spree_core 5.0.4 → 5.0.6

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 8dad7a44435e17f7a0b717356dfe3f8f70cac0e9a18f38f505ded42f3908faf5
-  data.tar.gz: 109859dd8b1790ab9c0a22c1457e03e81708d79007664f0c8afae841573dd43e
+  metadata.gz: 964d9b4646aa2d9c5ac22647f126c304bc7756b3034757b8bda9b0f9faa6d496
+  data.tar.gz: '07803df2f7c528d8a35c10b04f02f591b4c2ffe859163c7b2c94e5ad0edfc388'
 SHA512:
-  metadata.gz: f09637caac881e203c1ff4f1104c2035c89df6cf671d619b7b9e4786a82a4d65332e6537fa4932545e1782203c82f1b41bb6e4c416674df57de95ccbb014410f
-  data.tar.gz: 2e499043d9f6393d208ce6cdb823059e734748e79924612d408e6de48d5e36c89cb1799405dd62da06e53aa6b8df3693033a267948fb3e6a4fc2077d4efbce2d
+  metadata.gz: 36a5518a9bfd31ed6b6b3a74df7953534a8568cc36a7204acf0eca5499e93bd0b88068f35bd8b7dcbc52d09b9f47ea629cfa582a39d24d717d61c9803e865748
+  data.tar.gz: 46fb9aab1ceafb1d44f872e870908e3ff0df44458c4b6248a4bc6e54655f4de4e457b47c9a5c8c133b16cc631f93226a0280585cb8ebee3920b677cd48acee40

data/app/helpers/spree/base_helper.rb

@@ -242,7 +242,7 @@ module Spree
     end
 
     def spree_base_cache_key
-      [
+      @spree_base_cache_key ||= [
         I18n.locale,
         (current_currency if defined?(current_currency)),
         defined?(try_spree_current_user) && try_spree_current_user.present?,
@@ -258,6 +258,11 @@ module Spree
       Spree::DatabaseTypeUtilities.maximum_value_for(:integer)
     end
 
+    def payment_method_icon_tag(payment_method, opts = {})
+      image_tag "payment_icons/#{payment_method}.svg", opts
+    rescue Sprockets::Rails::Helper::AssetNotFound
+    end
+
     private
 
     def create_product_image_tag(image, product, options, style)

data/app/helpers/spree/images_helper.rb

@@ -18,10 +18,10 @@ module Spree
       width = options[:width]
       height = options[:height]
 
-      width = width * 2 if width.present?
-      height = height * 2 if height.present?
+      width *= 2 if width.present?
+      height *= 2 if height.present?
 
-      return unless image.attached?
+      return if image.respond_to?(:attached?) && !image.attached?
       return unless image.variable?
 
       if width.present? && height.present?
@@ -51,17 +51,18 @@ module Spree
       return unless height
       return if height.zero?
 
-      w, h = width.to_f, height.to_f
+      w = width.to_f
+      h = height.to_f
 
       # Always return width / height, flipping if needed
-      if h > w
-        ratio = h / w
-      elsif h < w
-        ratio = w / h
-      else
-        # h == w, square image
-        ratio = 1.0
-      end
+      ratio = if h > w
+                h / w
+              elsif h < w
+                w / h
+              else
+                # h == w, square image
+                1.0
+              end
 
       ratio.round(3)
     end

data/app/helpers/spree/mail_helper.rb

@@ -1,10 +1,11 @@
 module Spree
   module MailHelper
-    include BaseHelper
+    include Spree::BaseHelper
+    include Spree::ImagesHelper
 
     def variant_image_url(variant)
-      image = default_image_for_product_or_variant(variant)
-      image ? main_app.cdn_image_url(image.url(:small)) : image_url('noimage/small.png')
+      image = variant.default_image
+      image.present? && image.attached? ? spree_image_url(image, width: 100, height: 100) : image_url('noimage/small.png')
     end
 
     def name_for(order)

data/app/models/concerns/spree/payment_source_concern.rb

@@ -0,0 +1,39 @@
+module Spree
+  module PaymentSourceConcern
+    extend ActiveSupport::Concern
+
+    # Available actions for the payment source.
+    # @return [Array<String>]
+    def actions
+      %w{capture void credit}
+    end
+
+    # Indicates whether its possible to capture the payment
+    # @param payment [Spree::Payment]
+    # @return [Boolean]
+    def can_capture?(payment)
+      payment.pending? || payment.checkout?
+    end
+
+    # Indicates whether its possible to void the payment.
+    # @param payment [Spree::Payment]
+    # @return [Boolean]
+    def can_void?(payment)
+      !payment.failed? && !payment.void?
+    end
+
+    # Indicates whether its possible to credit the payment.  Note that most gateways require that the
+    # payment be settled first which generally happens within 12-24 hours of the transaction.
+    # @param payment [Spree::Payment]
+    # @return [Boolean]
+    def can_credit?(payment)
+      payment.completed? && payment.credit_allowed > 0
+    end
+
+    # Returns true if the payment source has a payment profile.
+    # @return [Boolean]
+    def has_payment_profile?
+      gateway_customer_profile_id.present? || gateway_payment_profile_id.present?
+    end
+  end
+end

