spree_api 6.0.0.rc1 → 6.0.0.rc3

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: spree_api
 version: !ruby/object:Gem::Version
-  version: 6.0.0.rc1
+  version: 6.0.0.rc3
 platform: ruby
 authors:
 - Vendo Connect Inc.
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-10-08 00:00:00.000000000 Z
+date: 2026-10-13 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rswag-specs
@@ -44,14 +44,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 6.0.0.rc1
+        version: 6.0.0.rc3
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 6.0.0.rc1
+        version: 6.0.0.rc3
 description: Spree Commerce Store / Admin API and HTTP webhooks
 email:
 - hello@spreecommerce.org
@@ -62,7 +62,6 @@ files:
 - LICENSE
 - README.md
 - Rakefile
-- app/controllers/concerns/spree/api/v3/address_params.rb
 - app/controllers/concerns/spree/api/v3/admin/auth_cookies.rb
 - app/controllers/concerns/spree/api/v3/admin/email_template_lookup.rb
 - app/controllers/concerns/spree/api/v3/admin/embed_permissions.rb
@@ -83,14 +82,15 @@ files:
 - app/controllers/concerns/spree/api/v3/channel_resolution.rb
 - app/controllers/concerns/spree/api/v3/company_address_writes.rb
 - app/controllers/concerns/spree/api/v3/current_password_confirmation.rb
-- app/controllers/concerns/spree/api/v3/direct_uploads.rb
 - app/controllers/concerns/spree/api/v3/error_handler.rb
+- app/controllers/concerns/spree/api/v3/file_uploads.rb
 - app/controllers/concerns/spree/api/v3/http_caching.rb
 - app/controllers/concerns/spree/api/v3/idempotent.rb
 - app/controllers/concerns/spree/api/v3/items_payload.rb
 - app/controllers/concerns/spree/api/v3/jwt_authentication.rb
 - app/controllers/concerns/spree/api/v3/key_store_context.rb
 - app/controllers/concerns/spree/api/v3/locale_and_currency.rb
+- app/controllers/concerns/spree/api/v3/money_params.rb
 - app/controllers/concerns/spree/api/v3/order_lock.rb
 - app/controllers/concerns/spree/api/v3/orders/claim_actions.rb
 - app/controllers/concerns/spree/api/v3/orders/delivery_actions.rb
@@ -101,7 +101,9 @@ files:
 - app/controllers/concerns/spree/api/v3/orders/shipping_label_actions.rb
 - app/controllers/concerns/spree/api/v3/params_normalizer.rb
 - app/controllers/concerns/spree/api/v3/permission_serialization.rb
+- app/controllers/concerns/spree/api/v3/purchase_serialization.rb
 - app/controllers/concerns/spree/api/v3/rate_limit_headers.rb
+- app/controllers/concerns/spree/api/v3/request_params.rb
 - app/controllers/concerns/spree/api/v3/resource_serializer.rb
 - app/controllers/concerns/spree/api/v3/scoped_authorization.rb
 - app/controllers/concerns/spree/api/v3/security_headers.rb
@@ -113,6 +115,7 @@ files:
 - app/controllers/concerns/spree/api/v3/storefront_access.rb
 - app/controllers/concerns/spree/api/v3/storefront_gating.rb
 - app/controllers/concerns/spree/api/v3/streams_shipping_label.rb
+- app/controllers/concerns/spree/api/v3/strict_money_params.rb
 - app/controllers/concerns/spree/api/v3/tax_identifier_validation.rb
 - app/controllers/spree/api/v3/admin/admin_users_controller.rb
 - app/controllers/spree/api/v3/admin/allowed_origins_controller.rb
@@ -164,7 +167,6 @@ files:
 - app/controllers/spree/api/v3/admin/delivery_profiles_controller.rb
 - app/controllers/spree/api/v3/admin/delivery_zones_controller.rb
 - app/controllers/spree/api/v3/admin/digital_links_controller.rb
-- app/controllers/spree/api/v3/admin/direct_uploads_controller.rb
