6895 Commits
Author SHA1 Message Date
BudsieBuds 386f976dcc feat(php): add PHP 8.5 support, resolve deprecations, and optimize CI workflows (#4776)
- Extend composer.json and composer.lock PHP requirement to include PHP 8.5
- Add PHP 8.5 to test matrix in phpunit.yml and main.yml workflows
- Modernize php-linter.yml to use setup-php@v2 with parallel matrix for PHP 8.2–8.5
- Propagate PHP 8.2 lint failures via shell loop in find -exec + while retaining batching for 8.3–8.5
- Add permissions: contents: read and cancel-in-progress concurrency to php-linter.yml
- Remove obsolete Node.js and npm install steps from phpunit.yml
- Update phpunit.yml runner to ubuntu-latest and composer cache action to v4
- Address PHP 8.5 deprecations and syntax:
  - Replace deprecated switch-case semicolon with standard colon in app/Config/Database.php
  - Replace non-standard (double) cast with (float) in app/Libraries/Token_lib.php
  - Remove obsolete curl_close() calls in app/Config/Validation/OSPOSRules.php and app/Libraries/Mailchimp_lib.php
- Update INSTALL.md, workflows README, and bug report issue template to include PHP 8.5
unstable
2026-10-28 15:58:14 +04:00
jekkos 8a8736ad0d fix(i18n): migrate powered_by to named placeholders across all locales (#4661, #4727)
Replace hardcoded string concatenation of the app name and version in the
document <title> with named-placeholder interpolation, consistent with the
existing Common.migration_needed pattern.

- header.php passes ['OSPOS', application_version] as the lang() array
  argument instead of concatenating values around the translation
- All 46 Common.php locale files convert powered_by to a named-placeholder
  template, preserving current rendered output while allowing each locale
  to reorder the app name and version as needed
- hy, ml, nb, and ur leave powered_by empty so MY_Language::getLine()
  falls back to English rather than rendering bare placeholder strings
- de-CH powered_by translated to German
- Codify named-placeholder + ICU MessageFormat as the localization standard
  in the agents documentation
2026-10-28 14:10:27 +04:00
objecttothisandClaude Sonnet 5 600417bfdf refactor: extract PSR-12 renames and independent bugfixes from plugin system PR (#4784)
build/refactor/fix: tighten tooling, rename accessors to camelCase, and correct model bugs

* build: tighten gitignore, lockfile, and script config
- gitignore /build and /.php-cs-fixer.cache
- allow core-js@3.50.0 postinstall script in package.json

* refactor: rename snake_case data accessors to camelCase
Rename get_info, get_multiple_info, get_sale_items, get_sale_payments,
and save_customer across Customer, Employee, Item, Sale, and Supplier
models to PSR-12 camelCase, updating every call site in controllers,
libraries, and views.

* test: update calls to match renamed camelCase accessors
Update HomeTest, ItemsControllerTest, and ItemTest to call
getInfo()/getMultipleInfo() instead of the old snake_case model methods.

* fix: correct independent bugs in Item, Item_taxes, and Attribute models
- Item::delete()/delete_list(): let $this->db->transStatus() alone decide
  success instead of accumulating a bitwise-AND over intermediate results,
  which could report failure (and trigger error toasts) even when the
  delete had actually completed
- Item_taxes: correct $table property from 'item_taxes' to 'items_taxes'
- Attribute::getDefinitionNames(): pass an array to
  QueryBuilder->whereNotIn(), which requires one

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-10-28 13:00:30 +04:00
richardmillesandobjecttothis b07f5e3ebb chore(i18n): remove unused Sales language keys (#4637)
Drop verified-unused keys from Sales.php across all locales to reduce
translation burden. Retained:
- invoice_type_* keys (referenced by Sale_lib)
- rewards_package key (built dynamically by register.php)

Fixes #4586

Co-authored-by: objecttothis <17935339+objecttothis@users.noreply.github.com>
2026-10-27 15:24:21 +04:00
objecttothisandClaude Sonnet 4.6 74e825ba6f feat(stock-locations): add default location and sort order support (#4643)
Refactor Stock_location model to camelCase naming and introduce
is_default and sort_order fields with full migration, UI, and
item-sync support. Multiple follow-up fixes consolidated.

