Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump xml2js, @medusajs/medusa and typeorm #8

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jun 8, 2023

Removes xml2js. It's no longer used after updating ancestor dependencies xml2js, @medusajs/medusa and typeorm. These dependencies need to be updated together.

Removes xml2js

Updates @medusajs/medusa from 1.5.0 to 1.12.0

Release notes

Sourced from @​medusajs/medusa's releases.

v1.12.0

Highlights

Breaking changes In our quest to improve performance, a public method in the PriceSelectionStrategy has been updated to support bulk calculations of variant prices. Specifically, the following signatures have changed:

// Before
calculateVariantPrice(variantId: string, context: PriceSelectionContext): Promise<PriceSelectionResult>
// Now
calculateVariantPrice(data: { variantId: string; quantity?: number; }[], context: PriceSelectionContext): Promise<Map<string, PriceSelectionResult>>

Additionally (non-breaking), the following DB indexes have been added:

idx_money_amount_variant_id ON money_amount (variant_id);
idx_money_amount_region_id ON money_amount (region_id);
idx_product_option_value_variant_id ON product_option_value (variant_id);
idx_product_option_value_option_id ON product_option_value (option_id);
idx_gin_product_title ON product USING gin (title gin_trgm_ops);
idx_gin_product_description ON product USING gin (description gin_trgm_ops);
idx_gin_product_variant_title ON product_variant USING gin (title gin_trgm_ops);
idx_gin_product_variant_sku ON product_variant USING gin (sku gin_trgm_ops);
idx_gin_product_collection ON product_collection USING gin (title gin_trgm_ops);

The packages class-validator and class-transformer have been removed from @medusajs/utils.

The TransactionBaseService has been removed from @medusajs/utils. This class should be imported from @medusajs/medusa.

The utilities build-query, db-aware-column, base-entity, and soft-deletable-entity have been removed from @medusajs/medusa. These should be imported from @medusajs/medusa.

Support for SQLite dropped SQLite support was initially added to reduce friction for developers trying Medusa for the first time. It runs on most operating systems without installation, allowing you to start a Medusa starter without preparing a Postgres database.

Though, as we've added features that use more advanced database concepts, we've seen that SQLite has started to cause more harm than good. And frankly, we've not prioritized maintaining the support, as removing it was always part of our plans. SQLite still allows developers to get started very quickly. However, as soon as you start using our admin system or set up the storefront starter, issues caused by the limitations of SQLite arise. These issues are primarily centered around transaction management. A concept used extensively in our core and poorly supported by SQLite.

Therefore, as of this release, SQLite is no longer supported. The pros simply do not outweigh the cons at this point.

What does this mean for your setup?

In the highly unlikely case that you are using SQLite, this will be a breaking change. So, you'll need to set up Postgres for your Medusa server as part of bumping to this version. You can find a guide in our documentation on how to do this.

If you are not using SQLite, these changes will not affect your setup.

Reservation management With the introduction of our Inventory Module, we added the notion of reservations. Right now, reservations are, from a store administrator perspective, limited to order items and cannot really be used outside the context of an order - unless you consume the API directly.

... (truncated)

Changelog

Sourced from @​medusajs/medusa's changelog.

1.12.0

Minor Changes

Patch Changes

1.11.0

Minor Changes

Patch Changes

... (truncated)

Commits
  • 8f8f633 chore: Version Packages (#4114)
  • 0f87d3d chore(medusa,admin-ui): Add reservations FF (#4184)
  • 6998666 fix(medusa): Upserting tax rates (#4189)
  • e3cfbcd fix(medusa): migrations cli should also pull from ${plugin}/dist (#3956)
  • db41995 chore(utils): clean util package deps (#4146)
  • 92f01ce fix(medusa): downgrade papaparse version (#4174)
  • 0a35f21 feat(medusa, inventory): Search inventory items by title and description (#4154)
  • 3a38c84 feat(medusa,inventory,types): Expand list-reservation capabilities (#3979)
  • 4f3c8f5 feat(admin-ui,medusa): Reservations management (#4081)
  • 0476f52 Feat(medusa, admin-ui): Update edit allocation modal (#4071)
  • Additional commits viewable in compare view

Updates typeorm from 0.2.45 to 0.3.16

Release notes

Sourced from typeorm's releases.