 - app/controllers/spree/api/v3/admin/email_templates/drafts_controller.rb
 - app/controllers/spree/api/v3/admin/email_templates/previews_controller.rb
 - app/controllers/spree/api/v3/admin/email_templates/publications_controller.rb
@@ -175,6 +177,7 @@ files:
 - app/controllers/spree/api/v3/admin/email_templates_controller.rb
 - app/controllers/spree/api/v3/admin/exchanges_controller.rb
 - app/controllers/spree/api/v3/admin/exports_controller.rb
+- app/controllers/spree/api/v3/admin/files_controller.rb
 - app/controllers/spree/api/v3/admin/gift_card_batches_controller.rb
 - app/controllers/spree/api/v3/admin/gift_cards_controller.rb
 - app/controllers/spree/api/v3/admin/import_rows_controller.rb
@@ -265,6 +268,7 @@ files:
 - app/controllers/spree/api/v3/admin/translations/batches_controller.rb
 - app/controllers/spree/api/v3/admin/translations_controller.rb
 - app/controllers/spree/api/v3/admin/translations_coverage_controller.rb
+- app/controllers/spree/api/v3/admin/updates_controller.rb
 - app/controllers/spree/api/v3/admin/variants_controller.rb
 - app/controllers/spree/api/v3/admin/webhook_deliveries_controller.rb
 - app/controllers/spree/api/v3/admin/webhook_endpoints_controller.rb
@@ -279,8 +283,8 @@ files:
 - app/controllers/spree/api/v3/seller/delivery_methods_controller.rb
 - app/controllers/spree/api/v3/seller/delivery_profiles_controller.rb
 - app/controllers/spree/api/v3/seller/delivery_zones_controller.rb
-- app/controllers/spree/api/v3/seller/direct_uploads_controller.rb
 - app/controllers/spree/api/v3/seller/exports_controller.rb
+- app/controllers/spree/api/v3/seller/files_controller.rb
 - app/controllers/spree/api/v3/seller/import_rows_controller.rb
 - app/controllers/spree/api/v3/seller/imports_controller.rb
 - app/controllers/spree/api/v3/seller/invitation_acceptances_controller.rb
@@ -378,7 +382,33 @@ files:
 - app/models/spree/api/data_request_urls.rb
 - app/models/spree/api/digital_link_urls.rb
 - app/models/spree/api_key_ability.rb
+- app/request_schemas/spree/api/v3/address_request_schema.rb
+- app/request_schemas/spree/api/v3/admin/address_request_schema.rb
+- app/request_schemas/spree/api/v3/admin/bulk_tags_request_schema.rb
+- app/request_schemas/spree/api/v3/admin/catalog_order_minimum_request_schema.rb
+- app/request_schemas/spree/api/v3/admin/email_template_language_request_schema.rb
+- app/request_schemas/spree/api/v3/admin/email_template_preview_request_schema.rb
+- app/request_schemas/spree/api/v3/admin/price_adjustment_tier_request_schema.rb
+- app/request_schemas/spree/api/v3/admin/price_list_price_request_schema.rb
+- app/request_schemas/spree/api/v3/admin/price_list_rule_request_schema.rb
+- app/request_schemas/spree/api/v3/admin/product_membership_reposition_request_schema.rb
+- app/request_schemas/spree/api/v3/admin/promotion_action_calculator_request_schema.rb
+- app/request_schemas/spree/api/v3/admin/promotion_action_line_item_request_schema.rb
+- app/request_schemas/spree/api/v3/admin/promotion_action_request_schema.rb
+- app/request_schemas/spree/api/v3/admin/promotion_rule_request_schema.rb
+- app/request_schemas/spree/api/v3/admin/reason_request_schema.rb
+- app/request_schemas/spree/api/v3/admin/tax_identifier_request_schema.rb
+- app/request_schemas/spree/api/v3/custom_field_value_request_schema.rb
+- app/request_schemas/spree/api/v3/file_upload_request_schema.rb
+- app/request_schemas/spree/api/v3/media_request_schema.rb
