Skip to content

v0.9.0

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 24 Jul 09:42
v0.9.0
57f4b7a

InnoShop CE v0.8.2 → v0.9.0 Changelog

Release Date: 2026-07-24
Version Range: v0.8.2 ~ v0.9.0
Total Commits: 60
File Changes: 521 files changed, 18630 insertions(+), 4950 deletions(-)

New Features

Product & Variant Refactor (Major)

  • Migrated product variants from JSON to relational tables: added product_variants, product_variant_values, product_sku_variant_values, etc. SKUs now link to stable variant_value_ids; locale labels render in product dimension order
  • Variant dimensions now support images: variant values can carry images; image_url is used for variant dimension display
  • Clarified product weight semantics: product.weight serves as the default weight for newly created SKUs

Media Library (Major)

  • New media library and media manager UI: introduced media://{id} virtual references; supports file upload, directory management, rename, Enter-key submit, and more

AI & Product Capabilities

  • AI content generation: integrated AI for generating product-related content
  • Product ratings: added product rating support
  • SKU deduplication: added duplicate SKU detection
  • Plugin CLI tools: command-line scaffolding for plugins, themes, controllers, models, migrations, etc.
  • Order stock restore: added order stock rollback mechanism

Distribution Infrastructure

  • Enabled one-command composer create-project install: composer create-project innoshop/innoshop now auto-runs dependency installation, APP_KEY generation, and asset build
  • GitHub Actions auto-packaging for Releases: pushing a tag triggers an automated build producing innoshop-vX.Y.Z.zip containing vendor and compiled assets
  • Package name corrected from laravel/laravel to innoshop/innoshop; license aligned to OSL-3.0

Framework & Dependency Upgrades

  • Upgraded the Laravel stack to v13 (framework 13, Sanctum, Tinker, Socialite, and related packages)
  • Upgraded Laravel/AI to ^0.10.1
  • Upgraded AWS SDK, Stripe, Intervention Image, Laravel Permission, and other key dependencies

Visit Analytics Enhancement

  • Added bot detection
  • Added geographic aggregation
  • Integrated SEO tooling

Plugin & Theme System

  • Enhanced plugin management UI and components
  • Introduced Theme Hook mechanism, allowing themes to inject custom logic
  • Added Theme Route support, allowing themes to register dedicated routes

Installation Experience

  • Installation wizard now supports skipping demo data

Bug Fixes

Security

  • Fixed IDOR vulnerability in OrderReturnRepo
  • Fixed unauthorized order information leak in PaymentController
  • Rejected extensionless uploads and expanded the dangerous-extension blacklist
  • Bumped guzzle and axios to resolve Dependabot security alerts

Media Management

  • Fixed root-level folder creation not refreshing the left tree
  • Fixed folder/rename dialogs not binding the Enter key to submit
  • Extracted directory fetch/normalize methods for reuse

Frontend

  • Fixed PageBuilder design-mode hover z-index being covered by theme fixed headers
  • Fixed TinyMCE unload browser violation by using pagehide
  • Fixed AI model dropdown reading from form input instead of the database
  • Fixed plugin icons broken by the Intervention Image v4 upgrade

Data & Tests

  • Fixed incorrect product-count calculation for categories
  • Fixed testing env not treated as installed, causing front/panel routes not to register
  • Fixed APP_LOCALE=zh_cn in .env.example inconsistent with the project locale code zh-cn
  • Synced missing AI-refactor seeder pieces from the Bundle fork

Improvements

Performance

  • Reduced home-page SQL queries by ~35%, significantly speeding up the first render
  • Cached plugin config and hardened the Plugin Repository lifecycle to avoid redundant initialization
  • Optimized GeoLite2 hardcoded download URL, translation consolidation, and settings UI

Assets

  • Updated database seeders
  • Updated flag icon assets
  • Added AI icon assets
  • Updated language files

Tooling

CI/CD & Release

  • Added release workflow to auto-build distribution zip on tag push
  • Aligned with build_ce.sh practices and fixed version-drift detection
  • Triggered Laravel workflow on main and declared required PHP extensions
  • Added Dependabot config for composer, npm, and GitHub Actions
  • Added maintainer releasing guide at docs/releasing.md

Repository Hygiene

  • Untracked .DS_Store files under plugins/
  • Untracked generated SEO files under public/

Plugin Architecture

  • Dropped composer-merge-plugin strategy: plugins no longer merge their own composer.json; dependencies are managed by the root project, and third-party libraries must be vendored inside the plugin or added to the root composer.json

Debugging

  • Added Debugbar v4 configuration
Assets 3
Loading