spree_core 6.0.0.beta4 → 6.0.0.rc2

data/db/migrate/20260925000001_add_replacement_to_spree_fulfillment_items.rb

@@ -0,0 +1,5 @@
+class AddReplacementToSpreeFulfillmentItems < ActiveRecord::Migration[8.1]
+  def change
+    add_column :spree_fulfillment_items, :replacement, :boolean, default: false, null: false
+  end
+end

data/db/migrate/20261001000001_add_post_sale_tax.rb

@@ -0,0 +1,30 @@
+class AddPostSaleTax < ActiveRecord::Migration[8.1]
+  def change
+    change_table :spree_tax_lines, bulk: true do |t|
+      t.references :return_line_item, index: true
+      t.references :claim_line_item, index: true
+      t.references :exchange_line_item, index: true
+      t.references :original_tax_line, index: true
+      t.boolean :credit, default: false, null: false
+    end
+
+    change_table :spree_return_line_items, bulk: true do |t|
+      t.decimal :included_tax_total, precision: 10, scale: 2, default: 0, null: false
+      t.decimal :additional_tax_total, precision: 10, scale: 2, default: 0, null: false
+    end
+
+    change_table :spree_claim_line_items, bulk: true do |t|
+      t.decimal :included_tax_total, precision: 10, scale: 2, default: 0, null: false
+      t.decimal :additional_tax_total, precision: 10, scale: 2, default: 0, null: false
+    end
+
+    change_table :spree_exchange_line_items, bulk: true do |t|
+      t.decimal :original_included_tax_total, precision: 10, scale: 2, default: 0, null: false
+      t.decimal :original_additional_tax_total, precision: 10, scale: 2, default: 0, null: false
+      t.decimal :new_included_tax_total, precision: 10, scale: 2, default: 0, null: false
+      t.decimal :new_additional_tax_total, precision: 10, scale: 2, default: 0, null: false
+    end
+
+    add_column :spree_refunds, :tax_amount, :decimal, precision: 10, scale: 2, default: 0, null: false
+  end
+end