data/app/models/spree/credit_card.rb

@@ -2,6 +2,8 @@ module Spree
   class CreditCard < Spree.base_class
     include ActiveMerchant::Billing::CreditCardMethods
     include Spree::Metadata
+    include Spree::PaymentSourceConcern
+
     if defined?(Spree::Webhooks::HasWebhooks)
       include Spree::Webhooks::HasWebhooks
     end
@@ -135,30 +137,6 @@ module Spree
       brand.present? ? brand.upcase : Spree.t(:no_cc_type)
     end
 
-    def actions
-      %w{capture void credit}
-    end
-
-    # Indicates whether its possible to capture the payment
-    def can_capture?(payment)
-      payment.pending? || payment.checkout?
-    end
-
-    # Indicates whether its possible to void the payment.
-    def can_void?(payment)
-      !payment.failed? && !payment.void?
-    end
-
-    # Indicates whether its possible to credit the payment.  Note that most gateways require that the
-    # payment be settled first which generally happens within 12-24 hours of the transaction.
-    def can_credit?(payment)
-      payment.completed? && payment.credit_allowed > 0
-    end
-
-    def has_payment_profile?
-      gateway_customer_profile_id.present? || gateway_payment_profile_id.present?
-    end
-
     # ActiveMerchant needs first_name/last_name because we pass it a Spree::CreditCard and it calls those methods on it.
     # Looking at the ActiveMerchant source code we should probably be calling #to_active_merchant before passing
     # the object to ActiveMerchant but this should do for now.

data/app/models/spree/custom_domain.rb

@@ -28,7 +28,7 @@ module Spree
     def url_is_valid
       parts = url.split('.')
 
-      errors.add(:url, 'use domain or subdomain') if (parts[0] != 'www' && parts.size > 3) || (parts[0] == 'www' && parts.size > 4) || parts.size < 2
+      errors.add(:url, 'use domain or subdomain') if parts.size > 4 || parts.size < 2
     end
 
     def ensure_default

data/app/models/spree/gateway/custom_payment_source_method.rb

@@ -0,0 +1,33 @@
+module Spree
+  class Gateway::CustomPaymentSourceMethod < Gateway
+    def provider_class
+      self.class
+    end
+
+    def payment_source_class
+      Spree::PaymentSource
+    end
+
+    def payment_profiles_supported?
+      true
+    end
+
+    def show_in_admin?
+      false
+    end
+
+    def create_profile(payment)
+      return if payment.source.gateway_customer.present?
+
+      user = payment.source.user || payment.order.user
+      return if user.blank?
+
+      find_or_create_customer(user)
+    end
+
+    # simulate a 3rd party payment gateway api to fetch/or create a customer
+    def find_or_create_customer(user)
+      gateway_customers.find_or_create_by!(user: user, profile_id: "CUSTOMER-#{user.id}")
+    end
+  end
+end

data/app/models/spree/option_value.rb

@@ -62,9 +62,9 @@ module Spree
     delegate :name, :presentation, to: :option_type, prefix: true, allow_nil: true
 
     def self.to_tom_select_json
-      all.pluck(:id, :presentation).map do |id, presentation|
+      all.pluck(:name, :presentation).map do |name, presentation|
         {
-          id: id,
+          id: name,
           name: presentation
         }
       end

data/app/models/spree/page_sections/featured_posts.rb

@@ -19,6 +19,10 @@ module Spree
         'news'
       end
 
+      def posts
+        Spree::Post.published.by_newest.limit(preferred_max_posts_to_show)
+      end
+
       private
 
       def make_posts_to_show_valid

data/app/models/spree/payment.rb

@@ -302,7 +302,8 @@ module Spree
       # Payment profile cannot be created without source
       return unless source
       # Imported payments shouldn't create a payment profile.
-      return if source.imported
+      # Imported is only available on Spree::CreditCard, non-credit card payments should not have this attribute.
+      return if source.respond_to?(:imported) && source.imported
 
       payment_method.create_profile(self)
     rescue ActiveMerchant::ConnectionError => e

data/app/models/spree/payment_source.rb

@@ -1,10 +1,31 @@
+# This model is used to store payment sources for non-credit card payments, eg wallet, account, etc.
 module Spree
   class PaymentSource < Spree.base_class
     include Spree::Metadata
+    include Spree::PaymentSourceConcern
 
