{"vulnerability": "cve-2026-6743", "sightings": [{"uuid": "2f0b1708-c5e9-4a8e-b165-09454820be32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-67430", "type": "published-proof-of-concept", "source": "https://github.com/modelcontextprotocol/ruby-sdk/security/advisories/GHSA-52jp-gj8w-j6xh", "content": "", "creation_timestamp": "2026-07-30T16:35:25.518956Z"}, {"uuid": "feade581-b2be-4ef2-8950-fd2a58037a56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-67431", "type": "published-proof-of-concept", "source": "https://github.com/modelcontextprotocol/ruby-sdk/security/advisories/GHSA-5p9g-j988-pcwv", "content": "", "creation_timestamp": "2026-07-30T16:35:20.729425Z"}, {"uuid": "1e75c43d-f719-499b-b2c3-b748ba67467c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-67432", "type": "published-proof-of-concept", "source": "https://github.com/modelcontextprotocol/ruby-sdk/security/advisories/GHSA-h669-8m4g-r2hc", "content": "", "creation_timestamp": "2026-07-30T16:35:23.183627Z"}, {"uuid": "54e8d5e9-0bdd-4b9a-8c85-8f983db25211", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-67438", "type": "published-proof-of-concept", "source": "https://github.com/OliveTin/OliveTin/security/advisories/GHSA-xc5w-4v5w-7x65", "content": "", "creation_timestamp": "2026-07-30T16:35:33.264665Z"}, {"uuid": "043656f1-b716-4442-b3db-014ebddf27e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-67437", "type": "published-proof-of-concept", "source": "https://github.com/OliveTin/OliveTin/security/advisories/GHSA-xpxj-f2fm-rqch", "content": "", "creation_timestamp": "2026-07-30T16:35:35.834770Z"}, {"uuid": "b344273a-47ab-4723-a02c-69aa6b59ac79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67431", "type": "seen", "source": "https://gist.github.com/Correctover/36ce05054d457c4fb176b23f08f9962b", "content": "# MCP Protocol Security in 2026: Why Patching Isn't Enough \u2014 And What Runtime Verification Solves\n\n> **Author**: Guigui Wang, Correctover  \n> **Date**: August 4, 2026  \n> **Relevance**: AI Agent infrastructure, MCP security, runtime verification standards\n\n---\n\n## TL;DR\n\nThe Model Context Protocol (MCP) has accumulated **at least 5 confirmed CVEs** in 2026 alone \u2014 DNS rebinding, session hijacking, session poisoning, cross-client data leaks, and Origin header bypass. Every single one follows the same pattern: the protocol trusts its environment without verifying it.\n\nI'm the author of **CCS (Correctover Computing Standard)**, the first IETF submission for AI Agent runtime verification (draft-correctover-ccs-00). This blog post shows how CCS's 7-dimensional runtime verification framework would have caught these vulnerabilities **systemically** \u2014 not as individual patches, but as a class of problems.\n\nIf you're running MCP-based AI agent infrastructure, you need to think about runtime verification, not just patching. Here's why.\n\n---\n\n## The MCP Vulnerability Catalog (2026)\n\n### CVE-2026-11624: DNS Rebinding Attack\n**Severity**: High  \n**Affected**: All MCP server implementations prior to v0.25  \n**Root Cause**: Missing `Origin` header validation\n\nAn attacker-controlled domain uses DNS rebinding to redirect a victim's browser to `127.0.0.1`, where a local MCP server is running. Because the server doesn't validate `Origin` headers, it accepts connections from the browser context \u2014 allowing arbitrary tool execution.\n\n**Impact**: Any website a developer visits while running an MCP server locally could weaponize this. File reads, command execution, database access \u2014 all through the agent's tool interface.\n\n### CVE-2026-67431: Session Poisoning (Ruby SDK)\n**CVSS**: 8.3 (High)  \n**Affected**: `mcp` Ruby gem < v0.23.0  \n**Root Cause**: Transport layer doesn't bind sessions to their owners\n\nThe stateful transport implementation failed to bind established sessions to their original owners or connection contexts. Any actor with access to a session ID can execute arbitrary tool calls.\n\n### CVE-2026-52869: Session Hijacking (Python SDK)\n**CVSS**: 7.1 (High)  \n**Affected**: MCP Python SDK < v1.27.2  \n**Root Cause**: JSON-RPC requests routed purely on user-controlled session IDs without ownership validation\n\nA bearer-token-authenticated attacker can hijack and inject JSON-RPC messages into another client's session by supplying their session ID. The transport layer accepts any valid token and routes to the target session.\n\n### CVE-2026-25536: Cross-Client Data Leak (TypeScript SDK)\n**CVSS**: 7.1 (High)  \n**Affected**: `@modelcontextprotocol/sdk` v1.10.0 through v1.25.3  \n**Root Cause**: Race condition in shared server/transport state\n\nWhen a single server or transport instance serves multiple clients, one client's tool results, notifications, and sampling requests can be delivered to another client. The trigger is ordinary concurrent load, not a crafted attack.\n\n### OX Security Findings: STDIO Transport Architecture\nThe MCP STDIO transport spawns a new process for every connection. This architectural choice means:\n- Each connection has its own process boundary (isolation?)\n- But also: each connection can access the full host system\n- No centralized verification of what the spawned process does\n\n---\n\n## The Pattern: Protocol Trust Without Runtime Verification\n\nLook at all five CVEs. They share a fundamental pattern:\n\n> **MCP trusts its environment. It assumes that if you have a valid connection, you're authorized. If you have a session ID, you own it. If you can reach localhost, you're a legitimate client.**\n\nThis is a **design-level assumption**, not a bug. And it's the same assumption that causes every new CVE.\n\nPatching one vulnerability doesn't fix the pattern:\n- Adding Origin validation fixes DNS rebinding but doesn't prevent the next spoofing attack\n- Binding sessions to owners prevents hijacking but doesn't validate what the session does\n- Isolating transport state prevents leaks but doesn't verify tool execution intent\n\nWhat MCP needs is not another patch. It needs **runtime verification** \u2014 continuous, systematic validation of every agent action against its authorization and intent.\n\n---\n\n## How CCS Solves This Systemically\n\nCCS (draft-correctover-ccs-00) is a 7-dimensional runtime verification framework submitted to IETF. Here's how each dimension addresses the MCP vulnerability pattern:\n\n### 1. Structure Verification\n**What it checks**: Is the incoming request structurally valid? Does it conform to the expected schema?\n\n**Catches**: Malformed JSON-RPC, unexpected tool call parameters, requests that don't match the server's capability declaration.\n\n### 2. Schema Verification  \n**What it checks**: Does the request match the declared tool/resource schema?\n\n**Catches**: Cross-client data leaks (responses with wrong schema), session poisoning (requests with wrong parameter types).\n\n### 3. Latency Verification\n**What it checks**: Is the response time within expected bounds?\n\n**Catches**: DNS rebinding attacks (abnormal latency patterns when browser proxies to localhost), replay attacks (timing anomalies).\n\n### 4. Cost Verification\n**What it checks**: Does the operation stay within declared resource bounds?\n\n**Catches**: Resource exhaustion through tool spam, unexpected computational costs from hijacked sessions.\n\n### 5. Identity Verification\n**What it checks**: Is the requesting entity who it claims to be? Is the session bound to the authenticated principal?\n\n**Catches**: Session hijacking (CVE-2026-52869), session poisoning (CVE-2026-67431). CCS binds session identity to the authenticated principal at the transport layer.\n\n### 6. Integrity Verification\n**What it checks**: Has the data been tampered with? Is the response from the expected source?\n\n**Catches**: Cross-client data leaks (CVE-2026-25536), response injection. CCS verifies data integrity at the byte level.\n\n### 7. Security Verification\n**What it checks**: Does the observed behavior match the declared authorization policy?\n\n**Catches**: DNS rebinding (CVE-2026-11624), STDIO process escape. CCS verifies that every tool execution stays within the declared authorization boundary, regardless of the transport mechanism.\n\n### Performance\n- **P50 latency**: ~133\u03bcs (out-of-process) / ~7.5\u03bcs (in-process)\n- **Verification mode**: Continuous, per-action\n- **False positive rate**: 0% across 28 audited projects\n\n---\n\n## The Self-Evolution Problem\n\nHere's what makes this worse: MCP is a **living protocol**. New transports are added. New SDKs are implemented. New tool patterns emerge. Every change introduces new attack surfaces.\n\nStatic patches can't keep up. You need a verification engine that **evolves** with the protocol.\n\nThat's why CCS includes a self-evolving detection engine (MCPFuzz):\n- **Layer 1**: Static analysis of known vulnerability patterns\n- **Layer 2**: Dynamic fuzzing with semantic-aware test generation\n- **Layer 3**: Behavioral analysis that discovers new bypass patterns autonomously\n\nThis isn't a rule engine. It's an agent that continuously learns what \"normal\" MCP behavior looks like and flags deviations. It achieved **0 false positives** across 28 production projects in the agent ecosystem.\n\n---\n\n## What This Means for You\n\n### If you're an MCP server operator:\n- Upgrade to the latest SDK versions (v0.25+ for Python, v0.23.0+ for Ruby, v1.26.0+ for TypeScript)\n- Implement Origin header validation\n- Bind sessions to authenticated principals\n- Isolate transport state per client\n\nBut also: **deploy runtime verification**. The patches fix known CVEs. CCS prevents the next class of vulnerabilities.\n\n### If you're building on MCP:\n- Don't assume the protocol is secure. It's a living standard with fundamental trust assumptions.\n- Add CCS verification to your agent pipeline. 133\u03bcs overhead is negligible compared to the risk.\n- Audit your tool execution policies. What is your agent authorized to do? CCS enforces that at runtime.\n\n### If you're an enterprise deploying AI agents:\n- MCP is the connective tissue between your LLM and your enterprise tools (databases, APIs, file systems).\n- A vulnerability in MCP is a vulnerability in your entire agent infrastructure.\n- Runtime verification is not optional. It's the difference between \"we patched the known CVEs\" and \"we systematically prevent the class of problems.\"\n\n---\n\n## The Standard Matters\n\nCCS is not just my project. It's submitted to IETF (draft-correctover-ccs-00, Submission #167254). This means:\n- It's a community standard, not a vendor lock-in\n- It's transparent, auditable, and open\n- It's designed to be adopted across the ecosystem\n\nThe DOI (10.5281/zenodo.21783723) provides timestamped proof of priority. The ccs-verifier SDK is on PyPI (v0.4.1). The code is open source.\n\nI'm not selling anything. I'm establishing a standard and proving it works. The question is whether the ecosystem adopts it before or after the next major MCP vulnerability makes headlines.\n\n---\n\n## Resources\n\n- **CCS IETF Draft**: https://datatracker.ietf.org/submit/status/167254/\n- **CCS DOI**: https://doi.org/10.5281/zenodo.21783723\n- **ccs-verifier SDK**: https://pypi.org/project/ccs-verifier/\n- **GitHub**: https://github.com/Correctover/ccs-verifier\n- **MCP CVE-2026-11624**: https://cvereports.com/reports/CVE-2026-11624\n- **MCP CVE-2026-52869**: https://cvereports.com/reports/CVE-2026-52869\n\n---\n\n*Guigui Wang is the author of CCS and founder of Correctover. Correctover's mission is to make AI Agent runtime verification a standard practice, not an afterthought.*\n", "creation_timestamp": "2026-08-04T06:51:03.379559Z"}, {"uuid": "3a3029a5-22b8-482a-a349-869f28b822b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67435", "type": "seen", "source": "https://gist.github.com/alon710/d1939c63ece21d1bd9e89d2add282b5b", "content": "# CVE-2026-67435: CVE-2026-67435: Custom Authentication Header Leakage via Cross-Origin Redirects in linuxfabrik-lib\n\n> **CVSS Score:** 6.0\n> **Published:** 2026-07-30\n> **Full Report:** https://cvereports.com/reports/CVE-2026-67435\n\n## Summary\nCVE-2026-67435 is a security vulnerability in the linuxfabrik-lib Python library prior to version 6.0.0. When performing HTTP requests with follow_redirects enabled, custom authentication headers (such as X-Auth-Token or X-Api-Key) are forwarded during cross-origin redirects. A malicious or compromised server can leverage this behavior to capture sensitive monitoring and administrative credentials, leading to potential unauthorized access and Server-Side Request Forgery (SSRF).\n\n## TL;DR\nA vulnerability in linuxfabrik-lib prior to 6.0.0 forwards custom authentication headers (such as X-Auth-Token or X-Api-Key) during cross-origin redirects, allowing remote attackers to exfiltrate administrative credentials.\n\n## Technical Details\n\n- **CWE ID**: CWE-200, CWE-918\n- **Attack Vector**: Network\n- **CVSS v4.0 Score**: 6.0\n- **EPSS Score**: 0.00286 (Percentile: 20.87%)\n- **Impact**: Credential Exposure\n- **Exploit Status**: None\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- linuxfabrik-lib\n- Linuxfabrik Monitoring Plugins\n- **linuxfabrik-lib**: < 6.0.0 (Fixed in: `6.0.0`)\n\n## Mitigation\n\n- Upgrade linuxfabrik-lib to version 6.0.0 or higher.\n- Disable redirect handling by passing follow_redirects=False inside client calls.\n- Restrict network-level egress traffic for monitoring servers to prevent connection handshakes with external untrusted destinations.\n\n**Remediation Steps:**\n1. Identify all deployment instances of linuxfabrik monitoring scripts within local cronjobs, configuration modules, or service orchestrators.\n2. Update dependencies in requirements.txt or dependency lock files to specify linuxfabrik-lib>=6.0.0.\n3. Deploy the updated library package across all monitoring nodes and verify correct processing of monitoring endpoints.\n4. Apply strict firewall configurations restricting HTTP/HTTPS egress traffic from administrative monitoring subnets to verified destination systems.\n\n## References\n\n- [GitHub Security Advisory GHSA-4jc5-g844-4x33](https://github.com/Linuxfabrik/monitoring-plugins/security/advisories/GHSA-4jc5-g844-4x33)\n- [Fix Commit: Strip custom headers on cross-origin redirects](https://github.com/Linuxfabrik/lib/commit/6573ff9347e541200305d278d2663d2e54e052ff)\n- [linuxfabrik-lib Release v6.0.0](https://github.com/Linuxfabrik/lib/releases/tag/v6.0.0)\n- [NVD Record for CVE-2026-67435](https://nvd.nist.gov/vuln/detail/CVE-2026-67435)\n- [CVE.org Record for CVE-2026-67435](https://www.cve.org/CVERecord?id=CVE-2026-67435)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-67435) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-31T01:31:12.240111Z"}, {"uuid": "1e681153-7a81-4e69-b8e0-2b0870cfa1b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67431", "type": "seen", "source": "https://gist.github.com/alon710/eb7bbb63a594430d7d6ab18e1b915ebd", "content": "# CVE-2026-67431: CVE-2026-67431: Session Poisoning via Improper Access Control in Model Context Protocol Ruby SDK\n\n> **CVSS Score:** 8.3\n> **Published:** 2026-07-30\n> **Full Report:** https://cvereports.com/reports/CVE-2026-67431\n\n## Summary\nAn Improper Access Control vulnerability exists in the Model Context Protocol (MCP) Ruby SDK prior to version 0.23.0. The stateful transport implementation failed to bind established sessions to their original owners or connection contexts, enabling unauthorized actors with access to active session IDs to execute arbitrary tools or alter session state.\n\n## TL;DR\nA lack of session binding in the MCP Ruby SDK allows remote attackers possessing a valid session ID to execute arbitrary tool calls and manipulate session states.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-284\n- **Attack Vector**: Network (AV:N)\n- **CVSS v4.0 Score**: 8.3\n- **EPSS Score**: 0.00276\n- **Exploit Status**: POC (in official repository tests)\n- **KEV Status**: Not Listed\n- **Impact**: High Integrity, Low Availability\n\n## Affected Systems\n\n- mcp (RubyGems)\n- Model Context Protocol Ruby SDK\n- **mcp**: < 0.23.0 (Fixed in: `0.23.0`)\n\n## Mitigation\n\n- Upgrade the mcp gem to version 0.23.0 or higher.\n- Implement the session_request_validator hook to validate incoming requests against active user authentication states.\n- Limit session idle timeouts and maximum concurrent sessions to reduce exposure.\n\n**Remediation Steps:**\n1. Identify all deployments using the mcp Ruby gem.\n2. Update the Gemfile to require version 0.23.0 or higher: gem 'mcp', '>= 0.23.0'.\n3. Execute bundle update mcp to install the patched version.\n4. Locate instantiate configurations of MCP::Server::Transports::StreamableHTTPTransport and define a custom session_request_validator callback.\n5. Ensure the callback validates that the user environment (cookies, tokens) matches the active session ownership context.\n\n## References\n\n- [https://www.cve.org/CVERecord?id=CVE-2026-67431](https://www.cve.org/CVERecord?id=CVE-2026-67431)\n- [https://github.com/modelcontextprotocol/ruby-sdk/security/advisories/GHSA-5p9g-j988-pcwv](https://github.com/modelcontextprotocol/ruby-sdk/security/advisories/GHSA-5p9g-j988-pcwv)\n- [https://github.com/modelcontextprotocol/ruby-sdk/commit/35466605319a34e4c7808712ae9bb1ca1afb2356](https://github.com/modelcontextprotocol/ruby-sdk/commit/35466605319a34e4c7808712ae9bb1ca1afb2356)\n- [https://github.com/modelcontextprotocol/ruby-sdk/releases/tag/v0.23.0](https://github.com/modelcontextprotocol/ruby-sdk/releases/tag/v0.23.0)\n- [https://nvd.nist.gov/vuln/detail/CVE-2026-67431](https://nvd.nist.gov/vuln/detail/CVE-2026-67431)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-67431) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-31T02:31:09.791759Z"}, {"uuid": "759f23b0-771d-4bde-936d-1d00d7b13c82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67432", "type": "seen", "source": "https://gist.github.com/alon710/0adfedd2017833afe3a395108d8a9b0f", "content": "# CVE-2026-67432: CVE-2026-67432: High Severity Denial of Service in Model Context Protocol (MCP) Ruby SDK\n\n> **CVSS Score:** 7.5\n> **Published:** 2026-07-30\n> **Full Report:** https://cvereports.com/reports/CVE-2026-67432\n\n## Summary\nAn uncontrolled memory allocation vulnerability (CWE-770) exists in the Model Context Protocol (MCP) Ruby SDK (the `mcp` gem) prior to version 0.23.0. The SDK's StreamableHTTPTransport and StdioTransport layers fail to impose bounds on incoming payloads. An unauthenticated attacker can exploit these issues by transmitting massive, nested payloads to exhaust worker memory, leading to process termination.\n\n## TL;DR\nThe `mcp` Ruby gem prior to 0.23.0 is vulnerable to unauthenticated, remote denial of service (OOM crash) due to unbounded HTTP body reading, unsafe JSON parsing depth, and unlimited standard input buffering.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-770\n- **Attack Vector**: Network\n- **CVSS v3.1 Score**: 7.5 (High)\n- **EPSS Score**: 0.00436 (35.87%)\n- **Impact**: Denial of Service (OOM Crash)\n- **Exploit Status**: Proof-of-Concept\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- Model Context Protocol Ruby SDK (mcp gem)\n- **mcp**: < 0.23.0 (Fixed in: `0.23.0`)\n\n## Mitigation\n\n- Upgrade the mcp gem to 0.23.0 or higher.\n- Configure application firewalls to drop payload sizes over a safe limit (e.g. 4MB).\n- Configure limits programmatically when initializing HTTP and Stdio transports.\n\n**Remediation Steps:**\n1. In Gemfile, replace existing gem declaration with: gem 'mcp', '>= 0.23.0'\n2. Run 'bundle update mcp' to apply the patch.\n3. Validate application starts successfully and transport initializations are supplied with explicit size configurations if custom thresholds are needed.\n\n## References\n\n- [GitHub Advisory GHSA-h669-8m4g-r2hc](https://github.com/modelcontextprotocol/ruby-sdk/security/advisories/GHSA-h669-8m4g-r2hc)\n- [Security Fix Commit](https://github.com/modelcontextprotocol/ruby-sdk/commit/772e0cb1f9db69312006926eee59a7287ad50166)\n- [v0.23.0 Release Notes](https://github.com/modelcontextprotocol/ruby-sdk/releases/tag/v0.23.0)\n- [CVE Record on CVE.org](https://www.cve.org/CVERecord?id=CVE-2026-67432)\n- [NVD Vulnerability Detail](https://nvd.nist.gov/vuln/detail/CVE-2026-67432)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-67432) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-31T03:34:09.041044Z"}, {"uuid": "73b5608c-a2de-465e-9a16-cfba84519c11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67430", "type": "seen", "source": "https://gist.github.com/alon710/2fc91b89bbac8024e4e2b03ecca2ce62", "content": "# CVE-2026-67430: CVE-2026-67430: Denial of Service via Unbounded Session Retention in Model Context Protocol Ruby SDK\n\n> **CVSS Score:** 5.3\n> **Published:** 2026-07-30\n> **Full Report:** https://cvereports.com/reports/CVE-2026-67430\n\n## Summary\nCVE-2026-67430 is a medium-severity Denial of Service (DoS) vulnerability in the Model Context Protocol (MCP) Ruby SDK (packaged as the mcp gem) versions prior to 0.23.0. In stateful deployments using the StreamableHTTPTransport class, client session states are retained in an in-memory hash map. Because the transport implements a nil idle timeout by default, the background scavenger process is suppressed. Remote, unauthenticated attackers can flood the endpoint with initialize requests, rapidly consuming system memory and triggering an Out-of-Memory (OOM) crash.\n\n## TL;DR\nUnauthenticated remote attackers can crash stateful MCP Ruby SDK servers by repeatedly triggering new initialize requests. Because the SDK lacks default session limits and idle timeouts, every connection allocates a persistent context in RAM, leading to memory exhaustion and service crashes.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-770\n- **Attack Vector**: Network (AV:N)\n- **CVSS v3.1 Score**: 5.3\n- **EPSS Score**: 0.00291\n- **EPSS Percentile**: 21.41%\n- **Impact**: Denial of Service (DoS) via memory exhaustion (OOM)\n- **Exploit Status**: PoC Available\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Model Context Protocol Ruby SDK (mcp gem) running stateful transports\n- **mcp (Ruby SDK)**: >= 0.6.0, < 0.23.0 (Fixed in: `0.23.0`)\n\n## Mitigation\n\n- Upgrade the mcp gem to version 0.23.0 or later.\n- Configure tight session_idle_timeout and max_sessions values on StreamableHTTPTransport initialization.\n- Utilize stateless: true if stateful session management is not required.\n- Deploy a reverse proxy (e.g., Nginx, HAProxy) in front of the application to enforce request and connection rate-limiting.\n\n**Remediation Steps:**\n1. Update your Gemfile to reference mcp version 0.23.0 or later.\n2. Run bundle update mcp to retrieve and apply the security patch.\n3. Optionally, explicitly set session_idle_timeout and max_sessions parameters in your StreamableHTTPTransport.new initializer block.\n4. Restart the Ruby application server to apply the code changes.\n\n## References\n\n- [GHSA-52jp-gj8w-j6xh: Model Context Protocol Ruby SDK Unbounded Session Retention DoS](https://github.com/modelcontextprotocol/ruby-sdk/security/advisories/GHSA-52jp-gj8w-j6xh)\n- [Core Session Hardening Commit](https://github.com/modelcontextprotocol/ruby-sdk/commit/afb968c468c178c4d3294b423fcce250621692f4)\n- [Release Version 0.23.0 Tag](https://github.com/modelcontextprotocol/ruby-sdk/releases/tag/v0.23.0)\n- [CVE-2026-67430 Record](https://www.cve.org/CVERecord?id=CVE-2026-67430)\n- [NVD Entry for CVE-2026-67430](https://nvd.nist.gov/vuln/detail/CVE-2026-67430)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-67430) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-31T04:31:56.372398Z"}, {"uuid": "a5e5918c-b100-48a0-89aa-e4dfcacd70fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67438", "type": "seen", "source": "https://gist.github.com/alon710/006ebdb624799640fa8e05feb88f3b11", "content": "# CVE-2026-67438: CVE-2026-67438: OS Command Injection via Custom regex: Argument Type Bypassing Shell Safety Check in OliveTin\n\n> **CVSS Score:** 6.6\n> **Published:** 2026-07-30\n> **Full Report:** https://cvereports.com/reports/CVE-2026-67438\n\n## Summary\nAn OS command injection vulnerability exists in OliveTin versions >= 3000.2.0 and < 3000.17.0. The flaw stems from a validation bypass in the shell safety engine, which fails to recognize custom regular expression arguments as unsafe for actions run in shell execution mode. Furthermore, because these custom regex checks evaluate partial string matches, attackers can append arbitrary shell metacharacters to valid inputs. This allows unauthenticated or low-privilege users who are authorized to run configured actions to inject shell commands and achieve arbitrary remote code execution on the host system.\n\n## TL;DR\nOliveTin versions before 3000.17.0 are vulnerable to OS command injection because the shell argument validator excludes 'regex:' argument types from its safety blocklist. Concurrently, unanchored regex validations allow attackers to bypass checks by placing a valid match at the beginning of their input followed by malicious shell commands.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-78 (OS Command Injection)\n- **Attack Vector**: Network\n- **CVSS v3.1 Score**: 6.6 (Medium)\n- **EPSS Score**: 0.00995\n- **Exploit Status**: Proof-of-Concept\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- OliveTin (Server Deployments)\n- OliveTin Docker Containers\n- OliveTin Systemd Services\n- **OliveTin**: >= 3000.2.0, < 3000.17.0 (Fixed in: `3000.17.0`)\n\n## Mitigation\n\n- Upgrade OliveTin to version 3000.17.0 or later to apply the validation enforcement fixes.\n- Convert existing shell-mode actions to exec-mode actions inside config.yaml to eliminate the shell parsing vector.\n- Ensure all custom regular expressions are strictly bounded with start and end anchors (^ and $) if used in other validated contexts.\n\n**Remediation Steps:**\n1. Review the current OliveTin configuration files (config.yaml) for combinations of 'shell:' and 'type: regex:'.\n2. Replace 'shell:' keys with structured 'exec:' arrays to ensure arguments are handled through secure processes.\n3. Update Docker compose files, Helm charts, or system service binaries to pull OliveTin image/binary version 3000.17.0 or greater.\n4. Restart the OliveTin service and verify configuration logs to ensure no initialization errors occur during loading.\n\n## References\n\n- [GitHub Security Advisory GHSA-xc5w-4v5w-7x65](https://github.com/OliveTin/OliveTin/security/advisories/GHSA-xc5w-4v5w-7x65)\n- [OliveTin Fix Commit 995ff79736f2bccc364448a3ece84087b550b232](https://github.com/OliveTin/OliveTin/commit/995ff79736f2bccc364448a3ece84087b550b232)\n- [NVD CVE-2026-67438 Entry](https://nvd.nist.gov/vuln/detail/CVE-2026-67438)\n- [CVE.org CVE-2026-67438 Record](https://www.cve.org/CVERecord?id=CVE-2026-67438)\n- [OliveTin Shell vs Exec Execution Reference](https://docs.olivetin.app/action_execution/shellvsexec.html)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-67438) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-31T08:32:20.883397Z"}, {"uuid": "7202750f-8639-472b-adb2-545325765359", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67439", "type": "seen", "source": "https://gist.github.com/alon710/4da77a0fb37a106d6065c5dabb250f4c", "content": "# CVE-2026-67439: CVE-2026-67439: Incorrect Authorization Leading to Log Leak in OliveTin\n\n> **CVSS Score:** 4.3\n> **Published:** 2026-07-30\n> **Full Report:** https://cvereports.com/reports/CVE-2026-67439\n\n## Summary\nAn incorrect authorization vulnerability (CWE-863) exists in OliveTin prior to version 3000.17.0. The flaw allows authenticated users who are authorized to execute commands but restricted from viewing logs to bypass this restriction. By utilizing synchronous endpoints, attackers can directly access execution outputs containing sensitive system data, credentials, and environmental configurations.\n\n## TL;DR\nOliveTin failed to validate log-viewing permissions on synchronous execution endpoints, leaking sensitive shell outputs to restricted users.\n\n## Technical Details\n\n- **CWE ID**: CWE-863 (Incorrect Authorization)\n- **Attack Vector**: Network (AV:N)\n- **Privileges Required**: Low (PR:L)\n- **CVSS v3.1 Score**: 4.3 (Medium)\n- **EPSS Score**: 0.00252 (Percentile: 16.75%)\n- **Exploit Status**: None (No public PoC)\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- OliveTin Core Server\n- **OliveTin**: >= 3000.7.0, < 3000.17.0 (Fixed in: `3000.17.0`)\n\n## Mitigation\n\n- Restrict 'exec' permissions to only fully trusted administrators.\n- Audit command outputs to verify no sensitive data is written to standard output or standard error.\n- Monitor application log endpoints for anomalous synchronous API calls.\n\n**Remediation Steps:**\n1. Upgrade the OliveTin installation to version 3000.17.0 or higher.\n2. Validate the configurations in /etc/OliveTin/config.yaml for data exposure.\n3. Restart the OliveTin service to apply configuration and binary upgrades.\n\n## References\n\n- [GitHub Security Advisory GHSA-jm28-2wcr-qf3h](https://github.com/OliveTin/OliveTin/security/advisories/GHSA-jm28-2wcr-qf3h)\n- [NVD CVE-2026-67439 Detail](https://nvd.nist.gov/vuln/detail/CVE-2026-67439)\n- [CVE.org CVE Record](https://www.cve.org/CVERecord?id=CVE-2026-67439)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-67439) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-31T09:31:22.270843Z"}, {"uuid": "6d46f657-479b-436e-a609-06f193140da1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67437", "type": "seen", "source": "https://gist.github.com/alon710/ebcd683ed5c708ce9306a8ed3912a91a", "content": "# CVE-2026-67437: CVE-2026-67437: Unauthenticated Denial of Service via OAuth2 State Memory Exhaustion in OliveTin\n\n> **CVSS Score:** 7.5\n> **Published:** 2026-07-30\n> **Full Report:** https://cvereports.com/reports/CVE-2026-67437\n\n## Summary\nAn uncontrolled resource consumption vulnerability (CWE-400) in OliveTin allows unauthenticated remote attackers to exhaust server memory and trigger a denial of service (DoS). By repeatedly initiating the OAuth2 login flow without completing it, attackers can force the server to allocate state variables in an unbounded in-memory map. This heap-based resource exhaustion eventually causes the host operating system to terminate the OliveTin process via the Out-Of-Memory (OOM) killer.\n\n## TL;DR\nUnauthenticated remote attackers can exhaust OliveTin server memory and crash the application by flooding the OAuth2 login endpoint, forcing unbounded allocation of state variables in memory.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-400\n- **Attack Vector**: Network\n- **CVSS v3.1**: 7.5\n- **EPSS Score**: 0.00354\n- **Impact**: Denial of Service (DoS)\n- **Exploit Status**: PoC (Proof-of-Concept)\n- **KEV Status**: Not listed\n\n## Affected Systems\n\n- OliveTin\n- **OliveTin**: >= 3000.0.0, < 3000.17.0 (Fixed in: `3000.17.0`)\n\n## Mitigation\n\n- Upgrade to OliveTin 3000.17.0 or later\n- Implement rate-limiting on the /oauth/login route via a reverse proxy (e.g., Nginx)\n- Restrict access to the OliveTin interface using firewall rules or VPNs\n\n**Remediation Steps:**\n1. Identify running versions of OliveTin using asset management or container manifests.\n2. Deploy the 3000.17.0 update across affected environments.\n3. Configure reverse proxies to limit HTTP requests to /oauth/login to prevent resource exhaustion or service unavailability.\n\n## References\n\n- [GHSA-xpxj-f2fm-rqch: OliveTin OAuth2 state memory exhaustion advisory](https://github.com/OliveTin/OliveTin/security/advisories/GHSA-xpxj-f2fm-rqch)\n- [NVD Entry for CVE-2026-67437](https://nvd.nist.gov/vuln/detail/CVE-2026-67437)\n- [CVE.org Record for CVE-2026-67437](https://www.cve.org/CVERecord?id=CVE-2026-67437)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-67437) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-31T10:32:17.501159Z"}, {"uuid": "b2991d1b-9f8e-4f02-96af-51f7d0d32dd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67434", "type": "seen", "source": "https://gist.github.com/jbourdin/b4698a8921172010905014e8c9f127f9", "content": "- **Trello**\n    - [Helsinki : Portail de retour - Sylius - int\u00e9gration front du portail de retour](https://trello.com/c/mhcc7YaC/2401-helsinki-portail-de-retour-sylius-int%C3%A9gration-front-du-portail-de-retour) **TEMP - EPIC - Droit de r\u00e9tractation**\n        - *feat(helsinki): Add return portal to Helsinki order details* [\\#11757](https://github.com/Wishibam/Ecommerce-sylius/pull/11757)\n    - [\u26a0\ufe0fAction prod\u26a0\ufe0f\ud83d\udd14 Refonte TVO : tracking du volet d'alerte \u00ab retour en stock \u00bb](https://trello.com/c/SXyhrSQb/3834-%E2%9A%A0%EF%B8%8Faction-prod%E2%9A%A0%EF%B8%8F%F0%9F%94%94-refonte-tvo-tracking-du-volet-dalerte-retour-en-stock) **\ud83e\udd13 Testing**\n        - *:sparkles: feat: track back-in-stock alert panel usage* [\\#11791](https://github.com/Wishibam/Ecommerce-sylius/pull/11791)\n    - [TVO - Fiche produit - Ajout des blocs \"Mati\u00e8re et entretien\" & \"Caract\u00e9ristiques\"](https://trello.com/c/AbsKmIzk/3633-tvo-fiche-produit-ajout-des-blocs-mati%C3%A8re-et-entretien-caract%C3%A9ristiques) **\ud83e\udd13 Testing**\n        - *feat(tvo): add Mati\u00e8re et entretien & Caract\u00e9ristiques blocks on PDP* [\\#11812](https://github.com/Wishibam/Ecommerce-sylius/pull/11812)\n    - [\\[Migration\\]\\[A.2\\] D\u00e9mant\u00e8lement Setono Analytics + Tag-Bag](https://trello.com/c/uJN0Gkiz/3856-migrationa2-d%C3%A9mant%C3%A8lement-setono-analytics-tag-bag) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore(migration): internalize setono analytics + tag-bag as src/Component \\[A.2\\]* [\\#11846](https://github.com/Wishibam/Ecommerce-sylius/pull/11846)\n    - [\\[Migration\\]\\[A.4.1\\] Internaliser bitbag/wishlist-plugin dans src/Component/Wishlist](https://trello.com/c/U9dQGx1l/3863-migrationa41-internaliser-bitbag-wishlist-plugin-dans-src-component-wishlist) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: internalize bitbag/wishlist-plugin \\[A.4.1\\]* [\\#11856](https://github.com/Wishibam/Ecommerce-sylius/pull/11856)\n    - [\\[Migration\\]\\[A.4.2/A.4.3\\] Internaliser bring & deep-link dans src/Component](https://trello.com/c/RsLN5SNT/3864-migrationa42-a43-internaliser-bring-deep-link-dans-src-component) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: internalize bring & deep-link plugins \\[A.4.2, A.4.3\\]* [\\#11861](https://github.com/Wishibam/Ecommerce-sylius/pull/11861)\n    - [\\[Migration\\]\\[A.5\\] Bumps frontend \u00ab safe \u00bb + suppression des packages morts](https://trello.com/c/vI6k61gt/3873-migrationa5-bumps-frontend-safe-suppression-des-packages-morts) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: bump safe frontend deps + prune dead packages \\[A.5\\]* [\\#11875](https://github.com/Wishibam/Ecommerce-sylius/pull/11875)\n    - [\\[Migration\\]\\[A.6\\] Pr\u00e9paration Doctrine pour DBAL 3 (monkey-patch migrations)](https://trello.com/c/8mdyVMwg/3880-migrationa6-pr%C3%A9paration-doctrine-pour-dbal-3-monkey-patch-migrations) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: replace Doctrine migration monkey-patch for DBAL 3 \\[A.6\\]* [\\#11893](https://github.com/Wishibam/Ecommerce-sylius/pull/11893)\n    - [TVO - Express checkout : adresse tronqu\u00e9e \u2014 nom de rue perdu (Apple Pay line1/line2)](https://trello.com/c/dIrl0I1a/3884-tvo-express-checkout-adresse-tronqu%C3%A9e-nom-de-rue-perdu-apple-pay-line1-line2) **\ud83e\udd13 Testing**\n        - *:bug: fix: join express checkout wallet address line1/line2 into street* [\\#11914](https://github.com/Wishibam/Ecommerce-sylius/pull/11914)\n    - [\\[P0\\] Express checkout : re-v\u00e9rifier le montant du PaymentIntent au complete](https://trello.com/c/qJdTR9Jc/3885-p0-express-checkout-re-v%C3%A9rifier-le-montant-du-paymentintent-au-complete) **\ud83d\udc8e In Review**\n        - *:bug: fix: verify express checkout PaymentIntent amount at completion* [\\#11916](https://github.com/Wishibam/Ecommerce-sylius/pull/11916)\n    - [\\[P0\\] Webhook Stripe : rembourser r\u00e9ellement les charges des commandes refus\u00e9es/annul\u00e9es](https://trello.com/c/fyJeMD3L/3886-p0-webhook-stripe-rembourser-r%C3%A9ellement-les-charges-des-commandes-refus%C3%A9es-annul%C3%A9es) **\ud83d\udc8e In Review**\n        - *:bug: fix: refund Stripe charges captured for refused or cancelled orders* [\\#11918](https://github.com/Wishibam/Ecommerce-sylius/pull/11918)\n    - [\\[P1\\] Express checkout : pinner explicitement les wallets autoris\u00e9s (quick win)](https://trello.com/c/tEpmPM9l/3890-p1-express-checkout-pinner-explicitement-les-wallets-autoris%C3%A9s-quick-win) **\ud83e\udd13 Testing**\n        - *:bug: fix: restrict express checkout wallets to an explicit allowlist* [\\#11919](https://github.com/Wishibam/Ecommerce-sylius/pull/11919)\n    - [\\[P0\\] Express checkout : commandes \u00e0 fonds captur\u00e9s supprim\u00e9es par la purge des carts + cha\u00eene d'abort morte](https://trello.com/c/1Wo7zGP5/3887-p0-express-checkout-commandes-%C3%A0-fonds-captur%C3%A9s-supprim%C3%A9es-par-la-purge-des-carts-cha%C3%AEne-dabort-morte) **\ud83d\udc8e In Review**\n        - *:bug: fix: protect express checkout captured-funds carts from the purge* [\\#11920](https://github.com/Wishibam/Ecommerce-sylius/pull/11920)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f \u203c\ufe0f Nouveau Feeds - Faire tourner tous les nouveaux feeds sur toutes les preprods/prods](https://trello.com/c/Kr8UhDAv/3910-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-%EF%B8%8F-nouveau-feeds-faire-tourner-tous-les-nouveaux-feeds-sur-toutes-les-preprods-prods) **\ud83e\udee1 To Do JC**\n        - *:sparkles: feat: drive-to-store feeds parity with legacy Setono* [\\#11979](https://github.com/Wishibam/Ecommerce-sylius/pull/11979)\n    - [Helsinki \u2014 Funnel checkout GA4 vide : \u00e9v\u00e9nements e-commerce manquants/incomplets](https://trello.com/c/j0yQGSFm/3921-helsinki-funnel-checkout-ga4-vide-%C3%A9v%C3%A9nements-e-commerce-manquants-incomplets) **\ud83c\udf44 Ready for testing**\n        - *:bug: fix: \u00e9mettre le funnel checkout GA4 complet* [\\#11980](https://github.com/Wishibam/Ecommerce-sylius/pull/11980)\n        - *:bug: fix: \u00e9mettre add\\_payment\\_info quand l'\u00e9tape de paiement est saut\u00e9e* [\\#12014](https://github.com/Wishibam/Ecommerce-sylius/pull/12014)\n    - [FEAT-0006 \u2014 Regroupement des emails d'annulation d'articles](https://trello.com/c/bBiV4jTE/3415-feat-0006-regroupement-des-emails-dannulation-darticles) **\ud83e\udd13 Testing**\n        - *:bug: fix: FEAT-0006 cancellation email grouping QA feedback* [\\#11984](https://github.com/Wishibam/Ecommerce-sylius/pull/11984)\n    - [Min-height pages React](https://trello.com/c/Rti8eFXb/3919-min-height-pages-react) **\ud83c\udf89 A MEP**\n        - *:bug: fix: add min-height on React pages to prevent footer flash* [\\#11987](https://github.com/Wishibam/Ecommerce-sylius/pull/11987)\n    - [SEO - TVO - changement de slug](https://trello.com/c/Gbb2tles/3908-seo-tvo-changement-de-slug) **\ud83e\udd13 Testing**\n        - *:bug: fix: clean up TVO brand page slugs with 301 redirects* [\\#11988](https://github.com/Wishibam/Ecommerce-sylius/pull/11988)\n    - [\u26a0\ufe0f action preprod/prod \u26a0\ufe0f \ud83d\uded2 Refonte Checkout #1 \u2014 La page Panier change de garde-robe](https://trello.com/c/qxdtlZxk/3851-%E2%9A%A0%EF%B8%8F-action-preprod-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%9B%92-refonte-checkout-1-la-page-panier-change-de-garde-robe) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): cart page QA feedback round* [\\#11990](https://github.com/Wishibam/Ecommerce-sylius/pull/11990)\n    - [\u26a0\ufe0f MEP \u26a0\ufe0f\u2b50 Google Customer Reviews sur TVO \u2014 brancher la machine \u00e0 \u00e9toiles](https://trello.com/c/7JA9u85M/3899-%E2%9A%A0%EF%B8%8F-mep-%E2%9A%A0%EF%B8%8F%E2%AD%90-google-customer-reviews-sur-tvo-brancher-la-machine-%C3%A0-%C3%A9toiles) **\ud83e\udd13 Testing**\n        - *:sparkles: feat: TVO Google Customer Reviews \u2014 GTIN produits sur thank you* [\\#11991](https://github.com/Wishibam/Ecommerce-sylius/pull/11991)\n    - [Fix : TypeError trim() null sur les share descriptions de channel (admin)](https://trello.com/c/o47Ek1Fo/3924-fix-typeerror-trim-null-sur-les-share-descriptions-de-channel-admin) **\ud83e\udd16 Testing tech**\n        - *:bug: fix: guard against null share descriptions in channel setter* [\\#11992](https://github.com/Wishibam/Ecommerce-sylius/pull/11992)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f \ud83d\udce6\ud83c\udf0d Mondial Relay sans fronti\u00e8res \u2014 points relais UE (v1 TVO)](https://trello.com/c/4X0QYlQ5/3918-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%93%A6%F0%9F%8C%8D-mondial-relay-sans-fronti%C3%A8res-points-relais-ue-v1-tvo) **\ud83d\udc8e In Review**\n        - *:sparkles: feat(mondial-relay): relay search follows the buyer's country* [\\#11994](https://github.com/Wishibam/Ecommerce-sylius/pull/11994)\n    - [\ud83d\udccd Refonte Checkout \u2014 La suggestion d'adresse qui fait mouche](https://trello.com/c/vF0T1FZU/3860-%F0%9F%93%8D-refonte-checkout-la-suggestion-dadresse-qui-fait-mouche) **\ud83d\ude80 To Do Vincent**\n        - *:bug: fix(tvo): address suggestion QA feedback round* [\\#11995](https://github.com/Wishibam/Ecommerce-sylius/pull/11995)\n        - *:bug: fix(tvo): keep the manual phone flag choice made on an empty field* [\\#12058](https://github.com/Wishibam/Ecommerce-sylius/pull/12058)\n    - [\ud83c\udf5e Refonte Checkout \u2014 Des toasts tout chauds pour les messages syst\u00e8me](https://trello.com/c/N70pstGO/3861-%F0%9F%8D%9E-refonte-checkout-des-toasts-tout-chauds-pour-les-messages-syst%C3%A8me) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): checkout toasts QA feedback round* [\\#11996](https://github.com/Wishibam/Ecommerce-sylius/pull/11996)\n    - [\ud83d\udd00 Refonte TVO : le variant s\u00e9lectionn\u00e9 saute en 1re position au lieu de rester \u00e0 sa place](https://trello.com/c/vQH5uxHz/3904-%F0%9F%94%80-refonte-tvo-le-variant-s%C3%A9lectionn%C3%A9-saute-en-1re-position-au-lieu-de-rester-%C3%A0-sa-place) **\ud83e\udd13 Testing**\n        - *:bug: fix: keep option values in place on overflowing variant axis* [\\#11998](https://github.com/Wishibam/Ecommerce-sylius/pull/11998)\n    - [TVO- mail order\\_open\\_return\\_withdrawn -remplacement de tag](https://trello.com/c/NK5CnCM2/3883-tvo-mail-orderopenreturnwithdrawn-remplacement-de-tag) **\ud83c\udf89 A MEP**\n        - *\ud83d\udc1b fix: orange \"return in progress\" badge on TVO withdrawal email* [\\#12000](https://github.com/Wishibam/Ecommerce-sylius/pull/12000)\n    - [SEO - ALL - Meta Title](https://trello.com/c/QDbDIPTu/3909-seo-all-meta-title) **\ud83e\udd13 Testing**\n        - *:sparkles: feat: add dedicated Meta Title for CMS pages* [\\#12001](https://github.com/Wishibam/Ecommerce-sylius/pull/12001)\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\ude9a Refonte Checkout #3 \u2014 Le Mode de livraison prend la route](https://trello.com/c/NDSNOimu/3854-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%9A%9A-refonte-checkout-3-le-mode-de-livraison-prend-la-route) **\ud83e\udd13 Testing**\n        - *:sparkles: feat(tvo): React checkout select shipping step (P3)* [\\#12011](https://github.com/Wishibam/Ecommerce-sylius/pull/12011)\n    - [Helsinki - Correction bug d'affichage en finnois en version mobile](https://trello.com/c/f9V6mA6z/3686-helsinki-correction-bug-daffichage-en-finnois-en-version-mobile) **\ud83c\udf89 A MEP**\n        - *:bug: fix: reduce Helsinki posts carousel title on mobile* [\\#12017](https://github.com/Wishibam/Ecommerce-sylius/pull/12017)\n    - [A ESTIMER : Google Shopping Feed : ajouter le Outlet Price en cas de promotion](https://trello.com/c/RnEgL53B/3867-a-estimer-google-shopping-feed-ajouter-le-outlet-price-en-cas-de-promotion) **\ud83e\udd13 Testing**\n        - *:sparkles: feat(helsinki): expose the outlet price in the Google Shopping feed* [\\#12020](https://github.com/Wishibam/Ecommerce-sylius/pull/12020)\n    - [\ud83c\udfbd \\[IS\\] Footer : \u00ab Notre accompagnement \u00bb devient \u00ab Nos services \u00bb et raccroche son lien](https://trello.com/c/H2X0XtqH/3932-%F0%9F%8E%BD-is-footer-notre-accompagnement-devient-nos-services-et-raccroche-son-lien) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: rename the Intersport footer column to \u00ab Nos services \u00bb and unlink its title* [\\#12026](https://github.com/Wishibam/Ecommerce-sylius/pull/12026)\n        - *:rewind: revert: Intersport footer \u00ab Nos services \u00bb (wrong target branch)* [\\#12037](https://github.com/Wishibam/Ecommerce-sylius/pull/12037)\n    - [Batavia - Probl\u00e8me sur l'affichage des variations](https://trello.com/c/MY6aNjLj/3931-batavia-probl%C3%A8me-sur-laffichage-des-variations) **\ud83e\udd13 Testing**\n        - *:bug: fix: deep-link Batavia PLP cards to the displayed color variant* [\\#12027](https://github.com/Wishibam/Ecommerce-sylius/pull/12027)\n    - [Batavia \u2014 Mails \u00ab produit indisponible \u00bb non re\u00e7us par les clients](https://trello.com/c/YLHFxnVs/3933-batavia-mails-produit-indisponible-non-re%C3%A7us-par-les-clients) **\ud83c\udf89 A MEP**\n        - *:bug: fix: validate admin email templates and log real send outcomes* [\\#12035](https://github.com/Wishibam/Ecommerce-sylius/pull/12035)\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\udcb3 Refonte Checkout #4 \u2014 Le Mode de paiement passe \u00e0 la caisse](https://trello.com/c/vDcvKX88/3855-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%92%B3-refonte-checkout-4-le-mode-de-paiement-passe-%C3%A0-la-caisse) **\ud83e\udd13 Testing**\n        - *:sparkles: feat(tvo): rebuild the checkout payment step and success page in React* [\\#12051](https://github.com/Wishibam/Ecommerce-sylius/pull/12051)\n    - [Intersport - Bug d'affichage images box produit](https://trello.com/c/mOO6EBx1/3936-intersport-bug-daffichage-images-box-produit) **\ud83c\udf89 A MEP**\n        - *:bug: \\[via\\] fix: styles mobiles des pages mot de passe oubli\u00e9/reset* [\\#12055](https://github.com/Wishibam/Ecommerce-sylius/pull/12055)\n    - [\ud83e\ude97 VIA \u2014 Le filtre Cat\u00e9gorie s'ouvre tout seul dans les descentes : on le veut ferm\u00e9 au chargement](https://trello.com/c/GMHVWZe2/3938-%F0%9F%AA%97-via-le-filtre-cat%C3%A9gorie-souvre-tout-seul-dans-les-descentes-on-le-veut-ferm%C3%A9-au-chargement) **\ud83e\udd13 Testing**\n        - *:bug: \\[via\\] fix: le filtre Cat\u00e9gorie reste ferm\u00e9 au chargement des descentes* [\\#12059](https://github.com/Wishibam/Ecommerce-sylius/pull/12059)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f Feed : Ajouter le flux facebook TVO](https://trello.com/c/iXjTokqz/3937-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-feed-ajouter-le-flux-facebook-tvo) **\ud83e\udd16 Testing tech**\n        - *:sparkles: feat: porter le flux facebook\\_catalog vers le nouveau composant* [\\#12060](https://github.com/Wishibam/Ecommerce-sylius/pull/12060)\n    - [\\[Migration\\]\\[B.1\\] PHP 8.2 \u2192 8.3](https://trello.com/c/Slm1Q5n7/3940-migrationb1-php-82-%E2%86%92-83) **\ud83d\ude80 To Do Vincent**\n        - *:wrench: chore: run the test suite on PHP 8.2 and 8.3 \\[B.1\\]* [\\#12063](https://github.com/Wishibam/Ecommerce-sylius/pull/12063)\n \n- **Misc**\n    - *:sparkles: feat: PushDispatcher + adaptateur FCM (push app TVO)* [\\#11917](https://github.com/Wishibam/Ecommerce-sylius/pull/11917)\n    - *style(withdrawal): make the withdrawal button theme-colored and not f\u2026* [\\#11951](https://github.com/Wishibam/Ecommerce-sylius/pull/11951)\n    - *:zap: perf: Batavia PLP \u2014 ES result cache, key batching, menu cache* [\\#11963](https://github.com/Wishibam/Ecommerce-sylius/pull/11963)\n    - *:wrench: chore: outillage pour worktrees parall\u00e8les (front isol\u00e9 par projet)* [\\#11986](https://github.com/Wishibam/Ecommerce-sylius/pull/11986)\n    - *:wrench: chore: bump php\\_codesniffer en 3.13.6 (CVE-2026-67434, CI rouge)* [\\#12008](https://github.com/Wishibam/Ecommerce-sylius/pull/12008)\n    - *:sparkles: feat: push app TVO \u2014 envoi asynchrone + badge (3.A.5 + 3.A.6)* [\\#12022](https://github.com/Wishibam/Ecommerce-sylius/pull/12022)\n    - *:sparkles: feat: badge unreadPushCount de bout en bout (app TVO)* [\\#12025](https://github.com/Wishibam/Ecommerce-sylius/pull/12025)\n    - *:sparkles: feat: compteur badge dans data des push (app TVO)* [\\#12028](https://github.com/Wishibam/Ecommerce-sylius/pull/12028)\n    - *:sparkles: feat: push \u00ab commande confirm\u00e9e \u00bb (app TVO)* [\\#12031](https://github.com/Wishibam/Ecommerce-sylius/pull/12031)\n    - *:sparkles: feat: push \u00ab commande exp\u00e9di\u00e9e \u00bb (app TVO)* [\\#12040](https://github.com/Wishibam/Ecommerce-sylius/pull/12040)\n    - *feat(push): notification de remboursement de commande (TVO 3.B.3)* [\\#12041](https://github.com/Wishibam/Ecommerce-sylius/pull/12041)\n    - *fix(push): durcir l'envoi FCM \u2014 timeouts born\u00e9s + retry effectif (TVO 3.A.7)* [\\#12042](https://github.com/Wishibam/Ecommerce-sylius/pull/12042)\n    - *test(featured-content): d\u00e9-flakifier testProgramDisableDelay (tol\u00e9rance sur le d\u00e9lai)* [\\#12044](https://github.com/Wishibam/Ecommerce-sylius/pull/12044)\n    - *feat(push): notification de retour en stock (TVO 3.B.4)* [\\#12045](https://github.com/Wishibam/Ecommerce-sylius/pull/12045)\n    - *feat(push): notification de baisse de prix wishlist (TVO 3.B.5)* [\\#12049](https://github.com/Wishibam/Ecommerce-sylius/pull/12049)\n    - *:bug: fix(megamenu): \u00e9largir le lien \u00e0 2048 caract\u00e8res* [\\#12050](https://github.com/Wishibam/Ecommerce-sylius/pull/12050)\n    - *feat(push): relance push des paniers abandonn\u00e9s (TVO 3.B.6)* [\\#12053](https://github.com/Wishibam/Ecommerce-sylius/pull/12053)\n    - *feat(deeplink): assetlinks.json de la nouvelle app TVO \u2014 App Links Android (TVO 4.2)* [\\#12065](https://github.com/Wishibam/Ecommerce-sylius/pull/12065)\n \n- **D\u00e9j\u00e0 en production**\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\udc1b Fix r\u00e9indexation ES bloqu\u00e9e \u2014 \u00ab immense term \u00bb sur attribut trop long (Intersport)](https://trello.com/c/iD6idW0v/3915-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%90%9B-fix-r%C3%A9indexation-es-bloqu%C3%A9e-immense-term-sur-attribut-trop-long-intersport) **MEP Ao\u00fbt**\n        - *:bug: fix: r\u00e9indexation ES bloqu\u00e9e par un attribut trop long (immense term)* [\\#11972](https://github.com/Wishibam/Ecommerce-sylius/pull/11972)\n    - [TVO - Les recommandations produits ne remontent aucun produit sur la fiche produit](https://trello.com/c/lw3SYgNG/3926-tvo-les-recommandations-produits-ne-remontent-aucun-produit-sur-la-fiche-produit) **MEP Ao\u00fbt**\n        - *:bug: fix(search): match the indexed color value in recommendations* [\\#12004](https://github.com/Wishibam/Ecommerce-sylius/pull/12004)\n    - [\u2615\ufe0f \\[Batavia\\] Frais de retour : \u20ac3,25 \u2192 \u20ac3,95 (et on passe le texte en traduction)](https://trello.com/c/P4vec3cz/3934-%E2%98%95%EF%B8%8F-batavia-frais-de-retour-%E2%82%AC325-%E2%86%92-%E2%82%AC395-et-on-passe-le-texte-en-traduction) **MEP Ao\u00fbt**\n        - *:bug: fix: Batavia return cost 3,95 and move the line to a translation* [\\#12034](https://github.com/Wishibam/Ecommerce-sylius/pull/12034)\n    - *:bug: fix: render flag emojis as SVG icons, not OS emoji glyphs* [\\#11981](https://github.com/Wishibam/Ecommerce-sylius/pull/11981)\n    - *:bug: fix: apply the flag icon filter to the remaining menu renderings* [\\#11982](https://github.com/Wishibam/Ecommerce-sylius/pull/11982)", "creation_timestamp": "2026-08-19T12:31:05.160972Z"}, {"uuid": "77ec5998-444b-41bf-bc83-7fa3d46041c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67434", "type": "seen", "source": "https://gist.github.com/jbourdin/e8ac929c1612d74bbb48f47afdc8e1f2", "content": "- **Trello**\n    - [Helsinki : Portail de retour - Sylius - int\u00e9gration front du portail de retour](https://trello.com/c/mhcc7YaC/2401-helsinki-portail-de-retour-sylius-int%C3%A9gration-front-du-portail-de-retour) **TEMP - EPIC - Droit de r\u00e9tractation**\n        - *feat(helsinki): Add return portal to Helsinki order details* [\\#11757](https://github.com/Wishibam/Ecommerce-sylius/pull/11757)\n    - [\u26a0\ufe0fAction prod\u26a0\ufe0f\ud83d\udd14 Refonte TVO : tracking du volet d'alerte \u00ab retour en stock \u00bb](https://trello.com/c/SXyhrSQb/3834-%E2%9A%A0%EF%B8%8Faction-prod%E2%9A%A0%EF%B8%8F%F0%9F%94%94-refonte-tvo-tracking-du-volet-dalerte-retour-en-stock) **\ud83e\udd13 Testing**\n        - *:sparkles: feat: track back-in-stock alert panel usage* [\\#11791](https://github.com/Wishibam/Ecommerce-sylius/pull/11791)\n    - [TVO - Fiche produit - Ajout des blocs \"Mati\u00e8re et entretien\" & \"Caract\u00e9ristiques\"](https://trello.com/c/AbsKmIzk/3633-tvo-fiche-produit-ajout-des-blocs-mati%C3%A8re-et-entretien-caract%C3%A9ristiques) **\ud83e\udd13 Testing**\n        - *feat(tvo): add Mati\u00e8re et entretien & Caract\u00e9ristiques blocks on PDP* [\\#11812](https://github.com/Wishibam/Ecommerce-sylius/pull/11812)\n    - [\\[Migration\\]\\[A.2\\] D\u00e9mant\u00e8lement Setono Analytics + Tag-Bag](https://trello.com/c/uJN0Gkiz/3856-migrationa2-d%C3%A9mant%C3%A8lement-setono-analytics-tag-bag) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore(migration): internalize setono analytics + tag-bag as src/Component \\[A.2\\]* [\\#11846](https://github.com/Wishibam/Ecommerce-sylius/pull/11846)\n    - [\\[Migration\\]\\[A.4.1\\] Internaliser bitbag/wishlist-plugin dans src/Component/Wishlist](https://trello.com/c/U9dQGx1l/3863-migrationa41-internaliser-bitbag-wishlist-plugin-dans-src-component-wishlist) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: internalize bitbag/wishlist-plugin \\[A.4.1\\]* [\\#11856](https://github.com/Wishibam/Ecommerce-sylius/pull/11856)\n    - [\\[Migration\\]\\[A.4.2/A.4.3\\] Internaliser bring & deep-link dans src/Component](https://trello.com/c/RsLN5SNT/3864-migrationa42-a43-internaliser-bring-deep-link-dans-src-component) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: internalize bring & deep-link plugins \\[A.4.2, A.4.3\\]* [\\#11861](https://github.com/Wishibam/Ecommerce-sylius/pull/11861)\n    - [\\[Migration\\]\\[A.5\\] Bumps frontend \u00ab safe \u00bb + suppression des packages morts](https://trello.com/c/vI6k61gt/3873-migrationa5-bumps-frontend-safe-suppression-des-packages-morts) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: bump safe frontend deps + prune dead packages \\[A.5\\]* [\\#11875](https://github.com/Wishibam/Ecommerce-sylius/pull/11875)\n    - [\\[Migration\\]\\[A.6\\] Pr\u00e9paration Doctrine pour DBAL 3 (monkey-patch migrations)](https://trello.com/c/8mdyVMwg/3880-migrationa6-pr%C3%A9paration-doctrine-pour-dbal-3-monkey-patch-migrations) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: replace Doctrine migration monkey-patch for DBAL 3 \\[A.6\\]* [\\#11893](https://github.com/Wishibam/Ecommerce-sylius/pull/11893)\n    - [TVO - Express checkout : adresse tronqu\u00e9e \u2014 nom de rue perdu (Apple Pay line1/line2)](https://trello.com/c/dIrl0I1a/3884-tvo-express-checkout-adresse-tronqu%C3%A9e-nom-de-rue-perdu-apple-pay-line1-line2) **\ud83e\udd13 Testing**\n        - *:bug: fix: join express checkout wallet address line1/line2 into street* [\\#11914](https://github.com/Wishibam/Ecommerce-sylius/pull/11914)\n    - [\\[P0\\] Express checkout : re-v\u00e9rifier le montant du PaymentIntent au complete](https://trello.com/c/qJdTR9Jc/3885-p0-express-checkout-re-v%C3%A9rifier-le-montant-du-paymentintent-au-complete) **\ud83d\udc8e In Review**\n        - *:bug: fix: verify express checkout PaymentIntent amount at completion* [\\#11916](https://github.com/Wishibam/Ecommerce-sylius/pull/11916)\n    - [\\[P0\\] Webhook Stripe : rembourser r\u00e9ellement les charges des commandes refus\u00e9es/annul\u00e9es](https://trello.com/c/fyJeMD3L/3886-p0-webhook-stripe-rembourser-r%C3%A9ellement-les-charges-des-commandes-refus%C3%A9es-annul%C3%A9es) **\ud83d\udc8e In Review**\n        - *:bug: fix: refund Stripe charges captured for refused or cancelled orders* [\\#11918](https://github.com/Wishibam/Ecommerce-sylius/pull/11918)\n    - [\\[P1\\] Express checkout : pinner explicitement les wallets autoris\u00e9s (quick win)](https://trello.com/c/tEpmPM9l/3890-p1-express-checkout-pinner-explicitement-les-wallets-autoris%C3%A9s-quick-win) **\ud83e\udd13 Testing**\n        - *:bug: fix: restrict express checkout wallets to an explicit allowlist* [\\#11919](https://github.com/Wishibam/Ecommerce-sylius/pull/11919)\n    - [\\[P0\\] Express checkout : commandes \u00e0 fonds captur\u00e9s supprim\u00e9es par la purge des carts + cha\u00eene d'abort morte](https://trello.com/c/1Wo7zGP5/3887-p0-express-checkout-commandes-%C3%A0-fonds-captur%C3%A9s-supprim%C3%A9es-par-la-purge-des-carts-cha%C3%AEne-dabort-morte) **\ud83d\udc8e In Review**\n        - *:bug: fix: protect express checkout captured-funds carts from the purge* [\\#11920](https://github.com/Wishibam/Ecommerce-sylius/pull/11920)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f \u203c\ufe0f Nouveau Feeds - Faire tourner tous les nouveaux feeds sur toutes les preprods/prods](https://trello.com/c/Kr8UhDAv/3910-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-%EF%B8%8F-nouveau-feeds-faire-tourner-tous-les-nouveaux-feeds-sur-toutes-les-preprods-prods) **\ud83e\udee1 To Do JC**\n        - *:sparkles: feat: drive-to-store feeds parity with legacy Setono* [\\#11979](https://github.com/Wishibam/Ecommerce-sylius/pull/11979)\n    - [Helsinki \u2014 Funnel checkout GA4 vide : \u00e9v\u00e9nements e-commerce manquants/incomplets](https://trello.com/c/j0yQGSFm/3921-helsinki-funnel-checkout-ga4-vide-%C3%A9v%C3%A9nements-e-commerce-manquants-incomplets) **\ud83c\udf44 Ready for testing**\n        - *:bug: fix: \u00e9mettre le funnel checkout GA4 complet* [\\#11980](https://github.com/Wishibam/Ecommerce-sylius/pull/11980)\n        - *:bug: fix: \u00e9mettre add\\_payment\\_info quand l'\u00e9tape de paiement est saut\u00e9e* [\\#12014](https://github.com/Wishibam/Ecommerce-sylius/pull/12014)\n    - [FEAT-0006 \u2014 Regroupement des emails d'annulation d'articles](https://trello.com/c/bBiV4jTE/3415-feat-0006-regroupement-des-emails-dannulation-darticles) **\ud83e\udd13 Testing**\n        - *:bug: fix: FEAT-0006 cancellation email grouping QA feedback* [\\#11984](https://github.com/Wishibam/Ecommerce-sylius/pull/11984)\n    - [Min-height pages React](https://trello.com/c/Rti8eFXb/3919-min-height-pages-react) **\ud83c\udf89 A MEP**\n        - *:bug: fix: add min-height on React pages to prevent footer flash* [\\#11987](https://github.com/Wishibam/Ecommerce-sylius/pull/11987)\n    - [SEO - TVO - changement de slug](https://trello.com/c/Gbb2tles/3908-seo-tvo-changement-de-slug) **\ud83e\udd13 Testing**\n        - *:bug: fix: clean up TVO brand page slugs with 301 redirects* [\\#11988](https://github.com/Wishibam/Ecommerce-sylius/pull/11988)\n    - [\u26a0\ufe0f action preprod/prod \u26a0\ufe0f \ud83d\uded2 Refonte Checkout #1 \u2014 La page Panier change de garde-robe](https://trello.com/c/qxdtlZxk/3851-%E2%9A%A0%EF%B8%8F-action-preprod-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%9B%92-refonte-checkout-1-la-page-panier-change-de-garde-robe) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): cart page QA feedback round* [\\#11990](https://github.com/Wishibam/Ecommerce-sylius/pull/11990)\n    - [\u26a0\ufe0f MEP \u26a0\ufe0f\u2b50 Google Customer Reviews sur TVO \u2014 brancher la machine \u00e0 \u00e9toiles](https://trello.com/c/7JA9u85M/3899-%E2%9A%A0%EF%B8%8F-mep-%E2%9A%A0%EF%B8%8F%E2%AD%90-google-customer-reviews-sur-tvo-brancher-la-machine-%C3%A0-%C3%A9toiles) **\ud83e\udd13 Testing**\n        - *:sparkles: feat: TVO Google Customer Reviews \u2014 GTIN produits sur thank you* [\\#11991](https://github.com/Wishibam/Ecommerce-sylius/pull/11991)\n    - [Fix : TypeError trim() null sur les share descriptions de channel (admin)](https://trello.com/c/o47Ek1Fo/3924-fix-typeerror-trim-null-sur-les-share-descriptions-de-channel-admin) **\ud83e\udd16 Testing tech**\n        - *:bug: fix: guard against null share descriptions in channel setter* [\\#11992](https://github.com/Wishibam/Ecommerce-sylius/pull/11992)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f \ud83d\udce6\ud83c\udf0d Mondial Relay sans fronti\u00e8res \u2014 points relais UE (v1 TVO)](https://trello.com/c/4X0QYlQ5/3918-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%93%A6%F0%9F%8C%8D-mondial-relay-sans-fronti%C3%A8res-points-relais-ue-v1-tvo) **\ud83d\udc8e In Review**\n        - *:sparkles: feat(mondial-relay): relay search follows the buyer's country* [\\#11994](https://github.com/Wishibam/Ecommerce-sylius/pull/11994)\n    - [\ud83d\udccd Refonte Checkout \u2014 La suggestion d'adresse qui fait mouche](https://trello.com/c/vF0T1FZU/3860-%F0%9F%93%8D-refonte-checkout-la-suggestion-dadresse-qui-fait-mouche) **\ud83d\ude80 To Do Vincent**\n        - *:bug: fix(tvo): address suggestion QA feedback round* [\\#11995](https://github.com/Wishibam/Ecommerce-sylius/pull/11995)\n        - *:bug: fix(tvo): keep the manual phone flag choice made on an empty field* [\\#12058](https://github.com/Wishibam/Ecommerce-sylius/pull/12058)\n    - [\ud83c\udf5e Refonte Checkout \u2014 Des toasts tout chauds pour les messages syst\u00e8me](https://trello.com/c/N70pstGO/3861-%F0%9F%8D%9E-refonte-checkout-des-toasts-tout-chauds-pour-les-messages-syst%C3%A8me) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): checkout toasts QA feedback round* [\\#11996](https://github.com/Wishibam/Ecommerce-sylius/pull/11996)\n    - [\ud83d\udd00 Refonte TVO : le variant s\u00e9lectionn\u00e9 saute en 1re position au lieu de rester \u00e0 sa place](https://trello.com/c/vQH5uxHz/3904-%F0%9F%94%80-refonte-tvo-le-variant-s%C3%A9lectionn%C3%A9-saute-en-1re-position-au-lieu-de-rester-%C3%A0-sa-place) **\ud83e\udd13 Testing**\n        - *:bug: fix: keep option values in place on overflowing variant axis* [\\#11998](https://github.com/Wishibam/Ecommerce-sylius/pull/11998)\n    - [TVO- mail order\\_open\\_return\\_withdrawn -remplacement de tag](https://trello.com/c/NK5CnCM2/3883-tvo-mail-orderopenreturnwithdrawn-remplacement-de-tag) **\ud83c\udf89 A MEP**\n        - *\ud83d\udc1b fix: orange \"return in progress\" badge on TVO withdrawal email* [\\#12000](https://github.com/Wishibam/Ecommerce-sylius/pull/12000)\n    - [SEO - ALL - Meta Title](https://trello.com/c/QDbDIPTu/3909-seo-all-meta-title) **\ud83e\udd13 Testing**\n        - *:sparkles: feat: add dedicated Meta Title for CMS pages* [\\#12001](https://github.com/Wishibam/Ecommerce-sylius/pull/12001)\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\ude9a Refonte Checkout #3 \u2014 Le Mode de livraison prend la route](https://trello.com/c/NDSNOimu/3854-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%9A%9A-refonte-checkout-3-le-mode-de-livraison-prend-la-route) **\ud83e\udd13 Testing**\n        - *:sparkles: feat(tvo): React checkout select shipping step (P3)* [\\#12011](https://github.com/Wishibam/Ecommerce-sylius/pull/12011)\n    - [Helsinki - Correction bug d'affichage en finnois en version mobile](https://trello.com/c/f9V6mA6z/3686-helsinki-correction-bug-daffichage-en-finnois-en-version-mobile) **\ud83c\udf89 A MEP**\n        - *:bug: fix: reduce Helsinki posts carousel title on mobile* [\\#12017](https://github.com/Wishibam/Ecommerce-sylius/pull/12017)\n    - [A ESTIMER : Google Shopping Feed : ajouter le Outlet Price en cas de promotion](https://trello.com/c/RnEgL53B/3867-a-estimer-google-shopping-feed-ajouter-le-outlet-price-en-cas-de-promotion) **\ud83e\udd13 Testing**\n        - *:sparkles: feat(helsinki): expose the outlet price in the Google Shopping feed* [\\#12020](https://github.com/Wishibam/Ecommerce-sylius/pull/12020)\n    - [\ud83c\udfbd \\[IS\\] Footer : \u00ab Notre accompagnement \u00bb devient \u00ab Nos services \u00bb et raccroche son lien](https://trello.com/c/H2X0XtqH/3932-%F0%9F%8E%BD-is-footer-notre-accompagnement-devient-nos-services-et-raccroche-son-lien) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: rename the Intersport footer column to \u00ab Nos services \u00bb and unlink its title* [\\#12026](https://github.com/Wishibam/Ecommerce-sylius/pull/12026)\n        - *:rewind: revert: Intersport footer \u00ab Nos services \u00bb (wrong target branch)* [\\#12037](https://github.com/Wishibam/Ecommerce-sylius/pull/12037)\n    - [Batavia - Probl\u00e8me sur l'affichage des variations](https://trello.com/c/MY6aNjLj/3931-batavia-probl%C3%A8me-sur-laffichage-des-variations) **\ud83e\udd13 Testing**\n        - *:bug: fix: deep-link Batavia PLP cards to the displayed color variant* [\\#12027](https://github.com/Wishibam/Ecommerce-sylius/pull/12027)\n    - [Batavia \u2014 Mails \u00ab produit indisponible \u00bb non re\u00e7us par les clients](https://trello.com/c/YLHFxnVs/3933-batavia-mails-produit-indisponible-non-re%C3%A7us-par-les-clients) **\ud83c\udf89 A MEP**\n        - *:bug: fix: validate admin email templates and log real send outcomes* [\\#12035](https://github.com/Wishibam/Ecommerce-sylius/pull/12035)\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\udcb3 Refonte Checkout #4 \u2014 Le Mode de paiement passe \u00e0 la caisse](https://trello.com/c/vDcvKX88/3855-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%92%B3-refonte-checkout-4-le-mode-de-paiement-passe-%C3%A0-la-caisse) **\ud83e\udd13 Testing**\n        - *:sparkles: feat(tvo): rebuild the checkout payment step and success page in React* [\\#12051](https://github.com/Wishibam/Ecommerce-sylius/pull/12051)\n    - [Intersport - Bug d'affichage images box produit](https://trello.com/c/mOO6EBx1/3936-intersport-bug-daffichage-images-box-produit) **\ud83c\udf89 A MEP**\n        - *:bug: \\[via\\] fix: styles mobiles des pages mot de passe oubli\u00e9/reset* [\\#12055](https://github.com/Wishibam/Ecommerce-sylius/pull/12055)\n    - [\ud83e\ude97 VIA \u2014 Le filtre Cat\u00e9gorie s'ouvre tout seul dans les descentes : on le veut ferm\u00e9 au chargement](https://trello.com/c/GMHVWZe2/3938-%F0%9F%AA%97-via-le-filtre-cat%C3%A9gorie-souvre-tout-seul-dans-les-descentes-on-le-veut-ferm%C3%A9-au-chargement) **\ud83e\udd13 Testing**\n        - *:bug: \\[via\\] fix: le filtre Cat\u00e9gorie reste ferm\u00e9 au chargement des descentes* [\\#12059](https://github.com/Wishibam/Ecommerce-sylius/pull/12059)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f Feed : Ajouter le flux facebook TVO](https://trello.com/c/iXjTokqz/3937-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-feed-ajouter-le-flux-facebook-tvo) **\ud83e\udd16 Testing tech**\n        - *:sparkles: feat: porter le flux facebook\\_catalog vers le nouveau composant* [\\#12060](https://github.com/Wishibam/Ecommerce-sylius/pull/12060)\n    - [\\[Migration\\]\\[B.1\\] PHP 8.2 \u2192 8.3](https://trello.com/c/Slm1Q5n7/3940-migrationb1-php-82-%E2%86%92-83) **\ud83d\ude80 To Do Vincent**\n        - *:wrench: chore: run the test suite on PHP 8.2 and 8.3 \\[B.1\\]* [\\#12063](https://github.com/Wishibam/Ecommerce-sylius/pull/12063)\n        - *:bug: fix(deploy): restart PHP-FPM via systemd glob instead of hardcoded 8.2* [\\#12066](https://github.com/Wishibam/Ecommerce-sylius/pull/12066)\n \n- **Misc**\n    - *:sparkles: feat: PushDispatcher + adaptateur FCM (push app TVO)* [\\#11917](https://github.com/Wishibam/Ecommerce-sylius/pull/11917)\n    - *style(withdrawal): make the withdrawal button theme-colored and not f\u2026* [\\#11951](https://github.com/Wishibam/Ecommerce-sylius/pull/11951)\n    - *:zap: perf: Batavia PLP \u2014 ES result cache, key batching, menu cache* [\\#11963](https://github.com/Wishibam/Ecommerce-sylius/pull/11963)\n    - *:wrench: chore: outillage pour worktrees parall\u00e8les (front isol\u00e9 par projet)* [\\#11986](https://github.com/Wishibam/Ecommerce-sylius/pull/11986)\n    - *:wrench: chore: bump php\\_codesniffer en 3.13.6 (CVE-2026-67434, CI rouge)* [\\#12008](https://github.com/Wishibam/Ecommerce-sylius/pull/12008)\n    - *:sparkles: feat: push app TVO \u2014 envoi asynchrone + badge (3.A.5 + 3.A.6)* [\\#12022](https://github.com/Wishibam/Ecommerce-sylius/pull/12022)\n    - *:sparkles: feat: badge unreadPushCount de bout en bout (app TVO)* [\\#12025](https://github.com/Wishibam/Ecommerce-sylius/pull/12025)\n    - *:sparkles: feat: compteur badge dans data des push (app TVO)* [\\#12028](https://github.com/Wishibam/Ecommerce-sylius/pull/12028)\n    - *:sparkles: feat: push \u00ab commande confirm\u00e9e \u00bb (app TVO)* [\\#12031](https://github.com/Wishibam/Ecommerce-sylius/pull/12031)\n    - *:sparkles: feat: push \u00ab commande exp\u00e9di\u00e9e \u00bb (app TVO)* [\\#12040](https://github.com/Wishibam/Ecommerce-sylius/pull/12040)\n    - *feat(push): notification de remboursement de commande (TVO 3.B.3)* [\\#12041](https://github.com/Wishibam/Ecommerce-sylius/pull/12041)\n    - *fix(push): durcir l'envoi FCM \u2014 timeouts born\u00e9s + retry effectif (TVO 3.A.7)* [\\#12042](https://github.com/Wishibam/Ecommerce-sylius/pull/12042)\n    - *test(featured-content): d\u00e9-flakifier testProgramDisableDelay (tol\u00e9rance sur le d\u00e9lai)* [\\#12044](https://github.com/Wishibam/Ecommerce-sylius/pull/12044)\n    - *feat(push): notification de retour en stock (TVO 3.B.4)* [\\#12045](https://github.com/Wishibam/Ecommerce-sylius/pull/12045)\n    - *feat(push): notification de baisse de prix wishlist (TVO 3.B.5)* [\\#12049](https://github.com/Wishibam/Ecommerce-sylius/pull/12049)\n    - *:bug: fix(megamenu): \u00e9largir le lien \u00e0 2048 caract\u00e8res* [\\#12050](https://github.com/Wishibam/Ecommerce-sylius/pull/12050)\n    - *feat(push): relance push des paniers abandonn\u00e9s (TVO 3.B.6)* [\\#12053](https://github.com/Wishibam/Ecommerce-sylius/pull/12053)\n    - *feat(deeplink): AASA de la nouvelle app TVO \u2014 Universal Links iOS (TVO 4.1)* [\\#12064](https://github.com/Wishibam/Ecommerce-sylius/pull/12064)\n    - *feat(deeplink): assetlinks.json de la nouvelle app TVO \u2014 App Links Android (TVO 4.2)* [\\#12065](https://github.com/Wishibam/Ecommerce-sylius/pull/12065)\n \n- **D\u00e9j\u00e0 en production**\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\udc1b Fix r\u00e9indexation ES bloqu\u00e9e \u2014 \u00ab immense term \u00bb sur attribut trop long (Intersport)](https://trello.com/c/iD6idW0v/3915-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%90%9B-fix-r%C3%A9indexation-es-bloqu%C3%A9e-immense-term-sur-attribut-trop-long-intersport) **MEP Ao\u00fbt**\n        - *:bug: fix: r\u00e9indexation ES bloqu\u00e9e par un attribut trop long (immense term)* [\\#11972](https://github.com/Wishibam/Ecommerce-sylius/pull/11972)\n    - [TVO - Les recommandations produits ne remontent aucun produit sur la fiche produit](https://trello.com/c/lw3SYgNG/3926-tvo-les-recommandations-produits-ne-remontent-aucun-produit-sur-la-fiche-produit) **MEP Ao\u00fbt**\n        - *:bug: fix(search): match the indexed color value in recommendations* [\\#12004](https://github.com/Wishibam/Ecommerce-sylius/pull/12004)\n    - [\u2615\ufe0f \\[Batavia\\] Frais de retour : \u20ac3,25 \u2192 \u20ac3,95 (et on passe le texte en traduction)](https://trello.com/c/P4vec3cz/3934-%E2%98%95%EF%B8%8F-batavia-frais-de-retour-%E2%82%AC325-%E2%86%92-%E2%82%AC395-et-on-passe-le-texte-en-traduction) **MEP Ao\u00fbt**\n        - *:bug: fix: Batavia return cost 3,95 and move the line to a translation* [\\#12034](https://github.com/Wishibam/Ecommerce-sylius/pull/12034)\n    - *:bug: fix: render flag emojis as SVG icons, not OS emoji glyphs* [\\#11981](https://github.com/Wishibam/Ecommerce-sylius/pull/11981)\n    - *:bug: fix: apply the flag icon filter to the remaining menu renderings* [\\#11982](https://github.com/Wishibam/Ecommerce-sylius/pull/11982)", "creation_timestamp": "2026-08-19T12:44:32.696611Z"}, {"uuid": "78e02753-2cb1-4ea6-b634-62148bab7a88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67434", "type": "seen", "source": "https://gist.github.com/FR-Flo/0e7f5508a7e506b113c6aa2e60563426", "content": "## \ud83d\udd17 Companion release\n\nThis release ships alongside the **Marketplace-client (frontend)** release PR:\n\n- https://github.com/Wishibam/Marketplace-client/pull/4256\n\n- **Trello**\n    - [Attributs required par cat\u00e9gorie](https://trello.com/c/2loCszpt/1854-attributs-required-par-cat%C3%A9gorie) **\ud83e\udd73Testing**\n        - *Feat: Makes attributes required or not per categories* [\\#7474](https://github.com/Wishibam/Marketplace-api/pull/7474)\n    - [\ud83d\udfe2 Int\u00e9gration des fanions promotionnels \u2014 Ajout image au tag de taxon (MP) (\u00e9volution n\u00b011)](https://trello.com/c/fNNkiR1c/2405-%F0%9F%9F%A2-int%C3%A9gration-des-fanions-promotionnels-ajout-image-au-tag-de-taxon-mp-%C3%A9volution-n11) **\ud83e\udd75 Retour de test**\n        - *:sparkles: feat: fanions de taxon \u2014 images desktop/mobile (MP-api)* [\\#7617](https://github.com/Wishibam/Marketplace-api/pull/7617)\n    - [MP - Cr\u00e9ation / modification m\u00e9thode de livraison - impossible de save](https://trello.com/c/Ud1DRxgj/2407-mp-cr%C3%A9ation-modification-m%C3%A9thode-de-livraison-impossible-de-save) **\ud83e\udd75 Retour de test**\n        - *:bug: MP Fix Dpd class, file and discriminator name* [\\#7757](https://github.com/Wishibam/Marketplace-api/pull/7757)\n    - [Ticket de caisse - pb de cache](https://trello.com/c/EwgktbXZ/2493-ticket-de-caisse-pb-de-cache) **\ud83e\udd73Testing**\n        - *:bug: fix: reset receipt cache between export Messenger messages* [\\#7791](https://github.com/Wishibam/Marketplace-api/pull/7791)\n    - [\ud83d\ude84 Commande exp\u00e9di\u00e9e : l'interface part trop vite et garde l'ancien statut](https://trello.com/c/6QmFnpyb/2418-%F0%9F%9A%84-commande-exp%C3%A9di%C3%A9e-linterface-part-trop-vite-et-garde-lancien-statut) **\ud83e\udd75 Retour de test**\n        - *:sparkles: OMS order, add \"inProcessing\" flag* [\\#7797](https://github.com/Wishibam/Marketplace-api/pull/7797)\n    - [MP - Sur le marchand (listing & d\u00e9tails), mettre un lien qui redirige directement vers le marchand en front](https://trello.com/c/Z136lbnm/1296-mp-sur-le-marchand-listing-d%C3%A9tails-mettre-un-lien-qui-redirige-directement-vers-le-marchand-en-front) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *:sparkles: Add retailer eshop link* [\\#7822](https://github.com/Wishibam/Marketplace-api/pull/7822)\n    - [Tag - Ajout du champ \"Visibilit\u00e9\" c\u00f4t\u00e9 MP](https://trello.com/c/zPFP31T9/2398-tag-ajout-du-champ-visibilit%C3%A9-c%C3%B4t%C3%A9-mp) **\ud83e\udd73Testing**\n        - *:sparkles: Add tag visibility field to retailer corner and category* [\\#7831](https://github.com/Wishibam/Marketplace-api/pull/7831)\n \n- **Misc**\n    - *feat(shipping-method): expose the default return method flag on the API* [\\#7793](https://github.com/Wishibam/Marketplace-api/pull/7793)\n    - *:sparkles: feat: resync a single retailer in the live merchandising indices* [\\#7808](https://github.com/Wishibam/Marketplace-api/pull/7808)\n    - *:bug: WMS Log Message Container identifier* [\\#7810](https://github.com/Wishibam/Marketplace-api/pull/7810)\n    - *:bug: fix: resync-retailer scroll rejected by ES8 (size param)* [\\#7820](https://github.com/Wishibam/Marketplace-api/pull/7820)\n    - *feat(mcp): add MCP server walking skeleton with list\\_organizations* [\\#7823](https://github.com/Wishibam/Marketplace-api/pull/7823)\n    - *refactor(mcp): extract logic from ImportAction, RetailerNormalizer and RankProduct* [\\#7824](https://github.com/Wishibam/Marketplace-api/pull/7824)\n    - *:sparkles: feat: compute product scoring on the fly (service + ES)* [\\#7825](https://github.com/Wishibam/Marketplace-api/pull/7825)\n    - *:sparkles: feat: raise the ES pagination window beyond 10k documents* [\\#7826](https://github.com/Wishibam/Marketplace-api/pull/7826)\n    - *feat(merchandising): supporter les tris du listing produit sur POST /merchandising* [\\#7827](https://github.com/Wishibam/Marketplace-api/pull/7827)\n    - *feat(merchandising): actions de masse asynchrones avec lock par organisation* [\\#7828](https://github.com/Wishibam/Marketplace-api/pull/7828)\n    - *Merge feat/mcp-walking-skeleton (simulate #7823 merge)* [\\#7832](https://github.com/Wishibam/Marketplace-api/pull/7832)\n    - *feat(product-list): pipeline batch pour les actions de masse des listes produits* [\\#7833](https://github.com/Wishibam/Marketplace-api/pull/7833)\n    - *feat(mcp): Add OAuth discovery* [\\#7834](https://github.com/Wishibam/Marketplace-api/pull/7834)\n    - *:arrow\\_up: deps: bump mcp/sdk to 0.7.1 (CVE-2026-53965)* [\\#7838](https://github.com/Wishibam/Marketplace-api/pull/7838)\n    - *:bug: fix: guard against null option name/value in CSV export* [\\#7841](https://github.com/Wishibam/Marketplace-api/pull/7841)\n    - *:bug: fix: stream line item CSV export to fix memory exhaustion* [\\#7842](https://github.com/Wishibam/Marketplace-api/pull/7842)\n    - *:arrow\\_up: deps: patch sodium\\_compat Ed25519 key validation vulnerability* [\\#7843](https://github.com/Wishibam/Marketplace-api/pull/7843)\n \n- **D\u00e9j\u00e0 en production**\n    - *:arrow\\_up: deps: bump php\\_codesniffer to 4.0.4 (CVE-2026-67434)* [\\#7817](https://github.com/Wishibam/Marketplace-api/pull/7817)\n    - *feat: allow max product variation at 380* [\\#7829](https://github.com/Wishibam/Marketplace-api/pull/7829)\n    - *:bug: fix: stop gating unmapped counters on product validity* [\\#7835](https://github.com/Wishibam/Marketplace-api/pull/7835)\n    - *:bug: fix: repair missing-mapping counters behind the retailer list icon* [\\#7837](https://github.com/Wishibam/Marketplace-api/pull/7837)\n\n## POST MEP\n\n### [PR #7826](https://github.com/Wishibam/Marketplace-api/pull/7826) \u2014 :sparkles: feat: raise the ES pagination window beyond 10k documents\n\n```\n  curl -X PUT \"http://localhost:9200/prod_product_*/_settings\" -H 'Content-Type: application/json' -d '{\"index\":{\"max_result_window\":200000}}'\n  curl -X PUT \"http://localhost:9200/prod_variation_*/_settings\" -H 'Content-Type: application/json' -d '{\"index\":{\"max_result_window\":500000}}'\n\n  V\u00e9rifier :\n  curl \"http://localhost:9200/prod_product_*/_settings/index.max_result_window?flat_settings\"\n  curl \"http://localhost:9200/prod_variation_*/_settings/index.max_result_window?flat_settings\"\n```\n\n### [PR #7828](https://github.com/Wishibam/Marketplace-api/pull/7828) \u2014 feat(merchandising): actions de masse asynchrones avec lock par organisation\n\n - ansible en prod \u00e7a https://github.com/Wishibam/Infrastructure/pull/467\n", "creation_timestamp": "2026-08-19T13:18:57.921714Z"}, {"uuid": "8474a057-a5af-4b66-81a9-19500c198d1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67434", "type": "seen", "source": "https://gist.github.com/FR-Flo/679ec53500707a38f146869163e2f9cc", "content": "## \ud83d\udd17 Companion release\n\nThis release ships alongside the **Marketplace-client (frontend)** release PR:\n\n- https://github.com/Wishibam/Marketplace-client/pull/4256\n\n- **Misc**\n    - *feat(shipping-method): expose the default return method flag on the API* [\\#7793](https://github.com/Wishibam/Marketplace-api/pull/7793)\n    - *:sparkles: feat: resync a single retailer in the live merchandising indices* [\\#7808](https://github.com/Wishibam/Marketplace-api/pull/7808)\n    - *:bug: fix: resync-retailer scroll rejected by ES8 (size param)* [\\#7820](https://github.com/Wishibam/Marketplace-api/pull/7820)\n    - *feat(mcp): add MCP server walking skeleton with list\\_organizations* [\\#7823](https://github.com/Wishibam/Marketplace-api/pull/7823)\n    - *refactor(mcp): extract logic from ImportAction, RetailerNormalizer and RankProduct* [\\#7824](https://github.com/Wishibam/Marketplace-api/pull/7824)\n    - *:sparkles: feat: compute product scoring on the fly (service + ES)* [\\#7825](https://github.com/Wishibam/Marketplace-api/pull/7825)\n    - *:sparkles: feat: raise the ES pagination window beyond 10k documents* [\\#7826](https://github.com/Wishibam/Marketplace-api/pull/7826)\n    - *feat(merchandising): supporter les tris du listing produit sur POST /merchandising* [\\#7827](https://github.com/Wishibam/Marketplace-api/pull/7827)\n    - *feat(merchandising): actions de masse asynchrones avec lock par organisation* [\\#7828](https://github.com/Wishibam/Marketplace-api/pull/7828)\n \n- **D\u00e9j\u00e0 en production**\n    - *:arrow\\_up: deps: bump php\\_codesniffer to 4.0.4 (CVE-2026-67434)* [\\#7817](https://github.com/Wishibam/Marketplace-api/pull/7817)\n    - *feat: allow max product variation at 380* [\\#7829](https://github.com/Wishibam/Marketplace-api/pull/7829)\n\n## POST MEP\n\n### [PR #7826](https://github.com/Wishibam/Marketplace-api/pull/7826) \u2014 :sparkles: feat: raise the ES pagination window beyond 10k documents\n\n```\n  curl -X PUT \"http://localhost:9200/prod_product_*/_settings\" -H 'Content-Type: application/json' -d '{\"index\":{\"max_result_window\":200000}}'\n  curl -X PUT \"http://localhost:9200/prod_variation_*/_settings\" -H 'Content-Type: application/json' -d '{\"index\":{\"max_result_window\":500000}}'\n\n  V\u00e9rifier :\n  curl \"http://localhost:9200/prod_product_*/_settings/index.max_result_window?flat_settings\"\n  curl \"http://localhost:9200/prod_variation_*/_settings/index.max_result_window?flat_settings\"\n```\n", "creation_timestamp": "2026-08-12T08:53:45.016646Z"}, {"uuid": "094cc3d7-6e50-4344-b7fe-c4e14358168b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67434", "type": "seen", "source": "https://gist.github.com/jbourdin/eb25f9f44d31e4d0b74619467c2ad4db", "content": "- **Trello**\n    - [Helsinki : Portail de retour - Sylius - int\u00e9gration front du portail de retour](https://trello.com/c/mhcc7YaC/2401-helsinki-portail-de-retour-sylius-int%C3%A9gration-front-du-portail-de-retour) **TEMP - EPIC - Droit de r\u00e9tractation**\n        - *feat(helsinki): Add return portal to Helsinki order details* [\\#11757](https://github.com/Wishibam/Ecommerce-sylius/pull/11757)\n    - [\\[Migration\\]\\[A.2\\] D\u00e9mant\u00e8lement Setono Analytics + Tag-Bag](https://trello.com/c/uJN0Gkiz/3856-migrationa2-d%C3%A9mant%C3%A8lement-setono-analytics-tag-bag) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore(migration): internalize setono analytics + tag-bag as src/Component \\[A.2\\]* [\\#11846](https://github.com/Wishibam/Ecommerce-sylius/pull/11846)\n    - [\\[Migration\\]\\[A.4.1\\] Internaliser bitbag/wishlist-plugin dans src/Component/Wishlist](https://trello.com/c/U9dQGx1l/3863-migrationa41-internaliser-bitbag-wishlist-plugin-dans-src-component-wishlist) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: internalize bitbag/wishlist-plugin \\[A.4.1\\]* [\\#11856](https://github.com/Wishibam/Ecommerce-sylius/pull/11856)\n    - [\\[Migration\\]\\[A.4.2/A.4.3\\] Internaliser bring & deep-link dans src/Component](https://trello.com/c/RsLN5SNT/3864-migrationa42-a43-internaliser-bring-deep-link-dans-src-component) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: internalize bring & deep-link plugins \\[A.4.2, A.4.3\\]* [\\#11861](https://github.com/Wishibam/Ecommerce-sylius/pull/11861)\n    - [\\[Migration\\]\\[A.5\\] Bumps frontend \u00ab safe \u00bb + suppression des packages morts](https://trello.com/c/vI6k61gt/3873-migrationa5-bumps-frontend-safe-suppression-des-packages-morts) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: bump safe frontend deps + prune dead packages \\[A.5\\]* [\\#11875](https://github.com/Wishibam/Ecommerce-sylius/pull/11875)\n    - [\\[Migration\\]\\[A.6\\] Pr\u00e9paration Doctrine pour DBAL 3 (monkey-patch migrations)](https://trello.com/c/8mdyVMwg/3880-migrationa6-pr%C3%A9paration-doctrine-pour-dbal-3-monkey-patch-migrations) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: replace Doctrine migration monkey-patch for DBAL 3 \\[A.6\\]* [\\#11893](https://github.com/Wishibam/Ecommerce-sylius/pull/11893)\n    - [TVO - Express checkout : adresse tronqu\u00e9e \u2014 nom de rue perdu (Apple Pay line1/line2)](https://trello.com/c/dIrl0I1a/3884-tvo-express-checkout-adresse-tronqu%C3%A9e-nom-de-rue-perdu-apple-pay-line1-line2) **\ud83e\udd13 Testing**\n        - *:bug: fix: join express checkout wallet address line1/line2 into street* [\\#11914](https://github.com/Wishibam/Ecommerce-sylius/pull/11914)\n    - [\\[P0\\] Express checkout : re-v\u00e9rifier le montant du PaymentIntent au complete](https://trello.com/c/qJdTR9Jc/3885-p0-express-checkout-re-v%C3%A9rifier-le-montant-du-paymentintent-au-complete) **\ud83d\udc8e In Review**\n        - *:bug: fix: verify express checkout PaymentIntent amount at completion* [\\#11916](https://github.com/Wishibam/Ecommerce-sylius/pull/11916)\n    - [\\[P0\\] Webhook Stripe : rembourser r\u00e9ellement les charges des commandes refus\u00e9es/annul\u00e9es](https://trello.com/c/fyJeMD3L/3886-p0-webhook-stripe-rembourser-r%C3%A9ellement-les-charges-des-commandes-refus%C3%A9es-annul%C3%A9es) **\ud83d\udc8e In Review**\n        - *:bug: fix: refund Stripe charges captured for refused or cancelled orders* [\\#11918](https://github.com/Wishibam/Ecommerce-sylius/pull/11918)\n    - [\\[P1\\] Express checkout : pinner explicitement les wallets autoris\u00e9s (quick win)](https://trello.com/c/tEpmPM9l/3890-p1-express-checkout-pinner-explicitement-les-wallets-autoris%C3%A9s-quick-win) **\ud83e\udd13 Testing**\n        - *:bug: fix: restrict express checkout wallets to an explicit allowlist* [\\#11919](https://github.com/Wishibam/Ecommerce-sylius/pull/11919)\n    - [\\[P0\\] Express checkout : commandes \u00e0 fonds captur\u00e9s supprim\u00e9es par la purge des carts + cha\u00eene d'abort morte](https://trello.com/c/1Wo7zGP5/3887-p0-express-checkout-commandes-%C3%A0-fonds-captur%C3%A9s-supprim%C3%A9es-par-la-purge-des-carts-cha%C3%AEne-dabort-morte) **\ud83d\udc8e In Review**\n        - *:bug: fix: protect express checkout captured-funds carts from the purge* [\\#11920](https://github.com/Wishibam/Ecommerce-sylius/pull/11920)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f \u203c\ufe0f Nouveau Feeds - Faire tourner tous les nouveaux feeds sur toutes les preprods/prods](https://trello.com/c/Kr8UhDAv/3910-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-%EF%B8%8F-nouveau-feeds-faire-tourner-tous-les-nouveaux-feeds-sur-toutes-les-preprods-prods) **\ud83e\udee1 To Do JC**\n        - *:sparkles: feat: drive-to-store feeds parity with legacy Setono* [\\#11979](https://github.com/Wishibam/Ecommerce-sylius/pull/11979)\n    - [Helsinki \u2014 Funnel checkout GA4 vide : \u00e9v\u00e9nements e-commerce manquants/incomplets](https://trello.com/c/j0yQGSFm/3921-helsinki-funnel-checkout-ga4-vide-%C3%A9v%C3%A9nements-e-commerce-manquants-incomplets) **\ud83c\udf44 Ready for testing**\n        - *:bug: fix: \u00e9mettre le funnel checkout GA4 complet* [\\#11980](https://github.com/Wishibam/Ecommerce-sylius/pull/11980)\n        - *:bug: fix: \u00e9mettre add\\_payment\\_info quand l'\u00e9tape de paiement est saut\u00e9e* [\\#12014](https://github.com/Wishibam/Ecommerce-sylius/pull/12014)\n    - [Min-height pages React](https://trello.com/c/Rti8eFXb/3919-min-height-pages-react) **\ud83e\udd13 Testing**\n        - *:bug: fix: add min-height on React pages to prevent footer flash* [\\#11987](https://github.com/Wishibam/Ecommerce-sylius/pull/11987)\n    - [\u26a0\ufe0f action preprod/prod \u26a0\ufe0f \ud83d\uded2 Refonte Checkout #1 \u2014 La page