+- app/request_schemas/spree/api/v3/price_request_schema.rb
+- app/request_schemas/spree/api/v3/stock_level_request_schema.rb
+- app/request_schemas/spree/api/v3/store/address_request_schema.rb
+- app/request_schemas/spree/api/v3/tax_identifier_request_schema.rb
+- app/request_schemas/spree/api/v3/variant_option_request_schema.rb
+- app/request_schemas/spree/api/v3/variant_request_schema.rb
 - app/serializers/concerns/spree/api/v3/admin/translatable.rb
+- app/serializers/concerns/spree/api/v3/purchase_summary.rb
 - app/serializers/spree/api/v3/address_serializer.rb
 - app/serializers/spree/api/v3/admin/actor_serializer.rb
 - app/serializers/spree/api/v3/admin/address_serializer.rb
@@ -440,6 +470,8 @@ files:
 - app/serializers/spree/api/v3/admin/exchange_serializer.rb
 - app/serializers/spree/api/v3/admin/export_serializer.rb
 - app/serializers/spree/api/v3/admin/fee_serializer.rb
+- app/serializers/spree/api/v3/admin/file_upload_serializer.rb
+- app/serializers/spree/api/v3/admin/file_upload_target_serializer.rb
 - app/serializers/spree/api/v3/admin/freight_summary_line_serializer.rb
 - app/serializers/spree/api/v3/admin/freight_summary_serializer.rb
 - app/serializers/spree/api/v3/admin/fulfillment_item_serializer.rb
@@ -453,6 +485,7 @@ files:
 - app/serializers/spree/api/v3/admin/invitation_acceptance_link_serializer.rb
 - app/serializers/spree/api/v3/admin/invitation_serializer.rb
 - app/serializers/spree/api/v3/admin/line_item_serializer.rb
+- app/serializers/spree/api/v3/admin/locale_serializer.rb
 - app/serializers/spree/api/v3/admin/market_serializer.rb
 - app/serializers/spree/api/v3/admin/media_serializer.rb
 - app/serializers/spree/api/v3/admin/membership_product_serializer.rb
@@ -523,6 +556,7 @@ files:
 - app/serializers/spree/api/v3/admin/tax_identifier_serializer.rb
 - app/serializers/spree/api/v3/admin/tax_line_serializer.rb
 - app/serializers/spree/api/v3/admin/tax_rate_serializer.rb
+- app/serializers/spree/api/v3/admin/update_status_serializer.rb
 - app/serializers/spree/api/v3/admin/variant_serializer.rb
 - app/serializers/spree/api/v3/admin/webhook_delivery_serializer.rb
 - app/serializers/spree/api/v3/admin/webhook_endpoint_serializer.rb
@@ -559,6 +593,8 @@ files:
 - app/serializers/spree/api/v3/exchange_serializer.rb
 - app/serializers/spree/api/v3/export_serializer.rb
 - app/serializers/spree/api/v3/fee_serializer.rb
+- app/serializers/spree/api/v3/file_upload_serializer.rb
+- app/serializers/spree/api/v3/file_upload_target_serializer.rb
 - app/serializers/spree/api/v3/freight_summary_serializer.rb
 - app/serializers/spree/api/v3/fulfillment_serializer.rb
 - app/serializers/spree/api/v3/gift_card_batch_serializer.rb
@@ -607,9 +643,11 @@ files:
 - app/serializers/spree/api/v3/return_serializer.rb
 - app/serializers/spree/api/v3/saved_report_event_serializer.rb
 - app/serializers/spree/api/v3/seller/account_serializer.rb
+- app/serializers/spree/api/v3/seller/address_serializer.rb
 - app/serializers/spree/api/v3/seller/balance_serializer.rb
 - app/serializers/spree/api/v3/seller/claim_line_item_serializer.rb
 - app/serializers/spree/api/v3/seller/claim_serializer.rb
+- app/serializers/spree/api/v3/seller/country_serializer.rb
 - app/serializers/spree/api/v3/seller/delivery_method_rule_serializer.rb
 - app/serializers/spree/api/v3/seller/delivery_method_serializer.rb
 - app/serializers/spree/api/v3/seller/delivery_profile_serializer.rb