data/db/migrate/20261001000001_convert_preferences_to_json.rb

@@ -0,0 +1,166 @@
+class ConvertPreferencesToJson < ActiveRecord::Migration[8.1]
+  # The tables whose classes declare `:password` preferences. Their secrets move
+  # to an encrypted `secret_preferences` column (see Spree::SecretPreferences).
+  SECRET_TABLES = %i[spree_payment_methods spree_integrations].freeze
+
+  # Records which tables had their `text` column replaced, so `down` restores
+  # `text` only there — a table whose column was already JSON (delivery method
+  # rules, commission rules) keeps it. Dropped on the way back down.
+  CONVERTED_TABLES_REGISTRY = :spree_converted_preference_tables
+
+  # The conversion lives here rather than in the upgrade rake task because the
+  # manifest runs AFTER db:migrate — a task scheduled there would find the YAML
+  # column already replaced. Secrets are moved in plain text, so this needs no
+  # encryption keys; they stay readable and `spree:upgrade:encrypt_secret_preferences`
+  # encrypts them.
+  def up
+    SECRET_TABLES.each do |table|
+      next unless table_exists?(table)
+
+      add_column table, :secret_preferences, :text unless column_exists?(table, :secret_preferences)
+    end
+
+    create_table CONVERTED_TABLES_REGISTRY, if_not_exists: true do |t|
+      t.string :table_name, null: false
+    end
+
+    conversion.preference_tables.each do |table|
+      if conversion.text_column?(table)
+        conversion.convert_text_table(table)
+        execute(Arel::InsertManager.new.tap do |insert|
+          registry = Arel::Table.new(CONVERTED_TABLES_REGISTRY)
+          insert.into(registry).insert([[registry[:table_name], table]])
+        end.to_sql)
+      else
+        conversion.convert_table(table)
+      end
+    end
+
+    drop_table :spree_preferences, if_exists: true
+  end
+
+  # Restores YAML: a `text` column where `up` replaced one, and a YAML document
+  # inside a JSON string where the column was already JSON, as before the
+  # upgrade. Secrets go back into `preferences` — decrypted, so rolling back an
+  # encrypted secret needs the encryption keys — tiers become a hash keyed by
+  # threshold again, and decimals return as BigDecimal for every row whose class
+  # can be resolved; anything else comes back as the string JSON held.
+  def down
+    restore = Restore.new(connection, conversion)
+    create_table :spree_preferences, if_not_exists: true do |t|
+      t.text :value
+      t.string :key
+      t.timestamps
+      t.index :key, unique: true
+    end
+
+    converted = converted_tables
+    conversion.preference_tables.each do |table|
+      if converted.include?(table)
+        add_column table, :preferences_yaml, :text
+        restore.table(table, target: 'preferences_yaml')
+        remove_column table, :preferences
+        rename_column table, :preferences_yaml, :preferences
+      else
+        restore.table(table, target: 'preferences', inside_json: true)
+      end
+    end
+
+    drop_table CONVERTED_TABLES_REGISTRY, if_exists: true
+
+    SECRET_TABLES.each do |table|
+      remove_column table, :secret_preferences if table_exists?(table) && column_exists?(table, :secret_preferences)
+    end
+  end
+
+  private
+
+  def converted_tables
+    return [] unless table_exists?(CONVERTED_TABLES_REGISTRY)
+
+    registry = Arel::Table.new(CONVERTED_TABLES_REGISTRY)
+    connection.select_values(registry.project(registry[:table_name]))
+  end
+
+  def conversion
+    @conversion ||= Spree::Preferences::JsonConversion.new(connection, log: ->(message) { say(message, true) })
+  end
+
+  class Restore
+    def initialize(connection, conversion)
+      @connection = connection
+      @conversion = conversion
+    end
+
+    def table(table, target:, inside_json: false)
+      typed = connection.column_exists?(table, :type)
+      secrets = connection.column_exists?(table, :secret_preferences)
+      columns = ['id', 'preferences', ('type' if typed), ('secret_preferences' if secrets)].compact
+
+      arel_table = Arel::Table.new(table)
+      connection.select_all(arel_table.project(*columns.map { |column| arel_table[column] })).each do |row|
+        next if row['preferences'].nil? && row['secret_preferences'].nil?
+
+        preferences = decode(row['preferences']) || {}
+        preferences.merge!(decode(decrypt(row['secret_preferences'])) || {}) if secrets
+        model = typed ? conversion.model_for(row['type']) : nil
+        restore_tiers(preferences, model)
+        restore_typed_values(preferences, model)
+
+        yaml = YAML.dump(preferences.transform_keys(&:to_sym))
+        conversion.write(table, row['id'], target => inside_json ? JSON.generate(yaml) : yaml)
+      end
+    end
+
+    private
+
+    attr_reader :connection, :conversion
+
+    def decode(raw)
+      raw.is_a?(String) ? JSON.parse(raw) : raw
+    end
+
+    # A value written before encryption was enabled is plain JSON and comes
+    # back as it is. An encrypted one that cannot be decrypted stops the
+    # rollback: writing its ciphertext into `preferences` would replace a
+    # gateway's keys with garbage.
+    def decrypt(raw)
+      return raw if raw.nil? || !encrypted?(raw)
+
+      unless ActiveRecord::Encryption.config.has_primary_key?
+        raise ActiveRecord::IrreversibleMigration, 'Encrypted secret_preferences cannot be rolled back without the Active Record encryption keys. Configure them and run the rollback again.'
+      end
+
+      ActiveRecord::Encryption.encryptor.decrypt(raw)
+    rescue ActiveRecord::Encryption::Errors::Decryption
+      raise ActiveRecord::IrreversibleMigration, 'An encrypted secret_preferences value could not be decrypted with the configured keys. Restore the keys it was encrypted with and run the rollback again.'
+    end
+
+    def encrypted?(raw)
+      parsed = JSON.parse(raw)
+      parsed.is_a?(Hash) && parsed.key?('p') && parsed.key?('h')
+    rescue JSON::ParserError
+      false
+    end
+
+    def restore_tiers(preferences, model)
+      tiers = preferences['tiers']
+      return unless tiers.is_a?(Array) && Spree::Preferences::JsonConversion.tiered_calculator?(model)
+
+      # A value that is not a number is kept as written, so two such tiers
+      # cannot collapse into one nil key.
+      preferences['tiers'] = tiers.to_h do |tier|
+        [Spree::Calculator::Tiers.decimal(tier['threshold']) || tier['threshold'],
+         Spree::Calculator::Tiers.decimal(tier['value']) || tier['value']]
+      end
+    end
+
+    def restore_typed_values(preferences, model)
+      return unless model.respond_to?(:declared_preference_types)
+
+      model.declared_preference_types.each do |name, type|
+        preferences[name.to_s] = Spree::Preferences::Preferable.restore_value(preferences[name.to_s], type) if preferences.key?(name.to_s)
+      end
+    end
+  end
+end

data/db/migrate/20261001000001_create_spree_email_templates.rb

@@ -0,0 +1,52 @@
+class CreateSpreeEmailTemplates < ActiveRecord::Migration[8.1]
+  def change
+    create_table :spree_email_templates do |t|
+      t.references :store, null: false, index: false
+      t.string :key, null: false
+      t.string :locale, null: false
+      t.string :status, null: false
+      t.text :subject
+      t.text :body, null: false
+      t.text :base_subject
+      t.text :base_body, null: false
+      t.datetime :published_at, null: false
+      t.references :published_by, polymorphic: true, index: true
+      t.datetime :reverted_at
+      t.references :reverted_by, polymorphic: true, index: true
+
+      t.timestamps
+    end
+
+    add_index :spree_email_templates, [:store_id, :key, :locale], unique: true,
+                                                                  name: 'index_spree_email_templates_on_store_key_locale'
+    add_index :spree_email_templates, :status
+
+    create_table :spree_email_template_drafts do |t|
+      t.references :store, null: false, index: false
+      t.string :key, null: false
+      t.string :locale, null: false
+      t.text :subject
+      t.text :body, null: false
+      t.text :base_subject
+      t.text :base_body, null: false
+      t.integer :lock_version, null: false, default: 0
+      t.references :updated_by, polymorphic: true, index: true
+
+      t.timestamps
+    end
+
+    add_index :spree_email_template_drafts, [:store_id, :key, :locale], unique: true,
+                                                                        name: 'index_spree_email_template_drafts_on_store_key_locale'
+
+    create_table :spree_email_template_revisions do |t|
+      t.references :email_template, null: false, index: false
+      t.text :subject
+      t.text :body, null: false
+      t.references :published_by, polymorphic: true, index: true
+      t.datetime :created_at, null: false
+    end
+
+    add_index :spree_email_template_revisions, [:email_template_id, :created_at],
+              name: 'index_spree_email_template_revisions_on_template_and_created'
+  end
+end

data/db/migrate/20261009000001_change_money_columns_to_decimal_19_4.rb

@@ -0,0 +1,116 @@
+# Widens every money column to decimal(19,4): room for a dinar's third decimal,
+# sub-cent unit prices and very large amounts. Every stored value fits exactly,
+# so no value changes. A column already at (19,4) is skipped, so an install
+# that widened its largest tables online ahead of the upgrade runs this as a
+# no-op for those (see the 5.6 to 6.0 upgrade guide).
+class ChangeMoneyColumnsToDecimal194 < ActiveRecord::Migration[8.1]
+  COLUMNS = {
+    spree_adjustments: %i[amount],
+    spree_carts: %i[additional_tax_total adjustment_total delivery_total discount_total fee_total included_tax_total
+                    item_total non_taxable_adjustment_total payment_total taxable_adjustment_total total],
+    spree_catalog_order_minimums: %i[amount],
+    spree_claim_line_items: %i[additional_tax_total included_tax_total refund_amount],
+    spree_commission_lines: %i[amount tax_amount total],
+    spree_commission_rate_values: %i[amount max_amount min_amount],
+    spree_delivery_method_services: %i[markup_flat],
+    spree_delivery_methods: %i[markup_flat],
+    spree_delivery_rates: %i[cost],
+    spree_discounts: %i[amount value],
+    spree_exchange_line_items: %i[new_additional_tax_total new_included_tax_total original_additional_tax_total
+                                  original_included_tax_total],
+    spree_fees: %i[amount],
+    spree_fulfillments: %i[additional_tax_total adjustment_total cost discount_total included_tax_total
+                           non_taxable_adjustment_total pre_tax_amount taxable_adjustment_total],
+    spree_gift_card_batches: %i[amount],
+    spree_gift_cards: %i[amount amount_authorized amount_used],
+    spree_line_items: %i[additional_tax_total adjustment_total cost_price discount_total included_tax_total
+                         non_taxable_adjustment_total pre_tax_amount price taxable_adjustment_total],
+    spree_orders: %i[additional_tax_total adjustment_total commission_amount_total commission_tax_total commission_total
+                     delivery_total discount_total fee_total included_tax_total item_total non_taxable_adjustment_total
+                     payment_total taxable_adjustment_total total],
+    spree_payment_capture_events: %i[amount],
+    spree_payment_sessions: %i[amount],
+    spree_payment_splits: %i[authorized_amount captured_amount claimed_amount refunded_amount],
+    spree_payments: %i[amount],
+    spree_price_histories: %i[amount compare_at_amount],
+    spree_prices: %i[amount compare_at_amount],
+    spree_products: %i[revenue],
+    spree_products_stores: %i[revenue],
+    spree_purchase_order_items: %i[unit_cost],
+    spree_refunds: %i[amount tax_amount],
+    spree_reimbursement_credits: %i[amount],
+    spree_reimbursements: %i[total],
+    spree_return_items: %i[additional_tax_total included_tax_total pre_tax_amount],
+    spree_return_line_items: %i[additional_tax_total included_tax_total pre_tax_amount],
+    spree_seller_payouts: %i[amount],
+    spree_seller_transfers: %i[amount settled_amount],
+    spree_sellers: %i[minimum_payout_amount],
+    spree_shipping_labels: %i[cost],
+    spree_stock_movements: %i[unit_cost],
+    spree_store_credit_events: %i[amount user_total_amount],
+    spree_store_credits: %i[amount amount_authorized amount_used],
+    spree_tax_lines: %i[amount],
+    spree_variants: %i[cost_price]
+  }.freeze
+
+  # What `down` restores: decimal(10,2) unless listed.
+  ORIGINAL = {
+    'spree_delivery_rates.cost' => [8, 2],
+    'spree_store_credit_events.amount' => [8, 2],
+    'spree_store_credit_events.user_total_amount' => [8, 2],
+    'spree_store_credits.amount' => [8, 2],
+    'spree_store_credits.amount_authorized' => [8, 2],
+    'spree_store_credits.amount_used' => [8, 2],
+    'spree_fulfillments.pre_tax_amount' => [12, 4],
+    'spree_line_items.pre_tax_amount' => [12, 4],
+    'spree_return_items.additional_tax_total' => [12, 4],
+    'spree_return_items.included_tax_total' => [12, 4],
+    'spree_return_items.pre_tax_amount' => [12, 4],
+    'spree_products.revenue' => [16, 4]
+  }.freeze
+
+  def up
+    deliberately_rewriting { COLUMNS.each_key { |table| retype(table) { [19, 4] } } }
+  end
+
+  def down
+    deliberately_rewriting do
+      COLUMNS.each_key { |table| retype(table) { |column| ORIGINAL.fetch("#{table}.#{column}", [10, 2]) } }
+    end
+  end
+
+  private
+
+  # The rewrite is the point of this migration and the upgrade guide documents
+  # it, so an app running strong_migrations is not stopped by it.
+  def deliberately_rewriting(&block)
+    respond_to?(:safety_assured) ? safety_assured(&block) : yield
+  end
+
+  # One ALTER TABLE per table, so each is rewritten once rather than once per
+  # column. PostgreSQL keeps NOT NULL and the default through a type change,
+  # and Rails' MySQL adapter carries them over itself; passing them would add a
+  # SET NOT NULL that scans every row. SQLite rebuilds the table from the new
+  # definition, so it is told both.
+  def retype(table)
+    return unless table_exists?(table)
+
+    existing = connection.columns(table).index_by(&:name)
+    changes = COLUMNS[table].filter_map do |name|
+      column = existing[name.to_s]
+      next if column.nil?
+
+      precision, scale = yield(name)
+      [column, precision, scale] unless column.precision == precision && column.scale == scale
+    end
+    return if changes.empty?
+
+    change_table(table, bulk: true) do |definition|
+      changes.each do |column, precision, scale|
+        options = { precision: precision, scale: scale }
+        options.merge!(null: column.null, default: column.default) if connection.adapter_name.match?(/sqlite/i)
+        definition.change column.name, :decimal, **options
+      end
+    end
+  end
+end

data/db/migrate/20261010000001_add_store_id_to_active_storage_blobs.rb

@@ -0,0 +1,12 @@
+# Records which store owns every uploaded file, so a file from one store cannot
+# be attached in another and storage can be measured and cleaned up per store.
+# Active Storage ignores columns it does not define. Existing rows are filled
+# in by `spree:uploads:assign_stores` in the 6.0 upgrade.
+class AddStoreIdToActiveStorageBlobs < ActiveRecord::Migration[8.1]
+  def change
+    return unless table_exists?(:active_storage_blobs)
+    return if column_exists?(:active_storage_blobs, :store_id)
+
+    add_reference :active_storage_blobs, :store, null: true, index: true
+  end
+end

data/lib/generators/spree/dummy/dummy_generator.rb

@@ -63,7 +63,6 @@ module Spree
 
       puts "Rails app generator args: #{args.inspect}"
       Rails::Generators.invoke('app', args)
-      inject_yaml_permitted_classes
     end
 
     def test_dummy_config
@@ -96,14 +95,6 @@ module Spree
 
     protected
 
-    def inject_yaml_permitted_classes
-      inside dummy_path do
-        inject_into_file 'config/application.rb', %Q[
-    config.active_record.yaml_column_permitted_classes = [Symbol, BigDecimal, ActiveSupport::HashWithIndifferentAccess, ActiveSupport::TimeWithZone, ActiveSupport::TimeZone, Time]
-        ], after: /config\.load_defaults.*$/, verbose: true
-      end
-    end
-
     def dummy_path
       ENV['DUMMY_PATH'] || 'spec/dummy'
     end

data/lib/generators/spree/dummy/templates/rails/test.rb

@@ -28,6 +28,9 @@ Dummy::Application.configure do
   # the suite sees it, as every real Spree app does.
   config.action_controller.raise_on_missing_callback_actions = true
 
+  # Fail a spec that looks up a translation key that does not exist.
+  config.i18n.raise_on_missing_translations = true
+
   # Tell Action Mailer not to deliver emails to the real world.
   # The :test delivery method accumulates sent emails in the
   # ActionMailer::Base.deliveries array.
@@ -39,6 +42,29 @@ Dummy::Application.configure do
   # Print deprecation notices to the stderr
   config.active_support.deprecation = :stderr
 
+  # Spree's own code and specs must not call these deprecated APIs. A spec
+  # covering one on purpose stubs Spree::Deprecation.warn or silences it.
+  config.active_support.disallowed_deprecation = :raise
+  config.active_support.disallowed_deprecation_warnings = [
+    /Spree\.t is deprecated/,
+    /Spree::Product#(master|variants_including_master) is deprecated/,
+    /Spree::(Order|Cart)#(shipment_total|promo_total|item_count|shipping_discount) is deprecated/,
+    /Spree::Order#finalize! is deprecated/,
+    /Spree::Payment#state=? is deprecated/,
+    /Spree::Payment#(process|authorize|purchase|capture|void_transaction)! is deprecated/,
+    /Spree::(Category|Product)#classifications is deprecated/,
+    /Spree::Product#taxons=? is deprecated/,
+    /Spree::Promotion::Rules::Category#taxon/,
+    /Spree::Fulfillment#(add_)?shipping_method is deprecated/,
+    /Spree::Stock::Package#shipping_methods is deprecated/,
+    /Calling Spree::(Carts::AddItem|StockReservations::(Reserve|Extend)) with order: is deprecated/,
+    /Spree::Config\[:admin_url\] is deprecated/,
+    /private_metadata=? is deprecated/,
+    /Spree::Pricing::Resolver is deprecated/,
+    /Spree::Invitation#accept! is deprecated/,
+    /`preference :\w+, in:` is deprecated/
+  ]
+
   config.active_job.queue_adapter = :test
 
   config.cache_store = :null_store

data/lib/spree/checkout/default_requirements.rb

@@ -29,19 +29,19 @@ module Spree
 
       def advisory_requirements
         [].tap do |r|
-          r << req('cart', 'line_items', Spree.t('checkout_requirements.line_items_required')) unless @cart.line_items.any?
-          r << req('address', 'email', Spree.t('checkout_requirements.email_required')) unless @cart.email.present?
-          r << req('address', 'ship_address', Spree.t('checkout_requirements.ship_address_required')) if @cart.shipping_address_required? && @cart.ship_address.blank?
-          r << req('delivery', 'delivery_method', Spree.t('checkout_requirements.delivery_method_required')) if delivery_step_required? && !delivery_method_selected?
-          r << req('payment', 'payment', Spree.t('checkout_requirements.payment_required')) if payment_required? && !payment_satisfied?
-          r << req('address', 'po_number', Spree.t('checkout_requirements.po_number_required')) if po_number_missing?
+          r << req('cart', 'line_items', I18n.t('spree.checkout_requirements.line_items_required')) unless @cart.line_items.any?
+          r << req('address', 'email', I18n.t('spree.checkout_requirements.email_required')) unless @cart.email.present?
+          r << req('address', 'ship_address', I18n.t('spree.checkout_requirements.ship_address_required')) if @cart.shipping_address_required? && @cart.ship_address.blank?
+          r << req('delivery', 'delivery_method', I18n.t('spree.checkout_requirements.delivery_method_required')) if delivery_step_required? && !delivery_method_selected?
+          r << req('payment', 'payment', I18n.t('spree.checkout_requirements.payment_required')) if payment_required? && !payment_satisfied?
+          r << req('address', 'po_number', I18n.t('spree.checkout_requirements.po_number_required')) if po_number_missing?
           r << order_minimum_requirement if below_order_minimum?
         end
       end
 
       def completion_requirements
-        errors = stock_errors + quantity_rule_errors
-        errors << req('address', 'email', Spree.t(:guest_checkout_not_allowed), code: 'guest_checkout_not_allowed') if @cart.guest_checkout_disallowed?
+        errors = stock_errors + quantity_rule_errors + assortment_errors
+        errors << req('address', 'email', I18n.t('spree.guest_checkout_not_allowed'), code: 'guest_checkout_not_allowed') if @cart.guest_checkout_disallowed?
         errors
       end
 
@@ -55,6 +55,22 @@ module Spree
         end
       end
 
+      # Re-checked at completion because a line can outlive the add that
+      # admitted it: a guest cart claimed after sign-in, a cart moved to
+      # another company, an assortment edited since. An order arriving here is
+      # staff's draft, which may sell outside the buyer's catalogs. A
+      # discontinued line already has its own requirement.
+      def assortment_errors
+        return [] unless @cart.is_a?(Spree::Cart)
+
+        line_items = completion_line_items.reject { |line_item| discontinued?(line_item) }
+        orderable_ids = @cart.orderable_variants.where(id: line_items.map(&:variant_id)).pluck(:id).to_set
+
+        line_items.reject { |line_item| orderable_ids.include?(line_item.variant_id) }.map do |line_item|
+          req('cart', 'line_items', I18n.t('spree.cart_line_item.not_orderable', li_name: line_item.name), code: 'not_orderable')
+        end
+      end
+
       # Advisory rather than completion-only: a buyer has to be able to build
       # the order below the threshold and read how far off they are while
       # they can still add to it. Completion refuses it because the advisory
@@ -68,7 +84,7 @@ module Spree
         shortfall = Spree::Money.new(@cart.order_minimum_shortfall, currency: minimum.currency)
 
         req('cart', 'order_minimum',
-            Spree.t('checkout_requirements.order_minimum_not_met',
+            I18n.t('spree.checkout_requirements.order_minimum_not_met',
                     minimum: minimum.display_amount.to_s, shortfall: shortfall.to_s),
             code: 'order_minimum_not_met')
       end
@@ -77,15 +93,23 @@ module Spree
       # while an individual variant hit its discontinue_on date after it
       # entered the cart.
       def stock_errors
-        @cart.line_items.includes(variant: :product).filter_map do |line_item|
-          if line_item.variant.nil? || line_item.variant.discontinued? || line_item.variant.product.discontinued?
-            req('cart', 'line_items', Spree.t('cart_line_item.discontinued', li_name: line_item.name), code: 'discontinued')
+        completion_line_items.filter_map do |line_item|
+          if discontinued?(line_item)
+            req('cart', 'line_items', I18n.t('spree.cart_line_item.discontinued', li_name: line_item.name), code: 'discontinued')
           elsif !line_item.sufficient_stock?
-            req('cart', 'line_items', Spree.t('cart_line_item.out_of_stock', li_name: line_item.name), code: 'out_of_stock')
+            req('cart', 'line_items', I18n.t('spree.cart_line_item.out_of_stock', li_name: line_item.name), code: 'out_of_stock')
           end
         end
       end
 
+      def discontinued?(line_item)
+        line_item.variant.nil? || line_item.variant.discontinued? || line_item.variant.product.discontinued?
+      end
+
+      def completion_line_items
+        @completion_line_items ||= @cart.line_items.includes(variant: :product).to_a
+      end
+
       def delivery_step_required?
         @cart.delivery_step_required?
       end

data/lib/spree/core/configuration.rb

@@ -60,7 +60,7 @@ module Spree
 
       # Preprocessed product image variant sizes at 2x retina resolution.
       # These variants are generated on upload to reduce runtime processing.
-      # When using spree_image_tag, pass variant option instead of width and height.
+      # Pass the variant to spree_image_url instead of a width and height.
       #
       # Default sizes:
       #   mini (128x128)     - admin thumbnails, checkout line items
@@ -119,6 +119,19 @@ module Spree
       # requirement, in bytes. Small on purpose: these are certificates and
       # registrations, and an unbounded upload is a way to fill a disk.
       preference :max_seller_document_upload_size, :integer, default: 20_971_520, env: 'SPREE_MAX_SELLER_DOCUMENT_UPLOAD_SIZE' # 20 MB
+
+      # Largest file the Admin and Seller APIs accept for upload straight to
+      # storage, in bytes. Digital products (courses, archives) can be large.
+      preference :max_upload_size, :integer, default: 5_368_709_120, env: 'SPREE_MAX_UPLOAD_SIZE' # 5 GB
+
+      # Largest file accepted as bytes in the upload request itself, in bytes.
+      # Lower, because those bytes pass through the application.
+      preference :max_multipart_upload_size, :integer, default: 10_485_760, env: 'SPREE_MAX_MULTIPART_UPLOAD_SIZE' # 10 MB
+
+      # Days an uploaded file that was never attached to anything is kept
+      # before the daily purge deletes it. Longer than an upload reference
+      # stays valid (one day), so nothing a client can still attach is lost.
+      preference :unattached_upload_retention_days, :integer, default: 2, env: 'SPREE_UNATTACHED_UPLOAD_RETENTION_DAYS'
       preference :non_expiring_credit_types, :array, default: [], deprecated: 'Nothing reads this in Spree 6 — store credits no longer carry a category, and expiry lives on Spree::GiftCard'
       preference :products_per_page, :integer, default: 12, deprecated: 'Nothing reads this in Spree 6 — pass per_page to the API instead'
       preference :restock_inventory, :boolean, default: true, deprecated: 'Restocking is decided per line item by Spree::ReturnLineItem#resellable'
@@ -137,10 +150,15 @@ module Spree
       preference :empty_cart_expiry_hours, :integer, default: 48, env: 'SPREE_EMPTY_CART_EXPIRY_HOURS'
       preference :show_variant_full_price, :boolean, default: false, deprecated: 'Nothing reads this in Spree 6 — a storefront decides how it renders prices'
       preference :show_products_without_price, :boolean, default: false, deprecated: 'Set it on the store instead'
+      # The daily update check also reports usage (see Spree::UpdateCheck).
+      # SPREE_TELEMETRY_DISABLED or DO_NOT_TRACK turns it off as well.
+      preference :telemetry_enabled, :boolean, default: true
       preference :tax_using_ship_address, :boolean, default: true, deprecated: 'Set it on the store instead'
       preference :track_inventory_levels, :boolean, default: true, deprecated: 'Set it on the store instead' # Determines whether to track on_hand values for variants / products.
       preference :track_price_history, :boolean, default: true, deprecated: 'Set it on the store instead' # Records price changes for Omnibus Directive compliance. Disable for non-EU stores.
       preference :price_history_retention_days, :integer, default: 30, deprecated: 'Set it on the store instead' # Days to retain price history records. Used by spree:price_history:prune rake task.
+      # SPREE_UPDATE_CHECK_DISABLED turns it off as well.
+      preference :update_check_enabled, :boolean, default: true
       preference :use_user_locale, :boolean, default: true, deprecated: true
 
       # Sets the path used for products, taxons and pages.

data/lib/spree/core/controller_helpers/store.rb

@@ -26,7 +26,7 @@ module Spree
 
           if object.has_attribute?(:store_id)
             if object.store.present? && object.store != current_store
-              raise Spree.t('errors.messages.store_is_already_set')
+              raise I18n.t('spree.errors.messages.store_is_already_set')
             else
               object.store = current_store
             end

data/lib/spree/core/dependencies.rb

@@ -37,7 +37,6 @@ module Spree
         order_update_item_service: 'Spree::Orders::UpdateItem',
         order_remove_line_item_service: 'Spree::Orders::RemoveLineItem',
         order_remove_item_service: 'Spree::Orders::RemoveItem',
-        cart_empty_service: 'Spree::Carts::Empty',
         cart_destroy_service: 'Spree::Carts::Destroy',
         cart_associate_service: 'Spree::Carts::Associate',
         cart_remove_out_of_stock_items_service: 'Spree::Carts::RemoveOutOfStockItems',
@@ -83,7 +82,6 @@ module Spree
         fulfillment_fulfill_workflow: 'Spree::Fulfillments::Fulfill',
         fulfillment_cancel_workflow: 'Spree::Fulfillments::Cancel',
         fulfillment_mark_delivered_workflow: 'Spree::Fulfillments::MarkDelivered',
-        fulfillment_purchase_label_workflow: 'Spree::Fulfillments::PurchaseLabel',
 
         # shipping labels + deliveries
         shipping_label_purchase_workflow: 'Spree::ShippingLabels::Purchase',
@@ -97,7 +95,6 @@ module Spree
         fulfillment_stand_down_service: 'Spree::Fulfillments::StandDownProvider',
         fulfillment_recalculate_delivery_service: 'Spree::Fulfillments::RecalculateDelivery',
         delivery_destroy_service: 'Spree::Deliveries::Destroy',
-        return_purchase_label_workflow: 'Spree::Returns::PurchaseLabel',
 
         # inventory operations
         stock_level_correct_service: 'Spree::StockLevels::Correct',
@@ -242,7 +239,6 @@ module Spree
         # payment is arranged (deposits, net terms).
         purchase_amount_due_at_checkout_service: 'Spree::Purchases::AmountDueAtCheckout',
 
-        payment_create_service: 'Spree::Payments::Create',
         payment_process_workflow: 'Spree::Payments::Process',
         payment_capture_workflow: 'Spree::Payments::Capture',
         payment_void_workflow: 'Spree::Payments::Void',
@@ -253,6 +249,11 @@ module Spree
         seller_payout_complete_workflow: 'Spree::SellerPayouts::Complete',
         payments_handle_webhook_workflow: 'Spree::Payments::HandleWebhook',
         payment_session_complete_workflow: 'Spree::PaymentSessions::Complete',
+        email_template_save_draft_workflow: 'Spree::EmailTemplates::SaveDraft',
+        email_template_publish_workflow: 'Spree::EmailTemplates::Publish',
+        email_template_revert_workflow: 'Spree::EmailTemplates::Revert',
+        email_template_discard_draft_workflow: 'Spree::EmailTemplates::DiscardDraft',
+        email_template_restore_revision_workflow: 'Spree::EmailTemplates::RestoreRevision',
 
         # finders
         current_store_finder: 'Spree::Stores::FindDefault',