sylius/paypal-plugin

TL;DR

🔒 This is a security release!

Fixes the following vulnerability:

• Access token leak and SSRF via unauthenticated PayPal refund webhook

What's Changed

• [Cii] Fix broken build by @tomkalon in #643
• Authenticate refund webhook with PayPal signature verification by @GSadee in #670

Full Changelog: v2.0.10...v2.0.11

What's Changed

• Fix sandbox modal component name in live-component-modal-portal.js by @Cholin2000 in #623

Full Changelog: v2.0.9...v2.0.10

What's Changed

• [BugFix] Fix PayPal sandbox modal LiveComponent DOM detachment by @Cholin2000 in #622

Full Changelog: v2.0.8...v2.0.9

This release adds telemetry support. For more information, see TELEMETRY_POLICY.md.

What's Changed

• Add telemetry by @Rafikooo in #429

Full Changelog: v2.0.7...v2.0.8

What's Changed

• Prevent unnecessary payment cancellation after PayPal by @GSadee in #377
• Upgrade: phpseclib/phpseclib from 2.x to 3.x by @tomkalon in #385
• Remove 'final' from PayPalOrderItemController by @tomkalon in #386
• Truncate product name to fit PayPal API limits (max 127 characters) by @tomkalon in #384
• [OP 579] PHPSpec to PHPUnit by @rust-le in #378
• Fixes incorrect dependency on sylius/resource-bundle by @tomkalon in #382
• Fix/configuration and payment process by @tomkalon in #381
• Adjust README file + remove unnecessary /docs directory by @GSadee in #389
• [Maintenance] Add missing attributes mapping to entities by @NoResponseMate in #390
• Prevent cart from being cleared when PayPal Express checkout is canceled by @tomkalon in #383
• Cancel payment only if it's possible by @NoResponseMate in #391
• Fix performance issue of getting all payments within the payment flow by @NoResponseMate in #392
• [Maintenance] Update CI builds by @NoResponseMate in #397
• [ExpressCheckout] Get paypal methods directly instead of defaulting by @NoResponseMate in #394
• [Maintenance] Deprecate PaymentProvider in favour of PaypalPaymentQuery by @NoResponseMate in #398
• [DI] Allow setting sandbox mode and increased logging via env variables by @NoResponseMate in #405
• [ExpressCheckout] Allow skipping shipping/payment steps by @NoResponseMate in #404
• [Refund] Fix partial refunds within same day by @NoResponseMate in #401
• [Maintenance] Fix invalid PaymentMethod form labels by @NoResponseMate in #403
• Fix line items creation being tied with the number of taxes by @NoResponseMate in #399
• [Checkout] Fix supported locales resolving by @NoResponseMate in #402
• [Maintenance] Locale resolving fixes by @NoResponseMate in #406
• [PaymentMethod] Fix creating sandbox method by @NoResponseMate in #407
• [UPMERGE] 1.7 -> 2.0 by @SyliusBot in #379
• [Maintenance] Boost phpstan by @NoResponseMate in #410
• [Maintenance] Fix address setting flow in express checkout by @NoResponseMate in #408
• [Admin][PaymentMethod] Add validation to sandbox paypal fields by @NoResponseMate in #409
• fix(di): use phpseclib3 instead of phpseclib by @kevin-blackbird in #414
• [Maintenance][CI] Add container validation by @NoResponseMate in #415
• [Maintenance] Remove the need for certs in tests by @NoResponseMate in #417
• [Maintenance][CI] Exclude upmerge branches from push builds by @NoResponseMate in #418
• [UPMERGE] 1.7 -> 2.0 by @SyliusBot in #411
• [Maintenance][DX] Add var/ directory to gitignore by @NoResponseMate in #419
• [Maintenance] Configure .gitattributes by @NoResponseMate in #421
• [UPMERGE] 1.7 -> 2.0 by @SyliusBot in #422
• Reapply "Add service for creating PayPal sandbox payment methods" (#376) by @TheMilek in #424

New Contributors

• @rust-le made their first contribution in #378
• @kevin-blackbird made their first contribution in #414
• @TheMilek made their first contribution in #424

Full Changelog: v2.0.6...v2.0.7

TL;DR

🔒 This is a security release!

Fixes the following vulnerability:

• Access token leak and SSRF via unauthenticated PayPal refund webhook

What's Changed

• Authenticate refund webhook with PayPal signature verification by @GSadee in #666

Full Changelog: v1.7.8...v1.7.9

This release adds telemetry support. For more information, see TELEMETRY_POLICY.md.

What's Changed

• Add telemetry by @Rafikooo in #428

Full Changelog: v1.7.7...v1.7.8

What's Changed

• fix(di): use phpseclib3 instead of phpseclib by @kevin-blackbird in #414
• [Maintenance][CI] Add container validation by @NoResponseMate in #415
• [Maintenance][CI] Exclude upmerge branches from push builds by @NoResponseMate in #418
• [Maintenance] Configure .gitattributes by @NoResponseMate in #421

New Contributors

• @kevin-blackbird made their first contribution in #414

Full Changelog: v1.7.6...v1.7.7

This release adds telemetry support. For more information, see TELEMETRY_POLICY.md.

What's Changed

• Add telemetry by @Rafikooo in #427

Full Changelog: v1.6.2...v1.6.3

This release adds telemetry support. For more information, see TELEMETRY_POLICY.md.

What's Changed

• Update supported branches in README file and PR template by @GSadee in #294
• Add telemetry by @Rafikooo in #426

Full Changelog: v1.5.2...v1.5.3