@@ -619,6 +657,8 @@ files:
 - app/serializers/spree/api/v3/seller/exchange_line_item_serializer.rb
 - app/serializers/spree/api/v3/seller/exchange_serializer.rb
 - app/serializers/spree/api/v3/seller/export_serializer.rb
+- app/serializers/spree/api/v3/seller/file_upload_serializer.rb
+- app/serializers/spree/api/v3/seller/file_upload_target_serializer.rb
 - app/serializers/spree/api/v3/seller/fulfillment_item_serializer.rb
 - app/serializers/spree/api/v3/seller/fulfillment_serializer.rb
 - app/serializers/spree/api/v3/seller/import_mapping_serializer.rb
@@ -633,6 +673,8 @@ files:
 - app/serializers/spree/api/v3/seller/payment_split_serializer.rb
 - app/serializers/spree/api/v3/seller/payout_serializer.rb
 - app/serializers/spree/api/v3/seller/policy_serializer.rb
+- app/serializers/spree/api/v3/seller/price_history_serializer.rb
+- app/serializers/spree/api/v3/seller/price_serializer.rb
 - app/serializers/spree/api/v3/seller/product_serializer.rb
 - app/serializers/spree/api/v3/seller/product_submission_serializer.rb
 - app/serializers/spree/api/v3/seller/product_type_serializer.rb
@@ -644,6 +686,7 @@ files:
 - app/serializers/spree/api/v3/seller/return_line_item_serializer.rb
 - app/serializers/spree/api/v3/seller/return_serializer.rb
 - app/serializers/spree/api/v3/seller/shipping_label_serializer.rb
+- app/serializers/spree/api/v3/seller/state_serializer.rb
 - app/serializers/spree/api/v3/seller/stock_level_serializer.rb
 - app/serializers/spree/api/v3/seller/stock_location_serializer.rb
 - app/serializers/spree/api/v3/seller/tax_identifier_serializer.rb
@@ -668,7 +711,10 @@ files:
 - app/serializers/spree/api/v3/variant_serializer.rb
 - app/serializers/spree/api/v3/wishlist_item_serializer.rb
 - app/serializers/spree/api/v3/wishlist_serializer.rb
+- app/services/spree/api/v3/filter_predicates.rb
+- app/services/spree/api/v3/filter_table.rb
 - app/services/spree/api/v3/filters_aggregator.rb
+- app/services/spree/api/v3/request_schema.rb
 - app/services/spree/webhooks/deliver_webhook.rb
 - app/subscribers/spree/webhook_event_subscriber.rb
 - config/brakeman.ignore
@@ -725,8 +771,11 @@ files:
 - lib/spree/api/dependencies.rb
 - lib/spree/api/engine.rb
 - lib/spree/api/middleware/request_size_limit.rb
+- lib/spree/api/openapi/filter_documentation.rb
 - lib/spree/api/openapi/path_sorter.rb
 - lib/spree/api/openapi/schema_helper.rb
+- lib/spree/api/preference_families.rb
+- lib/spree/api/preference_types.rb
 - lib/spree/api/testing_support/always_register_type_hints.rb
 - lib/spree/api/testing_support/factories.rb
 - lib/spree/api/testing_support/matchers/webhooks.rb
@@ -735,6 +784,7 @@ files:
 - lib/spree/api/typelizer_generation.rb
 - lib/spree/api/webhook_event_types.rb
 - lib/spree_api.rb
+- lib/tasks/filters.rake
 - lib/typelizer/open_enums.rb
 - lib/typelizer/proc_resource_resolution.rb
 homepage: https://spreecommerce.org
@@ -742,9 +792,9 @@ licenses:
 - BSD-3-Clause
 metadata:
   bug_tracker_uri: https://github.com/spree/spree/issues
-  changelog_uri: https://github.com/spree/spree/releases/tag/v6.0.0.rc1
+  changelog_uri: https://github.com/spree/spree/releases/tag/v6.0.0.rc3
   documentation_uri: https://docs.spreecommerce.org/
-  source_code_uri: https://github.com/spree/spree/tree/v6.0.0.rc1
+  source_code_uri: https://github.com/spree/spree/tree/v6.0.0.rc3
 post_install_message:
 rdoc_options: []
 require_paths:

data/app/controllers/concerns/spree/api/v3/address_params.rb

@@ -1,17 +0,0 @@
-module Spree
-  module Api
-    module V3
-      # The writable attributes of a nested address.
-      #
-      # One list rather than one per controller: an address is the same record
-      # wherever it hangs, so a column added on one write path but missed on
-      # another is dropped silently.
-      module AddressParams
-        ADDRESS_KEYS = [
-          :first_name, :last_name, :company, :address1, :address2, :city,
-          :postal_code, :zipcode, :phone, :country_code, :state_code, :state_name, :label
-        ].freeze
-      end
-    end
-  end
-end

data/app/controllers/concerns/spree/api/v3/direct_uploads.rb

@@ -1,35 +0,0 @@
-module Spree
-  module Api
-    module V3
-      # Presigning for direct-to-storage uploads: a caller exchanges blob
-      # metadata for an upload URL and gets back a signed id to reference when
-      # it creates or updates a resource.
-      #
-      # Shared by the admin and seller branches because the exchange itself is
-      # audience-neutral — a blob created here is attached to nothing. What
-      # differs is the gate each branch puts in front of it, which stays on the
-      # including controller as its `scoped_resource`.
-      module DirectUploads
-        extend ActiveSupport::Concern
-
-        def create
-          blob = ActiveStorage::Blob.create_before_direct_upload!(**blob_params)
-
-          render json: {
-            direct_upload: {
-              url: blob.service_url_for_direct_upload,
-              headers: blob.service_headers_for_direct_upload
-            },
-            signed_id: blob.signed_id
-          }, status: :created
-        end
-
-        private
-
-        def blob_params
-          params.require(:blob).permit(:filename, :byte_size, :checksum, :content_type).to_h.symbolize_keys
-        end
-      end
-    end
-  end
-end

data/app/controllers/spree/api/v3/admin/direct_uploads_controller.rb

@@ -1,54 +0,0 @@
-module Spree
-  module Api
-    module V3
-      module Admin
-        class DirectUploadsController < Admin::BaseController
-          include Spree::Api::V3::DirectUploads
-
-          # Direct uploads is a write-adjacent presigning helper: callers exchange
-          # blob metadata for an upload URL, then reference the resulting
-          # signed_id when creating/updating a resource (product media, customer
-          # avatar, etc). The narrowest scope it can map to is `write_products`
-          # since that covers the dominant upload flow (product/variant media).
-          # Other admin-write flows that take signed_ids (e.g. customer avatar)
-          # already require the relevant `write_<resource>` scope on the
-          # subsequent PATCH, so this gate is the floor, not the only check.
-          scoped_resource :products
-
-          skip_before_action :authenticate_user
-
-          # POST /api/v3/admin/direct_uploads
-          #
-          # Overrides the shared concern's create to select the storage service:
-          # digital assets must land on private storage up front, since attaching
-          # a signed id never moves a blob between services.
-          def create
-            blob = ActiveStorage::Blob.create_before_direct_upload!(service_name: storage_service_name, **blob_params)
-
-            render json: {
-              direct_upload: {
-                url: blob.service_url_for_direct_upload,
-                headers: blob.service_headers_for_direct_upload
-              },
-              signed_id: blob.signed_id
-            }, status: :created
-          end
-
-          private
-
-          # Attaching a signed id never moves the blob between services, so a
-          # file destined for a private attachment has to be uploaded to the
-          # private service up front. `private: true` asks for that; everything
-          # else keeps landing on the public service as before.
-          def storage_service_name
-            if params[:private].to_b
-              Spree.private_storage_service_name
-            else
-              Spree.public_storage_service_name
-            end
-          end
-        end
-      end
-    end
-  end
-end

data/app/controllers/spree/api/v3/seller/direct_uploads_controller.rb

@@ -1,21 +0,0 @@
-module Spree
-  module Api
-    module V3
-      module Seller
-        # Presigning for a seller's own uploads — today the documents their
-        # onboarding asks for.
-        #
-        # A blob created here is not attached to anything yet: it becomes a
-        # submission only when the seller posts its signed id, and that
-        # endpoint is the one that checks the requirement is theirs. So the
-        # narrowest meaningful gate is the seller's own profile, which every
-        # member of a seller's team holds.
-        class DirectUploadsController < Seller::BaseController
-          include Spree::Api::V3::DirectUploads
-
-          scoped_resource :seller_profile
-        end
-      end
-    end
-  end
-end