-
Due to concerns about brute forcing user's reset and verification tokens, the upper limit of 40 has been changed to 255 and their default length has been changed from 16 to 64. If you prefer shorter (or longer) tokens, you can change their length via the configuration:
sylius_user: resources: _user_: user: resetting: token: length: 128 verification: token: length: 12
where
_user_can beadmin,shop,oauth, or your own custom user type. -
The order token length has been parametrized and is now configurable, instead of being hardcoded to
10. When not specified its default value is64. The new parameter can be set by configuration:sylius_core: order_token_length: 128
-
Due to a bug that was causing wrong calculation of available stock during completing a payment REF, The constructor of
Sylius\Bundle\CoreBundle\EventListener\PaymentPreCompleteListenerhas been modified as follows:public function __construct( + private OrderItemAvailabilityCheckerInterface|AvailabilityCheckerInterface $availabilityChecker, - private AvailabilityCheckerInterface $availabilityChecker, )
If you have overwritten the service or its argument, check the correct functioning.
- The
Accept-Languageheader should now correctly resolve locale codes based on RFC 4647 using Symfony's request language negotiation, meaning that valuesen_US,en-US,en-usetc. will all result in theen_USlocale.
-
The
Sylius\Component\User\Model\UserInterfaceextends theSymfony\Component\PasswordHasher\Hasher\PasswordHasherAwareInterfaceinterface to fix the compatibility with Symfony 6. -
The constructor of
Sylius\Component\Product\Resolver\DefaultProductVariantResolverhas been modified, a new argument has been added :public function __construct( private ?ProductVariantRepositoryInterface $productVariantRepository = null, )
-
Due to a bug that was causing the removal of promotion configurations for promotions REF, The constructor of
Sylius\Bundle\CoreBundle\EventListener\ProductDeletionListenerhas been modified as follows:public function __construct( private RequestStack $requestStack, + private ProductInPromotionRuleCheckerInterface $productInPromotionRuleChecker, - ProductAwareRuleUpdaterInterface ...$ruleUpdaters, )The method name has also changed from
removeProductFromPromotionRulestoprotectFromRemovingProductInUseByPromotionRule.Please refrain from using ProductAwareRuleUpdaterInterface, as it will be removed in the next major release.
-
Due to the same bug, the constructor of
Sylius\Bundle\CoreBundle\EventListener\TaxonDeletionListenerhas also changed:public function __construct( private SessionInterface|RequestStack $requestStackOrSession, private ChannelRepositoryInterface $channelRepository, + private TaxonInPromotionRuleCheckerInterface $taxonInPromotionRuleChecker, TaxonAwareRuleUpdaterInterface ...$ruleUpdaters, )
-
-
The
Sylius\Bundle\AttributeBundle\Form\Type\AttributeType\Configuration\SelectAttributeChoicesCollectionTypeonly constructor argument has been made optional and isnullby default, subsequently the first argument ofsylius.form.type.attribute_type.select.choices_collectionhas been removed. -
The default checkout resolving route pattern has been changed from
/checkout/.+to%sylius.security.shop_regex%/checkout/.+to reduce the probability of conflicts with other routes. -
The
src/Sylius/Bundle/AdminBundle/Resources/views/Taxon/_treeWithButtons.html.twigtemplate has been updated to implement new changing taxon's position logic. If you have overridden this template, you need to update it. If you want to check what has changed, you might use this PR as a reference.
- The
Sylius\Component\Core\OrderProcessing\OrderPaymentProcessorconstructor has been changed:public function __construct( private OrderPaymentProviderInterface $orderPaymentProvider, private string $targetState = PaymentInterface::STATE_CART, + private ?OrderPaymentsRemoverInterface $orderPaymentsRemover = null, + private array $unprocessableOrderStates = [], )
- The priority of the
sylius.context.localetag on theSylius\Bundle\LocaleBundle\Context\RequestHeaderBasedLocaleContextservice has been changed from256to32. It means that this service has no longer the highest priority, and passingAccept-Languageheader on the UI won't override the locale set in the URL. If your app depends on this behavior, you need to change the priority of thesylius.context.localetag on theSylius\Bundle\LocaleBundle\Context\RequestHeaderBasedLocaleContextdirectly in your app.
- For routes
sylius_admin_order_shipment_shipandsylius_admin_order_resend_confirmation_emailthe missing "/orders" prefix has been added. If you have been using these routes' paths directly, you need to update them.
-
The default configuration of Symfony Messenger has changed, it is now separated for each transport and can be set via environmental variables:
- MESSENGER_TRANSPORT_DSN=doctrine://default + SYLIUS_MESSENGER_TRANSPORT_MAIN_DSN=doctrine://default + SYLIUS_MESSENGER_TRANSPORT_MAIN_FAILED_DSN=doctrine://default?queue_name=main_failed + SYLIUS_MESSENGER_TRANSPORT_CATALOG_PROMOTION_REMOVAL_DSN=doctrine://default?queue_name=catalog_promotion_removal + SYLIUS_MESSENGER_TRANSPORT_CATALOG_PROMOTION_REMOVAL_FAILED_DSN=doctrine://default?queue_name=catalog_promotion_removal_failed
- All entities and their relationships have a default order by identifier if no order is specified. You can disable
this behavior by setting the
sylius_core.order_by_identifierparameter tofalse:
sylius_core:
order_by_identifier: false-
Service
sylius.twig.extension.taxeshas been deprecated. Use methodsgetTaxExcludedTotalandgetTaxIncludedTotalfromSylius\Component\Core\Model\Orderinstead. -
Both
getCreatedByGuestandsetCreatedByGuestmethods were deprecated on\Sylius\Component\Core\Model\Order. Please useisCreatedByGuestinstead of the first one. The latter is a part of thesetCustomerWithAuthorizationlogic and should be used only this way. -
Due to refactoring constructor has been changed in service
src/Sylius/Bundle/ShopBundle/EventListener/OrderIntegrityChecker.php:public function __construct( private RouterInterface $router, - private OrderProcessorInterface $orderProcessor, private ObjectManager $manager + private OrderPromotionsIntegrityCheckerInterface $orderPromotionsIntegrityChecker ) -
To allow administrator reset their password, add in
config/packages/security.yamlfile the following entry- { path: "%sylius.security.admin_regex%/forgotten-password", role: IS_AUTHENTICATED_ANONYMOUSLY }above
- { path: "%sylius.security.admin_regex%", role: ROLE_ADMINISTRATION_ACCESS } -
It is worth noticing that, that the following services are now included in every env starting with
testkeyword. If you wish to not have them, either you need to rename your env to not start with test or remove these services with complier pass. -
The following listeners have been removed as they are not used anymore:
Sylius\Bundle\CoreBundle\CatalogPromotion\Listener\CatalogPromotionFailedListenerSylius\Bundle\CoreBundle\CatalogPromotion\Listener\CatalogPromotionUpdateFailedMessageListener
-
The
Sylius\Component\Promotion\Event\CatalogPromotionFailedhas been removed as it is not used anymore. -
Due to updating to Symfony 6 security file was changed to use the updated security system so you need to adjust your
config/packages/security.yamlfile:security: - always_authenticate_before_granting: true + enable_authenticator_manager: true
and you need to adjust all of your firewalls like that:
admin: # ... form_login: # ... - csrf_token_generator: security.csrf.token_manager + enable_csrf: true # ... new_api_admin_user: # ... - anonymous: true + entry_point: jwt # ... - guard: - authenticators: - # ... + jwt: true shop: logout: path: sylius_shop_logout - target: sylius_shop_login + target: sylius_shop_homepage invalidate_session: false - success_handler: sylius.handler.shop_user_logoutand also you need to adjust all of your access_control like that:
- - { path: "%sylius.security.admin_regex%/forgotten-password", role: IS_AUTHENTICATED_ANONYMOUSLY } + - { path: "%sylius.security.admin_regex%/forgotten-password", role: PUBLIC_ACCESS }
-
Passing a
Gaufrette\FilesystemtoSylius\Component\Core\Uploader\ImageUploaderconstructor is deprecated since Sylius 1.12 and will be prohibited in 2.0. UseSylius\Component\Core\Filesystem\Adapter\FlysystemFilesystemAdapterinstead. -
Gaufrette is no longer used by Sylius in favour of Flysystem. If you want to use Gaufrette in your project, you need to set:
sylius_core: filesystem: adapter: gaufrette
in your
config/packages/_sylius.yamlfile. -
Not passing
Sylius\Component\Taxation\Checker\TaxRateDateEligibilityCheckerInterfacetoSylius\Component\Taxation\Resolver\TaxRateResolveris deprecated since Sylius 1.12 and will be prohibited in 2.0
In 1.12 we have updated our frontend dependencies to the latest versions. This means that you might need to update your dependencies as well.
The full list of all dependencies can be found in the package.json file.
Because every project is different, we cannot provide a list of all changes that might be needed. However, we have prepared a short list of fixes for the most common issues.
We updated gulp-sass plugin as well as the sass implementation we use to be compatible with most installation (node-sass is deprecated and incompatible with many systems). Therefore, you need to update your code to follow this change.
NOTE! yarn build is not used to build gulp anymore, and its default behavior is to build assets using Webpack. If you want to build assets using Gulp run yarn gulp instead.
-
Follow this guide to upgrade your code when using gulp-sass this is an example:
- import sass from 'gulp-sass'; + import gulpSass from 'gulp-sass'; + import realSass from 'sass'; + const sass = gulpSass(realSass);
-
Library chart.js lib has been upgraded from 2.9.3 to 3.7.1. Adjust your package.json as follows:
- "chart.js": "^2.9.3", + "chart.js": "^3.7.1",
- "rollup": "^0.60.2", + "rollup": "^0.66.2",
- "rollup-plugin-uglify": "^4.0.0", + "rollup-plugin-uglify": "^6.0.2",
Please visit 3.x Migration Guide for more information.
Example changes we made in our codebase to adjust it to the new version of dependencies might be found here. Remember, when you face any issues while updating your dependencies you might ask for help in our Slack channel.
1.12 comes with a long-awaited change - Webpack becomes our default build tool.
If you want to stay with Gulp, you can do it by following the steps below:
- Go to
config/packages/_sylius.yamlfile and add the following line:sylius_ui: use_webpack: false
If you decide to use Webpack, you need to follow the steps below:
- Make sure you have latest js dependencies installed (you can compare your
package.jsonfile with the one from1.12). - Make sure you have
webpack.config.jsfile, if not, you can copy it from Sylius/Sylius-Standard repository. - Run the following command
yarn encore dev
Remember! Every project is different, so you might need to adjust your code to work with Webpack.
We have introduced a new use_webpack global for Twig templates. It allows you to check if Webpack is declared as a build tool
to dynamically serve assets from the correct directory.
Example:
<div class="column">
<a href="{{ path('sylius_shop_homepage') }}">
{% if use_webpack %}
<img src="{{ asset('build/shop/images/logo.png', 'shop') }}" alt="Sylius logo" class="ui small image" />
{% else %}
<img src="{{ asset('assets/shop/img/logo.png') }}" alt="Sylius logo" class="ui small image" />
{% endif %}
</a>
</div>As the default mailer integration has been changed from Swiftmailer to Symfony Mailer, the following changes have to be applied.
- Remove the
config/packages/test/swiftmailer.yamlfile - Add a
config/packages/test/mailer.yamlfile with:framework: mailer: dsn: 'null://null' cache: pools: test.mailer_pool: adapter: cache.adapter.filesystem
- Change all occurrences of
sylius.behat.context.hook.email_spooltosylius.behat.context.hook.mailer.
Due to the changes in Symfony's session handling you might need to add the sylius.behat.context.hook.session context to your suites.