0.3.16

0.3.16 (2023-05-09)

Bug Fixes

Features

  • mariadb uuid inet4 inet6 column data type support (#9845) (d8a2e37)

Reverts

0.3.15

Bug Fixes

  • make cache optional fields optional (#9942) (159c60a)
  • prevent unique index identical to primary key (all sql dialects) (#9940) (51eecc2)
  • SelectQueryBuilder builds incorrectly escaped alias in Oracle when used on entity with composite key (#9668) (83c6c0e)

Features

0.3.14

Bug Fixes

  • drop xml & yml connection option support. Addresses security issues in underlying dependency (#9930) (7dac12c)

Features

... (truncated)

Changelog

Sourced from typeorm's changelog.

0.3.16 (2023-05-09)

Bug Fixes

Features

  • mariadb uuid inet4 inet6 column data type support (#9845) (d8a2e37)

Reverts

0.3.15 (2023-04-15)

Bug Fixes

  • make cache optional fields optional (#9942) (159c60a)
  • prevent unique index identical to primary key (all sql dialects) (#9940) (51eecc2)
  • SelectQueryBuilder builds incorrectly escaped alias in Oracle when used on entity with composite key (#9668) (83c6c0e)

Features

0.3.14 (2023-04-09)

Bug Fixes

  • drop xml & yml connection option support. Addresses security issues in underlying dependency (#9930) (7dac12c)

Features

... (truncated)

Commits
  • abb9079 version bump
  • 607d6f9 fix: added transaction retry logic in cockroachdb (#10032)
  • 8795c86 fix: support More/LessThanOrEqual in relations (#9978)
  • 06c1e98 fix: create correct children during cascade saving entities with STI (#9034)
  • 96b7ee4 fix: correct encode mongodb auth credentials (#10024)
  • 9460296 fix: convert the join table ID to the referenceColumn ID type (#9887)
  • 938f94b fix: add onDelete option validation for oracle (#9786)
  • a188b1d fix: for running cli-ts-node-esm use exit code from child process (#10030)
  • 7c5627f fix: added instanceName to options (#9968)
  • 0305805 fix: add trustServerCertificate option to SqlServerConnectionOptions (#9985)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jun 8, 2023
Removes [xml2js](https://github.com/Leonidas-from-XIV/node-xml2js). It's no longer used after updating ancestor dependencies [xml2js](https://github.com/Leonidas-from-XIV/node-xml2js), [@medusajs/medusa](https://github.com/medusajs/medusa/tree/HEAD/packages/medusa) and [typeorm](https://github.com/typeorm/typeorm). These dependencies need to be updated together.


Removes `xml2js`

Updates `@medusajs/medusa` from 1.5.0 to 1.12.0
- [Release notes](https://github.com/medusajs/medusa/releases)
- [Changelog](https://github.com/medusajs/medusa/blob/develop/packages/medusa/CHANGELOG.md)
- [Commits](https://github.com/medusajs/medusa/commits/@medusajs/[email protected]/packages/medusa)

Updates `typeorm` from 0.2.45 to 0.3.16
- [Release notes](https://github.com/typeorm/typeorm/releases)
- [Changelog](https://github.com/typeorm/typeorm/blob/master/CHANGELOG.md)
- [Commits](typeorm/typeorm@0.2.45...0.3.16)

---
updated-dependencies:
- dependency-name: xml2js
  dependency-type: indirect
- dependency-name: "@medusajs/medusa"
  dependency-type: indirect
- dependency-name: typeorm
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/xml2js-and-medusajs/medusa-and-typeorm--removed branch from 47ba2ed to 4f75e1c Compare June 8, 2023 14:05
@shahednasser shahednasser merged commit 00c1486 into master Jun 8, 2023
@shahednasser shahednasser deleted the dependabot/npm_and_yarn/xml2js-and-medusajs/medusa-and-typeorm--removed branch June 8, 2023 14:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant