fix docs reqs (#12407)

* bump soupsieve

* general deps bump

.deepsource.toml

@@ -1,33 +0,0 @@
-version = 1
-exclude_patterns = [
-  "docs/docs/javascripts/**",      # Docs: Helpers
-  "docs/ci/**",                    # Docs: CI
-  "InvenTree/InvenTree/static/**", # Backend: CUI static files
-  "ci/**",                         # Backend: CI
-  "InvenTree/**/migrations/*.py",  # Backend: Migration files
-  "src/frontend/src/locales/**",   # Frontend: Translations
-]
-test_patterns = ["**/test_*.py", "**/test.py", "**/tests.py"]
-
-
-[[analyzers]]
-name = "shell"
-
-[[analyzers]]
-name = "javascript"
-
-[analyzers.meta]
-plugins = ["react"]
-
-[[analyzers]]
-name = "python"
-
-[analyzers.meta]
-runtime_version = "3.x.x"
-
-[[analyzers]]
-name = "docker"
-
-[[analyzers]]
-name = "test-coverage"
-enabled = false

.devcontainer/Dockerfile

@@ -0,0 +1,46 @@
+# Dockerfile for the InvenTree devcontainer
+# This container is used for development of the InvenTree project, and includes all necessary dependencies for both backend and frontend development.
+
+FROM mcr.microsoft.com/devcontainers/python:3.12-trixie@sha256:5440cb68898d190ad6c6e8a4634ce89d0645bea47f9c8beb75612bb8e3983711
+
+# InvenTree paths
+ENV INVENTREE_HOME="/home/inventree"
+ENV INVENTREE_DATA_DIR="${INVENTREE_HOME}/dev"
+ENV INVENTREE_STATIC_ROOT="${INVENTREE_DATA_DIR}/static"
+ENV INVENTREE_MEDIA_ROOT="${INVENTREE_DATA_DIR}/media"
+ENV INVENTREE_BACKUP_DIR="${INVENTREE_DATA_DIR}/backup"
+ENV INVENTREE_PLUGIN_DIR="${INVENTREE_DATA_DIR}/plugins"
+ENV INVENTREE_CONFIG_FILE="${INVENTREE_DATA_DIR}/config.yaml"
+ENV INVENTREE_SECRET_KEY_FILE="${INVENTREE_DATA_DIR}/secret_key.txt"
+ENV INVENTREE_OIDC_PRIVATE_KEY_FILE="${INVENTREE_DATA_DIR}/oidc.pem"
+
+# Required for running playwright within devcontainer
+ENV DISPLAY=:0
+ENV LIBGL_ALWAYS_INDIRECT=1
+
+COPY contrib/container/init.sh ./
+RUN chmod +x init.sh
+
+# Install required base packages
+RUN apt update && apt install -y \
+   python3-dev python3-venv \
+   postgresql-client \
+   libldap2-dev libsasl2-dev \
+   libpango-1.0-0 libcairo2 \
+   poppler-utils weasyprint
+
+# Install packages required for frontend development
+RUN apt install -y nodejs npm
+
+# Update to the latest stable node version
+RUN npm install -g n --ignore-scripts && n lts
+
+# Install yarn
+RUN npm install -g yarn
+
+# Ensure node and yarn are available at the command line
+RUN node --version && yarn --version
+
+RUN yarn config set httpTimeout 600000 --home
+
+ENTRYPOINT ["/bin/bash", "./init.sh"]

.devcontainer/devcontainer.json

@@ -1,16 +1,11 @@
 // For format details, see https://aka.ms/devcontainer.json. For config options, see the README at:
 // https://github.com/microsoft/vscode-dev-containers/tree/v0.241.1/containers/python-3
 {
-  "name": "InvenTree",
-  "build": {
-    "dockerfile": "../Dockerfile",
-    "context": "..",
-    "target": "devcontainer",
-    "args": {
-      "base_image": "mcr.microsoft.com/vscode/devcontainers/base:alpine-3.18",
-      "workspace": "${containerWorkspaceFolder}"
-    }
-  },
+  "name": "InvenTree devcontainer",
+  "dockerComposeFile": "docker-compose.yml",
+  "service": "inventree",
+  "overrideCommand": true,
+  "workspaceFolder": "/home/inventree/",
 
   // Configure tool-specific properties.
   "customizations": {
@@ -21,12 +16,10 @@
         "python.defaultInterpreterPath": "${containerWorkspaceFolder}/dev/venv/bin/python",
         "python.linting.enabled": true,
         "python.linting.pylintEnabled": false,
-        "python.linting.flake8Enabled": true,
         "python.formatting.autopep8Path": "/usr/local/py-utils/bin/autopep8",
         "python.formatting.blackPath": "/usr/local/py-utils/bin/black",
         "python.formatting.yapfPath": "/usr/local/py-utils/bin/yapf",
         "python.linting.banditPath": "/usr/local/py-utils/bin/bandit",
-        "python.linting.flake8Path": "/usr/local/py-utils/bin/flake8",
         "python.linting.mypyPath": "/usr/local/py-utils/bin/mypy",
         "python.linting.pycodestylePath": "/usr/local/py-utils/bin/pycodestyle",
         "python.linting.pydocstylePath": "/usr/local/py-utils/bin/pydocstyle",
@@ -38,46 +31,40 @@
         "ms-python.python",
         "ms-python.vscode-pylance",
         "batisteo.vscode-django",
-        "eamodio.gitlens"
+        "eamodio.gitlens",
+        "biomejs.biome"
       ]
     }
   },
 
   // Use 'forwardPorts' to make a list of ports inside the container available locally.
-  "forwardPorts": [5173, 8000],
+  "forwardPorts": [5173, 5432, 6379, 8000, 8080],
   "portsAttributes": {
     "5173": {
-      "label": "Vite server"
+      "label": "Vite Server"
+    },
+    "5432": {
+      "label": "PostgreSQL Database"
+    },
+    "6379": {
+      "label": "Redis Server"
     },
     "8000": {
-      "label": "InvenTree server"
+      "label": "InvenTree Server"
+    },
+    "8080": {
+      "label": "mkdocs server"
     }
   },
 
   // Use 'postCreateCommand' to run commands after the container is created.
-  "postCreateCommand": "./.devcontainer/postCreateCommand.sh ${containerWorkspaceFolder}",
+  "postCreateCommand": ".devcontainer/postCreateCommand.sh",
 
   // Comment out to connect as root instead. More info: https://aka.ms/vscode-remote/containers/non-root.
   "remoteUser": "vscode",
   "containerUser": "vscode",
-  "features": {
-    "git": "os-provided"
-  },
 
   "remoteEnv": {
-    // InvenTree config
-    "INVENTREE_DEBUG": "True",
-    "INVENTREE_LOG_LEVEL": "INFO",
-    "INVENTREE_DB_ENGINE": "sqlite3",
-    "INVENTREE_DB_NAME": "${containerWorkspaceFolder}/dev/database.sqlite3",
-    "INVENTREE_MEDIA_ROOT": "${containerWorkspaceFolder}/dev/media",
-    "INVENTREE_STATIC_ROOT": "${containerWorkspaceFolder}/dev/static",
-    "INVENTREE_BACKUP_DIR": "${containerWorkspaceFolder}/dev/backup",
-    "INVENTREE_CONFIG_FILE": "${containerWorkspaceFolder}/dev/config.yaml",
-    "INVENTREE_SECRET_KEY_FILE": "${containerWorkspaceFolder}/dev/secret_key.txt",
-    "INVENTREE_PLUGINS_ENABLED": "True",
-    "INVENTREE_PLUGIN_DIR": "${containerWorkspaceFolder}/dev/plugins",
-    "INVENTREE_PLUGIN_FILE": "${containerWorkspaceFolder}/dev/plugins.txt",
 
     // Python config
     "PIP_USER": "no",

.devcontainer/docker-compose.yml

@@ -0,0 +1,46 @@
+services:
+  db:
+    image: postgres:15
+    restart: unless-stopped
+    ports:
+      - 5432/tcp
+    volumes:
+      - ../dev-db/:/var/lib/postgresql/data:z
+    environment:
+      POSTGRES_DB: inventree
+      POSTGRES_USER: inventree_user
+      POSTGRES_PASSWORD: inventree_password
+
+  redis:
+    image: redis:7.0
+    restart: always
+    ports:
+      - 6379
+
+  inventree:
+    ports:
+      - 8000:8000
+    build:
+      context: ..
+      dockerfile: .devcontainer/Dockerfile
+    volumes:
+      - ../:/home/inventree:z
+      - /tmp/.X11-unix:/tmp/.X11-unix
+
+    environment:
+      INVENTREE_DB_ENGINE: postgresql
+      INVENTREE_DB_NAME: inventree
+      INVENTREE_DB_HOST: db
+      INVENTREE_DB_USER: inventree_user
+      INVENTREE_DB_PASSWORD: inventree_password
+      INVENTREE_DEBUG: True
+      INVENTREE_CACHE_HOST: redis
+      INVENTREE_CACHE_PORT: 6379
+      INVENTREE_PLUGINS_ENABLED: True
+      INVENTREE_SITE_URL: http://localhost:8000
+      INVENTREE_CORS_ORIGIN_ALLOW_ALL: True
+      INVENTREE_PY_ENV: /home/inventree/dev/venv
+      INVENTREE_DEVCONTAINER: True
+
+    depends_on:
+      - db

.devcontainer/postCreateCommand.sh

@@ -1,24 +1,39 @@
 #!/bin/bash
+set -e
+
+echo "Running postCreateCommand.sh ..."
 
 # Avoiding Dubious Ownership in Dev Containers for setup commands that use git
-# Note that the local workspace directory is passed through as the first argument $1
-git config --global --add safe.directory $1
-
-# create folders
-mkdir -p $1/dev/{commandhistory,plugins}
-cd $1
+git config --global --add safe.directory /home/inventree
 
 # create venv
-python3 -m venv $1/dev/venv
-. $1/dev/venv/bin/activate
-
-# setup InvenTree server
-pip install invoke
-invoke update
-invoke setup-dev
-invoke frontend-install
+python3 -m venv /home/inventree/dev/venv --system-site-packages --upgrade-deps
+. /home/inventree/dev/venv/bin/activate
 
 # remove existing gitconfig created by "Avoiding Dubious Ownership" step
 # so that it gets copied from host to the container to have your global
 # git config in container
 rm -f /home/vscode/.gitconfig
+
+# Fix issue related to CFFI version mismatch
+pip uninstall cffi -y
+sudo apt remove --purge -y python3-cffi
+pip install --no-cache-dir --force-reinstall --ignore-installed cffi
+
+# Upgrade pip
+python3 -m pip install --upgrade pip
+
+# Ensure the correct invoke is available
+pip3 install --ignore-installed --upgrade invoke Pillow
+
+# install base level packages
+pip3 install -Ur contrib/container/requirements.txt --require-hashes
+
+# Run initial InvenTree server setup
+invoke update -s
+
+# Configure dev environment
+invoke dev.setup-dev
+
+# Install required frontend packages
+invoke int.frontend-install

.devops/testing_ci.yml

@@ -1,71 +0,0 @@
-# Python Django
-# Test a Django project on multiple versions of Python.
-# Add steps that analyze code, save build artifacts, deploy, and more:
-# https://docs.microsoft.com/azure/devops/pipelines/languages/python
-
-trigger:
-- master
-
-pool:
-  vmImage: ubuntu-latest
-strategy:
-  matrix:
-    Python39:
-      PYTHON_VERSION: '3.9'
-  maxParallel: 3
-
-steps:
-- task: UsePythonVersion@0
-  inputs:
-    versionSpec: '$(PYTHON_VERSION)'
-    architecture: 'x64'
-
-- task: PythonScript@0
-  displayName: 'Export project path'
-  inputs:
-    scriptSource: 'inline'
-    script: |
-      """Search all subdirectories for `manage.py`."""
-      from glob import iglob
-      from os import path
-      # Python >= 3.5
-      manage_py = next(iglob(path.join('**', 'manage.py'), recursive=True), None)
-      if not manage_py:
-          raise SystemExit('Could not find a Django project')
-      project_location = path.dirname(path.abspath(manage_py))
-      print('Found Django project in', project_location)
-      print('##vso[task.setvariable variable=projectRoot]{}'.format(project_location))
-
-- script: |
-    python -m pip install --upgrade pip setuptools wheel
-    pip install -r requirements.txt
-    pip install -r requirements-dev.txt
-    pip install unittest-xml-reporting coverage invoke
-    sudo apt-get install poppler-utils
-    sudo apt-get install libpoppler-dev
-  displayName: 'Install prerequisites'
-
-- script: |
-    pushd '$(projectRoot)'
-    invoke update
-    coverage run manage.py test --testrunner xmlrunner.extra.djangotestrunner.XMLTestRunner --no-input
-    coverage xml -i
-  displayName: 'Run tests'
-  env:
-    INVENTREE_DB_ENGINE: sqlite3
-    INVENTREE_DB_NAME: inventree
-    INVENTREE_MEDIA_ROOT: ./media
-    INVENTREE_STATIC_ROOT: ./static
-    INVENTREE_BACKUP_DIR: ./backup
-    INVENTREE_PLUGINS_ENABLED: true
-
-- task: PublishTestResults@2
-  inputs:
-    testResultsFiles: "**/TEST-*.xml"
-    testRunTitle: 'Python $(PYTHON_VERSION)'
-  condition: succeededOrFailed()
-
-- task: PublishCodeCoverageResults@1
-  inputs:
-    codeCoverageTool: Cobertura
-    summaryFileLocation: '$(System.DefaultWorkingDirectory)/**/coverage.xml'

.djlintrc

@@ -1,3 +0,0 @@
-{
-    "ignore": "D018,H006,H008,H020,H021,H023,H025,H030,H031,T002"
-}

.eslintrc.yml

@@ -1,27 +0,0 @@
-env:
-  commonjs: false
-  browser: true
-  es2021: true
-  jquery: true
-extends:
-  - eslint:recommended
-parserOptions:
-  ecmaVersion: 12
-rules:
-  no-var: off
-  guard-for-in: off
-  no-trailing-spaces: off
-  camelcase: off
-  padded-blocks: off
-  prefer-const: off
-  max-len: off
-  require-jsdoc: off
-  valid-jsdoc: off
-  no-multiple-empty-lines: off
-  comma-dangle: off
-  no-unused-vars: off
-  no-useless-escape: off
-  prefer-spread: off
-  indent:
-    - error
-    - 4

.git-blame-ignore-revs

@@ -0,0 +1,3 @@
+# .git-blame-ignore-revs
+# Code Structure refactor https://github.com/inventree/InvenTree/pull/5582
+0bace3f3afaa213c63b5dcc70103f0d232637a9a

.github/CODEOWNERS

@@ -1,2 +1,13 @@
 # General owner is the maintainers team
 *       @SchrodingersGat
+
+# plugins are co-owned
+/src/backend/InvenTree/plugin/      @SchrodingersGat @matmair
+/src/backend/InvenTree/plugins/     @SchrodingersGat @matmair
+
+# Installer functions
+.pkgr.yml               @matmair
+Procfile                @matmair
+runtime.txt             @matmair
+/contrib/installer      @matmair
+/contrib/packager.io    @matmair

.github/FUNDING.yml

@@ -1,4 +0,0 @@
-github: inventree
-ko_fi: inventree
-patreon: inventree
-custom: [paypal.me/inventree]

.github/ISSUE_TEMPLATE/bug_report.yaml

@@ -6,7 +6,7 @@ body:
     id: no-duplicate-issues
     attributes:
       label: "Please verify that this bug has NOT been raised before."
-      description: "Search in the issues sections by clicking [HERE](https://github.com/inventree/inventree/issues?q=) and read the [Frequently Asked Questions](https://docs.inventree.org/en/latest/faq/)!"
+      description: "Search in the issues sections by clicking [HERE](https://github.com/inventree/inventree/issues?q=) and read the [Frequently Asked Questions](https://docs.inventree.org/en/latest/sref/faq)!"
       options:
         - label: "I checked and didn't find a similar issue"
           required: true
@@ -37,13 +37,15 @@ body:
       label: "Expected behaviour"
       description: "A clear and concise description of what you expected to happen."
       placeholder: "..."
-  - type: checkboxes
+  - type: dropdown
     id: deployment
     attributes:
       label: "Deployment Method"
       options:
-        - label: "Docker"
-        - label: "Bare metal"
+        - Docker
+        - Package
+        - Bare metal
+        - Other - added info in Steps to Reproduce
   - type: textarea
     id: version-info
     validations:
@@ -52,13 +54,25 @@ body:
       label: "Version Information"
       description: "The version info block."
       placeholder: "You can get this by going to the `About InvenTree` section in the upper right corner and clicking on the `copy version information` button"
-  - type: checkboxes
-    id: can-reproduce
+  - type: dropdown
+    id: tried-reproduce
     attributes:
-      label: "Please verify if you can reproduce this bug on the demo site."
-      description: "You can sign in at [InvenTree Demo](https://demo.inventree.org) with admin:inventree. Note that this instance runs on the latest dev version, so your bug may be fixed there."
+      label: Try to reproduce on the demo site
+      description: You can sign in at [InvenTree Demo](https://demo.inventree.org) with admin:inventree. Note that this instance runs on the latest dev version, so your bug may be fixed there.
       options:
-        - label: "I can reproduce this bug on the demo site."
+        - I did not try to reproduce
+        - I tried to reproduce
+    validations:
+      required: true
+  - type: dropdown
+    id: result-reproduce
+    attributes:
+      label: Is the bug reproducible on the demo site?
+      options:
+        - Not reproducible
+        - Reproducible
+    validations:
+      required: true
   - type: textarea
     id: logs
     attributes:

.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1 @@
+blank_issues_enabled: false

.github/actions/migration/action.yaml

@@ -9,9 +9,9 @@ runs:
         shell: bash
         run: |
           invoke migrate
-          invoke import-fixtures
+          invoke dev.import-fixtures
           invoke export-records -f data.json
-          python3 ./InvenTree/manage.py flush --noinput
+          python3 ./src/backend/InvenTree/manage.py flush --noinput
           invoke migrate
-          invoke import-records -f data.json
-          invoke import-records -f data.json
+          invoke import-records -c -f data.json --strict
+          invoke import-records -c -f data.json --strict

.github/actions/setup/action.yaml

@@ -15,6 +15,10 @@ inputs:
         required: false
         description: 'Install the InvenTree requirements?'
         default: 'false'
+    static:
+        required: false
+        description: 'Should the static files be built?'
+        default: 'false'
     dev-install:
         required: false
         description: 'Install the InvenTree development requirements?'
@@ -35,25 +39,43 @@ runs:
     using: 'composite'
     steps:
       - name: Checkout Code
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # pin@v4.1.1
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          persist-credentials: false
 
       # Python installs
       - name: Set up Python ${{ env.python_version }}
-        if: ${{ inputs.python == 'true' }}
-        uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # pin@v4.7.1
+        if: ${{ inputs.python == 'true' && env.python_version != '3.14' }}
+        uses: actions/setup-python@0a5c61591373683505ea898e09a3ea4f39ef2b9c # v5.0.0
         with:
           python-version: ${{ env.python_version }}
           cache: pip
+          cache-dependency-path: |
+            src/backend/requirements.txt
+            src/backend/requirements-dev.txt
+            contrib/container/requirements.txt
+            contrib/dev_reqs/requirements.txt
+      - name: Setup Python 3.14
+        if: ${{ inputs.python == 'true' && env.python_version == '3.14' }}
+        uses: actions/setup-python@0a5c61591373683505ea898e09a3ea4f39ef2b9c # v5.0.0
+        with:
+          python-version: ${{ env.python_version }}
       - name: Install Base Python Dependencies
         if: ${{ inputs.python == 'true' }}
         shell: bash
         run: |
           python3 -m pip install -U pip
-          pip3 install invoke wheel
+          pip3 install -U invoke wheel
+          pip3 install 'uv>=0.9.6'
+      - name: Allow uv to use the system Python by default
+        run: echo "UV_SYSTEM_PYTHON=1" >> $GITHUB_ENV
+        shell: bash
       - name: Install Specific Python Dependencies
         if: ${{ inputs.pip-dependency }}
         shell: bash
-        run: pip3 install ${{ inputs.pip-dependency }}
+        run: uv pip install ${PIP_DEPS}
+        env:
+          PIP_DEPS: ${{ inputs.pip-dependency }}
 
       # NPM installs
       - name: Install node.js ${{ env.node_version }}
@@ -61,25 +83,22 @@ runs:
         uses: actions/setup-node@1a4442cacd436585916779262731d5b162bc6ec7  # pin to v3.8.2
         with:
           node-version: ${{ env.node_version }}
-          cache: 'npm'
-      - name: Install npm packages
-        if: ${{ inputs.npm == 'true' }}
-        shell: bash
-        run: npm install
-
       # OS installs
       - name: Install OS Dependencies
         if: ${{ inputs.apt-dependency }}
         shell: bash
         run: |
           sudo apt-get update
-          sudo apt-get install ${{ inputs.apt-dependency }}
+          sudo apt-get install ${APT_DEPS}
+          sudo apt-get install ${APT_DEPS}
+        env:
+          APT_DEPS: ${{ inputs.apt-dependency }}
 
       # Invoke commands
       - name: Install dev requirements
-        if: ${{ inputs.dev-install == 'true' ||inputs.install == 'true' }}
+        if: ${{ inputs.dev-install == 'true' || inputs.install == 'true' }}
         shell: bash
-        run: pip install -r requirements-dev.txt
+        run: invoke install --dev
       - name: Run invoke install
         if: ${{ inputs.install == 'true' }}
         shell: bash
@@ -87,4 +106,8 @@ runs:
       - name: Run invoke update
         if: ${{ inputs.update == 'true' }}
         shell: bash
-        run: invoke update
+        run: invoke update --skip-backup --skip-static --no-frontend
+      - name: Collect static files
+        if: ${{ inputs.static == 'true' }}
+        shell: bash
+        run: invoke static --skip-plugins

.github/dependabot.yml

@@ -0,0 +1,57 @@
+version: 2
+updates:
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly
+    cooldown:
+      default-days: 7
+    groups:
+      dependencies:
+        patterns:
+          - "*" # Include all dependencies
+
+  - package-ecosystem: docker
+    directory: /contrib/container
+    schedule:
+      interval: weekly
+    cooldown:
+      default-days: 7
+
+  - package-ecosystem: docker
+    directory: /.devcontainer
+    schedule:
+      interval: weekly
+    cooldown:
+      default-days: 7
+
+  - package-ecosystem: pip
+    directories:
+    - /docs
+    - /contrib/dev_reqs
+    - /contrib/container
+    - /src/backend
+    schedule:
+      interval: weekly
+      day: friday
+    cooldown:
+      default-days: 7
+    groups:
+      dependencies:
+        patterns:
+          - "*" # Include all dependencies
+    assignees:
+      - "matmair"
+    versioning-strategy: increase
+
+  - package-ecosystem: npm
+    directories:
+    - /src/frontend
+    schedule:
+      interval: weekly
+    cooldown:
+      default-days: 7
+    groups:
+      dependencies:
+        patterns:
+          - "*" # Include all dependencies

.github/release.yml

@@ -4,6 +4,7 @@ changelog:
   exclude:
     labels:
       - translation
+      - translations
       - documentation
   categories:
     - title: Breaking Changes
@@ -13,6 +14,9 @@ changelog:
     - title: Security Patches
       labels:
         - security
+    - title: Database Changes
+      labels:
+        - migration
     - title: New Features
       labels:
         - Semver-Minor
@@ -31,6 +35,9 @@ changelog:
         - setup
         - demo
         - CI
+    - title: Dependencies
+      labels:
+        - dependency
     - title: Other Changes
       labels:
         - "*"

.github/scripts/check_exported_data.py

@@ -0,0 +1,101 @@
+"""Script to check a data file exported using the 'export-records' command.
+
+This script is intended to be used as part of the CI workflow,
+in conjunction with the "workflows/import_export.yaml" workflow.
+
+In reads the exported data file, to ensure that:
+
+- The file can be read and parsed as JSON
+- The file contains the expected metadata
+- The file contains the expected plugin configuration
+- The file contains the expected plugin database records
+
+"""
+
+PLUGIN_KEY = 'dummy_app_plugin'
+PLUGIN_SLUG = 'dummy-app-plugin'
+
+import argparse
+import json
+import os
+
+if __name__ == '__main__':
+    parser = argparse.ArgumentParser(description='Check exported data file')
+    parser.add_argument('datafile', help='Path to the exported data file (JSON)')
+
+    args = parser.parse_args()
+
+    if not os.path.isfile(args.datafile):
+        print(f'Error: File not found: {args.datafile}')
+        exit(1)
+
+    with open(args.datafile, encoding='utf-8') as f:
+        try:
+            data = json.load(f)
+            print(f'Successfully loaded data from {args.datafile}')
+            print(f'Number of records: {len(data)}')
+        except json.JSONDecodeError as e:
+            print(f'Error: Failed to parse JSON file: {e}')
+            exit(1)
+
+    found_metadata = False
+    found_installed_apps = False
+    found_plugin_config = False
+    plugin_data_records = {}
+
+    # Inspect the data and check that it has the expected structure and content.
+    for entry in data:
+        # Check metadata entry for expected values
+        if entry.get('metadata', False):
+            print('Found metadata entry')
+            found_metadata = True
+
+            expected_apps = ['InvenTree', 'allauth', 'dbbackup', PLUGIN_KEY]
+
+            apps = entry.get('installed_apps', [])
+
+            for app in expected_apps:
+                if app not in apps:
+                    print(f'- Expected app "{app}" not found in installed apps list')
+                    exit(1)
+
+            found_installed_apps = True
+
+        elif entry.get('model', None) == 'plugin.pluginconfig':
+            key = entry['fields']['key']
+
+            if key == PLUGIN_SLUG:
+                print(f'Found plugin configuration for plugin "{PLUGIN_KEY}"')
+                found_plugin_config = True
+
+        elif entry.get('model', None) == f'{PLUGIN_KEY}.examplemodel':
+            key = entry['fields']['key']
+            value = entry['fields']['value']
+
+            plugin_data_records[key] = value
+
+    if not found_metadata:
+        print('Error: No metadata entry found in exported data')
+        exit(1)
+
+    if not found_installed_apps:
+        print(
+            f'Error: Plugin "{PLUGIN_KEY}" not found in installed apps list in metadata'
+        )
+        exit(1)
+
+    if not found_plugin_config:
+        print(f'Error: No plugin configuration found for plugin "{PLUGIN_KEY}"')
+        exit(1)
+
+    # Check the extracted plugin records
+    expected_keys = ['alpha', 'beta', 'gamma', 'delta']
+
+    for key in expected_keys:
+        if key not in plugin_data_records:
+            print(
+                f'Error: Expected plugin record with key "{key}" not found in exported data'
+            )
+            exit(1)
+
+    print('All checks passed successfully!')

.github/scripts/check_migration_files.py

@@ -3,7 +3,7 @@
 import subprocess
 import sys
 
-print("Checking for unstaged migration files...")
+print('Checking for unstaged migration files...')
 
 cmd = ['git', 'ls-files', '--exclude-standard', '--others']
 
@@ -20,9 +20,9 @@ for line in str(out.decode()).split('\n'):
 if len(migrations) == 0:
     sys.exit(0)
 
-print("There are {n} unstaged migration files:".format(n=len(migrations)))
+print(f'There are {len(migrations)} unstaged migration files:')
 
 for m in migrations:
-    print(" - {m}".format(m=m))
+    print(f' - {m}')
 
 sys.exit(len(migrations))

.github/scripts/check_source_strings.py

@@ -0,0 +1,100 @@
+"""Script to check source strings for translations."""
+
+import argparse
+import os
+
+import rapidfuzz
+
+BACKEND_SOURCE_FILE = [
+    '..',
+    '..',
+    'src',
+    'backend',
+    'InvenTree',
+    'locale',
+    'en',
+    'LC_MESSAGES',
+    'django.po',
+]
+
+FRONTEND_SOURCE_FILE = [
+    '..',
+    '..',
+    'src',
+    'frontend',
+    'src',
+    'locales',
+    'en',
+    'messages.po',
+]
+
+
+def extract_source_strings(file_path):
+    """Extract source strings from the provided file."""
+    here = os.path.abspath(os.path.dirname(__file__))
+    abs_file_path = os.path.abspath(os.path.join(here, *file_path))
+
+    sources = []
+
+    with open(abs_file_path, encoding='utf-8') as f:
+        for line in f:
+            line = line.strip()
+            if line.startswith('msgid '):
+                msgid = line[6:].strip()
+
+                if msgid in sources:
+                    print(f'Duplicate source string: {msgid}')
+                else:
+                    sources.append(msgid)
+
+    return sources
+
+
+def compare_source_strings(sources, threshold):
+    """Compare source strings to find duplicates (or close matches)."""
+    issues = 0
+
+    for i, source in enumerate(sources):
+        for other in sources[i + 1 :]:
+            if other.lower() == source.lower():
+                print(f'- Duplicate: {source} ~ {other}')
+                issues += 1
+                continue
+
+            ratio = rapidfuzz.fuzz.ratio(source, other)
+            if ratio > threshold:
+                print(f'- Close match: {source} ~ {other} ({ratio:.1f}%)')
+                issues += 1
+
+    if issues:
+        print(f' - Found {issues} issues.')
+
+
+if __name__ == '__main__':
+    parser = argparse.ArgumentParser(
+        description='Check source strings for translations.'
+    )
+    parser.add_argument(
+        '--backend', action='store_true', help='Check backend source strings'
+    )
+    parser.add_argument(
+        '--frontend', action='store_true', help='Check frontend source strings'
+    )
+    parser.add_argument(
+        '--threshold',
+        type=int,
+        help='Set the threshold for string comparison',
+        default=99,
+    )
+
+    args = parser.parse_args()
+
+    if args.backend:
+        backend_sources = extract_source_strings(BACKEND_SOURCE_FILE)
+        print('Backend source strings:', len(backend_sources))
+        compare_source_strings(backend_sources, args.threshold)
+
+    if args.frontend:
+        frontend_sources = extract_source_strings(FRONTEND_SOURCE_FILE)
+        print('Frontend source strings:', len(frontend_sources))
+        compare_source_strings(frontend_sources, args.threshold)

.github/scripts/version_check.py

@@ -0,0 +1,327 @@
+"""Ensure that the release tag matches the InvenTree version number.
+
+Behaviour:
+master / main branch:
+    - version number must end with 'dev'
+
+tagged branch:
+    - version number must match tag being built
+    - version number cannot already exist as a release tag
+
+"""
+
+import argparse
+import itertools
+import json
+import os
+import re
+import sys
+from pathlib import Path
+from typing import Optional
+
+import requests
+
+REPO = os.getenv('GITHUB_REPOSITORY', 'inventree/inventree')
+GITHUB_API_URL = os.getenv('GITHUB_API_URL', 'https://api.github.com')
+
+
+def get_src_dir() -> Path:
+    """Return the path to the InvenTree source directory."""
+    here = Path(__file__).parent.absolute()
+    src_dir = here.joinpath('..', '..', 'src', 'backend', 'InvenTree', 'InvenTree')
+
+    if not src_dir.exists():
+        raise FileNotFoundError(
+            f"Could not find InvenTree source directory: '{src_dir}'"
+        )
+
+    return src_dir
+
+
+def get_inventree_version() -> str:
+    """Return the InvenTree version string."""
+    src_dir = get_src_dir()
+    version_file = src_dir.joinpath('version.py')
+
+    if not version_file.exists():
+        raise FileNotFoundError(
+            f"Could not find InvenTree version file: '{version_file}'"
+        )
+
+    with open(version_file, encoding='utf-8') as f:
+        text = f.read()
+
+        # Extract the InvenTree software version
+        results = re.findall(r"""INVENTREE_SW_VERSION = '(.*)'""", text)
+
+        if len(results) != 1:
+            raise ValueError(f'Could not find INVENTREE_SW_VERSION in {version_file}')
+
+        return results[0]
+
+
+def get_api_version() -> str:
+    """Return the InvenTree API version string."""
+    src_dir = get_src_dir()
+    api_version_file = src_dir.joinpath('api_version.py')
+
+    if not api_version_file.exists():
+        raise FileNotFoundError(
+            f"Could not find InvenTree API version file: '{api_version_file}'"
+        )
+
+    with open(api_version_file, encoding='utf-8') as f:
+        text = f.read()
+
+        # Extract the InvenTree software version
+        results = re.findall(r"""INVENTREE_API_VERSION = (.*)""", text)
+
+        if len(results) != 1:
+            raise ValueError(
+                f'Could not find INVENTREE_API_VERSION in {api_version_file}'
+            )
+
+        return results[0].strip().strip('"').strip("'")
+
+
+def version_number_to_tuple(version_string: str) -> tuple[int, int, int, str]:
+    """Validate a version number string, and convert to a tuple of integers.
+
+    e.g. 1.1.0
+    e.g. 1.1.0 dev
+    e.g. 1.2.3-rc2
+    """
+    pattern = r'^(\d+)\.(\d+)\.(\d+)[\s-]?(.*)?$'
+
+    match = re.match(pattern, version_string)
+
+    if not match or len(match.groups()) < 3:
+        raise ValueError(
+            f"Version string '{version_string}' did not match required pattern"
+        )
+
+    result = tuple(int(x) for x in match.groups()[:3])
+
+    # Add optional prerelease tag
+    if len(match.groups()) > 3:
+        result += (match.groups()[3] or '',)
+    else:
+        result += ('',)
+
+    return result
+
+
+def get_existing_release_tags(include_prerelease: bool = True):
+    """Request information on existing releases via the GitHub API."""
+    # Check for github token
+    token = os.getenv('GITHUB_TOKEN', None)
+    headers = None
+
+    if token:
+        headers = {'Authorization': f'Bearer {token}'}
+
+    response = requests.get(f'{GITHUB_API_URL}/repos/{REPO}/releases', headers=headers)
+
+    if response.status_code != 200:
+        raise ValueError(
+            f'Unexpected status code from GitHub API: {response.status_code}'
+        )
+
+    data = json.loads(response.text)
+
+    # Return a list of all tags
+    tags = []
+
+    for release in data:
+        tag = release['tag_name'].strip()
+
+        version_tuple = version_number_to_tuple(tag)
+
+        if len(version_tuple) >= 4 and version_tuple[3]:
+            # Skip prerelease tags
+            if not include_prerelease:
+                print('-- skipping prerelease tag:', tag)
+                continue
+
+        tags.append(tag)
+
+    return tags
+
+
+def check_version_number(version_string, allow_duplicate=False):
+    """Check the provided version number.
+
+    Returns True if the provided version is the 'newest' InvenTree release
+    """
+    print(f"Checking version '{version_string}'")
+
+    version_tuple = version_number_to_tuple(version_string)
+
+    # Look through the existing releases
+    existing = get_existing_release_tags(include_prerelease=False)
+
+    # Assume that this is the highest release, unless told otherwise
+    highest_release = True
+
+    # A non-standard tag cannot be the 'highest' release
+    if len(version_tuple) >= 4 and version_tuple[3]:
+        highest_release = False
+        print(f"-- Version tag '{version_string}' cannot be the highest release")
+
+    for release in existing:
+        if version_string == release and not allow_duplicate:
+            raise ValueError(f"Duplicate release '{version_string}' exists!")
+
+        release_tuple = version_number_to_tuple(release)
+
+        if release_tuple > version_tuple:
+            highest_release = False
+            print(f'Found newer release: {release!s}')
+
+    if highest_release:
+        print(f"-- Version '{version_string}' is the highest release")
+
+    return highest_release
+
+
+def main() -> bool:
+    """Run the version check."""
+    parser = argparse.ArgumentParser(description='InvenTree Version Check')
+    parser.add_argument(
+        '--show-version',
+        action='store_true',
+        help='Print the InvenTree version and exit',
+    )
+    parser.add_argument(
+        '--show-api-version',
+        action='store_true',
+        help='Print the InvenTree API version and exit',
+    )
+    parser.add_argument(
+        '--decrement-api',
+        type=str,
+        default='false',
+        help='Decrement the API version by 1 and print',
+    )
+
+    args = parser.parse_args()
+
+    inventree_version = get_inventree_version()
+    inventree_api_version = int(get_api_version())
+
+    if args.show_version:
+        print(inventree_version)
+        sys.exit(0)
+
+    if args.show_api_version:
+        if str(args.decrement_api).strip().lower() == 'true':
+            inventree_api_version -= 1
+        print(inventree_api_version)
+        sys.exit(0)
+
+    # Ensure that we are running in GH Actions
+    if os.environ.get('GITHUB_ACTIONS', '') != 'true':
+        print('This script is intended to be run within a GitHub Action!')
+        return False
+
+    print('Running InvenTree version check...')
+
+    # GITHUB_REF_TYPE may be either 'branch' or 'tag'
+    GITHUB_REF_TYPE = os.environ['GITHUB_REF_TYPE']
+
+    # GITHUB_REF may be either 'refs/heads/<branch>' or 'refs/heads/<tag>'
+    GITHUB_REF = os.environ['GITHUB_REF']
+    GITHUB_REF_NAME = os.environ['GITHUB_REF_NAME']
+    GITHUB_BASE_REF = os.environ['GITHUB_BASE_REF']
+
+    # Print out version information, makes debugging actions *much* easier!
+    print(f'GITHUB_REF: {GITHUB_REF}')
+    print(f'GITHUB_REF_NAME: {GITHUB_REF_NAME}')
+    print(f'GITHUB_REF_TYPE: {GITHUB_REF_TYPE}')
+    print(f'GITHUB_BASE_REF: {GITHUB_BASE_REF}')
+
+    print(
+        f"InvenTree Version: '{inventree_version}' - {version_number_to_tuple(inventree_version)}"
+    )
+    print(f"InvenTree API Version: '{inventree_api_version}'")
+
+    # Check version number and look for existing versions
+    # If a release is found which matches the current tag, throw an error
+
+    allow_duplicate = False
+
+    # Note: on a 'tag' (release) we *must* allow duplicate versions, as this *is* the version that has just been released
+    if GITHUB_REF_TYPE == 'tag':
+        allow_duplicate = True
+
+    # Note: on a push to 'stable' branch we also allow duplicates
+    if GITHUB_BASE_REF == 'stable':
+        allow_duplicate = True
+
+    highest_release = check_version_number(
+        inventree_version, allow_duplicate=allow_duplicate
+    )
+
+    # Determine which docker tag we are going to use
+    docker_tags: Optional[list[str]] = None
+    pkg_channel = None
+
+    if GITHUB_REF_TYPE == 'tag':
+        # GITHUB_REF should be of the form /refs/heads/<tag>
+        version_tag: str = GITHUB_REF.split('/')[-1]
+        print(f"Checking requirements for tagged release - '{version_tag}':")
+
+        if version_tag != inventree_version:
+            print(
+                f"Version number '{inventree_version}' does not match tag '{version_tag}'"
+            )
+            sys.exit
+
+        docker_tags = [version_tag, 'stable'] if highest_release else [version_tag]
+
+        # Add release-line tag
+        pkg_channel = '.'.join(version_tag.split('.')[:2]) + '.x'
+
+    elif GITHUB_REF_TYPE == 'branch':
+        # Otherwise we know we are targeting the 'master' branch
+        docker_tags = ['latest']
+        highest_release = False
+        pkg_channel = GITHUB_BASE_REF
+
+    else:
+        print('Unsupported branch / version combination:')
+        print(f'InvenTree Version: {inventree_version}')
+        print('GITHUB_REF_TYPE:', GITHUB_REF_TYPE)
+        print('GITHUB_BASE_REF:', GITHUB_BASE_REF)
+        print('GITHUB_REF:', GITHUB_REF)
+        return False
+
+    if docker_tags is None:
+        print('Docker tags could not be determined')
+        return False
+
+    print(f"Version check passed for '{inventree_version}'!")
+    print(f"Docker tags: '{docker_tags}'")
+
+    target_repos = [REPO.lower(), f'ghcr.io/{REPO.lower()}']
+
+    # Ref: https://getridbug.com/python/how-to-set-environment-variables-in-github-actions-using-python/
+    with open(os.getenv('GITHUB_ENV'), 'a', encoding='utf-8') as env_file:
+        # Construct tag string
+        tag_list = [[f'{r}:{t}' for t in docker_tags] for r in target_repos]
+        tags = ','.join(itertools.chain(*tag_list))
+
+        env_file.write(f'docker_tags={tags}\n')
+
+        if GITHUB_REF_TYPE == 'tag' and highest_release:
+            env_file.write('stable_release=true\n')
+
+        env_file.write(f'pkg_channel={pkg_channel}\n')
+    return True
+
+
+if __name__ == '__main__':
+    rslt = main()
+    if rslt is not True:
+        print('Version check failed!')
+        sys.exit(1)

.github/workflows/backport.yaml

@@ -0,0 +1,39 @@
+# Backport tagged issues to a stable branch.
+#
+# To enable backporting for a pullrequest, add the label "backport" to the PR.
+# Additionally, add a label with the prefix "backport-to-" and the target branch
+
+name: Backport
+
+on:
+  pull_request_target:
+    types: ["labeled", "closed"]
+
+jobs:
+  backport:
+    name: Backport PR
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      pull-requests: write
+    if: |
+      github.event.pull_request.merged == true
+      && contains(github.event.pull_request.labels.*.name, 'backport')
+      && (
+        (github.event.action == 'labeled' && github.event.label.name == 'backport')
+        || (github.event.action == 'closed')
+      )
+    steps:
+      - name: Backport Action
+        uses: sorenlouv/backport-github-action@8a6c0381851f43f9f1fddc7303f0e9015eb57b62 # v12.0.4
+        with:
+          github_token: ${{ secrets.GITHUB_TOKEN }}
+          auto_backport_label_prefix: backport-to-
+
+      - name: Info log
+        if: ${{ success() }}
+        run: cat ~/.backport/backport.info.log
+
+      - name: Debug log
+        if: ${{ failure() }}
+        run: cat ~/.backport/backport.debug.log

.github/workflows/backport.yml

@@ -1,37 +0,0 @@
-# Backport tagged issues to a stable branch.
-#
-# To enable backporting for a pullrequest, add the label "backport" to the PR.
-# Additionally, add a label with the prefix "backport-to-" and the target branch
-
-name: Backport
-
-on:
-  pull_request_target:
-    types: [ "labeled", "closed" ]
-
-jobs:
-  backport:
-    name: Backport PR
-    runs-on: ubuntu-latest
-    if: |
-      github.event.pull_request.merged == true
-      && contains(github.event.pull_request.labels.*.name, 'backport')
-      && (
-        (github.event.action == 'labeled' && github.event.label.name == 'backport')
-        || (github.event.action == 'closed')
-      )
-    steps:
-      - name: Backport Action
-        uses: sqren/backport-github-action@f54e19901f2a57f8b82360f2490d47ee82ec82c6 # pin@v9.2.2
-        with:
-          github_token: ${{ secrets.GITHUB_TOKEN }}
-          auto_backport_label_prefix: backport-to-
-          add_original_reviewers: true
-
-      - name: Info log
-        if: ${{ success() }}
-        run: cat ~/.backport/backport.info.log
-
-      - name: Debug log
-        if: ${{ failure() }}
-        run: cat ~/.backport/backport.debug.log

.github/workflows/check_translations.yaml

@@ -8,36 +8,44 @@ on:
     branches:
       - l10
 
-jobs:
+env:
+  python_version: 3.12
 
+permissions:
+  contents: read
+
+jobs:
   check:
     runs-on: ubuntu-latest
 
     env:
       GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-      INVENTREE_DB_NAME: './test_db.sqlite'
+      INVENTREE_DB_NAME: "./test_db.sqlite"
       INVENTREE_DB_ENGINE: django.db.backends.sqlite3
-      INVENTREE_DEBUG: info
+      INVENTREE_DEBUG: true
+      INVENTREE_LOG_LEVEL: INFO
       INVENTREE_MEDIA_ROOT: ./media
       INVENTREE_STATIC_ROOT: ./static
       INVENTREE_BACKUP_DIR: ./backup
-      python_version: 3.9
+      INVENTREE_SITE_URL: http://localhost:8000
 
     steps:
       - name: Checkout Code
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # pin@v4.1.1
-      - name: Set Up Python ${{ env.python_version }}
-        uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # pin@v4.7.1
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
-          python-version: ${{ env.python_version }}
-          cache: 'pip'
-      - name: Install Dependencies
-        run: |
-          sudo apt-get update
-          sudo apt-get install gettext
-          pip3 install invoke
-          invoke install
+          persist-credentials: false
+
+      - name: Environment Setup
+        uses: ./.github/actions/setup
+        with:
+          install: true
+          apt-dependency: gettext
       - name: Test Translations
-        run: invoke translate
+        run: invoke dev.translate
+      - name: Check for Duplicates
+        run: |
+          python ./.github/scripts/check_source_strings.py --frontend --backend
       - name: Check Migration Files
-        run: python3 ci/check_migration_files.py
+        run: |
+          invoke migrate --detect
+          python3 .github/scripts/check_migration_files.py

.github/workflows/docker.yaml

@@ -15,18 +15,23 @@ name: Docker
 
 on:
   release:
-    types: [ published ]
+    types: [published]
 
   push:
     branches:
-      - 'master'
+      - "master"
   pull_request:
     branches:
-      - 'master'
+      - "master"
+
+permissions:
+  contents: read
 
 jobs:
-
   paths-filter:
+    permissions:
+      contents: read # for dorny/paths-filter to fetch a list of changed files
+      pull-requests: read # for dorny/paths-filter to read pull requests
     name: Filter
     runs-on: ubuntu-latest
 
@@ -34,56 +39,74 @@ jobs:
       docker: ${{ steps.filter.outputs.docker }}
 
     steps:
-      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # pin@v4.1.1
-      - uses: dorny/paths-filter@4512585405083f25c027a35db413c2b3b9006d50 # pin@v2.11.1
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          persist-credentials: false
+      - uses: dorny/paths-filter@fbd0ab8f3e69293af611ebaee6363fc25e6d187d # v4.0.1
         id: filter
         with:
           filters: |
             docker:
               - .github/workflows/docker.yaml
-              - docker/**
-              - docker-compose.yml
-              - docker.dev.env
-              - Dockerfile
-              - requirements.txt
-
+              - contrib/container/**
+              - src/backend/InvenTree/InvenTree/settings.py
+              - src/backend/requirements.txt
+              - tasks.py
 
   # Build the docker image
   build:
-    runs-on: ubuntu-latest
+    name: Docker Build Test
     needs: paths-filter
-    if: needs.paths-filter.outputs.docker == 'true' || github.event_name == 'release' || github.event_name == 'push'
+    if: needs.paths-filter.outputs.docker == 'true' || github.event_name == 'release' || github.event_name == 'push' || contains(github.event.pull_request.labels.*.name, 'full-run')
     permissions:
       contents: read
-      packages: write
-      id-token: write
     env:
       GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-      python_version: 3.9
+      python_version: 3.12
+    runs-on: ubuntu-latest # in the future we can try to use alternative runners here
+
     steps:
       - name: Check out repo
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # pin@v4.1.1
-      - name: Set Up Python ${{ env.python_version }}
-        uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # pin@v4.7.1
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
-          python-version: ${{ env.python_version }}
-      - name: Version Check
+          persist-credentials: false
+      - name: Test Docker Image
+        id: test-docker
         run: |
-          pip install requests
-          pip install pyyaml
-          python3 ci/version_check.py
-          echo "git_commit_hash=$(git rev-parse --short HEAD)" >> $GITHUB_ENV
-          echo "git_commit_date=$(git show -s --format=%ci)" >> $GITHUB_ENV
+          docker build . --target production --tag inventree-test -f contrib/container/Dockerfile
+          docker run --rm inventree-test invoke version
+          docker run --rm inventree-test invoke --version
+          docker run --rm inventree-test invoke --list
+          docker run --rm inventree-test gunicorn --version
+          docker run --rm inventree-test pg_dump --version
+          docker run --rm inventree-test test -f /home/inventree/init.sh
+          docker run --rm inventree-test test -f /home/inventree/tasks.py
+          docker run --rm inventree-test test -f /home/inventree/gunicorn.conf.py
+          docker run --rm inventree-test test -f /home/inventree/src/backend/requirements.txt
+          docker run --rm inventree-test test -f /home/inventree/src/backend/InvenTree/manage.py
+          # Check that backend translations were compiled into the image (a few representative languages)
+          docker run --rm inventree-test test -f /home/inventree/src/backend/InvenTree/locale/de/LC_MESSAGES/django.mo
+          docker run --rm inventree-test test -f /home/inventree/src/backend/InvenTree/locale/fr/LC_MESSAGES/django.mo
+          docker run --rm inventree-test test -f /home/inventree/src/backend/InvenTree/locale/ru/LC_MESSAGES/django.mo
+          docker run --rm inventree-test test -f /home/inventree/src/backend/InvenTree/locale/zh_Hans/LC_MESSAGES/django.mo
+          # Check that frontend translations (lingui) were compiled into the static build output (a few representative languages)
+          docker run --rm inventree-test grep -q '"src/locales/de/messages.ts"' /home/inventree/src/backend/InvenTree/web/static/web/.vite/manifest.json
+          docker run --rm inventree-test grep -q '"src/locales/fr/messages.ts"' /home/inventree/src/backend/InvenTree/web/static/web/.vite/manifest.json
+          docker run --rm inventree-test grep -q '"src/locales/ru/messages.ts"' /home/inventree/src/backend/InvenTree/web/static/web/.vite/manifest.json
+          docker run --rm inventree-test grep -q '"src/locales/zh_Hans/messages.ts"' /home/inventree/src/backend/InvenTree/web/static/web/.vite/manifest.json
       - name: Build Docker Image
         # Build the development docker image (using docker-compose.yml)
-        run: |
-          docker-compose build --no-cache
+        run: docker compose --project-directory . -f contrib/container/dev-docker-compose.yml build --no-cache
       - name: Update Docker Image
         run: |
-          docker-compose run inventree-dev-server invoke update
-          docker-compose run inventree-dev-server invoke setup-dev
-          docker-compose up -d
-          docker-compose run inventree-dev-server invoke wait
+          docker compose --project-directory . -f contrib/container/dev-docker-compose.yml run inventree-dev-server invoke install
+          docker compose --project-directory . -f contrib/container/dev-docker-compose.yml run inventree-dev-server invoke version
+          docker compose --project-directory . -f contrib/container/dev-docker-compose.yml run inventree-dev-server invoke update
+          docker compose --project-directory . -f contrib/container/dev-docker-compose.yml run inventree-dev-server invoke backup
+          docker compose --project-directory . -f contrib/container/dev-docker-compose.yml run inventree-dev-server invoke restore
+          docker compose --project-directory . -f contrib/container/dev-docker-compose.yml run inventree-dev-server invoke dev.setup-dev
+          docker compose --project-directory . -f contrib/container/dev-docker-compose.yml up -d
+          docker compose --project-directory . -f contrib/container/dev-docker-compose.yml run inventree-dev-server invoke wait
       - name: Check Data Directory
         # The following file structure should have been created by the docker image
         run: |
@@ -96,31 +119,90 @@ jobs:
           test -f data/config.yaml
           test -f data/plugins.txt
           test -f data/secret_key.txt
+          test -f data/oidc.pem
       - name: Run Unit Tests
         run: |
-          echo "GITHUB_TOKEN=${{ secrets.GITHUB_TOKEN }}" >> docker.dev.env
-          docker-compose run inventree-dev-server invoke test --disable-pty
-          docker-compose run inventree-dev-server invoke test --migrations --disable-pty
-          docker-compose down
+          echo "GITHUB_TOKEN=${{ secrets.GITHUB_TOKEN }}" >> contrib/container/docker.dev.env
+          docker compose --project-directory . -f contrib/container/dev-docker-compose.yml run --rm inventree-dev-server invoke dev.test --disable-pty --translations
+
+  # Run migration test
+  migration_test:
+    name: Migration Test
+    needs: paths-filter
+    if: needs.paths-filter.outputs.docker == 'true' || github.event_name == 'release' || github.event_name == 'push'
+    permissions:
+      contents: read
+    env:
+      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      python_version: 3.12
+    runs-on: ubuntu-latest # in the future we can try to use alternative runners here
+
+    steps:
+      - name: Check out repo
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          persist-credentials: false
+      - name: Run Migration Tests
+        run: |
+          docker compose --project-directory . -f contrib/container/dev-docker-compose.yml run --rm inventree-dev-server invoke update
+          docker compose --project-directory . -f contrib/container/dev-docker-compose.yml run --rm inventree-dev-server invoke dev.setup-dev
+          docker compose --project-directory . -f contrib/container/dev-docker-compose.yml run --rm inventree-dev-server invoke dev.test --migrations --translations
+
+  # Build and publish
+  publish:
+    name: Publish Docker Image
+    needs: [build, migration_test]
+    permissions:
+      contents: read
+      packages: write
+      id-token: write
+    env:
+      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      python_version: 3.12
+    runs-on: ubuntu-latest # in the future we can try to use alternative runners here
+
+    steps:
+      - name: Check out repo
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          persist-credentials: false
+      - name: Set Up Python ${{ env.python_version }}
+        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
+        with:
+          python-version: ${{ env.python_version }}
+      - name: Version Check
+        run: |
+          pip install --require-hashes -r contrib/dev_reqs/requirements.txt
+          python3 .github/scripts/version_check.py
+          echo "git_commit_hash=$(git rev-parse --short HEAD)" >> $GITHUB_ENV
+          echo "git_commit_date=$(git show -s --format=%ci)" >> $GITHUB_ENV
       - name: Set up QEMU
         if: github.event_name != 'pull_request'
-        uses: docker/setup-qemu-action@68827325e0b33c7199eb31dd4e31fbe9023e06e3 # pin@v3.0.0
+        uses: docker/setup-qemu-action@06116385d9baf250c9f4dcb4858b16962ea869c3 # v4.1.0
       - name: Set up Docker Buildx
         if: github.event_name != 'pull_request'
-        uses: docker/setup-buildx-action@f95db51fddba0c2d1ec667646a06c2ce06100226 # pin@v3.0.0
+        uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0
       - name: Set up cosign
         if: github.event_name != 'pull_request'
-        uses: sigstore/cosign-installer@11086d25041f77fe8fe7b9ea4e48e3b9192b8f19 # pin@v3.1.2
+        uses: sigstore/cosign-installer@6f9f17788090df1f26f669e9d70d6ae9567deba6 # v4.1.2
+      - name: Check if Dockerhub login is required
+        id: docker_login
+        run: |
+          if [ -z "${{ secrets.DOCKER_USERNAME }}" ]; then
+            echo "skip_dockerhub_login=true" >> $GITHUB_OUTPUT
+          else
+            echo "skip_dockerhub_login=false" >> $GITHUB_OUTPUT
+          fi
       - name: Login to Dockerhub
-        if: github.event_name != 'pull_request'
-        uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # pin@v3.0.0
+        if: github.event_name != 'pull_request' && steps.docker_login.outputs.skip_dockerhub_login != 'true'
+        uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
 
       - name: Log into registry ghcr.io
         if: github.event_name != 'pull_request'
-        uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # pin@v3.0.0
+        uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
@@ -129,18 +211,20 @@ jobs:
       - name: Extract Docker metadata
         if: github.event_name != 'pull_request'
         id: meta
-        uses: docker/metadata-action@96383f45573cb7f253c731d3b3ab81c87ef81934 # pin@v5.0.0
+        uses: docker/metadata-action@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 # v6.1.0
         with:
           images: |
             inventree/inventree
-            ghcr.io/inventree/inventree
-
-      - name: Build and Push
-        id: build-and-push
+            ghcr.io/${{ github.repository }}
+      - uses: depot/setup-action@15c09a5f77a0840ad4bce955686522a257853461 # v1
+      - name: Push Docker Images
+        id: push-docker
         if: github.event_name != 'pull_request'
-        uses: docker/build-push-action@0565240e2d4ab88bba5387d719585280857ece09 # pin@v5.0.0
+        uses: depot/build-push-action@98e78adca7817480b8185f474a400b451d74e287 # v1
         with:
+          project: jczzbjkk68
           context: .
+          file: ./contrib/container/Dockerfile
           platforms: linux/amd64,linux/arm64
           push: true
           sbom: true
@@ -150,9 +234,3 @@ jobs:
           build-args: |
             commit_hash=${{ env.git_commit_hash }}
             commit_date=${{ env.git_commit_date }}
-
-      - name: Sign the published image
-        if: ${{ false }} # github.event_name != 'pull_request'
-        env:
-          COSIGN_EXPERIMENTAL: "true"
-        run: cosign sign ${{ steps.meta.outputs.tags }}@${{ steps.build-and-push.outputs.digest }}