+    #
+    # Associations
+    #
     belongs_to :payment_method, class_name: 'Spree::PaymentMethod'
     belongs_to :user, class_name: Spree.user_class.to_s, optional: true
 
+    #
+    # Validations
+    #
     validates_uniqueness_of :gateway_payment_profile_id, scope: :type
+
+    #
+    # Delegations
+    #
+    delegate :profile_id, to: :gateway_customer, prefix: true, allow_nil: true
+
+    # Returns the gateway customer for the user.
+    # @return [Spree::GatewayCustomer]
+    def gateway_customer
+      return if user.blank?
+
+      payment_method.gateway_customers.find_by(user: user)
+    end
   end
 end

data/app/models/spree/post.rb

@@ -54,6 +54,7 @@ module Spree
     # Scopes
     #
     scope :published, -> { where(published_at: [..Time.current]) }
+    scope :by_newest, -> { order(created_at: :desc) }
 
     delegate :name, to: :author, prefix: true, allow_nil: true
     delegate :title, to: :post_category, prefix: true, allow_nil: true

data/app/models/spree/product/slugs.rb

@@ -0,0 +1,112 @@
+module Spree
+  class Product < Spree.base_class
+    module Slugs
+      extend ActiveSupport::Concern
+
+      included do
+        extend FriendlyId
+        include Spree::TranslatableResourceSlug
+
+        translates :slug
+        friendly_id :slug_candidates, use: [:history, :slugged, :scoped, :mobility], scope: spree_base_uniqueness_scope, slug_limit: 255
+
+        Product::Translation.class_eval do
+          acts_as_paranoid
+          # deleted translation values also need to be accessible for index views listing deleted resources
+          default_scope { unscope(where: :deleted_at) }
+
+          before_validation :set_slug
+          before_validation :ensure_slug_is_unique
+
+          validates :slug, presence: true, uniqueness: { allow_blank: true, case_sensitive: true, scope: [*::Spree.base_class.spree_base_uniqueness_scope, :locale] }
+
+          private
+
+          def set_slug
+            self.slug = generate_slug
+          end
+
+          def generate_slug
+            if name.blank? && slug.blank?
+              translated_model.name.to_url
+            elsif slug.blank?
+              name.to_url
+            else
+              slug.to_url
+            end
+          end
+
+          def ensure_slug_is_unique
+            slug_exists = self.class.where(slug: slug, locale: locale).where.not(id: id).exists?
+            self.slug = [slug, SecureRandom.uuid].join('-') if slug_exists
+          end
+        end
+
+        before_validation :downcase_slug
+        before_validation :normalize_slug, on: :update
+        after_destroy :punch_slugs
+        after_restore :regenerate_slug
+
+        validates :slug, presence: true, uniqueness: { allow_blank: true, case_sensitive: true, scope: spree_base_uniqueness_scope }
+
+        def self.slug_available?(slug, id)
+          !where(slug: slug).where.not(id: id).exists?
+        end
+      end
+
+      def ensure_slug_is_unique(candidate_slug)
+        return slug if candidate_slug.blank? || slug.blank?
+        return candidate_slug if self.class.slug_available?(candidate_slug, id)
+
+        normalize_friendly_id([candidate_slug, uuid_for_friendly_id])
+      end
+
+      private
+
+      def slug_candidates
+        if defined?(:deleted_at) && deleted_at.present?
+          [
+            ['deleted', :name],
+            ['deleted', :name, :sku],
+            ['deleted', :name, :uuid_for_friendly_id]
+          ]
+        else
+          [
+            [:name],
+            [:name, :sku],
+            [:name, :uuid_for_friendly_id]
+          ]
+        end
+      end
+
+      def downcase_slug
+        slug&.downcase!
+      end
+
+      def normalize_slug
+        self.slug = normalize_friendly_id(slug)
+      end
+
+      def regenerate_slug
+        self.slug = nil
+        save!
+      end
+
+      def punch_slugs
+        return if new_record? || frozen?
+
+        self.slug = nil
+
+        set_slug
+        update_column(:slug, slug)
+
+        new_slug = ->(rec) { "deleted-#{rec.id}_#{rec.slug}"[..254] }
+
+        translations.with_deleted.each { |rec| rec.update_columns(slug: new_slug.call(rec)) }
+        slugs.with_deleted.each { |rec| rec.update_column(:slug, new_slug.call(rec)) }
+
+        translations.find_by!(locale: I18n.locale).update_column(:slug, slug) if Spree.use_translations?
+      end
+    end
+  end
+end

