v5.7.7 Tapas

What's Changed

This release fixes security advisory: GHSA-9vxx-j62q-h56j

User-facing changes 👀

• Exclude cancelled orders from bulk co-op reports by @karlafalk in #14415
• Fix removal of deleted variants on Edit Order screen by @BethanOFN in #14414

API changes ⚠️

• Fix enterprise priviledge escalation by @rioug in #14607

Experimental features for testing 🚧

• [Product Grid view ] Add product to cart by @rioug in #14427

Technical changes 🛠️

• Fix two flaky specs: producer properties and concurrent API requests by @maikels-agent in #14592
• Sort report line items deterministically by @maikels-agent in #14608

Dependencies 📦

• Bump webpack from 5.108.4 to 5.109.0 by @dependabot[bot] in #14595
• Bump rubocop from 1.88.0 to 1.88.2 by @dependabot[bot] in #14596
• Bump stripe from 19.3.0 to 19.3.1 by @dependabot[bot] in #14594
• Bump postcss from 8.5.22 to 8.5.23 by @dependabot[bot] in #14601
• Bump spring from 4.6.0 to 4.7.0 by @dependabot[bot] in #14603
• Bump activerecord-session_store from 2.2.0 to 2.3.0 by @dependabot[bot] in #14602
• Bump fast-uri from 3.1.4 to 3.1.5 by @dependabot[bot] in #14606
• Bump socket.io-parser from 4.2.4 to 4.2.7 by @dependabot[bot] in #14605
• Bump webpack from 5.109.0 to 5.109.1 by @dependabot[bot] in #14609
• Bump aws-sdk-s3 from 1.228.0 to 1.228.1 by @dependabot[bot] in #14611
• Bump simplecov from 0.22.0 to 1.0.3 by @dependabot[bot] in #14610

Full Changelog: v5.7.6...v5.7.7