Panier change de garde-robe](https://trello.com/c/qxdtlZxk/3851-%E2%9A%A0%EF%B8%8F-action-preprod-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%9B%92-refonte-checkout-1-la-page-panier-change-de-garde-robe) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): cart page QA feedback round* [\\#11990](https://github.com/Wishibam/Ecommerce-sylius/pull/11990)\n    - [Fix : TypeError trim() null sur les share descriptions de channel (admin)](https://trello.com/c/o47Ek1Fo/3924-fix-typeerror-trim-null-sur-les-share-descriptions-de-channel-admin) **\ud83e\udd16 Testing tech**\n        - *:bug: fix: guard against null share descriptions in channel setter* [\\#11992](https://github.com/Wishibam/Ecommerce-sylius/pull/11992)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f \ud83d\udce6\ud83c\udf0d Mondial Relay sans fronti\u00e8res \u2014 points relais UE (v1 TVO)](https://trello.com/c/4X0QYlQ5/3918-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%93%A6%F0%9F%8C%8D-mondial-relay-sans-fronti%C3%A8res-points-relais-ue-v1-tvo) **\ud83d\udc8e In Review**\n        - *:sparkles: feat(mondial-relay): relay search follows the buyer's country* [\\#11994](https://github.com/Wishibam/Ecommerce-sylius/pull/11994)\n    - [\ud83d\udccd Refonte Checkout \u2014 La suggestion d'adresse qui fait mouche](https://trello.com/c/vF0T1FZU/3860-%F0%9F%93%8D-refonte-checkout-la-suggestion-dadresse-qui-fait-mouche) **\ud83d\ude80 To Do Vincent**\n        - *:bug: fix(tvo): address suggestion QA feedback round* [\\#11995](https://github.com/Wishibam/Ecommerce-sylius/pull/11995)\n    - [\ud83c\udf5e Refonte Checkout \u2014 Des toasts tout chauds pour les messages syst\u00e8me](https://trello.com/c/N70pstGO/3861-%F0%9F%8D%9E-refonte-checkout-des-toasts-tout-chauds-pour-les-messages-syst%C3%A8me) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): checkout toasts QA feedback round* [\\#11996](https://github.com/Wishibam/Ecommerce-sylius/pull/11996)\n    - [TVO- mail order\\_open\\_return\\_withdrawn -remplacement de tag](https://trello.com/c/NK5CnCM2/3883-tvo-mail-orderopenreturnwithdrawn-remplacement-de-tag) **\ud83c\udf89 A MEP**\n        - *\ud83d\udc1b fix: orange \"return in progress\" badge on TVO withdrawal email* [\\#12000](https://github.com/Wishibam/Ecommerce-sylius/pull/12000)\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\ude9a Refonte Checkout #3 \u2014 Le Mode de livraison prend la route](https://trello.com/c/NDSNOimu/3854-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%9A%9A-refonte-checkout-3-le-mode-de-livraison-prend-la-route) **\ud83e\udd13 Testing**\n        - *:sparkles: feat(tvo): React checkout select shipping step (P3)* [\\#12011](https://github.com/Wishibam/Ecommerce-sylius/pull/12011)\n    - [Helsinki - Correction bug d'affichage en finnois en version mobile](https://trello.com/c/f9V6mA6z/3686-helsinki-correction-bug-daffichage-en-finnois-en-version-mobile) **\ud83e\udd13 Testing**\n        - *:bug: fix: reduce Helsinki posts carousel title on mobile* [\\#12017](https://github.com/Wishibam/Ecommerce-sylius/pull/12017)\n    - [\ud83c\udfbd \\[IS\\] Footer : \u00ab Notre accompagnement \u00bb devient \u00ab Nos services \u00bb et raccroche son lien](https://trello.com/c/H2X0XtqH/3932-%F0%9F%8E%BD-is-footer-notre-accompagnement-devient-nos-services-et-raccroche-son-lien) **\ud83c\udf44 Ready for testing**\n        - *:sparkles: feat: rename the Intersport footer column to \u00ab Nos services \u00bb and unlink its title* [\\#12026](https://github.com/Wishibam/Ecommerce-sylius/pull/12026)\n        - *:rewind: revert: Intersport footer \u00ab Nos services \u00bb (wrong target branch)* [\\#12037](https://github.com/Wishibam/Ecommerce-sylius/pull/12037)\n    - [Batavia \u2014 Mails \u00ab produit indisponible \u00bb non re\u00e7us par les clients](https://trello.com/c/YLHFxnVs/3933-batavia-mails-produit-indisponible-non-re%C3%A7us-par-les-clients) **\ud83e\udd13 Testing**\n        - *:bug: fix: validate admin email templates and log real send outcomes* [\\#12035](https://github.com/Wishibam/Ecommerce-sylius/pull/12035)\n \n- **Misc**\n    - *:sparkles: feat: PushDispatcher + adaptateur FCM (push app TVO)* [\\#11917](https://github.com/Wishibam/Ecommerce-sylius/pull/11917)\n    - *style(withdrawal): make the withdrawal button theme-colored and not f\u2026* [\\#11951](https://github.com/Wishibam/Ecommerce-sylius/pull/11951)\n    - *:zap: perf: Batavia PLP \u2014 ES result cache, key batching, menu cache* [\\#11963](https://github.com/Wishibam/Ecommerce-sylius/pull/11963)\n    - *:wrench: chore: outillage pour worktrees parall\u00e8les (front isol\u00e9 par projet)* [\\#11986](https://github.com/Wishibam/Ecommerce-sylius/pull/11986)\n    - *:wrench: chore: bump php\\_codesniffer en 3.13.6 (CVE-2026-67434, CI rouge)* [\\#12008](https://github.com/Wishibam/Ecommerce-sylius/pull/12008)\n    - *:sparkles: feat: push app TVO \u2014 envoi asynchrone + badge (3.A.5 + 3.A.6)* [\\#12022](https://github.com/Wishibam/Ecommerce-sylius/pull/12022)\n    - *:sparkles: feat: badge unreadPushCount de bout en bout (app TVO)* [\\#12025](https://github.com/Wishibam/Ecommerce-sylius/pull/12025)\n    - *:sparkles: feat: compteur badge dans data des push (app TVO)* [\\#12028](https://github.com/Wishibam/Ecommerce-sylius/pull/12028)\n    - *:sparkles: feat: push \u00ab commande confirm\u00e9e \u00bb (app TVO)* [\\#12031](https://github.com/Wishibam/Ecommerce-sylius/pull/12031)\n    - *:sparkles: feat: push \u00ab commande exp\u00e9di\u00e9e \u00bb (app TVO)* [\\#12040](https://github.com/Wishibam/Ecommerce-sylius/pull/12040)\n    - *feat(push): notification de remboursement de commande (TVO 3.B.3)* [\\#12041](https://github.com/Wishibam/Ecommerce-sylius/pull/12041)\n    - *fix(push): durcir l'envoi FCM \u2014 timeouts born\u00e9s + retry effectif (TVO 3.A.7)* [\\#12042](https://github.com/Wishibam/Ecommerce-sylius/pull/12042)\n    - *test(featured-content): d\u00e9-flakifier testProgramDisableDelay (tol\u00e9rance sur le d\u00e9lai)* [\\#12044](https://github.com/Wishibam/Ecommerce-sylius/pull/12044)\n    - *feat(push): notification de retour en stock (TVO 3.B.4)* [\\#12045](https://github.com/Wishibam/Ecommerce-sylius/pull/12045)\n \n- **D\u00e9j\u00e0 en production**\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\udc1b Fix r\u00e9indexation ES bloqu\u00e9e \u2014 \u00ab immense term \u00bb sur attribut trop long (Intersport)](https://trello.com/c/iD6idW0v/3915-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%90%9B-fix-r%C3%A9indexation-es-bloqu%C3%A9e-immense-term-sur-attribut-trop-long-intersport) **MEP Ao\u00fbt**\n        - *:bug: fix: r\u00e9indexation ES bloqu\u00e9e par un attribut trop long (immense term)* [\\#11972](https://github.com/Wishibam/Ecommerce-sylius/pull/11972)\n    - [TVO - Les recommandations produits ne remontent aucun produit sur la fiche produit](https://trello.com/c/lw3SYgNG/3926-tvo-les-recommandations-produits-ne-remontent-aucun-produit-sur-la-fiche-produit) **MEP Ao\u00fbt**\n        - *:bug: fix(search): match the indexed color value in recommendations* [\\#12004](https://github.com/Wishibam/Ecommerce-sylius/pull/12004)\n    - [\u2615\ufe0f \\[Batavia\\] Frais de retour : \u20ac3,25 \u2192 \u20ac3,95 (et on passe le texte en traduction)](https://trello.com/c/P4vec3cz/3934-%E2%98%95%EF%B8%8F-batavia-frais-de-retour-%E2%82%AC325-%E2%86%92-%E2%82%AC395-et-on-passe-le-texte-en-traduction) **MEP Ao\u00fbt**\n        - *:bug: fix: Batavia return cost 3,95 and move the line to a translation* [\\#12034](https://github.com/Wishibam/Ecommerce-sylius/pull/12034)\n    - *:bug: fix: render flag emojis as SVG icons, not OS emoji glyphs* [\\#11981](https://github.com/Wishibam/Ecommerce-sylius/pull/11981)\n    - *:bug: fix: apply the flag icon filter to the remaining menu renderings* [\\#11982](https://github.com/Wishibam/Ecommerce-sylius/pull/11982)", "creation_timestamp": "2026-08-17T07:52:57.185999Z"}, {"uuid": "ca5d337e-0a47-405d-a03e-cde455acadae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67434", "type": "seen", "source": "https://gist.github.com/jbourdin/ca66804656878dd06b97df114996a61f", "content": "- **Trello**\n    - [GLOBAL - Email Alerte paiement en erreur](https://trello.com/c/P1DJvjHp/3229-global-email-alerte-paiement-en-erreur) **\ud83e\udd13 Testing**\n        - *feat(payment): send email notification when payment fails* [\\#10555](https://github.com/Wishibam/Ecommerce-sylius/pull/10555)\n    - [Helsinki : Portail de retour - Sylius - int\u00e9gration front du portail de retour](https://trello.com/c/mhcc7YaC/2401-helsinki-portail-de-retour-sylius-int%C3%A9gration-front-du-portail-de-retour) **TEMP - EPIC - Droit de r\u00e9tractation**\n        - *feat(helsinki): Add return portal to Helsinki order details* [\\#11757](https://github.com/Wishibam/Ecommerce-sylius/pull/11757)\n    - [\u26a0\ufe0fAction prod\u26a0\ufe0f\ud83d\udd14 Refonte TVO : tracking du volet d'alerte \u00ab retour en stock \u00bb](https://trello.com/c/SXyhrSQb/3834-%E2%9A%A0%EF%B8%8Faction-prod%E2%9A%A0%EF%B8%8F%F0%9F%94%94-refonte-tvo-tracking-du-volet-dalerte-retour-en-stock) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: track back-in-stock alert panel usage* [\\#11791](https://github.com/Wishibam/Ecommerce-sylius/pull/11791)\n    - [TVO - Fiche produit - Ajout des blocs \"Mati\u00e8re et entretien\" & \"Caract\u00e9ristiques\"](https://trello.com/c/AbsKmIzk/3633-tvo-fiche-produit-ajout-des-blocs-mati%C3%A8re-et-entretien-caract%C3%A9ristiques) **\ud83c\udf89 A MEP**\n        - *feat(tvo): add Mati\u00e8re et entretien & Caract\u00e9ristiques blocks on PDP* [\\#11812](https://github.com/Wishibam/Ecommerce-sylius/pull/11812)\n    - [\\[Migration\\]\\[A.2\\] D\u00e9mant\u00e8lement Setono Analytics + Tag-Bag](https://trello.com/c/uJN0Gkiz/3856-migrationa2-d%C3%A9mant%C3%A8lement-setono-analytics-tag-bag) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore(migration): internalize setono analytics + tag-bag as src/Component \\[A.2\\]* [\\#11846](https://github.com/Wishibam/Ecommerce-sylius/pull/11846)\n    - [\\[Migration\\]\\[A.4.1\\] Internaliser bitbag/wishlist-plugin dans src/Component/Wishlist](https://trello.com/c/U9dQGx1l/3863-migrationa41-internaliser-bitbag-wishlist-plugin-dans-src-component-wishlist) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: internalize bitbag/wishlist-plugin \\[A.4.1\\]* [\\#11856](https://github.com/Wishibam/Ecommerce-sylius/pull/11856)\n    - [\\[Migration\\]\\[A.4.2/A.4.3\\] Internaliser bring & deep-link dans src/Component](https://trello.com/c/RsLN5SNT/3864-migrationa42-a43-internaliser-bring-deep-link-dans-src-component) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: internalize bring & deep-link plugins \\[A.4.2, A.4.3\\]* [\\#11861](https://github.com/Wishibam/Ecommerce-sylius/pull/11861)\n    - [\\[Migration\\]\\[A.5\\] Bumps frontend \u00ab safe \u00bb + suppression des packages morts](https://trello.com/c/vI6k61gt/3873-migrationa5-bumps-frontend-safe-suppression-des-packages-morts) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: bump safe frontend deps + prune dead packages \\[A.5\\]* [\\#11875](https://github.com/Wishibam/Ecommerce-sylius/pull/11875)\n    - [\\[Migration\\]\\[A.6\\] Pr\u00e9paration Doctrine pour DBAL 3 (monkey-patch migrations)](https://trello.com/c/8mdyVMwg/3880-migrationa6-pr%C3%A9paration-doctrine-pour-dbal-3-monkey-patch-migrations) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: replace Doctrine migration monkey-patch for DBAL 3 \\[A.6\\]* [\\#11893](https://github.com/Wishibam/Ecommerce-sylius/pull/11893)\n    - [TVO - Express checkout : adresse tronqu\u00e9e \u2014 nom de rue perdu (Apple Pay line1/line2)](https://trello.com/c/dIrl0I1a/3884-tvo-express-checkout-adresse-tronqu%C3%A9e-nom-de-rue-perdu-apple-pay-line1-line2) **\ud83d\udc4a To Do Julien M**\n        - *:bug: fix: join express checkout wallet address line1/line2 into street* [\\#11914](https://github.com/Wishibam/Ecommerce-sylius/pull/11914)\n    - [\\[P0\\] Express checkout : re-v\u00e9rifier le montant du PaymentIntent au complete](https://trello.com/c/qJdTR9Jc/3885-p0-express-checkout-re-v%C3%A9rifier-le-montant-du-paymentintent-au-complete) **\ud83d\udc8e In Review**\n        - *:bug: fix: verify express checkout PaymentIntent amount at completion* [\\#11916](https://github.com/Wishibam/Ecommerce-sylius/pull/11916)\n    - [\\[P0\\] Webhook Stripe : rembourser r\u00e9ellement les charges des commandes refus\u00e9es/annul\u00e9es](https://trello.com/c/fyJeMD3L/3886-p0-webhook-stripe-rembourser-r%C3%A9ellement-les-charges-des-commandes-refus%C3%A9es-annul%C3%A9es) **\ud83d\udc8e In Review**\n        - *:bug: fix: refund Stripe charges captured for refused or cancelled orders* [\\#11918](https://github.com/Wishibam/Ecommerce-sylius/pull/11918)\n    - [\\[P1\\] Express checkout : pinner explicitement les wallets autoris\u00e9s (quick win)](https://trello.com/c/tEpmPM9l/3890-p1-express-checkout-pinner-explicitement-les-wallets-autoris%C3%A9s-quick-win) **\ud83e\udd13 Testing**\n        - *:bug: fix: restrict express checkout wallets to an explicit allowlist* [\\#11919](https://github.com/Wishibam/Ecommerce-sylius/pull/11919)\n    - [\\[P0\\] Express checkout : commandes \u00e0 fonds captur\u00e9s supprim\u00e9es par la purge des carts + cha\u00eene d'abort morte](https://trello.com/c/1Wo7zGP5/3887-p0-express-checkout-commandes-%C3%A0-fonds-captur%C3%A9s-supprim%C3%A9es-par-la-purge-des-carts-cha%C3%AEne-dabort-morte) **\ud83d\udc8e In Review**\n        - *:bug: fix: protect express checkout captured-funds carts from the purge* [\\#11920](https://github.com/Wishibam/Ecommerce-sylius/pull/11920)\n    - [Helsinki \u2014 Funnel checkout GA4 vide : \u00e9v\u00e9nements e-commerce manquants/incomplets](https://trello.com/c/j0yQGSFm/3921-helsinki-funnel-checkout-ga4-vide-%C3%A9v%C3%A9nements-e-commerce-manquants-incomplets) **\ud83c\udf44 Ready for testing**\n        - *:bug: fix: \u00e9mettre le funnel checkout GA4 complet* [\\#11980](https://github.com/Wishibam/Ecommerce-sylius/pull/11980)\n        - *:bug: fix: \u00e9mettre add\\_payment\\_info quand l'\u00e9tape de paiement est saut\u00e9e* [\\#12014](https://github.com/Wishibam/Ecommerce-sylius/pull/12014)\n    - [FEAT-0006 \u2014 Regroupement des emails d'annulation d'articles](https://trello.com/c/bBiV4jTE/3415-feat-0006-regroupement-des-emails-dannulation-darticles) **\ud83e\udd13 Testing**\n        - *:bug: fix: FEAT-0006 cancellation email grouping QA feedback* [\\#11984](https://github.com/Wishibam/Ecommerce-sylius/pull/11984)\n    - [Min-height pages React](https://trello.com/c/Rti8eFXb/3919-min-height-pages-react) **\ud83c\udf89 A MEP**\n        - *:bug: fix: add min-height on React pages to prevent footer flash* [\\#11987](https://github.com/Wishibam/Ecommerce-sylius/pull/11987)\n    - [SEO - TVO - changement de slug](https://trello.com/c/Gbb2tles/3908-seo-tvo-changement-de-slug) **\ud83c\udf89 A MEP**\n        - *:bug: fix: clean up TVO brand page slugs with 301 redirects* [\\#11988](https://github.com/Wishibam/Ecommerce-sylius/pull/11988)\n    - [\u26a0\ufe0f action preprod/prod \u26a0\ufe0f \ud83d\uded2 Refonte Checkout #1 \u2014 La page Panier change de garde-robe](https://trello.com/c/qxdtlZxk/3851-%E2%9A%A0%EF%B8%8F-action-preprod-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%9B%92-refonte-checkout-1-la-page-panier-change-de-garde-robe) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): cart page QA feedback round* [\\#11990](https://github.com/Wishibam/Ecommerce-sylius/pull/11990)\n    - [\u26a0\ufe0f MEP \u26a0\ufe0f\u2b50 Google Customer Reviews sur TVO \u2014 brancher la machine \u00e0 \u00e9toiles](https://trello.com/c/7JA9u85M/3899-%E2%9A%A0%EF%B8%8F-mep-%E2%9A%A0%EF%B8%8F%E2%AD%90-google-customer-reviews-sur-tvo-brancher-la-machine-%C3%A0-%C3%A9toiles) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: TVO Google Customer Reviews \u2014 GTIN produits sur thank you* [\\#11991](https://github.com/Wishibam/Ecommerce-sylius/pull/11991)\n    - [Fix : TypeError trim() null sur les share descriptions de channel (admin)](https://trello.com/c/o47Ek1Fo/3924-fix-typeerror-trim-null-sur-les-share-descriptions-de-channel-admin) **\ud83e\udd16 Testing tech**\n        - *:bug: fix: guard against null share descriptions in channel setter* [\\#11992](https://github.com/Wishibam/Ecommerce-sylius/pull/11992)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f \ud83d\udce6\ud83c\udf0d Mondial Relay sans fronti\u00e8res \u2014 points relais UE (v1 TVO)](https://trello.com/c/4X0QYlQ5/3918-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%93%A6%F0%9F%8C%8D-mondial-relay-sans-fronti%C3%A8res-points-relais-ue-v1-tvo) **\ud83d\udc8e In Review**\n        - *:sparkles: feat(mondial-relay): relay search follows the buyer's country* [\\#11994](https://github.com/Wishibam/Ecommerce-sylius/pull/11994)\n    - [\ud83d\udccd Refonte Checkout \u2014 La suggestion d'adresse qui fait mouche](https://trello.com/c/vF0T1FZU/3860-%F0%9F%93%8D-refonte-checkout-la-suggestion-dadresse-qui-fait-mouche) **\ud83d\ude80 To Do Vincent**\n        - *:bug: fix(tvo): address suggestion QA feedback round* [\\#11995](https://github.com/Wishibam/Ecommerce-sylius/pull/11995)\n        - *:bug: fix(tvo): keep the manual phone flag choice made on an empty field* [\\#12058](https://github.com/Wishibam/Ecommerce-sylius/pull/12058)\n    - [\ud83c\udf5e Refonte Checkout \u2014 Des toasts tout chauds pour les messages syst\u00e8me](https://trello.com/c/N70pstGO/3861-%F0%9F%8D%9E-refonte-checkout-des-toasts-tout-chauds-pour-les-messages-syst%C3%A8me) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): checkout toasts QA feedback round* [\\#11996](https://github.com/Wishibam/Ecommerce-sylius/pull/11996)\n    - [\ud83d\udd00 Refonte TVO : le variant s\u00e9lectionn\u00e9 saute en 1re position au lieu de rester \u00e0 sa place](https://trello.com/c/vQH5uxHz/3904-%F0%9F%94%80-refonte-tvo-le-variant-s%C3%A9lectionn%C3%A9-saute-en-1re-position-au-lieu-de-rester-%C3%A0-sa-place) **\ud83e\udd13 Testing**\n        - *:bug: fix: keep option values in place on overflowing variant axis* [\\#11998](https://github.com/Wishibam/Ecommerce-sylius/pull/11998)\n    - [TVO- mail order\\_open\\_return\\_withdrawn -remplacement de tag](https://trello.com/c/NK5CnCM2/3883-tvo-mail-orderopenreturnwithdrawn-remplacement-de-tag) **\ud83c\udf89 A MEP**\n        - *\ud83d\udc1b fix: orange \"return in progress\" badge on TVO withdrawal email* [\\#12000](https://github.com/Wishibam/Ecommerce-sylius/pull/12000)\n    - [SEO - ALL - Meta Title](https://trello.com/c/QDbDIPTu/3909-seo-all-meta-title) **\ud83e\udd13 Testing**\n        - *:sparkles: feat: add dedicated Meta Title for CMS pages* [\\#12001](https://github.com/Wishibam/Ecommerce-sylius/pull/12001)\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\ude9a Refonte Checkout #3 \u2014 Le Mode de livraison prend la route](https://trello.com/c/NDSNOimu/3854-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%9A%9A-refonte-checkout-3-le-mode-de-livraison-prend-la-route) **\ud83d\ude80 To Do Vincent**\n        - *:sparkles: feat(tvo): React checkout select shipping step (P3)* [\\#12011](https://github.com/Wishibam/Ecommerce-sylius/pull/12011)\n    - [Helsinki - Correction bug d'affichage en finnois en version mobile](https://trello.com/c/f9V6mA6z/3686-helsinki-correction-bug-daffichage-en-finnois-en-version-mobile) **\ud83c\udf89 A MEP**\n        - *:bug: fix: reduce Helsinki posts carousel title on mobile* [\\#12017](https://github.com/Wishibam/Ecommerce-sylius/pull/12017)\n    - [\ud83c\udfbd \\[IS\\] Footer : \u00ab Notre accompagnement \u00bb devient \u00ab Nos services \u00bb et raccroche son lien](https://trello.com/c/H2X0XtqH/3932-%F0%9F%8E%BD-is-footer-notre-accompagnement-devient-nos-services-et-raccroche-son-lien) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: rename the Intersport footer column to \u00ab Nos services \u00bb and unlink its title* [\\#12026](https://github.com/Wishibam/Ecommerce-sylius/pull/12026)\n        - *:rewind: revert: Intersport footer \u00ab Nos services \u00bb (wrong target branch)* [\\#12037](https://github.com/Wishibam/Ecommerce-sylius/pull/12037)\n    - [Batavia - Probl\u00e8me sur l'affichage des variations](https://trello.com/c/MY6aNjLj/3931-batavia-probl%C3%A8me-sur-laffichage-des-variations) **\ud83c\udf89 A MEP**\n        - *:bug: fix: deep-link Batavia PLP cards to the displayed color variant* [\\#12027](https://github.com/Wishibam/Ecommerce-sylius/pull/12027)\n    - [Batavia \u2014 Mails \u00ab produit indisponible \u00bb non re\u00e7us par les clients](https://trello.com/c/YLHFxnVs/3933-batavia-mails-produit-indisponible-non-re%C3%A7us-par-les-clients) **\ud83c\udf89 A MEP**\n        - *:bug: fix: validate admin email templates and log real send outcomes* [\\#12035](https://github.com/Wishibam/Ecommerce-sylius/pull/12035)\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\udcb3 Refonte Checkout #4 \u2014 Le Mode de paiement passe \u00e0 la caisse](https://trello.com/c/vDcvKX88/3855-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%92%B3-refonte-checkout-4-le-mode-de-paiement-passe-%C3%A0-la-caisse) **\ud83d\ude80 To Do Vincent**\n        - *:sparkles: feat(tvo): rebuild the checkout payment step and success page in React* [\\#12051](https://github.com/Wishibam/Ecommerce-sylius/pull/12051)\n    - [Intersport - Bug d'affichage images box produit](https://trello.com/c/mOO6EBx1/3936-intersport-bug-daffichage-images-box-produit) **\ud83c\udf89 A MEP**\n        - *:bug: \\[via\\] fix: styles mobiles des pages mot de passe oubli\u00e9/reset* [\\#12055](https://github.com/Wishibam/Ecommerce-sylius/pull/12055)\n    - [\ud83e\ude97 VIA \u2014 Le filtre Cat\u00e9gorie s'ouvre tout seul dans les descentes : on le veut ferm\u00e9 au chargement](https://trello.com/c/GMHVWZe2/3938-%F0%9F%AA%97-via-le-filtre-cat%C3%A9gorie-souvre-tout-seul-dans-les-descentes-on-le-veut-ferm%C3%A9-au-chargement) **\ud83c\udf89 A MEP**\n        - *:bug: \\[via\\] fix: le filtre Cat\u00e9gorie reste ferm\u00e9 au chargement des descentes* [\\#12059](https://github.com/Wishibam/Ecommerce-sylius/pull/12059)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f Feed : Ajouter le flux facebook TVO](https://trello.com/c/iXjTokqz/3937-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-feed-ajouter-le-flux-facebook-tvo) **\ud83e\udd16 Testing tech**\n        - *:sparkles: feat: porter le flux facebook\\_catalog vers le nouveau composant* [\\#12060](https://github.com/Wishibam/Ecommerce-sylius/pull/12060)\n    - [\\[Migration\\]\\[B.1\\] PHP 8.2 \u2192 8.3](https://trello.com/c/Slm1Q5n7/3940-migrationb1-php-82-%E2%86%92-83) **\ud83d\ude80 To Do Vincent**\n        - *:wrench: chore: run the test suite on PHP 8.2 and 8.3 \\[B.1\\]* [\\#12063](https://github.com/Wishibam/Ecommerce-sylius/pull/12063)\n        - *:bug: fix(deploy): restart PHP-FPM via systemd glob instead of hardcoded 8.2* [\\#12066](https://github.com/Wishibam/Ecommerce-sylius/pull/12066)\n        - *:wrench: chore: run the dual PHP matrix on the tests job only \\[B.1\\]* [\\#12068](https://github.com/Wishibam/Ecommerce-sylius/pull/12068)\n    - [\\[Migration\\]\\[B.2\\] Sylius 1.12 \u2192 1.13 (DBAL 3)](https://trello.com/c/huA0VNU9/3941-migrationb2-sylius-112-%E2%86%92-113-dbal-3) **\ud83d\ude80 To Do Vincent**\n        - *:wrench: chore(doctrine): drop the last getSchemaManager() call for DBAL 3/4 \\[B.2 P.1\\]* [\\#12071](https://github.com/Wishibam/Ecommerce-sylius/pull/12071)\n        - *:white\\_check\\_mark: test: characterize every state machine graph wiring \\[B.2 P.2\\]* [\\#12074](https://github.com/Wishibam/Ecommerce-sylius/pull/12074)\n \n- **Misc**\n    - *:sparkles: feat: PushDispatcher + adaptateur FCM (push app TVO)* [\\#11917](https://github.com/Wishibam/Ecommerce-sylius/pull/11917)\n    - *style(withdrawal): make the withdrawal button theme-colored and not f\u2026* [\\#11951](https://github.com/Wishibam/Ecommerce-sylius/pull/11951)\n    - *:zap: perf: Batavia PLP \u2014 ES result cache, key batching, menu cache* [\\#11963](https://github.com/Wishibam/Ecommerce-sylius/pull/11963)\n    - *:wrench: chore: outillage pour worktrees parall\u00e8les (front isol\u00e9 par projet)* [\\#11986](https://github.com/Wishibam/Ecommerce-sylius/pull/11986)\n    - *:sparkles: feat: push app TVO \u2014 envoi asynchrone + badge (3.A.5 + 3.A.6)* [\\#12022](https://github.com/Wishibam/Ecommerce-sylius/pull/12022)\n    - *:sparkles: feat: badge unreadPushCount de bout en bout (app TVO)* [\\#12025](https://github.com/Wishibam/Ecommerce-sylius/pull/12025)\n    - *:sparkles: feat: compteur badge dans data des push (app TVO)* [\\#12028](https://github.com/Wishibam/Ecommerce-sylius/pull/12028)\n    - *:sparkles: feat: push \u00ab commande confirm\u00e9e \u00bb (app TVO)* [\\#12031](https://github.com/Wishibam/Ecommerce-sylius/pull/12031)\n    - *:sparkles: feat: push \u00ab commande exp\u00e9di\u00e9e \u00bb (app TVO)* [\\#12040](https://github.com/Wishibam/Ecommerce-sylius/pull/12040)\n    - *feat(push): notification de remboursement de commande (TVO 3.B.3)* [\\#12041](https://github.com/Wishibam/Ecommerce-sylius/pull/12041)\n    - *fix(push): durcir l'envoi FCM \u2014 timeouts born\u00e9s + retry effectif (TVO 3.A.7)* [\\#12042](https://github.com/Wishibam/Ecommerce-sylius/pull/12042)\n    - *test(featured-content): d\u00e9-flakifier testProgramDisableDelay (tol\u00e9rance sur le d\u00e9lai)* [\\#12044](https://github.com/Wishibam/Ecommerce-sylius/pull/12044)\n    - *feat(push): notification de retour en stock (TVO 3.B.4)* [\\#12045](https://github.com/Wishibam/Ecommerce-sylius/pull/12045)\n    - *feat(push): notification de baisse de prix wishlist (TVO 3.B.5)* [\\#12049](https://github.com/Wishibam/Ecommerce-sylius/pull/12049)\n    - *:bug: fix(megamenu): \u00e9largir le lien \u00e0 2048 caract\u00e8res* [\\#12050](https://github.com/Wishibam/Ecommerce-sylius/pull/12050)\n    - *feat(push): relance push des paniers abandonn\u00e9s (TVO 3.B.6)* [\\#12053](https://github.com/Wishibam/Ecommerce-sylius/pull/12053)\n    - *feat(deeplink): AASA de la nouvelle app TVO \u2014 Universal Links iOS (TVO 4.1)* [\\#12064](https://github.com/Wishibam/Ecommerce-sylius/pull/12064)\n    - *feat(deeplink): assetlinks.json de la nouvelle app TVO \u2014 App Links Android (TVO 4.2)* [\\#12065](https://github.com/Wishibam/Ecommerce-sylius/pull/12065)\n    - *:bug: fix: complete payments stuck by Stripe webhook/checkout race* [\\#12075](https://github.com/Wishibam/Ecommerce-sylius/pull/12075)\n \n- **D\u00e9j\u00e0 en production**\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\udc1b Fix r\u00e9indexation ES bloqu\u00e9e \u2014 \u00ab immense term \u00bb sur attribut trop long (Intersport)](https://trello.com/c/iD6idW0v/3915-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%90%9B-fix-r%C3%A9indexation-es-bloqu%C3%A9e-immense-term-sur-attribut-trop-long-intersport) **MEP Ao\u00fbt**\n        - *:bug: fix: r\u00e9indexation ES bloqu\u00e9e par un attribut trop long (immense term)* [\\#11972](https://github.com/Wishibam/Ecommerce-sylius/pull/11972)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f \u203c\ufe0f Nouveau Feeds - Faire tourner tous les nouveaux feeds sur toutes les preprods/prods](https://trello.com/c/Kr8UhDAv/3910-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-%EF%B8%8F-nouveau-feeds-faire-tourner-tous-les-nouveaux-feeds-sur-toutes-les-preprods-prods) **\ud83e\udee1 To Do JC**\n        - *:sparkles: feat: drive-to-store feeds parity with legacy Setono* [\\#11979](https://github.com/Wishibam/Ecommerce-sylius/pull/11979)\n    - [TVO - Les recommandations produits ne remontent aucun produit sur la fiche produit](https://trello.com/c/lw3SYgNG/3926-tvo-les-recommandations-produits-ne-remontent-aucun-produit-sur-la-fiche-produit) **MEP Ao\u00fbt**\n        - *:bug: fix(search): match the indexed color value in recommendations* [\\#12004](https://github.com/Wishibam/Ecommerce-sylius/pull/12004)\n    - [A ESTIMER : Google Shopping Feed : ajouter le Outlet Price en cas de promotion](https://trello.com/c/RnEgL53B/3867-a-estimer-google-shopping-feed-ajouter-le-outlet-price-en-cas-de-promotion) **\ud83e\udd13 Testing**\n        - *:sparkles: feat(helsinki): expose the outlet price in the Google Shopping feed* [\\#12020](https://github.com/Wishibam/Ecommerce-sylius/pull/12020)\n    - [\u2615\ufe0f \\[Batavia\\] Frais de retour : \u20ac3,25 \u2192 \u20ac3,95 (et on passe le texte en traduction)](https://trello.com/c/P4vec3cz/3934-%E2%98%95%EF%B8%8F-batavia-frais-de-retour-%E2%82%AC325-%E2%86%92-%E2%82%AC395-et-on-passe-le-texte-en-traduction) **MEP Ao\u00fbt**\n        - *:bug: fix: Batavia return cost 3,95 and move the line to a translation* [\\#12034](https://github.com/Wishibam/Ecommerce-sylius/pull/12034)\n    - *:bug: fix: render flag emojis as SVG icons, not OS emoji glyphs* [\\#11981](https://github.com/Wishibam/Ecommerce-sylius/pull/11981)\n    - *:bug: fix: apply the flag icon filter to the remaining menu renderings* [\\#11982](https://github.com/Wishibam/Ecommerce-sylius/pull/11982)\n    - *:wrench: chore: bump php\\_codesniffer en 3.13.6 (CVE-2026-67434, CI rouge)* [\\#12008](https://github.com/Wishibam/Ecommerce-sylius/pull/12008)", "creation_timestamp": "2026-08-21T08:35:12.836357Z"}, {"uuid": "2bbfd47b-7632-4ea5-bb62-0ac3677de223", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67434", "type": "seen", "source": "https://gist.github.com/jbourdin/74d975e9ddef6fe876c3f76f05bacc25", "content": "- **Trello**\n    - [Helsinki : Portail de retour - Sylius - int\u00e9gration front du portail de retour](https://trello.com/c/mhcc7YaC/2401-helsinki-portail-de-retour-sylius-int%C3%A9gration-front-du-portail-de-retour) **TEMP - EPIC - Droit de r\u00e9tractation**\n        - *feat(helsinki): Add return portal to Helsinki order details* [\\#11757](https://github.com/Wishibam/Ecommerce-sylius/pull/11757)\n    - [\\[Migration\\]\\[A.2\\] D\u00e9mant\u00e8lement Setono Analytics + Tag-Bag](https://trello.com/c/uJN0Gkiz/3856-migrationa2-d%C3%A9mant%C3%A8lement-setono-analytics-tag-bag) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore(migration): internalize setono analytics + tag-bag as src/Component \\[A.2\\]* [\\#11846](https://github.com/Wishibam/Ecommerce-sylius/pull/11846)\n    - [\\[Migration\\]\\[A.4.1\\] Internaliser bitbag/wishlist-plugin dans src/Component/Wishlist](https://trello.com/c/U9dQGx1l/3863-migrationa41-internaliser-bitbag-wishlist-plugin-dans-src-component-wishlist) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: internalize bitbag/wishlist-plugin \\[A.4.1\\]* [\\#11856](https://github.com/Wishibam/Ecommerce-sylius/pull/11856)\n    - [\\[Migration\\]\\[A.4.2/A.4.3\\] Internaliser bring & deep-link dans src/Component](https://trello.com/c/RsLN5SNT/3864-migrationa42-a43-internaliser-bring-deep-link-dans-src-component) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: internalize bring & deep-link plugins \\[A.4.2, A.4.3\\]* [\\#11861](https://github.com/Wishibam/Ecommerce-sylius/pull/11861)\n    - [\\[Migration\\]\\[A.5\\] Bumps frontend \u00ab safe \u00bb + suppression des packages morts](https://trello.com/c/vI6k61gt/3873-migrationa5-bumps-frontend-safe-suppression-des-packages-morts) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: bump safe frontend deps + prune dead packages \\[A.5\\]* [\\#11875](https://github.com/Wishibam/Ecommerce-sylius/pull/11875)\n    - [\\[Migration\\]\\[A.6\\] Pr\u00e9paration Doctrine pour DBAL 3 (monkey-patch migrations)](https://trello.com/c/8mdyVMwg/3880-migrationa6-pr%C3%A9paration-doctrine-pour-dbal-3-monkey-patch-migrations) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: replace Doctrine migration monkey-patch for DBAL 3 \\[A.6\\]* [\\#11893](https://github.com/Wishibam/Ecommerce-sylius/pull/11893)\n    - [TVO - Express checkout : adresse tronqu\u00e9e \u2014 nom de rue perdu (Apple Pay line1/line2)](https://trello.com/c/dIrl0I1a/3884-tvo-express-checkout-adresse-tronqu%C3%A9e-nom-de-rue-perdu-apple-pay-line1-line2) **\ud83e\udd13 Testing**\n        - *:bug: fix: join express checkout wallet address line1/line2 into street* [\\#11914](https://github.com/Wishibam/Ecommerce-sylius/pull/11914)\n    - [\\[P0\\] Express checkout : re-v\u00e9rifier le montant du PaymentIntent au complete](https://trello.com/c/qJdTR9Jc/3885-p0-express-checkout-re-v%C3%A9rifier-le-montant-du-paymentintent-au-complete) **\ud83d\udc8e In Review**\n        - *:bug: fix: verify express checkout PaymentIntent amount at completion* [\\#11916](https://github.com/Wishibam/Ecommerce-sylius/pull/11916)\n    - [\\[P0\\] Webhook Stripe : rembourser r\u00e9ellement les charges des commandes refus\u00e9es/annul\u00e9es](https://trello.com/c/fyJeMD3L/3886-p0-webhook-stripe-rembourser-r%C3%A9ellement-les-charges-des-commandes-refus%C3%A9es-annul%C3%A9es) **\ud83d\udc8e In Review**\n        - *:bug: fix: refund Stripe charges captured for refused or cancelled orders* [\\#11918](https://github.com/Wishibam/Ecommerce-sylius/pull/11918)\n    - [\\[P1\\] Express checkout : pinner explicitement les wallets autoris\u00e9s (quick win)](https://trello.com/c/tEpmPM9l/3890-p1-express-checkout-pinner-explicitement-les-wallets-autoris%C3%A9s-quick-win) **\ud83e\udd13 Testing**\n        - *:bug: fix: restrict express checkout wallets to an explicit allowlist* [\\#11919](https://github.com/Wishibam/Ecommerce-sylius/pull/11919)\n    - [\\[P0\\] Express checkout : commandes \u00e0 fonds captur\u00e9s supprim\u00e9es par la purge des carts + cha\u00eene d'abort morte](https://trello.com/c/1Wo7zGP5/3887-p0-express-checkout-commandes-%C3%A0-fonds-captur%C3%A9s-supprim%C3%A9es-par-la-purge-des-carts-cha%C3%AEne-dabort-morte) **\ud83d\udc8e In Review**\n        - *:bug: fix: protect express checkout captured-funds carts from the purge* [\\#11920](https://github.com/Wishibam/Ecommerce-sylius/pull/11920)\n    - [\ud83d\udc1b Fix r\u00e9indexation ES bloqu\u00e9e \u2014 \u00ab immense term \u00bb sur attribut trop long (Intersport)](https://trello.com/c/iD6idW0v/3915-%F0%9F%90%9B-fix-r%C3%A9indexation-es-bloqu%C3%A9e-immense-term-sur-attribut-trop-long-intersport) **\ud83e\udd16 Testing tech**\n        - *:bug: fix: r\u00e9indexation ES bloqu\u00e9e par un attribut trop long (immense term)* [\\#11972](https://github.com/Wishibam/Ecommerce-sylius/pull/11972)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f \u203c\ufe0f Nouveau Feeds - Faire tourner tous les nouveaux feeds sur toutes les preprods/prods](https://trello.com/c/Kr8UhDAv/3910-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-%EF%B8%8F-nouveau-feeds-faire-tourner-tous-les-nouveaux-feeds-sur-toutes-les-preprods-prods) **\ud83e\udee1 To Do JC**\n        - *:sparkles: feat: drive-to-store feeds parity with legacy Setono* [\\#11979](https://github.com/Wishibam/Ecommerce-sylius/pull/11979)\n    - [Helsinki \u2014 Funnel checkout GA4 vide : \u00e9v\u00e9nements e-commerce manquants/incomplets](https://trello.com/c/j0yQGSFm/3921-helsinki-funnel-checkout-ga4-vide-%C3%A9v%C3%A9nements-e-commerce-manquants-incomplets) **\ud83c\udf44 Ready for testing**\n        - *:bug: fix: \u00e9mettre le funnel checkout GA4 complet* [\\#11980](https://github.com/Wishibam/Ecommerce-sylius/pull/11980)\n        - *:bug: fix: \u00e9mettre add\\_payment\\_info quand l'\u00e9tape de paiement est saut\u00e9e* [\\#12014](https://github.com/Wishibam/Ecommerce-sylius/pull/12014)\n    - [Min-height pages React](https://trello.com/c/Rti8eFXb/3919-min-height-pages-react) **\ud83e\udd13 Testing**\n        - *:bug: fix: add min-height on React pages to prevent footer flash* [\\#11987](https://github.com/Wishibam/Ecommerce-sylius/pull/11987)\n    - [\u26a0\ufe0f action preprod/prod \u26a0\ufe0f \ud83d\uded2 Refonte Checkout #1 \u2014 La page Panier change de garde-robe](https://trello.com/c/qxdtlZxk/3851-%E2%9A%A0%EF%B8%8F-action-preprod-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%9B%92-refonte-checkout-1-la-page-panier-change-de-garde-robe) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): cart page QA feedback round* [\\#11990](https://github.com/Wishibam/Ecommerce-sylius/pull/11990)\n    - [Fix : TypeError trim() null sur les share descriptions de channel (admin)](https://trello.com/c/o47Ek1Fo/3924-fix-typeerror-trim-null-sur-les-share-descriptions-de-channel-admin) **\ud83e\udd16 Testing tech**\n        - *:bug: fix: guard against null share descriptions in channel setter* [\\#11992](https://github.com/Wishibam/Ecommerce-sylius/pull/11992)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f \ud83d\udce6\ud83c\udf0d Mondial Relay sans fronti\u00e8res \u2014 points relais UE (v1 TVO)](https://trello.com/c/4X0QYlQ5/3918-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%93%A6%F0%9F%8C%8D-mondial-relay-sans-fronti%C3%A8res-points-relais-ue-v1-tvo) **\ud83d\udc8e In Review**\n        - *:sparkles: feat(mondial-relay): relay search follows the buyer's country* [\\#11994](https://github.com/Wishibam/Ecommerce-sylius/pull/11994)\n    - [\ud83d\udccd Refonte Checkout \u2014 La suggestion d'adresse qui fait mouche](https://trello.com/c/vF0T1FZU/3860-%F0%9F%93%8D-refonte-checkout-la-suggestion-dadresse-qui-fait-mouche) **\ud83d\ude80 To Do Vincent**\n        - *:bug: fix(tvo): address suggestion QA feedback round* [\\#11995](https://github.com/Wishibam/Ecommerce-sylius/pull/11995)\n    - [\ud83c\udf5e Refonte Checkout \u2014 Des toasts tout chauds pour les messages syst\u00e8me](https://trello.com/c/N70pstGO/3861-%F0%9F%8D%9E-refonte-checkout-des-toasts-tout-chauds-pour-les-messages-syst%C3%A8me) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): checkout toasts QA feedback round* [\\#11996](https://github.com/Wishibam/Ecommerce-sylius/pull/11996)\n    - [TVO- mail order\\_open\\_return\\_withdrawn -remplacement de tag](https://trello.com/c/NK5CnCM2/3883-tvo-mail-orderopenreturnwithdrawn-remplacement-de-tag) **\ud83c\udf89 A MEP**\n        - *\ud83d\udc1b fix: orange \"return in progress\" badge on TVO withdrawal email* [\\#12000](https://github.com/Wishibam/Ecommerce-sylius/pull/12000)\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\ude9a Refonte Checkout #3 \u2014 Le Mode de livraison prend la route](https://trello.com/c/NDSNOimu/3854-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%9A%9A-refonte-checkout-3-le-mode-de-livraison-prend-la-route) **\ud83e\udd13 Testing**\n        - *:sparkles: feat(tvo): React checkout select shipping step (P3)* [\\#12011](https://github.com/Wishibam/Ecommerce-sylius/pull/12011)\n    - [Helsinki - Correction bug d'affichage en finnois en version mobile](https://trello.com/c/f9V6mA6z/3686-helsinki-correction-bug-daffichage-en-finnois-en-version-mobile) **\ud83e\udd13 Testing**\n        - *:bug: fix: reduce Helsinki posts carousel title on mobile* [\\#12017](https://github.com/Wishibam/Ecommerce-sylius/pull/12017)\n \n- **Misc**\n    - *:sparkles: feat: PushDispatcher + adaptateur FCM (push app TVO)* [\\#11917](https://github.com/Wishibam/Ecommerce-sylius/pull/11917)\n    - *style(withdrawal): make the withdrawal button theme-colored and not f\u2026* [\\#11951](https://github.com/Wishibam/Ecommerce-sylius/pull/11951)\n    - *:zap: perf: Batavia PLP \u2014 ES result cache, key batching, menu cache* [\\#11963](https://github.com/Wishibam/Ecommerce-sylius/pull/11963)\n    - *:wrench: chore: outillage pour worktrees parall\u00e8les (front isol\u00e9 par projet)* [\\#11986](https://github.com/Wishibam/Ecommerce-sylius/pull/11986)\n    - *:wrench: chore: bump php\\_codesniffer en 3.13.6 (CVE-2026-67434, CI rouge)* [\\#12008](https://github.com/Wishibam/Ecommerce-sylius/pull/12008)\n    - *:sparkles: feat: push app TVO \u2014 envoi asynchrone + badge (3.A.5 + 3.A.6)* [\\#12022](https://github.com/Wishibam/Ecommerce-sylius/pull/12022)\n    - *:sparkles: feat: badge unreadPushCount de bout en bout (app TVO)* [\\#12025](https://github.com/Wishibam/Ecommerce-sylius/pull/12025)\n    - *:sparkles: feat: compteur badge dans data des push (app TVO)* [\\#12028](https://github.com/Wishibam/Ecommerce-sylius/pull/12028)\n \n- **D\u00e9j\u00e0 en production**\n    - [TVO - Les recommandations produits ne remontent aucun produit sur la fiche produit](https://trello.com/c/lw3SYgNG/3926-tvo-les-recommandations-produits-ne-remontent-aucun-produit-sur-la-fiche-produit) **MEP Ao\u00fbt**\n        - *:bug: fix(search): match the indexed color value in recommendations* [\\#12004](https://github.com/Wishibam/Ecommerce-sylius/pull/12004)\n    - *:bug: fix: render flag emojis as SVG icons, not OS emoji glyphs* [\\#11981](https://github.com/Wishibam/Ecommerce-sylius/pull/11981)\n    - *:bug: fix: apply the flag icon filter to the remaining menu renderings* [\\#11982](https://github.com/Wishibam/Ecommerce-sylius/pull/11982)", "creation_timestamp": "2026-08-12T15:47:31.180589Z"}, {"uuid": "dbbc02de-a2da-44e5-8c76-89667b2a9bbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67434", "type": "seen", "source": "https://gist.github.com/FR-Flo/cc9f766d0a2a4c8f1efc2b89a9f8b2eb", "content": "## \ud83d\udd17 Companion release\n\nThis release ships alongside the **Marketplace-client (frontend)** release PR:\n\n- https://github.com/Wishibam/Marketplace-client/pull/4256\n\n- **Misc**\n    - *feat(shipping-method): expose the default return method flag on the API* [\\#7793](https://github.com/Wishibam/Marketplace-api/pull/7793)\n    - *:sparkles: feat: resync a single retailer in the live merchandising indices* [\\#7808](https://github.com/Wishibam/Marketplace-api/pull/7808)\n    - *:arrow\\_up: deps: bump php\\_codesniffer to 4.0.4 (CVE-2026-67434)* [\\#7817](https://github.com/Wishibam/Marketplace-api/pull/7817)\n    - *:bug: fix: resync-retailer scroll rejected by ES8 (size param)* [\\#7820](https://github.com/Wishibam/Marketplace-api/pull/7820)\n    - *:sparkles: feat: compute product scoring on the fly (service + ES)* [\\#7825](https://github.com/Wishibam/Marketplace-api/pull/7825)", "creation_timestamp": "2026-08-10T13:47:12.041312Z"}, {"uuid": "957c3300-8dd2-472b-8281-84955b31aab3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67434", "type": "seen", "source": "https://gist.github.com/FR-Flo/89fedcf20bcdcfa83762b99068ffac75", "content": "## \ud83d\udd17 Companion release\n\nThis release ships alongside the **Marketplace-client (frontend)** release PR:\n\n- https://github.com/Wishibam/Marketplace-client/pull/4256\n\n- **Trello**\n    - [MP - Cr\u00e9ation / modification m\u00e9thode de livraison - impossible de save](https://trello.com/c/Ud1DRxgj/2407-mp-cr%C3%A9ation-modification-m%C3%A9thode-de-livraison-impossible-de-save) **\ud83e\udd73Testing**\n        - *:bug: MP Fix Dpd class, file and discriminator name* [\\#7757](https://github.com/Wishibam/Marketplace-api/pull/7757)\n \n- **Misc**\n    - *feat(shipping-method): expose the default return method flag on the API* [\\#7793](https://github.com/Wishibam/Marketplace-api/pull/7793)\n    - *:sparkles: feat: resync a single retailer in the live merchandising indices* [\\#7808](https://github.com/Wishibam/Marketplace-api/pull/7808)\n    - *:bug: fix: resync-retailer scroll rejected by ES8 (size param)* [\\#7820](https://github.com/Wishibam/Marketplace-api/pull/7820)\n    - *feat(mcp): add MCP server walking skeleton with list\\_organizations* [\\#7823](https://github.com/Wishibam/Marketplace-api/pull/7823)\n    - *refactor(mcp): extract logic from ImportAction, RetailerNormalizer and RankProduct* [\\#7824](https://github.com/Wishibam/Marketplace-api/pull/7824)\n    - *:sparkles: feat: compute product scoring on the fly (service + ES)* [\\#7825](https://github.com/Wishibam/Marketplace-api/pull/7825)\n    - *:sparkles: feat: raise the ES pagination window beyond 10k documents* [\\#7826](https://github.com/Wishibam/Marketplace-api/pull/7826)\n    - *feat(merchandising): supporter les tris du listing produit sur POST /merchandising* [\\#7827](https://github.com/Wishibam/Marketplace-api/pull/7827)\n    - *feat(merchandising): actions de masse asynchrones avec lock par organisation* [\\#7828](https://github.com/Wishibam/Marketplace-api/pull/7828)\n    - *feat(product-list): pipeline batch pour les actions de masse des listes produits* [\\#7833](https://github.com/Wishibam/Marketplace-api/pull/7833)\n \n- **D\u00e9j\u00e0 en production**\n    - *:arrow\\_up: deps: bump php\\_codesniffer to 4.0.4 (CVE-2026-67434)* [\\#7817](https://github.com/Wishibam/Marketplace-api/pull/7817)\n    - *feat: allow max product variation at 380* [\\#7829](https://github.com/Wishibam/Marketplace-api/pull/7829)\n\n## POST MEP\n\n### [PR #7826](https://github.com/Wishibam/Marketplace-api/pull/7826) \u2014 :sparkles: feat: raise the ES pagination window beyond 10k documents\n\n```\n  curl -X PUT \"http://localhost:9200/prod_product_*/_settings\" -H 'Content-Type: application/json' -d '{\"index\":{\"max_result_window\":200000}}'\n  curl -X PUT \"http://localhost:9200/prod_variation_*/_settings\" -H 'Content-Type: application/json' -d '{\"index\":{\"max_result_window\":500000}}'\n\n  V\u00e9rifier :\n  curl \"http://localhost:9200/prod_product_*/_settings/index.max_result_window?flat_settings\"\n  curl \"http://localhost:9200/prod_variation_*/_settings/index.max_result_window?flat_settings\"\n```\n\n### [PR #7828](https://github.com/Wishibam/Marketplace-api/pull/7828) \u2014 feat(merchandising): actions de masse asynchrones avec lock par organisation\n\n - ansible en prod \u00e7a https://github.com/Wishibam/Infrastructure/pull/467\n", "creation_timestamp": "2026-08-13T08:48:17.856018Z"}, {"uuid": "98d13c37-7d49-466f-9a83-9d9a73c9e41c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67434", "type": "seen", "source": "https://gist.github.com/jbourdin/98419c58b834f10dd62b63ebd6d02c15", "content": "- **Trello**\n    - [GLOBAL - Email Alerte paiement en erreur](https://trello.com/c/P1DJvjHp/3229-global-email-alerte-paiement-en-erreur) **\ud83c\udf89 A MEP**\n        - *feat(payment): send email notification when payment fails* [\\#10555](https://github.com/Wishibam/Ecommerce-sylius/pull/10555)\n    - [Helsinki : Portail de retour - Sylius - int\u00e9gration front du portail de retour](https://trello.com/c/mhcc7YaC/2401-helsinki-portail-de-retour-sylius-int%C3%A9gration-front-du-portail-de-retour) **\ud83d\ude80Testing BACK / FLUX / CLIENT**\n        - *feat(helsinki): Add return portal to Helsinki order details* [\\#11757](https://github.com/Wishibam/Ecommerce-sylius/pull/11757)\n    - [\u26a0\ufe0fAction prod\u26a0\ufe0f\ud83d\udd14 Refonte TVO : tracking du volet d'alerte \u00ab retour en stock \u00bb](https://trello.com/c/SXyhrSQb/3834-%E2%9A%A0%EF%B8%8Faction-prod%E2%9A%A0%EF%B8%8F%F0%9F%94%94-refonte-tvo-tracking-du-volet-dalerte-retour-en-stock) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: track back-in-stock alert panel usage* [\\#11791](https://github.com/Wishibam/Ecommerce-sylius/pull/11791)\n    - [TVO - Fiche produit - Ajout des blocs \"Mati\u00e8re et entretien\" & \"Caract\u00e9ristiques\"](https://trello.com/c/AbsKmIzk/3633-tvo-fiche-produit-ajout-des-blocs-mati%C3%A8re-et-entretien-caract%C3%A9ristiques) **\ud83c\udf89 A MEP**\n        - *feat(tvo): add Mati\u00e8re et entretien & Caract\u00e9ristiques blocks on PDP* [\\#11812](https://github.com/Wishibam/Ecommerce-sylius/pull/11812)\n    - [\\[Migration\\]\\[A.2\\] D\u00e9mant\u00e8lement Setono Analytics + Tag-Bag](https://trello.com/c/uJN0Gkiz/3856-migrationa2-d%C3%A9mant%C3%A8lement-setono-analytics-tag-bag) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore(migration): internalize setono analytics + tag-bag as src/Component \\[A.2\\]* [\\#11846](https://github.com/Wishibam/Ecommerce-sylius/pull/11846)\n    - [\\[Migration\\]\\[A.4.1\\] Internaliser bitbag/wishlist-plugin dans src/Component/Wishlist](https://trello.com/c/U9dQGx1l/3863-migrationa41-internaliser-bitbag-wishlist-plugin-dans-src-component-wishlist) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: internalize bitbag/wishlist-plugin \\[A.4.1\\]* [\\#11856](https://github.com/Wishibam/Ecommerce-sylius/pull/11856)\n    - [\\[Migration\\]\\[A.4.2/A.4.3\\] Internaliser bring & deep-link dans src/Component](https://trello.com/c/RsLN5SNT/3864-migrationa42-a43-internaliser-bring-deep-link-dans-src-component) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: internalize bring & deep-link plugins \\[A.4.2, A.4.3\\]* [\\#11861](https://github.com/Wishibam/Ecommerce-sylius/pull/11861)\n    - [\\[Migration\\]\\[A.5\\] Bumps frontend \u00ab safe \u00bb + suppression des packages morts](https://trello.com/c/vI6k61gt/3873-migrationa5-bumps-frontend-safe-suppression-des-packages-morts) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: bump safe frontend deps + prune dead packages \\[A.5\\]* [\\#11875](https://github.com/Wishibam/Ecommerce-sylius/pull/11875)\n    - [\\[Migration\\]\\[A.6\\] Pr\u00e9paration Doctrine pour DBAL 3 (monkey-patch migrations)](https://trello.com/c/8mdyVMwg/3880-migrationa6-pr%C3%A9paration-doctrine-pour-dbal-3-monkey-patch-migrations) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: replace Doctrine migration monkey-patch for DBAL 3 \\[A.6\\]* [\\#11893](https://github.com/Wishibam/Ecommerce-sylius/pull/11893)\n    - [TVO - Express checkout : adresse tronqu\u00e9e \u2014 nom de rue perdu (Apple Pay line1/line2)](https://trello.com/c/dIrl0I1a/3884-tvo-express-checkout-adresse-tronqu%C3%A9e-nom-de-rue-perdu-apple-pay-line1-line2) **\ud83c\udf89 A MEP**\n        - *:bug: fix: join express checkout wallet address line1/line2 into street* [\\#11914](https://github.com/Wishibam/Ecommerce-sylius/pull/11914)\n    - [\\[P0\\] Express checkout : re-v\u00e9rifier le montant du PaymentIntent au complete](https://trello.com/c/qJdTR9Jc/3885-p0-express-checkout-re-v%C3%A9rifier-le-montant-du-paymentintent-au-complete) **\ud83e\udd13 Testing**\n        - *:bug: fix: verify express checkout PaymentIntent amount at completion* [\\#11916](https://github.com/Wishibam/Ecommerce-sylius/pull/11916)\n    - [\\[P0\\] Webhook Stripe : rembourser r\u00e9ellement les charges des commandes refus\u00e9es/annul\u00e9es](https://trello.com/c/fyJeMD3L/3886-p0-webhook-stripe-rembourser-r%C3%A9ellement-les-charges-des-commandes-refus%C3%A9es-annul%C3%A9es) **\ud83e\udd13 Testing**\n        - *:bug: fix: refund Stripe charges captured for refused or cancelled orders* [\\#11918](https://github.com/Wishibam/Ecommerce-sylius/pull/11918)\n    - [\\[P1\\] Express checkout : pinner explicitement les wallets autoris\u00e9s (quick win)](https://trello.com/c/tEpmPM9l/3890-p1-express-checkout-pinner-explicitement-les-wallets-autoris%C3%A9s-quick-win) **\ud83e\udd16 Testing tech**\n        - *:bug: fix: restrict express checkout wallets to an explicit allowlist* [\\#11919](https://github.com/Wishibam/Ecommerce-sylius/pull/11919)\n    - [\\[P0\\] Express checkout : commandes \u00e0 fonds captur\u00e9s supprim\u00e9es par la purge des carts + cha\u00eene d'abort morte](https://trello.com/c/1Wo7zGP5/3887-p0-express-checkout-commandes-%C3%A0-fonds-captur%C3%A9s-supprim%C3%A9es-par-la-purge-des-carts-cha%C3%AEne-dabort-morte) **\ud83e\udd13 Testing**\n        - *:bug: fix: protect express checkout captured-funds carts from the purge* [\\#11920](https://github.com/Wishibam/Ecommerce-sylius/pull/11920)\n    - [Helsinki \u2014 Funnel checkout GA4 vide : \u00e9v\u00e9nements e-commerce manquants/incomplets](https://trello.com/c/j0yQGSFm/3921-helsinki-funnel-checkout-ga4-vide-%C3%A9v%C3%A9nements-e-commerce-manquants-incomplets) **\ud83c\udf44 Ready for testing**\n        - *:bug: fix: \u00e9mettre le funnel checkout GA4 complet* [\\#11980](https://github.com/Wishibam/Ecommerce-sylius/pull/11980)\n        - *:bug: fix: \u00e9mettre add\\_payment\\_info quand l'\u00e9tape de paiement est saut\u00e9e* [\\#12014](https://github.com/Wishibam/Ecommerce-sylius/pull/12014)\n    - [FEAT-0006 \u2014 Regroupement des emails d'annulation d'articles](https://trello.com/c/bBiV4jTE/3415-feat-0006-regroupement-des-emails-dannulation-darticles) **\ud83c\udf89 A MEP**\n        - *:bug: fix: FEAT-0006 cancellation email grouping QA feedback* [\\#11984](https://github.com/Wishibam/Ecommerce-sylius/pull/11984)\n        - *:bug: fix: register order\\_entirely\\_cancelled email template for all projects* [\\#12091](https://github.com/Wishibam/Ecommerce-sylius/pull/12091)\n        - *:bug: fix: send grouped withdrawal confirmations on entirely cancelled orders* [\\#12104](https://github.com/Wishibam/Ecommerce-sylius/pull/12104)\n    - [Min-height pages React](https://trello.com/c/Rti8eFXb/3919-min-height-pages-react) **\ud83c\udf89 A MEP**\n        - *:bug: fix: add min-height on React pages to prevent footer flash* [\\#11987](https://github.com/Wishibam/Ecommerce-sylius/pull/11987)\n    - [SEO - TVO - changement de slug](https://trello.com/c/Gbb2tles/3908-seo-tvo-changement-de-slug) **\ud83c\udf89 A MEP**\n        - *:bug: fix: clean up TVO brand page slugs with 301 redirects* [\\#11988](https://github.com/Wishibam/Ecommerce-sylius/pull/11988)\n    - [\u26a0\ufe0f action preprod/prod \u26a0\ufe0f \ud83d\uded2 Refonte Checkout #1 \u2014 La page Panier change de garde-robe](https://trello.com/c/qxdtlZxk/3851-%E2%9A%A0%EF%B8%8F-action-preprod-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%9B%92-refonte-checkout-1-la-page-panier-change-de-garde-robe) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): cart page QA feedback round* [\\#11990](https://github.com/Wishibam/Ecommerce-sylius/pull/11990)\n    - [\u26a0\ufe0f MEP \u26a0\ufe0f\u2b50 Google Customer Reviews sur TVO \u2014 brancher la machine \u00e0 \u00e9toiles](https://trello.com/c/7JA9u85M/3899-%E2%9A%A0%EF%B8%8F-mep-%E2%9A%A0%EF%B8%8F%E2%AD%90-google-customer-reviews-sur-tvo-brancher-la-machine-%C3%A0-%C3%A9toiles) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: TVO Google Customer Reviews \u2014 GTIN produits sur thank you* [\\#11991](https://github.com/Wishibam/Ecommerce-sylius/pull/11991)\n    - [Fix : TypeError trim() null sur les share descriptions de channel (admin)](https://trello.com/c/o47Ek1Fo/3924-fix-typeerror-trim-null-sur-les-share-descriptions-de-channel-admin) **\ud83e\udd16 Testing tech**\n        - *:bug: fix: guard against null share descriptions in channel setter* [\\#11992](https://github.com/Wishibam/Ecommerce-sylius/pull/11992)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f \ud83d\udce6\ud83c\udf0d Mondial Relay sans fronti\u00e8res \u2014 points relais UE (v1 TVO)](https://trello.com/c/4X0QYlQ5/3918-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%93%A6%F0%9F%8C%8D-mondial-relay-sans-fronti%C3%A8res-points-relais-ue-v1-tvo) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat(mondial-relay): relay search follows the buyer's country* [\\#11994](https://github.com/Wishibam/Ecommerce-sylius/pull/11994)\n    - [\ud83d\udccd Refonte Checkout \u2014 La suggestion d'adresse qui fait mouche](https://trello.com/c/vF0T1FZU/3860-%F0%9F%93%8D-refonte-checkout-la-suggestion-dadresse-qui-fait-mouche) **\ud83d\udc8e In Review**\n        - *:bug: fix(tvo): address suggestion QA feedback round* [\\#11995](https://github.com/Wishibam/Ecommerce-sylius/pull/11995)\n        - *:bug: fix(tvo): keep the manual phone flag choice made on an empty field* [\\#12058](https://github.com/Wishibam/Ecommerce-sylius/pull/12058)\n    - [\ud83c\udf5e Refonte Checkout \u2014 Des toasts tout chauds pour les messages syst\u00e8me](https://trello.com/c/N70pstGO/3861-%F0%9F%8D%9E-refonte-checkout-des-toasts-tout-chauds-pour-les-messages-syst%C3%A8me) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): checkout toasts QA feedback round* [\\#11996](https://github.com/Wishibam/Ecommerce-sylius/pull/11996)\n    - [\ud83d\udd00 Refonte TVO : le variant s\u00e9lectionn\u00e9 saute en 1re position au lieu de rester \u00e0 sa place](https://trello.com/c/vQH5uxHz/3904-%F0%9F%94%80-refonte-tvo-le-variant-s%C3%A9lectionn%C3%A9-saute-en-1re-position-au-lieu-de-rester-%C3%A0-sa-place) **\ud83c\udf89 A MEP**\n        - *:bug: fix: keep option values in place on overflowing variant axis* [\\#11998](https://github.com/Wishibam/Ecommerce-sylius/pull/11998)\n    - [TVO- mail order\\_open\\_return\\_withdrawn -remplacement de tag](https://trello.com/c/NK5CnCM2/3883-tvo-mail-orderopenreturnwithdrawn-remplacement-de-tag) **\ud83c\udf89 A MEP**\n        - *\ud83d\udc1b fix: orange \"return in progress\" badge on TVO withdrawal email* [\\#12000](https://github.com/Wishibam/Ecommerce-sylius/pull/12000)\n    - [SEO - ALL - Meta Title](https://trello.com/c/QDbDIPTu/3909-seo-all-meta-title) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: add dedicated Meta Title for CMS pages* [\\#12001](https://github.com/Wishibam/Ecommerce-sylius/pull/12001)\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\ude9a Refonte Checkout #3 \u2014 Le Mode de livraison prend la route](https://trello.com/c/NDSNOimu/3854-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%9A%9A-refonte-checkout-3-le-mode-de-livraison-prend-la-route) **\ud83d\udc8e In Review**\n        - *:sparkles: feat(tvo): React checkout select shipping step (P3)* [\\#12011](https://github.com/Wishibam/Ecommerce-sylius/pull/12011)\n    - [Helsinki - Correction bug d'affichage en finnois en version mobile](https://trello.com/c/f9V6mA6z/3686-helsinki-correction-bug-daffichage-en-finnois-en-version-mobile) **\ud83c\udf89 A MEP**\n        - *:bug: fix: reduce Helsinki posts carousel title on mobile* [\\#12017](https://github.com/Wishibam/Ecommerce-sylius/pull/12017)\n    - [\ud83d\udcb8 TVO \u2014 Filtre par niveau de remise : que la d\u00e9marque soit avec vous \u2702\ufe0f](https://trello.com/c/FvSWlx14/3877-%F0%9F%92%B8-tvo-filtre-par-niveau-de-remise-que-la-d%C3%A9marque-soit-avec-vous-%E2%9C%82%EF%B8%8F) **\ud83c\udf44 Ready for testing**\n        - *:sparkles: feat: TVO minimum discount percentage filter on product lists* [\\#12018](https://github.com/Wishibam/Ecommerce-sylius/pull/12018)\n    - [\ud83c\udfbd \\[IS\\] Footer : \u00ab Notre accompagnement \u00bb devient \u00ab Nos services \u00bb et raccroche son lien](https://trello.com/c/H2X0XtqH/3932-%F0%9F%8E%BD-is-footer-notre-accompagnement-devient-nos-services-et-raccroche-son-lien) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: rename the Intersport footer column to \u00ab Nos services \u00bb and unlink its title* [\\#12026](https://github.com/Wishibam/Ecommerce-sylius/pull/12026)\n        - *:rewind: revert: Intersport footer \u00ab Nos services \u00bb (wrong target branch)* [\\#12037](https://github.com/Wishibam/Ecommerce-sylius/pull/12037)\n    - [Batavia - Probl\u00e8me sur l'affichage des variations](https://trello.com/c/MY6aNjLj/3931-batavia-probl%C3%A8me-sur-laffichage-des-variations) **\ud83c\udf89 A MEP**\n        - *:bug: fix: deep-link Batavia PLP cards to the displayed color variant* [\\#12027](https://github.com/Wishibam/Ecommerce-sylius/pull/12027)\n    - [Batavia \u2014 Mails \u00ab produit indisponible \u00bb non re\u00e7us par les clients](https://trello.com/c/YLHFxnVs/3933-batavia-mails-produit-indisponible-non-re%C3%A7us-par-les-clients) **\ud83c\udf89 A MEP**\n        - *:bug: fix: validate admin email templates and log real send outcomes* [\\#12035](https://github.com/Wishibam/Ecommerce-sylius/pull/12035)\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\udcb3 Refonte Checkout #4 \u2014 Le Mode de paiement passe \u00e0 la caisse](https://trello.com/c/vDcvKX88/3855-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%92%B3-refonte-checkout-4-le-mode-de-paiement-passe-%C3%A0-la-caisse) **\ud83d\udc8e In Review**\n        - *:sparkles: feat(tvo): rebuild the checkout payment step and success page in React* [\\#12051](https://github.com/Wishibam/Ecommerce-sylius/pull/12051)\n    - [Intersport - Bug d'affichage images box produit](https://trello.com/c/mOO6EBx1/3936-intersport-bug-daffichage-images-box-produit) **\ud83c\udf89 A MEP**\n        - *:bug: \\[via\\] fix: styles mobiles des pages mot de passe oubli\u00e9/reset* [\\#12055](https://github.com/Wishibam/Ecommerce-sylius/pull/12055)\n    - [\ud83e\ude97 VIA \u2014 Le filtre Cat\u00e9gorie s'ouvre tout seul dans les descentes : on le veut ferm\u00e9 au chargement](https://trello.com/c/GMHVWZe2/3938-%F0%9F%AA%97-via-le-filtre-cat%C3%A9gorie-souvre-tout-seul-dans-les-descentes-on-le-veut-ferm%C3%A9-au-chargement) **\ud83c\udf89 A MEP**\n        - *:bug: \\[via\\] fix: le filtre Cat\u00e9gorie reste ferm\u00e9 au chargement des descentes* [\\#12059](https://github.com/Wishibam/Ecommerce-sylius/pull/12059)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f Feed : Ajouter le flux facebook TVO](https://trello.com/c/iXjTokqz/3937-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-feed-ajouter-le-flux-facebook-tvo) **\ud83e\udd16 Testing tech**\n        - *:sparkles: feat: porter le flux facebook\\_catalog vers le nouveau composant* [\\#12060](https://github.com/Wishibam/Ecommerce-sylius/pull/12060)\n    - [\\[Migration\\]\\[B.1\\] PHP 8.2 \u2192 8.3](https://trello.com/c/Slm1Q5n7/3940-migrationb1-php-82-%E2%86%92-83) **\ud83d\ude80 To Do Vincent**\n        - *:wrench: chore: run the test suite on PHP 8.2 and 8.3 \\[B.1\\]* [\\#12063](https://github.com/Wishibam/Ecommerce-sylius/pull/12063)\n        - *:bug: fix(deploy): restart PHP-FPM via systemd glob instead of hardcoded 8.2* [\\#12066](https://github.com/Wishibam/Ecommerce-sylius/pull/12066)\n        - *:wrench: chore: run the dual PHP matrix on the tests job only \\[B.1\\]* [\\#12068](https://github.com/Wishibam/Ecommerce-sylius/pull/12068)\n    - [\\[Migration\\]\\[B.2\\] Sylius 1.12 \u2192 1.13 (DBAL 3)](https://trello.com/c/huA0VNU9/3941-migrationb2-sylius-112-%E2%86%92-113-dbal-3) **\ud83d\ude80 To Do Vincent**\n        - *:wrench: chore(doctrine): drop the last getSchemaManager() call for DBAL 3/4 \\[B.2 P.1\\]* [\\#12071](https://github.com/Wishibam/Ecommerce-sylius/pull/12071)\n        - *:white\\_check\\_mark: test: characterize every state machine graph wiring \\[B.2 P.2\\]* [\\#12074](https://github.com/Wishibam/Ecommerce-sylius/pull/12074)\n        - *:recycle: refactor: state machine abstraction infra + pilot call site \\[B.2 P.3.1\\]* [\\#12089](https://github.com/Wishibam/Ecommerce-sylius/pull/12089)\n        - *:recycle: refactor: migrate the mechanical state machine call sites \\[B.2 P.3.2\\]* [\\#12094](https://github.com/Wishibam/Ecommerce-sylius/pull/12094)\n        - *:recycle: refactor: migrate the structural state machine call sites \\[B.2 P.3.3\\]* [\\#12098](https://github.com/Wishibam/Ecommerce-sylius/pull/12098)\n        - *:wrench: chore: bump symfony/flex 1 to 2 \\[B.2 P.4\\]* [\\#12100](https://github.com/Wishibam/Ecommerce-sylius/pull/12100)\n    - [MA - Pas de message d'erreur lorsque l'on n'arrive pas \u00e0 se connecter \u00e0 son compte client](https://trello.com/c/fQ9vwTD0/3684-ma-pas-de-message-derreur-lorsque-lon-narrive-pas-%C3%A0-se-connecter-%C3%A0-son-compte-client) **\ud83e\udd13 Testing**\n        - *:bug: fix: display an error message on failed login on Marques Avenue* [\\#12072](https://github.com/Wishibam/Ecommerce-sylius/pull/12072)\n    - [Fix : \ufeff\ufefftransmettre le consentement newsletter \u00e0 Coniq \u00e0 l'inscription](https://trello.com/c/mShGQBUK/3943-fix-transmettre-le-consentement-newsletter-%C3%A0-coniq-%C3%A0-linscription) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: transmettre le consentement newsletter \u00e0 Coniq \u00e0 l'inscription* [\\#12076](https://github.com/Wishibam/Ecommerce-sylius/pull/12076)\n        - *:bug: fix: consentement newsletter Coniq par canal \u00e0 l'inscription* [\\#12105](https://github.com/Wishibam/Ecommerce-sylius/pull/12105)\n    - [TVO - Bloc caract\u00e9ristiques : Attribut genre et ean](https://trello.com/c/MwYdlurp/3945-tvo-bloc-caract%C3%A9ristiques-attribut-genre-et-ean) **\ud83e\udd13 Testing**\n        - *:bug: fix(tvo): localize gender and drop EAN in the characteristics block* [\\#12112](https://github.com/Wishibam/Ecommerce-sylius/pull/12112)\n    - [Page de confirmation de commande - N\u00b0 de commande sylius plut\u00f4t que MP](https://trello.com/c/bUrAEDyS/3944-page-de-confirmation-de-commande-n-de-commande-sylius-plut%C3%B4t-que-mp) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): align the thank-you order number with the email* [\\#12114](https://github.com/Wishibam/Ecommerce-sylius/pull/12114)\n    - [TVO \u2014 Tracking des mails de relance panier (taux d'ouverture / clic / CA)](https://trello.com/c/cyTNgF1i/3947-tvo-tracking-des-mails-de-relance-panier-taux-douverture-clic-ca) **\ud83e\udd13 Testing**\n        - *:sparkles: feat(tvo, all): track abandoned cart reminder emails* [\\#12118](https://github.com/Wishibam/Ecommerce-sylius/pull/12118)\n \n- **Misc**\n    - *:sparkles: feat: PushDispatcher + adaptateur FCM (push app TVO)* [\\#11917](https://github.com/Wishibam/Ecommerce-sylius/pull/11917)\n    - *style(withdrawal): make the withdrawal button theme-colored and not f\u2026* [\\#11951](https://github.com/Wishibam/Ecommerce-sylius/pull/11951)\n    - *:zap: perf: Batavia PLP \u2014 ES result cache, key batching, menu cache* [\\#11963](https://github.com/Wishibam/Ecommerce-sylius/pull/11963)\n    - *:wrench: chore: outillage pour worktrees parall\u00e8les (front isol\u00e9 par projet)* [\\#11986](https://github.com/Wishibam/Ecommerce-sylius/pull/11986)\n    - *:sparkles: feat: push app TVO \u2014 envoi asynchrone + badge (3.A.5 + 3.A.6)* [\\#12022](https://github.com/Wishibam/Ecommerce-sylius/pull/12022)\n    - *:sparkles: feat: badge unreadPushCount de bout en bout (app TVO)* [\\#12025](https://github.com/Wishibam/Ecommerce-sylius/pull/12025)\n    - *:sparkles: feat: compteur badge dans data des push (app TVO)* [\\#12028](https://github.com/Wishibam/Ecommerce-sylius/pull/12028)\n    - *:sparkles: feat: push \u00ab commande confirm\u00e9e \u00bb (app TVO)* [\\#12031](https://github.com/Wishibam/Ecommerce-sylius/pull/12031)\n    - *:sparkles: feat: push \u00ab commande exp\u00e9di\u00e9e \u00bb (app TVO)* [\\#12040](https://github.com/Wishibam/Ecommerce-sylius/pull/12040)\n    - *feat(push): notification de remboursement de commande (TVO 3.B.3)* [\\#12041](https://github.com/Wishibam/Ecommerce-sylius/pull/12041)\n    - *fix(push): durcir l'envoi FCM \u2014 timeouts born\u00e9s + retry effectif (TVO 3.A.7)* [\\#12042](https://github.com/Wishibam/Ecommerce-sylius/pull/12042)\n    - *test(featured-content): d\u00e9-flakifier testProgramDisableDelay (tol\u00e9rance sur le d\u00e9lai)* [\\#12044](https://github.com/Wishibam/Ecommerce-sylius/pull/12044)\n    - *feat(push): notification de retour en stock (TVO 3.B.4)* [\\#12045](https://github.com/Wishibam/Ecommerce-sylius/pull/12045)\n    - *feat(push): notification de baisse de prix wishlist (TVO 3.B.5)* [\\#12049](https://github.com/Wishibam/Ecommerce-sylius/pull/12049)\n    - *:bug: fix(megamenu): \u00e9largir le lien \u00e0 2048 caract\u00e8res* [\\#12050](https://github.com/Wishibam/Ecommerce-sylius/pull/12050)\n    - *feat(push): relance push des paniers abandonn\u00e9s (TVO 3.B.6)* [\\#12053](https://github.com/Wishibam/Ecommerce-sylius/pull/12053)\n    - *feat(deeplink): AASA de la nouvelle app TVO \u2014 Universal Links iOS (TVO 4.1)* [\\#12064](https://github.com/Wishibam/Ecommerce-sylius/pull/12064)\n    - *feat(deeplink): assetlinks.json de la nouvelle app TVO \u2014 App Links Android (TVO 4.2)* [\\#12065](https://github.com/Wishibam/Ecommerce-sylius/pull/12065)\n    - *:bug: fix: complete payments stuck by Stripe webhook/checkout race* [\\#12075](https://github.com/Wishibam/Ecommerce-sylius/pull/12075)\n    - *:bug: fix: dedup order\\_confirmation per order to stop double send* [\\#12101](https://github.com/Wishibam/Ecommerce-sylius/pull/12101)\n    - *:bug: fix: pin the fixtures channel default tax zone* [\\#12106](https://github.com/Wishibam/Ecommerce-sylius/pull/12106)\n \n- **D\u00e9j\u00e0 en production**\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\udc1b Fix r\u00e9indexation ES bloqu\u00e9e \u2014 \u00ab immense term \u00bb sur attribut trop long (Intersport)](https://trello.com/c/iD6idW0v/3915-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%90%9B-fix-r%C3%A9indexation-es-bloqu%C3%A9e-immense-term-sur-attribut-trop-long-intersport) **MEP Ao\u00fbt**\n        - *:bug: fix: r\u00e9indexation ES bloqu\u00e9e par un attribut trop long (immense term)* [\\#11972](https://github.com/Wishibam/Ecommerce-sylius/pull/11972)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f \u203c\ufe0f Nouveau Feeds - Faire tourner tous les nouveaux feeds sur toutes les preprods/prods](https://trello.com/c/Kr8UhDAv/3910-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-%EF%B8%8F-nouveau-feeds-faire-tourner-tous-les-nouveaux-feeds-sur-toutes-les-preprods-prods) **\ud83e\udee1 To Do JC**\n        - *:sparkles: feat: drive-to-store feeds parity with legacy Setono* [\\#11979](https://github.com/Wishibam/Ecommerce-sylius/pull/11979)\n    - [TVO - Les recommandations produits ne remontent aucun produit sur la fiche produit](https://trello.com/c/lw3SYgNG/3926-tvo-les-recommandations-produits-ne-remontent-aucun-produit-sur-la-fiche-produit) **MEP Ao\u00fbt**\n        - *:bug: fix(search): match the indexed color value in recommendations* [\\#12004](https://github.com/Wishibam/Ecommerce-sylius/pull/12004)\n    - [A ESTIMER : Google Shopping Feed : ajouter le Outlet Price en cas de promotion](https://trello.com/c/RnEgL53B/3867-a-estimer-google-shopping-feed-ajouter-le-outlet-price-en-cas-de-promotion) **MEP Ao\u00fbt**\n        - *:sparkles: feat(helsinki): expose the outlet price in the Google Shopping feed* [\\#12020](https://github.com/Wishibam/Ecommerce-sylius/pull/12020)\n    - [\u2615\ufe0f \\[Batavia\\] Frais de retour : \u20ac3,25 \u2192 \u20ac3,95 (et on passe le texte en traduction)](https://trello.com/c/P4vec3cz/3934-%E2%98%95%EF%B8%8F-batavia-frais-de-retour-%E2%82%AC325-%E2%86%92-%E2%82%AC395-et-on-passe-le-texte-en-traduction) **MEP Ao\u00fbt**\n        - *:bug: fix: Batavia return cost 3,95 and move the line to a translation* [\\#12034](https://github.com/Wishibam/Ecommerce-sylius/pull/12034)\n    - *:bug: fix: render flag emojis as SVG icons, not OS emoji glyphs* [\\#11981](https://github.com/Wishibam/Ecommerce-sylius/pull/11981)\n    - *:bug: fix: apply the flag icon filter to the remaining menu renderings* [\\#11982](https://github.com/Wishibam/Ecommerce-sylius/pull/11982)\n    - *:wrench: chore: bump php\\_codesniffer en 3.13.6 (CVE-2026-67434, CI rouge)* [\\#12008](https://github.com/Wishibam/Ecommerce-sylius/pull/12008)", "creation_timestamp": "2026-08-31T08:09:15.432273Z"}, {"uuid": "f4a1d4e1-7ab5-480f-9191-cbe8501b2d4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67434", "type": "seen", "source": "https://gist.github.com/jbourdin/589440ac4b7ed8e7362d1bff289ebf2f", "content": "- **Trello**\n    - [GLOBAL - Email Alerte paiement en erreur](https://trello.com/c/P1DJvjHp/3229-global-email-alerte-paiement-en-erreur) **\ud83c\udf89 A MEP**\n        - *feat(payment): send email notification when payment fails* [\\#10555](https://github.com/Wishibam/Ecommerce-sylius/pull/10555)\n    - [Helsinki : Portail de retour - Sylius - int\u00e9gration front du portail de retour](https://trello.com/c/mhcc7YaC/2401-helsinki-portail-de-retour-sylius-int%C3%A9gration-front-du-portail-de-retour) **\ud83d\ude80Testing BACK / FLUX / CLIENT**\n        - *feat(helsinki): Add return portal to Helsinki order details* [\\#11757](https://github.com/Wishibam/Ecommerce-sylius/pull/11757)\n    - [\u26a0\ufe0fAction prod\u26a0\ufe0f\ud83d\udd14 Refonte TVO : tracking du volet d'alerte \u00ab retour en stock \u00bb](https://trello.com/c/SXyhrSQb/3834-%E2%9A%A0%EF%B8%8Faction-prod%E2%9A%A0%EF%B8%8F%F0%9F%94%94-refonte-tvo-tracking-du-volet-dalerte-retour-en-stock) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: track back-in-stock alert panel usage* [\\#11791](https://github.com/Wishibam/Ecommerce-sylius/pull/11791)\n    - [TVO - Fiche produit - Ajout des blocs \"Mati\u00e8re et entretien\" & \"Caract\u00e9ristiques\"](https://trello.com/c/AbsKmIzk/3633-tvo-fiche-produit-ajout-des-blocs-mati%C3%A8re-et-entretien-caract%C3%A9ristiques) **\ud83c\udf89 A MEP**\n        - *feat(tvo): add Mati\u00e8re et entretien & Caract\u00e9ristiques blocks on PDP* [\\#11812](https://github.com/Wishibam/Ecommerce-sylius/pull/11812)\n    - [\\[Migration\\]\\[A.2\\] D\u00e9mant\u00e8lement Setono Analytics + Tag-Bag](https://trello.com/c/uJN0Gkiz/3856-migrationa2-d%C3%A9mant%C3%A8lement-setono-analytics-tag-bag) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore(migration): internalize setono analytics + tag-bag as src/Component \\[A.2\\]* [\\#11846](https://github.com/Wishibam/Ecommerce-sylius/pull/11846)\n    - [\\[Migration\\]\\[A.4.1\\] Internaliser bitbag/wishlist-plugin dans src/Component/Wishlist](https://trello.com/c/U9dQGx1l/3863-migrationa41-internaliser-bitbag-wishlist-plugin-dans-src-component-wishlist) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: internalize bitbag/wishlist-plugin \\[A.4.1\\]* [\\#11856](https://github.com/Wishibam/Ecommerce-sylius/pull/11856)\n    - [\\[Migration\\]\\[A.4.2/A.4.3\\] Internaliser bring & deep-link dans src/Component](https://trello.com/c/RsLN5SNT/3864-migrationa42-a43-internaliser-bring-deep-link-dans-src-component) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: internalize bring & deep-link plugins \\[A.4.2, A.4.3\\]* [\\#11861](https://github.com/Wishibam/Ecommerce-sylius/pull/11861)\n    - [\\[Migration\\]\\[A.5\\] Bumps frontend \u00ab safe \u00bb + suppression des packages morts](https://trello.com/c/vI6k61gt/3873-migrationa5-bumps-frontend-safe-suppression-des-packages-morts) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: bump safe frontend deps + prune dead packages \\[A.5\\]* [\\#11875](https://github.com/Wishibam/Ecommerce-sylius/pull/11875)\n    - [\\[Migration\\]\\[A.6\\] Pr\u00e9paration Doctrine pour DBAL 3 (monkey-patch migrations)](https://trello.com/c/8mdyVMwg/3880-migrationa6-pr%C3%A9paration-doctrine-pour-dbal-3-monkey-patch-migrations) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: replace Doctrine migration monkey-patch for DBAL 3 \\[A.6\\]* [\\#11893](https://github.com/Wishibam/Ecommerce-sylius/pull/11893)\n    - [TVO - Express checkout : adresse tronqu\u00e9e \u2014 nom de rue perdu (Apple Pay line1/line2)](https://trello.com/c/dIrl0I1a/3884-tvo-express-checkout-adresse-tronqu%C3%A9e-nom-de-rue-perdu-apple-pay-line1-line2) **\ud83c\udf89 A MEP**\n        - *:bug: fix: join express checkout wallet address line1/line2 into street* [\\#11914](https://github.com/Wishibam/Ecommerce-sylius/pull/11914)\n    - [\\[P0\\] Express checkout : re-v\u00e9rifier le montant du PaymentIntent au complete](https://trello.com/c/qJdTR9Jc/3885-p0-express-checkout-re-v%C3%A9rifier-le-montant-du-paymentintent-au-complete) **\ud83e\udd13 Testing**\n        - *:bug: fix: verify express checkout PaymentIntent amount at completion* [\\#11916](https://github.com/Wishibam/Ecommerce-sylius/pull/11916)\n    - [\\[P0\\] Webhook Stripe : rembourser r\u00e9ellement les charges des commandes refus\u00e9es/annul\u00e9es](https://trello.com/c/fyJeMD3L/3886-p0-webhook-stripe-rembourser-r%C3%A9ellement-les-charges-des-commandes-refus%C3%A9es-annul%C3%A9es) **\ud83e\udd13 Testing**\n        - *:bug: fix: refund Stripe charges captured for refused or cancelled orders* [\\#11918](https://github.com/Wishibam/Ecommerce-sylius/pull/11918)\n    - [\\[P1\\] Express checkout : pinner explicitement les wallets autoris\u00e9s (quick win)](https://trello.com/c/tEpmPM9l/3890-p1-express-checkout-pinner-explicitement-les-wallets-autoris%C3%A9s-quick-win) **\ud83e\udd16 Testing tech**\n        - *:bug: fix: restrict express checkout wallets to an explicit allowlist* [\\#11919](https://github.com/Wishibam/Ecommerce-sylius/pull/11919)\n    - [\\[P0\\] Express checkout : commandes \u00e0 fonds captur\u00e9s supprim\u00e9es par la purge des carts + cha\u00eene d'abort morte](https://trello.com/c/1Wo7zGP5/3887-p0-express-checkout-commandes-%C3%A0-fonds-captur%C3%A9s-supprim%C3%A9es-par-la-purge-des-carts-cha%C3%AEne-dabort-morte) **\ud83e\udd13 Testing**\n        - *:bug: fix: protect express checkout captured-funds carts from the purge* [\\#11920](https://github.com/Wishibam/Ecommerce-sylius/pull/11920)\n    - [Helsinki \u2014 Funnel checkout GA4 vide : \u00e9v\u00e9nements e-commerce manquants/incomplets](https://trello.com/c/j0yQGSFm/3921-helsinki-funnel-checkout-ga4-vide-%C3%A9v%C3%A9nements-e-commerce-manquants-incomplets) **\ud83c\udf44 Ready for testing**\n        - *:bug: fix: \u00e9mettre le funnel checkout GA4 complet* [\\#11980](https://github.com/Wishibam/Ecommerce-sylius/pull/11980)\n        - *:bug: fix: \u00e9mettre add\\_payment\\_info quand l'\u00e9tape de paiement est saut\u00e9e* [\\#12014](https://github.com/Wishibam/Ecommerce-sylius/pull/12014)\n    - [FEAT-0006 \u2014 Regroupement des emails d'annulation d'articles](https://trello.com/c/bBiV4jTE/3415-feat-0006-regroupement-des-emails-dannulation-darticles) **\ud83c\udf89 A MEP**\n        - *:bug: fix: FEAT-0006 cancellation email grouping QA feedback* [\\#11984](https://github.com/Wishibam/Ecommerce-sylius/pull/11984)\n        - *:bug: fix: register order\\_entirely\\_cancelled email template for all projects* [\\#12091](https://github.com/Wishibam/Ecommerce-sylius/pull/12091)\n        - *:bug: fix: send grouped withdrawal confirmations on entirely cancelled orders* [\\#12104](https://github.com/Wishibam/Ecommerce-sylius/pull/12104)\n    - [Min-height pages React](https://trello.com/c/Rti8eFXb/3919-min-height-pages-react) **\ud83c\udf89 A MEP**\n        - *:bug: fix: add min-height on React pages to prevent footer flash* [\\#11987](https://github.com/Wishibam/Ecommerce-sylius/pull/11987)\n    - [SEO - TVO - changement de slug](https://trello.com/c/Gbb2tles/3908-seo-tvo-changement-de-slug) **\ud83c\udf89 A MEP**\n        - *:bug: fix: clean up TVO brand page slugs with 301 redirects* [\\#11988](https://github.com/Wishibam/Ecommerce-sylius/pull/11988)\n    - [\u26a0\ufe0f action preprod/prod \u26a0\ufe0f \ud83d\uded2 Refonte Checkout #1 \u2014 La page Panier change de garde-robe](https://trello.com/c/qxdtlZxk/3851-%E2%9A%A0%EF%B8%8F-action-preprod-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%9B%92-refonte-checkout-1-la-page-panier-change-de-garde-robe) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): cart page QA feedback round* [\\#11990](https://github.com/Wishibam/Ecommerce-sylius/pull/11990)\n    - [\u26a0\ufe0f MEP \u26a0\ufe0f\u2b50 Google Customer Reviews sur TVO \u2014 brancher la machine \u00e0 \u00e9toiles](https://trello.com/c/7JA9u85M/3899-%E2%9A%A0%EF%B8%8F-mep-%E2%9A%A0%EF%B8%8F%E2%AD%90-google-customer-reviews-sur-tvo-brancher-la-machine-%C3%A0-%C3%A9toiles) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: TVO Google Customer Reviews \u2014 GTIN produits sur thank you* [\\#11991](https://github.com/Wishibam/Ecommerce-sylius/pull/11991)\n    - [Fix : TypeError trim() null sur les share descriptions de channel (admin)](https://trello.com/c/o47Ek1Fo/3924-fix-typeerror-trim-null-sur-les-share-descriptions-de-channel-admin) **\ud83e\udd16 Testing tech**\n        - *:bug: fix: guard against null share descriptions in channel setter* [\\#11992](https://github.com/Wishibam/Ecommerce-sylius/pull/11992)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f \ud83d\udce6\ud83c\udf0d Mondial Relay sans fronti\u00e8res \u2014 points relais UE (v1 TVO)](https://trello.com/c/4X0QYlQ5/3918-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%93%A6%F0%9F%8C%8D-mondial-relay-sans-fronti%C3%A8res-points-relais-ue-v1-tvo) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat(mondial-relay): relay search follows the buyer's country* [\\#11994](https://github.com/Wishibam/Ecommerce-sylius/pull/11994)\n    - [\ud83d\udccd Refonte Checkout \u2014 La suggestion d'adresse qui fait mouche](https://trello.com/c/vF0T1FZU/3860-%F0%9F%93%8D-refonte-checkout-la-suggestion-dadresse-qui-fait-mouche) **\ud83d\udc8e In Review**\n        - *:bug: fix(tvo): address suggestion QA feedback round* [\\#11995](https://github.com/Wishibam/Ecommerce-sylius/pull/11995)\n        - *:bug: fix(tvo): keep the manual phone flag choice made on an empty field* [\\#12058](https://github.com/Wishibam/Ecommerce-sylius/pull/12058)\n    - [\ud83c\udf5e Refonte Checkout \u2014 Des toasts tout chauds pour les messages syst\u00e8me](https://trello.com/c/N70pstGO/3861-%F0%9F%8D%9E-refonte-checkout-des-toasts-tout-chauds-pour-les-messages-syst%C3%A8me) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): checkout toasts QA feedback round* [\\#11996](https://github.com/Wishibam/Ecommerce-sylius/pull/11996)\n    - [\ud83d\udd00 Refonte TVO : le variant s\u00e9lectionn\u00e9 saute en 1re position au lieu de rester \u00e0 sa place](https://trello.com/c/vQH5uxHz/3904-%F0%9F%94%80-refonte-tvo-le-variant-s%C3%A9lectionn%C3%A9-saute-en-1re-position-au-lieu-de-rester-%C3%A0-sa-place) **\ud83c\udf89 A MEP**\n        - *:bug: fix: keep option values in place on overflowing variant axis* [\\#11998](https://github.com/Wishibam/Ecommerce-sylius/pull/11998)\n    - [Helsinki preprod (peut \u00eatre ailleurs) - Commande C&C cr\u00e9e plusieurs shipments.](https://trello.com/c/Dlk8WpIg/3895-helsinki-preprod-peut-%C3%AAtre-ailleurs-commande-cc-cr%C3%A9e-plusieurs-shipments) **\ud83e\udd13 Testing**\n        - *:bug: fix: remove phantom shipment block from account order page* [\\#11999](https://github.com/Wishibam/Ecommerce-sylius/pull/11999)\n    - [TVO- mail order\\_open\\_return\\_withdrawn -remplacement de tag](https://trello.com/c/NK5CnCM2/3883-tvo-mail-orderopenreturnwithdrawn-remplacement-de-tag) **\ud83c\udf89 A MEP**\n        - *\ud83d\udc1b fix: orange \"return in progress\" badge on TVO withdrawal email* [\\#12000](https://github.com/Wishibam/Ecommerce-sylius/pull/12000)\n    - [SEO - ALL - Meta Title](https://trello.com/c/QDbDIPTu/3909-seo-all-meta-title) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: add dedicated Meta Title for CMS pages* [\\#12001](https://github.com/Wishibam/Ecommerce-sylius/pull/12001)\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\ude9a Refonte Checkout #3 \u2014 Le Mode de livraison prend la route](https://trello.com/c/NDSNOimu/3854-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%9A%9A-refonte-checkout-3-le-mode-de-livraison-prend-la-route) **\ud83d\udc8e In Review**\n        - *:sparkles: feat(tvo): React checkout select shipping step (P3)* [\\#12011](https://github.com/Wishibam/Ecommerce-sylius/pull/12011)\n    - [\u2709\ufe0f \\[TVO V2\\] Login & inscription : un seul email pour les gouverner tous](https://trello.com/c/Eml7o2An/3912-%E2%9C%89%EF%B8%8F-tvo-v2-login-inscription-un-seul-email-pour-les-gouverner-tous) **\ud83e\udd13 Testing**\n        - *:sparkles: feat: TVO email-first React login & registration flow* [\\#12015](https://github.com/Wishibam/Ecommerce-sylius/pull/12015)\n    - [Helsinki - Correction bug d'affichage en finnois en version mobile](https://trello.com/c/f9V6mA6z/3686-helsinki-correction-bug-daffichage-en-finnois-en-version-mobile) **\ud83c\udf89 A MEP**\n        - *:bug: fix: reduce Helsinki posts carousel title on mobile* [\\#12017](https://github.com/Wishibam/Ecommerce-sylius/pull/12017)\n    - [\ud83d\udcb8 TVO \u2014 Filtre par niveau de remise : que la d\u00e9marque soit avec vous \u2702\ufe0f](https://trello.com/c/FvSWlx14/3877-%F0%9F%92%B8-tvo-filtre-par-niveau-de-remise-que-la-d%C3%A9marque-soit-avec-vous-%E2%9C%82%EF%B8%8F) **\ud83e\udd13 Testing**\n        - *:sparkles: feat: TVO minimum discount percentage filter on product lists* [\\#12018](https://github.com/Wishibam/Ecommerce-sylius/pull/12018)\n    - [\ud83c\udfbd \\[IS\\] Footer : \u00ab Notre accompagnement \u00bb devient \u00ab Nos services \u00bb et raccroche son lien](https://trello.com/c/H2X0XtqH/3932-%F0%9F%8E%BD-is-footer-notre-accompagnement-devient-nos-services-et-raccroche-son-lien) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: rename the Intersport footer column to \u00ab Nos services \u00bb and unlink its title* [\\#12026](https://github.com/Wishibam/Ecommerce-sylius/pull/12026)\n        - *:rewind: revert: Intersport footer \u00ab Nos services \u00bb (wrong target branch)* [\\#12037](https://github.com/Wishibam/Ecommerce-sylius/pull/12037)\n    - [Batavia - Probl\u00e8me sur l'affichage des variations](https://trello.com/c/MY6aNjLj/3931-batavia-probl%C3%A8me-sur-laffichage-des-variations) **\ud83c\udf89 A MEP**\n        - *:bug: fix: deep-link Batavia PLP cards to the displayed color variant* [\\#12027](https://github.com/Wishibam/Ecommerce-sylius/pull/12027)\n    - [Batavia \u2014 Mails \u00ab produit indisponible \u00bb non re\u00e7us par les clients](https://trello.com/c/YLHFxnVs/3933-batavia-mails-produit-indisponible-non-re%C3%A7us-par-les-clients) **\ud83c\udf89 A MEP**\n        - *:bug: fix: validate admin email templates and log real send outcomes* [\\#12035](https://github.com/Wishibam/Ecommerce-sylius/pull/12035)\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\udcb3 Refonte Checkout #4 \u2014 Le Mode de paiement passe \u00e0 la caisse](https://trello.com/c/vDcvKX88/3855-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%92%B3-refonte-checkout-4-le-mode-de-paiement-passe-%C3%A0-la-caisse) **\ud83d\udc8e In Review**\n        - *:sparkles: feat(tvo): rebuild the checkout payment step and success page in React* [\\#12051](https://github.com/Wishibam/Ecommerce-sylius/pull/12051)\n    - [Intersport - Bug d'affichage images box produit](https://trello.com/c/mOO6EBx1/3936-intersport-bug-daffichage-images-box-produit) **\ud83c\udf89 A MEP**\n        - *:bug: \\[via\\] fix: styles mobiles des pages mot de passe oubli\u00e9/reset* [\\#12055](https://github.com/Wishibam/Ecommerce-sylius/pull/12055)\n    - [\ud83e\ude97 VIA \u2014 Le filtre Cat\u00e9gorie s'ouvre tout seul dans les descentes : on le veut ferm\u00e9 au chargement](https://trello.com/c/GMHVWZe2/3938-%F0%9F%AA%97-via-le-filtre-cat%C3%A9gorie-souvre-tout-seul-dans-les-descentes-on-le-veut-ferm%C3%A9-au-chargement) **\ud83c\udf89 A MEP**\n        - *:bug: \\[via\\] fix: le filtre Cat\u00e9gorie reste ferm\u00e9 au chargement des descentes* [\\#12059](https://github.com/Wishibam/Ecommerce-sylius/pull/12059)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f Feed : Ajouter le flux facebook TVO](https://trello.com/c/iXjTokqz/3937-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-feed-ajouter-le-flux-facebook-tvo) **\ud83e\udd16 Testing tech**\n        - *:sparkles: feat: porter le flux facebook\\_catalog vers le nouveau composant* [\\#12060](https://github.com/Wishibam/Ecommerce-sylius/pull/12060)\n    - [\\[Migration\\]\\[B.1\\] PHP 8.2 \u2192 8.3](https://trello.com/c/Slm1Q5n7/3940-migrationb1-php-82-%E2%86%92-83) **\ud83d\ude80 To Do Vincent**\n        - *:wrench: chore: run the test suite on PHP 8.2 and 8.3 \\[B.1\\]* [\\#12063](https://github.com/Wishibam/Ecommerce-sylius/pull/12063)\n        - *:bug: fix(deploy): restart PHP-FPM via systemd glob instead of hardcoded 8.2* [\\#12066](https://github.com/Wishibam/Ecommerce-sylius/pull/12066)\n        - *:wrench: chore: run the dual PHP matrix on the tests job only \\[B.1\\]* [\\#12068](https://github.com/Wishibam/Ecommerce-sylius/pull/12068)\n    - [\\[Migration\\]\\[B.2\\] Sylius 1.12 \u2192 1.13 (DBAL 3)](https://trello.com/c/huA0VNU9/3941-migrationb2-sylius-112-%E2%86%92-113-dbal-3) **\ud83d\ude80 To Do Vincent**\n        - *:wrench: chore(doctrine): drop the last getSchemaManager() call for DBAL 3/4 \\[B.2 P.1\\]* [\\#12071](https://github.com/Wishibam/Ecommerce-sylius/pull/12071)\n        - *:white\\_check\\_mark: test: characterize every state machine graph wiring \\[B.2 P.2\\]* [\\#12074](https://github.com/Wishibam/Ecommerce-sylius/pull/12074)\n        - *:recycle: refactor: state machine abstraction infra + pilot call site \\[B.2 P.3.1\\]* [\\#12089](https://github.com/Wishibam/Ecommerce-sylius/pull/12089)\n        - *:recycle: refactor: migrate the mechanical state machine call sites \\[B.2 P.3.2\\]* [\\#12094](https://github.com/Wishibam/Ecommerce-sylius/pull/12094)\n        - *:recycle: refactor: migrate the structural state machine call sites \\[B.2 P.3.3\\]* [\\#12098](https://github.com/Wishibam/Ecommerce-sylius/pull/12098)\n        - *:wrench: chore: bump symfony/flex 1 to 2 \\[B.2 P.4\\]* [\\#12100](https://github.com/Wishibam/Ecommerce-sylius/pull/12100)\n    - [MA - Pas de message d'erreur lorsque l'on n'arrive pas \u00e0 se connecter \u00e0 son compte client](https://trello.com/c/fQ9vwTD0/3684-ma-pas-de-message-derreur-lorsque-lon-narrive-pas-%C3%A0-se-connecter-%C3%A0-son-compte-client) **\ud83e\udd13 Testing**\n        - *:bug: fix: display an error message on failed login on Marques Avenue* [\\#12072](https://github.com/Wishibam/Ecommerce-sylius/pull/12072)\n    - [Fix : \ufeff\ufefftransmettre le consentement newsletter \u00e0 Coniq \u00e0 l'inscription](https://trello.com/c/mShGQBUK/3943-fix-transmettre-le-consentement-newsletter-%C3%A0-coniq-%C3%A0-linscription) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: transmettre le consentement newsletter \u00e0 Coniq \u00e0 l'inscription* [\\#12076](https://github.com/Wishibam/Ecommerce-sylius/pull/12076)\n        - *:bug: fix: consentement newsletter Coniq par canal \u00e0 l'inscription* [\\#12105](https://github.com/Wishibam/Ecommerce-sylius/pull/12105)\n    - [TVO - Bloc caract\u00e9ristiques : Attribut genre et ean](https://trello.com/c/MwYdlurp/3945-tvo-bloc-caract%C3%A9ristiques-attribut-genre-et-ean) **\ud83e\udd13 Testing**\n        - *:bug: fix(tvo): localize gender and drop EAN in the characteristics block* [\\#12112](https://github.com/Wishibam/Ecommerce-sylius/pull/12112)\n    - [Page de confirmation de commande - N\u00b0 de commande sylius plut\u00f4t que MP](https://trello.com/c/bUrAEDyS/3944-page-de-confirmation-de-commande-n-de-commande-sylius-plut%C3%B4t-que-mp) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): align the thank-you order number with the email* [\\#12114](https://github.com/Wishibam/Ecommerce-sylius/pull/12114)\n    - [TVO \u2014 Tracking des mails de relance panier (taux d'ouverture / clic / CA)](https://trello.com/c/cyTNgF1i/3947-tvo-tracking-des-mails-de-relance-panier-taux-douverture-clic-ca) **\ud83e\udd13 Testing**\n        - *:sparkles: feat(tvo, all): track abandoned cart reminder emails* [\\#12118](https://github.com/Wishibam/Ecommerce-sylius/pull/12118)\n \n- **Misc**\n    - *:sparkles: feat: PushDispatcher + adaptateur FCM (push app TVO)* [\\#11917](https://github.com/Wishibam/Ecommerce-sylius/pull/11917)\n    - *style(withdrawal): make the withdrawal button theme-colored and not f\u2026* [\\#11951](https://github.com/Wishibam/Ecommerce-sylius/pull/11951)\n    - *:zap: perf: Batavia PLP \u2014 ES result cache, key batching, menu cache* [\\#11963](https://github.com/Wishibam/Ecommerce-sylius/pull/11963)\n    - *:wrench: chore: outillage pour worktrees parall\u00e8les (front isol\u00e9 par projet)* [\\#11986](https://github.com/Wishibam/Ecommerce-sylius/pull/11986)\n    - *:sparkles: feat: push app TVO \u2014 envoi asynchrone + badge (3.A.5 + 3.A.6)* [\\#12022](https://github.com/Wishibam/Ecommerce-sylius/pull/12022)\n    - *:sparkles: feat: badge unreadPushCount de bout en bout (app TVO)* [\\#12025](https://github.com/Wishibam/Ecommerce-sylius/pull/12025)\n    - *:sparkles: feat: compteur badge dans data des push (app TVO)* [\\#12028](https://github.com/Wishibam/Ecommerce-sylius/pull/12028)\n    - *:sparkles: feat: push \u00ab commande confirm\u00e9e \u00bb (app TVO)* [\\#12031](https://github.com/Wishibam/Ecommerce-sylius/pull/12031)\n    - *:sparkles: feat: push \u00ab commande exp\u00e9di\u00e9e \u00bb (app TVO)* [\\#12040](https://github.com/Wishibam/Ecommerce-sylius/pull/12040)\n    - *feat(push): notification de remboursement de commande (TVO 3.B.3)* [\\#12041](https://github.com/Wishibam/Ecommerce-sylius/pull/12041)\n    - *fix(push): durcir l'envoi FCM \u2014 timeouts born\u00e9s + retry effectif (TVO 3.A.7)* [\\#12042](https://github.com/Wishibam/Ecommerce-sylius/pull/12042)\n    - *test(featured-content): d\u00e9-flakifier testProgramDisableDelay (tol\u00e9rance sur le d\u00e9lai)* [\\#12044](https://github.com/Wishibam/Ecommerce-sylius/pull/12044)\n    - *feat(push): notification de retour en stock (TVO 3.B.4)* [\\#12045](https://github.com/Wishibam/Ecommerce-sylius/pull/12045)\n    - *feat(push): notification de baisse de prix wishlist (TVO 3.B.5)* [\\#12049](https://github.com/Wishibam/Ecommerce-sylius/pull/12049)\n    - *:bug: fix(megamenu): \u00e9largir le lien \u00e0 2048 caract\u00e8res* [\\#12050](https://github.com/Wishibam/Ecommerce-sylius/pull/12050)\n    - *feat(push): relance push des paniers abandonn\u00e9s (TVO 3.B.6)* [\\#12053](https://github.com/Wishibam/Ecommerce-sylius/pull/12053)\n    - *feat(deeplink): AASA de la nouvelle app TVO \u2014 Universal Links iOS (TVO 4.1)* [\\#12064](https://github.com/Wishibam/Ecommerce-sylius/pull/12064)\n    - *feat(deeplink): assetlinks.json de la nouvelle app TVO \u2014 App Links Android (TVO 4.2)* [\\#12065](https://github.com/Wishibam/Ecommerce-sylius/pull/12065)\n    - *:bug: fix: complete payments stuck by Stripe webhook/checkout race* [\\#12075](https://github.com/Wishibam/Ecommerce-sylius/pull/12075)\n    - *:bug: fix: dedup order\\_confirmation per order to stop double send* [\\#12101](https://github.com/Wishibam/Ecommerce-sylius/pull/12101)\n    - *:bug: fix: pin the fixtures channel default tax zone* [\\#12106](https://github.com/Wishibam/Ecommerce-sylius/pull/12106)\n \n- **D\u00e9j\u00e0 en production**\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\udc1b Fix r\u00e9indexation ES bloqu\u00e9e \u2014 \u00ab immense term \u00bb sur attribut trop long (Intersport)](https://trello.com/c/iD6idW0v/3915-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%90%9B-fix-r%C3%A9indexation-es-bloqu%C3%A9e-immense-term-sur-attribut-trop-long-intersport) **MEP Ao\u00fbt**\n        - *:bug: fix: r\u00e9indexation ES bloqu\u00e9e par un attribut trop long (immense term)* [\\#11972](https://github.com/Wishibam/Ecommerce-sylius/pull/11972)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f \u203c\ufe0f Nouveau Feeds - Faire tourner tous les nouveaux feeds sur toutes les preprods/prods](https://trello.com/c/Kr8UhDAv/3910-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-%EF%B8%8F-nouveau-feeds-faire-tourner-tous-les-nouveaux-feeds-sur-toutes-les-preprods-prods) **\ud83e\udee1 To Do JC**\n        - *:sparkles: feat: drive-to-store feeds parity with legacy Setono* [\\#11979](https://github.com/Wishibam/Ecommerce-sylius/pull/11979)\n    - [TVO - Les recommandations produits ne remontent aucun produit sur la fiche produit](https://trello.com/c/lw3SYgNG/3926-tvo-les-recommandations-produits-ne-remontent-aucun-produit-sur-la-fiche-produit) **MEP Ao\u00fbt**\n        - *:bug: fix(search): match the indexed color value in recommendations* [\\#12004](https://github.com/Wishibam/Ecommerce-sylius/pull/12004)\n    - [A ESTIMER : Google Shopping Feed : ajouter le Outlet Price en cas de promotion](https://trello.com/c/RnEgL53B/3867-a-estimer-google-shopping-feed-ajouter-le-outlet-price-en-cas-de-promotion) **MEP Ao\u00fbt**\n        - *:sparkles: feat(helsinki): expose the outlet price in the Google Shopping feed* [\\#12020](https://github.com/Wishibam/Ecommerce-sylius/pull/12020)\n    - [\u2615\ufe0f \\[Batavia\\] Frais de retour : \u20ac3,25 \u2192 \u20ac3,95 (et on passe le texte en traduction)](https://trello.com/c/P4vec3cz/3934-%E2%98%95%EF%B8%8F-batavia-frais-de-retour-%E2%82%AC325-%E2%86%92-%E2%82%AC395-et-on-passe-le-texte-en-traduction) **MEP Ao\u00fbt**\n        - *:bug: fix: Batavia return cost 3,95 and move the line to a translation* [\\#12034](https://github.com/Wishibam/Ecommerce-sylius/pull/12034)\n    - *:bug: fix: render flag emojis as SVG icons, not OS emoji glyphs* [\\#11981](https://github.com/Wishibam/Ecommerce-sylius/pull/11981)\n    - *:bug: fix: apply the flag icon filter to the remaining menu renderings* [\\#11982](https://github.com/Wishibam/Ecommerce-sylius/pull/11982)\n    - *:wrench: chore: bump php\\_codesniffer en 3.13.6 (CVE-2026-67434, CI rouge)* [\\#12008](https://github.com/Wishibam/Ecommerce-sylius/pull/12008)", "creation_timestamp": "2026-08-31T08:34:44.985472Z"}, {"uuid": "73d2e38e-4d4f-4523-afd6-1f063a7b8b32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67434", "type": "seen", "source": "https://gist.github.com/jbourdin/e22c90ae1c68e582301204538b1fb690", "content": "- **Trello**\n    - [GLOBAL - Email Alerte paiement en erreur](https://trello.com/c/P1DJvjHp/3229-global-email-alerte-paiement-en-erreur) **\ud83c\udf89 A MEP**\n        - *feat(payment): send email notification when payment fails* [\\#10555](https://github.com/Wishibam/Ecommerce-sylius/pull/10555)\n    - [Helsinki : Portail de retour - Sylius - int\u00e9gration front du portail de retour](https://trello.com/c/mhcc7YaC/2401-helsinki-portail-de-retour-sylius-int%C3%A9gration-front-du-portail-de-retour) **\ud83d\ude80Testing BACK / FLUX / CLIENT**\n        - *feat(helsinki): Add return portal to Helsinki order details* [\\#11757](https://github.com/Wishibam/Ecommerce-sylius/pull/11757)\n    - [\u26a0\ufe0fAction prod\u26a0\ufe0f\ud83d\udd14 Refonte TVO : tracking du volet d'alerte \u00ab retour en stock \u00bb](https://trello.com/c/SXyhrSQb/3834-%E2%9A%A0%EF%B8%8Faction-prod%E2%9A%A0%EF%B8%8F%F0%9F%94%94-refonte-tvo-tracking-du-volet-dalerte-retour-en-stock) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: track back-in-stock alert panel usage* [\\#11791](https://github.com/Wishibam/Ecommerce-sylius/pull/11791)\n    - [TVO - Fiche produit - Ajout des blocs \"Mati\u00e8re et entretien\" & \"Caract\u00e9ristiques\"](https://trello.com/c/AbsKmIzk/3633-tvo-fiche-produit-ajout-des-blocs-mati%C3%A8re-et-entretien-caract%C3%A9ristiques) **\ud83c\udf89 A MEP**\n        - *feat(tvo): add Mati\u00e8re et entretien & Caract\u00e9ristiques blocks on PDP* [\\#11812](https://github.com/Wishibam/Ecommerce-sylius/pull/11812)\n    - [\\[Migration\\]\\[A.2\\] D\u00e9mant\u00e8lement Setono Analytics + Tag-Bag](https://trello.com/c/uJN0Gkiz/3856-migrationa2-d%C3%A9mant%C3%A8lement-setono-analytics-tag-bag) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore(migration): internalize setono analytics + tag-bag as src/Component \\[A.2\\]* [\\#11846](https://github.com/Wishibam/Ecommerce-sylius/pull/11846)\n    - [\\[Migration\\]\\[A.4.1\\] Internaliser bitbag/wishlist-plugin dans src/Component/Wishlist](https://trello.com/c/U9dQGx1l/3863-migrationa41-internaliser-bitbag-wishlist-plugin-dans-src-component-wishlist) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: internalize bitbag/wishlist-plugin \\[A.4.1\\]* [\\#11856](https://github.com/Wishibam/Ecommerce-sylius/pull/11856)\n    - [\\[Migration\\]\\[A.4.2/A.4.3\\] Internaliser bring & deep-link dans src/Component](https://trello.com/c/RsLN5SNT/3864-migrationa42-a43-internaliser-bring-deep-link-dans-src-component) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: internalize bring & deep-link plugins \\[A.4.2, A.4.3\\]* [\\#11861](https://github.com/Wishibam/Ecommerce-sylius/pull/11861)\n    - [\\[Migration\\]\\[A.5\\] Bumps frontend \u00ab safe \u00bb + suppression des packages morts](https://trello.com/c/vI6k61gt/3873-migrationa5-bumps-frontend-safe-suppression-des-packages-morts) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: bump safe frontend deps + prune dead packages \\[A.5\\]* [\\#11875](https://github.com/Wishibam/Ecommerce-sylius/pull/11875)\n    - [\\[Migration\\]\\[A.6\\] Pr\u00e9paration Doctrine pour DBAL 3 (monkey-patch migrations)](https://trello.com/c/8mdyVMwg/3880-migrationa6-pr%C3%A9paration-doctrine-pour-dbal-3-monkey-patch-migrations) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: replace Doctrine migration monkey-patch for DBAL 3 \\[A.6\\]* [\\#11893](https://github.com/Wishibam/Ecommerce-sylius/pull/11893)\n    - [TVO - Express checkout : adresse tronqu\u00e9e \u2014 nom de rue perdu (Apple Pay line1/line2)](https://trello.com/c/dIrl0I1a/3884-tvo-express-checkout-adresse-tronqu%C3%A9e-nom-de-rue-perdu-apple-pay-line1-line2) **\ud83c\udf89 A MEP**\n        - *:bug: fix: join express checkout wallet address line1/line2 into street* [\\#11914](https://github.com/Wishibam/Ecommerce-sylius/pull/11914)\n    - [\\[P0\\] Express checkout : re-v\u00e9rifier le montant du PaymentIntent au complete](https://trello.com/c/qJdTR9Jc/3885-p0-express-checkout-re-v%C3%A9rifier-le-montant-du-paymentintent-au-complete) **\ud83e\udd13 Testing**\n        - *:bug: fix: verify express checkout PaymentIntent amount at completion* [\\#11916](https://github.com/Wishibam/Ecommerce-sylius/pull/11916)\n    - [\\[P0\\] Webhook Stripe : rembourser r\u00e9ellement les charges des commandes refus\u00e9es/annul\u00e9es](https://trello.com/c/fyJeMD3L/3886-p0-webhook-stripe-rembourser-r%C3%A9ellement-les-charges-des-commandes-refus%C3%A9es-annul%C3%A9es) **\ud83e\udd13 Testing**\n        - *:bug: fix: refund Stripe charges captured for refused or cancelled orders* [\\#11918](https://github.com/Wishibam/Ecommerce-sylius/pull/11918)\n    - [\\[P1\\] Express checkout : pinner explicitement les wallets autoris\u00e9s (quick win)](https://trello.com/c/tEpmPM9l/3890-p1-express-checkout-pinner-explicitement-les-wallets-autoris%C3%A9s-quick-win) **\ud83e\udd16 Testing tech**\n        - *:bug: fix: restrict express checkout wallets to an explicit allowlist* [\\#11919](https://github.com/Wishibam/Ecommerce-sylius/pull/11919)\n    - [\\[P0\\] Express checkout : commandes \u00e0 fonds captur\u00e9s supprim\u00e9es par la purge des carts + cha\u00eene d'abort morte](https://trello.com/c/1Wo7zGP5/3887-p0-express-checkout-commandes-%C3%A0-fonds-captur%C3%A9s-supprim%C3%A9es-par-la-purge-des-carts-cha%C3%AEne-dabort-morte) **\ud83e\udd13 Testing**\n        - *:bug: fix: protect express checkout captured-funds carts from the purge* [\\#11920](https://github.com/Wishibam/Ecommerce-sylius/pull/11920)\n    - [Helsinki \u2014 Funnel checkout GA4 vide : \u00e9v\u00e9nements e-commerce manquants/incomplets](https://trello.com/c/j0yQGSFm/3921-helsinki-funnel-checkout-ga4-vide-%C3%A9v%C3%A9nements-e-commerce-manquants-incomplets) **\ud83c\udf44 Ready for testing**\n        - *:bug: fix: \u00e9mettre le funnel checkout GA4 complet* [\\#11980](https://github.com/Wishibam/Ecommerce-sylius/pull/11980)\n        - *:bug: fix: \u00e9mettre add\\_payment\\_info quand l'\u00e9tape de paiement est saut\u00e9e* [\\#12014](https://github.com/Wishibam/Ecommerce-sylius/pull/12014)\n    - [FEAT-0006 \u2014 Regroupement des emails d'annulation d'articles](https://trello.com/c/bBiV4jTE/3415-feat-0006-regroupement-des-emails-dannulation-darticles) **\ud83c\udf89 A MEP**\n        - *:bug: fix: FEAT-0006 cancellation email grouping QA feedback* [\\#11984](https://github.com/Wishibam/Ecommerce-sylius/pull/11984)\n        - *:bug: fix: register order\\_entirely\\_cancelled email template for all projects* [\\#12091](https://github.com/Wishibam/Ecommerce-sylius/pull/12091)\n        - *:bug: fix: send grouped withdrawal confirmations on entirely cancelled orders* [\\#12104](https://github.com/Wishibam/Ecommerce-sylius/pull/12104)\n    - [Min-height pages React](https://trello.com/c/Rti8eFXb/3919-min-height-pages-react) **\ud83c\udf89 A MEP**\n        - *:bug: fix: add min-height on React pages to prevent footer flash* [\\#11987](https://github.com/Wishibam/Ecommerce-sylius/pull/11987)\n    - [SEO - TVO - changement de slug](https://trello.com/c/Gbb2tles/3908-seo-tvo-changement-de-slug) **\ud83c\udf89 A MEP**\n        - *:bug: fix: clean up TVO brand page slugs with 301 redirects* [\\#11988](https://github.com/Wishibam/Ecommerce-sylius/pull/11988)\n    - [\u26a0\ufe0f action preprod/prod \u26a0\ufe0f \ud83d\uded2 Refonte Checkout #1 \u2014 La page Panier change de garde-robe](https://trello.com/c/qxdtlZxk/3851-%E2%9A%A0%EF%B8%8F-action-preprod-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%9B%92-refonte-checkout-1-la-page-panier-change-de-garde-robe) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): cart page QA feedback round* [\\#11990](https://github.com/Wishibam/Ecommerce-sylius/pull/11990)\n    - [\u26a0\ufe0f MEP \u26a0\ufe0f\u2b50 Google Customer Reviews sur TVO \u2014 brancher la machine \u00e0 \u00e9toiles](https://trello.com/c/7JA9u85M/3899-%E2%9A%A0%EF%B8%8F-mep-%E2%9A%A0%EF%B8%8F%E2%AD%90-google-customer-reviews-sur-tvo-brancher-la-machine-%C3%A0-%C3%A9toiles) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: TVO Google Customer Reviews \u2014 GTIN produits sur thank you* [\\#11991](https://github.com/Wishibam/Ecommerce-sylius/pull/11991)\n    - [Fix : TypeError trim() null sur les share descriptions de channel (admin)](https://trello.com/c/o47Ek1Fo/3924-fix-typeerror-trim-null-sur-les-share-descriptions-de-channel-admin) **\ud83e\udd16 Testing tech**\n        - *:bug: fix: guard against null share descriptions in channel setter* [\\#11992](https://github.com/Wishibam/Ecommerce-sylius/pull/11992)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f \ud83d\udce6\ud83c\udf0d Mondial Relay sans fronti\u00e8res \u2014 points relais UE (v1 TVO)](https://trello.com/c/4X0QYlQ5/3918-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%93%A6%F0%9F%8C%8D-mondial-relay-sans-fronti%C3%A8res-points-relais-ue-v1-tvo) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat(mondial-relay): relay search follows the buyer's country* [\\#11994](https://github.com/Wishibam/Ecommerce-sylius/pull/11994)\n    - [\ud83d\udccd Refonte Checkout \u2014 La suggestion d'adresse qui fait mouche](https://trello.com/c/vF0T1FZU/3860-%F0%9F%93%8D-refonte-checkout-la-suggestion-dadresse-qui-fait-mouche) **\ud83e\udd13 Testing**\n        - *:bug: fix(tvo): address suggestion QA feedback round* [\\#11995](https://github.com/Wishibam/Ecommerce-sylius/pull/11995)\n        - *:bug: fix(tvo): keep the manual phone flag choice made on an empty field* [\\#12058](https://github.com/Wishibam/Ecommerce-sylius/pull/12058)\n    - [\ud83c\udf5e Refonte Checkout \u2014 Des toasts tout chauds pour les messages syst\u00e8me](https://trello.com/c/N70pstGO/3861-%F0%9F%8D%9E-refonte-checkout-des-toasts-tout-chauds-pour-les-messages-syst%C3%A8me) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): checkout toasts QA feedback round* [\\#11996](https://github.com/Wishibam/Ecommerce-sylius/pull/11996)\n    - [\ud83d\udd00 Refonte TVO : le variant s\u00e9lectionn\u00e9 saute en 1re position au lieu de rester \u00e0 sa place](https://trello.com/c/vQH5uxHz/3904-%F0%9F%94%80-refonte-tvo-le-variant-s%C3%A9lectionn%C3%A9-saute-en-1re-position-au-lieu-de-rester-%C3%A0-sa-place) **\ud83c\udf89 A MEP**\n        - *:bug: fix: keep option values in place on overflowing variant axis* [\\#11998](https://github.com/Wishibam/Ecommerce-sylius/pull/11998)\n    - [Helsinki preprod (peut \u00eatre ailleurs) - Commande C&C cr\u00e9e plusieurs shipments.](https://trello.com/c/Dlk8WpIg/3895-helsinki-preprod-peut-%C3%AAtre-ailleurs-commande-cc-cr%C3%A9e-plusieurs-shipments) **\ud83e\udd13 Testing**\n        - *:bug: fix: remove phantom shipment block from account order page* [\\#11999](https://github.com/Wishibam/Ecommerce-sylius/pull/11999)\n    - [TVO- mail order\\_open\\_return\\_withdrawn -remplacement de tag](https://trello.com/c/NK5CnCM2/3883-tvo-mail-orderopenreturnwithdrawn-remplacement-de-tag) **\ud83c\udf89 A MEP**\n        - *\ud83d\udc1b fix: orange \"return in progress\" badge on TVO withdrawal email* [\\#12000](https://github.com/Wishibam/Ecommerce-sylius/pull/12000)\n    - [SEO - ALL - Meta Title](https://trello.com/c/QDbDIPTu/3909-seo-all-meta-title) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: add dedicated Meta Title for CMS pages* [\\#12001](https://github.com/Wishibam/Ecommerce-sylius/pull/12001)\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\ude9a Refonte Checkout #3 \u2014 Le Mode de livraison prend la route](https://trello.com/c/NDSNOimu/3854-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%9A%9A-refonte-checkout-3-le-mode-de-livraison-prend-la-route) **\ud83e\udd13 Testing**\n        - *:sparkles: feat(tvo): React checkout select shipping step (P3)* [\\#12011](https://github.com/Wishibam/Ecommerce-sylius/pull/12011)\n        - *:bug: fix(tvo): checkout QA feedback of August 18-19* [\\#12119](https://github.com/Wishibam/Ecommerce-sylius/pull/12119)\n    - [\u2709\ufe0f \\[TVO V2\\] Login & inscription : un seul email pour les gouverner tous](https://trello.com/c/Eml7o2An/3912-%E2%9C%89%EF%B8%8F-tvo-v2-login-inscription-un-seul-email-pour-les-gouverner-tous) **\ud83e\udd13 Testing**\n        - *:sparkles: feat: TVO email-first React login & registration flow* [\\#12015](https://github.com/Wishibam/Ecommerce-sylius/pull/12015)\n    - [Helsinki - Correction bug d'affichage en finnois en version mobile](https://trello.com/c/f9V6mA6z/3686-helsinki-correction-bug-daffichage-en-finnois-en-version-mobile) **\ud83c\udf89 A MEP**\n        - *:bug: fix: reduce Helsinki posts carousel title on mobile* [\\#12017](https://github.com/Wishibam/Ecommerce-sylius/pull/12017)\n    - [\ud83d\udcb8 TVO \u2014 Filtre par niveau de remise : que la d\u00e9marque soit avec vous \u2702\ufe0f](https://trello.com/c/FvSWlx14/3877-%F0%9F%92%B8-tvo-filtre-par-niveau-de-remise-que-la-d%C3%A9marque-soit-avec-vous-%E2%9C%82%EF%B8%8F) **\ud83e\udd13 Testing**\n        - *:sparkles: feat: TVO minimum discount percentage filter on product lists* [\\#12018](https://github.com/Wishibam/Ecommerce-sylius/pull/12018)\n    - [\ud83c\udfbd \\[IS\\] Footer : \u00ab Notre accompagnement \u00bb devient \u00ab Nos services \u00bb et raccroche son lien](https://trello.com/c/H2X0XtqH/3932-%F0%9F%8E%BD-is-footer-notre-accompagnement-devient-nos-services-et-raccroche-son-lien) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: rename the Intersport footer column to \u00ab Nos services \u00bb and unlink its title* [\\#12026](https://github.com/Wishibam/Ecommerce-sylius/pull/12026)\n        - *:rewind: revert: Intersport footer \u00ab Nos services \u00bb (wrong target branch)* [\\#12037](https://github.com/Wishibam/Ecommerce-sylius/pull/12037)\n    - [Batavia - Probl\u00e8me sur l'affichage des variations](https://trello.com/c/MY6aNjLj/3931-batavia-probl%C3%A8me-sur-laffichage-des-variations) **\ud83c\udf89 A MEP**\n        - *:bug: fix: deep-link Batavia PLP cards to the displayed color variant* [\\#12027](https://github.com/Wishibam/Ecommerce-sylius/pull/12027)\n    - [Batavia \u2014 Mails \u00ab produit indisponible \u00bb non re\u00e7us par les clients](https://trello.com/c/YLHFxnVs/3933-batavia-mails-produit-indisponible-non-re%C3%A7us-par-les-clients) **\ud83c\udf89 A MEP**\n        - *:bug: fix: validate admin email templates and log real send outcomes* [\\#12035](https://github.com/Wishibam/Ecommerce-sylius/pull/12035)\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\udcb3 Refonte Checkout #4 \u2014 Le Mode de paiement passe \u00e0 la caisse](https://trello.com/c/vDcvKX88/3855-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%92%B3-refonte-checkout-4-le-mode-de-paiement-passe-%C3%A0-la-caisse) **\ud83e\udd13 Testing**\n        - *:sparkles: feat(tvo): rebuild the checkout payment step and success page in React* [\\#12051](https://github.com/Wishibam/Ecommerce-sylius/pull/12051)\n    - [Intersport - Bug d'affichage images box produit](https://trello.com/c/mOO6EBx1/3936-intersport-bug-daffichage-images-box-produit) **\ud83c\udf89 A MEP**\n        - *:bug: \\[via\\] fix: styles mobiles des pages mot de passe oubli\u00e9/reset* [\\#12055](https://github.com/Wishibam/Ecommerce-sylius/pull/12055)\n    - [\ud83e\ude97 VIA \u2014 Le filtre Cat\u00e9gorie s'ouvre tout seul dans les descentes : on le veut ferm\u00e9 au chargement](https://trello.com/c/GMHVWZe2/3938-%F0%9F%AA%97-via-le-filtre-cat%C3%A9gorie-souvre-tout-seul-dans-les-descentes-on-le-veut-ferm%C3%A9-au-chargement) **\ud83c\udf89 A MEP**\n        - *:bug: \\[via\\] fix: le filtre Cat\u00e9gorie reste ferm\u00e9 au chargement des descentes* [\\#12059](https://github.com/Wishibam/Ecommerce-sylius/pull/12059)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f Feed : Ajouter le flux facebook TVO](https://trello.com/c/iXjTokqz/3937-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-feed-ajouter-le-flux-facebook-tvo) **\ud83e\udd16 Testing tech**\n        - *:sparkles: feat: porter le flux facebook\\_catalog vers le nouveau composant* [\\#12060](https://github.com/Wishibam/Ecommerce-sylius/pull/12060)\n    - [\\[Migration\\]\\[B.1\\] PHP 8.2 \u2192 8.3](https://trello.com/c/Slm1Q5n7/3940-migrationb1-php-82-%E2%86%92-83) **\ud83d\ude80 To Do Vincent**\n        - *:wrench: chore: run the test suite on PHP 8.2 and 8.3 \\[B.1\\]* [\\#12063](https://github.com/Wishibam/Ecommerce-sylius/pull/12063)\n        - *:bug: fix(deploy): restart PHP-FPM via systemd glob instead of hardcoded 8.2* [\\#12066](https://github.com/Wishibam/Ecommerce-sylius/pull/12066)\n        - *:wrench: chore: run the dual PHP matrix on the tests job only \\[B.1\\]* [\\#12068](https://github.com/Wishibam/Ecommerce-sylius/pull/12068)\n    - [\\[Migration\\]\\[B.2\\] Sylius 1.12 \u2192 1.13 (DBAL 3)](https://trello.com/c/huA0VNU9/3941-migrationb2-sylius-112-%E2%86%92-113-dbal-3) **\ud83d\ude80 To Do Vincent**\n        - *:wrench: chore(doctrine): drop the last getSchemaManager() call for DBAL 3/4 \\[B.2 P.1\\]* [\\#12071](https://github.com/Wishibam/Ecommerce-sylius/pull/12071)\n        - *:white\\_check\\_mark: test: characterize every state machine graph wiring \\[B.2 P.2\\]* [\\#12074](https://github.com/Wishibam/Ecommerce-sylius/pull/12074)\n        - *:recycle: refactor: state machine abstraction infra + pilot call site \\[B.2 P.3.1\\]* [\\#12089](https://github.com/Wishibam/Ecommerce-sylius/pull/12089)\n        - *:recycle: refactor: migrate the mechanical state machine call sites \\[B.2 P.3.2\\]* [\\#12094](https://github.com/Wishibam/Ecommerce-sylius/pull/12094)\n        - *:recycle: refactor: migrate the structural state machine call sites \\[B.2 P.3.3\\]* [\\#12098](https://github.com/Wishibam/Ecommerce-sylius/pull/12098)\n        - *:wrench: chore: bump symfony/flex 1 to 2 \\[B.2 P.4\\]* [\\#12100](https://github.com/Wishibam/Ecommerce-sylius/pull/12100)\n    - [MA - Pas de message d'erreur lorsque l'on n'arrive pas \u00e0 se connecter \u00e0 son compte client](https://trello.com/c/fQ9vwTD0/3684-ma-pas-de-message-derreur-lorsque-lon-narrive-pas-%C3%A0-se-connecter-%C3%A0-son-compte-client) **\ud83e\udd13 Testing**\n        - *:bug: fix: display an error message on failed login on Marques Avenue* [\\#12072](https://github.com/Wishibam/Ecommerce-sylius/pull/12072)\n    - [Fix : \ufeff\ufefftransmettre le consentement newsletter \u00e0 Coniq \u00e0 l'inscription](https://trello.com/c/mShGQBUK/3943-fix-transmettre-le-consentement-newsletter-%C3%A0-coniq-%C3%A0-linscription) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: transmettre le consentement newsletter \u00e0 Coniq \u00e0 l'inscription* [\\#12076](https://github.com/Wishibam/Ecommerce-sylius/pull/12076)\n        - *:bug: fix: consentement newsletter Coniq par canal \u00e0 l'inscription* [\\#12105](https://github.com/Wishibam/Ecommerce-sylius/pull/12105)\n    - [TVO - Bloc caract\u00e9ristiques : Attribut genre et ean](https://trello.com/c/MwYdlurp/3945-tvo-bloc-caract%C3%A9ristiques-attribut-genre-et-ean) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): localize gender and drop EAN in the characteristics block* [\\#12112](https://github.com/Wishibam/Ecommerce-sylius/pull/12112)\n    - [Page de confirmation de commande - N\u00b0 de commande sylius plut\u00f4t que MP](https://trello.com/c/bUrAEDyS/3944-page-de-confirmation-de-commande-n-de-commande-sylius-plut%C3%B4t-que-mp) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): align the thank-you order number with the email* [\\#12114](https://github.com/Wishibam/Ecommerce-sylius/pull/12114)\n    - [TVO \u2014 Tracking des mails de relance panier (taux d'ouverture / clic / CA)](https://trello.com/c/cyTNgF1i/3947-tvo-tracking-des-mails-de-relance-panier-taux-douverture-clic-ca) **\ud83e\udd13 Testing**\n        - *:sparkles: feat(tvo, all): track abandoned cart reminder emails* [\\#12118](https://github.com/Wishibam/Ecommerce-sylius/pull/12118)\n \n- **Misc**\n    - *:sparkles: feat: PushDispatcher + adaptateur FCM (push app TVO)* [\\#11917](https://github.com/Wishibam/Ecommerce-sylius/pull/11917)\n    - *style(withdrawal): make the withdrawal button theme-colored and not f\u2026* [\\#11951](https://github.com/Wishibam/Ecommerce-sylius/pull/11951)\n    - *:zap: perf: Batavia PLP \u2014 ES result cache, key batching, menu cache* [\\#11963](https://github.com/Wishibam/Ecommerce-sylius/pull/11963)\n    - *:wrench: chore: outillage pour worktrees parall\u00e8les (front isol\u00e9 par projet)* [\\#11986](https://github.com/Wishibam/Ecommerce-sylius/pull/11986)\n    - *:sparkles: feat: push app TVO \u2014 envoi asynchrone + badge (3.A.5 + 3.A.6)* [\\#12022](https://github.com/Wishibam/Ecommerce-sylius/pull/12022)\n    - *:sparkles: feat: badge unreadPushCount de bout en bout (app TVO)* [\\#12025](https://github.com/Wishibam/Ecommerce-sylius/pull/12025)\n    - *:sparkles: feat: compteur badge dans data des push (app TVO)* [\\#12028](https://github.com/Wishibam/Ecommerce-sylius/pull/12028)\n    - *:sparkles: feat: push \u00ab commande confirm\u00e9e \u00bb (app TVO)* [\\#12031](https://github.com/Wishibam/Ecommerce-sylius/pull/12031)\n    - *:sparkles: feat: push \u00ab commande exp\u00e9di\u00e9e \u00bb (app TVO)* [\\#12040](https://github.com/Wishibam/Ecommerce-sylius/pull/12040)\n    - *feat(push): notification de remboursement de commande (TVO 3.B.3)* [\\#12041](https://github.com/Wishibam/Ecommerce-sylius/pull/12041)\n    - *fix(push): durcir l'envoi FCM \u2014 timeouts born\u00e9s + retry effectif (TVO 3.A.7)* [\\#12042](https://github.com/Wishibam/Ecommerce-sylius/pull/12042)\n    - *test(featured-content): d\u00e9-flakifier testProgramDisableDelay (tol\u00e9rance sur le d\u00e9lai)* [\\#12044](https://github.com/Wishibam/Ecommerce-sylius/pull/12044)\n    - *feat(push): notification de retour en stock (TVO 3.B.4)* [\\#12045](https://github.com/Wishibam/Ecommerce-sylius/pull/12045)\n    - *feat(push): notification de baisse de prix wishlist (TVO 3.B.5)* [\\#12049](https://github.com/Wishibam/Ecommerce-sylius/pull/12049)\n    - *:bug: fix(megamenu): \u00e9largir le lien \u00e0 2048 caract\u00e8res* [\\#12050](https://github.com/Wishibam/Ecommerce-sylius/pull/12050)\n    - *feat(push): relance push des paniers abandonn\u00e9s (TVO 3.B.6)* [\\#12053](https://github.com/Wishibam/Ecommerce-sylius/pull/12053)\n    - *feat(deeplink): AASA de la nouvelle app TVO \u2014 Universal Links iOS (TVO 4.1)* [\\#12064](https://github.com/Wishibam/Ecommerce-sylius/pull/12064)\n    - *feat(deeplink): assetlinks.json de la nouvelle app TVO \u2014 App Links Android (TVO 4.2)* [\\#12065](https://github.com/Wishibam/Ecommerce-sylius/pull/12065)\n    - *:bug: fix: complete payments stuck by Stripe webhook/checkout race* [\\#12075](https://github.com/Wishibam/Ecommerce-sylius/pull/12075)\n    - *:bug: fix: dedup order\\_confirmation per order to stop double send* [\\#12101](https://github.com/Wishibam/Ecommerce-sylius/pull/12101)\n    - *:bug: fix: pin the fixtures channel default tax zone* [\\#12106](https://github.com/Wishibam/Ecommerce-sylius/pull/12106)\n    - *:wrench: chore: bump webfactory/ssh-agent to v0.9.1* [\\#12120](https://github.com/Wishibam/Ecommerce-sylius/pull/12120)\n \n- **D\u00e9j\u00e0 en production**\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\udc1b Fix r\u00e9indexation ES bloqu\u00e9e \u2014 \u00ab immense term \u00bb sur attribut trop long (Intersport)](https://trello.com/c/iD6idW0v/3915-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%90%9B-fix-r%C3%A9indexation-es-bloqu%C3%A9e-immense-term-sur-attribut-trop-long-intersport) **MEP Ao\u00fbt**\n        - *:bug: fix: r\u00e9indexation ES bloqu\u00e9e par un attribut trop long (immense term)* [\\#11972](https://github.com/Wishibam/Ecommerce-sylius/pull/11972)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f \u203c\ufe0f Nouveau Feeds - Faire tourner tous les nouveaux feeds sur toutes les preprods/prods](https://trello.com/c/Kr8UhDAv/3910-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-%EF%B8%8F-nouveau-feeds-faire-tourner-tous-les-nouveaux-feeds-sur-toutes-les-preprods-prods) **\ud83e\udee1 To Do JC**\n        - *:sparkles: feat: drive-to-store feeds parity with legacy Setono* [\\#11979](https://github.com/Wishibam/Ecommerce-sylius/pull/11979)\n    - [TVO - Les recommandations produits ne remontent aucun produit sur la fiche produit](https://trello.com/c/lw3SYgNG/3926-tvo-les-recommandations-produits-ne-remontent-aucun-produit-sur-la-fiche-produit) **MEP Ao\u00fbt**\n        - *:bug: fix(search): match the indexed color value in recommendations* [\\#12004](https://github.com/Wishibam/Ecommerce-sylius/pull/12004)\n    - [A ESTIMER : Google Shopping Feed : ajouter le Outlet Price en cas de promotion](https://trello.com/c/RnEgL53B/3867-a-estimer-google-shopping-feed-ajouter-le-outlet-price-en-cas-de-promotion) **MEP Ao\u00fbt**\n        - *:sparkles: feat(helsinki): expose the outlet price in the Google Shopping feed* [\\#12020](https://github.com/Wishibam/Ecommerce-sylius/pull/12020)\n    - [\u2615\ufe0f \\[Batavia\\] Frais de retour : \u20ac3,25 \u2192 \u20ac3,95 (et on passe le texte en traduction)](https://trello.com/c/P4vec3cz/3934-%E2%98%95%EF%B8%8F-batavia-frais-de-retour-%E2%82%AC325-%E2%86%92-%E2%82%AC395-et-on-passe-le-texte-en-traduction) **MEP Ao\u00fbt**\n        - *:bug: fix: Batavia return cost 3,95 and move the line to a translation* [\\#12034](https://github.com/Wishibam/Ecommerce-sylius/pull/12034)\n    - *:bug: fix: render flag emojis as SVG icons, not OS emoji glyphs* [\\#11981](https://github.com/Wishibam/Ecommerce-sylius/pull/11981)\n    - *:bug: fix: apply the flag icon filter to the remaining menu renderings* [\\#11982](https://github.com/Wishibam/Ecommerce-sylius/pull/11982)\n    - *:wrench: chore: bump php\\_codesniffer en 3.13.6 (CVE-2026-67434, CI rouge)* [\\#12008](https://github.com/Wishibam/Ecommerce-sylius/pull/12008)", "creation_timestamp": "2026-08-31T12:21:24.789384Z"}, {"uuid": "3b9d311b-1849-42c6-bf72-2e5a90c93bc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67434", "type": "seen", "source": "https://gist.github.com/FR-Flo/a87a156132d4ce3d4d952e21a796220a", "content": "## \ud83d\udd17 Companion release\n\nNo open **Marketplace-client (frontend)** release PR found yet \u2014 it will be linked automatically once it exists.\n\n- https://github.com/Wishibam/Marketplace-client/pulls?q=is%3Apr+is%3Aopen+base%3Amaster+head%3Adevelop\n\n- **Misc**\n    - *:arrow\\_up: deps: bump php\\_codesniffer to 4.0.4 (CVE-2026-67434)* [\\#7817](https://github.com/Wishibam/Marketplace-api/pull/7817)", "creation_timestamp": "2026-08-06T14:00:28.557002Z"}, {"uuid": "dcf5ec43-cd89-48fd-8652-f370ff704b88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67434", "type": "seen", "source": "https://gist.github.com/FR-Flo/ce0e6938e2c8aa7a093b16e80373dccf", "content": "## \ud83d\udd17 Companion release\n\nNo open **Marketplace-client (frontend)** release PR found yet \u2014 it will be linked automatically once it exists.\n\n- https://github.com/Wishibam/Marketplace-client/pulls?q=is%3Apr+is%3Aopen+base%3Amaster+head%3Adevelop\n\n- **Misc**\n    - *:sparkles: feat: resync a single retailer in the live merchandising indices* [\\#7808](https://github.com/Wishibam/Marketplace-api/pull/7808)\n    - *:arrow\\_up: deps: bump php\\_codesniffer to 4.0.4 (CVE-2026-67434)* [\\#7817](https://github.com/Wishibam/Marketplace-api/pull/7817)\n    - *:bug: fix: resync-retailer scroll rejected by ES8 (size param)* [\\#7820](https://github.com/Wishibam/Marketplace-api/pull/7820)", "creation_timestamp": "2026-08-06T14:59:38.220856Z"}, {"uuid": "b46ae999-bd92-40f0-b7d6-0fa476cc3dac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67434", "type": "seen", "source": "https://gist.github.com/FR-Flo/bd6228fc53c3a1b0e8523cf329f96538", "content": "## \ud83d\udd17 Companion release\n\nThis release ships alongside the **Marketplace-client (frontend)** release PR:\n\n- https://github.com/Wishibam/Marketplace-client/pull/4256\n\n- **Misc**\n    - *feat(shipping-method): expose the default return method flag on the API* [\\#7793](https://github.com/Wishibam/Marketplace-api/pull/7793)\n    - *:sparkles: feat: resync a single retailer in the live merchandising indices* [\\#7808](https://github.com/Wishibam/Marketplace-api/pull/7808)\n    - *:arrow\\_up: deps: bump php\\_codesniffer to 4.0.4 (CVE-2026-67434)* [\\#7817](https://github.com/Wishibam/Marketplace-api/pull/7817)\n    - *:bug: fix: resync-retailer scroll rejected by ES8 (size param)* [\\#7820](https://github.com/Wishibam/Marketplace-api/pull/7820)\n    - *:sparkles: feat: compute product scoring on the fly (service + ES)* [\\#7825](https://github.com/Wishibam/Marketplace-api/pull/7825)\n    - *:sparkles: feat: raise the ES pagination window beyond 10k documents* [\\#7826](https://github.com/Wishibam/Marketplace-api/pull/7826)\n    - *feat(merchandising): supporter les tris du listing produit sur POST /merchandising* [\\#7827](https://github.com/Wishibam/Marketplace-api/pull/7827)\n\n## POST MEP\n\n### [PR #7826](https://github.com/Wishibam/Marketplace-api/pull/7826) \u2014 :sparkles: feat: raise the ES pagination window beyond 10k documents\n\n```\n  curl -X PUT \"http://localhost:9200/prod_product_*/_settings\" -H 'Content-Type: application/json' -d '{\"index\":{\"max_result_window\":200000}}'\n  curl -X PUT \"http://localhost:9200/prod_variation_*/_settings\" -H 'Content-Type: application/json' -d '{\"index\":{\"max_result_window\":500000}}'\n\n  V\u00e9rifier :\n  curl \"http://localhost:9200/prod_product_*/_settings/index.max_result_window?flat_settings\"\n  curl \"http://localhost:9200/prod_variation_*/_settings/index.max_result_window?flat_settings\"\n```\n", "creation_timestamp": "2026-08-11T07:30:17.901402Z"}, {"uuid": "a90ac36c-1405-44a1-a2c7-87150df85222", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67434", "type": "seen", "source": "https://gist.github.com/jbourdin/1d6a0f235ef31e0e7ba082c24789d628", "content": "- **Trello**\n    - [Helsinki : Portail de retour - Sylius - int\u00e9gration front du portail de retour](https://trello.com/c/mhcc7YaC/2401-helsinki-portail-de-retour-sylius-int%C3%A9gration-front-du-portail-de-retour) **TEMP - EPIC - Droit de r\u00e9tractation**\n        - *feat(helsinki): Add return portal to Helsinki order details* [\\#11757](https://github.com/Wishibam/Ecommerce-sylius/pull/11757)\n    - [\\[Migration\\]\\[A.2\\] D\u00e9mant\u00e8lement Setono Analytics + Tag-Bag](https://trello.com/c/uJN0Gkiz/3856-migrationa2-d%C3%A9mant%C3%A8lement-setono-analytics-tag-bag) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore(migration): internalize setono analytics + tag-bag as src/Component \\[A.2\\]* [\\#11846](https://github.com/Wishibam/Ecommerce-sylius/pull/11846)\n    - [\\[Migration\\]\\[A.4.1\\] Internaliser bitbag/wishlist-plugin dans src/Component/Wishlist](https://trello.com/c/U9dQGx1l/3863-migrationa41-internaliser-bitbag-wishlist-plugin-dans-src-component-wishlist) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: internalize bitbag/wishlist-plugin \\[A.4.1\\]* [\\#11856](https://github.com/Wishibam/Ecommerce-sylius/pull/11856)\n    - [\\[Migration\\]\\[A.4.2/A.4.3\\] Internaliser bring & deep-link dans src/Component](https://trello.com/c/RsLN5SNT/3864-migrationa42-a43-internaliser-bring-deep-link-dans-src-component) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: internalize bring & deep-link plugins \\[A.4.2, A.4.3\\]* [\\#11861](https://github.com/Wishibam/Ecommerce-sylius/pull/11861)\n    - [\\[Migration\\]\\[A.5\\] Bumps frontend \u00ab safe \u00bb + suppression des packages morts](https://trello.com/c/vI6k61gt/3873-migrationa5-bumps-frontend-safe-suppression-des-packages-morts) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: bump safe frontend deps + prune dead packages \\[A.5\\]* [\\#11875](https://github.com/Wishibam/Ecommerce-sylius/pull/11875)\n    - [\\[Migration\\]\\[A.6\\] Pr\u00e9paration Doctrine pour DBAL 3 (monkey-patch migrations)](https://trello.com/c/8mdyVMwg/3880-migrationa6-pr%C3%A9paration-doctrine-pour-dbal-3-monkey-patch-migrations) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: replace Doctrine migration monkey-patch for DBAL 3 \\[A.6\\]* [\\#11893](https://github.com/Wishibam/Ecommerce-sylius/pull/11893)\n    - [TVO - Express checkout : adresse tronqu\u00e9e \u2014 nom de rue perdu (Apple Pay line1/line2)](https://trello.com/c/dIrl0I1a/3884-tvo-express-checkout-adresse-tronqu%C3%A9e-nom-de-rue-perdu-apple-pay-line1-line2) **\ud83e\udd13 Testing**\n        - *:bug: fix: join express checkout wallet address line1/line2 into street* [\\#11914](https://github.com/Wishibam/Ecommerce-sylius/pull/11914)\n    - [\\[P0\\] Express checkout : re-v\u00e9rifier le montant du PaymentIntent au complete](https://trello.com/c/qJdTR9Jc/3885-p0-express-checkout-re-v%C3%A9rifier-le-montant-du-paymentintent-au-complete) **\ud83d\udc8e In Review**\n        - *:bug: fix: verify express checkout PaymentIntent amount at completion* [\\#11916](https://github.com/Wishibam/Ecommerce-sylius/pull/11916)\n    - [\\[P0\\] Webhook Stripe : rembourser r\u00e9ellement les charges des commandes refus\u00e9es/annul\u00e9es](https://trello.com/c/fyJeMD3L/3886-p0-webhook-stripe-rembourser-r%C3%A9ellement-les-charges-des-commandes-refus%C3%A9es-annul%C3%A9es) **\ud83d\udc8e In Review**\n        - *:bug: fix: refund Stripe charges captured for refused or cancelled orders* [\\#11918](https://github.com/Wishibam/Ecommerce-sylius/pull/11918)\n    - [\\[P1\\] Express checkout : pinner explicitement les wallets autoris\u00e9s (quick win)](https://trello.com/c/tEpmPM9l/3890-p1-express-checkout-pinner-explicitement-les-wallets-autoris%C3%A9s-quick-win) **\ud83e\udd13 Testing**\n        - *:bug: fix: restrict express checkout wallets to an explicit allowlist* [\\#11919](https://github.com/Wishibam/Ecommerce-sylius/pull/11919)\n    - [\\[P0\\] Express checkout : commandes \u00e0 fonds captur\u00e9s supprim\u00e9es par la purge des carts + cha\u00eene d'abort morte](https://trello.com/c/1Wo7zGP5/3887-p0-express-checkout-commandes-%C3%A0-fonds-captur%C3%A9s-supprim%C3%A9es-par-la-purge-des-carts-cha%C3%AEne-dabort-morte) **\ud83d\udc8e In Review**\n        - *:bug: fix: protect express checkout captured-funds carts from the purge* [\\#11920](https://github.com/Wishibam/Ecommerce-sylius/pull/11920)\n    - [\ud83d\udc1b Fix r\u00e9indexation ES bloqu\u00e9e \u2014 \u00ab immense term \u00bb sur attribut trop long (Intersport)](https://trello.com/c/iD6idW0v/3915-%F0%9F%90%9B-fix-r%C3%A9indexation-es-bloqu%C3%A9e-immense-term-sur-attribut-trop-long-intersport) **\ud83e\udd16 Testing tech**\n        - *:bug: fix: r\u00e9indexation ES bloqu\u00e9e par un attribut trop long (immense term)* [\\#11972](https://github.com/Wishibam/Ecommerce-sylius/pull/11972)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f \u203c\ufe0f Nouveau Feeds - Faire tourner tous les nouveaux feeds sur toutes les preprods/prods](https://trello.com/c/Kr8UhDAv/3910-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-%EF%B8%8F-nouveau-feeds-faire-tourner-tous-les-nouveaux-feeds-sur-toutes-les-preprods-prods) **\ud83e\udee1 To Do JC**\n        - *:sparkles: feat: drive-to-store feeds parity with legacy Setono* [\\#11979](https://github.com/Wishibam/Ecommerce-sylius/pull/11979)\n    - [Helsinki \u2014 Funnel checkout GA4 vide : \u00e9v\u00e9nements e-commerce manquants/incomplets](https://trello.com/c/j0yQGSFm/3921-helsinki-funnel-checkout-ga4-vide-%C3%A9v%C3%A9nements-e-commerce-manquants-incomplets) **\ud83c\udf44 Ready for testing**\n        - *:bug: fix: \u00e9mettre le funnel checkout GA4 complet* [\\#11980](https://github.com/Wishibam/Ecommerce-sylius/pull/11980)\n        - *:bug: fix: \u00e9mettre add\\_payment\\_info quand l'\u00e9tape de paiement est saut\u00e9e* [\\#12014](https://github.com/Wishibam/Ecommerce-sylius/pull/12014)\n    - [Min-height pages React](https://trello.com/c/Rti8eFXb/3919-min-height-pages-react) **\ud83e\udd13 Testing**\n        - *:bug: fix: add min-height on React pages to prevent footer flash* [\\#11987](https://github.com/Wishibam/Ecommerce-sylius/pull/11987)\n    - [\u26a0\ufe0f action preprod/prod \u26a0\ufe0f \ud83d\uded2 Refonte Checkout #1 \u2014 La page Panier change de garde-robe](https://trello.com/c/qxdtlZxk/3851-%E2%9A%A0%EF%B8%8F-action-preprod-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%9B%92-refonte-checkout-1-la-page-panier-change-de-garde-robe) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): cart page QA feedback round* [\\#11990](https://github.com/Wishibam/Ecommerce-sylius/pull/11990)\n    - [Fix : TypeError trim() null sur les share descriptions de channel (admin)](https://trello.com/c/o47Ek1Fo/3924-fix-typeerror-trim-null-sur-les-share-descriptions-de-channel-admin) **\ud83e\udd16 Testing tech**\n        - *:bug: fix: guard against null share descriptions in channel setter* [\\#11992](https://github.com/Wishibam/Ecommerce-sylius/pull/11992)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f \ud83d\udce6\ud83c\udf0d Mondial Relay sans fronti\u00e8res \u2014 points relais UE (v1 TVO)](https://trello.com/c/4X0QYlQ5/3918-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%93%A6%F0%9F%8C%8D-mondial-relay-sans-fronti%C3%A8res-points-relais-ue-v1-tvo) **\ud83d\udc8e In Review**\n        - *:sparkles: feat(mondial-relay): relay search follows the buyer's country* [\\#11994](https://github.com/Wishibam/Ecommerce-sylius/pull/11994)\n    - [\ud83d\udccd Refonte Checkout \u2014 La suggestion d'adresse qui fait mouche](https://trello.com/c/vF0T1FZU/3860-%F0%9F%93%8D-refonte-checkout-la-suggestion-dadresse-qui-fait-mouche) **\ud83d\ude80 To Do Vincent**\n        - *:bug: fix(tvo): address suggestion QA feedback round* [\\#11995](https://github.com/Wishibam/Ecommerce-sylius/pull/11995)\n    - [\ud83c\udf5e Refonte Checkout \u2014 Des toasts tout chauds pour les messages syst\u00e8me](https://trello.com/c/N70pstGO/3861-%F0%9F%8D%9E-refonte-checkout-des-toasts-tout-chauds-pour-les-messages-syst%C3%A8me) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): checkout toasts QA feedback round* [\\#11996](https://github.com/Wishibam/Ecommerce-sylius/pull/11996)\n    - [TVO- mail order\\_open\\_return\\_withdrawn -remplacement de tag](https://trello.com/c/NK5CnCM2/3883-tvo-mail-orderopenreturnwithdrawn-remplacement-de-tag) **\ud83c\udf89 A MEP**\n        - *\ud83d\udc1b fix: orange \"return in progress\" badge on TVO withdrawal email* [\\#12000](https://github.com/Wishibam/Ecommerce-sylius/pull/12000)\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\ude9a Refonte Checkout #3 \u2014 Le Mode de livraison prend la route](https://trello.com/c/NDSNOimu/3854-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%9A%9A-refonte-checkout-3-le-mode-de-livraison-prend-la-route) **\ud83e\udd13 Testing**\n        - *:sparkles: feat(tvo): React checkout select shipping step (P3)* [\\#12011](https://github.com/Wishibam/Ecommerce-sylius/pull/12011)\n    - [Helsinki - Correction bug d'affichage en finnois en version mobile](https://trello.com/c/f9V6mA6z/3686-helsinki-correction-bug-daffichage-en-finnois-en-version-mobile) **\ud83c\udf44 Ready for testing**\n        - *:bug: fix: reduce Helsinki posts carousel title on mobile* [\\#12017](https://github.com/Wishibam/Ecommerce-sylius/pull/12017)\n \n- **Misc**\n    - *:sparkles: feat: PushDispatcher + adaptateur FCM (push app TVO)* [\\#11917](https://github.com/Wishibam/Ecommerce-sylius/pull/11917)\n    - *style(withdrawal): make the withdrawal button theme-colored and not f\u2026* [\\#11951](https://github.com/Wishibam/Ecommerce-sylius/pull/11951)\n    - *:zap: perf: Batavia PLP \u2014 ES result cache, key batching, menu cache* [\\#11963](https://github.com/Wishibam/Ecommerce-sylius/pull/11963)\n    - *:wrench: chore: outillage pour worktrees parall\u00e8les (front isol\u00e9 par projet)* [\\#11986](https://github.com/Wishibam/Ecommerce-sylius/pull/11986)\n    - *:wrench: chore: bump php\\_codesniffer en 3.13.6 (CVE-2026-67434, CI rouge)* [\\#12008](https://github.com/Wishibam/Ecommerce-sylius/pull/12008)\n \n- **D\u00e9j\u00e0 en production**\n    - [TVO - Les recommandations produits ne remontent aucun produit sur la fiche produit](https://trello.com/c/lw3SYgNG/3926-tvo-les-recommandations-produits-ne-remontent-aucun-produit-sur-la-fiche-produit) **MEP Ao\u00fbt**\n        - *:bug: fix(search): match the indexed color value in recommendations* [\\#12004](https://github.com/Wishibam/Ecommerce-sylius/pull/12004)\n    - *:bug: fix: render flag emojis as SVG icons, not OS emoji glyphs* [\\#11981](https://github.com/Wishibam/Ecommerce-sylius/pull/11981)\n    - *:bug: fix: apply the flag icon filter to the remaining menu renderings* [\\#11982](https://github.com/Wishibam/Ecommerce-sylius/pull/11982)", "creation_timestamp": "2026-08-11T07:59:05.295219Z"}, {"uuid": "ff2badc0-4c26-4c9c-a509-00318c10ffae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67434", "type": "seen", "source": "https://gist.github.com/jbourdin/e830a010c982559fa641f00d7c90066a", "content": "- **Trello**\n    - [GLOBAL - Email Alerte paiement en erreur](https://trello.com/c/P1DJvjHp/3229-global-email-alerte-paiement-en-erreur) **\ud83e\udd13 Testing**\n        - *feat(payment): send email notification when payment fails* [\\#10555](https://github.com/Wishibam/Ecommerce-sylius/pull/10555)\n    - [Helsinki : Portail de retour - Sylius - int\u00e9gration front du portail de retour](https://trello.com/c/mhcc7YaC/2401-helsinki-portail-de-retour-sylius-int%C3%A9gration-front-du-portail-de-retour) **TEMP - EPIC - Droit de r\u00e9tractation**\n        - *feat(helsinki): Add return portal to Helsinki order details* [\\#11757](https://github.com/Wishibam/Ecommerce-sylius/pull/11757)\n    - [\u26a0\ufe0fAction prod\u26a0\ufe0f\ud83d\udd14 Refonte TVO : tracking du volet d'alerte \u00ab retour en stock \u00bb](https://trello.com/c/SXyhrSQb/3834-%E2%9A%A0%EF%B8%8Faction-prod%E2%9A%A0%EF%B8%8F%F0%9F%94%94-refonte-tvo-tracking-du-volet-dalerte-retour-en-stock) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: track back-in-stock alert panel usage* [\\#11791](https://github.com/Wishibam/Ecommerce-sylius/pull/11791)\n    - [TVO - Fiche produit - Ajout des blocs \"Mati\u00e8re et entretien\" & \"Caract\u00e9ristiques\"](https://trello.com/c/AbsKmIzk/3633-tvo-fiche-produit-ajout-des-blocs-mati%C3%A8re-et-entretien-caract%C3%A9ristiques) **\ud83c\udf89 A MEP**\n        - *feat(tvo): add Mati\u00e8re et entretien & Caract\u00e9ristiques blocks on PDP* [\\#11812](https://github.com/Wishibam/Ecommerce-sylius/pull/11812)\n    - [\\[Migration\\]\\[A.2\\] D\u00e9mant\u00e8lement Setono Analytics + Tag-Bag](https://trello.com/c/uJN0Gkiz/3856-migrationa2-d%C3%A9mant%C3%A8lement-setono-analytics-tag-bag) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore(migration): internalize setono analytics + tag-bag as src/Component \\[A.2\\]* [\\#11846](https://github.com/Wishibam/Ecommerce-sylius/pull/11846)\n    - [\\[Migration\\]\\[A.4.1\\] Internaliser bitbag/wishlist-plugin dans src/Component/Wishlist](https://trello.com/c/U9dQGx1l/3863-migrationa41-internaliser-bitbag-wishlist-plugin-dans-src-component-wishlist) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: internalize bitbag/wishlist-plugin \\[A.4.1\\]* [\\#11856](https://github.com/Wishibam/Ecommerce-sylius/pull/11856)\n    - [\\[Migration\\]\\[A.4.2/A.4.3\\] Internaliser bring & deep-link dans src/Component](https://trello.com/c/RsLN5SNT/3864-migrationa42-a43-internaliser-bring-deep-link-dans-src-component) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: internalize bring & deep-link plugins \\[A.4.2, A.4.3\\]* [\\#11861](https://github.com/Wishibam/Ecommerce-sylius/pull/11861)\n    - [\\[Migration\\]\\[A.5\\] Bumps frontend \u00ab safe \u00bb + suppression des packages morts](https://trello.com/c/vI6k61gt/3873-migrationa5-bumps-frontend-safe-suppression-des-packages-morts) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: bump safe frontend deps + prune dead packages \\[A.5\\]* [\\#11875](https://github.com/Wishibam/Ecommerce-sylius/pull/11875)\n    - [\\[Migration\\]\\[A.6\\] Pr\u00e9paration Doctrine pour DBAL 3 (monkey-patch migrations)](https://trello.com/c/8mdyVMwg/3880-migrationa6-pr%C3%A9paration-doctrine-pour-dbal-3-monkey-patch-migrations) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: replace Doctrine migration monkey-patch for DBAL 3 \\[A.6\\]* [\\#11893](https://github.com/Wishibam/Ecommerce-sylius/pull/11893)\n    - [TVO - Express checkout : adresse tronqu\u00e9e \u2014 nom de rue perdu (Apple Pay line1/line2)](https://trello.com/c/dIrl0I1a/3884-tvo-express-checkout-adresse-tronqu%C3%A9e-nom-de-rue-perdu-apple-pay-line1-line2) **\ud83e\udd13 Testing**\n        - *:bug: fix: join express checkout wallet address line1/line2 into street* [\\#11914](https://github.com/Wishibam/Ecommerce-sylius/pull/11914)\n    - [\\[P0\\] Express checkout : re-v\u00e9rifier le montant du PaymentIntent au complete](https://trello.com/c/qJdTR9Jc/3885-p0-express-checkout-re-v%C3%A9rifier-le-montant-du-paymentintent-au-complete) **\ud83d\udc8e In Review**\n        - *:bug: fix: verify express checkout PaymentIntent amount at completion* [\\#11916](https://github.com/Wishibam/Ecommerce-sylius/pull/11916)\n    - [\\[P0\\] Webhook Stripe : rembourser r\u00e9ellement les charges des commandes refus\u00e9es/annul\u00e9es](https://trello.com/c/fyJeMD3L/3886-p0-webhook-stripe-rembourser-r%C3%A9ellement-les-charges-des-commandes-refus%C3%A9es-annul%C3%A9es) **\ud83d\udc8e In Review**\n        - *:bug: fix: refund Stripe charges captured for refused or cancelled orders* [\\#11918](https://github.com/Wishibam/Ecommerce-sylius/pull/11918)\n    - [\\[P1\\] Express checkout : pinner explicitement les wallets autoris\u00e9s (quick win)](https://trello.com/c/tEpmPM9l/3890-p1-express-checkout-pinner-explicitement-les-wallets-autoris%C3%A9s-quick-win) **\ud83e\udd13 Testing**\n        - *:bug: fix: restrict express checkout wallets to an explicit allowlist* [\\#11919](https://github.com/Wishibam/Ecommerce-sylius/pull/11919)\n    - [\\[P0\\] Express checkout : commandes \u00e0 fonds captur\u00e9s supprim\u00e9es par la purge des carts + cha\u00eene d'abort morte](https://trello.com/c/1Wo7zGP5/3887-p0-express-checkout-commandes-%C3%A0-fonds-captur%C3%A9s-supprim%C3%A9es-par-la-purge-des-carts-cha%C3%AEne-dabort-morte) **\ud83d\udc8e In Review**\n        - *:bug: fix: protect express checkout captured-funds carts from the purge* [\\#11920](https://github.com/Wishibam/Ecommerce-sylius/pull/11920)\n    - [Helsinki \u2014 Funnel checkout GA4 vide : \u00e9v\u00e9nements e-commerce manquants/incomplets](https://trello.com/c/j0yQGSFm/3921-helsinki-funnel-checkout-ga4-vide-%C3%A9v%C3%A9nements-e-commerce-manquants-incomplets) **\ud83c\udf44 Ready for testing**\n        - *:bug: fix: \u00e9mettre le funnel checkout GA4 complet* [\\#11980](https://github.com/Wishibam/Ecommerce-sylius/pull/11980)\n        - *:bug: fix: \u00e9mettre add\\_payment\\_info quand l'\u00e9tape de paiement est saut\u00e9e* [\\#12014](https://github.com/Wishibam/Ecommerce-sylius/pull/12014)\n    - [FEAT-0006 \u2014 Regroupement des emails d'annulation d'articles](https://trello.com/c/bBiV4jTE/3415-feat-0006-regroupement-des-emails-dannulation-darticles) **\ud83e\udd13 Testing**\n        - *:bug: fix: FEAT-0006 cancellation email grouping QA feedback* [\\#11984](https://github.com/Wishibam/Ecommerce-sylius/pull/11984)\n        - *:bug: fix: register order\\_entirely\\_cancelled email template for all projects* [\\#12091](https://github.com/Wishibam/Ecommerce-sylius/pull/12091)\n    - [Min-height pages React](https://trello.com/c/Rti8eFXb/3919-min-height-pages-react) **\ud83c\udf89 A MEP**\n        - *:bug: fix: add min-height on React pages to prevent footer flash* [\\#11987](https://github.com/Wishibam/Ecommerce-sylius/pull/11987)\n    - [SEO - TVO - changement de slug](https://trello.com/c/Gbb2tles/3908-seo-tvo-changement-de-slug) **\ud83c\udf89 A MEP**\n        - *:bug: fix: clean up TVO brand page slugs with 301 redirects* [\\#11988](https://github.com/Wishibam/Ecommerce-sylius/pull/11988)\n    - [\u26a0\ufe0f action preprod/prod \u26a0\ufe0f \ud83d\uded2 Refonte Checkout #1 \u2014 La page Panier change de garde-robe](https://trello.com/c/qxdtlZxk/3851-%E2%9A%A0%EF%B8%8F-action-preprod-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%9B%92-refonte-checkout-1-la-page-panier-change-de-garde-robe) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): cart page QA feedback round* [\\#11990](https://github.com/Wishibam/Ecommerce-sylius/pull/11990)\n    - [\u26a0\ufe0f MEP \u26a0\ufe0f\u2b50 Google Customer Reviews sur TVO \u2014 brancher la machine \u00e0 \u00e9toiles](https://trello.com/c/7JA9u85M/3899-%E2%9A%A0%EF%B8%8F-mep-%E2%9A%A0%EF%B8%8F%E2%AD%90-google-customer-reviews-sur-tvo-brancher-la-machine-%C3%A0-%C3%A9toiles) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: TVO Google Customer Reviews \u2014 GTIN produits sur thank you* [\\#11991](https://github.com/Wishibam/Ecommerce-sylius/pull/11991)\n    - [Fix : TypeError trim() null sur les share descriptions de channel (admin)](https://trello.com/c/o47Ek1Fo/3924-fix-typeerror-trim-null-sur-les-share-descriptions-de-channel-admin) **\ud83e\udd16 Testing tech**\n        - *:bug: fix: guard against null share descriptions in channel setter* [\\#11992](https://github.com/Wishibam/Ecommerce-sylius/pull/11992)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f \ud83d\udce6\ud83c\udf0d Mondial Relay sans fronti\u00e8res \u2014 points relais UE (v1 TVO)](https://trello.com/c/4X0QYlQ5/3918-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%93%A6%F0%9F%8C%8D-mondial-relay-sans-fronti%C3%A8res-points-relais-ue-v1-tvo) **\ud83d\udc8e In Review**\n        - *:sparkles: feat(mondial-relay): relay search follows the buyer's country* [\\#11994](https://github.com/Wishibam/Ecommerce-sylius/pull/11994)\n    - [\ud83d\udccd Refonte Checkout \u2014 La suggestion d'adresse qui fait mouche](https://trello.com/c/vF0T1FZU/3860-%F0%9F%93%8D-refonte-checkout-la-suggestion-dadresse-qui-fait-mouche) **\ud83d\ude80 To Do Vincent**\n        - *:bug: fix(tvo): address suggestion QA feedback round* [\\#11995](https://github.com/Wishibam/Ecommerce-sylius/pull/11995)\n        - *:bug: fix(tvo): keep the manual phone flag choice made on an empty field* [\\#12058](https://github.com/Wishibam/Ecommerce-sylius/pull/12058)\n    - [\ud83c\udf5e Refonte Checkout \u2014 Des toasts tout chauds pour les messages syst\u00e8me](https://trello.com/c/N70pstGO/3861-%F0%9F%8D%9E-refonte-checkout-des-toasts-tout-chauds-pour-les-messages-syst%C3%A8me) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): checkout toasts QA feedback round* [\\#11996](https://github.com/Wishibam/Ecommerce-sylius/pull/11996)\n    - [\ud83d\udd00 Refonte TVO : le variant s\u00e9lectionn\u00e9 saute en 1re position au lieu de rester \u00e0 sa place](https://trello.com/c/vQH5uxHz/3904-%F0%9F%94%80-refonte-tvo-le-variant-s%C3%A9lectionn%C3%A9-saute-en-1re-position-au-lieu-de-rester-%C3%A0-sa-place) **\ud83e\udd13 Testing**\n        - *:bug: fix: keep option values in place on overflowing variant axis* [\\#11998](https://github.com/Wishibam/Ecommerce-sylius/pull/11998)\n    - [TVO- mail order\\_open\\_return\\_withdrawn -remplacement de tag](https://trello.com/c/NK5CnCM2/3883-tvo-mail-orderopenreturnwithdrawn-remplacement-de-tag) **\ud83c\udf89 A MEP**\n        - *\ud83d\udc1b fix: orange \"return in progress\" badge on TVO withdrawal email* [\\#12000](https://github.com/Wishibam/Ecommerce-sylius/pull/12000)\n    - [SEO - ALL - Meta Title](https://trello.com/c/QDbDIPTu/3909-seo-all-meta-title) **\ud83e\udd13 Testing**\n        - *:sparkles: feat: add dedicated Meta Title for CMS pages* [\\#12001](https://github.com/Wishibam/Ecommerce-sylius/pull/12001)\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\ude9a Refonte Checkout #3 \u2014 Le Mode de livraison prend la route](https://trello.com/c/NDSNOimu/3854-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%9A%9A-refonte-checkout-3-le-mode-de-livraison-prend-la-route) **\ud83d\ude80 To Do Vincent**\n        - *:sparkles: feat(tvo): React checkout select shipping step (P3)* [\\#12011](https://github.com/Wishibam/Ecommerce-sylius/pull/12011)\n    - [Helsinki - Correction bug d'affichage en finnois en version mobile](https://trello.com/c/f9V6mA6z/3686-helsinki-correction-bug-daffichage-en-finnois-en-version-mobile) **\ud83c\udf89 A MEP**\n        - *:bug: fix: reduce Helsinki posts carousel title on mobile* [\\#12017](https://github.com/Wishibam/Ecommerce-sylius/pull/12017)\n    - [\ud83c\udfbd \\[IS\\] Footer : \u00ab Notre accompagnement \u00bb devient \u00ab Nos services \u00bb et raccroche son lien](https://trello.com/c/H2X0XtqH/3932-%F0%9F%8E%BD-is-footer-notre-accompagnement-devient-nos-services-et-raccroche-son-lien) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: rename the Intersport footer column to \u00ab Nos services \u00bb and unlink its title* [\\#12026](https://github.com/Wishibam/Ecommerce-sylius/pull/12026)\n        - *:rewind: revert: Intersport footer \u00ab Nos services \u00bb (wrong target branch)* [\\#12037](https://github.com/Wishibam/Ecommerce-sylius/pull/12037)\n    - [Batavia - Probl\u00e8me sur l'affichage des variations](https://trello.com/c/MY6aNjLj/3931-batavia-probl%C3%A8me-sur-laffichage-des-variations) **\ud83c\udf89 A MEP**\n        - *:bug: fix: deep-link Batavia PLP cards to the displayed color variant* [\\#12027](https://github.com/Wishibam/Ecommerce-sylius/pull/12027)\n    - [Batavia \u2014 Mails \u00ab produit indisponible \u00bb non re\u00e7us par les clients](https://trello.com/c/YLHFxnVs/3933-batavia-mails-produit-indisponible-non-re%C3%A7us-par-les-clients) **\ud83c\udf89 A MEP**\n        - *:bug: fix: validate admin email templates and log real send outcomes* [\\#12035](https://github.com/Wishibam/Ecommerce-sylius/pull/12035)\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\udcb3 Refonte Checkout #4 \u2014 Le Mode de paiement passe \u00e0 la caisse](https://trello.com/c/vDcvKX88/3855-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%92%B3-refonte-checkout-4-le-mode-de-paiement-passe-%C3%A0-la-caisse) **\ud83d\ude80 To Do Vincent**\n        - *:sparkles: feat(tvo): rebuild the checkout payment step and success page in React* [\\#12051](https://github.com/Wishibam/Ecommerce-sylius/pull/12051)\n    - [Intersport - Bug d'affichage images box produit](https://trello.com/c/mOO6EBx1/3936-intersport-bug-daffichage-images-box-produit) **\ud83c\udf89 A MEP**\n        - *:bug: \\[via\\] fix: styles mobiles des pages mot de passe oubli\u00e9/reset* [\\#12055](https://github.com/Wishibam/Ecommerce-sylius/pull/12055)\n    - [\ud83e\ude97 VIA \u2014 Le filtre Cat\u00e9gorie s'ouvre tout seul dans les descentes : on le veut ferm\u00e9 au chargement](https://trello.com/c/GMHVWZe2/3938-%F0%9F%AA%97-via-le-filtre-cat%C3%A9gorie-souvre-tout-seul-dans-les-descentes-on-le-veut-ferm%C3%A9-au-chargement) **\ud83c\udf89 A MEP**\n        - *:bug: \\[via\\] fix: le filtre Cat\u00e9gorie reste ferm\u00e9 au chargement des descentes* [\\#12059](https://github.com/Wishibam/Ecommerce-sylius/pull/12059)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f Feed : Ajouter le flux facebook TVO](https://trello.com/c/iXjTokqz/3937-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-feed-ajouter-le-flux-facebook-tvo) **\ud83e\udd16 Testing tech**\n        - *:sparkles: feat: porter le flux facebook\\_catalog vers le nouveau composant* [\\#12060](https://github.com/Wishibam/Ecommerce-sylius/pull/12060)\n    - [\\[Migration\\]\\[B.1\\] PHP 8.2 \u2192 8.3](https://trello.com/c/Slm1Q5n7/3940-migrationb1-php-82-%E2%86%92-83) **\ud83d\ude80 To Do Vincent**\n        - *:wrench: chore: run the test suite on PHP 8.2 and 8.3 \\[B.1\\]* [\\#12063](https://github.com/Wishibam/Ecommerce-sylius/pull/12063)\n        - *:bug: fix(deploy): restart PHP-FPM via systemd glob instead of hardcoded 8.2* [\\#12066](https://github.com/Wishibam/Ecommerce-sylius/pull/12066)\n        - *:wrench: chore: run the dual PHP matrix on the tests job only \\[B.1\\]* [\\#12068](https://github.com/Wishibam/Ecommerce-sylius/pull/12068)\n    - [\\[Migration\\]\\[B.2\\] Sylius 1.12 \u2192 1.13 (DBAL 3)](https://trello.com/c/huA0VNU9/3941-migrationb2-sylius-112-%E2%86%92-113-dbal-3) **\ud83d\ude80 To Do Vincent**\n        - *:wrench: chore(doctrine): drop the last getSchemaManager() call for DBAL 3/4 \\[B.2 P.1\\]* [\\#12071](https://github.com/Wishibam/Ecommerce-sylius/pull/12071)\n        - *:white\\_check\\_mark: test: characterize every state machine graph wiring \\[B.2 P.2\\]* [\\#12074](https://github.com/Wishibam/Ecommerce-sylius/pull/12074)\n \n- **Misc**\n    - *:sparkles: feat: PushDispatcher + adaptateur FCM (push app TVO)* [\\#11917](https://github.com/Wishibam/Ecommerce-sylius/pull/11917)\n    - *style(withdrawal): make the withdrawal button theme-colored and not f\u2026* [\\#11951](https://github.com/Wishibam/Ecommerce-sylius/pull/11951)\n    - *:zap: perf: Batavia PLP \u2014 ES result cache, key batching, menu cache* [\\#11963](https://github.com/Wishibam/Ecommerce-sylius/pull/11963)\n    - *:wrench: chore: outillage pour worktrees parall\u00e8les (front isol\u00e9 par projet)* [\\#11986](https://github.com/Wishibam/Ecommerce-sylius/pull/11986)\n    - *:sparkles: feat: push app TVO \u2014 envoi asynchrone + badge (3.A.5 + 3.A.6)* [\\#12022](https://github.com/Wishibam/Ecommerce-sylius/pull/12022)\n    - *:sparkles: feat: badge unreadPushCount de bout en bout (app TVO)* [\\#12025](https://github.com/Wishibam/Ecommerce-sylius/pull/12025)\n    - *:sparkles: feat: compteur badge dans data des push (app TVO)* [\\#12028](https://github.com/Wishibam/Ecommerce-sylius/pull/12028)\n    - *:sparkles: feat: push \u00ab commande confirm\u00e9e \u00bb (app TVO)* [\\#12031](https://github.com/Wishibam/Ecommerce-sylius/pull/12031)\n    - *:sparkles: feat: push \u00ab commande exp\u00e9di\u00e9e \u00bb (app TVO)* [\\#12040](https://github.com/Wishibam/Ecommerce-sylius/pull/12040)\n    - *feat(push): notification de remboursement de commande (TVO 3.B.3)* [\\#12041](https://github.com/Wishibam/Ecommerce-sylius/pull/12041)\n    - *fix(push): durcir l'envoi FCM \u2014 timeouts born\u00e9s + retry effectif (TVO 3.A.7)* [\\#12042](https://github.com/Wishibam/Ecommerce-sylius/pull/12042)\n    - *test(featured-content): d\u00e9-flakifier testProgramDisableDelay (tol\u00e9rance sur le d\u00e9lai)* [\\#12044](https://github.com/Wishibam/Ecommerce-sylius/pull/12044)\n    - *feat(push): notification de retour en stock (TVO 3.B.4)* [\\#12045](https://github.com/Wishibam/Ecommerce-sylius/pull/12045)\n    - *feat(push): notification de baisse de prix wishlist (TVO 3.B.5)* [\\#12049](https://github.com/Wishibam/Ecommerce-sylius/pull/12049)\n    - *:bug: fix(megamenu): \u00e9largir le lien \u00e0 2048 caract\u00e8res* [\\#12050](https://github.com/Wishibam/Ecommerce-sylius/pull/12050)\n    - *feat(push): relance push des paniers abandonn\u00e9s (TVO 3.B.6)* [\\#12053](https://github.com/Wishibam/Ecommerce-sylius/pull/12053)\n    - *feat(deeplink): AASA de la nouvelle app TVO \u2014 Universal Links iOS (TVO 4.1)* [\\#12064](https://github.com/Wishibam/Ecommerce-sylius/pull/12064)\n    - *feat(deeplink): assetlinks.json de la nouvelle app TVO \u2014 App Links Android (TVO 4.2)* [\\#12065](https://github.com/Wishibam/Ecommerce-sylius/pull/12065)\n    - *:bug: fix: complete payments stuck by Stripe webhook/checkout race* [\\#12075](https://github.com/Wishibam/Ecommerce-sylius/pull/12075)\n \n- **D\u00e9j\u00e0 en production**\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\udc1b Fix r\u00e9indexation ES bloqu\u00e9e \u2014 \u00ab immense term \u00bb sur attribut trop long (Intersport)](https://trello.com/c/iD6idW0v/3915-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%90%9B-fix-r%C3%A9indexation-es-bloqu%C3%A9e-immense-term-sur-attribut-trop-long-intersport) **MEP Ao\u00fbt**\n        - *:bug: fix: r\u00e9indexation ES bloqu\u00e9e par un attribut trop long (immense term)* [\\#11972](https://github.com/Wishibam/Ecommerce-sylius/pull/11972)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f \u203c\ufe0f Nouveau Feeds - Faire tourner tous les nouveaux feeds sur toutes les preprods/prods](https://trello.com/c/Kr8UhDAv/3910-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-%EF%B8%8F-nouveau-feeds-faire-tourner-tous-les-nouveaux-feeds-sur-toutes-les-preprods-prods) **\ud83e\udee1 To Do JC**\n        - *:sparkles: feat: drive-to-store feeds parity with legacy Setono* [\\#11979](https://github.com/Wishibam/Ecommerce-sylius/pull/11979)\n    - [TVO - Les recommandations produits ne remontent aucun produit sur la fiche produit](https://trello.com/c/lw3SYgNG/3926-tvo-les-recommandations-produits-ne-remontent-aucun-produit-sur-la-fiche-produit) **MEP Ao\u00fbt**\n        - *:bug: fix(search): match the indexed color value in recommendations* [\\#12004](https://github.com/Wishibam/Ecommerce-sylius/pull/12004)\n    - [A ESTIMER : Google Shopping Feed : ajouter le Outlet Price en cas de promotion](https://trello.com/c/RnEgL53B/3867-a-estimer-google-shopping-feed-ajouter-le-outlet-price-en-cas-de-promotion) **\ud83e\udd13 Testing**\n        - *:sparkles: feat(helsinki): expose the outlet price in the Google Shopping feed* [\\#12020](https://github.com/Wishibam/Ecommerce-sylius/pull/12020)\n    - [\u2615\ufe0f \\[Batavia\\] Frais de retour : \u20ac3,25 \u2192 \u20ac3,95 (et on passe le texte en traduction)](https://trello.com/c/P4vec3cz/3934-%E2%98%95%EF%B8%8F-batavia-frais-de-retour-%E2%82%AC325-%E2%86%92-%E2%82%AC395-et-on-passe-le-texte-en-traduction) **MEP Ao\u00fbt**\n        - *:bug: fix: Batavia return cost 3,95 and move the line to a translation* [\\#12034](https://github.com/Wishibam/Ecommerce-sylius/pull/12034)\n    - *:bug: fix: render flag emojis as SVG icons, not OS emoji glyphs* [\\#11981](https://github.com/Wishibam/Ecommerce-sylius/pull/11981)\n    - *:bug: fix: apply the flag icon filter to the remaining menu renderings* [\\#11982](https://github.com/Wishibam/Ecommerce-sylius/pull/11982)\n    - *:wrench: chore: bump php\\_codesniffer en 3.13.6 (CVE-2026-67434, CI rouge)* [\\#12008](https://github.com/Wishibam/Ecommerce-sylius/pull/12008)", "creation_timestamp": "2026-08-21T14:23:04.436477Z"}, {"uuid": "5f1ea874-83c3-4280-a387-98bb3206b263", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67434", "type": "seen", "source": "https://gist.github.com/FR-Flo/3ac9b6ced79fe8b0cb1ffae9959c6826", "content": "## \ud83d\udd17 Companion release\n\nThis release ships alongside the **Marketplace-client (frontend)** release PR:\n\n- https://github.com/Wishibam/Marketplace-client/pull/4256\n\n- **Misc**\n    - *feat(shipping-method): expose the default return method flag on the API* [\\#7793](https://github.com/Wishibam/Marketplace-api/pull/7793)\n    - *:sparkles: feat: resync a single retailer in the live merchandising indices* [\\#7808](https://github.com/Wishibam/Marketplace-api/pull/7808)\n    - *:arrow\\_up: deps: bump php\\_codesniffer to 4.0.4 (CVE-2026-67434)* [\\#7817](https://github.com/Wishibam/Marketplace-api/pull/7817)\n    - *:bug: fix: resync-retailer scroll rejected by ES8 (size param)* [\\#7820](https://github.com/Wishibam/Marketplace-api/pull/7820)\n    - *feat(mcp): add MCP server walking skeleton with list\\_organizations* [\\#7823](https://github.com/Wishibam/Marketplace-api/pull/7823)\n    - *refactor(mcp): extract logic from ImportAction, RetailerNormalizer and RankProduct* [\\#7824](https://github.com/Wishibam/Marketplace-api/pull/7824)\n    - *:sparkles: feat: compute product scoring on the fly (service + ES)* [\\#7825](https://github.com/Wishibam/Marketplace-api/pull/7825)\n    - *:sparkles: feat: raise the ES pagination window beyond 10k documents* [\\#7826](https://github.com/Wishibam/Marketplace-api/pull/7826)\n    - *feat(merchandising): supporter les tris du listing produit sur POST /merchandising* [\\#7827](https://github.com/Wishibam/Marketplace-api/pull/7827)\n\n## POST MEP\n\n### [PR #7826](https://github.com/Wishibam/Marketplace-api/pull/7826) \u2014 :sparkles: feat: raise the ES pagination window beyond 10k documents\n\n```\n  curl -X PUT \"http://localhost:9200/prod_product_*/_settings\" -H 'Content-Type: application/json' -d '{\"index\":{\"max_result_window\":200000}}'\n  curl -X PUT \"http://localhost:9200/prod_variation_*/_settings\" -H 'Content-Type: application/json' -d '{\"index\":{\"max_result_window\":500000}}'\n\n  V\u00e9rifier :\n  curl \"http://localhost:9200/prod_product_*/_settings/index.max_result_window?flat_settings\"\n  curl \"http://localhost:9200/prod_variation_*/_settings/index.max_result_window?flat_settings\"\n```\n", "creation_timestamp": "2026-08-11T14:13:54.294919Z"}, {"uuid": "f58acd43-afba-4b5d-af9e-409a90586904", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67434", "type": "seen", "source": "https://gist.github.com/jbourdin/bedf58f6e9f385585ff2a9abe340e0d4", "content": "- **Trello**\n    - [Helsinki : Portail de retour - Sylius - int\u00e9gration front du portail de retour](https://trello.com/c/mhcc7YaC/2401-helsinki-portail-de-retour-sylius-int%C3%A9gration-front-du-portail-de-retour) **TEMP - EPIC - Droit de r\u00e9tractation**\n        - *feat(helsinki): Add return portal to Helsinki order details* [\\#11757](https://github.com/Wishibam/Ecommerce-sylius/pull/11757)\n    - [\\[Migration\\]\\[A.2\\] D\u00e9mant\u00e8lement Setono Analytics + Tag-Bag](https://trello.com/c/uJN0Gkiz/3856-migrationa2-d%C3%A9mant%C3%A8lement-setono-analytics-tag-bag) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore(migration): internalize setono analytics + tag-bag as src/Component \\[A.2\\]* [\\#11846](https://github.com/Wishibam/Ecommerce-sylius/pull/11846)\n    - [\\[Migration\\]\\[A.4.1\\] Internaliser bitbag/wishlist-plugin dans src/Component/Wishlist](https://trello.com/c/U9dQGx1l/3863-migrationa41-internaliser-bitbag-wishlist-plugin-dans-src-component-wishlist) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: internalize bitbag/wishlist-plugin \\[A.4.1\\]* [\\#11856](https://github.com/Wishibam/Ecommerce-sylius/pull/11856)\n    - [\\[Migration\\]\\[A.4.2/A.4.3\\] Internaliser bring & deep-link dans src/Component](https://trello.com/c/RsLN5SNT/3864-migrationa42-a43-internaliser-bring-deep-link-dans-src-component) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: internalize bring & deep-link plugins \\[A.4.2, A.4.3\\]* [\\#11861](https://github.com/Wishibam/Ecommerce-sylius/pull/11861)\n    - [\\[Migration\\]\\[A.5\\] Bumps frontend \u00ab safe \u00bb + suppression des packages morts](https://trello.com/c/vI6k61gt/3873-migrationa5-bumps-frontend-safe-suppression-des-packages-morts) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: bump safe frontend deps + prune dead packages \\[A.5\\]* [\\#11875](https://github.com/Wishibam/Ecommerce-sylius/pull/11875)\n    - [\\[Migration\\]\\[A.6\\] Pr\u00e9paration Doctrine pour DBAL 3 (monkey-patch migrations)](https://trello.com/c/8mdyVMwg/3880-migrationa6-pr%C3%A9paration-doctrine-pour-dbal-3-monkey-patch-migrations) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: replace Doctrine migration monkey-patch for DBAL 3 \\[A.6\\]* [\\#11893](https://github.com/Wishibam/Ecommerce-sylius/pull/11893)\n    - [TVO - Express checkout : adresse tronqu\u00e9e \u2014 nom de rue perdu (Apple Pay line1/line2)](https://trello.com/c/dIrl0I1a/3884-tvo-express-checkout-adresse-tronqu%C3%A9e-nom-de-rue-perdu-apple-pay-line1-line2) **\ud83e\udd13 Testing**\n        - *:bug: fix: join express checkout wallet address line1/line2 into street* [\\#11914](https://github.com/Wishibam/Ecommerce-sylius/pull/11914)\n    - [\\[P0\\] Express checkout : re-v\u00e9rifier le montant du PaymentIntent au complete](https://trello.com/c/qJdTR9Jc/3885-p0-express-checkout-re-v%C3%A9rifier-le-montant-du-paymentintent-au-complete) **\ud83d\udc8e In Review**\n        - *:bug: fix: verify express checkout PaymentIntent amount at completion* [\\#11916](https://github.com/Wishibam/Ecommerce-sylius/pull/11916)\n    - [\\[P0\\] Webhook Stripe : rembourser r\u00e9ellement les charges des commandes refus\u00e9es/annul\u00e9es](https://trello.com/c/fyJeMD3L/3886-p0-webhook-stripe-rembourser-r%C3%A9ellement-les-charges-des-commandes-refus%C3%A9es-annul%C3%A9es) **\ud83d\udc8e In Review**\n        - *:bug: fix: refund Stripe charges captured for refused or cancelled orders* [\\#11918](https://github.com/Wishibam/Ecommerce-sylius/pull/11918)\n    - [\\[P1\\] Express checkout : pinner explicitement les wallets autoris\u00e9s (quick win)](https://trello.com/c/tEpmPM9l/3890-p1-express-checkout-pinner-explicitement-les-wallets-autoris%C3%A9s-quick-win) **\ud83e\udd13 Testing**\n        - *:bug: fix: restrict express checkout wallets to an explicit allowlist* [\\#11919](https://github.com/Wishibam/Ecommerce-sylius/pull/11919)\n    - [\\[P0\\] Express checkout : commandes \u00e0 fonds captur\u00e9s supprim\u00e9es par la purge des carts + cha\u00eene d'abort morte](https://trello.com/c/1Wo7zGP5/3887-p0-express-checkout-commandes-%C3%A0-fonds-captur%C3%A9s-supprim%C3%A9es-par-la-purge-des-carts-cha%C3%AEne-dabort-morte) **\ud83d\udc8e In Review**\n        - *:bug: fix: protect express checkout captured-funds carts from the purge* [\\#11920](https://github.com/Wishibam/Ecommerce-sylius/pull/11920)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f \u203c\ufe0f Nouveau Feeds - Faire tourner tous les nouveaux feeds sur toutes les preprods/prods](https://trello.com/c/Kr8UhDAv/3910-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-%EF%B8%8F-nouveau-feeds-faire-tourner-tous-les-nouveaux-feeds-sur-toutes-les-preprods-prods) **\ud83e\udee1 To Do JC**\n        - *:sparkles: feat: drive-to-store feeds parity with legacy Setono* [\\#11979](https://github.com/Wishibam/Ecommerce-sylius/pull/11979)\n    - [Helsinki \u2014 Funnel checkout GA4 vide : \u00e9v\u00e9nements e-commerce manquants/incomplets](https://trello.com/c/j0yQGSFm/3921-helsinki-funnel-checkout-ga4-vide-%C3%A9v%C3%A9nements-e-commerce-manquants-incomplets) **\ud83c\udf44 Ready for testing**\n        - *:bug: fix: \u00e9mettre le funnel checkout GA4 complet* [\\#11980](https://github.com/Wishibam/Ecommerce-sylius/pull/11980)\n        - *:bug: fix: \u00e9mettre add\\_payment\\_info quand l'\u00e9tape de paiement est saut\u00e9e* [\\#12014](https://github.com/Wishibam/Ecommerce-sylius/pull/12014)\n    - [Min-height pages React](https://trello.com/c/Rti8eFXb/3919-min-height-pages-react) **\ud83e\udd13 Testing**\n        - *:bug: fix: add min-height on React pages to prevent footer flash* [\\#11987](https://github.com/Wishibam/Ecommerce-sylius/pull/11987)\n    - [\u26a0\ufe0f action preprod/prod \u26a0\ufe0f \ud83d\uded2 Refonte Checkout #1 \u2014 La page Panier change de garde-robe](https://trello.com/c/qxdtlZxk/3851-%E2%9A%A0%EF%B8%8F-action-preprod-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%9B%92-refonte-checkout-1-la-page-panier-change-de-garde-robe) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): cart page QA feedback round* [\\#11990](https://github.com/Wishibam/Ecommerce-sylius/pull/11990)\n    - [Fix : TypeError trim() null sur les share descriptions de channel (admin)](https://trello.com/c/o47Ek1Fo/3924-fix-typeerror-trim-null-sur-les-share-descriptions-de-channel-admin) **\ud83e\udd16 Testing tech**\n        - *:bug: fix: guard against null share descriptions in channel setter* [\\#11992](https://github.com/Wishibam/Ecommerce-sylius/pull/11992)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f \ud83d\udce6\ud83c\udf0d Mondial Relay sans fronti\u00e8res \u2014 points relais UE (v1 TVO)](https://trello.com/c/4X0QYlQ5/3918-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%93%A6%F0%9F%8C%8D-mondial-relay-sans-fronti%C3%A8res-points-relais-ue-v1-tvo) **\ud83d\udc8e In Review**\n        - *:sparkles: feat(mondial-relay): relay search follows the buyer's country* [\\#11994](https://github.com/Wishibam/Ecommerce-sylius/pull/11994)\n    - [\ud83d\udccd Refonte Checkout \u2014 La suggestion d'adresse qui fait mouche](https://trello.com/c/vF0T1FZU/3860-%F0%9F%93%8D-refonte-checkout-la-suggestion-dadresse-qui-fait-mouche) **\ud83d\udc8e In Review**\n        - *:bug: fix(tvo): address suggestion QA feedback round* [\\#11995](https://github.com/Wishibam/Ecommerce-sylius/pull/11995)\n    - [\ud83c\udf5e Refonte Checkout \u2014 Des toasts tout chauds pour les messages syst\u00e8me](https://trello.com/c/N70pstGO/3861-%F0%9F%8D%9E-refonte-checkout-des-toasts-tout-chauds-pour-les-messages-syst%C3%A8me) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): checkout toasts QA feedback round* [\\#11996](https://github.com/Wishibam/Ecommerce-sylius/pull/11996)\n    - [TVO- mail order\\_open\\_return\\_withdrawn -remplacement de tag](https://trello.com/c/NK5CnCM2/3883-tvo-mail-orderopenreturnwithdrawn-remplacement-de-tag) **\ud83c\udf89 A MEP**\n        - *\ud83d\udc1b fix: orange \"return in progress\" badge on TVO withdrawal email* [\\#12000](https://github.com/Wishibam/Ecommerce-sylius/pull/12000)\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\ude9a Refonte Checkout #3 \u2014 Le Mode de livraison prend la route](https://trello.com/c/NDSNOimu/3854-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%9A%9A-refonte-checkout-3-le-mode-de-livraison-prend-la-route) **\ud83e\udd13 Testing**\n        - *:sparkles: feat(tvo): React checkout select shipping step (P3)* [\\#12011](https://github.com/Wishibam/Ecommerce-sylius/pull/12011)\n    - [Helsinki - Correction bug d'affichage en finnois en version mobile](https://trello.com/c/f9V6mA6z/3686-helsinki-correction-bug-daffichage-en-finnois-en-version-mobile) **\ud83e\udd13 Testing**\n        - *:bug: fix: reduce Helsinki posts carousel title on mobile* [\\#12017](https://github.com/Wishibam/Ecommerce-sylius/pull/12017)\n    - [\ud83c\udfbd \\[IS\\] Footer : \u00ab Notre accompagnement \u00bb devient \u00ab Nos services \u00bb et raccroche son lien](https://trello.com/c/H2X0XtqH/3932-%F0%9F%8E%BD-is-footer-notre-accompagnement-devient-nos-services-et-raccroche-son-lien) **\ud83e\udd13 Testing**\n        - *:sparkles: feat: rename the Intersport footer column to \u00ab Nos services \u00bb and unlink its title* [\\#12026](https://github.com/Wishibam/Ecommerce-sylius/pull/12026)\n        - *:rewind: revert: Intersport footer \u00ab Nos services \u00bb (wrong target branch)* [\\#12037](https://github.com/Wishibam/Ecommerce-sylius/pull/12037)\n    - [Batavia \u2014 Mails \u00ab produit indisponible \u00bb non re\u00e7us par les clients](https://trello.com/c/YLHFxnVs/3933-batavia-mails-produit-indisponible-non-re%C3%A7us-par-les-clients) **\ud83e\udd13 Testing**\n        - *:bug: fix: validate admin email templates and log real send outcomes* [\\#12035](https://github.com/Wishibam/Ecommerce-sylius/pull/12035)\n \n- **Misc**\n    - *:sparkles: feat: PushDispatcher + adaptateur FCM (push app TVO)* [\\#11917](https://github.com/Wishibam/Ecommerce-sylius/pull/11917)\n    - *style(withdrawal): make the withdrawal button theme-colored and not f\u2026* [\\#11951](https://github.com/Wishibam/Ecommerce-sylius/pull/11951)\n    - *:zap: perf: Batavia PLP \u2014 ES result cache, key batching, menu cache* [\\#11963](https://github.com/Wishibam/Ecommerce-sylius/pull/11963)\n    - *:wrench: chore: outillage pour worktrees parall\u00e8les (front isol\u00e9 par projet)* [\\#11986](https://github.com/Wishibam/Ecommerce-sylius/pull/11986)\n    - *:wrench: chore: bump php\\_codesniffer en 3.13.6 (CVE-2026-67434, CI rouge)* [\\#12008](https://github.com/Wishibam/Ecommerce-sylius/pull/12008)\n    - *:sparkles: feat: push app TVO \u2014 envoi asynchrone + badge (3.A.5 + 3.A.6)* [\\#12022](https://github.com/Wishibam/Ecommerce-sylius/pull/12022)\n    - *:sparkles: feat: badge unreadPushCount de bout en bout (app TVO)* [\\#12025](https://github.com/Wishibam/Ecommerce-sylius/pull/12025)\n    - *:sparkles: feat: compteur badge dans data des push (app TVO)* [\\#12028](https://github.com/Wishibam/Ecommerce-sylius/pull/12028)\n    - *:sparkles: feat: push \u00ab commande confirm\u00e9e \u00bb (app TVO)* [\\#12031](https://github.com/Wishibam/Ecommerce-sylius/pull/12031)\n    - *:sparkles: feat: push \u00ab commande exp\u00e9di\u00e9e \u00bb (app TVO)* [\\#12040](https://github.com/Wishibam/Ecommerce-sylius/pull/12040)\n    - *feat(push): notification de remboursement de commande (TVO 3.B.3)* [\\#12041](https://github.com/Wishibam/Ecommerce-sylius/pull/12041)\n    - *fix(push): durcir l'envoi FCM \u2014 timeouts born\u00e9s + retry effectif (TVO 3.A.7)* [\\#12042](https://github.com/Wishibam/Ecommerce-sylius/pull/12042)\n    - *test(featured-content): d\u00e9-flakifier testProgramDisableDelay (tol\u00e9rance sur le d\u00e9lai)* [\\#12044](https://github.com/Wishibam/Ecommerce-sylius/pull/12044)\n    - *feat(push): notification de retour en stock (TVO 3.B.4)* [\\#12045](https://github.com/Wishibam/Ecommerce-sylius/pull/12045)\n    - *feat(push): notification de baisse de prix wishlist (TVO 3.B.5)* [\\#12049](https://github.com/Wishibam/Ecommerce-sylius/pull/12049)\n    - *:bug: fix(megamenu): \u00e9largir le lien \u00e0 2048 caract\u00e8res* [\\#12050](https://github.com/Wishibam/Ecommerce-sylius/pull/12050)\n \n- **D\u00e9j\u00e0 en production**\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\udc1b Fix r\u00e9indexation ES bloqu\u00e9e \u2014 \u00ab immense term \u00bb sur attribut trop long (Intersport)](https://trello.com/c/iD6idW0v/3915-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%90%9B-fix-r%C3%A9indexation-es-bloqu%C3%A9e-immense-term-sur-attribut-trop-long-intersport) **MEP Ao\u00fbt**\n        - *:bug: fix: r\u00e9indexation ES bloqu\u00e9e par un attribut trop long (immense term)* [\\#11972](https://github.com/Wishibam/Ecommerce-sylius/pull/11972)\n    - [TVO - Les recommandations produits ne remontent aucun produit sur la fiche produit](https://trello.com/c/lw3SYgNG/3926-tvo-les-recommandations-produits-ne-remontent-aucun-produit-sur-la-fiche-produit) **MEP Ao\u00fbt**\n        - *:bug: fix(search): match the indexed color value in recommendations* [\\#12004](https://github.com/Wishibam/Ecommerce-sylius/pull/12004)\n    - [\u2615\ufe0f \\[Batavia\\] Frais de retour : \u20ac3,25 \u2192 \u20ac3,95 (et on passe le texte en traduction)](https://trello.com/c/P4vec3cz/3934-%E2%98%95%EF%B8%8F-batavia-frais-de-retour-%E2%82%AC325-%E2%86%92-%E2%82%AC395-et-on-passe-le-texte-en-traduction) **MEP Ao\u00fbt**\n        - *:bug: fix: Batavia return cost 3,95 and move the line to a translation* [\\#12034](https://github.com/Wishibam/Ecommerce-sylius/pull/12034)\n    - *:bug: fix: render flag emojis as SVG icons, not OS emoji glyphs* [\\#11981](https://github.com/Wishibam/Ecommerce-sylius/pull/11981)\n    - *:bug: fix: apply the flag icon filter to the remaining menu renderings* [\\#11982](https://github.com/Wishibam/Ecommerce-sylius/pull/11982)", "creation_timestamp": "2026-08-18T07:51:27.119942Z"}, {"uuid": "dbfecc2c-9634-40c1-8d9c-20957e9bf063", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67434", "type": "seen", "source": "https://gist.github.com/jbourdin/e3a2a4307f53e7c762a33892eb7c8952", "content": "- **Trello**\n    - [Helsinki : Portail de retour - Sylius - int\u00e9gration front du portail de retour](https://trello.com/c/mhcc7YaC/2401-helsinki-portail-de-retour-sylius-int%C3%A9gration-front-du-portail-de-retour) **TEMP - EPIC - Droit de r\u00e9tractation**\n        - *feat(helsinki): Add return portal to Helsinki order details* [\\#11757](https://github.com/Wishibam/Ecommerce-sylius/pull/11757)\n    - [\\[Migration\\]\\[A.2\\] D\u00e9mant\u00e8lement Setono Analytics + Tag-Bag](https://trello.com/c/uJN0Gkiz/3856-migrationa2-d%C3%A9mant%C3%A8lement-setono-analytics-tag-bag) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore(migration): internalize setono analytics + tag-bag as src/Component \\[A.2\\]* [\\#11846](https://github.com/Wishibam/Ecommerce-sylius/pull/11846)\n    - [\\[Migration\\]\\[A.4.1\\] Internaliser bitbag/wishlist-plugin dans src/Component/Wishlist](https://trello.com/c/U9dQGx1l/3863-migrationa41-internaliser-bitbag-wishlist-plugin-dans-src-component-wishlist) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: internalize bitbag/wishlist-plugin \\[A.4.1\\]* [\\#11856](https://github.com/Wishibam/Ecommerce-sylius/pull/11856)\n    - [\\[Migration\\]\\[A.4.2/A.4.3\\] Internaliser bring & deep-link dans src/Component](https://trello.com/c/RsLN5SNT/3864-migrationa42-a43-internaliser-bring-deep-link-dans-src-component) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: internalize bring & deep-link plugins \\[A.4.2, A.4.3\\]* [\\#11861](https://github.com/Wishibam/Ecommerce-sylius/pull/11861)\n    - [\\[Migration\\]\\[A.5\\] Bumps frontend \u00ab safe \u00bb + suppression des packages morts](https://trello.com/c/vI6k61gt/3873-migrationa5-bumps-frontend-safe-suppression-des-packages-morts) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: bump safe frontend deps + prune dead packages \\[A.5\\]* [\\#11875](https://github.com/Wishibam/Ecommerce-sylius/pull/11875)\n    - [\\[Migration\\]\\[A.6\\] Pr\u00e9paration Doctrine pour DBAL 3 (monkey-patch migrations)](https://trello.com/c/8mdyVMwg/3880-migrationa6-pr%C3%A9paration-doctrine-pour-dbal-3-monkey-patch-migrations) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: replace Doctrine migration monkey-patch for DBAL 3 \\[A.6\\]* [\\#11893](https://github.com/Wishibam/Ecommerce-sylius/pull/11893)\n    - [TVO - Express checkout : adresse tronqu\u00e9e \u2014 nom de rue perdu (Apple Pay line1/line2)](https://trello.com/c/dIrl0I1a/3884-tvo-express-checkout-adresse-tronqu%C3%A9e-nom-de-rue-perdu-apple-pay-line1-line2) **\ud83e\udd13 Testing**\n        - *:bug: fix: join express checkout wallet address line1/line2 into street* [\\#11914](https://github.com/Wishibam/Ecommerce-sylius/pull/11914)\n    - [\\[P0\\] Express checkout : re-v\u00e9rifier le montant du PaymentIntent au complete](https://trello.com/c/qJdTR9Jc/3885-p0-express-checkout-re-v%C3%A9rifier-le-montant-du-paymentintent-au-complete) **\ud83d\udc8e In Review**\n        - *:bug: fix: verify express checkout PaymentIntent amount at completion* [\\#11916](https://github.com/Wishibam/Ecommerce-sylius/pull/11916)\n    - [\\[P0\\] Webhook Stripe : rembourser r\u00e9ellement les charges des commandes refus\u00e9es/annul\u00e9es](https://trello.com/c/fyJeMD3L/3886-p0-webhook-stripe-rembourser-r%C3%A9ellement-les-charges-des-commandes-refus%C3%A9es-annul%C3%A9es) **\ud83d\udc8e In Review**\n        - *:bug: fix: refund Stripe charges captured for refused or cancelled orders* [\\#11918](https://github.com/Wishibam/Ecommerce-sylius/pull/11918)\n    - [\\[P1\\] Express checkout : pinner explicitement les wallets autoris\u00e9s (quick win)](https://trello.com/c/tEpmPM9l/3890-p1-express-checkout-pinner-explicitement-les-wallets-autoris%C3%A9s-quick-win) **\ud83e\udd13 Testing**\n        - *:bug: fix: restrict express checkout wallets to an explicit allowlist* [\\#11919](https://github.com/Wishibam/Ecommerce-sylius/pull/11919)\n    - [\\[P0\\] Express checkout : commandes \u00e0 fonds captur\u00e9s supprim\u00e9es par la purge des carts + cha\u00eene d'abort morte](https://trello.com/c/1Wo7zGP5/3887-p0-express-checkout-commandes-%C3%A0-fonds-captur%C3%A9s-supprim%C3%A9es-par-la-purge-des-carts-cha%C3%AEne-dabort-morte) **\ud83d\udc8e In Review**\n        - *:bug: fix: protect express checkout captured-funds carts from the purge* [\\#11920](https://github.com/Wishibam/Ecommerce-sylius/pull/11920)\n    - [\ud83d\udc1b Fix r\u00e9indexation ES bloqu\u00e9e \u2014 \u00ab immense term \u00bb sur attribut trop long (Intersport)](https://trello.com/c/iD6idW0v/3915-%F0%9F%90%9B-fix-r%C3%A9indexation-es-bloqu%C3%A9e-immense-term-sur-attribut-trop-long-intersport) **\ud83e\udd16 Testing tech**\n        - *:bug: fix: r\u00e9indexation ES bloqu\u00e9e par un attribut trop long (immense term)* [\\#11972](https://github.com/Wishibam/Ecommerce-sylius/pull/11972)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f \u203c\ufe0f Nouveau Feeds - Faire tourner tous les nouveaux feeds sur toutes les preprods/prods](https://trello.com/c/Kr8UhDAv/3910-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-%EF%B8%8F-nouveau-feeds-faire-tourner-tous-les-nouveaux-feeds-sur-toutes-les-preprods-prods) **\ud83e\udee1 To Do JC**\n        - *:sparkles: feat: drive-to-store feeds parity with legacy Setono* [\\#11979](https://github.com/Wishibam/Ecommerce-sylius/pull/11979)\n    - [Helsinki \u2014 Funnel checkout GA4 vide : \u00e9v\u00e9nements e-commerce manquants/incomplets](https://trello.com/c/j0yQGSFm/3921-helsinki-funnel-checkout-ga4-vide-%C3%A9v%C3%A9nements-e-commerce-manquants-incomplets) **\ud83c\udf44 Ready for testing**\n        - *:bug: fix: \u00e9mettre le funnel checkout GA4 complet* [\\#11980](https://github.com/Wishibam/Ecommerce-sylius/pull/11980)\n        - *:bug: fix: \u00e9mettre add\\_payment\\_info quand l'\u00e9tape de paiement est saut\u00e9e* [\\#12014](https://github.com/Wishibam/Ecommerce-sylius/pull/12014)\n    - [Min-height pages React](https://trello.com/c/Rti8eFXb/3919-min-height-pages-react) **\ud83e\udd13 Testing**\n        - *:bug: fix: add min-height on React pages to prevent footer flash* [\\#11987](https://github.com/Wishibam/Ecommerce-sylius/pull/11987)\n    - [\u26a0\ufe0f action preprod/prod \u26a0\ufe0f \ud83d\uded2 Refonte Checkout #1 \u2014 La page Panier change de garde-robe](https://trello.com/c/qxdtlZxk/3851-%E2%9A%A0%EF%B8%8F-action-preprod-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%9B%92-refonte-checkout-1-la-page-panier-change-de-garde-robe) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): cart page QA feedback round* [\\#11990](https://github.com/Wishibam/Ecommerce-sylius/pull/11990)\n    - [Fix : TypeError trim() null sur les share descriptions de channel (admin)](https://trello.com/c/o47Ek1Fo/3924-fix-typeerror-trim-null-sur-les-share-descriptions-de-channel-admin) **\ud83e\udd16 Testing tech**\n        - *:bug: fix: guard against null share descriptions in channel setter* [\\#11992](https://github.com/Wishibam/Ecommerce-sylius/pull/11992)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f \ud83d\udce6\ud83c\udf0d Mondial Relay sans fronti\u00e8res \u2014 points relais UE (v1 TVO)](https://trello.com/c/4X0QYlQ5/3918-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%93%A6%F0%9F%8C%8D-mondial-relay-sans-fronti%C3%A8res-points-relais-ue-v1-tvo) **\ud83d\udc8e In Review**\n        - *:sparkles: feat(mondial-relay): relay search follows the buyer's country* [\\#11994](https://github.com/Wishibam/Ecommerce-sylius/pull/11994)\n    - [\ud83d\udccd Refonte Checkout \u2014 La suggestion d'adresse qui fait mouche](https://trello.com/c/vF0T1FZU/3860-%F0%9F%93%8D-refonte-checkout-la-suggestion-dadresse-qui-fait-mouche) **\ud83d\ude80 To Do Vincent**\n        - *:bug: fix(tvo): address suggestion QA feedback round* [\\#11995](https://github.com/Wishibam/Ecommerce-sylius/pull/11995)\n    - [\ud83c\udf5e Refonte Checkout \u2014 Des toasts tout chauds pour les messages syst\u00e8me](https://trello.com/c/N70pstGO/3861-%F0%9F%8D%9E-refonte-checkout-des-toasts-tout-chauds-pour-les-messages-syst%C3%A8me) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): checkout toasts QA feedback round* [\\#11996](https://github.com/Wishibam/Ecommerce-sylius/pull/11996)\n    - [TVO- mail order\\_open\\_return\\_withdrawn -remplacement de tag](https://trello.com/c/NK5CnCM2/3883-tvo-mail-orderopenreturnwithdrawn-remplacement-de-tag) **\ud83c\udf89 A MEP**\n        - *\ud83d\udc1b fix: orange \"return in progress\" badge on TVO withdrawal email* [\\#12000](https://github.com/Wishibam/Ecommerce-sylius/pull/12000)\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\ude9a Refonte Checkout #3 \u2014 Le Mode de livraison prend la route](https://trello.com/c/NDSNOimu/3854-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%9A%9A-refonte-checkout-3-le-mode-de-livraison-prend-la-route) **\ud83e\udd13 Testing**\n        - *:sparkles: feat(tvo): React checkout select shipping step (P3)* [\\#12011](https://github.com/Wishibam/Ecommerce-sylius/pull/12011)\n    - [Helsinki - Correction bug d'affichage en finnois en version mobile](https://trello.com/c/f9V6mA6z/3686-helsinki-correction-bug-daffichage-en-finnois-en-version-mobile) **\ud83e\udd13 Testing**\n        - *:bug: fix: reduce Helsinki posts carousel title on mobile* [\\#12017](https://github.com/Wishibam/Ecommerce-sylius/pull/12017)\n    - [\ud83c\udfbd \\[IS\\] Footer : \u00ab Notre accompagnement \u00bb devient \u00ab Nos services \u00bb et raccroche son lien](https://trello.com/c/H2X0XtqH/3932-%F0%9F%8E%BD-is-footer-notre-accompagnement-devient-nos-services-et-raccroche-son-lien) **\ud83e\udd13 Testing**\n        - *:sparkles: feat: rename the Intersport footer column to \u00ab Nos services \u00bb and unlink its title* [\\#12026](https://github.com/Wishibam/Ecommerce-sylius/pull/12026)\n    - [\u2615\ufe0f \\[Batavia\\] Frais de retour : \u20ac3,25 \u2192 \u20ac3,95 (et on passe le texte en traduction)](https://trello.com/c/P4vec3cz/3934-%E2%98%95%EF%B8%8F-batavia-frais-de-retour-%E2%82%AC325-%E2%86%92-%E2%82%AC395-et-on-passe-le-texte-en-traduction) **\ud83e\udd13 Testing**\n        - *:bug: fix: Batavia return cost 3,95 and move the line to a translation* [\\#12034](https://github.com/Wishibam/Ecommerce-sylius/pull/12034)\n \n- **Misc**\n    - *:sparkles: feat: PushDispatcher + adaptateur FCM (push app TVO)* [\\#11917](https://github.com/Wishibam/Ecommerce-sylius/pull/11917)\n    - *style(withdrawal): make the withdrawal button theme-colored and not f\u2026* [\\#11951](https://github.com/Wishibam/Ecommerce-sylius/pull/11951)\n    - *:zap: perf: Batavia PLP \u2014 ES result cache, key batching, menu cache* [\\#11963](https://github.com/Wishibam/Ecommerce-sylius/pull/11963)\n    - *:wrench: chore: outillage pour worktrees parall\u00e8les (front isol\u00e9 par projet)* [\\#11986](https://github.com/Wishibam/Ecommerce-sylius/pull/11986)\n    - *:wrench: chore: bump php\\_codesniffer en 3.13.6 (CVE-2026-67434, CI rouge)* [\\#12008](https://github.com/Wishibam/Ecommerce-sylius/pull/12008)\n    - *:sparkles: feat: push app TVO \u2014 envoi asynchrone + badge (3.A.5 + 3.A.6)* [\\#12022](https://github.com/Wishibam/Ecommerce-sylius/pull/12022)\n    - *:sparkles: feat: badge unreadPushCount de bout en bout (app TVO)* [\\#12025](https://github.com/Wishibam/Ecommerce-sylius/pull/12025)\n    - *:sparkles: feat: compteur badge dans data des push (app TVO)* [\\#12028](https://github.com/Wishibam/Ecommerce-sylius/pull/12028)\n \n- **D\u00e9j\u00e0 en production**\n    - [TVO - Les recommandations produits ne remontent aucun produit sur la fiche produit](https://trello.com/c/lw3SYgNG/3926-tvo-les-recommandations-produits-ne-remontent-aucun-produit-sur-la-fiche-produit) **MEP Ao\u00fbt**\n        - *:bug: fix(search): match the indexed color value in recommendations* [\\#12004](https://github.com/Wishibam/Ecommerce-sylius/pull/12004)\n    - *:bug: fix: render flag emojis as SVG icons, not OS emoji glyphs* [\\#11981](https://github.com/Wishibam/Ecommerce-sylius/pull/11981)\n    - *:bug: fix: apply the flag icon filter to the remaining menu renderings* [\\#11982](https://github.com/Wishibam/Ecommerce-sylius/pull/11982)", "creation_timestamp": "2026-08-13T16:17:32.138873Z"}, {"uuid": "e40705c2-14ae-4c30-ae1f-6af35e0b7e54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67434", "type": "seen", "source": "https://gist.github.com/alon710/a294e95161c29ae2353666d3ed774930", "content": "# CVE-2026-67434: CVE-2026-67434: OS Command Injection via Malicious Filenames in PHP_CodeSniffer Blame Reports\n\n> **CVSS Score:** 7.3\n> **Published:** 2026-08-06\n> **Full Report:** https://cvereports.com/reports/CVE-2026-67434\n\n## Summary\nA critical OS command injection vulnerability exists in PHP_CodeSniffer's VCS blame report modules (Gitblame, Hgblame, Svnblame). Due to inadequate escaping of filenames passed to shell execution wrappers like popen(), an attacker who commits a file with a maliciously crafted name can execute arbitrary commands when the victim generates a blame report.\n\n## TL;DR\nUnauthenticated OS command injection in PHP_CodeSniffer VCS reports due to unescaped filename concatenation in popen() calls.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-78\n- **Attack Vector**: Local\n- **CVSS Score**: 7.3\n- **EPSS Score**: Not established\n- **Impact**: Arbitrary Code Execution\n- **Exploit Status**: Proof-of-Concept\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- PHP_CodeSniffer\n- **PHP_CodeSniffer**: < 3.13.6 (Fixed in: `3.13.6`)\n- **PHP_CodeSniffer**: >= 4.0.0, < 4.0.2 (Fixed in: `4.0.2`)\n\n## Mitigation\n\n- Upgrade to PHP_CodeSniffer 3.13.6 or 4.0.2 to safely escape arguments.\n- Avoid executing PHP_CodeSniffer with blame reports enabled (--report=Gitblame, --report=Hgblame, --report=Svnblame) on untrusted repositories.\n- Implement pre-commit or pre-scan sanitization checks in CI pipelines to validate filenames against command metacharacters.\n\n**Remediation Steps:**\n1. Run 'composer update squizlabs/php_codesniffer' in your dependency manifest.\n2. Ensure version constraint resolutions point to 3.13.6+ or 4.0.2+.\n3. Audit CI build definitions and remove VCS blame reporting flags until software is patched.\n4. Configure pipeline scanners to block filenames containing characters like '$', '`', ';', and '|'.\n\n## References\n\n- [CVE-2026-67434 Record](https://www.cve.org/CVERecord?id=CVE-2026-67434)\n- [GitHub Security Advisory GHSA-hmqg-cxww-wqhq](https://github.com/PHPCSStandards/PHP_CodeSniffer/security/advisories/GHSA-hmqg-cxww-wqhq)\n- [GitHub Pull Request #1473](https://github.com/PHPCSStandards/PHP_CodeSniffer/pull/1473)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-67434) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-07T04:31:19.319540Z"}, {"uuid": "fb3a1794-90e9-4ba0-a8c0-bfbe3bcfd216", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67434", "type": "seen", "source": "https://gist.github.com/FR-Flo/a82f37135301a238c85c6769b4acc044", "content": "## \ud83d\udd17 Companion release\n\nThis release ships alongside the **Marketplace-client (frontend)** release PR:\n\n- https://github.com/Wishibam/Marketplace-client/pull/4256\n\n- **Trello**\n    - [\ud83d\udfe2 Int\u00e9gration des fanions promotionnels \u2014 Ajout image au tag de taxon (MP) (\u00e9volution n\u00b011)](https://trello.com/c/fNNkiR1c/2405-%F0%9F%9F%A2-int%C3%A9gration-des-fanions-promotionnels-ajout-image-au-tag-de-taxon-mp-%C3%A9volution-n11) **\ud83e\udd75 Retour de test**\n        - *:sparkles: feat: fanions de taxon \u2014 images desktop/mobile (MP-api)* [\\#7617](https://github.com/Wishibam/Marketplace-api/pull/7617)\n    - [MP - Cr\u00e9ation / modification m\u00e9thode de livraison - impossible de save](https://trello.com/c/Ud1DRxgj/2407-mp-cr%C3%A9ation-modification-m%C3%A9thode-de-livraison-impossible-de-save) **\ud83e\udd75 Retour de test**\n        - *:bug: MP Fix Dpd class, file and discriminator name* [\\#7757](https://github.com/Wishibam/Marketplace-api/pull/7757)\n    - [\ud83d\ude84 Commande exp\u00e9di\u00e9e : l'interface part trop vite et garde l'ancien statut](https://trello.com/c/6QmFnpyb/2418-%F0%9F%9A%84-commande-exp%C3%A9di%C3%A9e-linterface-part-trop-vite-et-garde-lancien-statut) **\ud83e\udd75 Retour de test**\n        - *:sparkles: OMS order, add \"inProcessing\" flag* [\\#7797](https://github.com/Wishibam/Marketplace-api/pull/7797)\n    - [MP - Sur le marchand (listing & d\u00e9tails), mettre un lien qui redirige directement vers le marchand en front](https://trello.com/c/Z136lbnm/1296-mp-sur-le-marchand-listing-d%C3%A9tails-mettre-un-lien-qui-redirige-directement-vers-le-marchand-en-front) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *:sparkles: Add retailer eshop link* [\\#7822](https://github.com/Wishibam/Marketplace-api/pull/7822)\n    - [Tag - Ajout du champ \"Visibilit\u00e9\" c\u00f4t\u00e9 MP](https://trello.com/c/zPFP31T9/2398-tag-ajout-du-champ-visibilit%C3%A9-c%C3%B4t%C3%A9-mp) **\u2600\ufe0fIn review**\n        - *:sparkles: Add tag visibility field to retailer corner and category* [\\#7831](https://github.com/Wishibam/Marketplace-api/pull/7831)\n \n- **Misc**\n    - *:bug: fix: reset receipt cache between export Messenger messages* [\\#7791](https://github.com/Wishibam/Marketplace-api/pull/7791)\n    - *feat(shipping-method): expose the default return method flag on the API* [\\#7793](https://github.com/Wishibam/Marketplace-api/pull/7793)\n    - *:sparkles: feat: resync a single retailer in the live merchandising indices* [\\#7808](https://github.com/Wishibam/Marketplace-api/pull/7808)\n    - *:bug: WMS Log Message Container identifier* [\\#7810](https://github.com/Wishibam/Marketplace-api/pull/7810)\n    - *:bug: fix: resync-retailer scroll rejected by ES8 (size param)* [\\#7820](https://github.com/Wishibam/Marketplace-api/pull/7820)\n    - *feat(mcp): add MCP server walking skeleton with list\\_organizations* [\\#7823](https://github.com/Wishibam/Marketplace-api/pull/7823)\n    - *refactor(mcp): extract logic from ImportAction, RetailerNormalizer and RankProduct* [\\#7824](https://github.com/Wishibam/Marketplace-api/pull/7824)\n    - *:sparkles: feat: compute product scoring on the fly (service + ES)* [\\#7825](https://github.com/Wishibam/Marketplace-api/pull/7825)\n    - *:sparkles: feat: raise the ES pagination window beyond 10k documents* [\\#7826](https://github.com/Wishibam/Marketplace-api/pull/7826)\n    - *feat(merchandising): supporter les tris du listing produit sur POST /merchandising* [\\#7827](https://github.com/Wishibam/Marketplace-api/pull/7827)\n    - *feat(merchandising): actions de masse asynchrones avec lock par organisation* [\\#7828](https://github.com/Wishibam/Marketplace-api/pull/7828)\n    - *Merge feat/mcp-walking-skeleton (simulate #7823 merge)* [\\#7832](https://github.com/Wishibam/Marketplace-api/pull/7832)\n    - *feat(product-list): pipeline batch pour les actions de masse des listes produits* [\\#7833](https://github.com/Wishibam/Marketplace-api/pull/7833)\n    - *feat(mcp): Add OAuth discovery* [\\#7834](https://github.com/Wishibam/Marketplace-api/pull/7834)\n    - *:arrow\\_up: deps: bump mcp/sdk to 0.7.1 (CVE-2026-53965)* [\\#7838](https://github.com/Wishibam/Marketplace-api/pull/7838)\n    - *:bug: fix: guard against null option name/value in CSV export* [\\#7841](https://github.com/Wishibam/Marketplace-api/pull/7841)\n \n- **D\u00e9j\u00e0 en production**\n    - *:arrow\\_up: deps: bump php\\_codesniffer to 4.0.4 (CVE-2026-67434)* [\\#7817](https://github.com/Wishibam/Marketplace-api/pull/7817)\n    - *feat: allow max product variation at 380* [\\#7829](https://github.com/Wishibam/Marketplace-api/pull/7829)\n    - *:bug: fix: stop gating unmapped counters on product validity* [\\#7835](https://github.com/Wishibam/Marketplace-api/pull/7835)\n    - *:bug: fix: repair missing-mapping counters behind the retailer list icon* [\\#7837](https://github.com/Wishibam/Marketplace-api/pull/7837)\n\n## POST MEP\n\n### [PR #7826](https://github.com/Wishibam/Marketplace-api/pull/7826) \u2014 :sparkles: feat: raise the ES pagination window beyond 10k documents\n\n```\n  curl -X PUT \"http://localhost:9200/prod_product_*/_settings\" -H 'Content-Type: application/json' -d '{\"index\":{\"max_result_window\":200000}}'\n  curl -X PUT \"http://localhost:9200/prod_variation_*/_settings\" -H 'Content-Type: application/json' -d '{\"index\":{\"max_result_window\":500000}}'\n\n  V\u00e9rifier :\n  curl \"http://localhost:9200/prod_product_*/_settings/index.max_result_window?flat_settings\"\n  curl \"http://localhost:9200/prod_variation_*/_settings/index.max_result_window?flat_settings\"\n```\n\n### [PR #7828](https://github.com/Wishibam/Marketplace-api/pull/7828) \u2014 feat(merchandising): actions de masse asynchrones avec lock par organisation\n\n - ansible en prod \u00e7a https://github.com/Wishibam/Infrastructure/pull/467\n", "creation_timestamp": "2026-08-19T08:01:24.283380Z"}, {"uuid": "29cba9f9-7080-4e20-942e-f875216753c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67434", "type": "seen", "source": "https://gist.github.com/jbourdin/a087d0065d0d169bad9818d040551abd", "content": "- **Trello**\n    - [Helsinki : Portail de retour - Sylius - int\u00e9gration front du portail de retour](https://trello.com/c/mhcc7YaC/2401-helsinki-portail-de-retour-sylius-int%C3%A9gration-front-du-portail-de-retour) **TEMP - EPIC - Droit de r\u00e9tractation**\n        - *feat(helsinki): Add return portal to Helsinki order details* [\\#11757](https://github.com/Wishibam/Ecommerce-sylius/pull/11757)\n    - [\\[Migration\\]\\[A.2\\] D\u00e9mant\u00e8lement Setono Analytics + Tag-Bag](https://trello.com/c/uJN0Gkiz/3856-migrationa2-d%C3%A9mant%C3%A8lement-setono-analytics-tag-bag) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore(migration): internalize setono analytics + tag-bag as src/Component \\[A.2\\]* [\\#11846](https://github.com/Wishibam/Ecommerce-sylius/pull/11846)\n    - [\\[Migration\\]\\[A.4.1\\] Internaliser bitbag/wishlist-plugin dans src/Component/Wishlist](https://trello.com/c/U9dQGx1l/3863-migrationa41-internaliser-bitbag-wishlist-plugin-dans-src-component-wishlist) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: internalize bitbag/wishlist-plugin \\[A.4.1\\]* [\\#11856](https://github.com/Wishibam/Ecommerce-sylius/pull/11856)\n    - [\\[Migration\\]\\[A.4.2/A.4.3\\] Internaliser bring & deep-link dans src/Component](https://trello.com/c/RsLN5SNT/3864-migrationa42-a43-internaliser-bring-deep-link-dans-src-component) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: internalize bring & deep-link plugins \\[A.4.2, A.4.3\\]* [\\#11861](https://github.com/Wishibam/Ecommerce-sylius/pull/11861)\n    - [\\[Migration\\]\\[A.5\\] Bumps frontend \u00ab safe \u00bb + suppression des packages morts](https://trello.com/c/vI6k61gt/3873-migrationa5-bumps-frontend-safe-suppression-des-packages-morts) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: bump safe frontend deps + prune dead packages \\[A.5\\]* [\\#11875](https://github.com/Wishibam/Ecommerce-sylius/pull/11875)\n    - [\\[Migration\\]\\[A.6\\] Pr\u00e9paration Doctrine pour DBAL 3 (monkey-patch migrations)](https://trello.com/c/8mdyVMwg/3880-migrationa6-pr%C3%A9paration-doctrine-pour-dbal-3-monkey-patch-migrations) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: replace Doctrine migration monkey-patch for DBAL 3 \\[A.6\\]* [\\#11893](https://github.com/Wishibam/Ecommerce-sylius/pull/11893)\n    - [TVO - Express checkout : adresse tronqu\u00e9e \u2014 nom de rue perdu (Apple Pay line1/line2)](https://trello.com/c/dIrl0I1a/3884-tvo-express-checkout-adresse-tronqu%C3%A9e-nom-de-rue-perdu-apple-pay-line1-line2) **\ud83e\udd13 Testing**\n        - *:bug: fix: join express checkout wallet address line1/line2 into street* [\\#11914](https://github.com/Wishibam/Ecommerce-sylius/pull/11914)\n    - [\\[P0\\] Express checkout : re-v\u00e9rifier le montant du PaymentIntent au complete](https://trello.com/c/qJdTR9Jc/3885-p0-express-checkout-re-v%C3%A9rifier-le-montant-du-paymentintent-au-complete) **\ud83d\udc8e In Review**\n        - *:bug: fix: verify express checkout PaymentIntent amount at completion* [\\#11916](https://github.com/Wishibam/Ecommerce-sylius/pull/11916)\n    - [\\[P0\\] Webhook Stripe : rembourser r\u00e9ellement les charges des commandes refus\u00e9es/annul\u00e9es](https://trello.com/c/fyJeMD3L/3886-p0-webhook-stripe-rembourser-r%C3%A9ellement-les-charges-des-commandes-refus%C3%A9es-annul%C3%A9es) **\ud83d\udc8e In Review**\n        - *:bug: fix: refund Stripe charges captured for refused or cancelled orders* [\\#11918](https://github.com/Wishibam/Ecommerce-sylius/pull/11918)\n    - [\\[P1\\] Express checkout : pinner explicitement les wallets autoris\u00e9s (quick win)](https://trello.com/c/tEpmPM9l/3890-p1-express-checkout-pinner-explicitement-les-wallets-autoris%C3%A9s-quick-win) **\ud83e\udd13 Testing**\n        - *:bug: fix: restrict express checkout wallets to an explicit allowlist* [\\#11919](https://github.com/Wishibam/Ecommerce-sylius/pull/11919)\n    - [\\[P0\\] Express checkout : commandes \u00e0 fonds captur\u00e9s supprim\u00e9es par la purge des carts + cha\u00eene d'abort morte](https://trello.com/c/1Wo7zGP5/3887-p0-express-checkout-commandes-%C3%A0-fonds-captur%C3%A9s-supprim%C3%A9es-par-la-purge-des-carts-cha%C3%AEne-dabort-morte) **\ud83d\udc8e In Review**\n        - *:bug: fix: protect express checkout captured-funds carts from the purge* [\\#11920](https://github.com/Wishibam/Ecommerce-sylius/pull/11920)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f \u203c\ufe0f Nouveau Feeds - Faire tourner tous les nouveaux feeds sur toutes les preprods/prods](https://trello.com/c/Kr8UhDAv/3910-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-%EF%B8%8F-nouveau-feeds-faire-tourner-tous-les-nouveaux-feeds-sur-toutes-les-preprods-prods) **\ud83e\udee1 To Do JC**\n        - *:sparkles: feat: drive-to-store feeds parity with legacy Setono* [\\#11979](https://github.com/Wishibam/Ecommerce-sylius/pull/11979)\n    - [Helsinki \u2014 Funnel checkout GA4 vide : \u00e9v\u00e9nements e-commerce manquants/incomplets](https://trello.com/c/j0yQGSFm/3921-helsinki-funnel-checkout-ga4-vide-%C3%A9v%C3%A9nements-e-commerce-manquants-incomplets) **\ud83c\udf44 Ready for testing**\n        - *:bug: fix: \u00e9mettre le funnel checkout GA4 complet* [\\#11980](https://github.com/Wishibam/Ecommerce-sylius/pull/11980)\n        - *:bug: fix: \u00e9mettre add\\_payment\\_info quand l'\u00e9tape de paiement est saut\u00e9e* [\\#12014](https://github.com/Wishibam/Ecommerce-sylius/pull/12014)\n    - [Min-height pages React](https://trello.com/c/Rti8eFXb/3919-min-height-pages-react) **\ud83c\udf89 A MEP**\n        - *:bug: fix: add min-height on React pages to prevent footer flash* [\\#11987](https://github.com/Wishibam/Ecommerce-sylius/pull/11987)\n    - [\u26a0\ufe0f action preprod/prod \u26a0\ufe0f \ud83d\uded2 Refonte Checkout #1 \u2014 La page Panier change de garde-robe](https://trello.com/c/qxdtlZxk/3851-%E2%9A%A0%EF%B8%8F-action-preprod-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%9B%92-refonte-checkout-1-la-page-panier-change-de-garde-robe) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): cart page QA feedback round* [\\#11990](https://github.com/Wishibam/Ecommerce-sylius/pull/11990)\n    - [Fix : TypeError trim() null sur les share descriptions de channel (admin)](https://trello.com/c/o47Ek1Fo/3924-fix-typeerror-trim-null-sur-les-share-descriptions-de-channel-admin) **\ud83e\udd16 Testing tech**\n        - *:bug: fix: guard against null share descriptions in channel setter* [\\#11992](https://github.com/Wishibam/Ecommerce-sylius/pull/11992)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f \ud83d\udce6\ud83c\udf0d Mondial Relay sans fronti\u00e8res \u2014 points relais UE (v1 TVO)](https://trello.com/c/4X0QYlQ5/3918-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%93%A6%F0%9F%8C%8D-mondial-relay-sans-fronti%C3%A8res-points-relais-ue-v1-tvo) **\ud83d\udc8e In Review**\n        - *:sparkles: feat(mondial-relay): relay search follows the buyer's country* [\\#11994](https://github.com/Wishibam/Ecommerce-sylius/pull/11994)\n    - [\ud83d\udccd Refonte Checkout \u2014 La suggestion d'adresse qui fait mouche](https://trello.com/c/vF0T1FZU/3860-%F0%9F%93%8D-refonte-checkout-la-suggestion-dadresse-qui-fait-mouche) **\ud83d\ude80 To Do Vincent**\n        - *:bug: fix(tvo): address suggestion QA feedback round* [\\#11995](https://github.com/Wishibam/Ecommerce-sylius/pull/11995)\n        - *:bug: fix(tvo): keep the manual phone flag choice made on an empty field* [\\#12058](https://github.com/Wishibam/Ecommerce-sylius/pull/12058)\n    - [\ud83c\udf5e Refonte Checkout \u2014 Des toasts tout chauds pour les messages syst\u00e8me](https://trello.com/c/N70pstGO/3861-%F0%9F%8D%9E-refonte-checkout-des-toasts-tout-chauds-pour-les-messages-syst%C3%A8me) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): checkout toasts QA feedback round* [\\#11996](https://github.com/Wishibam/Ecommerce-sylius/pull/11996)\n    - [TVO- mail order\\_open\\_return\\_withdrawn -remplacement de tag](https://trello.com/c/NK5CnCM2/3883-tvo-mail-orderopenreturnwithdrawn-remplacement-de-tag) **\ud83c\udf89 A MEP**\n        - *\ud83d\udc1b fix: orange \"return in progress\" badge on TVO withdrawal email* [\\#12000](https://github.com/Wishibam/Ecommerce-sylius/pull/12000)\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\ude9a Refonte Checkout #3 \u2014 Le Mode de livraison prend la route](https://trello.com/c/NDSNOimu/3854-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%9A%9A-refonte-checkout-3-le-mode-de-livraison-prend-la-route) **\ud83e\udd13 Testing**\n        - *:sparkles: feat(tvo): React checkout select shipping step (P3)* [\\#12011](https://github.com/Wishibam/Ecommerce-sylius/pull/12011)\n    - [Helsinki - Correction bug d'affichage en finnois en version mobile](https://trello.com/c/f9V6mA6z/3686-helsinki-correction-bug-daffichage-en-finnois-en-version-mobile) **\ud83c\udf89 A MEP**\n        - *:bug: fix: reduce Helsinki posts carousel title on mobile* [\\#12017](https://github.com/Wishibam/Ecommerce-sylius/pull/12017)\n    - [\ud83c\udfbd \\[IS\\] Footer : \u00ab Notre accompagnement \u00bb devient \u00ab Nos services \u00bb et raccroche son lien](https://trello.com/c/H2X0XtqH/3932-%F0%9F%8E%BD-is-footer-notre-accompagnement-devient-nos-services-et-raccroche-son-lien) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: rename the Intersport footer column to \u00ab Nos services \u00bb and unlink its title* [\\#12026](https://github.com/Wishibam/Ecommerce-sylius/pull/12026)\n        - *:rewind: revert: Intersport footer \u00ab Nos services \u00bb (wrong target branch)* [\\#12037](https://github.com/Wishibam/Ecommerce-sylius/pull/12037)\n    - [Batavia - Probl\u00e8me sur l'affichage des variations](https://trello.com/c/MY6aNjLj/3931-batavia-probl%C3%A8me-sur-laffichage-des-variations) **\ud83e\udd13 Testing**\n        - *:bug: fix: deep-link Batavia PLP cards to the displayed color variant* [\\#12027](https://github.com/Wishibam/Ecommerce-sylius/pull/12027)\n    - [Batavia \u2014 Mails \u00ab produit indisponible \u00bb non re\u00e7us par les clients](https://trello.com/c/YLHFxnVs/3933-batavia-mails-produit-indisponible-non-re%C3%A7us-par-les-clients) **\ud83c\udf89 A MEP**\n        - *:bug: fix: validate admin email templates and log real send outcomes* [\\#12035](https://github.com/Wishibam/Ecommerce-sylius/pull/12035)\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\udcb3 Refonte Checkout #4 \u2014 Le Mode de paiement passe \u00e0 la caisse](https://trello.com/c/vDcvKX88/3855-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%92%B3-refonte-checkout-4-le-mode-de-paiement-passe-%C3%A0-la-caisse) **\ud83e\udd13 Testing**\n        - *:sparkles: feat(tvo): rebuild the checkout payment step and success page in React* [\\#12051](https://github.com/Wishibam/Ecommerce-sylius/pull/12051)\n    - [Intersport - Bug d'affichage images box produit](https://trello.com/c/mOO6EBx1/3936-intersport-bug-daffichage-images-box-produit) **\ud83c\udf89 A MEP**\n        - *:bug: \\[via\\] fix: styles mobiles des pages mot de passe oubli\u00e9/reset* [\\#12055](https://github.com/Wishibam/Ecommerce-sylius/pull/12055)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f Feed : Ajouter le flux facebook TVO](https://trello.com/c/iXjTokqz/3937-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-feed-ajouter-le-flux-facebook-tvo) **\ud83e\udd16 Testing tech**\n        - *:sparkles: feat: porter le flux facebook\\_catalog vers le nouveau composant* [\\#12060](https://github.com/Wishibam/Ecommerce-sylius/pull/12060)\n \n- **Misc**\n    - *:sparkles: feat: PushDispatcher + adaptateur FCM (push app TVO)* [\\#11917](https://github.com/Wishibam/Ecommerce-sylius/pull/11917)\n    - *style(withdrawal): make the withdrawal button theme-colored and not f\u2026* [\\#11951](https://github.com/Wishibam/Ecommerce-sylius/pull/11951)\n    - *:zap: perf: Batavia PLP \u2014 ES result cache, key batching, menu cache* [\\#11963](https://github.com/Wishibam/Ecommerce-sylius/pull/11963)\n    - *:wrench: chore: outillage pour worktrees parall\u00e8les (front isol\u00e9 par projet)* [\\#11986](https://github.com/Wishibam/Ecommerce-sylius/pull/11986)\n    - *:wrench: chore: bump php\\_codesniffer en 3.13.6 (CVE-2026-67434, CI rouge)* [\\#12008](https://github.com/Wishibam/Ecommerce-sylius/pull/12008)\n    - *:sparkles: feat: push app TVO \u2014 envoi asynchrone + badge (3.A.5 + 3.A.6)* [\\#12022](https://github.com/Wishibam/Ecommerce-sylius/pull/12022)\n    - *:sparkles: feat: badge unreadPushCount de bout en bout (app TVO)* [\\#12025](https://github.com/Wishibam/Ecommerce-sylius/pull/12025)\n    - *:sparkles: feat: compteur badge dans data des push (app TVO)* [\\#12028](https://github.com/Wishibam/Ecommerce-sylius/pull/12028)\n    - *:sparkles: feat: push \u00ab commande confirm\u00e9e \u00bb (app TVO)* [\\#12031](https://github.com/Wishibam/Ecommerce-sylius/pull/12031)\n    - *:sparkles: feat: push \u00ab commande exp\u00e9di\u00e9e \u00bb (app TVO)* [\\#12040](https://github.com/Wishibam/Ecommerce-sylius/pull/12040)\n    - *feat(push): notification de remboursement de commande (TVO 3.B.3)* [\\#12041](https://github.com/Wishibam/Ecommerce-sylius/pull/12041)\n    - *fix(push): durcir l'envoi FCM \u2014 timeouts born\u00e9s + retry effectif (TVO 3.A.7)* [\\#12042](https://github.com/Wishibam/Ecommerce-sylius/pull/12042)\n    - *test(featured-content): d\u00e9-flakifier testProgramDisableDelay (tol\u00e9rance sur le d\u00e9lai)* [\\#12044](https://github.com/Wishibam/Ecommerce-sylius/pull/12044)\n    - *feat(push): notification de retour en stock (TVO 3.B.4)* [\\#12045](https://github.com/Wishibam/Ecommerce-sylius/pull/12045)\n    - *feat(push): notification de baisse de prix wishlist (TVO 3.B.5)* [\\#12049](https://github.com/Wishibam/Ecommerce-sylius/pull/12049)\n    - *:bug: fix(megamenu): \u00e9largir le lien \u00e0 2048 caract\u00e8res* [\\#12050](https://github.com/Wishibam/Ecommerce-sylius/pull/12050)\n    - *feat(push): relance push des paniers abandonn\u00e9s (TVO 3.B.6)* [\\#12053](https://github.com/Wishibam/Ecommerce-sylius/pull/12053)\n \n- **D\u00e9j\u00e0 en production**\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\udc1b Fix r\u00e9indexation ES bloqu\u00e9e \u2014 \u00ab immense term \u00bb sur attribut trop long (Intersport)](https://trello.com/c/iD6idW0v/3915-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%90%9B-fix-r%C3%A9indexation-es-bloqu%C3%A9e-immense-term-sur-attribut-trop-long-intersport) **MEP Ao\u00fbt**\n        - *:bug: fix: r\u00e9indexation ES bloqu\u00e9e par un attribut trop long (immense term)* [\\#11972](https://github.com/Wishibam/Ecommerce-sylius/pull/11972)\n    - [TVO - Les recommandations produits ne remontent aucun produit sur la fiche produit](https://trello.com/c/lw3SYgNG/3926-tvo-les-recommandations-produits-ne-remontent-aucun-produit-sur-la-fiche-produit) **MEP Ao\u00fbt**\n        - *:bug: fix(search): match the indexed color value in recommendations* [\\#12004](https://github.com/Wishibam/Ecommerce-sylius/pull/12004)\n    - [\u2615\ufe0f \\[Batavia\\] Frais de retour : \u20ac3,25 \u2192 \u20ac3,95 (et on passe le texte en traduction)](https://trello.com/c/P4vec3cz/3934-%E2%98%95%EF%B8%8F-batavia-frais-de-retour-%E2%82%AC325-%E2%86%92-%E2%82%AC395-et-on-passe-le-texte-en-traduction) **MEP Ao\u00fbt**\n        - *:bug: fix: Batavia return cost 3,95 and move the line to a translation* [\\#12034](https://github.com/Wishibam/Ecommerce-sylius/pull/12034)\n    - *:bug: fix: render flag emojis as SVG icons, not OS emoji glyphs* [\\#11981](https://github.com/Wishibam/Ecommerce-sylius/pull/11981)\n    - *:bug: fix: apply the flag icon filter to the remaining menu renderings* [\\#11982](https://github.com/Wishibam/Ecommerce-sylius/pull/11982)", "creation_timestamp": "2026-08-19T08:03:56.720141Z"}, {"uuid": "0e54074e-b1d2-4a71-baf9-2df33e238515", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67434", "type": "seen", "source": "https://gist.github.com/FR-Flo/a3cc74f208df80c1d7f4b5b3e98e4f77", "content": "## \ud83d\udd17 Companion release\n\nThis release ships alongside the **Marketplace-client (frontend)** release PR:\n\n- https://github.com/Wishibam/Marketplace-client/pull/4256\n\n- **Trello**\n    - [Attributs required par cat\u00e9gorie](https://trello.com/c/2loCszpt/1854-attributs-required-par-cat%C3%A9gorie) **\u2600\ufe0fIn review**\n        - *Feat: Makes attributes required or not per categories* [\\#7474](https://github.com/Wishibam/Marketplace-api/pull/7474)\n    - [\ud83d\udfe2 Int\u00e9gration des fanions promotionnels \u2014 Ajout image au tag de taxon (MP) (\u00e9volution n\u00b011)](https://trello.com/c/fNNkiR1c/2405-%F0%9F%9F%A2-int%C3%A9gration-des-fanions-promotionnels-ajout-image-au-tag-de-taxon-mp-%C3%A9volution-n11) **\ud83e\udd75 Retour de test**\n        - *:sparkles: feat: fanions de taxon \u2014 images desktop/mobile (MP-api)* [\\#7617](https://github.com/Wishibam/Marketplace-api/pull/7617)\n    - [MP - Cr\u00e9ation / modification m\u00e9thode de livraison - impossible de save](https://trello.com/c/Ud1DRxgj/2407-mp-cr%C3%A9ation-modification-m%C3%A9thode-de-livraison-impossible-de-save) **\ud83e\udd75 Retour de test**\n        - *:bug: MP Fix Dpd class, file and discriminator name* [\\#7757](https://github.com/Wishibam/Marketplace-api/pull/7757)\n    - [\ud83d\ude84 Commande exp\u00e9di\u00e9e : l'interface part trop vite et garde l'ancien statut](https://trello.com/c/6QmFnpyb/2418-%F0%9F%9A%84-commande-exp%C3%A9di%C3%A9e-linterface-part-trop-vite-et-garde-lancien-statut) **\ud83e\udd75 Retour de test**\n        - *:sparkles: OMS order, add \"inProcessing\" flag* [\\#7797](https://github.com/Wishibam/Marketplace-api/pull/7797)\n    - [MP - Sur le marchand (listing & d\u00e9tails), mettre un lien qui redirige directement vers le marchand en front](https://trello.com/c/Z136lbnm/1296-mp-sur-le-marchand-listing-d%C3%A9tails-mettre-un-lien-qui-redirige-directement-vers-le-marchand-en-front) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *:sparkles: Add retailer eshop link* [\\#7822](https://github.com/Wishibam/Marketplace-api/pull/7822)\n    - [Tag - Ajout du champ \"Visibilit\u00e9\" c\u00f4t\u00e9 MP](https://trello.com/c/zPFP31T9/2398-tag-ajout-du-champ-visibilit%C3%A9-c%C3%B4t%C3%A9-mp) **\u2600\ufe0fIn review**\n        - *:sparkles: Add tag visibility field to retailer corner and category* [\\#7831](https://github.com/Wishibam/Marketplace-api/pull/7831)\n \n- **Misc**\n    - *:bug: fix: reset receipt cache between export Messenger messages* [\\#7791](https://github.com/Wishibam/Marketplace-api/pull/7791)\n    - *feat(shipping-method): expose the default return method flag on the API* [\\#7793](https://github.com/Wishibam/Marketplace-api/pull/7793)\n    - *:sparkles: feat: resync a single retailer in the live merchandising indices* [\\#7808](https://github.com/Wishibam/Marketplace-api/pull/7808)\n    - *:bug: WMS Log Message Container identifier* [\\#7810](https://github.com/Wishibam/Marketplace-api/pull/7810)\n    - *:bug: fix: resync-retailer scroll rejected by ES8 (size param)* [\\#7820](https://github.com/Wishibam/Marketplace-api/pull/7820)\n    - *feat(mcp): add MCP server walking skeleton with list\\_organizations* [\\#7823](https://github.com/Wishibam/Marketplace-api/pull/7823)\n    - *refactor(mcp): extract logic from ImportAction, RetailerNormalizer and RankProduct* [\\#7824](https://github.com/Wishibam/Marketplace-api/pull/7824)\n    - *:sparkles: feat: compute product scoring on the fly (service + ES)* [\\#7825](https://github.com/Wishibam/Marketplace-api/pull/7825)\n    - *:sparkles: feat: raise the ES pagination window beyond 10k documents* [\\#7826](https://github.com/Wishibam/Marketplace-api/pull/7826)\n    - *feat(merchandising): supporter les tris du listing produit sur POST /merchandising* [\\#7827](https://github.com/Wishibam/Marketplace-api/pull/7827)\n    - *feat(merchandising): actions de masse asynchrones avec lock par organisation* [\\#7828](https://github.com/Wishibam/Marketplace-api/pull/7828)\n    - *Merge feat/mcp-walking-skeleton (simulate #7823 merge)* [\\#7832](https://github.com/Wishibam/Marketplace-api/pull/7832)\n    - *feat(product-list): pipeline batch pour les actions de masse des listes produits* [\\#7833](https://github.com/Wishibam/Marketplace-api/pull/7833)\n    - *feat(mcp): Add OAuth discovery* [\\#7834](https://github.com/Wishibam/Marketplace-api/pull/7834)\n    - *:arrow\\_up: deps: bump mcp/sdk to 0.7.1 (CVE-2026-53965)* [\\#7838](https://github.com/Wishibam/Marketplace-api/pull/7838)\n    - *:bug: fix: guard against null option name/value in CSV export* [\\#7841](https://github.com/Wishibam/Marketplace-api/pull/7841)\n \n- **D\u00e9j\u00e0 en production**\n    - *:arrow\\_up: deps: bump php\\_codesniffer to 4.0.4 (CVE-2026-67434)* [\\#7817](https://github.com/Wishibam/Marketplace-api/pull/7817)\n    - *feat: allow max product variation at 380* [\\#7829](https://github.com/Wishibam/Marketplace-api/pull/7829)\n    - *:bug: fix: stop gating unmapped counters on product validity* [\\#7835](https://github.com/Wishibam/Marketplace-api/pull/7835)\n    - *:bug: fix: repair missing-mapping counters behind the retailer list icon* [\\#7837](https://github.com/Wishibam/Marketplace-api/pull/7837)\n\n## POST MEP\n\n### [PR #7826](https://github.com/Wishibam/Marketplace-api/pull/7826) \u2014 :sparkles: feat: raise the ES pagination window beyond 10k documents\n\n```\n  curl -X PUT \"http://localhost:9200/prod_product_*/_settings\" -H 'Content-Type: application/json' -d '{\"index\":{\"max_result_window\":200000}}'\n  curl -X PUT \"http://localhost:9200/prod_variation_*/_settings\" -H 'Content-Type: application/json' -d '{\"index\":{\"max_result_window\":500000}}'\n\n  V\u00e9rifier :\n  curl \"http://localhost:9200/prod_product_*/_settings/index.max_result_window?flat_settings\"\n  curl \"http://localhost:9200/prod_variation_*/_settings/index.max_result_window?flat_settings\"\n```\n\n### [PR #7828](https://github.com/Wishibam/Marketplace-api/pull/7828) \u2014 feat(merchandising): actions de masse asynchrones avec lock par organisation\n\n - ansible en prod \u00e7a https://github.com/Wishibam/Infrastructure/pull/467\n", "creation_timestamp": "2026-08-19T08:25:35.115359Z"}, {"uuid": "87f1b067-d74e-4350-aa00-fb973e916150", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67434", "type": "seen", "source": "https://gist.github.com/jbourdin/daf0e8351401644363100b10e9237e4e", "content": "- **Trello**\n    - [Helsinki : Portail de retour - Sylius - int\u00e9gration front du portail de retour](https://trello.com/c/mhcc7YaC/2401-helsinki-portail-de-retour-sylius-int%C3%A9gration-front-du-portail-de-retour) **TEMP - EPIC - Droit de r\u00e9tractation**\n        - *feat(helsinki): Add return portal to Helsinki order details* [\\#11757](https://github.com/Wishibam/Ecommerce-sylius/pull/11757)\n    - [TVO - Fiche produit - Ajout des blocs \"Mati\u00e8re et entretien\" & \"Caract\u00e9ristiques\"](https://trello.com/c/AbsKmIzk/3633-tvo-fiche-produit-ajout-des-blocs-mati%C3%A8re-et-entretien-caract%C3%A9ristiques) **\ud83c\udf44 Ready for testing**\n        - *feat(tvo): add Mati\u00e8re et entretien & Caract\u00e9ristiques blocks on PDP* [\\#11812](https://github.com/Wishibam/Ecommerce-sylius/pull/11812)\n    - [\\[Migration\\]\\[A.2\\] D\u00e9mant\u00e8lement Setono Analytics + Tag-Bag](https://trello.com/c/uJN0Gkiz/3856-migrationa2-d%C3%A9mant%C3%A8lement-setono-analytics-tag-bag) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore(migration): internalize setono analytics + tag-bag as src/Component \\[A.2\\]* [\\#11846](https://github.com/Wishibam/Ecommerce-sylius/pull/11846)\n    - [\\[Migration\\]\\[A.4.1\\] Internaliser bitbag/wishlist-plugin dans src/Component/Wishlist](https://trello.com/c/U9dQGx1l/3863-migrationa41-internaliser-bitbag-wishlist-plugin-dans-src-component-wishlist) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: internalize bitbag/wishlist-plugin \\[A.4.1\\]* [\\#11856](https://github.com/Wishibam/Ecommerce-sylius/pull/11856)\n    - [\\[Migration\\]\\[A.4.2/A.4.3\\] Internaliser bring & deep-link dans src/Component](https://trello.com/c/RsLN5SNT/3864-migrationa42-a43-internaliser-bring-deep-link-dans-src-component) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: internalize bring & deep-link plugins \\[A.4.2, A.4.3\\]* [\\#11861](https://github.com/Wishibam/Ecommerce-sylius/pull/11861)\n    - [\\[Migration\\]\\[A.5\\] Bumps frontend \u00ab safe \u00bb + suppression des packages morts](https://trello.com/c/vI6k61gt/3873-migrationa5-bumps-frontend-safe-suppression-des-packages-morts) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: bump safe frontend deps + prune dead packages \\[A.5\\]* [\\#11875](https://github.com/Wishibam/Ecommerce-sylius/pull/11875)\n    - [\\[Migration\\]\\[A.6\\] Pr\u00e9paration Doctrine pour DBAL 3 (monkey-patch migrations)](https://trello.com/c/8mdyVMwg/3880-migrationa6-pr%C3%A9paration-doctrine-pour-dbal-3-monkey-patch-migrations) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: replace Doctrine migration monkey-patch for DBAL 3 \\[A.6\\]* [\\#11893](https://github.com/Wishibam/Ecommerce-sylius/pull/11893)\n    - [TVO - Express checkout : adresse tronqu\u00e9e \u2014 nom de rue perdu (Apple Pay line1/line2)](https://trello.com/c/dIrl0I1a/3884-tvo-express-checkout-adresse-tronqu%C3%A9e-nom-de-rue-perdu-apple-pay-line1-line2) **\ud83e\udd13 Testing**\n        - *:bug: fix: join express checkout wallet address line1/line2 into street* [\\#11914](https://github.com/Wishibam/Ecommerce-sylius/pull/11914)\n    - [\\[P0\\] Express checkout : re-v\u00e9rifier le montant du PaymentIntent au complete](https://trello.com/c/qJdTR9Jc/3885-p0-express-checkout-re-v%C3%A9rifier-le-montant-du-paymentintent-au-complete) **\ud83d\udc8e In Review**\n        - *:bug: fix: verify express checkout PaymentIntent amount at completion* [\\#11916](https://github.com/Wishibam/Ecommerce-sylius/pull/11916)\n    - [\\[P0\\] Webhook Stripe : rembourser r\u00e9ellement les charges des commandes refus\u00e9es/annul\u00e9es](https://trello.com/c/fyJeMD3L/3886-p0-webhook-stripe-rembourser-r%C3%A9ellement-les-charges-des-commandes-refus%C3%A9es-annul%C3%A9es) **\ud83d\udc8e In Review**\n        - *:bug: fix: refund Stripe charges captured for refused or cancelled orders* [\\#11918](https://github.com/Wishibam/Ecommerce-sylius/pull/11918)\n    - [\\[P1\\] Express checkout : pinner explicitement les wallets autoris\u00e9s (quick win)](https://trello.com/c/tEpmPM9l/3890-p1-express-checkout-pinner-explicitement-les-wallets-autoris%C3%A9s-quick-win) **\ud83e\udd13 Testing**\n        - *:bug: fix: restrict express checkout wallets to an explicit allowlist* [\\#11919](https://github.com/Wishibam/Ecommerce-sylius/pull/11919)\n    - [\\[P0\\] Express checkout : commandes \u00e0 fonds captur\u00e9s supprim\u00e9es par la purge des carts + cha\u00eene d'abort morte](https://trello.com/c/1Wo7zGP5/3887-p0-express-checkout-commandes-%C3%A0-fonds-captur%C3%A9s-supprim%C3%A9es-par-la-purge-des-carts-cha%C3%AEne-dabort-morte) **\ud83d\udc8e In Review**\n        - *:bug: fix: protect express checkout captured-funds carts from the purge* [\\#11920](https://github.com/Wishibam/Ecommerce-sylius/pull/11920)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f \u203c\ufe0f Nouveau Feeds - Faire tourner tous les nouveaux feeds sur toutes les preprods/prods](https://trello.com/c/Kr8UhDAv/3910-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-%EF%B8%8F-nouveau-feeds-faire-tourner-tous-les-nouveaux-feeds-sur-toutes-les-preprods-prods) **\ud83e\udee1 To Do JC**\n        - *:sparkles: feat: drive-to-store feeds parity with legacy Setono* [\\#11979](https://github.com/Wishibam/Ecommerce-sylius/pull/11979)\n    - [Helsinki \u2014 Funnel checkout GA4 vide : \u00e9v\u00e9nements e-commerce manquants/incomplets](https://trello.com/c/j0yQGSFm/3921-helsinki-funnel-checkout-ga4-vide-%C3%A9v%C3%A9nements-e-commerce-manquants-incomplets) **\ud83c\udf44 Ready for testing**\n        - *:bug: fix: \u00e9mettre le funnel checkout GA4 complet* [\\#11980](https://github.com/Wishibam/Ecommerce-sylius/pull/11980)\n        - *:bug: fix: \u00e9mettre add\\_payment\\_info quand l'\u00e9tape de paiement est saut\u00e9e* [\\#12014](https://github.com/Wishibam/Ecommerce-sylius/pull/12014)\n    - [FEAT-0006 \u2014 Regroupement des emails d'annulation d'articles](https://trello.com/c/bBiV4jTE/3415-feat-0006-regroupement-des-emails-dannulation-darticles) **\ud83c\udf44 Ready for testing**\n        - *:bug: fix: FEAT-0006 cancellation email grouping QA feedback* [\\#11984](https://github.com/Wishibam/Ecommerce-sylius/pull/11984)\n    - [Min-height pages React](https://trello.com/c/Rti8eFXb/3919-min-height-pages-react) **\ud83c\udf89 A MEP**\n        - *:bug: fix: add min-height on React pages to prevent footer flash* [\\#11987](https://github.com/Wishibam/Ecommerce-sylius/pull/11987)\n    - [SEO - TVO - changement de slug](https://trello.com/c/Gbb2tles/3908-seo-tvo-changement-de-slug) **\ud83c\udf44 Ready for testing**\n        - *:bug: fix: clean up TVO brand page slugs with 301 redirects* [\\#11988](https://github.com/Wishibam/Ecommerce-sylius/pull/11988)\n    - [\u26a0\ufe0f action preprod/prod \u26a0\ufe0f \ud83d\uded2 Refonte Checkout #1 \u2014 La page Panier change de garde-robe](https://trello.com/c/qxdtlZxk/3851-%E2%9A%A0%EF%B8%8F-action-preprod-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%9B%92-refonte-checkout-1-la-page-panier-change-de-garde-robe) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): cart page QA feedback round* [\\#11990](https://github.com/Wishibam/Ecommerce-sylius/pull/11990)\n    - [\u26a0\ufe0f MEP \u26a0\ufe0f\u2b50 Google Customer Reviews sur TVO \u2014 brancher la machine \u00e0 \u00e9toiles](https://trello.com/c/7JA9u85M/3899-%E2%9A%A0%EF%B8%8F-mep-%E2%9A%A0%EF%B8%8F%E2%AD%90-google-customer-reviews-sur-tvo-brancher-la-machine-%C3%A0-%C3%A9toiles) **\ud83c\udf44 Ready for testing**\n        - *:sparkles: feat: TVO Google Customer Reviews \u2014 GTIN produits sur thank you* [\\#11991](https://github.com/Wishibam/Ecommerce-sylius/pull/11991)\n    - [Fix : TypeError trim() null sur les share descriptions de channel (admin)](https://trello.com/c/o47Ek1Fo/3924-fix-typeerror-trim-null-sur-les-share-descriptions-de-channel-admin) **\ud83e\udd16 Testing tech**\n        - *:bug: fix: guard against null share descriptions in channel setter* [\\#11992](https://github.com/Wishibam/Ecommerce-sylius/pull/11992)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f \ud83d\udce6\ud83c\udf0d Mondial Relay sans fronti\u00e8res \u2014 points relais UE (v1 TVO)](https://trello.com/c/4X0QYlQ5/3918-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%93%A6%F0%9F%8C%8D-mondial-relay-sans-fronti%C3%A8res-points-relais-ue-v1-tvo) **\ud83d\udc8e In Review**\n        - *:sparkles: feat(mondial-relay): relay search follows the buyer's country* [\\#11994](https://github.com/Wishibam/Ecommerce-sylius/pull/11994)\n    - [\ud83d\udccd Refonte Checkout \u2014 La suggestion d'adresse qui fait mouche](https://trello.com/c/vF0T1FZU/3860-%F0%9F%93%8D-refonte-checkout-la-suggestion-dadresse-qui-fait-mouche) **\ud83d\ude80 To Do Vincent**\n        - *:bug: fix(tvo): address suggestion QA feedback round* [\\#11995](https://github.com/Wishibam/Ecommerce-sylius/pull/11995)\n        - *:bug: fix(tvo): keep the manual phone flag choice made on an empty field* [\\#12058](https://github.com/Wishibam/Ecommerce-sylius/pull/12058)\n    - [\ud83c\udf5e Refonte Checkout \u2014 Des toasts tout chauds pour les messages syst\u00e8me](https://trello.com/c/N70pstGO/3861-%F0%9F%8D%9E-refonte-checkout-des-toasts-tout-chauds-pour-les-messages-syst%C3%A8me) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): checkout toasts QA feedback round* [\\#11996](https://github.com/Wishibam/Ecommerce-sylius/pull/11996)\n    - [\ud83d\udd00 Refonte TVO : le variant s\u00e9lectionn\u00e9 saute en 1re position au lieu de rester \u00e0 sa place](https://trello.com/c/vQH5uxHz/3904-%F0%9F%94%80-refonte-tvo-le-variant-s%C3%A9lectionn%C3%A9-saute-en-1re-position-au-lieu-de-rester-%C3%A0-sa-place) **\ud83c\udf44 Ready for testing**\n        - *:bug: fix: keep option values in place on overflowing variant axis* [\\#11998](https://github.com/Wishibam/Ecommerce-sylius/pull/11998)\n    - [TVO- mail order\\_open\\_return\\_withdrawn -remplacement de tag](https://trello.com/c/NK5CnCM2/3883-tvo-mail-orderopenreturnwithdrawn-remplacement-de-tag) **\ud83c\udf89 A MEP**\n        - *\ud83d\udc1b fix: orange \"return in progress\" badge on TVO withdrawal email* [\\#12000](https://github.com/Wishibam/Ecommerce-sylius/pull/12000)\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\ude9a Refonte Checkout #3 \u2014 Le Mode de livraison prend la route](https://trello.com/c/NDSNOimu/3854-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%9A%9A-refonte-checkout-3-le-mode-de-livraison-prend-la-route) **\ud83e\udd13 Testing**\n        - *:sparkles: feat(tvo): React checkout select shipping step (P3)* [\\#12011](https://github.com/Wishibam/Ecommerce-sylius/pull/12011)\n    - [Helsinki - Correction bug d'affichage en finnois en version mobile](https://trello.com/c/f9V6mA6z/3686-helsinki-correction-bug-daffichage-en-finnois-en-version-mobile) **\ud83c\udf89 A MEP**\n        - *:bug: fix: reduce Helsinki posts carousel title on mobile* [\\#12017](https://github.com/Wishibam/Ecommerce-sylius/pull/12017)\n    - [A ESTIMER : Google Shopping Feed : ajouter le Outlet Price en cas de promotion](https://trello.com/c/RnEgL53B/3867-a-estimer-google-shopping-feed-ajouter-le-outlet-price-en-cas-de-promotion) **\ud83c\udf44 Ready for testing**\n        - *:sparkles: feat(helsinki): expose the outlet price in the Google Shopping feed* [\\#12020](https://github.com/Wishibam/Ecommerce-sylius/pull/12020)\n    - [\ud83c\udfbd \\[IS\\] Footer : \u00ab Notre accompagnement \u00bb devient \u00ab Nos services \u00bb et raccroche son lien](https://trello.com/c/H2X0XtqH/3932-%F0%9F%8E%BD-is-footer-notre-accompagnement-devient-nos-services-et-raccroche-son-lien) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: rename the Intersport footer column to \u00ab Nos services \u00bb and unlink its title* [\\#12026](https://github.com/Wishibam/Ecommerce-sylius/pull/12026)\n        - *:rewind: revert: Intersport footer \u00ab Nos services \u00bb (wrong target branch)* [\\#12037](https://github.com/Wishibam/Ecommerce-sylius/pull/12037)\n    - [Batavia - Probl\u00e8me sur l'affichage des variations](https://trello.com/c/MY6aNjLj/3931-batavia-probl%C3%A8me-sur-laffichage-des-variations) **\ud83e\udd13 Testing**\n        - *:bug: fix: deep-link Batavia PLP cards to the displayed color variant* [\\#12027](https://github.com/Wishibam/Ecommerce-sylius/pull/12027)\n    - [Batavia \u2014 Mails \u00ab produit indisponible \u00bb non re\u00e7us par les clients](https://trello.com/c/YLHFxnVs/3933-batavia-mails-produit-indisponible-non-re%C3%A7us-par-les-clients) **\ud83c\udf89 A MEP**\n        - *:bug: fix: validate admin email templates and log real send outcomes* [\\#12035](https://github.com/Wishibam/Ecommerce-sylius/pull/12035)\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\udcb3 Refonte Checkout #4 \u2014 Le Mode de paiement passe \u00e0 la caisse](https://trello.com/c/vDcvKX88/3855-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%92%B3-refonte-checkout-4-le-mode-de-paiement-passe-%C3%A0-la-caisse) **\ud83e\udd13 Testing**\n        - *:sparkles: feat(tvo): rebuild the checkout payment step and success page in React* [\\#12051](https://github.com/Wishibam/Ecommerce-sylius/pull/12051)\n    - [Intersport - Bug d'affichage images box produit](https://trello.com/c/mOO6EBx1/3936-intersport-bug-daffichage-images-box-produit) **\ud83c\udf89 A MEP**\n        - *:bug: \\[via\\] fix: styles mobiles des pages mot de passe oubli\u00e9/reset* [\\#12055](https://github.com/Wishibam/Ecommerce-sylius/pull/12055)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f Feed : Ajouter le flux facebook TVO](https://trello.com/c/iXjTokqz/3937-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-feed-ajouter-le-flux-facebook-tvo) **\ud83e\udd16 Testing tech**\n        - *:sparkles: feat: porter le flux facebook\\_catalog vers le nouveau composant* [\\#12060](https://github.com/Wishibam/Ecommerce-sylius/pull/12060)\n \n- **Misc**\n    - *:sparkles: feat: PushDispatcher + adaptateur FCM (push app TVO)* [\\#11917](https://github.com/Wishibam/Ecommerce-sylius/pull/11917)\n    - *style(withdrawal): make the withdrawal button theme-colored and not f\u2026* [\\#11951](https://github.com/Wishibam/Ecommerce-sylius/pull/11951)\n    - *:zap: perf: Batavia PLP \u2014 ES result cache, key batching, menu cache* [\\#11963](https://github.com/Wishibam/Ecommerce-sylius/pull/11963)\n    - *:wrench: chore: outillage pour worktrees parall\u00e8les (front isol\u00e9 par projet)* [\\#11986](https://github.com/Wishibam/Ecommerce-sylius/pull/11986)\n    - *:wrench: chore: bump php\\_codesniffer en 3.13.6 (CVE-2026-67434, CI rouge)* [\\#12008](https://github.com/Wishibam/Ecommerce-sylius/pull/12008)\n    - *:sparkles: feat: push app TVO \u2014 envoi asynchrone + badge (3.A.5 + 3.A.6)* [\\#12022](https://github.com/Wishibam/Ecommerce-sylius/pull/12022)\n    - *:sparkles: feat: badge unreadPushCount de bout en bout (app TVO)* [\\#12025](https://github.com/Wishibam/Ecommerce-sylius/pull/12025)\n    - *:sparkles: feat: compteur badge dans data des push (app TVO)* [\\#12028](https://github.com/Wishibam/Ecommerce-sylius/pull/12028)\n    - *:sparkles: feat: push \u00ab commande confirm\u00e9e \u00bb (app TVO)* [\\#12031](https://github.com/Wishibam/Ecommerce-sylius/pull/12031)\n    - *:sparkles: feat: push \u00ab commande exp\u00e9di\u00e9e \u00bb (app TVO)* [\\#12040](https://github.com/Wishibam/Ecommerce-sylius/pull/12040)\n    - *feat(push): notification de remboursement de commande (TVO 3.B.3)* [\\#12041](https://github.com/Wishibam/Ecommerce-sylius/pull/12041)\n    - *fix(push): durcir l'envoi FCM \u2014 timeouts born\u00e9s + retry effectif (TVO 3.A.7)* [\\#12042](https://github.com/Wishibam/Ecommerce-sylius/pull/12042)\n    - *test(featured-content): d\u00e9-flakifier testProgramDisableDelay (tol\u00e9rance sur le d\u00e9lai)* [\\#12044](https://github.com/Wishibam/Ecommerce-sylius/pull/12044)\n    - *feat(push): notification de retour en stock (TVO 3.B.4)* [\\#12045](https://github.com/Wishibam/Ecommerce-sylius/pull/12045)\n    - *feat(push): notification de baisse de prix wishlist (TVO 3.B.5)* [\\#12049](https://github.com/Wishibam/Ecommerce-sylius/pull/12049)\n    - *:bug: fix(megamenu): \u00e9largir le lien \u00e0 2048 caract\u00e8res* [\\#12050](https://github.com/Wishibam/Ecommerce-sylius/pull/12050)\n    - *feat(push): relance push des paniers abandonn\u00e9s (TVO 3.B.6)* [\\#12053](https://github.com/Wishibam/Ecommerce-sylius/pull/12053)\n \n- **D\u00e9j\u00e0 en production**\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\udc1b Fix r\u00e9indexation ES bloqu\u00e9e \u2014 \u00ab immense term \u00bb sur attribut trop long (Intersport)](https://trello.com/c/iD6idW0v/3915-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%90%9B-fix-r%C3%A9indexation-es-bloqu%C3%A9e-immense-term-sur-attribut-trop-long-intersport) **MEP Ao\u00fbt**\n        - *:bug: fix: r\u00e9indexation ES bloqu\u00e9e par un attribut trop long (immense term)* [\\#11972](https://github.com/Wishibam/Ecommerce-sylius/pull/11972)\n    - [TVO - Les recommandations produits ne remontent aucun produit sur la fiche produit](https://trello.com/c/lw3SYgNG/3926-tvo-les-recommandations-produits-ne-remontent-aucun-produit-sur-la-fiche-produit) **MEP Ao\u00fbt**\n        - *:bug: fix(search): match the indexed color value in recommendations* [\\#12004](https://github.com/Wishibam/Ecommerce-sylius/pull/12004)\n    - [\u2615\ufe0f \\[Batavia\\] Frais de retour : \u20ac3,25 \u2192 \u20ac3,95 (et on passe le texte en traduction)](https://trello.com/c/P4vec3cz/3934-%E2%98%95%EF%B8%8F-batavia-frais-de-retour-%E2%82%AC325-%E2%86%92-%E2%82%AC395-et-on-passe-le-texte-en-traduction) **MEP Ao\u00fbt**\n        - *:bug: fix: Batavia return cost 3,95 and move the line to a translation* [\\#12034](https://github.com/Wishibam/Ecommerce-sylius/pull/12034)\n    - *:bug: fix: render flag emojis as SVG icons, not OS emoji glyphs* [\\#11981](https://github.com/Wishibam/Ecommerce-sylius/pull/11981)\n    - *:bug: fix: apply the flag icon filter to the remaining menu renderings* [\\#11982](https://github.com/Wishibam/Ecommerce-sylius/pull/11982)", "creation_timestamp": "2026-08-19T08:49:42.673882Z"}, {"uuid": "6a9289de-19af-4b15-9b9a-86295a8bc8b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67434", "type": "seen", "source": "https://gist.github.com/jbourdin/22538bcb66d84229f7312161f1bf7f3b", "content": "- **Trello**\n    - [Helsinki : Portail de retour - Sylius - int\u00e9gration front du portail de retour](https://trello.com/c/mhcc7YaC/2401-helsinki-portail-de-retour-sylius-int%C3%A9gration-front-du-portail-de-retour) **TEMP - EPIC - Droit de r\u00e9tractation**\n        - *feat(helsinki): Add return portal to Helsinki order details* [\\#11757](https://github.com/Wishibam/Ecommerce-sylius/pull/11757)\n    - [\u26a0\ufe0fAction prod\u26a0\ufe0f\ud83d\udd14 Refonte TVO : tracking du volet d'alerte \u00ab retour en stock \u00bb](https://trello.com/c/SXyhrSQb/3834-%E2%9A%A0%EF%B8%8Faction-prod%E2%9A%A0%EF%B8%8F%F0%9F%94%94-refonte-tvo-tracking-du-volet-dalerte-retour-en-stock) **\ud83e\udd13 Testing**\n        - *:sparkles: feat: track back-in-stock alert panel usage* [\\#11791](https://github.com/Wishibam/Ecommerce-sylius/pull/11791)\n    - [TVO - Fiche produit - Ajout des blocs \"Mati\u00e8re et entretien\" & \"Caract\u00e9ristiques\"](https://trello.com/c/AbsKmIzk/3633-tvo-fiche-produit-ajout-des-blocs-mati%C3%A8re-et-entretien-caract%C3%A9ristiques) **\ud83c\udf44 Ready for testing**\n        - *feat(tvo): add Mati\u00e8re et entretien & Caract\u00e9ristiques blocks on PDP* [\\#11812](https://github.com/Wishibam/Ecommerce-sylius/pull/11812)\n    - [\\[Migration\\]\\[A.2\\] D\u00e9mant\u00e8lement Setono Analytics + Tag-Bag](https://trello.com/c/uJN0Gkiz/3856-migrationa2-d%C3%A9mant%C3%A8lement-setono-analytics-tag-bag) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore(migration): internalize setono analytics + tag-bag as src/Component \\[A.2\\]* [\\#11846](https://github.com/Wishibam/Ecommerce-sylius/pull/11846)\n    - [\\[Migration\\]\\[A.4.1\\] Internaliser bitbag/wishlist-plugin dans src/Component/Wishlist](https://trello.com/c/U9dQGx1l/3863-migrationa41-internaliser-bitbag-wishlist-plugin-dans-src-component-wishlist) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: internalize bitbag/wishlist-plugin \\[A.4.1\\]* [\\#11856](https://github.com/Wishibam/Ecommerce-sylius/pull/11856)\n    - [\\[Migration\\]\\[A.4.2/A.4.3\\] Internaliser bring & deep-link dans src/Component](https://trello.com/c/RsLN5SNT/3864-migrationa42-a43-internaliser-bring-deep-link-dans-src-component) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: internalize bring & deep-link plugins \\[A.4.2, A.4.3\\]* [\\#11861](https://github.com/Wishibam/Ecommerce-sylius/pull/11861)\n    - [\\[Migration\\]\\[A.5\\] Bumps frontend \u00ab safe \u00bb + suppression des packages morts](https://trello.com/c/vI6k61gt/3873-migrationa5-bumps-frontend-safe-suppression-des-packages-morts) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: bump safe frontend deps + prune dead packages \\[A.5\\]* [\\#11875](https://github.com/Wishibam/Ecommerce-sylius/pull/11875)\n    - [\\[Migration\\]\\[A.6\\] Pr\u00e9paration Doctrine pour DBAL 3 (monkey-patch migrations)](https://trello.com/c/8mdyVMwg/3880-migrationa6-pr%C3%A9paration-doctrine-pour-dbal-3-monkey-patch-migrations) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: replace Doctrine migration monkey-patch for DBAL 3 \\[A.6\\]* [\\#11893](https://github.com/Wishibam/Ecommerce-sylius/pull/11893)\n    - [TVO - Express checkout : adresse tronqu\u00e9e \u2014 nom de rue perdu (Apple Pay line1/line2)](https://trello.com/c/dIrl0I1a/3884-tvo-express-checkout-adresse-tronqu%C3%A9e-nom-de-rue-perdu-apple-pay-line1-line2) **\ud83e\udd13 Testing**\n        - *:bug: fix: join express checkout wallet address line1/line2 into street* [\\#11914](https://github.com/Wishibam/Ecommerce-sylius/pull/11914)\n    - [\\[P0\\] Express checkout : re-v\u00e9rifier le montant du PaymentIntent au complete](https://trello.com/c/qJdTR9Jc/3885-p0-express-checkout-re-v%C3%A9rifier-le-montant-du-paymentintent-au-complete) **\ud83d\udc8e In Review**\n        - *:bug: fix: verify express checkout PaymentIntent amount at completion* [\\#11916](https://github.com/Wishibam/Ecommerce-sylius/pull/11916)\n    - [\\[P0\\] Webhook Stripe : rembourser r\u00e9ellement les charges des commandes refus\u00e9es/annul\u00e9es](https://trello.com/c/fyJeMD3L/3886-p0-webhook-stripe-rembourser-r%C3%A9ellement-les-charges-des-commandes-refus%C3%A9es-annul%C3%A9es) **\ud83d\udc8e In Review**\n        - *:bug: fix: refund Stripe charges captured for refused or cancelled orders* [\\#11918](https://github.com/Wishibam/Ecommerce-sylius/pull/11918)\n    - [\\[P1\\] Express checkout : pinner explicitement les wallets autoris\u00e9s (quick win)](https://trello.com/c/tEpmPM9l/3890-p1-express-checkout-pinner-explicitement-les-wallets-autoris%C3%A9s-quick-win) **\ud83e\udd13 Testing**\n        - *:bug: fix: restrict express checkout wallets to an explicit allowlist* [\\#11919](https://github.com/Wishibam/Ecommerce-sylius/pull/11919)\n    - [\\[P0\\] Express checkout : commandes \u00e0 fonds captur\u00e9s supprim\u00e9es par la purge des carts + cha\u00eene d'abort morte](https://trello.com/c/1Wo7zGP5/3887-p0-express-checkout-commandes-%C3%A0-fonds-captur%C3%A9s-supprim%C3%A9es-par-la-purge-des-carts-cha%C3%AEne-dabort-morte) **\ud83d\udc8e In Review**\n        - *:bug: fix: protect express checkout captured-funds carts from the purge* [\\#11920](https://github.com/Wishibam/Ecommerce-sylius/pull/11920)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f \u203c\ufe0f Nouveau Feeds - Faire tourner tous les nouveaux feeds sur toutes les preprods/prods](https://trello.com/c/Kr8UhDAv/3910-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-%EF%B8%8F-nouveau-feeds-faire-tourner-tous-les-nouveaux-feeds-sur-toutes-les-preprods-prods) **\ud83e\udee1 To Do JC**\n        - *:sparkles: feat: drive-to-store feeds parity with legacy Setono* [\\#11979](https://github.com/Wishibam/Ecommerce-sylius/pull/11979)\n    - [Helsinki \u2014 Funnel checkout GA4 vide : \u00e9v\u00e9nements e-commerce manquants/incomplets](https://trello.com/c/j0yQGSFm/3921-helsinki-funnel-checkout-ga4-vide-%C3%A9v%C3%A9nements-e-commerce-manquants-incomplets) **\ud83c\udf44 Ready for testing**\n        - *:bug: fix: \u00e9mettre le funnel checkout GA4 complet* [\\#11980](https://github.com/Wishibam/Ecommerce-sylius/pull/11980)\n        - *:bug: fix: \u00e9mettre add\\_payment\\_info quand l'\u00e9tape de paiement est saut\u00e9e* [\\#12014](https://github.com/Wishibam/Ecommerce-sylius/pull/12014)\n    - [FEAT-0006 \u2014 Regroupement des emails d'annulation d'articles](https://trello.com/c/bBiV4jTE/3415-feat-0006-regroupement-des-emails-dannulation-darticles) **\ud83c\udf44 Ready for testing**\n        - *:bug: fix: FEAT-0006 cancellation email grouping QA feedback* [\\#11984](https://github.com/Wishibam/Ecommerce-sylius/pull/11984)\n    - [Min-height pages React](https://trello.com/c/Rti8eFXb/3919-min-height-pages-react) **\ud83c\udf89 A MEP**\n        - *:bug: fix: add min-height on React pages to prevent footer flash* [\\#11987](https://github.com/Wishibam/Ecommerce-sylius/pull/11987)\n    - [SEO - TVO - changement de slug](https://trello.com/c/Gbb2tles/3908-seo-tvo-changement-de-slug) **\ud83c\udf44 Ready for testing**\n        - *:bug: fix: clean up TVO brand page slugs with 301 redirects* [\\#11988](https://github.com/Wishibam/Ecommerce-sylius/pull/11988)\n    - [\u26a0\ufe0f action preprod/prod \u26a0\ufe0f \ud83d\uded2 Refonte Checkout #1 \u2014 La page Panier change de garde-robe](https://trello.com/c/qxdtlZxk/3851-%E2%9A%A0%EF%B8%8F-action-preprod-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%9B%92-refonte-checkout-1-la-page-panier-change-de-garde-robe) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): cart page QA feedback round* [\\#11990](https://github.com/Wishibam/Ecommerce-sylius/pull/11990)\n    - [\u26a0\ufe0f MEP \u26a0\ufe0f\u2b50 Google Customer Reviews sur TVO \u2014 brancher la machine \u00e0 \u00e9toiles](https://trello.com/c/7JA9u85M/3899-%E2%9A%A0%EF%B8%8F-mep-%E2%9A%A0%EF%B8%8F%E2%AD%90-google-customer-reviews-sur-tvo-brancher-la-machine-%C3%A0-%C3%A9toiles) **\ud83c\udf44 Ready for testing**\n        - *:sparkles: feat: TVO Google Customer Reviews \u2014 GTIN produits sur thank you* [\\#11991](https://github.com/Wishibam/Ecommerce-sylius/pull/11991)\n    - [Fix : TypeError trim() null sur les share descriptions de channel (admin)](https://trello.com/c/o47Ek1Fo/3924-fix-typeerror-trim-null-sur-les-share-descriptions-de-channel-admin) **\ud83e\udd16 Testing tech**\n        - *:bug: fix: guard against null share descriptions in channel setter* [\\#11992](https://github.com/Wishibam/Ecommerce-sylius/pull/11992)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f \ud83d\udce6\ud83c\udf0d Mondial Relay sans fronti\u00e8res \u2014 points relais UE (v1 TVO)](https://trello.com/c/4X0QYlQ5/3918-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%93%A6%F0%9F%8C%8D-mondial-relay-sans-fronti%C3%A8res-points-relais-ue-v1-tvo) **\ud83d\udc8e In Review**\n        - *:sparkles: feat(mondial-relay): relay search follows the buyer's country* [\\#11994](https://github.com/Wishibam/Ecommerce-sylius/pull/11994)\n    - [\ud83d\udccd Refonte Checkout \u2014 La suggestion d'adresse qui fait mouche](https://trello.com/c/vF0T1FZU/3860-%F0%9F%93%8D-refonte-checkout-la-suggestion-dadresse-qui-fait-mouche) **\ud83d\ude80 To Do Vincent**\n        - *:bug: fix(tvo): address suggestion QA feedback round* [\\#11995](https://github.com/Wishibam/Ecommerce-sylius/pull/11995)\n        - *:bug: fix(tvo): keep the manual phone flag choice made on an empty field* [\\#12058](https://github.com/Wishibam/Ecommerce-sylius/pull/12058)\n    - [\ud83c\udf5e Refonte Checkout \u2014 Des toasts tout chauds pour les messages syst\u00e8me](https://trello.com/c/N70pstGO/3861-%F0%9F%8D%9E-refonte-checkout-des-toasts-tout-chauds-pour-les-messages-syst%C3%A8me) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): checkout toasts QA feedback round* [\\#11996](https://github.com/Wishibam/Ecommerce-sylius/pull/11996)\n    - [\ud83d\udd00 Refonte TVO : le variant s\u00e9lectionn\u00e9 saute en 1re position au lieu de rester \u00e0 sa place](https://trello.com/c/vQH5uxHz/3904-%F0%9F%94%80-refonte-tvo-le-variant-s%C3%A9lectionn%C3%A9-saute-en-1re-position-au-lieu-de-rester-%C3%A0-sa-place) **\ud83c\udf44 Ready for testing**\n        - *:bug: fix: keep option values in place on overflowing variant axis* [\\#11998](https://github.com/Wishibam/Ecommerce-sylius/pull/11998)\n    - [TVO- mail order\\_open\\_return\\_withdrawn -remplacement de tag](https://trello.com/c/NK5CnCM2/3883-tvo-mail-orderopenreturnwithdrawn-remplacement-de-tag) **\ud83c\udf89 A MEP**\n        - *\ud83d\udc1b fix: orange \"return in progress\" badge on TVO withdrawal email* [\\#12000](https://github.com/Wishibam/Ecommerce-sylius/pull/12000)\n    - [SEO - ALL - Meta Title](https://trello.com/c/QDbDIPTu/3909-seo-all-meta-title) **\ud83c\udf44 Ready for testing**\n        - *:sparkles: feat: add dedicated Meta Title for CMS pages* [\\#12001](https://github.com/Wishibam/Ecommerce-sylius/pull/12001)\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\ude9a Refonte Checkout #3 \u2014 Le Mode de livraison prend la route](https://trello.com/c/NDSNOimu/3854-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%9A%9A-refonte-checkout-3-le-mode-de-livraison-prend-la-route) **\ud83e\udd13 Testing**\n        - *:sparkles: feat(tvo): React checkout select shipping step (P3)* [\\#12011](https://github.com/Wishibam/Ecommerce-sylius/pull/12011)\n    - [Helsinki - Correction bug d'affichage en finnois en version mobile](https://trello.com/c/f9V6mA6z/3686-helsinki-correction-bug-daffichage-en-finnois-en-version-mobile) **\ud83c\udf89 A MEP**\n        - *:bug: fix: reduce Helsinki posts carousel title on mobile* [\\#12017](https://github.com/Wishibam/Ecommerce-sylius/pull/12017)\n    - [A ESTIMER : Google Shopping Feed : ajouter le Outlet Price en cas de promotion](https://trello.com/c/RnEgL53B/3867-a-estimer-google-shopping-feed-ajouter-le-outlet-price-en-cas-de-promotion) **\ud83c\udf44 Ready for testing**\n        - *:sparkles: feat(helsinki): expose the outlet price in the Google Shopping feed* [\\#12020](https://github.com/Wishibam/Ecommerce-sylius/pull/12020)\n    - [\ud83c\udfbd \\[IS\\] Footer : \u00ab Notre accompagnement \u00bb devient \u00ab Nos services \u00bb et raccroche son lien](https://trello.com/c/H2X0XtqH/3932-%F0%9F%8E%BD-is-footer-notre-accompagnement-devient-nos-services-et-raccroche-son-lien) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: rename the Intersport footer column to \u00ab Nos services \u00bb and unlink its title* [\\#12026](https://github.com/Wishibam/Ecommerce-sylius/pull/12026)\n        - *:rewind: revert: Intersport footer \u00ab Nos services \u00bb (wrong target branch)* [\\#12037](https://github.com/Wishibam/Ecommerce-sylius/pull/12037)\n    - [Batavia - Probl\u00e8me sur l'affichage des variations](https://trello.com/c/MY6aNjLj/3931-batavia-probl%C3%A8me-sur-laffichage-des-variations) **\ud83e\udd13 Testing**\n        - *:bug: fix: deep-link Batavia PLP cards to the displayed color variant* [\\#12027](https://github.com/Wishibam/Ecommerce-sylius/pull/12027)\n    - [Batavia \u2014 Mails \u00ab produit indisponible \u00bb non re\u00e7us par les clients](https://trello.com/c/YLHFxnVs/3933-batavia-mails-produit-indisponible-non-re%C3%A7us-par-les-clients) **\ud83c\udf89 A MEP**\n        - *:bug: fix: validate admin email templates and log real send outcomes* [\\#12035](https://github.com/Wishibam/Ecommerce-sylius/pull/12035)\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\udcb3 Refonte Checkout #4 \u2014 Le Mode de paiement passe \u00e0 la caisse](https://trello.com/c/vDcvKX88/3855-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%92%B3-refonte-checkout-4-le-mode-de-paiement-passe-%C3%A0-la-caisse) **\ud83e\udd13 Testing**\n        - *:sparkles: feat(tvo): rebuild the checkout payment step and success page in React* [\\#12051](https://github.com/Wishibam/Ecommerce-sylius/pull/12051)\n    - [Intersport - Bug d'affichage images box produit](https://trello.com/c/mOO6EBx1/3936-intersport-bug-daffichage-images-box-produit) **\ud83c\udf89 A MEP**\n        - *:bug: \\[via\\] fix: styles mobiles des pages mot de passe oubli\u00e9/reset* [\\#12055](https://github.com/Wishibam/Ecommerce-sylius/pull/12055)\n    - [\ud83e\ude97 VIA \u2014 Le filtre Cat\u00e9gorie s'ouvre tout seul dans les descentes : on le veut ferm\u00e9 au chargement](https://trello.com/c/GMHVWZe2/3938-%F0%9F%AA%97-via-le-filtre-cat%C3%A9gorie-souvre-tout-seul-dans-les-descentes-on-le-veut-ferm%C3%A9-au-chargement) **\ud83e\udd13 Testing**\n        - *:bug: \\[via\\] fix: le filtre Cat\u00e9gorie reste ferm\u00e9 au chargement des descentes* [\\#12059](https://github.com/Wishibam/Ecommerce-sylius/pull/12059)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f Feed : Ajouter le flux facebook TVO](https://trello.com/c/iXjTokqz/3937-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-feed-ajouter-le-flux-facebook-tvo) **\ud83e\udd16 Testing tech**\n        - *:sparkles: feat: porter le flux facebook\\_catalog vers le nouveau composant* [\\#12060](https://github.com/Wishibam/Ecommerce-sylius/pull/12060)\n \n- **Misc**\n    - *:sparkles: feat: PushDispatcher + adaptateur FCM (push app TVO)* [\\#11917](https://github.com/Wishibam/Ecommerce-sylius/pull/11917)\n    - *style(withdrawal): make the withdrawal button theme-colored and not f\u2026* [\\#11951](https://github.com/Wishibam/Ecommerce-sylius/pull/11951)\n    - *:zap: perf: Batavia PLP \u2014 ES result cache, key batching, menu cache* [\\#11963](https://github.com/Wishibam/Ecommerce-sylius/pull/11963)\n    - *:wrench: chore: outillage pour worktrees parall\u00e8les (front isol\u00e9 par projet)* [\\#11986](https://github.com/Wishibam/Ecommerce-sylius/pull/11986)\n    - *:wrench: chore: bump php\\_codesniffer en 3.13.6 (CVE-2026-67434, CI rouge)* [\\#12008](https://github.com/Wishibam/Ecommerce-sylius/pull/12008)\n    - *:sparkles: feat: push app TVO \u2014 envoi asynchrone + badge (3.A.5 + 3.A.6)* [\\#12022](https://github.com/Wishibam/Ecommerce-sylius/pull/12022)\n    - *:sparkles: feat: badge unreadPushCount de bout en bout (app TVO)* [\\#12025](https://github.com/Wishibam/Ecommerce-sylius/pull/12025)\n    - *:sparkles: feat: compteur badge dans data des push (app TVO)* [\\#12028](https://github.com/Wishibam/Ecommerce-sylius/pull/12028)\n    - *:sparkles: feat: push \u00ab commande confirm\u00e9e \u00bb (app TVO)* [\\#12031](https://github.com/Wishibam/Ecommerce-sylius/pull/12031)\n    - *:sparkles: feat: push \u00ab commande exp\u00e9di\u00e9e \u00bb (app TVO)* [\\#12040](https://github.com/Wishibam/Ecommerce-sylius/pull/12040)\n    - *feat(push): notification de remboursement de commande (TVO 3.B.3)* [\\#12041](https://github.com/Wishibam/Ecommerce-sylius/pull/12041)\n    - *fix(push): durcir l'envoi FCM \u2014 timeouts born\u00e9s + retry effectif (TVO 3.A.7)* [\\#12042](https://github.com/Wishibam/Ecommerce-sylius/pull/12042)\n    - *test(featured-content): d\u00e9-flakifier testProgramDisableDelay (tol\u00e9rance sur le d\u00e9lai)* [\\#12044](https://github.com/Wishibam/Ecommerce-sylius/pull/12044)\n    - *feat(push): notification de retour en stock (TVO 3.B.4)* [\\#12045](https://github.com/Wishibam/Ecommerce-sylius/pull/12045)\n    - *feat(push): notification de baisse de prix wishlist (TVO 3.B.5)* [\\#12049](https://github.com/Wishibam/Ecommerce-sylius/pull/12049)\n    - *:bug: fix(megamenu): \u00e9largir le lien \u00e0 2048 caract\u00e8res* [\\#12050](https://github.com/Wishibam/Ecommerce-sylius/pull/12050)\n    - *feat(push): relance push des paniers abandonn\u00e9s (TVO 3.B.6)* [\\#12053](https://github.com/Wishibam/Ecommerce-sylius/pull/12053)\n \n- **D\u00e9j\u00e0 en production**\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\udc1b Fix r\u00e9indexation ES bloqu\u00e9e \u2014 \u00ab immense term \u00bb sur attribut trop long (Intersport)](https://trello.com/c/iD6idW0v/3915-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%90%9B-fix-r%C3%A9indexation-es-bloqu%C3%A9e-immense-term-sur-attribut-trop-long-intersport) **MEP Ao\u00fbt**\n        - *:bug: fix: r\u00e9indexation ES bloqu\u00e9e par un attribut trop long (immense term)* [\\#11972](https://github.com/Wishibam/Ecommerce-sylius/pull/11972)\n    - [TVO - Les recommandations produits ne remontent aucun produit sur la fiche produit](https://trello.com/c/lw3SYgNG/3926-tvo-les-recommandations-produits-ne-remontent-aucun-produit-sur-la-fiche-produit) **MEP Ao\u00fbt**\n        - *:bug: fix(search): match the indexed color value in recommendations* [\\#12004](https://github.com/Wishibam/Ecommerce-sylius/pull/12004)\n    - [\u2615\ufe0f \\[Batavia\\] Frais de retour : \u20ac3,25 \u2192 \u20ac3,95 (et on passe le texte en traduction)](https://trello.com/c/P4vec3cz/3934-%E2%98%95%EF%B8%8F-batavia-frais-de-retour-%E2%82%AC325-%E2%86%92-%E2%82%AC395-et-on-passe-le-texte-en-traduction) **MEP Ao\u00fbt**\n        - *:bug: fix: Batavia return cost 3,95 and move the line to a translation* [\\#12034](https://github.com/Wishibam/Ecommerce-sylius/pull/12034)\n    - *:bug: fix: render flag emojis as SVG icons, not OS emoji glyphs* [\\#11981](https://github.com/Wishibam/Ecommerce-sylius/pull/11981)\n    - *:bug: fix: apply the flag icon filter to the remaining menu renderings* [\\#11982](https://github.com/Wishibam/Ecommerce-sylius/pull/11982)", "creation_timestamp": "2026-08-19T09:01:58.111233Z"}, {"uuid": "f41d2170-c202-4064-bd7b-3c0673172f9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67434", "type": "seen", "source": "https://gist.github.com/jbourdin/04337c13ed0986eb35ae2dd9fd10e882", "content": "- **Trello**\n    - [Helsinki : Portail de retour - Sylius - int\u00e9gration front du portail de retour](https://trello.com/c/mhcc7YaC/2401-helsinki-portail-de-retour-sylius-int%C3%A9gration-front-du-portail-de-retour) **TEMP - EPIC - Droit de r\u00e9tractation**\n        - *feat(helsinki): Add return portal to Helsinki order details* [\\#11757](https://github.com/Wishibam/Ecommerce-sylius/pull/11757)\n    - [\\[Migration\\]\\[A.2\\] D\u00e9mant\u00e8lement Setono Analytics + Tag-Bag](https://trello.com/c/uJN0Gkiz/3856-migrationa2-d%C3%A9mant%C3%A8lement-setono-analytics-tag-bag) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore(migration): internalize setono analytics + tag-bag as src/Component \\[A.2\\]* [\\#11846](https://github.com/Wishibam/Ecommerce-sylius/pull/11846)\n    - [\\[Migration\\]\\[A.4.1\\] Internaliser bitbag/wishlist-plugin dans src/Component/Wishlist](https://trello.com/c/U9dQGx1l/3863-migrationa41-internaliser-bitbag-wishlist-plugin-dans-src-component-wishlist) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: internalize bitbag/wishlist-plugin \\[A.4.1\\]* [\\#11856](https://github.com/Wishibam/Ecommerce-sylius/pull/11856)\n    - [\\[Migration\\]\\[A.4.2/A.4.3\\] Internaliser bring & deep-link dans src/Component](https://trello.com/c/RsLN5SNT/3864-migrationa42-a43-internaliser-bring-deep-link-dans-src-component) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: internalize bring & deep-link plugins \\[A.4.2, A.4.3\\]* [\\#11861](https://github.com/Wishibam/Ecommerce-sylius/pull/11861)\n    - [\\[Migration\\]\\[A.5\\] Bumps frontend \u00ab safe \u00bb + suppression des packages morts](https://trello.com/c/vI6k61gt/3873-migrationa5-bumps-frontend-safe-suppression-des-packages-morts) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: bump safe frontend deps + prune dead packages \\[A.5\\]* [\\#11875](https://github.com/Wishibam/Ecommerce-sylius/pull/11875)\n    - [\\[Migration\\]\\[A.6\\] Pr\u00e9paration Doctrine pour DBAL 3 (monkey-patch migrations)](https://trello.com/c/8mdyVMwg/3880-migrationa6-pr%C3%A9paration-doctrine-pour-dbal-3-monkey-patch-migrations) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: replace Doctrine migration monkey-patch for DBAL 3 \\[A.6\\]* [\\#11893](https://github.com/Wishibam/Ecommerce-sylius/pull/11893)\n    - [TVO - Express checkout : adresse tronqu\u00e9e \u2014 nom de rue perdu (Apple Pay line1/line2)](https://trello.com/c/dIrl0I1a/3884-tvo-express-checkout-adresse-tronqu%C3%A9e-nom-de-rue-perdu-apple-pay-line1-line2) **\ud83e\udd13 Testing**\n        - *:bug: fix: join express checkout wallet address line1/line2 into street* [\\#11914](https://github.com/Wishibam/Ecommerce-sylius/pull/11914)\n    - [\\[P0\\] Webhook Stripe : rembourser r\u00e9ellement les charges des commandes refus\u00e9es/annul\u00e9es](https://trello.com/c/fyJeMD3L/3886-p0-webhook-stripe-rembourser-r%C3%A9ellement-les-charges-des-commandes-refus%C3%A9es-annul%C3%A9es) **\ud83d\udc8e In Review**\n        - *:bug: fix: refund Stripe charges captured for refused or cancelled orders* [\\#11918](https://github.com/Wishibam/Ecommerce-sylius/pull/11918)\n    - [\\[P1\\] Express checkout : pinner explicitement les wallets autoris\u00e9s (quick win)](https://trello.com/c/tEpmPM9l/3890-p1-express-checkout-pinner-explicitement-les-wallets-autoris%C3%A9s-quick-win) **\ud83e\udd13 Testing**\n        - *:bug: fix: restrict express checkout wallets to an explicit allowlist* [\\#11919](https://github.com/Wishibam/Ecommerce-sylius/pull/11919)\n    - [\\[P0\\] Express checkout : commandes \u00e0 fonds captur\u00e9s supprim\u00e9es par la purge des carts + cha\u00eene d'abort morte](https://trello.com/c/1Wo7zGP5/3887-p0-express-checkout-commandes-%C3%A0-fonds-captur%C3%A9s-supprim%C3%A9es-par-la-purge-des-carts-cha%C3%AEne-dabort-morte) **\ud83d\udc8e In Review**\n        - *:bug: fix: protect express checkout captured-funds carts from the purge* [\\#11920](https://github.com/Wishibam/Ecommerce-sylius/pull/11920)\n    - [\ud83d\udc1b Fix r\u00e9indexation ES bloqu\u00e9e \u2014 \u00ab immense term \u00bb sur attribut trop long (Intersport)](https://trello.com/c/iD6idW0v/3915-%F0%9F%90%9B-fix-r%C3%A9indexation-es-bloqu%C3%A9e-immense-term-sur-attribut-trop-long-intersport) **\ud83e\udd16 Testing tech**\n        - *:bug: fix: r\u00e9indexation ES bloqu\u00e9e par un attribut trop long (immense term)* [\\#11972](https://github.com/Wishibam/Ecommerce-sylius/pull/11972)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f \u203c\ufe0f Nouveau Feeds - Faire tourner tous les nouveaux feeds sur toutes les preprods/prods](https://trello.com/c/Kr8UhDAv/3910-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-%EF%B8%8F-nouveau-feeds-faire-tourner-tous-les-nouveaux-feeds-sur-toutes-les-preprods-prods) **\ud83e\udee1 To Do JC**\n        - *:sparkles: feat: drive-to-store feeds parity with legacy Setono* [\\#11979](https://github.com/Wishibam/Ecommerce-sylius/pull/11979)\n    - [Helsinki \u2014 Funnel checkout GA4 vide : \u00e9v\u00e9nements e-commerce manquants/incomplets](https://trello.com/c/j0yQGSFm/3921-helsinki-funnel-checkout-ga4-vide-%C3%A9v%C3%A9nements-e-commerce-manquants-incomplets) **\ud83c\udf44 Ready for testing**\n        - *:bug: fix: \u00e9mettre le funnel checkout GA4 complet* [\\#11980](https://github.com/Wishibam/Ecommerce-sylius/pull/11980)\n    - [Min-height pages React](https://trello.com/c/Rti8eFXb/3919-min-height-pages-react) **\ud83e\udd13 Testing**\n        - *:bug: fix: add min-height on React pages to prevent footer flash* [\\#11987](https://github.com/Wishibam/Ecommerce-sylius/pull/11987)\n    - [\u26a0\ufe0f action preprod/prod \u26a0\ufe0f \ud83d\uded2 Refonte Checkout #1 \u2014 La page Panier change de garde-robe](https://trello.com/c/qxdtlZxk/3851-%E2%9A%A0%EF%B8%8F-action-preprod-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%9B%92-refonte-checkout-1-la-page-panier-change-de-garde-robe) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): cart page QA feedback round* [\\#11990](https://github.com/Wishibam/Ecommerce-sylius/pull/11990)\n    - [Fix : TypeError trim() null sur les share descriptions de channel (admin)](https://trello.com/c/o47Ek1Fo/3924-fix-typeerror-trim-null-sur-les-share-descriptions-de-channel-admin) **\ud83e\udd16 Testing tech**\n        - *:bug: fix: guard against null