data/app/models/spree/product.rb

@@ -20,14 +20,17 @@
 
 module Spree
   class Product < Spree.base_class
-    extend FriendlyId
+    acts_as_paranoid
+    acts_as_taggable_on :tags, :labels
+    auto_strip_attributes :name
+
     include Spree::ProductScopes
     include Spree::MultiStoreResource
     include Spree::TranslatableResource
-    include Spree::TranslatableResourceSlug
     include Spree::MemoizedData
     include Spree::Metadata
     include Spree::Product::Webhooks
+    include Spree::Product::Slugs
     if defined?(Spree::VendorConcern)
       include Spree::VendorConcern
     end
@@ -53,33 +56,8 @@ module Spree
         pg_search_scope :search_by_name, against: { name: 'A', meta_title: 'B' },
                                          using: { tsearch: { prefix: true, any_word: true } }
       end
-
-      before_save :set_slug
-      acts_as_paranoid
-      # deleted translation values also need to be accessible for index views listing deleted resources
-      default_scope { unscope(where: :deleted_at) }
-      def set_slug
-        self.slug = generate_slug
-      end
-
-      private
-
-      def generate_slug
-        if name.blank? && slug.blank?
-          translated_model.name.to_url
-        elsif slug.blank?
-          name.to_url
-        else
-          slug.to_url
-        end
-      end
     end
 
-    friendly_id :slug_candidates, use: [:history, :scoped, :mobility], scope: spree_base_uniqueness_scope
-    acts_as_paranoid
-    auto_strip_attributes :name
-    acts_as_taggable_on :tags, :labels
-
     # we need to have this callback before any dependent: :destroy associations
     # https://github.com/rails/rails/issues/3458
     before_destroy :ensure_not_in_complete_orders
@@ -145,17 +123,12 @@ module Spree
     after_initialize :ensure_master
     after_initialize :assign_default_tax_category
 
-    before_validation :downcase_slug
-    before_validation :normalize_slug, on: :update
     before_validation :validate_master
     before_validation :ensure_default_shipping_category
 
     after_create :add_associations_from_prototype
     after_create :build_variants_from_option_values_hash, if: :option_values_hash
 
-    after_destroy :punch_slug
-    after_restore :update_slug_history
-
     after_save :save_master
     after_save :run_touch_callbacks, if: :anything_changed?
     after_save :reset_nested_changes
@@ -173,7 +146,6 @@ module Spree
       validates :price, if: :requires_price?
     end
 
-    validates :slug, presence: true, uniqueness: { allow_blank: true, case_sensitive: true, scope: spree_base_uniqueness_scope }
     validate :discontinue_on_must_be_later_than_make_active_at, if: -> { make_active_at && discontinue_on }
 
     scope :for_store, ->(store) { joins(:store_products).where(StoreProduct.table_name => { store_id: store.id }) }
@@ -512,17 +484,6 @@ module Spree
       where conditions.inject(:or)
     end
 
-    def self.slug_available?(slug, id)
-      !where(slug: slug).where.not(id: id).exists?
-    end
-
-    def ensure_slug_is_unique(candidate_slug)
-      return slug if candidate_slug.blank? || slug.blank?
-      return candidate_slug if self.class.slug_available?(candidate_slug, id)
-
-      normalize_friendly_id([candidate_slug, uuid_for_friendly_id])
-    end
-
     # Suitable for displaying only variants that has at least one option value.
     # There may be scenarios where an option type is removed and along with it
     # all option values. At that point all variants associated with only those
@@ -738,25 +699,6 @@ module Spree
       self.tax_category = Spree::TaxCategory.default if new_record?
     end
 
-    def normalize_slug
-      self.slug = normalize_friendly_id(slug)
-    end
-
-    def punch_slug
-      # punch slug with date prefix to allow reuse of original
-      return if frozen?
-
-      update_column(:slug, "#{Time.current.to_i}_#{slug}"[0..254])
-
-      translations.with_deleted.each do |t|
-        t.update_column :slug, "#{Time.current.to_i}_#{t.slug}"[0..254]
-      end
-    end
-
-    def update_slug_history
-      save!
-    end
-
     def anything_changed?
       saved_changes? || @nested_changes
     end
@@ -812,14 +754,6 @@ module Spree
       end
     end
 
-    # Try building a slug based on the following fields in increasing order of specificity.
-    def slug_candidates
-      [
-        :name,
-        [:name, :sku]
-      ]
-    end
-
     def run_touch_callbacks
       run_callbacks(:touch)
     end
@@ -867,10 +801,6 @@ module Spree
       previously_new_record? || tag_list_previously_changed? || available_on_previously_changed?
     end
 
-    def downcase_slug
-      slug&.downcase!
-    end
-
     def after_activate
       # Implement your logic here
     end

data/app/models/spree/promotion/rules/item_total.rb

@@ -27,39 +27,39 @@ module Spree
             upper_limit_condition = true
           end
 