Database
- Add is_default (TINYINT, backfilled to oldest non-deleted row) and
  sort_order (nullable unsigned TINYINT unique, dense 0..N-1) columns
  via new migration; MySQL 5.7-compatible backfill using user variables
  instead of ROW_NUMBER(); down() drops both columns

Model
- Rename show_locations → showLocations (camelCase convention)
- Add getDefaultLocationId(), setDefaultLocation(), saveSortOrder();
  validate location existence before setting as default
- delete() compacts sort_order via two-pass CASE update to avoid
  collisions after prior reorders
- Atomic sort_order assignment via explicit SQL COUNT query

Controller / Config
- Modularize save logic into sanitizeSubmittedLocations(),
  deleteRemovedLocations(), saveSubmittedLocations(),
  saveLocationOrderAndDefault(); wrap in single transaction
- Support stock_location_new inputs for new-row creation
- Resolve new-* ID placeholders to real IDs post-save
- Abort loop on save failure; default missing POST arrays to []
- Validate that at least one location array is non-empty

Views
- Add Default column with center-aligned radio buttons; disable for
  unsaved rows; use attr() instead of data() for location IDs
- Escape dynamic location IDs against XSS in all affected partials
- form_count_details.php: fall back to default location when current
  is undefined; guard quantity input similarly
- Add aria-label to default radio inputs

Libraries / Items
- Widen Item_lib::get_item_location() and get_stock_destination() to
  nullable return types
- Guard null location_id in Items::getRow() and getGenerateBarcodes()
- Item::get_multiple_info(): accept ?int $location_id; short-circuit
  with where('item_id', -1) instead of always-false where('1','0')

i18n
- Add stock_location_default, stock_location_default_header,
  stock_location_name_header across all locale files

Tests
- Stock_locationTest: getDefaultLocationId, setDefaultLocation,
  saveSortOrder, delete compaction, saveValue; rename to
  testMethod_Scenario convention
- Add ConfigControllerTest / StockLocationsControllerTest with
  AdminAuthTrait covering CRUD, reorder, default assignment, and
  malformed/empty/blank payload validation
- DatabaseBootstrapTrait-based setup for ItemTest and Stock_locationTest

Signed-off-by: objecttothis <17935339+objecttothis@users.noreply.github.com>
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-10-27 14:36:34 +04:00
objecttothis 9253cfe836 test(config): add coverage for email/locale/general security fixes (#4782)
Add ConfigControllerTest covering validation added to protect
config save endpoints from injection and bypass attacks.

- Mailpath validation: accept legit sendmail paths (with dots,
  trailing args), require mailpath when protocol is sendmail,
  reject command injection via shell metacharacters (e.g.
  semicolon) for both sendmail and non-sendmail protocols
- postSaveLocale: verify payment_reference_code_min/max bounds
  (reject non-numeric, zero, negative, max < min; accept valid
  and min==max cases)
- postSaveLocale: verify language_code allow-list enforcement
  against path traversal (forward/backslash variants), unknown
  languages, and case-mismatched codes (GHSA-related hardening)
- postSaveGeneral: begin coverage of theme validation with a
  reusable base payload builder

Signed-off-by: objecttothis <17935339+objecttothis@users.noreply.github.com>
2026-10-26 18:12:52 +04:00
jekkosandcoderabbitai[bot] 42025e7817 fix(items): allow empty tax rows on item save (#4774)
* fix(items): allow empty tax rows on item save

- Remove 'required' from tax_names.* rule; use permit_empty instead
- Add permit_empty before nonNegativeDecimal for tax_percents.*
- Add empty-string guard in nonNegativeDecimal() rule

---------

Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
2026-10-25 22:50:33 +01:00
khao_lek 1f5c8de4a8 Translated using Weblate (Thai)
Currently translated at 100.0% (238 of 238 strings)

Translation: opensourcepos/sales
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/sales/th/
2026-10-25 21:33:52 +01:00
khao_lek e2203e1580 Translated using Weblate (Thai)
Currently translated at 100.0% (80 of 80 strings)

Translation: opensourcepos/taxes
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/taxes/th/
2026-10-25 21:33:51 +01:00
khao_lek fe97de45a6 Translated using Weblate (Thai)
Currently translated at 100.0% (10 of 10 strings)

Translation: opensourcepos/error
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/error/th/
2026-10-25 21:33:51 +01:00
khao_lek 0a1cf0c3fb Translated using Weblate (Thai)
Currently translated at 100.0% (147 of 147 strings)

Translation: opensourcepos/reports
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/reports/th/
2026-10-25 21:33:51 +01:00
khao_lek d4b96f5928 Translated using Weblate (Thai)
Currently translated at 100.0% (32 of 32 strings)

Translation: opensourcepos/attributes
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/attributes/th/
2026-10-25 14:17:45 +01:00
khao_lek 84be6a3369 Translated using Weblate (Thai)
Currently translated at 100.0% (53 of 53 strings)

Translation: opensourcepos/customers
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/customers/th/
2026-10-25 14:17:45 +01:00
khao_lek 4be632dac6 Translated using Weblate (Thai)
Currently translated at 100.0% (341 of 341 strings)

Translation: opensourcepos/config
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/config/th/
2026-10-25 14:17:44 +01:00
khao_lek 1b988b0346 Translated using Weblate (Thai)
Currently translated at 99.3% (146 of 147 strings)

Translation: opensourcepos/reports
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/reports/th/
2026-10-25 14:17:43 +01:00
khao_lek 91e49cf049 Translated using Weblate (Thai)
Currently translated at 80.0% (8 of 10 strings)

Translation: opensourcepos/error
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/error/th/
2026-10-25 14:17:43 +01:00
khao_lek b063373d23 Translated using Weblate (Thai)
Currently translated at 96.6% (230 of 238 strings)

Translation: opensourcepos/sales
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/sales/th/
2026-10-25 14:17:42 +01:00
khao_lek 28d99c18cd Translated using Weblate (Thai)
Currently translated at 100.0% (121 of 121 strings)

Translation: opensourcepos/items
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/items/th/
2026-10-25 14:17:42 +01:00
khao_lek 8de93daf2e Translated using Weblate (Thai)
Currently translated at 100.0% (27 of 27 strings)

Translation: opensourcepos/login
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/login/th/
2026-10-25 14:17:41 +01:00
JisooMx 82468e6665 Translated using Weblate (Spanish (Mexico))
Currently translated at 77.9% (53 of 68 strings)

Translation: opensourcepos/giftcards
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/giftcards/es_MX/
2026-10-25 02:33:44 +01:00
JisooMx 317d1431e5 Translated using Weblate (Spanish (Mexico))
Currently translated at 99.7% (340 of 341 strings)

Translation: opensourcepos/config
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/config/es_MX/
2026-10-25 02:33:44 +01:00
JisooMx 08ecb15f0f Translated using Weblate (Spanish)
Currently translated at 100.0% (27 of 27 strings)

Translation: opensourcepos/login
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/login/es/
2026-10-25 02:33:44 +01:00
JisooMx b3a95840c3 Translated using Weblate (Spanish (Mexico))
Currently translated at 90.3% (215 of 238 strings)

Translation: opensourcepos/sales
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/sales/es_MX/
2026-10-25 02:33:43 +01:00
JisooMx d71e7df04e Translated using Weblate (Spanish (Mexico))
Currently translated at 99.3% (146 of 147 strings)

Translation: opensourcepos/reports
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/reports/es_MX/
2026-10-25 00:41:50 +02:00
JisooMx ee68bbe315 Translated using Weblate (Spanish (Mexico))
Currently translated at 100.0% (121 of 121 strings)

Translation: opensourcepos/items
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/items/es_MX/
2026-10-25 00:41:50 +02:00
JisooMx b723130f52 Translated using Weblate (Spanish (Mexico))
Currently translated at 99.7% (340 of 341 strings)

Translation: opensourcepos/config
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/config/es_MX/
2026-10-25 00:41:50 +02:00
JisooMx cdcf6a988b Translated using Weblate (Spanish (Mexico))
Currently translated at 90.3% (215 of 238 strings)

Translation: opensourcepos/sales
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/sales/es_MX/
2026-10-25 00:41:50 +02:00
JisooMx 11678447b8 Translated using Weblate (Spanish (Mexico))
Currently translated at 98.1% (52 of 53 strings)

Translation: opensourcepos/customers
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/customers/es_MX/
2026-10-25 00:41:50 +02:00
JisooMx 8056580e55 Translated using Weblate (Spanish (Mexico))
Currently translated at 77.9% (53 of 68 strings)

Translation: opensourcepos/giftcards
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/giftcards/es_MX/
2026-10-25 00:41:50 +02:00
JisooMx c136832174 Translated using Weblate (Spanish (Mexico))
Currently translated at 100.0% (21 of 21 strings)

Translation: opensourcepos/suppliers
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/suppliers/es_MX/
2026-10-25 00:41:50 +02:00
BudsieBuds 97045aca68 fix(release): normalize release tag version and automate template updates
- release.yml:
  - Normalize App.php, package.json, and package-lock.json to clean release version ($TARGET) prior to tagging, ensuring tagged commits contain clean release metadata in git history.
  - Update release commit message to `chore(release): release <version>` to reflect that code, manifests, and templates are committed.
  - Automate updating issue templates (bug report.yml and feature_request.yml) on release: prepends new release, retains top 5 versions, and preserves the fallback option.
  - Automate updating supported versions in SECURITY.md (>= $TARGET and < $TARGET).
  - Remove automated regex update of README.md: the intro sentence describes the v3.4 rewrite to CI4, so blindly regex-replacing the version on future releases produces misleading prose and is brittle against wording edits.
  - Add concurrency group `release` and restrict workflow execution to master branch.
  - Bump App.php, package.json, and package-lock.json to next dev snapshot ($NEXT) in post-release commit.

- build-release.yml:
  - Remove redundant VERSION="${VERSION%-dev}" check and in-runner normalization step now that release commits are clean.

- Templates and Security Policy:
  - Add OpenSourcePOS 3.4.3 to bug report.yml, feature_request.yml, and SECURITY.md.
  - Add "- Older version (specify in description)" fallback option to issue templates.
  - Remove default selection in bug report.yml so reporters specify version explicitly.
2026-10-24 23:14:50 +02:00
JisooMx 9cd4f84689 Translated using Weblate (Spanish (Mexico))
Currently translated at 99.3% (146 of 147 strings)

Translation: opensourcepos/reports
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/reports/es_MX/
2026-10-24 22:08:45 +02:00
JisooMx 55d0534bf8 Translated using Weblate (Spanish (Mexico))
Currently translated at 100.0% (80 of 80 strings)

Translation: opensourcepos/taxes
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/taxes/es_MX/
2026-10-24 22:08:44 +02:00
JisooMx 2ad1c7033a Translated using Weblate (Spanish (Mexico))
Currently translated at 98.1% (52 of 53 strings)

Translation: opensourcepos/customers
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/customers/es_MX/
2026-10-24 22:08:44 +02:00
JisooMx 7ec6ad5554 Translated using Weblate (Spanish (Mexico))
Currently translated at 77.9% (53 of 68 strings)

Translation: opensourcepos/giftcards
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/giftcards/es_MX/
2026-10-24 22:08:44 +02:00
JisooMx 1f58afae90 Translated using Weblate (Spanish (Mexico))
Currently translated at 100.0% (46 of 46 strings)

Translation: opensourcepos/cashups
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/cashups/es_MX/
2026-10-24 22:08:44 +02:00
JisooMx 09e36ee77d Translated using Weblate (Spanish (Mexico))
Currently translated at 96.1% (328 of 341 strings)

Translation: opensourcepos/config
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/config/es_MX/
2026-10-24 22:08:43 +02:00
JoseLuisKukMagana f12cb3b498 Translated using Weblate (Spanish (Mexico))
Currently translated at 100.0% (121 of 121 strings)

Translation: opensourcepos/items
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/items/es_MX/
2026-10-24 22:08:43 +02:00
JisooMx a614d8ad57 Translated using Weblate (Spanish (Mexico))
Currently translated at 100.0% (121 of 121 strings)

Translation: opensourcepos/items
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/items/es_MX/
2026-10-24 22:08:43 +02:00
Ezequiel Gonzalez L 0b3c781f90 Translated using Weblate (Spanish (Mexico))
Currently translated at 100.0% (121 of 121 strings)

Translation: opensourcepos/items
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/items/es_MX/
2026-10-24 22:08:42 +02:00
JoseLuisKukMagana 2debbf84f1 Translated using Weblate (Spanish (Mexico))
Currently translated at 65.2% (79 of 121 strings)

Translation: opensourcepos/items
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/items/es_MX/
2026-10-24 21:36:23 +02:00
JisooMx 8e8d07534e Translated using Weblate (Spanish (Mexico))
Currently translated at 65.2% (79 of 121 strings)

Translation: opensourcepos/items
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/items/es_MX/
2026-10-24 21:36:23 +02:00
JisooMx ee31ad534d Translated using Weblate (Spanish (Mexico))
Currently translated at 98.1% (52 of 53 strings)

Translation: opensourcepos/customers
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/customers/es_MX/
2026-10-24 21:35:47 +02:00
JisooMx c20dd53e32 Translated using Weblate (Spanish (Mexico))
Currently translated at 69.1% (47 of 68 strings)

Translation: opensourcepos/giftcards
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/giftcards/es_MX/
2026-10-24 21:35:47 +02:00
JoseLuisKukMagana 50c1f7ce06 Translated using Weblate (Spanish (Mexico))
Currently translated at 64.4% (78 of 121 strings)

Translation: opensourcepos/items
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/items/es_MX/
2026-10-24 21:35:47 +02:00
JisooMx 1f10c1b694 Translated using Weblate (Spanish (Mexico))
Currently translated at 64.4% (78 of 121 strings)

Translation: opensourcepos/items
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/items/es_MX/
2026-10-24 21:35:47 +02:00
JisooMx 2b9fceab94 Translated using Weblate (Spanish (Mexico))
Currently translated at 100.0% (27 of 27 strings)

Translation: opensourcepos/login
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/login/es_MX/
2026-10-24 21:35:46 +02:00
JisooMx 06c77868fc Translated using Weblate (Spanish (Mexico))
Currently translated at 98.7% (79 of 80 strings)

Translation: opensourcepos/taxes
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/taxes/es_MX/
2026-10-24 21:26:36 +02:00
objecttothis f3e5690700 fix(i18n): align AZ, RU, and EN language files with project conventions (#4658)
- Standardized quote style (single quotes) and formatting across AZ and RU files
- Aligned keys/values with EN reference across all modules (attributes, calendar,
  cashups, common, employees, enum, error, expenses, items, reports, suppliers)
- Corrected translation errors and inaccuracies in AZ and RU strings
- Fixed misplaced and duplicate keys (definition_invalid_group, toggle_cost_and_profit)
- Clarified cost/wholesale distinction in Reports.php (EN + AZ)
- Refined phrasing for required-field messages, serialized-item toggles, and
  print_delay_autoreturn in RU
- Added missing shortcuts-related keys to RU Config.php
- Removed trailing period from definition_successful_adding (EN)
2026-10-23 17:22:38 +04:00
objecttothisandClaude Sonnet 5 af48fa4357 fix(tests): standardize DB bootstrap/OSPOS mocking, fix stale-prefix bug (#4771)
Adds DatabaseBootstrapTrait and OsposConfigFixtureTrait to replace
duplicated per-file setUp()/tearDown() bootstrap and OSPOS config mock
boilerplate across test classes, bringing them in line with the
ItemsControllerTest gold-standard shape.

Fixes the real root cause of tabular_helperTest's suite-order-dependent
failure: dropAllForeignKeyConstraints()/foreignKeyExists()/
dropColumnIfExists() temporarily blank the shared connection's DBPrefix
via overridePrefix() but never restored it if the query between the two
calls threw (e.g. migration_helperTest's mocked-failure tests) -
permanently corrupting prefixed table lookups for the rest of the
process. Wrapped each in try/finally. Also widens executeScript() to
accept an explicit connection so migration SQL can't silently run
against the wrong DB group.

Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>
2026-10-23 10:10:37 +04:00