share descriptions in channel setter* [\\#11992](https://github.com/Wishibam/Ecommerce-sylius/pull/11992)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f \ud83d\udce6\ud83c\udf0d Mondial Relay sans fronti\u00e8res \u2014 points relais UE (v1 TVO)](https://trello.com/c/4X0QYlQ5/3918-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%93%A6%F0%9F%8C%8D-mondial-relay-sans-fronti%C3%A8res-points-relais-ue-v1-tvo) **\ud83d\udc8e In Review**\n        - *:sparkles: feat(mondial-relay): relay search follows the buyer's country* [\\#11994](https://github.com/Wishibam/Ecommerce-sylius/pull/11994)\n    - [\ud83d\udccd Refonte Checkout \u2014 La suggestion d'adresse qui fait mouche](https://trello.com/c/vF0T1FZU/3860-%F0%9F%93%8D-refonte-checkout-la-suggestion-dadresse-qui-fait-mouche) **\ud83d\ude80 To Do Vincent**\n        - *:bug: fix(tvo): address suggestion QA feedback round* [\\#11995](https://github.com/Wishibam/Ecommerce-sylius/pull/11995)\n    - [\ud83c\udf5e Refonte Checkout \u2014 Des toasts tout chauds pour les messages syst\u00e8me](https://trello.com/c/N70pstGO/3861-%F0%9F%8D%9E-refonte-checkout-des-toasts-tout-chauds-pour-les-messages-syst%C3%A8me) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): checkout toasts QA feedback round* [\\#11996](https://github.com/Wishibam/Ecommerce-sylius/pull/11996)\n    - [TVO- mail order\\_open\\_return\\_withdrawn -remplacement de tag](https://trello.com/c/NK5CnCM2/3883-tvo-mail-orderopenreturnwithdrawn-remplacement-de-tag) **\ud83c\udf89 A MEP**\n        - *\ud83d\udc1b fix: orange \"return in progress\" badge on TVO withdrawal email* [\\#12000](https://github.com/Wishibam/Ecommerce-sylius/pull/12000)\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\ude9a Refonte Checkout #3 \u2014 Le Mode de livraison prend la route](https://trello.com/c/NDSNOimu/3854-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%9A%9A-refonte-checkout-3-le-mode-de-livraison-prend-la-route) **\ud83e\udd13 Testing**\n        - *:sparkles: feat(tvo): React checkout select shipping step (P3)* [\\#12011](https://github.com/Wishibam/Ecommerce-sylius/pull/12011)\n \n- **Misc**\n    - *:sparkles: feat: PushDispatcher + adaptateur FCM (push app TVO)* [\\#11917](https://github.com/Wishibam/Ecommerce-sylius/pull/11917)\n    - *style(withdrawal): make the withdrawal button theme-colored and not f\u2026* [\\#11951](https://github.com/Wishibam/Ecommerce-sylius/pull/11951)\n    - *:zap: perf: Batavia PLP \u2014 ES result cache, key batching, menu cache* [\\#11963](https://github.com/Wishibam/Ecommerce-sylius/pull/11963)\n    - *:wrench: chore: outillage pour worktrees parall\u00e8les (front isol\u00e9 par projet)* [\\#11986](https://github.com/Wishibam/Ecommerce-sylius/pull/11986)\n    - *:wrench: chore: bump php\\_codesniffer en 3.13.6 (CVE-2026-67434, CI rouge)* [\\#12008](https://github.com/Wishibam/Ecommerce-sylius/pull/12008)\n \n- **D\u00e9j\u00e0 en production**\n    - [TVO - Les recommandations produits ne remontent aucun produit sur la fiche produit](https://trello.com/c/lw3SYgNG/3926-tvo-les-recommandations-produits-ne-remontent-aucun-produit-sur-la-fiche-produit) **MEP Ao\u00fbt**\n        - *:bug: fix(search): match the indexed color value in recommendations* [\\#12004](https://github.com/Wishibam/Ecommerce-sylius/pull/12004)\n    - *:bug: fix: render flag emojis as SVG icons, not OS emoji glyphs* [\\#11981](https://github.com/Wishibam/Ecommerce-sylius/pull/11981)\n    - *:bug: fix: apply the flag icon filter to the remaining menu renderings* [\\#11982](https://github.com/Wishibam/Ecommerce-sylius/pull/11982)", "creation_timestamp": "2026-08-07T15:50:54.562361Z"}, {"uuid": "9746b8e2-00d5-4334-9d74-8cbb586586f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67434", "type": "seen", "source": "https://gist.github.com/jbourdin/d5d5ade20f80dca4ef2a3034a9c1ff3e", "content": "- **Trello**\n    - [Helsinki : Portail de retour - Sylius - int\u00e9gration front du portail de retour](https://trello.com/c/mhcc7YaC/2401-helsinki-portail-de-retour-sylius-int%C3%A9gration-front-du-portail-de-retour) **TEMP - EPIC - Droit de r\u00e9tractation**\n        - *feat(helsinki): Add return portal to Helsinki order details* [\\#11757](https://github.com/Wishibam/Ecommerce-sylius/pull/11757)\n    - [\\[Migration\\]\\[A.2\\] D\u00e9mant\u00e8lement Setono Analytics + Tag-Bag](https://trello.com/c/uJN0Gkiz/3856-migrationa2-d%C3%A9mant%C3%A8lement-setono-analytics-tag-bag) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore(migration): internalize setono analytics + tag-bag as src/Component \\[A.2\\]* [\\#11846](https://github.com/Wishibam/Ecommerce-sylius/pull/11846)\n    - [\\[Migration\\]\\[A.4.1\\] Internaliser bitbag/wishlist-plugin dans src/Component/Wishlist](https://trello.com/c/U9dQGx1l/3863-migrationa41-internaliser-bitbag-wishlist-plugin-dans-src-component-wishlist) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: internalize bitbag/wishlist-plugin \\[A.4.1\\]* [\\#11856](https://github.com/Wishibam/Ecommerce-sylius/pull/11856)\n    - [\\[Migration\\]\\[A.4.2/A.4.3\\] Internaliser bring & deep-link dans src/Component](https://trello.com/c/RsLN5SNT/3864-migrationa42-a43-internaliser-bring-deep-link-dans-src-component) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: internalize bring & deep-link plugins \\[A.4.2, A.4.3\\]* [\\#11861](https://github.com/Wishibam/Ecommerce-sylius/pull/11861)\n    - [\\[Migration\\]\\[A.5\\] Bumps frontend \u00ab safe \u00bb + suppression des packages morts](https://trello.com/c/vI6k61gt/3873-migrationa5-bumps-frontend-safe-suppression-des-packages-morts) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: bump safe frontend deps + prune dead packages \\[A.5\\]* [\\#11875](https://github.com/Wishibam/Ecommerce-sylius/pull/11875)\n    - [\\[Migration\\]\\[A.6\\] Pr\u00e9paration Doctrine pour DBAL 3 (monkey-patch migrations)](https://trello.com/c/8mdyVMwg/3880-migrationa6-pr%C3%A9paration-doctrine-pour-dbal-3-monkey-patch-migrations) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: replace Doctrine migration monkey-patch for DBAL 3 \\[A.6\\]* [\\#11893](https://github.com/Wishibam/Ecommerce-sylius/pull/11893)\n    - [TVO - Express checkout : adresse tronqu\u00e9e \u2014 nom de rue perdu (Apple Pay line1/line2)](https://trello.com/c/dIrl0I1a/3884-tvo-express-checkout-adresse-tronqu%C3%A9e-nom-de-rue-perdu-apple-pay-line1-line2) **\ud83e\udd13 Testing**\n        - *:bug: fix: join express checkout wallet address line1/line2 into street* [\\#11914](https://github.com/Wishibam/Ecommerce-sylius/pull/11914)\n    - [\\[P0\\] Express checkout : re-v\u00e9rifier le montant du PaymentIntent au complete](https://trello.com/c/qJdTR9Jc/3885-p0-express-checkout-re-v%C3%A9rifier-le-montant-du-paymentintent-au-complete) **\ud83d\udc8e In Review**\n        - *:bug: fix: verify express checkout PaymentIntent amount at completion* [\\#11916](https://github.com/Wishibam/Ecommerce-sylius/pull/11916)\n    - [\\[P0\\] Webhook Stripe : rembourser r\u00e9ellement les charges des commandes refus\u00e9es/annul\u00e9es](https://trello.com/c/fyJeMD3L/3886-p0-webhook-stripe-rembourser-r%C3%A9ellement-les-charges-des-commandes-refus%C3%A9es-annul%C3%A9es) **\ud83d\udc8e In Review**\n        - *:bug: fix: refund Stripe charges captured for refused or cancelled orders* [\\#11918](https://github.com/Wishibam/Ecommerce-sylius/pull/11918)\n    - [\\[P1\\] Express checkout : pinner explicitement les wallets autoris\u00e9s (quick win)](https://trello.com/c/tEpmPM9l/3890-p1-express-checkout-pinner-explicitement-les-wallets-autoris%C3%A9s-quick-win) **\ud83e\udd13 Testing**\n        - *:bug: fix: restrict express checkout wallets to an explicit allowlist* [\\#11919](https://github.com/Wishibam/Ecommerce-sylius/pull/11919)\n    - [\\[P0\\] Express checkout : commandes \u00e0 fonds captur\u00e9s supprim\u00e9es par la purge des carts + cha\u00eene d'abort morte](https://trello.com/c/1Wo7zGP5/3887-p0-express-checkout-commandes-%C3%A0-fonds-captur%C3%A9s-supprim%C3%A9es-par-la-purge-des-carts-cha%C3%AEne-dabort-morte) **\ud83d\udc8e In Review**\n        - *:bug: fix: protect express checkout captured-funds carts from the purge* [\\#11920](https://github.com/Wishibam/Ecommerce-sylius/pull/11920)\n    - [\ud83d\udc1b Fix r\u00e9indexation ES bloqu\u00e9e \u2014 \u00ab immense term \u00bb sur attribut trop long (Intersport)](https://trello.com/c/iD6idW0v/3915-%F0%9F%90%9B-fix-r%C3%A9indexation-es-bloqu%C3%A9e-immense-term-sur-attribut-trop-long-intersport) **\ud83e\udd16 Testing tech**\n        - *:bug: fix: r\u00e9indexation ES bloqu\u00e9e par un attribut trop long (immense term)* [\\#11972](https://github.com/Wishibam/Ecommerce-sylius/pull/11972)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f \u203c\ufe0f Nouveau Feeds - Faire tourner tous les nouveaux feeds sur toutes les preprods/prods](https://trello.com/c/Kr8UhDAv/3910-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-%EF%B8%8F-nouveau-feeds-faire-tourner-tous-les-nouveaux-feeds-sur-toutes-les-preprods-prods) **\ud83e\udee1 To Do JC**\n        - *:sparkles: feat: drive-to-store feeds parity with legacy Setono* [\\#11979](https://github.com/Wishibam/Ecommerce-sylius/pull/11979)\n    - [Helsinki \u2014 Funnel checkout GA4 vide : \u00e9v\u00e9nements e-commerce manquants/incomplets](https://trello.com/c/j0yQGSFm/3921-helsinki-funnel-checkout-ga4-vide-%C3%A9v%C3%A9nements-e-commerce-manquants-incomplets) **\ud83c\udf44 Ready for testing**\n        - *:bug: fix: \u00e9mettre le funnel checkout GA4 complet* [\\#11980](https://github.com/Wishibam/Ecommerce-sylius/pull/11980)\n    - [Min-height pages React](https://trello.com/c/Rti8eFXb/3919-min-height-pages-react) **\ud83e\udd13 Testing**\n        - *:bug: fix: add min-height on React pages to prevent footer flash* [\\#11987](https://github.com/Wishibam/Ecommerce-sylius/pull/11987)\n    - [\u26a0\ufe0f action preprod/prod \u26a0\ufe0f \ud83d\uded2 Refonte Checkout #1 \u2014 La page Panier change de garde-robe](https://trello.com/c/qxdtlZxk/3851-%E2%9A%A0%EF%B8%8F-action-preprod-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%9B%92-refonte-checkout-1-la-page-panier-change-de-garde-robe) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): cart page QA feedback round* [\\#11990](https://github.com/Wishibam/Ecommerce-sylius/pull/11990)\n    - [Fix : TypeError trim() null sur les share descriptions de channel (admin)](https://trello.com/c/o47Ek1Fo/3924-fix-typeerror-trim-null-sur-les-share-descriptions-de-channel-admin) **\ud83e\udd16 Testing tech**\n        - *:bug: fix: guard against null share descriptions in channel setter* [\\#11992](https://github.com/Wishibam/Ecommerce-sylius/pull/11992)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f \ud83d\udce6\ud83c\udf0d Mondial Relay sans fronti\u00e8res \u2014 points relais UE (v1 TVO)](https://trello.com/c/4X0QYlQ5/3918-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%93%A6%F0%9F%8C%8D-mondial-relay-sans-fronti%C3%A8res-points-relais-ue-v1-tvo) **\ud83d\udc8e In Review**\n        - *:sparkles: feat(mondial-relay): relay search follows the buyer's country* [\\#11994](https://github.com/Wishibam/Ecommerce-sylius/pull/11994)\n    - [\ud83d\udccd Refonte Checkout \u2014 La suggestion d'adresse qui fait mouche](https://trello.com/c/vF0T1FZU/3860-%F0%9F%93%8D-refonte-checkout-la-suggestion-dadresse-qui-fait-mouche) **\ud83d\ude80 To Do Vincent**\n        - *:bug: fix(tvo): address suggestion QA feedback round* [\\#11995](https://github.com/Wishibam/Ecommerce-sylius/pull/11995)\n    - [\ud83c\udf5e Refonte Checkout \u2014 Des toasts tout chauds pour les messages syst\u00e8me](https://trello.com/c/N70pstGO/3861-%F0%9F%8D%9E-refonte-checkout-des-toasts-tout-chauds-pour-les-messages-syst%C3%A8me) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): checkout toasts QA feedback round* [\\#11996](https://github.com/Wishibam/Ecommerce-sylius/pull/11996)\n    - [TVO- mail order\\_open\\_return\\_withdrawn -remplacement de tag](https://trello.com/c/NK5CnCM2/3883-tvo-mail-orderopenreturnwithdrawn-remplacement-de-tag) **\ud83c\udf89 A MEP**\n        - *\ud83d\udc1b fix: orange \"return in progress\" badge on TVO withdrawal email* [\\#12000](https://github.com/Wishibam/Ecommerce-sylius/pull/12000)\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\ude9a Refonte Checkout #3 \u2014 Le Mode de livraison prend la route](https://trello.com/c/NDSNOimu/3854-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%9A%9A-refonte-checkout-3-le-mode-de-livraison-prend-la-route) **\ud83e\udd13 Testing**\n        - *:sparkles: feat(tvo): React checkout select shipping step (P3)* [\\#12011](https://github.com/Wishibam/Ecommerce-sylius/pull/12011)\n \n- **Misc**\n    - *:sparkles: feat: PushDispatcher + adaptateur FCM (push app TVO)* [\\#11917](https://github.com/Wishibam/Ecommerce-sylius/pull/11917)\n    - *style(withdrawal): make the withdrawal button theme-colored and not f\u2026* [\\#11951](https://github.com/Wishibam/Ecommerce-sylius/pull/11951)\n    - *:zap: perf: Batavia PLP \u2014 ES result cache, key batching, menu cache* [\\#11963](https://github.com/Wishibam/Ecommerce-sylius/pull/11963)\n    - *:wrench: chore: outillage pour worktrees parall\u00e8les (front isol\u00e9 par projet)* [\\#11986](https://github.com/Wishibam/Ecommerce-sylius/pull/11986)\n    - *:wrench: chore: bump php\\_codesniffer en 3.13.6 (CVE-2026-67434, CI rouge)* [\\#12008](https://github.com/Wishibam/Ecommerce-sylius/pull/12008)\n \n- **D\u00e9j\u00e0 en production**\n    - [TVO - Les recommandations produits ne remontent aucun produit sur la fiche produit](https://trello.com/c/lw3SYgNG/3926-tvo-les-recommandations-produits-ne-remontent-aucun-produit-sur-la-fiche-produit) **MEP Ao\u00fbt**\n        - *:bug: fix(search): match the indexed color value in recommendations* [\\#12004](https://github.com/Wishibam/Ecommerce-sylius/pull/12004)\n    - *:bug: fix: render flag emojis as SVG icons, not OS emoji glyphs* [\\#11981](https://github.com/Wishibam/Ecommerce-sylius/pull/11981)\n    - *:bug: fix: apply the flag icon filter to the remaining menu renderings* [\\#11982](https://github.com/Wishibam/Ecommerce-sylius/pull/11982)", "creation_timestamp": "2026-08-07T16:25:47.248675Z"}, {"uuid": "5cb8ca30-f0d5-469a-bbcb-20f6c0f267ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67434", "type": "seen", "source": "https://gist.github.com/FR-Flo/058534b91a22bd624dfbf98d43249177", "content": "## \ud83d\udd17 Companion release\n\nThis release ships alongside the **Marketplace-client (frontend)** release PR:\n\n- https://github.com/Wishibam/Marketplace-client/pull/4256\n\n- **Trello**\n    - [Attributs required par cat\u00e9gorie](https://trello.com/c/2loCszpt/1854-attributs-required-par-cat%C3%A9gorie) **\ud83e\udd75 Retour de test**\n        - *Feat: Makes attributes required or not per categories* [\\#7474](https://github.com/Wishibam/Marketplace-api/pull/7474)\n    - [\ud83d\udfe2 Int\u00e9gration des fanions promotionnels \u2014 Ajout image au tag de taxon (MP) (\u00e9volution n\u00b011)](https://trello.com/c/fNNkiR1c/2405-%F0%9F%9F%A2-int%C3%A9gration-des-fanions-promotionnels-ajout-image-au-tag-de-taxon-mp-%C3%A9volution-n11) **\ud83e\udd75 Retour de test**\n        - *:sparkles: feat: fanions de taxon \u2014 images desktop/mobile (MP-api)* [\\#7617](https://github.com/Wishibam/Marketplace-api/pull/7617)\n    - [Retours dashboard - Ajouter un tableau top 10 des marques les plus demand\u00e9s en alerte stock (V2)](https://trello.com/c/JgADJ95G/2474-retours-dashboard-ajouter-un-tableau-top-10-des-marques-les-plus-demand%C3%A9s-en-alerte-stock-v2) **\ud83c\udf89 Reviewed pas Merg\u00e9**\n        - *feat(dashboard): add top 10 retailer stock alerts endpoint* [\\#7751](https://github.com/Wishibam/Marketplace-api/pull/7751)\n    - [MP - Cr\u00e9ation / modification m\u00e9thode de livraison - impossible de save](https://trello.com/c/Ud1DRxgj/2407-mp-cr%C3%A9ation-modification-m%C3%A9thode-de-livraison-impossible-de-save) **In review WMS**\n        - *:bug: MP Fix Dpd class, file and discriminator name* [\\#7757](https://github.com/Wishibam/Marketplace-api/pull/7757)\n    - [Ticket de caisse - pb de cache](https://trello.com/c/EwgktbXZ/2493-ticket-de-caisse-pb-de-cache) **\ud83e\udd75 Retour de test**\n        - *:bug: fix: reset receipt cache between export Messenger messages* [\\#7791](https://github.com/Wishibam/Marketplace-api/pull/7791)\n    - [\ud83d\ude84 Commande exp\u00e9di\u00e9e : l'interface part trop vite et garde l'ancien statut](https://trello.com/c/6QmFnpyb/2418-%F0%9F%9A%84-commande-exp%C3%A9di%C3%A9e-linterface-part-trop-vite-et-garde-lancien-statut) **In review WMS**\n        - *:sparkles: OMS order, add \"inProcessing\" flag* [\\#7797](https://github.com/Wishibam/Marketplace-api/pull/7797)\n    - [MP - Sur le marchand (listing & d\u00e9tails), mettre un lien qui redirige directement vers le marchand en front](https://trello.com/c/Z136lbnm/1296-mp-sur-le-marchand-listing-d%C3%A9tails-mettre-un-lien-qui-redirige-directement-vers-le-marchand-en-front) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *:sparkles: Add retailer eshop link* [\\#7822](https://github.com/Wishibam/Marketplace-api/pull/7822)\n    - [Tag - Ajout du champ \"Visibilit\u00e9\" c\u00f4t\u00e9 MP](https://trello.com/c/zPFP31T9/2398-tag-ajout-du-champ-visibilit%C3%A9-c%C3%B4t%C3%A9-mp) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *:sparkles: Add tag visibility field to retailer corner and category* [\\#7831](https://github.com/Wishibam/Marketplace-api/pull/7831)\n    - [Nouvelle vue Enseigne -Partie 1-](https://trello.com/c/AVsRvxLu/2494-nouvelle-vue-enseigne-partie-1) **\ud83d\udc8e\ud83d\udc8e\ud83d\udc8edoing**\n        - *:sparkles: OMS New enseigne view (front only) no interaction* [\\#7846](https://github.com/Wishibam/Marketplace-api/pull/7846)\n \n- **Misc**\n    - *feat(shipping-method): expose the default return method flag on the API* [\\#7793](https://github.com/Wishibam/Marketplace-api/pull/7793)\n    - *:sparkles: feat: resync a single retailer in the live merchandising indices* [\\#7808](https://github.com/Wishibam/Marketplace-api/pull/7808)\n    - *:bug: WMS Log Message Container identifier* [\\#7810](https://github.com/Wishibam/Marketplace-api/pull/7810)\n    - *:bug: fix: resync-retailer scroll rejected by ES8 (size param)* [\\#7820](https://github.com/Wishibam/Marketplace-api/pull/7820)\n    - *feat(mcp): add MCP server walking skeleton with list\\_organizations* [\\#7823](https://github.com/Wishibam/Marketplace-api/pull/7823)\n    - *refactor(mcp): extract logic from ImportAction, RetailerNormalizer and RankProduct* [\\#7824](https://github.com/Wishibam/Marketplace-api/pull/7824)\n    - *:sparkles: feat: compute product scoring on the fly (service + ES)* [\\#7825](https://github.com/Wishibam/Marketplace-api/pull/7825)\n    - *:sparkles: feat: raise the ES pagination window beyond 10k documents* [\\#7826](https://github.com/Wishibam/Marketplace-api/pull/7826)\n    - *feat(merchandising): supporter les tris du listing produit sur POST /merchandising* [\\#7827](https://github.com/Wishibam/Marketplace-api/pull/7827)\n    - *feat(merchandising): actions de masse asynchrones avec lock par organisation* [\\#7828](https://github.com/Wishibam/Marketplace-api/pull/7828)\n    - *Merge feat/mcp-walking-skeleton (simulate #7823 merge)* [\\#7832](https://github.com/Wishibam/Marketplace-api/pull/7832)\n    - *feat(product-list): pipeline batch pour les actions de masse des listes produits* [\\#7833](https://github.com/Wishibam/Marketplace-api/pull/7833)\n    - *feat(mcp): Add OAuth discovery* [\\#7834](https://github.com/Wishibam/Marketplace-api/pull/7834)\n    - *:arrow\\_up: deps: bump mcp/sdk to 0.7.1 (CVE-2026-53965)* [\\#7838](https://github.com/Wishibam/Marketplace-api/pull/7838)\n    - *Disabled MCP by default* [\\#7840](https://github.com/Wishibam/Marketplace-api/pull/7840)\n    - *:bug: fix: guard against null option name/value in CSV export* [\\#7841](https://github.com/Wishibam/Marketplace-api/pull/7841)\n    - *:bug: fix: stream line item CSV export to fix memory exhaustion* [\\#7842](https://github.com/Wishibam/Marketplace-api/pull/7842)\n    - *:arrow\\_up: deps: patch sodium\\_compat Ed25519 key validation vulnerability* [\\#7843](https://github.com/Wishibam/Marketplace-api/pull/7843)\n    - *fix: attribut required category* [\\#7851](https://github.com/Wishibam/Marketplace-api/pull/7851)\n    - *fix: batch action view* [\\#7852](https://github.com/Wishibam/Marketplace-api/pull/7852)\n    - *:bug: fix: batch the retailers list health queries (N+1)* [\\#7854](https://github.com/Wishibam/Marketplace-api/pull/7854)\n    - *:bug: fix: stop hydrating import report errors on retailers list* [\\#7855](https://github.com/Wishibam/Marketplace-api/pull/7855)\n    - *fix(import): stop importing translations in locales missing from the organization* [\\#7856](https://github.com/Wishibam/Marketplace-api/pull/7856)\n    - *feat(merchandising): filtres stock, diffusion limit\u00e9e et prix* [\\#7857](https://github.com/Wishibam/Marketplace-api/pull/7857)\n    - *:bug: fix: index option values in the organization locale, not the current one* [\\#7858](https://github.com/Wishibam/Marketplace-api/pull/7858)\n \n- **D\u00e9j\u00e0 en production**\n    - *:arrow\\_up: deps: bump php\\_codesniffer to 4.0.4 (CVE-2026-67434)* [\\#7817](https://github.com/Wishibam/Marketplace-api/pull/7817)\n    - *feat: allow max product variation at 380* [\\#7829](https://github.com/Wishibam/Marketplace-api/pull/7829)\n    - *:bug: fix: stop gating unmapped counters on product validity* [\\#7835](https://github.com/Wishibam/Marketplace-api/pull/7835)\n    - *:bug: fix: repair missing-mapping counters behind the retailer list icon* [\\#7837](https://github.com/Wishibam/Marketplace-api/pull/7837)\n\n## POST MEP\n\n### [PR #7826](https://github.com/Wishibam/Marketplace-api/pull/7826) \u2014 :sparkles: feat: raise the ES pagination window beyond 10k documents\n\n```\n  curl -X PUT \"http://localhost:9200/prod_product_*/_settings\" -H 'Content-Type: application/json' -d '{\"index\":{\"max_result_window\":200000}}'\n  curl -X PUT \"http://localhost:9200/prod_variation_*/_settings\" -H 'Content-Type: application/json' -d '{\"index\":{\"max_result_window\":500000}}'\n\n  V\u00e9rifier :\n  curl \"http://localhost:9200/prod_product_*/_settings/index.max_result_window?flat_settings\"\n  curl \"http://localhost:9200/prod_variation_*/_settings/index.max_result_window?flat_settings\"\n```\n\n### [PR #7828](https://github.com/Wishibam/Marketplace-api/pull/7828) \u2014 feat(merchandising): actions de masse asynchrones avec lock par organisation\n\n - ansible en prod \u00e7a https://github.com/Wishibam/Infrastructure/pull/467\n", "creation_timestamp": "2026-08-26T13:38:34.676757Z"}, {"uuid": "b4a64117-774d-4e6f-b6ce-eb88e3d47984", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67434", "type": "seen", "source": "https://gist.github.com/FR-Flo/312c3f50bce696ca594e8806df98ff03", "content": "## \ud83d\udd17 Companion release\n\nThis release ships alongside the **Marketplace-client (frontend)** release PR:\n\n- https://github.com/Wishibam/Marketplace-client/pull/4256\n\n- **Trello**\n    - [Attributs required par cat\u00e9gorie](https://trello.com/c/2loCszpt/1854-attributs-required-par-cat%C3%A9gorie) **\ud83e\udd73Testing**\n        - *Feat: Makes attributes required or not per categories* [\\#7474](https://github.com/Wishibam/Marketplace-api/pull/7474)\n    - [\ud83d\udfe2 Int\u00e9gration des fanions promotionnels \u2014 Ajout image au tag de taxon (MP) (\u00e9volution n\u00b011)](https://trello.com/c/fNNkiR1c/2405-%F0%9F%9F%A2-int%C3%A9gration-des-fanions-promotionnels-ajout-image-au-tag-de-taxon-mp-%C3%A9volution-n11) **\ud83e\udd75 Retour de test**\n        - *:sparkles: feat: fanions de taxon \u2014 images desktop/mobile (MP-api)* [\\#7617](https://github.com/Wishibam/Marketplace-api/pull/7617)\n    - [MP - Cr\u00e9ation / modification m\u00e9thode de livraison - impossible de save](https://trello.com/c/Ud1DRxgj/2407-mp-cr%C3%A9ation-modification-m%C3%A9thode-de-livraison-impossible-de-save) **\ud83e\udd75 Retour de test**\n        - *:bug: MP Fix Dpd class, file and discriminator name* [\\#7757](https://github.com/Wishibam/Marketplace-api/pull/7757)\n    - [Ticket de caisse - pb de cache](https://trello.com/c/EwgktbXZ/2493-ticket-de-caisse-pb-de-cache) **\ud83e\udd75 Retour de test**\n        - *:bug: fix: reset receipt cache between export Messenger messages* [\\#7791](https://github.com/Wishibam/Marketplace-api/pull/7791)\n    - [\ud83d\ude84 Commande exp\u00e9di\u00e9e : l'interface part trop vite et garde l'ancien statut](https://trello.com/c/6QmFnpyb/2418-%F0%9F%9A%84-commande-exp%C3%A9di%C3%A9e-linterface-part-trop-vite-et-garde-lancien-statut) **In review WMS**\n        - *:sparkles: OMS order, add \"inProcessing\" flag* [\\#7797](https://github.com/Wishibam/Marketplace-api/pull/7797)\n    - [MP - Sur le marchand (listing & d\u00e9tails), mettre un lien qui redirige directement vers le marchand en front](https://trello.com/c/Z136lbnm/1296-mp-sur-le-marchand-listing-d%C3%A9tails-mettre-un-lien-qui-redirige-directement-vers-le-marchand-en-front) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *:sparkles: Add retailer eshop link* [\\#7822](https://github.com/Wishibam/Marketplace-api/pull/7822)\n    - [Tag - Ajout du champ \"Visibilit\u00e9\" c\u00f4t\u00e9 MP](https://trello.com/c/zPFP31T9/2398-tag-ajout-du-champ-visibilit%C3%A9-c%C3%B4t%C3%A9-mp) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *:sparkles: Add tag visibility field to retailer corner and category* [\\#7831](https://github.com/Wishibam/Marketplace-api/pull/7831)\n    - [Nouvelle vue Enseigne -Partie 1-](https://trello.com/c/AVsRvxLu/2494-nouvelle-vue-enseigne-partie-1) **\ud83e\udd73Testing**\n        - *:sparkles: OMS New enseigne view (front only) no interaction* [\\#7846](https://github.com/Wishibam/Marketplace-api/pull/7846)\n \n- **Misc**\n    - *feat(shipping-method): expose the default return method flag on the API* [\\#7793](https://github.com/Wishibam/Marketplace-api/pull/7793)\n    - *:sparkles: feat: resync a single retailer in the live merchandising indices* [\\#7808](https://github.com/Wishibam/Marketplace-api/pull/7808)\n    - *:bug: WMS Log Message Container identifier* [\\#7810](https://github.com/Wishibam/Marketplace-api/pull/7810)\n    - *:bug: fix: resync-retailer scroll rejected by ES8 (size param)* [\\#7820](https://github.com/Wishibam/Marketplace-api/pull/7820)\n    - *feat(mcp): add MCP server walking skeleton with list\\_organizations* [\\#7823](https://github.com/Wishibam/Marketplace-api/pull/7823)\n    - *refactor(mcp): extract logic from ImportAction, RetailerNormalizer and RankProduct* [\\#7824](https://github.com/Wishibam/Marketplace-api/pull/7824)\n    - *:sparkles: feat: compute product scoring on the fly (service + ES)* [\\#7825](https://github.com/Wishibam/Marketplace-api/pull/7825)\n    - *:sparkles: feat: raise the ES pagination window beyond 10k documents* [\\#7826](https://github.com/Wishibam/Marketplace-api/pull/7826)\n    - *feat(merchandising): supporter les tris du listing produit sur POST /merchandising* [\\#7827](https://github.com/Wishibam/Marketplace-api/pull/7827)\n    - *feat(merchandising): actions de masse asynchrones avec lock par organisation* [\\#7828](https://github.com/Wishibam/Marketplace-api/pull/7828)\n    - *Merge feat/mcp-walking-skeleton (simulate #7823 merge)* [\\#7832](https://github.com/Wishibam/Marketplace-api/pull/7832)\n    - *feat(product-list): pipeline batch pour les actions de masse des listes produits* [\\#7833](https://github.com/Wishibam/Marketplace-api/pull/7833)\n    - *feat(mcp): Add OAuth discovery* [\\#7834](https://github.com/Wishibam/Marketplace-api/pull/7834)\n    - *:arrow\\_up: deps: bump mcp/sdk to 0.7.1 (CVE-2026-53965)* [\\#7838](https://github.com/Wishibam/Marketplace-api/pull/7838)\n    - *:bug: fix: guard against null option name/value in CSV export* [\\#7841](https://github.com/Wishibam/Marketplace-api/pull/7841)\n    - *:bug: fix: stream line item CSV export to fix memory exhaustion* [\\#7842](https://github.com/Wishibam/Marketplace-api/pull/7842)\n    - *:arrow\\_up: deps: patch sodium\\_compat Ed25519 key validation vulnerability* [\\#7843](https://github.com/Wishibam/Marketplace-api/pull/7843)\n    - *fix: attribut required category* [\\#7851](https://github.com/Wishibam/Marketplace-api/pull/7851)\n    - *fix: batch action view* [\\#7852](https://github.com/Wishibam/Marketplace-api/pull/7852)\n    - *:bug: fix: batch the retailers list health queries (N+1)* [\\#7854](https://github.com/Wishibam/Marketplace-api/pull/7854)\n \n- **D\u00e9j\u00e0 en production**\n    - *:arrow\\_up: deps: bump php\\_codesniffer to 4.0.4 (CVE-2026-67434)* [\\#7817](https://github.com/Wishibam/Marketplace-api/pull/7817)\n    - *feat: allow max product variation at 380* [\\#7829](https://github.com/Wishibam/Marketplace-api/pull/7829)\n    - *:bug: fix: stop gating unmapped counters on product validity* [\\#7835](https://github.com/Wishibam/Marketplace-api/pull/7835)\n    - *:bug: fix: repair missing-mapping counters behind the retailer list icon* [\\#7837](https://github.com/Wishibam/Marketplace-api/pull/7837)\n\n## POST MEP\n\n### [PR #7826](https://github.com/Wishibam/Marketplace-api/pull/7826) \u2014 :sparkles: feat: raise the ES pagination window beyond 10k documents\n\n```\n  curl -X PUT \"http://localhost:9200/prod_product_*/_settings\" -H 'Content-Type: application/json' -d '{\"index\":{\"max_result_window\":200000}}'\n  curl -X PUT \"http://localhost:9200/prod_variation_*/_settings\" -H 'Content-Type: application/json' -d '{\"index\":{\"max_result_window\":500000}}'\n\n  V\u00e9rifier :\n  curl \"http://localhost:9200/prod_product_*/_settings/index.max_result_window?flat_settings\"\n  curl \"http://localhost:9200/prod_variation_*/_settings/index.max_result_window?flat_settings\"\n```\n\n### [PR #7828](https://github.com/Wishibam/Marketplace-api/pull/7828) \u2014 feat(merchandising): actions de masse asynchrones avec lock par organisation\n\n - ansible en prod \u00e7a https://github.com/Wishibam/Infrastructure/pull/467\n", "creation_timestamp": "2026-08-24T15:51:03.717283Z"}, {"uuid": "9c4d8081-7d89-4eab-817a-08f9b8556d63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67434", "type": "seen", "source": "https://gist.github.com/jbourdin/abfb271146f7e6a70c822fbdb00c3f14", "content": "- **Trello**\n    - [GLOBAL - Email Alerte paiement en erreur](https://trello.com/c/P1DJvjHp/3229-global-email-alerte-paiement-en-erreur) **\ud83e\udd13 Testing**\n        - *feat(payment): send email notification when payment fails* [\\#10555](https://github.com/Wishibam/Ecommerce-sylius/pull/10555)\n    - [Helsinki : Portail de retour - Sylius - int\u00e9gration front du portail de retour](https://trello.com/c/mhcc7YaC/2401-helsinki-portail-de-retour-sylius-int%C3%A9gration-front-du-portail-de-retour) **TEMP - EPIC - Droit de r\u00e9tractation**\n        - *feat(helsinki): Add return portal to Helsinki order details* [\\#11757](https://github.com/Wishibam/Ecommerce-sylius/pull/11757)\n    - [\u26a0\ufe0fAction prod\u26a0\ufe0f\ud83d\udd14 Refonte TVO : tracking du volet d'alerte \u00ab retour en stock \u00bb](https://trello.com/c/SXyhrSQb/3834-%E2%9A%A0%EF%B8%8Faction-prod%E2%9A%A0%EF%B8%8F%F0%9F%94%94-refonte-tvo-tracking-du-volet-dalerte-retour-en-stock) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: track back-in-stock alert panel usage* [\\#11791](https://github.com/Wishibam/Ecommerce-sylius/pull/11791)\n    - [TVO - Fiche produit - Ajout des blocs \"Mati\u00e8re et entretien\" & \"Caract\u00e9ristiques\"](https://trello.com/c/AbsKmIzk/3633-tvo-fiche-produit-ajout-des-blocs-mati%C3%A8re-et-entretien-caract%C3%A9ristiques) **\ud83c\udf89 A MEP**\n        - *feat(tvo): add Mati\u00e8re et entretien & Caract\u00e9ristiques blocks on PDP* [\\#11812](https://github.com/Wishibam/Ecommerce-sylius/pull/11812)\n    - [\\[Migration\\]\\[A.2\\] D\u00e9mant\u00e8lement Setono Analytics + Tag-Bag](https://trello.com/c/uJN0Gkiz/3856-migrationa2-d%C3%A9mant%C3%A8lement-setono-analytics-tag-bag) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore(migration): internalize setono analytics + tag-bag as src/Component \\[A.2\\]* [\\#11846](https://github.com/Wishibam/Ecommerce-sylius/pull/11846)\n    - [\\[Migration\\]\\[A.4.1\\] Internaliser bitbag/wishlist-plugin dans src/Component/Wishlist](https://trello.com/c/U9dQGx1l/3863-migrationa41-internaliser-bitbag-wishlist-plugin-dans-src-component-wishlist) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: internalize bitbag/wishlist-plugin \\[A.4.1\\]* [\\#11856](https://github.com/Wishibam/Ecommerce-sylius/pull/11856)\n    - [\\[Migration\\]\\[A.4.2/A.4.3\\] Internaliser bring & deep-link dans src/Component](https://trello.com/c/RsLN5SNT/3864-migrationa42-a43-internaliser-bring-deep-link-dans-src-component) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: internalize bring & deep-link plugins \\[A.4.2, A.4.3\\]* [\\#11861](https://github.com/Wishibam/Ecommerce-sylius/pull/11861)\n    - [\\[Migration\\]\\[A.5\\] Bumps frontend \u00ab safe \u00bb + suppression des packages morts](https://trello.com/c/vI6k61gt/3873-migrationa5-bumps-frontend-safe-suppression-des-packages-morts) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: bump safe frontend deps + prune dead packages \\[A.5\\]* [\\#11875](https://github.com/Wishibam/Ecommerce-sylius/pull/11875)\n    - [\\[Migration\\]\\[A.6\\] Pr\u00e9paration Doctrine pour DBAL 3 (monkey-patch migrations)](https://trello.com/c/8mdyVMwg/3880-migrationa6-pr%C3%A9paration-doctrine-pour-dbal-3-monkey-patch-migrations) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: replace Doctrine migration monkey-patch for DBAL 3 \\[A.6\\]* [\\#11893](https://github.com/Wishibam/Ecommerce-sylius/pull/11893)\n    - [TVO - Express checkout : adresse tronqu\u00e9e \u2014 nom de rue perdu (Apple Pay line1/line2)](https://trello.com/c/dIrl0I1a/3884-tvo-express-checkout-adresse-tronqu%C3%A9e-nom-de-rue-perdu-apple-pay-line1-line2) **\ud83e\udd13 Testing**\n        - *:bug: fix: join express checkout wallet address line1/line2 into street* [\\#11914](https://github.com/Wishibam/Ecommerce-sylius/pull/11914)\n    - [\\[P0\\] Express checkout : re-v\u00e9rifier le montant du PaymentIntent au complete](https://trello.com/c/qJdTR9Jc/3885-p0-express-checkout-re-v%C3%A9rifier-le-montant-du-paymentintent-au-complete) **\ud83d\udc8e In Review**\n        - *:bug: fix: verify express checkout PaymentIntent amount at completion* [\\#11916](https://github.com/Wishibam/Ecommerce-sylius/pull/11916)\n    - [\\[P0\\] Webhook Stripe : rembourser r\u00e9ellement les charges des commandes refus\u00e9es/annul\u00e9es](https://trello.com/c/fyJeMD3L/3886-p0-webhook-stripe-rembourser-r%C3%A9ellement-les-charges-des-commandes-refus%C3%A9es-annul%C3%A9es) **\ud83d\udc8e In Review**\n        - *:bug: fix: refund Stripe charges captured for refused or cancelled orders* [\\#11918](https://github.com/Wishibam/Ecommerce-sylius/pull/11918)\n    - [\\[P1\\] Express checkout : pinner explicitement les wallets autoris\u00e9s (quick win)](https://trello.com/c/tEpmPM9l/3890-p1-express-checkout-pinner-explicitement-les-wallets-autoris%C3%A9s-quick-win) **\ud83e\udd13 Testing**\n        - *:bug: fix: restrict express checkout wallets to an explicit allowlist* [\\#11919](https://github.com/Wishibam/Ecommerce-sylius/pull/11919)\n    - [\\[P0\\] Express checkout : commandes \u00e0 fonds captur\u00e9s supprim\u00e9es par la purge des carts + cha\u00eene d'abort morte](https://trello.com/c/1Wo7zGP5/3887-p0-express-checkout-commandes-%C3%A0-fonds-captur%C3%A9s-supprim%C3%A9es-par-la-purge-des-carts-cha%C3%AEne-dabort-morte) **\ud83d\udc8e In Review**\n        - *:bug: fix: protect express checkout captured-funds carts from the purge* [\\#11920](https://github.com/Wishibam/Ecommerce-sylius/pull/11920)\n    - [Helsinki \u2014 Funnel checkout GA4 vide : \u00e9v\u00e9nements e-commerce manquants/incomplets](https://trello.com/c/j0yQGSFm/3921-helsinki-funnel-checkout-ga4-vide-%C3%A9v%C3%A9nements-e-commerce-manquants-incomplets) **\ud83c\udf44 Ready for testing**\n        - *:bug: fix: \u00e9mettre le funnel checkout GA4 complet* [\\#11980](https://github.com/Wishibam/Ecommerce-sylius/pull/11980)\n        - *:bug: fix: \u00e9mettre add\\_payment\\_info quand l'\u00e9tape de paiement est saut\u00e9e* [\\#12014](https://github.com/Wishibam/Ecommerce-sylius/pull/12014)\n    - [FEAT-0006 \u2014 Regroupement des emails d'annulation d'articles](https://trello.com/c/bBiV4jTE/3415-feat-0006-regroupement-des-emails-dannulation-darticles) **\ud83e\udee1 To Do JC**\n        - *:bug: fix: FEAT-0006 cancellation email grouping QA feedback* [\\#11984](https://github.com/Wishibam/Ecommerce-sylius/pull/11984)\n        - *:bug: fix: register order\\_entirely\\_cancelled email template for all projects* [\\#12091](https://github.com/Wishibam/Ecommerce-sylius/pull/12091)\n    - [Min-height pages React](https://trello.com/c/Rti8eFXb/3919-min-height-pages-react) **\ud83c\udf89 A MEP**\n        - *:bug: fix: add min-height on React pages to prevent footer flash* [\\#11987](https://github.com/Wishibam/Ecommerce-sylius/pull/11987)\n    - [SEO - TVO - changement de slug](https://trello.com/c/Gbb2tles/3908-seo-tvo-changement-de-slug) **\ud83c\udf89 A MEP**\n        - *:bug: fix: clean up TVO brand page slugs with 301 redirects* [\\#11988](https://github.com/Wishibam/Ecommerce-sylius/pull/11988)\n    - [\u26a0\ufe0f action preprod/prod \u26a0\ufe0f \ud83d\uded2 Refonte Checkout #1 \u2014 La page Panier change de garde-robe](https://trello.com/c/qxdtlZxk/3851-%E2%9A%A0%EF%B8%8F-action-preprod-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%9B%92-refonte-checkout-1-la-page-panier-change-de-garde-robe) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): cart page QA feedback round* [\\#11990](https://github.com/Wishibam/Ecommerce-sylius/pull/11990)\n    - [\u26a0\ufe0f MEP \u26a0\ufe0f\u2b50 Google Customer Reviews sur TVO \u2014 brancher la machine \u00e0 \u00e9toiles](https://trello.com/c/7JA9u85M/3899-%E2%9A%A0%EF%B8%8F-mep-%E2%9A%A0%EF%B8%8F%E2%AD%90-google-customer-reviews-sur-tvo-brancher-la-machine-%C3%A0-%C3%A9toiles) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: TVO Google Customer Reviews \u2014 GTIN produits sur thank you* [\\#11991](https://github.com/Wishibam/Ecommerce-sylius/pull/11991)\n    - [Fix : TypeError trim() null sur les share descriptions de channel (admin)](https://trello.com/c/o47Ek1Fo/3924-fix-typeerror-trim-null-sur-les-share-descriptions-de-channel-admin) **\ud83e\udd16 Testing tech**\n        - *:bug: fix: guard against null share descriptions in channel setter* [\\#11992](https://github.com/Wishibam/Ecommerce-sylius/pull/11992)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f \ud83d\udce6\ud83c\udf0d Mondial Relay sans fronti\u00e8res \u2014 points relais UE (v1 TVO)](https://trello.com/c/4X0QYlQ5/3918-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%93%A6%F0%9F%8C%8D-mondial-relay-sans-fronti%C3%A8res-points-relais-ue-v1-tvo) **\ud83d\udc8e In Review**\n        - *:sparkles: feat(mondial-relay): relay search follows the buyer's country* [\\#11994](https://github.com/Wishibam/Ecommerce-sylius/pull/11994)\n    - [\ud83d\udccd Refonte Checkout \u2014 La suggestion d'adresse qui fait mouche](https://trello.com/c/vF0T1FZU/3860-%F0%9F%93%8D-refonte-checkout-la-suggestion-dadresse-qui-fait-mouche) **\ud83d\ude80 To Do Vincent**\n        - *:bug: fix(tvo): address suggestion QA feedback round* [\\#11995](https://github.com/Wishibam/Ecommerce-sylius/pull/11995)\n        - *:bug: fix(tvo): keep the manual phone flag choice made on an empty field* [\\#12058](https://github.com/Wishibam/Ecommerce-sylius/pull/12058)\n    - [\ud83c\udf5e Refonte Checkout \u2014 Des toasts tout chauds pour les messages syst\u00e8me](https://trello.com/c/N70pstGO/3861-%F0%9F%8D%9E-refonte-checkout-des-toasts-tout-chauds-pour-les-messages-syst%C3%A8me) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): checkout toasts QA feedback round* [\\#11996](https://github.com/Wishibam/Ecommerce-sylius/pull/11996)\n    - [\ud83d\udd00 Refonte TVO : le variant s\u00e9lectionn\u00e9 saute en 1re position au lieu de rester \u00e0 sa place](https://trello.com/c/vQH5uxHz/3904-%F0%9F%94%80-refonte-tvo-le-variant-s%C3%A9lectionn%C3%A9-saute-en-1re-position-au-lieu-de-rester-%C3%A0-sa-place) **\ud83c\udf89 A MEP**\n        - *:bug: fix: keep option values in place on overflowing variant axis* [\\#11998](https://github.com/Wishibam/Ecommerce-sylius/pull/11998)\n    - [TVO- mail order\\_open\\_return\\_withdrawn -remplacement de tag](https://trello.com/c/NK5CnCM2/3883-tvo-mail-orderopenreturnwithdrawn-remplacement-de-tag) **\ud83c\udf89 A MEP**\n        - *\ud83d\udc1b fix: orange \"return in progress\" badge on TVO withdrawal email* [\\#12000](https://github.com/Wishibam/Ecommerce-sylius/pull/12000)\n    - [SEO - ALL - Meta Title](https://trello.com/c/QDbDIPTu/3909-seo-all-meta-title) **\ud83e\udd13 Testing**\n        - *:sparkles: feat: add dedicated Meta Title for CMS pages* [\\#12001](https://github.com/Wishibam/Ecommerce-sylius/pull/12001)\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\ude9a Refonte Checkout #3 \u2014 Le Mode de livraison prend la route](https://trello.com/c/NDSNOimu/3854-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%9A%9A-refonte-checkout-3-le-mode-de-livraison-prend-la-route) **\ud83d\ude80 To Do Vincent**\n        - *:sparkles: feat(tvo): React checkout select shipping step (P3)* [\\#12011](https://github.com/Wishibam/Ecommerce-sylius/pull/12011)\n    - [Helsinki - Correction bug d'affichage en finnois en version mobile](https://trello.com/c/f9V6mA6z/3686-helsinki-correction-bug-daffichage-en-finnois-en-version-mobile) **\ud83c\udf89 A MEP**\n        - *:bug: fix: reduce Helsinki posts carousel title on mobile* [\\#12017](https://github.com/Wishibam/Ecommerce-sylius/pull/12017)\n    - [\ud83c\udfbd \\[IS\\] Footer : \u00ab Notre accompagnement \u00bb devient \u00ab Nos services \u00bb et raccroche son lien](https://trello.com/c/H2X0XtqH/3932-%F0%9F%8E%BD-is-footer-notre-accompagnement-devient-nos-services-et-raccroche-son-lien) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: rename the Intersport footer column to \u00ab Nos services \u00bb and unlink its title* [\\#12026](https://github.com/Wishibam/Ecommerce-sylius/pull/12026)\n        - *:rewind: revert: Intersport footer \u00ab Nos services \u00bb (wrong target branch)* [\\#12037](https://github.com/Wishibam/Ecommerce-sylius/pull/12037)\n    - [Batavia - Probl\u00e8me sur l'affichage des variations](https://trello.com/c/MY6aNjLj/3931-batavia-probl%C3%A8me-sur-laffichage-des-variations) **\ud83c\udf89 A MEP**\n        - *:bug: fix: deep-link Batavia PLP cards to the displayed color variant* [\\#12027](https://github.com/Wishibam/Ecommerce-sylius/pull/12027)\n    - [Batavia \u2014 Mails \u00ab produit indisponible \u00bb non re\u00e7us par les clients](https://trello.com/c/YLHFxnVs/3933-batavia-mails-produit-indisponible-non-re%C3%A7us-par-les-clients) **\ud83c\udf89 A MEP**\n        - *:bug: fix: validate admin email templates and log real send outcomes* [\\#12035](https://github.com/Wishibam/Ecommerce-sylius/pull/12035)\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\udcb3 Refonte Checkout #4 \u2014 Le Mode de paiement passe \u00e0 la caisse](https://trello.com/c/vDcvKX88/3855-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%92%B3-refonte-checkout-4-le-mode-de-paiement-passe-%C3%A0-la-caisse) **\ud83d\ude80 To Do Vincent**\n        - *:sparkles: feat(tvo): rebuild the checkout payment step and success page in React* [\\#12051](https://github.com/Wishibam/Ecommerce-sylius/pull/12051)\n    - [Intersport - Bug d'affichage images box produit](https://trello.com/c/mOO6EBx1/3936-intersport-bug-daffichage-images-box-produit) **\ud83c\udf89 A MEP**\n        - *:bug: \\[via\\] fix: styles mobiles des pages mot de passe oubli\u00e9/reset* [\\#12055](https://github.com/Wishibam/Ecommerce-sylius/pull/12055)\n    - [\ud83e\ude97 VIA \u2014 Le filtre Cat\u00e9gorie s'ouvre tout seul dans les descentes : on le veut ferm\u00e9 au chargement](https://trello.com/c/GMHVWZe2/3938-%F0%9F%AA%97-via-le-filtre-cat%C3%A9gorie-souvre-tout-seul-dans-les-descentes-on-le-veut-ferm%C3%A9-au-chargement) **\ud83c\udf89 A MEP**\n        - *:bug: \\[via\\] fix: le filtre Cat\u00e9gorie reste ferm\u00e9 au chargement des descentes* [\\#12059](https://github.com/Wishibam/Ecommerce-sylius/pull/12059)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f Feed : Ajouter le flux facebook TVO](https://trello.com/c/iXjTokqz/3937-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-feed-ajouter-le-flux-facebook-tvo) **\ud83e\udd16 Testing tech**\n        - *:sparkles: feat: porter le flux facebook\\_catalog vers le nouveau composant* [\\#12060](https://github.com/Wishibam/Ecommerce-sylius/pull/12060)\n    - [\\[Migration\\]\\[B.1\\] PHP 8.2 \u2192 8.3](https://trello.com/c/Slm1Q5n7/3940-migrationb1-php-82-%E2%86%92-83) **\ud83d\ude80 To Do Vincent**\n        - *:wrench: chore: run the test suite on PHP 8.2 and 8.3 \\[B.1\\]* [\\#12063](https://github.com/Wishibam/Ecommerce-sylius/pull/12063)\n        - *:bug: fix(deploy): restart PHP-FPM via systemd glob instead of hardcoded 8.2* [\\#12066](https://github.com/Wishibam/Ecommerce-sylius/pull/12066)\n        - *:wrench: chore: run the dual PHP matrix on the tests job only \\[B.1\\]* [\\#12068](https://github.com/Wishibam/Ecommerce-sylius/pull/12068)\n    - [\\[Migration\\]\\[B.2\\] Sylius 1.12 \u2192 1.13 (DBAL 3)](https://trello.com/c/huA0VNU9/3941-migrationb2-sylius-112-%E2%86%92-113-dbal-3) **\ud83d\ude80 To Do Vincent**\n        - *:wrench: chore(doctrine): drop the last getSchemaManager() call for DBAL 3/4 \\[B.2 P.1\\]* [\\#12071](https://github.com/Wishibam/Ecommerce-sylius/pull/12071)\n        - *:white\\_check\\_mark: test: characterize every state machine graph wiring \\[B.2 P.2\\]* [\\#12074](https://github.com/Wishibam/Ecommerce-sylius/pull/12074)\n        - *:recycle: refactor: state machine abstraction infra + pilot call site \\[B.2 P.3.1\\]* [\\#12089](https://github.com/Wishibam/Ecommerce-sylius/pull/12089)\n        - *:wrench: chore: bump symfony/flex 1 to 2 \\[B.2 P.4\\]* [\\#12100](https://github.com/Wishibam/Ecommerce-sylius/pull/12100)\n    - [Fix : \ufeff\ufefftransmettre le consentement newsletter \u00e0 Coniq \u00e0 l'inscription](https://trello.com/c/mShGQBUK/3943-fix-transmettre-le-consentement-newsletter-%C3%A0-coniq-%C3%A0-linscription) **\ud83e\udd13 Testing**\n        - *:sparkles: feat: transmettre le consentement newsletter \u00e0 Coniq \u00e0 l'inscription* [\\#12076](https://github.com/Wishibam/Ecommerce-sylius/pull/12076)\n \n- **Misc**\n    - *:sparkles: feat: PushDispatcher + adaptateur FCM (push app TVO)* [\\#11917](https://github.com/Wishibam/Ecommerce-sylius/pull/11917)\n    - *style(withdrawal): make the withdrawal button theme-colored and not f\u2026* [\\#11951](https://github.com/Wishibam/Ecommerce-sylius/pull/11951)\n    - *:zap: perf: Batavia PLP \u2014 ES result cache, key batching, menu cache* [\\#11963](https://github.com/Wishibam/Ecommerce-sylius/pull/11963)\n    - *:wrench: chore: outillage pour worktrees parall\u00e8les (front isol\u00e9 par projet)* [\\#11986](https://github.com/Wishibam/Ecommerce-sylius/pull/11986)\n    - *:sparkles: feat: push app TVO \u2014 envoi asynchrone + badge (3.A.5 + 3.A.6)* [\\#12022](https://github.com/Wishibam/Ecommerce-sylius/pull/12022)\n    - *:sparkles: feat: badge unreadPushCount de bout en bout (app TVO)* [\\#12025](https://github.com/Wishibam/Ecommerce-sylius/pull/12025)\n    - *:sparkles: feat: compteur badge dans data des push (app TVO)* [\\#12028](https://github.com/Wishibam/Ecommerce-sylius/pull/12028)\n    - *:sparkles: feat: push \u00ab commande confirm\u00e9e \u00bb (app TVO)* [\\#12031](https://github.com/Wishibam/Ecommerce-sylius/pull/12031)\n    - *:sparkles: feat: push \u00ab commande exp\u00e9di\u00e9e \u00bb (app TVO)* [\\#12040](https://github.com/Wishibam/Ecommerce-sylius/pull/12040)\n    - *feat(push): notification de remboursement de commande (TVO 3.B.3)* [\\#12041](https://github.com/Wishibam/Ecommerce-sylius/pull/12041)\n    - *fix(push): durcir l'envoi FCM \u2014 timeouts born\u00e9s + retry effectif (TVO 3.A.7)* [\\#12042](https://github.com/Wishibam/Ecommerce-sylius/pull/12042)\n    - *test(featured-content): d\u00e9-flakifier testProgramDisableDelay (tol\u00e9rance sur le d\u00e9lai)* [\\#12044](https://github.com/Wishibam/Ecommerce-sylius/pull/12044)\n    - *feat(push): notification de retour en stock (TVO 3.B.4)* [\\#12045](https://github.com/Wishibam/Ecommerce-sylius/pull/12045)\n    - *feat(push): notification de baisse de prix wishlist (TVO 3.B.5)* [\\#12049](https://github.com/Wishibam/Ecommerce-sylius/pull/12049)\n    - *:bug: fix(megamenu): \u00e9largir le lien \u00e0 2048 caract\u00e8res* [\\#12050](https://github.com/Wishibam/Ecommerce-sylius/pull/12050)\n    - *feat(push): relance push des paniers abandonn\u00e9s (TVO 3.B.6)* [\\#12053](https://github.com/Wishibam/Ecommerce-sylius/pull/12053)\n    - *feat(deeplink): AASA de la nouvelle app TVO \u2014 Universal Links iOS (TVO 4.1)* [\\#12064](https://github.com/Wishibam/Ecommerce-sylius/pull/12064)\n    - *feat(deeplink): assetlinks.json de la nouvelle app TVO \u2014 App Links Android (TVO 4.2)* [\\#12065](https://github.com/Wishibam/Ecommerce-sylius/pull/12065)\n    - *:bug: fix: complete payments stuck by Stripe webhook/checkout race* [\\#12075](https://github.com/Wishibam/Ecommerce-sylius/pull/12075)\n    - *:bug: fix: dedup order\\_confirmation per order to stop double send* [\\#12101](https://github.com/Wishibam/Ecommerce-sylius/pull/12101)\n \n- **D\u00e9j\u00e0 en production**\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\udc1b Fix r\u00e9indexation ES bloqu\u00e9e \u2014 \u00ab immense term \u00bb sur attribut trop long (Intersport)](https://trello.com/c/iD6idW0v/3915-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%90%9B-fix-r%C3%A9indexation-es-bloqu%C3%A9e-immense-term-sur-attribut-trop-long-intersport) **MEP Ao\u00fbt**\n        - *:bug: fix: r\u00e9indexation ES bloqu\u00e9e par un attribut trop long (immense term)* [\\#11972](https://github.com/Wishibam/Ecommerce-sylius/pull/11972)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f \u203c\ufe0f Nouveau Feeds - Faire tourner tous les nouveaux feeds sur toutes les preprods/prods](https://trello.com/c/Kr8UhDAv/3910-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-%EF%B8%8F-nouveau-feeds-faire-tourner-tous-les-nouveaux-feeds-sur-toutes-les-preprods-prods) **\ud83e\udee1 To Do JC**\n        - *:sparkles: feat: drive-to-store feeds parity with legacy Setono* [\\#11979](https://github.com/Wishibam/Ecommerce-sylius/pull/11979)\n    - [TVO - Les recommandations produits ne remontent aucun produit sur la fiche produit](https://trello.com/c/lw3SYgNG/3926-tvo-les-recommandations-produits-ne-remontent-aucun-produit-sur-la-fiche-produit) **MEP Ao\u00fbt**\n        - *:bug: fix(search): match the indexed color value in recommendations* [\\#12004](https://github.com/Wishibam/Ecommerce-sylius/pull/12004)\n    - [A ESTIMER : Google Shopping Feed : ajouter le Outlet Price en cas de promotion](https://trello.com/c/RnEgL53B/3867-a-estimer-google-shopping-feed-ajouter-le-outlet-price-en-cas-de-promotion) **\ud83e\udd13 Testing**\n        - *:sparkles: feat(helsinki): expose the outlet price in the Google Shopping feed* [\\#12020](https://github.com/Wishibam/Ecommerce-sylius/pull/12020)\n    - [\u2615\ufe0f \\[Batavia\\] Frais de retour : \u20ac3,25 \u2192 \u20ac3,95 (et on passe le texte en traduction)](https://trello.com/c/P4vec3cz/3934-%E2%98%95%EF%B8%8F-batavia-frais-de-retour-%E2%82%AC325-%E2%86%92-%E2%82%AC395-et-on-passe-le-texte-en-traduction) **MEP Ao\u00fbt**\n        - *:bug: fix: Batavia return cost 3,95 and move the line to a translation* [\\#12034](https://github.com/Wishibam/Ecommerce-sylius/pull/12034)\n    - *:bug: fix: render flag emojis as SVG icons, not OS emoji glyphs* [\\#11981](https://github.com/Wishibam/Ecommerce-sylius/pull/11981)\n    - *:bug: fix: apply the flag icon filter to the remaining menu renderings* [\\#11982](https://github.com/Wishibam/Ecommerce-sylius/pull/11982)\n    - *:wrench: chore: bump php\\_codesniffer en 3.13.6 (CVE-2026-67434, CI rouge)* [\\#12008](https://github.com/Wishibam/Ecommerce-sylius/pull/12008)", "creation_timestamp": "2026-08-24T16:01:56.688062Z"}, {"uuid": "604896bb-4c75-4715-8f03-a26eda6e70e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67434", "type": "seen", "source": "https://gist.github.com/jbourdin/0add0e6a3b11bf64faa16f0fa23943ed", "content": "- **Trello**\n    - [GLOBAL - Email Alerte paiement en erreur](https://trello.com/c/P1DJvjHp/3229-global-email-alerte-paiement-en-erreur) **\ud83c\udf89 A MEP**\n        - *feat(payment): send email notification when payment fails* [\\#10555](https://github.com/Wishibam/Ecommerce-sylius/pull/10555)\n    - [Helsinki : Portail de retour - Sylius - int\u00e9gration front du portail de retour](https://trello.com/c/mhcc7YaC/2401-helsinki-portail-de-retour-sylius-int%C3%A9gration-front-du-portail-de-retour) **\ud83d\ude80Testing BACK / FLUX / CLIENT**\n        - *feat(helsinki): Add return portal to Helsinki order details* [\\#11757](https://github.com/Wishibam/Ecommerce-sylius/pull/11757)\n    - [\u26a0\ufe0fAction prod\u26a0\ufe0f\ud83d\udd14 Refonte TVO : tracking du volet d'alerte \u00ab retour en stock \u00bb](https://trello.com/c/SXyhrSQb/3834-%E2%9A%A0%EF%B8%8Faction-prod%E2%9A%A0%EF%B8%8F%F0%9F%94%94-refonte-tvo-tracking-du-volet-dalerte-retour-en-stock) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: track back-in-stock alert panel usage* [\\#11791](https://github.com/Wishibam/Ecommerce-sylius/pull/11791)\n    - [TVO - Fiche produit - Ajout des blocs \"Mati\u00e8re et entretien\" & \"Caract\u00e9ristiques\"](https://trello.com/c/AbsKmIzk/3633-tvo-fiche-produit-ajout-des-blocs-mati%C3%A8re-et-entretien-caract%C3%A9ristiques) **\ud83c\udf89 A MEP**\n        - *feat(tvo): add Mati\u00e8re et entretien & Caract\u00e9ristiques blocks on PDP* [\\#11812](https://github.com/Wishibam/Ecommerce-sylius/pull/11812)\n    - [\\[Migration\\]\\[A.2\\] D\u00e9mant\u00e8lement Setono Analytics + Tag-Bag](https://trello.com/c/uJN0Gkiz/3856-migrationa2-d%C3%A9mant%C3%A8lement-setono-analytics-tag-bag) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore(migration): internalize setono analytics + tag-bag as src/Component \\[A.2\\]* [\\#11846](https://github.com/Wishibam/Ecommerce-sylius/pull/11846)\n    - [\\[Migration\\]\\[A.4.1\\] Internaliser bitbag/wishlist-plugin dans src/Component/Wishlist](https://trello.com/c/U9dQGx1l/3863-migrationa41-internaliser-bitbag-wishlist-plugin-dans-src-component-wishlist) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: internalize bitbag/wishlist-plugin \\[A.4.1\\]* [\\#11856](https://github.com/Wishibam/Ecommerce-sylius/pull/11856)\n    - [\\[Migration\\]\\[A.4.2/A.4.3\\] Internaliser bring & deep-link dans src/Component](https://trello.com/c/RsLN5SNT/3864-migrationa42-a43-internaliser-bring-deep-link-dans-src-component) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: internalize bring & deep-link plugins \\[A.4.2, A.4.3\\]* [\\#11861](https://github.com/Wishibam/Ecommerce-sylius/pull/11861)\n    - [\\[Migration\\]\\[A.5\\] Bumps frontend \u00ab safe \u00bb + suppression des packages morts](https://trello.com/c/vI6k61gt/3873-migrationa5-bumps-frontend-safe-suppression-des-packages-morts) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: bump safe frontend deps + prune dead packages \\[A.5\\]* [\\#11875](https://github.com/Wishibam/Ecommerce-sylius/pull/11875)\n    - [\\[Migration\\]\\[A.6\\] Pr\u00e9paration Doctrine pour DBAL 3 (monkey-patch migrations)](https://trello.com/c/8mdyVMwg/3880-migrationa6-pr%C3%A9paration-doctrine-pour-dbal-3-monkey-patch-migrations) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: replace Doctrine migration monkey-patch for DBAL 3 \\[A.6\\]* [\\#11893](https://github.com/Wishibam/Ecommerce-sylius/pull/11893)\n    - [TVO - Express checkout : adresse tronqu\u00e9e \u2014 nom de rue perdu (Apple Pay line1/line2)](https://trello.com/c/dIrl0I1a/3884-tvo-express-checkout-adresse-tronqu%C3%A9e-nom-de-rue-perdu-apple-pay-line1-line2) **\ud83c\udf89 A MEP**\n        - *:bug: fix: join express checkout wallet address line1/line2 into street* [\\#11914](https://github.com/Wishibam/Ecommerce-sylius/pull/11914)\n    - [\\[P0\\] Express checkout : re-v\u00e9rifier le montant du PaymentIntent au complete](https://trello.com/c/qJdTR9Jc/3885-p0-express-checkout-re-v%C3%A9rifier-le-montant-du-paymentintent-au-complete) **\ud83e\udd13 Testing**\n        - *:bug: fix: verify express checkout PaymentIntent amount at completion* [\\#11916](https://github.com/Wishibam/Ecommerce-sylius/pull/11916)\n    - [\\[P0\\] Webhook Stripe : rembourser r\u00e9ellement les charges des commandes refus\u00e9es/annul\u00e9es](https://trello.com/c/fyJeMD3L/3886-p0-webhook-stripe-rembourser-r%C3%A9ellement-les-charges-des-commandes-refus%C3%A9es-annul%C3%A9es) **\ud83e\udd13 Testing**\n        - *:bug: fix: refund Stripe charges captured for refused or cancelled orders* [\\#11918](https://github.com/Wishibam/Ecommerce-sylius/pull/11918)\n    - [\\[P1\\] Express checkout : pinner explicitement les wallets autoris\u00e9s (quick win)](https://trello.com/c/tEpmPM9l/3890-p1-express-checkout-pinner-explicitement-les-wallets-autoris%C3%A9s-quick-win) **\ud83e\udd16 Testing tech**\n        - *:bug: fix: restrict express checkout wallets to an explicit allowlist* [\\#11919](https://github.com/Wishibam/Ecommerce-sylius/pull/11919)\n    - [\\[P0\\] Express checkout : commandes \u00e0 fonds captur\u00e9s supprim\u00e9es par la purge des carts + cha\u00eene d'abort morte](https://trello.com/c/1Wo7zGP5/3887-p0-express-checkout-commandes-%C3%A0-fonds-captur%C3%A9s-supprim%C3%A9es-par-la-purge-des-carts-cha%C3%AEne-dabort-morte) **\ud83e\udd13 Testing**\n        - *:bug: fix: protect express checkout captured-funds carts from the purge* [\\#11920](https://github.com/Wishibam/Ecommerce-sylius/pull/11920)\n    - [Helsinki \u2014 Funnel checkout GA4 vide : \u00e9v\u00e9nements e-commerce manquants/incomplets](https://trello.com/c/j0yQGSFm/3921-helsinki-funnel-checkout-ga4-vide-%C3%A9v%C3%A9nements-e-commerce-manquants-incomplets) **\ud83c\udf44 Ready for testing**\n        - *:bug: fix: \u00e9mettre le funnel checkout GA4 complet* [\\#11980](https://github.com/Wishibam/Ecommerce-sylius/pull/11980)\n        - *:bug: fix: \u00e9mettre add\\_payment\\_info quand l'\u00e9tape de paiement est saut\u00e9e* [\\#12014](https://github.com/Wishibam/Ecommerce-sylius/pull/12014)\n    - [FEAT-0006 \u2014 Regroupement des emails d'annulation d'articles](https://trello.com/c/bBiV4jTE/3415-feat-0006-regroupement-des-emails-dannulation-darticles) **\ud83c\udf89 A MEP**\n        - *:bug: fix: FEAT-0006 cancellation email grouping QA feedback* [\\#11984](https://github.com/Wishibam/Ecommerce-sylius/pull/11984)\n        - *:bug: fix: register order\\_entirely\\_cancelled email template for all projects* [\\#12091](https://github.com/Wishibam/Ecommerce-sylius/pull/12091)\n        - *:bug: fix: send grouped withdrawal confirmations on entirely cancelled orders* [\\#12104](https://github.com/Wishibam/Ecommerce-sylius/pull/12104)\n    - [Min-height pages React](https://trello.com/c/Rti8eFXb/3919-min-height-pages-react) **\ud83c\udf89 A MEP**\n        - *:bug: fix: add min-height on React pages to prevent footer flash* [\\#11987](https://github.com/Wishibam/Ecommerce-sylius/pull/11987)\n    - [SEO - TVO - changement de slug](https://trello.com/c/Gbb2tles/3908-seo-tvo-changement-de-slug) **\ud83c\udf89 A MEP**\n        - *:bug: fix: clean up TVO brand page slugs with 301 redirects* [\\#11988](https://github.com/Wishibam/Ecommerce-sylius/pull/11988)\n    - [\u26a0\ufe0f action preprod/prod \u26a0\ufe0f \ud83d\uded2 Refonte Checkout #1 \u2014 La page Panier change de garde-robe](https://trello.com/c/qxdtlZxk/3851-%E2%9A%A0%EF%B8%8F-action-preprod-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%9B%92-refonte-checkout-1-la-page-panier-change-de-garde-robe) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): cart page QA feedback round* [\\#11990](https://github.com/Wishibam/Ecommerce-sylius/pull/11990)\n    - [\u26a0\ufe0f MEP \u26a0\ufe0f\u2b50 Google Customer Reviews sur TVO \u2014 brancher la machine \u00e0 \u00e9toiles](https://trello.com/c/7JA9u85M/3899-%E2%9A%A0%EF%B8%8F-mep-%E2%9A%A0%EF%B8%8F%E2%AD%90-google-customer-reviews-sur-tvo-brancher-la-machine-%C3%A0-%C3%A9toiles) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: TVO Google Customer Reviews \u2014 GTIN produits sur thank you* [\\#11991](https://github.com/Wishibam/Ecommerce-sylius/pull/11991)\n    - [Fix : TypeError trim() null sur les share descriptions de channel (admin)](https://trello.com/c/o47Ek1Fo/3924-fix-typeerror-trim-null-sur-les-share-descriptions-de-channel-admin) **\ud83e\udd16 Testing tech**\n        - *:bug: fix: guard against null share descriptions in channel setter* [\\#11992](https://github.com/Wishibam/Ecommerce-sylius/pull/11992)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f \ud83d\udce6\ud83c\udf0d Mondial Relay sans fronti\u00e8res \u2014 points relais UE (v1 TVO)](https://trello.com/c/4X0QYlQ5/3918-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%93%A6%F0%9F%8C%8D-mondial-relay-sans-fronti%C3%A8res-points-relais-ue-v1-tvo) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat(mondial-relay): relay search follows the buyer's country* [\\#11994](https://github.com/Wishibam/Ecommerce-sylius/pull/11994)\n    - [\ud83d\udccd Refonte Checkout \u2014 La suggestion d'adresse qui fait mouche](https://trello.com/c/vF0T1FZU/3860-%F0%9F%93%8D-refonte-checkout-la-suggestion-dadresse-qui-fait-mouche) **\ud83d\ude80 To Do Vincent**\n        - *:bug: fix(tvo): address suggestion QA feedback round* [\\#11995](https://github.com/Wishibam/Ecommerce-sylius/pull/11995)\n        - *:bug: fix(tvo): keep the manual phone flag choice made on an empty field* [\\#12058](https://github.com/Wishibam/Ecommerce-sylius/pull/12058)\n    - [\ud83c\udf5e Refonte Checkout \u2014 Des toasts tout chauds pour les messages syst\u00e8me](https://trello.com/c/N70pstGO/3861-%F0%9F%8D%9E-refonte-checkout-des-toasts-tout-chauds-pour-les-messages-syst%C3%A8me) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): checkout toasts QA feedback round* [\\#11996](https://github.com/Wishibam/Ecommerce-sylius/pull/11996)\n    - [\ud83d\udd00 Refonte TVO : le variant s\u00e9lectionn\u00e9 saute en 1re position au lieu de rester \u00e0 sa place](https://trello.com/c/vQH5uxHz/3904-%F0%9F%94%80-refonte-tvo-le-variant-s%C3%A9lectionn%C3%A9-saute-en-1re-position-au-lieu-de-rester-%C3%A0-sa-place) **\ud83c\udf89 A MEP**\n        - *:bug: fix: keep option values in place on overflowing variant axis* [\\#11998](https://github.com/Wishibam/Ecommerce-sylius/pull/11998)\n    - [TVO- mail order\\_open\\_return\\_withdrawn -remplacement de tag](https://trello.com/c/NK5CnCM2/3883-tvo-mail-orderopenreturnwithdrawn-remplacement-de-tag) **\ud83c\udf89 A MEP**\n        - *\ud83d\udc1b fix: orange \"return in progress\" badge on TVO withdrawal email* [\\#12000](https://github.com/Wishibam/Ecommerce-sylius/pull/12000)\n    - [SEO - ALL - Meta Title](https://trello.com/c/QDbDIPTu/3909-seo-all-meta-title) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: add dedicated Meta Title for CMS pages* [\\#12001](https://github.com/Wishibam/Ecommerce-sylius/pull/12001)\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\ude9a Refonte Checkout #3 \u2014 Le Mode de livraison prend la route](https://trello.com/c/NDSNOimu/3854-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%9A%9A-refonte-checkout-3-le-mode-de-livraison-prend-la-route) **\ud83d\ude80 To Do Vincent**\n        - *:sparkles: feat(tvo): React checkout select shipping step (P3)* [\\#12011](https://github.com/Wishibam/Ecommerce-sylius/pull/12011)\n    - [Helsinki - Correction bug d'affichage en finnois en version mobile](https://trello.com/c/f9V6mA6z/3686-helsinki-correction-bug-daffichage-en-finnois-en-version-mobile) **\ud83c\udf89 A MEP**\n        - *:bug: fix: reduce Helsinki posts carousel title on mobile* [\\#12017](https://github.com/Wishibam/Ecommerce-sylius/pull/12017)\n    - [\ud83c\udfbd \\[IS\\] Footer : \u00ab Notre accompagnement \u00bb devient \u00ab Nos services \u00bb et raccroche son lien](https://trello.com/c/H2X0XtqH/3932-%F0%9F%8E%BD-is-footer-notre-accompagnement-devient-nos-services-et-raccroche-son-lien) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: rename the Intersport footer column to \u00ab Nos services \u00bb and unlink its title* [\\#12026](https://github.com/Wishibam/Ecommerce-sylius/pull/12026)\n        - *:rewind: revert: Intersport footer \u00ab Nos services \u00bb (wrong target branch)* [\\#12037](https://github.com/Wishibam/Ecommerce-sylius/pull/12037)\n    - [Batavia - Probl\u00e8me sur l'affichage des variations](https://trello.com/c/MY6aNjLj/3931-batavia-probl%C3%A8me-sur-laffichage-des-variations) **\ud83c\udf89 A MEP**\n        - *:bug: fix: deep-link Batavia PLP cards to the displayed color variant* [\\#12027](https://github.com/Wishibam/Ecommerce-sylius/pull/12027)\n    - [Batavia \u2014 Mails \u00ab produit indisponible \u00bb non re\u00e7us par les clients](https://trello.com/c/YLHFxnVs/3933-batavia-mails-produit-indisponible-non-re%C3%A7us-par-les-clients) **\ud83c\udf89 A MEP**\n        - *:bug: fix: validate admin email templates and log real send outcomes* [\\#12035](https://github.com/Wishibam/Ecommerce-sylius/pull/12035)\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\udcb3 Refonte Checkout #4 \u2014 Le Mode de paiement passe \u00e0 la caisse](https://trello.com/c/vDcvKX88/3855-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%92%B3-refonte-checkout-4-le-mode-de-paiement-passe-%C3%A0-la-caisse) **\ud83d\ude80 To Do Vincent**\n        - *:sparkles: feat(tvo): rebuild the checkout payment step and success page in React* [\\#12051](https://github.com/Wishibam/Ecommerce-sylius/pull/12051)\n    - [Intersport - Bug d'affichage images box produit](https://trello.com/c/mOO6EBx1/3936-intersport-bug-daffichage-images-box-produit) **\ud83c\udf89 A MEP**\n        - *:bug: \\[via\\] fix: styles mobiles des pages mot de passe oubli\u00e9/reset* [\\#12055](https://github.com/Wishibam/Ecommerce-sylius/pull/12055)\n    - [\ud83e\ude97 VIA \u2014 Le filtre Cat\u00e9gorie s'ouvre tout seul dans les descentes : on le veut ferm\u00e9 au chargement](https://trello.com/c/GMHVWZe2/3938-%F0%9F%AA%97-via-le-filtre-cat%C3%A9gorie-souvre-tout-seul-dans-les-descentes-on-le-veut-ferm%C3%A9-au-chargement) **\ud83c\udf89 A MEP**\n        - *:bug: \\[via\\] fix: le filtre Cat\u00e9gorie reste ferm\u00e9 au chargement des descentes* [\\#12059](https://github.com/Wishibam/Ecommerce-sylius/pull/12059)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f Feed : Ajouter le flux facebook TVO](https://trello.com/c/iXjTokqz/3937-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-feed-ajouter-le-flux-facebook-tvo) **\ud83e\udd16 Testing tech**\n        - *:sparkles: feat: porter le flux facebook\\_catalog vers le nouveau composant* [\\#12060](https://github.com/Wishibam/Ecommerce-sylius/pull/12060)\n    - [\\[Migration\\]\\[B.1\\] PHP 8.2 \u2192 8.3](https://trello.com/c/Slm1Q5n7/3940-migrationb1-php-82-%E2%86%92-83) **\ud83d\ude80 To Do Vincent**\n        - *:wrench: chore: run the test suite on PHP 8.2 and 8.3 \\[B.1\\]* [\\#12063](https://github.com/Wishibam/Ecommerce-sylius/pull/12063)\n        - *:bug: fix(deploy): restart PHP-FPM via systemd glob instead of hardcoded 8.2* [\\#12066](https://github.com/Wishibam/Ecommerce-sylius/pull/12066)\n        - *:wrench: chore: run the dual PHP matrix on the tests job only \\[B.1\\]* [\\#12068](https://github.com/Wishibam/Ecommerce-sylius/pull/12068)\n    - [\\[Migration\\]\\[B.2\\] Sylius 1.12 \u2192 1.13 (DBAL 3)](https://trello.com/c/huA0VNU9/3941-migrationb2-sylius-112-%E2%86%92-113-dbal-3) **\ud83d\ude80 To Do Vincent**\n        - *:wrench: chore(doctrine): drop the last getSchemaManager() call for DBAL 3/4 \\[B.2 P.1\\]* [\\#12071](https://github.com/Wishibam/Ecommerce-sylius/pull/12071)\n        - *:white\\_check\\_mark: test: characterize every state machine graph wiring \\[B.2 P.2\\]* [\\#12074](https://github.com/Wishibam/Ecommerce-sylius/pull/12074)\n        - *:recycle: refactor: state machine abstraction infra + pilot call site \\[B.2 P.3.1\\]* [\\#12089](https://github.com/Wishibam/Ecommerce-sylius/pull/12089)\n        - *:recycle: refactor: migrate the mechanical state machine call sites \\[B.2 P.3.2\\]* [\\#12094](https://github.com/Wishibam/Ecommerce-sylius/pull/12094)\n        - *:recycle: refactor: migrate the structural state machine call sites \\[B.2 P.3.3\\]* [\\#12098](https://github.com/Wishibam/Ecommerce-sylius/pull/12098)\n        - *:wrench: chore: bump symfony/flex 1 to 2 \\[B.2 P.4\\]* [\\#12100](https://github.com/Wishibam/Ecommerce-sylius/pull/12100)\n    - [MA - Pas de message d'erreur lorsque l'on n'arrive pas \u00e0 se connecter \u00e0 son compte client](https://trello.com/c/fQ9vwTD0/3684-ma-pas-de-message-derreur-lorsque-lon-narrive-pas-%C3%A0-se-connecter-%C3%A0-son-compte-client) **\ud83e\udd13 Testing**\n        - *:bug: fix: display an error message on failed login on Marques Avenue* [\\#12072](https://github.com/Wishibam/Ecommerce-sylius/pull/12072)\n    - [Fix : \ufeff\ufefftransmettre le consentement newsletter \u00e0 Coniq \u00e0 l'inscription](https://trello.com/c/mShGQBUK/3943-fix-transmettre-le-consentement-newsletter-%C3%A0-coniq-%C3%A0-linscription) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: transmettre le consentement newsletter \u00e0 Coniq \u00e0 l'inscription* [\\#12076](https://github.com/Wishibam/Ecommerce-sylius/pull/12076)\n        - *:bug: fix: consentement newsletter Coniq par canal \u00e0 l'inscription* [\\#12105](https://github.com/Wishibam/Ecommerce-sylius/pull/12105)\n    - [TVO - Bloc caract\u00e9ristiques : Attribut genre et ean](https://trello.com/c/MwYdlurp/3945-tvo-bloc-caract%C3%A9ristiques-attribut-genre-et-ean) **\ud83e\udd13 Testing**\n        - *:bug: fix(tvo): localize gender and drop EAN in the characteristics block* [\\#12112](https://github.com/Wishibam/Ecommerce-sylius/pull/12112)\n    - [Page de confirmation de commande - N\u00b0 de commande sylius plut\u00f4t que MP](https://trello.com/c/bUrAEDyS/3944-page-de-confirmation-de-commande-n-de-commande-sylius-plut%C3%B4t-que-mp) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): align the thank-you order number with the email* [\\#12114](https://github.com/Wishibam/Ecommerce-sylius/pull/12114)\n    - [TVO \u2014 Tracking des mails de relance panier (taux d'ouverture / clic / CA)](https://trello.com/c/cyTNgF1i/3947-tvo-tracking-des-mails-de-relance-panier-taux-douverture-clic-ca) **\ud83e\udd13 Testing**\n        - *:sparkles: feat(tvo, all): track abandoned cart reminder emails* [\\#12118](https://github.com/Wishibam/Ecommerce-sylius/pull/12118)\n \n- **Misc**\n    - *:sparkles: feat: PushDispatcher + adaptateur FCM (push app TVO)* [\\#11917](https://github.com/Wishibam/Ecommerce-sylius/pull/11917)\n    - *style(withdrawal): make the withdrawal button theme-colored and not f\u2026* [\\#11951](https://github.com/Wishibam/Ecommerce-sylius/pull/11951)\n    - *:zap: perf: Batavia PLP \u2014 ES result cache, key batching, menu cache* [\\#11963](https://github.com/Wishibam/Ecommerce-sylius/pull/11963)\n    - *:wrench: chore: outillage pour worktrees parall\u00e8les (front isol\u00e9 par projet)* [\\#11986](https://github.com/Wishibam/Ecommerce-sylius/pull/11986)\n    - *:sparkles: feat: push app TVO \u2014 envoi asynchrone + badge (3.A.5 + 3.A.6)* [\\#12022](https://github.com/Wishibam/Ecommerce-sylius/pull/12022)\n    - *:sparkles: feat: badge unreadPushCount de bout en bout (app TVO)* [\\#12025](https://github.com/Wishibam/Ecommerce-sylius/pull/12025)\n    - *:sparkles: feat: compteur badge dans data des push (app TVO)* [\\#12028](https://github.com/Wishibam/Ecommerce-sylius/pull/12028)\n    - *:sparkles: feat: push \u00ab commande confirm\u00e9e \u00bb (app TVO)* [\\#12031](https://github.com/Wishibam/Ecommerce-sylius/pull/12031)\n    - *:sparkles: feat: push \u00ab commande exp\u00e9di\u00e9e \u00bb (app TVO)* [\\#12040](https://github.com/Wishibam/Ecommerce-sylius/pull/12040)\n    - *feat(push): notification de remboursement de commande (TVO 3.B.3)* [\\#12041](https://github.com/Wishibam/Ecommerce-sylius/pull/12041)\n    - *fix(push): durcir l'envoi FCM \u2014 timeouts born\u00e9s + retry effectif (TVO 3.A.7)* [\\#12042](https://github.com/Wishibam/Ecommerce-sylius/pull/12042)\n    - *test(featured-content): d\u00e9-flakifier testProgramDisableDelay (tol\u00e9rance sur le d\u00e9lai)* [\\#12044](https://github.com/Wishibam/Ecommerce-sylius/pull/12044)\n    - *feat(push): notification de retour en stock (TVO 3.B.4)* [\\#12045](https://github.com/Wishibam/Ecommerce-sylius/pull/12045)\n    - *feat(push): notification de baisse de prix wishlist (TVO 3.B.5)* [\\#12049](https://github.com/Wishibam/Ecommerce-sylius/pull/12049)\n    - *:bug: fix(megamenu): \u00e9largir le lien \u00e0 2048 caract\u00e8res* [\\#12050](https://github.com/Wishibam/Ecommerce-sylius/pull/12050)\n    - *feat(push): relance push des paniers abandonn\u00e9s (TVO 3.B.6)* [\\#12053](https://github.com/Wishibam/Ecommerce-sylius/pull/12053)\n    - *feat(deeplink): AASA de la nouvelle app TVO \u2014 Universal Links iOS (TVO 4.1)* [\\#12064](https://github.com/Wishibam/Ecommerce-sylius/pull/12064)\n    - *feat(deeplink): assetlinks.json de la nouvelle app TVO \u2014 App Links Android (TVO 4.2)* [\\#12065](https://github.com/Wishibam/Ecommerce-sylius/pull/12065)\n    - *:bug: fix: complete payments stuck by Stripe webhook/checkout race* [\\#12075](https://github.com/Wishibam/Ecommerce-sylius/pull/12075)\n    - *:bug: fix: dedup order\\_confirmation per order to stop double send* [\\#12101](https://github.com/Wishibam/Ecommerce-sylius/pull/12101)\n    - *:bug: fix: pin the fixtures channel default tax zone* [\\#12106](https://github.com/Wishibam/Ecommerce-sylius/pull/12106)\n \n- **D\u00e9j\u00e0 en production**\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\udc1b Fix r\u00e9indexation ES bloqu\u00e9e \u2014 \u00ab immense term \u00bb sur attribut trop long (Intersport)](https://trello.com/c/iD6idW0v/3915-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%90%9B-fix-r%C3%A9indexation-es-bloqu%C3%A9e-immense-term-sur-attribut-trop-long-intersport) **MEP Ao\u00fbt**\n        - *:bug: fix: r\u00e9indexation ES bloqu\u00e9e par un attribut trop long (immense term)* [\\#11972](https://github.com/Wishibam/Ecommerce-sylius/pull/11972)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f \u203c\ufe0f Nouveau Feeds - Faire tourner tous les nouveaux feeds sur toutes les preprods/prods](https://trello.com/c/Kr8UhDAv/3910-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-%EF%B8%8F-nouveau-feeds-faire-tourner-tous-les-nouveaux-feeds-sur-toutes-les-preprods-prods) **\ud83e\udee1 To Do JC**\n        - *:sparkles: feat: drive-to-store feeds parity with legacy Setono* [\\#11979](https://github.com/Wishibam/Ecommerce-sylius/pull/11979)\n    - [TVO - Les recommandations produits ne remontent aucun produit sur la fiche produit](https://trello.com/c/lw3SYgNG/3926-tvo-les-recommandations-produits-ne-remontent-aucun-produit-sur-la-fiche-produit) **MEP Ao\u00fbt**\n        - *:bug: fix(search): match the indexed color value in recommendations* [\\#12004](https://github.com/Wishibam/Ecommerce-sylius/pull/12004)\n    - [A ESTIMER : Google Shopping Feed : ajouter le Outlet Price en cas de promotion](https://trello.com/c/RnEgL53B/3867-a-estimer-google-shopping-feed-ajouter-le-outlet-price-en-cas-de-promotion) **MEP Ao\u00fbt**\n        - *:sparkles: feat(helsinki): expose the outlet price in the Google Shopping feed* [\\#12020](https://github.com/Wishibam/Ecommerce-sylius/pull/12020)\n    - [\u2615\ufe0f \\[Batavia\\] Frais de retour : \u20ac3,25 \u2192 \u20ac3,95 (et on passe le texte en traduction)](https://trello.com/c/P4vec3cz/3934-%E2%98%95%EF%B8%8F-batavia-frais-de-retour-%E2%82%AC325-%E2%86%92-%E2%82%AC395-et-on-passe-le-texte-en-traduction) **MEP Ao\u00fbt**\n        - *:bug: fix: Batavia return cost 3,95 and move the line to a translation* [\\#12034](https://github.com/Wishibam/Ecommerce-sylius/pull/12034)\n    - *:bug: fix: render flag emojis as SVG icons, not OS emoji glyphs* [\\#11981](https://github.com/Wishibam/Ecommerce-sylius/pull/11981)\n    - *:bug: fix: apply the flag icon filter to the remaining menu renderings* [\\#11982](https://github.com/Wishibam/Ecommerce-sylius/pull/11982)\n    - *:wrench: chore: bump php\\_codesniffer en 3.13.6 (CVE-2026-67434, CI rouge)* [\\#12008](https://github.com/Wishibam/Ecommerce-sylius/pull/12008)", "creation_timestamp": "2026-08-28T15:15:37.106828Z"}, {"uuid": "85568174-5fef-47ce-a8a4-504905d68b63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67434", "type": "seen", "source": "https://gist.github.com/FR-Flo/ff093c32f17cede521e46812e6adf688", "content": "## \ud83d\udd17 Companion release\n\nThis release ships alongside the **Marketplace-client (frontend)** release PR:\n\n- https://github.com/Wishibam/Marketplace-client/pull/4256\n\n- **Trello**\n    - [Attributs required par cat\u00e9gorie](https://trello.com/c/2loCszpt/1854-attributs-required-par-cat%C3%A9gorie) **\ud83e\udd75 Retour de test**\n        - *Feat: Makes attributes required or not per categories* [\\#7474](https://github.com/Wishibam/Marketplace-api/pull/7474)\n    - [\ud83d\udfe2 Int\u00e9gration des fanions promotionnels \u2014 Ajout image au tag de taxon (MP) (\u00e9volution n\u00b011)](https://trello.com/c/fNNkiR1c/2405-%F0%9F%9F%A2-int%C3%A9gration-des-fanions-promotionnels-ajout-image-au-tag-de-taxon-mp-%C3%A9volution-n11) **\ud83e\udd75 Retour de test**\n        - *:sparkles: feat: fanions de taxon \u2014 images desktop/mobile (MP-api)* [\\#7617](https://github.com/Wishibam/Marketplace-api/pull/7617)\n    - [MP - Cr\u00e9ation / modification m\u00e9thode de livraison - impossible de save](https://trello.com/c/Ud1DRxgj/2407-mp-cr%C3%A9ation-modification-m%C3%A9thode-de-livraison-impossible-de-save) **In review WMS**\n        - *:bug: MP Fix Dpd class, file and discriminator name* [\\#7757](https://github.com/Wishibam/Marketplace-api/pull/7757)\n    - [Ticket de caisse - pb de cache](https://trello.com/c/EwgktbXZ/2493-ticket-de-caisse-pb-de-cache) **\ud83e\udd75 Retour de test**\n        - *:bug: fix: reset receipt cache between export Messenger messages* [\\#7791](https://github.com/Wishibam/Marketplace-api/pull/7791)\n    - [\ud83d\ude84 Commande exp\u00e9di\u00e9e : l'interface part trop vite et garde l'ancien statut](https://trello.com/c/6QmFnpyb/2418-%F0%9F%9A%84-commande-exp%C3%A9di%C3%A9e-linterface-part-trop-vite-et-garde-lancien-statut) **In review WMS**\n        - *:sparkles: OMS order, add \"inProcessing\" flag* [\\#7797](https://github.com/Wishibam/Marketplace-api/pull/7797)\n    - [MP - Sur le marchand (listing & d\u00e9tails), mettre un lien qui redirige directement vers le marchand en front](https://trello.com/c/Z136lbnm/1296-mp-sur-le-marchand-listing-d%C3%A9tails-mettre-un-lien-qui-redirige-directement-vers-le-marchand-en-front) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *:sparkles: Add retailer eshop link* [\\#7822](https://github.com/Wishibam/Marketplace-api/pull/7822)\n    - [Tag - Ajout du champ \"Visibilit\u00e9\" c\u00f4t\u00e9 MP](https://trello.com/c/zPFP31T9/2398-tag-ajout-du-champ-visibilit%C3%A9-c%C3%B4t%C3%A9-mp) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *:sparkles: Add tag visibility field to retailer corner and category* [\\#7831](https://github.com/Wishibam/Marketplace-api/pull/7831)\n    - [Nouvelle vue Enseigne -Partie 1-](https://trello.com/c/AVsRvxLu/2494-nouvelle-vue-enseigne-partie-1) **\ud83e\udd73Testing**\n        - *:sparkles: OMS New enseigne view (front only) no interaction* [\\#7846](https://github.com/Wishibam/Marketplace-api/pull/7846)\n \n- **Misc**\n    - *feat(shipping-method): expose the default return method flag on the API* [\\#7793](https://github.com/Wishibam/Marketplace-api/pull/7793)\n    - *:sparkles: feat: resync a single retailer in the live merchandising indices* [\\#7808](https://github.com/Wishibam/Marketplace-api/pull/7808)\n    - *:bug: WMS Log Message Container identifier* [\\#7810](https://github.com/Wishibam/Marketplace-api/pull/7810)\n    - *:bug: fix: resync-retailer scroll rejected by ES8 (size param)* [\\#7820](https://github.com/Wishibam/Marketplace-api/pull/7820)\n    - *feat(mcp): add MCP server walking skeleton with list\\_organizations* [\\#7823](https://github.com/Wishibam/Marketplace-api/pull/7823)\n    - *refactor(mcp): extract logic from ImportAction, RetailerNormalizer and RankProduct* [\\#7824](https://github.com/Wishibam/Marketplace-api/pull/7824)\n    - *:sparkles: feat: compute product scoring on the fly (service + ES)* [\\#7825](https://github.com/Wishibam/Marketplace-api/pull/7825)\n    - *:sparkles: feat: raise the ES pagination window beyond 10k documents* [\\#7826](https://github.com/Wishibam/Marketplace-api/pull/7826)\n    - *feat(merchandising): supporter les tris du listing produit sur POST /merchandising* [\\#7827](https://github.com/Wishibam/Marketplace-api/pull/7827)\n    - *feat(merchandising): actions de masse asynchrones avec lock par organisation* [\\#7828](https://github.com/Wishibam/Marketplace-api/pull/7828)\n    - *Merge feat/mcp-walking-skeleton (simulate #7823 merge)* [\\#7832](https://github.com/Wishibam/Marketplace-api/pull/7832)\n    - *feat(product-list): pipeline batch pour les actions de masse des listes produits* [\\#7833](https://github.com/Wishibam/Marketplace-api/pull/7833)\n    - *feat(mcp): Add OAuth discovery* [\\#7834](https://github.com/Wishibam/Marketplace-api/pull/7834)\n    - *:arrow\\_up: deps: bump mcp/sdk to 0.7.1 (CVE-2026-53965)* [\\#7838](https://github.com/Wishibam/Marketplace-api/pull/7838)\n    - *Disabled MCP by default* [\\#7840](https://github.com/Wishibam/Marketplace-api/pull/7840)\n    - *:bug: fix: guard against null option name/value in CSV export* [\\#7841](https://github.com/Wishibam/Marketplace-api/pull/7841)\n    - *:bug: fix: stream line item CSV export to fix memory exhaustion* [\\#7842](https://github.com/Wishibam/Marketplace-api/pull/7842)\n    - *:arrow\\_up: deps: patch sodium\\_compat Ed25519 key validation vulnerability* [\\#7843](https://github.com/Wishibam/Marketplace-api/pull/7843)\n    - *fix: attribut required category* [\\#7851](https://github.com/Wishibam/Marketplace-api/pull/7851)\n    - *fix: batch action view* [\\#7852](https://github.com/Wishibam/Marketplace-api/pull/7852)\n    - *:bug: fix: batch the retailers list health queries (N+1)* [\\#7854](https://github.com/Wishibam/Marketplace-api/pull/7854)\n    - *:bug: fix: stop hydrating import report errors on retailers list* [\\#7855](https://github.com/Wishibam/Marketplace-api/pull/7855)\n \n- **D\u00e9j\u00e0 en production**\n    - *:arrow\\_up: deps: bump php\\_codesniffer to 4.0.4 (CVE-2026-67434)* [\\#7817](https://github.com/Wishibam/Marketplace-api/pull/7817)\n    - *feat: allow max product variation at 380* [\\#7829](https://github.com/Wishibam/Marketplace-api/pull/7829)\n    - *:bug: fix: stop gating unmapped counters on product validity* [\\#7835](https://github.com/Wishibam/Marketplace-api/pull/7835)\n    - *:bug: fix: repair missing-mapping counters behind the retailer list icon* [\\#7837](https://github.com/Wishibam/Marketplace-api/pull/7837)\n\n## POST MEP\n\n### [PR #7826](https://github.com/Wishibam/Marketplace-api/pull/7826) \u2014 :sparkles: feat: raise the ES pagination window beyond 10k documents\n\n```\n  curl -X PUT \"http://localhost:9200/prod_product_*/_settings\" -H 'Content-Type: application/json' -d '{\"index\":{\"max_result_window\":200000}}'\n  curl -X PUT \"http://localhost:9200/prod_variation_*/_settings\" -H 'Content-Type: application/json' -d '{\"index\":{\"max_result_window\":500000}}'\n\n  V\u00e9rifier :\n  curl \"http://localhost:9200/prod_product_*/_settings/index.max_result_window?flat_settings\"\n  curl \"http://localhost:9200/prod_variation_*/_settings/index.max_result_window?flat_settings\"\n```\n\n### [PR #7828](https://github.com/Wishibam/Marketplace-api/pull/7828) \u2014 feat(merchandising): actions de masse asynchrones avec lock par organisation\n\n - ansible en prod \u00e7a https://github.com/Wishibam/Infrastructure/pull/467\n", "creation_timestamp": "2026-08-25T07:59:58.118560Z"}, {"uuid": "9dd3dc12-e18b-4466-b4aa-68d0ade37d0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67434", "type": "seen", "source": "https://gist.github.com/jbourdin/db30b5e9c7737a0789543cd6cfbdb2bb", "content": "- **Trello**\n    - [GLOBAL - Email Alerte paiement en erreur](https://trello.com/c/P1DJvjHp/3229-global-email-alerte-paiement-en-erreur) **\ud83e\udd13 Testing**\n        - *feat(payment): send email notification when payment fails* [\\#10555](https://github.com/Wishibam/Ecommerce-sylius/pull/10555)\n    - [Helsinki : Portail de retour - Sylius - int\u00e9gration front du portail de retour](https://trello.com/c/mhcc7YaC/2401-helsinki-portail-de-retour-sylius-int%C3%A9gration-front-du-portail-de-retour) **TEMP - EPIC - Droit de r\u00e9tractation**\n        - *feat(helsinki): Add return portal to Helsinki order details* [\\#11757](https://github.com/Wishibam/Ecommerce-sylius/pull/11757)\n    - [\u26a0\ufe0fAction prod\u26a0\ufe0f\ud83d\udd14 Refonte TVO : tracking du volet d'alerte \u00ab retour en stock \u00bb](https://trello.com/c/SXyhrSQb/3834-%E2%9A%A0%EF%B8%8Faction-prod%E2%9A%A0%EF%B8%8F%F0%9F%94%94-refonte-tvo-tracking-du-volet-dalerte-retour-en-stock) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: track back-in-stock alert panel usage* [\\#11791](https://github.com/Wishibam/Ecommerce-sylius/pull/11791)\n    - [TVO - Fiche produit - Ajout des blocs \"Mati\u00e8re et entretien\" & \"Caract\u00e9ristiques\"](https://trello.com/c/AbsKmIzk/3633-tvo-fiche-produit-ajout-des-blocs-mati%C3%A8re-et-entretien-caract%C3%A9ristiques) **\ud83c\udf89 A MEP**\n        - *feat(tvo): add Mati\u00e8re et entretien & Caract\u00e9ristiques blocks on PDP* [\\#11812](https://github.com/Wishibam/Ecommerce-sylius/pull/11812)\n    - [\\[Migration\\]\\[A.2\\] D\u00e9mant\u00e8lement Setono Analytics + Tag-Bag](https://trello.com/c/uJN0Gkiz/3856-migrationa2-d%C3%A9mant%C3%A8lement-setono-analytics-tag-bag) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore(migration): internalize setono analytics + tag-bag as src/Component \\[A.2\\]* [\\#11846](https://github.com/Wishibam/Ecommerce-sylius/pull/11846)\n    - [\\[Migration\\]\\[A.4.1\\] Internaliser bitbag/wishlist-plugin dans src/Component/Wishlist](https://trello.com/c/U9dQGx1l/3863-migrationa41-internaliser-bitbag-wishlist-plugin-dans-src-component-wishlist) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: internalize bitbag/wishlist-plugin \\[A.4.1\\]* [\\#11856](https://github.com/Wishibam/Ecommerce-sylius/pull/11856)\n    - [\\[Migration\\]\\[A.4.2/A.4.3\\] Internaliser bring & deep-link dans src/Component](https://trello.com/c/RsLN5SNT/3864-migrationa42-a43-internaliser-bring-deep-link-dans-src-component) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: internalize bring & deep-link plugins \\[A.4.2, A.4.3\\]* [\\#11861](https://github.com/Wishibam/Ecommerce-sylius/pull/11861)\n    - [\\[Migration\\]\\[A.5\\] Bumps frontend \u00ab