-          eligibility_errors.add(:base, ineligible_message_max) unless upper_limit_condition
-          eligibility_errors.add(:base, ineligible_message_min) unless lower_limit_condition
+          eligibility_errors.add(:base, ineligible_message_max(order)) unless upper_limit_condition
+          eligibility_errors.add(:base, ineligible_message_min(order)) unless lower_limit_condition
 
           eligibility_errors.empty?
         end
 
         private
 
-        def formatted_amount_min
-          Spree::Money.new(preferred_amount_min).to_s
+        def formatted_amount_min(order)
+          Spree::Money.new(preferred_amount_min, currency: order.currency).to_s
         end
 
-        def formatted_amount_max
+        def formatted_amount_max(order)
           if preferred_amount_max.present?
-            Spree::Money.new(preferred_amount_max).to_s
+            Spree::Money.new(preferred_amount_max, currency: order.currency).to_s
           else
             Spree.t('no_maximum')
           end
         end
 
-        def ineligible_message_max
+        def ineligible_message_max(order)
           if preferred_operator_max == 'lt'
-            eligibility_error_message(:item_total_more_than_or_equal, amount: formatted_amount_max)
+            eligibility_error_message(:item_total_more_than_or_equal, amount: formatted_amount_max(order))
           else
-            eligibility_error_message(:item_total_more_than, amount: formatted_amount_max)
+            eligibility_error_message(:item_total_more_than, amount: formatted_amount_max(order))
           end
         end
 
-        def ineligible_message_min
+        def ineligible_message_min(order)
           if preferred_operator_min == 'gte'
-            eligibility_error_message(:item_total_less_than, amount: formatted_amount_min)
+            eligibility_error_message(:item_total_less_than, amount: formatted_amount_min(order))
           else
-            eligibility_error_message(:item_total_less_than_or_equal, amount: formatted_amount_min)
+            eligibility_error_message(:item_total_less_than_or_equal, amount: formatted_amount_min(order))
           end
         end
       end

data/app/models/spree/shipping_method.rb

@@ -93,7 +93,7 @@ module Spree
       if estimated_transit_business_days_min == estimated_transit_business_days_max
         estimated_transit_business_days_min.to_s
       else
-        "#{estimated_transit_business_days_min}-#{estimated_transit_business_days_max}"
+        [estimated_transit_business_days_min, estimated_transit_business_days_max].compact.join("-")
       end
     end
 

data/app/models/spree/taxon.rb

@@ -153,6 +153,10 @@ module Spree
       sort_order == 'manual'
     end
 
+    def page_builder_image
+      square_image.presence || image
+    end
+
     def active_products_with_descendants
       @active_products_with_descendants ||= store.products.
                                             joins(:classifications).

data/app/models/spree/theme.rb

@@ -155,7 +155,7 @@ module Spree
       end
     end
 
-    # Returns an array of available layout section classes for the theme
+    # Returns an array of available layout section classes for the theme, eg. header, footer, newsletter, etc.
     #
     # @return [Array<Class>]
     def available_layout_sections

data/app/models/spree/wishlist.rb

@@ -36,6 +36,13 @@ module Spree
       @wished_items_count ||= variant_ids.count
     end
 
+    # returns the variant ids in the wishlist
+    #
+    # @return [Array<Integer>]
+    def variant_ids
+      @variant_ids ||= wished_items.pluck(:variant_id)
+    end
+
     def self.get_by_param(param)
       find_by(token: param)
     end

data/app/services/spree/products/prepare_nested_attributes.rb

@@ -136,8 +136,15 @@ module Spree
             o.position = opt[:position]
             o.save!
           end
-          option_value = option_type.option_values.where(name: opt[:value].parameterize).first_or_initialize do |o|
-            o.name = o.presentation = opt[:value]
+
+          option_value_identificator = if opt[:option_value_name].present?
+                                         opt[:option_value_name]
+                                       else
+                                         opt[:option_value_presentation].parameterize
+                                       end
+
+          option_value = option_type.option_values.where(name: option_value_identificator).first_or_initialize do |o|
+            o.name = o.presentation = opt[:option_value_presentation]
             o.save!
           end
 

data/app/views/spree/addresses/_form.html.erb

@@ -5,7 +5,7 @@
      data-controller="address-form address-autocomplete"
      data-address-form-countries-value="<%= available_countries.to_json %>"
      data-address-form-states-value="<%= available_states.to_json %>"
-     data-address-form-current-state-id-value="<%= address.state_id %>"
+     data-address-form-current-state-id-value="<%= address.state_id || address_form.object.state_id %>"
 >
   <div id="<%= "#{address_id}country" %>">
     <div class="form-group mb-0">

data/app/views/spree/shared/_payment.html.erb

@@ -30,6 +30,15 @@
     <div class="flex-shrink-0">
       <%= payment_method_icon_tag source.class.to_s.demodulize.downcase, height: 30 %>
     </div>
+    <div>
+      <% if payment.payment_method.respond_to?(:source_partial_name) %>
+        <%= render partial: "spree/payment_sources/#{payment.payment_method.source_partial_name}", locals: { payment: payment, source: source } %>
+      <% elsif source.respond_to?(:name) %>
+        <%= source.name %>
+      <% else %>
+        <%= source.class.to_s.demodulize.downcase %>
+      <% end %>
+    </div>
   <% else %>
     <div class="flex-shrink-0">
       <%= payment_method_icon_tag payment.payment_method.payment_icon_name %>

data/config/locales/en.yml

@@ -716,6 +716,7 @@ en:
     capture: Capture
     capture_events: Capture events
     card_code: Card Verification Code (CVC)
+    card_expiration_placeholder: MM/YYYY
     card_number: Card Number
     card_type: Brand
     card_type_is: Card type is
@@ -891,6 +892,8 @@ en:
     destroy: Destroy
     details: Details
     developers: Developers
+    didn_t_receive_confirmation_instructions: Didn't receive confirmation instructions?
+    didn_t_receive_unlock_instructions: Didn't receive unlock instructions?
     digital:
       digital_delivery: Digital Delivery
     digital_assets: Digital assets
@@ -1208,6 +1211,9 @@ en:
     metadata: Metadata
     min: Min
     minimal_amount: Minimal Amount
+    minimum_password_length:
+      one: "(%{count} character minimum)"
+      other: "(%{count} characters minimum)"
     missing_return_authorization: Missing Return Authorization for %{item_name}.
     month: Month
     more: More
@@ -1481,7 +1487,7 @@ en:
     password_protected: Password protected
     paste: Paste
     path: Path
-    pay: pay
+    pay: Pay
     payment: Payment
     payment_amount: Payment amount
     payment_attempts: failed attempts
@@ -1498,11 +1504,11 @@ en:
     payment_source: Payment source
     payment_state: Payment State
     payment_states:
-      balance_due: Balance due
+      balance_due: Balance Due
       checkout: Checkout
       complete: Complete
       completed: Completed
-      credit_owed: Credit owed
+      credit_owed: Credit Owed
       failed: Failed
       paid: Paid
       partially_refunded: Partially Refunded
@@ -1526,8 +1532,6 @@ en:
     please_check_back_soon: Please check back soon.
     please_define_payment_methods: Please define some payment methods first.
     please_enter_reasonable_quantity: Please enter a reasonable quantity.
-    please_select: Please select
-    please_select_all_options: Please select all options
     policies: Policies
     populate_get_error: Something went wrong. Please try adding the item again.
     post_categories: Post categories
@@ -1878,6 +1882,7 @@ en:
     show_store_selector:
       long: Display the Store selector in the main nav bar of Storefront and allow users to change Store and Currency
       short: Show Store selector
+    sign_in_with_provider: Sign in with %{provider}
     sign_out: Sign out
     sign_up: Sign Up
     site_name: Site name
@@ -2098,6 +2103,7 @@ en:
     timezone: Timezone
     title: Title
     title_link: Title link
+    to: To
     to_add_variants_you_must_first_define: To add variants, you must first define
     toggle_menu: Toggle menu
     top_suggestions: Top suggestions

data/lib/generators/spree/authentication/devise/devise_generator.rb

@@ -33,6 +33,8 @@ module Spree
     include Spree::UserPaymentSource
             RUBY
           end
+          gsub_file user_class_file, "< ApplicationRecord", "< Spree.base_class"
+
           say "Successfully added Spree user modules into #{user_class_file}"
         else
           say "Could not locate user model file at #{user_class_file}. Please add these lines manually:", :red
@@ -42,13 +44,14 @@ module Spree
             include Spree::UserMethods
             include Spree::UserPaymentSource
           RUBY
+
+          say "Please replace < ApplicationRecord with < Spree.base_class in #{user_class_file}"
         end
 
         append_file 'config/initializers/spree.rb' do
           %Q{
             if defined?(Devise) && Devise.respond_to?(:parent_controller)
-              Devise.parent_controller = "Spree::StoreController"
-              Devise.parent_mailer = "Spree::BaseMailer"
+              Devise.parent_controller = "Spree::BaseController"
             end\n}
         end
       end

data/lib/generators/spree/install/install_generator.rb

@@ -78,6 +78,11 @@ module Spree
     def install_storefront
       if @install_storefront && Spree::Core::Engine.frontend_available?
         generate 'spree:storefront:install'
+
+        # generate devise controllers if authentication is devise
+        if @authentication == 'devise'
+          generate 'spree:storefront:devise'
+        end
       end
     end
 

data/lib/spree/core/engine.rb

@@ -96,6 +96,7 @@ module Spree
         Rails.application.config.spree.payment_methods = [
           Spree::Gateway::Bogus,
           Spree::Gateway::BogusSimple,
+          Spree::Gateway::CustomPaymentSourceMethod,
           Spree::PaymentMethod::Check,
           Spree::PaymentMethod::StoreCredit
         ]

data/lib/spree/core/version.rb

@@ -1,5 +1,5 @@
 module Spree
-  VERSION = '5.0.4'.freeze
+  VERSION = '5.0.6'.freeze
 
   def self.version
     VERSION

data/lib/spree/permitted_attributes.rb

@@ -165,7 +165,14 @@ module Spree
       :product_id, :product, :option_values_attributes, :price, :compare_at_price,
       :weight, :height, :width, :depth, :sku, :barcode, :cost_currency,
       :weight_unit, :dimensions_unit,
-      { options: [:name, :value], option_value_ids: [] }
+      {
+        options: [:id, :name, :option_value_presentation, :option_value_name, :position, :_destroy],
+        stock_items_attributes: [:id, :count_on_hand, :stock_location_id, :backorderable, :_destroy],
+        prices_attributes: [:id, :amount, :compare_at_amount, :currency, :_destroy],
+        price: {},
+        option_value_variants_attributes: [:id, :option_value_id, :_destroy],
+        option_value_ids: []
+      }
     ]
 
     @@wishlist_attributes = [:name, :is_default, :is_private]

data/lib/spree/testing_support/common_rake.rb

@@ -46,21 +46,39 @@ namespace :common do
       "--authentication=#{args[:authentication]}"
     ]
 
-    puts 'Setting up dummy database...'
-    system('bin/rails db:environment:set RAILS_ENV=test > /dev/null 2>&1')
-    system('bundle exec rake db:drop db:create > /dev/null 2>&1')
-    Spree::DummyModelGenerator.start
-    system('bundle exec rake db:migrate > /dev/null 2>&1')
+    if !skip_javascript || ENV['LIB_NAME'] == 'spree/emails'
+      puts 'Precompiling assets...'
+      system('bundle exec rake assets:precompile > /dev/null 2>&1')
+    end
+
+    unless ENV['NO_MIGRATE']
+      puts 'Setting up dummy database...'
+      system('bin/rails db:environment:set RAILS_ENV=test > /dev/null 2>&1')
+      system('bundle exec rake db:drop db:create > /dev/null 2>&1')
+      Spree::DummyModelGenerator.start
+      system('bundle exec rake db:migrate > /dev/null 2>&1')
+    end
 
     begin
       require "generators/#{ENV['LIB_NAME']}/install/install_generator"
       puts 'Running extension installation generator...'
-      "#{ENV['LIB_NAME'].camelize}::Generators::InstallGenerator".constantize.start(['--auto-run-migrations'])
+
+      if ENV['NO_MIGRATE']
+        "#{ENV['LIB_NAME'].camelize}::Generators::InstallGenerator".constantize.start([])
+      else
+        "#{ENV['LIB_NAME'].camelize}::Generators::InstallGenerator".constantize.start(['--auto-run-migrations'])
+      end
     rescue LoadError
       puts 'Skipping installation no generator to run...'
     end
+  end
 
-    system('bundle exec rake assets:precompile > /dev/null 2>&1') if !skip_javascript || ENV['LIB_NAME'] == 'spree/emails'
+  task :db_setup do |_t|
+    puts 'Setting up dummy database...'
+    system('bin/rails db:environment:set RAILS_ENV=test > /dev/null 2>&1')
+    system('bundle exec rake db:drop db:create > /dev/null 2>&1')
+    Spree::DummyModelGenerator.start
+    system('bundle exec rake db:migrate > /dev/null 2>&1')
   end
 
   task :seed do |_t|

data/lib/spree/testing_support/extension_rake.rb

@@ -2,7 +2,7 @@ require 'spree/testing_support/common_rake'
 
 desc 'Generates a dummy app for testing an extension'
 namespace :extension do
-  task :test_app, [:user_class] do |_t, args|
+  task :test_app, [:authentication, :user_class] do |_t, args|
     Spree::DummyGeneratorHelper.inject_extension_requirements = true
     Rake::Task['common:test_app'].execute(args.with_defaults(install_admin: true, install_storefront: true))
   end

data/lib/spree/testing_support/factories/page_section_factory.rb

@@ -20,5 +20,9 @@ FactoryBot.define do
     factory :newsletter_page_section, class: Spree::PageSections::Newsletter
 
