodField
- Better cache introspection
* Allow address detail to be optional
* Refactor address caching
* Fix primary_address annotation
* Remove "address_count" field
- Pointless annotation which is not used anywhere
* Update API version
* Tweak docs page
* Tweak unit tests
* feat(backend): add performance test
ref #11002
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Michael <michael@buchmann.ruhr>
Co-authored-by: Oliver <oliver.henry.walters@gmail.com>
Co-authored-by: Mitch Davis <mjd+github@afork.com>
Co-authored-by: Mitch Davis <mjd@afork.com>
* add oidc perm
* fix run setup
* add gitignore
* pin action
* enable DB for test
* patch test detection
* move test argument into tasks
* seperate performance testing into own step
* add automigration
* update test
* Increase MAX_QUERY_TIME to 60 seconds
* use newer python for better prerformance / measurement options
* skip plugin install step
* add debug step
* add debug stmt
* make version import safe
* fix command
* more debugging
* move import
* rollback changes
* do full install
* rollback skip_plugins too
* hide version
* new debug try
* add more debug
* try 3.13
* try reinstalling the cffi
* reinstall cffi?
* reset debug
* rollback debug steos
* add initial tests
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Michael <michael@buchmann.ruhr>
Co-authored-by: Oliver <oliver.henry.walters@gmail.com>
Co-authored-by: Mitch Davis <mjd+github@afork.com>
Co-authored-by: Mitch Davis <mjd@afork.com>
Matthias MairandGitHub