.github/workflows/frontend.yaml

@@ -0,0 +1,312 @@
+# Playwright testing for frontend code
+# Runs the following tests:
+# - Playwright tests in Firefox (against compiled frontend code)
+# - Playwright tests in Chromium (coverage enabled, against vite frontend code)
+# - Build frontend code and upload as artifact
+
+name: Frontend
+
+on:
+  push:
+    branches-ignore: ["l10*", "dependabot/**", "backport/**"]
+  pull_request:
+    branches-ignore: ["l10*"]
+
+env:
+  python_version: 3.12
+  node_version: 24
+  plugin_creator_version: 1.20.0
+  # The OS version must be set per job
+  server_start_sleep: 60
+
+  GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+  INVENTREE_DB_ENGINE: postgresql
+  INVENTREE_DB_NAME: inventree
+  INVENTREE_DB_HOST: "127.0.0.1"
+  INVENTREE_DB_PORT: 5432
+  INVENTREE_DB_USER: inventree_user
+  INVENTREE_DB_PASSWORD: inventree_password
+  INVENTREE_DEBUG: true
+  INVENTREE_PLUGINS_ENABLED: false
+  INVENTREE_MEDIA_ROOT: /home/runner/work/InvenTree/test_inventree_media
+  INVENTREE_STATIC_ROOT: /home/runner/work/InvenTree/test_inventree_static
+  INVENTREE_BACKUP_DIR: /home/runner/work/InvenTree/test_inventree_backup
+  INVENTREE_SITE_URL: http://localhost:8000
+
+permissions:
+  contents: read
+
+jobs:
+  paths-filter:
+    name: Filter
+    runs-on: ubuntu-latest
+
+    outputs:
+      frontend: ${{ steps.filter.outputs.frontend }}
+      force: ${{ steps.force.outputs.force }}
+
+    steps:
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          persist-credentials: false
+      - uses: dorny/paths-filter@fbd0ab8f3e69293af611ebaee6363fc25e6d187d # v4.0.1
+        id: filter
+        with:
+          filters: |
+            frontend:
+              - 'src/frontend/**'
+      - name: Is CI being forced?
+        run: echo "force=true" >> $GITHUB_OUTPUT
+        id: force
+        if: |
+          contains(github.event.pull_request.labels.*.name, 'dependency') ||
+          contains(github.event.pull_request.labels.*.name, 'full-run')
+
+
+  build:
+    name: Build
+    runs-on: ubuntu-24.04
+    timeout-minutes: 60
+
+    steps:
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          persist-credentials: false
+      - name: Environment Setup
+        uses: ./.github/actions/setup
+        with:
+          npm: true
+      - name: Install dependencies
+        run: cd src/frontend && yarn install
+      - name: Build frontend
+        run: cd src/frontend && yarn run compile && yarn run lib && yarn run build
+      - name: Write version file - SHA
+        run: cd src/backend/InvenTree/web/static/web/.vite && echo "$GITHUB_SHA" > sha.txt
+      - name: Zip frontend
+        run: |
+          cd src/backend/InvenTree/web/static
+          zip -r frontend-build.zip web/ web/.vite
+      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        with:
+          name: frontend-build
+          path: src/backend/InvenTree/web/static/web
+          include-hidden-files: true
+
+  firefox:
+    name: Tests [Firefox ${{ matrix.shard }} / 2]
+    runs-on: ubuntu-24.04
+    timeout-minutes: 60
+    needs: ["build", "paths-filter"]
+    if: github.ref == 'refs/heads/master' || needs.paths-filter.outputs.frontend == 'true' || needs.paths-filter.outputs.force == 'true'
+    strategy:
+      fail-fast: false
+      matrix:
+        shard: [1, 2]
+    services:
+      postgres:
+        image: postgres:17
+        env:
+          POSTGRES_DB: inventree
+          POSTGRES_USER: inventree_user
+          POSTGRES_PASSWORD: inventree_password
+        ports:
+          - 5432:5432
+        options: >-
+          --health-cmd "pg_isready -U testuser"
+          --health-interval 10s
+          --health-timeout 5s
+          --health-retries 5
+    permissions:
+      contents: read # Required for actions/checkout
+      id-token: write # Required for GitHub OIDC
+    env:
+      VITE_COVERAGE: false
+
+    steps:
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          persist-credentials: false
+      - name: Environment Setup
+        uses: ./.github/actions/setup
+        with:
+          npm: true
+          install: true
+          update: true
+          apt-dependency: gettext postgresql-client libpq-dev
+          pip-dependency: psycopg2
+      - name: Set up test data
+        run: |
+          invoke dev.setup-test -iv
+          invoke int.rebuild-thumbnails
+      - name: Install dependencies
+        run: invoke int.frontend-compile --extract
+      - name: Cache Playwright browsers
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
+        id: playwright-cache
+        with:
+          path: ~/.cache/ms-playwright
+          key: ${{ runner.os }}-playwright-${{ hashFiles('src/frontend/yarn.lock') }}
+      - name: Install Playwright browsers
+        if: steps.playwright-cache.outputs.cache-hit != 'true'
+        run: cd src/frontend && npx playwright install --with-deps
+      - name: Install Playwright OS dependencies
+        if: steps.playwright-cache.outputs.cache-hit == 'true'
+        run: cd src/frontend && npx playwright install-deps
+      - name: Install Sample Plugin
+        run: |
+          pip install -U inventree-plugin-creator==${{ env.plugin_creator_version }}
+          create-inventree-plugin --default
+          cd MyCustomPlugin && pip install -e . && cd frontend && npm install && npm run translate && npm run build
+      - name: Run Playwright tests
+        id: tests
+        run: |
+          cd src/frontend
+          cp ./tests/fixtures/playwright_custom_logo.png ../backend/InvenTree/InvenTree/static/img/playwright_custom_logo.png
+          cp ./tests/fixtures/playwright_custom_splash.png ../backend/InvenTree/InvenTree/static/img/playwright_custom_splash.png
+          invoke static
+          env INVENTREE_CUSTOM_SPLASH="img/playwright_custom_splash.png" INVENTREE_CUSTOM_LOGO="img/playwright_custom_logo.png" PLAYWRIGHT_BASE_URL=http://localhost:8000 npx playwright test --project=firefox --shard=${{ matrix.shard }}/2
+      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        if: ${{ !cancelled() && steps.tests.outcome == 'failure' }}
+        with:
+          name: playwright-report-firefox-${{ matrix.shard }}
+          path: src/frontend/playwright-report/
+          retention-days: 14
+
+  chromium:
+    name: Tests [Chromium ${{ matrix.shard }} / 4]
+    runs-on: ubuntu-24.04
+    timeout-minutes: 60
+    needs: ["build", "paths-filter"]
+    if: github.ref == 'refs/heads/master' || needs.paths-filter.outputs.frontend == 'true' || needs.paths-filter.outputs.force == 'true'
+    strategy:
+      fail-fast: false
+      matrix:
+        shard: [1, 2, 3, 4]
+    services:
+      postgres:
+        image: postgres:17
+        env:
+          POSTGRES_DB: inventree
+          POSTGRES_USER: inventree_user
+          POSTGRES_PASSWORD: inventree_password
+        ports:
+          - 5432:5432
+        options: >-
+          --health-cmd "pg_isready -U testuser"
+          --health-interval 10s
+          --health-timeout 5s
+          --health-retries 5
+    permissions:
+      contents: read # Required for actions/checkout
+      id-token: write # Required for GitHub OIDC
+
+    env:
+      COVERAGE: true
+      VITE_COVERAGE: true
+
+    steps:
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          persist-credentials: false
+      - name: Environment Setup
+        uses: ./.github/actions/setup
+        with:
+          npm: true
+          install: true
+          update: true
+          apt-dependency: gettext postgresql-client libpq-dev
+          pip-dependency: psycopg2
+      - name: Set up test data
+        run: |
+          invoke dev.setup-test -iv
+          invoke int.rebuild-thumbnails
+      - name: Install dependencies
+        run: invoke int.frontend-compile --extract
+      - name: Cache Playwright browsers
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
+        id: playwright-cache
+        with:
+          path: ~/.cache/ms-playwright
+          key: ${{ runner.os }}-playwright-${{ hashFiles('src/frontend/yarn.lock') }}
+      - name: Install Playwright browsers
+        if: steps.playwright-cache.outputs.cache-hit != 'true'
+        run: cd src/frontend && npx playwright install --with-deps
+      - name: Install Playwright OS dependencies
+        if: steps.playwright-cache.outputs.cache-hit == 'true'
+        run: cd src/frontend && npx playwright install-deps
+      - name: Install Sample Plugin
+        run: |
+          pip install -U inventree-plugin-creator==${{ env.plugin_creator_version }}
+          create-inventree-plugin --default
+          cd MyCustomPlugin && pip install -e . && cd frontend && npm install && npm run translate && npm run build
+      - name: Playwright [${{ matrix.shard }} / 4]
+        id: tests
+        run: |
+          cd src/frontend
+          npx nyc playwright test --project=chromium --shard=${{ matrix.shard }}/4
+      - name: Playwright Report [${{ matrix.shard }} / 4]
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        if: ${{ !cancelled() && steps.tests.outcome == 'failure' }}
+        with:
+          name: playwright-report-chromium-${{ matrix.shard }}
+          path: src/frontend/playwright-report/
+          if-no-files-found: error
+          retention-days: 7
+      - name: Upload Coverage Artifact [${{ matrix.shard }} / 4]
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        id: coverage-upload
+        if: ${{ !cancelled() && steps.tests.outcome != 'failure' }}
+        with:
+          name: coverage-${{ matrix.shard }}
+          path: src/frontend/.nyc_output/
+          if-no-files-found: error
+          include-hidden-files: true
+          retention-days: 1
+
+  # Recombine the coverage reports from the 4 shards, and upload to Codecov
+  coverage:
+    name: Merge coverage reports and upload to Codecov
+    runs-on: ubuntu-latest
+    needs: chromium
+    timeout-minutes: 30
+    if: always()
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          persist-credentials: false
+
+      - name: Environment Setup
+        uses: ./.github/actions/setup
+        with:
+          npm: true
+          install: false
+          update: false
+
+      - name: Download Coverage Artifacts
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        with:
+          pattern: coverage-*
+          path: all-coverage/
+          merge-multiple: true
+
+      - name: Merge Coverage Reports
+        run: |
+          mkdir -p .nyc_output
+          cp all-coverage/*.json .nyc_output/ 2>/dev/null || true
+          npx nyc merge .nyc_output merged-coverage.json
+          npx nyc report \
+            --tempdir .nyc_output \
+            --reporter=lcov \
+            --reporter=text-summary \
+            --report-dir ./coverage \
+
+      - name: Upload coverage reports to Codecov
+        if: ${{ !cancelled() && github.ref == 'refs/heads/master' }}
+        uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0
+        with:
+          token: ${{ secrets.CODECOV_TOKEN }}
+          slug: inventree/InvenTree
+          flags: web
+          files: ./coverage/lcov.info

.github/workflows/import_export.yaml

@@ -0,0 +1,120 @@
+# Ensure that data import / export functionality works as expected.
+# - Create a dataset in a Postgres database (including plugin data)
+# - Export the dataset to an agnostic format (JSON)
+# - Import the dataset into a Sqlite database
+
+name: Import / Export
+
+on:
+  push:
+    branches-ignore: ["l10*", "dependabot/**", "backport/**"]
+  pull_request:
+    branches-ignore: ["l10*"]
+
+permissions:
+  contents: read
+
+env:
+  python_version: 3.12
+
+  GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+  INVENTREE_DEBUG: false
+  INVENTREE_LOG_LEVEL: WARNING
+  INVENTREE_MEDIA_ROOT: /home/runner/work/InvenTree/test_inventree_media
+  INVENTREE_STATIC_ROOT: /home/runner/work/InvenTree/test_inventree_static
+  INVENTREE_BACKUP_DIR: /home/runner/work/InvenTree/test_inventree_backup
+  INVENTREE_SITE_URL: http://localhost:8000
+
+  INVENTREE_PLUGINS_ENABLED: true
+  INVENTREE_AUTO_UPDATE: true
+  INVENTREE_PLUGINS_MANDATORY: "dummy-app-plugin"
+  INVENTREE_GLOBAL_SETTINGS: '{"ENABLE_PLUGINS_APP": true}'
+
+  DATA_FILE: /home/runner/work/InvenTree/test_inventree_data.json
+
+  INVENTREE_DB_ENGINE: postgresql
+  INVENTREE_DB_NAME: inventree
+  INVENTREE_DB_USER: inventree
+  INVENTREE_DB_PASSWORD: password
+  INVENTREE_DB_HOST: "127.0.0.1"
+  INVENTREE_DB_PORT: 5432
+
+jobs:
+
+  paths-filter:
+    name: filter
+    runs-on: ubuntu-latest
+    outputs:
+      server: ${{ steps.filter.outputs.server }}
+    steps:
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          persist-credentials: false
+      - uses: dorny/paths-filter@fbd0ab8f3e69293af611ebaee6363fc25e6d187d # v4.0.1
+        id: filter
+        with:
+          filters: |
+            server:
+              - .github/workflows/import_export.yaml
+              - .github/scripts/check_exported_data.py
+              - 'src/backend/**'
+              - 'tasks.py'
+  test:
+    runs-on: ubuntu-latest
+    needs: paths-filter
+    if: needs.paths-filter.outputs.server == 'true' || contains(github.event.pull_request.labels.*.name, 'full-run')
+
+    services:
+      postgres:
+        image: postgres:17
+        env:
+          POSTGRES_USER: inventree
+          POSTGRES_PASSWORD: password
+        ports:
+          - 5432:5432
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          fetch-depth: 0
+          persist-credentials: false
+      - name: Environment Setup
+        uses: ./.github/actions/setup
+        with:
+          apt-dependency: gettext poppler-utils libpq-dev
+          pip-dependency: psycopg
+          update: true
+          static: false
+      - name: Setup Postgres Database
+        run: |
+          invoke migrate
+          invoke dev.setup-test -i
+      - name: Create Plugin Data
+        run: |
+          pip install -U inventree-dummy-app-plugin==0.1.0
+          invoke migrate
+          cd src/backend/InvenTree && python manage.py create_dummy_data
+      - name: Export Postgres Dataset
+        run: |
+          invoke export-records -o -f ${{ env.DATA_FILE }}
+          python .github/scripts/check_exported_data.py ${{ env.DATA_FILE }}
+          invoke dev.delete-data --force
+      - name: Update Environment Variables for Sqlite
+        run: |
+          echo "Updating environment variables for Sqlite"
+          echo "INVENTREE_DB_ENGINE=sqlite" >> $GITHUB_ENV
+          echo "INVENTREE_DB_NAME=/home/runner/work/InvenTree/test_inventree_db.sqlite3" >> $GITHUB_ENV
+      - name: Setup Sqlite Database
+        run: |
+          invoke migrate
+          test -f /home/runner/work/InvenTree/test_inventree_db.sqlite3 || (echo "Sqlite database not created" && exit 1)
+      - name: Import Sqlite Dataset
+        run: |
+          invoke import-records -c -f ${{ env.DATA_FILE }} --strict
+          cd src/backend/InvenTree && python manage.py check_dummy_data
+      - name: Export Sqlite Dataset
+        run: |
+          invoke export-records -o -f ${{ env.DATA_FILE }}
+          python .github/scripts/check_exported_data.py ${{ env.DATA_FILE }}

.github/workflows/qc_checks.yaml

@@ -4,22 +4,27 @@ name: QC
 
 on:
   push:
-    branches-ignore: [ 'l10*' ]
+    branches-ignore: ["l10*", "dependabot/**", "backport/**"]
   pull_request:
-    branches-ignore: [ 'l10*' ]
+    branches-ignore: ["l10*"]
 
 env:
-  python_version: 3.9
-  node_version: 16
+  python_version: 3.12
+  node_version: 24
   # The OS version must be set per job
   server_start_sleep: 60
 
   GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
   INVENTREE_DB_ENGINE: sqlite3
   INVENTREE_DB_NAME: inventree
-  INVENTREE_MEDIA_ROOT: ../test_inventree_media
-  INVENTREE_STATIC_ROOT: ../test_inventree_static
-  INVENTREE_BACKUP_DIR: ../test_inventree_backup
+  INVENTREE_MEDIA_ROOT: /home/runner/work/InvenTree/test_inventree_media
+  INVENTREE_STATIC_ROOT: /home/runner/work/InvenTree/test_inventree_static
+  INVENTREE_BACKUP_DIR: /home/runner/work/InvenTree/test_inventree_backup
+  INVENTREE_SITE_URL: http://localhost:8000
+  INVENTREE_DEBUG: true
+
+permissions:
+  contents: read
 
 jobs:
   paths-filter:
@@ -30,111 +35,149 @@ jobs:
       server: ${{ steps.filter.outputs.server }}
       migrations: ${{ steps.filter.outputs.migrations }}
       frontend: ${{ steps.filter.outputs.frontend }}
+      api: ${{ steps.filter.outputs.api }}
+      force: ${{ steps.force.outputs.force }}
+      cicd: ${{ steps.filter.outputs.cicd }}
+      requirements: ${{ steps.filter.outputs.requirements }}
+      runner-perf: ${{ steps.runner-perf.outputs.runner }}
+      performance: ${{ steps.performance.outputs.force-performance }}
+      submit-performance: ${{ steps.runner-perf.outputs.submit-performance }}
 
     steps:
-      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # pin@v4.1.1
-      - uses: dorny/paths-filter@4512585405083f25c027a35db413c2b3b9006d50 # pin@v2.11.1
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          persist-credentials: false
+      - uses: dorny/paths-filter@fbd0ab8f3e69293af611ebaee6363fc25e6d187d # v4.0.1
         id: filter
         with:
           filters: |
             server:
-              - 'InvenTree/**'
-              - 'requirements.txt'
-              - 'requirements-dev.txt'
+              - 'src/backend/InvenTree/**'
+              - 'src/backend/requirements.txt'
+              - 'src/backend/requirements-dev.txt'
             migrations:
+              - '**/test_migrations.py'
               - '**/migrations/**'
               - '.github/workflows**'
+              - 'src/backend/requirements.txt'
+            api:
+              - 'src/backend/InvenTree/InvenTree/api_version.py'
             frontend:
               - 'src/frontend/**'
-
-  pep_style:
-    name: Style [Python]
-    runs-on: ubuntu-20.04
-
-    needs: paths-filter
-    if: needs.paths-filter.outputs.server == 'true'
-
-    steps:
-      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # pin@v4.1.1
-      - name: Environment Setup
-        uses: ./.github/actions/setup
-        with:
-          dev-install: true
-      - name: Run flake8
-        run: flake8 InvenTree --extend-ignore=D
-
-  javascript:
-    name: Style - Classic UI [JS]
-    runs-on: ubuntu-20.04
-
-    needs: [ 'pep_style', 'pre-commit' ]
-
-    steps:
-      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # pin@v4.1.1
-      - name: Environment Setup
-        uses: ./.github/actions/setup
-        with:
-          npm: true
-          install: true
-      - name: Check Templated JS Files
+            cicd:
+              - '.github/workflows/**'
+            requirements:
+              - 'src/backend/requirements.txt'
+              - 'src/backend/requirements-dev.txt'
+              - 'docs/requirements.txt'
+              - 'contrib/dev_reqs/requirements.txt'
+      - name: Is CI being forced?
+        run: echo "force=true" >> $GITHUB_OUTPUT
+        id: force
+        if: |
+          contains(github.event.pull_request.labels.*.name, 'dependency') ||
+          contains(github.event.pull_request.labels.*.name, 'full-run')
+      - name: Is performance testing being forced?
+        run: echo "force-performance=true" >> $GITHUB_OUTPUT
+        id: performance
+        if: |
+          contains(github.event.pull_request.labels.*.name, 'performance-run')
+      - name: Which runner to use?
+        env:
+          GITHUB_REF: ${{ github.ref }}
+          PERFORMANCE: ${{ steps.performance.outputs.force-performance }}
+        id: runner-perf
+        # decide if we are running in inventree/inventree -> use codspeed-macro runner else ubuntu-24.04
         run: |
-          cd ci
-          python3 check_js_templates.py
-      - name: Lint Javascript Files
-        run: |
-          python InvenTree/manage.py prerender
-          npx eslint InvenTree/InvenTree/static_i18n/i18n/*.js
+          is_main_push=false
+          if [[ '${{ github.event_name }}' == 'push' && "$GITHUB_REF" == 'refs/heads/master' ]]; then
+            is_main_push=true
+          fi
+          if [[ '${{ github.repository }}' == 'inventree/InvenTree' && ( "$is_main_push" == 'true' || "$PERFORMANCE" == 'true' ) ]]; then
+            echo "runner=codspeed-macro" >> "$GITHUB_OUTPUT"
+            echo "submit-performance=true" >> "$GITHUB_OUTPUT"
+          else
+            echo "runner=ubuntu-24.04" >> "$GITHUB_OUTPUT"
+            echo "submit-performance=false" >> "$GITHUB_OUTPUT"
+          fi
 
-  pre-commit:
-    name: Style [pre-commit]
-    runs-on: ubuntu-20.04
+  code-style:
+    name: Style [prek]
+    runs-on: ubuntu-24.04
     needs: paths-filter
-    if: needs.paths-filter.outputs.server == 'true' || needs.paths-filter.outputs.frontend == 'true'
+    if: needs.paths-filter.outputs.cicd == 'true' || needs.paths-filter.outputs.server == 'true' || needs.paths-filter.outputs.frontend == 'true' || needs.paths-filter.outputs.requirements == 'true' || needs.paths-filter.outputs.force == 'true'
 
     steps:
-      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # pin@v4.1.1
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          persist-credentials: false
       - name: Set up Python ${{ env.python_version }}
-        uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # pin@v4.7.1
+        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
         with:
           python-version: ${{ env.python_version }}
-          cache: 'pip'
-      - name: Run pre-commit Checks
-        uses: pre-commit/action@646c83fcd040023954eafda54b4db0192ce70507 # pin@v3.0.0
+          cache: "pip"
+      - name: Run pre commit hook Checks
+        uses: j178/prek-action@e98a699c41eb69ab013a45817a0406469a748f8d # v2.0.5
       - name: Check Version
         run: |
-          pip install requests
-          python3 ci/version_check.py
+          pip install --require-hashes -r contrib/dev_reqs/requirements.txt
+          python3 .github/scripts/version_check.py
+
+  typecheck:
+    name: Style [Typecheck]
+    runs-on: ubuntu-24.04
+    needs: [code-style, paths-filter]
+    if: needs.paths-filter.outputs.server == 'true' || needs.paths-filter.outputs.requirements == 'true' || needs.paths-filter.outputs.force == 'true'
+
+    steps:
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          persist-credentials: false
+      - name: Environment Setup
+        id: setup
+        uses: ./.github/actions/setup
+        with:
+          apt-dependency: gettext poppler-utils
+          dev-install: true
+          update: true
+      - name: Check types
+        run: |
+          ty check --python ${Python_ROOT_DIR}/bin/python3 src/backend
 
   mkdocs:
     name: Style [Documentation]
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-24.04
 
     needs: paths-filter
 
     steps:
       - name: Checkout Code
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # pin@v4.1.1
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          persist-credentials: false
       - name: Set up Python ${{ env.python_version }}
-        uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # pin@v4.7.1
+        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
         with:
           python-version: ${{ env.python_version }}
       - name: Check Config
         run: |
-          pip install pyyaml
+          pip install --require-hashes -r contrib/dev_reqs/requirements.txt
+          pip install --require-hashes -r docs/requirements.txt
           python docs/ci/check_mkdocs_config.py
       - name: Check Links
-        run: |
-          pip install linkcheckmd requests
-          python -m linkcheckmd docs --recurse
-
-  python:
-    name: Tests - inventree-python
-    runs-on: ubuntu-20.04
-
-    needs: pre-commit
+        uses: tcort/github-action-markdown-link-check@e7c7a18363c842693fadde5d41a3bd3573a7a225 # v1
+        with:
+          folder-path: docs
+          config-file: docs/mlc_config.json
+          check-modified-files-only: "yes"
+          use-quiet-mode: "yes"
 
+  schema:
+    name: Tests - API Schema Documentation
+    runs-on: ubuntu-24.04
+    needs: paths-filter
+    if: needs.paths-filter.outputs.server == 'true' || needs.paths-filter.outputs.force == 'true'
     env:
-      wrapper_name: inventree-python
       INVENTREE_DB_ENGINE: django.db.backends.sqlite3
       INVENTREE_DB_NAME: ../inventree_unit_test_db.sqlite3
       INVENTREE_ADMIN_USER: testuser
@@ -143,9 +186,266 @@ jobs:
       INVENTREE_PYTHON_TEST_SERVER: http://localhost:12345
       INVENTREE_PYTHON_TEST_USERNAME: testuser
       INVENTREE_PYTHON_TEST_PASSWORD: testpassword
+    outputs:
+      version: ${{ steps.version.outputs.version }}
 
     steps:
-      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # pin@v4.1.1
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          persist-credentials: false
+      - name: Environment Setup
+        uses: ./.github/actions/setup
+        with:
+          apt-dependency: gettext poppler-utils
+          dev-install: true
+          update: true
+      - name: Export API Documentation
+        run: invoke dev.schema --ignore-warnings --filename src/backend/InvenTree/schema.yml
+      - name: Upload schema
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        with:
+          name: schema.yml
+          path: src/backend/InvenTree/schema.yml
+      - name: Download public schema
+        env:
+          API: ${{ needs.paths-filter.outputs.api }}
+        run: |
+          pip install --require-hashes -r contrib/dev_reqs/requirements.txt >/dev/null 2>&1
+          version="$(python3 .github/scripts/version_check.py --show-api-version --decrement-api=${API} 2>&1)"
+          echo "API Version: $version"
+          url="https://raw.githubusercontent.com/inventree/schema/main/export/${version}/api.yaml"
+          echo "URL: $url"
+          code=$(curl -s -o api.yaml $url --write-out '%{http_code}' --silent)
+          if [ "$code" != "200" ]; then
+            exit 1
+          fi
+          echo "Downloaded api.yaml"
+      - name: Running OpenAPI Spec diff action
+        id: breaking_changes
+        uses: oasdiff/oasdiff-action/diff@3e9d440d37f468355457604348009f50e0cddbf3 # v0.1.4
+        with:
+          base: "api.yaml"
+          revision: "src/backend/InvenTree/schema.yml"
+          format: "html"
+      - name: Echoing diff to step
+        continue-on-error: true
+        env:
+          DIFF: ${{ steps.breaking_changes.outputs.diff }}
+        run: echo "${DIFF}" >> $GITHUB_STEP_SUMMARY
+
+      - name: Check for differences in API Schema
+        if: needs.paths-filter.outputs.api == 'false'
+        run: |
+          diff --color -u src/backend/InvenTree/schema.yml api.yaml
+          diff -u src/backend/InvenTree/schema.yml api.yaml && echo "no difference in API schema " || exit 2
+      - name: Check schema - including warnings
+        run: invoke dev.schema
+      - name: Extract version for publishing
+        id: version
+        if: github.ref == 'refs/heads/master' && needs.paths-filter.outputs.api == 'true'
+        run: |
+          pip install --require-hashes -r contrib/dev_reqs/requirements.txt >/dev/null 2>&1
+          version="$(python3 .github/scripts/version_check.py --show-api-version 2>&1)"
+          echo "API Version: $version"
+          echo "version=$version" >> "$GITHUB_OUTPUT"
+      - name: Extract settings / tags
+        run: invoke int.export-definitions --basedir docs
+      - name: Upload settings
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        with:
+          name: inventree_settings.json
+          path: docs/generated/inventree_settings.json
+      - name: Upload tags
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        with:
+          name: inventree_tags.yml
+          path: docs/generated/inventree_tags.yml
+      - name: Upload filters
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        with:
+          name: inventree_filters.yml
+          path: docs/generated/inventree_filters.yml
+
+  schema-push:
+    name: Push new schema
+    runs-on: ubuntu-24.04
+    needs: [paths-filter, schema]
+    if: needs.schema.result == 'success' && github.ref == 'refs/heads/master' && needs.paths-filter.outputs.api == 'true' && github.repository_owner == 'inventree'
+    env:
+      version: ${{ needs.schema.outputs.version }}
+
+    steps:
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        name: Checkout Code
+        with:
+          repository: inventree/schema
+          token: ${{ secrets.SCHEMA_PAT }}
+          persist-credentials: true
+      - name: Create artifact directory
+        run: mkdir -p artifact
+      - name: Download schema artifact
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        with:
+          path: artifact
+          merge-multiple: true
+      - name: Move files to correct location
+        run: |
+          echo "Version: ${version}"
+          echo "before move"
+          ls -la artifact
+          mkdir export/${version}
+          mv artifact/schema.yml export/${version}/api.yaml
+          mv artifact/inventree_settings.json export/${version}/inventree_settings.json
+          mv artifact/inventree_tags.yml export/${version}/inventree_tags.yml
+          mv artifact/inventree_filters.yml export/${version}/inventree_filters.yml
+          echo "after move"
+          ls -la artifact
+          rm -rf artifact
+      - uses: stefanzweifel/git-auto-commit-action@4a55954c782fc1ea30b9056cd3e7a2b40ca8887d # v7.2.0
+        name: Commit schema changes
+        with:
+          commit_message: "Update API schema for ${{ env.version }} / ${{ github.sha }}"
+
+  python:
+    name: Tests - inventree-python
+    runs-on: ${{ needs.paths-filter.outputs.runner-perf }}
+
+    needs: ["code-style", "paths-filter"]
+    if: needs.paths-filter.outputs.server == 'true' || needs.paths-filter.outputs.force == 'true' || needs.paths-filter.outputs.performance == 'true'
+    permissions:
+      contents: read
+      id-token: write
+
+    env:
+      WRAPPER_NAME: inventree-python
+      INVENTREE_DB_ENGINE: django.db.backends.sqlite3
+      INVENTREE_DB_NAME: ../inventree_unit_test_db.sqlite3
+      INVENTREE_ADMIN_USER: testuser
+      INVENTREE_ADMIN_PASSWORD: testpassword
+      INVENTREE_ADMIN_EMAIL: test@test.com
+      INVENTREE_PYTHON_TEST_SERVER: http://127.0.0.1:12345
+      INVENTREE_PYTHON_TEST_USERNAME: testuser
+      INVENTREE_PYTHON_TEST_PASSWORD: testpassword
+      INVENTREE_SITE_URL: http://127.0.0.1:12345
+      INVENTREE_DEBUG: true
+      INVENTREE_LOG_LEVEL: WARNING
+      node_version: '>=24'
+
+    steps:
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          persist-credentials: false
+      - name: Environment Setup
+        uses: ./.github/actions/setup
+        with:
+          apt-dependency: gettext poppler-utils
+          dev-install: true
+          update: true
+          static: true
+          npm: true
+      - name: Download Python Code For `${WRAPPER_NAME}`
+        run: git clone --depth 1 https://github.com/inventree/${WRAPPER_NAME} ./${WRAPPER_NAME}
+      - name: Start InvenTree Server
+        run: |
+          invoke dev.delete-data -f
+          invoke dev.import-fixtures
+          invoke dev.server -a 127.0.0.1:12345 &
+          invoke wait
+      - name: Run Tests For `${WRAPPER_NAME}`
+        run: |
+          cd ${WRAPPER_NAME}
+          invoke check-server
+          coverage run -m unittest discover -s test/
+      - name: Prepare environment for performance tests
+        run: |
+          pip uninstall pytest-django -y
+          cd ${WRAPPER_NAME}
+          pip install .
+        if: needs.paths-filter.outputs.submit-performance == 'true'
+      - name: Performance Reporting
+        uses: CodSpeedHQ/action@a4a36bb07c0638b0b4ca52bf1f3dad1b4289e52f # v4.18.1
+        # check if we are in inventree/inventree - reporting only works in that OIDC context
+        if: github.repository == 'inventree/InvenTree' && needs.paths-filter.outputs.submit-performance == 'true'
+        with:
+          mode: walltime
+          run: pytest ./src/performance --codspeed
+
+  coverage:
+    name: Tests - DB [SQLite] + Coverage ${{ matrix.python_version }}
+    runs-on: ubuntu-24.04
+
+    needs: ["code-style", "paths-filter"]
+    if: needs.paths-filter.outputs.server == 'true' || needs.paths-filter.outputs.force == 'true'
+    continue-on-error: true # continue if a step fails so that coverage gets pushed
+    strategy:
+      matrix:
+        python_version: [3.12, 3.14]
+
+    env:
+      INVENTREE_DB_NAME: ./inventree.sqlite
+      INVENTREE_DB_ENGINE: sqlite3
+      INVENTREE_PLUGINS_ENABLED: true
+      INVENTREE_CONSOLE_LOG: false
+      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      python_version: ${{ matrix.python_version }}
+
+    steps:
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          persist-credentials: false
+      - name: Environment Setup
+        uses: ./.github/actions/setup
+        with:
+          apt-dependency: gettext poppler-utils
+          dev-install: true
+          update: true
+          static: true
+      - name: Data Export Test
+        uses: ./.github/actions/migration
+      - name: Test Translations
+        run: invoke dev.translate
+      - name: Check Migration Files
+        run: |
+          invoke migrate --detect
+          python3 .github/scripts/check_migration_files.py
+      - name: Coverage Tests
+        run: invoke dev.test --check --coverage --translations
+      - name: Upload raw coverage to artifacts
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        with:
+          name: coverage
+          path: .coverage
+          retention-days: 14
+      - name: Upload coverage reports to Codecov
+        uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0
+        if: always()
+        with:
+          token: ${{ secrets.CODECOV_TOKEN }}
+          slug: inventree/InvenTree
+          flags: backend
+
+  performance:
+    name: Tests - Performance
+    runs-on: ${{ needs.paths-filter.outputs.runner-perf }}
+
+    needs: ["code-style", "paths-filter"]
+    # check if we are in inventree/inventree - reporting only works in that OIDC context
+    if: (needs.paths-filter.outputs.server == 'true' || needs.paths-filter.outputs.force == 'true') && github.repository == 'inventree/InvenTree' && needs.paths-filter.outputs.submit-performance == 'true'
+    permissions:
+      contents: read
+      id-token: write
+
+    env:
+      INVENTREE_DB_NAME: inventree_unit_test_db.sqlite
+      INVENTREE_DB_ENGINE: sqlite3
+      INVENTREE_PLUGINS_ENABLED: true
+      INVENTREE_CONSOLE_LOG: false
+      INVENTREE_AUTO_UPDATE: true
+
+    steps:
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          persist-credentials: false
       - name: Environment Setup
         uses: ./.github/actions/setup
         with:
@@ -153,88 +453,35 @@ jobs:
           dev-install: true
           update: true
           npm: true
-      - name: Download Python Code For `${{ env.wrapper_name }}`
-        run: git clone --depth 1 https://github.com/inventree/${{ env.wrapper_name }} ./${{ env.wrapper_name }}
-      - name: Start InvenTree Server
-        run: |
-          invoke delete-data -f
-          invoke import-fixtures
-          invoke server -a 127.0.0.1:12345 &
-          invoke wait
-      - name: Run Tests For `${{ env.wrapper_name }}`
-        run: |
-          cd ${{ env.wrapper_name }}
-          invoke check-server
-          coverage run -m unittest discover -s test/
-
-  docstyle:
-    name: Style [Python Docstrings]
-    runs-on: ubuntu-20.04
-
-    needs: pre-commit
-    continue-on-error: true
-
-    steps:
-      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # pin@v4.1.1
-      - name: Environment Setup
-        uses: ./.github/actions/setup
+        env:
+          node_version: '>=24'
+      - name: Performance Reporting
+        uses: CodSpeedHQ/action@a4a36bb07c0638b0b4ca52bf1f3dad1b4289e52f # v4.18.1
         with:
-          install: true
-      - name: Run flake8
-        run: flake8 InvenTree --statistics
-
-  coverage:
-    name: Tests - DB [SQLite] + Coverage
-    runs-on: ubuntu-20.04
-
-    needs: [ 'pep_style', 'pre-commit' ]
-    continue-on-error: true # continue if a step fails so that coverage gets pushed
-
-    env:
-      INVENTREE_DB_NAME: ./inventree.sqlite
-      INVENTREE_DB_ENGINE: sqlite3
-      INVENTREE_PLUGINS_ENABLED: true
-      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-
-    steps:
-      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # pin@v4.1.1
-      - name: Environment Setup
-        uses: ./.github/actions/setup
-        with:
-          apt-dependency: gettext poppler-utils
-          dev-install: true
-          update: true
-      - name: Data Export Test
-        uses: ./.github/actions/migration
-      - name: Test Translations
-        run: invoke translate
-      - name: Check Migration Files
-        run: python3 ci/check_migration_files.py
-      - name: Coverage Tests
-        run: invoke test --coverage
-      - name: Upload Coverage Report
-        uses: coverallsapp/github-action@3dfc5567390f6fa9267c0ee9c251e4c8c3f18949 # pin@v2.2.3
-        with:
-          github-token: ${{ secrets.GITHUB_TOKEN }}
+          mode: walltime
+          run: inv dev.test --pytest
 
   postgres:
     name: Tests - DB [PostgreSQL]
-    runs-on: ubuntu-20.04
-    needs: [ 'pep_style', 'pre-commit' ]
+    runs-on: ubuntu-24.04
+    needs: ["code-style", "paths-filter"]
+    if: needs.paths-filter.outputs.server == 'true' || needs.paths-filter.outputs.force == 'true'
 
     env:
       INVENTREE_DB_ENGINE: django.db.backends.postgresql
       INVENTREE_DB_USER: inventree
       INVENTREE_DB_PASSWORD: password
-      INVENTREE_DB_HOST: '127.0.0.1'
+      INVENTREE_DB_HOST: "127.0.0.1"
       INVENTREE_DB_PORT: 5432
-      INVENTREE_DEBUG: info
+      INVENTREE_DEBUG: true
+      INVENTREE_LOG_LEVEL: INFO
+      INVENTREE_CONSOLE_LOG: false
       INVENTREE_CACHE_HOST: localhost
       INVENTREE_PLUGINS_ENABLED: true
 
     services:
       postgres:
-        image: postgres:14
+        image: postgres:17
         env:
           POSTGRES_USER: inventree
           POSTGRES_PASSWORD: password
@@ -242,43 +489,49 @@ jobs:
           - 5432:5432
 
       redis:
-        image: redis
+        image: redis:8
         ports:
           - 6379:6379
 
     steps:
-      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # pin@v4.1.1
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          persist-credentials: false
       - name: Environment Setup
         uses: ./.github/actions/setup
         with:
           apt-dependency: gettext poppler-utils libpq-dev
-          pip-dependency: psycopg2 django-redis>=5.0.0
+          pip-dependency: psycopg django-redis>=5.0.0
           dev-install: true
           update: true
+          static: true
       - name: Run Tests
-        run: invoke test
+        run: invoke dev.test --check --translations
       - name: Data Export Test
         uses: ./.github/actions/migration
 
   mysql:
     name: Tests - DB [MySQL]
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-24.04
 
-    needs: [ 'pep_style', 'pre-commit' ]
+    needs: ["code-style", "paths-filter"]
+    if: needs.paths-filter.outputs.server == 'true' || needs.paths-filter.outputs.force == 'true'
 
     env:
       # Database backend configuration
       INVENTREE_DB_ENGINE: django.db.backends.mysql
       INVENTREE_DB_USER: root
       INVENTREE_DB_PASSWORD: password
-      INVENTREE_DB_HOST: '127.0.0.1'
+      INVENTREE_DB_HOST: "127.0.0.1"
       INVENTREE_DB_PORT: 3306
-      INVENTREE_DEBUG: info
+      INVENTREE_DEBUG: true
+      INVENTREE_LOG_LEVEL: WARNING
+      INVENTREE_CONSOLE_LOG: false
       INVENTREE_PLUGINS_ENABLED: true
 
     services:
       mysql:
-        image: mysql:latest
+        image: mysql:9
         env:
           MYSQL_ALLOW_EMPTY_PASSWORD: yes
           MYSQL_DATABASE: ${{ env.INVENTREE_DB_NAME }}
@@ -290,7 +543,9 @@ jobs:
           - 3306:3306
 
     steps:
-      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # pin@v4.1.1
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          persist-credentials: false
       - name: Environment Setup
         uses: ./.github/actions/setup
         with:
@@ -298,8 +553,9 @@ jobs:
           pip-dependency: mysqlclient
           dev-install: true
           update: true
+          static: true
       - name: Run Tests
-        run: invoke test
+        run: invoke dev.test --check --translations
       - name: Data Export Test
         uses: ./.github/actions/migration
 
@@ -307,21 +563,22 @@ jobs:
     name: Tests - Migrations [PostgreSQL]
     runs-on: ubuntu-latest
     needs: paths-filter
-    if: github.ref == 'refs/heads/master' && needs.paths-filter.outputs.migrations == 'true'
+    if: ${{ (needs.paths-filter.outputs.force == 'true') || (github.ref == 'refs/heads/master' && needs.paths-filter.outputs.migrations == 'true') }}
 
     env:
       INVENTREE_DB_ENGINE: django.db.backends.postgresql
       INVENTREE_DB_NAME: inventree
       INVENTREE_DB_USER: inventree
       INVENTREE_DB_PASSWORD: password
-      INVENTREE_DB_HOST: '127.0.0.1'
+      INVENTREE_DB_HOST: "127.0.0.1"
       INVENTREE_DB_PORT: 5432
-      INVENTREE_DEBUG: info
+      INVENTREE_DEBUG: False
+      INVENTREE_LOG_LEVEL: WARNING
       INVENTREE_PLUGINS_ENABLED: false
 
     services:
       postgres:
-        image: postgres:14
+        image: postgres:17
         env:
           POSTGRES_USER: inventree
           POSTGRES_PASSWORD: password
@@ -329,31 +586,43 @@ jobs:
           - 5432:5432
 
     steps:
-      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # pin@v4.1.1
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          persist-credentials: false
       - name: Environment Setup
         uses: ./.github/actions/setup
         with:
           apt-dependency: gettext poppler-utils libpq-dev
-          pip-dependency: psycopg2
+          pip-dependency: psycopg
           dev-install: true
           update: true
       - name: Run Tests
-        run: invoke test --migrations --report
+        run: invoke dev.test --check --migrations --report --coverage --translations
+      - name: Upload coverage reports to Codecov
+        uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0
+        if: always()
+        with:
+          token: ${{ secrets.CODECOV_TOKEN }}
+          slug: inventree/InvenTree
+          flags: migrations
 
   migrations-checks:
     name: Tests - Full Migration [SQLite]
     runs-on: ubuntu-latest
     needs: paths-filter
-    if: github.ref == 'refs/heads/master' && needs.paths-filter.outputs.migrations == 'true'
+    if: ${{ (needs.paths-filter.outputs.force == 'true') || (github.ref == 'refs/heads/master' && needs.paths-filter.outputs.migrations == 'true') }}
 
     env:
       INVENTREE_DB_ENGINE: sqlite3
       INVENTREE_DB_NAME: /home/runner/work/InvenTree/db.sqlite3
-      INVENTREE_DEBUG: info
+      INVENTREE_DEBUG: true
+      INVENTREE_LOG_LEVEL: WARNING
       INVENTREE_PLUGINS_ENABLED: false
 
     steps:
-      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # pin@v4.1.1
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          persist-credentials: false
         name: Checkout Code
       - name: Environment Setup
         uses: ./.github/actions/setup
@@ -362,12 +631,6 @@ jobs:
       - name: Fetch Database
         run: git clone --depth 1 https://github.com/inventree/test-db ./test-db
 
-      - name: Latest Database
-        run: |
-          cp test-db/latest.sqlite3 /home/runner/work/InvenTree/db.sqlite3
-          chmod +rw /home/runner/work/InvenTree/db.sqlite3
-          invoke migrate
-
       - name: 0.10.0 Database
         run: |
           rm /home/runner/work/InvenTree/db.sqlite3
@@ -382,68 +645,39 @@ jobs:
           chmod +rw /home/runner/work/InvenTree/db.sqlite3
           invoke migrate
 
-      - name: 0.12.0 Database
+      - name: 0.13.5 Database
         run: |
           rm /home/runner/work/InvenTree/db.sqlite3
-          cp test-db/stable_0.12.0.sqlite3 /home/runner/work/InvenTree/db.sqlite3
+          cp test-db/stable_0.13.5.sqlite3 /home/runner/work/InvenTree/db.sqlite3
           chmod +rw /home/runner/work/InvenTree/db.sqlite3
           invoke migrate
 
-  platform_ui:
-    name: Tests - Platform UI
-    runs-on: ubuntu-20.04
-    timeout-minutes: 60
-    needs: [ 'pre-commit', 'paths-filter' ]
-    if: needs.paths-filter.outputs.frontend == 'true'
-    env:
-      INVENTREE_DB_ENGINE: sqlite3
-      INVENTREE_DB_NAME: /home/runner/work/InvenTree/db.sqlite3
-      INVENTREE_DEBUG: True
-      INVENTREE_PLUGINS_ENABLED: false
-
-    steps:
-      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # pin@v4.1.1
-      - name: Environment Setup
-        uses: ./.github/actions/setup
-        with:
-          npm: true
-          install: true
-          update: true
-      - name: Set up test data
-        run: invoke setup-test -i
-      - name: Install dependencies
-        run: inv frontend-compile
-      - name: Install Playwright Browsers
-        run: cd src/frontend && npx playwright install --with-deps
-      - name: Run Playwright tests
-        run: cd src/frontend &&  npx playwright test
-      - uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # pin@v3.1.3
-        if: always()
-        with:
-          name: playwright-report
-          path: src/frontend/playwright-report/
-          retention-days: 30
-
-  platform_ui_build:
-    name: Build - UI Platform
-    runs-on: ubuntu-20.04
-    timeout-minutes: 60
-
-    steps:
-      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # pin@v4.1.1
-      - name: Environment Setup
-        uses: ./.github/actions/setup
-        with:
-          npm: true
-      - name: Install dependencies
-        run: cd src/frontend && yarn install
-      - name: Build frontend
-        run: cd src/frontend && npm run build
-      - name: Zip frontend
+      - name: 0.16.0 Database
         run: |
-          cd InvenTree/web/static
-          zip -r frontend-build.zip web/
-      - uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # pin@v3.1.3
+          rm /home/runner/work/InvenTree/db.sqlite3
+          cp test-db/stable_0.16.0.sqlite3 /home/runner/work/InvenTree/db.sqlite3
+          chmod +rw /home/runner/work/InvenTree/db.sqlite3
+          invoke migrate
+
+      - name: 0.17.0 Database
+        run: |
+          rm /home/runner/work/InvenTree/db.sqlite3
+          cp test-db/stable_0.17.0.sqlite3 /home/runner/work/InvenTree/db.sqlite3
+          chmod +rw /home/runner/work/InvenTree/db.sqlite3
+          invoke migrate
+
+  zizmor:
+    name: Security [Zizmor]
+    runs-on: ubuntu-24.04
+    needs: ["code-style", "paths-filter"]
+    if: needs.paths-filter.outputs.cicd == 'true' || needs.paths-filter.outputs.force == 'true'
+
+    permissions:
+      security-events: write
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
-          name: frontend-build
-          path: InvenTree/web/static/web
+          persist-credentials: false
+      - name: Run zizmor 🌈
+        uses: zizmorcore/zizmor-action@192e21d79ab29983730a13d1382995c2307fbcaa # v0.5.7

.github/workflows/release.yaml

@@ -0,0 +1,276 @@
+# Runs on releases
+
+name: Publish release
+on:
+  release:
+    types: [published]
+permissions:
+  contents: read
+env:
+  python_version: 3.12
+
+jobs:
+  stable:
+    runs-on: ubuntu-24.04
+    name: Write release to stable branch
+    permissions:
+      contents: write
+      pull-requests: write
+    env:
+      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+    steps:
+      - name: Checkout Code
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          persist-credentials: false
+      - name: Version Check
+        run: |
+          pip install --require-hashes -r contrib/dev_reqs/requirements.txt
+          python3 .github/scripts/version_check.py
+      - name: Push to Stable Branch
+        uses: ad-m/github-push-action@881a6320fdb16eb5318c5054f31c218aec2b324c # v1.3.0
+        if: env.stable_release == 'true'
+        with:
+          github_token: ${{ secrets.GITHUB_TOKEN }}
+          branch: stable
+          force: true
+
+  build:
+    runs-on: ubuntu-24.04
+    name: Build and attest frontend
+    permissions:
+      id-token: write
+      contents: write
+      attestations: write
+      artifact-metadata: write
+
+    steps:
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          persist-credentials: false
+      - name: Environment Setup
+        uses: ./.github/actions/setup
+        with:
+          npm: true
+      - name: Install dependencies
+        run: cd src/frontend && yarn install
+      - name: Build frontend
+        run: cd src/frontend && npm run compile && npm run build
+      - name: Create SBOM for frontend
+        uses: anchore/sbom-action@e22c389904149dbc22b58101806040fa8d37a610 # v0
+        with:
+          artifact-name: frontend-build.spdx
+          path: src/frontend
+      - name: Write version file - SHA
+        run: cd src/backend/InvenTree/web/static/web/.vite && echo "$GITHUB_SHA" > sha.txt
+      - name: Write version file - TAG
+        run: cd src/backend/InvenTree/web/static/web/.vite && echo "${REF_NAME}" > tag.txt
+        env:
+          REF_NAME: ${{ github.ref_name }}
+      - name: Write version file - SOURCE
+        run: cd src/backend/InvenTree/web/static/web/.vite && echo "GitHub Actions build on $(date --utc +%Y-%m-%dT%H:%M:%SZ)" > source.txt
+      - name: Zip frontend
+        run: |
+          cd src/backend/InvenTree/web/static/web
+          zip -r ../frontend-build.zip * .vite
+      - name: Attest Build Provenance
+        id: attest
+        uses: actions/attest@a1948c3f048ba23858d222213b7c278aabede763 # v4.1.1
+        with:
+          subject-path: "${{ github.workspace }}/src/backend/InvenTree/web/static/frontend-build.zip"
+
+      - name: Upload frontend
+        run: gh release upload ${REF} src/backend/InvenTree/web/static/frontend-build.zip#frontend-build.zip
+        env:
+          REF: ${{ github.ref_name }}
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      - name: Upload frontend to artifacts
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        with:
+          name: frontend-build
+          path: src/backend/InvenTree/web/static/frontend-build.zip
+      - name: Rename Attestation Bundle
+        run: |
+          mv ${BUNDLE_PATH} src/backend/InvenTree/web/static/frontend-build.intoto.jsonl
+        env:
+          BUNDLE_PATH: ${{ steps.attest.outputs.bundle-path}}
+      - name: Upload Attestation
+        run: gh release upload ${REF} src/backend/InvenTree/web/static/frontend-build.intoto.jsonl#frontend-build.intoto.jsonl
+        env:
+          REF: ${{ github.ref_name }}
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+  docs:
+    runs-on: ubuntu-24.04
+    name: Build and publish documentation
+    permissions:
+      contents: write
+    env:
+      INVENTREE_DB_ENGINE: sqlite3
+      INVENTREE_DB_NAME: inventree
+      INVENTREE_MEDIA_ROOT: /home/runner/work/InvenTree/test_inventree_media
+      INVENTREE_STATIC_ROOT: /home/runner/work/InvenTree/test_inventree_static
+      INVENTREE_BACKUP_DIR: /home/runner/work/InvenTree/test_inventree_backup
+      INVENTREE_SITE_URL: http://localhost:8000
+      INVENTREE_DEBUG: true
+
+    steps:
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          persist-credentials: false
+      - name: Environment Setup
+        uses: ./.github/actions/setup
+        with:
+          install: true
+          npm: true
+      - name: Install dependencies
+        run: |
+          pip install --require-hashes -r contrib/dev_reqs/requirements.txt
+          pip install --require-hashes -r docs/requirements.txt
+      - name: Build documentation
+        run: |
+          invoke build-docs --mkdocs
+      - name: Zip build docs
+        run: |
+          cd docs/site
+          zip -r docs-html.zip *
+      - name: Publish documentation
+        run: gh release upload ${REF} docs/site/docs-html.zip#docs-html.zip
+        env:
+          REF: ${{ github.ref_name }}
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+  build-pkgr:
+    if: github.repository == 'inventree/InvenTree'
+    name: ${{ matrix.target }}
+    runs-on: ubuntu-latest
+    needs: [build]
+    permissions:
+      contents: write
+    strategy:
+      fail-fast: false
+      matrix:
+        target:
+          - ubuntu:24.04
+          - ubuntu:26.04
+          - debian:13
+
+    steps:
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          fetch-depth: 0
+          persist-credentials: false
+      - name: Get frontend artifact
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        with:
+          name: frontend-build
+      - name: Setup
+        id: setup
+        env:
+          NODE_ID: ${{ github.event.release.node_id }}
+          BRANCH: ${{ github.event.release.target_commitish }}
+          TARGET: ${{github.event.release.target_commitish}}
+          REPO: ${{ github.repository }}
+          VERSION_REF: ${{ github.ref_name }}
+          GH_TOKEN: ${{ github.token }}
+
+        run: |
+          # Get info
+          gh api -H "Accept: application/vnd.github+json" -H "X-GitHub-Api-Version: 2022-11-28" /repos/$REPO/commits/$TARGET > commit.json
+
+          # Extract info
+          echo "INFO extract | Extracting info from github"
+          DATE=$(jq -r '.commit.committer.date' commit.json)
+          SIGNATURE=$(jq -r '.commit.verification.signature' commit.json)
+          FULL_SHA=$(jq -r '.sha' commit.json)
+          SHA=$(echo "$FULL_SHA" | cut -c1-7)
+
+          echo "INFO write | Write VERSION information"
+          echo "$VERSION" > VERSION
+          echo "INVENTREE_COMMIT_HASH='$SHA'" >> VERSION
+          echo "INVENTREE_COMMIT_SHA='$FULL_SHA'" >> VERSION
+          echo "INVENTREE_COMMIT_DATE='$DATE'" >> VERSION
+          echo "INVENTREE_PKG_INSTALLER='PKG'" >> VERSION
+          echo "INVENTREE_PKG_BRANCH='$BRANCH'" >> VERSION
+          echo "INVENTREE_PKG_TARGET='$TARGET'" >> VERSION
+          echo "NODE_ID='$NODE_ID'" >> VERSION
+          echo "SIGNATURE='$SIGNATURE'" >> VERSION
+
+          echo "INFO write | Written VERSION information"
+          echo "### VERSION ###"
+          cat VERSION
+          echo "### VERSION ###"
+
+          # Move frontend build into place
+          mkdir -p src/backend/InvenTree/web/static
+          unzip -qq frontend-build.zip -d src/backend/InvenTree/web/static/web
+
+          echo "INFO write release_version"
+          echo "VERSION=$VERSION_REF" >> $GITHUB_OUTPUT
+          echo "REF=$GITHUB_REF" >> $GITHUB_OUTPUT
+
+          # Disable before.sh for now - will need to be removed once we switch to go.packager.io fully
+          echo "#!/bin/bash" > contrib/packager.io/before.sh
+
+          echo "calculate release channel"
+          pip install --require-hashes -r contrib/dev_reqs/requirements.txt
+          python3 .github/scripts/version_check.py
+      - name: Package - current release channel
+        uses: pkgr/action/package@c5666febcd31750da6428042193fc5b2fb765435 # main
+        id: package
+        with:
+          target: ${{ matrix.target }}
+          version: ${{ steps.setup.outputs.version }}
+          debug: true
+          cache_prefix: ${{ github.ref_name }}
+          env: |
+            INVENTREE_DB_ENGINE=sqlite3
+            INVENTREE_DB_NAME=database.sqlite3
+            INVENTREE_PLUGINS_ENABLED=true
+            INVENTREE_MEDIA_ROOT=/opt/inventree/media
+            INVENTREE_STATIC_ROOT=/opt/inventree/static
+            INVENTREE_BACKUP_DIR=/opt/inventree/backup
+            INVENTREE_PLUGIN_FILE=/opt/inventree/plugins.txt
+            INVENTREE_CONFIG_FILE=/opt/inventree/config.yaml
+            APP_REPO=inventree/InvenTree
+      - name: Publish to go.packager.io - current release channel
+        uses: pkgr/action/publish@c5666febcd31750da6428042193fc5b2fb765435 # main
+        with:
+          target: ${{ matrix.target }}
+          token: ${{ secrets.PACKAGER_RELEASE_TOKEN }}
+          repository: inventree/InvenTree
+          channel: ${{ env.pkg_channel }}
+          file: ${{ steps.package.outputs.package_path }}
+      - name: Publish to artifact
+        run: gh release upload ${REF} ${PACKAGE_PATH}#${PACKAGE_NAME}
+        env:
+          REF: ${{ github.ref_name }}
+          PACKAGE_PATH: ${{ steps.package.outputs.package_path }}
+          PACKAGE_NAME: ${{ matrix.target }}-${{ steps.setup.outputs.version }}.tar.gz
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      - name: Package - stable release channel
+        uses: pkgr/action/package@c5666febcd31750da6428042193fc5b2fb765435 # main
+        id: package-stable
+        with:
+          target: ${{ matrix.target }}
+          version: ${{ steps.setup.outputs.version }}
+          debug: true
+          cache_prefix: ${{ github.ref_name }}
+          env: |
+            INVENTREE_DB_ENGINE=sqlite3
+            INVENTREE_DB_NAME=database.sqlite3
+            INVENTREE_PLUGINS_ENABLED=true
+            INVENTREE_MEDIA_ROOT=/opt/inventree/media
+            INVENTREE_STATIC_ROOT=/opt/inventree/static
+            INVENTREE_BACKUP_DIR=/opt/inventree/backup
+            INVENTREE_PLUGIN_FILE=/opt/inventree/plugins.txt
+            INVENTREE_CONFIG_FILE=/opt/inventree/config.yaml
+            APP_REPO=inventree/InvenTree
+      - name: Publish to go.packager.io - stable release channel
+        uses: pkgr/action/publish@c5666febcd31750da6428042193fc5b2fb765435 # main
+        with:
+          target: ${{ matrix.target }}
+          token: ${{ secrets.PACKAGER_RELEASE_TOKEN }}
+          repository: inventree/InvenTree
+          channel: stable
+          file: ${{ steps.package-stable.outputs.package_path }}

.github/workflows/release.yml

@@ -1,51 +0,0 @@
-# Runs on releases
-
-name: Publish release notes
-on:
-  release:
-    types: [ published ]
-
-jobs:
-
-  stable:
-    runs-on: ubuntu-latest
-    env:
-      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-    steps:
-      - name: Checkout Code
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # pin@v4.1.1
-      - name: Version Check
-        run: |
-          pip install requests
-          python3 ci/version_check.py
-      - name: Push to Stable Branch
-        uses: ad-m/github-push-action@d91a481090679876dfc4178fef17f286781251df # pin@v0.8.0
-        if: env.stable_release == 'true'
-        with:
-          github_token: ${{ secrets.GITHUB_TOKEN }}
-          branch: stable
-          force: true
-
-  publish-build:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # pin@v4.1.1
-      - name: Environment Setup
-        uses: ./.github/actions/setup
-        with:
-          npm: true
-      - name: Install dependencies
-        run: cd src/frontend && yarn install
-      - name: Build frontend
-        run: cd src/frontend && npm run build
-      - name: Zip frontend
-        run: |
-          cd InvenTree/web/static/web
-          zip -r ../frontend-build.zip *
-      - uses: svenstaro/upload-release-action@1beeb572c19a9242f4361f4cee78f8e0d9aec5df # pin@2.7.0
-        with:
-          repo_token: ${{ secrets.GITHUB_TOKEN }}
-          file: InvenTree/web/static/frontend-build.zip
-          asset_name: frontend-build.zip
-          tag: ${{ github.ref }}
-          overwrite: true

.github/workflows/scorecard.yaml

@@ -0,0 +1,72 @@
+# This workflow uses actions that are not certified by GitHub. They are provided
+# by a third-party and are governed by separate terms of service, privacy
+# policy, and support documentation.
+
+name: Scorecard supply-chain security
+on:
+  # For Branch-Protection check. Only the default branch is supported. See
+  # https://github.com/ossf/scorecard/blob/main/docs/checks.md#branch-protection
+  branch_protection_rule:
+  # To guarantee Maintained check is occasionally updated. See
+  # https://github.com/ossf/scorecard/blob/main/docs/checks.md#maintained
+  schedule:
+    - cron: "32 0 * * 0"
+  push:
+    branches: ["master"]
+
+# Declare default permissions as read only.
+permissions: read-all
+
+jobs:
+  analysis:
+    name: Scorecard analysis
+    runs-on: ubuntu-latest
+    permissions:
+      # Needed to upload the results to code-scanning dashboard.
+      security-events: write
+      # Needed to publish results and get a badge (see publish_results below).
+      id-token: write
+      # Uncomment the permissions below if installing in a private repository.
+      # contents: read
+      # actions: read
+
+    steps:
+      - name: "Checkout code"
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          persist-credentials: false
+
+      - name: "Run analysis"
+        uses: ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a # v2.4.3
+        with:
+          results_file: results.sarif
+          results_format: sarif
+          # (Optional) "write" PAT token. Uncomment the `repo_token` line below if:
+          # - you want to enable the Branch-Protection check on a *public* repository, or
+          # - you are installing Scorecard on a *private* repository
+          # To create the PAT, follow the steps in https://github.com/ossf/scorecard-action#authentication-with-pat.
+          # repo_token: ${{ secrets.SCORECARD_TOKEN }}
+
+          # Public repositories:
+          #   - Publish results to OpenSSF REST API for easy access by consumers
+          #   - Allows the repository to include the Scorecard badge.
+          #   - See https://github.com/ossf/scorecard-action#publishing-results.
+          # For private repositories:
+          #   - `publish_results` will always be set to `false`, regardless
+          #     of the value entered here.
+          publish_results: true
+
+      # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
+      # format to the repository Actions tab.
+      - name: "Upload artifact"
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        with:
+          name: SARIF file
+          path: results.sarif
+          retention-days: 5
+
+      # Upload the results to GitHub's code scanning dashboard.
+      - name: "Upload to code-scanning"
+        uses: github/codeql-action/upload-sarif@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2
+        with:
+          sarif_file: results.sarif

.github/workflows/sponsors.yml

@@ -1,35 +0,0 @@
-name: Generate Sponsors README
-on:
-  workflow_dispatch:
-  schedule:
-    - cron: 30 15 * * 0-6
-jobs:
-  deploy:
-    runs-on: ubuntu-latest
-    if: github.repository_owner == 'Inventree'
-
-    steps:
-      - name: Checkout Code
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
-
-      - name: Generate Sponsors
-        uses: JamesIves/github-sponsors-readme-action@a2d75a8d58b117b19777a910e284ccb082aaf117
-        with:
-          token: ${{ secrets.INVENTREE_SPONSORS_TOKEN }}
-          file: 'README.md'
-          organization: true
-
-      - name: Commit files
-        run: |
-          git config --local user.email "41898282+github-actions[bot]@users.noreply.github.com"
-          git config --local user.name "github-actions[bot]"
-          git checkout -b sponsors
-          git add README.md
-          git commit -m "updated sponsors"
-
-      - name: Push Changes
-        uses: ad-m/github-push-action@d91a481090679876dfc4178fef17f286781251df
-        with:
-          github_token: ${{ secrets.GITHUB_TOKEN }}
-          branch: sponsors
-          force: true

.github/workflows/stale.yaml

@@ -0,0 +1,27 @@
+# Marks all issues that do not receive activity stale starting 2022
+name: Mark stale issues and pull requests
+
+on:
+  schedule:
+    - cron: "24 11 * * *"
+
+permissions:
+  contents: read
+
+jobs:
+  stale:
+    runs-on: ubuntu-latest
+    permissions:
+      issues: write
+      pull-requests: write
+
+    steps:
+      - uses: actions/stale@eb5cf3af3ac0a1aa4c9c45633dd1ae542a27a899 # v10.3.0
+        with:
+          repo-token: ${{ secrets.GITHUB_TOKEN }}
+          stale-issue-message: "This issue seems stale. Please react to show this is still important."
+          stale-pr-message: "This PR seems stale. Please react to show this is still important."
+          stale-issue-label: "inactive"
+          stale-pr-label: "inactive"
+          start-date: "2022-01-01"
+          exempt-all-milestones: true

.github/workflows/stale.yml

@@ -1,25 +0,0 @@
-# Marks all issues that do not receive activity stale starting 2022
-name: Mark stale issues and pull requests
-
-on:
-  schedule:
-    - cron: '24 11 * * *'
-
-jobs:
-  stale:
-
-    runs-on: ubuntu-latest
-    permissions:
-      issues: write
-      pull-requests: write
-
-    steps:
-      - uses: actions/stale@1160a2240286f5da8ec72b1c0816ce2481aabf84 # pin@v8.0.0
-        with:
-          repo-token: ${{ secrets.GITHUB_TOKEN }}
-          stale-issue-message: 'This issue seems stale. Please react to show this is still important.'
-          stale-pr-message: 'This PR seems stale. Please react to show this is still important.'
-          stale-issue-label: 'inactive'
-          stale-pr-label: 'inactive'
-          start-date: '2022-01-01'
-          exempt-all-milestones: true

.github/workflows/translations.yaml

@@ -0,0 +1,73 @@
+name: Update Translation Files
+
+on:
+  push:
+    branches:
+      - master
+
+env:
+  python_version: 3.12
+  node_version: 24
+
+permissions:
+  contents: read
+
+jobs:
+  synchronize-with-crowdin:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      pull-requests: write
+
+    env:
+      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      INVENTREE_DB_NAME: "./test_db.sqlite"
+      INVENTREE_DB_ENGINE: django.db.backends.sqlite3
+      INVENTREE_DEBUG: true
+      INVENTREE_LOG_LEVEL: INFO
+      INVENTREE_MEDIA_ROOT: ./media
+      INVENTREE_STATIC_ROOT: ./static
+      INVENTREE_BACKUP_DIR: ./backup
+      INVENTREE_SITE_URL: http://localhost:8000
+
+    steps:
+      - name: Checkout Code
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          persist-credentials: false
+      - name: Environment Setup
+        uses: ./.github/actions/setup
+        with:
+          install: true
+          apt-dependency: gettext
+      - name: Make Translations
+        run: invoke dev.translate
+      - name: Remove compiled static files
+        run: rm -rf src/backend/InvenTree/static
+      - name: Remove all local changes that are not *.po files
+        run: |
+          git config --local user.email "41898282+github-actions[bot]@users.noreply.github.com"
+          git config --local user.name "github-actions[bot]"
+          git add src/backend/InvenTree/locale/en/LC_MESSAGES/django.po src/frontend/src/locales/en/messages.po
+          echo "Adding commit (or ignoring if no changes)"
+          git commit -m "add translations" || true
+          echo "Removing all other changes"
+          git reset --hard
+          echo "Resetting to HEAD~"
+          git reset HEAD~ || true
+      - name: crowdin action
+        uses: crowdin/github-action@52aa776766211d83d975df51f3b9c53c2f8ba35f # v2
+        with:
+          upload_sources: true
+          upload_translations: false
+          download_translations: true
+          localization_branch_name: l10_crowdin
+          create_pull_request: true
+          pull_request_title: 'New Crowdin updates'
+          pull_request_body: 'New Crowdin translations by [Crowdin GH Action](https://github.com/crowdin/github-action)'
+          pull_request_base_branch_name: 'master'
+          pull_request_labels: 'translations'
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          CROWDIN_PROJECT_ID: ${{ secrets.CROWDIN_PROJECT_ID }}
+          CROWDIN_PERSONAL_TOKEN: ${{ secrets.CROWDIN_PERSONAL_TOKEN }}

.github/workflows/translations.yml

@@ -1,53 +0,0 @@
-name: Update Translation Files
-
-on:
-  push:
-    branches:
-      - master
-
-jobs:
-  build:
-
-    runs-on: ubuntu-latest
-
-    env:
-      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-      INVENTREE_DB_NAME: './test_db.sqlite'
-      INVENTREE_DB_ENGINE: django.db.backends.sqlite3
-      INVENTREE_DEBUG: info
-      INVENTREE_MEDIA_ROOT: ./media
-      INVENTREE_STATIC_ROOT: ./static
-      INVENTREE_BACKUP_DIR: ./backup
-
-    steps:
-      - name: Checkout Code
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # pin@v4.1.1
-      - name: Set up Python 3.9
-        uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # pin@v4.7.1
-        with:
-          python-version: 3.9
-      - name: Set up Node 16
-        uses: actions/setup-node@1a4442cacd436585916779262731d5b162bc6ec7  # pin to v3.8.2
-        with:
-          node-version: 16
-      - name: Install Dependencies
-        run: |
-          sudo apt-get update
-          sudo apt-get install -y gettext
-          pip3 install invoke
-          invoke install
-      - name: Make Translations
-        run: invoke translate
-      - name: Commit files
-        run: |
-          git config --local user.email "41898282+github-actions[bot]@users.noreply.github.com"
-          git config --local user.name "github-actions[bot]"
-          git checkout -b l10_local
-          git add "*.po"
-          git commit -m "updated translation base"
-      - name: Push changes
-        uses: ad-m/github-push-action@d91a481090679876dfc4178fef17f286781251df # pin@v0.8.0
-        with:
-          github_token: ${{ secrets.GITHUB_TOKEN }}
-          branch: l10
-          force: true

.github/workflows/update.yml.disabled

@@ -9,14 +9,16 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # pin@v4.1.1
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          persist-credentials: false
       - name: Setup
-        run: pip install -r requirements-dev.txt
+        run: pip install --require-hashes -r requirements-dev.txt
       - name: Update requirements.txt
         run: pip-compile --output-file=requirements.txt requirements.in -U
       - name: Update requirements-dev.txt
         run: pip-compile --generate-hashes --output-file=requirements-dev.txt requirements-dev.in -U
-      - uses: stefanzweifel/git-auto-commit-action@fd157da78fa13d9383e5580d1fd1184d89554b51 # pin@v4.15.1
+      - uses: stefanzweifel/git-auto-commit-action@fd157da78fa13d9383e5580d1fd1184d89554b51 # v4.15.1
         with:
           commit_message: "[Bot] Updated dependency"
           branch: dep-update

.gitignore

@@ -7,6 +7,7 @@ __pycache__/
 .Python
 env/
 inventree-env/
+.venv/
 ./build/
 .cache/
 develop-eggs/
@@ -18,7 +19,6 @@ share/
 downloads/
 eggs/
 .eggs/
-lib/
 lib64/
 parts/
 sdist/
@@ -26,49 +26,47 @@ var/
 *.egg-info/
 .installed.cfg
 *.egg
+*.DS_Store
 
 # Django stuff:
 *.log
 local_settings.py
+*.sqlite
 *.sqlite3
 *.sqlite3-journal
 *.backup
 *.old
 
+# Files generated by profiling tools
+*.prof
+*.log
+*.sql
+
 # Files used for testing
 inventree-demo-dataset/
 inventree-data/
-dummy_image.*
-_tmp.csv
-InvenTree/label.pdf
-InvenTree/label.png
-InvenTree/part_image_123abc.png
-label.pdf
-label.png
-InvenTree/my_special*
-_tests*.txt
 
 # Local static and media file storage (only when running in development mode)
 inventree_media
 inventree_static
 static_i18n
 
-# Local config file
+# Local config files
 config.yaml
 plugins.txt
+secret_key.txt
+oidc.pem
 
 # Default data file
 data.json
 *.json.tmp
 *.tmp.json
 
-# Key file
-secret_key.txt
-
 # IDE / development files
 .idea/
 *.code-workspace
 .bash_history
+.DS_Store
 
 # https://github.com/github/gitignore/blob/main/Global/VisualStudioCode.gitignore
 .vscode/*
@@ -87,11 +85,17 @@ js_tmp/
 
 # Development files
 dev/
+dev-db/
 data/
 env/
 
 # Locale stats file
-locale_stats.json
+src/backend/InvenTree/InvenTree/locale_stats.json
+src/backend/InvenTree/InvenTree/licenses.txt
+
+# Logs
+src/backend/InvenTree/logs.json
+src/backend/InvenTree/logs.log
 
 # node.js
 node_modules/
@@ -100,10 +104,18 @@ node_modules/
 maintenance_mode_state.txt
 
 # plugin dev directory
-InvenTree/plugins/
+src/backend/InvenTree/plugins/
 
 # Compiled translation files
 *.mo
+messages.ts
+
+# Generated API schema file
+api.yaml
 
 # web frontend (static files)
+src/backend/InvenTree/web/static
 InvenTree/web/static
+
+# performance test results
+.codspeed/

.pkgr.yml

@@ -2,26 +2,28 @@ name: inventree
 description: Open Source Inventory Management System
 homepage: https://inventree.org
 notifications: true
-buildpack: https://github.com/mjmair/heroku-buildpack-python#v216-mjmair
+buildpack: https://github.com/matmair/null-buildpack#master
 env:
-  - STACK=heroku-20
-  - DISABLE_COLLECTSTATIC=1
   - INVENTREE_DB_ENGINE=sqlite3
   - INVENTREE_DB_NAME=database.sqlite3
-  - INVENTREE_PLUGINS_ENABLED
+  - INVENTREE_PLUGINS_ENABLED=true
   - INVENTREE_MEDIA_ROOT=/opt/inventree/media
   - INVENTREE_STATIC_ROOT=/opt/inventree/static
   - INVENTREE_BACKUP_DIR=/opt/inventree/backup
   - INVENTREE_PLUGIN_FILE=/opt/inventree/plugins.txt
   - INVENTREE_CONFIG_FILE=/opt/inventree/config.yaml
+  - APP_REPO=inventree/InvenTree
+before_install: contrib/packager.io/preinstall.sh
 after_install: contrib/packager.io/postinstall.sh
+before_remove: contrib/packager.io/preinstall.sh
 before:
   - contrib/packager.io/before.sh
 dependencies:
   - curl
-  - python3.9
-  - python3.9-venv
-  - python3.9-dev
+  - poppler-utils
+  - "python3.12 | python3.13 | python3.14"
+  - "python3.12-venv | python3.13-venv | python3.14-venv"
+  - "python3.12-dev | python3.13-dev | python3.14-dev"
   - python3-pip
   - python3-cffi
   - python3-brotli
@@ -32,8 +34,8 @@ dependencies:
   - gettext
   - nginx
   - jq
-  - libffi7
+  - "libffi7 | libffi8"
 targets:
-  ubuntu-20.04: true
-  debian-11: true
-  debian-12: true
+  ubuntu-24.04: true
+  ubuntu-26.04: true
+  debian-13: true

.pre-commit-config.yaml

@@ -2,78 +2,99 @@
 # See https://pre-commit.com/hooks.html for more hooks
 exclude: |
     (?x)^(
-        InvenTree/InvenTree/static/.*|
-        InvenTree/locale/.*|
-        src/frontend/src/locales/.*
+        src/backend/InvenTree/InvenTree/static/.*|
+        src/backend/InvenTree/locale/.*|
+        src/frontend/src/locales/.* |
+        .*/migrations/.* |
+        src/frontend/yarn.lock
     )$
 repos:
 -   repo: https://github.com/pre-commit/pre-commit-hooks
-    rev: v4.5.0
+    rev: v6.0.0
     hooks:
     -   id: trailing-whitespace
     -   id: end-of-file-fixer
     -   id: check-yaml
+        exclude: mkdocs.yml
     -   id: mixed-line-ending
--   repo: https://github.com/pycqa/flake8
-    rev: '6.1.0'
+-   repo: https://github.com/astral-sh/ruff-pre-commit
+    rev: v0.15.12
     hooks:
-    -   id: flake8
-        additional_dependencies: [
-                'flake8-bugbear',
-                'flake8-comprehensions',
-                'flake8-docstrings',
-                'flake8-string-format',
-                'flake8-tidy-imports',
-                'pep8-naming',
-                'flake8-logging'
-        ]
--   repo: https://github.com/pycqa/isort
-    rev: '5.12.0'
-    hooks:
-    -   id: isort
--   repo: https://github.com/jazzband/pip-tools
-    rev: 7.3.0
+    - id: ruff-format
+      args: [--preview]
+    - id: ruff-check
+      args: [
+        --fix,
+        # --unsafe-fixes,
+        --preview
+      ]
+-   repo: https://github.com/astral-sh/uv-pre-commit
+    rev: 0.11.12
     hooks:
       - id: pip-compile
         name: pip-compile requirements-dev.in
-        args: [requirements-dev.in, -o, requirements-dev.txt]
-        files: ^requirements-dev\.(in|txt)$
+        args: [src/backend/requirements-dev.in, -o, src/backend/requirements-dev.txt, -c, src/backend/requirements.txt]
+        files: src/backend/requirements-dev\.(in|txt)$
+      - id: pip-compile
+        name: pip-compile requirements-dev.in 3.14
+        args: [src/backend/requirements-dev.in, -o, src/backend/requirements-dev-3.14.txt, -c, src/backend/requirements-3.14.txt, --python-version=3.14, -c, src/backend/requirements.txt, -c, src/backend/requirements-dev.txt]
+        files: src/backend/requirements-dev\.(in|txt)$
       - id: pip-compile
         name: pip-compile requirements.txt
-        args: [requirements.in, -o, requirements.txt]
-        files: ^requirements\.(in|txt)$
+        args: [src/backend/requirements.in, -o, src/backend/requirements.txt]
+        files: src/backend/requirements\.(in|txt)$
+      - id: pip-compile
+        name: pip-compile requirements.txt 3.14
+        args: [src/backend/requirements.in, -o, src/backend/requirements-3.14.txt, --python-version=3.14, -c, src/backend/requirements.txt]
+        files: src/backend/requirements\.(in|txt)$
+      - id: pip-compile
+        name: pip-compile contrib/dev_reqs/requirements.txt
+        args: [contrib/dev_reqs/requirements.in, -o, contrib/dev_reqs/requirements.txt, -c, src/backend/requirements.txt]
+        files: contrib/dev_reqs/requirements\.(in|txt)$
+      - id: pip-compile
+        name: pip-compile docs/requirements.txt
+        args: [docs/requirements.in, -o, docs/requirements.txt, -c, src/backend/requirements.txt]
+        files: docs/requirements\.(in|txt)$
+      - id: pip-compile
+        name: pip-compile contrib/container/requirements.txt
+        args: [contrib/container/requirements.in, -o, contrib/container/requirements.txt, --python-version=3.14, -c, src/backend/requirements.txt]
+        files: contrib/container/requirements\.(in|txt)$
 -   repo: https://github.com/Riverside-Healthcare/djLint
-    rev: v1.34.0
+    rev: v1.36.4
     hooks:
       - id: djlint-django
 - repo: https://github.com/codespell-project/codespell
-  rev: v2.2.6
+  rev: v2.4.2
   hooks:
   - id: codespell
+    additional_dependencies:
+      - tomli
     exclude: >
       (?x)^(
           docs/docs/stylesheets/.*|
           docs/docs/javascripts/.*|
           docs/docs/webfonts/.* |
           src/frontend/src/locales/.* |
+          pyproject.toml |
+          src/frontend/vite.config.ts |
       )$
-- repo: https://github.com/pre-commit/mirrors-prettier
-  rev: "v3.0.3"
-  hooks:
-    - id: prettier
-      files: ^src/frontend/.*\.(js|jsx|ts|tsx)$
-      additional_dependencies:
-      - "prettier@^2.4.1"
-      - "@trivago/prettier-plugin-sort-imports"
-- repo: https://github.com/pre-commit/mirrors-eslint
-  rev: "v8.51.0"
-  hooks:
-  - id: eslint
-    additional_dependencies:
-      - eslint@^8.41.0
-      - eslint-config-google@^0.14.0
-      - eslint-plugin-react@6.10.3
-      - babel-eslint@6.1.2
-      - "@typescript-eslint/eslint-plugin@latest"
-      - "@typescript-eslint/parser"
-    files: ^src/frontend/.*\.(js|jsx|ts|tsx)$
+-   repo: https://github.com/biomejs/pre-commit
+    rev: v2.4.14
+    hooks:
+    -   id: biome-check
+        additional_dependencies: ["@biomejs/biome@1.9.4"]
+        files: ^src/frontend/.*\.(js|ts|tsx)$
+-   repo: https://github.com/gitleaks/gitleaks
+    rev: v8.30.1
+    hooks:
+    -   id: gitleaks
+        language_version: 1.25.4
+#-   repo: https://github.com/jumanjihouse/pre-commit-hooks
+#    rev: 3.0.0
+#    hooks:
+#    -   id: shellcheck
+-   repo: https://github.com/isidentical/teyit
+    rev: 0.4.3
+    hooks:
+    -   id: teyit
+        language_version: python3.12

.vscode/extensions.json

@@ -0,0 +1,5 @@
+{
+    "recommendations": [
+        "biomejs.biome"
+    ]
+}

.vscode/launch.json

@@ -6,21 +6,72 @@
   "configurations": [
     {
       "name": "InvenTree Server",
-      "type": "python",
+      "type": "debugpy",
       "request": "launch",
-      "program": "${workspaceFolder}/InvenTree/manage.py",
-      "args": ["runserver"],
+      "program": "${workspaceFolder}/src/backend/InvenTree/manage.py",
+      "args": [
+        "runserver",
+        "0.0.0.0:8000", // expose server in network (useful for testing with mobile app)
+        // "--noreload" // disable auto-reload
+      ],
       "django": true,
       "justMyCode": true
     },
     {
-      "name": "Python: Django - 3rd party",
-      "type": "python",
+      "name": "InvenTree Server - Tests",
+      "type": "debugpy",
       "request": "launch",
-      "program": "${workspaceFolder}/InvenTree/manage.py",
-      "args": ["runserver"],
+      "program": "${workspaceFolder}/src/backend/InvenTree/manage.py",
+      "args": [
+        "test",
+        // "part.test_api.PartCategoryAPITest", // run only a specific test
+      ],
+      "django": true,
+      "justMyCode": true
+    },
+    {
+      "name": "InvenTree Server - 3rd party",
+      "type": "debugpy",
+      "request": "launch",
+      "program": "${workspaceFolder}/src/backend/InvenTree/manage.py",
+      "args": [
+        "runserver",
+        "0.0.0.0:8000",
+        // "--sync",// Synchronize worker tasks to foreground thread
+        // "--noreload", // disable auto-reload
+      ],
       "django": true,
       "justMyCode": false
+    },
+    {
+      "name": "InvenTree invoke schema",
+      "type": "debugpy",
+      "request": "launch",
+      "program": "${workspaceFolder}/.venv/lib/python3.12/site-packages/invoke/__main__.py",
+      "cwd": "${workspaceFolder}",
+      "args": [
+        "dev.schema","--ignore-warnings"
+      ],
+      "justMyCode": false
+    },
+    {
+      "name": "schema generation",
+      "type": "debugpy",
+      "request": "launch",
+      "program": "${workspaceFolder}/src/backend/InvenTree/manage.py",
+      "args": [
+        "schema",
+        "--file","src/frontend/schema.yml"
+      ],
+      "django": true,
+      "justMyCode": false
+    },
+    {
+      "name": "InvenTree Frontend - Vite",
+      "type": "chrome",
+      "request": "launch",
+      "url": "http://localhost:5173",
+      "webRoot": "${workspaceFolder}/src/frontend"
     }
   ]
 }

.vscode/settings.json

@@ -0,0 +1,8 @@
+{
+  "[typescript]": {
+    "editor.defaultFormatter": "biomejs.biome"
+  },
+  "editor.codeActionsOnSave": {
+    "quickfix.biome": "explicit"
+  }
+}

.vscode/tasks.json

@@ -9,61 +9,61 @@
     {
       "label": "worker",
       "type": "shell",
-      "command": "inv worker",
+      "command": "invoke worker",
       "problemMatcher": [],
     },
     {
       "label": "clean-settings",
       "type": "shell",
-      "command": "inv clean-settings",
+      "command": "invoke int.clean-settings",
       "problemMatcher": [],
     },
     {
       "label": "delete-data",
       "type": "shell",
-      "command": "inv delete-data",
+      "command": "invoke dev.delete-data",
       "problemMatcher": [],
     },
     {
       "label": "migrate",
       "type": "shell",
-      "command": "inv migrate",
+      "command": "invoke migrate",
       "problemMatcher": [],
     },
     {
       "label": "server",
       "type": "shell",
-      "command": "inv server",
+      "command": "invoke dev.server",
       "problemMatcher": [],
     },
     {
       "label": "setup-dev",
       "type": "shell",
-      "command": "inv setup-dev",
+      "command": "invoke dev.setup-dev",
       "problemMatcher": [],
     },
     {
       "label": "setup-test",
       "type": "shell",
-      "command": "inv setup-test --path dev/inventree-demo-dataset",
+      "command": "invoke dev.setup-test -i --path dev/inventree-demo-dataset",
       "problemMatcher": [],
     },
     {
       "label": "superuser",
       "type": "shell",
-      "command": "inv superuser",
+      "command": "invoke superuser",
       "problemMatcher": [],
     },
     {
       "label": "test",
       "type": "shell",
-      "command": "inv test",
+      "command": "invoke dev.test",
       "problemMatcher": [],
     },
     {
       "label": "update",
       "type": "shell",
-      "command": "inv update",
+      "command": "invoke update",
       "problemMatcher": [],
     },
   ]

AGENTS.md

@@ -0,0 +1,5 @@
+See [CONTRIBUTING.md](CONTRIBUTING.md) for codebase guidance.
+Security reports must follow the security policy in [SECURITY.md](docs/docs/SECURITY.md) and provide how they interact with the [threat model](docs/docs/concepts/threat_model.md).
+
+Do not open a pull request without manual review by a human. Do not file AI generated issues under any circumstances.
+Using AI generated content in issue/PR discussions might lead to code of conduct violations and/or bans.

CHANGELOG.md

@@ -0,0 +1,170 @@
+# Changelog
+
+All major notable changes to this project will be documented in this file (starting with 1.0.0).
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## Unreleased - xxxx.xx.xx
+
+### Breaking Changes
+
+- [#12360](https://github.com/inventree/InvenTree/pull/12360) removes the MPTT mixin from the StockItem model, and removes the self-referential tree structure from the database. This change was made to simplify the StockItem model and improve performance, as the MPTT tree structure was causing significant overhead in certain operations. Any external client applications which made use of the MPTT functionality will need to be updated to account for this change.
+- [#12320](https://github.com/inventree/InvenTree/pull/12320) changes the default behavior of the `invoke migrate` command. Now, it no longer generates new migrations by default. Instead, it will only apply existing migrations to the database. If you want to detect and generate new migrations, you must now explicitly use the `--detect` flag. This change was made to prevent accidental generation of migrations when running the command, which could lead to unexpected changes in the database schema. Additionally, `invoke update` will no longer result in new migrations being generated, and will only apply existing migrations to the database. This change was made to ensure that the update process is predictable and does not introduce unexpected changes to the database schema.
+- [#12223](https://github.com/inventree/InvenTree/pull/12223) removes support for python 3.11 and stops providing packages for Debian 11 and Ubuntu 20.04.
+
+### Added
+
+- [#12391](https://github.com/inventree/InvenTree/pull/12391) adds facility for bulk deleting line items against orders
+- [#12388](https://github.com/inventree/InvenTree/pull/12388) adds uniqueness requirements options for the Parameter and ParameterTemplate models. This allows users to specify whether a parameter value should be unique for a given model type, or globally unique across all models.
+- [#12310](https://github.com/inventree/InvenTree/pull/12310) adds the ability to disassemble (or break apart) assembled stock items into their component parts, based on the Bill of Materials (BOM) associated with the stock item. This allows users to easily break down assembled items into their constituent parts, which can be useful for inventory management and tracking purposes.
+- [#12117](https://github.com/inventree/InvenTree/pull/12117) adds a "preview" drawer to the InvenTree table component, allowing users to preview the details of a selected row without navigating away from the table view. This feature is optional and can be enabled or disabled via the `PREVIEW_DRAWER_ENABLED` system setting.
+- [#12341](https://github.com/inventree/InvenTree/pull/12341) adds support for importing internal part prices.
+- [#12295](https://github.com/inventree/InvenTree/pull/12295) adds "consumable" field to the Part model and API endpoints
+- [#12250](https://github.com/inventree/InvenTree/pull/12250) adds "active" field to the ProjectCode model and API endpoints
+
+### Changed
+
+- [#12274](https://github.com/inventree/InvenTree/pull/12274) fixes a bug in rendering the "table field" component in frontend forms. Any plugins which make use of the "table field" component in their forms may be affected by this change, and will need to update their form definitions accordingly.
+
+### Removed
+
+## 1.4.0 - 2026-06-24
+
+### Breaking Changes
+
+- [#12160](https://github.com/inventree/InvenTree/pull/12160) changes the way that remote URIs are loaded into the PDF report generator. Remote URIs (e.g. `http://` and `https://`) are now blocked by default, and can be enabled via the `REPORT_FETCH_URLS` system setting. This change was made to improve the security of the report generation process, as allowing remote URL fetching can potentially expose internal network services to SSRF attacks. Additionally, file URIs (e.g. `file://`) are now always blocked, and assets must be embedded as `data:` URIs before reaching the PDF generator.
+- [#12107](https://github.com/inventree/InvenTree/pull/12107) makes a breaking change to the `SalesOrderStatusGroups` enum, fixing a bug where the "shipped" status was not included in the "active" group. This change may affect any external client applications which make use of the `SalesOrderStatusGroups` enum, as the "shipped" status will now be included in the "active" group instead of the "complete" group. If you are using this enum in an external client application, you will need to update your application to account for this change.
+- [#9604](https://github.com/inventree/InvenTree/pull/9604) refactors user API endpoint to be less ambiguous
+- [#11893](https://github.com/inventree/InvenTree/pull/11893) bumps Node environment to version 24 LTS - this is only relevant if you build the frontend assets yourself
+
+### Added
+
+- [#12208](https://github.com/inventree/InvenTree/pull/12208) adds custom locale support for rendering currencies, dates and numbers within reports. This allows users to specify a custom locale for report rendering, which can be used to control the formatting of dates, numbers and currency values in the generated reports.
+- [#12204](https://github.com/inventree/InvenTree/pull/12204) adds new filtering options to PartCategoryTree and StockLocationTree API endpoints, allowing tree data to be fetched dynamically
+- [#12165](https://github.com/inventree/InvenTree/pull/12165) adds support for parameters against the PartCategory model
+- [#12103](https://github.com/inventree/InvenTree/pull/12103) adds column-based filtering to table views in the user interface. This extends the existing table filtering functionality by allowing users to apply filters directly to individual columns.
+- [#12093](https://github.com/inventree/InvenTree/pull/12093) adds "read_only" attribute to PluginSetting API endpoint, which indicates whether a particular plugin setting is read-only (i.e. cannot be modified via the API)
+- [#12079](https://github.com/inventree/InvenTree/pull/12079) adds the ability to save filter groups for table and calendar views in the user interface. This allows users to save and reuse commonly used filter configurations, improving the usability and efficiency of the interface.
+- [#12077](https://github.com/inventree/InvenTree/pull/12077) adds "tags" fields to multiple new model types and a /api/tag/ endpoint for fetching tags. Also adds the ability to filter various model types by tags.
+- [#12019](https://github.com/inventree/InvenTree/pull/12019) adds a "location" field to the StockCount API endpoint, allowing users to specify a location when performing a stock count. This field is optional, and if not provided, the stock count will be performed without changing the location of the stock item. If a location is provided, the stock item(s) will be moved to the specified location as part of the stock count operation.
+- [#12011](https://github.com/inventree/InvenTree/pull/12011) adds a "creation_date" field to the StockItem API endpoint, allowing users to track when each stock item was created. This field is read-only and is automatically set to the current date and time when a new stock item is created.
+- [#12000](https://github.com/inventree/InvenTree/pull/12000) adds support for auto-allocation of stock items against sales orders. This includes both backend and frontend changes, allowing users to trigger auto-allocation via the API or through the UI. The auto-allocation process will attempt to allocate available stock items to the sales order line items, based on the specified stock sorting and allocation rules.
+- [#11920](https://github.com/inventree/InvenTree/pull/11920) adds support for renaming attachments after they have been uploaded. This includes both backend and frontend changes, allowing users to rename attachments via the API or through the UI.
+- [#11914](https://github.com/inventree/InvenTree/pull/11914) adds a "maximum_stock" field to the Part model, allowing users to specify a maximum preferred stock level for each part. This is used in conjunction with the existing "minimum_stock" field to allow users to define a preferred stock range for each part. The "high_stock" filter has also been added to the Part API endpoint, allowing users to filter parts which are above their maximum stock level.
+- [#11631](https://github.com/inventree/InvenTree/pull/11631) adds "raw_amount" field to the BomItem model, allowing BOM quantities to account for the units of measure of the underlying part.
+- [#11872](https://github.com/inventree/InvenTree/pull/11872) adds a global setting to allow or disallow the deletion of serialized stock items.
+- [#11861](https://github.com/inventree/InvenTree/pull/11861) adds support for bulk-replacing a component in multiple BOMs simultaneously
+- [#11853](https://github.com/inventree/InvenTree/pull/11853) adds BOM comparison functionality, allowing users to compare the BOM of one assembly with another assembly.
+- [#11809](https://github.com/inventree/InvenTree/pull/11809) adds multi-level subassembly display mode to the BOM table, allowing users to view multiple levels of subassemblies in a single table view. This is an optional display mode which can be toggled on or off by the user.
+- [#11778](https://github.com/inventree/InvenTree/pull/11778) adds inline supplier part creation to po line item addition dialog.
+- [#11772](https://github.com/inventree/InvenTree/pull/11772) the UI now warns if you navigate away from a note panel with unsaved changes
+- [#11788](https://github.com/inventree/InvenTree/pull/11788) adds support for custom permissions checks on database models defined in plugins. If a model defines a `check_user_permission` classmethod, this will be called to determine if a user has permission to view the model. This is required for plugin models which do not have the required ruleset definitions for the standard permission system.
+- [#9570](https://github.com/inventree/InvenTree/pull/9570) adds support for defining primary actions via plugins
+
+### Changed
+
+- [#12197](https://github.com/inventree/InvenTree/pull/12197) requires staff permissions to restart machines via the API.
+- [#12142](https://github.com/inventree/InvenTree/pull/12142) prevents users from printing reports or labels against models for which they do not have adequate permissions. This change improves the security of the system by ensuring that users cannot access or print reports or labels for models they do not have permission to view.
+- [#11990](https://github.com/inventree/InvenTree/pull/11990) build output operations performed via the API now offload the work to a background task, and now return a task ID which can be used to monitor the progress of the task. This allows for better performance and responsiveness when performing build output operations, as the work is performed asynchronously in the background.
+- [#11825](https://github.com/inventree/InvenTree/pull/11825) adds a new "bom" ruleset and associated permissions for BOM management, separate from the "part" ruleset which remains focused on part management. This allows for more granular control over user permissions, allowing users to have different levels of access to part management and BOM management functionality.
+- [#11816](https://github.com/inventree/InvenTree/pull/11816) makes the `issued_by` field on the `Build` API read only, and instead sets the `issued_by` field to the current user when a build is created. This change was made to ensure that the `issued_by` field accurately reflects the user who created the build, and to prevent users from setting this field to an arbitrary value when creating or updating a build.
+
+### Removed
+
+- [#12071](https://github.com/inventree/InvenTree/pull/12071) removes the "review_needed" field on the StockItem model. Note that this field was never exposed to the API or any business logic, and is essentially a no-op field which is not used for anything. This field was removed to simplify the StockItem model and reduce confusion around its purpose.
+- [#11962](https://github.com/inventree/InvenTree/pull/11962) removes the "remote_image" field from the Part API endpoint, which (previously) allowed the user to specify a remote URL for an image to be downloaded and associated with the part. This field was removed due to security concerns around downloading images from arbitrary URLs. If you were using this field in an external client application, you will need to update your application to use the new "download_image_from_url" API endpoint instead.
+
+## 1.3.0 - 2026-04-11
+
+### Breaking Changes
+
+- [#11303](https://github.com/inventree/InvenTree/pull/11303) removes the `default_supplier` field from the `Part` model. Instead, the `SupplierPart` model now has a `primary` field which is used to indicate which supplier is the default for a given part. Any external client applications which made use of the old `default_supplier` field will need to be updated.
+- [#11500](https://github.com/inventree/InvenTree/pull/11500) fixes a spelling mistake in the database configuration values, which may affect some users running the PostgreSQL database backend. The `tcp_keepalives_internal` option has been renamed to `tcp_keepalives_interval` to reflect the correct PostgreSQL configuration option name. If you are using PostgreSQL, and have set a custom value for the `tcp_keepalives_internal` option, you will need to update this to `tcp_keepalives_interval` in your configuration (either via environment variable or config file).
+
+### Added
+
+- [#11702](https://github.com/inventree/InvenTree/pull/11702) adds "last updated" and "updated by" fields for label and report templates, allowing users to track when a template was last modified and by whom.
+- [#11685](https://github.com/inventree/InvenTree/pull/11685) exposes the data importer wizard to the plugin interface, allowing plugins to trigger the data importer wizard and perform custom data imports from the UI.
+- [#11692](https://github.com/inventree/InvenTree/pull/11692) adds line item numbering for external orders (purchase, sales and return orders). This allows users to specify a line number for each line item on the order, which can be used for reference purposes. The line number is optional, and can be left blank if not required. The line number is stored as a string, to allow for more flexible formatting (e.g. "1", "1.1", "A", etc).
+- [#11641](https://github.com/inventree/InvenTree/pull/11641) adds support for custom parameters against the SalesOrderShipment model.
+- [#11527](https://github.com/inventree/InvenTree/pull/11527) adds a new API endpoint for monitoring the status of a particular background task. This endpoint allows clients to check the status of a background task and receive updates when the task is complete. This is useful for long-running tasks that may take some time to complete, allowing clients to provide feedback to users about the progress of the task.
+- [#11405](https://github.com/inventree/InvenTree/pull/11405) adds default table filters, which hide inactive items by default. The default table filters are overridden by user filter selection, and only apply to the table view initially presented to the user. This means that users can still view inactive items if they choose to, but they will not be shown by default.
+- [#11222](https://github.com/inventree/InvenTree/pull/11222) adds support for data import using natural keys, allowing for easier association of related objects without needing to know their internal database IDs.
+- [#11383](https://github.com/inventree/InvenTree/pull/11383) adds "exists_for_model_id", "exists_for_related_model", and "exists_for_related_model_id" filters to the ParameterTemplate API endpoint. These filters allow users to check for the existence of parameters associated with specific models or related models, improving the flexibility and usability of the API.
+- [#10887](https://github.com/inventree/InvenTree/pull/10887) adds the ability to auto-allocate tracked items against specific build outputs. Currently, this will only allocate items where the serial number of the tracked item matches the serial number of the build output, but in future this may be extended to allow for more flexible allocation rules.
+- [#11372](https://github.com/inventree/InvenTree/pull/11372) adds backup metadata setter and restore metadata validator functions to ensure common footguns are harder to trigger when using the backup and restore functionality.
+- [#11374](https://github.com/inventree/InvenTree/pull/11374) adds `updated_at` field on purchase, sales and return orders.
+- [#11074](https://github.com/inventree/InvenTree/pull/11074) adds "Keep form open" option on create form which leaves dialog with form opened after form submitting.
+
+### Changed
+
+- [#11648](https://github.com/inventree/InvenTree/pull/11648) improves the import/export process, allowing data records defined by plugins to be loaded when importing a database from a file.
+- [#11630](https://github.com/inventree/InvenTree/pull/11630) enhances the `import_records` and `export_records` system commands, by adding a metadata entry to the exported data file to allow for compatibility checks during data import.
+
+### Removed
+
+- [#11581](https://github.com/inventree/InvenTree/pull/11581) removes the ability to specify arbitrary filters when performing bulk operations via the API. This functionality represented a significant security risk, and was not required for any existing use cases. Bulk operations now only work with a provided list of primary keys.
+
+## 1.2.0 - 2026-02-12
+
+### Breaking Changes
+
+- [#10699](https://github.com/inventree/InvenTree/pull/10699) removes the `PartParameter` and `PartParameterTemplate` models (and associated API endpoints). These have been replaced with generic `Parameter` and `ParameterTemplate` models (and API endpoints). Any external client applications which made use of the old endpoints will need to be updated.
+- [#11035](https://github.com/inventree/InvenTree/pull/11035) moves to a single endpoint for all metadata operations. The previous endpoints for PartMetadata, SupplierPartMetadata, etc have been removed. Any external client applications which made use of the old endpoints will need to be updated.
+
+### Added
+
+- Adds "Category" columns to BOM and Build Item tables and APIs in [#10722](https://github.com/inventree/InvenTree/pull/10772)
+- Adds generic "Parameter" and "ParameterTemplate" models (and associated API endpoints) in [#10699](https://github.com/inventree/InvenTree/pull/10699)
+- Adds parameter support for multiple new model types in [#10699](https://github.com/inventree/InvenTree/pull/10699)
+- Allows report generator to produce PDF input controls in [#10969](https://github.com/inventree/InvenTree/pull/10969)
+- UI overhaul of parameter management in [#10699](https://github.com/inventree/InvenTree/pull/10699)
+- Allow input controls within generated PDF reports in [#10969](https://github.com/inventree/InvenTree/pull/10969)
+
+### Changed
+
+- Improved stocktake functionality in [#11257](https://github.com/inventree/InvenTree/pull/11257)
+
+### Removed
+- Removed python 3.9 / 3.10 support as part of Django 5.2 upgrade in [#10730](https://github.com/inventree/InvenTree/pull/10730)
+- Removed the "PartParameter" and "PartParameterTemplate" models (and associated API endpoints) in [#10699](https://github.com/inventree/InvenTree/pull/10699)
+- Removed the "ManufacturerPartParameter" model (and associated API endpoints) [#10699](https://github.com/inventree/InvenTree/pull/10699)
+- Removed individual metadata endpoints for all models ([#11035](https://github.com/inventree/InvenTree/pull/11035))
+
+## 1.1.0 - 2025-11-02
+
+### Added
+
+- Added `order_queryset` report helper function in [#10439](https://github.com/inventree/InvenTree/pull/10439)
+- Added `SupplierMixin` to import data from suppliers in [#9761](https://github.com/inventree/InvenTree/pull/9761)
+- Added much more detailed status information for machines to the API endpoint (including backend and frontend changes) in [#10381](https://github.com/inventree/InvenTree/pull/10381)
+- Added ability to partially complete and partially scrap build outputs in [#10499](https://github.com/inventree/InvenTree/pull/10499)
+- Added support for Redis ACL user-based authentication in [#10551](https://github.com/inventree/InvenTree/pull/10551)
+- Expose stock adjustment forms to the UI plugin context in [#10584](https://github.com/inventree/InvenTree/pull/10584)
+- Allow stock adjustments for "in production" items in [#10600](https://github.com/inventree/InvenTree/pull/10600)
+- Adds optional shipping address against individual sales order shipments in [#10650](https://github.com/inventree/InvenTree/pull/10650)
+- Adds UI elements to "check" and "uncheck" sales order shipments in [#10654](https://github.com/inventree/InvenTree/pull/10654)
+- Allow assigning project codes to order line items in [#10657](https://github.com/inventree/InvenTree/pull/10657)
+- Added support for webauthn login for the frontend in [#9729](https://github.com/inventree/InvenTree/pull/9729)
+- Added support for Debian 12, Ubuntu 22.04 and Ubuntu 24.04 in the installer and package in [#10705](https://github.com/inventree/InvenTree/pull/10705)
+- Support for S3 and SFTP storage backends for media and static files ([#10140](https://github.com/inventree/InvenTree/pull/10140))
+- Adds hooks for custom UI spotlight actions in [#10720](https://github.com/inventree/InvenTree/pull/10720)
+- Support uploading attachments against SupplierPart in [#10724](https://github.com/inventree/InvenTree/pull/10724)
+
+### Changed
+
+- Changed site URL check to allow protocol mismatches if `INVENTREE_SITE_LAX_PROTOCOL` is set to `True` (default) in [#10454](https://github.com/inventree/InvenTree/pull/10454)
+- Changed call signature of `get_global_setting` to use `environment_key` instead of `enviroment_key` in [#10557](https://github.com/inventree/InvenTree/pull/10557)
+
+
+## 1.0.0 - 2025-09-15
+
+The first "stable" release following semver but not extensively other than the previous releases. The use of 1.0 indicates the stability that users already expect from InvenTree.
+
+An overarching theme of this release is the complete switch to a new UI framework and paradigm (PUI). The old templating based UI (CUI) is now removed. This makes major improvements in the security and portability of InvenTree possible.
+
+Our blog holds [a few articles](https://inventree.org/blog/2024/09/23/ui-roadmap) on the topic. This journey started in [March 2022](https://github.com/inventree/InvenTree/issues/2789) and was announced [in 2023](https://inventree.org/blog/2023/08/28/react).
+
+
+Specific entries to the changelog will be kept for all stable channel minor releases, for changes in 1.0 please refer to the [blog posts](https://inventree.org/blog/2025/09/15/1.0.0) and the [milestone](https://github.com/inventree/InvenTree/milestone/17)

CLAUDE.md

@@ -0,0 +1,5 @@
+See [CONTRIBUTING.md](CONTRIBUTING.md) for codebase guidance.
+Security reports must follow the security policy in [SECURITY.md](docs/docs/SECURITY.md) and provide how they interact with the [threat model](docs/docs/concepts/threat_model.md).
+
+Do not open a pull request without manual review by a human. Do not file AI generated issues under any circumstances.
+Using AI generated content in issue/PR discussions might lead to code of conduct violations and/or bans.

CODE_OF_CONDUCT.md

@@ -0,0 +1,128 @@
+# Contributor Covenant Code of Conduct
+
+## Our Pledge
+
+We as members, contributors, and leaders pledge to make participation in our
+community a harassment-free experience for everyone, regardless of age, body
+size, visible or invisible disability, ethnicity, sex characteristics, gender
+identity and expression, level of experience, education, socio-economic status,
+nationality, personal appearance, race, religion, or sexual identity
+and orientation.
+
+We pledge to act and interact in ways that contribute to an open, welcoming,
+diverse, inclusive, and healthy community.
+
+## Our Standards
+
+Examples of behavior that contributes to a positive environment for our
+community include:
+
+* Demonstrating empathy and kindness toward other people
+* Being respectful of differing opinions, viewpoints, and experiences
+* Giving and gracefully accepting constructive feedback
+* Accepting responsibility and apologizing to those affected by our mistakes,
+  and learning from the experience
+* Focusing on what is best not just for us as individuals, but for the
+  overall community
+
+Examples of unacceptable behavior include:
+
+* The use of sexualized language or imagery, and sexual attention or
+  advances of any kind
+* Trolling, insulting or derogatory comments, and personal or political attacks
+* Public or private harassment
+* Publishing others' private information, such as a physical or email
+  address, without their explicit permission
+* Other conduct which could reasonably be considered inappropriate in a
+  professional setting
+
+## Enforcement Responsibilities
+
+Community leaders are responsible for clarifying and enforcing our standards of
+acceptable behavior and will take appropriate and fair corrective action in
+response to any behavior that they deem inappropriate, threatening, offensive,
+or harmful.
+
+Community leaders have the right and responsibility to remove, edit, or reject
+comments, commits, code, wiki edits, issues, and other contributions that are
+not aligned to this Code of Conduct, and will communicate reasons for moderation
+decisions when appropriate.
+
+## Scope
+
+This Code of Conduct applies within all community spaces, and also applies when
+an individual is officially representing the community in public spaces.
+Examples of representing our community include using an official e-mail address,
+posting via an official social media account, or acting as an appointed
+representative at an online or offline event.
+
+## Enforcement
+
+Instances of abusive, harassing, or otherwise unacceptable behavior may be
+reported to the community leaders responsible for enforcement at
+support AT inventree DOR org.
+All complaints will be reviewed and investigated promptly and fairly.
+
+All community leaders are obligated to respect the privacy and security of the
+reporter of any incident.
+
+## Enforcement Guidelines
+
+Community leaders will follow these Community Impact Guidelines in determining
+the consequences for any action they deem in violation of this Code of Conduct:
+
+### 1. Correction
+
+**Community Impact**: Use of inappropriate language or other behavior deemed
+unprofessional or unwelcome in the community.
+
+**Consequence**: A private, written warning from community leaders, providing
+clarity around the nature of the violation and an explanation of why the
+behavior was inappropriate. A public apology may be requested.
+
+### 2. Warning
+
+**Community Impact**: A violation through a single incident or series
+of actions.
+
+**Consequence**: A warning with consequences for continued behavior. No
+interaction with the people involved, including unsolicited interaction with
+those enforcing the Code of Conduct, for a specified period of time. This
+includes avoiding interactions in community spaces as well as external channels
+like social media. Violating these terms may lead to a temporary or
+permanent ban.
+
+### 3. Temporary Ban
+
+**Community Impact**: A serious violation of community standards, including
+sustained inappropriate behavior.
+
+**Consequence**: A temporary ban from any sort of interaction or public
+communication with the community for a specified period of time. No public or
+private interaction with the people involved, including unsolicited interaction
+with those enforcing the Code of Conduct, is allowed during this period.
+Violating these terms may lead to a permanent ban.
+
+### 4. Permanent Ban
+
+**Community Impact**: Demonstrating a pattern of violation of community
+standards, including sustained inappropriate behavior,  harassment of an
+individual, or aggression toward or disparagement of classes of individuals.
+
+**Consequence**: A permanent ban from any sort of public interaction within
+the community.
+
+## Attribution
+
+This Code of Conduct is adapted from the [Contributor Covenant][homepage],
+version 2.0, available at
+https://www.contributor-covenant.org/version/2/0/code_of_conduct.html.
+
+Community Impact Guidelines were inspired by [Mozilla's code of conduct
+enforcement ladder](https://github.com/mozilla/diversity).
+
+[homepage]: https://www.contributor-covenant.org
+
+For answers to common questions about this code of conduct, see the FAQ at
+https://www.contributor-covenant.org/faq. Translations are available at
+https://www.contributor-covenant.org/translations.

CONTRIBUTING.md

@@ -1,259 +1,260 @@
+# Contributing to InvenTree
+
 Hi there, thank you for your interest in contributing!
-Please read the contribution guidelines below, before submitting your first pull request to the InvenTree codebase.
+Please read our contribution guidelines, before submitting your first pull request to the InvenTree codebase.
 
-## Quickstart
+## About InvenTree
 
-The following commands will get you quickly configure and run a development server, complete with a demo dataset to work with:
+InvenTree is an open-source inventory management system designed for makers, engineers, and small manufacturers.
 
-### Bare Metal
+The codebase is split into two independently deployable layers:
+
+**Backend — Django (Python)**
+A REST API built with Django and Django REST Framework. It owns all business logic, the database schema, background task processing (Django-Q2), plugin execution, and report generation. The backend can be used standalone via the API without the frontend.
+
+**Frontend — React (TypeScript)**
+A single-page application built with React 19, Mantine 9, and Vite. It communicates exclusively through the backend REST API. It has its own build pipeline, test suite (Playwright), and i18n system (Lingui). The frontend lives entirely in `src/frontend/` and has no Django awareness.
+
+When making changes, be clear about which layer you are working in — they have separate toolchains, test runners, and linting rules.
+
+## Project File Structure
+
+The InvenTree project is split into two main components: frontend and backend. This source is located in the `src` directory. All other files are used for project management, documentation, and testing.
+
+```
+InvenTree/
+├─ .github/                            # Files for GitHub
+│  ├─ actions/                         # Reused actions
+│  ├─ ISSUE_TEMPLATE/                  # Templates for issues and pull requests
+│  ├─ workflows/                       # CI/CD flows
+│  ├─ scripts/                         # CI scripts
+├─ .vscode/                            # Settings for Visual Code IDE
+├─ assets/                             # General project assets
+├─ contrib/                            # Files needed for deployments
+│  ├─ container/                       # Files related to building container images
+│  ├─ installer/                       # Files needed to build single-file installer
+│  ├─ packager.io/                     # Files needed for Debian/Ubuntu packages
+├─ docs/                               # Directory for documentation / General helper files
+│  ├─ ci/                              # CI for documentation
+│  ├─ docs/                            # Source for documentation
+├─ src/                                # Source for application
+│  ├─ backend/                         # Directory for backend parts
+│  │  ├─ InvenTree/                    # Source for backend
+│  │  ├─ requirements.txt              # Dependencies for backend
+│  │  ├─ package.json                  # Dependencies for backend HTML linting
+│  ├─ frontend/                        # Directory for frontend parts
+│  │  ├─ src/                          # Source for frontend
+│  │  │  ├─ main.tsx                   # Entry point for frontend
+│  │  ├─ tests/                        # Tests for frontend
+│  │  ├─ netlify.toml                  # Settings for frontend previews (Netlify)
+│  │  ├─ package.json                  # Dependencies for frontend
+│  │  ├─ playwright.config.ts          # Settings for frontend tests
+│  │  ├─ tsconfig.json                 # Settings for frontend compilation
+├─ .pkgr.yml                           # Build definition for Debian/Ubuntu packages
+├─ .pre-commit-config.yaml             # Code formatter/linter configuration
+├─ biome.json                          # JS/TS linting and formatting config
+├─ CONTRIBUTING.md                     # Contribution guidelines and overview
+├─ Procfile                            # Process definition for Debian/Ubuntu packages
+├─ pyproject.toml                      # Python tooling config (Ruff, pytest, coverage, djLint, ty)
+├─ README.md                           # General project information and overview
+├─ SECURITY.md                         # Project security policy
+├─ tasks.py                            # Action definitions for development, testing and deployment
+```
+
+### Backend app domains
+
+The following Django apps are defined in `src/backend/InvenTree/`:
+
+| Directory | Domain |
+|-----------|--------|
+| `build/` | Build (manufacturing/assembly) orders |
+| `common/` | Shared models, settings, utilities |
+| `company/` | Suppliers, customers, manufacturers |
+| `data_exporter/` | Data export functionality |
+| `generic/` | Shared enums, events, and state machine utilities |
+| `importer/` | Data import functionality |
+| `InvenTree/` | Core configuration (settings, URLs, middleware) |
+| `machine/` | Support for external machines and devices |
+| `order/` | Purchase orders and sales orders |
+| `part/` | Parts catalogue and categories |
+| `stock/` | Stock items and locations |
+| `report/` | Report templates and generation |
+| `plugin/` | Plugin system |
+| `users/` | User accounts and permissions |
+| `web/` | Serves the React frontend static build to Django |
+
+### Frontend layout
+
+```
+src/frontend/src/
+  components/   # Reusable React components
+  pages/        # Page-level route components
+  tables/       # Data table components
+  forms/        # Form components
+  hooks/        # Custom React hooks
+  states/       # Zustand global state
+  locales/      # i18n translation catalogues (Lingui)
+```
+
+## Development Setup
+
+The project uses [Invoke](https://www.pyinvoketasks.com/) (`tasks.py`) as the task runner.
 
 ```bash
-git clone https://github.com/inventree/InvenTree.git && cd InvenTree
-python3 -m venv env && source env/bin/activate
-pip install invoke && invoke
-pip install invoke && invoke setup-dev --tests
+# One-time setup: creates venv at dev/venv/, installs deps, sets up pre-commit hooks
+invoke dev.setup-dev
+
+# Apply database migrations (and detect/create new migration files if required)
+invoke migrate --detect
+
+# Create an admin account (required to log in)
+invoke superuser
+
+# Terminal 1 — Django dev server (port 8000)
+invoke dev.server
+
+# Terminal 2 — Vite dev server with HMR (port 5173)
+invoke dev.frontend-server
+
+# Terminal 3 (optional) — Background task worker
+invoke worker
 ```
 
-### Docker
+A VS Code Dev Container configuration is available at `.devcontainer/` and includes PostgreSQL 15 and Redis 7 sidecar services.
+
+To see all available tasks, run `invoke --list`.
+
+## Running Backend Tests
+
+Always pass `--keepdb` to backend test commands. It reuses the existing test database instead of rebuilding it from scratch on every run, which is significantly faster.
 
 ```bash
-git clone https://github.com/inventree/InvenTree.git && cd InvenTree
-docker compose run inventree-dev-server invoke install
-docker compose run inventree-dev-server invoke setup-test --dev
-docker compose up -d
+# All backend tests
+invoke dev.test --keepdb
+
+# Specific test module
+invoke dev.test --keepdb --runtest=company.test_api
+
+# With coverage
+invoke dev.test --keepdb --coverage
+
+# Migration tests only (skip --keepdb here — migrations must run against a fresh DB)
+invoke dev.test --migrations
 ```
 
-Read the [InvenTree setup documentation](https://docs.inventree.org/en/latest/start/intro/) for a complete installation reference guide.
+## Running Frontend Tests
 
-### Setup Devtools
-
-Run the following command to set up all toolsets for development.
+Frontend tests use [Playwright](https://playwright.dev/) and target Chromium and Firefox. The test runner automatically starts the Vite dev server (port 5173), the Django backend (port 8000), and the background worker — no manual server startup is needed.
 
 ```bash
-invoke setup-dev
+# Open Playwright's interactive UI (recommended for local development)
+invoke dev.frontend-test
+
+# Run tests in headless mode from the frontend directory
+cd src/frontend && npx playwright test
+
+# Run a specific test file
+cd src/frontend && npx playwright test tests/pui_login.spec.ts
+
+# Run tests in a specific browser only
+cd src/frontend && npx playwright test --project=chromium
 ```
 
-*We recommend you run this command before starting to contribute. This will install and set up `pre-commit` to run some checks before each commit and help reduce errors.*
+Test files live in `src/frontend/tests/` and follow the `pui_*.spec.ts` naming convention.
 
-## Branches and Versioning
+Locally, tests run with a single worker (required for Vite HMR compatibility). In CI they run with multiple workers against a production build for speed.
 
-InvenTree roughly follow the [GitLab flow](https://docs.gitlab.com/ee/topics/gitlab_flow.html) branching style, to allow simple management of multiple tagged releases, short-lived branches, and development on the main branch.
+## Code Style and Linting
 
-### Version Numbering
+All formatting and linting runs automatically on commit via pre-commit hooks. Never skip them.
 
-InvenTree version numbering follows the [semantic versioning](https://semver.org/) specification.
+### Python (Backend)
 
-### Master Branch
+Tool: **Ruff** (replaces Black, isort, flake8, and others).
 
-The HEAD of the "main" or "master" branch of InvenTree represents the current "latest" state of code development.
-
-- All feature branches are merged into master
-- All bug fixes are merged into master
-
-**No pushing to master:** New features must be submitted as a pull request from a separate branch (one branch per feature).
-
-### Feature Branches
-
-Feature branches should be branched *from* the *master* branch.
-
-- One major feature per branch / pull request
-- Feature pull requests are merged back *into* the master branch
-- Features *may* also be merged into a release candidate branch
-
-### Stable Branch
-
-The HEAD of the "stable" branch represents the latest stable release code.
-
-- Versioned releases are merged into the "stable" branch
-- Bug fix branches are made *from* the "stable" branch
-
-#### Release Candidate Branches
-
-- Release candidate branches are made from master, and merged into stable.
-- RC branches are targeted at a major/minor version e.g. "0.5"
-- When a release candidate branch is merged into *stable*, the release is tagged
-
-#### Bugfix Branches
-
-- If a bug is discovered in a tagged release version of InvenTree, a "bugfix" or "hotfix" branch should be made *from* that tagged release
-- When approved, the branch is merged back *into* stable, with an incremented PATCH number (e.g. 0.4.1 -> 0.4.2)
-- The bugfix *must* also be cherry picked into the *master* branch.
-
-## Environment
-### Target version
-We are currently targeting:
-| Name | Minimum version | Note |
-|---|---| --- |
-| Python | 3.9 | |
-| Django | 3.2 | |
-| Node | 18 | Only needed for frontend development |
-
-### Auto creating updates
-The following tools can be used to auto-upgrade syntax that was depreciated in new versions:
 ```bash
-pip install pyupgrade
-pip install django-upgrade
+ruff check src/backend/         # Lint
+ruff format src/backend/        # Format
 ```
 
-To update the codebase run the following script.
+- Google-style docstrings enforced
+- Enabled rule sets: A, B, C, D, F, I, N, SIM, PIE, PLE, PLW, RUF, UP, W
+- Type checking: `ty` (configured in `pyproject.toml`)
+
+### Django Templates
+
+Tool: **djLint**
+
 ```bash
-pyupgrade `find . -name "*.py"`
-django-upgrade --target-version 3.2 `find . -name "*.py"`
+djlint src/backend/ --check
 ```
 
-## Credits
-If you add any new dependencies / libraries, they need to be added to [the docs](https://github.com/inventree/inventree/blob/master/docs/docs/credits.md). Please try to do that as timely as possible.
+### JavaScript / TypeScript (Frontend)
 
+Tool: **Biome** (replaces ESLint + Prettier).
 
-## Migration Files
-
-Any required migration files **must** be included in the commit, or the pull-request will be rejected. If you change the underlying database schema, make sure you run `invoke migrate` and commit the migration files before submitting the PR.
-
-*Note: A github action checks for unstaged migration files and will reject the PR if it finds any!*
-
-## Unit Testing
-
-Any new code should be covered by unit tests - a submitted PR may not be accepted if the code coverage for any new features is insufficient, or the overall code coverage is decreased.
-
-The InvenTree code base makes use of [GitHub actions](https://github.com/features/actions) to run a suite of automated tests against the code base every time a new pull request is received. These actions include (but are not limited to):
-
-- Checking Python and Javascript code against standard style guides
-- Running unit test suite
-- Automated building and pushing of docker images
-- Generating translation files
-
-The various github actions can be found in the `./github/workflows` directory
-
-### Run tests locally
-
-To run test locally, use:
-```
-invoke test
-```
-
-To run only partial tests, for example for a module use:
-```
-invoke test --runtest order
-```
-
-To see all the available options:
-
-```
-invoke test --help
-```
-
-## Code Style
-
-Code style is automatically checked as part of the project's CI pipeline on GitHub. This means that any pull requests which do not conform to the style guidelines will fail CI checks.
-
-### Backend Code
-
-Backend code (Python) is checked against the [PEP style guidelines](https://peps.python.org/pep-0008/). Please write docstrings for each function and class - we follow the [google doc-style](https://google.github.io/styleguide/pyguide.html#38-comments-and-docstrings) for python.
-
-### Frontend Code
-
-Frontend code (Javascript) is checked using [eslint](https://eslint.org/). While docstrings are not enforced for front-end code, good code documentation is encouraged!
-
-### Running Checks Locally
-
-If you have followed the setup devtools procedure, then code style checking is performend automatically whenever you commit changes to the code.
-
-### Django templates
-
-Django are checked by [djlint](https://github.com/Riverside-Healthcare/djlint) through pre-commit.
-
-The following rules out of the [default set](https://djlint.com/docs/linter/) are not applied:
 ```bash
-D018: (Django) Internal links should use the { % url ... % } pattern
-H006: Img tag should have height and width attributes
-H008: Attributes should be double quoted
-H021: Inline styles should be avoided
-H023: Do not use entity references
-H025: Tag seems to be an orphan
-H030: Consider adding a meta description
-H031: Consider adding meta keywords
-T002: Double quotes should be used in tags
+cd src/frontend
+yarn biome check .      # Lint + format check
+yarn biome format .     # Format only
 ```
 
+- Single quotes, space indentation
+- `noUnusedImports` is an error
 
-## Documentation
+## Making Changes
 
-New features or updates to existing features should be accompanied by user documentation.
+### Backend
 
-## Translations
+- Each Django app has its own `models.py`, `serializers.py`, `views.py`, `urls.py`, and `filters.py`.
+- API endpoints use Django REST Framework; document them with drf-spectacular decorators.
+- After changing models, create a migration: `invoke dev.makemigrations`.
+- Tests live in `test_*.py` files within each app directory.
+- Background tasks go through Django-Q2; define them in the app's `tasks.py`.
 
-Any user-facing strings *must* be passed through the translation engine.
+### Frontend
 
-- InvenTree code is written in English
-- User translatable strings are provided in English as the primary language
-- Secondary language translations are provided [via Crowdin](https://crowdin.com/project/inventree)
+- Pages register themselves in `src/frontend/src/router.tsx`.
+- Server state fetching uses TanStack Query (React Query); avoid raw `useEffect` for data fetching.
+- Global UI state uses Zustand stores in `states/`.
+- UI components come from Mantine 9.x; use the Mantine component library before writing custom CSS.
+- Add i18n strings with Lingui (`t` macro / `Trans` component); run `invoke int.frontend-trans` to extract from source and compile. (`invoke dev.translate` is for the full translation pipeline and is not intended for local use.)
+- Playwright tests live in `src/frontend/tests/`.
 
-*Note: Translation files are updated via GitHub actions - you do not need to compile translations files before submitting a pull request!*
+### Dependencies
 
-### Python Code
+**Python:** Add packages to `src/backend/requirements.in` (or `requirements-dev.in` for dev-only tools). The pre-commit hook runs `pip-compile` automatically on commit to regenerate `requirements.txt`. Never edit `requirements.txt` directly.
 
-For strings exposed via Python code, use the following format:
+**Frontend:** Add packages with `yarn add <package>` from `src/frontend/`.
 
-```python
-from django.utils.translation import gettext_lazy as _
+### Migrations
 
-user_facing_string = _('This string will be exposed to the translation engine!')
-```
+- Never edit existing migration files; always generate new ones.
+- Keep migrations reversible where possible.
+- Migration tests run in CI under the tag `migration_test`.
 
-### Templated Strings
+## CI / CD
 
-HTML and javascript files are passed through the django templating engine. Translatable strings are implemented as follows:
+GitHub Actions workflows live in `.github/workflows/`. Key workflows:
 
-```html
-{ % load i18n % }
+| Workflow | Purpose |
+|----------|---------|
+| `qc_checks.yaml` | Lint, type-check, backend tests, API schema |
+| `frontend.yaml` | Playwright E2E tests, frontend build |
+| `docker.yaml` | Docker image builds |
+| `translations.yaml` | Crowdin i18n sync |
 
-<span>{ % trans "This string will be translated" % } - this string will not!</span>
-```
+CI uses path-based filtering — only affected jobs run per PR. Coverage tracked via Codecov; quality analysis via SonarCloud.
 
-## Github use
+## Key Conventions
 
-### Tags
+- **REST API versioning:** Endpoint changes must not break the published API schema. Run `invoke dev.schema` and check the diff before opening a PR.
+- **Plugin safety:** The plugin system (`plugin/`) is a public extension point; avoid breaking its interfaces.
+- **No hardcoded secrets:** gitleaks runs in pre-commit and CI — any credential-shaped string will block merges.
+- **Database portability:** Code must work on PostgreSQL, MySQL/MariaDB, and SQLite. Avoid database-specific SQL or ORM features.
+- **Frontend translations:** Every user-visible string must be wrapped in a Lingui `t` macro or `<Trans>` component.
+- **Test tagging:** Tag slow or special tests (`@tag('migration_test')`, `@tag('performance_test')`) so CI can filter them selectively.
 
-The tags describe issues and PRs in multiple areas:
+---
 
-| Area | Name | Description |
-| --- | --- | --- |
-| Triage Labels |  |  |
-|  | triage:not-checked | Item was not checked by the core team  |
-|  | triage:not-approved | Item is not green-light by maintainer |
-| Type Labels |  |  |
-|  | breaking | Indicates a major update or change which breaks compatibility |
-|  | bug | Identifies a bug which needs to be addressed |
-|  | dependency | Relates to a project dependency |
-|  | duplicate | Duplicate of another issue or PR |
-|  | enhancement | This is an suggested enhancement, extending the functionality of an existing feature |
-|  | experimental | This is a new *experimental* feature which needs to be enabled manually |
-|  | feature | This is a new feature, introducing novel functionality |
-|  | help wanted | Assistance required |
-|  | invalid | This issue or PR is considered invalid |
-|  | inactive | Indicates lack of activity |
-|  | migration | Database migration, requires special attention |
-|  | question | This is a question |
-|  | roadmap | This is a roadmap feature with no immediate plans for implementation |
-|  | security | Relates to a security issue |
-|  | starter | Good issue for a developer new to the project |
-|  | wontfix | No work will be done against this issue or PR |
-| Feature Labels |  |  |
-|  | API | Relates to the API |
-|  | barcode | Barcode scanning and integration |
-|  | build | Build orders |
-|  | importer | Data importing and processing |
-|  | order | Purchase order and sales orders |
-|  | part | Parts |
-|  | plugin | Plugin ecosystem |
-|  | pricing | Pricing functionality |
-|  | report | Report generation |
-|  | stock | Stock item management |
-|  | user interface | User interface |
-| Ecosystem Labels |  |  |
-|  | backport | Tags that the issue will be backported to a stable branch as a bug-fix |
-|  | demo | Relates to the InvenTree demo server or dataset |
-|  | docker | Docker / docker-compose |
-|  | CI | CI / unit testing ecosystem |
-|  | refactor | Refactoring existing code |
-|  | setup | Relates to the InvenTree setup / installation process |
+Refer to our [contribution guidelines](https://docs.inventree.org/en/latest/develop/contributing/) for more information!

Dockerfile

@@ -1,173 +0,0 @@
-# The InvenTree dockerfile provides two build targets:
-#
-# production:
-# - Required files are copied into the image
-# - Runs InvenTree web server under gunicorn
-#
-# dev:
-# - Expects source directories to be loaded as a run-time volume
-# - Runs InvenTree web server under django development server
-# - Monitors source files for any changes, and live-reloads server
-
-ARG base_image=python:3.10-alpine3.18
-FROM ${base_image} as inventree_base
-
-# Build arguments for this image
-ARG commit_hash=""
-ARG commit_date=""
-ARG commit_tag=""
-
-ENV PYTHONUNBUFFERED 1
-ENV PIP_DISABLE_PIP_VERSION_CHECK 1
-ENV INVOKE_RUN_SHELL="/bin/ash"
-
-ENV INVENTREE_LOG_LEVEL="WARNING"
-ENV INVENTREE_DOCKER="true"
-
-# InvenTree paths
-ENV INVENTREE_HOME="/home/inventree"
-ENV INVENTREE_MNG_DIR="${INVENTREE_HOME}/InvenTree"
-ENV INVENTREE_DATA_DIR="${INVENTREE_HOME}/data"
-ENV INVENTREE_STATIC_ROOT="${INVENTREE_DATA_DIR}/static"
-ENV INVENTREE_MEDIA_ROOT="${INVENTREE_DATA_DIR}/media"
-ENV INVENTREE_BACKUP_DIR="${INVENTREE_DATA_DIR}/backup"
-ENV INVENTREE_PLUGIN_DIR="${INVENTREE_DATA_DIR}/plugins"
-
-# InvenTree configuration files
-ENV INVENTREE_CONFIG_FILE="${INVENTREE_DATA_DIR}/config.yaml"
-ENV INVENTREE_SECRET_KEY_FILE="${INVENTREE_DATA_DIR}/secret_key.txt"
-ENV INVENTREE_PLUGIN_FILE="${INVENTREE_DATA_DIR}/plugins.txt"
-
-# Worker configuration (can be altered by user)
-ENV INVENTREE_GUNICORN_WORKERS="4"
-ENV INVENTREE_BACKGROUND_WORKERS="4"
-
-# Default web server address:port
-ENV INVENTREE_WEB_ADDR=0.0.0.0
-ENV INVENTREE_WEB_PORT=8000
-
-LABEL org.label-schema.schema-version="1.0" \
-      org.label-schema.build-date=${DATE} \
-      org.label-schema.vendor="inventree" \
-      org.label-schema.name="inventree/inventree" \
-      org.label-schema.url="https://hub.docker.com/r/inventree/inventree" \
-      org.label-schema.vcs-url="https://github.com/inventree/InvenTree.git" \
-      org.label-schema.vcs-ref=${commit_tag}
-
-# Install required system level packages
-RUN apk add --no-cache \
-    git gettext py-cryptography \
-    # Image format support
-    libjpeg libwebp zlib \
-    # Weasyprint requirements : https://doc.courtbouillon.org/weasyprint/stable/first_steps.html#alpine-3-12
-    py3-pip py3-pillow py3-cffi py3-brotli pango poppler-utils openldap \
-    # SQLite support
-    sqlite \
-    # PostgreSQL support
-    postgresql-libs postgresql-client \
-    # MySQL / MariaDB support
-    mariadb-connector-c-dev mariadb-client && \
-    # fonts
-    apk --update --upgrade --no-cache add fontconfig ttf-freefont font-noto terminus-font && fc-cache -f
-
-EXPOSE 8000
-
-RUN mkdir -p ${INVENTREE_HOME}
-WORKDIR ${INVENTREE_HOME}
-
-COPY ./docker/requirements.txt base_requirements.txt
-COPY ./requirements.txt ./
-COPY ./docker/install_build_packages.sh .
-RUN chmod +x install_build_packages.sh
-
-# For ARMv7 architecture, add the piwheels repo (for cryptography library)
-# Otherwise, we have to build from source, which is difficult
-# Ref: https://github.com/inventree/InvenTree/pull/4598
-RUN if [ `apk --print-arch` = "armv7" ]; then \
-    printf "[global]\nextra-index-url=https://www.piwheels.org/simple\n" > /etc/pip.conf ; \
-    fi
-
-COPY tasks.py docker/gunicorn.conf.py docker/init.sh ./
-RUN chmod +x init.sh
-
-ENTRYPOINT ["/bin/sh", "./init.sh"]
-
-FROM inventree_base as prebuild
-
-ENV PATH=/root/.local/bin:$PATH
-RUN ./install_build_packages.sh --no-cache --virtual .build-deps && \
-    pip install --user -r base_requirements.txt -r requirements.txt --no-cache-dir && \
-    apk --purge del .build-deps
-
-# Frontend builder image:
-FROM prebuild as frontend
-
-RUN apk add --no-cache --update nodejs npm && npm install -g yarn
-RUN yarn config set network-timeout 600000 -g
-COPY InvenTree ${INVENTREE_HOME}/InvenTree
-COPY src ${INVENTREE_HOME}/src
-COPY tasks.py ${INVENTREE_HOME}/tasks.py
-RUN cd ${INVENTREE_HOME}/InvenTree && inv frontend-compile
-
-# InvenTree production image:
-# - Copies required files from local directory
-# - Starts a gunicorn webserver
-FROM inventree_base as production
-
-ENV INVENTREE_DEBUG=False
-
-# As .git directory is not available in production image, we pass the commit information via ENV
-ENV INVENTREE_COMMIT_HASH="${commit_hash}"
-ENV INVENTREE_COMMIT_DATE="${commit_date}"
-
-# use dependencies and compiled wheels from the prebuild image
-ENV PATH=/root/.local/bin:$PATH
-COPY --from=prebuild /root/.local /root/.local
-
-# Copy source code
-COPY InvenTree ./InvenTree
-COPY --from=frontend ${INVENTREE_HOME}/InvenTree/web/static/web ./InvenTree/web/static/web
-
-# Launch the production server
-# TODO: Work out why environment variables cannot be interpolated in this command
-# TODO: e.g. -b ${INVENTREE_WEB_ADDR}:${INVENTREE_WEB_PORT} fails here
-CMD gunicorn -c ./gunicorn.conf.py InvenTree.wsgi -b 0.0.0.0:8000 --chdir ./InvenTree
-
-FROM inventree_base as dev
-
-# Vite server (for local frontend development)
-EXPOSE 5173
-
-# Install packages required for building python packages
-RUN ./install_build_packages.sh
-
-RUN pip install -r base_requirements.txt --no-cache-dir
-
-# Install nodejs / npm / yarn
-
-RUN apk add --no-cache --update nodejs npm && npm install -g yarn
-RUN yarn config set network-timeout 600000 -g
-
-# The development image requires the source code to be mounted to /home/inventree/
-# So from here, we don't actually "do" anything, apart from some file management
-
-ENV INVENTREE_DEBUG=True
-
-# Location for python virtual environment
-# If the INVENTREE_PY_ENV variable is set, the entrypoint script will use it!
-ENV INVENTREE_PY_ENV="${INVENTREE_DATA_DIR}/env"
-
-WORKDIR ${INVENTREE_HOME}
-
-# Entrypoint ensures that we are running in the python virtual environment
-ENTRYPOINT ["/bin/ash", "./docker/init.sh"]
-
-# Launch the development server
-CMD ["invoke", "server", "-a", "${INVENTREE_WEB_ADDR}:${INVENTREE_WEB_PORT}"]
-
-# Image target for devcontainer
-FROM dev as devcontainer
-
-ARG workspace="/workspaces/InvenTree"
-
-WORKDIR ${WORKSPACE}

InvenTree/InvenTree/admin.py

@@ -1,102 +0,0 @@
-"""Admin classes"""
-
-from django.contrib import admin
-from django.http.request import HttpRequest
-
-from djmoney.contrib.exchange.admin import RateAdmin
-from djmoney.contrib.exchange.models import Rate
-from import_export.exceptions import ImportExportError
-from import_export.resources import ModelResource
-
-
-class InvenTreeResource(ModelResource):
-    """Custom subclass of the ModelResource class provided by django-import-export"
-
-    Ensures that exported data are escaped to prevent malicious formula injection.
-    Ref: https://owasp.org/www-community/attacks/CSV_Injection
-    """
-
-    MAX_IMPORT_ROWS = 1000
-    MAX_IMPORT_COLS = 100
-
-    # List of fields which should be converted to empty strings if they are null
-    CONVERT_NULL_FIELDS = []
-
-    def import_data_inner(
-        self,
-        dataset,
-        dry_run,
-        raise_errors,
-        using_transactions,
-        collect_failed_rows,
-        rollback_on_validation_errors=None,
-        **kwargs
-    ):
-        """Override the default import_data_inner function to provide better error handling"""
-        if len(dataset) > self.MAX_IMPORT_ROWS:
-            raise ImportExportError(f"Dataset contains too many rows (max {self.MAX_IMPORT_ROWS})")
-
-        if len(dataset.headers) > self.MAX_IMPORT_COLS:
-            raise ImportExportError(f"Dataset contains too many columns (max {self.MAX_IMPORT_COLS})")
-
-        return super().import_data_inner(
-            dataset,
-            dry_run,
-            raise_errors,
-            using_transactions,
-            collect_failed_rows,
-            rollback_on_validation_errors=rollback_on_validation_errors,
-            **kwargs
-        )
-
-    def export_resource(self, obj):
-        """Custom function to override default row export behavior.
-
-        Specifically, strip illegal leading characters to prevent formula injection
-        """
-        row = super().export_resource(obj)
-
-        illegal_start_vals = ['@', '=', '+', '-', '@', '\t', '\r', '\n']
-
-        for idx, val in enumerate(row):
-            if type(val) is str:
-                val = val.strip()
-
-                # If the value starts with certain 'suspicious' values, remove it!
-                while len(val) > 0 and val[0] in illegal_start_vals:
-                    # Remove the first character
-                    val = val[1:]
-
-                row[idx] = val
-
-        return row
-
-    def get_fields(self, **kwargs):
-        """Return fields, with some common exclusions"""
-        fields = super().get_fields(**kwargs)
-
-        fields_to_exclude = [
-            'metadata',
-            'lft', 'rght', 'tree_id', 'level',
-        ]
-
-        return [f for f in fields if f.column_name not in fields_to_exclude]
-
-    def before_import_row(self, row, row_number=None, **kwargs):
-        """Run custom code before importing each row"""
-
-        for field in self.CONVERT_NULL_FIELDS:
-            if field in row and row[field] is None:
-                row[field] = ''
-
-
-class CustomRateAdmin(RateAdmin):
-    """Admin interface for the Rate class"""
-
-    def has_add_permission(self, request: HttpRequest) -> bool:
-        """Disable the 'add' permission for Rate objects"""
-        return False
-
-
-admin.site.unregister(Rate)
-admin.site.register(Rate, CustomRateAdmin)

InvenTree/InvenTree/api.py

@@ -1,459 +0,0 @@
-"""Main JSON interface views."""
-
-from django.conf import settings
-from django.db import transaction
-from django.http import JsonResponse
-from django.utils.translation import gettext_lazy as _
-
-from django_q.models import OrmQ
-from drf_spectacular.utils import OpenApiResponse, extend_schema
-from rest_framework import permissions, serializers
-from rest_framework.response import Response
-from rest_framework.serializers import ValidationError
-from rest_framework.views import APIView
-
-import InvenTree.version
-import users.models
-from InvenTree.filters import SEARCH_ORDER_FILTER
-from InvenTree.mixins import ListCreateAPI
-from InvenTree.permissions import RolePermission
-from part.templatetags.inventree_extras import plugins_info
-from plugin.serializers import MetadataSerializer
-from users.models import ApiToken
-
-from .email import is_email_configured
-from .mixins import ListAPI, RetrieveUpdateAPI
-from .status import check_system_health, is_worker_running
-from .version import inventreeApiText
-from .views import AjaxView
-
-
-class VersionView(APIView):
-    """Simple JSON endpoint for InvenTree version information."""
-
-    permission_classes = [
-        permissions.IsAdminUser,
-    ]
-
-    def get(self, request, *args, **kwargs):
-        """Return information about the InvenTree server."""
-        return JsonResponse({
-            'dev': InvenTree.version.isInvenTreeDevelopmentVersion(),
-            'up_to_date': InvenTree.version.isInvenTreeUpToDate(),
-            'version': {
-                'server': InvenTree.version.inventreeVersion(),
-                'api': InvenTree.version.inventreeApiVersion(),
-                'commit_hash': InvenTree.version.inventreeCommitHash(),
-                'commit_date': InvenTree.version.inventreeCommitDate(),
-                'commit_branch': InvenTree.version.inventreeBranch(),
-                'python': InvenTree.version.inventreePythonVersion(),
-                'django': InvenTree.version.inventreeDjangoVersion()
-            },
-            'links': {
-                'doc': InvenTree.version.inventreeDocUrl(),
-                'code': InvenTree.version.inventreeGithubUrl(),
-                'credit': InvenTree.version.inventreeCreditsUrl(),
-                'app': InvenTree.version.inventreeAppUrl(),
-                'bug': f'{InvenTree.version.inventreeGithubUrl()}/issues'
-            }
-        })
-
-
-class VersionSerializer(serializers.Serializer):
-    """Serializer for a single version."""
-    version = serializers.CharField()
-    date = serializers.CharField()
-    gh = serializers.CharField()
-    text = serializers.CharField()
-    latest = serializers.BooleanField()
-
-    class Meta:
-        """Meta class for VersionSerializer."""
-        fields = ['version', 'date', 'gh', 'text', 'latest']
-
-
-class VersionApiSerializer(serializers.Serializer):
-    """Serializer for the version api endpoint."""
-    VersionSerializer(many=True)
-
-
-class VersionTextView(ListAPI):
-    """Simple JSON endpoint for InvenTree version text."""
-    permission_classes = [permissions.IsAdminUser]
-
-    @extend_schema(responses={200: OpenApiResponse(response=VersionApiSerializer)})
-    def list(self, request, *args, **kwargs):
-        """Return information about the InvenTree server."""
-        return JsonResponse(inventreeApiText())
-
-
-class InfoView(AjaxView):
-    """Simple JSON endpoint for InvenTree information.
-
-    Use to confirm that the server is running, etc.
-    """
-
-    permission_classes = [permissions.AllowAny]
-
-    def worker_pending_tasks(self):
-        """Return the current number of outstanding background tasks"""
-        return OrmQ.objects.count()
-
-    def get(self, request, *args, **kwargs):
-        """Serve current server information."""
-        is_staff = request.user.is_staff
-        if not is_staff and request.user.is_anonymous:
-            # Might be Token auth - check if so
-            is_staff = self.check_auth_header(request)
-
-        data = {
-            'server': 'InvenTree',
-            'version': InvenTree.version.inventreeVersion(),
-            'instance': InvenTree.version.inventreeInstanceName(),
-            'apiVersion': InvenTree.version.inventreeApiVersion(),
-            'worker_running': is_worker_running(),
-            'worker_pending_tasks': self.worker_pending_tasks(),
-            'plugins_enabled': settings.PLUGINS_ENABLED,
-            'active_plugins': plugins_info(),
-            'email_configured': is_email_configured(),
-            'debug_mode': settings.DEBUG,
-            'docker_mode': settings.DOCKER,
-            'system_health': check_system_health() if is_staff else None,
-            'database': InvenTree.version.inventreeDatabase()if is_staff else None,
-            'platform': InvenTree.version.inventreePlatform() if is_staff else None,
-            'installer': InvenTree.version.inventreeInstaller() if is_staff else None,
-            'target': InvenTree.version.inventreeTarget()if is_staff else None,
-        }
-
-        return JsonResponse(data)
-
-    def check_auth_header(self, request):
-        """Check if user is authenticated via a token in the header."""
-        # TODO @matmair: remove after refacgtor of Token check is done
-        headers = request.headers.get('Authorization', request.headers.get('authorization'))
-        if not headers:
-            return False
-
-        auth = headers.strip()
-        if not (auth.lower().startswith('token') and len(auth.split()) == 2):
-            return False
-
-        token_key = auth.split()[1]
-        try:
-            token = ApiToken.objects.get(key=token_key)
-            if token.active and token.user and token.user.is_staff:
-                return True
-        except ApiToken.DoesNotExist:
-            pass
-        return False
-
-
-class NotFoundView(AjaxView):
-    """Simple JSON view when accessing an invalid API view."""
-
-    permission_classes = [permissions.AllowAny]
-
-    def not_found(self, request):
-        """Return a 404 error"""
-        return JsonResponse(
-            {
-                'detail': _('API endpoint not found'),
-                'url': request.build_absolute_uri(),
-            },
-            status=404
-        )
-
-    def options(self, request, *args, **kwargs):
-        """Return 404"""
-        return self.not_found(request)
-
-    def get(self, request, *args, **kwargs):
-        """Return 404"""
-        return self.not_found(request)
-
-    def post(self, request, *args, **kwargs):
-        """Return 404"""
-        return self.not_found(request)
-
-    def patch(self, request, *args, **kwargs):
-        """Return 404"""
-        return self.not_found(request)
-
-    def put(self, request, *args, **kwargs):
-        """Return 404"""
-        return self.not_found(request)
-
-    def delete(self, request, *args, **kwargs):
-        """Return 404"""
-        return self.not_found(request)
-
-
-class BulkDeleteMixin:
-    """Mixin class for enabling 'bulk delete' operations for various models.
-
-    Bulk delete allows for multiple items to be deleted in a single API query,
-    rather than using multiple API calls to the various detail endpoints.
-
-    This is implemented for two major reasons:
-    - Atomicity (guaranteed that either *all* items are deleted, or *none*)
-    - Speed (single API call and DB query)
-    """
-
-    def filter_delete_queryset(self, queryset, request):
-        """Provide custom filtering for the queryset *before* it is deleted"""
-        return queryset
-
-    def delete(self, request, *args, **kwargs):
-        """Perform a DELETE operation against this list endpoint.
-
-        We expect a list of primary-key (ID) values to be supplied as a JSON object, e.g.
-        {
-            items: [4, 8, 15, 16, 23, 42]
-        }
-
-        """
-        model = self.serializer_class.Meta.model
-
-        # Extract the items from the request body
-        try:
-            items = request.data.getlist('items', None)
-        except AttributeError:
-            items = request.data.get('items', None)
-
-        # Extract the filters from the request body
-        try:
-            filters = request.data.getlist('filters', None)
-        except AttributeError:
-            filters = request.data.get('filters', None)
-
-        if not items and not filters:
-            raise ValidationError({
-                "non_field_errors": ["List of items or filters must be provided for bulk deletion"],
-            })
-
-        if items and type(items) is not list:
-            raise ValidationError({
-                "items": ["'items' must be supplied as a list object"]
-            })
-
-        if filters and type(filters) is not dict:
-            raise ValidationError({
-                "filters": ["'filters' must be supplied as a dict object"]
-            })
-
-        # Keep track of how many items we deleted
-        n_deleted = 0
-
-        with transaction.atomic():
-
-            # Start with *all* models and perform basic filtering
-            queryset = model.objects.all()
-            queryset = self.filter_delete_queryset(queryset, request)
-
-            # Filter by provided item ID values
-            if items:
-                queryset = queryset.filter(id__in=items)
-
-            # Filter by provided filters
-            if filters:
-                queryset = queryset.filter(**filters)
-
-            n_deleted = queryset.count()
-            queryset.delete()
-
-        return Response(
-            {
-                'success': f"Deleted {n_deleted} items",
-            },
-            status=204
-        )
-
-
-class ListCreateDestroyAPIView(BulkDeleteMixin, ListCreateAPI):
-    """Custom API endpoint which provides BulkDelete functionality in addition to List and Create"""
-    ...
-
-
-class APIDownloadMixin:
-    """Mixin for enabling a LIST endpoint to be downloaded a file.
-
-    To download the data, add the ?export=<fmt> to the query string.
-
-    The implementing class must provided a download_queryset method,
-    e.g.
-
-    def download_queryset(self, queryset, export_format):
-        dataset = StockItemResource().export(queryset=queryset)
-
-        filedata = dataset.export(export_format)
-
-        filename = 'InvenTree_Stocktake_{date}.{fmt}'.format(
-            date=datetime.now().strftime("%d-%b-%Y"),
-            fmt=export_format
-        )
-
-        return DownloadFile(filedata, filename)
-    """
-
-    def get(self, request, *args, **kwargs):
-        """Generic handler for a download request."""
-        export_format = request.query_params.get('export', None)
-
-        if export_format and export_format in ['csv', 'tsv', 'xls', 'xlsx']:
-            queryset = self.filter_queryset(self.get_queryset())
-            return self.download_queryset(queryset, export_format)
-        # Default to the parent class implementation
-        return super().get(request, *args, **kwargs)
-
-    def download_queryset(self, queryset, export_format):
-        """This function must be implemented to provide a downloadFile request."""
-        raise NotImplementedError("download_queryset method not implemented!")
-
-
-class AttachmentMixin:
-    """Mixin for creating attachment objects, and ensuring the user information is saved correctly."""
-
-    permission_classes = [
-        permissions.IsAuthenticated,
-        RolePermission,
-    ]
-
-    filter_backends = SEARCH_ORDER_FILTER
-
-    search_fields = [
-        'attachment',
-        'comment',
-        'link',
-    ]
-
-    def perform_create(self, serializer):
-        """Save the user information when a file is uploaded."""
-        attachment = serializer.save()
-        attachment.user = self.request.user
-        attachment.save()
-
-
-class APISearchView(APIView):
-    """A general-purpose 'search' API endpoint
-
-    Returns hits against a number of different models simultaneously,
-    to consolidate multiple API requests into a single query.
-
-    Is much more efficient and simplifies code!
-    """
-
-    permission_classes = [
-        permissions.IsAuthenticated,
-    ]
-
-    def get_result_types(self):
-        """Construct a list of search types we can return"""
-        import build.api
-        import company.api
-        import order.api
-        import part.api
-        import stock.api
-
-        return {
-            'build': build.api.BuildList,
-            'company': company.api.CompanyList,
-            'manufacturerpart': company.api.ManufacturerPartList,
-            'supplierpart': company.api.SupplierPartList,
-            'part': part.api.PartList,
-            'partcategory': part.api.CategoryList,
-            'purchaseorder': order.api.PurchaseOrderList,
-            'returnorder': order.api.ReturnOrderList,
-            'salesorder': order.api.SalesOrderList,
-            'stockitem': stock.api.StockList,
-            'stocklocation': stock.api.StockLocationList,
-        }
-
-    def post(self, request, *args, **kwargs):
-        """Perform search query against available models"""
-        data = request.data
-
-        results = {}
-
-        # These parameters are passed through to the individual queries, with optional default values
-        pass_through_params = {
-            'search': '',
-            'search_regex': False,
-            'search_whole': False,
-            'limit': 1,
-            'offset': 0,
-        }
-
-        if 'search' not in data:
-            raise ValidationError({
-                'search': 'Search term must be provided',
-            })
-
-        for key, cls in self.get_result_types().items():
-            # Only return results which are specifically requested
-            if key in data:
-
-                params = data[key]
-
-                for k, v in pass_through_params.items():
-                    params[k] = request.data.get(k, v)
-
-                # Enforce json encoding
-                params['format'] = 'json'
-
-                # Ignore if the params are wrong
-                if type(params) is not dict:
-                    continue
-
-                view = cls()
-
-                # Override regular query params with specific ones for this search request
-                request._request.GET = params
-                view.request = request
-                view.format_kwarg = 'format'
-
-                # Check permissions and update results dict with particular query
-                model = view.serializer_class.Meta.model
-                app_label = model._meta.app_label
-                model_name = model._meta.model_name
-                table = f'{app_label}_{model_name}'
-
-                try:
-                    if users.models.RuleSet.check_table_permission(request.user, table, 'view'):
-                        results[key] = view.list(request, *args, **kwargs).data
-                    else:
-                        results[key] = {
-                            'error': _('User does not have permission to view this model')
-                        }
-                except Exception as exc:
-                    results[key] = {
-                        'error': str(exc)
-                    }
-
-        return Response(results)
-
-
-class MetadataView(RetrieveUpdateAPI):
-    """Generic API endpoint for reading and editing metadata for a model"""
-
-    MODEL_REF = 'model'
-
-    def get_model_type(self):
-        """Return the model type associated with this API instance"""
-        model = self.kwargs.get(self.MODEL_REF, None)
-
-        if model is None:
-            raise ValidationError(f"MetadataView called without '{self.MODEL_REF}' parameter")
-
-        return model
-
-    def get_permission_model(self):
-        """Return the 'permission' model associated with this view"""
-        return self.get_model_type()
-
-    def get_queryset(self):
-        """Return the queryset for this endpoint"""
-        return self.get_model_type().objects.all()
-
-    def get_serializer(self, *args, **kwargs):
-        """Return MetadataSerializer instance"""
-        return MetadataSerializer(self.get_model_type(), *args, **kwargs)

InvenTree/InvenTree/api_version.py

@@ -1,567 +0,0 @@
-"""InvenTree API version information."""
-
-
-# InvenTree API version
-INVENTREE_API_VERSION = 160
-"""Increment this API version number whenever there is a significant change to the API that any clients need to know about."""
-
-INVENTREE_API_TEXT = """
-
-v160 -> 2023-012-11 : https://github.com/inventree/InvenTree/pull/6072
-    - Adds API endpoint for allocating stock items against a sales order via barcode scan
-
-v159 -> 2023-12-08 : https://github.com/inventree/InvenTree/pull/6056
-    - Adds API endpoint for reloading plugin registry
-
-v158 -> 2023-11-21 : https://github.com/inventree/InvenTree/pull/5953
-    - Adds API endpoint for listing all settings of a particular plugin
-    - Adds API endpoint for registry status (errors)
-
-v157 -> 2023-12-02 : https://github.com/inventree/InvenTree/pull/6021
-    - Add write-only "existing_image" field to Part API serializer
-
-v156 -> 2023-11-26 : https://github.com/inventree/InvenTree/pull/5982
-    - Add POST endpoint for report and label creation
-
-v155 -> 2023-11-24 : https://github.com/inventree/InvenTree/pull/5979
-    - Add "creation_date" field to Part instance serializer
-
-v154 -> 2023-11-21 : https://github.com/inventree/InvenTree/pull/5944
-    - Adds "responsible" field to the ProjectCode table
-
-v153 -> 2023-11-21 : https://github.com/inventree/InvenTree/pull/5956
-    - Adds override_min and override_max fields to part pricing API
-
-v152 -> 2023-11-20 : https://github.com/inventree/InvenTree/pull/5949
-    - Adds barcode support for manufacturerpart model
-    - Adds API endpoint for adding parts to purchase order using barcode scan
-
-v151 -> 2023-11-13 : https://github.com/inventree/InvenTree/pull/5906
-    - Allow user list API to be filtered by user active status
-    - Allow owner list API to be filtered by user active status
-
-v150 -> 2023-11-07: https://github.com/inventree/InvenTree/pull/5875
-    - Extended user API endpoints to enable ordering
-    - Extended user API endpoints to enable user role changes
-    - Added endpoint to create a new user
-
-v149 -> 2023-11-07 : https://github.com/inventree/InvenTree/pull/5876
-    - Add 'building' quantity to BomItem serializer
-    - Add extra ordering options for the BomItem list API
-
-v148 -> 2023-11-06 : https://github.com/inventree/InvenTree/pull/5872
-    - Allow "quantity" to be specified when installing an item into another item
-
-v147 -> 2023-11-04: https://github.com/inventree/InvenTree/pull/5860
-    - Adds "completed_lines" field to SalesOrder API endpoint
-    - Adds "completed_lines" field to PurchaseOrder API endpoint
-
-v146 -> 2023-11-02: https://github.com/inventree/InvenTree/pull/5822
-    - Extended SSO Provider endpoint to contain if a provider is configured
-    - Adds API endpoints for Email Address model
-
-v145 -> 2023-10-30: https://github.com/inventree/InvenTree/pull/5786
-    - Allow printing labels via POST including printing options in the body
-
-v144 -> 2023-10-23: https://github.com/inventree/InvenTree/pull/5811
-    - Adds version information API endpoint
-
-v143 -> 2023-10-29: https://github.com/inventree/InvenTree/pull/5810
-    - Extends the status endpoint to include information about system status and health
-
-v142 -> 2023-10-20: https://github.com/inventree/InvenTree/pull/5759
-    - Adds generic API endpoints for looking up status models
-
-v141 -> 2023-10-23 : https://github.com/inventree/InvenTree/pull/5774
-    - Changed 'part.responsible' from User to Owner
-
-v140 -> 2023-10-20 : https://github.com/inventree/InvenTree/pull/5664
-    - Expand API token functionality
-    - Multiple API tokens can be generated per user
-
-v139 -> 2023-10-11 : https://github.com/inventree/InvenTree/pull/5509
-    - Add new BarcodePOReceive endpoint to receive line items by scanning supplier barcodes
-
-v138 -> 2023-10-11 : https://github.com/inventree/InvenTree/pull/5679
-    - Settings keys are no longer case sensitive
-    - Include settings units in API serializer
-
-v137 -> 2023-10-04 : https://github.com/inventree/InvenTree/pull/5588
-    - Adds StockLocationType API endpoints
-    - Adds custom_icon, location_type to StockLocation endpoint
-
-v136 -> 2023-09-23 : https://github.com/inventree/InvenTree/pull/5595
-    - Adds structural to StockLocation and PartCategory tree endpoints
-
-v135 -> 2023-09-19 : https://github.com/inventree/InvenTree/pull/5569
-    - Adds location path detail to StockLocation and StockItem API endpoints
-    - Adds category path detail to PartCategory and Part API endpoints
-
-v134 -> 2023-09-11 : https://github.com/inventree/InvenTree/pull/5525
-    - Allow "Attachment" list endpoints to be searched by attachment, link and comment fields
-
-v133 -> 2023-09-08 : https://github.com/inventree/InvenTree/pull/5518
-    - Add extra optional fields which can be used for StockAdjustment endpoints
-
-v132 -> 2023-09-07 : https://github.com/inventree/InvenTree/pull/5515
-    - Add 'issued_by' filter to BuildOrder API list endpoint
-
-v131 -> 2023-08-09 : https://github.com/inventree/InvenTree/pull/5415
-    - Annotate 'available_variant_stock' to the SalesOrderLine serializer
-
-v130 -> 2023-07-14 : https://github.com/inventree/InvenTree/pull/5251
-    - Refactor label printing interface
-
-v129 -> 2023-07-06 : https://github.com/inventree/InvenTree/pull/5189
-    - Changes 'serial_lte' and 'serial_gte' stock filters to point to 'serial_int' field
-
-v128 -> 2023-07-06 : https://github.com/inventree/InvenTree/pull/5186
-    - Adds 'available' filter for BuildLine API endpoint
-
-v127 -> 2023-06-24 : https://github.com/inventree/InvenTree/pull/5094
-    - Enhancements for the PartParameter API endpoints
-
-v126 -> 2023-06-19 : https://github.com/inventree/InvenTree/pull/5075
-    - Adds API endpoint for setting the "category" for multiple parts simultaneously
-
-v125 -> 2023-06-17 : https://github.com/inventree/InvenTree/pull/5064
-    - Adds API endpoint for setting the "status" field for multiple stock items simultaneously
-
-v124 -> 2023-06-17 : https://github.com/inventree/InvenTree/pull/5057
-    - Add "created_before" and "created_after" filters to the Part API
-
-v123 -> 2023-06-15 : https://github.com/inventree/InvenTree/pull/5019
-    - Add Metadata to: Plugin Config
-
-v122 -> 2023-06-14 : https://github.com/inventree/InvenTree/pull/5034
-    - Adds new BuildLineLabel label type
-
-v121 -> 2023-06-14 : https://github.com/inventree/InvenTree/pull/4808
-    - Adds "ProjectCode" link to Build model
-
-v120 -> 2023-06-07 : https://github.com/inventree/InvenTree/pull/4855
-    - Major overhaul of the build order API
-    - Adds new BuildLine model
-
-v119 -> 2023-06-01 : https://github.com/inventree/InvenTree/pull/4898
-    - Add Metadata to:  Part test templates, Part parameters, Part category parameter templates, BOM item substitute, Related Parts, Stock item test result
-
-v118 -> 2023-06-01 : https://github.com/inventree/InvenTree/pull/4935
-    - Adds extra fields for the PartParameterTemplate model
-
-v117 -> 2023-05-22 : https://github.com/inventree/InvenTree/pull/4854
-    - Part.units model now supports physical units (e.g. "kg", "m", "mm", etc)
-    - Replaces SupplierPart "pack_size" field with "pack_quantity"
-    - New field supports physical units, and allows for conversion between compatible units
-
-v116 -> 2023-05-18 : https://github.com/inventree/InvenTree/pull/4823
-    - Updates to part parameter implementation, to use physical units
-
-v115 -> 2023-05-18 : https://github.com/inventree/InvenTree/pull/4846
-    - Adds ability to partially scrap a build output
-
-v114 -> 2023-05-16 : https://github.com/inventree/InvenTree/pull/4825
-    - Adds "delivery_date" to shipments
-
-v113 -> 2023-05-13 : https://github.com/inventree/InvenTree/pull/4800
-    - Adds API endpoints for scrapping a build output
-
-v112 -> 2023-05-13: https://github.com/inventree/InvenTree/pull/4741
-    - Adds flag use_pack_size to the stock addition API, which allows adding packs
-
-v111 -> 2023-05-02 : https://github.com/inventree/InvenTree/pull/4367
-    - Adds tags to the Part serializer
-    - Adds tags to the SupplierPart serializer
-    - Adds tags to the ManufacturerPart serializer
-    - Adds tags to the StockItem serializer
-    - Adds tags to the StockLocation serializer
-
-v110 -> 2023-04-26 : https://github.com/inventree/InvenTree/pull/4698
-    - Adds 'order_currency' field for PurchaseOrder / SalesOrder endpoints
-
-v109 -> 2023-04-19 : https://github.com/inventree/InvenTree/pull/4636
-    - Adds API endpoints for the "ProjectCode" model
-
-v108 -> 2023-04-17 : https://github.com/inventree/InvenTree/pull/4615
-    - Adds functionality to upload images for rendering in markdown notes
-
-v107 -> 2023-04-04 : https://github.com/inventree/InvenTree/pull/4575
-    - Adds barcode support for PurchaseOrder model
-    - Adds barcode support for ReturnOrder model
-    - Adds barcode support for SalesOrder model
-    - Adds barcode support for BuildOrder model
-
-v106 -> 2023-04-03 : https://github.com/inventree/InvenTree/pull/4566
-    - Adds 'search_regex' parameter to all searchable API endpoints
-
-v105 -> 2023-03-31 : https://github.com/inventree/InvenTree/pull/4543
-    - Adds API endpoints for status label information on various models
-
-v104 -> 2023-03-23 : https://github.com/inventree/InvenTree/pull/4488
-    - Adds various endpoints for new "ReturnOrder" models
-    - Adds various endpoints for new "ReturnOrderReport" templates
-    - Exposes API endpoints for "Contact" model
-
-v103 -> 2023-03-17 : https://github.com/inventree/InvenTree/pull/4410
-    - Add metadata to several more models
-
-v102 -> 2023-03-18 : https://github.com/inventree/InvenTree/pull/4505
-- Adds global search API endpoint for consolidated search results
-
-v101 -> 2023-03-07 : https://github.com/inventree/InvenTree/pull/4462
-    - Adds 'total_in_stock' to Part serializer, and supports API ordering
-
-v100 -> 2023-03-04 : https://github.com/inventree/InvenTree/pull/4452
-     - Adds bulk delete of PurchaseOrderLineItems to API
-
-v99 -> 2023-03-03 : https://github.com/inventree/InvenTree/pull/4445
-    - Adds sort by "responsible" to PurchaseOrderAPI
-
-v98 -> 2023-02-24 : https://github.com/inventree/InvenTree/pull/4408
-    - Adds "responsible" filter to Build API
-
-v97 -> 2023-02-20 : https://github.com/inventree/InvenTree/pull/4377
-    - Adds "external" attribute to StockLocation model
-
-v96 -> 2023-02-16 : https://github.com/inventree/InvenTree/pull/4345
-    - Adds stocktake report generation functionality
-
-v95 -> 2023-02-16 : https://github.com/inventree/InvenTree/pull/4346
-    - Adds "CompanyAttachment" model (and associated API endpoints)
-
-v94 -> 2023-02-10 : https://github.com/inventree/InvenTree/pull/4327
-    - Adds API endpoints for the "Group" auth model
-
-v93 -> 2023-02-03 : https://github.com/inventree/InvenTree/pull/4300
-    - Adds extra information to the currency exchange endpoint
-    - Adds API endpoint for manually updating exchange rates
-
-v92 -> 2023-02-02 : https://github.com/inventree/InvenTree/pull/4293
-    - Adds API endpoint for currency exchange information
-
-v91 -> 2023-01-31 : https://github.com/inventree/InvenTree/pull/4281
-    - Improves the API endpoint for creating new Part instances
-
-v90 -> 2023-01-25 : https://github.com/inventree/InvenTree/pull/4186/files
-    - Adds a dedicated endpoint to activate a plugin
-
-v89 -> 2023-01-25 : https://github.com/inventree/InvenTree/pull/4214
-    - Adds updated field to SupplierPart API
-    - Adds API date ordering for supplier part list
-
-v88 -> 2023-01-17: https://github.com/inventree/InvenTree/pull/4225
-    - Adds 'priority' field to Build model and api endpoints
-
-v87 -> 2023-01-04 : https://github.com/inventree/InvenTree/pull/4067
-    - Add API date filter for stock table on Expiry date
-
-v86 -> 2022-12-22 : https://github.com/inventree/InvenTree/pull/4069
-    - Adds API endpoints for part stocktake
-
-v85 -> 2022-12-21 : https://github.com/inventree/InvenTree/pull/3858
-    - Add endpoints serving ICS calendars for purchase and sales orders through API
-
-v84 -> 2022-12-21: https://github.com/inventree/InvenTree/pull/4083
-    - Add support for listing PO, BO, SO by their reference
-
-v83 -> 2022-11-19 : https://github.com/inventree/InvenTree/pull/3949
-    - Add support for structural Stock locations
-
-v82 -> 2022-11-16 : https://github.com/inventree/InvenTree/pull/3931
-    - Add support for structural Part categories
-
-v81 -> 2022-11-08 : https://github.com/inventree/InvenTree/pull/3710
-    - Adds cached pricing information to Part API
-    - Adds cached pricing information to BomItem API
-    - Allows Part and BomItem list endpoints to be filtered by 'has_pricing'
-    - Remove calculated 'price_string' values from API endpoints
-    - Allows PurchaseOrderLineItem API endpoint to be filtered by 'has_pricing'
-    - Allows SalesOrderLineItem API endpoint to be filtered by 'has_pricing'
-    - Allows SalesOrderLineItem API endpoint to be filtered by 'order_status'
-    - Adds more information to SupplierPriceBreak serializer
-
-v80 -> 2022-11-07 : https://github.com/inventree/InvenTree/pull/3906
-    - Adds 'barcode_hash' to Part API serializer
-    - Adds 'barcode_hash' to StockLocation API serializer
-    - Adds 'barcode_hash' to SupplierPart API serializer
-
-v79 -> 2022-11-03 : https://github.com/inventree/InvenTree/pull/3895
-    - Add metadata to Company
-
-v78 -> 2022-10-25 : https://github.com/inventree/InvenTree/pull/3854
-    - Make PartCategory to be filtered by name and description
-
-v77 -> 2022-10-12 : https://github.com/inventree/InvenTree/pull/3772
-    - Adds model permission checks for barcode assignment actions
-
-v76 -> 2022-09-10 : https://github.com/inventree/InvenTree/pull/3640
-    - Refactor of barcode data on the API
-    - StockItem.uid renamed to StockItem.barcode_hash
-
-v75 -> 2022-09-05 : https://github.com/inventree/InvenTree/pull/3644
-    - Adds "pack_size" attribute to SupplierPart API serializer
-
-v74 -> 2022-08-28 : https://github.com/inventree/InvenTree/pull/3615
-    - Add confirmation field for completing PurchaseOrder if the order has incomplete lines
-    - Add confirmation field for completing SalesOrder if the order has incomplete lines
-
-v73 -> 2022-08-24 : https://github.com/inventree/InvenTree/pull/3605
-    - Add 'description' field to PartParameterTemplate model
-
-v72 -> 2022-08-18 : https://github.com/inventree/InvenTree/pull/3567
-    - Allow PurchaseOrder to be duplicated via the API
-
-v71 -> 2022-08-18 : https://github.com/inventree/InvenTree/pull/3564
-    - Updates to the "part scheduling" API endpoint
-
-v70 -> 2022-08-02 : https://github.com/inventree/InvenTree/pull/3451
-    - Adds a 'depth' parameter to the PartCategory list API
-    - Adds a 'depth' parameter to the StockLocation list API
-
-v69 -> 2022-08-01 : https://github.com/inventree/InvenTree/pull/3443
-    - Updates the PartCategory list API:
-        - Improve query efficiency: O(n) becomes O(1)
-        - Rename 'parts' field to 'part_count'
-    - Updates the StockLocation list API:
-        - Improve query efficiency: O(n) becomes O(1)
-
-v68 -> 2022-07-27 : https://github.com/inventree/InvenTree/pull/3417
-    - Allows SupplierPart list to be filtered by SKU value
-    - Allows SupplierPart list to be filtered by MPN value
-
-v67 -> 2022-07-25 : https://github.com/inventree/InvenTree/pull/3395
-    - Adds a 'requirements' endpoint for Part instance
-    - Provides information on outstanding order requirements for a given part
-
-v66 -> 2022-07-24 : https://github.com/inventree/InvenTree/pull/3393
-    - Part images can now be downloaded from a remote URL via the API
-    - Company images can now be downloaded from a remote URL via the API
-
-v65 -> 2022-07-15 : https://github.com/inventree/InvenTree/pull/3335
-    - Annotates 'in_stock' quantity to the SupplierPart API
-
-v64 -> 2022-07-08 : https://github.com/inventree/InvenTree/pull/3310
-    - Annotate 'on_order' quantity to BOM list API
-    - Allow BOM List API endpoint to be filtered by "on_order" parameter
-
-v63 -> 2022-07-06 : https://github.com/inventree/InvenTree/pull/3301
-    - Allow BOM List API endpoint to be filtered by "available_stock" parameter
-
-v62 -> 2022-07-05 : https://github.com/inventree/InvenTree/pull/3296
-    - Allows search on BOM List API endpoint
-    - Allows ordering on BOM List API endpoint
-
-v61 -> 2022-06-12 : https://github.com/inventree/InvenTree/pull/3183
-    - Migrate the "Convert Stock Item" form class to use the API
-    - There is now an API endpoint for converting a stock item to a valid variant
-
-v60 -> 2022-06-08 : https://github.com/inventree/InvenTree/pull/3148
-    - Add availability data fields to the SupplierPart model
-
-v59 -> 2022-06-07 : https://github.com/inventree/InvenTree/pull/3154
-    - Adds further improvements to BulkDelete mixin class
-    - Fixes multiple bugs in custom OPTIONS metadata implementation
-    - Adds 'bulk delete' for Notifications
-
-v58 -> 2022-06-06 : https://github.com/inventree/InvenTree/pull/3146
-    - Adds a BulkDelete API mixin class for fast, safe deletion of multiple objects with a single API request
-
-v57 -> 2022-06-05 : https://github.com/inventree/InvenTree/pull/3130
-    - Transfer PartCategoryTemplateParameter actions to the API
-
-v56 -> 2022-06-02 : https://github.com/inventree/InvenTree/pull/3123
-    - Expose the PartParameterTemplate model to use the API
-
-v55 -> 2022-06-02 : https://github.com/inventree/InvenTree/pull/3120
-    - Converts the 'StockItemReturn' functionality to make use of the API
-
-v54 -> 2022-06-02 : https://github.com/inventree/InvenTree/pull/3117
-    - Adds 'available_stock' annotation on the SalesOrderLineItem API
-    - Adds (well, fixes) 'overdue' annotation on the SalesOrderLineItem API
-
-v53 -> 2022-06-01 : https://github.com/inventree/InvenTree/pull/3110
-    - Adds extra search fields to the BuildOrder list API endpoint
-
-v52 -> 2022-05-31 : https://github.com/inventree/InvenTree/pull/3103
-    - Allow part list API to be searched by supplier SKU
-
-v51 -> 2022-05-24 : https://github.com/inventree/InvenTree/pull/3058
-    - Adds new fields to the SalesOrderShipment model
-
-v50 -> 2022-05-18 : https://github.com/inventree/InvenTree/pull/2912
-    - Implement Attachments for manufacturer parts
-
-v49 -> 2022-05-09 : https://github.com/inventree/InvenTree/pull/2957
-    - Allows filtering of plugin list by 'active' status
-    - Allows filtering of plugin list by 'mixin' support
-    - Adds endpoint to "identify" or "locate" stock items and locations (using plugins)
-
-v48 -> 2022-05-12 : https://github.com/inventree/InvenTree/pull/2977
-    - Adds "export to file" functionality for PurchaseOrder API endpoint
-    - Adds "export to file" functionality for SalesOrder API endpoint
-    - Adds "export to file" functionality for BuildOrder API endpoint
-
-v47 -> 2022-05-10 : https://github.com/inventree/InvenTree/pull/2964
-    - Fixes barcode API error response when scanning a StockItem which does not exist
-    - Fixes barcode API error response when scanning a StockLocation which does not exist
-
-v46 -> 2022-05-09
-    - Fixes read permissions on settings API
-    - Allows non-staff users to read global settings via the API
-
-v45 -> 2022-05-08 : https://github.com/inventree/InvenTree/pull/2944
-    - Settings are now accessed via the API using their unique key, not their PK
-    - This allows the settings to be accessed without prior knowledge of the PK
-
-v44 -> 2022-05-04 : https://github.com/inventree/InvenTree/pull/2931
-    - Converting more server-side rendered forms to the API
-    - Exposes more core functionality to API endpoints
-
-v43 -> 2022-04-26 : https://github.com/inventree/InvenTree/pull/2875
-    - Adds API detail endpoint for PartSalePrice model
-    - Adds API detail endpoint for PartInternalPrice model
-
-v42 -> 2022-04-26 : https://github.com/inventree/InvenTree/pull/2833
-    - Adds variant stock information to the Part and BomItem serializers
-
-v41 -> 2022-04-26
-    - Fixes 'variant_of' filter for Part list endpoint
-
-v40 -> 2022-04-19
-    - Adds ability to filter StockItem list by "tracked" parameter
-        - This checks the serial number or batch code fields
-
-v39 -> 2022-04-18
-    - Adds ability to filter StockItem list by "has_batch" parameter
-
-v38 -> 2022-04-14 : https://github.com/inventree/InvenTree/pull/2828
-    - Adds the ability to include stock test results for "installed items"
-
-v37 -> 2022-04-07 : https://github.com/inventree/InvenTree/pull/2806
-    - Adds extra stock availability information to the BomItem serializer
-
-v36 -> 2022-04-03
-    - Adds ability to filter part list endpoint by unallocated_stock argument
-
-v35 -> 2022-04-01 : https://github.com/inventree/InvenTree/pull/2797
-    - Adds stock allocation information to the Part API
-    - Adds calculated field for "unallocated_quantity"
-
-v34 -> 2022-03-25
-    - Change permissions for "plugin list" API endpoint (now allows any authenticated user)
-
-v33 -> 2022-03-24
-    - Adds "plugins_enabled" information to root API endpoint
-
-v32 -> 2022-03-19
-    - Adds "parameters" detail to Part API endpoint (use &parameters=true)
-    - Adds ability to filter PartParameterTemplate API by Part instance
-    - Adds ability to filter PartParameterTemplate API by PartCategory instance
-
-v31 -> 2022-03-14
-    - Adds "updated" field to SupplierPriceBreakList and SupplierPriceBreakDetail API endpoints
-
-v30 -> 2022-03-09
-    - Adds "exclude_location" field to BuildAutoAllocation API endpoint
-    - Allows BuildItem API endpoint to be filtered by BomItem relation
-
-v29 -> 2022-03-08
-    - Adds "scheduling" endpoint for predicted stock scheduling information
-
-v28 -> 2022-03-04
-    - Adds an API endpoint for auto allocation of stock items against a build order
-    - Ref: https://github.com/inventree/InvenTree/pull/2713
-
-v27 -> 2022-02-28
-    - Adds target_date field to individual line items for purchase orders and sales orders
-
-v26 -> 2022-02-17
-    - Adds API endpoint for uploading a BOM file and extracting data
-
-v25 -> 2022-02-17
-    - Adds ability to filter "part" list endpoint by "in_bom_for" argument
-
-v24 -> 2022-02-10
-    - Adds API endpoint for deleting (cancelling) build order outputs
-
-v23 -> 2022-02-02
-    - Adds API endpoints for managing plugin classes
-    - Adds API endpoints for managing plugin settings
-
-v22 -> 2021-12-20
-    - Adds API endpoint to "merge" multiple stock items
-
-v21 -> 2021-12-04
-    - Adds support for multiple "Shipments" against a SalesOrder
-    - Refactors process for stock allocation against a SalesOrder
-
-v20 -> 2021-12-03
-    - Adds ability to filter POLineItem endpoint by "base_part"
-    - Adds optional "order_detail" to POLineItem list endpoint
-
-v19 -> 2021-12-02
-    - Adds the ability to filter the StockItem API by "part_tree"
-    - Returns only stock items which match a particular part.tree_id field
-
-v18 -> 2021-11-15
-    - Adds the ability to filter BomItem API by "uses" field
-    - This returns a list of all BomItems which "use" the specified part
-    - Includes inherited BomItem objects
-
-v17 -> 2021-11-09
-    - Adds API endpoints for GLOBAL and USER settings objects
-    - Ref: https://github.com/inventree/InvenTree/pull/2275
-
-v16 -> 2021-10-17
-    - Adds API endpoint for completing build order outputs
-
-v15 -> 2021-10-06
-    - Adds detail endpoint for SalesOrderAllocation model
-    - Allows use of the API forms interface for adjusting SalesOrderAllocation objects
-
-v14 -> 2021-10-05
-    - Stock adjustment actions API is improved, using native DRF serializer support
-    - However adjustment actions now only support 'pk' as a lookup field
-
-v13 -> 2021-10-05
-    - Adds API endpoint to allocate stock items against a BuildOrder
-    - Updates StockItem API with improved filtering against BomItem data
-
-v12 -> 2021-09-07
-    - Adds API endpoint to receive stock items against a PurchaseOrder
-
-v11 -> 2021-08-26
-    - Adds "units" field to PartBriefSerializer
-    - This allows units to be introspected from the "part_detail" field in the StockItem serializer
-
-v10 -> 2021-08-23
-    - Adds "purchase_price_currency" to StockItem serializer
-    - Adds "purchase_price_string" to StockItem serializer
-    - Purchase price is now writable for StockItem serializer
-
-v9  -> 2021-08-09
-    - Adds "price_string" to part pricing serializers
-
-v8  -> 2021-07-19
-    - Refactors the API interface for SupplierPart and ManufacturerPart models
-    - ManufacturerPart objects can no longer be created via the SupplierPart API endpoint
-
-v7  -> 2021-07-03
-    - Introduced the concept of "API forms" in https://github.com/inventree/InvenTree/pull/1716
-    - API OPTIONS endpoints provide comprehensive field metedata
-    - Multiple new API endpoints added for database models
-
-v6  -> 2021-06-23
-    - Part and Company images can now be directly uploaded via the REST API
-
-v5  -> 2021-06-21
-    - Adds API interface for manufacturer part parameters
-
-v4  -> 2021-06-01
-    - BOM items can now accept "variant stock" to be assigned against them
-    - Many slight API tweaks were needed to get this to work properly!
-
-v3  -> 2021-05-22:
-    - The updated StockItem "history tracking" now uses a different interface
-
-"""

InvenTree/InvenTree/apps.py

@@ -1,264 +0,0 @@
-"""AppConfig for inventree app."""
-
-import logging
-from importlib import import_module
-from pathlib import Path
-
-from django.apps import AppConfig, apps
-from django.conf import settings
-from django.contrib.auth import get_user_model
-from django.core.exceptions import AppRegistryNotReady
-from django.db import transaction
-from django.db.utils import IntegrityError, OperationalError
-
-import InvenTree.conversion
-import InvenTree.ready
-import InvenTree.tasks
-from InvenTree.config import get_setting
-
-logger = logging.getLogger("inventree")
-
-
-class InvenTreeConfig(AppConfig):
-    """AppConfig for inventree app."""
-    name = 'InvenTree'
-
-    def ready(self):
-        """Run system wide setup init steps.
-
-        Like:
-        - Checking if migrations should be run
-        - Cleaning up tasks
-        - Starting regular tasks
-        - Updating exchange rates
-        - Collecting notification methods
-        - Collecting state transition methods
-        - Adding users set in the current environment
-        """
-        # skip loading if plugin registry is not loaded or we run in a background thread
-        if not InvenTree.ready.isPluginRegistryLoaded() or not InvenTree.ready.isInMainThread():
-            return
-
-        # Skip if running migrations
-        if InvenTree.ready.isRunningMigrations():
-            return
-
-        if InvenTree.ready.canAppAccessDatabase() or settings.TESTING_ENV:
-
-            self.remove_obsolete_tasks()
-
-            self.collect_tasks()
-            self.start_background_tasks()
-
-            if not InvenTree.ready.isInTestMode():  # pragma: no cover
-                self.update_exchange_rates()
-                # Let the background worker check for migrations
-                InvenTree.tasks.offload_task(InvenTree.tasks.check_for_migrations)
-
-        self.collect_notification_methods()
-        self.collect_state_transition_methods()
-
-        # Ensure the unit registry is loaded
-        InvenTree.conversion.get_unit_registry()
-
-        if InvenTree.ready.canAppAccessDatabase() or settings.TESTING_ENV:
-            self.add_user_on_startup()
-
-    def remove_obsolete_tasks(self):
-        """Delete any obsolete scheduled tasks in the database."""
-        obsolete = [
-            'InvenTree.tasks.delete_expired_sessions',
-            'stock.tasks.delete_old_stock_items',
-        ]
-
-        try:
-            from django_q.models import Schedule
-        except AppRegistryNotReady:  # pragma: no cover
-            return
-
-        # Remove any existing obsolete tasks
-        try:
-            Schedule.objects.filter(func__in=obsolete).delete()
-        except Exception:
-            logger.exception("Failed to remove obsolete tasks - database not ready")
-
-    def start_background_tasks(self):
-        """Start all background tests for InvenTree."""
-        logger.info("Starting background tasks...")
-
-        from django_q.models import Schedule
-
-        # List of existing scheduled tasks (in the database)
-        existing_tasks = {}
-
-        for existing_task in Schedule.objects.all():
-            existing_tasks[existing_task.func] = existing_task
-
-        tasks_to_create = []
-        tasks_to_update = []
-
-        # List of collected tasks found with the @scheduled_task decorator
-        tasks = InvenTree.tasks.tasks.task_list
-
-        for task in tasks:
-
-            ref_name = f'{task.func.__module__}.{task.func.__name__}'
-
-            if ref_name in existing_tasks.keys():
-                # This task already exists - update the details if required
-                existing_task = existing_tasks[ref_name]
-
-                if existing_task.schedule_type != task.interval or existing_task.minutes != task.minutes:
-
-                    existing_task.schedule_type = task.interval
-                    existing_task.minutes = task.minutes
-                    tasks_to_update.append(existing_task)
-
-            else:
-                # This task does *not* already exist - create it
-                tasks_to_create.append(
-                    Schedule(
-                        name=ref_name,
-                        func=ref_name,
-                        schedule_type=task.interval,
-                        minutes=task.minutes,
-                    )
-                )
-
-        if len(tasks_to_create) > 0:
-            Schedule.objects.bulk_create(tasks_to_create)
-            logger.info("Created %s new scheduled tasks", len(tasks_to_create))
-
-        if len(tasks_to_update) > 0:
-            Schedule.objects.bulk_update(tasks_to_update, ['schedule_type', 'minutes'])
-            logger.info("Updated %s existing scheduled tasks", len(tasks_to_update))
-
-        # Put at least one task onto the background worker stack,
-        # which will be processed as soon as the worker comes online
-        InvenTree.tasks.offload_task(
-            InvenTree.tasks.heartbeat,
-            force_async=True,
-        )
-
-        logger.info("Started %s scheduled background tasks...", len(tasks))
-
-    def collect_tasks(self):
-        """Collect all background tasks."""
-        for app_name, app in apps.app_configs.items():
-            if app_name == 'InvenTree':
-                continue
-
-            if Path(app.path).joinpath('tasks.py').exists():
-                try:
-                    import_module(f'{app.module.__package__}.tasks')
-                except Exception as e:  # pragma: no cover
-                    logger.exception("Error loading tasks for %s: %s", app_name, e)
-
-    def update_exchange_rates(self):  # pragma: no cover
-        """Update exchange rates each time the server is started.
-
-        Only runs *if*:
-        a) Have not been updated recently (one day or less)
-        b) The base exchange rate has been altered
-        """
-        try:
-            from djmoney.contrib.exchange.models import ExchangeBackend
-
-            from common.settings import currency_code_default
-            from InvenTree.tasks import update_exchange_rates
-        except AppRegistryNotReady:  # pragma: no cover
-            pass
-
-        base_currency = currency_code_default()
-
-        update = False
-
-        try:
-            backend = ExchangeBackend.objects.filter(name='InvenTreeExchange')
-
-            if backend.exists():
-                backend = backend.first()
-
-                last_update = backend.last_update
-
-                if last_update is None:
-                    # Never been updated
-                    logger.info("Exchange backend has never been updated")
-                    update = True
-
-                # Backend currency has changed?
-                if base_currency != backend.base_currency:
-                    logger.info("Base currency changed from %s to %s", backend.base_currency, base_currency)
-                    update = True
-
-        except (ExchangeBackend.DoesNotExist):
-            logger.info("Exchange backend not found - updating")
-            update = True
-
-        except Exception:
-            # Some other error - potentially the tables are not ready yet
-            return
-
-        if update:
-            try:
-                update_exchange_rates()
-            except OperationalError:
-                logger.warning("Could not update exchange rates - database not ready")
-            except Exception as e:
-                logger.exception("Error updating exchange rates: %s (%s)", e, type(e))
-
-    def add_user_on_startup(self):
-        """Add a user on startup."""
-        # stop if checks were already created
-        if hasattr(settings, 'USER_ADDED') and settings.USER_ADDED:
-            return
-
-        # get values
-        add_user = get_setting('INVENTREE_ADMIN_USER', 'admin_user')
-        add_email = get_setting('INVENTREE_ADMIN_EMAIL', 'admin_email')
-        add_password = get_setting('INVENTREE_ADMIN_PASSWORD', 'admin_password')
-
-        # check if all values are present
-        set_variables = 0
-
-        for tested_var in [add_user, add_email, add_password]:
-            if tested_var:
-                set_variables += 1
-
-        # no variable set -> do not try anything
-        if set_variables == 0:
-            settings.USER_ADDED = True
-            return
-
-        # not all needed variables set
-        if set_variables < 3:
-            logger.warning('Not all required settings for adding a user on startup are present:\nINVENTREE_ADMIN_USER, INVENTREE_ADMIN_EMAIL, INVENTREE_ADMIN_PASSWORD')
-            settings.USER_ADDED = True
-            return
-
-        # good to go -> create user
-        user = get_user_model()
-        try:
-            with transaction.atomic():
-                if user.objects.filter(username=add_user).exists():
-                    logger.info("User %s already exists - skipping creation", add_user)
-                else:
-                    new_user = user.objects.create_superuser(add_user, add_email, add_password)
-                    logger.info('User %s was created!', str(new_user))
-        except IntegrityError:
-            logger.warning('The user "%s" could not be created', add_user)
-
-        # do not try again
-        settings.USER_ADDED = True
-
-    def collect_notification_methods(self):
-        """Collect all notification methods."""
-        from common.notifications import storage
-
-        storage.collect()
-
-    def collect_state_transition_methods(self):
-        """Collect all state transition methods."""
-        from generic.states import storage
-
-        storage.collect()

InvenTree/InvenTree/ci_render_js.py

@@ -1,84 +0,0 @@
-"""Pull rendered copies of the templated.
-
-Only used for testing the js files! - This file is omitted from coverage.
-"""
-
-import os  # pragma: no cover
-import pathlib  # pragma: no cover
-
-from InvenTree.unit_test import InvenTreeTestCase  # pragma: no cover
-
-
-class RenderJavascriptFiles(InvenTreeTestCase):  # pragma: no cover
-    """A unit test to "render" javascript files.
-
-    The server renders templated javascript files,
-    we need the fully-rendered files for linting and static tests.
-    """
-
-    def download_file(self, filename, prefix):
-        """Function to `download`(copy) a file to a temporary firectory."""
-        url = os.path.join(prefix, filename)
-
-        response = self.client.get(url)
-
-        here = os.path.abspath(os.path.dirname(__file__))
-
-        output_dir = os.path.join(
-            here,
-            '..',
-            '..',
-            'js_tmp',
-        )
-
-        output_dir = os.path.abspath(output_dir)
-
-        if not os.path.exists(output_dir):
-            os.mkdir(output_dir)
-
-        output_file = os.path.join(
-            output_dir,
-            filename,
-        )
-
-        with open(output_file, 'wb') as output:
-            output.write(response.content)
-
-    def download_files(self, subdir, prefix):
-        """Download files in directory."""
-        here = os.path.abspath(os.path.dirname(__file__))
-
-        js_template_dir = os.path.join(
-            here,
-            '..',
-            'templates',
-            'js',
-        )
-
-        directory = os.path.join(js_template_dir, subdir)
-
-        directory = os.path.abspath(directory)
-
-        js_files = pathlib.Path(directory).rglob('*.js')
-
-        n = 0
-
-        for f in js_files:
-            js = os.path.basename(f)
-
-            self.download_file(js, prefix)
-
-            n += 1
-
-        return n
-
-    def test_render_files(self):
-        """Look for all javascript files."""
-        n = 0
-
-        print("Rendering javascript files...")
-
-        n += self.download_files('translated', '/js/i18n')
-        n += self.download_files('dynamic', '/js/dynamic')
-
-        print(f"Rendered {n} javascript files.")

InvenTree/InvenTree/config.py

@@ -1,411 +0,0 @@
-"""Helper functions for loading InvenTree configuration options."""
-
-import datetime
-import json
-import logging
-import os
-import random
-import shutil
-import string
-import warnings
-from pathlib import Path
-
-logger = logging.getLogger('inventree')
-CONFIG_DATA = None
-CONFIG_LOOKUPS = {}
-
-
-def to_list(value, delimiter=','):
-    """Take a configuration setting and make sure it is a list.
-
-    For example, we might have a configuration setting taken from the .config file,
-    which is already a list.
-
-    However, the same setting may be specified via an environment variable,
-    using a comma delimited string!
-    """
-    if type(value) in [list, tuple]:
-        return value
-
-    # Otherwise, force string value
-    value = str(value)
-
-    return [x.strip() for x in value.split(delimiter)]
-
-
-def to_dict(value):
-    """Take a configuration setting and make sure it is a dict.
-
-    For example, we might have a configuration setting taken from the .config file,
-    which is already an object/dict.
-
-    However, the same setting may be specified via an environment variable,
-    using a valid JSON string!
-    """
-    if value is None:
-        return {}
-
-    if isinstance(value, dict):
-        return value
-
-    try:
-        return json.loads(value)
-    except Exception as error:
-        logger.exception("Failed to parse value '%s' as JSON with error %s. Ensure value is a valid JSON string.", value, error)
-    return {}
-
-
-def is_true(x):
-    """Shortcut function to determine if a value "looks" like a boolean"""
-    return str(x).strip().lower() in ['1', 'y', 'yes', 't', 'true', 'on']
-
-
-def get_base_dir() -> Path:
-    """Returns the base (top-level) InvenTree directory."""
-    return Path(__file__).parent.parent.resolve()
-
-
-def ensure_dir(path: Path) -> None:
-    """Ensure that a directory exists.
-
-    If it does not exist, create it.
-    """
-    if not path.exists():
-        path.mkdir(parents=True, exist_ok=True)
-
-
-def get_config_file(create=True) -> Path:
-    """Returns the path of the InvenTree configuration file.
-
-    Note: It will be created it if does not already exist!
-    """
-    base_dir = get_base_dir()
-
-    cfg_filename = os.getenv('INVENTREE_CONFIG_FILE')
-
-    if cfg_filename:
-        cfg_filename = Path(cfg_filename.strip()).resolve()
-    else:
-        # Config file is *not* specified - use the default
-        cfg_filename = base_dir.joinpath('config.yaml').resolve()
-
-    if not cfg_filename.exists() and create:
-        print("InvenTree configuration file 'config.yaml' not found - creating default file")
-        ensure_dir(cfg_filename.parent)
-
-        cfg_template = base_dir.joinpath("config_template.yaml")
-        shutil.copyfile(cfg_template, cfg_filename)
-        print(f"Created config file {cfg_filename}")
-
-    return cfg_filename
-
-
-def load_config_data(set_cache: bool = False) -> map:
-    """Load configuration data from the config file.
-
-    Arguments:
-        set_cache(bool): If True, the configuration data will be cached for future use after load.
-    """
-    global CONFIG_DATA
-
-    # use cache if populated
-    # skip cache if cache should be set
-    if CONFIG_DATA is not None and not set_cache:
-        return CONFIG_DATA
-
-    import yaml
-
-    cfg_file = get_config_file()
-
-    with open(cfg_file, 'r') as cfg:
-        data = yaml.safe_load(cfg)
-
-    # Set the cache if requested
-    if set_cache:
-        CONFIG_DATA = data
-
-    return data
-
-
-def do_typecast(value, type, var_name=None):
-    """Attempt to typecast a value.
-
-    Arguments:
-        value: Value to typecast
-        type: Function to use for typecasting the value e.g. int, float, str, list, dict
-        var_name: Name that should be logged e.g. 'INVENTREE_STATIC_ROOT'. Set if logging is required.
-
-    Returns:
-        Typecasted value or original value if typecasting failed.
-    """
-    # Force 'list' of strings
-    if type is list:
-        value = to_list(value)
-
-    # Valid JSON string is required
-    elif type is dict:
-        value = to_dict(value)
-
-    elif type is not None:
-        # Try to typecast the value
-        try:
-            val = type(value)
-            return val
-        except Exception as error:
-            if var_name:
-                logger.exception("Failed to typecast '%s' with value '%s' to type '%s' with error %s", var_name, value, type, error)
-    return value
-
-
-def get_setting(env_var=None, config_key=None, default_value=None, typecast=None):
-    """Helper function for retrieving a configuration setting value.
-
-    - First preference is to look for the environment variable
-    - Second preference is to look for the value of the settings file
-    - Third preference is the default value
-
-    Arguments:
-        env_var: Name of the environment variable e.g. 'INVENTREE_STATIC_ROOT'
-        config_key: Key to lookup in the configuration file
-        default_value: Value to return if first two options are not provided
-        typecast: Function to use for typecasting the value e.g. int, float, str, list, dict
-    """
-
-    def set_metadata(source: str):
-        """Set lookup metadata for the setting."""
-        key = env_var or config_key
-        CONFIG_LOOKUPS[key] = {'env_var': env_var, 'config_key': config_key, 'source': source, 'accessed': datetime.datetime.now()}
-
-    # First, try to load from the environment variables
-    if env_var is not None:
-        val = os.getenv(env_var, None)
-
-        if val is not None:
-            set_metadata('env')
-            return do_typecast(val, typecast, var_name=env_var)
-
-    # Next, try to load from configuration file
-    if config_key is not None:
-        cfg_data = load_config_data()
-
-        result = None
-
-        # Hack to allow 'path traversal' in configuration file
-        for key in config_key.strip().split('.'):
-
-            if type(cfg_data) is not dict or key not in cfg_data:
-                result = None
-                break
-
-            result = cfg_data[key]
-            cfg_data = cfg_data[key]
-
-        if result is not None:
-            set_metadata('yaml')
-            return do_typecast(result, typecast, var_name=env_var)
-
-    # Finally, return the default value
-    set_metadata('default')
-    return do_typecast(default_value, typecast, var_name=env_var)
-
-
-def get_boolean_setting(env_var=None, config_key=None, default_value=False):
-    """Helper function for retrieving a boolean configuration setting"""
-    return is_true(get_setting(env_var, config_key, default_value))
-
-
-def get_media_dir(create=True):
-    """Return the absolute path for the 'media' directory (where uploaded files are stored)"""
-    md = get_setting('INVENTREE_MEDIA_ROOT', 'media_root')
-
-    if not md:
-        raise FileNotFoundError('INVENTREE_MEDIA_ROOT not specified')
-
-    md = Path(md).resolve()
-
-    if create:
-        md.mkdir(parents=True, exist_ok=True)
-
-    return md
-
-
-def get_static_dir(create=True):
-    """Return the absolute path for the 'static' directory (where static files are stored)"""
-    sd = get_setting('INVENTREE_STATIC_ROOT', 'static_root')
-
-    if not sd:
-        raise FileNotFoundError('INVENTREE_STATIC_ROOT not specified')
-
-    sd = Path(sd).resolve()
-
-    if create:
-        sd.mkdir(parents=True, exist_ok=True)
-
-    return sd
-
-
-def get_backup_dir(create=True):
-    """Return the absolute path for the backup directory"""
-    bd = get_setting('INVENTREE_BACKUP_DIR', 'backup_dir')
-
-    if not bd:
-        raise FileNotFoundError('INVENTREE_BACKUP_DIR not specified')
-
-    bd = Path(bd).resolve()
-
-    if create:
-        bd.mkdir(parents=True, exist_ok=True)
-
-    return bd
-
-
-def get_plugin_file():
-    """Returns the path of the InvenTree plugins specification file.
-
-    Note: It will be created if it does not already exist!
-    """
-    # Check if the plugin.txt file (specifying required plugins) is specified
-    plugin_file = get_setting('INVENTREE_PLUGIN_FILE', 'plugin_file')
-
-    if not plugin_file:
-        # If not specified, look in the same directory as the configuration file
-        config_dir = get_config_file().parent
-        plugin_file = config_dir.joinpath('plugins.txt')
-    else:
-        # Make sure we are using a modern Path object
-        plugin_file = Path(plugin_file)
-
-    if not plugin_file.exists():
-        logger.warning("Plugin configuration file does not exist - creating default file")
-        logger.info("Creating plugin file at '%s'", plugin_file)
-        ensure_dir(plugin_file.parent)
-
-        # If opening the file fails (no write permission, for example), then this will throw an error
-        plugin_file.write_text("# InvenTree Plugins (uses PIP framework to install)\n\n")
-
-    return plugin_file
-
-
-def get_plugin_dir():
-    """Returns the path of the custom plugins directory"""
-    return get_setting('INVENTREE_PLUGIN_DIR', 'plugin_dir')
-
-
-def get_secret_key():
-    """Return the secret key value which will be used by django.
-
-    Following options are tested, in descending order of preference:
-
-    A) Check for environment variable INVENTREE_SECRET_KEY => Use raw key data
-    B) Check for environment variable INVENTREE_SECRET_KEY_FILE => Load key data from file
-    C) Look for default key file "secret_key.txt"
-    D) Create "secret_key.txt" if it does not exist
-    """
-    # Look for environment variable
-    if secret_key := get_setting('INVENTREE_SECRET_KEY', 'secret_key'):
-        logger.info("SECRET_KEY loaded by INVENTREE_SECRET_KEY")  # pragma: no cover
-        return secret_key
-
-    # Look for secret key file
-    if secret_key_file := get_setting('INVENTREE_SECRET_KEY_FILE', 'secret_key_file'):
-        secret_key_file = Path(secret_key_file).resolve()
-    else:
-        # Default location for secret key file
-        secret_key_file = get_base_dir().joinpath("secret_key.txt").resolve()
-
-    if not secret_key_file.exists():
-        logger.info("Generating random key file at '%s'", secret_key_file)
-        ensure_dir(secret_key_file.parent)
-
-        # Create a random key file
-        options = string.digits + string.ascii_letters + string.punctuation
-        key = ''.join([random.choice(options) for i in range(100)])
-        secret_key_file.write_text(key)
-
-    logger.debug("Loading SECRET_KEY from '%s'", secret_key_file)
-
-    key_data = secret_key_file.read_text().strip()
-
-    return key_data
-
-
-def get_custom_file(env_ref: str, conf_ref: str, log_ref: str, lookup_media: bool = False):
-    """Returns the checked path to a custom file.
-
-    Set lookup_media to True to also search in the media folder.
-    """
-    from django.contrib.staticfiles.storage import StaticFilesStorage
-    from django.core.files.storage import default_storage
-
-    value = get_setting(env_ref, conf_ref, None)
-
-    if not value:
-        return None
-
-    static_storage = StaticFilesStorage()
-
-    if static_storage.exists(value):
-        logger.info("Loading %s from %s directory: %s", log_ref, 'static', value)
-    elif lookup_media and default_storage.exists(value):
-        logger.info("Loading %s from %s directory: %s", log_ref, 'media', value)
-    else:
-        add_dir_str = ' or media' if lookup_media else ''
-        logger.warning("The %s file '%s' could not be found in the static %s directories", log_ref, value, add_dir_str)
-        value = False
-
-    return value
-
-
-def get_frontend_settings(debug=True):
-    """Return a dictionary of settings for the frontend interface.
-
-    Note that the new config settings use the 'FRONTEND' key,
-    whereas the legacy key was 'PUI' (platform UI) which is now deprecated
-    """
-
-    # Legacy settings
-    pui_settings = get_setting('INVENTREE_PUI_SETTINGS', 'pui_settings', {}, typecast=dict)
-
-    if len(pui_settings) > 0:
-        warnings.warn(
-            "The 'INVENTREE_PUI_SETTINGS' key is deprecated. Please use 'INVENTREE_FRONTEND_SETTINGS' instead",
-            DeprecationWarning, stacklevel=2
-        )
-
-    # New settings
-    frontend_settings = get_setting('INVENTREE_FRONTEND_SETTINGS', 'frontend_settings', {}, typecast=dict)
-
-    # Merge settings
-    settings = {**pui_settings, **frontend_settings}
-
-    # Set the base URL
-    if 'base_url' not in settings:
-        base_url = get_setting('INVENTREE_PUI_URL_BASE', 'pui_url_base', '')
-
-        if base_url:
-            warnings.warn(
-                "The 'INVENTREE_PUI_URL_BASE' key is deprecated. Please use 'INVENTREE_FRONTEND_URL_BASE' instead",
-                DeprecationWarning, stacklevel=2
-            )
-        else:
-            base_url = get_setting('INVENTREE_FRONTEND_URL_BASE', 'frontend_url_base', 'platform')
-
-        settings['base_url'] = base_url
-
-    # Set the server list
-    settings['server_list'] = settings.get('server_list', [])
-
-    # Set the debug flag
-    settings['debug'] = debug
-
-    if 'environment' not in settings:
-        settings['environment'] = 'development' if debug else 'production'
-
-    if debug and 'show_server_selector' not in settings:
-        # In debug mode, show server selector by default
-        settings['show_server_selector'] = True
-    elif len(settings['server_list']) == 0:
-        # If no servers are specified, show server selector
-        settings['show_server_selector'] = True
-
-    return settings

InvenTree/InvenTree/context.py

@@ -1,87 +0,0 @@
-# -*- coding: utf-8 -*-
-
-"""Provides extra global data to all templates."""
-
-import InvenTree.email
-import InvenTree.status
-from generic.states import StatusCode
-from InvenTree.helpers import inheritors
-from users.models import RuleSet, check_user_role
-
-
-def health_status(request):
-    """Provide system health status information to the global context.
-
-    - Not required for AJAX requests
-    - Do not provide if it is already provided to the context
-    """
-    if request.path.endswith('.js'):
-        # Do not provide to script requests
-        return {}  # pragma: no cover
-
-    if hasattr(request, '_inventree_health_status'):
-        # Do not duplicate efforts
-        return {}
-
-    request._inventree_health_status = True
-
-    status = {
-        'django_q_running': InvenTree.status.is_worker_running(),
-        'email_configured': InvenTree.email.is_email_configured(),
-    }
-
-    # The following keys are required to denote system health
-    health_keys = [
-        'django_q_running',
-    ]
-
-    all_healthy = True
-
-    for k in health_keys:
-        if status[k] is not True:
-            all_healthy = False
-
-    status['system_healthy'] = all_healthy
-
-    status['up_to_date'] = InvenTree.version.isInvenTreeUpToDate()
-
-    return status
-
-
-def status_codes(request):
-    """Provide status code enumerations."""
-    if hasattr(request, '_inventree_status_codes'):
-        # Do not duplicate efforts
-        return {}
-
-    request._inventree_status_codes = True
-    return {cls.__name__: cls.template_context() for cls in inheritors(StatusCode)}
-
-
-def user_roles(request):
-    """Return a map of the current roles assigned to the user.
-
-    Roles are denoted by their simple names, and then the permission type.
-
-    Permissions can be access as follows:
-
-    - roles.part.view
-    - roles.build.delete
-
-    Each value will return a boolean True / False
-    """
-    user = request.user
-
-    roles = {
-    }
-
-    for role in RuleSet.RULESET_MODELS.keys():
-
-        permissions = {}
-
-        for perm in ['view', 'add', 'change', 'delete']:
-            permissions[perm] = user.is_superuser or check_user_role(user, role, perm)
-
-        roles[role] = permissions
-
-    return {'roles': roles}

InvenTree/InvenTree/conversion.py

@@ -1,173 +0,0 @@
-"""Helper functions for converting between units."""
-
-import logging
-
-from django.core.exceptions import ValidationError
-from django.utils.translation import gettext_lazy as _
-
-import pint
-
-_unit_registry = None
-
-
-logger = logging.getLogger('inventree')
-
-
-def get_unit_registry():
-    """Return a custom instance of the Pint UnitRegistry."""
-    global _unit_registry
-
-    # Cache the unit registry for speedier access
-    if _unit_registry is None:
-        return reload_unit_registry()
-    return _unit_registry
-
-
-def reload_unit_registry():
-    """Reload the unit registry from the database.
-
-    This function is called at startup, and whenever the database is updated.
-    """
-    import time
-    t_start = time.time()
-
-    global _unit_registry
-
-    _unit_registry = None
-
-    reg = pint.UnitRegistry()
-
-    # Define some "standard" additional units
-    reg.define('piece = 1')
-    reg.define('each = 1 = ea')
-    reg.define('dozen = 12 = dz')
-    reg.define('hundred = 100')
-    reg.define('thousand = 1000')
-
-    # Allow for custom units to be defined in the database
-    try:
-        from common.models import CustomUnit
-
-        for cu in CustomUnit.objects.all():
-            try:
-                reg.define(cu.fmt_string())
-            except Exception as e:
-                logger.exception('Failed to load custom unit: %s - %s', cu.fmt_string(), e)
-
-        # Once custom units are loaded, save registry
-        _unit_registry = reg
-
-    except Exception:
-        # Database is not ready, or CustomUnit model is not available
-        pass
-
-    dt = time.time() - t_start
-    logger.debug('Loaded unit registry in %.3f s', dt)
-
-    return reg
-
-
-def convert_physical_value(value: str, unit: str = None, strip_units=True):
-    """Validate that the provided value is a valid physical quantity.
-
-    Arguments:
-        value: Value to validate (str)
-        unit: Optional unit to convert to, and validate against
-        strip_units: If True, strip units from the returned value, and return only the dimension
-
-    Raises:
-        ValidationError: If the value is invalid or cannot be converted to the specified unit
-
-    Returns:
-        The converted quantity, in the specified units
-    """
-    original = str(value).strip()
-
-    # Ensure that the value is a string
-    value = str(value).strip() if value else ''
-    unit = str(unit).strip() if unit else ''
-
-    # Error on blank values
-    if not value:
-        raise ValidationError(_('No value provided'))
-
-    # Create a "backup" value which be tried if the first value fails
-    # e.g. value = "10k" and unit = "ohm" -> "10kohm"
-    # e.g. value = "10m" and unit = "F" -> "10mF"
-    if unit:
-        backup_value = value + unit
-    else:
-        backup_value = None
-
-    ureg = get_unit_registry()
-
-    try:
-        value = ureg.Quantity(value)
-
-        if unit:
-            if is_dimensionless(value):
-                magnitude = value.to_base_units().magnitude
-                value = ureg.Quantity(magnitude, unit)
-            else:
-                value = value.to(unit)
-
-    except Exception:
-        if backup_value:
-            try:
-                value = ureg.Quantity(backup_value)
-            except Exception:
-                value = None
-        else:
-            value = None
-
-    if value is None:
-        if unit:
-            raise ValidationError(_(f'Could not convert {original} to {unit}'))
-        else:
-            raise ValidationError(_("Invalid quantity supplied"))
-
-    # Calculate the "magnitude" of the value, as a float
-    # If the value is specified strangely (e.g. as a fraction or a dozen), this can cause issues
-    # So, we ensure that it is converted to a floating point value
-    # If we wish to return a "raw" value, some trickery is required
-    try:
-        if unit:
-            magnitude = ureg.Quantity(value.to(ureg.Unit(unit))).magnitude
-        else:
-            magnitude = ureg.Quantity(value.to_base_units()).magnitude
-
-        magnitude = float(ureg.Quantity(magnitude).to_base_units().magnitude)
-    except Exception as exc:
-        raise ValidationError(_(f'Invalid quantity supplied ({exc})'))
-
-    if strip_units:
-        return magnitude
-    elif unit or value.units:
-        return ureg.Quantity(magnitude, unit or value.units)
-    return ureg.Quantity(magnitude)
-
-
-def is_dimensionless(value):
-    """Determine if the provided value is 'dimensionless'
-
-    A dimensionless value might look like:
-
-    0.1
-    1/2 dozen
-    three thousand
-    1.2 dozen
-    (etc)
-    """
-    ureg = get_unit_registry()
-
-    # Ensure the provided value is in the right format
-    value = ureg.Quantity(value)
-
-    if value.units == ureg.dimensionless:
-        return True
-
-    if value.to_base_units().units == ureg.dimensionless:
-        return True
-
-    # At this point, the value is not dimensionless
-    return False

InvenTree/InvenTree/email.py

@@ -1,89 +0,0 @@
-"""Code for managing email functionality in InvenTree."""
-
-import logging
-
-from django.conf import settings
-from django.core import mail as django_mail
-
-import InvenTree.ready
-import InvenTree.tasks
-
-logger = logging.getLogger('inventree')
-
-
-def is_email_configured():
-    """Check if email backend is configured.
-
-    NOTE: This does not check if the configuration is valid!
-    """
-    configured = True
-    testing = settings.TESTING
-
-    if InvenTree.ready.isInTestMode():
-        return False
-
-    if InvenTree.ready.isImportingData():
-        return False
-
-    if not settings.EMAIL_HOST:
-        configured = False
-
-        # Display warning unless in test mode
-        if not testing:  # pragma: no cover
-            logger.debug("EMAIL_HOST is not configured")
-
-    # Display warning unless in test mode
-    if not settings.EMAIL_HOST_USER and not testing:  # pragma: no cover
-        logger.debug("EMAIL_HOST_USER is not configured")
-
-    # Display warning unless in test mode
-    if not settings.EMAIL_HOST_PASSWORD and testing:  # pragma: no cover
-        logger.debug("EMAIL_HOST_PASSWORD is not configured")
-
-    # Email sender must be configured
-    if not settings.DEFAULT_FROM_EMAIL:
-        configured = False
-
-        if not testing:  # pragma: no cover
-            logger.debug("DEFAULT_FROM_EMAIL is not configured")
-
-    return configured
-
-
-def send_email(subject, body, recipients, from_email=None, html_message=None):
-    """Send an email with the specified subject and body, to the specified recipients list."""
-    if isinstance(recipients, str):
-        recipients = [recipients]
-
-    import InvenTree.ready
-    import InvenTree.status
-
-    if InvenTree.ready.isImportingData():
-        # If we are importing data, don't send emails
-        return
-
-    if not InvenTree.email.is_email_configured() and not settings.TESTING:
-        # Email is not configured / enabled
-        return
-
-    # If a *from_email* is not specified, ensure that the default is set
-    if not from_email:
-        from_email = settings.DEFAULT_FROM_EMAIL
-
-        # If we still don't have a valid from_email, then we can't send emails
-        if not from_email:
-            if settings.TESTING:
-                from_email = 'from@test.com'
-            else:
-                logger.error("send_email failed: DEFAULT_FROM_EMAIL not specified")
-                return
-
-    InvenTree.tasks.offload_task(
-        django_mail.send_mail,
-        subject,
-        body,
-        from_email,
-        recipients,
-        fail_silently=False,
-        html_message=html_message
-    )

InvenTree/InvenTree/exceptions.py

@@ -1,109 +0,0 @@
-"""Custom exception handling for the DRF API."""
-
-# -*- coding: utf-8 -*-
-from __future__ import unicode_literals
-
-import logging
-import sys
-import traceback
-
-from django.conf import settings
-from django.core.exceptions import ValidationError as DjangoValidationError
-from django.db.utils import IntegrityError, OperationalError
-from django.utils.translation import gettext_lazy as _
-
-import rest_framework.views as drfviews
-from error_report.models import Error
-from rest_framework import serializers
-from rest_framework.exceptions import ValidationError as DRFValidationError
-from rest_framework.response import Response
-
-import InvenTree.sentry
-
-logger = logging.getLogger('inventree')
-
-
-def log_error(path):
-    """Log an error to the database.
-
-    - Uses python exception handling to extract error details
-
-    Arguments:
-        path: The 'path' (most likely a URL) associated with this error (optional)
-    """
-    kind, info, data = sys.exc_info()
-
-    # Check if the error is on the ignore list
-    if kind in settings.IGNORED_ERRORS:
-        return
-
-    # Log error to stderr
-    logger.error(info)
-
-    try:
-        Error.objects.create(
-            kind=kind.__name__,
-            info=info,
-            data='\n'.join(traceback.format_exception(kind, info, data)),
-            path=path,
-        )
-    except (OperationalError, IntegrityError):
-        # Not much we can do if logging the error throws a db exception
-        pass
-
-
-def exception_handler(exc, context):
-    """Custom exception handler for DRF framework.
-
-    Ref: https://www.django-rest-framework.org/api-guide/exceptions/#custom-exception-handling
-    Catches any errors not natively handled by DRF, and re-throws as an error DRF can handle.
-
-    If sentry error reporting is enabled, we will also provide the original exception to sentry.io
-    """
-    response = None
-
-    # Pass exception to sentry.io handler
-    try:
-        InvenTree.sentry.report_exception(exc)
-    except Exception:
-        # If sentry.io fails, we don't want to crash the server!
-        pass
-
-    # Catch any django validation error, and re-throw a DRF validation error
-    if isinstance(exc, DjangoValidationError):
-        exc = DRFValidationError(detail=serializers.as_serializer_error(exc))
-
-    # Default to the built-in DRF exception handler
-    response = drfviews.exception_handler(exc, context)
-
-    if response is None:
-        # DRF handler did not provide a default response for this exception
-
-        if settings.TESTING:
-            # If in TESTING mode, re-throw the exception for traceback
-            raise exc
-        elif settings.DEBUG:
-            # If in DEBUG mode, provide error information in the response
-            error_detail = str(exc)
-        else:
-            error_detail = _("Error details can be found in the admin panel")
-
-        response_data = {
-            'error': type(exc).__name__,
-            'error_class': str(type(exc)),
-            'detail': error_detail,
-            'path': context['request'].path,
-            'status_code': 500,
-        }
-
-        response = Response(response_data, status=500)
-
-        log_error(context['request'].path)
-
-    if response is not None:
-        # Convert errors returned under the label '__all__' to 'non_field_errors'
-        if '__all__' in response.data:
-            response.data['non_field_errors'] = response.data['__all__']
-            del response.data['__all__']
-
-    return response

InvenTree/InvenTree/exchange.py

@@ -1,100 +0,0 @@
-"""Custom exchange backend which hooks into the InvenTree plugin system to fetch exchange rates from an external API."""
-
-import logging
-
-from django.db.transaction import atomic
-
-from djmoney.contrib.exchange.backends.base import SimpleExchangeBackend
-from djmoney.contrib.exchange.models import ExchangeBackend, Rate
-
-from common.settings import currency_code_default, currency_codes
-
-logger = logging.getLogger('inventree')
-
-
-class InvenTreeExchange(SimpleExchangeBackend):
-    """Backend for automatically updating currency exchange rates.
-
-    Uses the plugin system to actually fetch the rates from an external API.
-    """
-
-    name = "InvenTreeExchange"
-
-    def get_rates(self, **kwargs) -> None:
-        """Set the requested currency codes and get rates."""
-        from common.models import InvenTreeSetting
-        from plugin import registry
-
-        base_currency = kwargs.get('base_currency', currency_code_default())
-        symbols = kwargs.get('symbols', currency_codes())
-
-        # Find the selected exchange rate plugin
-        slug = InvenTreeSetting.get_setting('CURRENCY_UPDATE_PLUGIN', '', create=False)
-
-        if slug:
-            plugin = registry.get_plugin(slug)
-        else:
-            plugin = None
-
-        if not plugin:
-            # Find the first active currency exchange plugin
-            plugins = registry.with_mixin('currencyexchange', active=True)
-
-            if len(plugins) > 0:
-                plugin = plugins[0]
-
-        if not plugin:
-            logger.warning('No active currency exchange plugins found - skipping update')
-            return {}
-
-        logger.info("Running exchange rate update using plugin '%s'", plugin.name)
-
-        # Plugin found - run the update task
-        try:
-            rates = plugin.update_exchange_rates(base_currency, symbols)
-        except Exception as exc:
-            logger.exception("Exchange rate update failed: %s", exc)
-            return {}
-
-        if not rates:
-            logger.warning("Exchange rate update failed - no data returned from plugin %s", slug)
-            return {}
-
-        # Update exchange rates based on returned data
-        if type(rates) is not dict:
-            logger.warning("Invalid exchange rate data returned from plugin %s (type %s)", slug, type(rates))
-            return {}
-
-        # Ensure base currency is provided
-        rates[base_currency] = 1.00
-
-        return rates
-
-    @atomic
-    def update_rates(self, base_currency=None, **kwargs):
-        """Call to update all exchange rates"""
-        backend, _ = ExchangeBackend.objects.update_or_create(name=self.name, defaults={"base_currency": base_currency})
-
-        if base_currency is None:
-            base_currency = currency_code_default()
-
-        symbols = currency_codes()
-
-        logger.info("Updating exchange rates for %s (%s currencies)", base_currency, len(symbols))
-
-        # Fetch new rates from the backend
-        # If the backend fails, the existing rates will not be updated
-        rates = self.get_rates(base_currency=base_currency, symbols=symbols)
-
-        if rates:
-            # Clear out existing rates
-            backend.clear_rates()
-
-            Rate.objects.bulk_create([
-                Rate(currency=currency, value=amount, backend=backend)
-                for currency, amount in rates.items()
-            ])
-        else:
-            logger.info("No exchange rates returned from backend - currencies not updated")
-
-        logger.info("Updated exchange rates for %s", base_currency)

InvenTree/InvenTree/fields.py

@@ -1,219 +0,0 @@
-"""Custom fields used in InvenTree."""
-
-import sys
-from decimal import Decimal
-
-from django import forms
-from django.db import models
-from django.utils.translation import gettext_lazy as _
-
-from djmoney.forms.fields import MoneyField
-from djmoney.models.fields import MoneyField as ModelMoneyField
-from djmoney.models.validators import MinMoneyValidator
-from rest_framework.fields import URLField as RestURLField
-from rest_framework.fields import empty
-
-import InvenTree.helpers
-
-from .validators import AllowedURLValidator, allowable_url_schemes
-
-
-class InvenTreeRestURLField(RestURLField):
-    """Custom field for DRF with custom scheme validators."""
-
-    def __init__(self, **kwargs):
-        """Update schemes."""
-        # Enforce 'max length' parameter in form validation
-        if 'max_length' not in kwargs:
-            kwargs['max_length'] = 200
-
-        super().__init__(**kwargs)
-        self.validators[-1].schemes = allowable_url_schemes()
-
-    def run_validation(self, data=empty):
-        """Override default validation behaviour for this field type"""
-
-        import common.models
-
-        strict_urls = common.models.InvenTreeSetting.get_setting('INVENTREE_STRICT_URLS', True, cache=False)
-
-        if not strict_urls and data is not empty:
-            if '://' not in data:
-                # Validate as if there were a schema provided
-                data = 'http://' + data
-
-        return super().run_validation(data=data)
-
-
-class InvenTreeURLField(models.URLField):
-    """Custom URL field which has custom scheme validators."""
-
-    default_validators = [AllowedURLValidator()]
-
-    def __init__(self, **kwargs):
-        """Initialization method for InvenTreeURLField"""
-        # Max length for InvenTreeURLField is set to 200
-        kwargs['max_length'] = 200
-        super().__init__(**kwargs)
-
-
-def money_kwargs(**kwargs):
-    """Returns the database settings for MoneyFields."""
-    from common.settings import currency_code_default, currency_code_mappings
-
-    # Default values (if not specified)
-    if 'max_digits' not in kwargs:
-        kwargs['max_digits'] = 19
-
-    if 'decimal_places' not in kwargs:
-        kwargs['decimal_places'] = 6
-
-    if 'currency_choices' not in kwargs:
-        kwargs['currency_choices'] = currency_code_mappings()
-
-    if 'default_currency' not in kwargs:
-        kwargs['default_currency'] = currency_code_default()
-
-    return kwargs
-
-
-class InvenTreeModelMoneyField(ModelMoneyField):
-    """Custom MoneyField for clean migrations while using dynamic currency settings."""
-
-    def __init__(self, **kwargs):
-        """Overwrite default values and validators."""
-        # detect if creating migration
-        if 'migrate' in sys.argv or 'makemigrations' in sys.argv:
-            # remove currency information for a clean migration
-            kwargs['default_currency'] = ''
-            kwargs['currency_choices'] = []
-
-        kwargs = money_kwargs(**kwargs)
-
-        # Set a minimum value validator
-        validators = kwargs.get('validators', [])
-
-        allow_negative = kwargs.pop('allow_negative', False)
-
-        # If no validators are provided, add some "standard" ones
-        if len(validators) == 0:
-
-            if not allow_negative:
-                validators.append(
-                    MinMoneyValidator(0),
-                )
-
-        kwargs['validators'] = validators
-
-        super().__init__(**kwargs)
-
-    def formfield(self, **kwargs):
-        """Override form class to use own function."""
-        kwargs['form_class'] = InvenTreeMoneyField
-        return super().formfield(**kwargs)
-
-    def to_python(self, value):
-        """Convert value to python type."""
-        value = super().to_python(value)
-        return round_decimal(value, self.decimal_places)
-
-    def prepare_value(self, value):
-        """Override the 'prepare_value' method, to remove trailing zeros when displaying.
-
-        Why? It looks nice!
-        """
-        return round_decimal(value, self.decimal_places, normalize=True)
-
-
-class InvenTreeMoneyField(MoneyField):
-    """Custom MoneyField for clean migrations while using dynamic currency settings."""
-
-    def __init__(self, *args, **kwargs):
-        """Override initial values with the real info from database."""
-        kwargs = money_kwargs(**kwargs)
-        super().__init__(*args, **kwargs)
-
-
-class DatePickerFormField(forms.DateField):
-    """Custom date-picker field."""
-
-    def __init__(self, **kwargs):
-        """Set up custom values."""
-        help_text = kwargs.get('help_text', _('Enter date'))
-        label = kwargs.get('label', None)
-        required = kwargs.get('required', False)
-        initial = kwargs.get('initial', None)
-
-        widget = forms.DateInput(
-            attrs={
-                'type': 'date',
-            }
-        )
-
-        forms.DateField.__init__(
-            self,
-            required=required,
-            initial=initial,
-            help_text=help_text,
-            widget=widget,
-            label=label
-        )
-
-
-def round_decimal(value, places, normalize=False):
-    """Round value to the specified number of places."""
-    if type(value) in [Decimal, float]:
-        value = round(value, places)
-
-        if normalize:
-            # Remove any trailing zeroes
-            value = InvenTree.helpers.normalize(value)
-
-    return value
-
-
-class RoundingDecimalFormField(forms.DecimalField):
-    """Custom FormField that automatically rounds inputs."""
-
-    def to_python(self, value):
-        """Convert value to python type."""
-        value = super().to_python(value)
-        return round_decimal(value, self.decimal_places)
-
-    def prepare_value(self, value):
-        """Override the 'prepare_value' method, to remove trailing zeros when displaying.
-
-        Why? It looks nice!
-        """
-        return round_decimal(value, self.decimal_places, normalize=True)
-
-
-class RoundingDecimalField(models.DecimalField):
-    """Custom Field that automatically rounds inputs."""
-
-    def to_python(self, value):
-        """Convert value to python type."""
-        value = super().to_python(value)
-        return round_decimal(value, self.decimal_places)
-
-    def formfield(self, **kwargs):
-        """Return a Field instance for this field."""
-        kwargs['form_class'] = RoundingDecimalFormField
-
-        return super().formfield(**kwargs)
-
-
-class InvenTreeNotesField(models.TextField):
-    """Custom implementation of a 'notes' field"""
-
-    # Maximum character limit for the various 'notes' fields
-    NOTES_MAX_LENGTH = 50000
-
-    def __init__(self, **kwargs):
-        """Configure default initial values for this field"""
-        kwargs['max_length'] = self.NOTES_MAX_LENGTH
-        kwargs['verbose_name'] = _('Notes')
-        kwargs['blank'] = True
-        kwargs['null'] = True
-
-        super().__init__(**kwargs)

InvenTree/InvenTree/filters.py

@@ -1,170 +0,0 @@
-"""General filters for InvenTree."""
-
-from datetime import datetime
-
-from django.conf import settings
-from django.utils import timezone
-from django.utils.timezone import make_aware
-
-from django_filters import rest_framework as rest_filters
-from rest_framework import filters
-
-import InvenTree.helpers
-
-
-class InvenTreeDateFilter(rest_filters.DateFilter):
-    """Custom DateFilter class which handles timezones correctly."""
-
-    def filter(self, qs, value):
-        """Override the filter method to handle timezones correctly."""
-
-        if settings.USE_TZ:
-            if value is not None:
-                tz = timezone.get_current_timezone()
-                value = datetime(value.year, value.month, value.day)
-                value = make_aware(value, tz, True)
-
-        return super().filter(qs, value)
-
-
-class InvenTreeSearchFilter(filters.SearchFilter):
-    """Custom search filter which allows adjusting of search terms dynamically"""
-
-    def get_search_fields(self, view, request):
-        """Return a set of search fields for the request, adjusted based on request params.
-
-        The following query params are available to 'augment' the search (in decreasing order of priority)
-        - search_regex: If True, search is performed on 'regex' comparison
-        """
-        regex = InvenTree.helpers.str2bool(request.query_params.get('search_regex', False))
-
-        search_fields = super().get_search_fields(view, request)
-
-        fields = []
-
-        if search_fields:
-            for field in search_fields:
-                if regex:
-                    field = '$' + field
-
-                fields.append(field)
-
-        return fields
-
-    def get_search_terms(self, request):
-        """Return the search terms for this search request.
-
-        Depending on the request parameters, we may "augment" these somewhat
-        """
-        whole = InvenTree.helpers.str2bool(request.query_params.get('search_whole', False))
-
-        terms = []
-
-        search_terms = super().get_search_terms(request)
-
-        if search_terms:
-            for term in search_terms:
-                term = term.strip()
-
-                if not term:
-                    # Ignore blank inputs
-                    continue
-
-                if whole:
-                    # Wrap the search term to enable word-boundary matching
-                    term = r"\y" + term + r"\y"
-
-                terms.append(term)
-
-        return terms
-
-
-class InvenTreeOrderingFilter(filters.OrderingFilter):
-    """Custom OrderingFilter class which allows aliased filtering of related fields.
-
-    To use, simply specify this filter in the "filter_backends" section.
-
-    filter_backends = [
-        InvenTreeOrderingFilter,
-    ]
-
-    Then, specify a ordering_field_aliases attribute:
-
-    ordering_field_alises = {
-        'name': 'part__part__name',
-        'SKU': 'part__SKU',
-    }
-    """
-
-    def get_ordering(self, request, queryset, view):
-        """Override ordering for supporting aliases."""
-        ordering = super().get_ordering(request, queryset, view)
-
-        aliases = getattr(view, 'ordering_field_aliases', None)
-
-        # Attempt to map ordering fields based on provided aliases
-        if ordering is not None and aliases is not None:
-            """Ordering fields should be mapped to separate fields."""
-
-            ordering_initial = ordering
-            ordering = []
-
-            for field in ordering_initial:
-
-                reverse = field.startswith('-')
-
-                if reverse:
-                    field = field[1:]
-
-                # Are aliases defined for this field?
-                if field in aliases:
-                    alias = aliases[field]
-                else:
-                    alias = field
-
-                """
-                Potentially, a single field could be "aliased" to multiple field,
-
-                (For example to enforce a particular ordering sequence)
-
-                e.g. to filter first by the integer value...
-
-                ordering_field_aliases = {
-                    "reference": ["integer_ref", "reference"]
-                }
-
-                """
-
-                if type(alias) is str:
-                    alias = [alias]
-                elif type(alias) in [list, tuple]:
-                    pass
-                else:
-                    # Unsupported alias type
-                    continue
-
-                for a in alias:
-                    if reverse:
-                        a = '-' + a
-
-                    ordering.append(a)
-
-        return ordering
-
-
-SEARCH_ORDER_FILTER = [
-    rest_filters.DjangoFilterBackend,
-    InvenTreeSearchFilter,
-    filters.OrderingFilter,
-]
-
-SEARCH_ORDER_FILTER_ALIAS = [
-    rest_filters.DjangoFilterBackend,
-    InvenTreeSearchFilter,
-    InvenTreeOrderingFilter,
-]
-
-ORDER_FILTER = [
-    rest_filters.DjangoFilterBackend,
-    filters.OrderingFilter,
-]

InvenTree/InvenTree/format.py

@@ -1,199 +0,0 @@
-"""Custom string formatting functions and helpers"""
-
-import re
-import string
-
-from django.conf import settings
-from django.utils import translation
-from django.utils.translation import gettext_lazy as _
-
-from babel import Locale
-from babel.numbers import parse_pattern
-from djmoney.money import Money
-
-
-def parse_format_string(fmt_string: str) -> dict:
-    """Extract formatting information from the provided format string.
-
-    Returns a dict object which contains structured information about the format groups
-    """
-    groups = string.Formatter().parse(fmt_string)
-
-    info = {}
-
-    seen_groups = set()
-
-    for group in groups:
-        # Skip any group which does not have a named value
-        if not group[1]:
-            continue
-
-        name = group[1]
-
-        # Check for duplicate named groups
-        if name in seen_groups:
-            raise ValueError(f"Duplicate group '{name}'")
-        else:
-            seen_groups.add(name)
-
-        info[group[1]] = {
-            'format': group[1],
-            'prefix': group[0],
-        }
-
-    return info
-
-
-def construct_format_regex(fmt_string: str) -> str:
-    r"""Construct a regular expression based on a provided format string
-
-    This function turns a python format string into a regular expression,
-    which can be used for two purposes:
-
-    - Ensure that a particular string matches the specified format
-    - Extract named variables from a matching string
-
-    This function also provides support for wildcard characters:
-
-    - '?' provides single character matching; is converted to a '.' (period) for regex
-    - '#' provides single digit matching; is converted to '\d'
-
-    Args:
-        fmt_string: A typical format string e.g. "PO-???-{ref:04d}"
-
-    Returns:
-        str: A regular expression pattern e.g. ^PO\-...\-(?P<ref>.*)$
-
-    Raises:
-        ValueError: Format string is invalid
-    """
-    pattern = "^"
-
-    for group in string.Formatter().parse(fmt_string):
-        prefix = group[0]  # Prefix (literal text appearing before this group)
-        name = group[1]  # Name of this format variable
-        format = group[2]  # Format specifier e.g :04d
-
-        rep = [
-            '+', '-', '.',
-            '{', '}', '(', ')',
-            '^', '$', '~', '!', '@', ':', ';', '|', '\'', '"',
-        ]
-
-        # Escape any special regex characters
-        for ch in rep:
-            prefix = prefix.replace(ch, '\\' + ch)
-
-        # Replace ? with single-character match
-        prefix = prefix.replace('?', '.')
-
-        # Replace # with single-digit match
-        prefix = prefix.replace('#', r'\d')
-
-        pattern += prefix
-
-        # Add a named capture group for the format entry
-        if name:
-
-            # Check if integer values are required
-            if format.endswith('d'):
-                chr = '\d'
-            else:
-                chr = '.'
-
-            # Specify width
-            # TODO: Introspect required width
-            w = '+'
-
-            pattern += f"(?P<{name}>{chr}{w})"
-
-    pattern += "$"
-
-    return pattern
-
-
-def validate_string(value: str, fmt_string: str) -> str:
-    """Validate that the provided string matches the specified format.
-
-    Args:
-        value: The string to be tested e.g. 'SO-1234-ABC',
-        fmt_string: The required format e.g. 'SO-{ref}-???',
-
-    Returns:
-        bool: True if the value matches the required format, else False
-
-    Raises:
-        ValueError: The provided format string is invalid
-    """
-    pattern = construct_format_regex(fmt_string)
-
-    result = re.match(pattern, value)
-
-    return result is not None
-
-
-def extract_named_group(name: str, value: str, fmt_string: str) -> str:
-    """Extract a named value from the provided string, given the provided format string
-
-    Args:
-        name: Name of group to extract e.g. 'ref'
-        value: Raw string e.g. 'PO-ABC-1234'
-        fmt_string: Format pattern e.g. 'PO-???-{ref}
-
-    Returns:
-        str: String value of the named group
-
-    Raises:
-        ValueError: format string is incorrectly specified, or provided value does not match format string
-        NameError: named value does not exist in the format string
-        IndexError: named value could not be found in the provided entry
-    """
-    info = parse_format_string(fmt_string)
-
-    if name not in info.keys():
-        raise NameError(_(f"Value '{name}' does not appear in pattern format"))
-
-    # Construct a regular expression for matching against the provided format string
-    # Note: This will raise a ValueError if 'fmt_string' is incorrectly specified
-    pattern = construct_format_regex(fmt_string)
-
-    # Run the regex matcher against the raw string
-    result = re.match(pattern, value)
-
-    if not result:
-        raise ValueError(_("Provided value does not match required pattern: ") + fmt_string)
-
-    # And return the value we are interested in
-    # Note: This will raise an IndexError if the named group was not matched
-    return result.group(name)
-
-
-def format_money(money: Money, decimal_places: int = None, format: str = None) -> str:
-    """Format money object according to the currently set local
-
-    Args:
-        decimal_places: Number of decimal places to use
-        format: Format pattern according LDML / the babel format pattern syntax (https://babel.pocoo.org/en/latest/numbers.html)
-
-    Returns:
-        str: The formatted string
-
-    Raises:
-        ValueError: format string is incorrectly specified
-    """
-    language = None and translation.get_language() or settings.LANGUAGE_CODE
-    locale = Locale.parse(translation.to_locale(language))
-    if format:
-        pattern = parse_pattern(format)
-    else:
-        pattern = locale.currency_formats["standard"]
-        if decimal_places is not None:
-            pattern.frac_prec = (decimal_places, decimal_places)
-
-    return pattern.apply(
-        money.amount,
-        locale,
-        currency=money.currency.code,
-        currency_digits=decimal_places is None,
-        decimal_quantization=decimal_places is not None,
-    )

InvenTree/InvenTree/forms.py

@@ -1,384 +0,0 @@
-"""Helper forms which subclass Django forms to provide additional functionality."""
-
-import logging
-from urllib.parse import urlencode
-
-from django import forms
-from django.conf import settings
-from django.contrib.auth.models import Group, User
-from django.contrib.sites.models import Site
-from django.http import HttpResponseRedirect
-from django.urls import reverse
-from django.utils.translation import gettext_lazy as _
-
-from allauth.account.adapter import DefaultAccountAdapter
-from allauth.account.forms import LoginForm, SignupForm, set_form_field_order
-from allauth.core.exceptions import ImmediateHttpResponse
-from allauth.socialaccount.adapter import DefaultSocialAccountAdapter
-from allauth_2fa.adapter import OTPAdapter
-from allauth_2fa.utils import user_has_valid_totp_device
-from crispy_forms.bootstrap import (AppendedText, PrependedAppendedText,
-                                    PrependedText)
-from crispy_forms.helper import FormHelper
-from crispy_forms.layout import Field, Layout
-from dj_rest_auth.registration.serializers import RegisterSerializer
-from rest_framework import serializers
-
-import InvenTree.sso
-from common.models import InvenTreeSetting
-from InvenTree.exceptions import log_error
-
-logger = logging.getLogger('inventree')
-
-
-class HelperForm(forms.ModelForm):
-    """Provides simple integration of crispy_forms extension."""
-
-    # Custom field decorations can be specified here, per form class
-    field_prefix = {}
-    field_suffix = {}
-    field_placeholder = {}
-
-    def __init__(self, *args, **kwargs):
-        """Setup layout."""
-        super(forms.ModelForm, self).__init__(*args, **kwargs)
-        self.helper = FormHelper()
-
-        self.helper.form_tag = False
-        self.helper.form_show_errors = True
-
-        """
-        Create a default 'layout' for this form.
-        Ref: https://django-crispy-forms.readthedocs.io/en/latest/layouts.html
-        This is required to do fancy things later (like adding PrependedText, etc).
-
-        Simply create a 'blank' layout for each available field.
-        """
-
-        self.rebuild_layout()
-
-    def rebuild_layout(self):
-        """Build crispy layout out of current fields."""
-        layouts = []
-
-        for field in self.fields:
-            prefix = self.field_prefix.get(field, None)
-            suffix = self.field_suffix.get(field, None)
-            placeholder = self.field_placeholder.get(field, '')
-
-            # Look for font-awesome icons
-            if prefix and prefix.startswith('fa-'):
-                prefix = f"<i class='fas {prefix}'/>"
-
-            if suffix and suffix.startswith('fa-'):
-                suffix = f"<i class='fas {suffix}'/>"
-
-            if prefix and suffix:
-                layouts.append(
-                    Field(
-                        PrependedAppendedText(
-                            field,
-                            prepended_text=prefix,
-                            appended_text=suffix,
-                            placeholder=placeholder
-                        )
-                    )
-                )
-
-            elif prefix:
-                layouts.append(
-                    Field(
-                        PrependedText(
-                            field,
-                            prefix,
-                            placeholder=placeholder
-                        )
-                    )
-                )
-
-            elif suffix:
-                layouts.append(
-                    Field(
-                        AppendedText(
-                            field,
-                            suffix,
-                            placeholder=placeholder
-                        )
-                    )
-                )
-
-            else:
-                layouts.append(Field(field, placeholder=placeholder))
-
-        self.helper.layout = Layout(*layouts)
-
-
-class EditUserForm(HelperForm):
-    """Form for editing user information."""
-
-    class Meta:
-        """Metaclass options."""
-
-        model = User
-        fields = [
-            'first_name',
-            'last_name',
-        ]
-
-
-class SetPasswordForm(HelperForm):
-    """Form for setting user password."""
-
-    class Meta:
-        """Metaclass options."""
-
-        model = User
-        fields = [
-            'enter_password',
-            'confirm_password',
-            'old_password',
-        ]
-
-    enter_password = forms.CharField(
-        max_length=100,
-        min_length=8,
-        required=True,
-        initial='',
-        widget=forms.PasswordInput(attrs={'autocomplete': 'off'}),
-        label=_('Enter password'),
-        help_text=_('Enter new password')
-    )
-
-    confirm_password = forms.CharField(
-        max_length=100,
-        min_length=8,
-        required=True,
-        initial='',
-        widget=forms.PasswordInput(attrs={'autocomplete': 'off'}),
-        label=_('Confirm password'),
-        help_text=_('Confirm new password')
-    )
-
-    old_password = forms.CharField(
-        label=_("Old password"),
-        strip=False,
-        required=False,
-        widget=forms.PasswordInput(attrs={'autocomplete': 'current-password', 'autofocus': True}),
-    )
-
-
-# override allauth
-class CustomLoginForm(LoginForm):
-    """Custom login form to override default allauth behaviour"""
-
-    def login(self, request, redirect_url=None):
-        """Perform login action.
-
-        First check that:
-        - A valid user has been supplied
-        """
-        if not self.user:
-            # No user supplied - redirect to the login page
-            return HttpResponseRedirect(reverse('account_login'))
-
-        # Now perform default login action
-        return super().login(request, redirect_url)
-
-
-class CustomSignupForm(SignupForm):
-    """Override to use dynamic settings."""
-
-    def __init__(self, *args, **kwargs):
-        """Check settings to influence which fields are needed."""
-        kwargs['email_required'] = InvenTreeSetting.get_setting('LOGIN_MAIL_REQUIRED')
-
-        super().__init__(*args, **kwargs)
-
-        # check for two mail fields
-        if InvenTreeSetting.get_setting('LOGIN_SIGNUP_MAIL_TWICE'):
-            self.fields["email2"] = forms.EmailField(
-                label=_("Email (again)"),
-                widget=forms.TextInput(
-                    attrs={
-                        "type": "email",
-                        "placeholder": _("Email address confirmation"),
-                    }
-                ),
-            )
-
-        # check for two password fields
-        if not InvenTreeSetting.get_setting('LOGIN_SIGNUP_PWD_TWICE'):
-            self.fields.pop("password2")
-
-        # reorder fields
-        set_form_field_order(self, ["username", "email", "email2", "password1", "password2", ])
-
-    def clean(self):
-        """Make sure the supplied emails match if enabled in settings."""
-        cleaned_data = super().clean()
-
-        # check for two mail fields
-        if InvenTreeSetting.get_setting('LOGIN_SIGNUP_MAIL_TWICE'):
-            email = cleaned_data.get("email")
-            email2 = cleaned_data.get("email2")
-            if (email and email2) and email != email2:
-                self.add_error("email2", _("You must type the same email each time."))
-
-        return cleaned_data
-
-
-def registration_enabled():
-    """Determine whether user registration is enabled."""
-    if InvenTreeSetting.get_setting('LOGIN_ENABLE_REG') or InvenTree.sso.registration_enabled():
-        if settings.EMAIL_HOST:
-            return True
-        else:
-            logger.error("Registration cannot be enabled, because EMAIL_HOST is not configured.")
-    return False
-
-
-class RegistratonMixin:
-    """Mixin to check if registration should be enabled."""
-
-    def is_open_for_signup(self, request, *args, **kwargs):
-        """Check if signup is enabled in settings.
-
-        Configure the class variable `REGISTRATION_SETTING` to set which setting should be used, default: `LOGIN_ENABLE_REG`.
-        """
-        if registration_enabled():
-            return super().is_open_for_signup(request, *args, **kwargs)
-        return False
-
-    def clean_email(self, email):
-        """Check if the mail is valid to the pattern in LOGIN_SIGNUP_MAIL_RESTRICTION (if enabled in settings)."""
-        mail_restriction = InvenTreeSetting.get_setting('LOGIN_SIGNUP_MAIL_RESTRICTION', None)
-        if not mail_restriction:
-            return super().clean_email(email)
-
-        split_email = email.split('@')
-        if len(split_email) != 2:
-            logger.error('The user %s has an invalid email address', email)
-            raise forms.ValidationError(_('The provided primary email address is not valid.'))
-
-        mailoptions = mail_restriction.split(',')
-        for option in mailoptions:
-            if not option.startswith('@'):
-                log_error('LOGIN_SIGNUP_MAIL_RESTRICTION is not configured correctly')
-                raise forms.ValidationError(_('The provided primary email address is not valid.'))
-            else:
-                if split_email[1] == option[1:]:
-                    return super().clean_email(email)
-
-        logger.info('The provided email domain for %s is not approved', email)
-        raise forms.ValidationError(_('The provided email domain is not approved.'))
-
-    def save_user(self, request, user, form, commit=True):
-        """Check if a default group is set in settings."""
-        # Create the user
-        user = super().save_user(request, user, form)
-
-        # Check if a default group is set in settings
-        start_group = InvenTreeSetting.get_setting('SIGNUP_GROUP')
-        if start_group:
-            try:
-                group = Group.objects.get(id=start_group)
-                user.groups.add(group)
-            except Group.DoesNotExist:
-                logger.exception('The setting `SIGNUP_GROUP` contains an non existent group', start_group)
-        user.save()
-        return user
-
-
-class CustomUrlMixin:
-    """Mixin to set urls."""
-
-    def get_email_confirmation_url(self, request, emailconfirmation):
-        """Custom email confirmation (activation) url."""
-        url = reverse("account_confirm_email", args=[emailconfirmation.key])
-        return Site.objects.get_current().domain + url
-
-
-class CustomAccountAdapter(CustomUrlMixin, RegistratonMixin, OTPAdapter, DefaultAccountAdapter):
-    """Override of adapter to use dynamic settings."""
-
-    def send_mail(self, template_prefix, email, context):
-        """Only send mail if backend configured."""
-        if settings.EMAIL_HOST:
-            try:
-                result = super().send_mail(template_prefix, email, context)
-            except Exception:
-                # An exception occurred while attempting to send email
-                # Log it (for admin users) and return silently
-                log_error('account email')
-                result = False
-
-            return result
-
-        return False
-
-    def get_email_confirmation_url(self, request, emailconfirmation):
-        """Construct the email confirmation url"""
-        from InvenTree.helpers_model import construct_absolute_url
-
-        url = super().get_email_confirmation_url(request, emailconfirmation)
-        url = construct_absolute_url(url)
-        return url
-
-
-class CustomSocialAccountAdapter(CustomUrlMixin, RegistratonMixin, DefaultSocialAccountAdapter):
-    """Override of adapter to use dynamic settings."""
-
-    def is_auto_signup_allowed(self, request, sociallogin):
-        """Check if auto signup is enabled in settings."""
-        if InvenTreeSetting.get_setting('LOGIN_SIGNUP_SSO_AUTO', True):
-            return super().is_auto_signup_allowed(request, sociallogin)
-        return False
-
-    # from OTPAdapter
-    def has_2fa_enabled(self, user):
-        """Returns True if the user has 2FA configured."""
-        return user_has_valid_totp_device(user)
-
-    def login(self, request, user):
-        """Ensure user is send to 2FA before login if enabled."""
-        # Require two-factor authentication if it has been configured.
-        if self.has_2fa_enabled(user):
-            # Cast to string for the case when this is not a JSON serializable
-            # object, e.g. a UUID.
-            request.session['allauth_2fa_user_id'] = str(user.id)
-
-            redirect_url = reverse('two-factor-authenticate')
-            # Add GET parameters to the URL if they exist.
-            if request.GET:
-                redirect_url += '?' + urlencode(request.GET)
-
-            raise ImmediateHttpResponse(
-                response=HttpResponseRedirect(redirect_url)
-            )
-
-        # Otherwise defer to the original allauth adapter.
-        return super().login(request, user)
-
-    def authentication_error(self, request, provider_id, error=None, exception=None, extra_context=None):
-        """Callback method for authentication errors."""
-
-        # Log the error to the database
-        log_error(request.path if request else 'sso')
-        logger.error("SSO error for provider '%s' - check admin error log", provider_id)
-
-
-# override dj-rest-auth
-class CustomRegisterSerializer(RegisterSerializer):
-    """Override of serializer to use dynamic settings."""
-    email = serializers.EmailField()
-
-    def __init__(self, instance=None, data=..., **kwargs):
-        """Check settings to influence which fields are needed."""
-        kwargs['email_required'] = InvenTreeSetting.get_setting('LOGIN_MAIL_REQUIRED')
-        super().__init__(instance, data, **kwargs)
-
-    def save(self, request):
-        """Override to check if registration is open."""
-        if registration_enabled():
-            return super().save(request)
-        raise forms.ValidationError(_('Registration is disabled.'))

InvenTree/InvenTree/helpers.py

@@ -1,847 +0,0 @@
-"""Provides helper functions used throughout the InvenTree project."""
-
-import hashlib
-import io
-import json
-import logging
-import os
-import os.path
-import re
-from decimal import Decimal, InvalidOperation
-from wsgiref.util import FileWrapper
-
-from django.conf import settings
-from django.contrib.staticfiles.storage import StaticFilesStorage
-from django.core.exceptions import FieldError, ValidationError
-from django.core.files.storage import default_storage
-from django.http import StreamingHttpResponse
-from django.utils.translation import gettext_lazy as _
-
-import regex
-from bleach import clean
-from djmoney.money import Money
-from PIL import Image
-
-import InvenTree.version
-from common.settings import currency_code_default
-
-from .settings import MEDIA_URL, STATIC_URL
-
-logger = logging.getLogger('inventree')
-
-
-def generateTestKey(test_name):
-    """Generate a test 'key' for a given test name. This must not have illegal chars as it will be used for dict lookup in a template.
-
-    Tests must be named such that they will have unique keys.
-    """
-    key = test_name.strip().lower()
-    key = key.replace(" ", "")
-
-    # Remove any characters that cannot be used to represent a variable
-    key = re.sub(r'[^a-zA-Z0-9]', '', key)
-
-    return key
-
-
-def constructPathString(path, max_chars=250):
-    """Construct a 'path string' for the given path.
-
-    Arguments:
-        path: A list of strings e.g. ['path', 'to', 'location']
-        max_chars: Maximum number of characters
-    """
-    pathstring = '/'.join(path)
-
-    # Replace middle elements to limit the pathstring
-    if len(pathstring) > max_chars:
-        n = int(max_chars / 2 - 2)
-        pathstring = pathstring[:n] + "..." + pathstring[-n:]
-
-    return pathstring
-
-
-def getMediaUrl(filename):
-    """Return the qualified access path for the given file, under the media directory."""
-    return os.path.join(MEDIA_URL, str(filename))
-
-
-def getStaticUrl(filename):
-    """Return the qualified access path for the given file, under the static media directory."""
-    return os.path.join(STATIC_URL, str(filename))
-
-
-def TestIfImage(img):
-    """Test if an image file is indeed an image."""
-    try:
-        Image.open(img).verify()
-        return True
-    except Exception:
-        return False
-
-
-def getBlankImage():
-    """Return the qualified path for the 'blank image' placeholder."""
-    return getStaticUrl("img/blank_image.png")
-
-
-def getBlankThumbnail():
-    """Return the qualified path for the 'blank image' thumbnail placeholder."""
-    return getStaticUrl("img/blank_image.thumbnail.png")
-
-
-def getLogoImage(as_file=False, custom=True):
-    """Return the InvenTree logo image, or a custom logo if available."""
-    """Return the path to the logo-file."""
-    if custom and settings.CUSTOM_LOGO:
-
-        static_storage = StaticFilesStorage()
-
-        if static_storage.exists(settings.CUSTOM_LOGO):
-            storage = static_storage
-        elif default_storage.exists(settings.CUSTOM_LOGO):
-            storage = default_storage
-        else:
-            storage = None
-
-        if storage is not None:
-            if as_file:
-                return f"file://{storage.path(settings.CUSTOM_LOGO)}"
-            return storage.url(settings.CUSTOM_LOGO)
-
-    # If we have got to this point, return the default logo
-    if as_file:
-        path = settings.STATIC_ROOT.joinpath('img/inventree.png')
-        return f"file://{path}"
-    return getStaticUrl('img/inventree.png')
-
-
-def getSplashScreen(custom=True):
-    """Return the InvenTree splash screen, or a custom splash if available"""
-    static_storage = StaticFilesStorage()
-
-    if custom and settings.CUSTOM_SPLASH:
-
-        if static_storage.exists(settings.CUSTOM_SPLASH):
-            return static_storage.url(settings.CUSTOM_SPLASH)
-
-    # No custom splash screen
-    return static_storage.url("img/inventree_splash.jpg")
-
-
-def TestIfImageURL(url):
-    """Test if an image URL (or filename) looks like a valid image format.
-
-    Simply tests the extension against a set of allowed values
-    """
-    return os.path.splitext(os.path.basename(url))[-1].lower() in [
-        '.jpg', '.jpeg', '.j2k',
-        '.png', '.bmp',
-        '.tif', '.tiff',
-        '.webp', '.gif',
-    ]
-
-
-def str2bool(text, test=True):
-    """Test if a string 'looks' like a boolean value.
-
-    Args:
-        text: Input text
-        test (default = True): Set which boolean value to look for
-
-    Returns:
-        True if the text looks like the selected boolean value
-    """
-    if test:
-        return str(text).lower() in ['1', 'y', 'yes', 't', 'true', 'ok', 'on', ]
-    return str(text).lower() in ['0', 'n', 'no', 'none', 'f', 'false', 'off', ]
-
-
-def str2int(text, default=None):
-    """Convert a string to int if possible
-
-    Args:
-        text: Int like string
-        default: Return value if str is no int like
-
-    Returns:
-        Converted int value
-    """
-    try:
-        return int(text)
-    except Exception:
-        return default
-
-
-def is_bool(text):
-    """Determine if a string value 'looks' like a boolean."""
-    if str2bool(text, True):
-        return True
-    elif str2bool(text, False):
-        return True
-    return False
-
-
-def isNull(text):
-    """Test if a string 'looks' like a null value. This is useful for querying the API against a null key.
-
-    Args:
-        text: Input text
-
-    Returns:
-        True if the text looks like a null value
-    """
-    return str(text).strip().lower() in ['top', 'null', 'none', 'empty', 'false', '-1', '']
-
-
-def normalize(d):
-    """Normalize a decimal number, and remove exponential formatting."""
-    if type(d) is not Decimal:
-        d = Decimal(d)
-
-    d = d.normalize()
-
-    # Ref: https://docs.python.org/3/library/decimal.html
-    return d.quantize(Decimal(1)) if d == d.to_integral() else d.normalize()
-
-
-def increment(value):
-    """Attempt to increment an integer (or a string that looks like an integer).
-
-    e.g.
-
-    001 -> 002
-    2 -> 3
-    AB01 -> AB02
-    QQQ -> QQQ
-
-    """
-    value = str(value).strip()
-
-    # Ignore empty strings
-    if value in ['', None]:
-        # Provide a default value if provided with a null input
-        return '1'
-
-    pattern = r"(.*?)(\d+)?$"
-
-    result = re.search(pattern, value)
-
-    # No match!
-    if result is None:
-        return value
-
-    groups = result.groups()
-
-    # If we cannot match the regex, then simply return the provided value
-    if len(groups) != 2:
-        return value
-
-    prefix, number = groups
-
-    # No number extracted? Simply return the prefix (without incrementing!)
-    if not number:
-        return prefix
-
-    # Record the width of the number
-    width = len(number)
-
-    try:
-        number = int(number) + 1
-        number = str(number)
-    except ValueError:
-        pass
-
-    number = number.zfill(width)
-
-    return prefix + number
-
-
-def decimal2string(d):
-    """Format a Decimal number as a string, stripping out any trailing zeroes or decimal points. Essentially make it look like a whole number if it is one.
-
-    Args:
-        d: A python Decimal object
-
-    Returns:
-        A string representation of the input number
-    """
-    if type(d) is Decimal:
-        d = normalize(d)
-
-    try:
-        # Ensure that the provided string can actually be converted to a float
-        float(d)
-    except ValueError:
-        # Not a number
-        return str(d)
-
-    s = str(d)
-
-    # Return entire number if there is no decimal place
-    if '.' not in s:
-        return s
-
-    return s.rstrip("0").rstrip(".")
-
-
-def decimal2money(d, currency=None):
-    """Format a Decimal number as Money.
-
-    Args:
-        d: A python Decimal object
-        currency: Currency of the input amount, defaults to default currency in settings
-
-    Returns:
-        A Money object from the input(s)
-    """
-    if not currency:
-        currency = currency_code_default()
-    return Money(d, currency)
-
-
-def WrapWithQuotes(text, quote='"'):
-    """Wrap the supplied text with quotes.
-
-    Args:
-        text: Input text to wrap
-        quote: Quote character to use for wrapping (default = "")
-
-    Returns:
-        Supplied text wrapped in quote char
-    """
-    if not text.startswith(quote):
-        text = quote + text
-
-    if not text.endswith(quote):
-        text = text + quote
-
-    return text
-
-
-def MakeBarcode(cls_name, object_pk: int, object_data=None, **kwargs):
-    """Generate a string for a barcode. Adds some global InvenTree parameters.
-
-    Args:
-        object_type: string describing the object type e.g. 'StockItem'
-        object_id: ID (Primary Key) of the object in the database
-        object_url: url for JSON API detail view of the object
-        data: Python dict object containing extra data which will be rendered to string (must only contain stringable values)
-
-    Returns:
-        json string of the supplied data plus some other data
-    """
-    if object_data is None:
-        object_data = {}
-
-    brief = kwargs.get('brief', True)
-
-    data = {}
-
-    if brief:
-        data[cls_name] = object_pk
-    else:
-        data['tool'] = 'InvenTree'
-        data['version'] = InvenTree.version.inventreeVersion()
-        data['instance'] = InvenTree.version.inventreeInstanceName()
-
-        # Ensure PK is included
-        object_data['id'] = object_pk
-        data[cls_name] = object_data
-
-    return str(json.dumps(data, sort_keys=True))
-
-
-def GetExportFormats():
-    """Return a list of allowable file formats for exporting data."""
-    return [
-        'csv',
-        'tsv',
-        'xls',
-        'xlsx',
-        'json',
-        'yaml',
-    ]
-
-
-def DownloadFile(data, filename, content_type='application/text', inline=False) -> StreamingHttpResponse:
-    """Create a dynamic file for the user to download.
-
-    Args:
-        data: Raw file data (string or bytes)
-        filename: Filename for the file download
-        content_type: Content type for the download
-        inline: Download "inline" or as attachment? (Default = attachment)
-
-    Return:
-        A StreamingHttpResponse object wrapping the supplied data
-    """
-    filename = WrapWithQuotes(filename)
-    length = len(data)
-
-    if isinstance(data, str):
-        wrapper = FileWrapper(io.StringIO(data))
-    else:
-        wrapper = FileWrapper(io.BytesIO(data))
-
-    response = StreamingHttpResponse(wrapper, content_type=content_type)
-    if isinstance(data, str):
-        length = len(bytes(data, response.charset))
-    response['Content-Length'] = length
-
-    disposition = "inline" if inline else "attachment"
-
-    response['Content-Disposition'] = f'{disposition}; filename={filename}'
-
-    return response
-
-
-def increment_serial_number(serial: str):
-    """Given a serial number, (attempt to) generate the *next* serial number.
-
-    Note: This method is exposed to custom plugins.
-
-    Arguments:
-        serial: The serial number which should be incremented
-
-    Returns:
-        incremented value, or None if incrementing could not be performed.
-    """
-    from plugin.registry import registry
-
-    # Ensure we start with a string value
-    if serial is not None:
-        serial = str(serial).strip()
-
-    # First, let any plugins attempt to increment the serial number
-    for plugin in registry.with_mixin('validation'):
-        result = plugin.increment_serial_number(serial)
-        if result is not None:
-            return str(result)
-
-    # If we get to here, no plugins were able to "increment" the provided serial value
-    # Attempt to perform increment according to some basic rules
-    return increment(serial)
-
-
-def extract_serial_numbers(input_string, expected_quantity: int, starting_value=None):
-    """Extract a list of serial numbers from a provided input string.
-
-    The input string can be specified using the following concepts:
-
-    - Individual serials are separated by comma: 1, 2, 3, 6,22
-    - Sequential ranges with provided limits are separated by hyphens: 1-5, 20 - 40
-    - The "next" available serial number can be specified with the tilde (~) character
-    - Serial numbers can be supplied as <start>+ for getting all expected numbers starting from <start>
-    - Serial numbers can be supplied as <start>+<length> for getting <length> numbers starting from <start>
-
-    Actual generation of sequential serials is passed to the 'validation' plugin mixin,
-    allowing custom plugins to determine how serial values are incremented.
-
-    Arguments:
-        input_string: Input string with specified serial numbers (string, or integer)
-        expected_quantity: The number of (unique) serial numbers we expect
-        starting_value: Provide a starting value for the sequence (or None)
-    """
-    if starting_value is None:
-        starting_value = increment_serial_number(None)
-
-    try:
-        expected_quantity = int(expected_quantity)
-    except ValueError:
-        raise ValidationError([_("Invalid quantity provided")])
-
-    if input_string:
-        input_string = str(input_string).strip()
-    else:
-        input_string = ''
-
-    if len(input_string) == 0:
-        raise ValidationError([_("Empty serial number string")])
-
-    next_value = increment_serial_number(starting_value)
-
-    # Substitute ~ character with latest value
-    while '~' in input_string and next_value:
-        input_string = input_string.replace('~', str(next_value), 1)
-        next_value = increment_serial_number(next_value)
-
-    # Split input string by whitespace or comma (,) characters
-    groups = re.split(r"[\s,]+", input_string)
-
-    serials = []
-    errors = []
-
-    def add_error(error: str):
-        """Helper function for adding an error message"""
-        if error not in errors:
-            errors.append(error)
-
-    def add_serial(serial):
-        """Helper function to check for duplicated values"""
-
-        serial = serial.strip()
-
-        # Ignore blank / empty serials
-        if len(serial) == 0:
-            return
-
-        if serial in serials:
-            add_error(_("Duplicate serial") + f": {serial}")
-        else:
-            serials.append(serial)
-
-    # If the user has supplied the correct number of serials, do not split into groups
-    if len(groups) == expected_quantity:
-        for group in groups:
-            add_serial(group)
-
-        if len(errors) > 0:
-            raise ValidationError(errors)
-        else:
-            return serials
-
-    for group in groups:
-
-        # Calculate the "remaining" quantity of serial numbers
-        remaining = expected_quantity - len(serials)
-
-        group = group.strip()
-
-        if '-' in group:
-            """Hyphen indicates a range of values:
-            e.g. 10-20
-            """
-            items = group.split('-')
-
-            if len(items) == 2:
-                a = items[0]
-                b = items[1]
-
-                if a == b:
-                    # Invalid group
-                    add_error(_(f"Invalid group range: {group}"))
-                    continue
-
-                group_items = []
-
-                count = 0
-
-                a_next = a
-
-                while a_next is not None and a_next not in group_items:
-                    group_items.append(a_next)
-                    count += 1
-
-                    # Progress to the 'next' sequential value
-                    a_next = str(increment_serial_number(a_next))
-
-                    if a_next == b:
-                        # Successfully got to the end of the range
-                        group_items.append(b)
-                        break
-
-                    elif count > remaining:
-                        # More than the allowed number of items
-                        break
-
-                    elif a_next is None:
-                        break
-
-                if len(group_items) > remaining:
-                    add_error(_(f"Group range {group} exceeds allowed quantity ({expected_quantity})"))
-                elif len(group_items) > 0 and group_items[0] == a and group_items[-1] == b:
-                    # In this case, the range extraction looks like it has worked
-                    for item in group_items:
-                        add_serial(item)
-                else:
-                    add_error(_(f"Invalid group range: {group}"))
-
-            else:
-                # In the case of a different number of hyphens, simply add the entire group
-                add_serial(group)
-
-        elif '+' in group:
-            """Plus character (+) indicates either:
-            - <start>+ - Expected number of serials, beginning at the specified 'start' character
-            - <start>+<num> - Specified number of serials, beginning at the specified 'start' character
-            """
-            items = group.split('+')
-
-            sequence_items = []
-            counter = 0
-            sequence_count = max(0, expected_quantity - len(serials))
-
-            if len(items) > 2 or len(items) == 0:
-                add_error(_(f"Invalid group sequence: {group}"))
-                continue
-            elif len(items) == 2:
-                try:
-                    if items[1]:
-                        sequence_count = int(items[1]) + 1
-                except ValueError:
-                    add_error(_(f"Invalid group sequence: {group}"))
-                    continue
-
-            value = items[0]
-
-            # Keep incrementing up to the specified quantity
-            while value is not None and value not in sequence_items and counter < sequence_count:
-                sequence_items.append(value)
-                value = increment_serial_number(value)
-                counter += 1
-
-            if len(sequence_items) == sequence_count:
-                for item in sequence_items:
-                    add_serial(item)
-            else:
-                add_error(_(f"Invalid group sequence: {group}"))
-
-        else:
-            # At this point, we assume that the 'group' is just a single serial value
-            add_serial(group)
-
-    if len(errors) > 0:
-        raise ValidationError(errors)
-
-    if len(serials) == 0:
-        raise ValidationError([_("No serial numbers found")])
-
-    if len(errors) == 0 and len(serials) != expected_quantity:
-        raise ValidationError([_(f"Number of unique serial numbers ({len(serials)}) must match quantity ({expected_quantity})")])
-
-    return serials
-
-
-def validateFilterString(value, model=None):
-    """Validate that a provided filter string looks like a list of comma-separated key=value pairs.
-
-    These should nominally match to a valid database filter based on the model being filtered.
-
-    e.g. "category=6, IPN=12"
-    e.g. "part__name=widget"
-
-    The ReportTemplate class uses the filter string to work out which items a given report applies to.
-    For example, an acceptance test report template might only apply to stock items with a given IPN,
-    so the string could be set to:
-
-    filters = "IPN = ACME0001"
-
-    Returns a map of key:value pairs
-    """
-    # Empty results map
-    results = {}
-
-    value = str(value).strip()
-
-    if not value or len(value) == 0:
-        return results
-
-    groups = value.split(',')
-
-    for group in groups:
-        group = group.strip()
-
-        pair = group.split('=')
-
-        if len(pair) != 2:
-            raise ValidationError(
-                f"Invalid group: {group}"
-            )
-
-        k, v = pair
-
-        k = k.strip()
-        v = v.strip()
-
-        if not k or not v:
-            raise ValidationError(
-                f"Invalid group: {group}"
-            )
-
-        results[k] = v
-
-    # If a model is provided, verify that the provided filters can be used against it
-    if model is not None:
-        try:
-            model.objects.filter(**results)
-        except FieldError as e:
-            raise ValidationError(
-                str(e),
-            )
-
-    return results
-
-
-def clean_decimal(number):
-    """Clean-up decimal value."""
-    # Check if empty
-    if number is None or number == '' or number == 0:
-        return Decimal(0)
-
-    # Convert to string and remove spaces
-    number = str(number).replace(' ', '')
-
-    # Guess what type of decimal and thousands separators are used
-    count_comma = number.count(',')
-    count_point = number.count('.')
-
-    if count_comma == 1:
-        # Comma is used as decimal separator
-        if count_point > 0:
-            # Points are used as thousands separators: remove them
-            number = number.replace('.', '')
-        # Replace decimal separator with point
-        number = number.replace(',', '.')
-    elif count_point == 1:
-        # Point is used as decimal separator
-        if count_comma > 0:
-            # Commas are used as thousands separators: remove them
-            number = number.replace(',', '')
-
-    # Convert to Decimal type
-    try:
-        clean_number = Decimal(number)
-    except InvalidOperation:
-        # Number cannot be converted to Decimal (eg. a string containing letters)
-        return Decimal(0)
-
-    return clean_number.quantize(Decimal(1)) if clean_number == clean_number.to_integral() else clean_number.normalize()
-
-
-def strip_html_tags(value: str, raise_error=True, field_name=None):
-    """Strip HTML tags from an input string using the bleach library.
-
-    If raise_error is True, a ValidationError will be thrown if HTML tags are detected
-    """
-    cleaned = clean(
-        value,
-        strip=True,
-        tags=[],
-        attributes=[],
-    )
-
-    # Add escaped characters back in
-    replacements = {
-        '&gt;': '>',
-        '&lt;': '<',
-        '&amp;': '&',
-    }
-
-    for o, r in replacements.items():
-        cleaned = cleaned.replace(o, r)
-
-    # If the length changed, it means that HTML tags were removed!
-    if len(cleaned) != len(value) and raise_error:
-
-        field = field_name or 'non_field_errors'
-
-        raise ValidationError({
-            field: [_("Remove HTML tags from this value")]
-        })
-
-    return cleaned
-
-
-def remove_non_printable_characters(value: str, remove_newline=True, remove_ascii=True, remove_unicode=True):
-    """Remove non-printable / control characters from the provided string"""
-    cleaned = value
-
-    if remove_ascii:
-        # Remove ASCII control characters
-        # Note that we do not sub out 0x0A (\n) here, it is done separately below
-        cleaned = regex.sub(u'[\x00-\x09]+', '', cleaned)
-        cleaned = regex.sub(u'[\x0b-\x1F\x7F]+', '', cleaned)
-
-    if remove_newline:
-        cleaned = regex.sub(u'[\x0a]+', '', cleaned)
-
-    if remove_unicode:
-        # Remove Unicode control characters
-        if remove_newline:
-            cleaned = regex.sub(u'[^\P{C}]+', '', cleaned)
-        else:
-            # Use 'negative-lookahead' to exclude newline character
-            cleaned = regex.sub(u'(?![\x0A])[^\P{C}]+', '', cleaned)
-
-    return cleaned
-
-
-def hash_barcode(barcode_data):
-    """Calculate a 'unique' hash for a barcode string.
-
-    This hash is used for comparison / lookup.
-
-    We first remove any non-printable characters from the barcode data,
-    as some browsers have issues scanning characters in.
-    """
-    barcode_data = str(barcode_data).strip()
-    barcode_data = remove_non_printable_characters(barcode_data)
-
-    hash = hashlib.md5(str(barcode_data).encode())
-
-    return str(hash.hexdigest())
-
-
-def get_objectreference(obj, type_ref: str = 'content_type', object_ref: str = 'object_id'):
-    """Lookup method for the GenericForeignKey fields.
-
-    Attributes:
-    - obj: object that will be resolved
-    - type_ref: field name for the contenttype field in the model
-    - object_ref: field name for the object id in the model
-
-    Example implementation in the serializer:
-    ```
-    target = serializers.SerializerMethodField()
-    def get_target(self, obj):
-        return get_objectreference(obj, 'target_content_type', 'target_object_id')
-    ```
-
-    The method name must always be the name of the field prefixed by 'get_'
-    """
-    model_cls = getattr(obj, type_ref)
-    obj_id = getattr(obj, object_ref)
-
-    # check if references are set -> return nothing if not
-    if model_cls is None or obj_id is None:
-        return None
-
-    # resolve referenced data into objects
-    model_cls = model_cls.model_class()
-
-    try:
-        item = model_cls.objects.get(id=obj_id)
-    except model_cls.DoesNotExist:
-        return None
-
-    url_fnc = getattr(item, 'get_absolute_url', None)
-
-    # create output
-    ret = {}
-    if url_fnc:
-        ret['link'] = url_fnc()
-    return {
-        'name': str(item),
-        'model': str(model_cls._meta.verbose_name),
-        **ret
-    }
-
-
-def inheritors(cls):
-    """Return all classes that are subclasses from the supplied cls."""
-    subcls = set()
-    work = [cls]
-
-    while work:
-        parent = work.pop()
-        for child in parent.__subclasses__():
-            if child not in subcls:
-                subcls.add(child)
-                work.append(child)
-    return subcls
-
-
-def is_ajax(request):
-    """Check if the current request is an AJAX request."""
-    return request.headers.get('x-requested-with') == 'XMLHttpRequest'

InvenTree/InvenTree/helpers_model.py

@@ -1,297 +0,0 @@
-"""Provides helper functions used throughout the InvenTree project that access the database."""
-
-import io
-import logging
-from decimal import Decimal
-from urllib.parse import urljoin
-
-from django.conf import settings
-from django.core.validators import URLValidator
-from django.db.utils import OperationalError, ProgrammingError
-from django.utils.translation import gettext_lazy as _
-
-import requests
-from djmoney.contrib.exchange.models import convert_money
-from djmoney.money import Money
-from PIL import Image
-
-import common.models
-import InvenTree
-import InvenTree.helpers_model
-import InvenTree.version
-from common.notifications import (InvenTreeNotificationBodies,
-                                  NotificationBody, trigger_notification)
-from InvenTree.format import format_money
-
-logger = logging.getLogger('inventree')
-
-
-def getSetting(key, backup_value=None):
-    """Shortcut for reading a setting value from the database."""
-    return common.models.InvenTreeSetting.get_setting(key, backup_value=backup_value)
-
-
-def construct_absolute_url(*arg, **kwargs):
-    """Construct (or attempt to construct) an absolute URL from a relative URL.
-
-    This is useful when (for example) sending an email to a user with a link
-    to something in the InvenTree web framework.
-    A URL is constructed in the following order:
-    1. If settings.SITE_URL is set (e.g. in the Django settings), use that
-    2. If the InvenTree setting INVENTREE_BASE_URL is set, use that
-    3. Otherwise, use the current request URL (if available)
-    """
-    relative_url = '/'.join(arg)
-
-    # If a site URL is provided, use that
-    site_url = getattr(settings, 'SITE_URL', None)
-
-    if not site_url:
-        # Otherwise, try to use the InvenTree setting
-        try:
-            site_url = common.models.InvenTreeSetting.get_setting('INVENTREE_BASE_URL', create=False, cache=False)
-        except (ProgrammingError, OperationalError):
-            pass
-
-    if not site_url:
-        # Otherwise, try to use the current request
-        request = kwargs.get('request', None)
-
-        if request:
-            site_url = request.build_absolute_uri('/')
-
-    if not site_url:
-        # No site URL available, return the relative URL
-        return relative_url
-
-    return urljoin(site_url, relative_url)
-
-
-def get_base_url(**kwargs):
-    """Return the base URL for the InvenTree server"""
-    return construct_absolute_url('', **kwargs)
-
-
-def download_image_from_url(remote_url, timeout=2.5):
-    """Download an image file from a remote URL.
-
-    This is a potentially dangerous operation, so we must perform some checks:
-    - The remote URL is available
-    - The Content-Length is provided, and is not too large
-    - The file is a valid image file
-
-    Arguments:
-        remote_url: The remote URL to retrieve image
-        max_size: Maximum allowed image size (default = 1MB)
-        timeout: Connection timeout in seconds (default = 5)
-
-    Returns:
-        An in-memory PIL image file, if the download was successful
-
-    Raises:
-        requests.exceptions.ConnectionError: Connection could not be established
-        requests.exceptions.Timeout: Connection timed out
-        requests.exceptions.HTTPError: Server responded with invalid response code
-        ValueError: Server responded with invalid 'Content-Length' value
-        TypeError: Response is not a valid image
-    """
-    # Check that the provided URL at least looks valid
-    validator = URLValidator()
-    validator(remote_url)
-
-    # Calculate maximum allowable image size (in bytes)
-    max_size = int(common.models.InvenTreeSetting.get_setting('INVENTREE_DOWNLOAD_IMAGE_MAX_SIZE')) * 1024 * 1024
-
-    # Add user specified user-agent to request (if specified)
-    user_agent = common.models.InvenTreeSetting.get_setting('INVENTREE_DOWNLOAD_FROM_URL_USER_AGENT')
-    if user_agent:
-        headers = {"User-Agent": user_agent}
-    else:
-        headers = None
-
-    try:
-        response = requests.get(
-            remote_url,
-            timeout=timeout,
-            allow_redirects=True,
-            stream=True,
-            headers=headers,
-        )
-        # Throw an error if anything goes wrong
-        response.raise_for_status()
-    except requests.exceptions.ConnectionError as exc:
-        raise Exception(_("Connection error") + f": {str(exc)}")
-    except requests.exceptions.Timeout as exc:
-        raise exc
-    except requests.exceptions.HTTPError:
-        raise requests.exceptions.HTTPError(_("Server responded with invalid status code") + f": {response.status_code}")
-    except Exception as exc:
-        raise Exception(_("Exception occurred") + f": {str(exc)}")
-
-    if response.status_code != 200:
-        raise Exception(_("Server responded with invalid status code") + f": {response.status_code}")
-
-    try:
-        content_length = int(response.headers.get('Content-Length', 0))
-    except ValueError:
-        raise ValueError(_("Server responded with invalid Content-Length value"))
-
-    if content_length > max_size:
-        raise ValueError(_("Image size is too large"))
-
-    # Download the file, ensuring we do not exceed the reported size
-    file = io.BytesIO()
-
-    dl_size = 0
-    chunk_size = 64 * 1024
-
-    for chunk in response.iter_content(chunk_size=chunk_size):
-        dl_size += len(chunk)
-
-        if dl_size > max_size:
-            raise ValueError(_("Image download exceeded maximum size"))
-
-        file.write(chunk)
-
-    if dl_size == 0:
-        raise ValueError(_("Remote server returned empty response"))
-
-    # Now, attempt to convert the downloaded data to a valid image file
-    # img.verify() will throw an exception if the image is not valid
-    try:
-        img = Image.open(file).convert()
-        img.verify()
-    except Exception:
-        raise TypeError(_("Supplied URL is not a valid image file"))
-
-    return img
-
-
-def render_currency(money, decimal_places=None, currency=None, min_decimal_places=None, max_decimal_places=None):
-    """Render a currency / Money object to a formatted string (e.g. for reports)
-
-    Arguments:
-        money: The Money instance to be rendered
-        decimal_places: The number of decimal places to render to. If unspecified, uses the PRICING_DECIMAL_PLACES setting.
-        currency: Optionally convert to the specified currency
-        min_decimal_places: The minimum number of decimal places to render to. If unspecified, uses the PRICING_DECIMAL_PLACES_MIN setting.
-        max_decimal_places: The maximum number of decimal places to render to. If unspecified, uses the PRICING_DECIMAL_PLACES setting.
-    """
-    if money in [None, '']:
-        return '-'
-
-    if type(money) is not Money:
-        return '-'
-
-    if currency is not None:
-        # Attempt to convert to the provided currency
-        # If cannot be done, leave the original
-        try:
-            money = convert_money(money, currency)
-        except Exception:
-            pass
-
-    if decimal_places is None:
-        decimal_places = common.models.InvenTreeSetting.get_setting('PRICING_DECIMAL_PLACES', 6)
-
-    if min_decimal_places is None:
-        min_decimal_places = common.models.InvenTreeSetting.get_setting('PRICING_DECIMAL_PLACES_MIN', 0)
-
-    if max_decimal_places is None:
-        max_decimal_places = common.models.InvenTreeSetting.get_setting('PRICING_DECIMAL_PLACES', 6)
-
-    value = Decimal(str(money.amount)).normalize()
-    value = str(value)
-
-    if '.' in value:
-        decimals = len(value.split('.')[-1])
-
-        decimals = max(decimals, min_decimal_places)
-        decimals = min(decimals, decimal_places)
-
-        decimal_places = decimals
-    else:
-        decimal_places = max(decimal_places, 2)
-
-    decimal_places = max(decimal_places, max_decimal_places)
-
-    return format_money(money, decimal_places=decimal_places)
-
-
-def getModelsWithMixin(mixin_class) -> list:
-    """Return a list of models that inherit from the given mixin class.
-
-    Args:
-        mixin_class: The mixin class to search for
-    Returns:
-        List of models that inherit from the given mixin class
-    """
-    from django.contrib.contenttypes.models import ContentType
-
-    try:
-        db_models = [x.model_class() for x in ContentType.objects.all() if x is not None]
-    except (OperationalError, ProgrammingError):
-        # Database is likely not yet ready
-        db_models = []
-
-    return [x for x in db_models if x is not None and issubclass(x, mixin_class)]
-
-
-def notify_responsible(instance, sender, content: NotificationBody = InvenTreeNotificationBodies.NewOrder, exclude=None):
-    """Notify all responsible parties of a change in an instance.
-
-    Parses the supplied content with the provided instance and sender and sends a notification to all responsible users,
-    excluding the optional excluded list.
-
-    Args:
-        instance: The newly created instance
-        sender: Sender model reference
-        content (NotificationBody, optional): _description_. Defaults to InvenTreeNotificationBodies.NewOrder.
-        exclude (User, optional): User instance that should be excluded. Defaults to None.
-    """
-    notify_users([instance.responsible], instance, sender, content=content, exclude=exclude)
-
-
-def notify_users(users, instance, sender, content: NotificationBody = InvenTreeNotificationBodies.NewOrder, exclude=None):
-    """Notify all passed users or groups.
-
-    Parses the supplied content with the provided instance and sender and sends a notification to all users,
-    excluding the optional excluded list.
-
-    Args:
-        users: List of users or groups to notify
-        instance: The newly created instance
-        sender: Sender model reference
-        content (NotificationBody, optional): _description_. Defaults to InvenTreeNotificationBodies.NewOrder.
-        exclude (User, optional): User instance that should be excluded. Defaults to None.
-    """
-    # Setup context for notification parsing
-    content_context = {
-        'instance': str(instance),
-        'verbose_name': sender._meta.verbose_name,
-        'app_label': sender._meta.app_label,
-        'model_name': sender._meta.model_name,
-    }
-
-    # Setup notification context
-    context = {
-        'instance': instance,
-        'name': content.name.format(**content_context),
-        'message': content.message.format(**content_context),
-        'link': InvenTree.helpers_model.construct_absolute_url(instance.get_absolute_url()),
-        'template': {
-            'subject': content.name.format(**content_context),
-        }
-    }
-
-    if content.template:
-        context['template']['html'] = content.template.format(**content_context)
-
-    # Create notification
-    trigger_notification(
-        instance,
-        content.slug.format(**content_context),
-        targets=users,
-        target_exclude=[exclude],
-        context=context,
-    )

InvenTree/InvenTree/magic_login.py

@@ -1,75 +0,0 @@
-"""Functions for magic login."""
-from django.conf import settings
-from django.contrib.auth.models import User
-from django.contrib.sites.models import Site
-from django.core.mail import send_mail
-from django.template.loader import render_to_string
-from django.urls import reverse
-from django.utils.translation import gettext_lazy as _
-
-import sesame.utils
-from rest_framework import serializers
-from rest_framework.response import Response
-from rest_framework.views import APIView
-
-
-def send_simple_login_email(user, link):
-    """Send an email with the login link to this user."""
-    site = Site.objects.get_current()
-
-    context = {
-        "username": user.username,
-        "site_name": site.name,
-        "link": link,
-    }
-    email_plaintext_message = render_to_string("InvenTree/user_simple_login.txt", context)
-
-    send_mail(
-        _(f"[{site.name}] Log in to the app"),
-        email_plaintext_message,
-        settings.DEFAULT_FROM_EMAIL,
-        [user.email],
-    )
-
-
-class GetSimpleLoginSerializer(serializers.Serializer):
-    """Serializer for the simple login view."""
-
-    email = serializers.CharField(label=_("Email"))
-
-
-class GetSimpleLoginView(APIView):
-    """View to send a simple login link."""
-
-    permission_classes = ()
-    serializer_class = GetSimpleLoginSerializer
-
-    def post(self, request, *args, **kwargs):
-        """Get the token for the current user or fail."""
-        serializer = self.serializer_class(data=request.data)
-        serializer.is_valid(raise_exception=True)
-        self.email_submitted(email=serializer.data["email"])
-        return Response({"status": "ok"})
-
-    def email_submitted(self, email):
-        """Notify user about link."""
-        user = self.get_user(email)
-        if user is None:
-            print("user not found:", email)
-            return
-        link = self.create_link(user)
-        send_simple_login_email(user, link)
-
-    def get_user(self, email):
-        """Find the user with this email address."""
-        try:
-            return User.objects.get(email=email)
-        except User.DoesNotExist:
-            return None
-
-    def create_link(self, user):
-        """Create a login link for this user."""
-        link = reverse("sesame-login")
-        link = self.request.build_absolute_uri(link)
-        link += sesame.utils.get_query_string(user)
-        return link

InvenTree/InvenTree/management/commands/prerender.py

@@ -1,64 +0,0 @@
-"""Custom management command to prerender files."""
-
-import os
-
-from django.conf import settings
-from django.core.management.base import BaseCommand
-from django.http.request import HttpRequest
-from django.template.loader import render_to_string
-from django.utils.module_loading import import_string
-from django.utils.translation import override as lang_over
-
-
-def render_file(file_name, source, target, locales, ctx):
-    """Renders a file into all provided locales."""
-    for locale in locales:
-
-        # Enforce lower-case for locale names
-        locale = locale.lower()
-        locale = locale.replace('_', '-')
-
-        target_file = os.path.join(target, locale + '.' + file_name)
-
-        with open(target_file, 'w') as localised_file:
-            with lang_over(locale):
-                rendered = render_to_string(os.path.join(source, file_name), ctx)
-                localised_file.write(rendered)
-
-
-class Command(BaseCommand):
-    """Django command to prerender files."""
-
-    def handle(self, *args, **kwargs):
-        """Django command to prerender files."""
-        # static directories
-        LC_DIR = settings.LOCALE_PATHS[0]
-        SOURCE_DIR = settings.STATICFILES_I18_SRC
-        TARGET_DIR = settings.STATICFILES_I18_TRG
-
-        # ensure static directory exists
-        if not os.path.exists(TARGET_DIR):
-            os.makedirs(TARGET_DIR, exist_ok=True)
-
-        # collect locales
-        locales = {}
-        for locale in os.listdir(LC_DIR):
-            path = os.path.join(LC_DIR, locale)
-            if os.path.exists(path) and os.path.isdir(path):
-                locales[locale] = locale
-
-        # render!
-        request = HttpRequest()
-        ctx = {}
-        processors = tuple(import_string(path) for path in settings.STATFILES_I18_PROCESSORS)
-        for processor in processors:
-            ctx.update(processor(request))
-
-        for file in os.listdir(SOURCE_DIR, ):
-            path = os.path.join(SOURCE_DIR, file)
-            if os.path.exists(path) and os.path.isfile(path):
-                print(f"render {file}")
-                render_file(file, SOURCE_DIR, TARGET_DIR, locales, ctx)
-            else:
-                raise NotImplementedError('Using multi-level directories is not implemented at this point')  # TODO multilevel dir if needed
-        print(f"rendered all files in {SOURCE_DIR}")

InvenTree/InvenTree/management/commands/rebuild_models.py

@@ -1,57 +0,0 @@
-"""Custom management command to rebuild all MPTT models.
-
-- This is crucial after importing any fixtures, etc
-"""
-
-from django.core.management.base import BaseCommand
-
-
-class Command(BaseCommand):
-    """Rebuild all database models which leverage the MPTT structure."""
-
-    def handle(self, *args, **kwargs):
-        """Rebuild all database models which leverage the MPTT structure."""
-        # Part model
-        try:
-            print("Rebuilding Part objects")
-
-            from part.models import Part
-            Part.objects.rebuild()
-        except Exception:
-            print("Error rebuilding Part objects")
-
-        # Part category
-        try:
-            print("Rebuilding PartCategory objects")
-
-            from part.models import PartCategory
-            PartCategory.objects.rebuild()
-        except Exception:
-            print("Error rebuilding PartCategory objects")
-
-        # StockItem model
-        try:
-            print("Rebuilding StockItem objects")
-
-            from stock.models import StockItem
-            StockItem.objects.rebuild()
-        except Exception:
-            print("Error rebuilding StockItem objects")
-
-        # StockLocation model
-        try:
-            print("Rebuilding StockLocation objects")
-
-            from stock.models import StockLocation
-            StockLocation.objects.rebuild()
-        except Exception:
-            print("Error rebuilding StockLocation objects")
-
-        # Build model
-        try:
-            print("Rebuilding Build objects")
-
-            from build.models import Build
-            Build.objects.rebuild()
-        except Exception:
-            print("Error rebuilding Build objects")

InvenTree/InvenTree/management/commands/rebuild_thumbnails.py

@@ -1,56 +0,0 @@
-"""Custom management command to rebuild thumbnail images.
-
-- May be required after importing a new dataset, for example
-"""
-
-import logging
-
-from django.core.management.base import BaseCommand
-from django.db.utils import OperationalError, ProgrammingError
-
-from PIL import UnidentifiedImageError
-
-from company.models import Company
-from part.models import Part
-
-logger = logging.getLogger('inventree')
-
-
-class Command(BaseCommand):
-    """Rebuild all thumbnail images."""
-
-    def rebuild_thumbnail(self, model):
-        """Rebuild the thumbnail specified by the "image" field of the provided model."""
-        if not model.image:
-            return
-
-        img = model.image
-
-        logger.info("Generating thumbnail image for '%s'", img)
-
-        try:
-            model.image.render_variations(replace=False)
-        except FileNotFoundError:
-            logger.warning("Warning: Image file '%s' is missing", img)
-        except UnidentifiedImageError:
-            logger.warning("Warning: Image file '%s' is not a valid image", img)
-
-    def handle(self, *args, **kwargs):
-        """Rebuild all thumbnail images."""
-        logger.info("Rebuilding Part thumbnails")
-
-        for part in Part.objects.exclude(image=None):
-            try:
-                self.rebuild_thumbnail(part)
-            except (OperationalError, ProgrammingError):
-                logger.exception("ERROR: Database read error.")
-                break
-
-        logger.info("Rebuilding Company thumbnails")
-
-        for company in Company.objects.exclude(image=None):
-            try:
-                self.rebuild_thumbnail(company)
-            except (OperationalError, ProgrammingError):
-                logger.exception("ERROR: abase read error.")
-                break

InvenTree/InvenTree/management/commands/remove_mfa.py

@@ -1,33 +0,0 @@
-"""Custom management command to remove MFA for a user."""
-
-from django.contrib.auth import get_user_model
-from django.core.management.base import BaseCommand
-
-
-class Command(BaseCommand):
-    """Remove MFA for a user."""
-
-    def add_arguments(self, parser):
-        """Add the arguments."""
-        parser.add_argument('mail', type=str)
-
-    def handle(self, *args, **kwargs):
-        """Remove MFA for the supplied user (by mail)."""
-        # general settings
-        mail = kwargs.get('mail')
-        if not mail:
-            raise KeyError('A mail is required')
-        user = get_user_model()
-        mfa_user = [*set(user.objects.filter(email=mail) | user.objects.filter(emailaddress__email=mail))]
-
-        if len(mfa_user) == 0:
-            print('No user with this mail associated')
-        elif len(mfa_user) > 1:
-            print('More than one user found with this mail')
-        else:
-            # and clean out all MFA methods
-            # backup codes
-            mfa_user[0].staticdevice_set.all().delete()
-            # TOTP tokens
-            mfa_user[0].totpdevice_set.all().delete()
-            print(f'Removed all MFA methods for user {str(mfa_user[0])}')

InvenTree/InvenTree/management/commands/wait_for_db.py

@@ -1,37 +0,0 @@
-"""Custom management command, wait for the database to be ready!"""
-
-import time
-
-from django.core.management.base import BaseCommand
-from django.db import connection
-from django.db.utils import ImproperlyConfigured, OperationalError
-
-
-class Command(BaseCommand):
-    """Django command to pause execution until the database is ready."""
-
-    def handle(self, *args, **kwargs):
-        """Wait till the database is ready."""
-        self.stdout.write("Waiting for database...")
-
-        connected = False
-
-        while not connected:
-
-            time.sleep(2)
-
-            try:
-                connection.ensure_connection()
-
-                connected = True
-
-            except OperationalError as e:
-                self.stdout.write(f"Could not connect to database: {e}")
-            except ImproperlyConfigured as e:
-                self.stdout.write(f"Improperly configured: {e}")
-            else:
-                if not connection.is_usable():
-                    self.stdout.write("Database configuration is not usable")
-
-            if connected:
-                self.stdout.write("Database connection successful!")

InvenTree/InvenTree/metadata.py

@@ -1,290 +0,0 @@
-"""Custom metadata for DRF."""
-
-import logging
-
-from rest_framework import serializers
-from rest_framework.fields import empty
-from rest_framework.metadata import SimpleMetadata
-from rest_framework.utils import model_meta
-
-import InvenTree.permissions
-import users.models
-from InvenTree.helpers import str2bool
-from InvenTree.serializers import DependentField
-
-logger = logging.getLogger('inventree')
-
-
-class InvenTreeMetadata(SimpleMetadata):
-    """Custom metadata class for the DRF API.
-
-    This custom metadata class imits the available "actions",
-    based on the user's role permissions.
-
-    Thus when a client send an OPTIONS request to an API endpoint,
-    it will only receive a list of actions which it is allowed to perform!
-
-    Additionally, we include some extra information about database models,
-    so we can perform lookup for ForeignKey related fields.
-    """
-
-    def determine_metadata(self, request, view):
-        """Overwrite the metadata to adapt to the request user."""
-        self.request = request
-        self.view = view
-
-        metadata = super().determine_metadata(request, view)
-
-        """
-        Custom context information to pass through to the OPTIONS endpoint,
-        if the "context=True" is supplied to the OPTIONS request
-
-        Serializer class can supply context data by defining a get_context_data() method (no arguments)
-        """
-
-        context = {}
-
-        if str2bool(request.query_params.get('context', False)):
-
-            if hasattr(self, 'serializer') and hasattr(self.serializer, 'get_context_data'):
-                context = self.serializer.get_context_data()
-
-            metadata['context'] = context
-
-        user = request.user
-
-        if user is None:
-            # No actions for you!
-            metadata['actions'] = {}
-            return metadata
-
-        try:
-            # Extract the model name associated with the view
-            self.model = InvenTree.permissions.get_model_for_view(view)
-
-            # Construct the 'table name' from the model
-            app_label = self.model._meta.app_label
-            tbl_label = self.model._meta.model_name
-
-            metadata['model'] = tbl_label
-
-            table = f"{app_label}_{tbl_label}"
-
-            actions = metadata.get('actions', None)
-
-            if actions is None:
-                actions = {}
-
-            check = users.models.RuleSet.check_table_permission
-
-            # Map the request method to a permission type
-            rolemap = {
-                'POST': 'add',
-                'PUT': 'change',
-                'PATCH': 'change',
-                'DELETE': 'delete',
-            }
-
-            # let the view define a custom rolemap
-            if hasattr(view, "rolemap"):
-                rolemap.update(view.rolemap)
-
-            # Remove any HTTP methods that the user does not have permission for
-            for method, permission in rolemap.items():
-
-                result = check(user, table, permission)
-
-                if method in actions and not result:
-                    del actions[method]
-
-            # Add a 'DELETE' action if we are allowed to delete
-            if 'DELETE' in view.allowed_methods and check(user, table, 'delete'):
-                actions['DELETE'] = {}
-
-            # Add a 'VIEW' action if we are allowed to view
-            if 'GET' in view.allowed_methods and check(user, table, 'view'):
-                actions['GET'] = {}
-
-            metadata['actions'] = actions
-
-        except AttributeError:
-            # We will assume that if the serializer class does *not* have a Meta
-            # then we don't need a permission
-            pass
-
-        return metadata
-
-    def get_serializer_info(self, serializer):
-        """Override get_serializer_info so that we can add 'default' values to any fields whose Meta.model specifies a default value."""
-        self.serializer = serializer
-
-        serializer_info = super().get_serializer_info(serializer)
-
-        model_class = None
-
-        # Attributes to copy extra attributes from the model to the field (if they don't exist)
-        extra_attributes = [
-            'help_text',
-            'max_length',
-        ]
-
-        try:
-            model_class = serializer.Meta.model
-
-            model_fields = model_meta.get_field_info(model_class)
-
-            model_default_func = getattr(model_class, 'api_defaults', None)
-
-            if model_default_func:
-                model_default_values = model_class.api_defaults(self.request)
-            else:
-                model_default_values = {}
-
-            # Iterate through simple fields
-            for name, field in model_fields.fields.items():
-
-                if name in serializer_info.keys():
-
-                    if field.has_default():
-
-                        default = field.default
-
-                        if callable(default):
-                            try:
-                                default = default()
-                            except Exception:
-                                continue
-
-                        serializer_info[name]['default'] = default
-
-                    elif name in model_default_values:
-                        serializer_info[name]['default'] = model_default_values[name]
-
-                    for attr in extra_attributes:
-                        if attr not in serializer_info[name]:
-
-                            if hasattr(field, attr):
-                                serializer_info[name][attr] = getattr(field, attr)
-
-            # Iterate through relations
-            for name, relation in model_fields.relations.items():
-
-                if name not in serializer_info.keys():
-                    # Skip relation not defined in serializer
-                    continue
-
-                if relation.reverse:
-                    # Ignore reverse relations
-                    continue
-
-                # Extract and provide the "limit_choices_to" filters
-                # This is used to automatically filter AJAX requests
-                serializer_info[name]['filters'] = relation.model_field.get_limit_choices_to()
-
-                for attr in extra_attributes:
-                    if attr not in serializer_info[name] and hasattr(relation.model_field, attr):
-                        serializer_info[name][attr] = getattr(relation.model_field, attr)
-
-                if name in model_default_values:
-                    serializer_info[name]['default'] = model_default_values[name]
-
-        except AttributeError:
-            pass
-
-        # Try to extract 'instance' information
-        instance = None
-
-        # Extract extra information if an instance is available
-        if hasattr(serializer, 'instance'):
-            instance = serializer.instance
-
-        if instance is None and model_class is not None:
-            # Attempt to find the instance based on kwargs lookup
-            kwargs = getattr(self.view, 'kwargs', None)
-
-            if kwargs:
-                pk = None
-
-                for field in ['pk', 'id', 'PK', 'ID']:
-                    if field in kwargs:
-                        pk = kwargs[field]
-                        break
-
-                if pk is not None:
-                    try:
-                        instance = model_class.objects.get(pk=pk)
-                    except (ValueError, model_class.DoesNotExist):
-                        pass
-
-        if instance is not None:
-            """If there is an instance associated with this API View, introspect that instance to find any specific API info."""
-
-            if hasattr(instance, 'api_instance_filters'):
-
-                instance_filters = instance.api_instance_filters()
-
-                for field_name, field_filters in instance_filters.items():
-
-                    if field_name not in serializer_info.keys():
-                        # The field might be missing, but is added later on
-                        # This function seems to get called multiple times?
-                        continue
-
-                    if 'instance_filters' not in serializer_info[field_name].keys():
-                        serializer_info[field_name]['instance_filters'] = {}
-
-                    for key, value in field_filters.items():
-                        serializer_info[field_name]['instance_filters'][key] = value
-
-        return serializer_info
-
-    def get_field_info(self, field):
-        """Given an instance of a serializer field, return a dictionary of metadata about it.
-
-        We take the regular DRF metadata and add our own unique flavor
-        """
-        # Try to add the child property to the dependent field to be used by the super call
-        if self.label_lookup[field] == 'dependent field':
-            field.get_child(raise_exception=True)
-
-        # Run super method first
-        field_info = super().get_field_info(field)
-
-        # If a default value is specified for the serializer field, add it!
-        if 'default' not in field_info and field.default != empty:
-            field_info['default'] = field.get_default()
-
-        # Force non-nullable fields to read as "required"
-        # (even if there is a default value!)
-        if not field.allow_null and not (hasattr(field, 'allow_blank') and field.allow_blank):
-            field_info['required'] = True
-
-        # Introspect writable related fields
-        if field_info['type'] == 'field' and not field_info['read_only']:
-
-            # If the field is a PrimaryKeyRelatedField, we can extract the model from the queryset
-            if isinstance(field, serializers.PrimaryKeyRelatedField):
-                model = field.queryset.model
-            else:
-                logger.debug("Could not extract model for:", field_info.get('label'), '->', field)
-                model = None
-
-            if model:
-                # Mark this field as "related", and point to the URL where we can get the data!
-                field_info['type'] = 'related field'
-                field_info['model'] = model._meta.model_name
-
-                # Special case for 'user' model
-                if field_info['model'] == 'user':
-                    field_info['api_url'] = '/api/user/'
-                else:
-                    field_info['api_url'] = model.get_api_url()
-
-        # Add more metadata about dependent fields
-        if field_info['type'] == 'dependent field':
-            field_info['depends_on'] = field.depends_on
-
-        return field_info
-
-
-InvenTreeMetadata.label_lookup[DependentField] = "dependent field"

InvenTree/InvenTree/middleware.py

@@ -1,199 +0,0 @@
-"""Middleware for InvenTree."""
-
-import logging
-import sys
-
-from django.conf import settings
-from django.contrib.auth.middleware import PersistentRemoteUserMiddleware
-from django.http import HttpResponse
-from django.shortcuts import redirect
-from django.urls import Resolver404, include, re_path, resolve, reverse_lazy
-
-from allauth_2fa.middleware import (AllauthTwoFactorMiddleware,
-                                    BaseRequire2FAMiddleware)
-from error_report.middleware import ExceptionProcessor
-
-from InvenTree.urls import frontendpatterns
-from users.models import ApiToken
-
-logger = logging.getLogger("inventree")
-
-
-class AuthRequiredMiddleware(object):
-    """Check for user to be authenticated."""
-
-    def __init__(self, get_response):
-        """Save response object."""
-        self.get_response = get_response
-
-    def __call__(self, request):
-        """Check if user needs to be authenticated and is.
-
-        Redirects to login if not authenticated.
-        """
-        # Code to be executed for each request before
-        # the view (and later middleware) are called.
-
-        assert hasattr(request, 'user')
-
-        # API requests are handled by the DRF library
-        if request.path_info.startswith('/api/'):
-            return self.get_response(request)
-
-        # Is the function exempt from auth requirements?
-        path_func = resolve(request.path).func
-        if getattr(path_func, 'auth_exempt', False) is True:
-            return self.get_response(request)
-
-        if not request.user.is_authenticated:
-            """
-            Normally, a web-based session would use csrftoken based authentication.
-
-            However when running an external application (e.g. the InvenTree app or Python library),
-            we must validate the user token manually.
-            """
-
-            authorized = False
-
-            # Allow static files to be accessed without auth
-            # Important for e.g. login page
-            if request.path_info.startswith('/static/'):
-                authorized = True
-
-            # Unauthorized users can access the login page
-            elif request.path_info.startswith('/accounts/'):
-                authorized = True
-
-            elif request.path_info.startswith(f'/{settings.FRONTEND_URL_BASE}/') or request.path_info.startswith('/assets/') or request.path_info == f'/{settings.FRONTEND_URL_BASE}':
-                authorized = True
-
-            elif 'Authorization' in request.headers.keys() or 'authorization' in request.headers.keys():
-                auth = request.headers.get('Authorization', request.headers.get('authorization')).strip()
-
-                if auth.lower().startswith('token') and len(auth.split()) == 2:
-                    token_key = auth.split()[1]
-
-                    # Does the provided token match a valid user?
-                    try:
-                        token = ApiToken.objects.get(key=token_key)
-
-                        if token.active and token.user:
-
-                            # Provide the user information to the request
-                            request.user = token.user
-                            authorized = True
-
-                    except ApiToken.DoesNotExist:
-                        logger.warning("Access denied for unknown token %s", token_key)
-
-            # No authorization was found for the request
-            if not authorized:
-                path = request.path_info
-
-                # List of URL endpoints we *do not* want to redirect to
-                urls = [
-                    reverse_lazy('account_login'),
-                    reverse_lazy('account_logout'),
-                    reverse_lazy('admin:login'),
-                    reverse_lazy('admin:logout'),
-                ]
-
-                # Do not redirect requests to any of these paths
-                paths_ignore = [
-                    '/api/',
-                    '/js/',
-                    '/media/',
-                    '/static/',
-                ]
-
-                if path not in urls and not any(path.startswith(p) for p in paths_ignore):
-                    # Save the 'next' parameter to pass through to the login view
-
-                    return redirect(f'{reverse_lazy("account_login")}?next={request.path}')
-                # Return a 401 (Unauthorized) response code for this request
-                return HttpResponse('Unauthorized', status=401)
-
-        response = self.get_response(request)
-
-        return response
-
-
-url_matcher = re_path('', include(frontendpatterns))
-
-
-class Check2FAMiddleware(BaseRequire2FAMiddleware):
-    """Check if user is required to have MFA enabled."""
-    def require_2fa(self, request):
-        """Use setting to check if MFA should be enforced for frontend page."""
-        from common.models import InvenTreeSetting
-
-        try:
-            if url_matcher.resolve(request.path[1:]):
-                return InvenTreeSetting.get_setting('LOGIN_ENFORCE_MFA')
-        except Resolver404:
-            pass
-        return False
-
-
-class CustomAllauthTwoFactorMiddleware(AllauthTwoFactorMiddleware):
-    """This function ensures only frontend code triggers the MFA auth cycle."""
-    def process_request(self, request):
-        """Check if requested url is forntend and enforce MFA check."""
-        try:
-            if not url_matcher.resolve(request.path[1:]):
-                super().process_request(request)
-        except Resolver404:
-            pass
-
-
-class InvenTreeRemoteUserMiddleware(PersistentRemoteUserMiddleware):
-    """Middleware to check if HTTP-header based auth is enabled and to set it up."""
-    header = settings.REMOTE_LOGIN_HEADER
-
-    def process_request(self, request):
-        """Check if proxy login is enabled."""
-        if not settings.REMOTE_LOGIN:
-            return
-
-        return super().process_request(request)
-
-
-class InvenTreeExceptionProcessor(ExceptionProcessor):
-    """Custom exception processor that respects blocked errors."""
-
-    def process_exception(self, request, exception):
-        """Check if kind is ignored before processing."""
-        kind, info, data = sys.exc_info()
-
-        # Check if the error is on the ignore list
-        if kind in settings.IGNORED_ERRORS:
-            return
-
-        import traceback
-
-        from django.views.debug import ExceptionReporter
-
-        from error_report.models import Error
-        from error_report.settings import ERROR_DETAIL_SETTINGS
-
-        # Error reporting is disabled
-        if not ERROR_DETAIL_SETTINGS.get('ERROR_DETAIL_ENABLE', True):
-            return
-
-        path = request.build_absolute_uri()
-
-        # Truncate the path to a reasonable length
-        # Otherwise we get a database error,
-        # because the path field is limited to 200 characters
-        if len(path) > 200:
-            path = path[:195] + '...'
-
-        error = Error.objects.create(
-            kind=kind.__name__,
-            html=ExceptionReporter(request, kind, info, data).get_traceback_html(),
-            path=path,
-            info=info,
-            data='\n'.join(traceback.format_exception(kind, info, data)),
-        )
-
-        error.save()

InvenTree/InvenTree/mixins.py

@@ -1,232 +0,0 @@
-"""Mixins for (API) views in the whole project."""
-
-from django.core.exceptions import FieldDoesNotExist
-
-from rest_framework import generics, mixins, status
-from rest_framework.response import Response
-
-from InvenTree.fields import InvenTreeNotesField
-from InvenTree.helpers import remove_non_printable_characters, strip_html_tags
-
-
-class DiffMixin:
-    """Mixin which can be used to determine which fields have changed, compared to the instance saved to the database."""
-
-    def get_db_instance(self):
-        """Return the instance of the object saved in the database.
-
-        Returns:
-            object: Instance of the object saved in the database
-        """
-
-        if self.pk:
-            try:
-                return self.__class__.objects.get(pk=self.pk)
-            except self.__class__.DoesNotExist:
-                pass
-
-        return None
-
-    def get_field_deltas(self):
-        """Return a dict of field deltas.
-
-        Compares the current instance with the instance saved in the database,
-        and returns a dict of fields which have changed.
-
-        Returns:
-            dict: Dict of field deltas
-        """
-
-        db_instance = self.get_db_instance()
-
-        if db_instance is None:
-            return {}
-
-        deltas = {}
-
-        for field in self._meta.fields:
-            if field.name == 'id':
-                continue
-
-            if getattr(self, field.name) != getattr(db_instance, field.name):
-                deltas[field.name] = {
-                    'old': getattr(db_instance, field.name),
-                    'new': getattr(self, field.name),
-                }
-
-        return deltas
-
-    def has_field_changed(self, field_name):
-        """Determine if a particular field has changed."""
-
-        return field_name in self.get_field_deltas()
-
-
-class CleanMixin():
-    """Model mixin class which cleans inputs using the Mozilla bleach tools."""
-
-    # Define a list of field names which will *not* be cleaned
-    SAFE_FIELDS = []
-
-    def create(self, request, *args, **kwargs):
-        """Override to clean data before processing it."""
-        serializer = self.get_serializer(data=self.clean_data(request.data))
-        serializer.is_valid(raise_exception=True)
-        self.perform_create(serializer)
-        headers = self.get_success_headers(serializer.data)
-        return Response(serializer.data, status=status.HTTP_201_CREATED, headers=headers)
-
-    def update(self, request, *args, **kwargs):
-        """Override to clean data before processing it."""
-        partial = kwargs.pop('partial', False)
-        instance = self.get_object()
-        serializer = self.get_serializer(instance, data=self.clean_data(request.data), partial=partial)
-        serializer.is_valid(raise_exception=True)
-        self.perform_update(serializer)
-
-        if getattr(instance, '_prefetched_objects_cache', None):
-            # If 'prefetch_related' has been applied to a queryset, we need to
-            # forcibly invalidate the prefetch cache on the instance.
-            instance._prefetched_objects_cache = {}
-
-        return Response(serializer.data)
-
-    def clean_string(self, field: str, data: str) -> str:
-        """Clean / sanitize a single input string.
-
-        Note that this function will *allow* orphaned <>& characters,
-        which would normally be escaped by bleach.
-
-        Nominally, the only thing that will be "cleaned" will be HTML tags
-
-        Ref: https://github.com/mozilla/bleach/issues/192
-
-        """
-        cleaned = strip_html_tags(data, field_name=field)
-
-        # By default, newline characters are removed
-        remove_newline = True
-
-        try:
-            if hasattr(self, 'serializer_class'):
-                model = self.serializer_class.Meta.model
-                field = model._meta.get_field(field)
-
-                # The following field types allow newline characters
-                allow_newline = [
-                    InvenTreeNotesField,
-                ]
-
-                for field_type in allow_newline:
-                    if issubclass(type(field), field_type):
-                        remove_newline = False
-                        break
-
-        except AttributeError:
-            pass
-        except FieldDoesNotExist:
-            pass
-
-        cleaned = remove_non_printable_characters(cleaned, remove_newline=remove_newline)
-
-        return cleaned
-
-    def clean_data(self, data: dict) -> dict:
-        """Clean / sanitize data.
-
-        This uses mozillas bleach under the hood to disable certain html tags by
-        encoding them - this leads to script tags etc. to not work.
-        The results can be longer then the input; might make some character combinations
-        `ugly`. Prevents XSS on the server-level.
-
-        Args:
-            data (dict): Data that should be Sanitized.
-
-        Returns:
-            dict: Provided data Sanitized; still in the same order.
-        """
-        clean_data = {}
-
-        for k, v in data.items():
-
-            if k in self.SAFE_FIELDS:
-                ret = v
-            elif isinstance(v, str):
-                ret = self.clean_string(k, v)
-            elif isinstance(v, dict):
-                ret = self.clean_data(v)
-            else:
-                ret = v
-
-            clean_data[k] = ret
-
-        return clean_data
-
-
-class ListAPI(generics.ListAPIView):
-    """View for list API."""
-
-
-class ListCreateAPI(CleanMixin, generics.ListCreateAPIView):
-    """View for list and create API."""
-
-
-class CreateAPI(CleanMixin, generics.CreateAPIView):
-    """View for create API."""
-
-
-class RetrieveAPI(generics.RetrieveAPIView):
-    """View for retrieve API."""
-    pass
-
-
-class RetrieveUpdateAPI(CleanMixin, generics.RetrieveUpdateAPIView):
-    """View for retrieve and update API."""
-    pass
-
-
-class CustomDestroyModelMixin:
-    """This mixin was created pass the kwargs from the API to the models."""
-    def destroy(self, request, *args, **kwargs):
-        """Custom destroy method to pass kwargs."""
-        instance = self.get_object()
-        self.perform_destroy(instance, **kwargs)
-        return Response(status=status.HTTP_204_NO_CONTENT)
-
-    def perform_destroy(self, instance, **kwargs):
-        """Custom destroy method to pass kwargs."""
-        instance.delete(**kwargs)
-
-
-class CustomRetrieveUpdateDestroyAPIView(mixins.RetrieveModelMixin,
-                                         mixins.UpdateModelMixin,
-                                         CustomDestroyModelMixin,
-                                         generics.GenericAPIView):
-    """This APIView was created pass the kwargs from the API to the models."""
-    def get(self, request, *args, **kwargs):
-        """Custom get method to pass kwargs."""
-        return self.retrieve(request, *args, **kwargs)
-
-    def put(self, request, *args, **kwargs):
-        """Custom put method to pass kwargs."""
-        return self.update(request, *args, **kwargs)
-
-    def patch(self, request, *args, **kwargs):
-        """Custom patch method to pass kwargs."""
-        return self.partial_update(request, *args, **kwargs)
-
-    def delete(self, request, *args, **kwargs):
-        """Custom delete method to pass kwargs."""
-        return self.destroy(request, *args, **kwargs)
-
-
-class CustomRetrieveUpdateDestroyAPI(CleanMixin, CustomRetrieveUpdateDestroyAPIView):
-    """This APIView was created pass the kwargs from the API to the models."""
-
-
-class RetrieveUpdateDestroyAPI(CleanMixin, generics.RetrieveUpdateDestroyAPIView):
-    """View for retrieve, update and destroy API."""
-
-
-class UpdateAPI(CleanMixin, generics.UpdateAPIView):
-    """View for update API."""

InvenTree/InvenTree/permissions.py

@@ -1,111 +0,0 @@
-"""Permission set for InvenTree."""
-
-from functools import wraps
-
-from rest_framework import permissions
-
-import users.models
-
-
-def get_model_for_view(view, raise_error=True):
-    """Attempt to introspect the 'model' type for an API view"""
-    if hasattr(view, 'get_permission_model'):
-        return view.get_permission_model()
-
-    if hasattr(view, 'serializer_class'):
-        return view.serializer_class.Meta.model
-
-    if hasattr(view, 'get_serializer_class'):
-        return view.get_serializr_class().Meta.model
-
-    raise AttributeError(f"Serializer class not specified for {view.__class__}")
-
-
-class RolePermission(permissions.BasePermission):
-    """Role mixin for API endpoints, allowing us to specify the user "role" which is required for certain operations.
-
-    Each endpoint can have one or more of the following actions:
-    - GET
-    - POST
-    - PUT
-    - PATCH
-    - DELETE
-
-    Specify the required "role" using the role_required attribute.
-
-    e.g.
-
-    role_required = "part"
-
-    The RoleMixin class will then determine if the user has the required permission
-    to perform the specified action.
-
-    For example, a DELETE action will be rejected unless the user has the "part.remove" permission
-    """
-
-    def has_permission(self, request, view):
-        """Determine if the current user has the specified permissions."""
-        user = request.user
-
-        # Superuser can do it all
-        if user.is_superuser:
-            return True
-
-        # Map the request method to a permission type
-        rolemap = {
-            'GET': 'view',
-            'OPTIONS': 'view',
-            'POST': 'add',
-            'PUT': 'change',
-            'PATCH': 'change',
-            'DELETE': 'delete',
-        }
-
-        # let the view define a custom rolemap
-        if hasattr(view, "rolemap"):
-            rolemap.update(view.rolemap)
-
-        permission = rolemap[request.method]
-
-        # The required role may be defined for the view class
-        if role := getattr(view, 'role_required', None):
-            return users.models.check_user_role(user, role, permission)
-
-        try:
-            # Extract the model name associated with this request
-            model = get_model_for_view(view)
-
-            app_label = model._meta.app_label
-            model_name = model._meta.model_name
-
-            table = f"{app_label}_{model_name}"
-        except AttributeError:
-            # We will assume that if the serializer class does *not* have a Meta,
-            # then we don't need a permission
-            return True
-
-        return users.models.RuleSet.check_table_permission(user, table, permission)
-
-
-class IsSuperuser(permissions.IsAdminUser):
-    """Allows access only to superuser users."""
-
-    def has_permission(self, request, view):
-        """Check if the user is a superuser."""
-        return bool(request.user and request.user.is_superuser)
-
-
-class IsStaffOrReadOnly(permissions.IsAdminUser):
-    """Allows read-only access to any user, but write access is restricted to staff users."""
-
-    def has_permission(self, request, view):
-        """Check if the user is a superuser."""
-        return bool(request.user and request.user.is_staff or request.method in permissions.SAFE_METHODS)
-
-
-def auth_exempt(view_func):
-    """Mark a view function as being exempt from auth requirements."""
-    def wrapped_view(*args, **kwargs):
-        return view_func(*args, **kwargs)
-    wrapped_view.auth_exempt = True
-    return wraps(view_func)(wrapped_view)

InvenTree/InvenTree/ready.py

@@ -1,101 +0,0 @@
-"""Functions to check if certain parts of InvenTree are ready."""
-
-import os
-import sys
-
-
-def isInTestMode():
-    """Returns True if the database is in testing mode."""
-    return 'test' in sys.argv
-
-
-def isImportingData():
-    """Returns True if the database is currently importing data, e.g. 'loaddata' command is performed."""
-    return 'loaddata' in sys.argv
-
-
-def isRunningMigrations():
-    """Return True if the database is currently running migrations."""
-    return any((x in sys.argv for x in [
-        'migrate',
-        'makemigrations',
-        'showmigrations'
-    ]))
-
-
-def isInMainThread():
-    """Django runserver starts two processes, one for the actual dev server and the other to reload the application.
-
-    - The RUN_MAIN env is set in that case. However if --noreload is applied, this variable
-    is not set because there are no different threads.
-    """
-    if "runserver" in sys.argv and "--noreload" not in sys.argv:
-        return os.environ.get('RUN_MAIN', None) == "true"
-
-    return True
-
-
-def canAppAccessDatabase(allow_test: bool = False, allow_plugins: bool = False, allow_shell: bool = False):
-    """Returns True if the apps.py file can access database records.
-
-    There are some circumstances where we don't want the ready function in apps.py
-    to touch the database
-    """
-    # If any of the following management commands are being executed,
-    # prevent custom "on load" code from running!
-    excluded_commands = [
-        'flush',
-        'loaddata',
-        'dumpdata',
-        'check',
-        'createsuperuser',
-        'wait_for_db',
-        'prerender',
-        'rebuild_models',
-        'rebuild_thumbnails',
-        'makemessages',
-        'compilemessages',
-        'backup',
-        'dbbackup',
-        'mediabackup',
-        'restore',
-        'dbrestore',
-        'mediarestore',
-    ]
-
-    if not allow_shell:
-        excluded_commands.append('shell')
-
-    if not allow_test:
-        # Override for testing mode?
-        excluded_commands.append('test')
-
-    if not allow_plugins:
-        excluded_commands.extend([
-            'makemigrations',
-            'showmigrations',
-            'migrate',
-            'collectstatic',
-        ])
-
-    for cmd in excluded_commands:
-        if cmd in sys.argv:
-            return False
-
-    return True
-
-
-def isPluginRegistryLoaded():
-    """Ensures that the plugin registry is already loaded.
-
-    The plugin registry reloads all apps onetime after starting if there are AppMixin plugins,
-    so that the discovered AppConfigs are added to Django. This triggers the ready function of
-    AppConfig to execute twice. Add this check to prevent from running two times.
-
-    Note: All apps using this check need to be registered after the plugins app in settings.py
-
-    Returns: 'False' if the registry has not fully loaded the plugins yet.
-    """
-    from plugin import registry
-
-    return registry.plugins_loaded

InvenTree/InvenTree/sanitizer.py

@@ -1,71 +0,0 @@
-"""Functions to sanitize user input files."""
-from bleach import clean
-from bleach.css_sanitizer import CSSSanitizer
-
-ALLOWED_ELEMENTS_SVG = [
-    'a', 'animate', 'animateColor', 'animateMotion',
-    'animateTransform', 'circle', 'defs', 'desc', 'ellipse', 'font-face',
-    'font-face-name', 'font-face-src', 'g', 'glyph', 'hkern',
-    'linearGradient', 'line', 'marker', 'metadata', 'missing-glyph',
-    'mpath', 'path', 'polygon', 'polyline', 'radialGradient', 'rect',
-    'set', 'stop', 'svg', 'switch', 'text', 'title', 'tspan', 'use'
-]
-
-ALLOWED_ATTRIBUTES_SVG = [
-    'accent-height', 'accumulate', 'additive', 'alphabetic',
-    'arabic-form', 'ascent', 'attributeName', 'attributeType',
-    'baseProfile', 'bbox', 'begin', 'by', 'calcMode', 'cap-height',
-    'class', 'color', 'color-rendering', 'content', 'cx', 'cy', 'd', 'dx',
-    'dy', 'descent', 'display', 'dur', 'end', 'fill', 'fill-opacity',
-    'fill-rule', 'font-family', 'font-size', 'font-stretch', 'font-style',
-    'font-variant', 'font-weight', 'from', 'fx', 'fy', 'g1', 'g2',
-    'glyph-name', 'gradientUnits', 'hanging', 'height', 'horiz-adv-x',
-    'horiz-origin-x', 'id', 'ideographic', 'k', 'keyPoints',
-    'keySplines', 'keyTimes', 'lang', 'marker-end', 'marker-mid',
-    'marker-start', 'markerHeight', 'markerUnits', 'markerWidth',
-    'mathematical', 'max', 'min', 'name', 'offset', 'opacity', 'orient',
-    'origin', 'overline-position', 'overline-thickness', 'panose-1',
-    'path', 'pathLength', 'points', 'preserveAspectRatio', 'r', 'refX',
-    'refY', 'repeatCount', 'repeatDur', 'requiredExtensions',
-    'requiredFeatures', 'restart', 'rotate', 'rx', 'ry', 'slope',
-    'stemh', 'stemv', 'stop-color', 'stop-opacity',
-    'strikethrough-position', 'strikethrough-thickness', 'stroke',
-    'stroke-dasharray', 'stroke-dashoffset', 'stroke-linecap',
-    'stroke-linejoin', 'stroke-miterlimit', 'stroke-opacity',
-    'stroke-width', 'systemLanguage', 'target', 'text-anchor', 'to',
-    'transform', 'type', 'u1', 'u2', 'underline-position',
-    'underline-thickness', 'unicode', 'unicode-range', 'units-per-em',
-    'values', 'version', 'viewBox', 'visibility', 'width', 'widths', 'x',
-    'x-height', 'x1', 'x2', 'xlink:actuate', 'xlink:arcrole',
-    'xlink:href', 'xlink:role', 'xlink:show', 'xlink:title',
-    'xlink:type', 'xml:base', 'xml:lang', 'xml:space', 'xmlns',
-    'xmlns:xlink', 'y', 'y1', 'y2', 'zoomAndPan', 'style'
-]
-
-
-def sanitize_svg(file_data, strip: bool = True, elements: str = ALLOWED_ELEMENTS_SVG, attributes: str = ALLOWED_ATTRIBUTES_SVG) -> str:
-    """Sanitize a SVG file.
-
-    Args:
-        file_data (str): SVG as string.
-        strip (bool, optional): Should invalid elements get removed. Defaults to True.
-        elements (str, optional): Allowed elements. Defaults to ALLOWED_ELEMENTS_SVG.
-        attributes (str, optional): Allowed attributes. Defaults to ALLOWED_ATTRIBUTES_SVG.
-
-    Returns:
-        str: Sanitzied SVG file.
-    """
-    # Handle byte-encoded data
-    if isinstance(file_data, bytes):
-        file_data = file_data.decode('utf-8')
-
-    cleaned = clean(
-        file_data,
-        tags=elements,
-        attributes=attributes,
-        strip=strip,
-        strip_comments=strip,
-        css_sanitizer=CSSSanitizer()
-    )
-
-    return cleaned

InvenTree/InvenTree/sentry.py

@@ -1,72 +0,0 @@
-"""Configuration for Sentry.io error reporting."""
-
-import logging
-
-from django.conf import settings
-from django.core.exceptions import ValidationError
-from django.http import Http404
-
-import rest_framework.exceptions
-import sentry_sdk
-from sentry_sdk.integrations.django import DjangoIntegration
-
-import InvenTree.version
-
-logger = logging.getLogger('inventree')
-
-
-def default_sentry_dsn():
-    """Return the default Sentry.io DSN for InvenTree"""
-    return 'https://3928ccdba1d34895abde28031fd00100@o378676.ingest.sentry.io/6494600'
-
-
-def sentry_ignore_errors():
-    """Return a list of error types to ignore.
-
-    These error types will *not* be reported to sentry.io.
-    """
-    return [
-        Http404,
-        ValidationError,
-        rest_framework.exceptions.AuthenticationFailed,
-        rest_framework.exceptions.NotAuthenticated,
-        rest_framework.exceptions.PermissionDenied,
-        rest_framework.exceptions.ValidationError,
-    ]
-
-
-def init_sentry(dsn, sample_rate, tags):
-    """Initialize sentry.io error reporting"""
-    logger.info("Initializing sentry.io integration")
-
-    sentry_sdk.init(
-        dsn=dsn,
-        integrations=[DjangoIntegration()],
-        traces_sample_rate=sample_rate,
-        send_default_pii=True,
-        ignore_errors=sentry_ignore_errors(),
-        release=InvenTree.version.INVENTREE_SW_VERSION,
-        environment='development' if InvenTree.version.isInvenTreeDevelopmentVersion() else 'production'
-    )
-
-    for key, val in tags.items():
-        sentry_sdk.set_tag(f'inventree_{key}', val)
-
-    sentry_sdk.set_tag('api', InvenTree.version.inventreeApiVersion())
-    sentry_sdk.set_tag('platform', InvenTree.version.inventreePlatform())
-    sentry_sdk.set_tag('git_branch', InvenTree.version.inventreeBranch())
-    sentry_sdk.set_tag('git_commit', InvenTree.version.inventreeCommitHash())
-    sentry_sdk.set_tag('git_date', InvenTree.version.inventreeCommitDate())
-
-
-def report_exception(exc):
-    """Report an exception to sentry.io"""
-    if settings.SENTRY_ENABLED and settings.SENTRY_DSN:
-
-        if not any(isinstance(exc, e) for e in sentry_ignore_errors()):
-            logger.info("Reporting exception to sentry.io: %s", exc)
-
-            try:
-                sentry_sdk.capture_exception(exc)
-            except Exception:
-                logger.warning("Failed to report exception to sentry.io")

InvenTree/InvenTree/serializers.py

@@ -1,889 +0,0 @@
-"""Serializers used in various InvenTree apps."""
-
-import os
-from collections import OrderedDict
-from copy import deepcopy
-from decimal import Decimal
-
-from django.conf import settings
-from django.contrib.auth.models import User
-from django.contrib.sites.models import Site
-from django.core.exceptions import ValidationError as DjangoValidationError
-from django.db import models
-from django.utils.translation import gettext_lazy as _
-
-import tablib
-from djmoney.contrib.django_rest_framework.fields import MoneyField
-from djmoney.money import Money
-from djmoney.utils import MONEY_CLASSES, get_currency_field_name
-from rest_framework import serializers
-from rest_framework.exceptions import PermissionDenied, ValidationError
-from rest_framework.fields import empty
-from rest_framework.serializers import DecimalField
-from rest_framework.utils import model_meta
-from taggit.serializers import TaggitSerializer
-
-import common.models as common_models
-from common.settings import currency_code_default, currency_code_mappings
-from InvenTree.fields import InvenTreeRestURLField, InvenTreeURLField
-from InvenTree.helpers_model import download_image_from_url
-
-
-class InvenTreeMoneySerializer(MoneyField):
-    """Custom serializer for 'MoneyField', which ensures that passed values are numerically valid.
-
-    Ref: https://github.com/django-money/django-money/blob/master/djmoney/contrib/django_rest_framework/fields.py
-    """
-
-    def __init__(self, *args, **kwargs):
-        """Override default values."""
-        kwargs["max_digits"] = kwargs.get("max_digits", 19)
-        self.decimal_places = kwargs["decimal_places"] = kwargs.get("decimal_places", 6)
-        kwargs["required"] = kwargs.get("required", False)
-
-        super().__init__(*args, **kwargs)
-
-    def get_value(self, data):
-        """Test that the returned amount is a valid Decimal."""
-        amount = super(DecimalField, self).get_value(data)
-
-        # Convert an empty string to None
-        if len(str(amount).strip()) == 0:
-            amount = None
-
-        try:
-            if amount is not None and amount is not empty:
-                # Convert to a Decimal instance, and round to maximum allowed decimal places
-                amount = Decimal(amount)
-                amount = round(amount, self.decimal_places)
-        except Exception:
-            raise ValidationError({
-                self.field_name: [_("Must be a valid number")],
-            })
-
-        currency = data.get(get_currency_field_name(self.field_name), self.default_currency)
-
-        if currency and amount is not None and not isinstance(amount, MONEY_CLASSES) and amount is not empty:
-            return Money(amount, currency)
-
-        return amount
-
-
-class InvenTreeCurrencySerializer(serializers.ChoiceField):
-    """Custom serializers for selecting currency option"""
-
-    def __init__(self, *args, **kwargs):
-        """Initialize the currency serializer"""
-        choices = currency_code_mappings()
-
-        allow_blank = kwargs.get('allow_blank', False) or kwargs.get('allow_null', False)
-
-        if allow_blank:
-            choices = [('', '---------')] + choices
-
-        kwargs['choices'] = choices
-
-        if 'default' not in kwargs and 'required' not in kwargs:
-            kwargs['default'] = '' if allow_blank else currency_code_default
-
-        if 'label' not in kwargs:
-            kwargs['label'] = _('Currency')
-
-        if 'help_text' not in kwargs:
-            kwargs['help_text'] = _('Select currency from available options')
-
-        super().__init__(*args, **kwargs)
-
-
-class DependentField(serializers.Field):
-    """A dependent field can be used to dynamically return child fields based on the value of other fields."""
-    child = None
-
-    def __init__(self, *args, depends_on, field_serializer, **kwargs):
-        """A dependent field can be used to dynamically return child fields based on the value of other fields.
-
-        Example:
-        This example adds two fields. If the client selects integer, an integer field will be shown, but if he
-        selects char, an char field will be shown. For any other value, nothing will be shown.
-
-        class TestSerializer(serializers.Serializer):
-            select_type = serializers.ChoiceField(choices=[
-                ("integer", "Integer"),
-                ("char", "Char"),
-            ])
-            my_field = DependentField(depends_on=["select_type"], field_serializer="get_my_field")
-
-            def get_my_field(self, fields):
-                if fields["select_type"] == "integer":
-                    return serializers.IntegerField()
-                if fields["select_type"] == "char":
-                    return serializers.CharField()
-        """
-        super().__init__(*args, **kwargs)
-
-        self.depends_on = depends_on
-        self.field_serializer = field_serializer
-
-    def get_child(self, raise_exception=False):
-        """This method tries to extract the child based on the provided data in the request by the client."""
-        data = deepcopy(self.context["request"].data)
-
-        def visit_parent(node):
-            """Recursively extract the data for the parent field/serializer in reverse."""
-            nonlocal data
-
-            if node.parent:
-                visit_parent(node.parent)
-
-            # only do for composite fields and stop right before the current field
-            if hasattr(node, "child") and node is not self and isinstance(data, dict):
-                data = data.get(node.field_name, None)
-        visit_parent(self)
-
-        # ensure that data is a dictionary and that a parent exists
-        if not isinstance(data, dict) or self.parent is None:
-            return
-
-        # check if the request data contains the dependent fields, otherwise skip getting the child
-        for f in self.depends_on:
-            if not data.get(f, None):
-                return
-
-        # partially validate the data for options requests that set raise_exception while calling .get_child(...)
-        if raise_exception:
-            validation_data = {k: v for k, v in data.items() if k in self.depends_on}
-            serializer = self.parent.__class__(context=self.context, data=validation_data, partial=True)
-            serializer.is_valid(raise_exception=raise_exception)
-
-        # try to get the field serializer
-        field_serializer = getattr(self.parent, self.field_serializer)
-        child = field_serializer(data)
-
-        if not child:
-            return
-
-        self.child = child
-        self.child.bind(field_name='', parent=self)
-
-    def to_internal_value(self, data):
-        """This method tries to convert the data to an internal representation based on the defined to_internal_value method on the child."""
-        self.get_child()
-        if self.child:
-            return self.child.to_internal_value(data)
-
-        return None
-
-    def to_representation(self, value):
-        """This method tries to convert the data to representation based on the defined to_representation method on the child."""
-        self.get_child()
-        if self.child:
-            return self.child.to_representation(value)
-
-        return None
-
-
-class InvenTreeModelSerializer(serializers.ModelSerializer):
-    """Inherits the standard Django ModelSerializer class, but also ensures that the underlying model class data are checked on validation."""
-
-    # Switch out URLField mapping
-    serializer_field_mapping = {
-        **serializers.ModelSerializer.serializer_field_mapping,
-        models.URLField: InvenTreeRestURLField,
-        InvenTreeURLField: InvenTreeRestURLField,
-    }
-
-    def __init__(self, instance=None, data=empty, **kwargs):
-        """Custom __init__ routine to ensure that *default* values (as specified in the ORM) are used by the DRF serializers, *if* the values are not provided by the user."""
-        # If instance is None, we are creating a new instance
-        if instance is None and data is not empty:
-
-            if data is None:
-                data = OrderedDict()
-            else:
-                new_data = OrderedDict()
-                new_data.update(data)
-
-                data = new_data
-
-            # Add missing fields which have default values
-            ModelClass = self.Meta.model
-
-            fields = model_meta.get_field_info(ModelClass)
-
-            for field_name, field in fields.fields.items():
-
-                """
-                Update the field IF (and ONLY IF):
-
-                - The field has a specified default value
-                - The field does not already have a value set
-                """
-                if field.has_default() and field_name not in data:
-
-                    value = field.default
-
-                    # Account for callable functions
-                    if callable(value):
-                        try:
-                            value = value()
-                        except Exception:
-                            continue
-
-                    data[field_name] = value
-
-        super().__init__(instance, data, **kwargs)
-
-    def get_initial(self):
-        """Construct initial data for the serializer.
-
-        Use the 'default' values specified by the django model definition
-        """
-        initials = super().get_initial().copy()
-
-        # Are we creating a new instance?
-        if self.instance is None:
-            ModelClass = self.Meta.model
-
-            fields = model_meta.get_field_info(ModelClass)
-
-            for field_name, field in fields.fields.items():
-
-                if field.has_default() and field_name not in initials:
-
-                    value = field.default
-
-                    # Account for callable functions
-                    if callable(value):
-                        try:
-                            value = value()
-                        except Exception:
-                            continue
-
-                    initials[field_name] = value
-
-        return initials
-
-    def skip_create_fields(self):
-        """Return a list of 'fields' which should be skipped for model creation.
-
-        This is used to 'bypass' a shortcoming of the DRF framework,
-        which does not allow us to have writeable serializer fields which do not exist on the model.
-
-        Default implementation returns an empty list
-        """
-        return []
-
-    def save(self, **kwargs):
-        """Catch any django ValidationError thrown at the moment `save` is called, and re-throw as a DRF ValidationError."""
-        try:
-            super().save(**kwargs)
-        except (ValidationError, DjangoValidationError) as exc:
-            raise ValidationError(detail=serializers.as_serializer_error(exc))
-
-        return self.instance
-
-    def create(self, validated_data):
-        """Custom create method which supports field adjustment"""
-        initial_data = validated_data.copy()
-
-        # Remove any fields which do not exist on the model
-        for field in self.skip_create_fields():
-            initial_data.pop(field, None)
-
-        return super().create(initial_data)
-
-    def update(self, instance, validated_data):
-        """Catch any django ValidationError, and re-throw as a DRF ValidationError."""
-        try:
-            instance = super().update(instance, validated_data)
-        except (ValidationError, DjangoValidationError) as exc:
-            raise ValidationError(detail=serializers.as_serializer_error(exc))
-
-        return instance
-
-    def run_validation(self, data=empty):
-        """Perform serializer validation.
-
-        In addition to running validators on the serializer fields,
-        this class ensures that the underlying model is also validated.
-        """
-        # Run any native validation checks first (may raise a ValidationError)
-        data = super().run_validation(data)
-
-        if not hasattr(self, 'instance') or self.instance is None:
-            # No instance exists (we are creating a new one)
-
-            initial_data = data.copy()
-
-            for field in self.skip_create_fields():
-                # Remove any fields we do not wish to provide to the model
-                initial_data.pop(field, None)
-
-            # Create a (RAM only) instance for extra testing
-            instance = self.Meta.model(**initial_data)
-        else:
-            # Instance already exists (we are updating!)
-            instance = self.instance
-
-            # Update instance fields
-            for attr, value in data.items():
-                try:
-                    setattr(instance, attr, value)
-                except (ValidationError, DjangoValidationError) as exc:
-                    raise ValidationError(detail=serializers.as_serializer_error(exc))
-
-        # Run a 'full_clean' on the model.
-        # Note that by default, DRF does *not* perform full model validation!
-        try:
-            instance.full_clean()
-        except (ValidationError, DjangoValidationError) as exc:
-
-            data = exc.message_dict
-
-            # Change '__all__' key (django style) to 'non_field_errors' (DRF style)
-            if '__all__' in data:
-                data['non_field_errors'] = data['__all__']
-                del data['__all__']
-
-            raise ValidationError(data)
-
-        return data
-
-
-class InvenTreeTaggitSerializer(TaggitSerializer):
-    """Updated from https://github.com/glemmaPaul/django-taggit-serializer."""
-
-    def update(self, instance, validated_data):
-        """Overridden update method to re-add the tagmanager."""
-        to_be_tagged, validated_data = self._pop_tags(validated_data)
-
-        tag_object = super().update(instance, validated_data)
-
-        for key in to_be_tagged.keys():
-            # re-add the tagmanager
-            new_tagobject = tag_object.__class__.objects.get(id=tag_object.id)
-            setattr(tag_object, key, getattr(new_tagobject, key))
-
-        return self._save_tags(tag_object, to_be_tagged)
-
-
-class InvenTreeTagModelSerializer(InvenTreeTaggitSerializer, InvenTreeModelSerializer):
-    """Combination of InvenTreeTaggitSerializer and InvenTreeModelSerializer."""
-    pass
-
-
-class UserSerializer(InvenTreeModelSerializer):
-    """Serializer for a User."""
-
-    class Meta:
-        """Metaclass defines serializer fields."""
-        model = User
-        fields = [
-            'pk',
-            'username',
-            'first_name',
-            'last_name',
-            'email',
-        ]
-
-        read_only_fields = [
-            'username',
-        ]
-
-
-class ExendedUserSerializer(UserSerializer):
-    """Serializer for a User with a bit more info."""
-    from users.serializers import GroupSerializer
-
-    groups = GroupSerializer(read_only=True, many=True)
-
-    class Meta(UserSerializer.Meta):
-        """Metaclass defines serializer fields."""
-        fields = UserSerializer.Meta.fields + [
-            'groups',
-            'is_staff',
-            'is_superuser',
-            'is_active'
-        ]
-
-        read_only_fields = UserSerializer.Meta.read_only_fields + [
-            'groups',
-        ]
-
-    def validate(self, attrs):
-        """Expanded validation for changing user role."""
-        # Check if is_staff or is_superuser is in attrs
-        role_change = 'is_staff' in attrs or 'is_superuser' in attrs
-        request_user = self.context['request'].user
-
-        if role_change:
-            if request_user.is_superuser:
-                # Superusers can change any role
-                pass
-            elif request_user.is_staff and 'is_superuser' not in attrs:
-                # Staff can change any role except is_superuser
-                pass
-            else:
-                raise PermissionDenied(_("You do not have permission to change this user role."))
-        return super().validate(attrs)
-
-
-class UserCreateSerializer(ExendedUserSerializer):
-    """Serializer for creating a new User."""
-    def validate(self, attrs):
-        """Expanded valiadation for auth."""
-        # Check that the user trying to create a new user is a superuser
-        if not self.context['request'].user.is_superuser:
-            raise serializers.ValidationError(_("Only superusers can create new users"))
-
-        # Generate a random password
-        password = User.objects.make_random_password(length=14)
-        attrs.update({'password': password})
-        return super().validate(attrs)
-
-    def create(self, validated_data):
-        """Send an e email to the user after creation."""
-        instance = super().create(validated_data)
-
-        # Make sure the user cannot login until they have set a password
-        instance.set_unusable_password()
-        # Send the user an onboarding email (from current site)
-        current_site = Site.objects.get_current()
-        domain = current_site.domain
-        instance.email_user(
-            subject=_(f"Welcome to {current_site.name}"),
-            message=_(f"Your account has been created.\n\nPlease use the password reset function to get access (at https://{domain})."),
-        )
-        return instance
-
-
-class InvenTreeAttachmentSerializerField(serializers.FileField):
-    """Override the DRF native FileField serializer, to remove the leading server path.
-
-    For example, the FileField might supply something like:
-
-    http://127.0.0.1:8000/media/foo/bar.jpg
-
-    Whereas we wish to return:
-
-    /media/foo/bar.jpg
-
-    If the server process is serving the data at 127.0.0.1,
-    but a proxy service (e.g. nginx) is then providing DNS lookup to the outside world,
-    then an attachment which prefixes the "address" of the internal server
-    will not be accessible from the outside world.
-    """
-
-    def to_representation(self, value):
-        """To json-serializable type."""
-        if not value:
-            return None
-
-        return os.path.join(str(settings.MEDIA_URL), str(value))
-
-
-class InvenTreeAttachmentSerializer(InvenTreeModelSerializer):
-    """Special case of an InvenTreeModelSerializer, which handles an "attachment" model.
-
-    The only real addition here is that we support "renaming" of the attachment file.
-    """
-
-    @staticmethod
-    def attachment_fields(extra_fields=None):
-        """Default set of fields for an attachment serializer"""
-        fields = [
-            'pk',
-            'attachment',
-            'filename',
-            'link',
-            'comment',
-            'upload_date',
-            'user',
-            'user_detail',
-        ]
-
-        if extra_fields:
-            fields += extra_fields
-
-        return fields
-
-    user_detail = UserSerializer(source='user', read_only=True, many=False)
-
-    attachment = InvenTreeAttachmentSerializerField(
-        required=False,
-        allow_null=False,
-    )
-
-    # The 'filename' field must be present in the serializer
-    filename = serializers.CharField(
-        label=_('Filename'),
-        required=False,
-        source='basename',
-        allow_blank=False,
-    )
-
-    upload_date = serializers.DateField(read_only=True)
-
-
-class InvenTreeImageSerializerField(serializers.ImageField):
-    """Custom image serializer.
-
-    On upload, validate that the file is a valid image file
-    """
-
-    def to_representation(self, value):
-        """To json-serializable type."""
-        if not value:
-            return None
-
-        return os.path.join(str(settings.MEDIA_URL), str(value))
-
-
-class InvenTreeDecimalField(serializers.FloatField):
-    """Custom serializer for decimal fields.
-
-    Solves the following issues:
-    - The normal DRF DecimalField renders values with trailing zeros
-    - Using a FloatField can result in rounding issues: https://code.djangoproject.com/ticket/30290
-    """
-
-    def to_internal_value(self, data):
-        """Convert to python type."""
-        # Convert the value to a string, and then a decimal
-        try:
-            return Decimal(str(data))
-        except Exception:
-            raise serializers.ValidationError(_("Invalid value"))
-
-
-class DataFileUploadSerializer(serializers.Serializer):
-    """Generic serializer for uploading a data file, and extracting a dataset.
-
-    - Validates uploaded file
-    - Extracts column names
-    - Extracts data rows
-    """
-
-    # Implementing class should register a target model (database model) to be used for import
-    TARGET_MODEL = None
-
-    class Meta:
-        """Metaclass options."""
-
-        fields = [
-            'data_file',
-        ]
-
-    data_file = serializers.FileField(
-        label=_("Data File"),
-        help_text=_("Select data file for upload"),
-        required=True,
-        allow_empty_file=False,
-    )
-
-    def validate_data_file(self, data_file):
-        """Perform validation checks on the uploaded data file."""
-        self.filename = data_file.name
-
-        name, ext = os.path.splitext(data_file.name)
-
-        # Remove the leading . from the extension
-        ext = ext[1:]
-
-        accepted_file_types = [
-            'xls', 'xlsx',
-            'csv', 'tsv',
-            'xml',
-        ]
-
-        if ext not in accepted_file_types:
-            raise serializers.ValidationError(_("Unsupported file type"))
-
-        # Impose a 50MB limit on uploaded BOM files
-        max_upload_file_size = 50 * 1024 * 1024
-
-        if data_file.size > max_upload_file_size:
-            raise serializers.ValidationError(_("File is too large"))
-
-        # Read file data into memory (bytes object)
-        try:
-            data = data_file.read()
-        except Exception as e:
-            raise serializers.ValidationError(str(e))
-
-        if ext in ['csv', 'tsv', 'xml']:
-            try:
-                data = data.decode()
-            except Exception as e:
-                raise serializers.ValidationError(str(e))
-
-        # Convert to a tablib dataset (we expect headers)
-        try:
-            self.dataset = tablib.Dataset().load(data, ext, headers=True)
-        except Exception as e:
-            raise serializers.ValidationError(str(e))
-
-        if len(self.dataset.headers) == 0:
-            raise serializers.ValidationError(_("No columns found in file"))
-
-        if len(self.dataset) == 0:
-            raise serializers.ValidationError(_("No data rows found in file"))
-
-        return data_file
-
-    def match_column(self, column_name, field_names, exact=False):
-        """Attempt to match a column name (from the file) to a field (defined in the model).
-
-        Order of matching is:
-        - Direct match
-        - Case insensitive match
-        - Fuzzy match
-        """
-        if not column_name:
-            return None
-
-        column_name = str(column_name).strip()
-
-        column_name_lower = column_name.lower()
-
-        if column_name in field_names:
-            return column_name
-
-        for field_name in field_names:
-            if field_name.lower() == column_name_lower:
-                return field_name
-
-        if exact:
-            # Finished available 'exact' matches
-            return None
-
-        # TODO: Fuzzy pattern matching for column names
-
-        # No matches found
-        return None
-
-    def extract_data(self):
-        """Returns dataset extracted from the file."""
-        # Provide a dict of available import fields for the model
-        model_fields = {}
-
-        # Keep track of columns we have already extracted
-        matched_columns = set()
-
-        if self.TARGET_MODEL:
-            try:
-                model_fields = self.TARGET_MODEL.get_import_fields()
-            except Exception:
-                pass
-
-        # Extract a list of valid model field names
-        model_field_names = list(model_fields.keys())
-
-        # Provide a dict of available columns from the dataset
-        file_columns = {}
-
-        for header in self.dataset.headers:
-            column = {}
-
-            # Attempt to "match" file columns to model fields
-            match = self.match_column(header, model_field_names, exact=True)
-
-            if match is not None and match not in matched_columns:
-                matched_columns.add(match)
-                column['value'] = match
-            else:
-                column['value'] = None
-
-            file_columns[header] = column
-
-        return {
-            'file_fields': file_columns,
-            'model_fields': model_fields,
-            'rows': [row.values() for row in self.dataset.dict],
-            'filename': self.filename,
-        }
-
-    def save(self):
-        """Empty overwrite for save."""
-        ...
-
-
-class DataFileExtractSerializer(serializers.Serializer):
-    """Generic serializer for extracting data from an imported dataset.
-
-    - User provides an array of matched headers
-    - User provides an array of raw data rows
-    """
-
-    # Implementing class should register a target model (database model) to be used for import
-    TARGET_MODEL = None
-
-    class Meta:
-        """Metaclass options."""
-
-        fields = [
-            'columns',
-            'rows',
-        ]
-
-    # Mapping of columns
-    columns = serializers.ListField(
-        child=serializers.CharField(
-            allow_blank=True,
-        ),
-    )
-
-    rows = serializers.ListField(
-        child=serializers.ListField(
-            child=serializers.CharField(
-                allow_blank=True,
-                allow_null=True,
-            ),
-        )
-    )
-
-    def validate(self, data):
-        """Clean data."""
-        data = super().validate(data)
-
-        self.columns = data.get('columns', [])
-        self.rows = data.get('rows', [])
-
-        if len(self.rows) == 0:
-            raise serializers.ValidationError(_("No data rows provided"))
-
-        if len(self.columns) == 0:
-            raise serializers.ValidationError(_("No data columns supplied"))
-
-        self.validate_extracted_columns()
-
-        return data
-
-    @property
-    def data(self):
-        """Returns current data."""
-        if self.TARGET_MODEL:
-            try:
-                model_fields = self.TARGET_MODEL.get_import_fields()
-            except Exception:
-                model_fields = {}
-
-        rows = []
-
-        for row in self.rows:
-            """Optionally pre-process each row, before sending back to the client."""
-
-            processed_row = self.process_row(self.row_to_dict(row))
-
-            if processed_row:
-                rows.append({
-                    "original": row,
-                    "data": processed_row,
-                })
-
-        return {
-            'fields': model_fields,
-            'columns': self.columns,
-            'rows': rows,
-        }
-
-    def process_row(self, row):
-        """Process a 'row' of data, which is a mapped column:value dict.
-
-        Returns either a mapped column:value dict, or None.
-
-        If the function returns None, the column is ignored!
-        """
-        # Default implementation simply returns the original row data
-        return row
-
-    def row_to_dict(self, row):
-        """Convert a "row" to a named data dict."""
-        row_dict = {
-            'errors': {},
-        }
-
-        for idx, value in enumerate(row):
-
-            if idx < len(self.columns):
-                col = self.columns[idx]
-
-                if col:
-                    row_dict[col] = value
-
-        return row_dict
-
-    def validate_extracted_columns(self):
-        """Perform custom validation of header mapping."""
-        if self.TARGET_MODEL:
-            try:
-                model_fields = self.TARGET_MODEL.get_import_fields()
-            except Exception:
-                model_fields = {}
-
-        cols_seen = set()
-
-        for name, field in model_fields.items():
-
-            required = field.get('required', False)
-
-            # Check for missing required columns
-            if required:
-                if name not in self.columns:
-                    raise serializers.ValidationError(_(f"Missing required column: '{name}'"))
-
-        for col in self.columns:
-
-            if not col:
-                continue
-
-            # Check for duplicated columns
-            if col in cols_seen:
-                raise serializers.ValidationError(_(f"Duplicate column: '{col}'"))
-
-            cols_seen.add(col)
-
-    def save(self):
-        """No "save" action for this serializer."""
-        pass
-
-
-class RemoteImageMixin(metaclass=serializers.SerializerMetaclass):
-    """Mixin class which allows downloading an 'image' from a remote URL.
-
-    Adds the optional, write-only `remote_image` field to the serializer
-    """
-
-    def skip_create_fields(self):
-        """Ensure the 'remote_image' field is skipped when creating a new instance"""
-        return [
-            'remote_image',
-        ]
-
-    remote_image = serializers.URLField(
-        required=False,
-        allow_blank=False,
-        write_only=True,
-        label=_("Remote Image"),
-        help_text=_("URL of remote image file"),
-    )
-
-    def validate_remote_image(self, url):
-        """Perform custom validation for the remote image URL.
-
-        - Attempt to download the image and store it against this object instance
-        - Catches and re-throws any errors
-        """
-        if not url:
-            return
-
-        if not common_models.InvenTreeSetting.get_setting('INVENTREE_DOWNLOAD_FROM_URL'):
-            raise ValidationError(_("Downloading images from remote URL is not enabled"))
-
-        try:
-            self.remote_image_file = download_image_from_url(url)
-        except Exception as exc:
-            self.remote_image_file = None
-            raise ValidationError(str(exc))
-
-        return url

InvenTree/InvenTree/social_auth_urls.py

@@ -1,207 +0,0 @@
-"""API endpoints for social authentication with allauth."""
-import logging
-from importlib import import_module
-
-from django.urls import NoReverseMatch, include, path, reverse
-
-from allauth.account.models import EmailAddress
-from allauth.socialaccount import providers
-from allauth.socialaccount.providers.oauth2.views import (OAuth2Adapter,
-                                                          OAuth2LoginView)
-from drf_spectacular.utils import OpenApiResponse, extend_schema
-from rest_framework.exceptions import NotFound
-from rest_framework.permissions import AllowAny, IsAuthenticated
-from rest_framework.response import Response
-
-import InvenTree.sso
-from common.models import InvenTreeSetting
-from InvenTree.mixins import CreateAPI, ListAPI, ListCreateAPI
-from InvenTree.serializers import InvenTreeModelSerializer
-
-logger = logging.getLogger('inventree')
-
-
-class GenericOAuth2ApiLoginView(OAuth2LoginView):
-    """Api view to login a user with a social account"""
-    def dispatch(self, request, *args, **kwargs):
-        """Dispatch the regular login view directly."""
-        return self.login(request, *args, **kwargs)
-
-
-class GenericOAuth2ApiConnectView(GenericOAuth2ApiLoginView):
-    """Api view to connect a social account to the current user"""
-
-    def dispatch(self, request, *args, **kwargs):
-        """Dispatch the connect request directly."""
-        # Override the request method be in connection mode
-        request.GET = request.GET.copy()
-        request.GET['process'] = 'connect'
-
-        # Resume the dispatch
-        return super().dispatch(request, *args, **kwargs)
-
-
-def handle_oauth2(adapter: OAuth2Adapter):
-    """Define urls for oauth2 endpoints."""
-    return [
-        path('login/', GenericOAuth2ApiLoginView.adapter_view(adapter), name=f'{provider.id}_api_login'),
-        path('connect/', GenericOAuth2ApiConnectView.adapter_view(adapter), name=f'{provider.id}_api_connect'),
-    ]
-
-
-legacy = {
-    'twitter': 'twitter_oauth2',
-    'bitbucket': 'bitbucket_oauth2',
-    'linkedin': 'linkedin_oauth2',
-    'vimeo': 'vimeo_oauth2',
-    'openid': 'openid_connect',
-}  # legacy connectors
-
-
-# Collect urls for all loaded providers
-social_auth_urlpatterns = []
-
-provider_urlpatterns = []
-
-for name, provider in providers.registry.provider_map.items():
-
-    try:
-        prov_mod = import_module(provider.get_package() + ".views")
-    except ImportError:
-        logger.exception("Could not import authentication provider %s", name)
-        continue
-
-    # Try to extract the adapter class
-    adapters = [cls for cls in prov_mod.__dict__.values() if isinstance(cls, type) and not cls == OAuth2Adapter and issubclass(cls, OAuth2Adapter)]
-
-    # Get urls
-    urls = []
-    if len(adapters) == 1:
-        urls = handle_oauth2(adapter=adapters[0])
-    else:
-        if provider.id in legacy:
-            logger.warning('`%s` is not supported on platform UI. Use `%s` instead.', provider.id, legacy[provider.id])
-            continue
-        else:
-            logger.error('Found handler that is not yet ready for platform UI: `%s`. Open an feature request on GitHub if you need it implemented.', provider.id)
-            continue
-    provider_urlpatterns += [path(f'{provider.id}/', include(urls))]
-
-
-social_auth_urlpatterns += provider_urlpatterns
-
-
-class SocialProviderListView(ListAPI):
-    """List of available social providers."""
-    permission_classes = (AllowAny,)
-
-    def get(self, request, *args, **kwargs):
-        """Get the list of providers."""
-        provider_list = []
-        for provider in providers.registry.provider_map.values():
-            provider_data = {
-                'id': provider.id,
-                'name': provider.name,
-                'configured': False
-            }
-
-            try:
-                provider_data['login'] = request.build_absolute_uri(reverse(f'{provider.id}_api_login'))
-            except NoReverseMatch:
-                provider_data['login'] = None
-
-            try:
-                provider_data['connect'] = request.build_absolute_uri(reverse(f'{provider.id}_api_connect'))
-            except NoReverseMatch:
-                provider_data['connect'] = None
-
-            provider_data['configured'] = InvenTree.sso.check_provider(provider)
-            provider_data['display_name'] = InvenTree.sso.provider_display_name(provider)
-
-            provider_list.append(provider_data)
-
-        data = {
-            'sso_enabled': InvenTree.sso.login_enabled(),
-            'sso_registration': InvenTree.sso.registration_enabled(),
-            'mfa_required': InvenTreeSetting.get_setting('LOGIN_ENFORCE_MFA'),
-            'providers': provider_list
-        }
-        return Response(data)
-
-
-class EmailAddressSerializer(InvenTreeModelSerializer):
-    """Serializer for the EmailAddress model."""
-
-    class Meta:
-        """Meta options for EmailAddressSerializer."""
-
-        model = EmailAddress
-        fields = '__all__'
-
-
-class EmptyEmailAddressSerializer(InvenTreeModelSerializer):
-    """Empty Serializer for the EmailAddress model."""
-
-    class Meta:
-        """Meta options for EmailAddressSerializer."""
-
-        model = EmailAddress
-        fields = []
-
-
-class EmailListView(ListCreateAPI):
-    """List of registered email addresses for current users."""
-    permission_classes = (IsAuthenticated,)
-    serializer_class = EmailAddressSerializer
-
-    def get_queryset(self):
-        """Only return data for current user."""
-        return EmailAddress.objects.filter(user=self.request.user)
-
-
-class EmailActionMixin(CreateAPI):
-    """Mixin to modify email addresses for current users."""
-    serializer_class = EmptyEmailAddressSerializer
-    permission_classes = (IsAuthenticated,)
-
-    def get_queryset(self):
-        """Filter queryset for current user."""
-        return EmailAddress.objects.filter(user=self.request.user, pk=self.kwargs['pk']).first()
-
-    @extend_schema(responses={200: OpenApiResponse(response=EmailAddressSerializer)})
-    def post(self, request, *args, **kwargs):
-        """Filter item, run action and return data."""
-        email = self.get_queryset()
-        if not email:
-            raise NotFound
-
-        self.special_action(email, request, *args, **kwargs)
-        return Response(EmailAddressSerializer(email).data)
-
-
-class EmailVerifyView(EmailActionMixin):
-    """Re-verify an email for a currently logged in user."""
-
-    def special_action(self, email, request, *args, **kwargs):
-        """Send confirmation."""
-        if email.verified:
-            return
-        email.send_confirmation(request)
-
-
-class EmailPrimaryView(EmailActionMixin):
-    """Make an email for a currently logged in user primary."""
-
-    def special_action(self, email, *args, **kwargs):
-        """Mark email as primary."""
-        if email.primary:
-            return
-        email.set_as_primary()
-
-
-class EmailRemoveView(EmailActionMixin):
-    """Remove an email for a currently logged in user."""
-
-    def special_action(self, email, *args, **kwargs):
-        """Delete email."""
-        email.delete()

InvenTree/InvenTree/sso.py

@@ -1,81 +0,0 @@
-"""Helper functions for Single Sign On functionality"""
-
-
-import logging
-
-from common.models import InvenTreeSetting
-from InvenTree.helpers import str2bool
-
-logger = logging.getLogger('inventree')
-
-
-def get_provider_app(provider):
-    """Return the SocialApp object for the given provider"""
-
-    from allauth.socialaccount.models import SocialApp
-
-    try:
-        apps = SocialApp.objects.filter(provider__iexact=provider.id)
-    except SocialApp.DoesNotExist:
-        logger.warning("SSO SocialApp not found for provider '%s'", provider.id)
-        return None
-
-    if apps.count() > 1:
-        logger.warning("Multiple SocialApps found for provider '%s'", provider.id)
-
-    if apps.count() == 0:
-        logger.warning("SSO SocialApp not found for provider '%s'", provider.id)
-
-    return apps.first()
-
-
-def check_provider(provider, raise_error=False):
-    """Check if the given provider is correctly configured.
-
-    To be correctly configured, the following must be true:
-
-    - Provider must either have a registered SocialApp
-    - Must have at least one site enabled
-    """
-
-    import allauth.app_settings
-
-    # First, check that the provider is enabled
-    app = get_provider_app(provider)
-
-    if not app:
-        return False
-
-    if allauth.app_settings.SITES_ENABLED:
-        # At least one matching site must be specified
-        if not app.sites.exists():
-            logger.error("SocialApp %s has no sites configured", app)
-            return False
-
-    # At this point, we assume that the provider is correctly configured
-    return True
-
-
-def provider_display_name(provider):
-    """Return the 'display name' for the given provider"""
-
-    if app := get_provider_app(provider):
-        return app.name
-
-    # Fallback value if app not found
-    return provider.name
-
-
-def login_enabled() -> bool:
-    """Return True if SSO login is enabled"""
-    return str2bool(InvenTreeSetting.get_setting('LOGIN_ENABLE_SSO'))
-
-
-def registration_enabled() -> bool:
-    """Return True if SSO registration is enabled"""
-    return str2bool(InvenTreeSetting.get_setting('LOGIN_ENABLE_SSO_REG'))
-
-
-def auto_registration_enabled() -> bool:
-    """Return True if SSO auto-registration is enabled"""
-    return str2bool(InvenTreeSetting.get_setting('LOGIN_SIGNUP_SSO_AUTO'))

InvenTree/InvenTree/static/bootstrap-table/bootstrap-table.css

@@ -1,371 +0,0 @@
-/**
- * @author zhixin wen <wenzhixin2010@gmail.com>
- * version: 1.18.3
- * https://github.com/wenzhixin/bootstrap-table/
- */
-.bootstrap-table .fixed-table-toolbar::after {
-  content: "";
-  display: block;
-  clear: both;
-}
-
-.bootstrap-table .fixed-table-toolbar .bs-bars,
-.bootstrap-table .fixed-table-toolbar .search,
-.bootstrap-table .fixed-table-toolbar .columns {
-  position: relative;
-  margin-top: 10px;
-  margin-bottom: 10px;
-}
-
-.bootstrap-table .fixed-table-toolbar .columns .btn-group > .btn-group {
-  display: inline-block;
-  margin-left: -1px !important;
-}
-
-.bootstrap-table .fixed-table-toolbar .columns .btn-group > .btn-group > .btn {
-  border-radius: 0;
-}
-
-.bootstrap-table .fixed-table-toolbar .columns .btn-group > .btn-group:first-child > .btn {
-  border-top-left-radius: 4px;
-  border-bottom-left-radius: 4px;
-}
-
-.bootstrap-table .fixed-table-toolbar .columns .btn-group > .btn-group:last-child > .btn {
-  border-top-right-radius: 4px;
-  border-bottom-right-radius: 4px;
-}
-
-.bootstrap-table .fixed-table-toolbar .columns .dropdown-menu {
-  text-align: left;
-  max-height: 300px;
-  overflow: auto;
-  -ms-overflow-style: scrollbar;
-  z-index: 1001;
-}
-
-.bootstrap-table .fixed-table-toolbar .columns label {
-  display: block;
-  padding: 3px 20px;
-  clear: both;
-  font-weight: normal;
-  line-height: 1.428571429;
-}
-
-.bootstrap-table .fixed-table-toolbar .columns-left {
-  margin-right: 5px;
-}
-
-.bootstrap-table .fixed-table-toolbar .columns-right {
-  margin-left: 5px;
-}
-
-.bootstrap-table .fixed-table-toolbar .pull-right .dropdown-menu {
-  right: 0;
-  left: auto;
-}
-
-.bootstrap-table .fixed-table-container {
-  position: relative;
-  clear: both;
-}
-
-.bootstrap-table .fixed-table-container .table {
-  width: 100%;
-  margin-bottom: 0 !important;
-}
-
-.bootstrap-table .fixed-table-container .table th,
-.bootstrap-table .fixed-table-container .table td {
-  vertical-align: middle;
-  box-sizing: border-box;
-}
-
-.bootstrap-table .fixed-table-container .table thead th {
-  vertical-align: bottom;
-  padding: 0;
-  margin: 0;
-}
-
-.bootstrap-table .fixed-table-container .table thead th:focus {
-  outline: 0 solid transparent;
-}
-
-.bootstrap-table .fixed-table-container .table thead th.detail {
-  width: 30px;
-}
-
-.bootstrap-table .fixed-table-container .table thead th .th-inner {
-  padding: 0.75rem;
-  vertical-align: bottom;
-  overflow: hidden;
-  text-overflow: ellipsis;
-  white-space: nowrap;
-}
-
-.bootstrap-table .fixed-table-container .table thead th .sortable {
-  cursor: pointer;
-  background-position: right;
-  background-repeat: no-repeat;
-  padding-right: 30px !important;
-}
-
-.bootstrap-table .fixed-table-container .table thead th .both {
-  background-image: url("data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABMAAAATCAQAAADYWf5HAAAAkElEQVQoz7X QMQ5AQBCF4dWQSJxC5wwax1Cq1e7BAdxD5SL+Tq/QCM1oNiJidwox0355mXnG/DrEtIQ6azioNZQxI0ykPhTQIwhCR+BmBYtlK7kLJYwWCcJA9M4qdrZrd8pPjZWPtOqdRQy320YSV17OatFC4euts6z39GYMKRPCTKY9UnPQ6P+GtMRfGtPnBCiqhAeJPmkqAAAAAElFTkSuQmCC");
-}
-
-.bootstrap-table .fixed-table-container .table thead th .asc {
-  background-image: url("data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABMAAAATCAYAAAByUDbMAAAAZ0lEQVQ4y2NgGLKgquEuFxBPAGI2ahhWCsS/gDibUoO0gPgxEP8H4ttArEyuQYxAPBdqEAxPBImTY5gjEL9DM+wTENuQahAvEO9DMwiGdwAxOymGJQLxTyD+jgWDxCMZRsEoGAVoAADeemwtPcZI2wAAAABJRU5ErkJggg==");
-}
-
-.bootstrap-table .fixed-table-container .table thead th .desc {
-  background-image: url("data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABMAAAATCAYAAAByUDbMAAAAZUlEQVQ4y2NgGAWjYBSggaqGu5FA/BOIv2PBIPFEUgxjB+IdQPwfC94HxLykus4GiD+hGfQOiB3J8SojEE9EM2wuSJzcsFMG4ttQgx4DsRalkZENxL+AuJQaMcsGxBOAmGvopk8AVz1sLZgg0bsAAAAASUVORK5CYII= ");
-}
-
-.bootstrap-table .fixed-table-container .table tbody tr.selected td {
-  background-color: rgba(0, 0, 0, 0.075);
-}
-
-.bootstrap-table .fixed-table-container .table tbody tr.no-records-found td {
-  text-align: center;
-}
-
-.bootstrap-table .fixed-table-container .table tbody tr .card-view {
-  display: flex;
-}
-
-.bootstrap-table .fixed-table-container .table tbody tr .card-view .card-view-title {
-  font-weight: bold;
-  display: inline-block;
-  min-width: 30%;
-  width: auto !important;
-  text-align: left !important;
-}
-
-.bootstrap-table .fixed-table-container .table tbody tr .card-view .card-view-value {
-  width: 100% !important;
-}
-
-.bootstrap-table .fixed-table-container .table .bs-checkbox {
-  text-align: center;
-}
-
-.bootstrap-table .fixed-table-container .table .bs-checkbox label {
-  margin-bottom: 0;
-}
-
-.bootstrap-table .fixed-table-container .table .bs-checkbox label input[type="radio"],
-.bootstrap-table .fixed-table-container .table .bs-checkbox label input[type="checkbox"] {
-  margin: 0 auto !important;
-}
-
-.bootstrap-table .fixed-table-container .table.table-sm .th-inner {
-  padding: 0.3rem;
-}
-
-.bootstrap-table .fixed-table-container.fixed-height:not(.has-footer) {
-  border-bottom: 1px solid #dee2e6;
-}
-
-.bootstrap-table .fixed-table-container.fixed-height.has-card-view {
-  border-top: 1px solid #dee2e6;
-  border-bottom: 1px solid #dee2e6;
-}
-
-.bootstrap-table .fixed-table-container.fixed-height .fixed-table-border {
-  border-left: 1px solid #dee2e6;
-  border-right: 1px solid #dee2e6;
-}
-
-.bootstrap-table .fixed-table-container.fixed-height .table thead th {
-  border-bottom: 1px solid #dee2e6;
-}
-
-.bootstrap-table .fixed-table-container.fixed-height .table-dark thead th {
-  border-bottom: 1px solid #32383e;
-}
-
-.bootstrap-table .fixed-table-container .fixed-table-header {
-  overflow: hidden;
-}
-
-.bootstrap-table .fixed-table-container .fixed-table-body {
-  overflow-x: auto;
-  overflow-y: auto;
-  height: 100%;
-}
-
-.bootstrap-table .fixed-table-container .fixed-table-body .fixed-table-loading {
-  align-items: center;
-  background: #fff;
-  display: flex;
-  justify-content: center;
-  position: absolute;
-  bottom: 0;
-  width: 100%;
-  z-index: 1000;
-  transition: visibility 0s, opacity 0.15s ease-in-out;
-  opacity: 0;
-  visibility: hidden;
-}
-
-.bootstrap-table .fixed-table-container .fixed-table-body .fixed-table-loading.open {
-  visibility: visible;
-  opacity: 1;
-}
-
-.bootstrap-table .fixed-table-container .fixed-table-body .fixed-table-loading .loading-wrap {
-  align-items: baseline;
-  display: flex;
-  justify-content: center;
-}
-
-.bootstrap-table .fixed-table-container .fixed-table-body .fixed-table-loading .loading-wrap .loading-text {
-  margin-right: 6px;
-}
-
-.bootstrap-table .fixed-table-container .fixed-table-body .fixed-table-loading .loading-wrap .animation-wrap {
-  align-items: center;
-  display: flex;
-  justify-content: center;
-}
-
-.bootstrap-table .fixed-table-container .fixed-table-body .fixed-table-loading .loading-wrap .animation-dot,
-.bootstrap-table .fixed-table-container .fixed-table-body .fixed-table-loading .loading-wrap .animation-wrap::after,
-.bootstrap-table .fixed-table-container .fixed-table-body .fixed-table-loading .loading-wrap .animation-wrap::before {
-  content: "";
-  animation-duration: 1.5s;
-  animation-iteration-count: infinite;
-  animation-name: LOADING;
-  background: #212529;
-  border-radius: 50%;
-  display: block;
-  height: 5px;
-  margin: 0 4px;
-  opacity: 0;
-  width: 5px;
-}
-
-.bootstrap-table .fixed-table-container .fixed-table-body .fixed-table-loading .loading-wrap .animation-dot {
-  animation-delay: 0.3s;
-}
-
-.bootstrap-table .fixed-table-container .fixed-table-body .fixed-table-loading .loading-wrap .animation-wrap::after {
-  animation-delay: 0.6s;
-}
-
-.bootstrap-table .fixed-table-container .fixed-table-body .fixed-table-loading.table-dark {
-  background: #212529;
-}
-
-.bootstrap-table .fixed-table-container .fixed-table-body .fixed-table-loading.table-dark .animation-dot,
-.bootstrap-table .fixed-table-container .fixed-table-body .fixed-table-loading.table-dark .animation-wrap::after,
-.bootstrap-table .fixed-table-container .fixed-table-body .fixed-table-loading.table-dark .animation-wrap::before {
-  background: #fff;
-}
-
-.bootstrap-table .fixed-table-container .fixed-table-footer {
-  overflow: hidden;
-}
-
-.bootstrap-table .fixed-table-pagination::after {
-  content: "";
-  display: block;
-  clear: both;
-}
-
-.bootstrap-table .fixed-table-pagination > .pagination-detail,
-.bootstrap-table .fixed-table-pagination > .pagination {
-  margin-top: 10px;
-  margin-bottom: 10px;
-}
-
-.bootstrap-table .fixed-table-pagination > .pagination-detail .pagination-info {
-  line-height: 34px;
-  margin-right: 5px;
-}
-
-.bootstrap-table .fixed-table-pagination > .pagination-detail .page-list {
-  display: inline-block;
-}
-
-.bootstrap-table .fixed-table-pagination > .pagination-detail .page-list .btn-group {
-  position: relative;
-  display: inline-block;
-  vertical-align: middle;
-}
-
-.bootstrap-table .fixed-table-pagination > .pagination-detail .page-list .btn-group .dropdown-menu {
-  margin-bottom: 0;
-}
-
-.bootstrap-table .fixed-table-pagination > .pagination ul.pagination {
-  margin: 0;
-}
-
-.bootstrap-table .fixed-table-pagination > .pagination ul.pagination li.page-intermediate a {
-  color: #c8c8c8;
-}
-
-.bootstrap-table .fixed-table-pagination > .pagination ul.pagination li.page-intermediate a::before {
-  content: '\2B05';
-}
-
-.bootstrap-table .fixed-table-pagination > .pagination ul.pagination li.page-intermediate a::after {
-  content: '\27A1';
-}
-
-.bootstrap-table .fixed-table-pagination > .pagination ul.pagination li.disabled a {
-  pointer-events: none;
-  cursor: default;
-}
-
-.bootstrap-table.fullscreen {
-  position: fixed;
-  top: 0;
-  left: 0;
-  z-index: 1050;
-  width: 100% !important;
-  background: #fff;
-  height: calc(100vh);
-  overflow-y: scroll;
-}
-
-.bootstrap-table.bootstrap4 .pagination-lg .page-link, .bootstrap-table.bootstrap5 .pagination-lg .page-link {
-  padding: .5rem 1rem;
-}
-
-.bootstrap-table.bootstrap5 .float-left {
-  float: left;
-}
-
-.bootstrap-table.bootstrap5 .float-right {
-  float: right;
-}
-
-/* calculate scrollbar width */
-div.fixed-table-scroll-inner {
-  width: 100%;
-  height: 200px;
-}
-
-div.fixed-table-scroll-outer {
-  top: 0;
-  left: 0;
-  visibility: hidden;
-  width: 200px;
-  height: 150px;
-  overflow: hidden;
-}
-
-@keyframes LOADING {
-  0% {
-    opacity: 0;
-  }
-  50% {
-    opacity: 1;
-  }
-  to {
-    opacity: 0;
-  }
-}

InvenTree/InvenTree/static/bootstrap-table/extensions/defer-url/bootstrap-table-defer-url.js

@@ -1,869 +0,0 @@
-(function (global, factory) {
-  typeof exports === 'object' && typeof module !== 'undefined' ? factory(require('jquery')) :
-  typeof define === 'function' && define.amd ? define(['jquery'], factory) :
-  (global = typeof globalThis !== 'undefined' ? globalThis : global || self, factory(global.jQuery));
-}(this, (function ($) { 'use strict';
-
-  function _interopDefaultLegacy (e) { return e && typeof e === 'object' && 'default' in e ? e : { 'default': e }; }
-
-  var $__default = /*#__PURE__*/_interopDefaultLegacy($);
-
-  function _classCallCheck(instance, Constructor) {
-    if (!(instance instanceof Constructor)) {
-      throw new TypeError("Cannot call a class as a function");
-    }
-  }
-
-  function _defineProperties(target, props) {
-    for (var i = 0; i < props.length; i++) {
-      var descriptor = props[i];
-      descriptor.enumerable = descriptor.enumerable || false;
-      descriptor.configurable = true;
-      if ("value" in descriptor) descriptor.writable = true;
-      Object.defineProperty(target, descriptor.key, descriptor);
-    }
-  }
-
-  function _createClass(Constructor, protoProps, staticProps) {
-    if (protoProps) _defineProperties(Constructor.prototype, protoProps);
-    if (staticProps) _defineProperties(Constructor, staticProps);
-    return Constructor;
-  }
-
-  function _inherits(subClass, superClass) {
-    if (typeof superClass !== "function" && superClass !== null) {
-      throw new TypeError("Super expression must either be null or a function");
-    }
-
-    subClass.prototype = Object.create(superClass && superClass.prototype, {
-      constructor: {
-        value: subClass,
-        writable: true,
-        configurable: true
-      }
-    });
-    if (superClass) _setPrototypeOf(subClass, superClass);
-  }
-
-  function _getPrototypeOf(o) {
-    _getPrototypeOf = Object.setPrototypeOf ? Object.getPrototypeOf : function _getPrototypeOf(o) {
-      return o.__proto__ || Object.getPrototypeOf(o);
-    };
-    return _getPrototypeOf(o);
-  }
-
-  function _setPrototypeOf(o, p) {
-    _setPrototypeOf = Object.setPrototypeOf || function _setPrototypeOf(o, p) {
-      o.__proto__ = p;
-      return o;
-    };
-
-    return _setPrototypeOf(o, p);
-  }
-
-  function _isNativeReflectConstruct() {
-    if (typeof Reflect === "undefined" || !Reflect.construct) return false;
-    if (Reflect.construct.sham) return false;
-    if (typeof Proxy === "function") return true;
-
-    try {
-      Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function () {}));
-      return true;
-    } catch (e) {
-      return false;
-    }
-  }
-
-  function _assertThisInitialized(self) {
-    if (self === void 0) {
-      throw new ReferenceError("this hasn't been initialised - super() hasn't been called");
-    }
-
-    return self;
-  }
-
-  function _possibleConstructorReturn(self, call) {
-    if (call && (typeof call === "object" || typeof call === "function")) {
-      return call;
-    }
-
-    return _assertThisInitialized(self);
-  }
-
-  function _createSuper(Derived) {
-    var hasNativeReflectConstruct = _isNativeReflectConstruct();
-
-    return function _createSuperInternal() {
-      var Super = _getPrototypeOf(Derived),
-          result;
-
-      if (hasNativeReflectConstruct) {
-        var NewTarget = _getPrototypeOf(this).constructor;
-
-        result = Reflect.construct(Super, arguments, NewTarget);
-      } else {
-        result = Super.apply(this, arguments);
-      }
-
-      return _possibleConstructorReturn(this, result);
-    };
-  }
-
-  function _superPropBase(object, property) {
-    while (!Object.prototype.hasOwnProperty.call(object, property)) {
-      object = _getPrototypeOf(object);
-      if (object === null) break;
-    }
-
-    return object;
-  }
-
-  function _get(target, property, receiver) {
-    if (typeof Reflect !== "undefined" && Reflect.get) {
-      _get = Reflect.get;
-    } else {
-      _get = function _get(target, property, receiver) {
-        var base = _superPropBase(target, property);
-
-        if (!base) return;
-        var desc = Object.getOwnPropertyDescriptor(base, property);
-
-        if (desc.get) {
-          return desc.get.call(receiver);
-        }
-
-        return desc.value;
-      };
-    }
-
-    return _get(target, property, receiver || target);
-  }
-
-  var commonjsGlobal = typeof globalThis !== 'undefined' ? globalThis : typeof window !== 'undefined' ? window : typeof global !== 'undefined' ? global : typeof self !== 'undefined' ? self : {};
-
-  function createCommonjsModule(fn, module) {
-  	return module = { exports: {} }, fn(module, module.exports), module.exports;
-  }
-
-  var check = function (it) {
-    return it && it.Math == Math && it;
-  };
-
-  // https://github.com/zloirock/core-js/issues/86#issuecomment-115759028
-  var global_1 =
-    /* global globalThis -- safe */
-    check(typeof globalThis == 'object' && globalThis) ||
-    check(typeof window == 'object' && window) ||
-    check(typeof self == 'object' && self) ||
-    check(typeof commonjsGlobal == 'object' && commonjsGlobal) ||
-    // eslint-disable-next-line no-new-func -- fallback
-    (function () { return this; })() || Function('return this')();
-
-  var fails = function (exec) {
-    try {
-      return !!exec();
-    } catch (error) {
-      return true;
-    }
-  };
-
-  // Detect IE8's incomplete defineProperty implementation
-  var descriptors = !fails(function () {
-    return Object.defineProperty({}, 1, { get: function () { return 7; } })[1] != 7;
-  });
-
-  var nativePropertyIsEnumerable = {}.propertyIsEnumerable;
-  var getOwnPropertyDescriptor$1 = Object.getOwnPropertyDescriptor;
-
-  // Nashorn ~ JDK8 bug
-  var NASHORN_BUG = getOwnPropertyDescriptor$1 && !nativePropertyIsEnumerable.call({ 1: 2 }, 1);
-
-  // `Object.prototype.propertyIsEnumerable` method implementation
-  // https://tc39.es/ecma262/#sec-object.prototype.propertyisenumerable
-  var f$4 = NASHORN_BUG ? function propertyIsEnumerable(V) {
-    var descriptor = getOwnPropertyDescriptor$1(this, V);
-    return !!descriptor && descriptor.enumerable;
-  } : nativePropertyIsEnumerable;
-
-  var objectPropertyIsEnumerable = {
-  	f: f$4
-  };
-
-  var createPropertyDescriptor = function (bitmap, value) {
-    return {
-      enumerable: !(bitmap & 1),
-      configurable: !(bitmap & 2),
-      writable: !(bitmap & 4),
-      value: value
-    };
-  };
-
-  var toString = {}.toString;
-
-  var classofRaw = function (it) {
-    return toString.call(it).slice(8, -1);
-  };
-
-  var split = ''.split;
-
-  // fallback for non-array-like ES3 and non-enumerable old V8 strings
-  var indexedObject = fails(function () {
-    // throws an error in rhino, see https://github.com/mozilla/rhino/issues/346
-    // eslint-disable-next-line no-prototype-builtins -- safe
-    return !Object('z').propertyIsEnumerable(0);
-  }) ? function (it) {
-    return classofRaw(it) == 'String' ? split.call(it, '') : Object(it);
-  } : Object;
-
-  // `RequireObjectCoercible` abstract operation
-  // https://tc39.es/ecma262/#sec-requireobjectcoercible
-  var requireObjectCoercible = function (it) {
-    if (it == undefined) throw TypeError("Can't call method on " + it);
-    return it;
-  };
-
-  // toObject with fallback for non-array-like ES3 strings
-
-
-
-  var toIndexedObject = function (it) {
-    return indexedObject(requireObjectCoercible(it));
-  };
-
-  var isObject = function (it) {
-    return typeof it === 'object' ? it !== null : typeof it === 'function';
-  };
-
-  // `ToPrimitive` abstract operation
-  // https://tc39.es/ecma262/#sec-toprimitive
-  // instead of the ES6 spec version, we didn't implement @@toPrimitive case
-  // and the second argument - flag - preferred type is a string
-  var toPrimitive = function (input, PREFERRED_STRING) {
-    if (!isObject(input)) return input;
-    var fn, val;
-    if (PREFERRED_STRING && typeof (fn = input.toString) == 'function' && !isObject(val = fn.call(input))) return val;
-    if (typeof (fn = input.valueOf) == 'function' && !isObject(val = fn.call(input))) return val;
-    if (!PREFERRED_STRING && typeof (fn = input.toString) == 'function' && !isObject(val = fn.call(input))) return val;
-    throw TypeError("Can't convert object to primitive value");
-  };
-
-  var hasOwnProperty = {}.hasOwnProperty;
-
-  var has$1 = function (it, key) {
-    return hasOwnProperty.call(it, key);
-  };
-
-  var document = global_1.document;
-  // typeof document.createElement is 'object' in old IE
-  var EXISTS = isObject(document) && isObject(document.createElement);
-
-  var documentCreateElement = function (it) {
-    return EXISTS ? document.createElement(it) : {};
-  };
-
-  // Thank's IE8 for his funny defineProperty
-  var ie8DomDefine = !descriptors && !fails(function () {
-    return Object.defineProperty(documentCreateElement('div'), 'a', {
-      get: function () { return 7; }
-    }).a != 7;
-  });
-
-  var nativeGetOwnPropertyDescriptor = Object.getOwnPropertyDescriptor;
-
-  // `Object.getOwnPropertyDescriptor` method
-  // https://tc39.es/ecma262/#sec-object.getownpropertydescriptor
-  var f$3 = descriptors ? nativeGetOwnPropertyDescriptor : function getOwnPropertyDescriptor(O, P) {
-    O = toIndexedObject(O);
-    P = toPrimitive(P, true);
-    if (ie8DomDefine) try {
-      return nativeGetOwnPropertyDescriptor(O, P);
-    } catch (error) { /* empty */ }
-    if (has$1(O, P)) return createPropertyDescriptor(!objectPropertyIsEnumerable.f.call(O, P), O[P]);
-  };
-
-  var objectGetOwnPropertyDescriptor = {
-  	f: f$3
-  };
-
-  var anObject = function (it) {
-    if (!isObject(it)) {
-      throw TypeError(String(it) + ' is not an object');
-    } return it;
-  };
-
-  var nativeDefineProperty = Object.defineProperty;
-
-  // `Object.defineProperty` method
-  // https://tc39.es/ecma262/#sec-object.defineproperty
-  var f$2 = descriptors ? nativeDefineProperty : function defineProperty(O, P, Attributes) {
-    anObject(O);
-    P = toPrimitive(P, true);
-    anObject(Attributes);
-    if (ie8DomDefine) try {
-      return nativeDefineProperty(O, P, Attributes);
-    } catch (error) { /* empty */ }
-    if ('get' in Attributes || 'set' in Attributes) throw TypeError('Accessors not supported');
-    if ('value' in Attributes) O[P] = Attributes.value;
-    return O;
-  };
-
-  var objectDefineProperty = {
-  	f: f$2
-  };
-
-  var createNonEnumerableProperty = descriptors ? function (object, key, value) {
-    return objectDefineProperty.f(object, key, createPropertyDescriptor(1, value));
-  } : function (object, key, value) {
-    object[key] = value;
-    return object;
-  };
-
-  var setGlobal = function (key, value) {
-    try {
-      createNonEnumerableProperty(global_1, key, value);
-    } catch (error) {
-      global_1[key] = value;
-    } return value;
-  };
-
-  var SHARED = '__core-js_shared__';
-  var store$1 = global_1[SHARED] || setGlobal(SHARED, {});
-
-  var sharedStore = store$1;
-
-  var functionToString = Function.toString;
-
-  // this helper broken in `3.4.1-3.4.4`, so we can't use `shared` helper
-  if (typeof sharedStore.inspectSource != 'function') {
-    sharedStore.inspectSource = function (it) {
-      return functionToString.call(it);
-    };
-  }
-
-  var inspectSource = sharedStore.inspectSource;
-
-  var WeakMap$1 = global_1.WeakMap;
-
-  var nativeWeakMap = typeof WeakMap$1 === 'function' && /native code/.test(inspectSource(WeakMap$1));
-
-  var shared = createCommonjsModule(function (module) {
-  (module.exports = function (key, value) {
-    return sharedStore[key] || (sharedStore[key] = value !== undefined ? value : {});
-  })('versions', []).push({
-    version: '3.9.1',
-    mode: 'global',
-    copyright: '© 2021 Denis Pushkarev (zloirock.ru)'
-  });
-  });
-
-  var id = 0;
-  var postfix = Math.random();
-
-  var uid = function (key) {
-    return 'Symbol(' + String(key === undefined ? '' : key) + ')_' + (++id + postfix).toString(36);
-  };
-
-  var keys = shared('keys');
-
-  var sharedKey = function (key) {
-    return keys[key] || (keys[key] = uid(key));
-  };
-
-  var hiddenKeys$1 = {};
-
-  var WeakMap = global_1.WeakMap;
-  var set, get, has;
-
-  var enforce = function (it) {
-    return has(it) ? get(it) : set(it, {});
-  };
-
-  var getterFor = function (TYPE) {
-    return function (it) {
-      var state;
-      if (!isObject(it) || (state = get(it)).type !== TYPE) {
-        throw TypeError('Incompatible receiver, ' + TYPE + ' required');
-      } return state;
-    };
-  };
-
-  if (nativeWeakMap) {
-    var store = sharedStore.state || (sharedStore.state = new WeakMap());
-    var wmget = store.get;
-    var wmhas = store.has;
-    var wmset = store.set;
-    set = function (it, metadata) {
-      metadata.facade = it;
-      wmset.call(store, it, metadata);
-      return metadata;
-    };
-    get = function (it) {
-      return wmget.call(store, it) || {};
-    };
-    has = function (it) {
-      return wmhas.call(store, it);
-    };
-  } else {
-    var STATE = sharedKey('state');
-    hiddenKeys$1[STATE] = true;
-    set = function (it, metadata) {
-      metadata.facade = it;
-      createNonEnumerableProperty(it, STATE, metadata);
-      return metadata;
-    };
-    get = function (it) {
-      return has$1(it, STATE) ? it[STATE] : {};
-    };
-    has = function (it) {
-      return has$1(it, STATE);
-    };
-  }
-
-  var internalState = {
-    set: set,
-    get: get,
-    has: has,
-    enforce: enforce,
-    getterFor: getterFor
-  };
-
-  var redefine = createCommonjsModule(function (module) {
-  var getInternalState = internalState.get;
-  var enforceInternalState = internalState.enforce;
-  var TEMPLATE = String(String).split('String');
-
-  (module.exports = function (O, key, value, options) {
-    var unsafe = options ? !!options.unsafe : false;
-    var simple = options ? !!options.enumerable : false;
-    var noTargetGet = options ? !!options.noTargetGet : false;
-    var state;
-    if (typeof value == 'function') {
-      if (typeof key == 'string' && !has$1(value, 'name')) {
-        createNonEnumerableProperty(value, 'name', key);
-      }
-      state = enforceInternalState(value);
-      if (!state.source) {
-        state.source = TEMPLATE.join(typeof key == 'string' ? key : '');
-      }
-    }
-    if (O === global_1) {
-      if (simple) O[key] = value;
-      else setGlobal(key, value);
-      return;
-    } else if (!unsafe) {
-      delete O[key];
-    } else if (!noTargetGet && O[key]) {
-      simple = true;
-    }
-    if (simple) O[key] = value;
-    else createNonEnumerableProperty(O, key, value);
-  // add fake Function#toString for correct work wrapped methods / constructors with methods like LoDash isNative
-  })(Function.prototype, 'toString', function toString() {
-    return typeof this == 'function' && getInternalState(this).source || inspectSource(this);
-  });
-  });
-
-  var path = global_1;
-
-  var aFunction = function (variable) {
-    return typeof variable == 'function' ? variable : undefined;
-  };
-
-  var getBuiltIn = function (namespace, method) {
-    return arguments.length < 2 ? aFunction(path[namespace]) || aFunction(global_1[namespace])
-      : path[namespace] && path[namespace][method] || global_1[namespace] && global_1[namespace][method];
-  };
-
-  var ceil = Math.ceil;
-  var floor = Math.floor;
-
-  // `ToInteger` abstract operation
-  // https://tc39.es/ecma262/#sec-tointeger
-  var toInteger = function (argument) {
-    return isNaN(argument = +argument) ? 0 : (argument > 0 ? floor : ceil)(argument);
-  };
-
-  var min$1 = Math.min;
-
-  // `ToLength` abstract operation
-  // https://tc39.es/ecma262/#sec-tolength
-  var toLength = function (argument) {
-    return argument > 0 ? min$1(toInteger(argument), 0x1FFFFFFFFFFFFF) : 0; // 2 ** 53 - 1 == 9007199254740991
-  };
-
-  var max = Math.max;
-  var min = Math.min;
-
-  // Helper for a popular repeating case of the spec:
-  // Let integer be ? ToInteger(index).
-  // If integer < 0, let result be max((length + integer), 0); else let result be min(integer, length).
-  var toAbsoluteIndex = function (index, length) {
-    var integer = toInteger(index);
-    return integer < 0 ? max(integer + length, 0) : min(integer, length);
-  };
-
-  // `Array.prototype.{ indexOf, includes }` methods implementation
-  var createMethod = function (IS_INCLUDES) {
-    return function ($this, el, fromIndex) {
-      var O = toIndexedObject($this);
-      var length = toLength(O.length);
-      var index = toAbsoluteIndex(fromIndex, length);
-      var value;
-      // Array#includes uses SameValueZero equality algorithm
-      // eslint-disable-next-line no-self-compare -- NaN check
-      if (IS_INCLUDES && el != el) while (length > index) {
-        value = O[index++];
-        // eslint-disable-next-line no-self-compare -- NaN check
-        if (value != value) return true;
-      // Array#indexOf ignores holes, Array#includes - not
-      } else for (;length > index; index++) {
-        if ((IS_INCLUDES || index in O) && O[index] === el) return IS_INCLUDES || index || 0;
-      } return !IS_INCLUDES && -1;
-    };
-  };
-
-  var arrayIncludes = {
-    // `Array.prototype.includes` method
-    // https://tc39.es/ecma262/#sec-array.prototype.includes
-    includes: createMethod(true),
-    // `Array.prototype.indexOf` method
-    // https://tc39.es/ecma262/#sec-array.prototype.indexof
-    indexOf: createMethod(false)
-  };
-
-  var indexOf = arrayIncludes.indexOf;
-
-
-  var objectKeysInternal = function (object, names) {
-    var O = toIndexedObject(object);
-    var i = 0;
-    var result = [];
-    var key;
-    for (key in O) !has$1(hiddenKeys$1, key) && has$1(O, key) && result.push(key);
-    // Don't enum bug & hidden keys
-    while (names.length > i) if (has$1(O, key = names[i++])) {
-      ~indexOf(result, key) || result.push(key);
-    }
-    return result;
-  };
-
-  // IE8- don't enum bug keys
-  var enumBugKeys = [
-    'constructor',
-    'hasOwnProperty',
-    'isPrototypeOf',
-    'propertyIsEnumerable',
-    'toLocaleString',
-    'toString',
-    'valueOf'
-  ];
-
-  var hiddenKeys = enumBugKeys.concat('length', 'prototype');
-
-  // `Object.getOwnPropertyNames` method
-  // https://tc39.es/ecma262/#sec-object.getownpropertynames
-  var f$1 = Object.getOwnPropertyNames || function getOwnPropertyNames(O) {
-    return objectKeysInternal(O, hiddenKeys);
-  };
-
-  var objectGetOwnPropertyNames = {
-  	f: f$1
-  };
-
-  var f = Object.getOwnPropertySymbols;
-
-  var objectGetOwnPropertySymbols = {
-  	f: f
-  };
-
-  // all object keys, includes non-enumerable and symbols
-  var ownKeys = getBuiltIn('Reflect', 'ownKeys') || function ownKeys(it) {
-    var keys = objectGetOwnPropertyNames.f(anObject(it));
-    var getOwnPropertySymbols = objectGetOwnPropertySymbols.f;
-    return getOwnPropertySymbols ? keys.concat(getOwnPropertySymbols(it)) : keys;
-  };
-
-  var copyConstructorProperties = function (target, source) {
-    var keys = ownKeys(source);
-    var defineProperty = objectDefineProperty.f;
-    var getOwnPropertyDescriptor = objectGetOwnPropertyDescriptor.f;
-    for (var i = 0; i < keys.length; i++) {
-      var key = keys[i];
-      if (!has$1(target, key)) defineProperty(target, key, getOwnPropertyDescriptor(source, key));
-    }
-  };
-
-  var replacement = /#|\.prototype\./;
-
-  var isForced = function (feature, detection) {
-    var value = data[normalize(feature)];
-    return value == POLYFILL ? true
-      : value == NATIVE ? false
-      : typeof detection == 'function' ? fails(detection)
-      : !!detection;
-  };
-
-  var normalize = isForced.normalize = function (string) {
-    return String(string).replace(replacement, '.').toLowerCase();
-  };
-
-  var data = isForced.data = {};
-  var NATIVE = isForced.NATIVE = 'N';
-  var POLYFILL = isForced.POLYFILL = 'P';
-
-  var isForced_1 = isForced;
-
-  var getOwnPropertyDescriptor = objectGetOwnPropertyDescriptor.f;
-
-
-
-
-
-
-  /*
-    options.target      - name of the target object
-    options.global      - target is the global object
-    options.stat        - export as static methods of target
-    options.proto       - export as prototype methods of target
-    options.real        - real prototype method for the `pure` version
-    options.forced      - export even if the native feature is available
-    options.bind        - bind methods to the target, required for the `pure` version
-    options.wrap        - wrap constructors to preventing global pollution, required for the `pure` version
-    options.unsafe      - use the simple assignment of property instead of delete + defineProperty
-    options.sham        - add a flag to not completely full polyfills
-    options.enumerable  - export as enumerable property
-    options.noTargetGet - prevent calling a getter on target
-  */
-  var _export = function (options, source) {
-    var TARGET = options.target;
-    var GLOBAL = options.global;
-    var STATIC = options.stat;
-    var FORCED, target, key, targetProperty, sourceProperty, descriptor;
-    if (GLOBAL) {
-      target = global_1;
-    } else if (STATIC) {
-      target = global_1[TARGET] || setGlobal(TARGET, {});
-    } else {
-      target = (global_1[TARGET] || {}).prototype;
-    }
-    if (target) for (key in source) {
-      sourceProperty = source[key];
-      if (options.noTargetGet) {
-        descriptor = getOwnPropertyDescriptor(target, key);
-        targetProperty = descriptor && descriptor.value;
-      } else targetProperty = target[key];
-      FORCED = isForced_1(GLOBAL ? key : TARGET + (STATIC ? '.' : '#') + key, options.forced);
-      // contained in target
-      if (!FORCED && targetProperty !== undefined) {
-        if (typeof sourceProperty === typeof targetProperty) continue;
-        copyConstructorProperties(sourceProperty, targetProperty);
-      }
-      // add a flag to not completely full polyfills
-      if (options.sham || (targetProperty && targetProperty.sham)) {
-        createNonEnumerableProperty(sourceProperty, 'sham', true);
-      }
-      // extend global
-      redefine(target, key, sourceProperty, options);
-    }
-  };
-
-  // `IsArray` abstract operation
-  // https://tc39.es/ecma262/#sec-isarray
-  var isArray = Array.isArray || function isArray(arg) {
-    return classofRaw(arg) == 'Array';
-  };
-
-  // `ToObject` abstract operation
-  // https://tc39.es/ecma262/#sec-toobject
-  var toObject = function (argument) {
-    return Object(requireObjectCoercible(argument));
-  };
-
-  var createProperty = function (object, key, value) {
-    var propertyKey = toPrimitive(key);
-    if (propertyKey in object) objectDefineProperty.f(object, propertyKey, createPropertyDescriptor(0, value));
-    else object[propertyKey] = value;
-  };
-
-  var engineIsNode = classofRaw(global_1.process) == 'process';
-
-  var engineUserAgent = getBuiltIn('navigator', 'userAgent') || '';
-
-  var process = global_1.process;
-  var versions = process && process.versions;
-  var v8 = versions && versions.v8;
-  var match, version;
-
-  if (v8) {
-    match = v8.split('.');
-    version = match[0] + match[1];
-  } else if (engineUserAgent) {
-    match = engineUserAgent.match(/Edge\/(\d+)/);
-    if (!match || match[1] >= 74) {
-      match = engineUserAgent.match(/Chrome\/(\d+)/);
-      if (match) version = match[1];
-    }
-  }
-
-  var engineV8Version = version && +version;
-
-  var nativeSymbol = !!Object.getOwnPropertySymbols && !fails(function () {
-    /* global Symbol -- required for testing */
-    return !Symbol.sham &&
-      // Chrome 38 Symbol has incorrect toString conversion
-      // Chrome 38-40 symbols are not inherited from DOM collections prototypes to instances
-      (engineIsNode ? engineV8Version === 38 : engineV8Version > 37 && engineV8Version < 41);
-  });
-
-  var useSymbolAsUid = nativeSymbol
-    /* global Symbol -- safe */
-    && !Symbol.sham
-    && typeof Symbol.iterator == 'symbol';
-
-  var WellKnownSymbolsStore = shared('wks');
-  var Symbol$1 = global_1.Symbol;
-  var createWellKnownSymbol = useSymbolAsUid ? Symbol$1 : Symbol$1 && Symbol$1.withoutSetter || uid;
-
-  var wellKnownSymbol = function (name) {
-    if (!has$1(WellKnownSymbolsStore, name) || !(nativeSymbol || typeof WellKnownSymbolsStore[name] == 'string')) {
-      if (nativeSymbol && has$1(Symbol$1, name)) {
-        WellKnownSymbolsStore[name] = Symbol$1[name];
-      } else {
-        WellKnownSymbolsStore[name] = createWellKnownSymbol('Symbol.' + name);
-      }
-    } return WellKnownSymbolsStore[name];
-  };
-
-  var SPECIES$1 = wellKnownSymbol('species');
-
-  // `ArraySpeciesCreate` abstract operation
-  // https://tc39.es/ecma262/#sec-arrayspeciescreate
-  var arraySpeciesCreate = function (originalArray, length) {
-    var C;
-    if (isArray(originalArray)) {
-      C = originalArray.constructor;
-      // cross-realm fallback
-      if (typeof C == 'function' && (C === Array || isArray(C.prototype))) C = undefined;
-      else if (isObject(C)) {
-        C = C[SPECIES$1];
-        if (C === null) C = undefined;
-      }
-    } return new (C === undefined ? Array : C)(length === 0 ? 0 : length);
-  };
-
-  var SPECIES = wellKnownSymbol('species');
-
-  var arrayMethodHasSpeciesSupport = function (METHOD_NAME) {
-    // We can't use this feature detection in V8 since it causes
-    // deoptimization and serious performance degradation
-    // https://github.com/zloirock/core-js/issues/677
-    return engineV8Version >= 51 || !fails(function () {
-      var array = [];
-      var constructor = array.constructor = {};
-      constructor[SPECIES] = function () {
-        return { foo: 1 };
-      };
-      return array[METHOD_NAME](Boolean).foo !== 1;
-    });
-  };
-
-  var IS_CONCAT_SPREADABLE = wellKnownSymbol('isConcatSpreadable');
-  var MAX_SAFE_INTEGER = 0x1FFFFFFFFFFFFF;
-  var MAXIMUM_ALLOWED_INDEX_EXCEEDED = 'Maximum allowed index exceeded';
-
-  // We can't use this feature detection in V8 since it causes
-  // deoptimization and serious performance degradation
-  // https://github.com/zloirock/core-js/issues/679
-  var IS_CONCAT_SPREADABLE_SUPPORT = engineV8Version >= 51 || !fails(function () {
-    var array = [];
-    array[IS_CONCAT_SPREADABLE] = false;
-    return array.concat()[0] !== array;
-  });
-
-  var SPECIES_SUPPORT = arrayMethodHasSpeciesSupport('concat');
-
-  var isConcatSpreadable = function (O) {
-    if (!isObject(O)) return false;
-    var spreadable = O[IS_CONCAT_SPREADABLE];
-    return spreadable !== undefined ? !!spreadable : isArray(O);
-  };
-
-  var FORCED = !IS_CONCAT_SPREADABLE_SUPPORT || !SPECIES_SUPPORT;
-
-  // `Array.prototype.concat` method
-  // https://tc39.es/ecma262/#sec-array.prototype.concat
-  // with adding support of @@isConcatSpreadable and @@species
-  _export({ target: 'Array', proto: true, forced: FORCED }, {
-    // eslint-disable-next-line no-unused-vars -- required for `.length`
-    concat: function concat(arg) {
-      var O = toObject(this);
-      var A = arraySpeciesCreate(O, 0);
-      var n = 0;
-      var i, k, length, len, E;
-      for (i = -1, length = arguments.length; i < length; i++) {
-        E = i === -1 ? O : arguments[i];
-        if (isConcatSpreadable(E)) {
-          len = toLength(E.length);
-          if (n + len > MAX_SAFE_INTEGER) throw TypeError(MAXIMUM_ALLOWED_INDEX_EXCEEDED);
-          for (k = 0; k < len; k++, n++) if (k in E) createProperty(A, n, E[k]);
-        } else {
-          if (n >= MAX_SAFE_INTEGER) throw TypeError(MAXIMUM_ALLOWED_INDEX_EXCEEDED);
-          createProperty(A, n++, E);
-        }
-      }
-      A.length = n;
-      return A;
-    }
-  });
-
-  /**
-   * When using server-side processing, the default mode of operation for
-   * bootstrap-table is to simply throw away any data that currently exists in the
-   * table and make a request to the server to get the first page of data to
-   * display. This is fine for an empty table, but if you already have the first
-   * page of data displayed in the plain HTML, it is a waste of resources. As
-   * such, you can use data-defer-url instead of data-url to allow you to instruct
-   * bootstrap-table to not make that initial request, rather it will use the data
-   * already on the page.
-   *
-   * @author: Ruben Suarez
-   * @webSite: http://rubensa.eu.org
-   * @update zhixin wen <wenzhixin2010@gmail.com>
-   */
-
-  $__default['default'].extend($__default['default'].fn.bootstrapTable.defaults, {
-    deferUrl: undefined
-  });
-
-  $__default['default'].BootstrapTable = /*#__PURE__*/function (_$$BootstrapTable) {
-    _inherits(_class, _$$BootstrapTable);
-
-    var _super = _createSuper(_class);
-
-    function _class() {
-      _classCallCheck(this, _class);
-
-      return _super.apply(this, arguments);
-    }
-
-    _createClass(_class, [{
-      key: "init",
-      value: function init() {
-        var _get2;
-
-        for (var _len = arguments.length, args = new Array(_len), _key = 0; _key < _len; _key++) {
-          args[_key] = arguments[_key];
-        }
-
-        (_get2 = _get(_getPrototypeOf(_class.prototype), "init", this)).call.apply(_get2, [this].concat(args));
-
-        if (this.options.deferUrl) {
-          this.options.url = this.options.deferUrl;
-        }
-      }
-    }]);
-
-    return _class;
-  }($__default['default'].BootstrapTable);
-
-})));