     factory :video_page_section, class: Spree::PageSections::Video
+
+    factory :image_with_text_page_section, class: Spree::PageSections::ImageWithText
+
+    factory :featured_posts_page_section, class: Spree::PageSections::FeaturedPosts
   end
 end

data/lib/spree/testing_support/factories/payment_factory.rb

@@ -14,6 +14,11 @@ FactoryBot.define do
         create(:refund, amount: 5, payment: payment)
       end
     end
+
+    factory :custom_payment, class: Spree::Payment do
+      payment_method { create(:custom_payment_method, stores: [order.store]) }
+      source { create(:payment_source, user: order.user, payment_method: payment_method) }
+    end
   end
 
   factory :check_payment, class: Spree::Payment do

data/lib/spree/testing_support/factories/payment_method_factory.rb

@@ -37,4 +37,9 @@ FactoryBot.define do
     active        { true }
     auto_capture  { true }
   end
+
+  factory :custom_payment_method, parent: :payment_method, class: Spree::Gateway::CustomPaymentSourceMethod do
+    type { 'Spree::Gateway::CustomPaymentSourceMethod' }
+    name { 'Custom' }
+  end
 end

data/lib/spree/testing_support/factories/payment_source_factory.rb

@@ -0,0 +1,5 @@
+FactoryBot.define do
+  factory :payment_source, class: Spree::PaymentSource do
+    association(:payment_method, factory: :custom_payment_method)
+  end
+end

data/lib/spree/testing_support/factories/taxon_factory.rb

@@ -9,6 +9,12 @@ FactoryBot.define do
     trait :with_description do
       description { '<div>Test <strong>description</strong></div>' }
     end
+
+    trait :with_header_image do
+      after(:create) do |taxon|
+        taxon.image.attach(io: File.new(Spree::Core::Engine.root.join('spec', 'fixtures', 'thinking-cat.jpg')), filename: 'thinking-cat.jpg')
+      end
+    end
   end
 
   factory :automatic_taxon, parent: :taxon do

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: spree_core
 version: !ruby/object:Gem::Version
-  version: 5.0.4
+  version: 5.0.6
 platform: ruby
 authors:
 - Sean Schofield
@@ -10,7 +10,7 @@ authors:
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2025-05-22 00:00:00.000000000 Z
+date: 2025-08-06 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: i18n-tasks
@@ -603,6 +603,7 @@ files:
 - app/models/concerns/spree/number_as_param.rb
 - app/models/concerns/spree/number_identifier.rb
 - app/models/concerns/spree/parameterizable_name.rb
+- app/models/concerns/spree/payment_source_concern.rb
 - app/models/concerns/spree/previewable.rb
 - app/models/concerns/spree/product_scopes.rb
 - app/models/concerns/spree/ransackable_attributes.rb
@@ -666,6 +667,7 @@ files:
 - app/models/spree/gateway.rb
 - app/models/spree/gateway/bogus.rb
 - app/models/spree/gateway/bogus_simple.rb
+- app/models/spree/gateway/custom_payment_source_method.rb
 - app/models/spree/gateway_customer.rb
 - app/models/spree/image.rb
 - app/models/spree/image/configuration/active_storage.rb
@@ -764,6 +766,7 @@ files:
 - app/models/spree/preference.rb
 - app/models/spree/price.rb
 - app/models/spree/product.rb
+- app/models/spree/product/slugs.rb
 - app/models/spree/product/webhooks.rb
 - app/models/spree/product_option_type.rb
 - app/models/spree/product_promotion_rule.rb
@@ -1229,6 +1232,7 @@ files:
 - lib/spree/testing_support/factories/payment_capture_event_factory.rb
 - lib/spree/testing_support/factories/payment_factory.rb
 - lib/spree/testing_support/factories/payment_method_factory.rb
+- lib/spree/testing_support/factories/payment_source_factory.rb
 - lib/spree/testing_support/factories/post_category_factory.rb
 - lib/spree/testing_support/factories/post_factory.rb
 - lib/spree/testing_support/factories/price_factory.rb
@@ -1308,9 +1312,9 @@ licenses:
 - BSD-3-Clause
 metadata:
   bug_tracker_uri: https://github.com/spree/spree/issues
-  changelog_uri: https://github.com/spree/spree/releases/tag/v5.0.4
+  changelog_uri: https://github.com/spree/spree/releases/tag/v5.0.6
   documentation_uri: https://docs.spreecommerce.org/
-  source_code_uri: https://github.com/spree/spree/tree/v5.0.4
+  source_code_uri: https://github.com/spree/spree/tree/v5.0.6
 post_install_message:
 rdoc_options: []
 require_paths: