Merge pull request #2712 from inventree/0.6.x

0.6.2 release

.devcontainer/Dockerfile

@@ -1,46 +0,0 @@
-# Dockerfile for the InvenTree devcontainer
-# This container is used for development of the InvenTree project, and includes all necessary dependencies for both backend and frontend development.
-
-FROM mcr.microsoft.com/devcontainers/python:3.12-trixie@sha256:5440cb68898d190ad6c6e8a4634ce89d0645bea47f9c8beb75612bb8e3983711
-
-# InvenTree paths
-ENV INVENTREE_HOME="/home/inventree"
-ENV INVENTREE_DATA_DIR="${INVENTREE_HOME}/dev"
-ENV INVENTREE_STATIC_ROOT="${INVENTREE_DATA_DIR}/static"
-ENV INVENTREE_MEDIA_ROOT="${INVENTREE_DATA_DIR}/media"
-ENV INVENTREE_BACKUP_DIR="${INVENTREE_DATA_DIR}/backup"
-ENV INVENTREE_PLUGIN_DIR="${INVENTREE_DATA_DIR}/plugins"
-ENV INVENTREE_CONFIG_FILE="${INVENTREE_DATA_DIR}/config.yaml"
-ENV INVENTREE_SECRET_KEY_FILE="${INVENTREE_DATA_DIR}/secret_key.txt"
-ENV INVENTREE_OIDC_PRIVATE_KEY_FILE="${INVENTREE_DATA_DIR}/oidc.pem"
-
-# Required for running playwright within devcontainer
-ENV DISPLAY=:0
-ENV LIBGL_ALWAYS_INDIRECT=1
-
-COPY contrib/container/init.sh ./
-RUN chmod +x init.sh
-
-# Install required base packages
-RUN apt update && apt install -y \
-   python3-dev python3-venv \
-   postgresql-client \
-   libldap2-dev libsasl2-dev \
-   libpango-1.0-0 libcairo2 \
-   poppler-utils weasyprint
-
-# Install packages required for frontend development
-RUN apt install -y nodejs npm
-
-# Update to the latest stable node version
-RUN npm install -g n --ignore-scripts && n lts
-
-# Install yarn
-RUN npm install -g yarn
-
-# Ensure node and yarn are available at the command line
-RUN node --version && yarn --version
-
-RUN yarn config set httpTimeout 600000 --home
-
-ENTRYPOINT ["/bin/bash", "./init.sh"]

.devcontainer/devcontainer.json

@@ -1,77 +0,0 @@
-// For format details, see https://aka.ms/devcontainer.json. For config options, see the README at:
-// https://github.com/microsoft/vscode-dev-containers/tree/v0.241.1/containers/python-3
-{
-  "name": "InvenTree devcontainer",
-  "dockerComposeFile": "docker-compose.yml",
-  "service": "inventree",
-  "overrideCommand": true,
-  "workspaceFolder": "/home/inventree/",
-
-  // Configure tool-specific properties.
-  "customizations": {
-    // Configure properties specific to VS Code.
-    "vscode": {
-      // Set *default* container specific settings.json values on container create.
-      "settings": {
-        "python.defaultInterpreterPath": "${containerWorkspaceFolder}/dev/venv/bin/python",
-        "python.linting.enabled": true,
-        "python.linting.pylintEnabled": false,
-        "python.formatting.autopep8Path": "/usr/local/py-utils/bin/autopep8",
-        "python.formatting.blackPath": "/usr/local/py-utils/bin/black",
-        "python.formatting.yapfPath": "/usr/local/py-utils/bin/yapf",
-        "python.linting.banditPath": "/usr/local/py-utils/bin/bandit",
-        "python.linting.mypyPath": "/usr/local/py-utils/bin/mypy",
-        "python.linting.pycodestylePath": "/usr/local/py-utils/bin/pycodestyle",
-        "python.linting.pydocstylePath": "/usr/local/py-utils/bin/pydocstyle",
-        "python.linting.pylintPath": "/usr/local/py-utils/bin/pylint"
-      },
-
-      // Add the IDs of extensions you want installed when the container is created.
-      "extensions": [
-        "ms-python.python",
-        "ms-python.vscode-pylance",
-        "batisteo.vscode-django",
-        "eamodio.gitlens",
-        "biomejs.biome"
-      ]
-    }
-  },
-
-  // Use 'forwardPorts' to make a list of ports inside the container available locally.
-  "forwardPorts": [5173, 5432, 6379, 8000, 8080],
-  "portsAttributes": {
-    "5173": {
-      "label": "Vite Server"
-    },
-    "5432": {
-      "label": "PostgreSQL Database"
-    },
-    "6379": {
-      "label": "Redis Server"
-    },
-    "8000": {
-      "label": "InvenTree Server"
-    },
-    "8080": {
-      "label": "mkdocs server"
-    }
-  },
-
-  // Use 'postCreateCommand' to run commands after the container is created.
-  "postCreateCommand": ".devcontainer/postCreateCommand.sh",
-
-  // Comment out to connect as root instead. More info: https://aka.ms/vscode-remote/containers/non-root.
-  "remoteUser": "vscode",
-  "containerUser": "vscode",
-
-  "remoteEnv": {
-
-    // Python config
-    "PIP_USER": "no",
-
-    // used to load the venv into the PATH and activate it
-    // Ref: https://stackoverflow.com/a/56286534
-    "VIRTUAL_ENV": "${containerWorkspaceFolder}/dev/venv",
-    "PATH": "${containerWorkspaceFolder}/dev/venv/bin:${containerEnv:PATH}"
-  }
-}

.devcontainer/docker-compose.yml

@@ -1,46 +0,0 @@
-services:
-  db:
-    image: postgres:15
-    restart: unless-stopped
-    ports:
-      - 5432/tcp
-    volumes:
-      - ../dev-db/:/var/lib/postgresql/data:z
-    environment:
-      POSTGRES_DB: inventree
-      POSTGRES_USER: inventree_user
-      POSTGRES_PASSWORD: inventree_password
-
-  redis:
-    image: redis:7.0
-    restart: always
-    ports:
-      - 6379
-
-  inventree:
-    ports:
-      - 8000:8000
-    build:
-      context: ..
-      dockerfile: .devcontainer/Dockerfile
-    volumes:
-      - ../:/home/inventree:z
-      - /tmp/.X11-unix:/tmp/.X11-unix
-
-    environment:
-      INVENTREE_DB_ENGINE: postgresql
-      INVENTREE_DB_NAME: inventree
-      INVENTREE_DB_HOST: db
-      INVENTREE_DB_USER: inventree_user
-      INVENTREE_DB_PASSWORD: inventree_password
-      INVENTREE_DEBUG: True
-      INVENTREE_CACHE_HOST: redis
-      INVENTREE_CACHE_PORT: 6379
-      INVENTREE_PLUGINS_ENABLED: True
-      INVENTREE_SITE_URL: http://localhost:8000
-      INVENTREE_CORS_ORIGIN_ALLOW_ALL: True
-      INVENTREE_PY_ENV: /home/inventree/dev/venv
-      INVENTREE_DEVCONTAINER: True
-
-    depends_on:
-      - db

.devcontainer/postCreateCommand.sh

@@ -1,39 +0,0 @@
-#!/bin/bash
-set -e
-
-echo "Running postCreateCommand.sh ..."
-
-# Avoiding Dubious Ownership in Dev Containers for setup commands that use git
-git config --global --add safe.directory /home/inventree
-
-# create venv
-python3 -m venv /home/inventree/dev/venv --system-site-packages --upgrade-deps
-. /home/inventree/dev/venv/bin/activate
-
-# remove existing gitconfig created by "Avoiding Dubious Ownership" step
-# so that it gets copied from host to the container to have your global
-# git config in container
-rm -f /home/vscode/.gitconfig
-
-# Fix issue related to CFFI version mismatch
-pip uninstall cffi -y
-sudo apt remove --purge -y python3-cffi
-pip install --no-cache-dir --force-reinstall --ignore-installed cffi
-
-# Upgrade pip
-python3 -m pip install --upgrade pip
-
-# Ensure the correct invoke is available
-pip3 install --ignore-installed --upgrade invoke Pillow
-
-# install base level packages
-pip3 install -Ur contrib/container/requirements.txt --require-hashes
-
-# Run initial InvenTree server setup
-invoke update -s
-
-# Configure dev environment
-invoke dev.setup-dev
-
-# Install required frontend packages
-invoke int.frontend-install

.eslintrc.yml

@@ -0,0 +1,25 @@
+env:
+  commonjs: false
+  browser: true
+  es2021: true
+  jquery: true
+extends:
+  - google
+parserOptions:
+  ecmaVersion: 12
+rules:
+  no-var: off
+  guard-for-in: off
+  no-trailing-spaces: off
+  camelcase: off
+  padded-blocks: off
+  prefer-const: off
+  max-len: off
+  require-jsdoc: off
+  valid-jsdoc: off
+  no-multiple-empty-lines: off
+  comma-dangle: off
+  prefer-spread: off
+  indent:
+    - error
+    - 4

.git-blame-ignore-revs

@@ -1,3 +0,0 @@
-# .git-blame-ignore-revs
-# Code Structure refactor https://github.com/inventree/InvenTree/pull/5582
-0bace3f3afaa213c63b5dcc70103f0d232637a9a

.gitattributes

@@ -8,4 +8,4 @@
 *.yaml text
 *.conf text
 *.sh text eol=lf
-*.js text
+*.js text

.github/CODEOWNERS

@@ -1,13 +0,0 @@
-# General owner is the maintainers team
-*       @SchrodingersGat
-
-# plugins are co-owned
-/src/backend/InvenTree/plugin/      @SchrodingersGat @matmair
-/src/backend/InvenTree/plugins/     @SchrodingersGat @matmair
-
-# Installer functions
-.pkgr.yml               @matmair
-Procfile                @matmair
-runtime.txt             @matmair
-/contrib/installer      @matmair
-/contrib/packager.io    @matmair

.github/FUNDING.yml

@@ -0,0 +1,2 @@
+patreon: inventree
+ko_fi: inventree

.github/ISSUE_TEMPLATE/bug_report.md

@@ -0,0 +1,47 @@
+---
+name: Bug
+about: Create a bug report to help us improve InvenTree!
+title: "[BUG] Enter bug description"
+labels: bug, question
+assignees: ''
+
+---
+
+<!---
+Everything inside these brackets is hidden - please remove them where you fill out information.
+--->
+
+
+**Describe the bug**
+<!---
+A clear and concise description of what the bug is.
+--->
+
+**Steps to Reproduce**
+
+Steps to reproduce the behavior:
+<!---
+1. Go to '...'
+2. Click on '....'
+3. Scroll down to '....'
+4. See error
+--->
+
+**Expected behavior**
+<!---
+A clear and concise description of what you expected to happen.
+--->
+
+<!---
+**Screenshots**
+If applicable, add screenshots to help explain your problem.
+--->
+
+**Deployment Method**
+- [ ] Docker
+- [ ] Bare Metal
+
+**Version Information**
+<!---
+You can get this by going to the "About InvenTree" section in the upper right corner and clicking on to the "copy version information"
+--->

.github/ISSUE_TEMPLATE/bug_report.yaml

@@ -1,83 +0,0 @@
-name: "Bug"
-description: "Create a bug report to help us improve InvenTree!"
-labels: ["bug", "question", "triage:not-checked"]
-body:
-  - type: checkboxes
-    id: no-duplicate-issues
-    attributes:
-      label: "Please verify that this bug has NOT been raised before."
-      description: "Search in the issues sections by clicking [HERE](https://github.com/inventree/inventree/issues?q=) and read the [Frequently Asked Questions](https://docs.inventree.org/en/latest/sref/faq)!"
-      options:
-        - label: "I checked and didn't find a similar issue"
-          required: true
-  - type: textarea
-    id: description
-    validations:
-      required: true
-    attributes:
-      label: "Describe the bug*"
-      description: "A clear and concise description of what the bug is."
-  - type: textarea
-    id: steps-to-reproduce
-    validations:
-      required: true
-    attributes:
-      label: "Steps to Reproduce"
-      description: "Steps to reproduce the behaviour, please make it detailed"
-      placeholder: |
-        1. Go to '...'
-        2. Click on '....'
-        3. Scroll down to '....'
-        4. See the error
-  - type: textarea
-    id: expected-behavior
-    validations:
-      required: true
-    attributes:
-      label: "Expected behaviour"
-      description: "A clear and concise description of what you expected to happen."
-      placeholder: "..."
-  - type: dropdown
-    id: deployment
-    attributes:
-      label: "Deployment Method"
-      options:
-        - Docker
-        - Package
-        - Bare metal
-        - Other - added info in Steps to Reproduce
-  - type: textarea
-    id: version-info
-    validations:
-      required: true
-    attributes:
-      label: "Version Information"
-      description: "The version info block."
-      placeholder: "You can get this by going to the `About InvenTree` section in the upper right corner and clicking on the `copy version information` button"
-  - type: dropdown
-    id: tried-reproduce
-    attributes:
-      label: Try to reproduce on the demo site
-      description: You can sign in at [InvenTree Demo](https://demo.inventree.org) with admin:inventree. Note that this instance runs on the latest dev version, so your bug may be fixed there.
-      options:
-        - I did not try to reproduce
-        - I tried to reproduce
-    validations:
-      required: true
-  - type: dropdown
-    id: result-reproduce
-    attributes:
-      label: Is the bug reproducible on the demo site?
-      options:
-        - Not reproducible
-        - Reproducible
-    validations:
-      required: true
-  - type: textarea
-    id: logs
-    attributes:
-      label: "Relevant log output"
-      description: Please copy and paste any relevant log output. This will be automatically formatted into code, so no need for backticks.
-      render: shell
-    validations:
-      required: false

.github/ISSUE_TEMPLATE/config.yml

@@ -1 +0,0 @@
-blank_issues_enabled: false

.github/ISSUE_TEMPLATE/documentation.yaml

@@ -1,15 +0,0 @@
-name: "Documentation"
-description: "Create an issue to improve the documentation"
-labels: ["documentation", "triage:not-checked"]
-body:
-  - type: markdown
-    attributes:
-      value: |
-        Create a new issue regarding the InvenTree documentation
-  - type: textarea
-    id: repro
-    attributes:
-      label: Body of the issue
-      description: Please provide one distinct thing to fix or a clearly defined enhancement
-    validations:
-      required: true

.github/ISSUE_TEMPLATE/feature_request.md

@@ -0,0 +1,26 @@
+---
+name: Feature request
+about: Suggest an idea for this project
+title: "[FR]"
+labels: enhancement
+assignees: ''
+
+---
+
+**Is your feature request the result of a bug?**
+Please link it here.
+
+**Problem**
+A clear and concise description of what the problem is. e.g. I'm always frustrated when [...]
+
+**Suggested solution**
+A clear and concise description of what you want to happen.
+
+**Describe alternatives you've considered**
+A clear and concise description of any alternative solutions or features you've considered.
+
+**Examples of other systems**
+Show how other software handles your FR if you have examples.
+
+**Do you want to develop this?**
+If so please describe briefly how you would like to implement it (so we can give advice) and if you have experience in the needed technology (you do not need to be a pro - this is just as a information for us).

.github/ISSUE_TEMPLATE/feature_request.yaml

@@ -1,53 +0,0 @@
-name: Feature Request
-description: Suggest an idea for this project
-title: "[FR] title"
-labels: ["enhancement", "triage:not-checked"]
-body:
-  - type: checkboxes
-    id: no-duplicate-issues
-    attributes:
-      label: "Please verify that this feature request has NOT been suggested before."
-      description: "Search in the issues sections by clicking [HERE](https://github.com/inventree/inventree/issues?q=)"
-      options:
-        - label: "I checked and didn't find a similar feature request"
-          required: true
-  - type: textarea
-    id: problem
-    validations:
-      required: true
-    attributes:
-      label: "Problem statement"
-      description: "A clear and concise description of the problem or missing feature."
-      placeholder: "I am always struggling with ..."
-  - type: textarea
-    id: solution
-    validations:
-      required: true
-    attributes:
-      label: "Suggested solution"
-      description: "A clear and concise description of what you want to happen to solve the problem statement."
-      placeholder: "In my use-case, ..."
-  - type: textarea
-    id: alternatives
-    validations:
-      required: true
-    attributes:
-      label: "Describe alternatives you've considered"
-      description: "A clear and concise description of any alternative solutions or features you've considered."
-      placeholder: "This could also be done by doing ..."
-  - type: textarea
-    id: examples
-    validations:
-      required: false
-    attributes:
-      label: "Examples of other systems"
-      description: "Show how other software handles your FR if you have examples."
-      placeholder: "I software xxx this is done in the following way..."
-  - type: checkboxes
-    id: self-develop
-    attributes:
-      label: "Do you want to develop this?"
-      description: "This is not required, and you do not need to be a pro - this is just as information for us."
-      options:
-        - label: "I want to develop this."
-          required: false

.github/ISSUE_TEMPLATE/install.yaml

@@ -1,46 +0,0 @@
-name: "Install problems"
-description: "If you have problems deploying InvenTree"
-labels: ["question", "triage:not-checked", "setup"]
-body:
-  - type: checkboxes
-    id: deployment
-    validations:
-      required: true
-    attributes:
-      label: "Deployment Method"
-      options:
-        - label: "Installer"
-        - label: "Docker Development"
-        - label: "Docker Production"
-        - label: "Bare metal Development"
-        - label: "Bare metal Production"
-        - label: "Digital Ocean image"
-        - label: "Other (please provide a link `Steps to Reproduce`"
-  - type: textarea
-    id: description
-    validations:
-      required: true
-    attributes:
-      label: "Describe the problem*"
-      description: "A clear and concise description of what is failing."
-  - type: textarea
-    id: steps-to-reproduce
-    validations:
-      required: true
-    attributes:
-      label: "Steps to Reproduce"
-      description: "Steps to reproduce the behaviour, please make it detailed"
-      placeholder: |
-        0. Link to all docs you used
-        1. Go to '...'
-        2. Click on '....'
-        3. Scroll down to '....'
-        4. See the error
-  - type: textarea
-    id: logs
-    attributes:
-      label: "Relevant log output"
-      description: Please copy and paste any relevant log output. This will be automatically formatted into code, so no need for backticks.
-      render: bash
-    validations:
-      required: false

.github/actions/migration/action.yaml

@@ -1,17 +0,0 @@
-name: 'Migration test'
-description: 'Run migration test sequence'
-author: 'InvenTree'
-
-runs:
-    using: 'composite'
-    steps:
-      - name: Data Import Export
-        shell: bash
-        run: |
-          invoke migrate
-          invoke dev.import-fixtures
-          invoke export-records -f data.json
-          python3 ./src/backend/InvenTree/manage.py flush --noinput
-          invoke migrate
-          invoke import-records -c -f data.json --strict
-          invoke import-records -c -f data.json --strict

.github/actions/setup/action.yaml

@@ -1,113 +0,0 @@
-name: 'Setup Enviroment'
-description: 'Setup the environment for general InvenTree tests'
-author: 'InvenTree'
-inputs:
-    python:
-        required: false
-        description: 'Install python.'
-        default: 'true'
-    npm:
-        required: false
-        description: 'Install npm.'
-        default: 'false'
-
-    install:
-        required: false
-        description: 'Install the InvenTree requirements?'
-        default: 'false'
-    static:
-        required: false
-        description: 'Should the static files be built?'
-        default: 'false'
-    dev-install:
-        required: false
-        description: 'Install the InvenTree development requirements?'
-        default: 'false'
-    update:
-        required: false
-        description: 'Should a full update cycle be run?'
-        default: 'false'
-
-    apt-dependency:
-        required: false
-        description: 'Extra APT package for install.'
-    pip-dependency:
-        required: false
-        description: 'Extra python package for install.'
-
-runs:
-    using: 'composite'
-    steps:
-      - name: Checkout Code
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-        with:
-          persist-credentials: false
-
-      # Python installs
-      - name: Set up Python ${{ env.python_version }}
-        if: ${{ inputs.python == 'true' && env.python_version != '3.14' }}
-        uses: actions/setup-python@0a5c61591373683505ea898e09a3ea4f39ef2b9c # v5.0.0
-        with:
-          python-version: ${{ env.python_version }}
-          cache: pip
-          cache-dependency-path: |
-            src/backend/requirements.txt
-            src/backend/requirements-dev.txt
-            contrib/container/requirements.txt
-            contrib/dev_reqs/requirements.txt
-      - name: Setup Python 3.14
-        if: ${{ inputs.python == 'true' && env.python_version == '3.14' }}
-        uses: actions/setup-python@0a5c61591373683505ea898e09a3ea4f39ef2b9c # v5.0.0
-        with:
-          python-version: ${{ env.python_version }}
-      - name: Install Base Python Dependencies
-        if: ${{ inputs.python == 'true' }}
-        shell: bash
-        run: |
-          python3 -m pip install -U pip
-          pip3 install -U invoke wheel
-          pip3 install 'uv>=0.9.6'
-      - name: Allow uv to use the system Python by default
-        run: echo "UV_SYSTEM_PYTHON=1" >> $GITHUB_ENV
-        shell: bash
-      - name: Install Specific Python Dependencies
-        if: ${{ inputs.pip-dependency }}
-        shell: bash
-        run: uv pip install ${PIP_DEPS}
-        env:
-          PIP_DEPS: ${{ inputs.pip-dependency }}
-
-      # NPM installs
-      - name: Install node.js ${{ env.node_version }}
-        if: ${{ inputs.npm == 'true' }}
-        uses: actions/setup-node@1a4442cacd436585916779262731d5b162bc6ec7  # pin to v3.8.2
-        with:
-          node-version: ${{ env.node_version }}
-      # OS installs
-      - name: Install OS Dependencies
-        if: ${{ inputs.apt-dependency }}
-        shell: bash
-        run: |
-          sudo apt-get update
-          sudo apt-get install ${APT_DEPS}
-          sudo apt-get install ${APT_DEPS}
-        env:
-          APT_DEPS: ${{ inputs.apt-dependency }}
-
-      # Invoke commands
-      - name: Install dev requirements
-        if: ${{ inputs.dev-install == 'true' || inputs.install == 'true' }}
-        shell: bash
-        run: invoke install --dev
-      - name: Run invoke install
-        if: ${{ inputs.install == 'true' }}
-        shell: bash
-        run: invoke install
-      - name: Run invoke update
-        if: ${{ inputs.update == 'true' }}
-        shell: bash
-        run: invoke update --skip-backup --skip-static --no-frontend
-      - name: Collect static files
-        if: ${{ inputs.static == 'true' }}
-        shell: bash
-        run: invoke static --skip-plugins

.github/dependabot.yml

@@ -1,57 +0,0 @@
-version: 2
-updates:
-  - package-ecosystem: github-actions
-    directory: /
-    schedule:
-      interval: weekly
-    cooldown:
-      default-days: 7
-    groups:
-      dependencies:
-        patterns:
-          - "*" # Include all dependencies
-
-  - package-ecosystem: docker
-    directory: /contrib/container
-    schedule:
-      interval: weekly
-    cooldown:
-      default-days: 7
-
-  - package-ecosystem: docker
-    directory: /.devcontainer
-    schedule:
-      interval: weekly
-    cooldown:
-      default-days: 7
-
-  - package-ecosystem: pip
-    directories:
-    - /docs
-    - /contrib/dev_reqs
-    - /contrib/container
-    - /src/backend
-    schedule:
-      interval: weekly
-      day: friday
-    cooldown:
-      default-days: 7
-    groups:
-      dependencies:
-        patterns:
-          - "*" # Include all dependencies
-    assignees:
-      - "matmair"
-    versioning-strategy: increase
-
-  - package-ecosystem: npm
-    directories:
-    - /src/frontend
-    schedule:
-      interval: weekly
-    cooldown:
-      default-days: 7
-    groups:
-      dependencies:
-        patterns:
-          - "*" # Include all dependencies

.github/release.yml

@@ -1,43 +0,0 @@
-# .github/release.yml
-
-changelog:
-  exclude:
-    labels:
-      - translation
-      - translations
-      - documentation
-  categories:
-    - title: Breaking Changes
-      labels:
-        - Semver-Major
-        - breaking
-    - title: Security Patches
-      labels:
-        - security
-    - title: Database Changes
-      labels:
-        - migration
-    - title: New Features
-      labels:
-        - Semver-Minor
-        - feature
-        - enhancement
-    - title: Experimental Features
-      labels:
-        - experimental
-    - title: Bug Fixes
-      labels:
-        - Semver-Patch
-        - bug
-    - title: Devops / Setup Changes
-      labels:
-        - docker
-        - setup
-        - demo
-        - CI
-    - title: Dependencies
-      labels:
-        - dependency
-    - title: Other Changes
-      labels:
-        - "*"

.github/scripts/check_exported_data.py

@@ -1,101 +0,0 @@
-"""Script to check a data file exported using the 'export-records' command.
-
-This script is intended to be used as part of the CI workflow,
-in conjunction with the "workflows/import_export.yaml" workflow.
-
-In reads the exported data file, to ensure that:
-
-- The file can be read and parsed as JSON
-- The file contains the expected metadata
-- The file contains the expected plugin configuration
-- The file contains the expected plugin database records
-
-"""
-
-PLUGIN_KEY = 'dummy_app_plugin'
-PLUGIN_SLUG = 'dummy-app-plugin'
-
-import argparse
-import json
-import os
-
-if __name__ == '__main__':
-    parser = argparse.ArgumentParser(description='Check exported data file')
-    parser.add_argument('datafile', help='Path to the exported data file (JSON)')
-
-    args = parser.parse_args()
-
-    if not os.path.isfile(args.datafile):
-        print(f'Error: File not found: {args.datafile}')
-        exit(1)
-
-    with open(args.datafile, encoding='utf-8') as f:
-        try:
-            data = json.load(f)
-            print(f'Successfully loaded data from {args.datafile}')
-            print(f'Number of records: {len(data)}')
-        except json.JSONDecodeError as e:
-            print(f'Error: Failed to parse JSON file: {e}')
-            exit(1)
-
-    found_metadata = False
-    found_installed_apps = False
-    found_plugin_config = False
-    plugin_data_records = {}
-
-    # Inspect the data and check that it has the expected structure and content.
-    for entry in data:
-        # Check metadata entry for expected values
-        if entry.get('metadata', False):
-            print('Found metadata entry')
-            found_metadata = True
-
-            expected_apps = ['InvenTree', 'allauth', 'dbbackup', PLUGIN_KEY]
-
-            apps = entry.get('installed_apps', [])
-
-            for app in expected_apps:
-                if app not in apps:
-                    print(f'- Expected app "{app}" not found in installed apps list')
-                    exit(1)
-
-            found_installed_apps = True
-
-        elif entry.get('model', None) == 'plugin.pluginconfig':
-            key = entry['fields']['key']
-
-            if key == PLUGIN_SLUG:
-                print(f'Found plugin configuration for plugin "{PLUGIN_KEY}"')
-                found_plugin_config = True
-
-        elif entry.get('model', None) == f'{PLUGIN_KEY}.examplemodel':
-            key = entry['fields']['key']
-            value = entry['fields']['value']
-
-            plugin_data_records[key] = value
-
-    if not found_metadata:
-        print('Error: No metadata entry found in exported data')
-        exit(1)
-
-    if not found_installed_apps:
-        print(
-            f'Error: Plugin "{PLUGIN_KEY}" not found in installed apps list in metadata'
-        )
-        exit(1)
-
-    if not found_plugin_config:
-        print(f'Error: No plugin configuration found for plugin "{PLUGIN_KEY}"')
-        exit(1)
-
-    # Check the extracted plugin records
-    expected_keys = ['alpha', 'beta', 'gamma', 'delta']
-
-    for key in expected_keys:
-        if key not in plugin_data_records:
-            print(
-                f'Error: Expected plugin record with key "{key}" not found in exported data'
-            )
-            exit(1)
-
-    print('All checks passed successfully!')

.github/scripts/check_migration_files.py

@@ -1,28 +0,0 @@
-"""Check that there are no database migration files which have not been committed."""
-
-import subprocess
-import sys
-
-print('Checking for unstaged migration files...')
-
-cmd = ['git', 'ls-files', '--exclude-standard', '--others']
-
-proc = subprocess.Popen(cmd, stdout=subprocess.PIPE, stderr=subprocess.PIPE)
-
-out, err = proc.communicate()
-
-migrations = []
-
-for line in str(out.decode()).split('\n'):
-    if '/migrations/' in line:
-        migrations.append(line)
-
-if len(migrations) == 0:
-    sys.exit(0)
-
-print(f'There are {len(migrations)} unstaged migration files:')
-
-for m in migrations:
-    print(f' - {m}')
-
-sys.exit(len(migrations))

.github/scripts/check_source_strings.py

@@ -1,100 +0,0 @@
-"""Script to check source strings for translations."""
-
-import argparse
-import os
-
-import rapidfuzz
-
-BACKEND_SOURCE_FILE = [
-    '..',
-    '..',
-    'src',
-    'backend',
-    'InvenTree',
-    'locale',
-    'en',
-    'LC_MESSAGES',
-    'django.po',
-]
-
-FRONTEND_SOURCE_FILE = [
-    '..',
-    '..',
-    'src',
-    'frontend',
-    'src',
-    'locales',
-    'en',
-    'messages.po',
-]
-
-
-def extract_source_strings(file_path):
-    """Extract source strings from the provided file."""
-    here = os.path.abspath(os.path.dirname(__file__))
-    abs_file_path = os.path.abspath(os.path.join(here, *file_path))
-
-    sources = []
-
-    with open(abs_file_path, encoding='utf-8') as f:
-        for line in f:
-            line = line.strip()
-            if line.startswith('msgid '):
-                msgid = line[6:].strip()
-
-                if msgid in sources:
-                    print(f'Duplicate source string: {msgid}')
-                else:
-                    sources.append(msgid)
-
-    return sources
-
-
-def compare_source_strings(sources, threshold):
-    """Compare source strings to find duplicates (or close matches)."""
-    issues = 0
-
-    for i, source in enumerate(sources):
-        for other in sources[i + 1 :]:
-            if other.lower() == source.lower():
-                print(f'- Duplicate: {source} ~ {other}')
-                issues += 1
-                continue
-
-            ratio = rapidfuzz.fuzz.ratio(source, other)
-            if ratio > threshold:
-                print(f'- Close match: {source} ~ {other} ({ratio:.1f}%)')
-                issues += 1
-
-    if issues:
-        print(f' - Found {issues} issues.')
-
-
-if __name__ == '__main__':
-    parser = argparse.ArgumentParser(
-        description='Check source strings for translations.'
-    )
-    parser.add_argument(
-        '--backend', action='store_true', help='Check backend source strings'
-    )
-    parser.add_argument(
-        '--frontend', action='store_true', help='Check frontend source strings'
-    )
-    parser.add_argument(
-        '--threshold',
-        type=int,
-        help='Set the threshold for string comparison',
-        default=99,
-    )
-
-    args = parser.parse_args()
-
-    if args.backend:
-        backend_sources = extract_source_strings(BACKEND_SOURCE_FILE)
-        print('Backend source strings:', len(backend_sources))
-        compare_source_strings(backend_sources, args.threshold)
-
-    if args.frontend:
-        frontend_sources = extract_source_strings(FRONTEND_SOURCE_FILE)
-        print('Frontend source strings:', len(frontend_sources))
-        compare_source_strings(frontend_sources, args.threshold)

.github/scripts/version_check.py

@@ -1,327 +0,0 @@
-"""Ensure that the release tag matches the InvenTree version number.
-
-Behaviour:
-master / main branch:
-    - version number must end with 'dev'
-
-tagged branch:
-    - version number must match tag being built
-    - version number cannot already exist as a release tag
-
-"""
-
-import argparse
-import itertools
-import json
-import os
-import re
-import sys
-from pathlib import Path
-from typing import Optional
-
-import requests
-
-REPO = os.getenv('GITHUB_REPOSITORY', 'inventree/inventree')
-GITHUB_API_URL = os.getenv('GITHUB_API_URL', 'https://api.github.com')
-
-
-def get_src_dir() -> Path:
-    """Return the path to the InvenTree source directory."""
-    here = Path(__file__).parent.absolute()
-    src_dir = here.joinpath('..', '..', 'src', 'backend', 'InvenTree', 'InvenTree')
-
-    if not src_dir.exists():
-        raise FileNotFoundError(
-            f"Could not find InvenTree source directory: '{src_dir}'"
-        )
-
-    return src_dir
-
-
-def get_inventree_version() -> str:
-    """Return the InvenTree version string."""
-    src_dir = get_src_dir()
-    version_file = src_dir.joinpath('version.py')
-
-    if not version_file.exists():
-        raise FileNotFoundError(
-            f"Could not find InvenTree version file: '{version_file}'"
-        )
-
-    with open(version_file, encoding='utf-8') as f:
-        text = f.read()
-
-        # Extract the InvenTree software version
-        results = re.findall(r"""INVENTREE_SW_VERSION = '(.*)'""", text)
-
-        if len(results) != 1:
-            raise ValueError(f'Could not find INVENTREE_SW_VERSION in {version_file}')
-
-        return results[0]
-
-
-def get_api_version() -> str:
-    """Return the InvenTree API version string."""
-    src_dir = get_src_dir()
-    api_version_file = src_dir.joinpath('api_version.py')
-
-    if not api_version_file.exists():
-        raise FileNotFoundError(
-            f"Could not find InvenTree API version file: '{api_version_file}'"
-        )
-
-    with open(api_version_file, encoding='utf-8') as f:
-        text = f.read()
-
-        # Extract the InvenTree software version
-        results = re.findall(r"""INVENTREE_API_VERSION = (.*)""", text)
-
-        if len(results) != 1:
-            raise ValueError(
-                f'Could not find INVENTREE_API_VERSION in {api_version_file}'
-            )
-
-        return results[0].strip().strip('"').strip("'")
-
-
-def version_number_to_tuple(version_string: str) -> tuple[int, int, int, str]:
-    """Validate a version number string, and convert to a tuple of integers.
-
-    e.g. 1.1.0
-    e.g. 1.1.0 dev
-    e.g. 1.2.3-rc2
-    """
-    pattern = r'^(\d+)\.(\d+)\.(\d+)[\s-]?(.*)?$'
-
-    match = re.match(pattern, version_string)
-
-    if not match or len(match.groups()) < 3:
-        raise ValueError(
-            f"Version string '{version_string}' did not match required pattern"
-        )
-
-    result = tuple(int(x) for x in match.groups()[:3])
-
-    # Add optional prerelease tag
-    if len(match.groups()) > 3:
-        result += (match.groups()[3] or '',)
-    else:
-        result += ('',)
-
-    return result
-
-
-def get_existing_release_tags(include_prerelease: bool = True):
-    """Request information on existing releases via the GitHub API."""
-    # Check for github token
-    token = os.getenv('GITHUB_TOKEN', None)
-    headers = None
-
-    if token:
-        headers = {'Authorization': f'Bearer {token}'}
-
-    response = requests.get(f'{GITHUB_API_URL}/repos/{REPO}/releases', headers=headers)
-
-    if response.status_code != 200:
-        raise ValueError(
-            f'Unexpected status code from GitHub API: {response.status_code}'
-        )
-
-    data = json.loads(response.text)
-
-    # Return a list of all tags
-    tags = []
-
-    for release in data:
-        tag = release['tag_name'].strip()
-
-        version_tuple = version_number_to_tuple(tag)
-
-        if len(version_tuple) >= 4 and version_tuple[3]:
-            # Skip prerelease tags
-            if not include_prerelease:
-                print('-- skipping prerelease tag:', tag)
-                continue
-
-        tags.append(tag)
-
-    return tags
-
-
-def check_version_number(version_string, allow_duplicate=False):
-    """Check the provided version number.
-
-    Returns True if the provided version is the 'newest' InvenTree release
-    """
-    print(f"Checking version '{version_string}'")
-
-    version_tuple = version_number_to_tuple(version_string)
-
-    # Look through the existing releases
-    existing = get_existing_release_tags(include_prerelease=False)
-
-    # Assume that this is the highest release, unless told otherwise
-    highest_release = True
-
-    # A non-standard tag cannot be the 'highest' release
-    if len(version_tuple) >= 4 and version_tuple[3]:
-        highest_release = False
-        print(f"-- Version tag '{version_string}' cannot be the highest release")
-
-    for release in existing:
-        if version_string == release and not allow_duplicate:
-            raise ValueError(f"Duplicate release '{version_string}' exists!")
-
-        release_tuple = version_number_to_tuple(release)
-
-        if release_tuple > version_tuple:
-            highest_release = False
-            print(f'Found newer release: {release!s}')
-
-    if highest_release:
-        print(f"-- Version '{version_string}' is the highest release")
-
-    return highest_release
-
-
-def main() -> bool:
-    """Run the version check."""
-    parser = argparse.ArgumentParser(description='InvenTree Version Check')
-    parser.add_argument(
-        '--show-version',
-        action='store_true',
-        help='Print the InvenTree version and exit',
-    )
-    parser.add_argument(
-        '--show-api-version',
-        action='store_true',
-        help='Print the InvenTree API version and exit',
-    )
-    parser.add_argument(
-        '--decrement-api',
-        type=str,
-        default='false',
-        help='Decrement the API version by 1 and print',
-    )
-
-    args = parser.parse_args()
-
-    inventree_version = get_inventree_version()
-    inventree_api_version = int(get_api_version())
-
-    if args.show_version:
-        print(inventree_version)
-        sys.exit(0)
-
-    if args.show_api_version:
-        if str(args.decrement_api).strip().lower() == 'true':
-            inventree_api_version -= 1
-        print(inventree_api_version)
-        sys.exit(0)
-
-    # Ensure that we are running in GH Actions
-    if os.environ.get('GITHUB_ACTIONS', '') != 'true':
-        print('This script is intended to be run within a GitHub Action!')
-        return False
-
-    print('Running InvenTree version check...')
-
-    # GITHUB_REF_TYPE may be either 'branch' or 'tag'
-    GITHUB_REF_TYPE = os.environ['GITHUB_REF_TYPE']
-
-    # GITHUB_REF may be either 'refs/heads/<branch>' or 'refs/heads/<tag>'
-    GITHUB_REF = os.environ['GITHUB_REF']
-    GITHUB_REF_NAME = os.environ['GITHUB_REF_NAME']
-    GITHUB_BASE_REF = os.environ['GITHUB_BASE_REF']
-
-    # Print out version information, makes debugging actions *much* easier!
-    print(f'GITHUB_REF: {GITHUB_REF}')
-    print(f'GITHUB_REF_NAME: {GITHUB_REF_NAME}')
-    print(f'GITHUB_REF_TYPE: {GITHUB_REF_TYPE}')
-    print(f'GITHUB_BASE_REF: {GITHUB_BASE_REF}')
-
-    print(
-        f"InvenTree Version: '{inventree_version}' - {version_number_to_tuple(inventree_version)}"
-    )
-    print(f"InvenTree API Version: '{inventree_api_version}'")
-
-    # Check version number and look for existing versions
-    # If a release is found which matches the current tag, throw an error
-
-    allow_duplicate = False
-
-    # Note: on a 'tag' (release) we *must* allow duplicate versions, as this *is* the version that has just been released
-    if GITHUB_REF_TYPE == 'tag':
-        allow_duplicate = True
-
-    # Note: on a push to 'stable' branch we also allow duplicates
-    if GITHUB_BASE_REF == 'stable':
-        allow_duplicate = True
-
-    highest_release = check_version_number(
-        inventree_version, allow_duplicate=allow_duplicate
-    )
-
-    # Determine which docker tag we are going to use
-    docker_tags: Optional[list[str]] = None
-    pkg_channel = None
-
-    if GITHUB_REF_TYPE == 'tag':
-        # GITHUB_REF should be of the form /refs/heads/<tag>
-        version_tag: str = GITHUB_REF.split('/')[-1]
-        print(f"Checking requirements for tagged release - '{version_tag}':")
-
-        if version_tag != inventree_version:
-            print(
-                f"Version number '{inventree_version}' does not match tag '{version_tag}'"
-            )
-            sys.exit
-
-        docker_tags = [version_tag, 'stable'] if highest_release else [version_tag]
-
-        # Add release-line tag
-        pkg_channel = '.'.join(version_tag.split('.')[:2]) + '.x'
-
-    elif GITHUB_REF_TYPE == 'branch':
-        # Otherwise we know we are targeting the 'master' branch
-        docker_tags = ['latest']
-        highest_release = False
-        pkg_channel = GITHUB_BASE_REF
-
-    else:
-        print('Unsupported branch / version combination:')
-        print(f'InvenTree Version: {inventree_version}')
-        print('GITHUB_REF_TYPE:', GITHUB_REF_TYPE)
-        print('GITHUB_BASE_REF:', GITHUB_BASE_REF)
-        print('GITHUB_REF:', GITHUB_REF)
-        return False
-
-    if docker_tags is None:
-        print('Docker tags could not be determined')
-        return False
-
-    print(f"Version check passed for '{inventree_version}'!")
-    print(f"Docker tags: '{docker_tags}'")
-
-    target_repos = [REPO.lower(), f'ghcr.io/{REPO.lower()}']
-
-    # Ref: https://getridbug.com/python/how-to-set-environment-variables-in-github-actions-using-python/
-    with open(os.getenv('GITHUB_ENV'), 'a', encoding='utf-8') as env_file:
-        # Construct tag string
-        tag_list = [[f'{r}:{t}' for t in docker_tags] for r in target_repos]
-        tags = ','.join(itertools.chain(*tag_list))
-
-        env_file.write(f'docker_tags={tags}\n')
-
-        if GITHUB_REF_TYPE == 'tag' and highest_release:
-            env_file.write('stable_release=true\n')
-
-        env_file.write(f'pkg_channel={pkg_channel}\n')
-    return True
-
-
-if __name__ == '__main__':
-    rslt = main()
-    if rslt is not True:
-        print('Version check failed!')
-        sys.exit(1)

.github/workflows/backport.yaml

@@ -1,39 +0,0 @@
-# Backport tagged issues to a stable branch.
-#
-# To enable backporting for a pullrequest, add the label "backport" to the PR.
-# Additionally, add a label with the prefix "backport-to-" and the target branch
-
-name: Backport
-
-on:
-  pull_request_target:
-    types: ["labeled", "closed"]
-
-jobs:
-  backport:
-    name: Backport PR
-    runs-on: ubuntu-latest
-    permissions:
-      contents: write
-      pull-requests: write
-    if: |
-      github.event.pull_request.merged == true
-      && contains(github.event.pull_request.labels.*.name, 'backport')
-      && (
-        (github.event.action == 'labeled' && github.event.label.name == 'backport')
-        || (github.event.action == 'closed')
-      )
-    steps:
-      - name: Backport Action
-        uses: sorenlouv/backport-github-action@8a6c0381851f43f9f1fddc7303f0e9015eb57b62 # v12.0.4
-        with:
-          github_token: ${{ secrets.GITHUB_TOKEN }}
-          auto_backport_label_prefix: backport-to-
-
-      - name: Info log
-        if: ${{ success() }}
-        run: cat ~/.backport/backport.info.log
-
-      - name: Debug log
-        if: ${{ failure() }}
-        run: cat ~/.backport/backport.debug.log

.github/workflows/check_translations.yaml

@@ -8,44 +8,30 @@ on:
     branches:
       - l10
 
-env:
-  python_version: 3.12
-
-permissions:
-  contents: read
-
 jobs:
+
   check:
     runs-on: ubuntu-latest
 
     env:
       GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-      INVENTREE_DB_NAME: "./test_db.sqlite"
+      INVENTREE_DB_NAME: './test_db.sqlite'
       INVENTREE_DB_ENGINE: django.db.backends.sqlite3
-      INVENTREE_DEBUG: true
+      INVENTREE_DEBUG: info
-      INVENTREE_LOG_LEVEL: INFO
       INVENTREE_MEDIA_ROOT: ./media
       INVENTREE_STATIC_ROOT: ./static
-      INVENTREE_BACKUP_DIR: ./backup
+
-      INVENTREE_SITE_URL: http://localhost:8000
 
     steps:
       - name: Checkout Code
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@v2
-        with:
+      - name: Install Dependencies
-          persist-credentials: false
-
-      - name: Environment Setup
-        uses: ./.github/actions/setup
-        with:
-          install: true
-          apt-dependency: gettext
-      - name: Test Translations
-        run: invoke dev.translate
-      - name: Check for Duplicates
         run: |
-          python ./.github/scripts/check_source_strings.py --frontend --backend
+          sudo apt-get update
+          sudo apt-get install gettext
+          pip3 install invoke
+          invoke install
+      - name: Test Translations 
+        run: invoke translate
       - name: Check Migration Files
-        run: |
+        run: python3 ci/check_migration_files.py
-          invoke migrate --detect
-          python3 .github/scripts/check_migration_files.py

.github/workflows/docker.yaml

@@ -1,236 +0,0 @@
-# Build, test and push InvenTree docker image
-# This workflow runs under any of the following conditions:
-#
-# - Push to the master branch
-# - Publish release
-#
-# The following actions are performed:
-#
-# - Check that the version number matches the current branch or tag
-# - Build the InvenTree docker image
-# - Run suite of unit tests against the build image
-# - Push the compiled, tested image to dockerhub
-
-name: Docker
-
-on:
-  release:
-    types: [published]
-
-  push:
-    branches:
-      - "master"
-  pull_request:
-    branches:
-      - "master"
-
-permissions:
-  contents: read
-
-jobs:
-  paths-filter:
-    permissions:
-      contents: read # for dorny/paths-filter to fetch a list of changed files
-      pull-requests: read # for dorny/paths-filter to read pull requests
-    name: Filter
-    runs-on: ubuntu-latest
-
-    outputs:
-      docker: ${{ steps.filter.outputs.docker }}
-
-    steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
-        with:
-          persist-credentials: false
-      - uses: dorny/paths-filter@fbd0ab8f3e69293af611ebaee6363fc25e6d187d # v4.0.1
-        id: filter
-        with:
-          filters: |
-            docker:
-              - .github/workflows/docker.yaml
-              - contrib/container/**
-              - src/backend/InvenTree/InvenTree/settings.py
-              - src/backend/requirements.txt
-              - tasks.py
-
-  # Build the docker image
-  build:
-    name: Docker Build Test
-    needs: paths-filter
-    if: needs.paths-filter.outputs.docker == 'true' || github.event_name == 'release' || github.event_name == 'push' || contains(github.event.pull_request.labels.*.name, 'full-run')
-    permissions:
-      contents: read
-    env:
-      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-      python_version: 3.12
-    runs-on: ubuntu-latest # in the future we can try to use alternative runners here
-
-    steps:
-      - name: Check out repo
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
-        with:
-          persist-credentials: false
-      - name: Test Docker Image
-        id: test-docker
-        run: |
-          docker build . --target production --tag inventree-test -f contrib/container/Dockerfile
-          docker run --rm inventree-test invoke version
-          docker run --rm inventree-test invoke --version
-          docker run --rm inventree-test invoke --list
-          docker run --rm inventree-test gunicorn --version
-          docker run --rm inventree-test pg_dump --version
-          docker run --rm inventree-test test -f /home/inventree/init.sh
-          docker run --rm inventree-test test -f /home/inventree/tasks.py
-          docker run --rm inventree-test test -f /home/inventree/gunicorn.conf.py
-          docker run --rm inventree-test test -f /home/inventree/src/backend/requirements.txt
-          docker run --rm inventree-test test -f /home/inventree/src/backend/InvenTree/manage.py
-          # Check that backend translations were compiled into the image (a few representative languages)
-          docker run --rm inventree-test test -f /home/inventree/src/backend/InvenTree/locale/de/LC_MESSAGES/django.mo
-          docker run --rm inventree-test test -f /home/inventree/src/backend/InvenTree/locale/fr/LC_MESSAGES/django.mo
-          docker run --rm inventree-test test -f /home/inventree/src/backend/InvenTree/locale/ru/LC_MESSAGES/django.mo
-          docker run --rm inventree-test test -f /home/inventree/src/backend/InvenTree/locale/zh_Hans/LC_MESSAGES/django.mo
-          # Check that frontend translations (lingui) were compiled into the static build output (a few representative languages)
-          docker run --rm inventree-test grep -q '"src/locales/de/messages.ts"' /home/inventree/src/backend/InvenTree/web/static/web/.vite/manifest.json
-          docker run --rm inventree-test grep -q '"src/locales/fr/messages.ts"' /home/inventree/src/backend/InvenTree/web/static/web/.vite/manifest.json
-          docker run --rm inventree-test grep -q '"src/locales/ru/messages.ts"' /home/inventree/src/backend/InvenTree/web/static/web/.vite/manifest.json
-          docker run --rm inventree-test grep -q '"src/locales/zh_Hans/messages.ts"' /home/inventree/src/backend/InvenTree/web/static/web/.vite/manifest.json
-      - name: Build Docker Image
-        # Build the development docker image (using docker-compose.yml)
-        run: docker compose --project-directory . -f contrib/container/dev-docker-compose.yml build --no-cache
-      - name: Update Docker Image
-        run: |
-          docker compose --project-directory . -f contrib/container/dev-docker-compose.yml run inventree-dev-server invoke install
-          docker compose --project-directory . -f contrib/container/dev-docker-compose.yml run inventree-dev-server invoke version
-          docker compose --project-directory . -f contrib/container/dev-docker-compose.yml run inventree-dev-server invoke update
-          docker compose --project-directory . -f contrib/container/dev-docker-compose.yml run inventree-dev-server invoke backup
-          docker compose --project-directory . -f contrib/container/dev-docker-compose.yml run inventree-dev-server invoke restore
-          docker compose --project-directory . -f contrib/container/dev-docker-compose.yml run inventree-dev-server invoke dev.setup-dev
-          docker compose --project-directory . -f contrib/container/dev-docker-compose.yml up -d
-          docker compose --project-directory . -f contrib/container/dev-docker-compose.yml run inventree-dev-server invoke wait
-      - name: Check Data Directory
-        # The following file structure should have been created by the docker image
-        run: |
-          test -d data
-          test -d data/env
-          test -d data/pgdb
-          test -d data/media
-          test -d data/static
-          test -d data/plugins
-          test -f data/config.yaml
-          test -f data/plugins.txt
-          test -f data/secret_key.txt
-          test -f data/oidc.pem
-      - name: Run Unit Tests
-        run: |
-          echo "GITHUB_TOKEN=${{ secrets.GITHUB_TOKEN }}" >> contrib/container/docker.dev.env
-          docker compose --project-directory . -f contrib/container/dev-docker-compose.yml run --rm inventree-dev-server invoke dev.test --disable-pty --translations
-
-  # Run migration test
-  migration_test:
-    name: Migration Test
-    needs: paths-filter
-    if: needs.paths-filter.outputs.docker == 'true' || github.event_name == 'release' || github.event_name == 'push'
-    permissions:
-      contents: read
-    env:
-      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-      python_version: 3.12
-    runs-on: ubuntu-latest # in the future we can try to use alternative runners here
-
-    steps:
-      - name: Check out repo
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
-        with:
-          persist-credentials: false
-      - name: Run Migration Tests
-        run: |
-          docker compose --project-directory . -f contrib/container/dev-docker-compose.yml run --rm inventree-dev-server invoke update
-          docker compose --project-directory . -f contrib/container/dev-docker-compose.yml run --rm inventree-dev-server invoke dev.setup-dev
-          docker compose --project-directory . -f contrib/container/dev-docker-compose.yml run --rm inventree-dev-server invoke dev.test --migrations --translations
-
-  # Build and publish
-  publish:
-    name: Publish Docker Image
-    needs: [build, migration_test]
-    permissions:
-      contents: read
-      packages: write
-      id-token: write
-    env:
-      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-      python_version: 3.12
-    runs-on: ubuntu-latest # in the future we can try to use alternative runners here
-
-    steps:
-      - name: Check out repo
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
-        with:
-          persist-credentials: false
-      - name: Set Up Python ${{ env.python_version }}
-        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
-        with:
-          python-version: ${{ env.python_version }}
-      - name: Version Check
-        run: |
-          pip install --require-hashes -r contrib/dev_reqs/requirements.txt
-          python3 .github/scripts/version_check.py
-          echo "git_commit_hash=$(git rev-parse --short HEAD)" >> $GITHUB_ENV
-          echo "git_commit_date=$(git show -s --format=%ci)" >> $GITHUB_ENV
-      - name: Set up QEMU
-        if: github.event_name != 'pull_request'
-        uses: docker/setup-qemu-action@06116385d9baf250c9f4dcb4858b16962ea869c3 # v4.1.0
-      - name: Set up Docker Buildx
-        if: github.event_name != 'pull_request'
-        uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0
-      - name: Set up cosign
-        if: github.event_name != 'pull_request'
-        uses: sigstore/cosign-installer@6f9f17788090df1f26f669e9d70d6ae9567deba6 # v4.1.2
-      - name: Check if Dockerhub login is required
-        id: docker_login
-        run: |
-          if [ -z "${{ secrets.DOCKER_USERNAME }}" ]; then
-            echo "skip_dockerhub_login=true" >> $GITHUB_OUTPUT
-          else
-            echo "skip_dockerhub_login=false" >> $GITHUB_OUTPUT
-          fi
-      - name: Login to Dockerhub
-        if: github.event_name != 'pull_request' && steps.docker_login.outputs.skip_dockerhub_login != 'true'
-        uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0
-        with:
-          username: ${{ secrets.DOCKER_USERNAME }}
-          password: ${{ secrets.DOCKER_PASSWORD }}
-
-      - name: Log into registry ghcr.io
-        if: github.event_name != 'pull_request'
-        uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0
-        with:
-          registry: ghcr.io
-          username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: Extract Docker metadata
-        if: github.event_name != 'pull_request'
-        id: meta
-        uses: docker/metadata-action@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 # v6.1.0
-        with:
-          images: |
-            inventree/inventree
-            ghcr.io/${{ github.repository }}
-      - uses: depot/setup-action@15c09a5f77a0840ad4bce955686522a257853461 # v1
-      - name: Push Docker Images
-        id: push-docker
-        if: github.event_name != 'pull_request'
-        uses: depot/build-push-action@98e78adca7817480b8185f474a400b451d74e287 # v1
-        with:
-          project: jczzbjkk68
-          context: .
-          file: ./contrib/container/Dockerfile
-          platforms: linux/amd64,linux/arm64
-          push: true
-          sbom: true
-          provenance: false
-          target: production
-          tags: ${{ env.docker_tags }}
-          build-args: |
-            commit_hash=${{ env.git_commit_hash }}
-            commit_date=${{ env.git_commit_date }}

.github/workflows/docker_latest.yaml

@@ -0,0 +1,39 @@
+# Build and push latest docker image on push to master branch
+
+name: Docker Build
+
+on:
+  push:
+    branches:
+      - 'master'
+
+jobs:
+
+  docker:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout Code
+        uses: actions/checkout@v2
+      - name: Check version number
+        run: |
+          python3 ci/check_version_number.py --dev
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v1
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v1
+      - name: Login to Dockerhub
+        uses: docker/login-action@v1
+        with:
+          username: ${{ secrets.DOCKER_USERNAME }}
+          password: ${{ secrets.DOCKER_PASSWORD }}
+      - name: Build and Push
+        uses: docker/build-push-action@v2
+        with:
+          context: ./docker
+          platforms: linux/amd64,linux/arm64,linux/arm/v7
+          push: true
+          target: production
+          tags: inventree/inventree:latest
+      - name: Image Digest
+        run: echo ${{ steps.docker_build.outputs.digest }}

.github/workflows/docker_stable.yaml

@@ -0,0 +1,42 @@
+# Build and push docker image on push to 'stable' branch
+# Docker build will be uploaded to dockerhub with the 'inventree:stable' tag
+
+name: Docker Build
+
+on:
+  push:
+    branches:
+      - 'stable'
+
+jobs:
+
+  docker:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout Code
+        uses: actions/checkout@v2
+      - name: Check version number
+        run: |
+          python3 ci/check_version_number.py --release
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v1
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v1
+      - name: Login to Dockerhub
+        uses: docker/login-action@v1
+        with:
+          username: ${{ secrets.DOCKER_USERNAME }}
+          password: ${{ secrets.DOCKER_PASSWORD }}
+      - name: Build and Push
+        uses: docker/build-push-action@v2
+        with:
+          context: ./docker
+          platforms: linux/amd64,linux/arm64,linux/arm/v7
+          push: true
+          target: production
+          build-args:
+            branch=stable
+          tags: inventree/inventree:stable
+      - name: Image Digest
+        run: echo ${{ steps.docker_build.outputs.digest }}

.github/workflows/docker_tag.yaml

@@ -0,0 +1,38 @@
+# Publish docker images to dockerhub on a tagged release
+# Docker build will be uploaded to dockerhub with the 'invetree:<tag>' tag
+
+name: Docker Publish
+
+on:
+  release:
+    types: [published]
+
+jobs:
+  publish_image:
+    name: Push InvenTree web server image to dockerhub
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check out repo
+        uses: actions/checkout@v2
+      - name: Check Release tag
+        run: |
+          python3 ci/check_version_number.py --release --tag ${{ github.event.release.tag_name }}
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v1
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v1
+      - name: Login to Dockerhub
+        uses: docker/login-action@v1
+        with:
+          username: ${{ secrets.DOCKER_USERNAME }}
+          password: ${{ secrets.DOCKER_PASSWORD }}
+      - name: Build and Push
+        uses: docker/build-push-action@v2
+        with:
+          context: ./docker
+          platforms: linux/amd64,linux/arm64,linux/arm/v7
+          push: true
+          target: production
+          build-args:
+            tag=${{ github.event.release.tag_name }}
+          tags: inventree/inventree:${{ github.event.release.tag_name }}

.github/workflows/docker_test.yaml

@@ -0,0 +1,37 @@
+# Test that the InvenTree docker image compiles correctly
+
+# This CI action runs on pushes to either the master or stable branches
+
+# 1. Build the development docker image (as per the documentation)
+# 2. Install requied python libs into the docker container
+# 3. Launch the container
+# 4. Check that the API endpoint is available
+
+name: Docker Test
+
+on:
+  push:
+    branches:
+      - 'master'
+      - 'stable'
+
+jobs:
+
+  docker:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout Code
+        uses: actions/checkout@v2
+      - name: Build Docker Image
+        run: |
+          cd docker
+          docker-compose -f docker-compose.sqlite.yml build
+          docker-compose -f docker-compose.sqlite.yml run inventree-dev-server invoke update
+          docker-compose -f docker-compose.sqlite.yml up -d
+      - name: Sleepy Time
+        run: sleep 60
+      - name: Test API
+        run: |
+          pip install requests
+          python3 ci/check_api_endpoint.py

.github/workflows/frontend.yaml

@@ -1,312 +0,0 @@
-# Playwright testing for frontend code
-# Runs the following tests:
-# - Playwright tests in Firefox (against compiled frontend code)
-# - Playwright tests in Chromium (coverage enabled, against vite frontend code)
-# - Build frontend code and upload as artifact
-
-name: Frontend
-
-on:
-  push:
-    branches-ignore: ["l10*", "dependabot/**", "backport/**"]
-  pull_request:
-    branches-ignore: ["l10*"]
-
-env:
-  python_version: 3.12
-  node_version: 24
-  plugin_creator_version: 1.20.0
-  # The OS version must be set per job
-  server_start_sleep: 60
-
-  GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-  INVENTREE_DB_ENGINE: postgresql
-  INVENTREE_DB_NAME: inventree
-  INVENTREE_DB_HOST: "127.0.0.1"
-  INVENTREE_DB_PORT: 5432
-  INVENTREE_DB_USER: inventree_user
-  INVENTREE_DB_PASSWORD: inventree_password
-  INVENTREE_DEBUG: true
-  INVENTREE_PLUGINS_ENABLED: false
-  INVENTREE_MEDIA_ROOT: /home/runner/work/InvenTree/test_inventree_media
-  INVENTREE_STATIC_ROOT: /home/runner/work/InvenTree/test_inventree_static
-  INVENTREE_BACKUP_DIR: /home/runner/work/InvenTree/test_inventree_backup
-  INVENTREE_SITE_URL: http://localhost:8000
-
-permissions:
-  contents: read
-
-jobs:
-  paths-filter:
-    name: Filter
-    runs-on: ubuntu-latest
-
-    outputs:
-      frontend: ${{ steps.filter.outputs.frontend }}
-      force: ${{ steps.force.outputs.force }}
-
-    steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
-        with:
-          persist-credentials: false
-      - uses: dorny/paths-filter@fbd0ab8f3e69293af611ebaee6363fc25e6d187d # v4.0.1
-        id: filter
-        with:
-          filters: |
-            frontend:
-              - 'src/frontend/**'
-      - name: Is CI being forced?
-        run: echo "force=true" >> $GITHUB_OUTPUT
-        id: force
-        if: |
-          contains(github.event.pull_request.labels.*.name, 'dependency') ||
-          contains(github.event.pull_request.labels.*.name, 'full-run')
-
-
-  build:
-    name: Build
-    runs-on: ubuntu-24.04
-    timeout-minutes: 60
-
-    steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
-        with:
-          persist-credentials: false
-      - name: Environment Setup
-        uses: ./.github/actions/setup
-        with:
-          npm: true
-      - name: Install dependencies
-        run: cd src/frontend && yarn install
-      - name: Build frontend
-        run: cd src/frontend && yarn run compile && yarn run lib && yarn run build
-      - name: Write version file - SHA
-        run: cd src/backend/InvenTree/web/static/web/.vite && echo "$GITHUB_SHA" > sha.txt
-      - name: Zip frontend
-        run: |
-          cd src/backend/InvenTree/web/static
-          zip -r frontend-build.zip web/ web/.vite
-      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
-        with:
-          name: frontend-build
-          path: src/backend/InvenTree/web/static/web
-          include-hidden-files: true
-
-  firefox:
-    name: Tests [Firefox ${{ matrix.shard }} / 2]
-    runs-on: ubuntu-24.04
-    timeout-minutes: 60
-    needs: ["build", "paths-filter"]
-    if: github.ref == 'refs/heads/master' || needs.paths-filter.outputs.frontend == 'true' || needs.paths-filter.outputs.force == 'true'
-    strategy:
-      fail-fast: false
-      matrix:
-        shard: [1, 2]
-    services:
-      postgres:
-        image: postgres:17
-        env:
-          POSTGRES_DB: inventree
-          POSTGRES_USER: inventree_user
-          POSTGRES_PASSWORD: inventree_password
-        ports:
-          - 5432:5432
-        options: >-
-          --health-cmd "pg_isready -U testuser"
-          --health-interval 10s
-          --health-timeout 5s
-          --health-retries 5
-    permissions:
-      contents: read # Required for actions/checkout
-      id-token: write # Required for GitHub OIDC
-    env:
-      VITE_COVERAGE: false
-
-    steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
-        with:
-          persist-credentials: false
-      - name: Environment Setup
-        uses: ./.github/actions/setup
-        with:
-          npm: true
-          install: true
-          update: true
-          apt-dependency: gettext postgresql-client libpq-dev
-          pip-dependency: psycopg2
-      - name: Set up test data
-        run: |
-          invoke dev.setup-test -iv
-          invoke int.rebuild-thumbnails
-      - name: Install dependencies
-        run: invoke int.frontend-compile --extract
-      - name: Cache Playwright browsers
-        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
-        id: playwright-cache
-        with:
-          path: ~/.cache/ms-playwright
-          key: ${{ runner.os }}-playwright-${{ hashFiles('src/frontend/yarn.lock') }}
-      - name: Install Playwright browsers
-        if: steps.playwright-cache.outputs.cache-hit != 'true'
-        run: cd src/frontend && npx playwright install --with-deps
-      - name: Install Playwright OS dependencies
-        if: steps.playwright-cache.outputs.cache-hit == 'true'
-        run: cd src/frontend && npx playwright install-deps
-      - name: Install Sample Plugin
-        run: |
-          pip install -U inventree-plugin-creator==${{ env.plugin_creator_version }}
-          create-inventree-plugin --default
-          cd MyCustomPlugin && pip install -e . && cd frontend && npm install && npm run translate && npm run build
-      - name: Run Playwright tests
-        id: tests
-        run: |
-          cd src/frontend
-          cp ./tests/fixtures/playwright_custom_logo.png ../backend/InvenTree/InvenTree/static/img/playwright_custom_logo.png
-          cp ./tests/fixtures/playwright_custom_splash.png ../backend/InvenTree/InvenTree/static/img/playwright_custom_splash.png
-          invoke static
-          env INVENTREE_CUSTOM_SPLASH="img/playwright_custom_splash.png" INVENTREE_CUSTOM_LOGO="img/playwright_custom_logo.png" PLAYWRIGHT_BASE_URL=http://localhost:8000 npx playwright test --project=firefox --shard=${{ matrix.shard }}/2
-      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
-        if: ${{ !cancelled() && steps.tests.outcome == 'failure' }}
-        with:
-          name: playwright-report-firefox-${{ matrix.shard }}
-          path: src/frontend/playwright-report/
-          retention-days: 14
-
-  chromium:
-    name: Tests [Chromium ${{ matrix.shard }} / 4]
-    runs-on: ubuntu-24.04
-    timeout-minutes: 60
-    needs: ["build", "paths-filter"]
-    if: github.ref == 'refs/heads/master' || needs.paths-filter.outputs.frontend == 'true' || needs.paths-filter.outputs.force == 'true'
-    strategy:
-      fail-fast: false
-      matrix:
-        shard: [1, 2, 3, 4]
-    services:
-      postgres:
-        image: postgres:17
-        env:
-          POSTGRES_DB: inventree
-          POSTGRES_USER: inventree_user
-          POSTGRES_PASSWORD: inventree_password
-        ports:
-          - 5432:5432
-        options: >-
-          --health-cmd "pg_isready -U testuser"
-          --health-interval 10s
-          --health-timeout 5s
-          --health-retries 5
-    permissions:
-      contents: read # Required for actions/checkout
-      id-token: write # Required for GitHub OIDC
-
-    env:
-      COVERAGE: true
-      VITE_COVERAGE: true
-
-    steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
-        with:
-          persist-credentials: false
-      - name: Environment Setup
-        uses: ./.github/actions/setup
-        with:
-          npm: true
-          install: true
-          update: true
-          apt-dependency: gettext postgresql-client libpq-dev
-          pip-dependency: psycopg2
-      - name: Set up test data
-        run: |
-          invoke dev.setup-test -iv
-          invoke int.rebuild-thumbnails
-      - name: Install dependencies
-        run: invoke int.frontend-compile --extract
-      - name: Cache Playwright browsers
-        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
-        id: playwright-cache
-        with:
-          path: ~/.cache/ms-playwright
-          key: ${{ runner.os }}-playwright-${{ hashFiles('src/frontend/yarn.lock') }}
-      - name: Install Playwright browsers
-        if: steps.playwright-cache.outputs.cache-hit != 'true'
-        run: cd src/frontend && npx playwright install --with-deps
-      - name: Install Playwright OS dependencies
-        if: steps.playwright-cache.outputs.cache-hit == 'true'
-        run: cd src/frontend && npx playwright install-deps
-      - name: Install Sample Plugin
-        run: |
-          pip install -U inventree-plugin-creator==${{ env.plugin_creator_version }}
-          create-inventree-plugin --default
-          cd MyCustomPlugin && pip install -e . && cd frontend && npm install && npm run translate && npm run build
-      - name: Playwright [${{ matrix.shard }} / 4]
-        id: tests
-        run: |
-          cd src/frontend
-          npx nyc playwright test --project=chromium --shard=${{ matrix.shard }}/4
-      - name: Playwright Report [${{ matrix.shard }} / 4]
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
-        if: ${{ !cancelled() && steps.tests.outcome == 'failure' }}
-        with:
-          name: playwright-report-chromium-${{ matrix.shard }}
-          path: src/frontend/playwright-report/
-          if-no-files-found: error
-          retention-days: 7
-      - name: Upload Coverage Artifact [${{ matrix.shard }} / 4]
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
-        id: coverage-upload
-        if: ${{ !cancelled() && steps.tests.outcome != 'failure' }}
-        with:
-          name: coverage-${{ matrix.shard }}
-          path: src/frontend/.nyc_output/
-          if-no-files-found: error
-          include-hidden-files: true
-          retention-days: 1
-
-  # Recombine the coverage reports from the 4 shards, and upload to Codecov
-  coverage:
-    name: Merge coverage reports and upload to Codecov
-    runs-on: ubuntu-latest
-    needs: chromium
-    timeout-minutes: 30
-    if: always()
-
-    steps:
-      - name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
-        with:
-          persist-credentials: false
-
-      - name: Environment Setup
-        uses: ./.github/actions/setup
-        with:
-          npm: true
-          install: false
-          update: false
-
-      - name: Download Coverage Artifacts
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
-        with:
-          pattern: coverage-*
-          path: all-coverage/
-          merge-multiple: true
-
-      - name: Merge Coverage Reports
-        run: |
-          mkdir -p .nyc_output
-          cp all-coverage/*.json .nyc_output/ 2>/dev/null || true
-          npx nyc merge .nyc_output merged-coverage.json
-          npx nyc report \
-            --tempdir .nyc_output \
-            --reporter=lcov \
-            --reporter=text-summary \
-            --report-dir ./coverage \
-
-      - name: Upload coverage reports to Codecov
-        if: ${{ !cancelled() && github.ref == 'refs/heads/master' }}
-        uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0
-        with:
-          token: ${{ secrets.CODECOV_TOKEN }}
-          slug: inventree/InvenTree
-          flags: web
-          files: ./coverage/lcov.info

.github/workflows/import_export.yaml

@@ -1,120 +0,0 @@
-# Ensure that data import / export functionality works as expected.
-# - Create a dataset in a Postgres database (including plugin data)
-# - Export the dataset to an agnostic format (JSON)
-# - Import the dataset into a Sqlite database
-
-name: Import / Export
-
-on:
-  push:
-    branches-ignore: ["l10*", "dependabot/**", "backport/**"]
-  pull_request:
-    branches-ignore: ["l10*"]
-
-permissions:
-  contents: read
-
-env:
-  python_version: 3.12
-
-  GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-
-  INVENTREE_DEBUG: false
-  INVENTREE_LOG_LEVEL: WARNING
-  INVENTREE_MEDIA_ROOT: /home/runner/work/InvenTree/test_inventree_media
-  INVENTREE_STATIC_ROOT: /home/runner/work/InvenTree/test_inventree_static
-  INVENTREE_BACKUP_DIR: /home/runner/work/InvenTree/test_inventree_backup
-  INVENTREE_SITE_URL: http://localhost:8000
-
-  INVENTREE_PLUGINS_ENABLED: true
-  INVENTREE_AUTO_UPDATE: true
-  INVENTREE_PLUGINS_MANDATORY: "dummy-app-plugin"
-  INVENTREE_GLOBAL_SETTINGS: '{"ENABLE_PLUGINS_APP": true}'
-
-  DATA_FILE: /home/runner/work/InvenTree/test_inventree_data.json
-
-  INVENTREE_DB_ENGINE: postgresql
-  INVENTREE_DB_NAME: inventree
-  INVENTREE_DB_USER: inventree
-  INVENTREE_DB_PASSWORD: password
-  INVENTREE_DB_HOST: "127.0.0.1"
-  INVENTREE_DB_PORT: 5432
-
-jobs:
-
-  paths-filter:
-    name: filter
-    runs-on: ubuntu-latest
-    outputs:
-      server: ${{ steps.filter.outputs.server }}
-    steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
-        with:
-          persist-credentials: false
-      - uses: dorny/paths-filter@fbd0ab8f3e69293af611ebaee6363fc25e6d187d # v4.0.1
-        id: filter
-        with:
-          filters: |
-            server:
-              - .github/workflows/import_export.yaml
-              - .github/scripts/check_exported_data.py
-              - 'src/backend/**'
-              - 'tasks.py'
-  test:
-    runs-on: ubuntu-latest
-    needs: paths-filter
-    if: needs.paths-filter.outputs.server == 'true' || contains(github.event.pull_request.labels.*.name, 'full-run')
-
-    services:
-      postgres:
-        image: postgres:17
-        env:
-          POSTGRES_USER: inventree
-          POSTGRES_PASSWORD: password
-        ports:
-          - 5432:5432
-
-    steps:
-      - name: Checkout code
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
-        with:
-          fetch-depth: 0
-          persist-credentials: false
-      - name: Environment Setup
-        uses: ./.github/actions/setup
-        with:
-          apt-dependency: gettext poppler-utils libpq-dev
-          pip-dependency: psycopg
-          update: true
-          static: false
-      - name: Setup Postgres Database
-        run: |
-          invoke migrate
-          invoke dev.setup-test -i
-      - name: Create Plugin Data
-        run: |
-          pip install -U inventree-dummy-app-plugin==0.1.0
-          invoke migrate
-          cd src/backend/InvenTree && python manage.py create_dummy_data
-      - name: Export Postgres Dataset
-        run: |
-          invoke export-records -o -f ${{ env.DATA_FILE }}
-          python .github/scripts/check_exported_data.py ${{ env.DATA_FILE }}
-          invoke dev.delete-data --force
-      - name: Update Environment Variables for Sqlite
-        run: |
-          echo "Updating environment variables for Sqlite"
-          echo "INVENTREE_DB_ENGINE=sqlite" >> $GITHUB_ENV
-          echo "INVENTREE_DB_NAME=/home/runner/work/InvenTree/test_inventree_db.sqlite3" >> $GITHUB_ENV
-      - name: Setup Sqlite Database
-        run: |
-          invoke migrate
-          test -f /home/runner/work/InvenTree/test_inventree_db.sqlite3 || (echo "Sqlite database not created" && exit 1)
-      - name: Import Sqlite Dataset
-        run: |
-          invoke import-records -c -f ${{ env.DATA_FILE }} --strict
-          cd src/backend/InvenTree && python manage.py check_dummy_data
-      - name: Export Sqlite Dataset
-        run: |
-          invoke export-records -o -f ${{ env.DATA_FILE }}
-          python .github/scripts/check_exported_data.py ${{ env.DATA_FILE }}

.github/workflows/qc_checks.yaml

@@ -1,487 +1,215 @@
 # Checks for each PR / push
 
-name: QC
+name: QC checks
 
 on:
   push:
-    branches-ignore: ["l10*", "dependabot/**", "backport/**"]
+    branches-ignore:
+      - l10*
+
   pull_request:
-    branches-ignore: ["l10*"]
+    branches-ignore:
+      - l10*
 
 env:
-  python_version: 3.12
+  python_version: 3.8
-  node_version: 24
+  node_version: 16
-  # The OS version must be set per job
+
   server_start_sleep: 60
 
   GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
   INVENTREE_DB_ENGINE: sqlite3
   INVENTREE_DB_NAME: inventree
-  INVENTREE_MEDIA_ROOT: /home/runner/work/InvenTree/test_inventree_media
+  INVENTREE_MEDIA_ROOT: ./media
-  INVENTREE_STATIC_ROOT: /home/runner/work/InvenTree/test_inventree_static
+  INVENTREE_STATIC_ROOT: ./static
-  INVENTREE_BACKUP_DIR: /home/runner/work/InvenTree/test_inventree_backup
-  INVENTREE_SITE_URL: http://localhost:8000
-  INVENTREE_DEBUG: true
 
-permissions:
-  contents: read
 
 jobs:
-  paths-filter:
+  pep_style:
-    name: Filter
+    name: PEP style (python)
     runs-on: ubuntu-latest
 
-    outputs:
-      server: ${{ steps.filter.outputs.server }}
-      migrations: ${{ steps.filter.outputs.migrations }}
-      frontend: ${{ steps.filter.outputs.frontend }}
-      api: ${{ steps.filter.outputs.api }}
-      force: ${{ steps.force.outputs.force }}
-      cicd: ${{ steps.filter.outputs.cicd }}
-      requirements: ${{ steps.filter.outputs.requirements }}
-      runner-perf: ${{ steps.runner-perf.outputs.runner }}
-      performance: ${{ steps.performance.outputs.force-performance }}
-      submit-performance: ${{ steps.runner-perf.outputs.submit-performance }}
-
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - name: Checkout code
-        with:
+        uses: actions/checkout@v2
-          persist-credentials: false
-      - uses: dorny/paths-filter@fbd0ab8f3e69293af611ebaee6363fc25e6d187d # v4.0.1
-        id: filter
-        with:
-          filters: |
-            server:
-              - 'src/backend/InvenTree/**'
-              - 'src/backend/requirements.txt'
-              - 'src/backend/requirements-dev.txt'
-            migrations:
-              - '**/test_migrations.py'
-              - '**/migrations/**'
-              - '.github/workflows**'
-              - 'src/backend/requirements.txt'
-            api:
-              - 'src/backend/InvenTree/InvenTree/api_version.py'
-            frontend:
-              - 'src/frontend/**'
-            cicd:
-              - '.github/workflows/**'
-            requirements:
-              - 'src/backend/requirements.txt'
-              - 'src/backend/requirements-dev.txt'
-              - 'docs/requirements.txt'
-              - 'contrib/dev_reqs/requirements.txt'
-      - name: Is CI being forced?
-        run: echo "force=true" >> $GITHUB_OUTPUT
-        id: force
-        if: |
-          contains(github.event.pull_request.labels.*.name, 'dependency') ||
-          contains(github.event.pull_request.labels.*.name, 'full-run')
-      - name: Is performance testing being forced?
-        run: echo "force-performance=true" >> $GITHUB_OUTPUT
-        id: performance
-        if: |
-          contains(github.event.pull_request.labels.*.name, 'performance-run')
-      - name: Which runner to use?
-        env:
-          GITHUB_REF: ${{ github.ref }}
-          PERFORMANCE: ${{ steps.performance.outputs.force-performance }}
-        id: runner-perf
-        # decide if we are running in inventree/inventree -> use codspeed-macro runner else ubuntu-24.04
-        run: |
-          is_main_push=false
-          if [[ '${{ github.event_name }}' == 'push' && "$GITHUB_REF" == 'refs/heads/master' ]]; then
-            is_main_push=true
-          fi
-          if [[ '${{ github.repository }}' == 'inventree/InvenTree' && ( "$is_main_push" == 'true' || "$PERFORMANCE" == 'true' ) ]]; then
-            echo "runner=codspeed-macro" >> "$GITHUB_OUTPUT"
-            echo "submit-performance=true" >> "$GITHUB_OUTPUT"
-          else
-            echo "runner=ubuntu-24.04" >> "$GITHUB_OUTPUT"
-            echo "submit-performance=false" >> "$GITHUB_OUTPUT"
-          fi
-
-  code-style:
-    name: Style [prek]
-    runs-on: ubuntu-24.04
-    needs: paths-filter
-    if: needs.paths-filter.outputs.cicd == 'true' || needs.paths-filter.outputs.server == 'true' || needs.paths-filter.outputs.frontend == 'true' || needs.paths-filter.outputs.requirements == 'true' || needs.paths-filter.outputs.force == 'true'
-
-    steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
-        with:
-          persist-credentials: false
       - name: Set up Python ${{ env.python_version }}
-        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
+        uses: actions/setup-python@v2
         with:
           python-version: ${{ env.python_version }}
-          cache: "pip"
+          cache: 'pip'
-      - name: Run pre commit hook Checks
+      - name: Install deps
-        uses: j178/prek-action@e98a699c41eb69ab013a45817a0406469a748f8d # v2.0.5
-      - name: Check Version
         run: |
-          pip install --require-hashes -r contrib/dev_reqs/requirements.txt
+          pip install flake8==3.8.3
-          python3 .github/scripts/version_check.py
+          pip install pep8-naming==0.11.1
-
+      - name: flake8
-  typecheck:
-    name: Style [Typecheck]
-    runs-on: ubuntu-24.04
-    needs: [code-style, paths-filter]
-    if: needs.paths-filter.outputs.server == 'true' || needs.paths-filter.outputs.requirements == 'true' || needs.paths-filter.outputs.force == 'true'
-
-    steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
-        with:
-          persist-credentials: false
-      - name: Environment Setup
-        id: setup
-        uses: ./.github/actions/setup
-        with:
-          apt-dependency: gettext poppler-utils
-          dev-install: true
-          update: true
-      - name: Check types
         run: |
-          ty check --python ${Python_ROOT_DIR}/bin/python3 src/backend
+          flake8 InvenTree
 
-  mkdocs:
+  javascript:
-    name: Style [Documentation]
+    name: javascript template files
-    runs-on: ubuntu-24.04
+    needs: pep_style
-
+    runs-on: ubuntu-latest
-    needs: paths-filter
 
     steps:
       - name: Checkout Code
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@v2
+      - name: Install node.js ${{ env.node_version }}
+        uses: actions/setup-node@v2
         with:
-          persist-credentials: false
+          node-version: ${{ env.node_version }}
-      - name: Set up Python ${{ env.python_version }}
+          cache: 'npm'
-        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
+      - run: npm install
+      - name: Setup Python
+        uses: actions/setup-python@v2
         with:
           python-version: ${{ env.python_version }}
-      - name: Check Config
+          cache: 'pip'
+      - name: Install Dependencies
         run: |
-          pip install --require-hashes -r contrib/dev_reqs/requirements.txt
+          sudo apt-get update
-          pip install --require-hashes -r docs/requirements.txt
+          sudo apt-get install gettext
-          python docs/ci/check_mkdocs_config.py
+          pip3 install invoke
-      - name: Check Links
+          invoke install
-        uses: tcort/github-action-markdown-link-check@e7c7a18363c842693fadde5d41a3bd3573a7a225 # v1
+          invoke static
-        with:
+      - name: Check Templated Files
-          folder-path: docs
+        run: |
-          config-file: docs/mlc_config.json
+          cd ci
-          check-modified-files-only: "yes"
+          python check_js_templates.py
-          use-quiet-mode: "yes"
+      - name: Lint Javascript Files
+        run: |
+          invoke render-js-files
+          npx eslint js_tmp/*.js
 
-  schema:
+  html:
-    name: Tests - API Schema Documentation
+    name: html template files
-    runs-on: ubuntu-24.04
+    needs: pep_style
-    needs: paths-filter
+    runs-on: ubuntu-latest
-    if: needs.paths-filter.outputs.server == 'true' || needs.paths-filter.outputs.force == 'true'
-    env:
-      INVENTREE_DB_ENGINE: django.db.backends.sqlite3
-      INVENTREE_DB_NAME: ../inventree_unit_test_db.sqlite3
-      INVENTREE_ADMIN_USER: testuser
-      INVENTREE_ADMIN_PASSWORD: testpassword
-      INVENTREE_ADMIN_EMAIL: test@test.com
-      INVENTREE_PYTHON_TEST_SERVER: http://localhost:12345
-      INVENTREE_PYTHON_TEST_USERNAME: testuser
-      INVENTREE_PYTHON_TEST_PASSWORD: testpassword
-    outputs:
-      version: ${{ steps.version.outputs.version }}
 
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - name: Checkout Code
+        uses: actions/checkout@v2
+      - name: Install node.js ${{ env.node_version }}
+        uses: actions/setup-node@v2
         with:
-          persist-credentials: false
+          node-version: ${{ env.node_version }}
-      - name: Environment Setup
+          cache: 'npm'
-        uses: ./.github/actions/setup
+      - run: npm install
+      - name: Setup Python
+        uses: actions/setup-python@v2
         with:
-          apt-dependency: gettext poppler-utils
+          python-version: ${{ env.python_version }}
-          dev-install: true
+          cache: 'pip'
-          update: true
+      - name: Install Dependencies
-      - name: Export API Documentation
-        run: invoke dev.schema --ignore-warnings --filename src/backend/InvenTree/schema.yml
-      - name: Upload schema
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
-        with:
-          name: schema.yml
-          path: src/backend/InvenTree/schema.yml
-      - name: Download public schema
-        env:
-          API: ${{ needs.paths-filter.outputs.api }}
         run: |
-          pip install --require-hashes -r contrib/dev_reqs/requirements.txt >/dev/null 2>&1
+          sudo apt-get update
-          version="$(python3 .github/scripts/version_check.py --show-api-version --decrement-api=${API} 2>&1)"
+          sudo apt-get install gettext
-          echo "API Version: $version"
+          pip3 install invoke
-          url="https://raw.githubusercontent.com/inventree/schema/main/export/${version}/api.yaml"
+          invoke install
-          echo "URL: $url"
+          invoke static
-          code=$(curl -s -o api.yaml $url --write-out '%{http_code}' --silent)
+      - name: Check HTML Files
-          if [ "$code" != "200" ]; then
-            exit 1
-          fi
-          echo "Downloaded api.yaml"
-      - name: Running OpenAPI Spec diff action
-        id: breaking_changes
-        uses: oasdiff/oasdiff-action/diff@3e9d440d37f468355457604348009f50e0cddbf3 # v0.1.4
-        with:
-          base: "api.yaml"
-          revision: "src/backend/InvenTree/schema.yml"
-          format: "html"
-      - name: Echoing diff to step
-        continue-on-error: true
-        env:
-          DIFF: ${{ steps.breaking_changes.outputs.diff }}
-        run: echo "${DIFF}" >> $GITHUB_STEP_SUMMARY
-
-      - name: Check for differences in API Schema
-        if: needs.paths-filter.outputs.api == 'false'
         run: |
-          diff --color -u src/backend/InvenTree/schema.yml api.yaml
+          npx markuplint InvenTree/build/templates/build/*.html
-          diff -u src/backend/InvenTree/schema.yml api.yaml && echo "no difference in API schema " || exit 2
+          npx markuplint InvenTree/company/templates/company/*.html
-      - name: Check schema - including warnings
+          npx markuplint InvenTree/order/templates/order/*.html
-        run: invoke dev.schema
+          npx markuplint InvenTree/part/templates/part/*.html
-      - name: Extract version for publishing
+          npx markuplint InvenTree/stock/templates/stock/*.html
-        id: version
+          npx markuplint InvenTree/templates/*.html
-        if: github.ref == 'refs/heads/master' && needs.paths-filter.outputs.api == 'true'
+          npx markuplint InvenTree/templates/InvenTree/*.html
-        run: |
+          npx markuplint InvenTree/templates/InvenTree/settings/*.html
-          pip install --require-hashes -r contrib/dev_reqs/requirements.txt >/dev/null 2>&1
-          version="$(python3 .github/scripts/version_check.py --show-api-version 2>&1)"
-          echo "API Version: $version"
-          echo "version=$version" >> "$GITHUB_OUTPUT"
-      - name: Extract settings / tags
-        run: invoke int.export-definitions --basedir docs
-      - name: Upload settings
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
-        with:
-          name: inventree_settings.json
-          path: docs/generated/inventree_settings.json
-      - name: Upload tags
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
-        with:
-          name: inventree_tags.yml
-          path: docs/generated/inventree_tags.yml
-      - name: Upload filters
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
-        with:
-          name: inventree_filters.yml
-          path: docs/generated/inventree_filters.yml
-
-  schema-push:
-    name: Push new schema
-    runs-on: ubuntu-24.04
-    needs: [paths-filter, schema]
-    if: needs.schema.result == 'success' && github.ref == 'refs/heads/master' && needs.paths-filter.outputs.api == 'true' && github.repository_owner == 'inventree'
-    env:
-      version: ${{ needs.schema.outputs.version }}
-
-    steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
-        name: Checkout Code
-        with:
-          repository: inventree/schema
-          token: ${{ secrets.SCHEMA_PAT }}
-          persist-credentials: true
-      - name: Create artifact directory
-        run: mkdir -p artifact
-      - name: Download schema artifact
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
-        with:
-          path: artifact
-          merge-multiple: true
-      - name: Move files to correct location
-        run: |
-          echo "Version: ${version}"
-          echo "before move"
-          ls -la artifact
-          mkdir export/${version}
-          mv artifact/schema.yml export/${version}/api.yaml
-          mv artifact/inventree_settings.json export/${version}/inventree_settings.json
-          mv artifact/inventree_tags.yml export/${version}/inventree_tags.yml
-          mv artifact/inventree_filters.yml export/${version}/inventree_filters.yml
-          echo "after move"
-          ls -la artifact
-          rm -rf artifact
-      - uses: stefanzweifel/git-auto-commit-action@4a55954c782fc1ea30b9056cd3e7a2b40ca8887d # v7.2.0
-        name: Commit schema changes
-        with:
-          commit_message: "Update API schema for ${{ env.version }} / ${{ github.sha }}"
 
   python:
-    name: Tests - inventree-python
+    name: python bindings
-    runs-on: ${{ needs.paths-filter.outputs.runner-perf }}
+    needs: pep_style
-
+    runs-on: ubuntu-latest
-    needs: ["code-style", "paths-filter"]
-    if: needs.paths-filter.outputs.server == 'true' || needs.paths-filter.outputs.force == 'true' || needs.paths-filter.outputs.performance == 'true'
-    permissions:
-      contents: read
-      id-token: write
 
     env:
-      WRAPPER_NAME: inventree-python
+      wrapper_name: inventree-python
-      INVENTREE_DB_ENGINE: django.db.backends.sqlite3
-      INVENTREE_DB_NAME: ../inventree_unit_test_db.sqlite3
-      INVENTREE_ADMIN_USER: testuser
-      INVENTREE_ADMIN_PASSWORD: testpassword
-      INVENTREE_ADMIN_EMAIL: test@test.com
-      INVENTREE_PYTHON_TEST_SERVER: http://127.0.0.1:12345
-      INVENTREE_PYTHON_TEST_USERNAME: testuser
-      INVENTREE_PYTHON_TEST_PASSWORD: testpassword
-      INVENTREE_SITE_URL: http://127.0.0.1:12345
-      INVENTREE_DEBUG: true
-      INVENTREE_LOG_LEVEL: WARNING
-      node_version: '>=24'
 
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - name: Checkout Code
-        with:
+        uses: actions/checkout@v2
-          persist-credentials: false
+      - name: Install InvenTree
-      - name: Environment Setup
-        uses: ./.github/actions/setup
-        with:
-          apt-dependency: gettext poppler-utils
-          dev-install: true
-          update: true
-          static: true
-          npm: true
-      - name: Download Python Code For `${WRAPPER_NAME}`
-        run: git clone --depth 1 https://github.com/inventree/${WRAPPER_NAME} ./${WRAPPER_NAME}
-      - name: Start InvenTree Server
         run: |
-          invoke dev.delete-data -f
+          sudo apt-get update
-          invoke dev.import-fixtures
+          sudo apt-get install python3-dev python3-pip python3-venv
-          invoke dev.server -a 127.0.0.1:12345 &
+          pip3 install invoke
-          invoke wait
+          invoke install
-      - name: Run Tests For `${WRAPPER_NAME}`
+          invoke migrate
+      - name: Download Python Code
         run: |
-          cd ${WRAPPER_NAME}
+          git clone --depth 1 https://github.com/inventree/${{ env.wrapper_name }} ./${{ env.wrapper_name }}
-          invoke check-server
+      - name: Start Server
-          coverage run -m unittest discover -s test/
-      - name: Prepare environment for performance tests
         run: |
-          pip uninstall pytest-django -y
+          invoke import-records -f ./${{ env.wrapper_name }}/test/test_data.json
-          cd ${WRAPPER_NAME}
+          invoke server -a 127.0.0.1:8000 &
-          pip install .
+          sleep ${{ env.server_start_sleep }}
-        if: needs.paths-filter.outputs.submit-performance == 'true'
+      - name: Run Tests
-      - name: Performance Reporting
+        run: |
-        uses: CodSpeedHQ/action@a4a36bb07c0638b0b4ca52bf1f3dad1b4289e52f # v4.18.1
+          cd ${{ env.wrapper_name }}
-        # check if we are in inventree/inventree - reporting only works in that OIDC context
+          invoke test
-        if: github.repository == 'inventree/InvenTree' && needs.paths-filter.outputs.submit-performance == 'true'
-        with:
-          mode: walltime
-          run: pytest ./src/performance --codspeed
 
   coverage:
-    name: Tests - DB [SQLite] + Coverage ${{ matrix.python_version }}
+    name: Sqlite / coverage
-    runs-on: ubuntu-24.04
+    needs: ['javascript', 'html']
-
+    runs-on: ubuntu-latest
-    needs: ["code-style", "paths-filter"]
-    if: needs.paths-filter.outputs.server == 'true' || needs.paths-filter.outputs.force == 'true'
-    continue-on-error: true # continue if a step fails so that coverage gets pushed
-    strategy:
-      matrix:
-        python_version: [3.12, 3.14]
 
     env:
       INVENTREE_DB_NAME: ./inventree.sqlite
       INVENTREE_DB_ENGINE: sqlite3
       INVENTREE_PLUGINS_ENABLED: true
-      INVENTREE_CONSOLE_LOG: false
-      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-      python_version: ${{ matrix.python_version }}
 
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - name: Checkout Code
+        uses: actions/checkout@v2
+      - name: Setup Python ${{ env.python_version }}
+        uses: actions/setup-python@v2
         with:
-          persist-credentials: false
+          python-version: ${{ env.python_version }}
-      - name: Environment Setup
+          cache: 'pip'
-        uses: ./.github/actions/setup
+      - name: Install Dependencies
-        with:
-          apt-dependency: gettext poppler-utils
-          dev-install: true
-          update: true
-          static: true
-      - name: Data Export Test
-        uses: ./.github/actions/migration
-      - name: Test Translations
-        run: invoke dev.translate
-      - name: Check Migration Files
         run: |
-          invoke migrate --detect
+          sudo apt-get update
-          python3 .github/scripts/check_migration_files.py
+          sudo apt-get install gettext
+          pip3 install invoke
+          invoke install
+          invoke static
       - name: Coverage Tests
-        run: invoke dev.test --check --coverage --translations
+        run: |
-      - name: Upload raw coverage to artifacts
+          invoke coverage
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+      - name: Data Import Export
-        with:
+        run: |
-          name: coverage
+          invoke migrate
-          path: .coverage
+          invoke import-fixtures
-          retention-days: 14
+          invoke export-records -f data.json
-      - name: Upload coverage reports to Codecov
+          rm inventree.sqlite
-        uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0
+          invoke migrate
-        if: always()
+          invoke import-records -f data.json
-        with:
+          invoke import-records -f data.json
-          token: ${{ secrets.CODECOV_TOKEN }}
+      - name: Test Translations 
-          slug: inventree/InvenTree
+        run: invoke translate
-          flags: backend
+      - name: Check Migration Files
-
+        run: python3 ci/check_migration_files.py
-  performance:
+      - name: Upload Coverage Report
-    name: Tests - Performance
+        run: coveralls
-    runs-on: ${{ needs.paths-filter.outputs.runner-perf }}
-
-    needs: ["code-style", "paths-filter"]
-    # check if we are in inventree/inventree - reporting only works in that OIDC context
-    if: (needs.paths-filter.outputs.server == 'true' || needs.paths-filter.outputs.force == 'true') && github.repository == 'inventree/InvenTree' && needs.paths-filter.outputs.submit-performance == 'true'
-    permissions:
-      contents: read
-      id-token: write
-
-    env:
-      INVENTREE_DB_NAME: inventree_unit_test_db.sqlite
-      INVENTREE_DB_ENGINE: sqlite3
-      INVENTREE_PLUGINS_ENABLED: true
-      INVENTREE_CONSOLE_LOG: false
-      INVENTREE_AUTO_UPDATE: true
-
-    steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
-        with:
-          persist-credentials: false
-      - name: Environment Setup
-        uses: ./.github/actions/setup
-        with:
-          apt-dependency: gettext poppler-utils
-          dev-install: true
-          update: true
-          npm: true
-        env:
-          node_version: '>=24'
-      - name: Performance Reporting
-        uses: CodSpeedHQ/action@a4a36bb07c0638b0b4ca52bf1f3dad1b4289e52f # v4.18.1
-        with:
-          mode: walltime
-          run: inv dev.test --pytest
 
   postgres:
-    name: Tests - DB [PostgreSQL]
+    name: Postgres
-    runs-on: ubuntu-24.04
+    needs: ['javascript', 'html']
-    needs: ["code-style", "paths-filter"]
+    runs-on: ubuntu-latest
-    if: needs.paths-filter.outputs.server == 'true' || needs.paths-filter.outputs.force == 'true'
 
     env:
       INVENTREE_DB_ENGINE: django.db.backends.postgresql
       INVENTREE_DB_USER: inventree
       INVENTREE_DB_PASSWORD: password
-      INVENTREE_DB_HOST: "127.0.0.1"
+      INVENTREE_DB_HOST: '127.0.0.1'
       INVENTREE_DB_PORT: 5432
-      INVENTREE_DEBUG: true
+      INVENTREE_DEBUG: info
-      INVENTREE_LOG_LEVEL: INFO
-      INVENTREE_CONSOLE_LOG: false
       INVENTREE_CACHE_HOST: localhost
       INVENTREE_PLUGINS_ENABLED: true
 
     services:
       postgres:
-        image: postgres:17
+        image: postgres
         env:
           POSTGRES_USER: inventree
           POSTGRES_PASSWORD: password
@@ -489,49 +217,55 @@ jobs:
           - 5432:5432
 
       redis:
-        image: redis:8
+        image: redis
         ports:
           - 6379:6379
 
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - name: Checkout Code
+        uses: actions/checkout@v2
+      - name: Setup Python ${{ env.python_version }}
+        uses: actions/setup-python@v2
         with:
-          persist-credentials: false
+          python-version: ${{ env.python_version }}
-      - name: Environment Setup
+          cache: 'pip'
-        uses: ./.github/actions/setup
+      - name: Install Dependencies
-        with:
+        run: |
-          apt-dependency: gettext poppler-utils libpq-dev
+          sudo apt-get update
-          pip-dependency: psycopg django-redis>=5.0.0
+          sudo apt-get install libpq-dev
-          dev-install: true
+          pip3 install invoke
-          update: true
+          pip3 install psycopg2
-          static: true
+          pip3 install django-redis>=5.0.0
+          invoke install
       - name: Run Tests
-        run: invoke dev.test --check --translations
+        run: invoke test
-      - name: Data Export Test
+      - name: Data Import Export
-        uses: ./.github/actions/migration
+        run: |
+          invoke migrate
+          python3 ./InvenTree/manage.py flush --noinput
+          invoke import-fixtures
+          invoke export-records -f data.json
+          python3 ./InvenTree/manage.py flush --noinput
+          invoke import-records -f data.json
+          invoke import-records -f data.json
 
   mysql:
-    name: Tests - DB [MySQL]
+    name: MySql
-    runs-on: ubuntu-24.04
+    needs: ['javascript', 'html']
-
+    runs-on: ubuntu-latest
-    needs: ["code-style", "paths-filter"]
-    if: needs.paths-filter.outputs.server == 'true' || needs.paths-filter.outputs.force == 'true'
-
     env:
       # Database backend configuration
       INVENTREE_DB_ENGINE: django.db.backends.mysql
       INVENTREE_DB_USER: root
       INVENTREE_DB_PASSWORD: password
-      INVENTREE_DB_HOST: "127.0.0.1"
+      INVENTREE_DB_HOST: '127.0.0.1'
       INVENTREE_DB_PORT: 3306
-      INVENTREE_DEBUG: true
+      INVENTREE_DEBUG: info
-      INVENTREE_LOG_LEVEL: WARNING
-      INVENTREE_CONSOLE_LOG: false
       INVENTREE_PLUGINS_ENABLED: true
 
     services:
       mysql:
-        image: mysql:9
+        image: mysql:latest
         env:
           MYSQL_ALLOW_EMPTY_PASSWORD: yes
           MYSQL_DATABASE: ${{ env.INVENTREE_DB_NAME }}
@@ -543,141 +277,28 @@ jobs:
           - 3306:3306
 
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - name: Checkout Code
+        uses: actions/checkout@v2
+      - name: Setup Python ${{ env.python_version }}
+        uses: actions/setup-python@v2
         with:
-          persist-credentials: false
+          python-version: ${{ env.python_version }}
-      - name: Environment Setup
+          cache: 'pip'
-        uses: ./.github/actions/setup
+      - name: Install Dependencies
-        with:
+        run: |
-          apt-dependency: gettext poppler-utils libmysqlclient-dev
+          sudo apt-get update
-          pip-dependency: mysqlclient
+          sudo apt-get install libmysqlclient-dev
-          dev-install: true
+          pip3 install invoke
-          update: true
+          pip3 install mysqlclient
-          static: true
+          invoke install
       - name: Run Tests
-        run: invoke dev.test --check --translations
+        run: invoke test
-      - name: Data Export Test
+      - name: Data Import Export
-        uses: ./.github/actions/migration
-
-  migration-tests:
-    name: Tests - Migrations [PostgreSQL]
-    runs-on: ubuntu-latest
-    needs: paths-filter
-    if: ${{ (needs.paths-filter.outputs.force == 'true') || (github.ref == 'refs/heads/master' && needs.paths-filter.outputs.migrations == 'true') }}
-
-    env:
-      INVENTREE_DB_ENGINE: django.db.backends.postgresql
-      INVENTREE_DB_NAME: inventree
-      INVENTREE_DB_USER: inventree
-      INVENTREE_DB_PASSWORD: password
-      INVENTREE_DB_HOST: "127.0.0.1"
-      INVENTREE_DB_PORT: 5432
-      INVENTREE_DEBUG: False
-      INVENTREE_LOG_LEVEL: WARNING
-      INVENTREE_PLUGINS_ENABLED: false
-
-    services:
-      postgres:
-        image: postgres:17
-        env:
-          POSTGRES_USER: inventree
-          POSTGRES_PASSWORD: password
-        ports:
-          - 5432:5432
-
-    steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
-        with:
-          persist-credentials: false
-      - name: Environment Setup
-        uses: ./.github/actions/setup
-        with:
-          apt-dependency: gettext poppler-utils libpq-dev
-          pip-dependency: psycopg
-          dev-install: true
-          update: true
-      - name: Run Tests
-        run: invoke dev.test --check --migrations --report --coverage --translations
-      - name: Upload coverage reports to Codecov
-        uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0
-        if: always()
-        with:
-          token: ${{ secrets.CODECOV_TOKEN }}
-          slug: inventree/InvenTree
-          flags: migrations
-
-  migrations-checks:
-    name: Tests - Full Migration [SQLite]
-    runs-on: ubuntu-latest
-    needs: paths-filter
-    if: ${{ (needs.paths-filter.outputs.force == 'true') || (github.ref == 'refs/heads/master' && needs.paths-filter.outputs.migrations == 'true') }}
-
-    env:
-      INVENTREE_DB_ENGINE: sqlite3
-      INVENTREE_DB_NAME: /home/runner/work/InvenTree/db.sqlite3
-      INVENTREE_DEBUG: true
-      INVENTREE_LOG_LEVEL: WARNING
-      INVENTREE_PLUGINS_ENABLED: false
-
-    steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
-        with:
-          persist-credentials: false
-        name: Checkout Code
-      - name: Environment Setup
-        uses: ./.github/actions/setup
-        with:
-          install: true
-      - name: Fetch Database
-        run: git clone --depth 1 https://github.com/inventree/test-db ./test-db
-
-      - name: 0.10.0 Database
         run: |
-          rm /home/runner/work/InvenTree/db.sqlite3
-          cp test-db/stable_0.10.0.sqlite3 /home/runner/work/InvenTree/db.sqlite3
-          chmod +rw /home/runner/work/InvenTree/db.sqlite3
           invoke migrate
-
+          python3 ./InvenTree/manage.py flush --noinput
-      - name: 0.11.0 Database
+          invoke import-fixtures
-        run: |
+          invoke export-records -f data.json
-          rm /home/runner/work/InvenTree/db.sqlite3
+          python3 ./InvenTree/manage.py flush --noinput
-          cp test-db/stable_0.11.0.sqlite3 /home/runner/work/InvenTree/db.sqlite3
+          invoke import-records -f data.json
-          chmod +rw /home/runner/work/InvenTree/db.sqlite3
+          invoke import-records -f data.json
-          invoke migrate
-
-      - name: 0.13.5 Database
-        run: |
-          rm /home/runner/work/InvenTree/db.sqlite3
-          cp test-db/stable_0.13.5.sqlite3 /home/runner/work/InvenTree/db.sqlite3
-          chmod +rw /home/runner/work/InvenTree/db.sqlite3
-          invoke migrate
-
-      - name: 0.16.0 Database
-        run: |
-          rm /home/runner/work/InvenTree/db.sqlite3
-          cp test-db/stable_0.16.0.sqlite3 /home/runner/work/InvenTree/db.sqlite3
-          chmod +rw /home/runner/work/InvenTree/db.sqlite3
-          invoke migrate
-
-      - name: 0.17.0 Database
-        run: |
-          rm /home/runner/work/InvenTree/db.sqlite3
-          cp test-db/stable_0.17.0.sqlite3 /home/runner/work/InvenTree/db.sqlite3
-          chmod +rw /home/runner/work/InvenTree/db.sqlite3
-          invoke migrate
-
-  zizmor:
-    name: Security [Zizmor]
-    runs-on: ubuntu-24.04
-    needs: ["code-style", "paths-filter"]
-    if: needs.paths-filter.outputs.cicd == 'true' || needs.paths-filter.outputs.force == 'true'
-
-    permissions:
-      security-events: write
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
-        with:
-          persist-credentials: false
-      - name: Run zizmor 🌈
-        uses: zizmorcore/zizmor-action@192e21d79ab29983730a13d1382995c2307fbcaa # v0.5.7

.github/workflows/release.yaml

@@ -1,276 +0,0 @@
-# Runs on releases
-
-name: Publish release
-on:
-  release:
-    types: [published]
-permissions:
-  contents: read
-env:
-  python_version: 3.12
-
-jobs:
-  stable:
-    runs-on: ubuntu-24.04
-    name: Write release to stable branch
-    permissions:
-      contents: write
-      pull-requests: write
-    env:
-      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-    steps:
-      - name: Checkout Code
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
-        with:
-          persist-credentials: false
-      - name: Version Check
-        run: |
-          pip install --require-hashes -r contrib/dev_reqs/requirements.txt
-          python3 .github/scripts/version_check.py
-      - name: Push to Stable Branch
-        uses: ad-m/github-push-action@881a6320fdb16eb5318c5054f31c218aec2b324c # v1.3.0
-        if: env.stable_release == 'true'
-        with:
-          github_token: ${{ secrets.GITHUB_TOKEN }}
-          branch: stable
-          force: true
-
-  build:
-    runs-on: ubuntu-24.04
-    name: Build and attest frontend
-    permissions:
-      id-token: write
-      contents: write
-      attestations: write
-      artifact-metadata: write
-
-    steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
-        with:
-          persist-credentials: false
-      - name: Environment Setup
-        uses: ./.github/actions/setup
-        with:
-          npm: true
-      - name: Install dependencies
-        run: cd src/frontend && yarn install
-      - name: Build frontend
-        run: cd src/frontend && npm run compile && npm run build
-      - name: Create SBOM for frontend
-        uses: anchore/sbom-action@e22c389904149dbc22b58101806040fa8d37a610 # v0
-        with:
-          artifact-name: frontend-build.spdx
-          path: src/frontend
-      - name: Write version file - SHA
-        run: cd src/backend/InvenTree/web/static/web/.vite && echo "$GITHUB_SHA" > sha.txt
-      - name: Write version file - TAG
-        run: cd src/backend/InvenTree/web/static/web/.vite && echo "${REF_NAME}" > tag.txt
-        env:
-          REF_NAME: ${{ github.ref_name }}
-      - name: Write version file - SOURCE
-        run: cd src/backend/InvenTree/web/static/web/.vite && echo "GitHub Actions build on $(date --utc +%Y-%m-%dT%H:%M:%SZ)" > source.txt
-      - name: Zip frontend
-        run: |
-          cd src/backend/InvenTree/web/static/web
-          zip -r ../frontend-build.zip * .vite
-      - name: Attest Build Provenance
-        id: attest
-        uses: actions/attest@a1948c3f048ba23858d222213b7c278aabede763 # v4.1.1
-        with:
-          subject-path: "${{ github.workspace }}/src/backend/InvenTree/web/static/frontend-build.zip"
-
-      - name: Upload frontend
-        run: gh release upload ${REF} src/backend/InvenTree/web/static/frontend-build.zip#frontend-build.zip
-        env:
-          REF: ${{ github.ref_name }}
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-      - name: Upload frontend to artifacts
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
-        with:
-          name: frontend-build
-          path: src/backend/InvenTree/web/static/frontend-build.zip
-      - name: Rename Attestation Bundle
-        run: |
-          mv ${BUNDLE_PATH} src/backend/InvenTree/web/static/frontend-build.intoto.jsonl
-        env:
-          BUNDLE_PATH: ${{ steps.attest.outputs.bundle-path}}
-      - name: Upload Attestation
-        run: gh release upload ${REF} src/backend/InvenTree/web/static/frontend-build.intoto.jsonl#frontend-build.intoto.jsonl
-        env:
-          REF: ${{ github.ref_name }}
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-
-  docs:
-    runs-on: ubuntu-24.04
-    name: Build and publish documentation
-    permissions:
-      contents: write
-    env:
-      INVENTREE_DB_ENGINE: sqlite3
-      INVENTREE_DB_NAME: inventree
-      INVENTREE_MEDIA_ROOT: /home/runner/work/InvenTree/test_inventree_media
-      INVENTREE_STATIC_ROOT: /home/runner/work/InvenTree/test_inventree_static
-      INVENTREE_BACKUP_DIR: /home/runner/work/InvenTree/test_inventree_backup
-      INVENTREE_SITE_URL: http://localhost:8000
-      INVENTREE_DEBUG: true
-
-    steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
-        with:
-          persist-credentials: false
-      - name: Environment Setup
-        uses: ./.github/actions/setup
-        with:
-          install: true
-          npm: true
-      - name: Install dependencies
-        run: |
-          pip install --require-hashes -r contrib/dev_reqs/requirements.txt
-          pip install --require-hashes -r docs/requirements.txt
-      - name: Build documentation
-        run: |
-          invoke build-docs --mkdocs
-      - name: Zip build docs
-        run: |
-          cd docs/site
-          zip -r docs-html.zip *
-      - name: Publish documentation
-        run: gh release upload ${REF} docs/site/docs-html.zip#docs-html.zip
-        env:
-          REF: ${{ github.ref_name }}
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-
-  build-pkgr:
-    if: github.repository == 'inventree/InvenTree'
-    name: ${{ matrix.target }}
-    runs-on: ubuntu-latest
-    needs: [build]
-    permissions:
-      contents: write
-    strategy:
-      fail-fast: false
-      matrix:
-        target:
-          - ubuntu:24.04
-          - ubuntu:26.04
-          - debian:13
-
-    steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
-        with:
-          fetch-depth: 0
-          persist-credentials: false
-      - name: Get frontend artifact
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
-        with:
-          name: frontend-build
-      - name: Setup
-        id: setup
-        env:
-          NODE_ID: ${{ github.event.release.node_id }}
-          BRANCH: ${{ github.event.release.target_commitish }}
-          TARGET: ${{github.event.release.target_commitish}}
-          REPO: ${{ github.repository }}
-          VERSION_REF: ${{ github.ref_name }}
-          GH_TOKEN: ${{ github.token }}
-
-        run: |
-          # Get info
-          gh api -H "Accept: application/vnd.github+json" -H "X-GitHub-Api-Version: 2022-11-28" /repos/$REPO/commits/$TARGET > commit.json
-
-          # Extract info
-          echo "INFO extract | Extracting info from github"
-          DATE=$(jq -r '.commit.committer.date' commit.json)
-          SIGNATURE=$(jq -r '.commit.verification.signature' commit.json)
-          FULL_SHA=$(jq -r '.sha' commit.json)
-          SHA=$(echo "$FULL_SHA" | cut -c1-7)
-
-          echo "INFO write | Write VERSION information"
-          echo "$VERSION" > VERSION
-          echo "INVENTREE_COMMIT_HASH='$SHA'" >> VERSION
-          echo "INVENTREE_COMMIT_SHA='$FULL_SHA'" >> VERSION
-          echo "INVENTREE_COMMIT_DATE='$DATE'" >> VERSION
-          echo "INVENTREE_PKG_INSTALLER='PKG'" >> VERSION
-          echo "INVENTREE_PKG_BRANCH='$BRANCH'" >> VERSION
-          echo "INVENTREE_PKG_TARGET='$TARGET'" >> VERSION
-          echo "NODE_ID='$NODE_ID'" >> VERSION
-          echo "SIGNATURE='$SIGNATURE'" >> VERSION
-
-          echo "INFO write | Written VERSION information"
-          echo "### VERSION ###"
-          cat VERSION
-          echo "### VERSION ###"
-
-          # Move frontend build into place
-          mkdir -p src/backend/InvenTree/web/static
-          unzip -qq frontend-build.zip -d src/backend/InvenTree/web/static/web
-
-          echo "INFO write release_version"
-          echo "VERSION=$VERSION_REF" >> $GITHUB_OUTPUT
-          echo "REF=$GITHUB_REF" >> $GITHUB_OUTPUT
-
-          # Disable before.sh for now - will need to be removed once we switch to go.packager.io fully
-          echo "#!/bin/bash" > contrib/packager.io/before.sh
-
-          echo "calculate release channel"
-          pip install --require-hashes -r contrib/dev_reqs/requirements.txt
-          python3 .github/scripts/version_check.py
-      - name: Package - current release channel
-        uses: pkgr/action/package@c5666febcd31750da6428042193fc5b2fb765435 # main
-        id: package
-        with:
-          target: ${{ matrix.target }}
-          version: ${{ steps.setup.outputs.version }}
-          debug: true
-          cache_prefix: ${{ github.ref_name }}
-          env: |
-            INVENTREE_DB_ENGINE=sqlite3
-            INVENTREE_DB_NAME=database.sqlite3
-            INVENTREE_PLUGINS_ENABLED=true
-            INVENTREE_MEDIA_ROOT=/opt/inventree/media
-            INVENTREE_STATIC_ROOT=/opt/inventree/static
-            INVENTREE_BACKUP_DIR=/opt/inventree/backup
-            INVENTREE_PLUGIN_FILE=/opt/inventree/plugins.txt
-            INVENTREE_CONFIG_FILE=/opt/inventree/config.yaml
-            APP_REPO=inventree/InvenTree
-      - name: Publish to go.packager.io - current release channel
-        uses: pkgr/action/publish@c5666febcd31750da6428042193fc5b2fb765435 # main
-        with:
-          target: ${{ matrix.target }}
-          token: ${{ secrets.PACKAGER_RELEASE_TOKEN }}
-          repository: inventree/InvenTree
-          channel: ${{ env.pkg_channel }}
-          file: ${{ steps.package.outputs.package_path }}
-      - name: Publish to artifact
-        run: gh release upload ${REF} ${PACKAGE_PATH}#${PACKAGE_NAME}
-        env:
-          REF: ${{ github.ref_name }}
-          PACKAGE_PATH: ${{ steps.package.outputs.package_path }}
-          PACKAGE_NAME: ${{ matrix.target }}-${{ steps.setup.outputs.version }}.tar.gz
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-      - name: Package - stable release channel
-        uses: pkgr/action/package@c5666febcd31750da6428042193fc5b2fb765435 # main
-        id: package-stable
-        with:
-          target: ${{ matrix.target }}
-          version: ${{ steps.setup.outputs.version }}
-          debug: true
-          cache_prefix: ${{ github.ref_name }}
-          env: |
-            INVENTREE_DB_ENGINE=sqlite3
-            INVENTREE_DB_NAME=database.sqlite3
-            INVENTREE_PLUGINS_ENABLED=true
-            INVENTREE_MEDIA_ROOT=/opt/inventree/media
-            INVENTREE_STATIC_ROOT=/opt/inventree/static
-            INVENTREE_BACKUP_DIR=/opt/inventree/backup
-            INVENTREE_PLUGIN_FILE=/opt/inventree/plugins.txt
-            INVENTREE_CONFIG_FILE=/opt/inventree/config.yaml
-            APP_REPO=inventree/InvenTree
-      - name: Publish to go.packager.io - stable release channel
-        uses: pkgr/action/publish@c5666febcd31750da6428042193fc5b2fb765435 # main
-        with:
-          target: ${{ matrix.target }}
-          token: ${{ secrets.PACKAGER_RELEASE_TOKEN }}
-          repository: inventree/InvenTree
-          channel: stable
-          file: ${{ steps.package-stable.outputs.package_path }}

.github/workflows/scorecard.yaml

@@ -1,72 +0,0 @@
-# This workflow uses actions that are not certified by GitHub. They are provided
-# by a third-party and are governed by separate terms of service, privacy
-# policy, and support documentation.
-
-name: Scorecard supply-chain security
-on:
-  # For Branch-Protection check. Only the default branch is supported. See
-  # https://github.com/ossf/scorecard/blob/main/docs/checks.md#branch-protection
-  branch_protection_rule:
-  # To guarantee Maintained check is occasionally updated. See
-  # https://github.com/ossf/scorecard/blob/main/docs/checks.md#maintained
-  schedule:
-    - cron: "32 0 * * 0"
-  push:
-    branches: ["master"]
-
-# Declare default permissions as read only.
-permissions: read-all
-
-jobs:
-  analysis:
-    name: Scorecard analysis
-    runs-on: ubuntu-latest
-    permissions:
-      # Needed to upload the results to code-scanning dashboard.
-      security-events: write
-      # Needed to publish results and get a badge (see publish_results below).
-      id-token: write
-      # Uncomment the permissions below if installing in a private repository.
-      # contents: read
-      # actions: read
-
-    steps:
-      - name: "Checkout code"
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
-        with:
-          persist-credentials: false
-
-      - name: "Run analysis"
-        uses: ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a # v2.4.3
-        with:
-          results_file: results.sarif
-          results_format: sarif
-          # (Optional) "write" PAT token. Uncomment the `repo_token` line below if:
-          # - you want to enable the Branch-Protection check on a *public* repository, or
-          # - you are installing Scorecard on a *private* repository
-          # To create the PAT, follow the steps in https://github.com/ossf/scorecard-action#authentication-with-pat.
-          # repo_token: ${{ secrets.SCORECARD_TOKEN }}
-
-          # Public repositories:
-          #   - Publish results to OpenSSF REST API for easy access by consumers
-          #   - Allows the repository to include the Scorecard badge.
-          #   - See https://github.com/ossf/scorecard-action#publishing-results.
-          # For private repositories:
-          #   - `publish_results` will always be set to `false`, regardless
-          #     of the value entered here.
-          publish_results: true
-
-      # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
-      # format to the repository Actions tab.
-      - name: "Upload artifact"
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
-        with:
-          name: SARIF file
-          path: results.sarif
-          retention-days: 5
-
-      # Upload the results to GitHub's code scanning dashboard.
-      - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2
-        with:
-          sarif_file: results.sarif

.github/workflows/stale.yaml

@@ -1,27 +0,0 @@
-# Marks all issues that do not receive activity stale starting 2022
-name: Mark stale issues and pull requests
-
-on:
-  schedule:
-    - cron: "24 11 * * *"
-
-permissions:
-  contents: read
-
-jobs:
-  stale:
-    runs-on: ubuntu-latest
-    permissions:
-      issues: write
-      pull-requests: write
-
-    steps:
-      - uses: actions/stale@eb5cf3af3ac0a1aa4c9c45633dd1ae542a27a899 # v10.3.0
-        with:
-          repo-token: ${{ secrets.GITHUB_TOKEN }}
-          stale-issue-message: "This issue seems stale. Please react to show this is still important."
-          stale-pr-message: "This PR seems stale. Please react to show this is still important."
-          stale-issue-label: "inactive"
-          stale-pr-label: "inactive"
-          start-date: "2022-01-01"
-          exempt-all-milestones: true

.github/workflows/stale.yml

@@ -0,0 +1,25 @@
+# Marks all issues that do not receive activity stale starting 2022
+name: Mark stale issues and pull requests
+
+on:
+  schedule:
+  - cron: '24 11 * * *'
+
+jobs:
+  stale:
+
+    runs-on: ubuntu-latest
+    permissions:
+      issues: write
+      pull-requests: write
+
+    steps:
+    - uses: actions/stale@v3
+      with:
+        repo-token: ${{ secrets.GITHUB_TOKEN }}
+        stale-issue-message: 'This issue seems stale. Please react to show this is still important.'
+        stale-pr-message: 'This PR seems stale. Please react to show this is still important.'
+        stale-issue-label: 'no-activity'
+        stale-pr-label: 'no-activity'
+        start-date: '2022-01-01'
+        exempt-all-milestones: true

.github/workflows/translations.yaml

@@ -1,73 +0,0 @@
-name: Update Translation Files
-
-on:
-  push:
-    branches:
-      - master
-
-env:
-  python_version: 3.12
-  node_version: 24
-
-permissions:
-  contents: read
-
-jobs:
-  synchronize-with-crowdin:
-    runs-on: ubuntu-latest
-    permissions:
-      contents: write
-      pull-requests: write
-
-    env:
-      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-      INVENTREE_DB_NAME: "./test_db.sqlite"
-      INVENTREE_DB_ENGINE: django.db.backends.sqlite3
-      INVENTREE_DEBUG: true
-      INVENTREE_LOG_LEVEL: INFO
-      INVENTREE_MEDIA_ROOT: ./media
-      INVENTREE_STATIC_ROOT: ./static
-      INVENTREE_BACKUP_DIR: ./backup
-      INVENTREE_SITE_URL: http://localhost:8000
-
-    steps:
-      - name: Checkout Code
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
-        with:
-          persist-credentials: false
-      - name: Environment Setup
-        uses: ./.github/actions/setup
-        with:
-          install: true
-          apt-dependency: gettext
-      - name: Make Translations
-        run: invoke dev.translate
-      - name: Remove compiled static files
-        run: rm -rf src/backend/InvenTree/static
-      - name: Remove all local changes that are not *.po files
-        run: |
-          git config --local user.email "41898282+github-actions[bot]@users.noreply.github.com"
-          git config --local user.name "github-actions[bot]"
-          git add src/backend/InvenTree/locale/en/LC_MESSAGES/django.po src/frontend/src/locales/en/messages.po
-          echo "Adding commit (or ignoring if no changes)"
-          git commit -m "add translations" || true
-          echo "Removing all other changes"
-          git reset --hard
-          echo "Resetting to HEAD~"
-          git reset HEAD~ || true
-      - name: crowdin action
-        uses: crowdin/github-action@52aa776766211d83d975df51f3b9c53c2f8ba35f # v2
-        with:
-          upload_sources: true
-          upload_translations: false
-          download_translations: true
-          localization_branch_name: l10_crowdin
-          create_pull_request: true
-          pull_request_title: 'New Crowdin updates'
-          pull_request_body: 'New Crowdin translations by [Crowdin GH Action](https://github.com/crowdin/github-action)'
-          pull_request_base_branch_name: 'master'
-          pull_request_labels: 'translations'
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          CROWDIN_PROJECT_ID: ${{ secrets.CROWDIN_PROJECT_ID }}
-          CROWDIN_PERSONAL_TOKEN: ${{ secrets.CROWDIN_PERSONAL_TOKEN }}

.github/workflows/translations.yml

@@ -0,0 +1,60 @@
+name: Update Translation Files
+
+on:
+  push:
+    branches:
+      - master
+
+jobs:
+  build:
+
+    runs-on: ubuntu-latest
+
+    env:
+      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      INVENTREE_DB_NAME: './test_db.sqlite'
+      INVENTREE_DB_ENGINE: django.db.backends.sqlite3
+      INVENTREE_DEBUG: info
+      INVENTREE_MEDIA_ROOT: ./media
+      INVENTREE_STATIC_ROOT: ./static
+
+    steps:
+    - uses: actions/checkout@v2
+    - name: Get Current Translations
+      run: |
+        git fetch
+        git checkout origin/l10 -- `git ls-tree origin/l10 -r --name-only | grep ".po"`
+        git reset
+    - name: Set up Python 3.7
+      uses: actions/setup-python@v1
+      with:
+        python-version: 3.7
+    - name: Install Dependencies
+      run: |
+          sudo apt-get update
+          sudo apt-get install -y gettext
+          pip3 install invoke
+          invoke install
+    - name: Make Translations
+      run: |
+        invoke translate
+    - name: stash changes
+      run: |
+        git stash
+    - name: Checkout Translation Branch
+      uses: actions/checkout@v2.3.4
+      with:
+        ref: l10
+    - name: Commit files
+      run: |
+        git config --local user.email "41898282+github-actions[bot]@users.noreply.github.com"
+        git config --local user.name "github-actions[bot]"
+        git checkout stash -- .
+        git reset
+        git add "*.po"
+        git commit -m "updated translation base"
+    - name: Push changes
+      uses: ad-m/github-push-action@master
+      with:
+        github_token: ${{ secrets.GITHUB_TOKEN }}
+        branch: l10

.github/workflows/update.yml.disabled

@@ -1,24 +0,0 @@
-name: Update dependency files regularly
-
-on:
-  workflow_dispatch: null
-  schedule:
-    - cron: "0 0 * * *"
-
-jobs:
-  build:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-        with:
-          persist-credentials: false
-      - name: Setup
-        run: pip install --require-hashes -r requirements-dev.txt
-      - name: Update requirements.txt
-        run: pip-compile --output-file=requirements.txt requirements.in -U
-      - name: Update requirements-dev.txt
-        run: pip-compile --generate-hashes --output-file=requirements-dev.txt requirements-dev.in -U
-      - uses: stefanzweifel/git-auto-commit-action@fd157da78fa13d9383e5580d1fd1184d89554b51 # v4.15.1
-        with:
-          commit_message: "[Bot] Updated dependency"
-          branch: dep-update

.github/workflows/version.yml

@@ -0,0 +1,21 @@
+# Checks version number
+name: version number
+
+on:
+  pull_request:
+    branches-ignore:
+      - l10*
+
+
+jobs:
+
+  check_version:
+    name: version number
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout Code
+        uses: actions/checkout@v2
+      - name: Check version number
+        run: |
+          python3 ci/check_version_number.py --branch ${{ github.base_ref }}

.github/workflows/welcome.yml

@@ -0,0 +1,17 @@
+# welcome new contributers
+name: Welcome
+on:
+  pull_request:
+    types: [opened]
+  issues:
+    types: [opened]
+
+jobs:
+  run:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/first-interaction@v1
+      with:
+        repo-token: ${{ secrets.GITHUB_TOKEN }}
+        issue-message: 'Welcome to InvenTree! Please check the [contributing docs](https://inventree.readthedocs.io/en/latest/contribute/) on how to help.\nIf you experience setup / install issues please read all [install docs]( https://inventree.readthedocs.io/en/latest/start/intro/).'
+        pr-message: 'This is your first PR, welcome!\nPlease check [Contributing](https://github.com/inventree/InvenTree/blob/master/CONTRIBUTING.md) to make sure your submission fits our general code-style and workflow.\nMake sure to document why this PR is needed and to link connected issues so we can review it faster.'

.gitignore

@@ -7,9 +7,7 @@ __pycache__/
 .Python
 env/
 inventree-env/
-.venv/
 ./build/
-.cache/
 develop-eggs/
 dist/
 bin/
@@ -19,6 +17,7 @@ share/
 downloads/
 eggs/
 .eggs/
+lib/
 lib64/
 parts/
 sdist/
@@ -26,55 +25,44 @@ var/
 *.egg-info/
 .installed.cfg
 *.egg
-*.DS_Store
+
 
 # Django stuff:
 *.log
 local_settings.py
-*.sqlite
 *.sqlite3
 *.sqlite3-journal
 *.backup
 *.old
 
-# Files generated by profiling tools
-*.prof
-*.log
-*.sql
-
 # Files used for testing
-inventree-demo-dataset/
+dummy_image.*
-inventree-data/
+_tmp.csv
+
+# Sphinx files
+docs/_build
 
 # Local static and media file storage (only when running in development mode)
 inventree_media
 inventree_static
 static_i18n
 
-# Local config files
+# Local config file
 config.yaml
 plugins.txt
-secret_key.txt
-oidc.pem
 
 # Default data file
 data.json
 *.json.tmp
 *.tmp.json
 
+# Key file
+secret_key.txt
+
 # IDE / development files
 .idea/
 *.code-workspace
-.bash_history
+.vscode/
-.DS_Store
-
-# https://github.com/github/gitignore/blob/main/Global/VisualStudioCode.gitignore
-.vscode/*
-#!.vscode/settings.json
-!.vscode/tasks.json
-!.vscode/launch.json
-#!.vscode/extensions.json
-#!.vscode/*.code-snippets
 
 # Coverage reports
 .coverage
@@ -85,17 +73,9 @@ js_tmp/
 
 # Development files
 dev/
-dev-db/
-data/
-env/
 
 # Locale stats file
-src/backend/InvenTree/InvenTree/locale_stats.json
+locale_stats.json
-src/backend/InvenTree/InvenTree/licenses.txt
-
-# Logs
-src/backend/InvenTree/logs.json
-src/backend/InvenTree/logs.log
 
 # node.js
 node_modules/
@@ -104,18 +84,4 @@ node_modules/
 maintenance_mode_state.txt
 
 # plugin dev directory
-src/backend/InvenTree/plugins/
+plugins/
-
-# Compiled translation files
-*.mo
-messages.ts
-
-# Generated API schema file
-api.yaml
-
-# web frontend (static files)
-src/backend/InvenTree/web/static
-InvenTree/web/static
-
-# performance test results
-.codspeed/

.gitpod.yml

@@ -0,0 +1,47 @@
+tasks:
+ - name: Setup django
+   before: |
+      export INVENTREE_DB_ENGINE='sqlite3'
+      export INVENTREE_DB_NAME='/workspace/InvenTree/dev/database.sqlite3'
+      export INVENTREE_MEDIA_ROOT='/workspace/InvenTree/inventree-data/media'
+      export INVENTREE_STATIC_ROOT='/workspace/InvenTree/dev/static'
+      export PIP_USER='no'
+
+      python3 -m venv venv
+      source venv/bin/activate
+      pip install invoke
+      inv install
+      mkdir dev
+      inv update
+      gp sync-done setup_server
+
+ - name: Start server
+   init: gp sync-await setup_server
+   command: |
+      gp sync-await setup_server
+      export INVENTREE_DB_ENGINE='sqlite3'
+      export INVENTREE_DB_NAME='/workspace/InvenTree/dev/database.sqlite3'
+      export INVENTREE_MEDIA_ROOT='/workspace/InvenTree/inventree-data/media'
+      export INVENTREE_STATIC_ROOT='/workspace/InvenTree/dev/static'
+
+      source venv/bin/activate
+      rm /workspace/InvenTree/inventree-data -r
+      git clone https://github.com/inventree/demo-dataset /workspace/InvenTree/inventree-data
+      invoke delete-data -f
+      invoke import-records -f /workspace/InvenTree/inventree-data/inventree_data.json
+      
+      inv server
+
+# List the ports to expose. Learn more https://www.gitpod.io/docs/config-ports/
+ports:
+  - port: 8000
+    onOpen: open-preview
+
+github:
+  prebuilds:
+    master: true
+    pullRequests: false
+    pullRequestsFromForks: true
+    addBadge: true
+    addLabel: gitpod-ready
+    addCheck: false

.pkgr.yml

@@ -1,41 +0,0 @@
-name: inventree
-description: Open Source Inventory Management System
-homepage: https://inventree.org
-notifications: true
-buildpack: https://github.com/matmair/null-buildpack#master
-env:
-  - INVENTREE_DB_ENGINE=sqlite3
-  - INVENTREE_DB_NAME=database.sqlite3
-  - INVENTREE_PLUGINS_ENABLED=true
-  - INVENTREE_MEDIA_ROOT=/opt/inventree/media
-  - INVENTREE_STATIC_ROOT=/opt/inventree/static
-  - INVENTREE_BACKUP_DIR=/opt/inventree/backup
-  - INVENTREE_PLUGIN_FILE=/opt/inventree/plugins.txt
-  - INVENTREE_CONFIG_FILE=/opt/inventree/config.yaml
-  - APP_REPO=inventree/InvenTree
-before_install: contrib/packager.io/preinstall.sh
-after_install: contrib/packager.io/postinstall.sh
-before_remove: contrib/packager.io/preinstall.sh
-before:
-  - contrib/packager.io/before.sh
-dependencies:
-  - curl
-  - poppler-utils
-  - "python3.12 | python3.13 | python3.14"
-  - "python3.12-venv | python3.13-venv | python3.14-venv"
-  - "python3.12-dev | python3.13-dev | python3.14-dev"
-  - python3-pip
-  - python3-cffi
-  - python3-brotli
-  - python3-wheel
-  - libpango-1.0-0
-  - libharfbuzz0b
-  - libpangoft2-1.0-0
-  - gettext
-  - nginx
-  - jq
-  - "libffi7 | libffi8"
-targets:
-  ubuntu-24.04: true
-  ubuntu-26.04: true
-  debian-13: true

.pre-commit-config.yaml

@@ -1,100 +0,0 @@
-# See https://pre-commit.com for more information
-# See https://pre-commit.com/hooks.html for more hooks
-exclude: |
-    (?x)^(
-        src/backend/InvenTree/InvenTree/static/.*|
-        src/backend/InvenTree/locale/.*|
-        src/frontend/src/locales/.* |
-        .*/migrations/.* |
-        src/frontend/yarn.lock
-    )$
-repos:
--   repo: https://github.com/pre-commit/pre-commit-hooks
-    rev: v6.0.0
-    hooks:
-    -   id: trailing-whitespace
-    -   id: end-of-file-fixer
-    -   id: check-yaml
-        exclude: mkdocs.yml
-    -   id: mixed-line-ending
--   repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: v0.15.12
-    hooks:
-    - id: ruff-format
-      args: [--preview]
-    - id: ruff-check
-      args: [
-        --fix,
-        # --unsafe-fixes,
-        --preview
-      ]
--   repo: https://github.com/astral-sh/uv-pre-commit
-    rev: 0.11.12
-    hooks:
-      - id: pip-compile
-        name: pip-compile requirements-dev.in
-        args: [src/backend/requirements-dev.in, -o, src/backend/requirements-dev.txt, -c, src/backend/requirements.txt]
-        files: src/backend/requirements-dev\.(in|txt)$
-      - id: pip-compile
-        name: pip-compile requirements-dev.in 3.14
-        args: [src/backend/requirements-dev.in, -o, src/backend/requirements-dev-3.14.txt, -c, src/backend/requirements-3.14.txt, --python-version=3.14, -c, src/backend/requirements.txt, -c, src/backend/requirements-dev.txt]
-        files: src/backend/requirements-dev\.(in|txt)$
-      - id: pip-compile
-        name: pip-compile requirements.txt
-        args: [src/backend/requirements.in, -o, src/backend/requirements.txt]
-        files: src/backend/requirements\.(in|txt)$
-      - id: pip-compile
-        name: pip-compile requirements.txt 3.14
-        args: [src/backend/requirements.in, -o, src/backend/requirements-3.14.txt, --python-version=3.14, -c, src/backend/requirements.txt]
-        files: src/backend/requirements\.(in|txt)$
-      - id: pip-compile
-        name: pip-compile contrib/dev_reqs/requirements.txt
-        args: [contrib/dev_reqs/requirements.in, -o, contrib/dev_reqs/requirements.txt, -c, src/backend/requirements.txt]
-        files: contrib/dev_reqs/requirements\.(in|txt)$
-      - id: pip-compile
-        name: pip-compile docs/requirements.txt
-        args: [docs/requirements.in, -o, docs/requirements.txt, -c, src/backend/requirements.txt]
-        files: docs/requirements\.(in|txt)$
-      - id: pip-compile
-        name: pip-compile contrib/container/requirements.txt
-        args: [contrib/container/requirements.in, -o, contrib/container/requirements.txt, --python-version=3.14, -c, src/backend/requirements.txt]
-        files: contrib/container/requirements\.(in|txt)$
--   repo: https://github.com/Riverside-Healthcare/djLint
-    rev: v1.36.4
-    hooks:
-      - id: djlint-django
-- repo: https://github.com/codespell-project/codespell
-  rev: v2.4.2
-  hooks:
-  - id: codespell
-    additional_dependencies:
-      - tomli
-    exclude: >
-      (?x)^(
-          docs/docs/stylesheets/.*|
-          docs/docs/javascripts/.*|
-          docs/docs/webfonts/.* |
-          src/frontend/src/locales/.* |
-          pyproject.toml |
-          src/frontend/vite.config.ts |
-      )$
--   repo: https://github.com/biomejs/pre-commit
-    rev: v2.4.14
-    hooks:
-    -   id: biome-check
-        additional_dependencies: ["@biomejs/biome@1.9.4"]
-        files: ^src/frontend/.*\.(js|ts|tsx)$
--   repo: https://github.com/gitleaks/gitleaks
-    rev: v8.30.1
-    hooks:
-    -   id: gitleaks
-        language_version: 1.25.4
-#-   repo: https://github.com/jumanjihouse/pre-commit-hooks
-#    rev: 3.0.0
-#    hooks:
-#    -   id: shellcheck
--   repo: https://github.com/isidentical/teyit
-    rev: 0.4.3
-    hooks:
-    -   id: teyit
-        language_version: python3.12

.vscode/extensions.json

@@ -1,5 +0,0 @@
-{
-    "recommendations": [
-        "biomejs.biome"
-    ]
-}

.vscode/launch.json

@@ -1,77 +0,0 @@
-{
-  // Use IntelliSense to learn about possible attributes.
-  // Hover to view descriptions of existing attributes.
-  // For more information, visit: https://go.microsoft.com/fwlink/?linkid=830387
-  "version": "0.2.0",
-  "configurations": [
-    {
-      "name": "InvenTree Server",
-      "type": "debugpy",
-      "request": "launch",
-      "program": "${workspaceFolder}/src/backend/InvenTree/manage.py",
-      "args": [
-        "runserver",
-        "0.0.0.0:8000", // expose server in network (useful for testing with mobile app)
-        // "--noreload" // disable auto-reload
-      ],
-      "django": true,
-      "justMyCode": true
-    },
-    {
-      "name": "InvenTree Server - Tests",
-      "type": "debugpy",
-      "request": "launch",
-      "program": "${workspaceFolder}/src/backend/InvenTree/manage.py",
-      "args": [
-        "test",
-        // "part.test_api.PartCategoryAPITest", // run only a specific test
-      ],
-      "django": true,
-      "justMyCode": true
-    },
-    {
-      "name": "InvenTree Server - 3rd party",
-      "type": "debugpy",
-      "request": "launch",
-      "program": "${workspaceFolder}/src/backend/InvenTree/manage.py",
-      "args": [
-        "runserver",
-        "0.0.0.0:8000",
-        // "--sync",// Synchronize worker tasks to foreground thread
-        // "--noreload", // disable auto-reload
-      ],
-      "django": true,
-      "justMyCode": false
-    },
-    {
-      "name": "InvenTree invoke schema",
-      "type": "debugpy",
-      "request": "launch",
-      "program": "${workspaceFolder}/.venv/lib/python3.12/site-packages/invoke/__main__.py",
-      "cwd": "${workspaceFolder}",
-      "args": [
-        "dev.schema","--ignore-warnings"
-      ],
-      "justMyCode": false
-    },
-    {
-      "name": "schema generation",
-      "type": "debugpy",
-      "request": "launch",
-      "program": "${workspaceFolder}/src/backend/InvenTree/manage.py",
-      "args": [
-        "schema",
-        "--file","src/frontend/schema.yml"
-      ],
-      "django": true,
-      "justMyCode": false
-    },
-    {
-      "name": "InvenTree Frontend - Vite",
-      "type": "chrome",
-      "request": "launch",
-      "url": "http://localhost:5173",
-      "webRoot": "${workspaceFolder}/src/frontend"
-    }
-  ]
-}

.vscode/settings.json

@@ -1,8 +0,0 @@
-{
-  "[typescript]": {
-    "editor.defaultFormatter": "biomejs.biome"
-  },
-  "editor.codeActionsOnSave": {
-    "quickfix.biome": "explicit"
-  }
-}

.vscode/tasks.json

@@ -1,70 +0,0 @@
-{
-  // See https://go.microsoft.com/fwlink/?LinkId=733558
-  // for the documentation about the tasks.json format
-
-  // the problemMatchers should prevent vscode from asking how it should check the output
-
-  "version": "2.0.0",
-  "tasks": [
-    {
-      "label": "worker",
-      "type": "shell",
-      "command": "invoke worker",
-      "problemMatcher": [],
-    },
-    {
-      "label": "clean-settings",
-      "type": "shell",
-      "command": "invoke int.clean-settings",
-      "problemMatcher": [],
-    },
-    {
-      "label": "delete-data",
-      "type": "shell",
-      "command": "invoke dev.delete-data",
-      "problemMatcher": [],
-    },
-    {
-      "label": "migrate",
-      "type": "shell",
-      "command": "invoke migrate",
-      "problemMatcher": [],
-    },
-    {
-      "label": "server",
-      "type": "shell",
-      "command": "invoke dev.server",
-      "problemMatcher": [],
-    },
-    {
-      "label": "setup-dev",
-      "type": "shell",
-      "command": "invoke dev.setup-dev",
-      "problemMatcher": [],
-    },
-    {
-      "label": "setup-test",
-      "type": "shell",
-      "command": "invoke dev.setup-test -i --path dev/inventree-demo-dataset",
-      "problemMatcher": [],
-    },
-    {
-      "label": "superuser",
-      "type": "shell",
-      "command": "invoke superuser",
-      "problemMatcher": [],
-    },
-    {
-      "label": "test",
-      "type": "shell",
-      "command": "invoke dev.test",
-      "problemMatcher": [],
-    },
-    {
-      "label": "update",
-      "type": "shell",
-      "command": "invoke update",
-      "problemMatcher": [],
-    },
-  ]
-}

AGENTS.md

@@ -1,5 +0,0 @@
-See [CONTRIBUTING.md](CONTRIBUTING.md) for codebase guidance.
-Security reports must follow the security policy in [SECURITY.md](docs/docs/SECURITY.md) and provide how they interact with the [threat model](docs/docs/concepts/threat_model.md).
-
-Do not open a pull request without manual review by a human. Do not file AI generated issues under any circumstances.
-Using AI generated content in issue/PR discussions might lead to code of conduct violations and/or bans.

CHANGELOG.md

@@ -1,170 +0,0 @@
-# Changelog
-
-All major notable changes to this project will be documented in this file (starting with 1.0.0).
-
-The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
-and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
-
-## Unreleased - xxxx.xx.xx
-
-### Breaking Changes
-
-- [#12360](https://github.com/inventree/InvenTree/pull/12360) removes the MPTT mixin from the StockItem model, and removes the self-referential tree structure from the database. This change was made to simplify the StockItem model and improve performance, as the MPTT tree structure was causing significant overhead in certain operations. Any external client applications which made use of the MPTT functionality will need to be updated to account for this change.
-- [#12320](https://github.com/inventree/InvenTree/pull/12320) changes the default behavior of the `invoke migrate` command. Now, it no longer generates new migrations by default. Instead, it will only apply existing migrations to the database. If you want to detect and generate new migrations, you must now explicitly use the `--detect` flag. This change was made to prevent accidental generation of migrations when running the command, which could lead to unexpected changes in the database schema. Additionally, `invoke update` will no longer result in new migrations being generated, and will only apply existing migrations to the database. This change was made to ensure that the update process is predictable and does not introduce unexpected changes to the database schema.
-- [#12223](https://github.com/inventree/InvenTree/pull/12223) removes support for python 3.11 and stops providing packages for Debian 11 and Ubuntu 20.04.
-
-### Added
-
-
-- [#12388](https://github.com/inventree/InvenTree/pull/12388) adds uniqueness requirements options for the Parameter and ParameterTemplate models. This allows users to specify whether a parameter value should be unique for a given model type, or globally unique across all models.
-- [#12310](https://github.com/inventree/InvenTree/pull/12310) adds the ability to disassemble (or break apart) assembled stock items into their component parts, based on the Bill of Materials (BOM) associated with the stock item. This allows users to easily break down assembled items into their constituent parts, which can be useful for inventory management and tracking purposes.
-- [#12117](https://github.com/inventree/InvenTree/pull/12117) adds a "preview" drawer to the InvenTree table component, allowing users to preview the details of a selected row without navigating away from the table view. This feature is optional and can be enabled or disabled via the `PREVIEW_DRAWER_ENABLED` system setting.
-- [#12341](https://github.com/inventree/InvenTree/pull/12341) adds support for importing internal part prices.
-- [#12295](https://github.com/inventree/InvenTree/pull/12295) adds "consumable" field to the Part model and API endpoints
-- [#12250](https://github.com/inventree/InvenTree/pull/12250) adds "active" field to the ProjectCode model and API endpoints
-
-### Changed
-
-- [#12274](https://github.com/inventree/InvenTree/pull/12274) fixes a bug in rendering the "table field" component in frontend forms. Any plugins which make use of the "table field" component in their forms may be affected by this change, and will need to update their form definitions accordingly.
-
-### Removed
-
-## 1.4.0 - 2026-06-24
-
-### Breaking Changes
-
-- [#12160](https://github.com/inventree/InvenTree/pull/12160) changes the way that remote URIs are loaded into the PDF report generator. Remote URIs (e.g. `http://` and `https://`) are now blocked by default, and can be enabled via the `REPORT_FETCH_URLS` system setting. This change was made to improve the security of the report generation process, as allowing remote URL fetching can potentially expose internal network services to SSRF attacks. Additionally, file URIs (e.g. `file://`) are now always blocked, and assets must be embedded as `data:` URIs before reaching the PDF generator.
-- [#12107](https://github.com/inventree/InvenTree/pull/12107) makes a breaking change to the `SalesOrderStatusGroups` enum, fixing a bug where the "shipped" status was not included in the "active" group. This change may affect any external client applications which make use of the `SalesOrderStatusGroups` enum, as the "shipped" status will now be included in the "active" group instead of the "complete" group. If you are using this enum in an external client application, you will need to update your application to account for this change.
-- [#9604](https://github.com/inventree/InvenTree/pull/9604) refactors user API endpoint to be less ambiguous
-- [#11893](https://github.com/inventree/InvenTree/pull/11893) bumps Node environment to version 24 LTS - this is only relevant if you build the frontend assets yourself
-
-### Added
-
-- [#12208](https://github.com/inventree/InvenTree/pull/12208) adds custom locale support for rendering currencies, dates and numbers within reports. This allows users to specify a custom locale for report rendering, which can be used to control the formatting of dates, numbers and currency values in the generated reports.
-- [#12204](https://github.com/inventree/InvenTree/pull/12204) adds new filtering options to PartCategoryTree and StockLocationTree API endpoints, allowing tree data to be fetched dynamically
-- [#12165](https://github.com/inventree/InvenTree/pull/12165) adds support for parameters against the PartCategory model
-- [#12103](https://github.com/inventree/InvenTree/pull/12103) adds column-based filtering to table views in the user interface. This extends the existing table filtering functionality by allowing users to apply filters directly to individual columns.
-- [#12093](https://github.com/inventree/InvenTree/pull/12093) adds "read_only" attribute to PluginSetting API endpoint, which indicates whether a particular plugin setting is read-only (i.e. cannot be modified via the API)
-- [#12079](https://github.com/inventree/InvenTree/pull/12079) adds the ability to save filter groups for table and calendar views in the user interface. This allows users to save and reuse commonly used filter configurations, improving the usability and efficiency of the interface.
-- [#12077](https://github.com/inventree/InvenTree/pull/12077) adds "tags" fields to multiple new model types and a /api/tag/ endpoint for fetching tags. Also adds the ability to filter various model types by tags.
-- [#12019](https://github.com/inventree/InvenTree/pull/12019) adds a "location" field to the StockCount API endpoint, allowing users to specify a location when performing a stock count. This field is optional, and if not provided, the stock count will be performed without changing the location of the stock item. If a location is provided, the stock item(s) will be moved to the specified location as part of the stock count operation.
-- [#12011](https://github.com/inventree/InvenTree/pull/12011) adds a "creation_date" field to the StockItem API endpoint, allowing users to track when each stock item was created. This field is read-only and is automatically set to the current date and time when a new stock item is created.
-- [#12000](https://github.com/inventree/InvenTree/pull/12000) adds support for auto-allocation of stock items against sales orders. This includes both backend and frontend changes, allowing users to trigger auto-allocation via the API or through the UI. The auto-allocation process will attempt to allocate available stock items to the sales order line items, based on the specified stock sorting and allocation rules.
-- [#11920](https://github.com/inventree/InvenTree/pull/11920) adds support for renaming attachments after they have been uploaded. This includes both backend and frontend changes, allowing users to rename attachments via the API or through the UI.
-- [#11914](https://github.com/inventree/InvenTree/pull/11914) adds a "maximum_stock" field to the Part model, allowing users to specify a maximum preferred stock level for each part. This is used in conjunction with the existing "minimum_stock" field to allow users to define a preferred stock range for each part. The "high_stock" filter has also been added to the Part API endpoint, allowing users to filter parts which are above their maximum stock level.
-- [#11631](https://github.com/inventree/InvenTree/pull/11631) adds "raw_amount" field to the BomItem model, allowing BOM quantities to account for the units of measure of the underlying part.
-- [#11872](https://github.com/inventree/InvenTree/pull/11872) adds a global setting to allow or disallow the deletion of serialized stock items.
-- [#11861](https://github.com/inventree/InvenTree/pull/11861) adds support for bulk-replacing a component in multiple BOMs simultaneously
-- [#11853](https://github.com/inventree/InvenTree/pull/11853) adds BOM comparison functionality, allowing users to compare the BOM of one assembly with another assembly.
-- [#11809](https://github.com/inventree/InvenTree/pull/11809) adds multi-level subassembly display mode to the BOM table, allowing users to view multiple levels of subassemblies in a single table view. This is an optional display mode which can be toggled on or off by the user.
-- [#11778](https://github.com/inventree/InvenTree/pull/11778) adds inline supplier part creation to po line item addition dialog.
-- [#11772](https://github.com/inventree/InvenTree/pull/11772) the UI now warns if you navigate away from a note panel with unsaved changes
-- [#11788](https://github.com/inventree/InvenTree/pull/11788) adds support for custom permissions checks on database models defined in plugins. If a model defines a `check_user_permission` classmethod, this will be called to determine if a user has permission to view the model. This is required for plugin models which do not have the required ruleset definitions for the standard permission system.
-- [#9570](https://github.com/inventree/InvenTree/pull/9570) adds support for defining primary actions via plugins
-
-### Changed
-
-- [#12197](https://github.com/inventree/InvenTree/pull/12197) requires staff permissions to restart machines via the API.
-- [#12142](https://github.com/inventree/InvenTree/pull/12142) prevents users from printing reports or labels against models for which they do not have adequate permissions. This change improves the security of the system by ensuring that users cannot access or print reports or labels for models they do not have permission to view.
-- [#11990](https://github.com/inventree/InvenTree/pull/11990) build output operations performed via the API now offload the work to a background task, and now return a task ID which can be used to monitor the progress of the task. This allows for better performance and responsiveness when performing build output operations, as the work is performed asynchronously in the background.
-- [#11825](https://github.com/inventree/InvenTree/pull/11825) adds a new "bom" ruleset and associated permissions for BOM management, separate from the "part" ruleset which remains focused on part management. This allows for more granular control over user permissions, allowing users to have different levels of access to part management and BOM management functionality.
-- [#11816](https://github.com/inventree/InvenTree/pull/11816) makes the `issued_by` field on the `Build` API read only, and instead sets the `issued_by` field to the current user when a build is created. This change was made to ensure that the `issued_by` field accurately reflects the user who created the build, and to prevent users from setting this field to an arbitrary value when creating or updating a build.
-
-### Removed
-
-- [#12071](https://github.com/inventree/InvenTree/pull/12071) removes the "review_needed" field on the StockItem model. Note that this field was never exposed to the API or any business logic, and is essentially a no-op field which is not used for anything. This field was removed to simplify the StockItem model and reduce confusion around its purpose.
-- [#11962](https://github.com/inventree/InvenTree/pull/11962) removes the "remote_image" field from the Part API endpoint, which (previously) allowed the user to specify a remote URL for an image to be downloaded and associated with the part. This field was removed due to security concerns around downloading images from arbitrary URLs. If you were using this field in an external client application, you will need to update your application to use the new "download_image_from_url" API endpoint instead.
-
-## 1.3.0 - 2026-04-11
-
-### Breaking Changes
-
-- [#11303](https://github.com/inventree/InvenTree/pull/11303) removes the `default_supplier` field from the `Part` model. Instead, the `SupplierPart` model now has a `primary` field which is used to indicate which supplier is the default for a given part. Any external client applications which made use of the old `default_supplier` field will need to be updated.
-- [#11500](https://github.com/inventree/InvenTree/pull/11500) fixes a spelling mistake in the database configuration values, which may affect some users running the PostgreSQL database backend. The `tcp_keepalives_internal` option has been renamed to `tcp_keepalives_interval` to reflect the correct PostgreSQL configuration option name. If you are using PostgreSQL, and have set a custom value for the `tcp_keepalives_internal` option, you will need to update this to `tcp_keepalives_interval` in your configuration (either via environment variable or config file).
-
-### Added
-
-- [#11702](https://github.com/inventree/InvenTree/pull/11702) adds "last updated" and "updated by" fields for label and report templates, allowing users to track when a template was last modified and by whom.
-- [#11685](https://github.com/inventree/InvenTree/pull/11685) exposes the data importer wizard to the plugin interface, allowing plugins to trigger the data importer wizard and perform custom data imports from the UI.
-- [#11692](https://github.com/inventree/InvenTree/pull/11692) adds line item numbering for external orders (purchase, sales and return orders). This allows users to specify a line number for each line item on the order, which can be used for reference purposes. The line number is optional, and can be left blank if not required. The line number is stored as a string, to allow for more flexible formatting (e.g. "1", "1.1", "A", etc).
-- [#11641](https://github.com/inventree/InvenTree/pull/11641) adds support for custom parameters against the SalesOrderShipment model.
-- [#11527](https://github.com/inventree/InvenTree/pull/11527) adds a new API endpoint for monitoring the status of a particular background task. This endpoint allows clients to check the status of a background task and receive updates when the task is complete. This is useful for long-running tasks that may take some time to complete, allowing clients to provide feedback to users about the progress of the task.
-- [#11405](https://github.com/inventree/InvenTree/pull/11405) adds default table filters, which hide inactive items by default. The default table filters are overridden by user filter selection, and only apply to the table view initially presented to the user. This means that users can still view inactive items if they choose to, but they will not be shown by default.
-- [#11222](https://github.com/inventree/InvenTree/pull/11222) adds support for data import using natural keys, allowing for easier association of related objects without needing to know their internal database IDs.
-- [#11383](https://github.com/inventree/InvenTree/pull/11383) adds "exists_for_model_id", "exists_for_related_model", and "exists_for_related_model_id" filters to the ParameterTemplate API endpoint. These filters allow users to check for the existence of parameters associated with specific models or related models, improving the flexibility and usability of the API.
-- [#10887](https://github.com/inventree/InvenTree/pull/10887) adds the ability to auto-allocate tracked items against specific build outputs. Currently, this will only allocate items where the serial number of the tracked item matches the serial number of the build output, but in future this may be extended to allow for more flexible allocation rules.
-- [#11372](https://github.com/inventree/InvenTree/pull/11372) adds backup metadata setter and restore metadata validator functions to ensure common footguns are harder to trigger when using the backup and restore functionality.
-- [#11374](https://github.com/inventree/InvenTree/pull/11374) adds `updated_at` field on purchase, sales and return orders.
-- [#11074](https://github.com/inventree/InvenTree/pull/11074) adds "Keep form open" option on create form which leaves dialog with form opened after form submitting.
-
-### Changed
-
-- [#11648](https://github.com/inventree/InvenTree/pull/11648) improves the import/export process, allowing data records defined by plugins to be loaded when importing a database from a file.
-- [#11630](https://github.com/inventree/InvenTree/pull/11630) enhances the `import_records` and `export_records` system commands, by adding a metadata entry to the exported data file to allow for compatibility checks during data import.
-
-### Removed
-
-- [#11581](https://github.com/inventree/InvenTree/pull/11581) removes the ability to specify arbitrary filters when performing bulk operations via the API. This functionality represented a significant security risk, and was not required for any existing use cases. Bulk operations now only work with a provided list of primary keys.
-
-## 1.2.0 - 2026-02-12
-
-### Breaking Changes
-
-- [#10699](https://github.com/inventree/InvenTree/pull/10699) removes the `PartParameter` and `PartParameterTemplate` models (and associated API endpoints). These have been replaced with generic `Parameter` and `ParameterTemplate` models (and API endpoints). Any external client applications which made use of the old endpoints will need to be updated.
-- [#11035](https://github.com/inventree/InvenTree/pull/11035) moves to a single endpoint for all metadata operations. The previous endpoints for PartMetadata, SupplierPartMetadata, etc have been removed. Any external client applications which made use of the old endpoints will need to be updated.
-
-### Added
-
-- Adds "Category" columns to BOM and Build Item tables and APIs in [#10722](https://github.com/inventree/InvenTree/pull/10772)
-- Adds generic "Parameter" and "ParameterTemplate" models (and associated API endpoints) in [#10699](https://github.com/inventree/InvenTree/pull/10699)
-- Adds parameter support for multiple new model types in [#10699](https://github.com/inventree/InvenTree/pull/10699)
-- Allows report generator to produce PDF input controls in [#10969](https://github.com/inventree/InvenTree/pull/10969)
-- UI overhaul of parameter management in [#10699](https://github.com/inventree/InvenTree/pull/10699)
-- Allow input controls within generated PDF reports in [#10969](https://github.com/inventree/InvenTree/pull/10969)
-
-### Changed
-
-- Improved stocktake functionality in [#11257](https://github.com/inventree/InvenTree/pull/11257)
-
-### Removed
-- Removed python 3.9 / 3.10 support as part of Django 5.2 upgrade in [#10730](https://github.com/inventree/InvenTree/pull/10730)
-- Removed the "PartParameter" and "PartParameterTemplate" models (and associated API endpoints) in [#10699](https://github.com/inventree/InvenTree/pull/10699)
-- Removed the "ManufacturerPartParameter" model (and associated API endpoints) [#10699](https://github.com/inventree/InvenTree/pull/10699)
-- Removed individual metadata endpoints for all models ([#11035](https://github.com/inventree/InvenTree/pull/11035))
-
-## 1.1.0 - 2025-11-02
-
-### Added
-
-- Added `order_queryset` report helper function in [#10439](https://github.com/inventree/InvenTree/pull/10439)
-- Added `SupplierMixin` to import data from suppliers in [#9761](https://github.com/inventree/InvenTree/pull/9761)
-- Added much more detailed status information for machines to the API endpoint (including backend and frontend changes) in [#10381](https://github.com/inventree/InvenTree/pull/10381)
-- Added ability to partially complete and partially scrap build outputs in [#10499](https://github.com/inventree/InvenTree/pull/10499)
-- Added support for Redis ACL user-based authentication in [#10551](https://github.com/inventree/InvenTree/pull/10551)
-- Expose stock adjustment forms to the UI plugin context in [#10584](https://github.com/inventree/InvenTree/pull/10584)
-- Allow stock adjustments for "in production" items in [#10600](https://github.com/inventree/InvenTree/pull/10600)
-- Adds optional shipping address against individual sales order shipments in [#10650](https://github.com/inventree/InvenTree/pull/10650)
-- Adds UI elements to "check" and "uncheck" sales order shipments in [#10654](https://github.com/inventree/InvenTree/pull/10654)
-- Allow assigning project codes to order line items in [#10657](https://github.com/inventree/InvenTree/pull/10657)
-- Added support for webauthn login for the frontend in [#9729](https://github.com/inventree/InvenTree/pull/9729)
-- Added support for Debian 12, Ubuntu 22.04 and Ubuntu 24.04 in the installer and package in [#10705](https://github.com/inventree/InvenTree/pull/10705)
-- Support for S3 and SFTP storage backends for media and static files ([#10140](https://github.com/inventree/InvenTree/pull/10140))
-- Adds hooks for custom UI spotlight actions in [#10720](https://github.com/inventree/InvenTree/pull/10720)
-- Support uploading attachments against SupplierPart in [#10724](https://github.com/inventree/InvenTree/pull/10724)
-
-### Changed
-
-- Changed site URL check to allow protocol mismatches if `INVENTREE_SITE_LAX_PROTOCOL` is set to `True` (default) in [#10454](https://github.com/inventree/InvenTree/pull/10454)
-- Changed call signature of `get_global_setting` to use `environment_key` instead of `enviroment_key` in [#10557](https://github.com/inventree/InvenTree/pull/10557)
-
-
-## 1.0.0 - 2025-09-15
-
-The first "stable" release following semver but not extensively other than the previous releases. The use of 1.0 indicates the stability that users already expect from InvenTree.
-
-An overarching theme of this release is the complete switch to a new UI framework and paradigm (PUI). The old templating based UI (CUI) is now removed. This makes major improvements in the security and portability of InvenTree possible.
-
-Our blog holds [a few articles](https://inventree.org/blog/2024/09/23/ui-roadmap) on the topic. This journey started in [March 2022](https://github.com/inventree/InvenTree/issues/2789) and was announced [in 2023](https://inventree.org/blog/2023/08/28/react).
-
-
-Specific entries to the changelog will be kept for all stable channel minor releases, for changes in 1.0 please refer to the [blog posts](https://inventree.org/blog/2025/09/15/1.0.0) and the [milestone](https://github.com/inventree/InvenTree/milestone/17)

CLAUDE.md

@@ -1,5 +0,0 @@
-See [CONTRIBUTING.md](CONTRIBUTING.md) for codebase guidance.
-Security reports must follow the security policy in [SECURITY.md](docs/docs/SECURITY.md) and provide how they interact with the [threat model](docs/docs/concepts/threat_model.md).
-
-Do not open a pull request without manual review by a human. Do not file AI generated issues under any circumstances.
-Using AI generated content in issue/PR discussions might lead to code of conduct violations and/or bans.

CODE_OF_CONDUCT.md

@@ -1,128 +0,0 @@
-# Contributor Covenant Code of Conduct
-
-## Our Pledge
-
-We as members, contributors, and leaders pledge to make participation in our
-community a harassment-free experience for everyone, regardless of age, body
-size, visible or invisible disability, ethnicity, sex characteristics, gender
-identity and expression, level of experience, education, socio-economic status,
-nationality, personal appearance, race, religion, or sexual identity
-and orientation.
-
-We pledge to act and interact in ways that contribute to an open, welcoming,
-diverse, inclusive, and healthy community.
-
-## Our Standards
-
-Examples of behavior that contributes to a positive environment for our
-community include:
-
-* Demonstrating empathy and kindness toward other people
-* Being respectful of differing opinions, viewpoints, and experiences
-* Giving and gracefully accepting constructive feedback
-* Accepting responsibility and apologizing to those affected by our mistakes,
-  and learning from the experience
-* Focusing on what is best not just for us as individuals, but for the
-  overall community
-
-Examples of unacceptable behavior include:
-
-* The use of sexualized language or imagery, and sexual attention or
-  advances of any kind
-* Trolling, insulting or derogatory comments, and personal or political attacks
-* Public or private harassment
-* Publishing others' private information, such as a physical or email
-  address, without their explicit permission
-* Other conduct which could reasonably be considered inappropriate in a
-  professional setting
-
-## Enforcement Responsibilities
-
-Community leaders are responsible for clarifying and enforcing our standards of
-acceptable behavior and will take appropriate and fair corrective action in
-response to any behavior that they deem inappropriate, threatening, offensive,
-or harmful.
-
-Community leaders have the right and responsibility to remove, edit, or reject
-comments, commits, code, wiki edits, issues, and other contributions that are
-not aligned to this Code of Conduct, and will communicate reasons for moderation
-decisions when appropriate.
-
-## Scope
-
-This Code of Conduct applies within all community spaces, and also applies when
-an individual is officially representing the community in public spaces.
-Examples of representing our community include using an official e-mail address,
-posting via an official social media account, or acting as an appointed
-representative at an online or offline event.
-
-## Enforcement
-
-Instances of abusive, harassing, or otherwise unacceptable behavior may be
-reported to the community leaders responsible for enforcement at
-support AT inventree DOR org.
-All complaints will be reviewed and investigated promptly and fairly.
-
-All community leaders are obligated to respect the privacy and security of the
-reporter of any incident.
-
-## Enforcement Guidelines
-
-Community leaders will follow these Community Impact Guidelines in determining
-the consequences for any action they deem in violation of this Code of Conduct:
-
-### 1. Correction
-
-**Community Impact**: Use of inappropriate language or other behavior deemed
-unprofessional or unwelcome in the community.
-
-**Consequence**: A private, written warning from community leaders, providing
-clarity around the nature of the violation and an explanation of why the
-behavior was inappropriate. A public apology may be requested.
-
-### 2. Warning
-
-**Community Impact**: A violation through a single incident or series
-of actions.
-
-**Consequence**: A warning with consequences for continued behavior. No
-interaction with the people involved, including unsolicited interaction with
-those enforcing the Code of Conduct, for a specified period of time. This
-includes avoiding interactions in community spaces as well as external channels
-like social media. Violating these terms may lead to a temporary or
-permanent ban.
-
-### 3. Temporary Ban
-
-**Community Impact**: A serious violation of community standards, including
-sustained inappropriate behavior.
-
-**Consequence**: A temporary ban from any sort of interaction or public
-communication with the community for a specified period of time. No public or
-private interaction with the people involved, including unsolicited interaction
-with those enforcing the Code of Conduct, is allowed during this period.
-Violating these terms may lead to a permanent ban.
-
-### 4. Permanent Ban
-
-**Community Impact**: Demonstrating a pattern of violation of community
-standards, including sustained inappropriate behavior,  harassment of an
-individual, or aggression toward or disparagement of classes of individuals.
-
-**Consequence**: A permanent ban from any sort of public interaction within
-the community.
-
-## Attribution
-
-This Code of Conduct is adapted from the [Contributor Covenant][homepage],
-version 2.0, available at
-https://www.contributor-covenant.org/version/2/0/code_of_conduct.html.
-
-Community Impact Guidelines were inspired by [Mozilla's code of conduct
-enforcement ladder](https://github.com/mozilla/diversity).
-
-[homepage]: https://www.contributor-covenant.org
-
-For answers to common questions about this code of conduct, see the FAQ at
-https://www.contributor-covenant.org/faq. Translations are available at
-https://www.contributor-covenant.org/translations.

CONTRIBUTING.md

@@ -1,260 +1,102 @@
-# Contributing to InvenTree
+Please read the contribution guidelines below, before submitting your first pull request to the InvenTree codebase.
 
-Hi there, thank you for your interest in contributing!
+## Branches and Versioning
-Please read our contribution guidelines, before submitting your first pull request to the InvenTree codebase.
 
-## About InvenTree
+InvenTree roughly follow the [GitLab flow](https://docs.gitlab.com/ee/topics/gitlab_flow.html) branching style, to allow simple management of multiple tagged releases, short-lived branches, and development on the main branch.
 
-InvenTree is an open-source inventory management system designed for makers, engineers, and small manufacturers.
+### Version Numbering
 
-The codebase is split into two independently deployable layers:
+InvenTree version numbering follows the [semantic versioning](https://semver.org/) specification.
 
-**Backend — Django (Python)**
+### Master Branch
-A REST API built with Django and Django REST Framework. It owns all business logic, the database schema, background task processing (Django-Q2), plugin execution, and report generation. The backend can be used standalone via the API without the frontend.
 
-**Frontend — React (TypeScript)**
+The HEAD of the "main" or "master" branch of InvenTree represents the current "latest" state of code development.
-A single-page application built with React 19, Mantine 9, and Vite. It communicates exclusively through the backend REST API. It has its own build pipeline, test suite (Playwright), and i18n system (Lingui). The frontend lives entirely in `src/frontend/` and has no Django awareness.
 
-When making changes, be clear about which layer you are working in — they have separate toolchains, test runners, and linting rules.
+- All feature branches are merged into master
+- All bug fixes are merged into master
 
-## Project File Structure
+**No pushing to master:** New featues must be submitted as a pull request from a separate branch (one branch per feature).
 
-The InvenTree project is split into two main components: frontend and backend. This source is located in the `src` directory. All other files are used for project management, documentation, and testing.
+#### Feature Branches
 
-```
+Feature branches should be branched *from* the *master* branch.
-InvenTree/
+
-├─ .github/                            # Files for GitHub
+- One major feature per branch / pull request
-│  ├─ actions/                         # Reused actions
+- Feature pull requests are merged back *into* the master branch
-│  ├─ ISSUE_TEMPLATE/                  # Templates for issues and pull requests
+- Features *may* also be merged into a release candidate branch
-│  ├─ workflows/                       # CI/CD flows
+
-│  ├─ scripts/                         # CI scripts
+### Stable Branch
-├─ .vscode/                            # Settings for Visual Code IDE
+
-├─ assets/                             # General project assets
+The HEAD of the "stable" branch represents the latest stable release code.
-├─ contrib/                            # Files needed for deployments
+
-│  ├─ container/                       # Files related to building container images
+- Versioned releases are merged into the "stable" branch
-│  ├─ installer/                       # Files needed to build single-file installer
+- Bug fix branches are made *from* the "stable" branch
-│  ├─ packager.io/                     # Files needed for Debian/Ubuntu packages
+
-├─ docs/                               # Directory for documentation / General helper files
+#### Release Candidate Branches
-│  ├─ ci/                              # CI for documentation
+
-│  ├─ docs/                            # Source for documentation
+- Release candidate branches are made from master, and merged into stable.
-├─ src/                                # Source for application
+- RC branches are targetted at a major/minor version e.g. "0.5"
-│  ├─ backend/                         # Directory for backend parts
+- When a release candidate branch is merged into *stable*, the release is tagged
-│  │  ├─ InvenTree/                    # Source for backend
+
-│  │  ├─ requirements.txt              # Dependencies for backend
+#### Bugfix Branches
-│  │  ├─ package.json                  # Dependencies for backend HTML linting
+
-│  ├─ frontend/                        # Directory for frontend parts
+- If a bug is discovered in a tagged release version of InvenTree, a "bugfix" or "hotfix" branch should be made *from* that tagged release
-│  │  ├─ src/                          # Source for frontend
+- When approved, the branch is merged back *into* stable, with an incremented PATCH number (e.g. 0.4.1 -> 0.4.2)
-│  │  │  ├─ main.tsx                   # Entry point for frontend
+- The bugfix *must* also be cherry picked into the *master* branch.
-│  │  ├─ tests/                        # Tests for frontend
+
-│  │  ├─ netlify.toml                  # Settings for frontend previews (Netlify)
+## Migration Files
-│  │  ├─ package.json                  # Dependencies for frontend
+
-│  │  ├─ playwright.config.ts          # Settings for frontend tests
+Any required migration files **must** be included in the commit, or the pull-request will be rejected. If you change the underlying database schema, make sure you run `invoke migrate` and commit the migration files before submitting the PR.
-│  │  ├─ tsconfig.json                 # Settings for frontend compilation
+
-├─ .pkgr.yml                           # Build definition for Debian/Ubuntu packages
+*Note: A github action checks for unstaged migration files and will reject the PR if it finds any!*
-├─ .pre-commit-config.yaml             # Code formatter/linter configuration
+
-├─ biome.json                          # JS/TS linting and formatting config
+## Unit Testing
-├─ CONTRIBUTING.md                     # Contribution guidelines and overview
+
-├─ Procfile                            # Process definition for Debian/Ubuntu packages
+Any new code should be covered by unit tests - a submitted PR may not be accepted if the code coverage for any new features is insufficient, or the overall code coverage is decreased.
-├─ pyproject.toml                      # Python tooling config (Ruff, pytest, coverage, djLint, ty)
+
-├─ README.md                           # General project information and overview
+The InvenTree code base makes use of [GitHub actions](https://github.com/features/actions) to run a suite of automated tests against the code base every time a new pull request is received. These actions include (but are not limited to):
-├─ SECURITY.md                         # Project security policy
+
-├─ tasks.py                            # Action definitions for development, testing and deployment
+- Checking Python and Javascript code against standard style guides
+- Running unit test suite
+- Automated building and pushing of docker images
+- Generating translation files
+
+The various github actions can be found in the `./github/workflows` directory
+
+## Code Style
+
+Sumbitted Python code is automatically checked against PEP style guidelines. Locally you can run `invoke style` to ensure the style checks will pass, before submitting the PR.
+
+## Documentation
+
+New features or updates to existing features should be accompanied by user documentation. A PR with associated documentation should link to the matching PR at https://github.com/inventree/inventree-docs/
+
+## Translations
+
+Any user-facing strings *must* be passed through the translation engine.
+
+- InvenTree code is written in English
+- User translatable strings are provided in English as the primary language
+- Secondary language translations are provided [via Crowdin](https://crowdin.com/project/inventree)
+
+*Note: Translation files are updated via GitHub actions - you do not need to compile translations files before submitting a pull request!*
+
+### Python Code
+
+For strings exposed via Python code, use the following format:
+
+```python
+from django.utils.translation import ugettext_lazy as _
+
+user_facing_string = _('This string will be exposed to the translation engine!')
 ```
 
-### Backend app domains
+### Templated Strings
 
-The following Django apps are defined in `src/backend/InvenTree/`:
+HTML and javascript files are passed through the django templating engine. Translatable strings are implemented as follows:
 
-| Directory | Domain |
+```html
-|-----------|--------|
+{% load i18n %}
-| `build/` | Build (manufacturing/assembly) orders |
-| `common/` | Shared models, settings, utilities |
-| `company/` | Suppliers, customers, manufacturers |
-| `data_exporter/` | Data export functionality |
-| `generic/` | Shared enums, events, and state machine utilities |
-| `importer/` | Data import functionality |
-| `InvenTree/` | Core configuration (settings, URLs, middleware) |
-| `machine/` | Support for external machines and devices |
-| `order/` | Purchase orders and sales orders |
-| `part/` | Parts catalogue and categories |
-| `stock/` | Stock items and locations |
-| `report/` | Report templates and generation |
-| `plugin/` | Plugin system |
-| `users/` | User accounts and permissions |
-| `web/` | Serves the React frontend static build to Django |
 
-### Frontend layout
+<span>{% trans "This string will be translated" %} - this string will not!</span>
-
+```
-```
-src/frontend/src/
-  components/   # Reusable React components
-  pages/        # Page-level route components
-  tables/       # Data table components
-  forms/        # Form components
-  hooks/        # Custom React hooks
-  states/       # Zustand global state
-  locales/      # i18n translation catalogues (Lingui)
-```
-
-## Development Setup
-
-The project uses [Invoke](https://www.pyinvoketasks.com/) (`tasks.py`) as the task runner.
-
-```bash
-# One-time setup: creates venv at dev/venv/, installs deps, sets up pre-commit hooks
-invoke dev.setup-dev
-
-# Apply database migrations (and detect/create new migration files if required)
-invoke migrate --detect
-
-# Create an admin account (required to log in)
-invoke superuser
-
-# Terminal 1 — Django dev server (port 8000)
-invoke dev.server
-
-# Terminal 2 — Vite dev server with HMR (port 5173)
-invoke dev.frontend-server
-
-# Terminal 3 (optional) — Background task worker
-invoke worker
-```
-
-A VS Code Dev Container configuration is available at `.devcontainer/` and includes PostgreSQL 15 and Redis 7 sidecar services.
-
-To see all available tasks, run `invoke --list`.
-
-## Running Backend Tests
-
-Always pass `--keepdb` to backend test commands. It reuses the existing test database instead of rebuilding it from scratch on every run, which is significantly faster.
-
-```bash
-# All backend tests
-invoke dev.test --keepdb
-
-# Specific test module
-invoke dev.test --keepdb --runtest=company.test_api
-
-# With coverage
-invoke dev.test --keepdb --coverage
-
-# Migration tests only (skip --keepdb here — migrations must run against a fresh DB)
-invoke dev.test --migrations
-```
-
-## Running Frontend Tests
-
-Frontend tests use [Playwright](https://playwright.dev/) and target Chromium and Firefox. The test runner automatically starts the Vite dev server (port 5173), the Django backend (port 8000), and the background worker — no manual server startup is needed.
-
-```bash
-# Open Playwright's interactive UI (recommended for local development)
-invoke dev.frontend-test
-
-# Run tests in headless mode from the frontend directory
-cd src/frontend && npx playwright test
-
-# Run a specific test file
-cd src/frontend && npx playwright test tests/pui_login.spec.ts
-
-# Run tests in a specific browser only
-cd src/frontend && npx playwright test --project=chromium
-```
-
-Test files live in `src/frontend/tests/` and follow the `pui_*.spec.ts` naming convention.
-
-Locally, tests run with a single worker (required for Vite HMR compatibility). In CI they run with multiple workers against a production build for speed.
-
-## Code Style and Linting
-
-All formatting and linting runs automatically on commit via pre-commit hooks. Never skip them.
-
-### Python (Backend)
-
-Tool: **Ruff** (replaces Black, isort, flake8, and others).
-
-```bash
-ruff check src/backend/         # Lint
-ruff format src/backend/        # Format
-```
-
-- Google-style docstrings enforced
-- Enabled rule sets: A, B, C, D, F, I, N, SIM, PIE, PLE, PLW, RUF, UP, W
-- Type checking: `ty` (configured in `pyproject.toml`)
-
-### Django Templates
-
-Tool: **djLint**
-
-```bash
-djlint src/backend/ --check
-```
-
-### JavaScript / TypeScript (Frontend)
-
-Tool: **Biome** (replaces ESLint + Prettier).
-
-```bash
-cd src/frontend
-yarn biome check .      # Lint + format check
-yarn biome format .     # Format only
-```
-
-- Single quotes, space indentation
-- `noUnusedImports` is an error
-
-## Making Changes
-
-### Backend
-
-- Each Django app has its own `models.py`, `serializers.py`, `views.py`, `urls.py`, and `filters.py`.
-- API endpoints use Django REST Framework; document them with drf-spectacular decorators.
-- After changing models, create a migration: `invoke dev.makemigrations`.
-- Tests live in `test_*.py` files within each app directory.
-- Background tasks go through Django-Q2; define them in the app's `tasks.py`.
-
-### Frontend
-
-- Pages register themselves in `src/frontend/src/router.tsx`.
-- Server state fetching uses TanStack Query (React Query); avoid raw `useEffect` for data fetching.
-- Global UI state uses Zustand stores in `states/`.
-- UI components come from Mantine 9.x; use the Mantine component library before writing custom CSS.
-- Add i18n strings with Lingui (`t` macro / `Trans` component); run `invoke int.frontend-trans` to extract from source and compile. (`invoke dev.translate` is for the full translation pipeline and is not intended for local use.)
-- Playwright tests live in `src/frontend/tests/`.
-
-### Dependencies
-
-**Python:** Add packages to `src/backend/requirements.in` (or `requirements-dev.in` for dev-only tools). The pre-commit hook runs `pip-compile` automatically on commit to regenerate `requirements.txt`. Never edit `requirements.txt` directly.
-
-**Frontend:** Add packages with `yarn add <package>` from `src/frontend/`.
-
-### Migrations
-
-- Never edit existing migration files; always generate new ones.
-- Keep migrations reversible where possible.
-- Migration tests run in CI under the tag `migration_test`.
-
-## CI / CD
-
-GitHub Actions workflows live in `.github/workflows/`. Key workflows:
-
-| Workflow | Purpose |
-|----------|---------|
-| `qc_checks.yaml` | Lint, type-check, backend tests, API schema |
-| `frontend.yaml` | Playwright E2E tests, frontend build |
-| `docker.yaml` | Docker image builds |
-| `translations.yaml` | Crowdin i18n sync |
-
-CI uses path-based filtering — only affected jobs run per PR. Coverage tracked via Codecov; quality analysis via SonarCloud.
-
-## Key Conventions
-
-- **REST API versioning:** Endpoint changes must not break the published API schema. Run `invoke dev.schema` and check the diff before opening a PR.
-- **Plugin safety:** The plugin system (`plugin/`) is a public extension point; avoid breaking its interfaces.
-- **No hardcoded secrets:** gitleaks runs in pre-commit and CI — any credential-shaped string will block merges.
-- **Database portability:** Code must work on PostgreSQL, MySQL/MariaDB, and SQLite. Avoid database-specific SQL or ORM features.
-- **Frontend translations:** Every user-visible string must be wrapped in a Lingui `t` macro or `<Trans>` component.
-- **Test tagging:** Tag slow or special tests (`@tag('migration_test')`, `@tag('performance_test')`) so CI can filter them selectively.
-
----
-
-Refer to our [contribution guidelines](https://docs.inventree.org/en/latest/develop/contributing/) for more information!

InvenTree/InvenTree/__init__.py

@@ -0,0 +1,5 @@
+"""
+The InvenTree module provides high-level management and functionality.
+
+It provides a number of helper functions and generic classes which are used by InvenTree apps.
+"""

InvenTree/InvenTree/api.py

@@ -0,0 +1,118 @@
+"""
+Main JSON interface views
+"""
+
+# -*- coding: utf-8 -*-
+from __future__ import unicode_literals
+
+from django.utils.translation import ugettext_lazy as _
+from django.http import JsonResponse
+
+from django_filters.rest_framework import DjangoFilterBackend
+from rest_framework import filters
+
+from rest_framework import permissions
+from rest_framework.response import Response
+from rest_framework.views import APIView
+
+from .views import AjaxView
+from .version import inventreeVersion, inventreeApiVersion, inventreeInstanceName
+from .status import is_worker_running
+
+from plugin import registry
+
+
+class InfoView(AjaxView):
+    """ Simple JSON endpoint for InvenTree information.
+    Use to confirm that the server is running, etc.
+    """
+
+    permission_classes = [permissions.AllowAny]
+
+    def get(self, request, *args, **kwargs):
+
+        data = {
+            'server': 'InvenTree',
+            'version': inventreeVersion(),
+            'instance': inventreeInstanceName(),
+            'apiVersion': inventreeApiVersion(),
+            'worker_running': is_worker_running(),
+        }
+
+        return JsonResponse(data)
+
+
+class NotFoundView(AjaxView):
+    """
+    Simple JSON view when accessing an invalid API view.
+    """
+
+    permission_classes = [permissions.AllowAny]
+
+    def get(self, request, *args, **kwargs):
+
+        data = {
+            'details': _('API endpoint not found'),
+            'url': request.build_absolute_uri(),
+        }
+
+        return JsonResponse(data, status=404)
+
+
+class AttachmentMixin:
+    """
+    Mixin for creating attachment objects,
+    and ensuring the user information is saved correctly.
+    """
+
+    permission_classes = [permissions.IsAuthenticated]
+
+    filter_backends = [
+        DjangoFilterBackend,
+        filters.OrderingFilter,
+        filters.SearchFilter,
+    ]
+
+    def perform_create(self, serializer):
+        """ Save the user information when a file is uploaded """
+
+        attachment = serializer.save()
+        attachment.user = self.request.user
+        attachment.save()
+
+
+class ActionPluginView(APIView):
+    """
+    Endpoint for running custom action plugins.
+    """
+
+    permission_classes = [
+        permissions.IsAuthenticated,
+    ]
+
+    def post(self, request, *args, **kwargs):
+
+        action = request.data.get('action', None)
+
+        data = request.data.get('data', None)
+
+        if action is None:
+            return Response({
+                'error': _("No action specified")
+            })
+
+        action_plugins = registry.with_mixin('action')
+        for plugin in action_plugins:
+            if plugin.action_name() == action:
+                # TODO @matmair use easier syntax once InvenTree 0.7.0 is released
+                plugin.init(request.user, data=data)
+
+                plugin.perform_action()
+
+                return Response(plugin.get_response())
+
+        # If we got to here, no matching action was found
+        return Response({
+            'error': _("No matching action found"),
+            "action": action,
+        })

InvenTree/InvenTree/api_tester.py

@@ -0,0 +1,155 @@
+"""
+Helper functions for performing API unit tests
+"""
+
+from django.contrib.auth import get_user_model
+from django.contrib.auth.models import Group
+from rest_framework.test import APITestCase
+
+
+class InvenTreeAPITestCase(APITestCase):
+    """
+    Base class for running InvenTree API tests
+    """
+
+    # User information
+    username = 'testuser'
+    password = 'mypassword'
+    email = 'test@testing.com'
+
+    superuser = False
+    is_staff = True
+    auto_login = True
+
+    # Set list of roles automatically associated with the user
+    roles = []
+
+    def setUp(self):
+
+        super().setUp()
+
+        # Create a user to log in with
+        self.user = get_user_model().objects.create_user(
+            username=self.username,
+            password=self.password,
+            email=self.email
+        )
+
+        # Create a group for the user
+        self.group = Group.objects.create(name='my_test_group')
+        self.user.groups.add(self.group)
+
+        if self.superuser:
+            self.user.is_superuser = True
+
+        if self.is_staff:
+            self.user.is_staff = True
+
+        self.user.save()
+
+        for role in self.roles:
+            self.assignRole(role)
+
+        if self.auto_login:
+            self.client.login(username=self.username, password=self.password)
+
+    def assignRole(self, role):
+        """
+        Set the user roles for the registered user
+        """
+
+        # role is of the format 'rule.permission' e.g. 'part.add'
+
+        rule, perm = role.split('.')
+
+        for ruleset in self.group.rule_sets.all():
+
+            if ruleset.name == rule:
+
+                if perm == 'view':
+                    ruleset.can_view = True
+                elif perm == 'change':
+                    ruleset.can_change = True
+                elif perm == 'delete':
+                    ruleset.can_delete = True
+                elif perm == 'add':
+                    ruleset.can_add = True
+
+                ruleset.save()
+                break
+
+    def getActions(self, url):
+        """
+        Return a dict of the 'actions' available at a given endpoint.
+        Makes use of the HTTP 'OPTIONS' method to request this.
+        """
+
+        response = self.client.options(url)
+        self.assertEqual(response.status_code, 200)
+
+        actions = response.data.get('actions', None)
+
+        if not actions:
+            actions = {}
+
+        return actions
+
+    def get(self, url, data={}, expected_code=200):
+        """
+        Issue a GET request
+        """
+
+        response = self.client.get(url, data, format='json')
+
+        if expected_code is not None:
+            self.assertEqual(response.status_code, expected_code)
+
+        return response
+
+    def post(self, url, data, expected_code=None, format='json'):
+        """
+        Issue a POST request
+        """
+
+        response = self.client.post(url, data=data, format=format)
+
+        if expected_code is not None:
+            self.assertEqual(response.status_code, expected_code)
+
+        return response
+
+    def delete(self, url, expected_code=None):
+        """
+        Issue a DELETE request
+        """
+
+        response = self.client.delete(url)
+
+        if expected_code is not None:
+            self.assertEqual(response.status_code, expected_code)
+
+        return response
+
+    def patch(self, url, data, expected_code=None, format='json'):
+        """
+        Issue a PATCH request
+        """
+
+        response = self.client.patch(url, data=data, format=format)
+
+        if expected_code is not None:
+            self.assertEqual(response.status_code, expected_code)
+
+        return response
+
+    def options(self, url, expected_code=None):
+        """
+        Issue an OPTIONS request
+        """
+
+        response = self.client.options(url, format='json')
+
+        if expected_code is not None:
+            self.assertEqual(response.status_code, expected_code)
+
+        return response

InvenTree/InvenTree/apps.py

@@ -0,0 +1,140 @@
+# -*- coding: utf-8 -*-
+
+import logging
+
+from django.apps import AppConfig
+from django.core.exceptions import AppRegistryNotReady
+
+from InvenTree.ready import isInTestMode, canAppAccessDatabase
+import InvenTree.tasks
+
+
+logger = logging.getLogger("inventree")
+
+
+class InvenTreeConfig(AppConfig):
+    name = 'InvenTree'
+
+    def ready(self):
+
+        if canAppAccessDatabase():
+
+            self.remove_obsolete_tasks()
+
+            self.start_background_tasks()
+
+            if not isInTestMode():
+                self.update_exchange_rates()
+
+    def remove_obsolete_tasks(self):
+        """
+        Delete any obsolete scheduled tasks in the database
+        """
+
+        obsolete = [
+            'InvenTree.tasks.delete_expired_sessions',
+            'stock.tasks.delete_old_stock_items',
+        ]
+
+        try:
+            from django_q.models import Schedule
+        except AppRegistryNotReady:  # pragma: no cover
+            return
+
+        # Remove any existing obsolete tasks
+        Schedule.objects.filter(func__in=obsolete).delete()
+
+    def start_background_tasks(self):
+
+        try:
+            from django_q.models import Schedule
+        except AppRegistryNotReady:  # pragma: no cover
+            return
+
+        logger.info("Starting background tasks...")
+
+        # Remove successful task results from the database
+        InvenTree.tasks.schedule_task(
+            'InvenTree.tasks.delete_successful_tasks',
+            schedule_type=Schedule.DAILY,
+        )
+
+        # Check for InvenTree updates
+        InvenTree.tasks.schedule_task(
+            'InvenTree.tasks.check_for_updates',
+            schedule_type=Schedule.DAILY
+        )
+
+        # Heartbeat to let the server know the background worker is running
+        InvenTree.tasks.schedule_task(
+            'InvenTree.tasks.heartbeat',
+            schedule_type=Schedule.MINUTES,
+            minutes=15
+        )
+
+        # Keep exchange rates up to date
+        InvenTree.tasks.schedule_task(
+            'InvenTree.tasks.update_exchange_rates',
+            schedule_type=Schedule.DAILY,
+        )
+
+        # Delete old error messages
+        InvenTree.tasks.schedule_task(
+            'InvenTree.tasks.delete_old_error_logs',
+            schedule_type=Schedule.DAILY,
+        )
+
+        # Delete old notification records
+        InvenTree.tasks.schedule_task(
+            'common.tasks.delete_old_notifications',
+            schedule_type=Schedule.DAILY,
+        )
+
+    def update_exchange_rates(self):
+        """
+        Update exchange rates each time the server is started, *if*:
+
+        a) Have not been updated recently (one day or less)
+        b) The base exchange rate has been altered
+        """
+
+        try:
+            from djmoney.contrib.exchange.models import ExchangeBackend
+
+            from InvenTree.tasks import update_exchange_rates
+            from common.settings import currency_code_default
+        except AppRegistryNotReady:  # pragma: no cover
+            pass
+
+        base_currency = currency_code_default()
+
+        update = False
+
+        try:
+            backend = ExchangeBackend.objects.get(name='InvenTreeExchange')
+
+            last_update = backend.last_update
+
+            if last_update is None:
+                # Never been updated
+                logger.info("Exchange backend has never been updated")
+                update = True
+
+            # Backend currency has changed?
+            if not base_currency == backend.base_currency:
+                logger.info(f"Base currency changed from {backend.base_currency} to {base_currency}")
+                update = True
+
+        except (ExchangeBackend.DoesNotExist):
+            logger.info("Exchange backend not found - updating")
+            update = True
+
+        except:
+            # Some other error - potentially the tables are not ready yet
+            return
+
+        if update:
+            try:
+                update_exchange_rates()
+            except Exception as e:
+                logger.error(f"Error updating exchange rates: {e}")

InvenTree/InvenTree/ci_render_js.py

@@ -0,0 +1,100 @@
+"""
+Pull rendered copies of the templated
+only used for testing the js files! - This file is omited from coverage
+"""
+
+from django.test import TestCase
+from django.contrib.auth import get_user_model
+
+import os
+import pathlib
+
+
+class RenderJavascriptFiles(TestCase):
+    """
+    A unit test to "render" javascript files.
+
+    The server renders templated javascript files,
+    we need the fully-rendered files for linting and static tests.
+    """
+
+    def setUp(self):
+
+        user = get_user_model()
+
+        self.user = user.objects.create_user(
+            username='testuser',
+            password='testpassword',
+            email='user@gmail.com',
+        )
+
+        self.client.login(username='testuser', password='testpassword')
+
+    def download_file(self, filename, prefix):
+
+        url = os.path.join(prefix, filename)
+
+        response = self.client.get(url)
+
+        here = os.path.abspath(os.path.dirname(__file__))
+
+        output_dir = os.path.join(
+            here,
+            '..',
+            '..',
+            'js_tmp',
+        )
+
+        output_dir = os.path.abspath(output_dir)
+
+        if not os.path.exists(output_dir):
+            os.mkdir(output_dir)
+
+        output_file = os.path.join(
+            output_dir,
+            filename,
+        )
+
+        with open(output_file, 'wb') as output:
+            output.write(response.content)
+
+    def download_files(self, subdir, prefix):
+        here = os.path.abspath(os.path.dirname(__file__))
+
+        js_template_dir = os.path.join(
+            here,
+            '..',
+            'templates',
+            'js',
+        )
+
+        directory = os.path.join(js_template_dir, subdir)
+
+        directory = os.path.abspath(directory)
+
+        js_files = pathlib.Path(directory).rglob('*.js')
+
+        n = 0
+
+        for f in js_files:
+            js = os.path.basename(f)
+
+            self.download_file(js, prefix)
+
+            n += 1
+
+        return n
+
+    def test_render_files(self):
+        """
+        Look for all javascript files
+        """
+
+        n = 0
+
+        print("Rendering javascript files...")
+
+        n += self.download_files('translated', '/js/i18n')
+        n += self.download_files('dynamic', '/js/dynamic')
+
+        print(f"Rendered {n} javascript files.")

InvenTree/InvenTree/config.py

@@ -0,0 +1,90 @@
+"""
+Helper functions for loading InvenTree configuration options
+"""
+
+import os
+import shutil
+import logging
+
+
+logger = logging.getLogger('inventree')
+
+
+def get_base_dir():
+    """ Returns the base (top-level) InvenTree directory """
+    return os.path.dirname(os.path.dirname(os.path.abspath(__file__)))
+
+
+def get_config_file():
+    """
+    Returns the path of the InvenTree configuration file.
+
+    Note: It will be created it if does not already exist!
+    """
+
+    base_dir = get_base_dir()
+
+    cfg_filename = os.getenv('INVENTREE_CONFIG_FILE')
+
+    if cfg_filename:
+        cfg_filename = cfg_filename.strip()
+        cfg_filename = os.path.abspath(cfg_filename)
+    else:
+        # Config file is *not* specified - use the default
+        cfg_filename = os.path.join(base_dir, 'config.yaml')
+
+    if not os.path.exists(cfg_filename):
+        print("InvenTree configuration file 'config.yaml' not found - creating default file")
+
+        cfg_template = os.path.join(base_dir, "config_template.yaml")
+        shutil.copyfile(cfg_template, cfg_filename)
+        print(f"Created config file {cfg_filename}")
+
+    return cfg_filename
+
+
+def get_plugin_file():
+    """
+    Returns the path of the InvenTree plugins specification file.
+
+    Note: It will be created if it does not already exist!
+    """
+    # Check if the plugin.txt file (specifying required plugins) is specified
+    PLUGIN_FILE = os.getenv('INVENTREE_PLUGIN_FILE')
+
+    if not PLUGIN_FILE:
+        # If not specified, look in the same directory as the configuration file
+
+        config_dir = os.path.dirname(get_config_file())
+
+        PLUGIN_FILE = os.path.join(config_dir, 'plugins.txt')
+
+    if not os.path.exists(PLUGIN_FILE):
+        logger.warning("Plugin configuration file does not exist")
+        logger.info(f"Creating plugin file at '{PLUGIN_FILE}'")
+
+        # If opening the file fails (no write permission, for example), then this will throw an error
+        with open(PLUGIN_FILE, 'w') as plugin_file:
+            plugin_file.write("# InvenTree Plugins (uses PIP framework to install)\n\n")
+
+    return PLUGIN_FILE
+
+
+def get_setting(environment_var, backup_val, default_value=None):
+    """
+    Helper function for retrieving a configuration setting value
+
+    - First preference is to look for the environment variable
+    - Second preference is to look for the value of the settings file
+    - Third preference is the default value
+    """
+
+    val = os.getenv(environment_var)
+
+    if val is not None:
+        return val
+
+    if backup_val is not None:
+        return backup_val
+
+    return default_value

InvenTree/InvenTree/context.py

@@ -0,0 +1,124 @@
+# -*- coding: utf-8 -*-
+
+"""
+Provides extra global data to all templates.
+"""
+
+from InvenTree.status_codes import SalesOrderStatus, PurchaseOrderStatus
+from InvenTree.status_codes import BuildStatus, StockStatus
+from InvenTree.status_codes import StockHistoryCode
+
+import InvenTree.status
+
+from users.models import RuleSet
+
+
+def health_status(request):
+    """
+    Provide system health status information to the global context.
+
+    - Not required for AJAX requests
+    - Do not provide if it is already provided to the context
+    """
+
+    if request.path.endswith('.js'):
+        # Do not provide to script requests
+        return {}  # pragma: no cover
+
+    if hasattr(request, '_inventree_health_status'):
+        # Do not duplicate efforts
+        return {}
+
+    request._inventree_health_status = True
+
+    status = {
+        'django_q_running': InvenTree.status.is_worker_running(),
+        'email_configured': InvenTree.status.is_email_configured(),
+    }
+
+    # The following keys are required to denote system health
+    health_keys = [
+        'django_q_running',
+    ]
+
+    all_healthy = True
+
+    for k in health_keys:
+        if status[k] is not True:
+            all_healthy = False
+
+    status['system_healthy'] = all_healthy
+
+    status['up_to_date'] = InvenTree.version.isInvenTreeUpToDate()
+
+    return status
+
+
+def status_codes(request):
+    """
+    Provide status code enumerations.
+    """
+
+    if hasattr(request, '_inventree_status_codes'):
+        # Do not duplicate efforts
+        return {}
+
+    request._inventree_status_codes = True
+
+    return {
+        # Expose the StatusCode classes to the templates
+        'SalesOrderStatus': SalesOrderStatus,
+        'PurchaseOrderStatus': PurchaseOrderStatus,
+        'BuildStatus': BuildStatus,
+        'StockStatus': StockStatus,
+        'StockHistoryCode': StockHistoryCode,
+    }
+
+
+def user_roles(request):
+    """
+    Return a map of the current roles assigned to the user.
+
+    Roles are denoted by their simple names, and then the permission type.
+
+    Permissions can be access as follows:
+
+    - roles.part.view
+    - roles.build.delete
+
+    Each value will return a boolean True / False
+    """
+
+    user = request.user
+
+    roles = {
+    }
+
+    if user.is_superuser:
+        for ruleset in RuleSet.RULESET_MODELS.keys():
+            roles[ruleset] = {
+                'view': True,
+                'add': True,
+                'change': True,
+                'delete': True,
+            }
+    else:
+        for group in user.groups.all():
+            for rule in group.rule_sets.all():
+
+                # Ensure the role name is in the dict
+                if rule.name not in roles:
+                    roles[rule.name] = {
+                        'view': user.is_superuser,
+                        'add': user.is_superuser,
+                        'change': user.is_superuser,
+                        'delete': user.is_superuser
+                    }
+
+                # Roles are additive across groups
+                roles[rule.name]['view'] |= rule.can_view
+                roles[rule.name]['add'] |= rule.can_add
+                roles[rule.name]['change'] |= rule.can_change
+                roles[rule.name]['delete'] |= rule.can_delete
+
+    return {'roles': roles}

InvenTree/InvenTree/exchange.py

@@ -0,0 +1,64 @@
+import certifi
+import ssl
+from urllib.request import urlopen
+
+from common.settings import currency_code_default, currency_codes
+from urllib.error import URLError
+
+from djmoney.contrib.exchange.backends.base import SimpleExchangeBackend
+from django.db.utils import OperationalError
+
+
+class InvenTreeExchange(SimpleExchangeBackend):
+    """
+    Backend for automatically updating currency exchange rates.
+
+    Uses the exchangerate.host service API
+    """
+
+    name = "InvenTreeExchange"
+
+    def __init__(self):
+        self.url = "https://api.exchangerate.host/latest"
+
+        super().__init__()
+
+    def get_params(self):
+        # No API key is required
+        return {
+        }
+
+    def get_response(self, **kwargs):
+        """
+        Custom code to get response from server.
+        Note: Adds a 5-second timeout
+        """
+
+        url = self.get_url(**kwargs)
+
+        try:
+            context = ssl.create_default_context(cafile=certifi.where())
+            response = urlopen(url, timeout=5, context=context)
+            return response.read()
+        except:
+            # Returning None here will raise an error upstream
+            return None
+
+    def update_rates(self, base_currency=currency_code_default()):
+
+        symbols = ','.join(currency_codes())
+
+        try:
+            super().update_rates(base=base_currency, symbols=symbols)
+        # catch connection errors
+        except URLError:
+            print('Encountered connection error while updating')
+        except OperationalError as e:
+            if 'SerializationFailure' in e.__cause__.__class__.__name__:
+                print('Serialization Failure while updating exchange rates')
+                # We are just going to swallow this exception because the
+                # exchange rates will be updated later by the scheduled task
+            else:
+                # Other operational errors probably are still show stoppers
+                # so reraise them so that the log contains the stacktrace
+                raise

InvenTree/InvenTree/fields.py

@@ -0,0 +1,162 @@
+""" Custom fields used in InvenTree """
+
+# -*- coding: utf-8 -*-
+from __future__ import unicode_literals
+import sys
+
+from .validators import allowable_url_schemes
+
+from django.utils.translation import ugettext_lazy as _
+
+from django.forms.fields import URLField as FormURLField
+from django.db import models as models
+from django.core import validators
+from django import forms
+
+from decimal import Decimal
+
+from djmoney.models.fields import MoneyField as ModelMoneyField
+from djmoney.forms.fields import MoneyField
+from djmoney.models.validators import MinMoneyValidator
+
+import InvenTree.helpers
+
+
+class InvenTreeURLFormField(FormURLField):
+    """ Custom URL form field with custom scheme validators """
+
+    default_validators = [validators.URLValidator(schemes=allowable_url_schemes())]
+
+
+class InvenTreeURLField(models.URLField):
+    """ Custom URL field which has custom scheme validators """
+
+    default_validators = [validators.URLValidator(schemes=allowable_url_schemes())]
+
+    def formfield(self, **kwargs):
+        return super().formfield(**{
+            'form_class': InvenTreeURLFormField
+        })
+
+
+def money_kwargs():
+    """ returns the database settings for MoneyFields """
+    from common.settings import currency_code_mappings, currency_code_default
+
+    kwargs = {}
+    kwargs['currency_choices'] = currency_code_mappings()
+    kwargs['default_currency'] = currency_code_default()
+    return kwargs
+
+
+class InvenTreeModelMoneyField(ModelMoneyField):
+    """
+    Custom MoneyField for clean migrations while using dynamic currency settings
+    """
+
+    def __init__(self, **kwargs):
+        # detect if creating migration
+        if 'migrate' in sys.argv or 'makemigrations' in sys.argv:
+            # remove currency information for a clean migration
+            kwargs['default_currency'] = ''
+            kwargs['currency_choices'] = []
+        else:
+            # set defaults
+            kwargs.update(money_kwargs())
+
+        # Set a minimum value validator
+        validators = kwargs.get('validators', [])
+
+        if len(validators) == 0:
+            validators.append(
+                MinMoneyValidator(0),
+            )
+
+        kwargs['validators'] = validators
+
+        super().__init__(**kwargs)
+
+    def formfield(self, **kwargs):
+        """ override form class to use own function """
+        kwargs['form_class'] = InvenTreeMoneyField
+        return super().formfield(**kwargs)
+
+
+class InvenTreeMoneyField(MoneyField):
+    """ custom MoneyField for clean migrations while using dynamic currency settings """
+    def __init__(self, *args, **kwargs):
+        # override initial values with the real info from database
+        kwargs.update(money_kwargs())
+        super().__init__(*args, **kwargs)
+
+
+class DatePickerFormField(forms.DateField):
+    """
+    Custom date-picker field
+    """
+
+    def __init__(self, **kwargs):
+
+        help_text = kwargs.get('help_text', _('Enter date'))
+        label = kwargs.get('label', None)
+        required = kwargs.get('required', False)
+        initial = kwargs.get('initial', None)
+
+        widget = forms.DateInput(
+            attrs={
+                'type': 'date',
+            }
+        )
+
+        forms.DateField.__init__(
+            self,
+            required=required,
+            initial=initial,
+            help_text=help_text,
+            widget=widget,
+            label=label
+        )
+
+
+def round_decimal(value, places):
+    """
+    Round value to the specified number of places.
+    """
+
+    if value is not None:
+        # see https://docs.python.org/2/library/decimal.html#decimal.Decimal.quantize for options
+        return value.quantize(Decimal(10) ** -places)
+    return value
+
+
+class RoundingDecimalFormField(forms.DecimalField):
+    def to_python(self, value):
+        value = super(RoundingDecimalFormField, self).to_python(value)
+        value = round_decimal(value, self.decimal_places)
+        return value
+
+    def prepare_value(self, value):
+        """
+        Override the 'prepare_value' method, to remove trailing zeros when displaying.
+        Why? It looks nice!
+        """
+
+        if type(value) == Decimal:
+            return InvenTree.helpers.normalize(value)
+        else:
+            return value
+
+
+class RoundingDecimalField(models.DecimalField):
+    def to_python(self, value):
+        value = super(RoundingDecimalField, self).to_python(value)
+        return round_decimal(value, self.decimal_places)
+
+    def formfield(self, **kwargs):
+        defaults = {
+            'form_class': RoundingDecimalFormField
+        }
+
+        defaults.update(kwargs)
+
+        return super().formfield(**kwargs)

InvenTree/InvenTree/filters.py

@@ -0,0 +1,80 @@
+# -*- coding: utf-8 -*-
+from __future__ import unicode_literals
+
+from rest_framework.filters import OrderingFilter
+
+
+class InvenTreeOrderingFilter(OrderingFilter):
+    """
+    Custom OrderingFilter class which allows aliased filtering of related fields.
+
+    To use, simply specify this filter in the "filter_backends" section.
+
+    filter_backends = [
+        InvenTreeOrderingFilter,
+    ]
+
+    Then, specify a ordering_field_aliases attribute:
+
+    ordering_field_alises = {
+        'name': 'part__part__name',
+        'SKU': 'part__SKU',
+    }
+    """
+
+    def get_ordering(self, request, queryset, view):
+
+        ordering = super().get_ordering(request, queryset, view)
+
+        aliases = getattr(view, 'ordering_field_aliases', None)
+
+        # Attempt to map ordering fields based on provided aliases
+        if ordering is not None and aliases is not None:
+            """
+            Ordering fields should be mapped to separate fields
+            """
+
+            ordering_initial = ordering
+            ordering = []
+
+            for field in ordering_initial:
+
+                reverse = field.startswith('-')
+
+                if reverse:
+                    field = field[1:]
+
+                # Are aliases defined for this field?
+                if field in aliases:
+                    alias = aliases[field]
+                else:
+                    alias = field
+
+                """
+                Potentially, a single field could be "aliased" to multiple field,
+
+                (For example to enforce a particular ordering sequence)
+
+                e.g. to filter first by the integer value...
+
+                ordering_field_aliases = {
+                    "reference": ["integer_ref", "reference"]
+                }
+
+                """
+
+                if type(alias) is str:
+                    alias = [alias]
+                elif type(alias) in [list, tuple]:
+                    pass
+                else:
+                    # Unsupported alias type
+                    continue
+
+                for a in alias:
+                    if reverse:
+                        a = '-' + a
+
+                    ordering.append(a)
+
+        return ordering

InvenTree/InvenTree/forms.py

@@ -0,0 +1,329 @@
+"""
+Helper forms which subclass Django forms to provide additional functionality
+"""
+
+# -*- coding: utf-8 -*-
+from __future__ import unicode_literals
+from urllib.parse import urlencode
+import logging
+
+from django.utils.translation import ugettext_lazy as _
+from django import forms
+from django.contrib.auth.models import User, Group
+from django.conf import settings
+from django.http import HttpResponseRedirect
+from django.urls import reverse
+
+from crispy_forms.helper import FormHelper
+from crispy_forms.layout import Layout, Field
+from crispy_forms.bootstrap import PrependedText, AppendedText, PrependedAppendedText, StrictButton, Div
+
+from allauth.account.forms import SignupForm, set_form_field_order
+from allauth.account.adapter import DefaultAccountAdapter
+from allauth.socialaccount.adapter import DefaultSocialAccountAdapter
+from allauth.exceptions import ImmediateHttpResponse
+from allauth_2fa.adapter import OTPAdapter
+from allauth_2fa.utils import user_has_valid_totp_device
+
+from part.models import PartCategory
+from common.models import InvenTreeSetting
+
+logger = logging.getLogger('inventree')
+
+
+class HelperForm(forms.ModelForm):
+    """ Provides simple integration of crispy_forms extension. """
+
+    # Custom field decorations can be specified here, per form class
+    field_prefix = {}
+    field_suffix = {}
+    field_placeholder = {}
+
+    def __init__(self, *args, **kwargs):
+        super(forms.ModelForm, self).__init__(*args, **kwargs)
+        self.helper = FormHelper()
+
+        self.helper.form_tag = False
+        self.helper.form_show_errors = True
+
+        """
+        Create a default 'layout' for this form.
+        Ref: https://django-crispy-forms.readthedocs.io/en/latest/layouts.html
+        This is required to do fancy things later (like adding PrependedText, etc).
+
+        Simply create a 'blank' layout for each available field.
+        """
+
+        self.rebuild_layout()
+
+    def is_valid(self):
+
+        valid = super(HelperForm, self).is_valid()
+
+        return valid
+
+    def rebuild_layout(self):
+
+        layouts = []
+
+        for field in self.fields:
+            prefix = self.field_prefix.get(field, None)
+            suffix = self.field_suffix.get(field, None)
+            placeholder = self.field_placeholder.get(field, '')
+
+            # Look for font-awesome icons
+            if prefix and prefix.startswith('fa-'):
+                prefix = r"<i class='fas {fa}'/>".format(fa=prefix)
+
+            if suffix and suffix.startswith('fa-'):
+                suffix = r"<i class='fas {fa}'/>".format(fa=suffix)
+
+            if prefix and suffix:
+                layouts.append(
+                    Field(
+                        PrependedAppendedText(
+                            field,
+                            prepended_text=prefix,
+                            appended_text=suffix,
+                            placeholder=placeholder
+                        )
+                    )
+                )
+
+            elif prefix:
+                layouts.append(
+                    Field(
+                        PrependedText(
+                            field,
+                            prefix,
+                            placeholder=placeholder
+                        )
+                    )
+                )
+
+            elif suffix:
+                layouts.append(
+                    Field(
+                        AppendedText(
+                            field,
+                            suffix,
+                            placeholder=placeholder
+                        )
+                    )
+                )
+
+            else:
+                layouts.append(Field(field, placeholder=placeholder))
+
+        self.helper.layout = Layout(*layouts)
+
+
+class ConfirmForm(forms.Form):
+    """ Generic confirmation form """
+
+    confirm = forms.BooleanField(
+        required=False, initial=False,
+        help_text=_("Confirm")
+    )
+
+    class Meta:
+        fields = [
+            'confirm'
+        ]
+
+
+class DeleteForm(forms.Form):
+    """ Generic deletion form which provides simple user confirmation
+    """
+
+    confirm_delete = forms.BooleanField(
+        required=False,
+        initial=False,
+        label=_('Confirm delete'),
+        help_text=_('Confirm item deletion')
+    )
+
+    class Meta:
+        fields = [
+            'confirm_delete'
+        ]
+
+
+class EditUserForm(HelperForm):
+    """ Form for editing user information
+    """
+
+    class Meta:
+        model = User
+        fields = [
+            'username',
+            'first_name',
+            'last_name',
+        ]
+
+
+class SetPasswordForm(HelperForm):
+    """ Form for setting user password
+    """
+
+    enter_password = forms.CharField(max_length=100,
+                                     min_length=8,
+                                     required=True,
+                                     initial='',
+                                     widget=forms.PasswordInput(attrs={'autocomplete': 'off'}),
+                                     label=_('Enter password'),
+                                     help_text=_('Enter new password'))
+
+    confirm_password = forms.CharField(max_length=100,
+                                       min_length=8,
+                                       required=True,
+                                       initial='',
+                                       widget=forms.PasswordInput(attrs={'autocomplete': 'off'}),
+                                       label=_('Confirm password'),
+                                       help_text=_('Confirm new password'))
+
+    class Meta:
+        model = User
+        fields = [
+            'enter_password',
+            'confirm_password'
+        ]
+
+
+class SettingCategorySelectForm(forms.ModelForm):
+    """ Form for setting category settings """
+
+    category = forms.ModelChoiceField(queryset=PartCategory.objects.all())
+
+    class Meta:
+        model = PartCategory
+        fields = [
+            'category'
+        ]
+
+    def __init__(self, *args, **kwargs):
+        super(SettingCategorySelectForm, self).__init__(*args, **kwargs)
+
+        self.helper = FormHelper()
+        # Form rendering
+        self.helper.form_show_labels = False
+        self.helper.layout = Layout(
+            Div(
+                Div(Field('category'),
+                    css_class='col-sm-6',
+                    style='width: 70%;'),
+                Div(StrictButton(_('Select Category'), css_class='btn btn-primary', type='submit'),
+                    css_class='col-sm-6',
+                    style='width: 30%; padding-left: 0;'),
+                css_class='row',
+            ),
+        )
+
+
+# override allauth
+class CustomSignupForm(SignupForm):
+    """
+    Override to use dynamic settings
+    """
+    def __init__(self, *args, **kwargs):
+        kwargs['email_required'] = InvenTreeSetting.get_setting('LOGIN_MAIL_REQUIRED')
+
+        super().__init__(*args, **kwargs)
+
+        # check for two mail fields
+        if InvenTreeSetting.get_setting('LOGIN_SIGNUP_MAIL_TWICE'):
+            self.fields["email2"] = forms.EmailField(
+                label=_("Email (again)"),
+                widget=forms.TextInput(
+                    attrs={
+                        "type": "email",
+                        "placeholder": _("Email address confirmation"),
+                    }
+                ),
+            )
+
+        # check for two password fields
+        if not InvenTreeSetting.get_setting('LOGIN_SIGNUP_PWD_TWICE'):
+            self.fields.pop("password2")
+
+        # reorder fields
+        set_form_field_order(self, ["username", "email", "email2", "password1", "password2", ])
+
+    def clean(self):
+        cleaned_data = super().clean()
+
+        # check for two mail fields
+        if InvenTreeSetting.get_setting('LOGIN_SIGNUP_MAIL_TWICE'):
+            email = cleaned_data.get("email")
+            email2 = cleaned_data.get("email2")
+            if (email and email2) and email != email2:
+                self.add_error("email2", _("You must type the same email each time."))
+
+        return cleaned_data
+
+
+class RegistratonMixin:
+    """
+    Mixin to check if registration should be enabled
+    """
+    def is_open_for_signup(self, request, *args, **kwargs):
+        if settings.EMAIL_HOST and InvenTreeSetting.get_setting('LOGIN_ENABLE_REG', True):
+            return super().is_open_for_signup(request, *args, **kwargs)
+        return False
+
+    def save_user(self, request, user, form, commit=True):
+        user = super().save_user(request, user, form)
+        start_group = InvenTreeSetting.get_setting('SIGNUP_GROUP')
+        if start_group:
+            try:
+                group = Group.objects.get(id=start_group)
+                user.groups.add(group)
+            except Group.DoesNotExist:
+                logger.error('The setting `SIGNUP_GROUP` contains an non existant group', start_group)
+        user.save()
+        return user
+
+
+class CustomAccountAdapter(RegistratonMixin, OTPAdapter, DefaultAccountAdapter):
+    """
+    Override of adapter to use dynamic settings
+    """
+    def send_mail(self, template_prefix, email, context):
+        """only send mail if backend configured"""
+        if settings.EMAIL_HOST:
+            return super().send_mail(template_prefix, email, context)
+        return False
+
+
+class CustomSocialAccountAdapter(RegistratonMixin, DefaultSocialAccountAdapter):
+    """
+    Override of adapter to use dynamic settings
+    """
+    def is_auto_signup_allowed(self, request, sociallogin):
+        if InvenTreeSetting.get_setting('LOGIN_SIGNUP_SSO_AUTO', True):
+            return super().is_auto_signup_allowed(request, sociallogin)
+        return False
+
+    # from OTPAdapter
+    def has_2fa_enabled(self, user):
+        """Returns True if the user has 2FA configured."""
+        return user_has_valid_totp_device(user)
+
+    def login(self, request, user):
+        # Require two-factor authentication if it has been configured.
+        if self.has_2fa_enabled(user):
+            # Cast to string for the case when this is not a JSON serializable
+            # object, e.g. a UUID.
+            request.session['allauth_2fa_user_id'] = str(user.id)
+
+            redirect_url = reverse('two-factor-authenticate')
+            # Add GET parameters to the URL if they exist.
+            if request.GET:
+                redirect_url += u'?' + urlencode(request.GET)
+
+            raise ImmediateHttpResponse(
+                response=HttpResponseRedirect(redirect_url)
+            )
+
+        # Otherwise defer to the original allauth adapter.
+        return super().login(request, user)

InvenTree/InvenTree/helpers.py

@@ -0,0 +1,729 @@
+"""
+Provides helper functions used throughout the InvenTree project
+"""
+
+import io
+import re
+import json
+import os.path
+from PIL import Image
+
+from decimal import Decimal, InvalidOperation
+
+from wsgiref.util import FileWrapper
+from django.http import StreamingHttpResponse
+from django.core.exceptions import ValidationError, FieldError
+from django.utils.translation import ugettext_lazy as _
+
+from django.contrib.auth.models import Permission
+
+import InvenTree.version
+
+from common.models import InvenTreeSetting
+from .settings import MEDIA_URL, STATIC_URL
+from common.settings import currency_code_default
+
+from djmoney.money import Money
+
+
+def getSetting(key, backup_value=None):
+    """
+    Shortcut for reading a setting value from the database
+    """
+
+    return InvenTreeSetting.get_setting(key, backup_value=backup_value)
+
+
+def generateTestKey(test_name):
+    """
+    Generate a test 'key' for a given test name.
+    This must not have illegal chars as it will be used for dict lookup in a template.
+
+    Tests must be named such that they will have unique keys.
+    """
+
+    key = test_name.strip().lower()
+    key = key.replace(" ", "")
+
+    # Remove any characters that cannot be used to represent a variable
+    key = re.sub(r'[^a-zA-Z0-9]', '', key)
+
+    return key
+
+
+def getMediaUrl(filename):
+    """
+    Return the qualified access path for the given file,
+    under the media directory.
+    """
+
+    return os.path.join(MEDIA_URL, str(filename))
+
+
+def getStaticUrl(filename):
+    """
+    Return the qualified access path for the given file,
+    under the static media directory.
+    """
+
+    return os.path.join(STATIC_URL, str(filename))
+
+
+def construct_absolute_url(*arg):
+    """
+    Construct (or attempt to construct) an absolute URL from a relative URL.
+
+    This is useful when (for example) sending an email to a user with a link
+    to something in the InvenTree web framework.
+
+    This requires the BASE_URL configuration option to be set!
+    """
+
+    base = str(InvenTreeSetting.get_setting('INVENTREE_BASE_URL'))
+
+    url = '/'.join(arg)
+
+    if not base:
+        return url
+
+    # Strip trailing slash from base url
+    if base.endswith('/'):
+        base = base[:-1]
+
+    if url.startswith('/'):
+        url = url[1:]
+
+    url = f"{base}/{url}"
+
+    return url
+
+
+def getBlankImage():
+    """
+    Return the qualified path for the 'blank image' placeholder.
+    """
+
+    return getStaticUrl("img/blank_image.png")
+
+
+def getBlankThumbnail():
+    """
+    Return the qualified path for the 'blank image' thumbnail placeholder.
+    """
+
+    return getStaticUrl("img/blank_image.thumbnail.png")
+
+
+def TestIfImage(img):
+    """ Test if an image file is indeed an image """
+    try:
+        Image.open(img).verify()
+        return True
+    except:
+        return False
+
+
+def TestIfImageURL(url):
+    """ Test if an image URL (or filename) looks like a valid image format.
+
+    Simply tests the extension against a set of allowed values
+    """
+    return os.path.splitext(os.path.basename(url))[-1].lower() in [
+        '.jpg', '.jpeg',
+        '.png', '.bmp',
+        '.tif', '.tiff',
+        '.webp', '.gif',
+    ]
+
+
+def str2bool(text, test=True):
+    """ Test if a string 'looks' like a boolean value.
+
+    Args:
+        text: Input text
+        test (default = True): Set which boolean value to look for
+
+    Returns:
+        True if the text looks like the selected boolean value
+    """
+    if test:
+        return str(text).lower() in ['1', 'y', 'yes', 't', 'true', 'ok', 'on', ]
+    else:
+        return str(text).lower() in ['0', 'n', 'no', 'none', 'f', 'false', 'off', ]
+
+
+def is_bool(text):
+    """
+    Determine if a string value 'looks' like a boolean.
+    """
+
+    if str2bool(text, True):
+        return True
+    elif str2bool(text, False):
+        return True
+    else:
+        return False
+
+
+def isNull(text):
+    """
+    Test if a string 'looks' like a null value.
+    This is useful for querying the API against a null key.
+
+    Args:
+        text: Input text
+
+    Returns:
+        True if the text looks like a null value
+    """
+
+    return str(text).strip().lower() in ['top', 'null', 'none', 'empty', 'false', '-1', '']
+
+
+def normalize(d):
+    """
+    Normalize a decimal number, and remove exponential formatting.
+    """
+
+    if type(d) is not Decimal:
+        d = Decimal(d)
+
+    d = d.normalize()
+
+    # Ref: https://docs.python.org/3/library/decimal.html
+    return d.quantize(Decimal(1)) if d == d.to_integral() else d.normalize()
+
+
+def increment(n):
+    """
+    Attempt to increment an integer (or a string that looks like an integer!)
+
+    e.g.
+
+    001 -> 002
+    2 -> 3
+    AB01 -> AB02
+    QQQ -> QQQ
+
+    """
+
+    value = str(n).strip()
+
+    # Ignore empty strings
+    if not value:
+        return value
+
+    pattern = r"(.*?)(\d+)?$"
+
+    result = re.search(pattern, value)
+
+    # No match!
+    if result is None:
+        return value
+
+    groups = result.groups()
+
+    # If we cannot match the regex, then simply return the provided value
+    if not len(groups) == 2:
+        return value
+
+    prefix, number = groups
+
+    # No number extracted? Simply return the prefix (without incrementing!)
+    if not number:
+        return prefix
+
+    # Record the width of the number
+    width = len(number)
+
+    try:
+        number = int(number) + 1
+        number = str(number)
+    except ValueError:
+        pass
+
+    number = number.zfill(width)
+
+    return prefix + number
+
+
+def decimal2string(d):
+    """
+    Format a Decimal number as a string,
+    stripping out any trailing zeroes or decimal points.
+    Essentially make it look like a whole number if it is one.
+
+    Args:
+        d: A python Decimal object
+
+    Returns:
+        A string representation of the input number
+    """
+
+    if type(d) is Decimal:
+        d = normalize(d)
+
+    try:
+        # Ensure that the provided string can actually be converted to a float
+        float(d)
+    except ValueError:
+        # Not a number
+        return str(d)
+
+    s = str(d)
+
+    # Return entire number if there is no decimal place
+    if '.' not in s:
+        return s
+
+    return s.rstrip("0").rstrip(".")
+
+
+def decimal2money(d, currency=None):
+    """
+    Format a Decimal number as Money
+
+    Args:
+        d: A python Decimal object
+        currency: Currency of the input amount, defaults to default currency in settings
+
+    Returns:
+        A Money object from the input(s)
+    """
+    if not currency:
+        currency = currency_code_default()
+    return Money(d, currency)
+
+
+def WrapWithQuotes(text, quote='"'):
+    """ Wrap the supplied text with quotes
+
+    Args:
+        text: Input text to wrap
+        quote: Quote character to use for wrapping (default = "")
+
+    Returns:
+        Supplied text wrapped in quote char
+    """
+
+    if not text.startswith(quote):
+        text = quote + text
+
+    if not text.endswith(quote):
+        text = text + quote
+
+    return text
+
+
+def MakeBarcode(object_name, object_pk, object_data=None, **kwargs):
+    """ Generate a string for a barcode. Adds some global InvenTree parameters.
+
+    Args:
+        object_type: string describing the object type e.g. 'StockItem'
+        object_id: ID (Primary Key) of the object in the database
+        object_url: url for JSON API detail view of the object
+        data: Python dict object containing extra datawhich will be rendered to string (must only contain stringable values)
+
+    Returns:
+        json string of the supplied data plus some other data
+    """
+    if object_data is None:
+        object_data = {}
+
+    url = kwargs.get('url', False)
+    brief = kwargs.get('brief', True)
+
+    data = {}
+
+    if url:
+        request = object_data.get('request', None)
+        item_url = object_data.get('item_url', None)
+        absolute_url = None
+
+        if request and item_url:
+            absolute_url = request.build_absolute_uri(item_url)
+            # Return URL (No JSON)
+            return absolute_url
+
+        if item_url:
+            # Return URL (No JSON)
+            return item_url
+    elif brief:
+        data[object_name] = object_pk
+    else:
+        data['tool'] = 'InvenTree'
+        data['version'] = InvenTree.version.inventreeVersion()
+        data['instance'] = InvenTree.version.inventreeInstanceName()
+
+        # Ensure PK is included
+        object_data['id'] = object_pk
+        data[object_name] = object_data
+
+    return json.dumps(data, sort_keys=True)
+
+
+def GetExportFormats():
+    """ Return a list of allowable file formats for exporting data """
+
+    return [
+        'csv',
+        'tsv',
+        'xls',
+        'xlsx',
+        'json',
+        'yaml',
+    ]
+
+
+def DownloadFile(data, filename, content_type='application/text', inline=False):
+    """
+    Create a dynamic file for the user to download.
+
+    Args:
+        data: Raw file data (string or bytes)
+        filename: Filename for the file download
+        content_type: Content type for the download
+        inline: Download "inline" or as attachment? (Default = attachment)
+
+    Return:
+        A StreamingHttpResponse object wrapping the supplied data
+    """
+
+    filename = WrapWithQuotes(filename)
+
+    if type(data) == str:
+        wrapper = FileWrapper(io.StringIO(data))
+    else:
+        wrapper = FileWrapper(io.BytesIO(data))
+
+    response = StreamingHttpResponse(wrapper, content_type=content_type)
+    response['Content-Length'] = len(data)
+
+    disposition = "inline" if inline else "attachment"
+
+    response['Content-Disposition'] = f'{disposition}; filename={filename}'
+
+    return response
+
+
+def extract_serial_numbers(serials, expected_quantity, next_number: int):
+    """ Attempt to extract serial numbers from an input string.
+    - Serial numbers must be integer values
+    - Serial numbers must be positive
+    - Serial numbers can be split by whitespace / newline / commma chars
+    - Serial numbers can be supplied as an inclusive range using hyphen char e.g. 10-20
+    - Serial numbers can be defined as ~ for getting the next available serial number
+    - Serial numbers can be supplied as <start>+ for getting all expecteded numbers starting from <start>
+    - Serial numbers can be supplied as <start>+<length> for getting <length> numbers starting from <start>
+
+    Args:
+        serials: input string with patterns
+        expected_quantity: The number of (unique) serial numbers we expect
+        next_number(int): the next possible serial number
+    """
+
+    serials = serials.strip()
+
+    # fill in the next serial number into the serial
+    if '~' in serials:
+        serials = serials.replace('~', str(next_number))
+
+    groups = re.split("[\s,]+", serials)
+
+    numbers = []
+    errors = []
+
+    # helpers
+    def number_add(n):
+        if n in numbers:
+            errors.append(_('Duplicate serial: {n}').format(n=n))
+        else:
+            numbers.append(n)
+
+    try:
+        expected_quantity = int(expected_quantity)
+    except ValueError:
+        raise ValidationError([_("Invalid quantity provided")])
+
+    if len(serials) == 0:
+        raise ValidationError([_("Empty serial number string")])
+
+    for group in groups:
+
+        group = group.strip()
+
+        # Hyphen indicates a range of numbers
+        if '-' in group:
+            items = group.split('-')
+
+            if len(items) == 2:
+                a = items[0].strip()
+                b = items[1].strip()
+
+                try:
+                    a = int(a)
+                    b = int(b)
+
+                    if a < b:
+                        for n in range(a, b + 1):
+                            number_add(n)
+                    else:
+                        errors.append(_("Invalid group: {g}").format(g=group))
+
+                except ValueError:
+                    errors.append(_("Invalid group: {g}").format(g=group))
+                    continue
+            else:
+                errors.append(_("Invalid group: {g}").format(g=group))
+
+        # plus signals either
+        # 1:  'start+':  expected number of serials, starting at start
+        # 2:  'start+number': number of serials, starting at start
+        elif '+' in group:
+            items = group.split('+')
+
+            # case 1, 2
+            if len(items) == 2:
+                start = int(items[0])
+
+                # case 2
+                if bool(items[1]):
+                    end = start + int(items[1]) + 1
+
+                # case 1
+                else:
+                    end = start + expected_quantity
+
+                for n in range(start, end):
+                    number_add(n)
+            # no case
+            else:
+                errors.append(_("Invalid group: {g}").format(g=group))
+
+        # Group should be a number
+        elif group:
+            # try conversion
+            try:
+                number = int(group)
+            except:
+                # seem like it is not a number
+                raise ValidationError(_(f"Invalid group {group}"))
+
+            number_add(number)
+
+        # No valid input group detected
+        else:
+            raise ValidationError(_(f"Invalid/no group {group}"))
+
+    if len(errors) > 0:
+        raise ValidationError(errors)
+
+    if len(numbers) == 0:
+        raise ValidationError([_("No serial numbers found")])
+
+    # The number of extracted serial numbers must match the expected quantity
+    if not expected_quantity == len(numbers):
+        raise ValidationError([_("Number of unique serial number ({s}) must match quantity ({q})").format(s=len(numbers), q=expected_quantity)])
+
+    return numbers
+
+
+def validateFilterString(value, model=None):
+    """
+    Validate that a provided filter string looks like a list of comma-separated key=value pairs
+
+    These should nominally match to a valid database filter based on the model being filtered.
+
+    e.g. "category=6, IPN=12"
+    e.g. "part__name=widget"
+
+    The ReportTemplate class uses the filter string to work out which items a given report applies to.
+    For example, an acceptance test report template might only apply to stock items with a given IPN,
+    so the string could be set to:
+
+    filters = "IPN = ACME0001"
+
+    Returns a map of key:value pairs
+    """
+
+    # Empty results map
+    results = {}
+
+    value = str(value).strip()
+
+    if not value or len(value) == 0:
+        return results
+
+    groups = value.split(',')
+
+    for group in groups:
+        group = group.strip()
+
+        pair = group.split('=')
+
+        if not len(pair) == 2:
+            raise ValidationError(
+                "Invalid group: {g}".format(g=group)
+            )
+
+        k, v = pair
+
+        k = k.strip()
+        v = v.strip()
+
+        if not k or not v:
+            raise ValidationError(
+                "Invalid group: {g}".format(g=group)
+            )
+
+        results[k] = v
+
+    # If a model is provided, verify that the provided filters can be used against it
+    if model is not None:
+        try:
+            model.objects.filter(**results)
+        except FieldError as e:
+            raise ValidationError(
+                str(e),
+            )
+
+    return results
+
+
+def addUserPermission(user, permission):
+    """
+    Shortcut function for adding a certain permission to a user.
+    """
+
+    perm = Permission.objects.get(codename=permission)
+    user.user_permissions.add(perm)
+
+
+def addUserPermissions(user, permissions):
+    """
+    Shortcut function for adding multiple permissions to a user.
+    """
+
+    for permission in permissions:
+        addUserPermission(user, permission)
+
+
+def getMigrationFileNames(app):
+    """
+    Return a list of all migration filenames for provided app
+    """
+
+    local_dir = os.path.dirname(os.path.abspath(__file__))
+
+    migration_dir = os.path.join(local_dir, '..', app, 'migrations')
+
+    files = os.listdir(migration_dir)
+
+    # Regex pattern for migration files
+    pattern = r"^[\d]+_.*\.py$"
+
+    migration_files = []
+
+    for f in files:
+        if re.match(pattern, f):
+            migration_files.append(f)
+
+    return migration_files
+
+
+def getOldestMigrationFile(app, exclude_extension=True, ignore_initial=True):
+    """
+    Return the filename associated with the oldest migration
+    """
+
+    oldest_num = -1
+    oldest_file = None
+
+    for f in getMigrationFileNames(app):
+
+        if ignore_initial and f.startswith('0001_initial'):
+            continue
+
+        num = int(f.split('_')[0])
+
+        if oldest_file is None or num < oldest_num:
+            oldest_num = num
+            oldest_file = f
+
+    if exclude_extension:
+        oldest_file = oldest_file.replace('.py', '')
+
+    return oldest_file
+
+
+def getNewestMigrationFile(app, exclude_extension=True):
+    """
+    Return the filename associated with the newest migration
+    """
+
+    newest_file = None
+    newest_num = -1
+
+    for f in getMigrationFileNames(app):
+        num = int(f.split('_')[0])
+
+        if newest_file is None or num > newest_num:
+            newest_num = num
+            newest_file = f
+
+    if exclude_extension:
+        newest_file = newest_file.replace('.py', '')
+
+    return newest_file
+
+
+def clean_decimal(number):
+    """ Clean-up decimal value """
+
+    # Check if empty
+    if number is None or number == '' or number == 0:
+        return Decimal(0)
+
+    # Convert to string and remove spaces
+    number = str(number).replace(' ', '')
+
+    # Guess what type of decimal and thousands separators are used
+    count_comma = number.count(',')
+    count_point = number.count('.')
+
+    if count_comma == 1:
+        # Comma is used as decimal separator
+        if count_point > 0:
+            # Points are used as thousands separators: remove them
+            number = number.replace('.', '')
+        # Replace decimal separator with point
+        number = number.replace(',', '.')
+    elif count_point == 1:
+        # Point is used as decimal separator
+        if count_comma > 0:
+            # Commas are used as thousands separators: remove them
+            number = number.replace(',', '')
+
+    # Convert to Decimal type
+    try:
+        clean_number = Decimal(number)
+    except InvalidOperation:
+        # Number cannot be converted to Decimal (eg. a string containing letters)
+        return Decimal(0)
+
+    return clean_number.quantize(Decimal(1)) if clean_number == clean_number.to_integral() else clean_number.normalize()
+
+
+def inheritors(cls):
+    """
+    Return all classes that are subclasses from the supplied cls
+    """
+    subcls = set()
+    work = [cls]
+    while work:
+        parent = work.pop()
+        for child in parent.__subclasses__():
+            if child not in subcls:
+                subcls.add(child)
+                work.append(child)
+    return subcls

InvenTree/InvenTree/management/commands/clean_settings.py

@@ -0,0 +1,43 @@
+"""
+Custom management command to cleanup old settings that are not defined anymore
+"""
+
+import logging
+
+from django.core.management.base import BaseCommand
+
+
+logger = logging.getLogger('inventree')
+
+
+class Command(BaseCommand):
+    """
+    Cleanup old (undefined) settings in the database
+    """
+
+    def handle(self, *args, **kwargs):
+
+        logger.info("Collecting settings")
+        from common.models import InvenTreeSetting, InvenTreeUserSetting
+
+        # general settings
+        db_settings = InvenTreeSetting.objects.all()
+        model_settings = InvenTreeSetting.SETTINGS
+
+        # check if key exist and delete if not
+        for setting in db_settings:
+            if setting.key not in model_settings:
+                setting.delete()
+                logger.info(f"deleted setting '{setting.key}'")
+
+        # user settings
+        db_settings = InvenTreeUserSetting.objects.all()
+        model_settings = InvenTreeUserSetting.SETTINGS
+
+        # check if key exist and delete if not
+        for setting in db_settings:
+            if setting.key not in model_settings:
+                setting.delete()
+                logger.info(f"deleted user setting '{setting.key}'")
+
+        logger.info("checked all settings")

InvenTree/InvenTree/management/commands/prerender.py

@@ -0,0 +1,61 @@
+"""
+Custom management command to prerender files
+"""
+
+from django.core.management.base import BaseCommand
+from django.conf import settings
+from django.template.loader import render_to_string
+from django.utils.module_loading import import_string
+from django.http.request import HttpRequest
+from django.utils.translation import override as lang_over
+
+import os
+
+
+def render_file(file_name, source, target, locales, ctx):
+    """ renders a file into all provided locales """
+    for locale in locales:
+        target_file = os.path.join(target, locale + '.' + file_name)
+        with open(target_file, 'w') as localised_file:
+            with lang_over(locale):
+                renderd = render_to_string(os.path.join(source, file_name), ctx)
+                localised_file.write(renderd)
+
+
+class Command(BaseCommand):
+    """
+    django command to prerender files
+    """
+
+    def handle(self, *args, **kwargs):
+        # static directories
+        LC_DIR = settings.LOCALE_PATHS[0]
+        SOURCE_DIR = settings.STATICFILES_I18_SRC
+        TARGET_DIR = settings.STATICFILES_I18_TRG
+
+        # ensure static directory exists
+        if not os.path.exists(TARGET_DIR):
+            os.makedirs(TARGET_DIR, exist_ok=True)
+
+        # collect locales
+        locales = {}
+        for locale in os.listdir(LC_DIR):
+            path = os.path.join(LC_DIR, locale)
+            if os.path.exists(path) and os.path.isdir(path):
+                locales[locale] = locale
+
+        # render!
+        request = HttpRequest()
+        ctx = {}
+        processors = tuple(import_string(path) for path in settings.STATFILES_I18_PROCESSORS)
+        for processor in processors:
+            ctx.update(processor(request))
+
+        for file in os.listdir(SOURCE_DIR, ):
+            path = os.path.join(SOURCE_DIR, file)
+            if os.path.exists(path) and os.path.isfile(path):
+                print(f"render {file}")
+                render_file(file, SOURCE_DIR, TARGET_DIR, locales, ctx)
+            else:
+                raise NotImplementedError('Using multi-level directories is not implemented at this point')  # TODO multilevel dir if needed
+        print(f"rendered all files in {SOURCE_DIR}")

InvenTree/InvenTree/management/commands/rebuild_models.py

@@ -0,0 +1,60 @@
+"""
+Custom management command to rebuild all MPTT models
+
+- This is crucial after importing any fixtures, etc
+"""
+
+from django.core.management.base import BaseCommand
+
+
+class Command(BaseCommand):
+    """
+    Rebuild all database models which leverage the MPTT structure.
+    """
+
+    def handle(self, *args, **kwargs):
+
+        # Part model
+        try:
+            print("Rebuilding Part objects")
+
+            from part.models import Part
+            Part.objects.rebuild()
+        except:
+            print("Error rebuilding Part objects")
+
+        # Part category
+        try:
+            print("Rebuilding PartCategory objects")
+
+            from part.models import PartCategory
+            PartCategory.objects.rebuild()
+        except:
+            print("Error rebuilding PartCategory objects")
+
+        # StockItem model
+        try:
+            print("Rebuilding StockItem objects")
+
+            from stock.models import StockItem
+            StockItem.objects.rebuild()
+        except:
+            print("Error rebuilding StockItem objects")
+
+        # StockLocation model
+        try:
+            print("Rebuilding StockLocation objects")
+
+            from stock.models import StockLocation
+            StockLocation.objects.rebuild()
+        except:
+            print("Error rebuilding StockLocation objects")
+
+        # Build model
+        try:
+            print("Rebuilding Build objects")
+
+            from build.models import Build
+            Build.objects.rebuild()
+        except:
+            print("Error rebuilding Build objects")

InvenTree/InvenTree/management/commands/rebuild_thumbnails.py

@@ -0,0 +1,70 @@
+"""
+Custom management command to rebuild thumbnail images
+
+- May be required after importing a new dataset, for example
+"""
+
+import os
+import logging
+
+from PIL import UnidentifiedImageError
+
+from django.core.management.base import BaseCommand
+from django.conf import settings
+from django.db.utils import OperationalError, ProgrammingError
+
+from company.models import Company
+from part.models import Part
+
+
+logger = logging.getLogger('inventree')
+
+
+class Command(BaseCommand):
+    """
+    Rebuild all thumbnail images
+    """
+
+    def rebuild_thumbnail(self, model):
+        """
+        Rebuild the thumbnail specified by the "image" field of the provided model
+        """
+
+        if not model.image:
+            return
+
+        img = model.image
+        url = img.thumbnail.name
+        loc = os.path.join(settings.MEDIA_ROOT, url)
+
+        if not os.path.exists(loc):
+            logger.info(f"Generating thumbnail image for '{img}'")
+
+            try:
+                model.image.render_variations(replace=False)
+            except FileNotFoundError:
+                logger.error(f"ERROR: Image file '{img}' is missing")
+            except UnidentifiedImageError:
+                logger.error(f"ERROR: Image file '{img}' is not a valid image")
+
+    def handle(self, *args, **kwargs):
+
+        logger.setLevel(logging.INFO)
+
+        logger.info("Rebuilding Part thumbnails")
+
+        for part in Part.objects.exclude(image=None):
+            try:
+                self.rebuild_thumbnail(part)
+            except (OperationalError, ProgrammingError):
+                logger.error("ERROR: Database read error.")
+                break
+
+        logger.info("Rebuilding Company thumbnails")
+
+        for company in Company.objects.exclude(image=None):
+            try:
+                self.rebuild_thumbnail(company)
+            except (OperationalError, ProgrammingError):
+                logger.error("ERROR: abase read error.")
+                break

InvenTree/InvenTree/management/commands/remove_mfa.py

@@ -0,0 +1,36 @@
+"""
+Custom management command to remove MFA for a user
+"""
+
+from django.core.management.base import BaseCommand
+from django.contrib.auth import get_user_model
+
+
+class Command(BaseCommand):
+    """
+    Remove MFA for a user
+    """
+
+    def add_arguments(self, parser):
+        parser.add_argument('mail', type=str)
+
+    def handle(self, *args, **kwargs):
+
+        # general settings
+        mail = kwargs.get('mail')
+        if not mail:
+            raise KeyError('A mail is required')
+        user = get_user_model()
+        mfa_user = [*set(user.objects.filter(email=mail) | user.objects.filter(emailaddress__email=mail))]
+
+        if len(mfa_user) == 0:
+            print('No user with this mail associated')
+        elif len(mfa_user) > 1:
+            print('More than one user found with this mail')
+        else:
+            # and clean out all MFA methods
+            # backup codes
+            mfa_user[0].staticdevice_set.all().delete()
+            # TOTP tokens
+            mfa_user[0].totpdevice_set.all().delete()
+            print(f'Removed all MFA methods for user {str(mfa_user[0])}')

InvenTree/InvenTree/management/commands/wait_for_db.py

@@ -0,0 +1,42 @@
+"""
+Custom management command, wait for the database to be ready!
+"""
+
+from django.core.management.base import BaseCommand
+
+from django.db import connection
+from django.db.utils import OperationalError, ImproperlyConfigured
+
+import time
+
+
+class Command(BaseCommand):
+    """
+    django command to pause execution until the database is ready
+    """
+
+    def handle(self, *args, **kwargs):
+
+        self.stdout.write("Waiting for database...")
+
+        connected = False
+
+        while not connected:
+
+            time.sleep(5)
+
+            try:
+                connection.ensure_connection()
+
+                connected = True
+
+            except OperationalError as e:
+                self.stdout.write(f"Could not connect to database: {e}")
+            except ImproperlyConfigured as e:
+                self.stdout.write(f"Improperly configured: {e}")
+            else:
+                if not connection.is_usable():
+                    self.stdout.write("Database configuration is not usable")
+
+            if connected:
+                self.stdout.write("Database connection sucessful!")

InvenTree/InvenTree/metadata.py

@@ -0,0 +1,262 @@
+# -*- coding: utf-8 -*-
+
+from __future__ import unicode_literals
+
+import logging
+
+from rest_framework import serializers
+from rest_framework.metadata import SimpleMetadata
+from rest_framework.utils import model_meta
+from rest_framework.fields import empty
+
+import users.models
+
+
+logger = logging.getLogger('inventree')
+
+
+class InvenTreeMetadata(SimpleMetadata):
+    """
+    Custom metadata class for the DRF API.
+
+    This custom metadata class imits the available "actions",
+    based on the user's role permissions.
+
+    Thus when a client send an OPTIONS request to an API endpoint,
+    it will only receive a list of actions which it is allowed to perform!
+
+    Additionally, we include some extra information about database models,
+    so we can perform lookup for ForeignKey related fields.
+
+    """
+
+    def determine_metadata(self, request, view):
+
+        self.request = request
+        self.view = view
+
+        metadata = super().determine_metadata(request, view)
+
+        user = request.user
+
+        if user is None:
+            # No actions for you!
+            metadata['actions'] = {}
+            return metadata
+
+        try:
+            # Extract the model name associated with the view
+            self.model = view.serializer_class.Meta.model
+
+            # Construct the 'table name' from the model
+            app_label = self.model._meta.app_label
+            tbl_label = self.model._meta.model_name
+
+            metadata['model'] = tbl_label
+
+            table = f"{app_label}_{tbl_label}"
+
+            actions = metadata.get('actions', None)
+
+            if actions is not None:
+
+                check = users.models.RuleSet.check_table_permission
+
+                # Map the request method to a permission type
+                rolemap = {
+                    'POST': 'add',
+                    'PUT': 'change',
+                    'PATCH': 'change',
+                    'DELETE': 'delete',
+                }
+
+                # Remove any HTTP methods that the user does not have permission for
+                for method, permission in rolemap.items():
+
+                    result = check(user, table, permission)
+
+                    if method in actions and not result:
+                        del actions[method]
+
+                # Add a 'DELETE' action if we are allowed to delete
+                if 'DELETE' in view.allowed_methods and check(user, table, 'delete'):
+                    actions['DELETE'] = True
+
+                # Add a 'VIEW' action if we are allowed to view
+                if 'GET' in view.allowed_methods and check(user, table, 'view'):
+                    actions['GET'] = True
+
+        except AttributeError:
+            # We will assume that if the serializer class does *not* have a Meta
+            # then we don't need a permission
+            pass
+
+        return metadata
+
+    def get_serializer_info(self, serializer):
+        """
+        Override get_serializer_info so that we can add 'default' values
+        to any fields whose Meta.model specifies a default value
+        """
+
+        serializer_info = super().get_serializer_info(serializer)
+
+        model_class = None
+
+        try:
+            model_class = serializer.Meta.model
+
+            model_fields = model_meta.get_field_info(model_class)
+
+            model_default_func = getattr(model_class, 'api_defaults', None)
+
+            if model_default_func:
+                model_default_values = model_class.api_defaults(self.request)
+            else:
+                model_default_values = {}
+
+            # Iterate through simple fields
+            for name, field in model_fields.fields.items():
+
+                if name in serializer_info.keys():
+
+                    if field.has_default():
+
+                        default = field.default
+
+                        if callable(default):
+                            try:
+                                default = default()
+                            except:
+                                continue
+
+                        serializer_info[name]['default'] = default
+
+                    elif name in model_default_values:
+                        serializer_info[name]['default'] = model_default_values[name]
+
+                    # Attributes to copy from the model to the field (if they don't exist)
+                    attributes = ['help_text']
+
+                    for attr in attributes:
+                        if attr not in serializer_info[name]:
+
+                            if hasattr(field, attr):
+                                serializer_info[name][attr] = getattr(field, attr)
+
+            # Iterate through relations
+            for name, relation in model_fields.relations.items():
+
+                if name not in serializer_info.keys():
+                    # Skip relation not defined in serializer
+                    continue
+
+                if relation.reverse:
+                    # Ignore reverse relations
+                    continue
+
+                # Extract and provide the "limit_choices_to" filters
+                # This is used to automatically filter AJAX requests
+                serializer_info[name]['filters'] = relation.model_field.get_limit_choices_to()
+
+                if 'help_text' not in serializer_info[name] and hasattr(relation.model_field, 'help_text'):
+                    serializer_info[name]['help_text'] = relation.model_field.help_text
+
+                if name in model_default_values:
+                    serializer_info[name]['default'] = model_default_values[name]
+
+        except AttributeError:
+            pass
+
+        # Try to extract 'instance' information
+        instance = None
+
+        # Extract extra information if an instance is available
+        if hasattr(serializer, 'instance'):
+            instance = serializer.instance
+
+        if instance is None and model_class is not None:
+            # Attempt to find the instance based on kwargs lookup
+            kwargs = getattr(self.view, 'kwargs', None)
+
+            if kwargs:
+                pk = None
+
+                for field in ['pk', 'id', 'PK', 'ID']:
+                    if field in kwargs:
+                        pk = kwargs[field]
+                        break
+
+                if pk is not None:
+                    try:
+                        instance = model_class.objects.get(pk=pk)
+                    except (ValueError, model_class.DoesNotExist):
+                        pass
+
+        if instance is not None:
+            """
+            If there is an instance associated with this API View,
+            introspect that instance to find any specific API info.
+            """
+
+            if hasattr(instance, 'api_instance_filters'):
+
+                instance_filters = instance.api_instance_filters()
+
+                for field_name, field_filters in instance_filters.items():
+
+                    if field_name not in serializer_info.keys():
+                        # The field might be missing, but is added later on
+                        # This function seems to get called multiple times?
+                        continue
+
+                    if 'instance_filters' not in serializer_info[field_name].keys():
+                        serializer_info[field_name]['instance_filters'] = {}
+
+                    for key, value in field_filters.items():
+                        serializer_info[field_name]['instance_filters'][key] = value
+
+        return serializer_info
+
+    def get_field_info(self, field):
+        """
+        Given an instance of a serializer field, return a dictionary
+        of metadata about it.
+
+        We take the regular DRF metadata and add our own unique flavor
+        """
+
+        # Run super method first
+        field_info = super().get_field_info(field)
+
+        # If a default value is specified for the serializer field, add it!
+        if 'default' not in field_info and not field.default == empty:
+            field_info['default'] = field.get_default()
+
+        # Force non-nullable fields to read as "required"
+        # (even if there is a default value!)
+        if not field.allow_null and not (hasattr(field, 'allow_blank') and field.allow_blank):
+            field_info['required'] = True
+
+        # Introspect writable related fields
+        if field_info['type'] == 'field' and not field_info['read_only']:
+
+            # If the field is a PrimaryKeyRelatedField, we can extract the model from the queryset
+            if isinstance(field, serializers.PrimaryKeyRelatedField):
+                model = field.queryset.model
+            else:
+                logger.debug("Could not extract model for:", field_info['label'], '->', field)
+                model = None
+
+            if model:
+                # Mark this field as "related", and point to the URL where we can get the data!
+                field_info['type'] = 'related field'
+                field_info['model'] = model._meta.model_name
+
+                # Special case for 'user' model
+                if field_info['model'] == 'user':
+                    field_info['api_url'] = '/api/user/'
+                else:
+                    field_info['api_url'] = model.get_api_url()
+
+        return field_info

InvenTree/InvenTree/middleware.py

@@ -0,0 +1,178 @@
+from django.shortcuts import HttpResponseRedirect
+from django.urls import reverse_lazy, Resolver404
+from django.db import connection
+from django.shortcuts import redirect
+from django.conf.urls import include, url
+import logging
+import time
+import operator
+
+from rest_framework.authtoken.models import Token
+from allauth_2fa.middleware import BaseRequire2FAMiddleware, AllauthTwoFactorMiddleware
+
+from InvenTree.urls import frontendpatterns
+from common.models import InvenTreeSetting
+
+
+logger = logging.getLogger("inventree")
+
+
+class AuthRequiredMiddleware(object):
+    def __init__(self, get_response):
+        self.get_response = get_response
+
+    def __call__(self, request):
+        # Code to be executed for each request before
+        # the view (and later middleware) are called.
+
+        assert hasattr(request, 'user')
+
+        # API requests are handled by the DRF library
+        if request.path_info.startswith('/api/'):
+            return self.get_response(request)
+
+        if not request.user.is_authenticated:
+            """
+            Normally, a web-based session would use csrftoken based authentication.
+            However when running an external application (e.g. the InvenTree app or Python library),
+            we must validate the user token manually.
+            """
+
+            authorized = False
+
+            # Allow static files to be accessed without auth
+            # Important for e.g. login page
+            if request.path_info.startswith('/static/'):
+                authorized = True
+
+            # Unauthorized users can access the login page
+            elif request.path_info.startswith('/accounts/'):
+                authorized = True
+
+            elif 'Authorization' in request.headers.keys() or 'authorization' in request.headers.keys():
+                auth = request.headers.get('Authorization', request.headers.get('authorization')).strip()
+
+                if auth.lower().startswith('token') and len(auth.split()) == 2:
+                    token_key = auth.split()[1]
+
+                    # Does the provided token match a valid user?
+                    try:
+                        token = Token.objects.get(key=token_key)
+
+                        # Provide the user information to the request
+                        request.user = token.user
+                        authorized = True
+
+                    except Token.DoesNotExist:
+                        logger.warning(f"Access denied for unknown token {token_key}")
+
+            # No authorization was found for the request
+            if not authorized:
+                # A logout request will redirect the user to the login screen
+                if request.path_info == reverse_lazy('account_logout'):
+                    return HttpResponseRedirect(reverse_lazy('account_login'))
+
+                path = request.path_info
+
+                # List of URL endpoints we *do not* want to redirect to
+                urls = [
+                    reverse_lazy('account_login'),
+                    reverse_lazy('account_logout'),
+                    reverse_lazy('admin:login'),
+                    reverse_lazy('admin:logout'),
+                ]
+
+                if path not in urls and not path.startswith('/api/'):
+                    # Save the 'next' parameter to pass through to the login view
+
+                    return redirect('%s?next=%s' % (reverse_lazy('account_login'), request.path))
+
+        response = self.get_response(request)
+
+        return response
+
+
+class QueryCountMiddleware(object):
+    """
+    This middleware will log the number of queries run
+    and the total time taken for each request (with a
+    status code of 200). It does not currently support
+    multi-db setups.
+
+    To enable this middleware, set 'log_queries: True' in the local InvenTree config file.
+
+    Reference: https://www.dabapps.com/blog/logging-sql-queries-django-13/
+
+    Note: 2020-08-15 - This is no longer used, instead we now rely on the django-debug-toolbar addon
+    """
+
+    def __init__(self, get_response):
+        self.get_response = get_response
+
+    def __call__(self, request):
+
+        t_start = time.time()
+        response = self.get_response(request)
+        t_stop = time.time()
+
+        if response.status_code == 200:
+            total_time = 0
+
+            if len(connection.queries) > 0:
+
+                queries = {}
+
+                for query in connection.queries:
+                    query_time = query.get('time')
+
+                    sql = query.get('sql').split('.')[0]
+
+                    if sql in queries:
+                        queries[sql] += 1
+                    else:
+                        queries[sql] = 1
+
+                    if query_time is None:
+                        # django-debug-toolbar monkeypatches the connection
+                        # cursor wrapper and adds extra information in each
+                        # item in connection.queries. The query time is stored
+                        # under the key "duration" rather than "time" and is
+                        # in milliseconds, not seconds.
+                        query_time = float(query.get('duration', 0))
+
+                    total_time += float(query_time)
+
+                logger.debug('{n} queries run, {a:.3f}s / {b:.3f}s'.format(
+                    n=len(connection.queries),
+                    a=total_time,
+                    b=(t_stop - t_start)))
+
+                for x in sorted(queries.items(), key=operator.itemgetter(1), reverse=True):
+                    print(x[0], ':', x[1])
+
+        return response
+
+
+url_matcher = url('', include(frontendpatterns))
+
+
+class Check2FAMiddleware(BaseRequire2FAMiddleware):
+    """check if user is required to have MFA enabled"""
+    def require_2fa(self, request):
+        # Superusers are require to have 2FA.
+        try:
+            if url_matcher.resolve(request.path[1:]):
+                return InvenTreeSetting.get_setting('LOGIN_ENFORCE_MFA')
+        except Resolver404:
+            pass
+        return False
+
+
+class CustomAllauthTwoFactorMiddleware(AllauthTwoFactorMiddleware):
+    """This function ensures only frontend code triggers the MFA auth cycle"""
+    def process_request(self, request):
+        try:
+            if not url_matcher.resolve(request.path[1:]):
+                super().process_request(request)
+        except Resolver404:
+            pass

InvenTree/InvenTree/models.py

@@ -0,0 +1,457 @@
+"""
+Generic models which provide extra functionality over base Django model types.
+"""
+
+from __future__ import unicode_literals
+
+import re
+import os
+import logging
+
+from django.db import models
+from django.conf import settings
+from django.contrib.auth.models import User
+from django.contrib.contenttypes.models import ContentType
+from django.utils.translation import gettext_lazy as _
+from django.core.exceptions import ValidationError
+
+from django.db.models.signals import pre_delete
+from django.dispatch import receiver
+
+from mptt.models import MPTTModel, TreeForeignKey
+from mptt.exceptions import InvalidMove
+
+from InvenTree.fields import InvenTreeURLField
+from InvenTree.validators import validate_tree_name
+
+
+logger = logging.getLogger('inventree')
+
+
+def rename_attachment(instance, filename):
+    """
+    Function for renaming an attachment file.
+    The subdirectory for the uploaded file is determined by the implementing class.
+
+        Args:
+        instance: Instance of a PartAttachment object
+        filename: name of uploaded file
+
+    Returns:
+        path to store file, format: '<subdir>/<id>/filename'
+    """
+
+    # Construct a path to store a file attachment for a given model type
+    return os.path.join(instance.getSubdir(), filename)
+
+
+class DataImportMixin(object):
+    """
+    Model mixin class which provides support for 'data import' functionality.
+
+    Models which implement this mixin should provide information on the fields available for import
+    """
+
+    # Define a map of fields avaialble for import
+    IMPORT_FIELDS = {}
+
+    @classmethod
+    def get_import_fields(cls):
+        """
+        Return all available import fields
+
+        Where information on a particular field is not explicitly provided,
+        introspect the base model to (attempt to) find that information.
+
+        """
+        fields = cls.IMPORT_FIELDS
+
+        for name, field in fields.items():
+
+            # Attempt to extract base field information from the model
+            base_field = None
+
+            for f in cls._meta.fields:
+                if f.name == name:
+                    base_field = f
+                    break
+
+            if base_field:
+                if 'label' not in field:
+                    field['label'] = base_field.verbose_name
+
+                if 'help_text' not in field:
+                    field['help_text'] = base_field.help_text
+
+            fields[name] = field
+
+        return fields
+
+    @classmethod
+    def get_required_import_fields(cls):
+        """ Return all *required* import fields """
+        fields = {}
+
+        for name, field in cls.get_import_fields().items():
+            required = field.get('required', False)
+
+            if required:
+                fields[name] = field
+
+        return fields
+
+
+class ReferenceIndexingMixin(models.Model):
+    """
+    A mixin for keeping track of numerical copies of the "reference" field.
+
+    !!DANGER!! always add `ReferenceIndexingSerializerMixin`to all your models serializers to
+    ensure the reference field is not too big
+
+    Here, we attempt to convert a "reference" field value (char) to an integer,
+    for performing fast natural sorting.
+
+    This requires extra database space (due to the extra table column),
+    but is required as not all supported database backends provide equivalent casting.
+
+    This mixin adds a field named 'reference_int'.
+
+    - If the 'reference' field can be cast to an integer, it is stored here
+    - If the 'reference' field *starts* with an integer, it is stored here
+    - Otherwise, we store zero
+    """
+
+    class Meta:
+        abstract = True
+
+    def rebuild_reference_field(self):
+
+        reference = getattr(self, 'reference', '')
+
+        self.reference_int = extract_int(reference)
+
+    reference_int = models.BigIntegerField(default=0)
+
+
+def extract_int(reference, clip=0x7fffffff):
+    # Default value if we cannot convert to an integer
+    ref_int = 0
+
+    # Look at the start of the string - can it be "integerized"?
+    result = re.match(r"^(\d+)", reference)
+
+    if result and len(result.groups()) == 1:
+        ref = result.groups()[0]
+        try:
+            ref_int = int(ref)
+        except:
+            ref_int = 0
+
+    # Ensure that the returned values are within the range that can be stored in an IntegerField
+    # Note: This will result in large values being "clipped"
+    if clip is not None:
+        if ref_int > clip:
+            ref_int = clip
+        elif ref_int < -clip:
+            ref_int = -clip
+
+    return ref_int
+
+
+class InvenTreeAttachment(models.Model):
+    """ Provides an abstracted class for managing file attachments.
+
+    An attachment can be either an uploaded file, or an external URL
+
+    Attributes:
+        attachment: File
+        comment: String descriptor for the attachment
+        user: User associated with file upload
+        upload_date: Date the file was uploaded
+    """
+
+    def getSubdir(self):
+        """
+        Return the subdirectory under which attachments should be stored.
+        Note: Re-implement this for each subclass of InvenTreeAttachment
+        """
+
+        return "attachments"
+
+    def save(self, *args, **kwargs):
+        # Either 'attachment' or 'link' must be specified!
+        if not self.attachment and not self.link:
+            raise ValidationError({
+                'attachment': _('Missing file'),
+                'link': _('Missing external link'),
+            })
+
+        super().save(*args, **kwargs)
+
+    def __str__(self):
+        if self.attachment is not None:
+            return os.path.basename(self.attachment.name)
+        else:
+            return str(self.link)
+
+    attachment = models.FileField(upload_to=rename_attachment, verbose_name=_('Attachment'),
+                                  help_text=_('Select file to attach'),
+                                  blank=True, null=True
+                                  )
+
+    link = InvenTreeURLField(
+        blank=True, null=True,
+        verbose_name=_('Link'),
+        help_text=_('Link to external URL')
+    )
+
+    comment = models.CharField(blank=True, max_length=100, verbose_name=_('Comment'), help_text=_('File comment'))
+
+    user = models.ForeignKey(
+        User,
+        on_delete=models.SET_NULL,
+        blank=True, null=True,
+        verbose_name=_('User'),
+        help_text=_('User'),
+    )
+
+    upload_date = models.DateField(auto_now_add=True, null=True, blank=True, verbose_name=_('upload date'))
+
+    @property
+    def basename(self):
+        if self.attachment:
+            return os.path.basename(self.attachment.name)
+        else:
+            return None
+
+    @basename.setter
+    def basename(self, fn):
+        """
+        Function to rename the attachment file.
+
+        - Filename cannot be empty
+        - Filename cannot contain illegal characters
+        - Filename must specify an extension
+        - Filename cannot match an existing file
+        """
+
+        fn = fn.strip()
+
+        if len(fn) == 0:
+            raise ValidationError(_('Filename must not be empty'))
+
+        attachment_dir = os.path.join(
+            settings.MEDIA_ROOT,
+            self.getSubdir()
+        )
+
+        old_file = os.path.join(
+            settings.MEDIA_ROOT,
+            self.attachment.name
+        )
+
+        new_file = os.path.join(
+            settings.MEDIA_ROOT,
+            self.getSubdir(),
+            fn
+        )
+
+        new_file = os.path.abspath(new_file)
+
+        # Check that there are no directory tricks going on...
+        if not os.path.dirname(new_file) == attachment_dir:
+            logger.error(f"Attempted to rename attachment outside valid directory: '{new_file}'")
+            raise ValidationError(_("Invalid attachment directory"))
+
+        # Ignore further checks if the filename is not actually being renamed
+        if new_file == old_file:
+            return
+
+        forbidden = ["'", '"', "#", "@", "!", "&", "^", "<", ">", ":", ";", "/", "\\", "|", "?", "*", "%", "~", "`"]
+
+        for c in forbidden:
+            if c in fn:
+                raise ValidationError(_(f"Filename contains illegal character '{c}'"))
+
+        if len(fn.split('.')) < 2:
+            raise ValidationError(_("Filename missing extension"))
+
+        if not os.path.exists(old_file):
+            logger.error(f"Trying to rename attachment '{old_file}' which does not exist")
+            return
+
+        if os.path.exists(new_file):
+            raise ValidationError(_("Attachment with this filename already exists"))
+
+        try:
+            os.rename(old_file, new_file)
+            self.attachment.name = os.path.join(self.getSubdir(), fn)
+            self.save()
+        except:
+            raise ValidationError(_("Error renaming file"))
+
+    class Meta:
+        abstract = True
+
+
+class InvenTreeTree(MPTTModel):
+    """ Provides an abstracted self-referencing tree model for data categories.
+
+    - Each Category has one parent Category, which can be blank (for a top-level Category).
+    - Each Category can have zero-or-more child Categor(y/ies)
+
+    Attributes:
+        name: brief name
+        description: longer form description
+        parent: The item immediately above this one. An item with a null parent is a top-level item
+    """
+
+    def api_instance_filters(self):
+        """
+        Instance filters for InvenTreeTree models
+        """
+
+        return {
+            'parent': {
+                'exclude_tree': self.pk,
+            }
+        }
+
+    def save(self, *args, **kwargs):
+
+        try:
+            super().save(*args, **kwargs)
+        except InvalidMove:
+            raise ValidationError({
+                'parent': _("Invalid choice"),
+            })
+
+    class Meta:
+        abstract = True
+
+        # Names must be unique at any given level in the tree
+        unique_together = ('name', 'parent')
+
+    class MPTTMeta:
+        order_insertion_by = ['name']
+
+    name = models.CharField(
+        blank=False,
+        max_length=100,
+        validators=[validate_tree_name],
+        verbose_name=_("Name"),
+        help_text=_("Name"),
+    )
+
+    description = models.CharField(
+        blank=True,
+        max_length=250,
+        verbose_name=_("Description"),
+        help_text=_("Description (optional)")
+    )
+
+    # When a category is deleted, graft the children onto its parent
+    parent = TreeForeignKey('self',
+                            on_delete=models.DO_NOTHING,
+                            blank=True,
+                            null=True,
+                            verbose_name=_("parent"),
+                            related_name='children')
+
+    @property
+    def item_count(self):
+        """ Return the number of items which exist *under* this node in the tree.
+
+        Here an 'item' is considered to be the 'leaf' at the end of each branch,
+        and the exact nature here will depend on the class implementation.
+
+        The default implementation returns zero
+        """
+        return 0
+
+    def getUniqueParents(self):
+        """ Return a flat set of all parent items that exist above this node.
+        If any parents are repeated (which would be very bad!), the process is halted
+        """
+
+        return self.get_ancestors()
+
+    def getUniqueChildren(self, include_self=True):
+        """ Return a flat set of all child items that exist under this node.
+        If any child items are repeated, the repetitions are omitted.
+        """
+
+        return self.get_descendants(include_self=include_self)
+
+    @property
+    def has_children(self):
+        """ True if there are any children under this item """
+        return self.getUniqueChildren(include_self=False).count() > 0
+
+    def getAcceptableParents(self):
+        """ Returns a list of acceptable parent items within this model
+        Acceptable parents are ones which are not underneath this item.
+        Setting the parent of an item to its own child results in recursion.
+        """
+
+        contents = ContentType.objects.get_for_model(type(self))
+
+        available = contents.get_all_objects_for_this_type()
+
+        # List of child IDs
+        childs = self.getUniqueChildren()
+
+        acceptable = [None]
+
+        for a in available:
+            if a.id not in childs:
+                acceptable.append(a)
+
+        return acceptable
+
+    @property
+    def parentpath(self):
+        """ Get the parent path of this category
+
+        Returns:
+            List of category names from the top level to the parent of this category
+        """
+
+        return [a for a in self.get_ancestors()]
+
+    @property
+    def path(self):
+        """ Get the complete part of this category.
+
+        e.g. ["Top", "Second", "Third", "This"]
+
+        Returns:
+            List of category names from the top level to this category
+        """
+        return self.parentpath + [self]
+
+    @property
+    def pathstring(self):
+        """ Get a string representation for the path of this item.
+
+        e.g. "Top/Second/Third/This"
+        """
+        return '/'.join([item.name for item in self.path])
+
+    def __str__(self):
+        """ String representation of a category is the full path to that category """
+
+        return "{path} - {desc}".format(path=self.pathstring, desc=self.description)
+
+
+@receiver(pre_delete, sender=InvenTreeTree, dispatch_uid='tree_pre_delete_log')
+def before_delete_tree_item(sender, instance, using, **kwargs):
+    """ Receives pre_delete signal from InvenTreeTree object.
+
+    Before an item is deleted, update each child object to point to the parent of the object being deleted.
+    """
+
+    # Update each tree item below this one
+    for child in instance.children.all():
+        child.parent = instance.parent
+        child.save()

InvenTree/InvenTree/permissions.py

@@ -0,0 +1,72 @@
+# -*- coding: utf-8 -*-
+from __future__ import unicode_literals
+
+from rest_framework import permissions
+
+import users.models
+
+
+class RolePermission(permissions.BasePermission):
+    """
+    Role mixin for API endpoints, allowing us to specify the user "role"
+    which is required for certain operations.
+
+    Each endpoint can have one or more of the following actions:
+    - GET
+    - POST
+    - PUT
+    - PATCH
+    - DELETE
+
+    Specify the required "role" using the role_required attribute.
+
+    e.g.
+
+    role_required = "part"
+
+    The RoleMixin class will then determine if the user has the required permission
+    to perform the specified action.
+
+    For example, a DELETE action will be rejected unless the user has the "part.remove" permission
+
+    """
+
+    def has_permission(self, request, view):
+        """
+        Determine if the current user has the specified permissions
+        """
+
+        user = request.user
+
+        # Superuser can do it all
+        if user.is_superuser:
+            return True
+
+        # Map the request method to a permission type
+        rolemap = {
+            'GET': 'view',
+            'OPTIONS': 'view',
+            'POST': 'add',
+            'PUT': 'change',
+            'PATCH': 'change',
+            'DELETE': 'delete',
+        }
+
+        permission = rolemap[request.method]
+
+        try:
+            # Extract the model name associated with this request
+            model = view.serializer_class.Meta.model
+
+            app_label = model._meta.app_label
+            model_name = model._meta.model_name
+
+            table = f"{app_label}_{model_name}"
+        except AttributeError:
+            # We will assume that if the serializer class does *not* have a Meta,
+            # then we don't need a permission
+            return True
+
+        result = users.models.RuleSet.check_table_permission(user, table, permission)
+
+        return result

InvenTree/InvenTree/ready.py

@@ -0,0 +1,56 @@
+import sys
+
+
+def isInTestMode():
+    """
+    Returns True if the database is in testing mode
+    """
+
+    return 'test' in sys.argv
+
+
+def isImportingData():
+    """
+    Returns True if the database is currently importing data,
+    e.g. 'loaddata' command is performed
+    """
+
+    return 'loaddata' in sys.argv
+
+
+def canAppAccessDatabase(allow_test=False):
+    """
+    Returns True if the apps.py file can access database records.
+
+    There are some circumstances where we don't want the ready function in apps.py
+    to touch the database
+    """
+
+    # If any of the following management commands are being executed,
+    # prevent custom "on load" code from running!
+    excluded_commands = [
+        'flush',
+        'loaddata',
+        'dumpdata',
+        'makemigrations',
+        'migrate',
+        'check',
+        'shell',
+        'createsuperuser',
+        'wait_for_db',
+        'prerender',
+        'rebuild',
+        'collectstatic',
+        'makemessages',
+        'compilemessages',
+    ]
+
+    if not allow_test:
+        # Override for testing mode?
+        excluded_commands.append('test')
+
+    for cmd in excluded_commands:
+        if cmd in sys.argv:
+            return False
+
+    return True

InvenTree/InvenTree/serializers.py

@@ -0,0 +1,640 @@
+"""
+Serializers used in various InvenTree apps
+"""
+
+# -*- coding: utf-8 -*-
+from __future__ import unicode_literals
+
+import os
+import tablib
+
+from decimal import Decimal
+
+from collections import OrderedDict
+
+from django.conf import settings
+from django.contrib.auth.models import User
+from django.core.exceptions import ValidationError as DjangoValidationError
+from django.utils.translation import ugettext_lazy as _
+from django.db import models
+
+from djmoney.contrib.django_rest_framework.fields import MoneyField
+from djmoney.money import Money
+from djmoney.utils import MONEY_CLASSES, get_currency_field_name
+
+from rest_framework import serializers
+from rest_framework.utils import model_meta
+from rest_framework.fields import empty
+from rest_framework.exceptions import ValidationError
+from rest_framework.serializers import DecimalField
+
+from .models import extract_int
+
+
+class InvenTreeMoneySerializer(MoneyField):
+    """
+    Custom serializer for 'MoneyField',
+    which ensures that passed values are numerically valid
+
+    Ref: https://github.com/django-money/django-money/blob/master/djmoney/contrib/django_rest_framework/fields.py
+    """
+
+    def __init__(self, *args, **kwargs):
+
+        kwargs["max_digits"] = kwargs.get("max_digits", 19)
+        kwargs["decimal_places"] = kwargs.get("decimal_places", 4)
+
+        super().__init__(*args, **kwargs)
+
+    def get_value(self, data):
+        """
+        Test that the returned amount is a valid Decimal
+        """
+
+        amount = super(DecimalField, self).get_value(data)
+
+        # Convert an empty string to None
+        if len(str(amount).strip()) == 0:
+            amount = None
+
+        try:
+            if amount is not None and amount is not empty:
+                amount = Decimal(amount)
+        except:
+            raise ValidationError({
+                self.field_name: [_("Must be a valid number")],
+            })
+
+        currency = data.get(get_currency_field_name(self.field_name), self.default_currency)
+
+        if currency and amount is not None and not isinstance(amount, MONEY_CLASSES) and amount is not empty:
+            return Money(amount, currency)
+
+        return amount
+
+
+class UserSerializer(serializers.ModelSerializer):
+    """ Serializer for User - provides all fields """
+
+    class Meta:
+        model = User
+        fields = 'all'
+
+
+class UserSerializerBrief(serializers.ModelSerializer):
+    """ Serializer for User - provides limited information """
+
+    class Meta:
+        model = User
+        fields = [
+            'pk',
+            'username',
+        ]
+
+
+class InvenTreeModelSerializer(serializers.ModelSerializer):
+    """
+    Inherits the standard Django ModelSerializer class,
+    but also ensures that the underlying model class data are checked on validation.
+    """
+
+    def __init__(self, instance=None, data=empty, **kwargs):
+        """
+        Custom __init__ routine to ensure that *default* values (as specified in the ORM)
+        are used by the DRF serializers, *if* the values are not provided by the user.
+        """
+
+        # If instance is None, we are creating a new instance
+        if instance is None and data is not empty:
+
+            if data is None:
+                data = OrderedDict()
+            else:
+                new_data = OrderedDict()
+                new_data.update(data)
+
+                data = new_data
+
+            # Add missing fields which have default values
+            ModelClass = self.Meta.model
+
+            fields = model_meta.get_field_info(ModelClass)
+
+            for field_name, field in fields.fields.items():
+
+                """
+                Update the field IF (and ONLY IF):
+                - The field has a specified default value
+                - The field does not already have a value set
+                """
+                if field.has_default() and field_name not in data:
+
+                    value = field.default
+
+                    # Account for callable functions
+                    if callable(value):
+                        try:
+                            value = value()
+                        except:
+                            continue
+
+                    data[field_name] = value
+
+        super().__init__(instance, data, **kwargs)
+
+    def get_initial(self):
+        """
+        Construct initial data for the serializer.
+        Use the 'default' values specified by the django model definition
+        """
+
+        initials = super().get_initial().copy()
+
+        # Are we creating a new instance?
+        if self.instance is None:
+            ModelClass = self.Meta.model
+
+            fields = model_meta.get_field_info(ModelClass)
+
+            for field_name, field in fields.fields.items():
+
+                if field.has_default() and field_name not in initials:
+
+                    value = field.default
+
+                    # Account for callable functions
+                    if callable(value):
+                        try:
+                            value = value()
+                        except:
+                            continue
+
+                    initials[field_name] = value
+
+        return initials
+
+    def save(self, **kwargs):
+        """
+        Catch any django ValidationError thrown at the moment save() is called,
+        and re-throw as a DRF ValidationError
+        """
+
+        try:
+            super().save(**kwargs)
+        except (ValidationError, DjangoValidationError) as exc:
+            raise ValidationError(detail=serializers.as_serializer_error(exc))
+
+        return self.instance
+
+    def update(self, instance, validated_data):
+        """
+        Catch any django ValidationError, and re-throw as a DRF ValidationError
+        """
+
+        try:
+            instance = super().update(instance, validated_data)
+        except (ValidationError, DjangoValidationError) as exc:
+            raise ValidationError(detail=serializers.as_serializer_error(exc))
+
+        return instance
+
+    def run_validation(self, data=empty):
+        """
+        Perform serializer validation.
+        In addition to running validators on the serializer fields,
+        this class ensures that the underlying model is also validated.
+        """
+
+        # Run any native validation checks first (may raise a ValidationError)
+        data = super().run_validation(data)
+
+        # Now ensure the underlying model is correct
+
+        if not hasattr(self, 'instance') or self.instance is None:
+            # No instance exists (we are creating a new one)
+            instance = self.Meta.model(**data)
+        else:
+            # Instance already exists (we are updating!)
+            instance = self.instance
+
+            # Update instance fields
+            for attr, value in data.items():
+                try:
+                    setattr(instance, attr, value)
+                except (ValidationError, DjangoValidationError) as exc:
+                    raise ValidationError(detail=serializers.as_serializer_error(exc))
+
+        # Run a 'full_clean' on the model.
+        # Note that by default, DRF does *not* perform full model validation!
+        try:
+            instance.full_clean()
+        except (ValidationError, DjangoValidationError) as exc:
+
+            data = exc.message_dict
+
+            # Change '__all__' key (django style) to 'non_field_errors' (DRF style)
+            if '__all__' in data:
+                data['non_field_errors'] = data['__all__']
+                del data['__all__']
+
+            raise ValidationError(data)
+
+        return data
+
+
+class ReferenceIndexingSerializerMixin():
+    """
+    This serializer mixin ensures the the reference is not to big / small
+    for the BigIntegerField
+    """
+    def validate_reference(self, value):
+        if extract_int(value) > models.BigIntegerField.MAX_BIGINT:
+            raise serializers.ValidationError('reference is to to big')
+        return value
+
+
+class InvenTreeAttachmentSerializerField(serializers.FileField):
+    """
+    Override the DRF native FileField serializer,
+    to remove the leading server path.
+
+    For example, the FileField might supply something like:
+
+    http://127.0.0.1:8000/media/foo/bar.jpg
+
+    Whereas we wish to return:
+
+    /media/foo/bar.jpg
+
+    Why? You can't handle the why!
+
+    Actually, if the server process is serving the data at 127.0.0.1,
+    but a proxy service (e.g. nginx) is then providing DNS lookup to the outside world,
+    then an attachment which prefixes the "address" of the internal server
+    will not be accessible from the outside world.
+    """
+
+    def to_representation(self, value):
+
+        if not value:
+            return None
+
+        return os.path.join(str(settings.MEDIA_URL), str(value))
+
+
+class InvenTreeAttachmentSerializer(InvenTreeModelSerializer):
+    """
+    Special case of an InvenTreeModelSerializer, which handles an "attachment" model.
+
+    The only real addition here is that we support "renaming" of the attachment file.
+    """
+
+    attachment = InvenTreeAttachmentSerializerField(
+        required=False,
+        allow_null=False,
+    )
+
+    # The 'filename' field must be present in the serializer
+    filename = serializers.CharField(
+        label=_('Filename'),
+        required=False,
+        source='basename',
+        allow_blank=False,
+    )
+
+
+class InvenTreeImageSerializerField(serializers.ImageField):
+    """
+    Custom image serializer.
+    On upload, validate that the file is a valid image file
+    """
+
+    def to_representation(self, value):
+
+        if not value:
+            return None
+
+        return os.path.join(str(settings.MEDIA_URL), str(value))
+
+
+class InvenTreeDecimalField(serializers.FloatField):
+    """
+    Custom serializer for decimal fields. Solves the following issues:
+
+    - The normal DRF DecimalField renders values with trailing zeros
+    - Using a FloatField can result in rounding issues: https://code.djangoproject.com/ticket/30290
+    """
+
+    def to_internal_value(self, data):
+
+        # Convert the value to a string, and then a decimal
+        try:
+            return Decimal(str(data))
+        except:
+            raise serializers.ValidationError(_("Invalid value"))
+
+
+class DataFileUploadSerializer(serializers.Serializer):
+    """
+    Generic serializer for uploading a data file, and extracting a dataset.
+
+    - Validates uploaded file
+    - Extracts column names
+    - Extracts data rows
+    """
+
+    # Implementing class should register a target model (database model) to be used for import
+    TARGET_MODEL = None
+
+    class Meta:
+        fields = [
+            'data_file',
+        ]
+
+    data_file = serializers.FileField(
+        label=_("Data File"),
+        help_text=_("Select data file for upload"),
+        required=True,
+        allow_empty_file=False,
+    )
+
+    def validate_data_file(self, data_file):
+        """
+        Perform validation checks on the uploaded data file.
+        """
+
+        self.filename = data_file.name
+
+        name, ext = os.path.splitext(data_file.name)
+
+        # Remove the leading . from the extension
+        ext = ext[1:]
+
+        accepted_file_types = [
+            'xls', 'xlsx',
+            'csv', 'tsv',
+            'xml',
+        ]
+
+        if ext not in accepted_file_types:
+            raise serializers.ValidationError(_("Unsupported file type"))
+
+        # Impose a 50MB limit on uploaded BOM files
+        max_upload_file_size = 50 * 1024 * 1024
+
+        if data_file.size > max_upload_file_size:
+            raise serializers.ValidationError(_("File is too large"))
+
+        # Read file data into memory (bytes object)
+        try:
+            data = data_file.read()
+        except Exception as e:
+            raise serializers.ValidationError(str(e))
+
+        if ext in ['csv', 'tsv', 'xml']:
+            try:
+                data = data.decode()
+            except Exception as e:
+                raise serializers.ValidationError(str(e))
+
+        # Convert to a tablib dataset (we expect headers)
+        try:
+            self.dataset = tablib.Dataset().load(data, ext, headers=True)
+        except Exception as e:
+            raise serializers.ValidationError(str(e))
+
+        if len(self.dataset.headers) == 0:
+            raise serializers.ValidationError(_("No columns found in file"))
+
+        if len(self.dataset) == 0:
+            raise serializers.ValidationError(_("No data rows found in file"))
+
+        return data_file
+
+    def match_column(self, column_name, field_names, exact=False):
+        """
+        Attempt to match a column name (from the file) to a field (defined in the model)
+
+        Order of matching is:
+        - Direct match
+        - Case insensitive match
+        - Fuzzy match
+        """
+
+        column_name = column_name.strip()
+
+        column_name_lower = column_name.lower()
+
+        if column_name in field_names:
+            return column_name
+
+        for field_name in field_names:
+            if field_name.lower() == column_name_lower:
+                return field_name
+
+        if exact:
+            # Finished available 'exact' matches
+            return None
+
+        # TODO: Fuzzy pattern matching for column names
+
+        # No matches found
+        return None
+
+    def extract_data(self):
+        """
+        Returns dataset extracted from the file
+        """
+
+        # Provide a dict of available import fields for the model
+        model_fields = {}
+
+        # Keep track of columns we have already extracted
+        matched_columns = set()
+
+        if self.TARGET_MODEL:
+            try:
+                model_fields = self.TARGET_MODEL.get_import_fields()
+            except:
+                pass
+
+        # Extract a list of valid model field names
+        model_field_names = [key for key in model_fields.keys()]
+
+        # Provide a dict of available columns from the dataset
+        file_columns = {}
+
+        for header in self.dataset.headers:
+            column = {}
+
+            # Attempt to "match" file columns to model fields
+            match = self.match_column(header, model_field_names, exact=True)
+
+            if match is not None and match not in matched_columns:
+                matched_columns.add(match)
+                column['value'] = match
+            else:
+                column['value'] = None
+
+            file_columns[header] = column
+
+        return {
+            'file_fields': file_columns,
+            'model_fields': model_fields,
+            'rows': [row.values() for row in self.dataset.dict],
+            'filename': self.filename,
+        }
+
+    def save(self):
+        ...
+
+
+class DataFileExtractSerializer(serializers.Serializer):
+    """
+    Generic serializer for extracting data from an imported dataset.
+
+    - User provides an array of matched headers
+    - User provides an array of raw data rows
+    """
+
+    # Implementing class should register a target model (database model) to be used for import
+    TARGET_MODEL = None
+
+    class Meta:
+        fields = [
+            'columns',
+            'rows',
+        ]
+
+    # Mapping of columns
+    columns = serializers.ListField(
+        child=serializers.CharField(
+            allow_blank=True,
+        ),
+    )
+
+    rows = serializers.ListField(
+        child=serializers.ListField(
+            child=serializers.CharField(
+                allow_blank=True,
+                allow_null=True,
+            ),
+        )
+    )
+
+    def validate(self, data):
+
+        data = super().validate(data)
+
+        self.columns = data.get('columns', [])
+        self.rows = data.get('rows', [])
+
+        if len(self.rows) == 0:
+            raise serializers.ValidationError(_("No data rows provided"))
+
+        if len(self.columns) == 0:
+            raise serializers.ValidationError(_("No data columns supplied"))
+
+        self.validate_extracted_columns()
+
+        return data
+
+    @property
+    def data(self):
+
+        if self.TARGET_MODEL:
+            try:
+                model_fields = self.TARGET_MODEL.get_import_fields()
+            except:
+                model_fields = {}
+
+        rows = []
+
+        for row in self.rows:
+            """
+            Optionally pre-process each row, before sending back to the client
+            """
+
+            processed_row = self.process_row(self.row_to_dict(row))
+
+            if processed_row:
+                rows.append({
+                    "original": row,
+                    "data": processed_row,
+                })
+
+        return {
+            'fields': model_fields,
+            'columns': self.columns,
+            'rows': rows,
+        }
+
+    def process_row(self, row):
+        """
+        Process a 'row' of data, which is a mapped column:value dict
+
+        Returns either a mapped column:value dict, or None.
+
+        If the function returns None, the column is ignored!
+        """
+
+        # Default implementation simply returns the original row data
+        return row
+
+    def row_to_dict(self, row):
+        """
+        Convert a "row" to a named data dict
+        """
+
+        row_dict = {
+            'errors': {},
+        }
+
+        for idx, value in enumerate(row):
+
+            if idx < len(self.columns):
+                col = self.columns[idx]
+
+                if col:
+                    row_dict[col] = value
+
+        return row_dict
+
+    def validate_extracted_columns(self):
+        """
+        Perform custom validation of header mapping.
+        """
+
+        if self.TARGET_MODEL:
+            try:
+                model_fields = self.TARGET_MODEL.get_import_fields()
+            except:
+                model_fields = {}
+
+        cols_seen = set()
+
+        for name, field in model_fields.items():
+
+            required = field.get('required', False)
+
+            # Check for missing required columns
+            if required:
+                if name not in self.columns:
+                    raise serializers.ValidationError(_(f"Missing required column: '{name}'"))
+
+        for col in self.columns:
+
+            if not col:
+                continue
+
+            # Check for duplicated columns
+            if col in cols_seen:
+                raise serializers.ValidationError(_(f"Duplicate column: '{col}'"))
+
+            cols_seen.add(col)
+
+    def save(self):
+        """
+        No "save" action for this serializer
+        """
+        ...

InvenTree/InvenTree/settings.py

@@ -0,0 +1,891 @@
+"""
+Django settings for InvenTree project.
+
+In practice the settings in this file should not be adjusted,
+instead settings can be configured in the config.yaml file
+located in the top level project directory.
+
+This allows implementation configuration to be hidden from source control,
+as well as separate configuration parameters from the more complex
+database setup in this file.
+
+"""
+
+import logging
+
+import os
+import random
+import socket
+import string
+import sys
+from datetime import datetime
+
+import moneyed
+
+import yaml
+from django.utils.translation import gettext_lazy as _
+from django.contrib.messages import constants as messages
+import django.conf.locale
+
+from .config import get_base_dir, get_config_file, get_plugin_file, get_setting
+
+
+def _is_true(x):
+    # Shortcut function to determine if a value "looks" like a boolean
+    return str(x).strip().lower() in ['1', 'y', 'yes', 't', 'true']
+
+
+# Determine if we are running in "test" mode e.g. "manage.py test"
+TESTING = 'test' in sys.argv
+
+# New requirement for django 3.2+
+DEFAULT_AUTO_FIELD = 'django.db.models.AutoField'
+
+# Build paths inside the project like this: os.path.join(BASE_DIR, ...)
+BASE_DIR = get_base_dir()
+
+cfg_filename = get_config_file()
+
+with open(cfg_filename, 'r') as cfg:
+    CONFIG = yaml.safe_load(cfg)
+
+# We will place any config files in the same directory as the config file
+config_dir = os.path.dirname(cfg_filename)
+
+# Default action is to run the system in Debug mode
+# SECURITY WARNING: don't run with debug turned on in production!
+DEBUG = _is_true(get_setting(
+    'INVENTREE_DEBUG',
+    CONFIG.get('debug', True)
+))
+
+# Determine if we are running in "demo mode"
+DEMO_MODE = _is_true(get_setting(
+    'INVENTREE_DEMO',
+    CONFIG.get('demo', False)
+))
+
+DOCKER = _is_true(get_setting(
+    'INVENTREE_DOCKER',
+    False
+))
+
+# Configure logging settings
+log_level = get_setting(
+    'INVENTREE_LOG_LEVEL',
+    CONFIG.get('log_level', 'WARNING')
+)
+
+logging.basicConfig(
+    level=log_level,
+    format="%(asctime)s %(levelname)s %(message)s",
+)
+
+if log_level not in ['DEBUG', 'INFO', 'WARNING', 'ERROR', 'CRITICAL']:
+    log_level = 'WARNING'  # pragma: no cover
+
+LOGGING = {
+    'version': 1,
+    'disable_existing_loggers': False,
+    'handlers': {
+        'console': {
+            'class': 'logging.StreamHandler',
+        },
+    },
+    'root': {
+        'handlers': ['console'],
+        'level': log_level,
+    },
+    'filters': {
+        'require_not_maintenance_mode_503': {
+            '()': 'maintenance_mode.logging.RequireNotMaintenanceMode503',
+        },
+    },
+}
+
+# Get a logger instance for this setup file
+logger = logging.getLogger("inventree")
+
+"""
+Specify a secret key to be used by django.
+
+Following options are tested, in descending order of preference:
+
+A) Check for environment variable INVENTREE_SECRET_KEY => Use raw key data
+B) Check for environment variable INVENTREE_SECRET_KEY_FILE => Load key data from file
+C) Look for default key file "secret_key.txt"
+d) Create "secret_key.txt" if it does not exist
+"""
+
+if os.getenv("INVENTREE_SECRET_KEY"):
+    # Secret key passed in directly
+    SECRET_KEY = os.getenv("INVENTREE_SECRET_KEY").strip()  # pragma: no cover
+    logger.info("SECRET_KEY loaded by INVENTREE_SECRET_KEY")  # pragma: no cover
+else:
+    # Secret key passed in by file location
+    key_file = os.getenv("INVENTREE_SECRET_KEY_FILE")
+
+    if key_file:
+        key_file = os.path.abspath(key_file)  # pragma: no cover
+    else:
+        # default secret key location
+        key_file = os.path.join(BASE_DIR, "secret_key.txt")
+        key_file = os.path.abspath(key_file)
+
+    if not os.path.exists(key_file):  # pragma: no cover
+        logger.info(f"Generating random key file at '{key_file}'")
+        # Create a random key file
+        with open(key_file, 'w') as f:
+            options = string.digits + string.ascii_letters + string.punctuation
+            key = ''.join([random.choice(options) for i in range(100)])
+            f.write(key)
+
+    logger.info(f"Loading SECRET_KEY from '{key_file}'")
+
+    try:
+        SECRET_KEY = open(key_file, "r").read().strip()
+    except Exception:  # pragma: no cover
+        logger.exception(f"Couldn't load keyfile {key_file}")
+        sys.exit(-1)
+
+# The filesystem location for served static files
+STATIC_ROOT = os.path.abspath(
+    get_setting(
+        'INVENTREE_STATIC_ROOT',
+        CONFIG.get('static_root', None)
+    )
+)
+
+if STATIC_ROOT is None:  # pragma: no cover
+    print("ERROR: INVENTREE_STATIC_ROOT directory not defined")
+    sys.exit(1)
+
+# The filesystem location for served static files
+MEDIA_ROOT = os.path.abspath(
+    get_setting(
+        'INVENTREE_MEDIA_ROOT',
+        CONFIG.get('media_root', None)
+    )
+)
+
+if MEDIA_ROOT is None:  # pragma: no cover
+    print("ERROR: INVENTREE_MEDIA_ROOT directory is not defined")
+    sys.exit(1)
+
+# List of allowed hosts (default = allow all)
+ALLOWED_HOSTS = CONFIG.get('allowed_hosts', ['*'])
+
+# Cross Origin Resource Sharing (CORS) options
+
+# Only allow CORS access to API
+CORS_URLS_REGEX = r'^/api/.*$'
+
+# Extract CORS options from configuration file
+cors_opt = CONFIG.get('cors', None)
+
+if cors_opt:
+    CORS_ORIGIN_ALLOW_ALL = cors_opt.get('allow_all', False)
+
+    if not CORS_ORIGIN_ALLOW_ALL:
+        CORS_ORIGIN_WHITELIST = cors_opt.get('whitelist', [])  # pragma: no cover
+
+# Web URL endpoint for served static files
+STATIC_URL = '/static/'
+
+STATICFILES_DIRS = []
+
+# Translated Template settings
+STATICFILES_I18_PREFIX = 'i18n'
+STATICFILES_I18_SRC = os.path.join(BASE_DIR, 'templates', 'js', 'translated')
+STATICFILES_I18_TRG = os.path.join(BASE_DIR, 'InvenTree', 'static_i18n')
+STATICFILES_DIRS.append(STATICFILES_I18_TRG)
+STATICFILES_I18_TRG = os.path.join(STATICFILES_I18_TRG, STATICFILES_I18_PREFIX)
+
+STATFILES_I18_PROCESSORS = [
+    'InvenTree.context.status_codes',
+]
+
+# Color Themes Directory
+STATIC_COLOR_THEMES_DIR = os.path.join(STATIC_ROOT, 'css', 'color-themes')
+
+# Web URL endpoint for served media files
+MEDIA_URL = '/media/'
+
+if DEBUG:
+    logger.info("InvenTree running with DEBUG enabled")
+
+if DEMO_MODE:
+    logger.warning("InvenTree running in DEMO mode")  # pragma: no cover
+
+logger.debug(f"MEDIA_ROOT: '{MEDIA_ROOT}'")
+logger.debug(f"STATIC_ROOT: '{STATIC_ROOT}'")
+
+# Application definition
+
+INSTALLED_APPS = [
+
+    # Core django modules
+    'django.contrib.admin',
+    'django.contrib.auth',
+    'django.contrib.contenttypes',
+    'user_sessions',                # db user sessions
+    'django.contrib.messages',
+    'django.contrib.staticfiles',
+    'django.contrib.sites',
+
+    # Maintenance
+    'maintenance_mode',
+
+    # InvenTree apps
+    'build.apps.BuildConfig',
+    'common.apps.CommonConfig',
+    'company.apps.CompanyConfig',
+    'label.apps.LabelConfig',
+    'order.apps.OrderConfig',
+    'part.apps.PartConfig',
+    'report.apps.ReportConfig',
+    'stock.apps.StockConfig',
+    'users.apps.UsersConfig',
+    'plugin.apps.PluginAppConfig',
+    'InvenTree.apps.InvenTreeConfig',       # InvenTree app runs last
+
+    # Third part add-ons
+    'django_filters',                       # Extended filter functionality
+    'rest_framework',                       # DRF (Django Rest Framework)
+    'rest_framework.authtoken',             # Token authentication for API
+    'corsheaders',                          # Cross-origin Resource Sharing for DRF
+    'crispy_forms',                         # Improved form rendering
+    'import_export',                        # Import / export tables to file
+    'django_cleanup.apps.CleanupConfig',    # Automatically delete orphaned MEDIA files
+    'mptt',                                 # Modified Preorder Tree Traversal
+    'markdownx',                            # Markdown editing
+    'markdownify',                          # Markdown template rendering
+    'django_admin_shell',                   # Python shell for the admin interface
+    'djmoney',                              # django-money integration
+    'djmoney.contrib.exchange',             # django-money exchange rates
+    'error_report',                         # Error reporting in the admin interface
+    'django_q',
+    'formtools',                            # Form wizard tools
+
+    'allauth',                              # Base app for SSO
+    'allauth.account',                      # Extend user with accounts
+    'allauth.socialaccount',                # Use 'social' providers
+
+    'django_otp',                           # OTP is needed for MFA - base package
+    'django_otp.plugins.otp_totp',          # Time based OTP
+    'django_otp.plugins.otp_static',        # Backup codes
+
+    'allauth_2fa',                          # MFA flow for allauth
+]
+
+MIDDLEWARE = CONFIG.get('middleware', [
+    'django.middleware.security.SecurityMiddleware',
+    'user_sessions.middleware.SessionMiddleware',                   # db user sessions
+    'django.middleware.locale.LocaleMiddleware',
+    'django.middleware.common.CommonMiddleware',
+    'django.middleware.csrf.CsrfViewMiddleware',
+    'corsheaders.middleware.CorsMiddleware',
+    'django.contrib.auth.middleware.AuthenticationMiddleware',
+    'django_otp.middleware.OTPMiddleware',                      # MFA support
+    'InvenTree.middleware.CustomAllauthTwoFactorMiddleware',    # Flow control for allauth
+    'django.contrib.messages.middleware.MessageMiddleware',
+    'django.middleware.clickjacking.XFrameOptionsMiddleware',
+    'InvenTree.middleware.AuthRequiredMiddleware',
+    'InvenTree.middleware.Check2FAMiddleware',                  # Check if the user should be forced to use MFA
+    'maintenance_mode.middleware.MaintenanceModeMiddleware',
+])
+
+# Error reporting middleware
+MIDDLEWARE.append('error_report.middleware.ExceptionProcessor')
+
+AUTHENTICATION_BACKENDS = CONFIG.get('authentication_backends', [
+    'django.contrib.auth.backends.ModelBackend',
+    'allauth.account.auth_backends.AuthenticationBackend',      # SSO login via external providers
+])
+
+# If the debug toolbar is enabled, add the modules
+if DEBUG and CONFIG.get('debug_toolbar', False):  # pragma: no cover
+    logger.info("Running with DEBUG_TOOLBAR enabled")
+    INSTALLED_APPS.append('debug_toolbar')
+    MIDDLEWARE.append('debug_toolbar.middleware.DebugToolbarMiddleware')
+
+ROOT_URLCONF = 'InvenTree.urls'
+
+TEMPLATES = [
+    {
+        'BACKEND': 'django.template.backends.django.DjangoTemplates',
+        'DIRS': [
+            os.path.join(BASE_DIR, 'templates'),
+            # Allow templates in the reporting directory to be accessed
+            os.path.join(MEDIA_ROOT, 'report'),
+            os.path.join(MEDIA_ROOT, 'label'),
+        ],
+        'OPTIONS': {
+            'context_processors': [
+                'django.template.context_processors.debug',
+                'django.template.context_processors.request',
+                'django.template.context_processors.i18n',
+                'django.contrib.auth.context_processors.auth',
+                'django.contrib.messages.context_processors.messages',
+                # Custom InvenTree context processors
+                'InvenTree.context.health_status',
+                'InvenTree.context.status_codes',
+                'InvenTree.context.user_roles',
+            ],
+            'loaders': [(
+                'django.template.loaders.cached.Loader', [
+                    'plugin.loader.PluginTemplateLoader',
+                    'django.template.loaders.filesystem.Loader',
+                    'django.template.loaders.app_directories.Loader',
+                ])
+            ],
+        },
+    },
+]
+
+REST_FRAMEWORK = {
+    'EXCEPTION_HANDLER': 'rest_framework.views.exception_handler',
+    'DATETIME_FORMAT': '%Y-%m-%d %H:%M',
+    'DEFAULT_AUTHENTICATION_CLASSES': (
+        'rest_framework.authentication.BasicAuthentication',
+        'rest_framework.authentication.SessionAuthentication',
+        'rest_framework.authentication.TokenAuthentication',
+    ),
+    'DEFAULT_PAGINATION_CLASS': 'rest_framework.pagination.LimitOffsetPagination',
+    'DEFAULT_PERMISSION_CLASSES': (
+        'rest_framework.permissions.IsAuthenticated',
+        'rest_framework.permissions.DjangoModelPermissions',
+        'InvenTree.permissions.RolePermission',
+    ),
+    'DEFAULT_SCHEMA_CLASS': 'rest_framework.schemas.coreapi.AutoSchema',
+    'DEFAULT_METADATA_CLASS': 'InvenTree.metadata.InvenTreeMetadata'
+}
+
+WSGI_APPLICATION = 'InvenTree.wsgi.application'
+
+"""
+Configure the database backend based on the user-specified values.
+
+- Primarily this configuration happens in the config.yaml file
+- However there may be reason to configure the DB via environmental variables
+- The following code lets the user "mix and match" database configuration
+"""
+
+logger.debug("Configuring database backend:")
+
+# Extract database configuration from the config.yaml file
+db_config = CONFIG.get('database', {})
+
+if not db_config:
+    db_config = {}
+
+# Environment variables take preference over config file!
+
+db_keys = ['ENGINE', 'NAME', 'USER', 'PASSWORD', 'HOST', 'PORT']
+
+for key in db_keys:
+    # First, check the environment variables
+    env_key = f"INVENTREE_DB_{key}"
+    env_var = os.environ.get(env_key, None)
+
+    if env_var:
+        # Override configuration value
+        db_config[key] = env_var
+
+# Check that required database configuration options are specified
+reqiured_keys = ['ENGINE', 'NAME']
+
+for key in reqiured_keys:
+    if key not in db_config:  # pragma: no cover
+        error_msg = f'Missing required database configuration value {key}'
+        logger.error(error_msg)
+
+        print('Error: ' + error_msg)
+        sys.exit(-1)
+
+"""
+Special considerations for the database 'ENGINE' setting.
+It can be specified in config.yaml (or envvar) as either (for example):
+- sqlite3
+- django.db.backends.sqlite3
+- django.db.backends.postgresql
+"""
+
+db_engine = db_config['ENGINE'].lower()
+
+# Correct common misspelling
+if db_engine == 'sqlite':
+    db_engine = 'sqlite3'  # pragma: no cover
+
+if db_engine in ['sqlite3', 'postgresql', 'mysql']:
+    # Prepend the required python module string
+    db_engine = f'django.db.backends.{db_engine}'
+    db_config['ENGINE'] = db_engine
+
+db_name = db_config['NAME']
+db_host = db_config.get('HOST', "''")
+
+logger.info(f"DB_ENGINE: {db_engine}")
+logger.info(f"DB_NAME: {db_name}")
+logger.info(f"DB_HOST: {db_host}")
+
+"""
+In addition to base-level database configuration, we may wish to specify specific options to the database backend
+Ref: https://docs.djangoproject.com/en/3.2/ref/settings/#std:setting-OPTIONS
+"""
+
+# 'OPTIONS' or 'options' can be specified in config.yaml
+# Set useful sensible timeouts for a transactional webserver to communicate
+# with its database server, that is, if the webserver is having issues
+# connecting to the database server (such as a replica failover) don't sit and
+# wait for possibly an hour or more, just tell the client something went wrong
+# and let the client retry when they want to.
+db_options = db_config.get("OPTIONS", db_config.get("options", {}))
+
+# Specific options for postgres backend
+if "postgres" in db_engine:  # pragma: no cover
+    from psycopg2.extensions import (
+        ISOLATION_LEVEL_READ_COMMITTED,
+        ISOLATION_LEVEL_SERIALIZABLE,
+    )
+
+    # Connection timeout
+    if "connect_timeout" not in db_options:
+        # The DB server is in the same data center, it should not take very
+        # long to connect to the database server
+        # # seconds, 2 is minium allowed by libpq
+        db_options["connect_timeout"] = int(
+            os.getenv("INVENTREE_DB_TIMEOUT", 2)
+        )
+
+    # Setup TCP keepalive
+    # DB server is in the same DC, it should not become unresponsive for
+    # very long. With the defaults below we wait 5 seconds for the network
+    # issue to resolve itself.  It it that doesn't happen whatever happened
+    # is probably fatal and no amount of waiting is going to fix it.
+    # # 0 - TCP Keepalives disabled; 1 - enabled
+    if "keepalives" not in db_options:
+        db_options["keepalives"] = int(
+            os.getenv("INVENTREE_DB_TCP_KEEPALIVES", "1")
+        )
+    # # Seconds after connection is idle to send keep alive
+    if "keepalives_idle" not in db_options:
+        db_options["keepalives_idle"] = int(
+            os.getenv("INVENTREE_DB_TCP_KEEPALIVES_IDLE", "1")
+        )
+    # # Seconds after missing ACK to send another keep alive
+    if "keepalives_interval" not in db_options:
+        db_options["keepalives_interval"] = int(
+            os.getenv("INVENTREE_DB_TCP_KEEPALIVES_INTERVAL", "1")
+        )
+    # # Number of missing ACKs before we close the connection
+    if "keepalives_count" not in db_options:
+        db_options["keepalives_count"] = int(
+            os.getenv("INVENTREE_DB_TCP_KEEPALIVES_COUNT", "5")
+        )
+    # # Milliseconds for how long pending data should remain unacked
+    # by the remote server
+    # TODO: Supported starting in PSQL 11
+    # "tcp_user_timeout": int(os.getenv("PGTCP_USER_TIMEOUT", "1000"),
+
+    # Postgres's default isolation level is Read Committed which is
+    # normally fine, but most developers think the database server is
+    # actually going to do Serializable type checks on the queries to
+    # protect against simultaneous changes.
+    # https://www.postgresql.org/docs/devel/transaction-iso.html
+    # https://docs.djangoproject.com/en/3.2/ref/databases/#isolation-level
+    if "isolation_level" not in db_options:
+        serializable = _is_true(
+            os.getenv("INVENTREE_DB_ISOLATION_SERIALIZABLE", "true")
+        )
+        db_options["isolation_level"] = (
+            ISOLATION_LEVEL_SERIALIZABLE
+            if serializable
+            else ISOLATION_LEVEL_READ_COMMITTED
+        )
+
+# Specific options for MySql / MariaDB backend
+if "mysql" in db_engine:  # pragma: no cover
+    # TODO TCP time outs and keepalives
+
+    # MariaDB's default isolation level is Repeatable Read which is
+    # normally fine, but most developers think the database server is
+    # actually going to Serializable type checks on the queries to
+    # protect against siumltaneous changes.
+    # https://mariadb.com/kb/en/mariadb-transactions-and-isolation-levels-for-sql-server-users/#changing-the-isolation-level
+    # https://docs.djangoproject.com/en/3.2/ref/databases/#mysql-isolation-level
+    if "isolation_level" not in db_options:
+        serializable = _is_true(
+            os.getenv("INVENTREE_DB_ISOLATION_SERIALIZABLE", "true")
+        )
+        db_options["isolation_level"] = (
+            "serializable" if serializable else "read committed"
+        )
+
+# Specific options for sqlite backend
+if "sqlite" in db_engine:
+    # TODO: Verify timeouts are not an issue because no network is involved for SQLite
+
+    # SQLite's default isolation level is Serializable due to SQLite's
+    # single writer implementation.  Presumably as a result of this, it is
+    # not possible to implement any lower isolation levels in SQLite.
+    # https://www.sqlite.org/isolation.html
+    pass
+
+# Provide OPTIONS dict back to the database configuration dict
+db_config['OPTIONS'] = db_options
+
+DATABASES = {
+    'default': db_config
+}
+
+
+_cache_config = CONFIG.get("cache", {})
+_cache_host = _cache_config.get("host", os.getenv("INVENTREE_CACHE_HOST"))
+_cache_port = _cache_config.get(
+    "port", os.getenv("INVENTREE_CACHE_PORT", "6379")
+)
+
+if _cache_host:  # pragma: no cover
+    # We are going to rely upon a possibly non-localhost for our cache,
+    # so don't wait too long for the cache as nothing in the cache should be
+    # irreplacable.
+    _cache_options = {
+        "CLIENT_CLASS": "django_redis.client.DefaultClient",
+        "SOCKET_CONNECT_TIMEOUT": int(os.getenv("CACHE_CONNECT_TIMEOUT", "2")),
+        "SOCKET_TIMEOUT": int(os.getenv("CACHE_SOCKET_TIMEOUT", "2")),
+        "CONNECTION_POOL_KWARGS": {
+            "socket_keepalive": _is_true(
+                os.getenv("CACHE_TCP_KEEPALIVE", "1")
+            ),
+            "socket_keepalive_options": {
+                socket.TCP_KEEPCNT: int(
+                    os.getenv("CACHE_KEEPALIVES_COUNT", "5")
+                ),
+                socket.TCP_KEEPIDLE: int(
+                    os.getenv("CACHE_KEEPALIVES_IDLE", "1")
+                ),
+                socket.TCP_KEEPINTVL: int(
+                    os.getenv("CACHE_KEEPALIVES_INTERVAL", "1")
+                ),
+                socket.TCP_USER_TIMEOUT: int(
+                    os.getenv("CACHE_TCP_USER_TIMEOUT", "1000")
+                ),
+            },
+        },
+    }
+    CACHES = {
+        "default": {
+            "BACKEND": "django_redis.cache.RedisCache",
+            "LOCATION": f"redis://{_cache_host}:{_cache_port}/0",
+            "OPTIONS": _cache_options,
+        },
+    }
+else:
+    CACHES = {
+        "default": {
+            "BACKEND": "django.core.cache.backends.locmem.LocMemCache",
+        },
+    }
+
+try:
+    # 4 background workers seems like a sensible default
+    background_workers = int(os.environ.get('INVENTREE_BACKGROUND_WORKERS', 4))
+except ValueError:  # pragma: no cover
+    background_workers = 4
+
+# django-q configuration
+Q_CLUSTER = {
+    'name': 'InvenTree',
+    'workers': background_workers,
+    'timeout': 90,
+    'retry': 120,
+    'queue_limit': 50,
+    'bulk': 10,
+    'orm': 'default',
+    'sync': False,
+}
+
+if _cache_host:  # pragma: no cover
+    # If using external redis cache, make the cache the broker for Django Q
+    # as well
+    Q_CLUSTER["django_redis"] = "worker"
+
+# database user sessions
+SESSION_ENGINE = 'user_sessions.backends.db'
+LOGOUT_REDIRECT_URL = 'index'
+SILENCED_SYSTEM_CHECKS = [
+    'admin.E410',
+]
+
+# Password validation
+# https://docs.djangoproject.com/en/1.10/ref/settings/#auth-password-validators
+
+AUTH_PASSWORD_VALIDATORS = [
+    {
+        'NAME': 'django.contrib.auth.password_validation.UserAttributeSimilarityValidator',
+    },
+    {
+        'NAME': 'django.contrib.auth.password_validation.MinimumLengthValidator',
+    },
+    {
+        'NAME': 'django.contrib.auth.password_validation.CommonPasswordValidator',
+    },
+    {
+        'NAME': 'django.contrib.auth.password_validation.NumericPasswordValidator',
+    },
+]
+
+# Extra (optional) URL validators
+# See https://docs.djangoproject.com/en/2.2/ref/validators/#django.core.validators.URLValidator
+
+EXTRA_URL_SCHEMES = CONFIG.get('extra_url_schemes', [])
+
+if not type(EXTRA_URL_SCHEMES) in [list]:  # pragma: no cover
+    logger.warning("extra_url_schemes not correctly formatted")
+    EXTRA_URL_SCHEMES = []
+
+# Internationalization
+# https://docs.djangoproject.com/en/dev/topics/i18n/
+
+LANGUAGE_CODE = CONFIG.get('language', 'en-us')
+
+# If a new language translation is supported, it must be added here
+LANGUAGES = [
+    ('de', _('German')),
+    ('el', _('Greek')),
+    ('en', _('English')),
+    ('es', _('Spanish')),
+    ('es-mx', _('Spanish (Mexican)')),
+    ('fr', _('French')),
+    ('he', _('Hebrew')),
+    ('it', _('Italian')),
+    ('ja', _('Japanese')),
+    ('ko', _('Korean')),
+    ('nl', _('Dutch')),
+    ('no', _('Norwegian')),
+    ('pl', _('Polish')),
+    ('pt', _('Portugese')),
+    ('ru', _('Russian')),
+    ('sv', _('Swedish')),
+    ('th', _('Thai')),
+    ('tr', _('Turkish')),
+    ('vi', _('Vietnamese')),
+    ('zh-cn', _('Chinese')),
+]
+
+# Testing interface translations
+if get_setting('TEST_TRANSLATIONS', False):  # pragma: no cover
+    # Set default language
+    LANGUAGE_CODE = 'xx'
+
+    # Add to language catalog
+    LANGUAGES.append(('xx', 'Test'))
+
+    # Add custom languages not provided by Django
+    EXTRA_LANG_INFO = {
+        'xx': {
+            'code': 'xx',
+            'name': 'Test',
+            'name_local': 'Test'
+        },
+    }
+    LANG_INFO = dict(django.conf.locale.LANG_INFO, **EXTRA_LANG_INFO)
+    django.conf.locale.LANG_INFO = LANG_INFO
+
+# Currencies available for use
+CURRENCIES = CONFIG.get(
+    'currencies',
+    [
+        'AUD', 'CAD', 'EUR', 'GBP', 'JPY', 'NZD', 'USD',
+    ],
+)
+
+# Check that each provided currency is supported
+for currency in CURRENCIES:
+    if currency not in moneyed.CURRENCIES:  # pragma: no cover
+        print(f"Currency code '{currency}' is not supported")
+        sys.exit(1)
+
+
+# Custom currency exchange backend
+EXCHANGE_BACKEND = 'InvenTree.exchange.InvenTreeExchange'
+
+# Extract email settings from the config file
+email_config = CONFIG.get('email', {})
+
+EMAIL_BACKEND = get_setting(
+    'INVENTREE_EMAIL_BACKEND',
+    email_config.get('backend', 'django.core.mail.backends.smtp.EmailBackend')
+)
+
+# Email backend settings
+EMAIL_HOST = get_setting(
+    'INVENTREE_EMAIL_HOST',
+    email_config.get('host', '')
+)
+
+EMAIL_PORT = get_setting(
+    'INVENTREE_EMAIL_PORT',
+    email_config.get('port', 25)
+)
+
+EMAIL_HOST_USER = get_setting(
+    'INVENTREE_EMAIL_USERNAME',
+    email_config.get('username', ''),
+)
+
+EMAIL_HOST_PASSWORD = get_setting(
+    'INVENTREE_EMAIL_PASSWORD',
+    email_config.get('password', ''),
+)
+
+DEFAULT_FROM_EMAIL = get_setting(
+    'INVENTREE_EMAIL_SENDER',
+    email_config.get('sender', ''),
+)
+
+EMAIL_SUBJECT_PREFIX = '[InvenTree] '
+
+EMAIL_USE_LOCALTIME = False
+
+EMAIL_USE_TLS = get_setting(
+    'INVENTREE_EMAIL_TLS',
+    email_config.get('tls', False),
+)
+
+EMAIL_USE_SSL = get_setting(
+    'INVENTREE_EMAIL_SSL',
+    email_config.get('ssl', False),
+)
+
+EMAIL_TIMEOUT = 60
+
+LOCALE_PATHS = (
+    os.path.join(BASE_DIR, 'locale/'),
+)
+
+TIME_ZONE = get_setting(
+    'INVENTREE_TIMEZONE',
+    CONFIG.get('timezone', 'UTC')
+)
+
+USE_I18N = True
+
+USE_L10N = True
+
+# Do not use native timezone support in "test" mode
+# It generates a *lot* of cruft in the logs
+if not TESTING:
+    USE_TZ = True  # pragma: no cover
+
+DATE_INPUT_FORMATS = [
+    "%Y-%m-%d",
+]
+
+# crispy forms use the bootstrap templates
+CRISPY_TEMPLATE_PACK = 'bootstrap4'
+
+# Use database transactions when importing / exporting data
+IMPORT_EXPORT_USE_TRANSACTIONS = True
+
+# Internal IP addresses allowed to see the debug toolbar
+INTERNAL_IPS = [
+    '127.0.0.1',
+]
+
+MESSAGE_TAGS = {
+    messages.SUCCESS: 'alert alert-block alert-success',
+    messages.ERROR: 'alert alert-block alert-danger',
+    messages.INFO: 'alert alert-block alert-info',
+}
+
+SITE_ID = 1
+
+# Load the allauth social backends
+SOCIAL_BACKENDS = CONFIG.get('social_backends', [])
+for app in SOCIAL_BACKENDS:
+    INSTALLED_APPS.append(app)  # pragma: no cover
+
+SOCIALACCOUNT_PROVIDERS = CONFIG.get('social_providers', [])
+
+# settings for allauth
+ACCOUNT_EMAIL_CONFIRMATION_EXPIRE_DAYS = get_setting('INVENTREE_LOGIN_CONFIRM_DAYS', CONFIG.get('login_confirm_days', 3))
+
+ACCOUNT_LOGIN_ATTEMPTS_LIMIT = get_setting('INVENTREE_LOGIN_ATTEMPTS', CONFIG.get('login_attempts', 5))
+
+ACCOUNT_LOGOUT_ON_PASSWORD_CHANGE = True
+
+# override forms / adapters
+ACCOUNT_FORMS = {
+    'login': 'allauth.account.forms.LoginForm',
+    'signup': 'InvenTree.forms.CustomSignupForm',
+    'add_email': 'allauth.account.forms.AddEmailForm',
+    'change_password': 'allauth.account.forms.ChangePasswordForm',
+    'set_password': 'allauth.account.forms.SetPasswordForm',
+    'reset_password': 'allauth.account.forms.ResetPasswordForm',
+    'reset_password_from_key': 'allauth.account.forms.ResetPasswordKeyForm',
+    'disconnect': 'allauth.socialaccount.forms.DisconnectForm',
+}
+
+SOCIALACCOUNT_ADAPTER = 'InvenTree.forms.CustomSocialAccountAdapter'
+ACCOUNT_ADAPTER = 'InvenTree.forms.CustomAccountAdapter'
+
+# Markdownx configuration
+# Ref: https://neutronx.github.io/django-markdownx/customization/
+MARKDOWNX_MEDIA_PATH = datetime.now().strftime('markdownx/%Y/%m/%d')
+
+# Markdownify configuration
+# Ref: https://django-markdownify.readthedocs.io/en/latest/settings.html
+
+MARKDOWNIFY_WHITELIST_TAGS = [
+    'a',
+    'abbr',
+    'b',
+    'blockquote',
+    'em',
+    'h1', 'h2', 'h3',
+    'i',
+    'img',
+    'li',
+    'ol',
+    'p',
+    'strong',
+    'ul'
+]
+
+MARKDOWNIFY_WHITELIST_ATTRS = [
+    'href',
+    'src',
+    'alt',
+]
+
+MARKDOWNIFY_BLEACH = False
+
+# Maintenance mode
+MAINTENANCE_MODE_RETRY_AFTER = 60
+MAINTENANCE_MODE_STATE_BACKEND = 'maintenance_mode.backends.DefaultStorageBackend'
+
+# Are plugins enabled?
+PLUGINS_ENABLED = _is_true(get_setting(
+    'INVENTREE_PLUGINS_ENABLED',
+    CONFIG.get('plugins_enabled', False),
+))
+
+PLUGIN_FILE = get_plugin_file()
+
+# Plugin Directories (local plugins will be loaded from these directories)
+PLUGIN_DIRS = ['plugin.builtin', 'barcodes.plugins', ]
+
+if not TESTING:
+    # load local deploy directory in prod
+    PLUGIN_DIRS.append('plugins')  # pragma: no cover
+
+if DEBUG or TESTING:
+    # load samples in debug mode
+    PLUGIN_DIRS.append('plugin.samples')
+
+# Plugin test settings
+PLUGIN_TESTING = get_setting('PLUGIN_TESTING', TESTING)  # are plugins beeing tested?
+PLUGIN_TESTING_SETUP = get_setting('PLUGIN_TESTING_SETUP', False)  # load plugins from setup hooks in testing?
+PLUGIN_RETRY = get_setting('PLUGIN_RETRY', 5)  # how often should plugin loading be tried?

InvenTree/InvenTree/static/bootstrap-table/bootstrap-table.css

@@ -0,0 +1,371 @@
+/**
+ * @author zhixin wen <wenzhixin2010@gmail.com>
+ * version: 1.18.3
+ * https://github.com/wenzhixin/bootstrap-table/
+ */
+.bootstrap-table .fixed-table-toolbar::after {
+  content: "";
+  display: block;
+  clear: both;
+}
+
+.bootstrap-table .fixed-table-toolbar .bs-bars,
+.bootstrap-table .fixed-table-toolbar .search,
+.bootstrap-table .fixed-table-toolbar .columns {
+  position: relative;
+  margin-top: 10px;
+  margin-bottom: 10px;
+}
+
+.bootstrap-table .fixed-table-toolbar .columns .btn-group > .btn-group {
+  display: inline-block;
+  margin-left: -1px !important;
+}
+
+.bootstrap-table .fixed-table-toolbar .columns .btn-group > .btn-group > .btn {
+  border-radius: 0;
+}
+
+.bootstrap-table .fixed-table-toolbar .columns .btn-group > .btn-group:first-child > .btn {
+  border-top-left-radius: 4px;
+  border-bottom-left-radius: 4px;
+}
+
+.bootstrap-table .fixed-table-toolbar .columns .btn-group > .btn-group:last-child > .btn {
+  border-top-right-radius: 4px;
+  border-bottom-right-radius: 4px;
+}
+
+.bootstrap-table .fixed-table-toolbar .columns .dropdown-menu {
+  text-align: left;
+  max-height: 300px;
+  overflow: auto;
+  -ms-overflow-style: scrollbar;
+  z-index: 1001;
+}
+
+.bootstrap-table .fixed-table-toolbar .columns label {
+  display: block;
+  padding: 3px 20px;
+  clear: both;
+  font-weight: normal;
+  line-height: 1.428571429;
+}
+
+.bootstrap-table .fixed-table-toolbar .columns-left {
+  margin-right: 5px;
+}
+
+.bootstrap-table .fixed-table-toolbar .columns-right {
+  margin-left: 5px;
+}
+
+.bootstrap-table .fixed-table-toolbar .pull-right .dropdown-menu {
+  right: 0;
+  left: auto;
+}
+
+.bootstrap-table .fixed-table-container {
+  position: relative;
+  clear: both;
+}
+
+.bootstrap-table .fixed-table-container .table {
+  width: 100%;
+  margin-bottom: 0 !important;
+}
+
+.bootstrap-table .fixed-table-container .table th,
+.bootstrap-table .fixed-table-container .table td {
+  vertical-align: middle;
+  box-sizing: border-box;
+}
+
+.bootstrap-table .fixed-table-container .table thead th {
+  vertical-align: bottom;
+  padding: 0;
+  margin: 0;
+}
+
+.bootstrap-table .fixed-table-container .table thead th:focus {
+  outline: 0 solid transparent;
+}
+
+.bootstrap-table .fixed-table-container .table thead th.detail {
+  width: 30px;
+}
+
+.bootstrap-table .fixed-table-container .table thead th .th-inner {
+  padding: 0.75rem;
+  vertical-align: bottom;
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+}
+
+.bootstrap-table .fixed-table-container .table thead th .sortable {
+  cursor: pointer;
+  background-position: right;
+  background-repeat: no-repeat;
+  padding-right: 30px !important;
+}
+
+.bootstrap-table .fixed-table-container .table thead th .both {
+  background-image: url("data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABMAAAATCAQAAADYWf5HAAAAkElEQVQoz7X QMQ5AQBCF4dWQSJxC5wwax1Cq1e7BAdxD5SL+Tq/QCM1oNiJidwox0355mXnG/DrEtIQ6azioNZQxI0ykPhTQIwhCR+BmBYtlK7kLJYwWCcJA9M4qdrZrd8pPjZWPtOqdRQy320YSV17OatFC4euts6z39GYMKRPCTKY9UnPQ6P+GtMRfGtPnBCiqhAeJPmkqAAAAAElFTkSuQmCC");
+}
+
+.bootstrap-table .fixed-table-container .table thead th .asc {
+  background-image: url("data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABMAAAATCAYAAAByUDbMAAAAZ0lEQVQ4y2NgGLKgquEuFxBPAGI2ahhWCsS/gDibUoO0gPgxEP8H4ttArEyuQYxAPBdqEAxPBImTY5gjEL9DM+wTENuQahAvEO9DMwiGdwAxOymGJQLxTyD+jgWDxCMZRsEoGAVoAADeemwtPcZI2wAAAABJRU5ErkJggg==");
+}
+
+.bootstrap-table .fixed-table-container .table thead th .desc {
+  background-image: url("data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABMAAAATCAYAAAByUDbMAAAAZUlEQVQ4y2NgGAWjYBSggaqGu5FA/BOIv2PBIPFEUgxjB+IdQPwfC94HxLykus4GiD+hGfQOiB3J8SojEE9EM2wuSJzcsFMG4ttQgx4DsRalkZENxL+AuJQaMcsGxBOAmGvopk8AVz1sLZgg0bsAAAAASUVORK5CYII= ");
+}
+
+.bootstrap-table .fixed-table-container .table tbody tr.selected td {
+  background-color: rgba(0, 0, 0, 0.075);
+}
+
+.bootstrap-table .fixed-table-container .table tbody tr.no-records-found td {
+  text-align: center;
+}
+
+.bootstrap-table .fixed-table-container .table tbody tr .card-view {
+  display: flex;
+}
+
+.bootstrap-table .fixed-table-container .table tbody tr .card-view .card-view-title {
+  font-weight: bold;
+  display: inline-block;
+  min-width: 30%;
+  width: auto !important;
+  text-align: left !important;
+}
+
+.bootstrap-table .fixed-table-container .table tbody tr .card-view .card-view-value {
+  width: 100% !important;
+}
+
+.bootstrap-table .fixed-table-container .table .bs-checkbox {
+  text-align: center;
+}
+
+.bootstrap-table .fixed-table-container .table .bs-checkbox label {
+  margin-bottom: 0;
+}
+
+.bootstrap-table .fixed-table-container .table .bs-checkbox label input[type="radio"],
+.bootstrap-table .fixed-table-container .table .bs-checkbox label input[type="checkbox"] {
+  margin: 0 auto !important;
+}
+
+.bootstrap-table .fixed-table-container .table.table-sm .th-inner {
+  padding: 0.3rem;
+}
+
+.bootstrap-table .fixed-table-container.fixed-height:not(.has-footer) {
+  border-bottom: 1px solid #dee2e6;
+}
+
+.bootstrap-table .fixed-table-container.fixed-height.has-card-view {
+  border-top: 1px solid #dee2e6;
+  border-bottom: 1px solid #dee2e6;
+}
+
+.bootstrap-table .fixed-table-container.fixed-height .fixed-table-border {
+  border-left: 1px solid #dee2e6;
+  border-right: 1px solid #dee2e6;
+}
+
+.bootstrap-table .fixed-table-container.fixed-height .table thead th {
+  border-bottom: 1px solid #dee2e6;
+}
+
+.bootstrap-table .fixed-table-container.fixed-height .table-dark thead th {
+  border-bottom: 1px solid #32383e;
+}
+
+.bootstrap-table .fixed-table-container .fixed-table-header {
+  overflow: hidden;
+}
+
+.bootstrap-table .fixed-table-container .fixed-table-body {
+  overflow-x: auto;
+  overflow-y: auto;
+  height: 100%;
+}
+
+.bootstrap-table .fixed-table-container .fixed-table-body .fixed-table-loading {
+  align-items: center;
+  background: #fff;
+  display: flex;
+  justify-content: center;
+  position: absolute;
+  bottom: 0;
+  width: 100%;
+  z-index: 1000;
+  transition: visibility 0s, opacity 0.15s ease-in-out;
+  opacity: 0;
+  visibility: hidden;
+}
+
+.bootstrap-table .fixed-table-container .fixed-table-body .fixed-table-loading.open {
+  visibility: visible;
+  opacity: 1;
+}
+
+.bootstrap-table .fixed-table-container .fixed-table-body .fixed-table-loading .loading-wrap {
+  align-items: baseline;
+  display: flex;
+  justify-content: center;
+}
+
+.bootstrap-table .fixed-table-container .fixed-table-body .fixed-table-loading .loading-wrap .loading-text {
+  margin-right: 6px;
+}
+
+.bootstrap-table .fixed-table-container .fixed-table-body .fixed-table-loading .loading-wrap .animation-wrap {
+  align-items: center;
+  display: flex;
+  justify-content: center;
+}
+
+.bootstrap-table .fixed-table-container .fixed-table-body .fixed-table-loading .loading-wrap .animation-dot,
+.bootstrap-table .fixed-table-container .fixed-table-body .fixed-table-loading .loading-wrap .animation-wrap::after,
+.bootstrap-table .fixed-table-container .fixed-table-body .fixed-table-loading .loading-wrap .animation-wrap::before {
+  content: "";
+  animation-duration: 1.5s;
+  animation-iteration-count: infinite;
+  animation-name: LOADING;
+  background: #212529;
+  border-radius: 50%;
+  display: block;
+  height: 5px;
+  margin: 0 4px;
+  opacity: 0;
+  width: 5px;
+}
+
+.bootstrap-table .fixed-table-container .fixed-table-body .fixed-table-loading .loading-wrap .animation-dot {
+  animation-delay: 0.3s;
+}
+
+.bootstrap-table .fixed-table-container .fixed-table-body .fixed-table-loading .loading-wrap .animation-wrap::after {
+  animation-delay: 0.6s;
+}
+
+.bootstrap-table .fixed-table-container .fixed-table-body .fixed-table-loading.table-dark {
+  background: #212529;
+}
+
+.bootstrap-table .fixed-table-container .fixed-table-body .fixed-table-loading.table-dark .animation-dot,
+.bootstrap-table .fixed-table-container .fixed-table-body .fixed-table-loading.table-dark .animation-wrap::after,
+.bootstrap-table .fixed-table-container .fixed-table-body .fixed-table-loading.table-dark .animation-wrap::before {
+  background: #fff;
+}
+
+.bootstrap-table .fixed-table-container .fixed-table-footer {
+  overflow: hidden;
+}
+
+.bootstrap-table .fixed-table-pagination::after {
+  content: "";
+  display: block;
+  clear: both;
+}
+
+.bootstrap-table .fixed-table-pagination > .pagination-detail,
+.bootstrap-table .fixed-table-pagination > .pagination {
+  margin-top: 10px;
+  margin-bottom: 10px;
+}
+
+.bootstrap-table .fixed-table-pagination > .pagination-detail .pagination-info {
+  line-height: 34px;
+  margin-right: 5px;
+}
+
+.bootstrap-table .fixed-table-pagination > .pagination-detail .page-list {
+  display: inline-block;
+}
+
+.bootstrap-table .fixed-table-pagination > .pagination-detail .page-list .btn-group {
+  position: relative;
+  display: inline-block;
+  vertical-align: middle;
+}
+
+.bootstrap-table .fixed-table-pagination > .pagination-detail .page-list .btn-group .dropdown-menu {
+  margin-bottom: 0;
+}
+
+.bootstrap-table .fixed-table-pagination > .pagination ul.pagination {
+  margin: 0;
+}
+
+.bootstrap-table .fixed-table-pagination > .pagination ul.pagination li.page-intermediate a {
+  color: #c8c8c8;
+}
+
+.bootstrap-table .fixed-table-pagination > .pagination ul.pagination li.page-intermediate a::before {
+  content: '\2B05';
+}
+
+.bootstrap-table .fixed-table-pagination > .pagination ul.pagination li.page-intermediate a::after {
+  content: '\27A1';
+}
+
+.bootstrap-table .fixed-table-pagination > .pagination ul.pagination li.disabled a {
+  pointer-events: none;
+  cursor: default;
+}
+
+.bootstrap-table.fullscreen {
+  position: fixed;
+  top: 0;
+  left: 0;
+  z-index: 1050;
+  width: 100% !important;
+  background: #fff;
+  height: calc(100vh);
+  overflow-y: scroll;
+}
+
+.bootstrap-table.bootstrap4 .pagination-lg .page-link, .bootstrap-table.bootstrap5 .pagination-lg .page-link {
+  padding: .5rem 1rem;
+}
+
+.bootstrap-table.bootstrap5 .float-left {
+  float: left;
+}
+
+.bootstrap-table.bootstrap5 .float-right {
+  float: right;
+}
+
+/* calculate scrollbar width */
+div.fixed-table-scroll-inner {
+  width: 100%;
+  height: 200px;
+}
+
+div.fixed-table-scroll-outer {
+  top: 0;
+  left: 0;
+  visibility: hidden;
+  width: 200px;
+  height: 150px;
+  overflow: hidden;
+}
+
+@keyframes LOADING {
+  0% {
+    opacity: 0;
+  }
+  50% {
+    opacity: 1;
+  }
+  to {
+    opacity: 0;
+  }
+}

InvenTree/InvenTree/static/bootstrap-table/extensions/defer-url/bootstrap-table-defer-url.js

@@ -0,0 +1,869 @@
+(function (global, factory) {
+  typeof exports === 'object' && typeof module !== 'undefined' ? factory(require('jquery')) :
+  typeof define === 'function' && define.amd ? define(['jquery'], factory) :
+  (global = typeof globalThis !== 'undefined' ? globalThis : global || self, factory(global.jQuery));
+}(this, (function ($) { 'use strict';
+
+  function _interopDefaultLegacy (e) { return e && typeof e === 'object' && 'default' in e ? e : { 'default': e }; }
+
+  var $__default = /*#__PURE__*/_interopDefaultLegacy($);
+
+  function _classCallCheck(instance, Constructor) {
+    if (!(instance instanceof Constructor)) {
+      throw new TypeError("Cannot call a class as a function");
+    }
+  }
+
+  function _defineProperties(target, props) {
+    for (var i = 0; i < props.length; i++) {
+      var descriptor = props[i];
+      descriptor.enumerable = descriptor.enumerable || false;
+      descriptor.configurable = true;
+      if ("value" in descriptor) descriptor.writable = true;
+      Object.defineProperty(target, descriptor.key, descriptor);
+    }
+  }
+
+  function _createClass(Constructor, protoProps, staticProps) {
+    if (protoProps) _defineProperties(Constructor.prototype, protoProps);
+    if (staticProps) _defineProperties(Constructor, staticProps);
+    return Constructor;
+  }
+
+  function _inherits(subClass, superClass) {
+    if (typeof superClass !== "function" && superClass !== null) {
+      throw new TypeError("Super expression must either be null or a function");
+    }
+
+    subClass.prototype = Object.create(superClass && superClass.prototype, {
+      constructor: {
+        value: subClass,
+        writable: true,
+        configurable: true
+      }
+    });
+    if (superClass) _setPrototypeOf(subClass, superClass);
+  }
+
+  function _getPrototypeOf(o) {
+    _getPrototypeOf = Object.setPrototypeOf ? Object.getPrototypeOf : function _getPrototypeOf(o) {
+      return o.__proto__ || Object.getPrototypeOf(o);
+    };
+    return _getPrototypeOf(o);
+  }
+
+  function _setPrototypeOf(o, p) {
+    _setPrototypeOf = Object.setPrototypeOf || function _setPrototypeOf(o, p) {
+      o.__proto__ = p;
+      return o;
+    };
+
+    return _setPrototypeOf(o, p);
+  }
+
+  function _isNativeReflectConstruct() {
+    if (typeof Reflect === "undefined" || !Reflect.construct) return false;
+    if (Reflect.construct.sham) return false;
+    if (typeof Proxy === "function") return true;
+
+    try {
+      Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function () {}));
+      return true;
+    } catch (e) {
+      return false;
+    }
+  }
+
+  function _assertThisInitialized(self) {
+    if (self === void 0) {
+      throw new ReferenceError("this hasn't been initialised - super() hasn't been called");
+    }
+
+    return self;
+  }
+
+  function _possibleConstructorReturn(self, call) {
+    if (call && (typeof call === "object" || typeof call === "function")) {
+      return call;
+    }
+
+    return _assertThisInitialized(self);
+  }
+
+  function _createSuper(Derived) {
+    var hasNativeReflectConstruct = _isNativeReflectConstruct();
+
+    return function _createSuperInternal() {
+      var Super = _getPrototypeOf(Derived),
+          result;
+
+      if (hasNativeReflectConstruct) {
+        var NewTarget = _getPrototypeOf(this).constructor;
+
+        result = Reflect.construct(Super, arguments, NewTarget);
+      } else {
+        result = Super.apply(this, arguments);
+      }
+
+      return _possibleConstructorReturn(this, result);
+    };
+  }
+
+  function _superPropBase(object, property) {
+    while (!Object.prototype.hasOwnProperty.call(object, property)) {
+      object = _getPrototypeOf(object);
+      if (object === null) break;
+    }
+
+    return object;
+  }
+
+  function _get(target, property, receiver) {
+    if (typeof Reflect !== "undefined" && Reflect.get) {
+      _get = Reflect.get;
+    } else {
+      _get = function _get(target, property, receiver) {
+        var base = _superPropBase(target, property);
+
+        if (!base) return;
+        var desc = Object.getOwnPropertyDescriptor(base, property);
+
+        if (desc.get) {
+          return desc.get.call(receiver);
+        }
+
+        return desc.value;
+      };
+    }
+
+    return _get(target, property, receiver || target);
+  }
+
+  var commonjsGlobal = typeof globalThis !== 'undefined' ? globalThis : typeof window !== 'undefined' ? window : typeof global !== 'undefined' ? global : typeof self !== 'undefined' ? self : {};
+
+  function createCommonjsModule(fn, module) {
+  	return module = { exports: {} }, fn(module, module.exports), module.exports;
+  }
+
+  var check = function (it) {
+    return it && it.Math == Math && it;
+  };
+
+  // https://github.com/zloirock/core-js/issues/86#issuecomment-115759028
+  var global_1 =
+    /* global globalThis -- safe */
+    check(typeof globalThis == 'object' && globalThis) ||
+    check(typeof window == 'object' && window) ||
+    check(typeof self == 'object' && self) ||
+    check(typeof commonjsGlobal == 'object' && commonjsGlobal) ||
+    // eslint-disable-next-line no-new-func -- fallback
+    (function () { return this; })() || Function('return this')();
+
+  var fails = function (exec) {
+    try {
+      return !!exec();
+    } catch (error) {
+      return true;
+    }
+  };
+
+  // Detect IE8's incomplete defineProperty implementation
+  var descriptors = !fails(function () {
+    return Object.defineProperty({}, 1, { get: function () { return 7; } })[1] != 7;
+  });
+
+  var nativePropertyIsEnumerable = {}.propertyIsEnumerable;
+  var getOwnPropertyDescriptor$1 = Object.getOwnPropertyDescriptor;
+
+  // Nashorn ~ JDK8 bug
+  var NASHORN_BUG = getOwnPropertyDescriptor$1 && !nativePropertyIsEnumerable.call({ 1: 2 }, 1);
+
+  // `Object.prototype.propertyIsEnumerable` method implementation
+  // https://tc39.es/ecma262/#sec-object.prototype.propertyisenumerable
+  var f$4 = NASHORN_BUG ? function propertyIsEnumerable(V) {
+    var descriptor = getOwnPropertyDescriptor$1(this, V);
+    return !!descriptor && descriptor.enumerable;
+  } : nativePropertyIsEnumerable;
+
+  var objectPropertyIsEnumerable = {
+  	f: f$4
+  };
+
+  var createPropertyDescriptor = function (bitmap, value) {
+    return {
+      enumerable: !(bitmap & 1),
+      configurable: !(bitmap & 2),
+      writable: !(bitmap & 4),
+      value: value
+    };
+  };
+
+  var toString = {}.toString;
+
+  var classofRaw = function (it) {
+    return toString.call(it).slice(8, -1);
+  };
+
+  var split = ''.split;
+
+  // fallback for non-array-like ES3 and non-enumerable old V8 strings
+  var indexedObject = fails(function () {
+    // throws an error in rhino, see https://github.com/mozilla/rhino/issues/346
+    // eslint-disable-next-line no-prototype-builtins -- safe
+    return !Object('z').propertyIsEnumerable(0);
+  }) ? function (it) {
+    return classofRaw(it) == 'String' ? split.call(it, '') : Object(it);
+  } : Object;
+
+  // `RequireObjectCoercible` abstract operation
+  // https://tc39.es/ecma262/#sec-requireobjectcoercible
+  var requireObjectCoercible = function (it) {
+    if (it == undefined) throw TypeError("Can't call method on " + it);
+    return it;
+  };
+
+  // toObject with fallback for non-array-like ES3 strings
+
+
+
+  var toIndexedObject = function (it) {
+    return indexedObject(requireObjectCoercible(it));
+  };
+
+  var isObject = function (it) {
+    return typeof it === 'object' ? it !== null : typeof it === 'function';
+  };
+
+  // `ToPrimitive` abstract operation
+  // https://tc39.es/ecma262/#sec-toprimitive
+  // instead of the ES6 spec version, we didn't implement @@toPrimitive case
+  // and the second argument - flag - preferred type is a string
+  var toPrimitive = function (input, PREFERRED_STRING) {
+    if (!isObject(input)) return input;
+    var fn, val;
+    if (PREFERRED_STRING && typeof (fn = input.toString) == 'function' && !isObject(val = fn.call(input))) return val;
+    if (typeof (fn = input.valueOf) == 'function' && !isObject(val = fn.call(input))) return val;
+    if (!PREFERRED_STRING && typeof (fn = input.toString) == 'function' && !isObject(val = fn.call(input))) return val;
+    throw TypeError("Can't convert object to primitive value");
+  };
+
+  var hasOwnProperty = {}.hasOwnProperty;
+
+  var has$1 = function (it, key) {
+    return hasOwnProperty.call(it, key);
+  };
+
+  var document = global_1.document;
+  // typeof document.createElement is 'object' in old IE
+  var EXISTS = isObject(document) && isObject(document.createElement);
+
+  var documentCreateElement = function (it) {
+    return EXISTS ? document.createElement(it) : {};
+  };
+
+  // Thank's IE8 for his funny defineProperty
+  var ie8DomDefine = !descriptors && !fails(function () {
+    return Object.defineProperty(documentCreateElement('div'), 'a', {
+      get: function () { return 7; }
+    }).a != 7;
+  });
+
+  var nativeGetOwnPropertyDescriptor = Object.getOwnPropertyDescriptor;
+
+  // `Object.getOwnPropertyDescriptor` method
+  // https://tc39.es/ecma262/#sec-object.getownpropertydescriptor
+  var f$3 = descriptors ? nativeGetOwnPropertyDescriptor : function getOwnPropertyDescriptor(O, P) {
+    O = toIndexedObject(O);
+    P = toPrimitive(P, true);
+    if (ie8DomDefine) try {
+      return nativeGetOwnPropertyDescriptor(O, P);
+    } catch (error) { /* empty */ }
+    if (has$1(O, P)) return createPropertyDescriptor(!objectPropertyIsEnumerable.f.call(O, P), O[P]);
+  };
+
+  var objectGetOwnPropertyDescriptor = {
+  	f: f$3
+  };
+
+  var anObject = function (it) {
+    if (!isObject(it)) {
+      throw TypeError(String(it) + ' is not an object');
+    } return it;
+  };
+
+  var nativeDefineProperty = Object.defineProperty;
+
+  // `Object.defineProperty` method
+  // https://tc39.es/ecma262/#sec-object.defineproperty
+  var f$2 = descriptors ? nativeDefineProperty : function defineProperty(O, P, Attributes) {
+    anObject(O);
+    P = toPrimitive(P, true);
+    anObject(Attributes);
+    if (ie8DomDefine) try {
+      return nativeDefineProperty(O, P, Attributes);
+    } catch (error) { /* empty */ }
+    if ('get' in Attributes || 'set' in Attributes) throw TypeError('Accessors not supported');
+    if ('value' in Attributes) O[P] = Attributes.value;
+    return O;
+  };
+
+  var objectDefineProperty = {
+  	f: f$2
+  };
+
+  var createNonEnumerableProperty = descriptors ? function (object, key, value) {
+    return objectDefineProperty.f(object, key, createPropertyDescriptor(1, value));
+  } : function (object, key, value) {
+    object[key] = value;
+    return object;
+  };
+
+  var setGlobal = function (key, value) {
+    try {
+      createNonEnumerableProperty(global_1, key, value);
+    } catch (error) {
+      global_1[key] = value;
+    } return value;
+  };
+
+  var SHARED = '__core-js_shared__';
+  var store$1 = global_1[SHARED] || setGlobal(SHARED, {});
+
+  var sharedStore = store$1;
+
+  var functionToString = Function.toString;
+
+  // this helper broken in `3.4.1-3.4.4`, so we can't use `shared` helper
+  if (typeof sharedStore.inspectSource != 'function') {
+    sharedStore.inspectSource = function (it) {
+      return functionToString.call(it);
+    };
+  }
+
+  var inspectSource = sharedStore.inspectSource;
+
+  var WeakMap$1 = global_1.WeakMap;
+
+  var nativeWeakMap = typeof WeakMap$1 === 'function' && /native code/.test(inspectSource(WeakMap$1));
+
+  var shared = createCommonjsModule(function (module) {
+  (module.exports = function (key, value) {
+    return sharedStore[key] || (sharedStore[key] = value !== undefined ? value : {});
+  })('versions', []).push({
+    version: '3.9.1',
+    mode: 'global',
+    copyright: '© 2021 Denis Pushkarev (zloirock.ru)'
+  });
+  });
+
+  var id = 0;
+  var postfix = Math.random();
+
+  var uid = function (key) {
+    return 'Symbol(' + String(key === undefined ? '' : key) + ')_' + (++id + postfix).toString(36);
+  };
+
+  var keys = shared('keys');
+
+  var sharedKey = function (key) {
+    return keys[key] || (keys[key] = uid(key));
+  };
+
+  var hiddenKeys$1 = {};
+
+  var WeakMap = global_1.WeakMap;
+  var set, get, has;
+
+  var enforce = function (it) {
+    return has(it) ? get(it) : set(it, {});
+  };
+
+  var getterFor = function (TYPE) {
+    return function (it) {
+      var state;
+      if (!isObject(it) || (state = get(it)).type !== TYPE) {
+        throw TypeError('Incompatible receiver, ' + TYPE + ' required');
+      } return state;
+    };
+  };
+
+  if (nativeWeakMap) {
+    var store = sharedStore.state || (sharedStore.state = new WeakMap());
+    var wmget = store.get;
+    var wmhas = store.has;
+    var wmset = store.set;
+    set = function (it, metadata) {
+      metadata.facade = it;
+      wmset.call(store, it, metadata);
+      return metadata;
+    };
+    get = function (it) {
+      return wmget.call(store, it) || {};
+    };
+    has = function (it) {
+      return wmhas.call(store, it);
+    };
+  } else {
+    var STATE = sharedKey('state');
+    hiddenKeys$1[STATE] = true;
+    set = function (it, metadata) {
+      metadata.facade = it;
+      createNonEnumerableProperty(it, STATE, metadata);
+      return metadata;
+    };
+    get = function (it) {
+      return has$1(it, STATE) ? it[STATE] : {};
+    };
+    has = function (it) {
+      return has$1(it, STATE);
+    };
+  }
+
+  var internalState = {
+    set: set,
+    get: get,
+    has: has,
+    enforce: enforce,
+    getterFor: getterFor
+  };
+
+  var redefine = createCommonjsModule(function (module) {
+  var getInternalState = internalState.get;
+  var enforceInternalState = internalState.enforce;
+  var TEMPLATE = String(String).split('String');
+
+  (module.exports = function (O, key, value, options) {
+    var unsafe = options ? !!options.unsafe : false;
+    var simple = options ? !!options.enumerable : false;
+    var noTargetGet = options ? !!options.noTargetGet : false;
+    var state;
+    if (typeof value == 'function') {
+      if (typeof key == 'string' && !has$1(value, 'name')) {
+        createNonEnumerableProperty(value, 'name', key);
+      }
+      state = enforceInternalState(value);
+      if (!state.source) {
+        state.source = TEMPLATE.join(typeof key == 'string' ? key : '');
+      }
+    }
+    if (O === global_1) {
+      if (simple) O[key] = value;
+      else setGlobal(key, value);
+      return;
+    } else if (!unsafe) {
+      delete O[key];
+    } else if (!noTargetGet && O[key]) {
+      simple = true;
+    }
+    if (simple) O[key] = value;
+    else createNonEnumerableProperty(O, key, value);
+  // add fake Function#toString for correct work wrapped methods / constructors with methods like LoDash isNative
+  })(Function.prototype, 'toString', function toString() {
+    return typeof this == 'function' && getInternalState(this).source || inspectSource(this);
+  });
+  });
+
+  var path = global_1;
+
+  var aFunction = function (variable) {
+    return typeof variable == 'function' ? variable : undefined;
+  };
+
+  var getBuiltIn = function (namespace, method) {
+    return arguments.length < 2 ? aFunction(path[namespace]) || aFunction(global_1[namespace])
+      : path[namespace] && path[namespace][method] || global_1[namespace] && global_1[namespace][method];
+  };
+
+  var ceil = Math.ceil;
+  var floor = Math.floor;
+
+  // `ToInteger` abstract operation
+  // https://tc39.es/ecma262/#sec-tointeger
+  var toInteger = function (argument) {
+    return isNaN(argument = +argument) ? 0 : (argument > 0 ? floor : ceil)(argument);
+  };
+
+  var min$1 = Math.min;
+
+  // `ToLength` abstract operation
+  // https://tc39.es/ecma262/#sec-tolength
+  var toLength = function (argument) {
+    return argument > 0 ? min$1(toInteger(argument), 0x1FFFFFFFFFFFFF) : 0; // 2 ** 53 - 1 == 9007199254740991
+  };
+
+  var max = Math.max;
+  var min = Math.min;
+
+  // Helper for a popular repeating case of the spec:
+  // Let integer be ? ToInteger(index).
+  // If integer < 0, let result be max((length + integer), 0); else let result be min(integer, length).
+  var toAbsoluteIndex = function (index, length) {
+    var integer = toInteger(index);
+    return integer < 0 ? max(integer + length, 0) : min(integer, length);
+  };
+
+  // `Array.prototype.{ indexOf, includes }` methods implementation
+  var createMethod = function (IS_INCLUDES) {
+    return function ($this, el, fromIndex) {
+      var O = toIndexedObject($this);
+      var length = toLength(O.length);
+      var index = toAbsoluteIndex(fromIndex, length);
+      var value;
+      // Array#includes uses SameValueZero equality algorithm
+      // eslint-disable-next-line no-self-compare -- NaN check
+      if (IS_INCLUDES && el != el) while (length > index) {
+        value = O[index++];
+        // eslint-disable-next-line no-self-compare -- NaN check
+        if (value != value) return true;
+      // Array#indexOf ignores holes, Array#includes - not
+      } else for (;length > index; index++) {
+        if ((IS_INCLUDES || index in O) && O[index] === el) return IS_INCLUDES || index || 0;
+      } return !IS_INCLUDES && -1;
+    };
+  };
+
+  var arrayIncludes = {
+    // `Array.prototype.includes` method
+    // https://tc39.es/ecma262/#sec-array.prototype.includes
+    includes: createMethod(true),
+    // `Array.prototype.indexOf` method
+    // https://tc39.es/ecma262/#sec-array.prototype.indexof
+    indexOf: createMethod(false)
+  };
+
+  var indexOf = arrayIncludes.indexOf;
+
+
+  var objectKeysInternal = function (object, names) {
+    var O = toIndexedObject(object);
+    var i = 0;
+    var result = [];
+    var key;
+    for (key in O) !has$1(hiddenKeys$1, key) && has$1(O, key) && result.push(key);
+    // Don't enum bug & hidden keys
+    while (names.length > i) if (has$1(O, key = names[i++])) {
+      ~indexOf(result, key) || result.push(key);
+    }
+    return result;
+  };
+
+  // IE8- don't enum bug keys
+  var enumBugKeys = [
+    'constructor',
+    'hasOwnProperty',
+    'isPrototypeOf',
+    'propertyIsEnumerable',
+    'toLocaleString',
+    'toString',
+    'valueOf'
+  ];
+
+  var hiddenKeys = enumBugKeys.concat('length', 'prototype');
+
+  // `Object.getOwnPropertyNames` method
+  // https://tc39.es/ecma262/#sec-object.getownpropertynames
+  var f$1 = Object.getOwnPropertyNames || function getOwnPropertyNames(O) {
+    return objectKeysInternal(O, hiddenKeys);
+  };
+
+  var objectGetOwnPropertyNames = {
+  	f: f$1
+  };
+
+  var f = Object.getOwnPropertySymbols;
+
+  var objectGetOwnPropertySymbols = {
+  	f: f
+  };
+
+  // all object keys, includes non-enumerable and symbols
+  var ownKeys = getBuiltIn('Reflect', 'ownKeys') || function ownKeys(it) {
+    var keys = objectGetOwnPropertyNames.f(anObject(it));
+    var getOwnPropertySymbols = objectGetOwnPropertySymbols.f;
+    return getOwnPropertySymbols ? keys.concat(getOwnPropertySymbols(it)) : keys;
+  };
+
+  var copyConstructorProperties = function (target, source) {
+    var keys = ownKeys(source);
+    var defineProperty = objectDefineProperty.f;
+    var getOwnPropertyDescriptor = objectGetOwnPropertyDescriptor.f;
+    for (var i = 0; i < keys.length; i++) {
+      var key = keys[i];
+      if (!has$1(target, key)) defineProperty(target, key, getOwnPropertyDescriptor(source, key));
+    }
+  };
+
+  var replacement = /#|\.prototype\./;
+
+  var isForced = function (feature, detection) {
+    var value = data[normalize(feature)];
+    return value == POLYFILL ? true
+      : value == NATIVE ? false
+      : typeof detection == 'function' ? fails(detection)
+      : !!detection;
+  };
+
+  var normalize = isForced.normalize = function (string) {
+    return String(string).replace(replacement, '.').toLowerCase();
+  };
+
+  var data = isForced.data = {};
+  var NATIVE = isForced.NATIVE = 'N';
+  var POLYFILL = isForced.POLYFILL = 'P';
+
+  var isForced_1 = isForced;
+
+  var getOwnPropertyDescriptor = objectGetOwnPropertyDescriptor.f;
+
+
+
+
+
+
+  /*
+    options.target      - name of the target object
+    options.global      - target is the global object
+    options.stat        - export as static methods of target
+    options.proto       - export as prototype methods of target
+    options.real        - real prototype method for the `pure` version
+    options.forced      - export even if the native feature is available
+    options.bind        - bind methods to the target, required for the `pure` version
+    options.wrap        - wrap constructors to preventing global pollution, required for the `pure` version
+    options.unsafe      - use the simple assignment of property instead of delete + defineProperty
+    options.sham        - add a flag to not completely full polyfills
+    options.enumerable  - export as enumerable property
+    options.noTargetGet - prevent calling a getter on target
+  */
+  var _export = function (options, source) {
+    var TARGET = options.target;
+    var GLOBAL = options.global;
+    var STATIC = options.stat;
+    var FORCED, target, key, targetProperty, sourceProperty, descriptor;
+    if (GLOBAL) {
+      target = global_1;
+    } else if (STATIC) {
+      target = global_1[TARGET] || setGlobal(TARGET, {});
+    } else {
+      target = (global_1[TARGET] || {}).prototype;
+    }
+    if (target) for (key in source) {
+      sourceProperty = source[key];
+      if (options.noTargetGet) {
+        descriptor = getOwnPropertyDescriptor(target, key);
+        targetProperty = descriptor && descriptor.value;
+      } else targetProperty = target[key];
+      FORCED = isForced_1(GLOBAL ? key : TARGET + (STATIC ? '.' : '#') + key, options.forced);
+      // contained in target
+      if (!FORCED && targetProperty !== undefined) {
+        if (typeof sourceProperty === typeof targetProperty) continue;
+        copyConstructorProperties(sourceProperty, targetProperty);
+      }
+      // add a flag to not completely full polyfills
+      if (options.sham || (targetProperty && targetProperty.sham)) {
+        createNonEnumerableProperty(sourceProperty, 'sham', true);
+      }
+      // extend global
+      redefine(target, key, sourceProperty, options);
+    }
+  };
+
+  // `IsArray` abstract operation
+  // https://tc39.es/ecma262/#sec-isarray
+  var isArray = Array.isArray || function isArray(arg) {
+    return classofRaw(arg) == 'Array';
+  };
+
+  // `ToObject` abstract operation
+  // https://tc39.es/ecma262/#sec-toobject
+  var toObject = function (argument) {
+    return Object(requireObjectCoercible(argument));
+  };
+
+  var createProperty = function (object, key, value) {
+    var propertyKey = toPrimitive(key);
+    if (propertyKey in object) objectDefineProperty.f(object, propertyKey, createPropertyDescriptor(0, value));
+    else object[propertyKey] = value;
+  };
+
+  var engineIsNode = classofRaw(global_1.process) == 'process';
+
+  var engineUserAgent = getBuiltIn('navigator', 'userAgent') || '';
+
+  var process = global_1.process;
+  var versions = process && process.versions;
+  var v8 = versions && versions.v8;
+  var match, version;
+
+  if (v8) {
+    match = v8.split('.');
+    version = match[0] + match[1];
+  } else if (engineUserAgent) {
+    match = engineUserAgent.match(/Edge\/(\d+)/);
+    if (!match || match[1] >= 74) {
+      match = engineUserAgent.match(/Chrome\/(\d+)/);
+      if (match) version = match[1];
+    }
+  }
+
+  var engineV8Version = version && +version;
+
+  var nativeSymbol = !!Object.getOwnPropertySymbols && !fails(function () {
+    /* global Symbol -- required for testing */
+    return !Symbol.sham &&
+      // Chrome 38 Symbol has incorrect toString conversion
+      // Chrome 38-40 symbols are not inherited from DOM collections prototypes to instances
+      (engineIsNode ? engineV8Version === 38 : engineV8Version > 37 && engineV8Version < 41);
+  });
+
+  var useSymbolAsUid = nativeSymbol
+    /* global Symbol -- safe */
+    && !Symbol.sham
+    && typeof Symbol.iterator == 'symbol';
+
+  var WellKnownSymbolsStore = shared('wks');
+  var Symbol$1 = global_1.Symbol;
+  var createWellKnownSymbol = useSymbolAsUid ? Symbol$1 : Symbol$1 && Symbol$1.withoutSetter || uid;
+
+  var wellKnownSymbol = function (name) {
+    if (!has$1(WellKnownSymbolsStore, name) || !(nativeSymbol || typeof WellKnownSymbolsStore[name] == 'string')) {
+      if (nativeSymbol && has$1(Symbol$1, name)) {
+        WellKnownSymbolsStore[name] = Symbol$1[name];
+      } else {
+        WellKnownSymbolsStore[name] = createWellKnownSymbol('Symbol.' + name);
+      }
+    } return WellKnownSymbolsStore[name];
+  };
+
+  var SPECIES$1 = wellKnownSymbol('species');
+
+  // `ArraySpeciesCreate` abstract operation
+  // https://tc39.es/ecma262/#sec-arrayspeciescreate
+  var arraySpeciesCreate = function (originalArray, length) {
+    var C;
+    if (isArray(originalArray)) {
+      C = originalArray.constructor;
+      // cross-realm fallback
+      if (typeof C == 'function' && (C === Array || isArray(C.prototype))) C = undefined;
+      else if (isObject(C)) {
+        C = C[SPECIES$1];
+        if (C === null) C = undefined;
+      }
+    } return new (C === undefined ? Array : C)(length === 0 ? 0 : length);
+  };
+
+  var SPECIES = wellKnownSymbol('species');
+
+  var arrayMethodHasSpeciesSupport = function (METHOD_NAME) {
+    // We can't use this feature detection in V8 since it causes
+    // deoptimization and serious performance degradation
+    // https://github.com/zloirock/core-js/issues/677
+    return engineV8Version >= 51 || !fails(function () {
+      var array = [];
+      var constructor = array.constructor = {};
+      constructor[SPECIES] = function () {
+        return { foo: 1 };
+      };
+      return array[METHOD_NAME](Boolean).foo !== 1;
+    });
+  };
+
+  var IS_CONCAT_SPREADABLE = wellKnownSymbol('isConcatSpreadable');
+  var MAX_SAFE_INTEGER = 0x1FFFFFFFFFFFFF;
+  var MAXIMUM_ALLOWED_INDEX_EXCEEDED = 'Maximum allowed index exceeded';
+
+  // We can't use this feature detection in V8 since it causes
+  // deoptimization and serious performance degradation
+  // https://github.com/zloirock/core-js/issues/679
+  var IS_CONCAT_SPREADABLE_SUPPORT = engineV8Version >= 51 || !fails(function () {
+    var array = [];
+    array[IS_CONCAT_SPREADABLE] = false;
+    return array.concat()[0] !== array;
+  });
+
+  var SPECIES_SUPPORT = arrayMethodHasSpeciesSupport('concat');
+
+  var isConcatSpreadable = function (O) {
+    if (!isObject(O)) return false;
+    var spreadable = O[IS_CONCAT_SPREADABLE];
+    return spreadable !== undefined ? !!spreadable : isArray(O);
+  };
+
+  var FORCED = !IS_CONCAT_SPREADABLE_SUPPORT || !SPECIES_SUPPORT;
+
+  // `Array.prototype.concat` method
+  // https://tc39.es/ecma262/#sec-array.prototype.concat
+  // with adding support of @@isConcatSpreadable and @@species
+  _export({ target: 'Array', proto: true, forced: FORCED }, {
+    // eslint-disable-next-line no-unused-vars -- required for `.length`
+    concat: function concat(arg) {
+      var O = toObject(this);
+      var A = arraySpeciesCreate(O, 0);
+      var n = 0;
+      var i, k, length, len, E;
+      for (i = -1, length = arguments.length; i < length; i++) {
+        E = i === -1 ? O : arguments[i];
+        if (isConcatSpreadable(E)) {
+          len = toLength(E.length);
+          if (n + len > MAX_SAFE_INTEGER) throw TypeError(MAXIMUM_ALLOWED_INDEX_EXCEEDED);
+          for (k = 0; k < len; k++, n++) if (k in E) createProperty(A, n, E[k]);
+        } else {
+          if (n >= MAX_SAFE_INTEGER) throw TypeError(MAXIMUM_ALLOWED_INDEX_EXCEEDED);
+          createProperty(A, n++, E);
+        }
+      }
+      A.length = n;
+      return A;
+    }
+  });
+
+  /**
+   * When using server-side processing, the default mode of operation for
+   * bootstrap-table is to simply throw away any data that currently exists in the
+   * table and make a request to the server to get the first page of data to
+   * display. This is fine for an empty table, but if you already have the first
+   * page of data displayed in the plain HTML, it is a waste of resources. As
+   * such, you can use data-defer-url instead of data-url to allow you to instruct
+   * bootstrap-table to not make that initial request, rather it will use the data
+   * already on the page.
+   *
+   * @author: Ruben Suarez
+   * @webSite: http://rubensa.eu.org
+   * @update zhixin wen <wenzhixin2010@gmail.com>
+   */
+
+  $__default['default'].extend($__default['default'].fn.bootstrapTable.defaults, {
+    deferUrl: undefined
+  });
+
+  $__default['default'].BootstrapTable = /*#__PURE__*/function (_$$BootstrapTable) {
+    _inherits(_class, _$$BootstrapTable);
+
+    var _super = _createSuper(_class);
+
+    function _class() {
+      _classCallCheck(this, _class);
+
+      return _super.apply(this, arguments);
+    }
+
+    _createClass(_class, [{
+      key: "init",
+      value: function init() {
+        var _get2;
+
+        for (var _len = arguments.length, args = new Array(_len), _key = 0; _key < _len; _key++) {
+          args[_key] = arguments[_key];
+        }
+
+        (_get2 = _get(_getPrototypeOf(_class.prototype), "init", this)).call.apply(_get2, [this].concat(args));
+
+        if (this.options.deferUrl) {
+          this.options.url = this.options.deferUrl;
+        }
+      }
+    }]);
+
+    return _class;
+  }($__default['default'].BootstrapTable);
+
+})));

InvenTree/InvenTree/static/bootstrap-table/extensions/filter-control/bootstrap-table-filter-control.css

@@ -0,0 +1,13 @@
+@charset "UTF-8";
+/**
+ * @author: Dennis Hernández
+ * @webSite: http://djhvscf.github.io/Blog
+ * @version: v2.1.1
+ */
+.no-filter-control {
+  height: 34px;
+}
+
+.filter-control {
+  margin: 0 2px 2px 2px;
+}