safe \u00bb + suppression des packages morts](https://trello.com/c/vI6k61gt/3873-migrationa5-bumps-frontend-safe-suppression-des-packages-morts) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: bump safe frontend deps + prune dead packages \\[A.5\\]* [\\#11875](https://github.com/Wishibam/Ecommerce-sylius/pull/11875)\n    - [\\[Migration\\]\\[A.6\\] Pr\u00e9paration Doctrine pour DBAL 3 (monkey-patch migrations)](https://trello.com/c/8mdyVMwg/3880-migrationa6-pr%C3%A9paration-doctrine-pour-dbal-3-monkey-patch-migrations) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: replace Doctrine migration monkey-patch for DBAL 3 \\[A.6\\]* [\\#11893](https://github.com/Wishibam/Ecommerce-sylius/pull/11893)\n    - [TVO - Express checkout : adresse tronqu\u00e9e \u2014 nom de rue perdu (Apple Pay line1/line2)](https://trello.com/c/dIrl0I1a/3884-tvo-express-checkout-adresse-tronqu%C3%A9e-nom-de-rue-perdu-apple-pay-line1-line2) **\ud83e\udd13 Testing**\n        - *:bug: fix: join express checkout wallet address line1/line2 into street* [\\#11914](https://github.com/Wishibam/Ecommerce-sylius/pull/11914)\n    - [\\[P0\\] Express checkout : re-v\u00e9rifier le montant du PaymentIntent au complete](https://trello.com/c/qJdTR9Jc/3885-p0-express-checkout-re-v%C3%A9rifier-le-montant-du-paymentintent-au-complete) **\ud83d\udc8e In Review**\n        - *:bug: fix: verify express checkout PaymentIntent amount at completion* [\\#11916](https://github.com/Wishibam/Ecommerce-sylius/pull/11916)\n    - [\\[P0\\] Webhook Stripe : rembourser r\u00e9ellement les charges des commandes refus\u00e9es/annul\u00e9es](https://trello.com/c/fyJeMD3L/3886-p0-webhook-stripe-rembourser-r%C3%A9ellement-les-charges-des-commandes-refus%C3%A9es-annul%C3%A9es) **\ud83d\udc8e In Review**\n        - *:bug: fix: refund Stripe charges captured for refused or cancelled orders* [\\#11918](https://github.com/Wishibam/Ecommerce-sylius/pull/11918)\n    - [\\[P1\\] Express checkout : pinner explicitement les wallets autoris\u00e9s (quick win)](https://trello.com/c/tEpmPM9l/3890-p1-express-checkout-pinner-explicitement-les-wallets-autoris%C3%A9s-quick-win) **\ud83e\udd13 Testing**\n        - *:bug: fix: restrict express checkout wallets to an explicit allowlist* [\\#11919](https://github.com/Wishibam/Ecommerce-sylius/pull/11919)\n    - [\\[P0\\] Express checkout : commandes \u00e0 fonds captur\u00e9s supprim\u00e9es par la purge des carts + cha\u00eene d'abort morte](https://trello.com/c/1Wo7zGP5/3887-p0-express-checkout-commandes-%C3%A0-fonds-captur%C3%A9s-supprim%C3%A9es-par-la-purge-des-carts-cha%C3%AEne-dabort-morte) **\ud83d\udc8e In Review**\n        - *:bug: fix: protect express checkout captured-funds carts from the purge* [\\#11920](https://github.com/Wishibam/Ecommerce-sylius/pull/11920)\n    - [Helsinki \u2014 Funnel checkout GA4 vide : \u00e9v\u00e9nements e-commerce manquants/incomplets](https://trello.com/c/j0yQGSFm/3921-helsinki-funnel-checkout-ga4-vide-%C3%A9v%C3%A9nements-e-commerce-manquants-incomplets) **\ud83c\udf44 Ready for testing**\n        - *:bug: fix: \u00e9mettre le funnel checkout GA4 complet* [\\#11980](https://github.com/Wishibam/Ecommerce-sylius/pull/11980)\n        - *:bug: fix: \u00e9mettre add\\_payment\\_info quand l'\u00e9tape de paiement est saut\u00e9e* [\\#12014](https://github.com/Wishibam/Ecommerce-sylius/pull/12014)\n    - [FEAT-0006 \u2014 Regroupement des emails d'annulation d'articles](https://trello.com/c/bBiV4jTE/3415-feat-0006-regroupement-des-emails-dannulation-darticles) **\ud83e\udd13 Testing**\n        - *:bug: fix: FEAT-0006 cancellation email grouping QA feedback* [\\#11984](https://github.com/Wishibam/Ecommerce-sylius/pull/11984)\n        - *:bug: fix: register order\\_entirely\\_cancelled email template for all projects* [\\#12091](https://github.com/Wishibam/Ecommerce-sylius/pull/12091)\n    - [Min-height pages React](https://trello.com/c/Rti8eFXb/3919-min-height-pages-react) **\ud83c\udf89 A MEP**\n        - *:bug: fix: add min-height on React pages to prevent footer flash* [\\#11987](https://github.com/Wishibam/Ecommerce-sylius/pull/11987)\n    - [SEO - TVO - changement de slug](https://trello.com/c/Gbb2tles/3908-seo-tvo-changement-de-slug) **\ud83c\udf89 A MEP**\n        - *:bug: fix: clean up TVO brand page slugs with 301 redirects* [\\#11988](https://github.com/Wishibam/Ecommerce-sylius/pull/11988)\n    - [\u26a0\ufe0f action preprod/prod \u26a0\ufe0f \ud83d\uded2 Refonte Checkout #1 \u2014 La page Panier change de garde-robe](https://trello.com/c/qxdtlZxk/3851-%E2%9A%A0%EF%B8%8F-action-preprod-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%9B%92-refonte-checkout-1-la-page-panier-change-de-garde-robe) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): cart page QA feedback round* [\\#11990](https://github.com/Wishibam/Ecommerce-sylius/pull/11990)\n    - [\u26a0\ufe0f MEP \u26a0\ufe0f\u2b50 Google Customer Reviews sur TVO \u2014 brancher la machine \u00e0 \u00e9toiles](https://trello.com/c/7JA9u85M/3899-%E2%9A%A0%EF%B8%8F-mep-%E2%9A%A0%EF%B8%8F%E2%AD%90-google-customer-reviews-sur-tvo-brancher-la-machine-%C3%A0-%C3%A9toiles) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: TVO Google Customer Reviews \u2014 GTIN produits sur thank you* [\\#11991](https://github.com/Wishibam/Ecommerce-sylius/pull/11991)\n    - [Fix : TypeError trim() null sur les share descriptions de channel (admin)](https://trello.com/c/o47Ek1Fo/3924-fix-typeerror-trim-null-sur-les-share-descriptions-de-channel-admin) **\ud83e\udd16 Testing tech**\n        - *:bug: fix: guard against null share descriptions in channel setter* [\\#11992](https://github.com/Wishibam/Ecommerce-sylius/pull/11992)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f \ud83d\udce6\ud83c\udf0d Mondial Relay sans fronti\u00e8res \u2014 points relais UE (v1 TVO)](https://trello.com/c/4X0QYlQ5/3918-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%93%A6%F0%9F%8C%8D-mondial-relay-sans-fronti%C3%A8res-points-relais-ue-v1-tvo) **\ud83d\udc8e In Review**\n        - *:sparkles: feat(mondial-relay): relay search follows the buyer's country* [\\#11994](https://github.com/Wishibam/Ecommerce-sylius/pull/11994)\n    - [\ud83d\udccd Refonte Checkout \u2014 La suggestion d'adresse qui fait mouche](https://trello.com/c/vF0T1FZU/3860-%F0%9F%93%8D-refonte-checkout-la-suggestion-dadresse-qui-fait-mouche) **\ud83d\ude80 To Do Vincent**\n        - *:bug: fix(tvo): address suggestion QA feedback round* [\\#11995](https://github.com/Wishibam/Ecommerce-sylius/pull/11995)\n        - *:bug: fix(tvo): keep the manual phone flag choice made on an empty field* [\\#12058](https://github.com/Wishibam/Ecommerce-sylius/pull/12058)\n    - [\ud83c\udf5e Refonte Checkout \u2014 Des toasts tout chauds pour les messages syst\u00e8me](https://trello.com/c/N70pstGO/3861-%F0%9F%8D%9E-refonte-checkout-des-toasts-tout-chauds-pour-les-messages-syst%C3%A8me) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): checkout toasts QA feedback round* [\\#11996](https://github.com/Wishibam/Ecommerce-sylius/pull/11996)\n    - [\ud83d\udd00 Refonte TVO : le variant s\u00e9lectionn\u00e9 saute en 1re position au lieu de rester \u00e0 sa place](https://trello.com/c/vQH5uxHz/3904-%F0%9F%94%80-refonte-tvo-le-variant-s%C3%A9lectionn%C3%A9-saute-en-1re-position-au-lieu-de-rester-%C3%A0-sa-place) **\ud83e\udd13 Testing**\n        - *:bug: fix: keep option values in place on overflowing variant axis* [\\#11998](https://github.com/Wishibam/Ecommerce-sylius/pull/11998)\n    - [TVO- mail order\\_open\\_return\\_withdrawn -remplacement de tag](https://trello.com/c/NK5CnCM2/3883-tvo-mail-orderopenreturnwithdrawn-remplacement-de-tag) **\ud83c\udf89 A MEP**\n        - *\ud83d\udc1b fix: orange \"return in progress\" badge on TVO withdrawal email* [\\#12000](https://github.com/Wishibam/Ecommerce-sylius/pull/12000)\n    - [SEO - ALL - Meta Title](https://trello.com/c/QDbDIPTu/3909-seo-all-meta-title) **\ud83e\udd13 Testing**\n        - *:sparkles: feat: add dedicated Meta Title for CMS pages* [\\#12001](https://github.com/Wishibam/Ecommerce-sylius/pull/12001)\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\ude9a Refonte Checkout #3 \u2014 Le Mode de livraison prend la route](https://trello.com/c/NDSNOimu/3854-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%9A%9A-refonte-checkout-3-le-mode-de-livraison-prend-la-route) **\ud83d\ude80 To Do Vincent**\n        - *:sparkles: feat(tvo): React checkout select shipping step (P3)* [\\#12011](https://github.com/Wishibam/Ecommerce-sylius/pull/12011)\n    - [Helsinki - Correction bug d'affichage en finnois en version mobile](https://trello.com/c/f9V6mA6z/3686-helsinki-correction-bug-daffichage-en-finnois-en-version-mobile) **\ud83c\udf89 A MEP**\n        - *:bug: fix: reduce Helsinki posts carousel title on mobile* [\\#12017](https://github.com/Wishibam/Ecommerce-sylius/pull/12017)\n    - [\ud83c\udfbd \\[IS\\] Footer : \u00ab Notre accompagnement \u00bb devient \u00ab Nos services \u00bb et raccroche son lien](https://trello.com/c/H2X0XtqH/3932-%F0%9F%8E%BD-is-footer-notre-accompagnement-devient-nos-services-et-raccroche-son-lien) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: rename the Intersport footer column to \u00ab Nos services \u00bb and unlink its title* [\\#12026](https://github.com/Wishibam/Ecommerce-sylius/pull/12026)\n        - *:rewind: revert: Intersport footer \u00ab Nos services \u00bb (wrong target branch)* [\\#12037](https://github.com/Wishibam/Ecommerce-sylius/pull/12037)\n    - [Batavia - Probl\u00e8me sur l'affichage des variations](https://trello.com/c/MY6aNjLj/3931-batavia-probl%C3%A8me-sur-laffichage-des-variations) **\ud83c\udf89 A MEP**\n        - *:bug: fix: deep-link Batavia PLP cards to the displayed color variant* [\\#12027](https://github.com/Wishibam/Ecommerce-sylius/pull/12027)\n    - [Batavia \u2014 Mails \u00ab produit indisponible \u00bb non re\u00e7us par les clients](https://trello.com/c/YLHFxnVs/3933-batavia-mails-produit-indisponible-non-re%C3%A7us-par-les-clients) **\ud83c\udf89 A MEP**\n        - *:bug: fix: validate admin email templates and log real send outcomes* [\\#12035](https://github.com/Wishibam/Ecommerce-sylius/pull/12035)\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\udcb3 Refonte Checkout #4 \u2014 Le Mode de paiement passe \u00e0 la caisse](https://trello.com/c/vDcvKX88/3855-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%92%B3-refonte-checkout-4-le-mode-de-paiement-passe-%C3%A0-la-caisse) **\ud83d\ude80 To Do Vincent**\n        - *:sparkles: feat(tvo): rebuild the checkout payment step and success page in React* [\\#12051](https://github.com/Wishibam/Ecommerce-sylius/pull/12051)\n    - [Intersport - Bug d'affichage images box produit](https://trello.com/c/mOO6EBx1/3936-intersport-bug-daffichage-images-box-produit) **\ud83c\udf89 A MEP**\n        - *:bug: \\[via\\] fix: styles mobiles des pages mot de passe oubli\u00e9/reset* [\\#12055](https://github.com/Wishibam/Ecommerce-sylius/pull/12055)\n    - [\ud83e\ude97 VIA \u2014 Le filtre Cat\u00e9gorie s'ouvre tout seul dans les descentes : on le veut ferm\u00e9 au chargement](https://trello.com/c/GMHVWZe2/3938-%F0%9F%AA%97-via-le-filtre-cat%C3%A9gorie-souvre-tout-seul-dans-les-descentes-on-le-veut-ferm%C3%A9-au-chargement) **\ud83c\udf89 A MEP**\n        - *:bug: \\[via\\] fix: le filtre Cat\u00e9gorie reste ferm\u00e9 au chargement des descentes* [\\#12059](https://github.com/Wishibam/Ecommerce-sylius/pull/12059)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f Feed : Ajouter le flux facebook TVO](https://trello.com/c/iXjTokqz/3937-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-feed-ajouter-le-flux-facebook-tvo) **\ud83e\udd16 Testing tech**\n        - *:sparkles: feat: porter le flux facebook\\_catalog vers le nouveau composant* [\\#12060](https://github.com/Wishibam/Ecommerce-sylius/pull/12060)\n    - [\\[Migration\\]\\[B.1\\] PHP 8.2 \u2192 8.3](https://trello.com/c/Slm1Q5n7/3940-migrationb1-php-82-%E2%86%92-83) **\ud83d\ude80 To Do Vincent**\n        - *:wrench: chore: run the test suite on PHP 8.2 and 8.3 \\[B.1\\]* [\\#12063](https://github.com/Wishibam/Ecommerce-sylius/pull/12063)\n        - *:bug: fix(deploy): restart PHP-FPM via systemd glob instead of hardcoded 8.2* [\\#12066](https://github.com/Wishibam/Ecommerce-sylius/pull/12066)\n        - *:wrench: chore: run the dual PHP matrix on the tests job only \\[B.1\\]* [\\#12068](https://github.com/Wishibam/Ecommerce-sylius/pull/12068)\n    - [\\[Migration\\]\\[B.2\\] Sylius 1.12 \u2192 1.13 (DBAL 3)](https://trello.com/c/huA0VNU9/3941-migrationb2-sylius-112-%E2%86%92-113-dbal-3) **\ud83d\ude80 To Do Vincent**\n        - *:wrench: chore(doctrine): drop the last getSchemaManager() call for DBAL 3/4 \\[B.2 P.1\\]* [\\#12071](https://github.com/Wishibam/Ecommerce-sylius/pull/12071)\n        - *:white\\_check\\_mark: test: characterize every state machine graph wiring \\[B.2 P.2\\]* [\\#12074](https://github.com/Wishibam/Ecommerce-sylius/pull/12074)\n        - *:recycle: refactor: state machine abstraction infra + pilot call site \\[B.2 P.3.1\\]* [\\#12089](https://github.com/Wishibam/Ecommerce-sylius/pull/12089)\n    - [Fix : \ufeff\ufefftransmettre le consentement newsletter \u00e0 Coniq \u00e0 l'inscription](https://trello.com/c/mShGQBUK/3943-fix-transmettre-le-consentement-newsletter-%C3%A0-coniq-%C3%A0-linscription) **\ud83e\udd13 Testing**\n        - *:sparkles: feat: transmettre le consentement newsletter \u00e0 Coniq \u00e0 l'inscription* [\\#12076](https://github.com/Wishibam/Ecommerce-sylius/pull/12076)\n \n- **Misc**\n    - *:sparkles: feat: PushDispatcher + adaptateur FCM (push app TVO)* [\\#11917](https://github.com/Wishibam/Ecommerce-sylius/pull/11917)\n    - *style(withdrawal): make the withdrawal button theme-colored and not f\u2026* [\\#11951](https://github.com/Wishibam/Ecommerce-sylius/pull/11951)\n    - *:zap: perf: Batavia PLP \u2014 ES result cache, key batching, menu cache* [\\#11963](https://github.com/Wishibam/Ecommerce-sylius/pull/11963)\n    - *:wrench: chore: outillage pour worktrees parall\u00e8les (front isol\u00e9 par projet)* [\\#11986](https://github.com/Wishibam/Ecommerce-sylius/pull/11986)\n    - *:sparkles: feat: push app TVO \u2014 envoi asynchrone + badge (3.A.5 + 3.A.6)* [\\#12022](https://github.com/Wishibam/Ecommerce-sylius/pull/12022)\n    - *:sparkles: feat: badge unreadPushCount de bout en bout (app TVO)* [\\#12025](https://github.com/Wishibam/Ecommerce-sylius/pull/12025)\n    - *:sparkles: feat: compteur badge dans data des push (app TVO)* [\\#12028](https://github.com/Wishibam/Ecommerce-sylius/pull/12028)\n    - *:sparkles: feat: push \u00ab commande confirm\u00e9e \u00bb (app TVO)* [\\#12031](https://github.com/Wishibam/Ecommerce-sylius/pull/12031)\n    - *:sparkles: feat: push \u00ab commande exp\u00e9di\u00e9e \u00bb (app TVO)* [\\#12040](https://github.com/Wishibam/Ecommerce-sylius/pull/12040)\n    - *feat(push): notification de remboursement de commande (TVO 3.B.3)* [\\#12041](https://github.com/Wishibam/Ecommerce-sylius/pull/12041)\n    - *fix(push): durcir l'envoi FCM \u2014 timeouts born\u00e9s + retry effectif (TVO 3.A.7)* [\\#12042](https://github.com/Wishibam/Ecommerce-sylius/pull/12042)\n    - *test(featured-content): d\u00e9-flakifier testProgramDisableDelay (tol\u00e9rance sur le d\u00e9lai)* [\\#12044](https://github.com/Wishibam/Ecommerce-sylius/pull/12044)\n    - *feat(push): notification de retour en stock (TVO 3.B.4)* [\\#12045](https://github.com/Wishibam/Ecommerce-sylius/pull/12045)\n    - *feat(push): notification de baisse de prix wishlist (TVO 3.B.5)* [\\#12049](https://github.com/Wishibam/Ecommerce-sylius/pull/12049)\n    - *:bug: fix(megamenu): \u00e9largir le lien \u00e0 2048 caract\u00e8res* [\\#12050](https://github.com/Wishibam/Ecommerce-sylius/pull/12050)\n    - *feat(push): relance push des paniers abandonn\u00e9s (TVO 3.B.6)* [\\#12053](https://github.com/Wishibam/Ecommerce-sylius/pull/12053)\n    - *feat(deeplink): AASA de la nouvelle app TVO \u2014 Universal Links iOS (TVO 4.1)* [\\#12064](https://github.com/Wishibam/Ecommerce-sylius/pull/12064)\n    - *feat(deeplink): assetlinks.json de la nouvelle app TVO \u2014 App Links Android (TVO 4.2)* [\\#12065](https://github.com/Wishibam/Ecommerce-sylius/pull/12065)\n    - *:bug: fix: complete payments stuck by Stripe webhook/checkout race* [\\#12075](https://github.com/Wishibam/Ecommerce-sylius/pull/12075)\n \n- **D\u00e9j\u00e0 en production**\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\udc1b Fix r\u00e9indexation ES bloqu\u00e9e \u2014 \u00ab immense term \u00bb sur attribut trop long (Intersport)](https://trello.com/c/iD6idW0v/3915-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%90%9B-fix-r%C3%A9indexation-es-bloqu%C3%A9e-immense-term-sur-attribut-trop-long-intersport) **MEP Ao\u00fbt**\n        - *:bug: fix: r\u00e9indexation ES bloqu\u00e9e par un attribut trop long (immense term)* [\\#11972](https://github.com/Wishibam/Ecommerce-sylius/pull/11972)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f \u203c\ufe0f Nouveau Feeds - Faire tourner tous les nouveaux feeds sur toutes les preprods/prods](https://trello.com/c/Kr8UhDAv/3910-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-%EF%B8%8F-nouveau-feeds-faire-tourner-tous-les-nouveaux-feeds-sur-toutes-les-preprods-prods) **\ud83e\udee1 To Do JC**\n        - *:sparkles: feat: drive-to-store feeds parity with legacy Setono* [\\#11979](https://github.com/Wishibam/Ecommerce-sylius/pull/11979)\n    - [TVO - Les recommandations produits ne remontent aucun produit sur la fiche produit](https://trello.com/c/lw3SYgNG/3926-tvo-les-recommandations-produits-ne-remontent-aucun-produit-sur-la-fiche-produit) **MEP Ao\u00fbt**\n        - *:bug: fix(search): match the indexed color value in recommendations* [\\#12004](https://github.com/Wishibam/Ecommerce-sylius/pull/12004)\n    - [A ESTIMER : Google Shopping Feed : ajouter le Outlet Price en cas de promotion](https://trello.com/c/RnEgL53B/3867-a-estimer-google-shopping-feed-ajouter-le-outlet-price-en-cas-de-promotion) **\ud83e\udd13 Testing**\n        - *:sparkles: feat(helsinki): expose the outlet price in the Google Shopping feed* [\\#12020](https://github.com/Wishibam/Ecommerce-sylius/pull/12020)\n    - [\u2615\ufe0f \\[Batavia\\] Frais de retour : \u20ac3,25 \u2192 \u20ac3,95 (et on passe le texte en traduction)](https://trello.com/c/P4vec3cz/3934-%E2%98%95%EF%B8%8F-batavia-frais-de-retour-%E2%82%AC325-%E2%86%92-%E2%82%AC395-et-on-passe-le-texte-en-traduction) **MEP Ao\u00fbt**\n        - *:bug: fix: Batavia return cost 3,95 and move the line to a translation* [\\#12034](https://github.com/Wishibam/Ecommerce-sylius/pull/12034)\n    - *:bug: fix: render flag emojis as SVG icons, not OS emoji glyphs* [\\#11981](https://github.com/Wishibam/Ecommerce-sylius/pull/11981)\n    - *:bug: fix: apply the flag icon filter to the remaining menu renderings* [\\#11982](https://github.com/Wishibam/Ecommerce-sylius/pull/11982)\n    - *:wrench: chore: bump php\\_codesniffer en 3.13.6 (CVE-2026-67434, CI rouge)* [\\#12008](https://github.com/Wishibam/Ecommerce-sylius/pull/12008)", "creation_timestamp": "2026-08-24T07:50:42.621787Z"}, {"uuid": "ce695031-eae3-492e-a7a6-472c174497d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67434", "type": "seen", "source": "https://gist.github.com/FR-Flo/05ac136c9c9ce0232c5ef40f4fb2c11f", "content": "## \ud83d\udd17 Companion release\n\nThis release ships alongside the **Marketplace-client (frontend)** release PR:\n\n- https://github.com/Wishibam/Marketplace-client/pull/4256\n\n- **Trello**\n    - [Attributs required par cat\u00e9gorie](https://trello.com/c/2loCszpt/1854-attributs-required-par-cat%C3%A9gorie) **\ud83e\udd73Testing**\n        - *Feat: Makes attributes required or not per categories* [\\#7474](https://github.com/Wishibam/Marketplace-api/pull/7474)\n    - [\ud83d\udfe2 Int\u00e9gration des fanions promotionnels \u2014 Ajout image au tag de taxon (MP) (\u00e9volution n\u00b011)](https://trello.com/c/fNNkiR1c/2405-%F0%9F%9F%A2-int%C3%A9gration-des-fanions-promotionnels-ajout-image-au-tag-de-taxon-mp-%C3%A9volution-n11) **\ud83e\udd75 Retour de test**\n        - *:sparkles: feat: fanions de taxon \u2014 images desktop/mobile (MP-api)* [\\#7617](https://github.com/Wishibam/Marketplace-api/pull/7617)\n    - [MP - Cr\u00e9ation / modification m\u00e9thode de livraison - impossible de save](https://trello.com/c/Ud1DRxgj/2407-mp-cr%C3%A9ation-modification-m%C3%A9thode-de-livraison-impossible-de-save) **\ud83e\udd75 Retour de test**\n        - *:bug: MP Fix Dpd class, file and discriminator name* [\\#7757](https://github.com/Wishibam/Marketplace-api/pull/7757)\n    - [Ticket de caisse - pb de cache](https://trello.com/c/EwgktbXZ/2493-ticket-de-caisse-pb-de-cache) **\ud83e\udd75 Retour de test**\n        - *:bug: fix: reset receipt cache between export Messenger messages* [\\#7791](https://github.com/Wishibam/Marketplace-api/pull/7791)\n    - [\ud83d\ude84 Commande exp\u00e9di\u00e9e : l'interface part trop vite et garde l'ancien statut](https://trello.com/c/6QmFnpyb/2418-%F0%9F%9A%84-commande-exp%C3%A9di%C3%A9e-linterface-part-trop-vite-et-garde-lancien-statut) **In review WMS**\n        - *:sparkles: OMS order, add \"inProcessing\" flag* [\\#7797](https://github.com/Wishibam/Marketplace-api/pull/7797)\n    - [MP - Sur le marchand (listing & d\u00e9tails), mettre un lien qui redirige directement vers le marchand en front](https://trello.com/c/Z136lbnm/1296-mp-sur-le-marchand-listing-d%C3%A9tails-mettre-un-lien-qui-redirige-directement-vers-le-marchand-en-front) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *:sparkles: Add retailer eshop link* [\\#7822](https://github.com/Wishibam/Marketplace-api/pull/7822)\n    - [Tag - Ajout du champ \"Visibilit\u00e9\" c\u00f4t\u00e9 MP](https://trello.com/c/zPFP31T9/2398-tag-ajout-du-champ-visibilit%C3%A9-c%C3%B4t%C3%A9-mp) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *:sparkles: Add tag visibility field to retailer corner and category* [\\#7831](https://github.com/Wishibam/Marketplace-api/pull/7831)\n    - [Nouvelle vue Enseigne -Partie 1-](https://trello.com/c/AVsRvxLu/2494-nouvelle-vue-enseigne-partie-1) **\ud83e\udd73Testing**\n        - *:sparkles: OMS New enseigne view (front only) no interaction* [\\#7846](https://github.com/Wishibam/Marketplace-api/pull/7846)\n \n- **Misc**\n    - *feat(shipping-method): expose the default return method flag on the API* [\\#7793](https://github.com/Wishibam/Marketplace-api/pull/7793)\n    - *:sparkles: feat: resync a single retailer in the live merchandising indices* [\\#7808](https://github.com/Wishibam/Marketplace-api/pull/7808)\n    - *:bug: WMS Log Message Container identifier* [\\#7810](https://github.com/Wishibam/Marketplace-api/pull/7810)\n    - *:bug: fix: resync-retailer scroll rejected by ES8 (size param)* [\\#7820](https://github.com/Wishibam/Marketplace-api/pull/7820)\n    - *feat(mcp): add MCP server walking skeleton with list\\_organizations* [\\#7823](https://github.com/Wishibam/Marketplace-api/pull/7823)\n    - *refactor(mcp): extract logic from ImportAction, RetailerNormalizer and RankProduct* [\\#7824](https://github.com/Wishibam/Marketplace-api/pull/7824)\n    - *:sparkles: feat: compute product scoring on the fly (service + ES)* [\\#7825](https://github.com/Wishibam/Marketplace-api/pull/7825)\n    - *:sparkles: feat: raise the ES pagination window beyond 10k documents* [\\#7826](https://github.com/Wishibam/Marketplace-api/pull/7826)\n    - *feat(merchandising): supporter les tris du listing produit sur POST /merchandising* [\\#7827](https://github.com/Wishibam/Marketplace-api/pull/7827)\n    - *feat(merchandising): actions de masse asynchrones avec lock par organisation* [\\#7828](https://github.com/Wishibam/Marketplace-api/pull/7828)\n    - *Merge feat/mcp-walking-skeleton (simulate #7823 merge)* [\\#7832](https://github.com/Wishibam/Marketplace-api/pull/7832)\n    - *feat(product-list): pipeline batch pour les actions de masse des listes produits* [\\#7833](https://github.com/Wishibam/Marketplace-api/pull/7833)\n    - *feat(mcp): Add OAuth discovery* [\\#7834](https://github.com/Wishibam/Marketplace-api/pull/7834)\n    - *:arrow\\_up: deps: bump mcp/sdk to 0.7.1 (CVE-2026-53965)* [\\#7838](https://github.com/Wishibam/Marketplace-api/pull/7838)\n    - *:bug: fix: guard against null option name/value in CSV export* [\\#7841](https://github.com/Wishibam/Marketplace-api/pull/7841)\n    - *:bug: fix: stream line item CSV export to fix memory exhaustion* [\\#7842](https://github.com/Wishibam/Marketplace-api/pull/7842)\n    - *:arrow\\_up: deps: patch sodium\\_compat Ed25519 key validation vulnerability* [\\#7843](https://github.com/Wishibam/Marketplace-api/pull/7843)\n    - *fix: attribut required category* [\\#7851](https://github.com/Wishibam/Marketplace-api/pull/7851)\n \n- **D\u00e9j\u00e0 en production**\n    - *:arrow\\_up: deps: bump php\\_codesniffer to 4.0.4 (CVE-2026-67434)* [\\#7817](https://github.com/Wishibam/Marketplace-api/pull/7817)\n    - *feat: allow max product variation at 380* [\\#7829](https://github.com/Wishibam/Marketplace-api/pull/7829)\n    - *:bug: fix: stop gating unmapped counters on product validity* [\\#7835](https://github.com/Wishibam/Marketplace-api/pull/7835)\n    - *:bug: fix: repair missing-mapping counters behind the retailer list icon* [\\#7837](https://github.com/Wishibam/Marketplace-api/pull/7837)\n\n## POST MEP\n\n### [PR #7826](https://github.com/Wishibam/Marketplace-api/pull/7826) \u2014 :sparkles: feat: raise the ES pagination window beyond 10k documents\n\n```\n  curl -X PUT \"http://localhost:9200/prod_product_*/_settings\" -H 'Content-Type: application/json' -d '{\"index\":{\"max_result_window\":200000}}'\n  curl -X PUT \"http://localhost:9200/prod_variation_*/_settings\" -H 'Content-Type: application/json' -d '{\"index\":{\"max_result_window\":500000}}'\n\n  V\u00e9rifier :\n  curl \"http://localhost:9200/prod_product_*/_settings/index.max_result_window?flat_settings\"\n  curl \"http://localhost:9200/prod_variation_*/_settings/index.max_result_window?flat_settings\"\n```\n\n### [PR #7828](https://github.com/Wishibam/Marketplace-api/pull/7828) \u2014 feat(merchandising): actions de masse asynchrones avec lock par organisation\n\n - ansible en prod \u00e7a https://github.com/Wishibam/Infrastructure/pull/467\n", "creation_timestamp": "2026-08-24T09:02:40.101621Z"}, {"uuid": "1f3ea292-577e-4cb6-aa26-0c853da29f3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67434", "type": "seen", "source": "https://gist.github.com/jbourdin/736d2ac03e7a6cbbe586e35011053b03", "content": "- **Trello**\n    - [GLOBAL - Email Alerte paiement en erreur](https://trello.com/c/P1DJvjHp/3229-global-email-alerte-paiement-en-erreur) **\ud83c\udf89 A MEP**\n        - *feat(payment): send email notification when payment fails* [\\#10555](https://github.com/Wishibam/Ecommerce-sylius/pull/10555)\n    - [Helsinki : Portail de retour - Sylius - int\u00e9gration front du portail de retour](https://trello.com/c/mhcc7YaC/2401-helsinki-portail-de-retour-sylius-int%C3%A9gration-front-du-portail-de-retour) **\ud83e\udd73Testing**\n        - *feat(helsinki): Add return portal to Helsinki order details* [\\#11757](https://github.com/Wishibam/Ecommerce-sylius/pull/11757)\n    - [\u26a0\ufe0fAction prod\u26a0\ufe0f\ud83d\udd14 Refonte TVO : tracking du volet d'alerte \u00ab retour en stock \u00bb](https://trello.com/c/SXyhrSQb/3834-%E2%9A%A0%EF%B8%8Faction-prod%E2%9A%A0%EF%B8%8F%F0%9F%94%94-refonte-tvo-tracking-du-volet-dalerte-retour-en-stock) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: track back-in-stock alert panel usage* [\\#11791](https://github.com/Wishibam/Ecommerce-sylius/pull/11791)\n    - [TVO - Fiche produit - Ajout des blocs \"Mati\u00e8re et entretien\" & \"Caract\u00e9ristiques\"](https://trello.com/c/AbsKmIzk/3633-tvo-fiche-produit-ajout-des-blocs-mati%C3%A8re-et-entretien-caract%C3%A9ristiques) **\ud83c\udf89 A MEP**\n        - *feat(tvo): add Mati\u00e8re et entretien & Caract\u00e9ristiques blocks on PDP* [\\#11812](https://github.com/Wishibam/Ecommerce-sylius/pull/11812)\n    - [\\[Migration\\]\\[A.2\\] D\u00e9mant\u00e8lement Setono Analytics + Tag-Bag](https://trello.com/c/uJN0Gkiz/3856-migrationa2-d%C3%A9mant%C3%A8lement-setono-analytics-tag-bag) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore(migration): internalize setono analytics + tag-bag as src/Component \\[A.2\\]* [\\#11846](https://github.com/Wishibam/Ecommerce-sylius/pull/11846)\n    - [\\[Migration\\]\\[A.4.1\\] Internaliser bitbag/wishlist-plugin dans src/Component/Wishlist](https://trello.com/c/U9dQGx1l/3863-migrationa41-internaliser-bitbag-wishlist-plugin-dans-src-component-wishlist) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: internalize bitbag/wishlist-plugin \\[A.4.1\\]* [\\#11856](https://github.com/Wishibam/Ecommerce-sylius/pull/11856)\n    - [\\[Migration\\]\\[A.4.2/A.4.3\\] Internaliser bring & deep-link dans src/Component](https://trello.com/c/RsLN5SNT/3864-migrationa42-a43-internaliser-bring-deep-link-dans-src-component) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: internalize bring & deep-link plugins \\[A.4.2, A.4.3\\]* [\\#11861](https://github.com/Wishibam/Ecommerce-sylius/pull/11861)\n    - [\\[Migration\\]\\[A.5\\] Bumps frontend \u00ab safe \u00bb + suppression des packages morts](https://trello.com/c/vI6k61gt/3873-migrationa5-bumps-frontend-safe-suppression-des-packages-morts) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: bump safe frontend deps + prune dead packages \\[A.5\\]* [\\#11875](https://github.com/Wishibam/Ecommerce-sylius/pull/11875)\n    - [\\[Migration\\]\\[A.6\\] Pr\u00e9paration Doctrine pour DBAL 3 (monkey-patch migrations)](https://trello.com/c/8mdyVMwg/3880-migrationa6-pr%C3%A9paration-doctrine-pour-dbal-3-monkey-patch-migrations) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: replace Doctrine migration monkey-patch for DBAL 3 \\[A.6\\]* [\\#11893](https://github.com/Wishibam/Ecommerce-sylius/pull/11893)\n    - [TVO - Express checkout : adresse tronqu\u00e9e \u2014 nom de rue perdu (Apple Pay line1/line2)](https://trello.com/c/dIrl0I1a/3884-tvo-express-checkout-adresse-tronqu%C3%A9e-nom-de-rue-perdu-apple-pay-line1-line2) **\ud83c\udf89 A MEP**\n        - *:bug: fix: join express checkout wallet address line1/line2 into street* [\\#11914](https://github.com/Wishibam/Ecommerce-sylius/pull/11914)\n    - [\\[P0\\] Express checkout : re-v\u00e9rifier le montant du PaymentIntent au complete](https://trello.com/c/qJdTR9Jc/3885-p0-express-checkout-re-v%C3%A9rifier-le-montant-du-paymentintent-au-complete) **\ud83e\udd13 Testing**\n        - *:bug: fix: verify express checkout PaymentIntent amount at completion* [\\#11916](https://github.com/Wishibam/Ecommerce-sylius/pull/11916)\n    - [\\[P0\\] Webhook Stripe : rembourser r\u00e9ellement les charges des commandes refus\u00e9es/annul\u00e9es](https://trello.com/c/fyJeMD3L/3886-p0-webhook-stripe-rembourser-r%C3%A9ellement-les-charges-des-commandes-refus%C3%A9es-annul%C3%A9es) **\ud83e\udd13 Testing**\n        - *:bug: fix: refund Stripe charges captured for refused or cancelled orders* [\\#11918](https://github.com/Wishibam/Ecommerce-sylius/pull/11918)\n    - [\\[P1\\] Express checkout : pinner explicitement les wallets autoris\u00e9s (quick win)](https://trello.com/c/tEpmPM9l/3890-p1-express-checkout-pinner-explicitement-les-wallets-autoris%C3%A9s-quick-win) **\ud83e\udd16 Testing tech**\n        - *:bug: fix: restrict express checkout wallets to an explicit allowlist* [\\#11919](https://github.com/Wishibam/Ecommerce-sylius/pull/11919)\n    - [\\[P0\\] Express checkout : commandes \u00e0 fonds captur\u00e9s supprim\u00e9es par la purge des carts + cha\u00eene d'abort morte](https://trello.com/c/1Wo7zGP5/3887-p0-express-checkout-commandes-%C3%A0-fonds-captur%C3%A9s-supprim%C3%A9es-par-la-purge-des-carts-cha%C3%AEne-dabort-morte) **\ud83e\udd13 Testing**\n        - *:bug: fix: protect express checkout captured-funds carts from the purge* [\\#11920](https://github.com/Wishibam/Ecommerce-sylius/pull/11920)\n    - [Helsinki \u2014 Funnel checkout GA4 vide : \u00e9v\u00e9nements e-commerce manquants/incomplets](https://trello.com/c/j0yQGSFm/3921-helsinki-funnel-checkout-ga4-vide-%C3%A9v%C3%A9nements-e-commerce-manquants-incomplets) **\ud83c\udf44 Ready for testing**\n        - *:bug: fix: \u00e9mettre le funnel checkout GA4 complet* [\\#11980](https://github.com/Wishibam/Ecommerce-sylius/pull/11980)\n        - *:bug: fix: \u00e9mettre add\\_payment\\_info quand l'\u00e9tape de paiement est saut\u00e9e* [\\#12014](https://github.com/Wishibam/Ecommerce-sylius/pull/12014)\n    - [FEAT-0006 \u2014 Regroupement des emails d'annulation d'articles](https://trello.com/c/bBiV4jTE/3415-feat-0006-regroupement-des-emails-dannulation-darticles) **\ud83c\udf89 A MEP**\n        - *:bug: fix: FEAT-0006 cancellation email grouping QA feedback* [\\#11984](https://github.com/Wishibam/Ecommerce-sylius/pull/11984)\n        - *:bug: fix: register order\\_entirely\\_cancelled email template for all projects* [\\#12091](https://github.com/Wishibam/Ecommerce-sylius/pull/12091)\n        - *:bug: fix: send grouped withdrawal confirmations on entirely cancelled orders* [\\#12104](https://github.com/Wishibam/Ecommerce-sylius/pull/12104)\n    - [Min-height pages React](https://trello.com/c/Rti8eFXb/3919-min-height-pages-react) **\ud83c\udf89 A MEP**\n        - *:bug: fix: add min-height on React pages to prevent footer flash* [\\#11987](https://github.com/Wishibam/Ecommerce-sylius/pull/11987)\n    - [SEO - TVO - changement de slug](https://trello.com/c/Gbb2tles/3908-seo-tvo-changement-de-slug) **\ud83c\udf89 A MEP**\n        - *:bug: fix: clean up TVO brand page slugs with 301 redirects* [\\#11988](https://github.com/Wishibam/Ecommerce-sylius/pull/11988)\n    - [\u26a0\ufe0f action preprod/prod \u26a0\ufe0f \ud83d\uded2 Refonte Checkout #1 \u2014 La page Panier change de garde-robe](https://trello.com/c/qxdtlZxk/3851-%E2%9A%A0%EF%B8%8F-action-preprod-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%9B%92-refonte-checkout-1-la-page-panier-change-de-garde-robe) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): cart page QA feedback round* [\\#11990](https://github.com/Wishibam/Ecommerce-sylius/pull/11990)\n    - [\u26a0\ufe0f MEP \u26a0\ufe0f\u2b50 Google Customer Reviews sur TVO \u2014 brancher la machine \u00e0 \u00e9toiles](https://trello.com/c/7JA9u85M/3899-%E2%9A%A0%EF%B8%8F-mep-%E2%9A%A0%EF%B8%8F%E2%AD%90-google-customer-reviews-sur-tvo-brancher-la-machine-%C3%A0-%C3%A9toiles) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: TVO Google Customer Reviews \u2014 GTIN produits sur thank you* [\\#11991](https://github.com/Wishibam/Ecommerce-sylius/pull/11991)\n    - [Fix : TypeError trim() null sur les share descriptions de channel (admin)](https://trello.com/c/o47Ek1Fo/3924-fix-typeerror-trim-null-sur-les-share-descriptions-de-channel-admin) **\ud83e\udd16 Testing tech**\n        - *:bug: fix: guard against null share descriptions in channel setter* [\\#11992](https://github.com/Wishibam/Ecommerce-sylius/pull/11992)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f \ud83d\udce6\ud83c\udf0d Mondial Relay sans fronti\u00e8res \u2014 points relais UE (v1 TVO)](https://trello.com/c/4X0QYlQ5/3918-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%93%A6%F0%9F%8C%8D-mondial-relay-sans-fronti%C3%A8res-points-relais-ue-v1-tvo) **\ud83e\udd13 Testing**\n        - *:sparkles: feat(mondial-relay): relay search follows the buyer's country* [\\#11994](https://github.com/Wishibam/Ecommerce-sylius/pull/11994)\n    - [\ud83d\udccd Refonte Checkout \u2014 La suggestion d'adresse qui fait mouche](https://trello.com/c/vF0T1FZU/3860-%F0%9F%93%8D-refonte-checkout-la-suggestion-dadresse-qui-fait-mouche) **\ud83d\ude80 To Do Vincent**\n        - *:bug: fix(tvo): address suggestion QA feedback round* [\\#11995](https://github.com/Wishibam/Ecommerce-sylius/pull/11995)\n        - *:bug: fix(tvo): keep the manual phone flag choice made on an empty field* [\\#12058](https://github.com/Wishibam/Ecommerce-sylius/pull/12058)\n    - [\ud83c\udf5e Refonte Checkout \u2014 Des toasts tout chauds pour les messages syst\u00e8me](https://trello.com/c/N70pstGO/3861-%F0%9F%8D%9E-refonte-checkout-des-toasts-tout-chauds-pour-les-messages-syst%C3%A8me) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): checkout toasts QA feedback round* [\\#11996](https://github.com/Wishibam/Ecommerce-sylius/pull/11996)\n    - [\ud83d\udd00 Refonte TVO : le variant s\u00e9lectionn\u00e9 saute en 1re position au lieu de rester \u00e0 sa place](https://trello.com/c/vQH5uxHz/3904-%F0%9F%94%80-refonte-tvo-le-variant-s%C3%A9lectionn%C3%A9-saute-en-1re-position-au-lieu-de-rester-%C3%A0-sa-place) **\ud83c\udf89 A MEP**\n        - *:bug: fix: keep option values in place on overflowing variant axis* [\\#11998](https://github.com/Wishibam/Ecommerce-sylius/pull/11998)\n    - [TVO- mail order\\_open\\_return\\_withdrawn -remplacement de tag](https://trello.com/c/NK5CnCM2/3883-tvo-mail-orderopenreturnwithdrawn-remplacement-de-tag) **\ud83c\udf89 A MEP**\n        - *\ud83d\udc1b fix: orange \"return in progress\" badge on TVO withdrawal email* [\\#12000](https://github.com/Wishibam/Ecommerce-sylius/pull/12000)\n    - [SEO - ALL - Meta Title](https://trello.com/c/QDbDIPTu/3909-seo-all-meta-title) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: add dedicated Meta Title for CMS pages* [\\#12001](https://github.com/Wishibam/Ecommerce-sylius/pull/12001)\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\ude9a Refonte Checkout #3 \u2014 Le Mode de livraison prend la route](https://trello.com/c/NDSNOimu/3854-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%9A%9A-refonte-checkout-3-le-mode-de-livraison-prend-la-route) **\ud83d\ude80 To Do Vincent**\n        - *:sparkles: feat(tvo): React checkout select shipping step (P3)* [\\#12011](https://github.com/Wishibam/Ecommerce-sylius/pull/12011)\n    - [Helsinki - Correction bug d'affichage en finnois en version mobile](https://trello.com/c/f9V6mA6z/3686-helsinki-correction-bug-daffichage-en-finnois-en-version-mobile) **\ud83c\udf89 A MEP**\n        - *:bug: fix: reduce Helsinki posts carousel title on mobile* [\\#12017](https://github.com/Wishibam/Ecommerce-sylius/pull/12017)\n    - [\ud83c\udfbd \\[IS\\] Footer : \u00ab Notre accompagnement \u00bb devient \u00ab Nos services \u00bb et raccroche son lien](https://trello.com/c/H2X0XtqH/3932-%F0%9F%8E%BD-is-footer-notre-accompagnement-devient-nos-services-et-raccroche-son-lien) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: rename the Intersport footer column to \u00ab Nos services \u00bb and unlink its title* [\\#12026](https://github.com/Wishibam/Ecommerce-sylius/pull/12026)\n        - *:rewind: revert: Intersport footer \u00ab Nos services \u00bb (wrong target branch)* [\\#12037](https://github.com/Wishibam/Ecommerce-sylius/pull/12037)\n    - [Batavia - Probl\u00e8me sur l'affichage des variations](https://trello.com/c/MY6aNjLj/3931-batavia-probl%C3%A8me-sur-laffichage-des-variations) **\ud83c\udf89 A MEP**\n        - *:bug: fix: deep-link Batavia PLP cards to the displayed color variant* [\\#12027](https://github.com/Wishibam/Ecommerce-sylius/pull/12027)\n    - [Batavia \u2014 Mails \u00ab produit indisponible \u00bb non re\u00e7us par les clients](https://trello.com/c/YLHFxnVs/3933-batavia-mails-produit-indisponible-non-re%C3%A7us-par-les-clients) **\ud83c\udf89 A MEP**\n        - *:bug: fix: validate admin email templates and log real send outcomes* [\\#12035](https://github.com/Wishibam/Ecommerce-sylius/pull/12035)\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\udcb3 Refonte Checkout #4 \u2014 Le Mode de paiement passe \u00e0 la caisse](https://trello.com/c/vDcvKX88/3855-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%92%B3-refonte-checkout-4-le-mode-de-paiement-passe-%C3%A0-la-caisse) **\ud83d\ude80 To Do Vincent**\n        - *:sparkles: feat(tvo): rebuild the checkout payment step and success page in React* [\\#12051](https://github.com/Wishibam/Ecommerce-sylius/pull/12051)\n    - [Intersport - Bug d'affichage images box produit](https://trello.com/c/mOO6EBx1/3936-intersport-bug-daffichage-images-box-produit) **\ud83c\udf89 A MEP**\n        - *:bug: \\[via\\] fix: styles mobiles des pages mot de passe oubli\u00e9/reset* [\\#12055](https://github.com/Wishibam/Ecommerce-sylius/pull/12055)\n    - [\ud83e\ude97 VIA \u2014 Le filtre Cat\u00e9gorie s'ouvre tout seul dans les descentes : on le veut ferm\u00e9 au chargement](https://trello.com/c/GMHVWZe2/3938-%F0%9F%AA%97-via-le-filtre-cat%C3%A9gorie-souvre-tout-seul-dans-les-descentes-on-le-veut-ferm%C3%A9-au-chargement) **\ud83c\udf89 A MEP**\n        - *:bug: \\[via\\] fix: le filtre Cat\u00e9gorie reste ferm\u00e9 au chargement des descentes* [\\#12059](https://github.com/Wishibam/Ecommerce-sylius/pull/12059)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f Feed : Ajouter le flux facebook TVO](https://trello.com/c/iXjTokqz/3937-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-feed-ajouter-le-flux-facebook-tvo) **\ud83e\udd16 Testing tech**\n        - *:sparkles: feat: porter le flux facebook\\_catalog vers le nouveau composant* [\\#12060](https://github.com/Wishibam/Ecommerce-sylius/pull/12060)\n    - [\\[Migration\\]\\[B.1\\] PHP 8.2 \u2192 8.3](https://trello.com/c/Slm1Q5n7/3940-migrationb1-php-82-%E2%86%92-83) **\ud83d\ude80 To Do Vincent**\n        - *:wrench: chore: run the test suite on PHP 8.2 and 8.3 \\[B.1\\]* [\\#12063](https://github.com/Wishibam/Ecommerce-sylius/pull/12063)\n        - *:bug: fix(deploy): restart PHP-FPM via systemd glob instead of hardcoded 8.2* [\\#12066](https://github.com/Wishibam/Ecommerce-sylius/pull/12066)\n        - *:wrench: chore: run the dual PHP matrix on the tests job only \\[B.1\\]* [\\#12068](https://github.com/Wishibam/Ecommerce-sylius/pull/12068)\n    - [\\[Migration\\]\\[B.2\\] Sylius 1.12 \u2192 1.13 (DBAL 3)](https://trello.com/c/huA0VNU9/3941-migrationb2-sylius-112-%E2%86%92-113-dbal-3) **\ud83d\ude80 To Do Vincent**\n        - *:wrench: chore(doctrine): drop the last getSchemaManager() call for DBAL 3/4 \\[B.2 P.1\\]* [\\#12071](https://github.com/Wishibam/Ecommerce-sylius/pull/12071)\n        - *:white\\_check\\_mark: test: characterize every state machine graph wiring \\[B.2 P.2\\]* [\\#12074](https://github.com/Wishibam/Ecommerce-sylius/pull/12074)\n        - *:recycle: refactor: state machine abstraction infra + pilot call site \\[B.2 P.3.1\\]* [\\#12089](https://github.com/Wishibam/Ecommerce-sylius/pull/12089)\n        - *:recycle: refactor: migrate the mechanical state machine call sites \\[B.2 P.3.2\\]* [\\#12094](https://github.com/Wishibam/Ecommerce-sylius/pull/12094)\n        - *:recycle: refactor: migrate the structural state machine call sites \\[B.2 P.3.3\\]* [\\#12098](https://github.com/Wishibam/Ecommerce-sylius/pull/12098)\n        - *:wrench: chore: bump symfony/flex 1 to 2 \\[B.2 P.4\\]* [\\#12100](https://github.com/Wishibam/Ecommerce-sylius/pull/12100)\n    - [Fix : \ufeff\ufefftransmettre le consentement newsletter \u00e0 Coniq \u00e0 l'inscription](https://trello.com/c/mShGQBUK/3943-fix-transmettre-le-consentement-newsletter-%C3%A0-coniq-%C3%A0-linscription) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: transmettre le consentement newsletter \u00e0 Coniq \u00e0 l'inscription* [\\#12076](https://github.com/Wishibam/Ecommerce-sylius/pull/12076)\n        - *:bug: fix: consentement newsletter Coniq par canal \u00e0 l'inscription* [\\#12105](https://github.com/Wishibam/Ecommerce-sylius/pull/12105)\n    - [Page de confirmation de commande - N\u00b0 de commande sylius plut\u00f4t que MP](https://trello.com/c/bUrAEDyS/3944-page-de-confirmation-de-commande-n-de-commande-sylius-plut%C3%B4t-que-mp) **\ud83d\udc8e In Review**\n        - *:bug: fix(tvo): align the thank-you order number with the email* [\\#12114](https://github.com/Wishibam/Ecommerce-sylius/pull/12114)\n \n- **Misc**\n    - *:sparkles: feat: PushDispatcher + adaptateur FCM (push app TVO)* [\\#11917](https://github.com/Wishibam/Ecommerce-sylius/pull/11917)\n    - *style(withdrawal): make the withdrawal button theme-colored and not f\u2026* [\\#11951](https://github.com/Wishibam/Ecommerce-sylius/pull/11951)\n    - *:zap: perf: Batavia PLP \u2014 ES result cache, key batching, menu cache* [\\#11963](https://github.com/Wishibam/Ecommerce-sylius/pull/11963)\n    - *:wrench: chore: outillage pour worktrees parall\u00e8les (front isol\u00e9 par projet)* [\\#11986](https://github.com/Wishibam/Ecommerce-sylius/pull/11986)\n    - *:sparkles: feat: push app TVO \u2014 envoi asynchrone + badge (3.A.5 + 3.A.6)* [\\#12022](https://github.com/Wishibam/Ecommerce-sylius/pull/12022)\n    - *:sparkles: feat: badge unreadPushCount de bout en bout (app TVO)* [\\#12025](https://github.com/Wishibam/Ecommerce-sylius/pull/12025)\n    - *:sparkles: feat: compteur badge dans data des push (app TVO)* [\\#12028](https://github.com/Wishibam/Ecommerce-sylius/pull/12028)\n    - *:sparkles: feat: push \u00ab commande confirm\u00e9e \u00bb (app TVO)* [\\#12031](https://github.com/Wishibam/Ecommerce-sylius/pull/12031)\n    - *:sparkles: feat: push \u00ab commande exp\u00e9di\u00e9e \u00bb (app TVO)* [\\#12040](https://github.com/Wishibam/Ecommerce-sylius/pull/12040)\n    - *feat(push): notification de remboursement de commande (TVO 3.B.3)* [\\#12041](https://github.com/Wishibam/Ecommerce-sylius/pull/12041)\n    - *fix(push): durcir l'envoi FCM \u2014 timeouts born\u00e9s + retry effectif (TVO 3.A.7)* [\\#12042](https://github.com/Wishibam/Ecommerce-sylius/pull/12042)\n    - *test(featured-content): d\u00e9-flakifier testProgramDisableDelay (tol\u00e9rance sur le d\u00e9lai)* [\\#12044](https://github.com/Wishibam/Ecommerce-sylius/pull/12044)\n    - *feat(push): notification de retour en stock (TVO 3.B.4)* [\\#12045](https://github.com/Wishibam/Ecommerce-sylius/pull/12045)\n    - *feat(push): notification de baisse de prix wishlist (TVO 3.B.5)* [\\#12049](https://github.com/Wishibam/Ecommerce-sylius/pull/12049)\n    - *:bug: fix(megamenu): \u00e9largir le lien \u00e0 2048 caract\u00e8res* [\\#12050](https://github.com/Wishibam/Ecommerce-sylius/pull/12050)\n    - *feat(push): relance push des paniers abandonn\u00e9s (TVO 3.B.6)* [\\#12053](https://github.com/Wishibam/Ecommerce-sylius/pull/12053)\n    - *feat(deeplink): AASA de la nouvelle app TVO \u2014 Universal Links iOS (TVO 4.1)* [\\#12064](https://github.com/Wishibam/Ecommerce-sylius/pull/12064)\n    - *feat(deeplink): assetlinks.json de la nouvelle app TVO \u2014 App Links Android (TVO 4.2)* [\\#12065](https://github.com/Wishibam/Ecommerce-sylius/pull/12065)\n    - *:bug: fix: complete payments stuck by Stripe webhook/checkout race* [\\#12075](https://github.com/Wishibam/Ecommerce-sylius/pull/12075)\n    - *:bug: fix: dedup order\\_confirmation per order to stop double send* [\\#12101](https://github.com/Wishibam/Ecommerce-sylius/pull/12101)\n    - *:bug: fix: pin the fixtures channel default tax zone* [\\#12106](https://github.com/Wishibam/Ecommerce-sylius/pull/12106)\n \n- **D\u00e9j\u00e0 en production**\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\udc1b Fix r\u00e9indexation ES bloqu\u00e9e \u2014 \u00ab immense term \u00bb sur attribut trop long (Intersport)](https://trello.com/c/iD6idW0v/3915-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%90%9B-fix-r%C3%A9indexation-es-bloqu%C3%A9e-immense-term-sur-attribut-trop-long-intersport) **MEP Ao\u00fbt**\n        - *:bug: fix: r\u00e9indexation ES bloqu\u00e9e par un attribut trop long (immense term)* [\\#11972](https://github.com/Wishibam/Ecommerce-sylius/pull/11972)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f \u203c\ufe0f Nouveau Feeds - Faire tourner tous les nouveaux feeds sur toutes les preprods/prods](https://trello.com/c/Kr8UhDAv/3910-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-%EF%B8%8F-nouveau-feeds-faire-tourner-tous-les-nouveaux-feeds-sur-toutes-les-preprods-prods) **\ud83e\udee1 To Do JC**\n        - *:sparkles: feat: drive-to-store feeds parity with legacy Setono* [\\#11979](https://github.com/Wishibam/Ecommerce-sylius/pull/11979)\n    - [TVO - Les recommandations produits ne remontent aucun produit sur la fiche produit](https://trello.com/c/lw3SYgNG/3926-tvo-les-recommandations-produits-ne-remontent-aucun-produit-sur-la-fiche-produit) **MEP Ao\u00fbt**\n        - *:bug: fix(search): match the indexed color value in recommendations* [\\#12004](https://github.com/Wishibam/Ecommerce-sylius/pull/12004)\n    - [A ESTIMER : Google Shopping Feed : ajouter le Outlet Price en cas de promotion](https://trello.com/c/RnEgL53B/3867-a-estimer-google-shopping-feed-ajouter-le-outlet-price-en-cas-de-promotion) **MEP Ao\u00fbt**\n        - *:sparkles: feat(helsinki): expose the outlet price in the Google Shopping feed* [\\#12020](https://github.com/Wishibam/Ecommerce-sylius/pull/12020)\n    - [\u2615\ufe0f \\[Batavia\\] Frais de retour : \u20ac3,25 \u2192 \u20ac3,95 (et on passe le texte en traduction)](https://trello.com/c/P4vec3cz/3934-%E2%98%95%EF%B8%8F-batavia-frais-de-retour-%E2%82%AC325-%E2%86%92-%E2%82%AC395-et-on-passe-le-texte-en-traduction) **MEP Ao\u00fbt**\n        - *:bug: fix: Batavia return cost 3,95 and move the line to a translation* [\\#12034](https://github.com/Wishibam/Ecommerce-sylius/pull/12034)\n    - *:bug: fix: render flag emojis as SVG icons, not OS emoji glyphs* [\\#11981](https://github.com/Wishibam/Ecommerce-sylius/pull/11981)\n    - *:bug: fix: apply the flag icon filter to the remaining menu renderings* [\\#11982](https://github.com/Wishibam/Ecommerce-sylius/pull/11982)\n    - *:wrench: chore: bump php\\_codesniffer en 3.13.6 (CVE-2026-67434, CI rouge)* [\\#12008](https://github.com/Wishibam/Ecommerce-sylius/pull/12008)", "creation_timestamp": "2026-08-28T08:45:20.118826Z"}, {"uuid": "cddec2c4-2e90-429b-b9e5-4b9f28bffa4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67434", "type": "seen", "source": "https://gist.github.com/jbourdin/148310dfe7fa4e895972107b9059ef3b", "content": "- **Trello**\n    - [GLOBAL - Email Alerte paiement en erreur](https://trello.com/c/P1DJvjHp/3229-global-email-alerte-paiement-en-erreur) **\ud83e\udd13 Testing**\n        - *feat(payment): send email notification when payment fails* [\\#10555](https://github.com/Wishibam/Ecommerce-sylius/pull/10555)\n    - [Helsinki : Portail de retour - Sylius - int\u00e9gration front du portail de retour](https://trello.com/c/mhcc7YaC/2401-helsinki-portail-de-retour-sylius-int%C3%A9gration-front-du-portail-de-retour) **TEMP - EPIC - Droit de r\u00e9tractation**\n        - *feat(helsinki): Add return portal to Helsinki order details* [\\#11757](https://github.com/Wishibam/Ecommerce-sylius/pull/11757)\n    - [\u26a0\ufe0fAction prod\u26a0\ufe0f\ud83d\udd14 Refonte TVO : tracking du volet d'alerte \u00ab retour en stock \u00bb](https://trello.com/c/SXyhrSQb/3834-%E2%9A%A0%EF%B8%8Faction-prod%E2%9A%A0%EF%B8%8F%F0%9F%94%94-refonte-tvo-tracking-du-volet-dalerte-retour-en-stock) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: track back-in-stock alert panel usage* [\\#11791](https://github.com/Wishibam/Ecommerce-sylius/pull/11791)\n    - [TVO - Fiche produit - Ajout des blocs \"Mati\u00e8re et entretien\" & \"Caract\u00e9ristiques\"](https://trello.com/c/AbsKmIzk/3633-tvo-fiche-produit-ajout-des-blocs-mati%C3%A8re-et-entretien-caract%C3%A9ristiques) **\ud83c\udf89 A MEP**\n        - *feat(tvo): add Mati\u00e8re et entretien & Caract\u00e9ristiques blocks on PDP* [\\#11812](https://github.com/Wishibam/Ecommerce-sylius/pull/11812)\n    - [\\[Migration\\]\\[A.2\\] D\u00e9mant\u00e8lement Setono Analytics + Tag-Bag](https://trello.com/c/uJN0Gkiz/3856-migrationa2-d%C3%A9mant%C3%A8lement-setono-analytics-tag-bag) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore(migration): internalize setono analytics + tag-bag as src/Component \\[A.2\\]* [\\#11846](https://github.com/Wishibam/Ecommerce-sylius/pull/11846)\n    - [\\[Migration\\]\\[A.4.1\\] Internaliser bitbag/wishlist-plugin dans src/Component/Wishlist](https://trello.com/c/U9dQGx1l/3863-migrationa41-internaliser-bitbag-wishlist-plugin-dans-src-component-wishlist) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: internalize bitbag/wishlist-plugin \\[A.4.1\\]* [\\#11856](https://github.com/Wishibam/Ecommerce-sylius/pull/11856)\n    - [\\[Migration\\]\\[A.4.2/A.4.3\\] Internaliser bring & deep-link dans src/Component](https://trello.com/c/RsLN5SNT/3864-migrationa42-a43-internaliser-bring-deep-link-dans-src-component) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: internalize bring & deep-link plugins \\[A.4.2, A.4.3\\]* [\\#11861](https://github.com/Wishibam/Ecommerce-sylius/pull/11861)\n    - [\\[Migration\\]\\[A.5\\] Bumps frontend \u00ab safe \u00bb + suppression des packages morts](https://trello.com/c/vI6k61gt/3873-migrationa5-bumps-frontend-safe-suppression-des-packages-morts) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: bump safe frontend deps + prune dead packages \\[A.5\\]* [\\#11875](https://github.com/Wishibam/Ecommerce-sylius/pull/11875)\n    - [\\[Migration\\]\\[A.6\\] Pr\u00e9paration Doctrine pour DBAL 3 (monkey-patch migrations)](https://trello.com/c/8mdyVMwg/3880-migrationa6-pr%C3%A9paration-doctrine-pour-dbal-3-monkey-patch-migrations) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: replace Doctrine migration monkey-patch for DBAL 3 \\[A.6\\]* [\\#11893](https://github.com/Wishibam/Ecommerce-sylius/pull/11893)\n    - [TVO - Express checkout : adresse tronqu\u00e9e \u2014 nom de rue perdu (Apple Pay line1/line2)](https://trello.com/c/dIrl0I1a/3884-tvo-express-checkout-adresse-tronqu%C3%A9e-nom-de-rue-perdu-apple-pay-line1-line2) **\ud83e\udd13 Testing**\n        - *:bug: fix: join express checkout wallet address line1/line2 into street* [\\#11914](https://github.com/Wishibam/Ecommerce-sylius/pull/11914)\n    - [\\[P0\\] Express checkout : re-v\u00e9rifier le montant du PaymentIntent au complete](https://trello.com/c/qJdTR9Jc/3885-p0-express-checkout-re-v%C3%A9rifier-le-montant-du-paymentintent-au-complete) **\ud83d\udc8e In Review**\n        - *:bug: fix: verify express checkout PaymentIntent amount at completion* [\\#11916](https://github.com/Wishibam/Ecommerce-sylius/pull/11916)\n    - [\\[P0\\] Webhook Stripe : rembourser r\u00e9ellement les charges des commandes refus\u00e9es/annul\u00e9es](https://trello.com/c/fyJeMD3L/3886-p0-webhook-stripe-rembourser-r%C3%A9ellement-les-charges-des-commandes-refus%C3%A9es-annul%C3%A9es) **\ud83d\udc8e In Review**\n        - *:bug: fix: refund Stripe charges captured for refused or cancelled orders* [\\#11918](https://github.com/Wishibam/Ecommerce-sylius/pull/11918)\n    - [\\[P1\\] Express checkout : pinner explicitement les wallets autoris\u00e9s (quick win)](https://trello.com/c/tEpmPM9l/3890-p1-express-checkout-pinner-explicitement-les-wallets-autoris%C3%A9s-quick-win) **\ud83e\udd13 Testing**\n        - *:bug: fix: restrict express checkout wallets to an explicit allowlist* [\\#11919](https://github.com/Wishibam/Ecommerce-sylius/pull/11919)\n    - [\\[P0\\] Express checkout : commandes \u00e0 fonds captur\u00e9s supprim\u00e9es par la purge des carts + cha\u00eene d'abort morte](https://trello.com/c/1Wo7zGP5/3887-p0-express-checkout-commandes-%C3%A0-fonds-captur%C3%A9s-supprim%C3%A9es-par-la-purge-des-carts-cha%C3%AEne-dabort-morte) **\ud83d\udc8e In Review**\n        - *:bug: fix: protect express checkout captured-funds carts from the purge* [\\#11920](https://github.com/Wishibam/Ecommerce-sylius/pull/11920)\n    - [Helsinki \u2014 Funnel checkout GA4 vide : \u00e9v\u00e9nements e-commerce manquants/incomplets](https://trello.com/c/j0yQGSFm/3921-helsinki-funnel-checkout-ga4-vide-%C3%A9v%C3%A9nements-e-commerce-manquants-incomplets) **\ud83c\udf44 Ready for testing**\n        - *:bug: fix: \u00e9mettre le funnel checkout GA4 complet* [\\#11980](https://github.com/Wishibam/Ecommerce-sylius/pull/11980)\n        - *:bug: fix: \u00e9mettre add\\_payment\\_info quand l'\u00e9tape de paiement est saut\u00e9e* [\\#12014](https://github.com/Wishibam/Ecommerce-sylius/pull/12014)\n    - [FEAT-0006 \u2014 Regroupement des emails d'annulation d'articles](https://trello.com/c/bBiV4jTE/3415-feat-0006-regroupement-des-emails-dannulation-darticles) **\ud83c\udf89 A MEP**\n        - *:bug: fix: FEAT-0006 cancellation email grouping QA feedback* [\\#11984](https://github.com/Wishibam/Ecommerce-sylius/pull/11984)\n        - *:bug: fix: register order\\_entirely\\_cancelled email template for all projects* [\\#12091](https://github.com/Wishibam/Ecommerce-sylius/pull/12091)\n        - *:bug: fix: send grouped withdrawal confirmations on entirely cancelled orders* [\\#12104](https://github.com/Wishibam/Ecommerce-sylius/pull/12104)\n    - [Min-height pages React](https://trello.com/c/Rti8eFXb/3919-min-height-pages-react) **\ud83c\udf89 A MEP**\n        - *:bug: fix: add min-height on React pages to prevent footer flash* [\\#11987](https://github.com/Wishibam/Ecommerce-sylius/pull/11987)\n    - [SEO - TVO - changement de slug](https://trello.com/c/Gbb2tles/3908-seo-tvo-changement-de-slug) **\ud83c\udf89 A MEP**\n        - *:bug: fix: clean up TVO brand page slugs with 301 redirects* [\\#11988](https://github.com/Wishibam/Ecommerce-sylius/pull/11988)\n    - [\u26a0\ufe0f action preprod/prod \u26a0\ufe0f \ud83d\uded2 Refonte Checkout #1 \u2014 La page Panier change de garde-robe](https://trello.com/c/qxdtlZxk/3851-%E2%9A%A0%EF%B8%8F-action-preprod-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%9B%92-refonte-checkout-1-la-page-panier-change-de-garde-robe) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): cart page QA feedback round* [\\#11990](https://github.com/Wishibam/Ecommerce-sylius/pull/11990)\n    - [\u26a0\ufe0f MEP \u26a0\ufe0f\u2b50 Google Customer Reviews sur TVO \u2014 brancher la machine \u00e0 \u00e9toiles](https://trello.com/c/7JA9u85M/3899-%E2%9A%A0%EF%B8%8F-mep-%E2%9A%A0%EF%B8%8F%E2%AD%90-google-customer-reviews-sur-tvo-brancher-la-machine-%C3%A0-%C3%A9toiles) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: TVO Google Customer Reviews \u2014 GTIN produits sur thank you* [\\#11991](https://github.com/Wishibam/Ecommerce-sylius/pull/11991)\n    - [Fix : TypeError trim() null sur les share descriptions de channel (admin)](https://trello.com/c/o47Ek1Fo/3924-fix-typeerror-trim-null-sur-les-share-descriptions-de-channel-admin) **\ud83e\udd16 Testing tech**\n        - *:bug: fix: guard against null share descriptions in channel setter* [\\#11992](https://github.com/Wishibam/Ecommerce-sylius/pull/11992)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f \ud83d\udce6\ud83c\udf0d Mondial Relay sans fronti\u00e8res \u2014 points relais UE (v1 TVO)](https://trello.com/c/4X0QYlQ5/3918-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%93%A6%F0%9F%8C%8D-mondial-relay-sans-fronti%C3%A8res-points-relais-ue-v1-tvo) **\ud83d\udc8e In Review**\n        - *:sparkles: feat(mondial-relay): relay search follows the buyer's country* [\\#11994](https://github.com/Wishibam/Ecommerce-sylius/pull/11994)\n    - [\ud83d\udccd Refonte Checkout \u2014 La suggestion d'adresse qui fait mouche](https://trello.com/c/vF0T1FZU/3860-%F0%9F%93%8D-refonte-checkout-la-suggestion-dadresse-qui-fait-mouche) **\ud83d\ude80 To Do Vincent**\n        - *:bug: fix(tvo): address suggestion QA feedback round* [\\#11995](https://github.com/Wishibam/Ecommerce-sylius/pull/11995)\n        - *:bug: fix(tvo): keep the manual phone flag choice made on an empty field* [\\#12058](https://github.com/Wishibam/Ecommerce-sylius/pull/12058)\n    - [\ud83c\udf5e Refonte Checkout \u2014 Des toasts tout chauds pour les messages syst\u00e8me](https://trello.com/c/N70pstGO/3861-%F0%9F%8D%9E-refonte-checkout-des-toasts-tout-chauds-pour-les-messages-syst%C3%A8me) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): checkout toasts QA feedback round* [\\#11996](https://github.com/Wishibam/Ecommerce-sylius/pull/11996)\n    - [\ud83d\udd00 Refonte TVO : le variant s\u00e9lectionn\u00e9 saute en 1re position au lieu de rester \u00e0 sa place](https://trello.com/c/vQH5uxHz/3904-%F0%9F%94%80-refonte-tvo-le-variant-s%C3%A9lectionn%C3%A9-saute-en-1re-position-au-lieu-de-rester-%C3%A0-sa-place) **\ud83c\udf89 A MEP**\n        - *:bug: fix: keep option values in place on overflowing variant axis* [\\#11998](https://github.com/Wishibam/Ecommerce-sylius/pull/11998)\n    - [TVO- mail order\\_open\\_return\\_withdrawn -remplacement de tag](https://trello.com/c/NK5CnCM2/3883-tvo-mail-orderopenreturnwithdrawn-remplacement-de-tag) **\ud83c\udf89 A MEP**\n        - *\ud83d\udc1b fix: orange \"return in progress\" badge on TVO withdrawal email* [\\#12000](https://github.com/Wishibam/Ecommerce-sylius/pull/12000)\n    - [SEO - ALL - Meta Title](https://trello.com/c/QDbDIPTu/3909-seo-all-meta-title) **\ud83e\udd13 Testing**\n        - *:sparkles: feat: add dedicated Meta Title for CMS pages* [\\#12001](https://github.com/Wishibam/Ecommerce-sylius/pull/12001)\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\ude9a Refonte Checkout #3 \u2014 Le Mode de livraison prend la route](https://trello.com/c/NDSNOimu/3854-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%9A%9A-refonte-checkout-3-le-mode-de-livraison-prend-la-route) **\ud83d\ude80 To Do Vincent**\n        - *:sparkles: feat(tvo): React checkout select shipping step (P3)* [\\#12011](https://github.com/Wishibam/Ecommerce-sylius/pull/12011)\n    - [Helsinki - Correction bug d'affichage en finnois en version mobile](https://trello.com/c/f9V6mA6z/3686-helsinki-correction-bug-daffichage-en-finnois-en-version-mobile) **\ud83c\udf89 A MEP**\n        - *:bug: fix: reduce Helsinki posts carousel title on mobile* [\\#12017](https://github.com/Wishibam/Ecommerce-sylius/pull/12017)\n    - [\ud83c\udfbd \\[IS\\] Footer : \u00ab Notre accompagnement \u00bb devient \u00ab Nos services \u00bb et raccroche son lien](https://trello.com/c/H2X0XtqH/3932-%F0%9F%8E%BD-is-footer-notre-accompagnement-devient-nos-services-et-raccroche-son-lien) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: rename the Intersport footer column to \u00ab Nos services \u00bb and unlink its title* [\\#12026](https://github.com/Wishibam/Ecommerce-sylius/pull/12026)\n        - *:rewind: revert: Intersport footer \u00ab Nos services \u00bb (wrong target branch)* [\\#12037](https://github.com/Wishibam/Ecommerce-sylius/pull/12037)\n    - [Batavia - Probl\u00e8me sur l'affichage des variations](https://trello.com/c/MY6aNjLj/3931-batavia-probl%C3%A8me-sur-laffichage-des-variations) **\ud83c\udf89 A MEP**\n        - *:bug: fix: deep-link Batavia PLP cards to the displayed color variant* [\\#12027](https://github.com/Wishibam/Ecommerce-sylius/pull/12027)\n    - [Batavia \u2014 Mails \u00ab produit indisponible \u00bb non re\u00e7us par les clients](https://trello.com/c/YLHFxnVs/3933-batavia-mails-produit-indisponible-non-re%C3%A7us-par-les-clients) **\ud83c\udf89 A MEP**\n        - *:bug: fix: validate admin email templates and log real send outcomes* [\\#12035](https://github.com/Wishibam/Ecommerce-sylius/pull/12035)\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\udcb3 Refonte Checkout #4 \u2014 Le Mode de paiement passe \u00e0 la caisse](https://trello.com/c/vDcvKX88/3855-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%92%B3-refonte-checkout-4-le-mode-de-paiement-passe-%C3%A0-la-caisse) **\ud83d\ude80 To Do Vincent**\n        - *:sparkles: feat(tvo): rebuild the checkout payment step and success page in React* [\\#12051](https://github.com/Wishibam/Ecommerce-sylius/pull/12051)\n    - [Intersport - Bug d'affichage images box produit](https://trello.com/c/mOO6EBx1/3936-intersport-bug-daffichage-images-box-produit) **\ud83c\udf89 A MEP**\n        - *:bug: \\[via\\] fix: styles mobiles des pages mot de passe oubli\u00e9/reset* [\\#12055](https://github.com/Wishibam/Ecommerce-sylius/pull/12055)\n    - [\ud83e\ude97 VIA \u2014 Le filtre Cat\u00e9gorie s'ouvre tout seul dans les descentes : on le veut ferm\u00e9 au chargement](https://trello.com/c/GMHVWZe2/3938-%F0%9F%AA%97-via-le-filtre-cat%C3%A9gorie-souvre-tout-seul-dans-les-descentes-on-le-veut-ferm%C3%A9-au-chargement) **\ud83c\udf89 A MEP**\n        - *:bug: \\[via\\] fix: le filtre Cat\u00e9gorie reste ferm\u00e9 au chargement des descentes* [\\#12059](https://github.com/Wishibam/Ecommerce-sylius/pull/12059)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f Feed : Ajouter le flux facebook TVO](https://trello.com/c/iXjTokqz/3937-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-feed-ajouter-le-flux-facebook-tvo) **\ud83e\udd16 Testing tech**\n        - *:sparkles: feat: porter le flux facebook\\_catalog vers le nouveau composant* [\\#12060](https://github.com/Wishibam/Ecommerce-sylius/pull/12060)\n    - [\\[Migration\\]\\[B.1\\] PHP 8.2 \u2192 8.3](https://trello.com/c/Slm1Q5n7/3940-migrationb1-php-82-%E2%86%92-83) **\ud83d\ude80 To Do Vincent**\n        - *:wrench: chore: run the test suite on PHP 8.2 and 8.3 \\[B.1\\]* [\\#12063](https://github.com/Wishibam/Ecommerce-sylius/pull/12063)\n        - *:bug: fix(deploy): restart PHP-FPM via systemd glob instead of hardcoded 8.2* [\\#12066](https://github.com/Wishibam/Ecommerce-sylius/pull/12066)\n        - *:wrench: chore: run the dual PHP matrix on the tests job only \\[B.1\\]* [\\#12068](https://github.com/Wishibam/Ecommerce-sylius/pull/12068)\n    - [\\[Migration\\]\\[B.2\\] Sylius 1.12 \u2192 1.13 (DBAL 3)](https://trello.com/c/huA0VNU9/3941-migrationb2-sylius-112-%E2%86%92-113-dbal-3) **\ud83d\ude80 To Do Vincent**\n        - *:wrench: chore(doctrine): drop the last getSchemaManager() call for DBAL 3/4 \\[B.2 P.1\\]* [\\#12071](https://github.com/Wishibam/Ecommerce-sylius/pull/12071)\n        - *:white\\_check\\_mark: test: characterize every state machine graph wiring \\[B.2 P.2\\]* [\\#12074](https://github.com/Wishibam/Ecommerce-sylius/pull/12074)\n        - *:recycle: refactor: state machine abstraction infra + pilot call site \\[B.2 P.3.1\\]* [\\#12089](https://github.com/Wishibam/Ecommerce-sylius/pull/12089)\n        - *:wrench: chore: bump symfony/flex 1 to 2 \\[B.2 P.4\\]* [\\#12100](https://github.com/Wishibam/Ecommerce-sylius/pull/12100)\n    - [Fix : \ufeff\ufefftransmettre le consentement newsletter \u00e0 Coniq \u00e0 l'inscription](https://trello.com/c/mShGQBUK/3943-fix-transmettre-le-consentement-newsletter-%C3%A0-coniq-%C3%A0-linscription) **\ud83e\udd13 Testing**\n        - *:sparkles: feat: transmettre le consentement newsletter \u00e0 Coniq \u00e0 l'inscription* [\\#12076](https://github.com/Wishibam/Ecommerce-sylius/pull/12076)\n        - *:bug: fix: consentement newsletter Coniq par canal \u00e0 l'inscription* [\\#12105](https://github.com/Wishibam/Ecommerce-sylius/pull/12105)\n \n- **Misc**\n    - *:sparkles: feat: PushDispatcher + adaptateur FCM (push app TVO)* [\\#11917](https://github.com/Wishibam/Ecommerce-sylius/pull/11917)\n    - *style(withdrawal): make the withdrawal button theme-colored and not f\u2026* [\\#11951](https://github.com/Wishibam/Ecommerce-sylius/pull/11951)\n    - *:zap: perf: Batavia PLP \u2014 ES result cache, key batching, menu cache* [\\#11963](https://github.com/Wishibam/Ecommerce-sylius/pull/11963)\n    - *:wrench: chore: outillage pour worktrees parall\u00e8les (front isol\u00e9 par projet)* [\\#11986](https://github.com/Wishibam/Ecommerce-sylius/pull/11986)\n    - *:sparkles: feat: push app TVO \u2014 envoi asynchrone + badge (3.A.5 + 3.A.6)* [\\#12022](https://github.com/Wishibam/Ecommerce-sylius/pull/12022)\n    - *:sparkles: feat: badge unreadPushCount de bout en bout (app TVO)* [\\#12025](https://github.com/Wishibam/Ecommerce-sylius/pull/12025)\n    - *:sparkles: feat: compteur badge dans data des push (app TVO)* [\\#12028](https://github.com/Wishibam/Ecommerce-sylius/pull/12028)\n    - *:sparkles: feat: push \u00ab commande confirm\u00e9e \u00bb (app TVO)* [\\#12031](https://github.com/Wishibam/Ecommerce-sylius/pull/12031)\n    - *:sparkles: feat: push \u00ab commande exp\u00e9di\u00e9e \u00bb (app TVO)* [\\#12040](https://github.com/Wishibam/Ecommerce-sylius/pull/12040)\n    - *feat(push): notification de remboursement de commande (TVO 3.B.3)* [\\#12041](https://github.com/Wishibam/Ecommerce-sylius/pull/12041)\n    - *fix(push): durcir l'envoi FCM \u2014 timeouts born\u00e9s + retry effectif (TVO 3.A.7)* [\\#12042](https://github.com/Wishibam/Ecommerce-sylius/pull/12042)\n    - *test(featured-content): d\u00e9-flakifier testProgramDisableDelay (tol\u00e9rance sur le d\u00e9lai)* [\\#12044](https://github.com/Wishibam/Ecommerce-sylius/pull/12044)\n    - *feat(push): notification de retour en stock (TVO 3.B.4)* [\\#12045](https://github.com/Wishibam/Ecommerce-sylius/pull/12045)\n    - *feat(push): notification de baisse de prix wishlist (TVO 3.B.5)* [\\#12049](https://github.com/Wishibam/Ecommerce-sylius/pull/12049)\n    - *:bug: fix(megamenu): \u00e9largir le lien \u00e0 2048 caract\u00e8res* [\\#12050](https://github.com/Wishibam/Ecommerce-sylius/pull/12050)\n    - *feat(push): relance push des paniers abandonn\u00e9s (TVO 3.B.6)* [\\#12053](https://github.com/Wishibam/Ecommerce-sylius/pull/12053)\n    - *feat(deeplink): AASA de la nouvelle app TVO \u2014 Universal Links iOS (TVO 4.1)* [\\#12064](https://github.com/Wishibam/Ecommerce-sylius/pull/12064)\n    - *feat(deeplink): assetlinks.json de la nouvelle app TVO \u2014 App Links Android (TVO 4.2)* [\\#12065](https://github.com/Wishibam/Ecommerce-sylius/pull/12065)\n    - *:bug: fix: complete payments stuck by Stripe webhook/checkout race* [\\#12075](https://github.com/Wishibam/Ecommerce-sylius/pull/12075)\n    - *:bug: fix: dedup order\\_confirmation per order to stop double send* [\\#12101](https://github.com/Wishibam/Ecommerce-sylius/pull/12101)\n \n- **D\u00e9j\u00e0 en production**\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\udc1b Fix r\u00e9indexation ES bloqu\u00e9e \u2014 \u00ab immense term \u00bb sur attribut trop long (Intersport)](https://trello.com/c/iD6idW0v/3915-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%90%9B-fix-r%C3%A9indexation-es-bloqu%C3%A9e-immense-term-sur-attribut-trop-long-intersport) **MEP Ao\u00fbt**\n        - *:bug: fix: r\u00e9indexation ES bloqu\u00e9e par un attribut trop long (immense term)* [\\#11972](https://github.com/Wishibam/Ecommerce-sylius/pull/11972)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f \u203c\ufe0f Nouveau Feeds - Faire tourner tous les nouveaux feeds sur toutes les preprods/prods](https://trello.com/c/Kr8UhDAv/3910-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-%EF%B8%8F-nouveau-feeds-faire-tourner-tous-les-nouveaux-feeds-sur-toutes-les-preprods-prods) **\ud83e\udee1 To Do JC**\n        - *:sparkles: feat: drive-to-store feeds parity with legacy Setono* [\\#11979](https://github.com/Wishibam/Ecommerce-sylius/pull/11979)\n    - [TVO - Les recommandations produits ne remontent aucun produit sur la fiche produit](https://trello.com/c/lw3SYgNG/3926-tvo-les-recommandations-produits-ne-remontent-aucun-produit-sur-la-fiche-produit) **MEP Ao\u00fbt**\n        - *:bug: fix(search): match the indexed color value in recommendations* [\\#12004](https://github.com/Wishibam/Ecommerce-sylius/pull/12004)\n    - [A ESTIMER : Google Shopping Feed : ajouter le Outlet Price en cas de promotion](https://trello.com/c/RnEgL53B/3867-a-estimer-google-shopping-feed-ajouter-le-outlet-price-en-cas-de-promotion) **\ud83e\udd13 Testing**\n        - *:sparkles: feat(helsinki): expose the outlet price in the Google Shopping feed* [\\#12020](https://github.com/Wishibam/Ecommerce-sylius/pull/12020)\n    - [\u2615\ufe0f \\[Batavia\\] Frais de retour : \u20ac3,25 \u2192 \u20ac3,95 (et on passe le texte en traduction)](https://trello.com/c/P4vec3cz/3934-%E2%98%95%EF%B8%8F-batavia-frais-de-retour-%E2%82%AC325-%E2%86%92-%E2%82%AC395-et-on-passe-le-texte-en-traduction) **MEP Ao\u00fbt**\n        - *:bug: fix: Batavia return cost 3,95 and move the line to a translation* [\\#12034](https://github.com/Wishibam/Ecommerce-sylius/pull/12034)\n    - *:bug: fix: render flag emojis as SVG icons, not OS emoji glyphs* [\\#11981](https://github.com/Wishibam/Ecommerce-sylius/pull/11981)\n    - *:bug: fix: apply the flag icon filter to the remaining menu renderings* [\\#11982](https://github.com/Wishibam/Ecommerce-sylius/pull/11982)\n    - *:wrench: chore: bump php\\_codesniffer en 3.13.6 (CVE-2026-67434, CI rouge)* [\\#12008](https://github.com/Wishibam/Ecommerce-sylius/pull/12008)", "creation_timestamp": "2026-08-25T12:53:20.741512Z"}, {"uuid": "91608daa-c2fc-4563-bc09-c63ed170da92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67434", "type": "seen", "source": "https://gist.github.com/jbourdin/c5abe477b090f86b0f04dd57a5cc18a7", "content": "- **Trello**\n    - [GLOBAL - Email Alerte paiement en erreur](https://trello.com/c/P1DJvjHp/3229-global-email-alerte-paiement-en-erreur) **\ud83e\udd13 Testing**\n        - *feat(payment): send email notification when payment fails* [\\#10555](https://github.com/Wishibam/Ecommerce-sylius/pull/10555)\n    - [Helsinki : Portail de retour - Sylius - int\u00e9gration front du portail de retour](https://trello.com/c/mhcc7YaC/2401-helsinki-portail-de-retour-sylius-int%C3%A9gration-front-du-portail-de-retour) **TEMP - EPIC - Droit de r\u00e9tractation**\n        - *feat(helsinki): Add return portal to Helsinki order details* [\\#11757](https://github.com/Wishibam/Ecommerce-sylius/pull/11757)\n    - [\u26a0\ufe0fAction prod\u26a0\ufe0f\ud83d\udd14 Refonte TVO : tracking du volet d'alerte \u00ab retour en stock \u00bb](https://trello.com/c/SXyhrSQb/3834-%E2%9A%A0%EF%B8%8Faction-prod%E2%9A%A0%EF%B8%8F%F0%9F%94%94-refonte-tvo-tracking-du-volet-dalerte-retour-en-stock) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: track back-in-stock alert panel usage* [\\#11791](https://github.com/Wishibam/Ecommerce-sylius/pull/11791)\n    - [TVO - Fiche produit - Ajout des blocs \"Mati\u00e8re et entretien\" & \"Caract\u00e9ristiques\"](https://trello.com/c/AbsKmIzk/3633-tvo-fiche-produit-ajout-des-blocs-mati%C3%A8re-et-entretien-caract%C3%A9ristiques) **\ud83c\udf89 A MEP**\n        - *feat(tvo): add Mati\u00e8re et entretien & Caract\u00e9ristiques blocks on PDP* [\\#11812](https://github.com/Wishibam/Ecommerce-sylius/pull/11812)\n    - [\\[Migration\\]\\[A.2\\] D\u00e9mant\u00e8lement Setono Analytics + Tag-Bag](https://trello.com/c/uJN0Gkiz/3856-migrationa2-d%C3%A9mant%C3%A8lement-setono-analytics-tag-bag) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore(migration): internalize setono analytics + tag-bag as src/Component \\[A.2\\]* [\\#11846](https://github.com/Wishibam/Ecommerce-sylius/pull/11846)\n    - [\\[Migration\\]\\[A.4.1\\] Internaliser bitbag/wishlist-plugin dans src/Component/Wishlist](https://trello.com/c/U9dQGx1l/3863-migrationa41-internaliser-bitbag-wishlist-plugin-dans-src-component-wishlist) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: internalize bitbag/wishlist-plugin \\[A.4.1\\]* [\\#11856](https://github.com/Wishibam/Ecommerce-sylius/pull/11856)\n    - [\\[Migration\\]\\[A.4.2/A.4.3\\] Internaliser bring & deep-link dans src/Component](https://trello.com/c/RsLN5SNT/3864-migrationa42-a43-internaliser-bring-deep-link-dans-src-component) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: internalize bring & deep-link plugins \\[A.4.2, A.4.3\\]* [\\#11861](https://github.com/Wishibam/Ecommerce-sylius/pull/11861)\n    - [\\[Migration\\]\\[A.5\\] Bumps frontend \u00ab safe \u00bb + suppression des packages morts](https://trello.com/c/vI6k61gt/3873-migrationa5-bumps-frontend-safe-suppression-des-packages-morts) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: bump safe frontend deps + prune dead packages \\[A.5\\]* [\\#11875](https://github.com/Wishibam/Ecommerce-sylius/pull/11875)\n    - [\\[Migration\\]\\[A.6\\] Pr\u00e9paration Doctrine pour DBAL 3 (monkey-patch migrations)](https://trello.com/c/8mdyVMwg/3880-migrationa6-pr%C3%A9paration-doctrine-pour-dbal-3-monkey-patch-migrations) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: replace Doctrine migration monkey-patch for DBAL 3 \\[A.6\\]* [\\#11893](https://github.com/Wishibam/Ecommerce-sylius/pull/11893)\n    - [TVO - Express checkout : adresse tronqu\u00e9e \u2014 nom de rue perdu (Apple Pay line1/line2)](https://trello.com/c/dIrl0I1a/3884-tvo-express-checkout-adresse-tronqu%C3%A9e-nom-de-rue-perdu-apple-pay-line1-line2) **\ud83e\udd13 Testing**\n        - *:bug: fix: join express checkout wallet address line1/line2 into street* [\\#11914](https://github.com/Wishibam/Ecommerce-sylius/pull/11914)\n    - [\\[P0\\] Express checkout : re-v\u00e9rifier le montant du PaymentIntent au complete](https://trello.com/c/qJdTR9Jc/3885-p0-express-checkout-re-v%C3%A9rifier-le-montant-du-paymentintent-au-complete) **\ud83d\udc8e In Review**\n        - *:bug: fix: verify express checkout PaymentIntent amount at completion* [\\#11916](https://github.com/Wishibam/Ecommerce-sylius/pull/11916)\n    - [\\[P0\\] Webhook Stripe : rembourser r\u00e9ellement les charges des commandes refus\u00e9es/annul\u00e9es](https://trello.com/c/fyJeMD3L/3886-p0-webhook-stripe-rembourser-r%C3%A9ellement-les-charges-des-commandes-refus%C3%A9es-annul%C3%A9es) **\ud83d\udc8e In Review**\n        - *:bug: fix: refund Stripe charges captured for refused or cancelled orders* [\\#11918](https://github.com/Wishibam/Ecommerce-sylius/pull/11918)\n    - [\\[P1\\] Express checkout : pinner explicitement les wallets autoris\u00e9s (quick win)](https://trello.com/c/tEpmPM9l/3890-p1-express-checkout-pinner-explicitement-les-wallets-autoris%C3%A9s-quick-win) **\ud83e\udd13 Testing**\n        - *:bug: fix: restrict express checkout wallets to an explicit allowlist* [\\#11919](https://github.com/Wishibam/Ecommerce-sylius/pull/11919)\n    - [\\[P0\\] Express checkout : commandes \u00e0 fonds captur\u00e9s supprim\u00e9es par la purge des carts + cha\u00eene d'abort morte](https://trello.com/c/1Wo7zGP5/3887-p0-express-checkout-commandes-%C3%A0-fonds-captur%C3%A9s-supprim%C3%A9es-par-la-purge-des-carts-cha%C3%AEne-dabort-morte) **\ud83d\udc8e In Review**\n        - *:bug: fix: protect express checkout captured-funds carts from the purge* [\\#11920](https://github.com/Wishibam/Ecommerce-sylius/pull/11920)\n    - [Helsinki \u2014 Funnel checkout GA4 vide : \u00e9v\u00e9nements e-commerce manquants/incomplets](https://trello.com/c/j0yQGSFm/3921-helsinki-funnel-checkout-ga4-vide-%C3%A9v%C3%A9nements-e-commerce-manquants-incomplets) **\ud83c\udf44 Ready for testing**\n        - *:bug: fix: \u00e9mettre le funnel checkout GA4 complet* [\\#11980](https://github.com/Wishibam/Ecommerce-sylius/pull/11980)\n        - *:bug: fix: \u00e9mettre add\\_payment\\_info quand l'\u00e9tape de paiement est saut\u00e9e* [\\#12014](https://github.com/Wishibam/Ecommerce-sylius/pull/12014)\n    - [FEAT-0006 \u2014 Regroupement des emails d'annulation d'articles](https://trello.com/c/bBiV4jTE/3415-feat-0006-regroupement-des-emails-dannulation-darticles) **\ud83c\udf89 A MEP**\n        - *:bug: fix: FEAT-0006 cancellation email grouping QA feedback* [\\#11984](https://github.com/Wishibam/Ecommerce-sylius/pull/11984)\n        - *:bug: fix: register order\\_entirely\\_cancelled email template for all projects* [\\#12091](https://github.com/Wishibam/Ecommerce-sylius/pull/12091)\n        - *:bug: fix: send grouped withdrawal confirmations on entirely cancelled orders* [\\#12104](https://github.com/Wishibam/Ecommerce-sylius/pull/12104)\n    - [Min-height pages React](https://trello.com/c/Rti8eFXb/3919-min-height-pages-react) **\ud83c\udf89 A MEP**\n        - *:bug: fix: add min-height on React pages to prevent footer flash* [\\#11987](https://github.com/Wishibam/Ecommerce-sylius/pull/11987)\n    - [SEO - TVO - changement de slug](https://trello.com/c/Gbb2tles/3908-seo-tvo-changement-de-slug) **\ud83c\udf89 A MEP**\n        - *:bug: fix: clean up TVO brand page slugs with 301 redirects* [\\#11988](https://github.com/Wishibam/Ecommerce-sylius/pull/11988)\n    - [\u26a0\ufe0f action preprod/prod \u26a0\ufe0f \ud83d\uded2 Refonte Checkout #1 \u2014 La page Panier change de garde-robe](https://trello.com/c/qxdtlZxk/3851-%E2%9A%A0%EF%B8%8F-action-preprod-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%9B%92-refonte-checkout-1-la-page-panier-change-de-garde-robe) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): cart page QA feedback round* [\\#11990](https://github.com/Wishibam/Ecommerce-sylius/pull/11990)\n    - [\u26a0\ufe0f MEP \u26a0\ufe0f\u2b50 Google Customer Reviews sur TVO \u2014 brancher la machine \u00e0 \u00e9toiles](https://trello.com/c/7JA9u85M/3899-%E2%9A%A0%EF%B8%8F-mep-%E2%9A%A0%EF%B8%8F%E2%AD%90-google-customer-reviews-sur-tvo-brancher-la-machine-%C3%A0-%C3%A9toiles) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: TVO Google Customer Reviews \u2014 GTIN produits sur thank you* [\\#11991](https://github.com/Wishibam/Ecommerce-sylius/pull/11991)\n    - [Fix : TypeError trim() null sur les share descriptions de channel (admin)](https://trello.com/c/o47Ek1Fo/3924-fix-typeerror-trim-null-sur-les-share-descriptions-de-channel-admin) **\ud83e\udd16 Testing tech**\n        - *:bug: fix: guard against null share descriptions in channel setter* [\\#11992](https://github.com/Wishibam/Ecommerce-sylius/pull/11992)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f \ud83d\udce6\ud83c\udf0d Mondial Relay sans fronti\u00e8res \u2014 points relais UE (v1 TVO)](https://trello.com/c/4X0QYlQ5/3918-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%93%A6%F0%9F%8C%8D-mondial-relay-sans-fronti%C3%A8res-points-relais-ue-v1-tvo) **\ud83d\udc8e In Review**\n        - *:sparkles: feat(mondial-relay): relay search follows the buyer's country* [\\#11994](https://github.com/Wishibam/Ecommerce-sylius/pull/11994)\n    - [\ud83d\udccd Refonte Checkout \u2014 La suggestion d'adresse qui fait mouche](https://trello.com/c/vF0T1FZU/3860-%F0%9F%93%8D-refonte-checkout-la-suggestion-dadresse-qui-fait-mouche) **\ud83d\ude80 To Do Vincent**\n        - *:bug: fix(tvo): address suggestion QA feedback round* [\\#11995](https://github.com/Wishibam/Ecommerce-sylius/pull/11995)\n        - *:bug: fix(tvo): keep the manual phone flag choice made on an empty field* [\\#12058](https://github.com/Wishibam/Ecommerce-sylius/pull/12058)\n    - [\ud83c\udf5e Refonte Checkout \u2014 Des toasts tout chauds pour les messages syst\u00e8me](https://trello.com/c/N70pstGO/3861-%F0%9F%8D%9E-refonte-checkout-des-toasts-tout-chauds-pour-les-messages-syst%C3%A8me) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): checkout toasts QA feedback round* [\\#11996](https://github.com/Wishibam/Ecommerce-sylius/pull/11996)\n    - [\ud83d\udd00 Refonte TVO : le variant s\u00e9lectionn\u00e9 saute en 1re position au lieu de rester \u00e0 sa place](https://trello.com/c/vQH5uxHz/3904-%F0%9F%94%80-refonte-tvo-le-variant-s%C3%A9lectionn%C3%A9-saute-en-1re-position-au-lieu-de-rester-%C3%A0-sa-place) **\ud83c\udf89 A MEP**\n        - *:bug: fix: keep option values in place on overflowing variant axis* [\\#11998](https://github.com/Wishibam/Ecommerce-sylius/pull/11998)\n    - [TVO- mail order\\_open\\_return\\_withdrawn -remplacement de tag](https://trello.com/c/NK5CnCM2/3883-tvo-mail-orderopenreturnwithdrawn-remplacement-de-tag) **\ud83c\udf89 A MEP**\n        - *\ud83d\udc1b fix: orange \"return in progress\" badge on TVO withdrawal email* [\\#12000](https://github.com/Wishibam/Ecommerce-sylius/pull/12000)\n    - [SEO - ALL - Meta Title](https://trello.com/c/QDbDIPTu/3909-seo-all-meta-title) **\ud83e\udd13 Testing**\n        - *:sparkles: feat: add dedicated Meta Title for CMS pages* [\\#12001](https://github.com/Wishibam/Ecommerce-sylius/pull/12001)\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\ude9a Refonte Checkout #3 \u2014 Le Mode de livraison prend la route](https://trello.com/c/NDSNOimu/3854-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%9A%9A-refonte-checkout-3-le-mode-de-livraison-prend-la-route) **\ud83d\ude80 To Do Vincent**\n        - *:sparkles: feat(tvo): React checkout select shipping step (P3)* [\\#12011](https://github.com/Wishibam/Ecommerce-sylius/pull/12011)\n    - [Helsinki - Correction bug d'affichage en finnois en version mobile](https://trello.com/c/f9V6mA6z/3686-helsinki-correction-bug-daffichage-en-finnois-en-version-mobile) **\ud83c\udf89 A MEP**\n        - *:bug: fix: reduce Helsinki posts carousel title on mobile* [\\#12017](https://github.com/Wishibam/Ecommerce-sylius/pull/12017)\n    - [\ud83c\udfbd \\[IS\\] Footer : \u00ab Notre accompagnement \u00bb devient \u00ab Nos services \u00bb et raccroche son lien](https://trello.com/c/H2X0XtqH/3932-%F0%9F%8E%BD-is-footer-notre-accompagnement-devient-nos-services-et-raccroche-son-lien) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: rename the Intersport footer column to \u00ab Nos services \u00bb and unlink its title* [\\#12026](https://github.com/Wishibam/Ecommerce-sylius/pull/12026)\n        - *:rewind: revert: Intersport footer \u00ab Nos services \u00bb (wrong target branch)* [\\#12037](https://github.com/Wishibam/Ecommerce-sylius/pull/12037)\n    - [Batavia - Probl\u00e8me sur l'affichage des variations](https://trello.com/c/MY6aNjLj/3931-batavia-probl%C3%A8me-sur-laffichage-des-variations) **\ud83c\udf89 A MEP**\n        - *:bug: fix: deep-link Batavia PLP cards to the displayed color variant* [\\#12027](https://github.com/Wishibam/Ecommerce-sylius/pull/12027)\n    - [Batavia \u2014 Mails \u00ab produit indisponible \u00bb non re\u00e7us par les clients](https://trello.com/c/YLHFxnVs/3933-batavia-mails-produit-indisponible-non-re%C3%A7us-par-les-clients) **\ud83c\udf89 A MEP**\n        - *:bug: fix: validate admin email templates and log real send outcomes* [\\#12035](https://github.com/Wishibam/Ecommerce-sylius/pull/12035)\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\udcb3 Refonte Checkout #4 \u2014 Le Mode de paiement passe \u00e0 la caisse](https://trello.com/c/vDcvKX88/3855-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%92%B3-refonte-checkout-4-le-mode-de-paiement-passe-%C3%A0-la-caisse) **\ud83d\ude80 To Do Vincent**\n        - *:sparkles: feat(tvo): rebuild the checkout payment step and success page in React* [\\#12051](https://github.com/Wishibam/Ecommerce-sylius/pull/12051)\n    - [Intersport - Bug d'affichage images box produit](https://trello.com/c/mOO6EBx1/3936-intersport-bug-daffichage-images-box-produit) **\ud83c\udf89 A MEP**\n        - *:bug: \\[via\\] fix: styles mobiles des pages mot de passe oubli\u00e9/reset* [\\#12055](https://github.com/Wishibam/Ecommerce-sylius/pull/12055)\n    - [\ud83e\ude97 VIA \u2014 Le filtre Cat\u00e9gorie s'ouvre tout seul dans les descentes : on le veut ferm\u00e9 au chargement](https://trello.com/c/GMHVWZe2/3938-%F0%9F%AA%97-via-le-filtre-cat%C3%A9gorie-souvre-tout-seul-dans-les-descentes-on-le-veut-ferm%C3%A9-au-chargement) **\ud83c\udf89 A MEP**\n        - *:bug: \\[via\\] fix: le filtre Cat\u00e9gorie reste ferm\u00e9 au chargement des descentes* [\\#12059](https://github.com/Wishibam/Ecommerce-sylius/pull/12059)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f Feed : Ajouter le flux facebook TVO](https://trello.com/c/iXjTokqz/3937-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-feed-ajouter-le-flux-facebook-tvo) **\ud83e\udd16 Testing tech**\n        - *:sparkles: feat: porter le flux facebook\\_catalog vers le nouveau composant* [\\#12060](https://github.com/Wishibam/Ecommerce-sylius/pull/12060)\n    - [\\[Migration\\]\\[B.1\\] PHP 8.2 \u2192 8.3](https://trello.com/c/Slm1Q5n7/3940-migrationb1-php-82-%E2%86%92-83) **\ud83d\ude80 To Do Vincent**\n        - *:wrench: chore: run the test suite on PHP 8.2 and 8.3 \\[B.1\\]* [\\#12063](https://github.com/Wishibam/Ecommerce-sylius/pull/12063)\n        - *:bug: fix(deploy): restart PHP-FPM via systemd glob instead of hardcoded 8.2* [\\#12066](https://github.com/Wishibam/Ecommerce-sylius/pull/12066)\n        - *:wrench: chore: run the dual PHP matrix on the tests job only \\[B.1\\]* [\\#12068](https://github.com/Wishibam/Ecommerce-sylius/pull/12068)\n    - [\\[Migration\\]\\[B.2\\] Sylius 1.12 \u2192 1.13 (DBAL 3)](https://trello.com/c/huA0VNU9/3941-migrationb2-sylius-112-%E2%86%92-113-dbal-3) **\ud83d\ude80 To Do Vincent**\n        - *:wrench: chore(doctrine): drop the last getSchemaManager() call for DBAL 3/4 \\[B.2 P.1\\]* [\\#12071](https://github.com/Wishibam/Ecommerce-sylius/pull/12071)\n        - *:white\\_check\\_mark: test: characterize every state machine graph wiring \\[B.2 P.2\\]* [\\#12074](https://github.com/Wishibam/Ecommerce-sylius/pull/12074)\n        - *:recycle: refactor: state machine abstraction infra + pilot call site \\[B.2 P.3.1\\]* [\\#12089](https://github.com/Wishibam/Ecommerce-sylius/pull/12089)\n        - *:recycle: refactor: migrate the mechanical state machine call sites \\[B.2 P.3.2\\]* [\\#12094](https://github.com/Wishibam/Ecommerce-sylius/pull/12094)\n        - *:wrench: chore: bump symfony/flex 1 to 2 \\[B.2 P.4\\]* [\\#12100](https://github.com/Wishibam/Ecommerce-sylius/pull/12100)\n    - [Fix : \ufeff\ufefftransmettre le consentement newsletter \u00e0 Coniq \u00e0 l'inscription](https://trello.com/c/mShGQBUK/3943-fix-transmettre-le-consentement-newsletter-%C3%A0-coniq-%C3%A0-linscription) **\ud83e\udd13 Testing**\n        - *:sparkles: feat: transmettre le consentement newsletter \u00e0 Coniq \u00e0 l'inscription* [\\#12076](https://github.com/Wishibam/Ecommerce-sylius/pull/12076)\n        - *:bug: fix: consentement newsletter Coniq par canal \u00e0 l'inscription* [\\#12105](https://github.com/Wishibam/Ecommerce-sylius/pull/12105)\n \n- **Misc**\n    - *:sparkles: feat: PushDispatcher + adaptateur FCM (push app TVO)* [\\#11917](https://github.com/Wishibam/Ecommerce-sylius/pull/11917)\n    - *style(withdrawal): make the withdrawal button theme-colored and not f\u2026* [\\#11951](https://github.com/Wishibam/Ecommerce-sylius/pull/11951)\n    - *:zap: perf: Batavia PLP \u2014 ES result cache, key batching, menu cache* [\\#11963](https://github.com/Wishibam/Ecommerce-sylius/pull/11963)\n    - *:wrench: chore: outillage pour worktrees parall\u00e8les (front isol\u00e9 par projet)* [\\#11986](https://github.com/Wishibam/Ecommerce-sylius/pull/11986)\n    - *:sparkles: feat: push app TVO \u2014 envoi asynchrone + badge (3.A.5 + 3.A.6)* [\\#12022](https://github.com/Wishibam/Ecommerce-sylius/pull/12022)\n    - *:sparkles: feat: badge unreadPushCount de bout en bout (app TVO)* [\\#12025](https://github.com/Wishibam/Ecommerce-sylius/pull/12025)\n    - *:sparkles: feat: compteur badge dans data des push (app TVO)* [\\#12028](https://github.com/Wishibam/Ecommerce-sylius/pull/12028)\n    - *:sparkles: feat: push \u00ab commande confirm\u00e9e \u00bb (app TVO)* [\\#12031](https://github.com/Wishibam/Ecommerce-sylius/pull/12031)\n    - *:sparkles: feat: push \u00ab commande exp\u00e9di\u00e9e \u00bb (app TVO)* [\\#12040](https://github.com/Wishibam/Ecommerce-sylius/pull/12040)\n    - *feat(push): notification de remboursement de commande (TVO 3.B.3)* [\\#12041](https://github.com/Wishibam/Ecommerce-sylius/pull/12041)\n    - *fix(push): durcir l'envoi FCM \u2014 timeouts born\u00e9s + retry effectif (TVO 3.A.7)* [\\#12042](https://github.com/Wishibam/Ecommerce-sylius/pull/12042)\n    - *test(featured-content): d\u00e9-flakifier testProgramDisableDelay (tol\u00e9rance sur le d\u00e9lai)* [\\#12044](https://github.com/Wishibam/Ecommerce-sylius/pull/12044)\n    - *feat(push): notification de retour en stock (TVO 3.B.4)* [\\#12045](https://github.com/Wishibam/Ecommerce-sylius/pull/12045)\n    - *feat(push): notification de baisse de prix wishlist (TVO 3.B.5)* [\\#12049](https://github.com/Wishibam/Ecommerce-sylius/pull/12049)\n    - *:bug: fix(megamenu): \u00e9largir le lien \u00e0 2048 caract\u00e8res* [\\#12050](https://github.com/Wishibam/Ecommerce-sylius/pull/12050)\n    - *feat(push): relance push des paniers abandonn\u00e9s (TVO 3.B.6)* [\\#12053](https://github.com/Wishibam/Ecommerce-sylius/pull/12053)\n    - *feat(deeplink): AASA de la nouvelle app TVO \u2014 Universal Links iOS (TVO 4.1)* [\\#12064](https://github.com/Wishibam/Ecommerce-sylius/pull/12064)\n    - *feat(deeplink): assetlinks.json de la nouvelle app TVO \u2014 App Links Android (TVO 4.2)* [\\#12065](https://github.com/Wishibam/Ecommerce-sylius/pull/12065)\n    - *:bug: fix: complete payments stuck by Stripe webhook/checkout race* [\\#12075](https://github.com/Wishibam/Ecommerce-sylius/pull/12075)\n    - *:bug: fix: dedup order\\_confirmation per order to stop double send* [\\#12101](https://github.com/Wishibam/Ecommerce-sylius/pull/12101)\n    - *:bug: fix: pin the fixtures channel default tax zone* [\\#12106](https://github.com/Wishibam/Ecommerce-sylius/pull/12106)\n \n- **D\u00e9j\u00e0 en production**\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\udc1b Fix r\u00e9indexation ES bloqu\u00e9e \u2014 \u00ab immense term \u00bb sur attribut trop long (Intersport)](https://trello.com/c/iD6idW0v/3915-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%90%9B-fix-r%C3%A9indexation-es-bloqu%C3%A9e-immense-term-sur-attribut-trop-long-intersport) **MEP Ao\u00fbt**\n        - *:bug: fix: r\u00e9indexation ES bloqu\u00e9e par un attribut trop long (immense term)* [\\#11972](https://github.com/Wishibam/Ecommerce-sylius/pull/11972)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f \u203c\ufe0f Nouveau Feeds - Faire tourner tous les nouveaux feeds sur toutes les preprods/prods](https://trello.com/c/Kr8UhDAv/3910-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-%EF%B8%8F-nouveau-feeds-faire-tourner-tous-les-nouveaux-feeds-sur-toutes-les-preprods-prods) **\ud83e\udee1 To Do JC**\n        - *:sparkles: feat: drive-to-store feeds parity with legacy Setono* [\\#11979](https://github.com/Wishibam/Ecommerce-sylius/pull/11979)\n    - [TVO - Les recommandations produits ne remontent aucun produit sur la fiche produit](https://trello.com/c/lw3SYgNG/3926-tvo-les-recommandations-produits-ne-remontent-aucun-produit-sur-la-fiche-produit) **MEP Ao\u00fbt**\n        - *:bug: fix(search): match the indexed color value in recommendations* [\\#12004](https://github.com/Wishibam/Ecommerce-sylius/pull/12004)\n    - [A ESTIMER : Google Shopping Feed : ajouter le Outlet Price en cas de promotion](https://trello.com/c/RnEgL53B/3867-a-estimer-google-shopping-feed-ajouter-le-outlet-price-en-cas-de-promotion) **\ud83e\udd13 Testing**\n        - *:sparkles: feat(helsinki): expose the outlet price in the Google Shopping feed* [\\#12020](https://github.com/Wishibam/Ecommerce-sylius/pull/12020)\n    - [\u2615\ufe0f \\[Batavia\\] Frais de retour : \u20ac3,25 \u2192 \u20ac3,95 (et on passe le texte en traduction)](https://trello.com/c/P4vec3cz/3934-%E2%98%95%EF%B8%8F-batavia-frais-de-retour-%E2%82%AC325-%E2%86%92-%E2%82%AC395-et-on-passe-le-texte-en-traduction) **MEP Ao\u00fbt**\n        - *:bug: fix: Batavia return cost 3,95 and move the line to a translation* [\\#12034](https://github.com/Wishibam/Ecommerce-sylius/pull/12034)\n    - *:bug: fix: render flag emojis as SVG icons, not OS emoji glyphs* [\\#11981](https://github.com/Wishibam/Ecommerce-sylius/pull/11981)\n    - *:bug: fix: apply the flag icon filter to the remaining menu renderings* [\\#11982](https://github.com/Wishibam/Ecommerce-sylius/pull/11982)\n    - *:wrench: chore: bump php\\_codesniffer en 3.13.6 (CVE-2026-67434, CI rouge)* [\\#12008](https://github.com/Wishibam/Ecommerce-sylius/pull/12008)", "creation_timestamp": "2026-08-25T13:45:02.667049Z"}, {"uuid": "cd52882b-6d39-4b4a-8357-eb20d4f5d862", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67430", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrssmrex5o2o", "content": "CVE-2026-67430 - MCP Ruby SDK: Unbounded session retention in StreamableHTTPTransport allows memory exhaustion via initialize flood\nCVE ID : CVE-2026-67430\n \n Published : July 29, 2026, 8:17 p.m. | 26\u00a0minutes ago\n \n Description : MCP Ruby SDK is the official Ruby SDK for Model...", "creation_timestamp": "2026-07-29T20:53:24.809615Z"}, {"uuid": "6dc00b17-3154-431f-85e8-4bc507db6fa0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67432", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrsstprxqw2i", "content": "CVE-2026-67432 - MCP Ruby SDK: Unbounded JSON-RPC request body causes uncontrolled memory allocation in StreamableHTTPTransport\nCVE ID : CVE-2026-67432\n \n Published : July 29, 2026, 8:17 p.m. | 26\u00a0minutes ago\n \n Description : MCP Ruby SDK is the official Ruby SDK for Model Con...", "creation_timestamp": "2026-07-29T20:57:17.805537Z"}, {"uuid": "c60987b8-8c52-479d-848c-f47e04a61477", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67432", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrsszcbcnl22", "content": "\ud83d\udfe0 CVE-2026-67432 - High (7.5)\n\nMCP Ruby SDK is the official Ruby SDK for Model Context Protocol servers and clients. Prior to 0....\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-67432/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-29T21:00:25.446900Z"}, {"uuid": "68aa17b4-a49e-4a17-9cc1-71d022a61c0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67435", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrstx5hkw522", "content": "CVE-2026-67435 - linuxfabrik-lib: fetch() forwards credential headers across a cross-origin redirect\nCVE ID : CVE-2026-67435\n \n Published : July 29, 2026, 8:17 p.m. | 26\u00a0minutes ago\n \n Description : linuxfabrik-lib provides Python modules for database access, caching, shell ex...", "creation_timestamp": "2026-07-29T21:17:06.620102Z"}, {"uuid": "706fbabc-bd15-4add-9819-b116f1bc6170", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67431", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrsu6t2mfx2q", "content": "CVE-2026-67431 - MCP Ruby SDK: Ruby SSE Session Poisoning\nCVE ID : CVE-2026-67431\n \n Published : July 29, 2026, 8:17 p.m. | 26\u00a0minutes ago\n \n Description : MCP Ruby SDK is the official Ruby SDK for Model Context Protocol servers and clients. Prior to 0.23.0, MCP::Server::Trans...", "creation_timestamp": "2026-07-29T21:21:23.968372Z"}, {"uuid": "6aa958df-0233-4912-8039-67241f96ea29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67437", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrswdykg4k2w", "content": "\ud83d\udfe0 CVE-2026-67437 - High (7.5)\n\nOliveTin gives access to predefined shell commands from a web interface. From 3000.0.0 until 3000...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-67437/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-29T22:00:05.117140Z"}, {"uuid": "c8a7ed99-92f4-4d1a-9860-5fd87d74c6d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67434", "type": "seen", "source": "https://gist.github.com/FR-Flo/32dbf747a172f6fcbd9d33f7601b02a5", "content": "## \ud83d\udd17 Companion release\n\nThis release ships alongside the **Marketplace-client (frontend)** release PR:\n\n- https://github.com/Wishibam/Marketplace-client/pull/4256\n\n- **Trello**\n    - [Attributs required par cat\u00e9gorie](https://trello.com/c/2loCszpt/1854-attributs-required-par-cat%C3%A9gorie) **\ud83e\udd75 Retour de test**\n        - *Feat: Makes attributes required or not per categories* [\\#7474](https://github.com/Wishibam/Marketplace-api/pull/7474)\n    - [\ud83d\udfe2 Int\u00e9gration des fanions promotionnels \u2014 Ajout image au tag de taxon (MP) (\u00e9volution n\u00b011)](https://trello.com/c/fNNkiR1c/2405-%F0%9F%9F%A2-int%C3%A9gration-des-fanions-promotionnels-ajout-image-au-tag-de-taxon-mp-%C3%A9volution-n11) **\ud83e\udd75 Retour de test**\n        - *:sparkles: feat: fanions de taxon \u2014 images desktop/mobile (MP-api)* [\\#7617](https://github.com/Wishibam/Marketplace-api/pull/7617)\n    - [MP - Cr\u00e9ation / modification m\u00e9thode de livraison - impossible de save](https://trello.com/c/Ud1DRxgj/2407-mp-cr%C3%A9ation-modification-m%C3%A9thode-de-livraison-impossible-de-save) **In review WMS**\n        - *:bug: MP Fix Dpd class, file and discriminator name* [\\#7757](https://github.com/Wishibam/Marketplace-api/pull/7757)\n    - [Ticket de caisse - pb de cache](https://trello.com/c/EwgktbXZ/2493-ticket-de-caisse-pb-de-cache) **\ud83e\udd75 Retour de test**\n        - *:bug: fix: reset receipt cache between export Messenger messages* [\\#7791](https://github.com/Wishibam/Marketplace-api/pull/7791)\n    - [\ud83d\ude84 Commande exp\u00e9di\u00e9e : l'interface part trop vite et garde l'ancien statut](https://trello.com/c/6QmFnpyb/2418-%F0%9F%9A%84-commande-exp%C3%A9di%C3%A9e-linterface-part-trop-vite-et-garde-lancien-statut) **In review WMS**\n        - *:sparkles: OMS order, add \"inProcessing\" flag* [\\#7797](https://github.com/Wishibam/Marketplace-api/pull/7797)\n    - [MP - Sur le marchand (listing & d\u00e9tails), mettre un lien qui redirige directement vers le marchand en front](https://trello.com/c/Z136lbnm/1296-mp-sur-le-marchand-listing-d%C3%A9tails-mettre-un-lien-qui-redirige-directement-vers-le-marchand-en-front) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *:sparkles: Add retailer eshop link* [\\#7822](https://github.com/Wishibam/Marketplace-api/pull/7822)\n    - [Tag - Ajout du champ \"Visibilit\u00e9\" c\u00f4t\u00e9 MP](https://trello.com/c/zPFP31T9/2398-tag-ajout-du-champ-visibilit%C3%A9-c%C3%B4t%C3%A9-mp) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *:sparkles: Add tag visibility field to retailer corner and category* [\\#7831](https://github.com/Wishibam/Marketplace-api/pull/7831)\n    - [Nouvelle vue Enseigne -Partie 1-](https://trello.com/c/AVsRvxLu/2494-nouvelle-vue-enseigne-partie-1) **\ud83d\udc8e\ud83d\udc8e\ud83d\udc8edoing**\n        - *:sparkles: OMS New enseigne view (front only) no interaction* [\\#7846](https://github.com/Wishibam/Marketplace-api/pull/7846)\n \n- **Misc**\n    - *feat(shipping-method): expose the default return method flag on the API* [\\#7793](https://github.com/Wishibam/Marketplace-api/pull/7793)\n    - *:sparkles: feat: resync a single retailer in the live merchandising indices* [\\#7808](https://github.com/Wishibam/Marketplace-api/pull/7808)\n    - *:bug: WMS Log Message Container identifier* [\\#7810](https://github.com/Wishibam/Marketplace-api/pull/7810)\n    - *:bug: fix: resync-retailer scroll rejected by ES8 (size param)* [\\#7820](https://github.com/Wishibam/Marketplace-api/pull/7820)\n    - *feat(mcp): add MCP server walking skeleton with list\\_organizations* [\\#7823](https://github.com/Wishibam/Marketplace-api/pull/7823)\n    - *refactor(mcp): extract logic from ImportAction, RetailerNormalizer and RankProduct* [\\#7824](https://github.com/Wishibam/Marketplace-api/pull/7824)\n    - *:sparkles: feat: compute product scoring on the fly (service + ES)* [\\#7825](https://github.com/Wishibam/Marketplace-api/pull/7825)\n    - *:sparkles: feat: raise the ES pagination window beyond 10k documents* [\\#7826](https://github.com/Wishibam/Marketplace-api/pull/7826)\n    - *feat(merchandising): supporter les tris du listing produit sur POST /merchandising* [\\#7827](https://github.com/Wishibam/Marketplace-api/pull/7827)\n    - *feat(merchandising): actions de masse asynchrones avec lock par organisation* [\\#7828](https://github.com/Wishibam/Marketplace-api/pull/7828)\n    - *Merge feat/mcp-walking-skeleton (simulate #7823 merge)* [\\#7832](https://github.com/Wishibam/Marketplace-api/pull/7832)\n    - *feat(product-list): pipeline batch pour les actions de masse des listes produits* [\\#7833](https://github.com/Wishibam/Marketplace-api/pull/7833)\n    - *feat(mcp): Add OAuth discovery* [\\#7834](https://github.com/Wishibam/Marketplace-api/pull/7834)\n    - *:arrow\\_up: deps: bump mcp/sdk to 0.7.1 (CVE-2026-53965)* [\\#7838](https://github.com/Wishibam/Marketplace-api/pull/7838)\n    - *Disabled MCP by default* [\\#7840](https://github.com/Wishibam/Marketplace-api/pull/7840)\n    - *:bug: fix: guard against null option name/value in CSV export* [\\#7841](https://github.com/Wishibam/Marketplace-api/pull/7841)\n    - *:bug: fix: stream line item CSV export to fix memory exhaustion* [\\#7842](https://github.com/Wishibam/Marketplace-api/pull/7842)\n    - *:arrow\\_up: deps: patch sodium\\_compat Ed25519 key validation vulnerability* [\\#7843](https://github.com/Wishibam/Marketplace-api/pull/7843)\n    - *fix: attribut required category* [\\#7851](https://github.com/Wishibam/Marketplace-api/pull/7851)\n    - *fix: batch action view* [\\#7852](https://github.com/Wishibam/Marketplace-api/pull/7852)\n    - *:bug: fix: batch the retailers list health queries (N+1)* [\\#7854](https://github.com/Wishibam/Marketplace-api/pull/7854)\n    - *:bug: fix: stop hydrating import report errors on retailers list* [\\#7855](https://github.com/Wishibam/Marketplace-api/pull/7855)\n    - *fix(import): stop importing translations in locales missing from the organization* [\\#7856](https://github.com/Wishibam/Marketplace-api/pull/7856)\n    - *feat(merchandising): filtres stock, diffusion limit\u00e9e et prix* [\\#7857](https://github.com/Wishibam/Marketplace-api/pull/7857)\n \n- **D\u00e9j\u00e0 en production**\n    - *:arrow\\_up: deps: bump php\\_codesniffer to 4.0.4 (CVE-2026-67434)* [\\#7817](https://github.com/Wishibam/Marketplace-api/pull/7817)\n    - *feat: allow max product variation at 380* [\\#7829](https://github.com/Wishibam/Marketplace-api/pull/7829)\n    - *:bug: fix: stop gating unmapped counters on product validity* [\\#7835](https://github.com/Wishibam/Marketplace-api/pull/7835)\n    - *:bug: fix: repair missing-mapping counters behind the retailer list icon* [\\#7837](https://github.com/Wishibam/Marketplace-api/pull/7837)\n\n## POST MEP\n\n### [PR #7826](https://github.com/Wishibam/Marketplace-api/pull/7826) \u2014 :sparkles: feat: raise the ES pagination window beyond 10k documents\n\n```\n  curl -X PUT \"http://localhost:9200/prod_product_*/_settings\" -H 'Content-Type: application/json' -d '{\"index\":{\"max_result_window\":200000}}'\n  curl -X PUT \"http://localhost:9200/prod_variation_*/_settings\" -H 'Content-Type: application/json' -d '{\"index\":{\"max_result_window\":500000}}'\n\n  V\u00e9rifier :\n  curl \"http://localhost:9200/prod_product_*/_settings/index.max_result_window?flat_settings\"\n  curl \"http://localhost:9200/prod_variation_*/_settings/index.max_result_window?flat_settings\"\n```\n\n### [PR #7828](https://github.com/Wishibam/Marketplace-api/pull/7828) \u2014 feat(merchandising): actions de masse asynchrones avec lock par organisation\n\n - ansible en prod \u00e7a https://github.com/Wishibam/Infrastructure/pull/467\n", "creation_timestamp": "2026-08-26T12:00:08.056982Z"}, {"uuid": "657a4974-04b4-4d2d-a8a1-98ba96522036", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67434", "type": "seen", "source": "https://gist.github.com/FR-Flo/b87f083e6d466263aa676cff6fab300a", "content": "## \ud83d\udd17 Companion release\n\nThis release ships alongside the **Marketplace-client (frontend)** release PR:\n\n- https://github.com/Wishibam/Marketplace-client/pull/4256\n\n- **Trello**\n    - [Attributs required par cat\u00e9gorie](https://trello.com/c/2loCszpt/1854-attributs-required-par-cat%C3%A9gorie) **\u2600\ufe0fIn review**\n        - *Feat: Makes attributes required or not per categories* [\\#7474](https://github.com/Wishibam/Marketplace-api/pull/7474)\n    - [\ud83d\udfe2 Int\u00e9gration des fanions promotionnels \u2014 Ajout image au tag de taxon (MP) (\u00e9volution n\u00b011)](https://trello.com/c/fNNkiR1c/2405-%F0%9F%9F%A2-int%C3%A9gration-des-fanions-promotionnels-ajout-image-au-tag-de-taxon-mp-%C3%A9volution-n11) **\ud83e\udd75 Retour de test**\n        - *:sparkles: feat: fanions de taxon \u2014 images desktop/mobile (MP-api)* [\\#7617](https://github.com/Wishibam/Marketplace-api/pull/7617)\n    - [Retours dashboard - Ajouter un tableau top 10 des marques les plus demand\u00e9s en alerte stock (V2)](https://trello.com/c/JgADJ95G/2474-retours-dashboard-ajouter-un-tableau-top-10-des-marques-les-plus-demand%C3%A9s-en-alerte-stock-v2) **\u2600\ufe0fIn review**\n        - *feat(dashboard): add top 10 retailer stock alerts endpoint* [\\#7751](https://github.com/Wishibam/Marketplace-api/pull/7751)\n    - [MP - Cr\u00e9ation / modification m\u00e9thode de livraison - impossible de save](https://trello.com/c/Ud1DRxgj/2407-mp-cr%C3%A9ation-modification-m%C3%A9thode-de-livraison-impossible-de-save) **\u2600\ufe0fIn review**\n        - *:bug: MP Fix Dpd class, file and discriminator name* [\\#7757](https://github.com/Wishibam/Marketplace-api/pull/7757)\n    - [Ticket de caisse - pb de cache](https://trello.com/c/EwgktbXZ/2493-ticket-de-caisse-pb-de-cache) **\ud83e\udd75 Retour de test**\n        - *:bug: fix: reset receipt cache between export Messenger messages* [\\#7791](https://github.com/Wishibam/Marketplace-api/pull/7791)\n    - [\ud83d\ude84 Commande exp\u00e9di\u00e9e : l'interface part trop vite et garde l'ancien statut](https://trello.com/c/6QmFnpyb/2418-%F0%9F%9A%84-commande-exp%C3%A9di%C3%A9e-linterface-part-trop-vite-et-garde-lancien-statut) **\u2600\ufe0fIn review**\n        - *:sparkles: OMS order, add \"inProcessing\" flag* [\\#7797](https://github.com/Wishibam/Marketplace-api/pull/7797)\n        - *:bug: OMS processingAt message keep showing on reserved shipment after split* [\\#7848](https://github.com/Wishibam/Marketplace-api/pull/7848)\n    - [MP - Sur le marchand (listing & d\u00e9tails), mettre un lien qui redirige directement vers le marchand en front](https://trello.com/c/Z136lbnm/1296-mp-sur-le-marchand-listing-d%C3%A9tails-mettre-un-lien-qui-redirige-directement-vers-le-marchand-en-front) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *:sparkles: Add retailer eshop link* [\\#7822](https://github.com/Wishibam/Marketplace-api/pull/7822)\n    - [Tag - Ajout du champ \"Visibilit\u00e9\" c\u00f4t\u00e9 MP](https://trello.com/c/zPFP31T9/2398-tag-ajout-du-champ-visibilit%C3%A9-c%C3%B4t%C3%A9-mp) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *:sparkles: Add tag visibility field to retailer corner and category* [\\#7831](https://github.com/Wishibam/Marketplace-api/pull/7831)\n    - [Nouvelle vue Enseigne](https://trello.com/c/AVsRvxLu/2494-nouvelle-vue-enseigne) **\ud83d\udc8e\ud83d\udc8e\ud83d\udc8edoing**\n        - *:sparkles: OMS New enseigne view (front only) no interaction* [\\#7846](https://github.com/Wishibam/Marketplace-api/pull/7846)\n \n- **Misc**\n    - *feat(shipping-method): expose the default return method flag on the API* [\\#7793](https://github.com/Wishibam/Marketplace-api/pull/7793)\n    - *:sparkles: feat: resync a single retailer in the live merchandising indices* [\\#7808](https://github.com/Wishibam/Marketplace-api/pull/7808)\n    - *:bug: WMS Log Message Container identifier* [\\#7810](https://github.com/Wishibam/Marketplace-api/pull/7810)\n    - *:bug: fix: resync-retailer scroll rejected by ES8 (size param)* [\\#7820](https://github.com/Wishibam/Marketplace-api/pull/7820)\n    - *feat(mcp): add MCP server walking skeleton with list\\_organizations* [\\#7823](https://github.com/Wishibam/Marketplace-api/pull/7823)\n    - *refactor(mcp): extract logic from ImportAction, RetailerNormalizer and RankProduct* [\\#7824](https://github.com/Wishibam/Marketplace-api/pull/7824)\n    - *:sparkles: feat: compute product scoring on the fly (service + ES)* [\\#7825](https://github.com/Wishibam/Marketplace-api/pull/7825)\n    - *:sparkles: feat: raise the ES pagination window beyond 10k documents* [\\#7826](https://github.com/Wishibam/Marketplace-api/pull/7826)\n    - *feat(merchandising): supporter les tris du listing produit sur POST /merchandising* [\\#7827](https://github.com/Wishibam/Marketplace-api/pull/7827)\n    - *feat(merchandising): actions de masse asynchrones avec lock par organisation* [\\#7828](https://github.com/Wishibam/Marketplace-api/pull/7828)\n    - *Merge feat/mcp-walking-skeleton (simulate #7823 merge)* [\\#7832](https://github.com/Wishibam/Marketplace-api/pull/7832)\n    - *feat(product-list): pipeline batch pour les actions de masse des listes produits* [\\#7833](https://github.com/Wishibam/Marketplace-api/pull/7833)\n    - *feat(mcp): Add OAuth discovery* [\\#7834](https://github.com/Wishibam/Marketplace-api/pull/7834)\n    - *:arrow\\_up: deps: bump mcp/sdk to 0.7.1 (CVE-2026-53965)* [\\#7838](https://github.com/Wishibam/Marketplace-api/pull/7838)\n    - *Disabled MCP by default* [\\#7840](https://github.com/Wishibam/Marketplace-api/pull/7840)\n    - *:bug: fix: guard against null option name/value in CSV export* [\\#7841](https://github.com/Wishibam/Marketplace-api/pull/7841)\n    - *:bug: fix: stream line item CSV export to fix memory exhaustion* [\\#7842](https://github.com/Wishibam/Marketplace-api/pull/7842)\n    - *:arrow\\_up: deps: patch sodium\\_compat Ed25519 key validation vulnerability* [\\#7843](https://github.com/Wishibam/Marketplace-api/pull/7843)\n    - *fix: attribut required category* [\\#7851](https://github.com/Wishibam/Marketplace-api/pull/7851)\n    - *fix: batch action view* [\\#7852](https://github.com/Wishibam/Marketplace-api/pull/7852)\n    - *:bug: fix: batch the retailers list health queries (N+1)* [\\#7854](https://github.com/Wishibam/Marketplace-api/pull/7854)\n    - *:bug: fix: stop hydrating import report errors on retailers list* [\\#7855](https://github.com/Wishibam/Marketplace-api/pull/7855)\n    - *fix(import): stop importing translations in locales missing from the organization* [\\#7856](https://github.com/Wishibam/Marketplace-api/pull/7856)\n    - *feat(merchandising): filtres stock, diffusion limit\u00e9e et prix* [\\#7857](https://github.com/Wishibam/Marketplace-api/pull/7857)\n    - *:bug: fix: index option values in the organization locale, not the current one* [\\#7858](https://github.com/Wishibam/Marketplace-api/pull/7858)\n    - *feat(merchandising): filtres Vente et Scoring, fix du filtre options sur valeurs mapp\u00e9es* [\\#7859](https://github.com/Wishibam/Marketplace-api/pull/7859)\n    - *:sparkles: feat: Index push-error flag on ES product documents* [\\#7861](https://github.com/Wishibam/Marketplace-api/pull/7861)\n    - *:sparkles: feat: add dry-run and limit options to request-missing-invoices* [\\#7866](https://github.com/Wishibam/Marketplace-api/pull/7866)\n \n- **D\u00e9j\u00e0 en production**\n    - *:arrow\\_up: deps: bump php\\_codesniffer to 4.0.4 (CVE-2026-67434)* [\\#7817](https://github.com/Wishibam/Marketplace-api/pull/7817)\n    - *feat: allow max product variation at 380* [\\#7829](https://github.com/Wishibam/Marketplace-api/pull/7829)\n    - *:bug: fix: stop gating unmapped counters on product validity* [\\#7835](https://github.com/Wishibam/Marketplace-api/pull/7835)\n    - *:bug: fix: repair missing-mapping counters behind the retailer list icon* [\\#7837](https://github.com/Wishibam/Marketplace-api/pull/7837)\n\n## POST MEP\n\n### [PR #7826](https://github.com/Wishibam/Marketplace-api/pull/7826) \u2014 :sparkles: feat: raise the ES pagination window beyond 10k documents\n\n```\n  curl -X PUT \"http://localhost:9200/prod_product_*/_settings\" -H 'Content-Type: application/json' -d '{\"index\":{\"max_result_window\":200000}}'\n  curl -X PUT \"http://localhost:9200/prod_variation_*/_settings\" -H 'Content-Type: application/json' -d '{\"index\":{\"max_result_window\":500000}}'\n\n  V\u00e9rifier :\n  curl \"http://localhost:9200/prod_product_*/_settings/index.max_result_window?flat_settings\"\n  curl \"http://localhost:9200/prod_variation_*/_settings/index.max_result_window?flat_settings\"\n```\n\n### [PR #7828](https://github.com/Wishibam/Marketplace-api/pull/7828) \u2014 feat(merchandising): actions de masse asynchrones avec lock par organisation\n\n - ansible en prod \u00e7a https://github.com/Wishibam/Infrastructure/pull/467\n\n### [PR #7859](https://github.com/Wishibam/Marketplace-api/pull/7859) \u2014 feat(merchandising): filtres Vente et Scoring, fix du filtre options sur valeurs mapp\u00e9es\n\n - Ajouter les mappings manquants `console wishibam:merchandising:update-mappings`\n - R\u00e9indexer quand possible `console wishibam:merchandising:build-index`\n", "creation_timestamp": "2026-08-31T14:32:18.457259Z"}, {"uuid": "7fcd41f5-80d7-47ee-a14c-5e0d605fdf4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67434", "type": "seen", "source": "https://gist.github.com/FR-Flo/2c99af768b253ca6c76aa64a596d5d86", "content": "## \ud83d\udd17 Companion release\n\nThis release ships alongside the **Marketplace-client (frontend)** release PR:\n\n- https://github.com/Wishibam/Marketplace-client/pull/4256\n\n- **Trello**\n    - [Attributs required par cat\u00e9gorie](https://trello.com/c/2loCszpt/1854-attributs-required-par-cat%C3%A9gorie) **\u2600\ufe0fIn review**\n        - *Feat: Makes attributes required or not per categories* [\\#7474](https://github.com/Wishibam/Marketplace-api/pull/7474)\n        - *fix(attributes): stop recreating existing attribute\\_category rows on PUT* [\\#7863](https://github.com/Wishibam/Marketplace-api/pull/7863)\n    - [\ud83d\udfe2 Int\u00e9gration des fanions promotionnels \u2014 Ajout image au tag de taxon (MP) (\u00e9volution n\u00b011)](https://trello.com/c/fNNkiR1c/2405-%F0%9F%9F%A2-int%C3%A9gration-des-fanions-promotionnels-ajout-image-au-tag-de-taxon-mp-%C3%A9volution-n11) **\ud83e\udd75 Retour de test**\n        - *:sparkles: feat: fanions de taxon \u2014 images desktop/mobile (MP-api)* [\\#7617](https://github.com/Wishibam/Marketplace-api/pull/7617)\n    - [Retours dashboard - Ajouter un tableau top 10 des marques les plus demand\u00e9s en alerte stock (V2)](https://trello.com/c/JgADJ95G/2474-retours-dashboard-ajouter-un-tableau-top-10-des-marques-les-plus-demand%C3%A9s-en-alerte-stock-v2) **\u2600\ufe0fIn review**\n        - *feat(dashboard): add top 10 retailer stock alerts endpoint* [\\#7751](https://github.com/Wishibam/Marketplace-api/pull/7751)\n        - *fix(dashboard): v2 remove retailer logo* [\\#7860](https://github.com/Wishibam/Marketplace-api/pull/7860)\n    - [MP - Cr\u00e9ation / modification m\u00e9thode de livraison - impossible de save](https://trello.com/c/Ud1DRxgj/2407-mp-cr%C3%A9ation-modification-m%C3%A9thode-de-livraison-impossible-de-save) **\u2600\ufe0fIn review**\n        - *:bug: MP Fix Dpd class, file and discriminator name* [\\#7757](https://github.com/Wishibam/Marketplace-api/pull/7757)\n    - [Ticket de caisse - pb de cache](https://trello.com/c/EwgktbXZ/2493-ticket-de-caisse-pb-de-cache) **\ud83e\udd75 Retour de test**\n        - *:bug: fix: reset receipt cache between export Messenger messages* [\\#7791](https://github.com/Wishibam/Marketplace-api/pull/7791)\n    - [\ud83d\ude84 Commande exp\u00e9di\u00e9e : l'interface part trop vite et garde l'ancien statut](https://trello.com/c/6QmFnpyb/2418-%F0%9F%9A%84-commande-exp%C3%A9di%C3%A9e-linterface-part-trop-vite-et-garde-lancien-statut) **\u2600\ufe0fIn review**\n        - *:sparkles: OMS order, add \"inProcessing\" flag* [\\#7797](https://github.com/Wishibam/Marketplace-api/pull/7797)\n        - *:bug: OMS processingAt message keep showing on reserved shipment after split* [\\#7848](https://github.com/Wishibam/Marketplace-api/pull/7848)\n    - [MP - Sur le marchand (listing & d\u00e9tails), mettre un lien qui redirige directement vers le marchand en front](https://trello.com/c/Z136lbnm/1296-mp-sur-le-marchand-listing-d%C3%A9tails-mettre-un-lien-qui-redirige-directement-vers-le-marchand-en-front) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *:sparkles: Add retailer eshop link* [\\#7822](https://github.com/Wishibam/Marketplace-api/pull/7822)\n    - [Tag - Ajout du champ \"Visibilit\u00e9\" c\u00f4t\u00e9 MP](https://trello.com/c/zPFP31T9/2398-tag-ajout-du-champ-visibilit%C3%A9-c%C3%B4t%C3%A9-mp) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *:sparkles: Add tag visibility field to retailer corner and category* [\\#7831](https://github.com/Wishibam/Marketplace-api/pull/7831)\n    - [Nouvelle vue Enseigne](https://trello.com/c/AVsRvxLu/2494-nouvelle-vue-enseigne) **\ud83d\udc8e\ud83d\udc8e\ud83d\udc8edoing**\n        - *:sparkles: OMS New enseigne view (front only) no interaction* [\\#7846](https://github.com/Wishibam/Marketplace-api/pull/7846)\n    - [Dashboard - Rendre les \u00e9l\u00e9ments clickables](https://trello.com/c/kkX44d75/2506-dashboard-rendre-les-%C3%A9l%C3%A9ments-clickables) **\u2600\ufe0fIn review**\n        - *feat(dashboard): v2 click on row actions* [\\#7868](https://github.com/Wishibam/Marketplace-api/pull/7868)\n \n- **Misc**\n    - *feat(shipping-method): expose the default return method flag on the API* [\\#7793](https://github.com/Wishibam/Marketplace-api/pull/7793)\n    - *:sparkles: feat: resync a single retailer in the live merchandising indices* [\\#7808](https://github.com/Wishibam/Marketplace-api/pull/7808)\n    - *:bug: WMS Log Message Container identifier* [\\#7810](https://github.com/Wishibam/Marketplace-api/pull/7810)\n    - *:bug: fix: resync-retailer scroll rejected by ES8 (size param)* [\\#7820](https://github.com/Wishibam/Marketplace-api/pull/7820)\n    - *feat(mcp): add MCP server walking skeleton with list\\_organizations* [\\#7823](https://github.com/Wishibam/Marketplace-api/pull/7823)\n    - *refactor(mcp): extract logic from ImportAction, RetailerNormalizer and RankProduct* [\\#7824](https://github.com/Wishibam/Marketplace-api/pull/7824)\n    - *:sparkles: feat: compute product scoring on the fly (service + ES)* [\\#7825](https://github.com/Wishibam/Marketplace-api/pull/7825)\n    - *:sparkles: feat: raise the ES pagination window beyond 10k documents* [\\#7826](https://github.com/Wishibam/Marketplace-api/pull/7826)\n    - *feat(merchandising): supporter les tris du listing produit sur POST /merchandising* [\\#7827](https://github.com/Wishibam/Marketplace-api/pull/7827)\n    - *feat(merchandising): actions de masse asynchrones avec lock par organisation* [\\#7828](https://github.com/Wishibam/Marketplace-api/pull/7828)\n    - *Merge feat/mcp-walking-skeleton (simulate #7823 merge)* [\\#7832](https://github.com/Wishibam/Marketplace-api/pull/7832)\n    - *feat(product-list): pipeline batch pour les actions de masse des listes produits* [\\#7833](https://github.com/Wishibam/Marketplace-api/pull/7833)\n    - *feat(mcp): Add OAuth discovery* [\\#7834](https://github.com/Wishibam/Marketplace-api/pull/7834)\n    - *:arrow\\_up: deps: bump mcp/sdk to 0.7.1 (CVE-2026-53965)* [\\#7838](https://github.com/Wishibam/Marketplace-api/pull/7838)\n    - *Disabled MCP by default* [\\#7840](https://github.com/Wishibam/Marketplace-api/pull/7840)\n    - *:bug: fix: guard against null option name/value in CSV export* [\\#7841](https://github.com/Wishibam/Marketplace-api/pull/7841)\n    - *:bug: fix: stream line item CSV export to fix memory exhaustion* [\\#7842](https://github.com/Wishibam/Marketplace-api/pull/7842)\n    - *:arrow\\_up: deps: patch sodium\\_compat Ed25519 key validation vulnerability* [\\#7843](https://github.com/Wishibam/Marketplace-api/pull/7843)\n    - *fix: attribut required category* [\\#7851](https://github.com/Wishibam/Marketplace-api/pull/7851)\n    - *fix: batch action view* [\\#7852](https://github.com/Wishibam/Marketplace-api/pull/7852)\n    - *:bug: fix: batch the retailers list health queries (N+1)* [\\#7854](https://github.com/Wishibam/Marketplace-api/pull/7854)\n    - *:bug: fix: stop hydrating import report errors on retailers list* [\\#7855](https://github.com/Wishibam/Marketplace-api/pull/7855)\n    - *fix(import): stop importing translations in locales missing from the organization* [\\#7856](https://github.com/Wishibam/Marketplace-api/pull/7856)\n    - *feat(merchandising): filtres stock, diffusion limit\u00e9e et prix* [\\#7857](https://github.com/Wishibam/Marketplace-api/pull/7857)\n    - *:bug: fix: index option values in the organization locale, not the current one* [\\#7858](https://github.com/Wishibam/Marketplace-api/pull/7858)\n    - *feat(merchandising): filtres Vente et Scoring, fix du filtre options sur valeurs mapp\u00e9es* [\\#7859](https://github.com/Wishibam/Marketplace-api/pull/7859)\n    - *:sparkles: feat: Index push-error flag on ES product documents* [\\#7861](https://github.com/Wishibam/Marketplace-api/pull/7861)\n    - *fix(attributes): require a non-empty value to satisfy a required attr\u2026* [\\#7864](https://github.com/Wishibam/Marketplace-api/pull/7864)\n    - *:bug: fix: invalidate missing-mapping cache after retailer snapshot* [\\#7871](https://github.com/Wishibam/Marketplace-api/pull/7871)\n \n- **D\u00e9j\u00e0 en production**\n    - *:arrow\\_up: deps: bump php\\_codesniffer to 4.0.4 (CVE-2026-67434)* [\\#7817](https://github.com/Wishibam/Marketplace-api/pull/7817)\n    - *feat: allow max product variation at 380* [\\#7829](https://github.com/Wishibam/Marketplace-api/pull/7829)\n    - *:bug: fix: stop gating unmapped counters on product validity* [\\#7835](https://github.com/Wishibam/Marketplace-api/pull/7835)\n    - *:bug: fix: repair missing-mapping counters behind the retailer list icon* [\\#7837](https://github.com/Wishibam/Marketplace-api/pull/7837)\n    - *fix(dashboard): top retailer when members has multiple retailers* [\\#7865](https://github.com/Wishibam/Marketplace-api/pull/7865)\n    - *:sparkles: feat: add dry-run and limit options to request-missing-invoices* [\\#7866](https://github.com/Wishibam/Marketplace-api/pull/7866)\n\n## POST MEP\n\n### [PR #7826](https://github.com/Wishibam/Marketplace-api/pull/7826) \u2014 :sparkles: feat: raise the ES pagination window beyond 10k documents\n\n```\n  curl -X PUT \"http://localhost:9200/prod_product_*/_settings\" -H 'Content-Type: application/json' -d '{\"index\":{\"max_result_window\":200000}}'\n  curl -X PUT \"http://localhost:9200/prod_variation_*/_settings\" -H 'Content-Type: application/json' -d '{\"index\":{\"max_result_window\":500000}}'\n\n  V\u00e9rifier :\n  curl \"http://localhost:9200/prod_product_*/_settings/index.max_result_window?flat_settings\"\n  curl \"http://localhost:9200/prod_variation_*/_settings/index.max_result_window?flat_settings\"\n```\n\n### [PR #7828](https://github.com/Wishibam/Marketplace-api/pull/7828) \u2014 feat(merchandising): actions de masse asynchrones avec lock par organisation\n\n - ansible en prod \u00e7a https://github.com/Wishibam/Infrastructure/pull/467\n\n### [PR #7859](https://github.com/Wishibam/Marketplace-api/pull/7859) \u2014 feat(merchandising): filtres Vente et Scoring, fix du filtre options sur valeurs mapp\u00e9es\n\n - Ajouter les mappings manquants `console wishibam:merchandising:update-mappings`\n - R\u00e9indexer quand possible `console wishibam:merchandising:build-index`\n", "creation_timestamp": "2026-09-02T08:36:53.508284Z"}, {"uuid": "bcf3372c-c1a4-4af3-a85b-6e5460beaff0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67434", "type": "seen", "source": "https://gist.github.com/jbourdin/38dc45ed0531d35909ab797713fb4ad1", "content": "- **Trello**\n    - [GLOBAL - Email Alerte paiement en erreur](https://trello.com/c/P1DJvjHp/3229-global-email-alerte-paiement-en-erreur) **\ud83c\udf89 A MEP**\n        - *feat(payment): send email notification when payment fails* [\\#10555](https://github.com/Wishibam/Ecommerce-sylius/pull/10555)\n    - [Helsinki : Portail de retour - Sylius - int\u00e9gration front du portail de retour](https://trello.com/c/mhcc7YaC/2401-helsinki-portail-de-retour-sylius-int%C3%A9gration-front-du-portail-de-retour) **\ud83d\ude80Testing BACK / FLUX / CLIENT**\n        - *feat(helsinki): Add return portal to Helsinki order details* [\\#11757](https://github.com/Wishibam/Ecommerce-sylius/pull/11757)\n        - *fix(helsinki): tri-state select-all checkbox on the return request page* [\\#12129](https://github.com/Wishibam/Ecommerce-sylius/pull/12129)\n    - [\u26a0\ufe0fAction prod\u26a0\ufe0f\ud83d\udd14 Refonte TVO : tracking du volet d'alerte \u00ab retour en stock \u00bb](https://trello.com/c/SXyhrSQb/3834-%E2%9A%A0%EF%B8%8Faction-prod%E2%9A%A0%EF%B8%8F%F0%9F%94%94-refonte-tvo-tracking-du-volet-dalerte-retour-en-stock) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: track back-in-stock alert panel usage* [\\#11791](https://github.com/Wishibam/Ecommerce-sylius/pull/11791)\n    - [TVO - Fiche produit - Ajout des blocs \"Mati\u00e8re et entretien\" & \"Caract\u00e9ristiques\"](https://trello.com/c/AbsKmIzk/3633-tvo-fiche-produit-ajout-des-blocs-mati%C3%A8re-et-entretien-caract%C3%A9ristiques) **\ud83c\udf89 A MEP**\n        - *feat(tvo): add Mati\u00e8re et entretien & Caract\u00e9ristiques blocks on PDP* [\\#11812](https://github.com/Wishibam/Ecommerce-sylius/pull/11812)\n    - [\\[Migration\\]\\[A.4.1\\] Internaliser bitbag/wishlist-plugin dans src/Component/Wishlist](https://trello.com/c/U9dQGx1l/3863-migrationa41-internaliser-bitbag-wishlist-plugin-dans-src-component-wishlist) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: internalize bitbag/wishlist-plugin \\[A.4.1\\]* [\\#11856](https://github.com/Wishibam/Ecommerce-sylius/pull/11856)\n    - [\\[Migration\\]\\[A.4.2/A.4.3\\] Internaliser bring & deep-link dans src/Component](https://trello.com/c/RsLN5SNT/3864-migrationa42-a43-internaliser-bring-deep-link-dans-src-component) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: internalize bring & deep-link plugins \\[A.4.2, A.4.3\\]* [\\#11861](https://github.com/Wishibam/Ecommerce-sylius/pull/11861)\n    - [\\[Migration\\]\\[A.5\\] Bumps frontend \u00ab safe \u00bb + suppression des packages morts](https://trello.com/c/vI6k61gt/3873-migrationa5-bumps-frontend-safe-suppression-des-packages-morts) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: bump safe frontend deps + prune dead packages \\[A.5\\]* [\\#11875](https://github.com/Wishibam/Ecommerce-sylius/pull/11875)\n    - [\\[Migration\\]\\[A.6\\] Pr\u00e9paration Doctrine pour DBAL 3 (monkey-patch migrations)](https://trello.com/c/8mdyVMwg/3880-migrationa6-pr%C3%A9paration-doctrine-pour-dbal-3-monkey-patch-migrations) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: replace Doctrine migration monkey-patch for DBAL 3 \\[A.6\\]* [\\#11893](https://github.com/Wishibam/Ecommerce-sylius/pull/11893)\n    - [TVO - Express checkout : adresse tronqu\u00e9e \u2014 nom de rue perdu (Apple Pay line1/line2)](https://trello.com/c/dIrl0I1a/3884-tvo-express-checkout-adresse-tronqu%C3%A9e-nom-de-rue-perdu-apple-pay-line1-line2) **\ud83c\udf89 A MEP**\n        - *:bug: fix: join express checkout wallet address line1/line2 into street* [\\#11914](https://github.com/Wishibam/Ecommerce-sylius/pull/11914)\n    - [\\[P0\\] Express checkout : re-v\u00e9rifier le montant du PaymentIntent au complete](https://trello.com/c/qJdTR9Jc/3885-p0-express-checkout-re-v%C3%A9rifier-le-montant-du-paymentintent-au-complete) **\ud83e\udd13 Testing**\n        - *:bug: fix: verify express checkout PaymentIntent amount at completion* [\\#11916](https://github.com/Wishibam/Ecommerce-sylius/pull/11916)\n    - [\\[P0\\] Webhook Stripe : rembourser r\u00e9ellement les charges des commandes refus\u00e9es/annul\u00e9es](https://trello.com/c/fyJeMD3L/3886-p0-webhook-stripe-rembourser-r%C3%A9ellement-les-charges-des-commandes-refus%C3%A9es-annul%C3%A9es) **\ud83e\udd13 Testing**\n        - *:bug: fix: refund Stripe charges captured for refused or cancelled orders* [\\#11918](https://github.com/Wishibam/Ecommerce-sylius/pull/11918)\n    - [\\[P1\\] Express checkout : pinner explicitement les wallets autoris\u00e9s (quick win)](https://trello.com/c/tEpmPM9l/3890-p1-express-checkout-pinner-explicitement-les-wallets-autoris%C3%A9s-quick-win) **\ud83e\udd16 Testing tech**\n        - *:bug: fix: restrict express checkout wallets to an explicit allowlist* [\\#11919](https://github.com/Wishibam/Ecommerce-sylius/pull/11919)\n    - [\\[P0\\] Express checkout : commandes \u00e0 fonds captur\u00e9s supprim\u00e9es par la purge des carts + cha\u00eene d'abort morte](https://trello.com/c/1Wo7zGP5/3887-p0-express-checkout-commandes-%C3%A0-fonds-captur%C3%A9s-supprim%C3%A9es-par-la-purge-des-carts-cha%C3%AEne-dabort-morte) **\ud83e\udd13 Testing**\n        - *:bug: fix: protect express checkout captured-funds carts from the purge* [\\#11920](https://github.com/Wishibam/Ecommerce-sylius/pull/11920)\n    - [FEAT-0006 \u2014 Regroupement des emails d'annulation d'articles](https://trello.com/c/bBiV4jTE/3415-feat-0006-regroupement-des-emails-dannulation-darticles) **\ud83c\udf89 A MEP**\n        - *:bug: fix: FEAT-0006 cancellation email grouping QA feedback* [\\#11984](https://github.com/Wishibam/Ecommerce-sylius/pull/11984)\n        - *:bug: fix: register order\\_entirely\\_cancelled email template for all projects* [\\#12091](https://github.com/Wishibam/Ecommerce-sylius/pull/12091)\n        - *:bug: fix: send grouped withdrawal confirmations on entirely cancelled orders* [\\#12104](https://github.com/Wishibam/Ecommerce-sylius/pull/12104)\n    - [Min-height pages React](https://trello.com/c/Rti8eFXb/3919-min-height-pages-react) **\ud83c\udf89 A MEP**\n        - *:bug: fix: add min-height on React pages to prevent footer flash* [\\#11987](https://github.com/Wishibam/Ecommerce-sylius/pull/11987)\n    - [SEO - TVO - changement de slug](https://trello.com/c/Gbb2tles/3908-seo-tvo-changement-de-slug) **\ud83c\udf89 A MEP**\n        - *:bug: fix: clean up TVO brand page slugs with 301 redirects* [\\#11988](https://github.com/Wishibam/Ecommerce-sylius/pull/11988)\n    - [\u26a0\ufe0f action preprod/prod \u26a0\ufe0f \ud83d\uded2 Refonte Checkout #1 \u2014 La page Panier change de garde-robe](https://trello.com/c/qxdtlZxk/3851-%E2%9A%A0%EF%B8%8F-action-preprod-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%9B%92-refonte-checkout-1-la-page-panier-change-de-garde-robe) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): cart page QA feedback round* [\\#11990](https://github.com/Wishibam/Ecommerce-sylius/pull/11990)\n    - [\u26a0\ufe0f MEP \u26a0\ufe0f\u2b50 Google Customer Reviews sur TVO \u2014 brancher la machine \u00e0 \u00e9toiles](https://trello.com/c/7JA9u85M/3899-%E2%9A%A0%EF%B8%8F-mep-%E2%9A%A0%EF%B8%8F%E2%AD%90-google-customer-reviews-sur-tvo-brancher-la-machine-%C3%A0-%C3%A9toiles) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: TVO Google Customer Reviews \u2014 GTIN produits sur thank you* [\\#11991](https://github.com/Wishibam/Ecommerce-sylius/pull/11991)\n    - [Fix : TypeError trim() null sur les share descriptions de channel (admin)](https://trello.com/c/o47Ek1Fo/3924-fix-typeerror-trim-null-sur-les-share-descriptions-de-channel-admin) **\ud83e\udd16 Testing tech**\n        - *:bug: fix: guard against null share descriptions in channel setter* [\\#11992](https://github.com/Wishibam/Ecommerce-sylius/pull/11992)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f \ud83d\udce6\ud83c\udf0d Mondial Relay sans fronti\u00e8res \u2014 points relais UE (v1 TVO)](https://trello.com/c/4X0QYlQ5/3918-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%93%A6%F0%9F%8C%8D-mondial-relay-sans-fronti%C3%A8res-points-relais-ue-v1-tvo) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat(mondial-relay): relay search follows the buyer's country* [\\#11994](https://github.com/Wishibam/Ecommerce-sylius/pull/11994)\n    - [\ud83d\udccd Refonte Checkout \u2014 La suggestion d'adresse qui fait mouche](https://trello.com/c/vF0T1FZU/3860-%F0%9F%93%8D-refonte-checkout-la-suggestion-dadresse-qui-fait-mouche) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): address suggestion QA feedback round* [\\#11995](https://github.com/Wishibam/Ecommerce-sylius/pull/11995)\n        - *:bug: fix(tvo): keep the manual phone flag choice made on an empty field* [\\#12058](https://github.com/Wishibam/Ecommerce-sylius/pull/12058)\n    - [\ud83c\udf5e Refonte Checkout \u2014 Des toasts tout chauds pour les messages syst\u00e8me](https://trello.com/c/N70pstGO/3861-%F0%9F%8D%9E-refonte-checkout-des-toasts-tout-chauds-pour-les-messages-syst%C3%A8me) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): checkout toasts QA feedback round* [\\#11996](https://github.com/Wishibam/Ecommerce-sylius/pull/11996)\n    - [\ud83d\udd00 Refonte TVO : le variant s\u00e9lectionn\u00e9 saute en 1re position au lieu de rester \u00e0 sa place](https://trello.com/c/vQH5uxHz/3904-%F0%9F%94%80-refonte-tvo-le-variant-s%C3%A9lectionn%C3%A9-saute-en-1re-position-au-lieu-de-rester-%C3%A0-sa-place) **\ud83c\udf89 A MEP**\n        - *:bug: fix: keep option values in place on overflowing variant axis* [\\#11998](https://github.com/Wishibam/Ecommerce-sylius/pull/11998)\n    - [Helsinki preprod (peut \u00eatre ailleurs) - Commande C&C cr\u00e9e plusieurs shipments.](https://trello.com/c/Dlk8WpIg/3895-helsinki-preprod-peut-%C3%AAtre-ailleurs-commande-cc-cr%C3%A9e-plusieurs-shipments) **\ud83c\udf89 A MEP**\n        - *:bug: fix: remove phantom shipment block from account order page* [\\#11999](https://github.com/Wishibam/Ecommerce-sylius/pull/11999)\n    - [TVO- mail order\\_open\\_return\\_withdrawn -remplacement de tag](https://trello.com/c/NK5CnCM2/3883-tvo-mail-orderopenreturnwithdrawn-remplacement-de-tag) **\ud83c\udf89 A MEP**\n        - *\ud83d\udc1b fix: orange \"return in progress\" badge on TVO withdrawal email* [\\#12000](https://github.com/Wishibam/Ecommerce-sylius/pull/12000)\n    - [SEO - ALL - Meta Title](https://trello.com/c/QDbDIPTu/3909-seo-all-meta-title) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: add dedicated Meta Title for CMS pages* [\\#12001](https://github.com/Wishibam/Ecommerce-sylius/pull/12001)\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\ude9a Refonte Checkout #3 \u2014 Le Mode de livraison prend la route](https://trello.com/c/NDSNOimu/3854-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%9A%9A-refonte-checkout-3-le-mode-de-livraison-prend-la-route) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat(tvo): React checkout select shipping step (P3)* [\\#12011](https://github.com/Wishibam/Ecommerce-sylius/pull/12011)\n        - *:bug: fix(tvo): checkout QA feedback of August 18-19* [\\#12119](https://github.com/Wishibam/Ecommerce-sylius/pull/12119)\n    - [\u2709\ufe0f \\[TVO V2\\] Login & inscription : un seul email pour les gouverner tous](https://trello.com/c/Eml7o2An/3912-%E2%9C%89%EF%B8%8F-tvo-v2-login-inscription-un-seul-email-pour-les-gouverner-tous) **\ud83c\udf44 Ready for testing**\n        - *:sparkles: feat: TVO email-first React login & registration flow* [\\#12015](https://github.com/Wishibam/Ecommerce-sylius/pull/12015)\n    - [Helsinki - Correction bug d'affichage en finnois en version mobile](https://trello.com/c/f9V6mA6z/3686-helsinki-correction-bug-daffichage-en-finnois-en-version-mobile) **\ud83c\udf89 A MEP**\n        - *:bug: fix: reduce Helsinki posts carousel title on mobile* [\\#12017](https://github.com/Wishibam/Ecommerce-sylius/pull/12017)\n    - [\ud83d\udcb8 TVO \u2014 Filtre par niveau de remise : que la d\u00e9marque soit avec vous \u2702\ufe0f](https://trello.com/c/FvSWlx14/3877-%F0%9F%92%B8-tvo-filtre-par-niveau-de-remise-que-la-d%C3%A9marque-soit-avec-vous-%E2%9C%82%EF%B8%8F) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: TVO minimum discount percentage filter on product lists* [\\#12018](https://github.com/Wishibam/Ecommerce-sylius/pull/12018)\n    - [\ud83c\udfbd \\[IS\\] Footer : \u00ab Notre accompagnement \u00bb devient \u00ab Nos services \u00bb et raccroche son lien](https://trello.com/c/H2X0XtqH/3932-%F0%9F%8E%BD-is-footer-notre-accompagnement-devient-nos-services-et-raccroche-son-lien) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: rename the Intersport footer column to \u00ab Nos services \u00bb and unlink its title* [\\#12026](https://github.com/Wishibam/Ecommerce-sylius/pull/12026)\n        - *:rewind: revert: Intersport footer \u00ab Nos services \u00bb (wrong target branch)* [\\#12037](https://github.com/Wishibam/Ecommerce-sylius/pull/12037)\n    - [Batavia - Probl\u00e8me sur l'affichage des variations](https://trello.com/c/MY6aNjLj/3931-batavia-probl%C3%A8me-sur-laffichage-des-variations) **\ud83c\udf89 A MEP**\n        - *:bug: fix: deep-link Batavia PLP cards to the displayed color variant* [\\#12027](https://github.com/Wishibam/Ecommerce-sylius/pull/12027)\n    - [Batavia \u2014 Mails \u00ab produit indisponible \u00bb non re\u00e7us par les clients](https://trello.com/c/YLHFxnVs/3933-batavia-mails-produit-indisponible-non-re%C3%A7us-par-les-clients) **\ud83c\udf89 A MEP**\n        - *:bug: fix: validate admin email templates and log real send outcomes* [\\#12035](https://github.com/Wishibam/Ecommerce-sylius/pull/12035)\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\udcb3 Refonte Checkout #4 \u2014 Le Mode de paiement passe \u00e0 la caisse](https://trello.com/c/vDcvKX88/3855-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%92%B3-refonte-checkout-4-le-mode-de-paiement-passe-%C3%A0-la-caisse) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat(tvo): rebuild the checkout payment step and success page in React* [\\#12051](https://github.com/Wishibam/Ecommerce-sylius/pull/12051)\n    - [Intersport - Bug d'affichage images box produit](https://trello.com/c/mOO6EBx1/3936-intersport-bug-daffichage-images-box-produit) **\ud83c\udf89 A MEP**\n        - *:bug: \\[via\\] fix: styles mobiles des pages mot de passe oubli\u00e9/reset* [\\#12055](https://github.com/Wishibam/Ecommerce-sylius/pull/12055)\n    - [\ud83e\ude97 VIA \u2014 Le filtre Cat\u00e9gorie s'ouvre tout seul dans les descentes : on le veut ferm\u00e9 au chargement](https://trello.com/c/GMHVWZe2/3938-%F0%9F%AA%97-via-le-filtre-cat%C3%A9gorie-souvre-tout-seul-dans-les-descentes-on-le-veut-ferm%C3%A9-au-chargement) **\ud83c\udf89 A MEP**\n        - *:bug: \\[via\\] fix: le filtre Cat\u00e9gorie reste ferm\u00e9 au chargement des descentes* [\\#12059](https://github.com/Wishibam/Ecommerce-sylius/pull/12059)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f Feed : Ajouter le flux facebook TVO](https://trello.com/c/iXjTokqz/3937-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-feed-ajouter-le-flux-facebook-tvo) **\ud83e\udd16 Testing tech**\n        - *:sparkles: feat: porter le flux facebook\\_catalog vers le nouveau composant* [\\#12060](https://github.com/Wishibam/Ecommerce-sylius/pull/12060)\n    - [\\[Migration\\]\\[B.1\\] PHP 8.2 \u2192 8.3](https://trello.com/c/Slm1Q5n7/3940-migrationb1-php-82-%E2%86%92-83) **\ud83d\ude80 To Do Vincent**\n        - *:wrench: chore: run the test suite on PHP 8.2 and 8.3 \\[B.1\\]* [\\#12063](https://github.com/Wishibam/Ecommerce-sylius/pull/12063)\n        - *:bug: fix(deploy): restart PHP-FPM via systemd glob instead of hardcoded 8.2* [\\#12066](https://github.com/Wishibam/Ecommerce-sylius/pull/12066)\n        - *:wrench: chore: run the dual PHP matrix on the tests job only \\[B.1\\]* [\\#12068](https://github.com/Wishibam/Ecommerce-sylius/pull/12068)\n    - [\\[Migration\\]\\[B.2\\] Sylius 1.12 \u2192 1.13 (DBAL 3)](https://trello.com/c/huA0VNU9/3941-migrationb2-sylius-112-%E2%86%92-113-dbal-3) **\ud83d\ude80 To Do Vincent**\n        - *:wrench: chore(doctrine): drop the last getSchemaManager() call for DBAL 3/4 \\[B.2 P.1\\]* [\\#12071](https://github.com/Wishibam/Ecommerce-sylius/pull/12071)\n        - *:white\\_check\\_mark: test: characterize every state machine graph wiring \\[B.2 P.2\\]* [\\#12074](https://github.com/Wishibam/Ecommerce-sylius/pull/12074)\n        - *:recycle: refactor: state machine abstraction infra + pilot call site \\[B.2 P.3.1\\]* [\\#12089](https://github.com/Wishibam/Ecommerce-sylius/pull/12089)\n        - *:recycle: refactor: migrate the mechanical state machine call sites \\[B.2 P.3.2\\]* [\\#12094](https://github.com/Wishibam/Ecommerce-sylius/pull/12094)\n        - *:recycle: refactor: migrate the structural state machine call sites \\[B.2 P.3.3\\]* [\\#12098](https://github.com/Wishibam/Ecommerce-sylius/pull/12098)\n        - *:wrench: chore: bump symfony/flex 1 to 2 \\[B.2 P.4\\]* [\\#12100](https://github.com/Wishibam/Ecommerce-sylius/pull/12100)\n    - [MA - Pas de message d'erreur lorsque l'on n'arrive pas \u00e0 se connecter \u00e0 son compte client](https://trello.com/c/fQ9vwTD0/3684-ma-pas-de-message-derreur-lorsque-lon-narrive-pas-%C3%A0-se-connecter-%C3%A0-son-compte-client) **\ud83c\udf89 A MEP**\n        - *:bug: fix: display an error message on failed login on Marques Avenue* [\\#12072](https://github.com/Wishibam/Ecommerce-sylius/pull/12072)\n    - [Fix : \ufeff\ufefftransmettre le consentement newsletter \u00e0 Coniq \u00e0 l'inscription](https://trello.com/c/mShGQBUK/3943-fix-transmettre-le-consentement-newsletter-%C3%A0-coniq-%C3%A0-linscription) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: transmettre le consentement newsletter \u00e0 Coniq \u00e0 l'inscription* [\\#12076](https://github.com/Wishibam/Ecommerce-sylius/pull/12076)\n        - *:bug: fix: consentement newsletter Coniq par canal \u00e0 l'inscription* [\\#12105](https://github.com/Wishibam/Ecommerce-sylius/pull/12105)\n    - [TVO - Bloc caract\u00e9ristiques : Attribut genre et ean](https://trello.com/c/MwYdlurp/3945-tvo-bloc-caract%C3%A9ristiques-attribut-genre-et-ean) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): localize gender and drop EAN in the characteristics block* [\\#12112](https://github.com/Wishibam/Ecommerce-sylius/pull/12112)\n    - [Page de confirmation de commande - N\u00b0 de commande sylius plut\u00f4t que MP](https://trello.com/c/bUrAEDyS/3944-page-de-confirmation-de-commande-n-de-commande-sylius-plut%C3%B4t-que-mp) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): align the thank-you order number with the email* [\\#12114](https://github.com/Wishibam/Ecommerce-sylius/pull/12114)\n    - [TVO \u2014 Tracking des mails de relance panier (taux d'ouverture / clic / CA)](https://trello.com/c/cyTNgF1i/3947-tvo-tracking-des-mails-de-relance-panier-taux-douverture-clic-ca) **\ud83e\udd13 Testing**\n        - *:sparkles: feat(tvo, all): track abandoned cart reminder emails* [\\#12118](https://github.com/Wishibam/Ecommerce-sylius/pull/12118)\n    - [Bug : Mail d'annulation quand validation de retour](https://trello.com/c/Zh0QOdKa/3950-bug-mail-dannulation-quand-validation-de-retour) **\ud83e\udd13 Testing**\n        - *:bug: fix: skip cancellation email when cancel follows a validated return* [\\#12122](https://github.com/Wishibam/Ecommerce-sylius/pull/12122)\n        - *:bug: fix: group return confirmation emails to fix stale VALID\u00c9 tags* [\\#12131](https://github.com/Wishibam/Ecommerce-sylius/pull/12131)\n \n- **Misc**\n    - *:sparkles: feat: PushDispatcher + adaptateur FCM (push app TVO)* [\\#11917](https://github.com/Wishibam/Ecommerce-sylius/pull/11917)\n    - *style(withdrawal): make the withdrawal button theme-colored and not f\u2026* [\\#11951](https://github.com/Wishibam/Ecommerce-sylius/pull/11951)\n    - *:zap: perf: Batavia PLP \u2014 ES result cache, key batching, menu cache* [\\#11963](https://github.com/Wishibam/Ecommerce-sylius/pull/11963)\n    - *:wrench: chore: outillage pour worktrees parall\u00e8les (front isol\u00e9 par projet)* [\\#11986](https://github.com/Wishibam/Ecommerce-sylius/pull/11986)\n    - *:sparkles: feat: push app TVO \u2014 envoi asynchrone + badge (3.A.5 + 3.A.6)* [\\#12022](https://github.com/Wishibam/Ecommerce-sylius/pull/12022)\n    - *:sparkles: feat: badge unreadPushCount de bout en bout (app TVO)* [\\#12025](https://github.com/Wishibam/Ecommerce-sylius/pull/12025)\n    - *:sparkles: feat: compteur badge dans data des push (app TVO)* [\\#12028](https://github.com/Wishibam/Ecommerce-sylius/pull/12028)\n    - *:sparkles: feat: push \u00ab commande confirm\u00e9e \u00bb (app TVO)* [\\#12031](https://github.com/Wishibam/Ecommerce-sylius/pull/12031)\n    - *:sparkles: feat: push \u00ab commande exp\u00e9di\u00e9e \u00bb (app TVO)* [\\#12040](https://github.com/Wishibam/Ecommerce-sylius/pull/12040)\n    - *feat(push): notification de remboursement de commande (TVO 3.B.3)* [\\#12041](https://github.com/Wishibam/Ecommerce-sylius/pull/12041)\n    - *fix(push): durcir l'envoi FCM \u2014 timeouts born\u00e9s + retry effectif (TVO 3.A.7)* [\\#12042](https://github.com/Wishibam/Ecommerce-sylius/pull/12042)\n    - *test(featured-content): d\u00e9-flakifier testProgramDisableDelay (tol\u00e9rance sur le d\u00e9lai)* [\\#12044](https://github.com/Wishibam/Ecommerce-sylius/pull/12044)\n    - *feat(push): notification de retour en stock (TVO 3.B.4)* [\\#12045](https://github.com/Wishibam/Ecommerce-sylius/pull/12045)\n    - *feat(push): notification de baisse de prix wishlist (TVO 3.B.5)* [\\#12049](https://github.com/Wishibam/Ecommerce-sylius/pull/12049)\n    - *:bug: fix(megamenu): \u00e9largir le lien \u00e0 2048 caract\u00e8res* [\\#12050](https://github.com/Wishibam/Ecommerce-sylius/pull/12050)\n    - *feat(push): relance push des paniers abandonn\u00e9s (TVO 3.B.6)* [\\#12053](https://github.com/Wishibam/Ecommerce-sylius/pull/12053)\n    - *feat(deeplink): AASA de la nouvelle app TVO \u2014 Universal Links iOS (TVO 4.1)* [\\#12064](https://github.com/Wishibam/Ecommerce-sylius/pull/12064)\n    - *feat(deeplink): assetlinks.json de la nouvelle app TVO \u2014 App Links Android (TVO 4.2)* [\\#12065](https://github.com/Wishibam/Ecommerce-sylius/pull/12065)\n    - *:bug: fix: complete payments stuck by Stripe webhook/checkout race* [\\#12075](https://github.com/Wishibam/Ecommerce-sylius/pull/12075)\n    - *:bug: fix: dedup order\\_confirmation per order to stop double send* [\\#12101](https://github.com/Wishibam/Ecommerce-sylius/pull/12101)\n    - *:bug: fix: pin the fixtures channel default tax zone* [\\#12106](https://github.com/Wishibam/Ecommerce-sylius/pull/12106)\n    - *:wrench: chore: bump webfactory/ssh-agent to v0.9.1* [\\#12120](https://github.com/Wishibam/Ecommerce-sylius/pull/12120)\n \n- **D\u00e9j\u00e0 en production**\n    - [\\[Migration\\]\\[A.2\\] D\u00e9mant\u00e8lement Setono Analytics + Tag-Bag](https://trello.com/c/uJN0Gkiz/3856-migrationa2-d%C3%A9mant%C3%A8lement-setono-analytics-tag-bag) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore(migration): internalize setono analytics + tag-bag as src/Component \\[A.2\\]* [\\#11846](https://github.com/Wishibam/Ecommerce-sylius/pull/11846)\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\udc1b Fix r\u00e9indexation ES bloqu\u00e9e \u2014 \u00ab immense term \u00bb sur attribut trop long (Intersport)](https://trello.com/c/iD6idW0v/3915-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%90%9B-fix-r%C3%A9indexation-es-bloqu%C3%A9e-immense-term-sur-attribut-trop-long-intersport) **MEP Ao\u00fbt**\n        - *:bug: fix: r\u00e9indexation ES bloqu\u00e9e par un attribut trop long (immense term)* [\\#11972](https://github.com/Wishibam/Ecommerce-sylius/pull/11972)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f \u203c\ufe0f Nouveau Feeds - Faire tourner tous les nouveaux feeds sur toutes les preprods/prods](https://trello.com/c/Kr8UhDAv/3910-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-%EF%B8%8F-nouveau-feeds-faire-tourner-tous-les-nouveaux-feeds-sur-toutes-les-preprods-prods) **\ud83e\udee1 To Do JC**\n        - *:sparkles: feat: drive-to-store feeds parity with legacy Setono* [\\#11979](https://github.com/Wishibam/Ecommerce-sylius/pull/11979)\n    - [Helsinki \u2014 Funnel checkout GA4 vide : \u00e9v\u00e9nements e-commerce manquants/incomplets](https://trello.com/c/j0yQGSFm/3921-helsinki-funnel-checkout-ga4-vide-%C3%A9v%C3%A9nements-e-commerce-manquants-incomplets) **MEP Septembre**\n        - *:bug: fix: \u00e9mettre le funnel checkout GA4 complet* [\\#11980](https://github.com/Wishibam/Ecommerce-sylius/pull/11980)\n        - *:bug: fix: \u00e9mettre add\\_payment\\_info quand l'\u00e9tape de paiement est saut\u00e9e* [\\#12014](https://github.com/Wishibam/Ecommerce-sylius/pull/12014)\n    - [TVO - Les recommandations produits ne remontent aucun produit sur la fiche produit](https://trello.com/c/lw3SYgNG/3926-tvo-les-recommandations-produits-ne-remontent-aucun-produit-sur-la-fiche-produit) **MEP Ao\u00fbt**\n        - *:bug: fix(search): match the indexed color value in recommendations* [\\#12004](https://github.com/Wishibam/Ecommerce-sylius/pull/12004)\n    - [A ESTIMER : Google Shopping Feed : ajouter le Outlet Price en cas de promotion](https://trello.com/c/RnEgL53B/3867-a-estimer-google-shopping-feed-ajouter-le-outlet-price-en-cas-de-promotion) **MEP Ao\u00fbt**\n        - *:sparkles: feat(helsinki): expose the outlet price in the Google Shopping feed* [\\#12020](https://github.com/Wishibam/Ecommerce-sylius/pull/12020)\n    - [\u2615\ufe0f \\[Batavia\\] Frais de retour : \u20ac3,25 \u2192 \u20ac3,95 (et on passe le texte en traduction)](https://trello.com/c/P4vec3cz/3934-%E2%98%95%EF%B8%8F-batavia-frais-de-retour-%E2%82%AC325-%E2%86%92-%E2%82%AC395-et-on-passe-le-texte-en-traduction) **MEP Ao\u00fbt**\n        - *:bug: fix: Batavia return cost 3,95 and move the line to a translation* [\\#12034](https://github.com/Wishibam/Ecommerce-sylius/pull/12034)\n    - *:bug: fix: render flag emojis as SVG icons, not OS emoji glyphs* [\\#11981](https://github.com/Wishibam/Ecommerce-sylius/pull/11981)\n    - *:bug: fix: apply the flag icon filter to the remaining menu renderings* [\\#11982](https://github.com/Wishibam/Ecommerce-sylius/pull/11982)\n    - *:wrench: chore: bump php\\_codesniffer en 3.13.6 (CVE-2026-67434, CI rouge)* [\\#12008](https://github.com/Wishibam/Ecommerce-sylius/pull/12008)\n    - *:bug: fix: skip Comarch in LaRedoute order import when disabled* [\\#12125](https://github.com/Wishibam/Ecommerce-sylius/pull/12125)", "creation_timestamp": "2026-09-02T13:12:02.888116Z"}, {"uuid": "6b501824-8153-4857-857e-ce80366e3f6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67434", "type": "seen", "source": "https://gist.github.com/FR-Flo/1d4452988e55a5a37ddb2803de07e1a8", "content": "## \ud83d\udd17 Companion release\n\nThis release ships alongside the **Marketplace-client (frontend)** release PR:\n\n- https://github.com/Wishibam/Marketplace-client/pull/4256\n\n- **Trello**\n    - [Attributs required par cat\u00e9gorie](https://trello.com/c/2loCszpt/1854-attributs-required-par-cat%C3%A9gorie) **\u2600\ufe0fIn review**\n        - *Feat: Makes attributes required or not per categories* [\\#7474](https://github.com/Wishibam/Marketplace-api/pull/7474)\n        - *fix(attributes): stop recreating existing attribute\\_category rows on PUT* [\\#7863](https://github.com/Wishibam/Marketplace-api/pull/7863)\n    - [\ud83d\udfe2 Int\u00e9gration des fanions promotionnels \u2014 Ajout image au tag de taxon (MP) (\u00e9volution n\u00b011)](https://trello.com/c/fNNkiR1c/2405-%F0%9F%9F%A2-int%C3%A9gration-des-fanions-promotionnels-ajout-image-au-tag-de-taxon-mp-%C3%A9volution-n11) **\ud83e\udd75 Retour de test**\n        - *:sparkles: feat: fanions de taxon \u2014 images desktop/mobile (MP-api)* [\\#7617](https://github.com/Wishibam/Marketplace-api/pull/7617)\n    - [Retours dashboard - Ajouter un tableau top 10 des marques les plus demand\u00e9s en alerte stock (V2)](https://trello.com/c/JgADJ95G/2474-retours-dashboard-ajouter-un-tableau-top-10-des-marques-les-plus-demand%C3%A9s-en-alerte-stock-v2) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *feat(dashboard): add top 10 retailer stock alerts endpoint* [\\#7751](https://github.com/Wishibam/Marketplace-api/pull/7751)\n        - *fix(dashboard): v2 remove retailer logo* [\\#7860](https://github.com/Wishibam/Marketplace-api/pull/7860)\n    - [MP - Cr\u00e9ation / modification m\u00e9thode de livraison - impossible de save](https://trello.com/c/Ud1DRxgj/2407-mp-cr%C3%A9ation-modification-m%C3%A9thode-de-livraison-impossible-de-save) **\u2600\ufe0fIn review**\n        - *:bug: MP Fix Dpd class, file and discriminator name* [\\#7757](https://github.com/Wishibam/Marketplace-api/pull/7757)\n    - [Ticket de caisse - pb de cache](https://trello.com/c/EwgktbXZ/2493-ticket-de-caisse-pb-de-cache) **\u2600\ufe0fIn review**\n        - *:bug: fix: reset receipt cache between export Messenger messages* [\\#7791](https://github.com/Wishibam/Marketplace-api/pull/7791)\n    - [\ud83d\ude84 Commande exp\u00e9di\u00e9e : l'interface part trop vite et garde l'ancien statut](https://trello.com/c/6QmFnpyb/2418-%F0%9F%9A%84-commande-exp%C3%A9di%C3%A9e-linterface-part-trop-vite-et-garde-lancien-statut) **\u2600\ufe0fIn review**\n        - *:sparkles: OMS order, add \"inProcessing\" flag* [\\#7797](https://github.com/Wishibam/Marketplace-api/pull/7797)\n        - *:bug: OMS processingAt message keep showing on reserved shipment after split* [\\#7848](https://github.com/Wishibam/Marketplace-api/pull/7848)\n    - [MP - Sur le marchand (listing & d\u00e9tails), mettre un lien qui redirige directement vers le marchand en front](https://trello.com/c/Z136lbnm/1296-mp-sur-le-marchand-listing-d%C3%A9tails-mettre-un-lien-qui-redirige-directement-vers-le-marchand-en-front) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *:sparkles: Add retailer eshop link* [\\#7822](https://github.com/Wishibam/Marketplace-api/pull/7822)\n    - [Tag - Ajout du champ \"Visibilit\u00e9\" c\u00f4t\u00e9 MP](https://trello.com/c/zPFP31T9/2398-tag-ajout-du-champ-visibilit%C3%A9-c%C3%B4t%C3%A9-mp) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *:sparkles: Add tag visibility field to retailer corner and category* [\\#7831](https://github.com/Wishibam/Marketplace-api/pull/7831)\n    - [Nouvelle vue Enseigne](https://trello.com/c/AVsRvxLu/2494-nouvelle-vue-enseigne) **\ud83d\udc8e\ud83d\udc8e\ud83d\udc8edoing**\n        - *:sparkles: OMS New enseigne view (front only) no interaction* [\\#7846](https://github.com/Wishibam/Marketplace-api/pull/7846)\n    - [VIA - Chasin - nouvelle API stock](https://trello.com/c/ZxWVFDDZ/2472-via-chasin-nouvelle-api-stock) **\ud83c\udf89 Reviewed pas Merg\u00e9**\n        - *feat(feedTransformer): bataviastad chasin stock feed* [\\#7853](https://github.com/Wishibam/Marketplace-api/pull/7853)\n    - [Dashboard - Rendre les \u00e9l\u00e9ments clickables](https://trello.com/c/kkX44d75/2506-dashboard-rendre-les-%C3%A9l%C3%A9ments-clickables) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *feat(dashboard): v2 click on row actions* [\\#7868](https://github.com/Wishibam/Marketplace-api/pull/7868)\n    - [FACTURATION - Retours templates](https://trello.com/c/FC1bOPBb/2507-facturation-retours-templates) **\ud83e\udd73Testing**\n        - *Fix/invoice items pagination* [\\#7872](https://github.com/Wishibam/Marketplace-api/pull/7872)\n \n- **Misc**\n    - *feat(shipping-method): expose the default return method flag on the API* [\\#7793](https://github.com/Wishibam/Marketplace-api/pull/7793)\n    - *:sparkles: feat: resync a single retailer in the live merchandising indices* [\\#7808](https://github.com/Wishibam/Marketplace-api/pull/7808)\n    - *:bug: WMS Log Message Container identifier* [\\#7810](https://github.com/Wishibam/Marketplace-api/pull/7810)\n    - *:bug: fix: resync-retailer scroll rejected by ES8 (size param)* [\\#7820](https://github.com/Wishibam/Marketplace-api/pull/7820)\n    - *feat(mcp): add MCP server walking skeleton with list\\_organizations* [\\#7823](https://github.com/Wishibam/Marketplace-api/pull/7823)\n    - *refactor(mcp): extract logic from ImportAction, RetailerNormalizer and RankProduct* [\\#7824](https://github.com/Wishibam/Marketplace-api/pull/7824)\n    - *:sparkles: feat: compute product scoring on the fly (service + ES)* [\\#7825](https://github.com/Wishibam/Marketplace-api/pull/7825)\n    - *:sparkles: feat: raise the ES pagination window beyond 10k documents* [\\#7826](https://github.com/Wishibam/Marketplace-api/pull/7826)\n    - *feat(merchandising): supporter les tris du listing produit sur POST /merchandising* [\\#7827](https://github.com/Wishibam/Marketplace-api/pull/7827)\n    - *feat(merchandising): actions de masse asynchrones avec lock par organisation* [\\#7828](https://github.com/Wishibam/Marketplace-api/pull/7828)\n    - *Merge feat/mcp-walking-skeleton (simulate #7823 merge)* [\\#7832](https://github.com/Wishibam/Marketplace-api/pull/7832)\n    - *feat(product-list): pipeline batch pour les actions de masse des listes produits* [\\#7833](https://github.com/Wishibam/Marketplace-api/pull/7833)\n    - *feat(mcp): Add OAuth discovery* [\\#7834](https://github.com/Wishibam/Marketplace-api/pull/7834)\n    - *:arrow\\_up: deps: bump mcp/sdk to 0.7.1 (CVE-2026-53965)* [\\#7838](https://github.com/Wishibam/Marketplace-api/pull/7838)\n    - *Disabled MCP by default* [\\#7840](https://github.com/Wishibam/Marketplace-api/pull/7840)\n    - *:bug: fix: guard against null option name/value in CSV export* [\\#7841](https://github.com/Wishibam/Marketplace-api/pull/7841)\n    - *:bug: fix: stream line item CSV export to fix memory exhaustion* [\\#7842](https://github.com/Wishibam/Marketplace-api/pull/7842)\n    - *:arrow\\_up: deps: patch sodium\\_compat Ed25519 key validation vulnerability* [\\#7843](https://github.com/Wishibam/Marketplace-api/pull/7843)\n    - *fix: attribut required category* [\\#7851](https://github.com/Wishibam/Marketplace-api/pull/7851)\n    - *fix: batch action view* [\\#7852](https://github.com/Wishibam/Marketplace-api/pull/7852)\n    - *:bug: fix: batch the retailers list health queries (N+1)* [\\#7854](https://github.com/Wishibam/Marketplace-api/pull/7854)\n    - *:bug: fix: stop hydrating import report errors on retailers list* [\\#7855](https://github.com/Wishibam/Marketplace-api/pull/7855)\n    - *fix(import): stop importing translations in locales missing from the organization* [\\#7856](https://github.com/Wishibam/Marketplace-api/pull/7856)\n    - *feat(merchandising): filtres stock, diffusion limit\u00e9e et prix* [\\#7857](https://github.com/Wishibam/Marketplace-api/pull/7857)\n    - *:bug: fix: index option values in the organization locale, not the current one* [\\#7858](https://github.com/Wishibam/Marketplace-api/pull/7858)\n    - *feat(merchandising): filtres Vente et Scoring, fix du filtre options sur valeurs mapp\u00e9es* [\\#7859](https://github.com/Wishibam/Marketplace-api/pull/7859)\n    - *:sparkles: feat: Index push-error flag on ES product documents* [\\#7861](https://github.com/Wishibam/Marketplace-api/pull/7861)\n    - *fix(attributes): require a non-empty value to satisfy a required attr\u2026* [\\#7864](https://github.com/Wishibam/Marketplace-api/pull/7864)\n    - *:bug: fix: invalidate missing-mapping cache after retailer snapshot* [\\#7871](https://github.com/Wishibam/Marketplace-api/pull/7871)\n \n- **D\u00e9j\u00e0 en production**\n    - *:arrow\\_up: deps: bump php\\_codesniffer to 4.0.4 (CVE-2026-67434)* [\\#7817](https://github.com/Wishibam/Marketplace-api/pull/7817)\n    - *feat: allow max product variation at 380* [\\#7829](https://github.com/Wishibam/Marketplace-api/pull/7829)\n    - *:bug: fix: stop gating unmapped counters on product validity* [\\#7835](https://github.com/Wishibam/Marketplace-api/pull/7835)\n    - *:bug: fix: repair missing-mapping counters behind the retailer list icon* [\\#7837](https://github.com/Wishibam/Marketplace-api/pull/7837)\n    - *fix(dashboard): top retailer when members has multiple retailers* [\\#7865](https://github.com/Wishibam/Marketplace-api/pull/7865)\n    - *:sparkles: feat: add dry-run and limit options to request-missing-invoices* [\\#7866](https://github.com/Wishibam/Marketplace-api/pull/7866)\n\n## POST MEP\n\n### [PR #7826](https://github.com/Wishibam/Marketplace-api/pull/7826) \u2014 :sparkles: feat: raise the ES pagination window beyond 10k documents\n\n```\n  curl -X PUT \"http://localhost:9200/prod_product_*/_settings\" -H 'Content-Type: application/json' -d '{\"index\":{\"max_result_window\":200000}}'\n  curl -X PUT \"http://localhost:9200/prod_variation_*/_settings\" -H 'Content-Type: application/json' -d '{\"index\":{\"max_result_window\":500000}}'\n\n  V\u00e9rifier :\n  curl \"http://localhost:9200/prod_product_*/_settings/index.max_result_window?flat_settings\"\n  curl \"http://localhost:9200/prod_variation_*/_settings/index.max_result_window?flat_settings\"\n```\n\n### [PR #7828](https://github.com/Wishibam/Marketplace-api/pull/7828) \u2014 feat(merchandising): actions de masse asynchrones avec lock par organisation\n\n - ansible en prod \u00e7a https://github.com/Wishibam/Infrastructure/pull/467\n\n### [PR #7853](https://github.com/Wishibam/Marketplace-api/pull/7853) \u2014 feat(feedTransformer): bataviastad chasin stock feed\n\nAjouter un cron avec la commande suivante:\n```\nwishibam:feed-convert:chasin --api-key=xxxxxx --ftp-user=wishibam_batavia_chasin --ftp-pass='xxxxxx'\n```\n\n### [PR #7859](https://github.com/Wishibam/Marketplace-api/pull/7859) \u2014 feat(merchandising): filtres Vente et Scoring, fix du filtre options sur valeurs mapp\u00e9es\n\n - Ajouter les mappings manquants `console wishibam:merchandising:update-mappings`\n - R\u00e9indexer quand possible `console wishibam:merchandising:build-index`\n", "creation_timestamp": "2026-09-02T14:23:37.083648Z"}, {"uuid": "3021ad05-9acf-462a-8daa-b2dc879eda8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67434", "type": "seen", "source": "https://gist.github.com/jbourdin/496c672dbc3f1a9c0237d76fb4a57d64", "content": "- **Trello**\n    - [GLOBAL - Email Alerte paiement en erreur](https://trello.com/c/P1DJvjHp/3229-global-email-alerte-paiement-en-erreur) **\ud83c\udf89 A MEP**\n        - *feat(payment): send email notification when payment fails* [\\#10555](https://github.com/Wishibam/Ecommerce-sylius/pull/10555)\n    - [Helsinki : Portail de retour - Sylius - int\u00e9gration front du portail de retour](https://trello.com/c/mhcc7YaC/2401-helsinki-portail-de-retour-sylius-int%C3%A9gration-front-du-portail-de-retour) **\ud83d\ude80Testing BACK / FLUX / CLIENT**\n        - *feat(helsinki): Add return portal to Helsinki order details* [\\#11757](https://github.com/Wishibam/Ecommerce-sylius/pull/11757)\n        - *fix(helsinki): tri-state select-all checkbox on the return request page* [\\#12129](https://github.com/Wishibam/Ecommerce-sylius/pull/12129)\n    - [\u26a0\ufe0fAction prod\u26a0\ufe0f\ud83d\udd14 Refonte TVO : tracking du volet d'alerte \u00ab retour en stock \u00bb](https://trello.com/c/SXyhrSQb/3834-%E2%9A%A0%EF%B8%8Faction-prod%E2%9A%A0%EF%B8%8F%F0%9F%94%94-refonte-tvo-tracking-du-volet-dalerte-retour-en-stock) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: track back-in-stock alert panel usage* [\\#11791](https://github.com/Wishibam/Ecommerce-sylius/pull/11791)\n    - [TVO - Fiche produit - Ajout des blocs \"Mati\u00e8re et entretien\" & \"Caract\u00e9ristiques\"](https://trello.com/c/AbsKmIzk/3633-tvo-fiche-produit-ajout-des-blocs-mati%C3%A8re-et-entretien-caract%C3%A9ristiques) **\ud83c\udf89 A MEP**\n        - *feat(tvo): add Mati\u00e8re et entretien & Caract\u00e9ristiques blocks on PDP* [\\#11812](https://github.com/Wishibam/Ecommerce-sylius/pull/11812)\n    - [\\[Migration\\]\\[A.4.1\\] Internaliser bitbag/wishlist-plugin dans src/Component/Wishlist](https://trello.com/c/U9dQGx1l/3863-migrationa41-internaliser-bitbag-wishlist-plugin-dans-src-component-wishlist) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: internalize bitbag/wishlist-plugin \\[A.4.1\\]* [\\#11856](https://github.com/Wishibam/Ecommerce-sylius/pull/11856)\n    - [\\[Migration\\]\\[A.4.2/A.4.3\\] Internaliser bring & deep-link dans src/Component](https://trello.com/c/RsLN5SNT/3864-migrationa42-a43-internaliser-bring-deep-link-dans-src-component) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: internalize bring & deep-link plugins \\[A.4.2, A.4.3\\]* [\\#11861](https://github.com/Wishibam/Ecommerce-sylius/pull/11861)\n    - [\\[Migration\\]\\[A.5\\] Bumps frontend \u00ab safe \u00bb + suppression des packages morts](https://trello.com/c/vI6k61gt/3873-migrationa5-bumps-frontend-safe-suppression-des-packages-morts) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: bump safe frontend deps + prune dead packages \\[A.5\\]* [\\#11875](https://github.com/Wishibam/Ecommerce-sylius/pull/11875)\n    - [\\[Migration\\]\\[A.6\\] Pr\u00e9paration Doctrine pour DBAL 3 (monkey-patch migrations)](https://trello.com/c/8mdyVMwg/3880-migrationa6-pr%C3%A9paration-doctrine-pour-dbal-3-monkey-patch-migrations) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: replace Doctrine migration monkey-patch for DBAL 3 \\[A.6\\]* [\\#11893](https://github.com/Wishibam/Ecommerce-sylius/pull/11893)\n    - [TVO - Express checkout : adresse tronqu\u00e9e \u2014 nom de rue perdu (Apple Pay line1/line2)](https://trello.com/c/dIrl0I1a/3884-tvo-express-checkout-adresse-tronqu%C3%A9e-nom-de-rue-perdu-apple-pay-line1-line2) **\ud83c\udf89 A MEP**\n        - *:bug: fix: join express checkout wallet address line1/line2 into street* [\\#11914](https://github.com/Wishibam/Ecommerce-sylius/pull/11914)\n    - [\\[P0\\] Express checkout : re-v\u00e9rifier le montant du PaymentIntent au complete](https://trello.com/c/qJdTR9Jc/3885-p0-express-checkout-re-v%C3%A9rifier-le-montant-du-paymentintent-au-complete) **\ud83e\udd13 Testing**\n        - *:bug: fix: verify express checkout PaymentIntent amount at completion* [\\#11916](https://github.com/Wishibam/Ecommerce-sylius/pull/11916)\n    - [\\[P0\\] Webhook Stripe : rembourser r\u00e9ellement les charges des commandes refus\u00e9es/annul\u00e9es](https://trello.com/c/fyJeMD3L/3886-p0-webhook-stripe-rembourser-r%C3%A9ellement-les-charges-des-commandes-refus%C3%A9es-annul%C3%A9es) **\ud83e\udd13 Testing**\n        - *:bug: fix: refund Stripe charges captured for refused or cancelled orders* [\\#11918](https://github.com/Wishibam/Ecommerce-sylius/pull/11918)\n    - [\\[P1\\] Express checkout : pinner explicitement les wallets autoris\u00e9s (quick win)](https://trello.com/c/tEpmPM9l/3890-p1-express-checkout-pinner-explicitement-les-wallets-autoris%C3%A9s-quick-win) **\ud83e\udd16 Testing tech**\n        - *:bug: fix: restrict express checkout wallets to an explicit allowlist* [\\#11919](https://github.com/Wishibam/Ecommerce-sylius/pull/11919)\n    - [\\[P0\\] Express checkout : commandes \u00e0 fonds captur\u00e9s supprim\u00e9es par la purge des carts + cha\u00eene d'abort morte](https://trello.com/c/1Wo7zGP5/3887-p0-express-checkout-commandes-%C3%A0-fonds-captur%C3%A9s-supprim%C3%A9es-par-la-purge-des-carts-cha%C3%AEne-dabort-morte) **\ud83e\udd13 Testing**\n        - *:bug: fix: protect express checkout captured-funds carts from the purge* [\\#11920](https://github.com/Wishibam/Ecommerce-sylius/pull/11920)\n    - [FEAT-0006 \u2014 Regroupement des emails d'annulation d'articles](https://trello.com/c/bBiV4jTE/3415-feat-0006-regroupement-des-emails-dannulation-darticles) **\ud83c\udf89 A MEP**\n        - *:bug: fix: FEAT-0006 cancellation email grouping QA feedback* [\\#11984](https://github.com/Wishibam/Ecommerce-sylius/pull/11984)\n        - *:bug: fix: register order\\_entirely\\_cancelled email template for all projects* [\\#12091](https://github.com/Wishibam/Ecommerce-sylius/pull/12091)\n        - *:bug: fix: send grouped withdrawal confirmations on entirely cancelled orders* [\\#12104](https://github.com/Wishibam/Ecommerce-sylius/pull/12104)\n    - [Min-height pages React](https://trello.com/c/Rti8eFXb/3919-min-height-pages-react) **\ud83c\udf89 A MEP**\n        - *:bug: fix: add min-height on React pages to prevent footer flash* [\\#11987](https://github.com/Wishibam/Ecommerce-sylius/pull/11987)\n    - [SEO - TVO - changement de slug](https://trello.com/c/Gbb2tles/3908-seo-tvo-changement-de-slug) **\ud83c\udf89 A MEP**\n        - *:bug: fix: clean up TVO brand page slugs with 301 redirects* [\\#11988](https://github.com/Wishibam/Ecommerce-sylius/pull/11988)\n    - [\u26a0\ufe0f action preprod/prod \u26a0\ufe0f \ud83d\uded2 Refonte Checkout #1 \u2014 La page Panier change de garde-robe](https://trello.com/c/qxdtlZxk/3851-%E2%9A%A0%EF%B8%8F-action-preprod-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%9B%92-refonte-checkout-1-la-page-panier-change-de-garde-robe) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): cart page QA feedback round* [\\#11990](https://github.com/Wishibam/Ecommerce-sylius/pull/11990)\n    - [\u26a0\ufe0f MEP \u26a0\ufe0f\u2b50 Google Customer Reviews sur TVO \u2014 brancher la machine \u00e0 \u00e9toiles](https://trello.com/c/7JA9u85M/3899-%E2%9A%A0%EF%B8%8F-mep-%E2%9A%A0%EF%B8%8F%E2%AD%90-google-customer-reviews-sur-tvo-brancher-la-machine-%C3%A0-%C3%A9toiles) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: TVO Google Customer Reviews \u2014 GTIN produits sur thank you* [\\#11991](https://github.com/Wishibam/Ecommerce-sylius/pull/11991)\n    - [Fix : TypeError trim() null sur les share descriptions de channel (admin)](https://trello.com/c/o47Ek1Fo/3924-fix-typeerror-trim-null-sur-les-share-descriptions-de-channel-admin) **\ud83e\udd16 Testing tech**\n        - *:bug: fix: guard against null share descriptions in channel setter* [\\#11992](https://github.com/Wishibam/Ecommerce-sylius/pull/11992)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f \ud83d\udce6\ud83c\udf0d Mondial Relay sans fronti\u00e8res \u2014 points relais UE (v1 TVO)](https://trello.com/c/4X0QYlQ5/3918-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%93%A6%F0%9F%8C%8D-mondial-relay-sans-fronti%C3%A8res-points-relais-ue-v1-tvo) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat(mondial-relay): relay search follows the buyer's country* [\\#11994](https://github.com/Wishibam/Ecommerce-sylius/pull/11994)\n    - [\ud83d\udccd Refonte Checkout \u2014 La suggestion d'adresse qui fait mouche](https://trello.com/c/vF0T1FZU/3860-%F0%9F%93%8D-refonte-checkout-la-suggestion-dadresse-qui-fait-mouche) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): address suggestion QA feedback round* [\\#11995](https://github.com/Wishibam/Ecommerce-sylius/pull/11995)\n        - *:bug: fix(tvo): keep the manual phone flag choice made on an empty field* [\\#12058](https://github.com/Wishibam/Ecommerce-sylius/pull/12058)\n    - [\ud83c\udf5e Refonte Checkout \u2014 Des toasts tout chauds pour les messages syst\u00e8me](https://trello.com/c/N70pstGO/3861-%F0%9F%8D%9E-refonte-checkout-des-toasts-tout-chauds-pour-les-messages-syst%C3%A8me) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): checkout toasts QA feedback round* [\\#11996](https://github.com/Wishibam/Ecommerce-sylius/pull/11996)\n    - [\ud83d\udd00 Refonte TVO : le variant s\u00e9lectionn\u00e9 saute en 1re position au lieu de rester \u00e0 sa place](https://trello.com/c/vQH5uxHz/3904-%F0%9F%94%80-refonte-tvo-le-variant-s%C3%A9lectionn%C3%A9-saute-en-1re-position-au-lieu-de-rester-%C3%A0-sa-place) **\ud83c\udf89 A MEP**\n        - *:bug: fix: keep option values in place on overflowing variant axis* [\\#11998](https://github.com/Wishibam/Ecommerce-sylius/pull/11998)\n    - [Helsinki preprod (peut \u00eatre ailleurs) - Commande C&C cr\u00e9e plusieurs shipments.](https://trello.com/c/Dlk8WpIg/3895-helsinki-preprod-peut-%C3%AAtre-ailleurs-commande-cc-cr%C3%A9e-plusieurs-shipments) **\ud83c\udf89 A MEP**\n        - *:bug: fix: remove phantom shipment block from account order page* [\\#11999](https://github.com/Wishibam/Ecommerce-sylius/pull/11999)\n    - [TVO- mail order\\_open\\_return\\_withdrawn -remplacement de tag](https://trello.com/c/NK5CnCM2/3883-tvo-mail-orderopenreturnwithdrawn-remplacement-de-tag) **\ud83c\udf89 A MEP**\n        - *\ud83d\udc1b fix: orange \"return in progress\" badge on TVO withdrawal email* [\\#12000](https://github.com/Wishibam/Ecommerce-sylius/pull/12000)\n    - [SEO - ALL - Meta Title](https://trello.com/c/QDbDIPTu/3909-seo-all-meta-title) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: add dedicated Meta Title for CMS pages* [\\#12001](https://github.com/Wishibam/Ecommerce-sylius/pull/12001)\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\ude9a Refonte Checkout #3 \u2014 Le Mode de livraison prend la route](https://trello.com/c/NDSNOimu/3854-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%9A%9A-refonte-checkout-3-le-mode-de-livraison-prend-la-route) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat(tvo): React checkout select shipping step (P3)* [\\#12011](https://github.com/Wishibam/Ecommerce-sylius/pull/12011)\n        - *:bug: fix(tvo): checkout QA feedback of August 18-19* [\\#12119](https://github.com/Wishibam/Ecommerce-sylius/pull/12119)\n    - [\u2709\ufe0f \\[TVO V2\\] Login & inscription : un seul email pour les gouverner tous](https://trello.com/c/Eml7o2An/3912-%E2%9C%89%EF%B8%8F-tvo-v2-login-inscription-un-seul-email-pour-les-gouverner-tous) **\ud83c\udf44 Ready for testing**\n        - *:sparkles: feat: TVO email-first React login & registration flow* [\\#12015](https://github.com/Wishibam/Ecommerce-sylius/pull/12015)\n    - [Helsinki - Correction bug d'affichage en finnois en version mobile](https://trello.com/c/f9V6mA6z/3686-helsinki-correction-bug-daffichage-en-finnois-en-version-mobile) **\ud83c\udf89 A MEP**\n        - *:bug: fix: reduce Helsinki posts carousel title on mobile* [\\#12017](https://github.com/Wishibam/Ecommerce-sylius/pull/12017)\n    - [\ud83d\udcb8 TVO \u2014 Filtre par niveau de remise : que la d\u00e9marque soit avec vous \u2702\ufe0f](https://trello.com/c/FvSWlx14/3877-%F0%9F%92%B8-tvo-filtre-par-niveau-de-remise-que-la-d%C3%A9marque-soit-avec-vous-%E2%9C%82%EF%B8%8F) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: TVO minimum discount percentage filter on product lists* [\\#12018](https://github.com/Wishibam/Ecommerce-sylius/pull/12018)\n    - [\ud83c\udfbd \\[IS\\] Footer : \u00ab Notre accompagnement \u00bb devient \u00ab Nos services \u00bb et raccroche son lien](https://trello.com/c/H2X0XtqH/3932-%F0%9F%8E%BD-is-footer-notre-accompagnement-devient-nos-services-et-raccroche-son-lien) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: rename the Intersport footer column to \u00ab Nos services \u00bb and unlink its title* [\\#12026](https://github.com/Wishibam/Ecommerce-sylius/pull/12026)\n        - *:rewind: revert: Intersport footer \u00ab Nos services \u00bb (wrong target branch)* [\\#12037](https://github.com/Wishibam/Ecommerce-sylius/pull/12037)\n    - [Batavia - Probl\u00e8me sur l'affichage des variations](https://trello.com/c/MY6aNjLj/3931-batavia-probl%C3%A8me-sur-laffichage-des-variations) **\ud83c\udf89 A MEP**\n        - *:bug: fix: deep-link Batavia PLP cards to the displayed color variant* [\\#12027](https://github.com/Wishibam/Ecommerce-sylius/pull/12027)\n    - [Batavia \u2014 Mails \u00ab produit indisponible \u00bb non re\u00e7us par les clients](https://trello.com/c/YLHFxnVs/3933-batavia-mails-produit-indisponible-non-re%C3%A7us-par-les-clients) **\ud83c\udf89 A MEP**\n        - *:bug: fix: validate admin email templates and log real send outcomes* [\\#12035](https://github.com/Wishibam/Ecommerce-sylius/pull/12035)\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\udcb3 Refonte Checkout #4 \u2014 Le Mode de paiement passe \u00e0 la caisse](https://trello.com/c/vDcvKX88/3855-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%92%B3-refonte-checkout-4-le-mode-de-paiement-passe-%C3%A0-la-caisse) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat(tvo): rebuild the checkout payment step and success page in React* [\\#12051](https://github.com/Wishibam/Ecommerce-sylius/pull/12051)\n    - [Intersport - Bug d'affichage images box produit](https://trello.com/c/mOO6EBx1/3936-intersport-bug-daffichage-images-box-produit) **\ud83c\udf89 A MEP**\n        - *:bug: \\[via\\] fix: styles mobiles des pages mot de passe oubli\u00e9/reset* [\\#12055](https://github.com/Wishibam/Ecommerce-sylius/pull/12055)\n    - [\ud83e\ude97 VIA \u2014 Le filtre Cat\u00e9gorie s'ouvre tout seul dans les descentes : on le veut ferm\u00e9 au chargement](https://trello.com/c/GMHVWZe2/3938-%F0%9F%AA%97-via-le-filtre-cat%C3%A9gorie-souvre-tout-seul-dans-les-descentes-on-le-veut-ferm%C3%A9-au-chargement) **\ud83c\udf89 A MEP**\n        - *:bug: \\[via\\] fix: le filtre Cat\u00e9gorie reste ferm\u00e9 au chargement des descentes* [\\#12059](https://github.com/Wishibam/Ecommerce-sylius/pull/12059)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f Feed : Ajouter le flux facebook TVO](https://trello.com/c/iXjTokqz/3937-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-feed-ajouter-le-flux-facebook-tvo) **\ud83e\udd16 Testing tech**\n        - *:sparkles: feat: porter le flux facebook\\_catalog vers le nouveau composant* [\\#12060](https://github.com/Wishibam/Ecommerce-sylius/pull/12060)\n    - [\\[Migration\\]\\[B.1\\] PHP 8.2 \u2192 8.3](https://trello.com/c/Slm1Q5n7/3940-migrationb1-php-82-%E2%86%92-83) **\ud83d\ude80 To Do Vincent**\n        - *:wrench: chore: run the test suite on PHP 8.2 and 8.3 \\[B.1\\]* [\\#12063](https://github.com/Wishibam/Ecommerce-sylius/pull/12063)\n        - *:bug: fix(deploy): restart PHP-FPM via systemd glob instead of hardcoded 8.2* [\\#12066](https://github.com/Wishibam/Ecommerce-sylius/pull/12066)\n        - *:wrench: chore: run the dual PHP matrix on the tests job only \\[B.1\\]* [\\#12068](https://github.com/Wishibam/Ecommerce-sylius/pull/12068)\n    - [\\[Migration\\]\\[B.2\\] Sylius 1.12 \u2192 1.13 (DBAL 3)](https://trello.com/c/huA0VNU9/3941-migrationb2-sylius-112-%E2%86%92-113-dbal-3) **\ud83d\ude80 To Do Vincent**\n        - *:wrench: chore(doctrine): drop the last getSchemaManager() call for DBAL 3/4 \\[B.2 P.1\\]* [\\#12071](https://github.com/Wishibam/Ecommerce-sylius/pull/12071)\n        - *:white\\_check\\_mark: test: characterize every state machine graph wiring \\[B.2 P.2\\]* [\\#12074](https://github.com/Wishibam/Ecommerce-sylius/pull/12074)\n        - *:recycle: refactor: state machine abstraction infra + pilot call site \\[B.2 P.3.1\\]* [\\#12089](https://github.com/Wishibam/Ecommerce-sylius/pull/12089)\n        - *:recycle: refactor: migrate the mechanical state machine call sites \\[B.2 P.3.2\\]* [\\#12094](https://github.com/Wishibam/Ecommerce-sylius/pull/12094)\n        - *:recycle: refactor: migrate the structural state machine call sites \\[B.2 P.3.3\\]* [\\#12098](https://github.com/Wishibam/Ecommerce-sylius/pull/12098)\n        - *:wrench: chore: bump symfony/flex 1 to 2 \\[B.2 P.4\\]* [\\#12100](https://github.com/Wishibam/Ecommerce-sylius/pull/12100)\n    - [MA - Pas de message d'erreur lorsque l'on n'arrive pas \u00e0 se connecter \u00e0 son compte client](https://trello.com/c/fQ9vwTD0/3684-ma-pas-de-message-derreur-lorsque-lon-narrive-pas-%C3%A0-se-connecter-%C3%A0-son-compte-client) **\ud83c\udf89 A MEP**\n        - *:bug: fix: display an error message on failed login on Marques Avenue* [\\#12072](https://github.com/Wishibam/Ecommerce-sylius/pull/12072)\n    - [Fix : \ufeff\ufefftransmettre le consentement newsletter \u00e0 Coniq \u00e0 l'inscription](https://trello.com/c/mShGQBUK/3943-fix-transmettre-le-consentement-newsletter-%C3%A0-coniq-%C3%A0-linscription) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: transmettre le consentement newsletter \u00e0 Coniq \u00e0 l'inscription* [\\#12076](https://github.com/Wishibam/Ecommerce-sylius/pull/12076)\n        - *:bug: fix: consentement newsletter Coniq par canal \u00e0 l'inscription* [\\#12105](https://github.com/Wishibam/Ecommerce-sylius/pull/12105)\n    - [TVO - Bloc caract\u00e9ristiques : Attribut genre et ean](https://trello.com/c/MwYdlurp/3945-tvo-bloc-caract%C3%A9ristiques-attribut-genre-et-ean) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): localize gender and drop EAN in the characteristics block* [\\#12112](https://github.com/Wishibam/Ecommerce-sylius/pull/12112)\n    - [Page de confirmation de commande - N\u00b0 de commande sylius plut\u00f4t que MP](https://trello.com/c/bUrAEDyS/3944-page-de-confirmation-de-commande-n-de-commande-sylius-plut%C3%B4t-que-mp) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): align the thank-you order number with the email* [\\#12114](https://github.com/Wishibam/Ecommerce-sylius/pull/12114)\n    - [TVO \u2014 Tracking des mails de relance panier (taux d'ouverture / clic / CA)](https://trello.com/c/cyTNgF1i/3947-tvo-tracking-des-mails-de-relance-panier-taux-douverture-clic-ca) **\ud83e\udd13 Testing**\n        - *:sparkles: feat(tvo, all): track abandoned cart reminder emails* [\\#12118](https://github.com/Wishibam/Ecommerce-sylius/pull/12118)\n    - [Bug : Mail d'annulation quand validation de retour](https://trello.com/c/Zh0QOdKa/3950-bug-mail-dannulation-quand-validation-de-retour) **\ud83e\udd13 Testing**\n        - *:bug: fix: skip cancellation email when cancel follows a validated return* [\\#12122](https://github.com/Wishibam/Ecommerce-sylius/pull/12122)\n        - *:bug: fix: group return confirmation emails to fix stale VALID\u00c9 tags* [\\#12131](https://github.com/Wishibam/Ecommerce-sylius/pull/12131)\n \n- **Misc**\n    - *:sparkles: feat: PushDispatcher + adaptateur FCM (push app TVO)* [\\#11917](https://github.com/Wishibam/Ecommerce-sylius/pull/11917)\n    - *style(withdrawal): make the withdrawal button theme-colored and not f\u2026* [\\#11951](https://github.com/Wishibam/Ecommerce-sylius/pull/11951)\n    - *:zap: perf: Batavia PLP \u2014 ES result cache, key batching, menu cache* [\\#11963](https://github.com/Wishibam/Ecommerce-sylius/pull/11963)\n    - *:wrench: chore: outillage pour worktrees parall\u00e8les (front isol\u00e9 par projet)* [\\#11986](https://github.com/Wishibam/Ecommerce-sylius/pull/11986)\n    - *:sparkles: feat: push app TVO \u2014 envoi asynchrone + badge (3.A.5 + 3.A.6)* [\\#12022](https://github.com/Wishibam/Ecommerce-sylius/pull/12022)\n    - *:sparkles: feat: badge unreadPushCount de bout en bout (app TVO)* [\\#12025](https://github.com/Wishibam/Ecommerce-sylius/pull/12025)\n    - *:sparkles: feat: compteur badge dans data des push (app TVO)* [\\#12028](https://github.com/Wishibam/Ecommerce-sylius/pull/12028)\n    - *:sparkles: feat: push \u00ab commande confirm\u00e9e \u00bb (app TVO)* [\\#12031](https://github.com/Wishibam/Ecommerce-sylius/pull/12031)\n    - *:sparkles: feat: push \u00ab commande exp\u00e9di\u00e9e \u00bb (app TVO)* [\\#12040](https://github.com/Wishibam/Ecommerce-sylius/pull/12040)\n    - *feat(push): notification de remboursement de commande (TVO 3.B.3)* [\\#12041](https://github.com/Wishibam/Ecommerce-sylius/pull/12041)\n    - *fix(push): durcir l'envoi FCM \u2014 timeouts born\u00e9s + retry effectif (TVO 3.A.7)* [\\#12042](https://github.com/Wishibam/Ecommerce-sylius/pull/12042)\n    - *test(featured-content): d\u00e9-flakifier testProgramDisableDelay (tol\u00e9rance sur le d\u00e9lai)* [\\#12044](https://github.com/Wishibam/Ecommerce-sylius/pull/12044)\n    - *feat(push): notification de retour en stock (TVO 3.B.4)* [\\#12045](https://github.com/Wishibam/Ecommerce-sylius/pull/12045)\n    - *feat(push): notification de baisse de prix wishlist (TVO 3.B.5)* [\\#12049](https://github.com/Wishibam/Ecommerce-sylius/pull/12049)\n    - *:bug: fix(megamenu): \u00e9largir le lien \u00e0 2048 caract\u00e8res* [\\#12050](https://github.com/Wishibam/Ecommerce-sylius/pull/12050)\n    - *feat(push): relance push des paniers abandonn\u00e9s (TVO 3.B.6)* [\\#12053](https://github.com/Wishibam/Ecommerce-sylius/pull/12053)\n    - *feat(deeplink): AASA de la nouvelle app TVO \u2014 Universal Links iOS (TVO 4.1)* [\\#12064](https://github.com/Wishibam/Ecommerce-sylius/pull/12064)\n    - *feat(deeplink): assetlinks.json de la nouvelle app TVO \u2014 App Links Android (TVO 4.2)* [\\#12065](https://github.com/Wishibam/Ecommerce-sylius/pull/12065)\n    - *:bug: fix: complete payments stuck by Stripe webhook/checkout race* [\\#12075](https://github.com/Wishibam/Ecommerce-sylius/pull/12075)\n    - *:bug: fix: dedup order\\_confirmation per order to stop double send* [\\#12101](https://github.com/Wishibam/Ecommerce-sylius/pull/12101)\n    - *:bug: fix: pin the fixtures channel default tax zone* [\\#12106](https://github.com/Wishibam/Ecommerce-sylius/pull/12106)\n    - *:wrench: chore: bump webfactory/ssh-agent to v0.9.1* [\\#12120](https://github.com/Wishibam/Ecommerce-sylius/pull/12120)\n    - *fix(coniq): stop Coniq errors from blocking the to\\_ship transition* [\\#12134](https://github.com/Wishibam/Ecommerce-sylius/pull/12134)\n    - *Fix/coniq swallow poisons doctrine transaction* [\\#12138](https://github.com/Wishibam/Ecommerce-sylius/pull/12138)\n \n- **D\u00e9j\u00e0 en production**\n    - [\\[Migration\\]\\[A.2\\] D\u00e9mant\u00e8lement Setono Analytics + Tag-Bag](https://trello.com/c/uJN0Gkiz/3856-migrationa2-d%C3%A9mant%C3%A8lement-setono-analytics-tag-bag) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore(migration): internalize setono analytics + tag-bag as src/Component \\[A.2\\]* [\\#11846](https://github.com/Wishibam/Ecommerce-sylius/pull/11846)\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\udc1b Fix r\u00e9indexation ES bloqu\u00e9e \u2014 \u00ab immense term \u00bb sur attribut trop long (Intersport)](https://trello.com/c/iD6idW0v/3915-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%90%9B-fix-r%C3%A9indexation-es-bloqu%C3%A9e-immense-term-sur-attribut-trop-long-intersport) **MEP Ao\u00fbt**\n        - *:bug: fix: r\u00e9indexation ES bloqu\u00e9e par un attribut trop long (immense term)* [\\#11972](https://github.com/Wishibam/Ecommerce-sylius/pull/11972)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f \u203c\ufe0f Nouveau Feeds - Faire tourner tous les nouveaux feeds sur toutes les preprods/prods](https://trello.com/c/Kr8UhDAv/3910-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-%EF%B8%8F-nouveau-feeds-faire-tourner-tous-les-nouveaux-feeds-sur-toutes-les-preprods-prods) **\ud83e\udee1 To Do JC**\n        - *:sparkles: feat: drive-to-store feeds parity with legacy Setono* [\\#11979](https://github.com/Wishibam/Ecommerce-sylius/pull/11979)\n    - [Helsinki \u2014 Funnel checkout GA4 vide : \u00e9v\u00e9nements e-commerce manquants/incomplets](https://trello.com/c/j0yQGSFm/3921-helsinki-funnel-checkout-ga4-vide-%C3%A9v%C3%A9nements-e-commerce-manquants-incomplets) **MEP Septembre**\n        - *:bug: fix: \u00e9mettre le funnel checkout GA4 complet* [\\#11980](https://github.com/Wishibam/Ecommerce-sylius/pull/11980)\n        - *:bug: fix: \u00e9mettre add\\_payment\\_info quand l'\u00e9tape de paiement est saut\u00e9e* [\\#12014](https://github.com/Wishibam/Ecommerce-sylius/pull/12014)\n    - [TVO - Les recommandations produits ne remontent aucun produit sur la fiche produit](https://trello.com/c/lw3SYgNG/3926-tvo-les-recommandations-produits-ne-remontent-aucun-produit-sur-la-fiche-produit) **MEP Ao\u00fbt**\n        - *:bug: fix(search): match the indexed color value in recommendations* [\\#12004](https://github.com/Wishibam/Ecommerce-sylius/pull/12004)\n    - [A ESTIMER : Google Shopping Feed : ajouter le Outlet Price en cas de promotion](https://trello.com/c/RnEgL53B/3867-a-estimer-google-shopping-feed-ajouter-le-outlet-price-en-cas-de-promotion) **MEP Ao\u00fbt**\n        - *:sparkles: feat(helsinki): expose the outlet price in the Google Shopping feed* [\\#12020](https://github.com/Wishibam/Ecommerce-sylius/pull/12020)\n    - [\u2615\ufe0f \\[Batavia\\] Frais de retour : \u20ac3,25 \u2192 \u20ac3,95 (et on passe le texte en traduction)](https://trello.com/c/P4vec3cz/3934-%E2%98%95%EF%B8%8F-batavia-frais-de-retour-%E2%82%AC325-%E2%86%92-%E2%82%AC395-et-on-passe-le-texte-en-traduction) **MEP Ao\u00fbt**\n        - *:bug: fix: Batavia return cost 3,95 and move the line to a translation* [\\#12034](https://github.com/Wishibam/Ecommerce-sylius/pull/12034)\n    - *:bug: fix: render flag emojis as SVG icons, not OS emoji glyphs* [\\#11981](https://github.com/Wishibam/Ecommerce-sylius/pull/11981)\n    - *:bug: fix: apply the flag icon filter to the remaining menu renderings* [\\#11982](https://github.com/Wishibam/Ecommerce-sylius/pull/11982)\n    - *:wrench: chore: bump php\\_codesniffer en 3.13.6 (CVE-2026-67434, CI rouge)* [\\#12008](https://github.com/Wishibam/Ecommerce-sylius/pull/12008)\n    - *:bug: fix: skip Comarch in LaRedoute order import when disabled* [\\#12125](https://github.com/Wishibam/Ecommerce-sylius/pull/12125)", "creation_timestamp": "2026-09-03T07:44:08.144503Z"}, {"uuid": "90fb2d9c-fc71-4efe-b542-fc1024f817e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67434", "type": "seen", "source": "https://gist.github.com/jbourdin/d92bd79943b8cad5ce34475e62e228fb", "content": "- **Trello**\n    - [GLOBAL - Email Alerte paiement en erreur](https://trello.com/c/P1DJvjHp/3229-global-email-alerte-paiement-en-erreur) **\ud83c\udf89 A MEP**\n        - *feat(payment): send email notification when payment fails* [\\#10555](https://github.com/Wishibam/Ecommerce-sylius/pull/10555)\n    - [Helsinki : Portail de retour - Sylius - int\u00e9gration front du portail de retour](https://trello.com/c/mhcc7YaC/2401-helsinki-portail-de-retour-sylius-int%C3%A9gration-front-du-portail-de-retour) **\ud83d\ude80Testing BACK / FLUX / CLIENT**\n        - *feat(helsinki): Add return portal to Helsinki order details* [\\#11757](https://github.com/Wishibam/Ecommerce-sylius/pull/11757)\n        - *fix(helsinki): tri-state select-all checkbox on the return request page* [\\#12129](https://github.com/Wishibam/Ecommerce-sylius/pull/12129)\n    - [\u26a0\ufe0fAction prod\u26a0\ufe0f\ud83d\udd14 Refonte TVO : tracking du volet d'alerte \u00ab retour en stock \u00bb](https://trello.com/c/SXyhrSQb/3834-%E2%9A%A0%EF%B8%8Faction-prod%E2%9A%A0%EF%B8%8F%F0%9F%94%94-refonte-tvo-tracking-du-volet-dalerte-retour-en-stock) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: track back-in-stock alert panel usage* [\\#11791](https://github.com/Wishibam/Ecommerce-sylius/pull/11791)\n    - [TVO - Fiche produit - Ajout des blocs \"Mati\u00e8re et entretien\" & \"Caract\u00e9ristiques\"](https://trello.com/c/AbsKmIzk/3633-tvo-fiche-produit-ajout-des-blocs-mati%C3%A8re-et-entretien-caract%C3%A9ristiques) **\ud83c\udf89 A MEP**\n        - *feat(tvo): add Mati\u00e8re et entretien & Caract\u00e9ristiques blocks on PDP* [\\#11812](https://github.com/Wishibam/Ecommerce-sylius/pull/11812)\n    - [\\[Migration\\]\\[A.4.1\\] Internaliser bitbag/wishlist-plugin dans src/Component/Wishlist](https://trello.com/c/U9dQGx1l/3863-migrationa41-internaliser-bitbag-wishlist-plugin-dans-src-component-wishlist) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: internalize bitbag/wishlist-plugin \\[A.4.1\\]* [\\#11856](https://github.com/Wishibam/Ecommerce-sylius/pull/11856)\n    - [\\[Migration\\]\\[A.4.2/A.4.3\\] Internaliser bring & deep-link dans src/Component](https://trello.com/c/RsLN5SNT/3864-migrationa42-a43-internaliser-bring-deep-link-dans-src-component) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: internalize bring & deep-link plugins \\[A.4.2, A.4.3\\]* [\\#11861](https://github.com/Wishibam/Ecommerce-sylius/pull/11861)\n    - [\\[Migration\\]\\[A.5\\] Bumps frontend \u00ab safe \u00bb + suppression des packages morts](https://trello.com/c/vI6k61gt/3873-migrationa5-bumps-frontend-safe-suppression-des-packages-morts) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: bump safe frontend deps + prune dead packages \\[A.5\\]* [\\#11875](https://github.com/Wishibam/Ecommerce-sylius/pull/11875)\n    - [\\[Migration\\]\\[A.6\\] Pr\u00e9paration Doctrine pour DBAL 3 (monkey-patch migrations)](https://trello.com/c/8mdyVMwg/3880-migrationa6-pr%C3%A9paration-doctrine-pour-dbal-3-monkey-patch-migrations) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: replace Doctrine migration monkey-patch for DBAL 3 \\[A.6\\]* [\\#11893](https://github.com/Wishibam/Ecommerce-sylius/pull/11893)\n    - [TVO - Express checkout : adresse tronqu\u00e9e \u2014 nom de rue perdu (Apple Pay line1/line2)](https://trello.com/c/dIrl0I1a/3884-tvo-express-checkout-adresse-tronqu%C3%A9e-nom-de-rue-perdu-apple-pay-line1-line2) **\ud83c\udf89 A MEP**\n        - *:bug: fix: join express checkout wallet address line1/line2 into street* [\\#11914](https://github.com/Wishibam/Ecommerce-sylius/pull/11914)\n    - [\\[P0\\] Express checkout : re-v\u00e9rifier le montant du PaymentIntent au complete](https://trello.com/c/qJdTR9Jc/3885-p0-express-checkout-re-v%C3%A9rifier-le-montant-du-paymentintent-au-complete) **\ud83e\udd13 Testing**\n        - *:bug: fix: verify express checkout PaymentIntent amount at completion* [\\#11916](https://github.com/Wishibam/Ecommerce-sylius/pull/11916)\n    - [\\[P0\\] Webhook Stripe : rembourser r\u00e9ellement les charges des commandes refus\u00e9es/annul\u00e9es](https://trello.com/c/fyJeMD3L/3886-p0-webhook-stripe-rembourser-r%C3%A9ellement-les-charges-des-commandes-refus%C3%A9es-annul%C3%A9es) **\ud83e\udd13 Testing**\n        - *:bug: fix: refund Stripe charges captured for refused or cancelled orders* [\\#11918](https://github.com/Wishibam/Ecommerce-sylius/pull/11918)\n    - [\\[P1\\] Express checkout : pinner explicitement les wallets autoris\u00e9s (quick win)](https://trello.com/c/tEpmPM9l/3890-p1-express-checkout-pinner-explicitement-les-wallets-autoris%C3%A9s-quick-win) **\ud83e\udd16 Testing tech**\n        - *:bug: fix: restrict express checkout wallets to an explicit allowlist* [\\#11919](https://github.com/Wishibam/Ecommerce-sylius/pull/11919)\n    - [\\[P0\\] Express checkout : commandes \u00e0 fonds captur\u00e9s supprim\u00e9es par la purge des carts + cha\u00eene d'abort morte](https://trello.com/c/1Wo7zGP5/3887-p0-express-checkout-commandes-%C3%A0-fonds-captur%C3%A9s-supprim%C3%A9es-par-la-purge-des-carts-cha%C3%AEne-dabort-morte) **\ud83e\udd13 Testing**\n        - *:bug: fix: protect express checkout captured-funds carts from the purge* [\\#11920](https://github.com/Wishibam/Ecommerce-sylius/pull/11920)\n    - [FEAT-0006 \u2014 Regroupement des emails d'annulation d'articles](https://trello.com/c/bBiV4jTE/3415-feat-0006-regroupement-des-emails-dannulation-darticles) **\ud83c\udf89 A MEP**\n        - *:bug: fix: FEAT-0006 cancellation email grouping QA feedback* [\\#11984](https://github.com/Wishibam/Ecommerce-sylius/pull/11984)\n        - *:bug: fix: register order\\_entirely\\_cancelled email template for all projects* [\\#12091](https://github.com/Wishibam/Ecommerce-sylius/pull/12091)\n        - *:bug: fix: send grouped withdrawal confirmations on entirely cancelled orders* [\\#12104](https://github.com/Wishibam/Ecommerce-sylius/pull/12104)\n    - [Min-height pages React](https://trello.com/c/Rti8eFXb/3919-min-height-pages-react) **\ud83c\udf89 A MEP**\n        - *:bug: fix: add min-height on React pages to prevent footer flash* [\\#11987](https://github.com/Wishibam/Ecommerce-sylius/pull/11987)\n    - [SEO - TVO - changement de slug](https://trello.com/c/Gbb2tles/3908-seo-tvo-changement-de-slug) **\ud83c\udf89 A MEP**\n        - *:bug: fix: clean up TVO brand page slugs with 301 redirects* [\\#11988](https://github.com/Wishibam/Ecommerce-sylius/pull/11988)\n    - [\u26a0\ufe0f action preprod/prod \u26a0\ufe0f \ud83d\uded2 Refonte Checkout #1 \u2014 La page Panier change de garde-robe](https://trello.com/c/qxdtlZxk/3851-%E2%9A%A0%EF%B8%8F-action-preprod-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%9B%92-refonte-checkout-1-la-page-panier-change-de-garde-robe) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): cart page QA feedback round* [\\#11990](https://github.com/Wishibam/Ecommerce-sylius/pull/11990)\n    - [\u26a0\ufe0f MEP \u26a0\ufe0f\u2b50 Google Customer Reviews sur TVO \u2014 brancher la machine \u00e0 \u00e9toiles](https://trello.com/c/7JA9u85M/3899-%E2%9A%A0%EF%B8%8F-mep-%E2%9A%A0%EF%B8%8F%E2%AD%90-google-customer-reviews-sur-tvo-brancher-la-machine-%C3%A0-%C3%A9toiles) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: TVO Google Customer Reviews \u2014 GTIN produits sur thank you* [\\#11991](https://github.com/Wishibam/Ecommerce-sylius/pull/11991)\n    - [Fix : TypeError trim() null sur les share descriptions de channel (admin)](https://trello.com/c/o47Ek1Fo/3924-fix-typeerror-trim-null-sur-les-share-descriptions-de-channel-admin) **\ud83e\udd16 Testing tech**\n        - *:bug: fix: guard against null share descriptions in channel setter* [\\#11992](https://github.com/Wishibam/Ecommerce-sylius/pull/11992)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f \ud83d\udce6\ud83c\udf0d Mondial Relay sans fronti\u00e8res \u2014 points relais UE (v1 TVO)](https://trello.com/c/4X0QYlQ5/3918-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%93%A6%F0%9F%8C%8D-mondial-relay-sans-fronti%C3%A8res-points-relais-ue-v1-tvo) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat(mondial-relay): relay search follows the buyer's country* [\\#11994](https://github.com/Wishibam/Ecommerce-sylius/pull/11994)\n    - [\ud83d\udccd Refonte Checkout \u2014 La suggestion d'adresse qui fait mouche](https://trello.com/c/vF0T1FZU/3860-%F0%9F%93%8D-refonte-checkout-la-suggestion-dadresse-qui-fait-mouche) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): address suggestion QA feedback round* [\\#11995](https://github.com/Wishibam/Ecommerce-sylius/pull/11995)\n        - *:bug: fix(tvo): keep the manual phone flag choice made on an empty field* [\\#12058](https://github.com/Wishibam/Ecommerce-sylius/pull/12058)\n    - [\ud83c\udf5e Refonte Checkout \u2014 Des toasts tout chauds pour les messages syst\u00e8me](https://trello.com/c/N70pstGO/3861-%F0%9F%8D%9E-refonte-checkout-des-toasts-tout-chauds-pour-les-messages-syst%C3%A8me) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): checkout toasts QA feedback round* [\\#11996](https://github.com/Wishibam/Ecommerce-sylius/pull/11996)\n    - [\ud83d\udd00 Refonte TVO : le variant s\u00e9lectionn\u00e9 saute en 1re position au lieu de rester \u00e0 sa place](https://trello.com/c/vQH5uxHz/3904-%F0%9F%94%80-refonte-tvo-le-variant-s%C3%A9lectionn%C3%A9-saute-en-1re-position-au-lieu-de-rester-%C3%A0-sa-place) **\ud83c\udf89 A MEP**\n        - *:bug: fix: keep option values in place on overflowing variant axis* [\\#11998](https://github.com/Wishibam/Ecommerce-sylius/pull/11998)\n    - [Helsinki preprod (peut \u00eatre ailleurs) - Commande C&C cr\u00e9e plusieurs shipments.](https://trello.com/c/Dlk8WpIg/3895-helsinki-preprod-peut-%C3%AAtre-ailleurs-commande-cc-cr%C3%A9e-plusieurs-shipments) **\ud83c\udf89 A MEP**\n        - *:bug: fix: remove phantom shipment block from account order page* [\\#11999](https://github.com/Wishibam/Ecommerce-sylius/pull/11999)\n    - [TVO- mail order\\_open\\_return\\_withdrawn -remplacement de tag](https://trello.com/c/NK5CnCM2/3883-tvo-mail-orderopenreturnwithdrawn-remplacement-de-tag) **\ud83c\udf89 A MEP**\n        - *\ud83d\udc1b fix: orange \"return in progress\" badge on TVO withdrawal email* [\\#12000](https://github.com/Wishibam/Ecommerce-sylius/pull/12000)\n    - [SEO - ALL - Meta Title](https://trello.com/c/QDbDIPTu/3909-seo-all-meta-title) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: add dedicated Meta Title for CMS pages* [\\#12001](https://github.com/Wishibam/Ecommerce-sylius/pull/12001)\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\ude9a Refonte Checkout #3 \u2014 Le Mode de livraison prend la route](https://trello.com/c/NDSNOimu/3854-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%9A%9A-refonte-checkout-3-le-mode-de-livraison-prend-la-route) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat(tvo): React checkout select shipping step (P3)* [\\#12011](https://github.com/Wishibam/Ecommerce-sylius/pull/12011)\n        - *:bug: fix(tvo): checkout QA feedback of August 18-19* [\\#12119](https://github.com/Wishibam/Ecommerce-sylius/pull/12119)\n    - [\u2709\ufe0f \\[TVO V2\\] Login & inscription : un seul email pour les gouverner tous](https://trello.com/c/Eml7o2An/3912-%E2%9C%89%EF%B8%8F-tvo-v2-login-inscription-un-seul-email-pour-les-gouverner-tous) **\ud83e\udd13 Testing**\n        - *:sparkles: feat: TVO email-first React login & registration flow* [\\#12015](https://github.com/Wishibam/Ecommerce-sylius/pull/12015)\n        - *:bug: fix(tvo): align the login page footer with the checkout footer* [\\#12133](https://github.com/Wishibam/Ecommerce-sylius/pull/12133)\n    - [Helsinki - Correction bug d'affichage en finnois en version mobile](https://trello.com/c/f9V6mA6z/3686-helsinki-correction-bug-daffichage-en-finnois-en-version-mobile) **\ud83c\udf89 A MEP**\n        - *:bug: fix: reduce Helsinki posts carousel title on mobile* [\\#12017](https://github.com/Wishibam/Ecommerce-sylius/pull/12017)\n    - [\ud83d\udcb8 TVO \u2014 Filtre par niveau de remise : que la d\u00e9marque soit avec vous \u2702\ufe0f](https://trello.com/c/FvSWlx14/3877-%F0%9F%92%B8-tvo-filtre-par-niveau-de-remise-que-la-d%C3%A9marque-soit-avec-vous-%E2%9C%82%EF%B8%8F) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: TVO minimum discount percentage filter on product lists* [\\#12018](https://github.com/Wishibam/Ecommerce-sylius/pull/12018)\n    - [\ud83c\udfbd \\[IS\\] Footer : \u00ab Notre accompagnement \u00bb devient \u00ab Nos services \u00bb et raccroche son lien](https://trello.com/c/H2X0XtqH/3932-%F0%9F%8E%BD-is-footer-notre-accompagnement-devient-nos-services-et-raccroche-son-lien) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: rename the Intersport footer column to \u00ab Nos services \u00bb and unlink its title* [\\#12026](https://github.com/Wishibam/Ecommerce-sylius/pull/12026)\n        - *:rewind: revert: Intersport footer \u00ab Nos services \u00bb (wrong target branch)* [\\#12037](https://github.com/Wishibam/Ecommerce-sylius/pull/12037)\n    - [Batavia - Probl\u00e8me sur l'affichage des variations](https://trello.com/c/MY6aNjLj/3931-batavia-probl%C3%A8me-sur-laffichage-des-variations) **\ud83c\udf89 A MEP**\n        - *:bug: fix: deep-link Batavia PLP cards to the displayed color variant* [\\#12027](https://github.com/Wishibam/Ecommerce-sylius/pull/12027)\n    - [Batavia \u2014 Mails \u00ab produit indisponible \u00bb non re\u00e7us par les clients](https://trello.com/c/YLHFxnVs/3933-batavia-mails-produit-indisponible-non-re%C3%A7us-par-les-clients) **\ud83c\udf89 A MEP**\n        - *:bug: fix: validate admin email templates and log real send outcomes* [\\#12035](https://github.com/Wishibam/Ecommerce-sylius/pull/12035)\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\udcb3 Refonte Checkout #4 \u2014 Le Mode de paiement passe \u00e0 la caisse](https://trello.com/c/vDcvKX88/3855-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%92%B3-refonte-checkout-4-le-mode-de-paiement-passe-%C3%A0-la-caisse) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat(tvo): rebuild the checkout payment step and success page in React* [\\#12051](https://github.com/Wishibam/Ecommerce-sylius/pull/12051)\n    - [Intersport - Bug d'affichage images box produit](https://trello.com/c/mOO6EBx1/3936-intersport-bug-daffichage-images-box-produit) **\ud83c\udf89 A MEP**\n        - *:bug: \\[via\\] fix: styles mobiles des pages mot de passe oubli\u00e9/reset* [\\#12055](https://github.com/Wishibam/Ecommerce-sylius/pull/12055)\n    - [\ud83e\ude97 VIA \u2014 Le filtre Cat\u00e9gorie s'ouvre tout seul dans les descentes : on le veut ferm\u00e9 au chargement](https://trello.com/c/GMHVWZe2/3938-%F0%9F%AA%97-via-le-filtre-cat%C3%A9gorie-souvre-tout-seul-dans-les-descentes-on-le-veut-ferm%C3%A9-au-chargement) **\ud83c\udf89 A MEP**\n        - *:bug: \\[via\\] fix: le filtre Cat\u00e9gorie reste ferm\u00e9 au chargement des descentes* [\\#12059](https://github.com/Wishibam/Ecommerce-sylius/pull/12059)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f Feed : Ajouter le flux facebook TVO](https://trello.com/c/iXjTokqz/3937-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-feed-ajouter-le-flux-facebook-tvo) **\ud83e\udd16 Testing tech**\n        - *:sparkles: feat: porter le flux facebook\\_catalog vers le nouveau composant* [\\#12060](https://github.com/Wishibam/Ecommerce-sylius/pull/12060)\n    - [\\[Migration\\]\\[B.1\\] PHP 8.2 \u2192 8.3](https://trello.com/c/Slm1Q5n7/3940-migrationb1-php-82-%E2%86%92-83) **\ud83d\ude80 To Do Vincent**\n        - *:wrench: chore: run the test suite on PHP 8.2 and 8.3 \\[B.1\\]* [\\#12063](https://github.com/Wishibam/Ecommerce-sylius/pull/12063)\n        - *:bug: fix(deploy): restart PHP-FPM via systemd glob instead of hardcoded 8.2* [\\#12066](https://github.com/Wishibam/Ecommerce-sylius/pull/12066)\n        - *:wrench: chore: run the dual PHP matrix on the tests job only \\[B.1\\]* [\\#12068](https://github.com/Wishibam/Ecommerce-sylius/pull/12068)\n    - [\\[Migration\\]\\[B.2\\] Sylius 1.12 \u2192 1.13 (DBAL 3)](https://trello.com/c/huA0VNU9/3941-migrationb2-sylius-112-%E2%86%92-113-dbal-3) **\ud83d\ude80 To Do Vincent**\n        - *:wrench: chore(doctrine): drop the last getSchemaManager() call for DBAL 3/4 \\[B.2 P.1\\]* [\\#12071](https://github.com/Wishibam/Ecommerce-sylius/pull/12071)\n        - *:white\\_check\\_mark: test: characterize every state machine graph wiring \\[B.2 P.2\\]* [\\#12074](https://github.com/Wishibam/Ecommerce-sylius/pull/12074)\n        - *:recycle: refactor: state machine abstraction infra + pilot call site \\[B.2 P.3.1\\]* [\\#12089](https://github.com/Wishibam/Ecommerce-sylius/pull/12089)\n        - *:recycle: refactor: migrate the mechanical state machine call sites \\[B.2 P.3.2\\]* [\\#12094](https://github.com/Wishibam/Ecommerce-sylius/pull/12094)\n        - *:recycle: refactor: migrate the structural state machine call sites \\[B.2 P.3.3\\]* [\\#12098](https://github.com/Wishibam/Ecommerce-sylius/pull/12098)\n        - *:wrench: chore: bump symfony/flex 1 to 2 \\[B.2 P.4\\]* [\\#12100](https://github.com/Wishibam/Ecommerce-sylius/pull/12100)\n    - [MA - Pas de message d'erreur lorsque l'on n'arrive pas \u00e0 se connecter \u00e0 son compte client](https://trello.com/c/fQ9vwTD0/3684-ma-pas-de-message-derreur-lorsque-lon-narrive-pas-%C3%A0-se-connecter-%C3%A0-son-compte-client) **\ud83c\udf89 A MEP**\n        - *:bug: fix: display an error message on failed login on Marques Avenue* [\\#12072](https://github.com/Wishibam/Ecommerce-sylius/pull/12072)\n    - [Fix : \ufeff\ufefftransmettre le consentement newsletter \u00e0 Coniq \u00e0 l'inscription](https://trello.com/c/mShGQBUK/3943-fix-transmettre-le-consentement-newsletter-%C3%A0-coniq-%C3%A0-linscription) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: transmettre le consentement newsletter \u00e0 Coniq \u00e0 l'inscription* [\\#12076](https://github.com/Wishibam/Ecommerce-sylius/pull/12076)\n        - *:bug: fix: consentement newsletter Coniq par canal \u00e0 l'inscription* [\\#12105](https://github.com/Wishibam/Ecommerce-sylius/pull/12105)\n    - [TVO - Bloc caract\u00e9ristiques : Attribut genre et ean](https://trello.com/c/MwYdlurp/3945-tvo-bloc-caract%C3%A9ristiques-attribut-genre-et-ean) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): localize gender and drop EAN in the characteristics block* [\\#12112](https://github.com/Wishibam/Ecommerce-sylius/pull/12112)\n    - [Page de confirmation de commande - N\u00b0 de commande sylius plut\u00f4t que MP](https://trello.com/c/bUrAEDyS/3944-page-de-confirmation-de-commande-n-de-commande-sylius-plut%C3%B4t-que-mp) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): align the thank-you order number with the email* [\\#12114](https://github.com/Wishibam/Ecommerce-sylius/pull/12114)\n    - [TVO \u2014 Tracking des mails de relance panier (taux d'ouverture / clic / CA)](https://trello.com/c/cyTNgF1i/3947-tvo-tracking-des-mails-de-relance-panier-taux-douverture-clic-ca) **\ud83e\udd13 Testing**\n        - *:sparkles: feat(tvo, all): track abandoned cart reminder emails* [\\#12118](https://github.com/Wishibam/Ecommerce-sylius/pull/12118)\n    - [Bug : Mail d'annulation quand validation de retour](https://trello.com/c/Zh0QOdKa/3950-bug-mail-dannulation-quand-validation-de-retour) **\ud83e\udd13 Testing**\n        - *:bug: fix: skip cancellation email when cancel follows a validated return* [\\#12122](https://github.com/Wishibam/Ecommerce-sylius/pull/12122)\n        - *:bug: fix: group return confirmation emails to fix stale VALID\u00c9 tags* [\\#12131](https://github.com/Wishibam/Ecommerce-sylius/pull/12131)\n \n- **Misc**\n    - *:sparkles: feat: PushDispatcher + adaptateur FCM (push app TVO)* [\\#11917](https://github.com/Wishibam/Ecommerce-sylius/pull/11917)\n    - *style(withdrawal): make the withdrawal button theme-colored and not f\u2026* [\\#11951](https://github.com/Wishibam/Ecommerce-sylius/pull/11951)\n    - *:zap: perf: Batavia PLP \u2014 ES result cache, key batching, menu cache* [\\#11963](https://github.com/Wishibam/Ecommerce-sylius/pull/11963)\n    - *:wrench: chore: outillage pour worktrees parall\u00e8les (front isol\u00e9 par projet)* [\\#11986](https://github.com/Wishibam/Ecommerce-sylius/pull/11986)\n    - *:sparkles: feat: push app TVO \u2014 envoi asynchrone + badge (3.A.5 + 3.A.6)* [\\#12022](https://github.com/Wishibam/Ecommerce-sylius/pull/12022)\n    - *:sparkles: feat: badge unreadPushCount de bout en bout (app TVO)* [\\#12025](https://github.com/Wishibam/Ecommerce-sylius/pull/12025)\n    - *:sparkles: feat: compteur badge dans data des push (app TVO)* [\\#12028](https://github.com/Wishibam/Ecommerce-sylius/pull/12028)\n    - *:sparkles: feat: push \u00ab commande confirm\u00e9e \u00bb (app TVO)* [\\#12031](https://github.com/Wishibam/Ecommerce-sylius/pull/12031)\n    - *:sparkles: feat: push \u00ab commande exp\u00e9di\u00e9e \u00bb (app TVO)* [\\#12040](https://github.com/Wishibam/Ecommerce-sylius/pull/12040)\n    - *feat(push): notification de remboursement de commande (TVO 3.B.3)* [\\#12041](https://github.com/Wishibam/Ecommerce-sylius/pull/12041)\n    - *fix(push): durcir l'envoi FCM \u2014 timeouts born\u00e9s + retry effectif (TVO 3.A.7)* [\\#12042](https://github.com/Wishibam/Ecommerce-sylius/pull/12042)\n    - *test(featured-content): d\u00e9-flakifier testProgramDisableDelay (tol\u00e9rance sur le d\u00e9lai)* [\\#12044](https://github.com/Wishibam/Ecommerce-sylius/pull/12044)\n    - *feat(push): notification de retour en stock (TVO 3.B.4)* [\\#12045](https://github.com/Wishibam/Ecommerce-sylius/pull/12045)\n    - *feat(push): notification de baisse de prix wishlist (TVO 3.B.5)* [\\#12049](https://github.com/Wishibam/Ecommerce-sylius/pull/12049)\n    - *:bug: fix(megamenu): \u00e9largir le lien \u00e0 2048 caract\u00e8res* [\\#12050](https://github.com/Wishibam/Ecommerce-sylius/pull/12050)\n    - *feat(push): relance push des paniers abandonn\u00e9s (TVO 3.B.6)* [\\#12053](https://github.com/Wishibam/Ecommerce-sylius/pull/12053)\n    - *feat(deeplink): AASA de la nouvelle app TVO \u2014 Universal Links iOS (TVO 4.1)* [\\#12064](https://github.com/Wishibam/Ecommerce-sylius/pull/12064)\n    - *feat(deeplink): assetlinks.json de la nouvelle app TVO \u2014 App Links Android (TVO 4.2)* [\\#12065](https://github.com/Wishibam/Ecommerce-sylius/pull/12065)\n    - *:bug: fix: complete payments stuck by Stripe webhook/checkout race* [\\#12075](https://github.com/Wishibam/Ecommerce-sylius/pull/12075)\n    - *:bug: fix: dedup order\\_confirmation per order to stop double send* [\\#12101](https://github.com/Wishibam/Ecommerce-sylius/pull/12101)\n    - *:bug: fix: pin the fixtures channel default tax zone* [\\#12106](https://github.com/Wishibam/Ecommerce-sylius/pull/12106)\n    - *:wrench: chore: bump webfactory/ssh-agent to v0.9.1* [\\#12120](https://github.com/Wishibam/Ecommerce-sylius/pull/12120)\n    - *fix(coniq): stop Coniq errors from blocking the to\\_ship transition* [\\#12134](https://github.com/Wishibam/Ecommerce-sylius/pull/12134)\n    - *Fix/coniq swallow poisons doctrine transaction* [\\#12138](https://github.com/Wishibam/Ecommerce-sylius/pull/12138)\n \n- **D\u00e9j\u00e0 en production**\n    - [\\[Migration\\]\\[A.2\\] D\u00e9mant\u00e8lement Setono Analytics + Tag-Bag](https://trello.com/c/uJN0Gkiz/3856-migrationa2-d%C3%A9mant%C3%A8lement-setono-analytics-tag-bag) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore(migration): internalize setono analytics + tag-bag as src/Component \\[A.2\\]* [\\#11846](https://github.com/Wishibam/Ecommerce-sylius/pull/11846)\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\udc1b Fix r\u00e9indexation ES bloqu\u00e9e \u2014 \u00ab immense term \u00bb sur attribut trop long (Intersport)](https://trello.com/c/iD6idW0v/3915-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%90%9B-fix-r%C3%A9indexation-es-bloqu%C3%A9e-immense-term-sur-attribut-trop-long-intersport) **MEP Ao\u00fbt**\n        - *:bug: fix: r\u00e9indexation ES bloqu\u00e9e par un attribut trop long (immense term)* [\\#11972](https://github.com/Wishibam/Ecommerce-sylius/pull/11972)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f \u203c\ufe0f Nouveau Feeds - Faire tourner tous les nouveaux feeds sur toutes les preprods/prods](https://trello.com/c/Kr8UhDAv/3910-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-%EF%B8%8F-nouveau-feeds-faire-tourner-tous-les-nouveaux-feeds-sur-toutes-les-preprods-prods) **\ud83e\udee1 To Do JC**\n        - *:sparkles: feat: drive-to-store feeds parity with legacy Setono* [\\#11979](https://github.com/Wishibam/Ecommerce-sylius/pull/11979)\n    - [Helsinki \u2014 Funnel checkout GA4 vide : \u00e9v\u00e9nements e-commerce manquants/incomplets](https://trello.com/c/j0yQGSFm/3921-helsinki-funnel-checkout-ga4-vide-%C3%A9v%C3%A9nements-e-commerce-manquants-incomplets) **MEP Septembre**\n        - *:bug: fix: \u00e9mettre le funnel checkout GA4 complet* [\\#11980](https://github.com/Wishibam/Ecommerce-sylius/pull/11980)\n        - *:bug: fix: \u00e9mettre add\\_payment\\_info quand l'\u00e9tape de paiement est saut\u00e9e* [\\#12014](https://github.com/Wishibam/Ecommerce-sylius/pull/12014)\n    - [TVO - Les recommandations produits ne remontent aucun produit sur la fiche produit](https://trello.com/c/lw3SYgNG/3926-tvo-les-recommandations-produits-ne-remontent-aucun-produit-sur-la-fiche-produit) **MEP Ao\u00fbt**\n        - *:bug: fix(search): match the indexed color value in recommendations* [\\#12004](https://github.com/Wishibam/Ecommerce-sylius/pull/12004)\n    - [A ESTIMER : Google Shopping Feed : ajouter le Outlet Price en cas de promotion](https://trello.com/c/RnEgL53B/3867-a-estimer-google-shopping-feed-ajouter-le-outlet-price-en-cas-de-promotion) **MEP Ao\u00fbt**\n        - *:sparkles: feat(helsinki): expose the outlet price in the Google Shopping feed* [\\#12020](https://github.com/Wishibam/Ecommerce-sylius/pull/12020)\n    - [\u2615\ufe0f \\[Batavia\\] Frais de retour : \u20ac3,25 \u2192 \u20ac3,95 (et on passe le texte en traduction)](https://trello.com/c/P4vec3cz/3934-%E2%98%95%EF%B8%8F-batavia-frais-de-retour-%E2%82%AC325-%E2%86%92-%E2%82%AC395-et-on-passe-le-texte-en-traduction) **MEP Ao\u00fbt**\n        - *:bug: fix: Batavia return cost 3,95 and move the line to a translation* [\\#12034](https://github.com/Wishibam/Ecommerce-sylius/pull/12034)\n    - [TVO - Changement url de la page marque Millet](https://trello.com/c/8NZBv11v/3952-tvo-changement-url-de-la-page-marque-millet) **MEP Septembre**\n        - *:bug: fix(tvo): rename the Millet merchant page slug from lafuma to millet* [\\#12136](https://github.com/Wishibam/Ecommerce-sylius/pull/12136)\n    - *:bug: fix: render flag emojis as SVG icons, not OS emoji glyphs* [\\#11981](https://github.com/Wishibam/Ecommerce-sylius/pull/11981)\n    - *:bug: fix: apply the flag icon filter to the remaining menu renderings* [\\#11982](https://github.com/Wishibam/Ecommerce-sylius/pull/11982)\n    - *:wrench: chore: bump php\\_codesniffer en 3.13.6 (CVE-2026-67434, CI rouge)* [\\#12008](https://github.com/Wishibam/Ecommerce-sylius/pull/12008)\n    - *:bug: fix: skip Comarch in LaRedoute order import when disabled* [\\#12125](https://github.com/Wishibam/Ecommerce-sylius/pull/12125)", "creation_timestamp": "2026-09-03T08:02:41.999354Z"}, {"uuid": "99e79669-c179-4c1e-8384-74e4a6e86226", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67434", "type": "seen", "source": "https://gist.github.com/jbourdin/40726dbd97dc0b097a6aa294edc1f551", "content": "- **Trello**\n    - [GLOBAL - Email Alerte paiement en erreur](https://trello.com/c/P1DJvjHp/3229-global-email-alerte-paiement-en-erreur) **\ud83c\udf89 A MEP**\n        - *feat(payment): send email notification when payment fails* [\\#10555](https://github.com/Wishibam/Ecommerce-sylius/pull/10555)\n    - [Helsinki : Portail de retour - Sylius - int\u00e9gration front du portail de retour](https://trello.com/c/mhcc7YaC/2401-helsinki-portail-de-retour-sylius-int%C3%A9gration-front-du-portail-de-retour) **\ud83d\ude80Testing BACK / FLUX / CLIENT**\n        - *feat(helsinki): Add return portal to Helsinki order details* [\\#11757](https://github.com/Wishibam/Ecommerce-sylius/pull/11757)\n        - *fix(helsinki): tri-state select-all checkbox on the return request page* [\\#12129](https://github.com/Wishibam/Ecommerce-sylius/pull/12129)\n    - [\u26a0\ufe0fAction prod\u26a0\ufe0f\ud83d\udd14 Refonte TVO : tracking du volet d'alerte \u00ab retour en stock \u00bb](https://trello.com/c/SXyhrSQb/3834-%E2%9A%A0%EF%B8%8Faction-prod%E2%9A%A0%EF%B8%8F%F0%9F%94%94-refonte-tvo-tracking-du-volet-dalerte-retour-en-stock) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: track back-in-stock alert panel usage* [\\#11791](https://github.com/Wishibam/Ecommerce-sylius/pull/11791)\n    - [TVO - Fiche produit - Ajout des blocs \"Mati\u00e8re et entretien\" & \"Caract\u00e9ristiques\"](https://trello.com/c/AbsKmIzk/3633-tvo-fiche-produit-ajout-des-blocs-mati%C3%A8re-et-entretien-caract%C3%A9ristiques) **\ud83c\udf89 A MEP**\n        - *feat(tvo): add Mati\u00e8re et entretien & Caract\u00e9ristiques blocks on PDP* [\\#11812](https://github.com/Wishibam/Ecommerce-sylius/pull/11812)\n    - [\\[Migration\\]\\[A.4.1\\] Internaliser bitbag/wishlist-plugin dans src/Component/Wishlist](https://trello.com/c/U9dQGx1l/3863-migrationa41-internaliser-bitbag-wishlist-plugin-dans-src-component-wishlist) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: internalize bitbag/wishlist-plugin \\[A.4.1\\]* [\\#11856](https://github.com/Wishibam/Ecommerce-sylius/pull/11856)\n    - [\\[Migration\\]\\[A.4.2/A.4.3\\] Internaliser bring & deep-link dans src/Component](https://trello.com/c/RsLN5SNT/3864-migrationa42-a43-internaliser-bring-deep-link-dans-src-component) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: internalize bring & deep-link plugins \\[A.4.2, A.4.3\\]* [\\#11861](https://github.com/Wishibam/Ecommerce-sylius/pull/11861)\n    - [\\[Migration\\]\\[A.5\\] Bumps frontend \u00ab safe \u00bb + suppression des packages morts](https://trello.com/c/vI6k61gt/3873-migrationa5-bumps-frontend-safe-suppression-des-packages-morts) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: bump safe frontend deps + prune dead packages \\[A.5\\]* [\\#11875](https://github.com/Wishibam/Ecommerce-sylius/pull/11875)\n    - [\\[Migration\\]\\[A.6\\] Pr\u00e9paration Doctrine pour DBAL 3 (monkey-patch migrations)](https://trello.com/c/8mdyVMwg/3880-migrationa6-pr%C3%A9paration-doctrine-pour-dbal-3-monkey-patch-migrations) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: replace Doctrine migration monkey-patch for DBAL 3 \\[A.6\\]* [\\#11893](https://github.com/Wishibam/Ecommerce-sylius/pull/11893)\n    - [TVO - Express checkout : adresse tronqu\u00e9e \u2014 nom de rue perdu (Apple Pay line1/line2)](https://trello.com/c/dIrl0I1a/3884-tvo-express-checkout-adresse-tronqu%C3%A9e-nom-de-rue-perdu-apple-pay-line1-line2) **\ud83c\udf89 A MEP**\n        - *:bug: fix: join express checkout wallet address line1/line2 into street* [\\#11914](https://github.com/Wishibam/Ecommerce-sylius/pull/11914)\n    - [\\[P0\\] Express checkout : re-v\u00e9rifier le montant du PaymentIntent au complete](https://trello.com/c/qJdTR9Jc/3885-p0-express-checkout-re-v%C3%A9rifier-le-montant-du-paymentintent-au-complete) **\ud83e\udd16 Testing tech**\n        - *:bug: fix: verify express checkout PaymentIntent amount at completion* [\\#11916](https://github.com/Wishibam/Ecommerce-sylius/pull/11916)\n    - [\\[P0\\] Webhook Stripe : rembourser r\u00e9ellement les charges des commandes refus\u00e9es/annul\u00e9es](https://trello.com/c/fyJeMD3L/3886-p0-webhook-stripe-rembourser-r%C3%A9ellement-les-charges-des-commandes-refus%C3%A9es-annul%C3%A9es) **\ud83e\udd16 Testing tech**\n        - *:bug: fix: refund Stripe charges captured for refused or cancelled orders* [\\#11918](https://github.com/Wishibam/Ecommerce-sylius/pull/11918)\n    - [\\[P1\\] Express checkout : pinner explicitement les wallets autoris\u00e9s (quick win)](https://trello.com/c/tEpmPM9l/3890-p1-express-checkout-pinner-explicitement-les-wallets-autoris%C3%A9s-quick-win) **\ud83e\udd16 Testing tech**\n        - *:bug: fix: restrict express checkout wallets to an explicit allowlist* [\\#11919](https://github.com/Wishibam/Ecommerce-sylius/pull/11919)\n    - [\\[P0\\] Express checkout : commandes \u00e0 fonds captur\u00e9s supprim\u00e9es par la purge des carts + cha\u00eene d'abort morte](https://trello.com/c/1Wo7zGP5/3887-p0-express-checkout-commandes-%C3%A0-fonds-captur%C3%A9s-supprim%C3%A9es-par-la-purge-des-carts-cha%C3%AEne-dabort-morte) **\ud83e\udd16 Testing tech**\n        - *:bug: fix: protect express checkout captured-funds carts from the purge* [\\#11920](https://github.com/Wishibam/Ecommerce-sylius/pull/11920)\n    - [FEAT-0006 \u2014 Regroupement des emails d'annulation d'articles](https://trello.com/c/bBiV4jTE/3415-feat-0006-regroupement-des-emails-dannulation-darticles) **\ud83c\udf89 A MEP**\n        - *:bug: fix: FEAT-0006 cancellation email grouping QA feedback* [\\#11984](https://github.com/Wishibam/Ecommerce-sylius/pull/11984)\n        - *:bug: fix: register order\\_entirely\\_cancelled email template for all projects* [\\#12091](https://github.com/Wishibam/Ecommerce-sylius/pull/12091)\n        - *:bug: fix: send grouped withdrawal confirmations on entirely cancelled orders* [\\#12104](https://github.com/Wishibam/Ecommerce-sylius/pull/12104)\n    - [Min-height pages React](https://trello.com/c/Rti8eFXb/3919-min-height-pages-react) **\ud83c\udf89 A MEP**\n        - *:bug: fix: add min-height on React pages to prevent footer flash* [\\#11987](https://github.com/Wishibam/Ecommerce-sylius/pull/11987)\n    - [SEO - TVO - changement de slug](https://trello.com/c/Gbb2tles/3908-seo-tvo-changement-de-slug) **\ud83c\udf89 A MEP**\n        - *:bug: fix: clean up TVO brand page slugs with 301 redirects* [\\#11988](https://github.com/Wishibam/Ecommerce-sylius/pull/11988)\n    - [\u26a0\ufe0f action preprod/prod \u26a0\ufe0f \ud83d\uded2 Refonte Checkout #1 \u2014 La page Panier change de garde-robe](https://trello.com/c/qxdtlZxk/3851-%E2%9A%A0%EF%B8%8F-action-preprod-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%9B%92-refonte-checkout-1-la-page-panier-change-de-garde-robe) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): cart page QA feedback round* [\\#11990](https://github.com/Wishibam/Ecommerce-sylius/pull/11990)\n    - [\u26a0\ufe0f MEP \u26a0\ufe0f\u2b50 Google Customer Reviews sur TVO \u2014 brancher la machine \u00e0 \u00e9toiles](https://trello.com/c/7JA9u85M/3899-%E2%9A%A0%EF%B8%8F-mep-%E2%9A%A0%EF%B8%8F%E2%AD%90-google-customer-reviews-sur-tvo-brancher-la-machine-%C3%A0-%C3%A9toiles) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: TVO Google Customer Reviews \u2014 GTIN produits sur thank you* [\\#11991](https://github.com/Wishibam/Ecommerce-sylius/pull/11991)\n    - [Fix : TypeError trim() null sur les share descriptions de channel (admin)](https://trello.com/c/o47Ek1Fo/3924-fix-typeerror-trim-null-sur-les-share-descriptions-de-channel-admin) **\ud83e\udd16 Testing tech**\n        - *:bug: fix: guard against null share descriptions in channel setter* [\\#11992](https://github.com/Wishibam/Ecommerce-sylius/pull/11992)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f \ud83d\udce6\ud83c\udf0d Mondial Relay sans fronti\u00e8res \u2014 points relais UE (v1 TVO)](https://trello.com/c/4X0QYlQ5/3918-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%93%A6%F0%9F%8C%8D-mondial-relay-sans-fronti%C3%A8res-points-relais-ue-v1-tvo) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat(mondial-relay): relay search follows the buyer's country* [\\#11994](https://github.com/Wishibam/Ecommerce-sylius/pull/11994)\n    - [\ud83d\udccd Refonte Checkout \u2014 La suggestion d'adresse qui fait mouche](https://trello.com/c/vF0T1FZU/3860-%F0%9F%93%8D-refonte-checkout-la-suggestion-dadresse-qui-fait-mouche) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): address suggestion QA feedback round* [\\#11995](https://github.com/Wishibam/Ecommerce-sylius/pull/11995)\n        - *:bug: fix(tvo): keep the manual phone flag choice made on an empty field* [\\#12058](https://github.com/Wishibam/Ecommerce-sylius/pull/12058)\n    - [\ud83c\udf5e Refonte Checkout \u2014 Des toasts tout chauds pour les messages syst\u00e8me](https://trello.com/c/N70pstGO/3861-%F0%9F%8D%9E-refonte-checkout-des-toasts-tout-chauds-pour-les-messages-syst%C3%A8me) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): checkout toasts QA feedback round* [\\#11996](https://github.com/Wishibam/Ecommerce-sylius/pull/11996)\n    - [\ud83d\udd00 Refonte TVO : le variant s\u00e9lectionn\u00e9 saute en 1re position au lieu de rester \u00e0 sa place](https://trello.com/c/vQH5uxHz/3904-%F0%9F%94%80-refonte-tvo-le-variant-s%C3%A9lectionn%C3%A9-saute-en-1re-position-au-lieu-de-rester-%C3%A0-sa-place) **\ud83c\udf89 A MEP**\n        - *:bug: fix: keep option values in place on overflowing variant axis* [\\#11998](https://github.com/Wishibam/Ecommerce-sylius/pull/11998)\n    - [Helsinki preprod (peut \u00eatre ailleurs) - Commande C&C cr\u00e9e plusieurs shipments.](https://trello.com/c/Dlk8WpIg/3895-helsinki-preprod-peut-%C3%AAtre-ailleurs-commande-cc-cr%C3%A9e-plusieurs-shipments) **\ud83c\udf89 A MEP**\n        - *:bug: fix: remove phantom shipment block from account order page* [\\#11999](https://github.com/Wishibam/Ecommerce-sylius/pull/11999)\n    - [TVO- mail order\\_open\\_return\\_withdrawn -remplacement de tag](https://trello.com/c/NK5CnCM2/3883-tvo-mail-orderopenreturnwithdrawn-remplacement-de-tag) **\ud83c\udf89 A MEP**\n        - *\ud83d\udc1b fix: orange \"return in progress\" badge on TVO withdrawal email* [\\#12000](https://github.com/Wishibam/Ecommerce-sylius/pull/12000)\n    - [SEO - ALL - Meta Title](https://trello.com/c/QDbDIPTu/3909-seo-all-meta-title) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: add dedicated Meta Title for CMS pages* [\\#12001](https://github.com/Wishibam/Ecommerce-sylius/pull/12001)\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\ude9a Refonte Checkout #3 \u2014 Le Mode de livraison prend la route](https://trello.com/c/NDSNOimu/3854-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%9A%9A-refonte-checkout-3-le-mode-de-livraison-prend-la-route) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat(tvo): React checkout select shipping step (P3)* [\\#12011](https://github.com/Wishibam/Ecommerce-sylius/pull/12011)\n        - *:bug: fix(tvo): checkout QA feedback of August 18-19* [\\#12119](https://github.com/Wishibam/Ecommerce-sylius/pull/12119)\n    - [\u2709\ufe0f \\[TVO V2\\] Login & inscription : un seul email pour les gouverner tous](https://trello.com/c/Eml7o2An/3912-%E2%9C%89%EF%B8%8F-tvo-v2-login-inscription-un-seul-email-pour-les-gouverner-tous) **\ud83e\udd13 Testing**\n        - *:sparkles: feat: TVO email-first React login & registration flow* [\\#12015](https://github.com/Wishibam/Ecommerce-sylius/pull/12015)\n        - *:bug: fix(tvo): align the login page footer with the checkout footer* [\\#12133](https://github.com/Wishibam/Ecommerce-sylius/pull/12133)\n    - [Helsinki - Correction bug d'affichage en finnois en version mobile](https://trello.com/c/f9V6mA6z/3686-helsinki-correction-bug-daffichage-en-finnois-en-version-mobile) **\ud83c\udf89 A MEP**\n        - *:bug: fix: reduce Helsinki posts carousel title on mobile* [\\#12017](https://github.com/Wishibam/Ecommerce-sylius/pull/12017)\n    - [\ud83d\udcb8 TVO \u2014 Filtre par niveau de remise : que la d\u00e9marque soit avec vous \u2702\ufe0f](https://trello.com/c/FvSWlx14/3877-%F0%9F%92%B8-tvo-filtre-par-niveau-de-remise-que-la-d%C3%A9marque-soit-avec-vous-%E2%9C%82%EF%B8%8F) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: TVO minimum discount percentage filter on product lists* [\\#12018](https://github.com/Wishibam/Ecommerce-sylius/pull/12018)\n    - [\ud83c\udfbd \\[IS\\] Footer : \u00ab Notre accompagnement \u00bb devient \u00ab Nos services \u00bb et raccroche son lien](https://trello.com/c/H2X0XtqH/3932-%F0%9F%8E%BD-is-footer-notre-accompagnement-devient-nos-services-et-raccroche-son-lien) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: rename the Intersport footer column to \u00ab Nos services \u00bb and unlink its title* [\\#12026](https://github.com/Wishibam/Ecommerce-sylius/pull/12026)\n        - *:rewind: revert: Intersport footer \u00ab Nos services \u00bb (wrong target branch)* [\\#12037](https://github.com/Wishibam/Ecommerce-sylius/pull/12037)\n    - [Batavia - Probl\u00e8me sur l'affichage des variations](https://trello.com/c/MY6aNjLj/3931-batavia-probl%C3%A8me-sur-laffichage-des-variations) **\ud83c\udf89 A MEP**\n        - *:bug: fix: deep-link Batavia PLP cards to the displayed color variant* [\\#12027](https://github.com/Wishibam/Ecommerce-sylius/pull/12027)\n    - [Batavia \u2014 Mails \u00ab produit indisponible \u00bb non re\u00e7us par les clients](https://trello.com/c/YLHFxnVs/3933-batavia-mails-produit-indisponible-non-re%C3%A7us-par-les-clients) **\ud83c\udf89 A MEP**\n        - *:bug: fix: validate admin email templates and log real send outcomes* [\\#12035](https://github.com/Wishibam/Ecommerce-sylius/pull/12035)\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\udcb3 Refonte Checkout #4 \u2014 Le Mode de paiement passe \u00e0 la caisse](https://trello.com/c/vDcvKX88/3855-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%92%B3-refonte-checkout-4-le-mode-de-paiement-passe-%C3%A0-la-caisse) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat(tvo): rebuild the checkout payment step and success page in React* [\\#12051](https://github.com/Wishibam/Ecommerce-sylius/pull/12051)\n    - [Intersport - Bug d'affichage images box produit](https://trello.com/c/mOO6EBx1/3936-intersport-bug-daffichage-images-box-produit) **\ud83c\udf89 A MEP**\n        - *:bug: \\[via\\] fix: styles mobiles des pages mot de passe oubli\u00e9/reset* [\\#12055](https://github.com/Wishibam/Ecommerce-sylius/pull/12055)\n    - [\ud83e\ude97 VIA \u2014 Le filtre Cat\u00e9gorie s'ouvre tout seul dans les descentes : on le veut ferm\u00e9 au chargement](https://trello.com/c/GMHVWZe2/3938-%F0%9F%AA%97-via-le-filtre-cat%C3%A9gorie-souvre-tout-seul-dans-les-descentes-on-le-veut-ferm%C3%A9-au-chargement) **\ud83c\udf89 A MEP**\n        - *:bug: \\[via\\] fix: le filtre Cat\u00e9gorie reste ferm\u00e9 au chargement des descentes* [\\#12059](https://github.com/Wishibam/Ecommerce-sylius/pull/12059)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f Feed : Ajouter le flux facebook TVO](https://trello.com/c/iXjTokqz/3937-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-feed-ajouter-le-flux-facebook-tvo) **\ud83e\udd16 Testing tech**\n        - *:sparkles: feat: porter le flux facebook\\_catalog vers le nouveau composant* [\\#12060](https://github.com/Wishibam/Ecommerce-sylius/pull/12060)\n    - [\\[Migration\\]\\[B.1\\] PHP 8.2 \u2192 8.3](https://trello.com/c/Slm1Q5n7/3940-migrationb1-php-82-%E2%86%92-83) **\ud83d\ude80 To Do Vincent**\n        - *:wrench: chore: run the test suite on PHP 8.2 and 8.3 \\[B.1\\]* [\\#12063](https://github.com/Wishibam/Ecommerce-sylius/pull/12063)\n        - *:bug: fix(deploy): restart PHP-FPM via systemd glob instead of hardcoded 8.2* [\\#12066](https://github.com/Wishibam/Ecommerce-sylius/pull/12066)\n        - *:wrench: chore: run the dual PHP matrix on the tests job only \\[B.1\\]* [\\#12068](https://github.com/Wishibam/Ecommerce-sylius/pull/12068)\n    - [\\[Migration\\]\\[B.2\\] Sylius 1.12 \u2192 1.13 (DBAL 3)](https://trello.com/c/huA0VNU9/3941-migrationb2-sylius-112-%E2%86%92-113-dbal-3) **\ud83d\ude80 To Do Vincent**\n        - *:wrench: chore(doctrine): drop the last getSchemaManager() call for DBAL 3/4 \\[B.2 P.1\\]* [\\#12071](https://github.com/Wishibam/Ecommerce-sylius/pull/12071)\n        - *:white\\_check\\_mark: test: characterize every state machine graph wiring \\[B.2 P.2\\]* [\\#12074](https://github.com/Wishibam/Ecommerce-sylius/pull/12074)\n        - *:recycle: refactor: state machine abstraction infra + pilot call site \\[B.2 P.3.1\\]* [\\#12089](https://github.com/Wishibam/Ecommerce-sylius/pull/12089)\n        - *:recycle: refactor: migrate the mechanical state machine call sites \\[B.2 P.3.2\\]* [\\#12094](https://github.com/Wishibam/Ecommerce-sylius/pull/12094)\n        - *:recycle: refactor: migrate the structural state machine call sites \\[B.2 P.3.3\\]* [\\#12098](https://github.com/Wishibam/Ecommerce-sylius/pull/12098)\n        - *:wrench: chore: bump symfony/flex 1 to 2 \\[B.2 P.4\\]* [\\#12100](https://github.com/Wishibam/Ecommerce-sylius/pull/12100)\n    - [MA - Pas de message d'erreur lorsque l'on n'arrive pas \u00e0 se connecter \u00e0 son compte client](https://trello.com/c/fQ9vwTD0/3684-ma-pas-de-message-derreur-lorsque-lon-narrive-pas-%C3%A0-se-connecter-%C3%A0-son-compte-client) **\ud83c\udf89 A MEP**\n        - *:bug: fix: display an error message on failed login on Marques Avenue* [\\#12072](https://github.com/Wishibam/Ecommerce-sylius/pull/12072)\n    - [Fix : \ufeff\ufefftransmettre le consentement newsletter \u00e0 Coniq \u00e0 l'inscription](https://trello.com/c/mShGQBUK/3943-fix-transmettre-le-consentement-newsletter-%C3%A0-coniq-%C3%A0-linscription) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: transmettre le consentement newsletter \u00e0 Coniq \u00e0 l'inscription* [\\#12076](https://github.com/Wishibam/Ecommerce-sylius/pull/12076)\n        - *:bug: fix: consentement newsletter Coniq par canal \u00e0 l'inscription* [\\#12105](https://github.com/Wishibam/Ecommerce-sylius/pull/12105)\n    - [TVO - Bloc caract\u00e9ristiques : Attribut genre et ean](https://trello.com/c/MwYdlurp/3945-tvo-bloc-caract%C3%A9ristiques-attribut-genre-et-ean) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): localize gender and drop EAN in the characteristics block* [\\#12112](https://github.com/Wishibam/Ecommerce-sylius/pull/12112)\n    - [Page de confirmation de commande - N\u00b0 de commande sylius plut\u00f4t que MP](https://trello.com/c/bUrAEDyS/3944-page-de-confirmation-de-commande-n-de-commande-sylius-plut%C3%B4t-que-mp) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): align the thank-you order number with the email* [\\#12114](https://github.com/Wishibam/Ecommerce-sylius/pull/12114)\n    - [TVO \u2014 Tracking des mails de relance panier (taux d'ouverture / clic / CA)](https://trello.com/c/cyTNgF1i/3947-tvo-tracking-des-mails-de-relance-panier-taux-douverture-clic-ca) **\ud83e\udd13 Testing**\n        - *:sparkles: feat(tvo, all): track abandoned cart reminder emails* [\\#12118](https://github.com/Wishibam/Ecommerce-sylius/pull/12118)\n    - [Bug : Mail d'annulation quand validation de retour](https://trello.com/c/Zh0QOdKa/3950-bug-mail-dannulation-quand-validation-de-retour) **\ud83c\udf89 A MEP**\n        - *:bug: fix: skip cancellation email when cancel follows a validated return* [\\#12122](https://github.com/Wishibam/Ecommerce-sylius/pull/12122)\n        - *:bug: fix: group return confirmation emails to fix stale VALID\u00c9 tags* [\\#12131](https://github.com/Wishibam/Ecommerce-sylius/pull/12131)\n    - [FACTURATION - Template mail : cr\u00e9ation de variable](https://trello.com/c/GQLEqISq/2508-facturation-template-mail-cr%C3%A9ation-de-variable) **\u2600\ufe0fIn review**\n        - *feat(email): expose the invoice table as an invoiceResume variable* [\\#12143](https://github.com/Wishibam/Ecommerce-sylius/pull/12143)\n \n- **Misc**\n    - *:sparkles: feat: PushDispatcher + adaptateur FCM (push app TVO)* [\\#11917](https://github.com/Wishibam/Ecommerce-sylius/pull/11917)\n    - *style(withdrawal): make the withdrawal button theme-colored and not f\u2026* [\\#11951](https://github.com/Wishibam/Ecommerce-sylius/pull/11951)\n    - *:zap: perf: Batavia PLP \u2014 ES result cache, key batching, menu cache* [\\#11963](https://github.com/Wishibam/Ecommerce-sylius/pull/11963)\n    - *:wrench: chore: outillage pour worktrees parall\u00e8les (front isol\u00e9 par projet)* [\\#11986](https://github.com/Wishibam/Ecommerce-sylius/pull/11986)\n    - *:sparkles: feat: push app TVO \u2014 envoi asynchrone + badge (3.A.5 + 3.A.6)* [\\#12022](https://github.com/Wishibam/Ecommerce-sylius/pull/12022)\n    - *:sparkles: feat: badge unreadPushCount de bout en bout (app TVO)* [\\#12025](https://github.com/Wishibam/Ecommerce-sylius/pull/12025)\n    - *:sparkles: feat: compteur badge dans data des push (app TVO)* [\\#12028](https://github.com/Wishibam/Ecommerce-sylius/pull/12028)\n    - *:sparkles: feat: push \u00ab commande confirm\u00e9e \u00bb (app TVO)* [\\#12031](https://github.com/Wishibam/Ecommerce-sylius/pull/12031)\n    - *:sparkles: feat: push \u00ab commande exp\u00e9di\u00e9e \u00bb (app TVO)* [\\#12040](https://github.com/Wishibam/Ecommerce-sylius/pull/12040)\n    - *feat(push): notification de remboursement de commande (TVO 3.B.3)* [\\#12041](https://github.com/Wishibam/Ecommerce-sylius/pull/12041)\n    - *fix(push): durcir l'envoi FCM \u2014 timeouts born\u00e9s + retry effectif (TVO 3.A.7)* [\\#12042](https://github.com/Wishibam/Ecommerce-sylius/pull/12042)\n    - *test(featured-content): d\u00e9-flakifier testProgramDisableDelay (tol\u00e9rance sur le d\u00e9lai)* [\\#12044](https://github.com/Wishibam/Ecommerce-sylius/pull/12044)\n    - *feat(push): notification de retour en stock (TVO 3.B.4)* [\\#12045](https://github.com/Wishibam/Ecommerce-sylius/pull/12045)\n    - *feat(push): notification de baisse de prix wishlist (TVO 3.B.5)* [\\#12049](https://github.com/Wishibam/Ecommerce-sylius/pull/12049)\n    - *:bug: fix(megamenu): \u00e9largir le lien \u00e0 2048 caract\u00e8res* [\\#12050](https://github.com/Wishibam/Ecommerce-sylius/pull/12050)\n    - *feat(push): relance push des paniers abandonn\u00e9s (TVO 3.B.6)* [\\#12053](https://github.com/Wishibam/Ecommerce-sylius/pull/12053)\n    - *feat(deeplink): AASA de la nouvelle app TVO \u2014 Universal Links iOS (TVO 4.1)* [\\#12064](https://github.com/Wishibam/Ecommerce-sylius/pull/12064)\n    - *feat(deeplink): assetlinks.json de la nouvelle app TVO \u2014 App Links Android (TVO 4.2)* [\\#12065](https://github.com/Wishibam/Ecommerce-sylius/pull/12065)\n    - *:bug: fix: complete payments stuck by Stripe webhook/checkout race* [\\#12075](https://github.com/Wishibam/Ecommerce-sylius/pull/12075)\n    - *:bug: fix: dedup order\\_confirmation per order to stop double send* [\\#12101](https://github.com/Wishibam/Ecommerce-sylius/pull/12101)\n    - *:bug: fix: pin the fixtures channel default tax zone* [\\#12106](https://github.com/Wishibam/Ecommerce-sylius/pull/12106)\n    - *:wrench: chore: bump webfactory/ssh-agent to v0.9.1* [\\#12120](https://github.com/Wishibam/Ecommerce-sylius/pull/12120)\n    - *fix(coniq): stop Coniq errors from blocking the to\\_ship transition* [\\#12134](https://github.com/Wishibam/Ecommerce-sylius/pull/12134)\n    - *Fix/coniq swallow poisons doctrine transaction* [\\#12138](https://github.com/Wishibam/Ecommerce-sylius/pull/12138)\n    - *:wrench: chore: merge master into develop* [\\#12144](https://github.com/Wishibam/Ecommerce-sylius/pull/12144)\n \n- **D\u00e9j\u00e0 en production**\n    - [\\[Migration\\]\\[A.2\\] D\u00e9mant\u00e8lement Setono Analytics + Tag-Bag](https://trello.com/c/uJN0Gkiz/3856-migrationa2-d%C3%A9mant%C3%A8lement-setono-analytics-tag-bag) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore(migration): internalize setono analytics + tag-bag as src/Component \\[A.2\\]* [\\#11846](https://github.com/Wishibam/Ecommerce-sylius/pull/11846)\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\udc1b Fix r\u00e9indexation ES bloqu\u00e9e \u2014 \u00ab immense term \u00bb sur attribut trop long (Intersport)](https://trello.com/c/iD6idW0v/3915-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%90%9B-fix-r%C3%A9indexation-es-bloqu%C3%A9e-immense-term-sur-attribut-trop-long-intersport) **MEP Ao\u00fbt**\n        - *:bug: fix: r\u00e9indexation ES bloqu\u00e9e par un attribut trop long (immense term)* [\\#11972](https://github.com/Wishibam/Ecommerce-sylius/pull/11972)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f \u203c\ufe0f Nouveau Feeds - Faire tourner tous les nouveaux feeds sur toutes les preprods/prods](https://trello.com/c/Kr8UhDAv/3910-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-%EF%B8%8F-nouveau-feeds-faire-tourner-tous-les-nouveaux-feeds-sur-toutes-les-preprods-prods) **\ud83e\udee1 To Do JC**\n        - *:sparkles: feat: drive-to-store feeds parity with legacy Setono* [\\#11979](https://github.com/Wishibam/Ecommerce-sylius/pull/11979)\n    - [Helsinki \u2014 Funnel checkout GA4 vide : \u00e9v\u00e9nements e-commerce manquants/incomplets](https://trello.com/c/j0yQGSFm/3921-helsinki-funnel-checkout-ga4-vide-%C3%A9v%C3%A9nements-e-commerce-manquants-incomplets) **MEP Septembre**\n        - *:bug: fix: \u00e9mettre le funnel checkout GA4 complet* [\\#11980](https://github.com/Wishibam/Ecommerce-sylius/pull/11980)\n        - *:bug: fix: \u00e9mettre add\\_payment\\_info quand l'\u00e9tape de paiement est saut\u00e9e* [\\#12014](https://github.com/Wishibam/Ecommerce-sylius/pull/12014)\n    - [TVO - Les recommandations produits ne remontent aucun produit sur la fiche produit](https://trello.com/c/lw3SYgNG/3926-tvo-les-recommandations-produits-ne-remontent-aucun-produit-sur-la-fiche-produit) **MEP Ao\u00fbt**\n        - *:bug: fix(search): match the indexed color value in recommendations* [\\#12004](https://github.com/Wishibam/Ecommerce-sylius/pull/12004)\n    - [A ESTIMER : Google Shopping Feed : ajouter le Outlet Price en cas de promotion](https://trello.com/c/RnEgL53B/3867-a-estimer-google-shopping-feed-ajouter-le-outlet-price-en-cas-de-promotion) **MEP Ao\u00fbt**\n        - *:sparkles: feat(helsinki): expose the outlet price in the Google Shopping feed* [\\#12020](https://github.com/Wishibam/Ecommerce-sylius/pull/12020)\n    - [\u2615\ufe0f \\[Batavia\\] Frais de retour : \u20ac3,25 \u2192 \u20ac3,95 (et on passe le texte en traduction)](https://trello.com/c/P4vec3cz/3934-%E2%98%95%EF%B8%8F-batavia-frais-de-retour-%E2%82%AC325-%E2%86%92-%E2%82%AC395-et-on-passe-le-texte-en-traduction) **MEP Ao\u00fbt**\n        - *:bug: fix: Batavia return cost 3,95 and move the line to a translation* [\\#12034](https://github.com/Wishibam/Ecommerce-sylius/pull/12034)\n    - [TVO - Changement url de la page marque Millet](https://trello.com/c/8NZBv11v/3952-tvo-changement-url-de-la-page-marque-millet) **MEP Septembre**\n        - *:bug: fix(tvo): rename the Millet merchant page slug from lafuma to millet* [\\#12136](https://github.com/Wishibam/Ecommerce-sylius/pull/12136)\n    - *:bug: fix: render flag emojis as SVG icons, not OS emoji glyphs* [\\#11981](https://github.com/Wishibam/Ecommerce-sylius/pull/11981)\n    - *:bug: fix: apply the flag icon filter to the remaining menu renderings* [\\#11982](https://github.com/Wishibam/Ecommerce-sylius/pull/11982)\n    - *:wrench: chore: bump php\\_codesniffer en 3.13.6 (CVE-2026-67434, CI rouge)* [\\#12008](https://github.com/Wishibam/Ecommerce-sylius/pull/12008)\n    - *:bug: fix: skip Comarch in LaRedoute order import when disabled* [\\#12125](https://github.com/Wishibam/Ecommerce-sylius/pull/12125)", "creation_timestamp": "2026-09-03T12:27:02.449081Z"}, {"uuid": "f558fad4-2166-4d39-b510-b3a2bd29ace0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67434", "type": "seen", "source": "https://gist.github.com/FR-Flo/cdb6c1578002fa5c20605d26c9477fdf", "content": "## \ud83d\udd17 Companion release\n\nThis release ships alongside the **Marketplace-client (frontend)** release PR:\n\n- https://github.com/Wishibam/Marketplace-client/pull/4256\n\n- **Trello**\n    - [Attributs required par cat\u00e9gorie](https://trello.com/c/2loCszpt/1854-attributs-required-par-cat%C3%A9gorie) **\ud83e\udd73Testing**\n        - *Feat: Makes attributes required or not per categories* [\\#7474](https://github.com/Wishibam/Marketplace-api/pull/7474)\n        - *fix(attributes): stop recreating existing attribute\\_category rows on PUT* [\\#7863](https://github.com/Wishibam/Marketplace-api/pull/7863)\n    - [\ud83d\udfe2 Int\u00e9gration des fanions promotionnels \u2014 Ajout image au tag de taxon (MP) (\u00e9volution n\u00b011)](https://trello.com/c/fNNkiR1c/2405-%F0%9F%9F%A2-int%C3%A9gration-des-fanions-promotionnels-ajout-image-au-tag-de-taxon-mp-%C3%A9volution-n11) **\ud83e\udd75 Retour de test**\n        - *:sparkles: feat: fanions de taxon \u2014 images desktop/mobile (MP-api)* [\\#7617](https://github.com/Wishibam/Marketplace-api/pull/7617)\n    - [Retours dashboard - Ajouter un tableau top 10 des marques les plus demand\u00e9s en alerte stock (V2)](https://trello.com/c/JgADJ95G/2474-retours-dashboard-ajouter-un-tableau-top-10-des-marques-les-plus-demand%C3%A9s-en-alerte-stock-v2) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *feat(dashboard): add top 10 retailer stock alerts endpoint* [\\#7751](https://github.com/Wishibam/Marketplace-api/pull/7751)\n        - *fix(dashboard): v2 remove retailer logo* [\\#7860](https://github.com/Wishibam/Marketplace-api/pull/7860)\n    - [MP - Cr\u00e9ation / modification m\u00e9thode de livraison - impossible de save](https://trello.com/c/Ud1DRxgj/2407-mp-cr%C3%A9ation-modification-m%C3%A9thode-de-livraison-impossible-de-save) **\u2600\ufe0fIn review**\n        - *:bug: MP Fix Dpd class, file and discriminator name* [\\#7757](https://github.com/Wishibam/Marketplace-api/pull/7757)\n    - [Ticket de caisse - pb de cache](https://trello.com/c/EwgktbXZ/2493-ticket-de-caisse-pb-de-cache) **\ud83c\udf89 Reviewed pas Merg\u00e9**\n        - *:bug: fix: reset receipt cache between export Messenger messages* [\\#7791](https://github.com/Wishibam/Marketplace-api/pull/7791)\n    - [\ud83d\ude84 Commande exp\u00e9di\u00e9e : l'interface part trop vite et garde l'ancien statut](https://trello.com/c/6QmFnpyb/2418-%F0%9F%9A%84-commande-exp%C3%A9di%C3%A9e-linterface-part-trop-vite-et-garde-lancien-statut) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *:sparkles: OMS order, add \"inProcessing\" flag* [\\#7797](https://github.com/Wishibam/Marketplace-api/pull/7797)\n        - *:bug: OMS processingAt message keep showing on reserved shipment after split* [\\#7848](https://github.com/Wishibam/Marketplace-api/pull/7848)\n    - [MP - Sur le marchand (listing & d\u00e9tails), mettre un lien qui redirige directement vers le marchand en front](https://trello.com/c/Z136lbnm/1296-mp-sur-le-marchand-listing-d%C3%A9tails-mettre-un-lien-qui-redirige-directement-vers-le-marchand-en-front) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *:sparkles: Add retailer eshop link* [\\#7822](https://github.com/Wishibam/Marketplace-api/pull/7822)\n    - [Tag - Ajout du champ \"Visibilit\u00e9\" c\u00f4t\u00e9 MP](https://trello.com/c/zPFP31T9/2398-tag-ajout-du-champ-visibilit%C3%A9-c%C3%B4t%C3%A9-mp) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *:sparkles: Add tag visibility field to retailer corner and category* [\\#7831](https://github.com/Wishibam/Marketplace-api/pull/7831)\n    - [Nouvelle vue Enseigne](https://trello.com/c/AVsRvxLu/2494-nouvelle-vue-enseigne) **\ud83d\udc8e\ud83d\udc8e\ud83d\udc8edoing**\n        - *:sparkles: OMS New enseigne view (front only) no interaction* [\\#7846](https://github.com/Wishibam/Marketplace-api/pull/7846)\n    - [VIA - Chasin - nouvelle API stock](https://trello.com/c/ZxWVFDDZ/2472-via-chasin-nouvelle-api-stock) **\ud83d\ude80Testing BACK / FLUX / CLIENT**\n        - *feat(feedTransformer): bataviastad chasin stock feed* [\\#7853](https://github.com/Wishibam/Marketplace-api/pull/7853)\n    - [Dashboard - Rendre les \u00e9l\u00e9ments clickables](https://trello.com/c/kkX44d75/2506-dashboard-rendre-les-%C3%A9l%C3%A9ments-clickables) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *feat(dashboard): v2 click on row actions* [\\#7868](https://github.com/Wishibam/Marketplace-api/pull/7868)\n    - [FACTURATION - Retours templates](https://trello.com/c/FC1bOPBb/2507-facturation-retours-templates) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *Fix/invoice items pagination* [\\#7872](https://github.com/Wishibam/Marketplace-api/pull/7872)\n \n- **Misc**\n    - *feat(shipping-method): expose the default return method flag on the API* [\\#7793](https://github.com/Wishibam/Marketplace-api/pull/7793)\n    - *:sparkles: feat: resync a single retailer in the live merchandising indices* [\\#7808](https://github.com/Wishibam/Marketplace-api/pull/7808)\n    - *:bug: WMS Log Message Container identifier* [\\#7810](https://github.com/Wishibam/Marketplace-api/pull/7810)\n    - *:bug: fix: resync-retailer scroll rejected by ES8 (size param)* [\\#7820](https://github.com/Wishibam/Marketplace-api/pull/7820)\n    - *feat(mcp): add MCP server walking skeleton with list\\_organizations* [\\#7823](https://github.com/Wishibam/Marketplace-api/pull/7823)\n    - *refactor(mcp): extract logic from ImportAction, RetailerNormalizer and RankProduct* [\\#7824](https://github.com/Wishibam/Marketplace-api/pull/7824)\n    - *:sparkles: feat: compute product scoring on the fly (service + ES)* [\\#7825](https://github.com/Wishibam/Marketplace-api/pull/7825)\n    - *:sparkles: feat: raise the ES pagination window beyond 10k documents* [\\#7826](https://github.com/Wishibam/Marketplace-api/pull/7826)\n    - *feat(merchandising): supporter les tris du listing produit sur POST /merchandising* [\\#7827](https://github.com/Wishibam/Marketplace-api/pull/7827)\n    - *feat(merchandising): actions de masse asynchrones avec lock par organisation* [\\#7828](https://github.com/Wishibam/Marketplace-api/pull/7828)\n    - *Merge feat/mcp-walking-skeleton (simulate #7823 merge)* [\\#7832](https://github.com/Wishibam/Marketplace-api/pull/7832)\n    - *feat(product-list): pipeline batch pour les actions de masse des listes produits* [\\#7833](https://github.com/Wishibam/Marketplace-api/pull/7833)\n    - *feat(mcp): Add OAuth discovery* [\\#7834](https://github.com/Wishibam/Marketplace-api/pull/7834)\n    - *:arrow\\_up: deps: bump mcp/sdk to 0.7.1 (CVE-2026-53965)* [\\#7838](https://github.com/Wishibam/Marketplace-api/pull/7838)\n    - *Disabled MCP by default* [\\#7840](https://github.com/Wishibam/Marketplace-api/pull/7840)\n    - *:bug: fix: guard against null option name/value in CSV export* [\\#7841](https://github.com/Wishibam/Marketplace-api/pull/7841)\n    - *:bug: fix: stream line item CSV export to fix memory exhaustion* [\\#7842](https://github.com/Wishibam/Marketplace-api/pull/7842)\n    - *:arrow\\_up: deps: patch sodium\\_compat Ed25519 key validation vulnerability* [\\#7843](https://github.com/Wishibam/Marketplace-api/pull/7843)\n    - *fix: attribut required category* [\\#7851](https://github.com/Wishibam/Marketplace-api/pull/7851)\n    - *fix: batch action view* [\\#7852](https://github.com/Wishibam/Marketplace-api/pull/7852)\n    - *:bug: fix: batch the retailers list health queries (N+1)* [\\#7854](https://github.com/Wishibam/Marketplace-api/pull/7854)\n    - *:bug: fix: stop hydrating import report errors on retailers list* [\\#7855](https://github.com/Wishibam/Marketplace-api/pull/7855)\n    - *fix(import): stop importing translations in locales missing from the organization* [\\#7856](https://github.com/Wishibam/Marketplace-api/pull/7856)\n    - *feat(merchandising): filtres stock, diffusion limit\u00e9e et prix* [\\#7857](https://github.com/Wishibam/Marketplace-api/pull/7857)\n    - *:bug: fix: index option values in the organization locale, not the current one* [\\#7858](https://github.com/Wishibam/Marketplace-api/pull/7858)\n    - *feat(merchandising): filtres Vente et Scoring, fix du filtre options sur valeurs mapp\u00e9es* [\\#7859](https://github.com/Wishibam/Marketplace-api/pull/7859)\n    - *:sparkles: feat: Index push-error flag on ES product documents* [\\#7861](https://github.com/Wishibam/Marketplace-api/pull/7861)\n    - *fix(attributes): require a non-empty value to satisfy a required attr\u2026* [\\#7864](https://github.com/Wishibam/Marketplace-api/pull/7864)\n    - *:bug: fix: invalidate missing-mapping cache after retailer snapshot* [\\#7871](https://github.com/Wishibam/Marketplace-api/pull/7871)\n    - *fix: remove useless sync sftp command with alwaysdata* [\\#7875](https://github.com/Wishibam/Marketplace-api/pull/7875)\n    - *:wrench: chore: remove leftover Heroku config and HireFire* [\\#7877](https://github.com/Wishibam/Marketplace-api/pull/7877)\n \n- **D\u00e9j\u00e0 en production**\n    - *:arrow\\_up: deps: bump php\\_codesniffer to 4.0.4 (CVE-2026-67434)* [\\#7817](https://github.com/Wishibam/Marketplace-api/pull/7817)\n    - *feat: allow max product variation at 380* [\\#7829](https://github.com/Wishibam/Marketplace-api/pull/7829)\n    - *:bug: fix: stop gating unmapped counters on product validity* [\\#7835](https://github.com/Wishibam/Marketplace-api/pull/7835)\n    - *:bug: fix: repair missing-mapping counters behind the retailer list icon* [\\#7837](https://github.com/Wishibam/Marketplace-api/pull/7837)\n    - *fix(dashboard): top retailer when members has multiple retailers* [\\#7865](https://github.com/Wishibam/Marketplace-api/pull/7865)\n    - *:sparkles: feat: add dry-run and limit options to request-missing-invoices* [\\#7866](https://github.com/Wishibam/Marketplace-api/pull/7866)\n\n## POST MEP\n\n### [PR #7826](https://github.com/Wishibam/Marketplace-api/pull/7826) \u2014 :sparkles: feat: raise the ES pagination window beyond 10k documents\n\n```\n  curl -X PUT \"http://localhost:9200/prod_product_*/_settings\" -H 'Content-Type: application/json' -d '{\"index\":{\"max_result_window\":200000}}'\n  curl -X PUT \"http://localhost:9200/prod_variation_*/_settings\" -H 'Content-Type: application/json' -d '{\"index\":{\"max_result_window\":500000}}'\n\n  V\u00e9rifier :\n  curl \"http://localhost:9200/prod_product_*/_settings/index.max_result_window?flat_settings\"\n  curl \"http://localhost:9200/prod_variation_*/_settings/index.max_result_window?flat_settings\"\n```\n\n### [PR #7828](https://github.com/Wishibam/Marketplace-api/pull/7828) \u2014 feat(merchandising): actions de masse asynchrones avec lock par organisation\n\n - ansible en prod \u00e7a https://github.com/Wishibam/Infrastructure/pull/467\n\n### [PR #7853](https://github.com/Wishibam/Marketplace-api/pull/7853) \u2014 feat(feedTransformer): bataviastad chasin stock feed\n\nD\u00e9ployer cette PR sur la PROD MP -> https://github.com/Wishibam/Infrastructure/pull/495\n\n### [PR #7859](https://github.com/Wishibam/Marketplace-api/pull/7859) \u2014 feat(merchandising): filtres Vente et Scoring, fix du filtre options sur valeurs mapp\u00e9es\n\n - Ajouter les mappings manquants `console wishibam:merchandising:update-mappings`\n - R\u00e9indexer quand possible `console wishibam:merchandising:build-index`\n", "creation_timestamp": "2026-09-03T15:04:25.866238Z"}, {"uuid": "cf9be183-ba4a-49d3-ac46-8f3066a4abd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67434", "type": "seen", "source": "https://gist.github.com/FR-Flo/f775ce5075a476e3404ee4217fd5619b", "content": "## \ud83d\udd17 Companion release\n\nThis release ships alongside the **Marketplace-client (frontend)** release PR:\n\n- https://github.com/Wishibam/Marketplace-client/pull/4256\n\n- **Trello**\n    - [Attributs required par cat\u00e9gorie](https://trello.com/c/2loCszpt/1854-attributs-required-par-cat%C3%A9gorie) **\ud83e\udd73Testing**\n        - *Feat: Makes attributes required or not per categories* [\\#7474](https://github.com/Wishibam/Marketplace-api/pull/7474)\n        - *fix(attributes): stop recreating existing attribute\\_category rows on PUT* [\\#7863](https://github.com/Wishibam/Marketplace-api/pull/7863)\n    - [\ud83d\udfe2 Int\u00e9gration des fanions promotionnels \u2014 Ajout image au tag de taxon (MP) (\u00e9volution n\u00b011)](https://trello.com/c/fNNkiR1c/2405-%F0%9F%9F%A2-int%C3%A9gration-des-fanions-promotionnels-ajout-image-au-tag-de-taxon-mp-%C3%A9volution-n11) **\ud83e\udd75 Retour de test**\n        - *:sparkles: feat: fanions de taxon \u2014 images desktop/mobile (MP-api)* [\\#7617](https://github.com/Wishibam/Marketplace-api/pull/7617)\n    - [Retours dashboard - Ajouter un tableau top 10 des marques les plus demand\u00e9s en alerte stock (V2)](https://trello.com/c/JgADJ95G/2474-retours-dashboard-ajouter-un-tableau-top-10-des-marques-les-plus-demand%C3%A9s-en-alerte-stock-v2) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *feat(dashboard): add top 10 retailer stock alerts endpoint* [\\#7751](https://github.com/Wishibam/Marketplace-api/pull/7751)\n        - *fix(dashboard): v2 remove retailer logo* [\\#7860](https://github.com/Wishibam/Marketplace-api/pull/7860)\n    - [MP - Cr\u00e9ation / modification m\u00e9thode de livraison - impossible de save](https://trello.com/c/Ud1DRxgj/2407-mp-cr%C3%A9ation-modification-m%C3%A9thode-de-livraison-impossible-de-save) **\u2600\ufe0fIn review**\n        - *:bug: MP Fix Dpd class, file and discriminator name* [\\#7757](https://github.com/Wishibam/Marketplace-api/pull/7757)\n    - [Ticket de caisse - pb de cache](https://trello.com/c/EwgktbXZ/2493-ticket-de-caisse-pb-de-cache) **\ud83c\udf89 Reviewed pas Merg\u00e9**\n        - *:bug: fix: reset receipt cache between export Messenger messages* [\\#7791](https://github.com/Wishibam/Marketplace-api/pull/7791)\n    - [\ud83d\ude84 Commande exp\u00e9di\u00e9e : l'interface part trop vite et garde l'ancien statut](https://trello.com/c/6QmFnpyb/2418-%F0%9F%9A%84-commande-exp%C3%A9di%C3%A9e-linterface-part-trop-vite-et-garde-lancien-statut) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *:sparkles: OMS order, add \"inProcessing\" flag* [\\#7797](https://github.com/Wishibam/Marketplace-api/pull/7797)\n        - *:bug: OMS processingAt message keep showing on reserved shipment after split* [\\#7848](https://github.com/Wishibam/Marketplace-api/pull/7848)\n    - [MP - Sur le marchand (listing & d\u00e9tails), mettre un lien qui redirige directement vers le marchand en front](https://trello.com/c/Z136lbnm/1296-mp-sur-le-marchand-listing-d%C3%A9tails-mettre-un-lien-qui-redirige-directement-vers-le-marchand-en-front) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *:sparkles: Add retailer eshop link* [\\#7822](https://github.com/Wishibam/Marketplace-api/pull/7822)\n    - [Tag - Ajout du champ \"Visibilit\u00e9\" c\u00f4t\u00e9 MP](https://trello.com/c/zPFP31T9/2398-tag-ajout-du-champ-visibilit%C3%A9-c%C3%B4t%C3%A9-mp) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *:sparkles: Add tag visibility field to retailer corner and category* [\\#7831](https://github.com/Wishibam/Marketplace-api/pull/7831)\n    - [Nouvelle vue Enseigne](https://trello.com/c/AVsRvxLu/2494-nouvelle-vue-enseigne) **\ud83d\udc8e\ud83d\udc8e\ud83d\udc8edoing**\n        - *:sparkles: OMS New enseigne view (front only) no interaction* [\\#7846](https://github.com/Wishibam/Marketplace-api/pull/7846)\n    - [VIA - Chasin - nouvelle API stock](https://trello.com/c/ZxWVFDDZ/2472-via-chasin-nouvelle-api-stock) **\ud83d\ude80Testing BACK / FLUX / CLIENT**\n        - *feat(feedTransformer): bataviastad chasin stock feed* [\\#7853](https://github.com/Wishibam/Marketplace-api/pull/7853)\n    - [Dashboard - Rendre les \u00e9l\u00e9ments clickables](https://trello.com/c/kkX44d75/2506-dashboard-rendre-les-%C3%A9l%C3%A9ments-clickables) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *feat(dashboard): v2 click on row actions* [\\#7868](https://github.com/Wishibam/Marketplace-api/pull/7868)\n    - [FACTURATION - Retours templates](https://trello.com/c/FC1bOPBb/2507-facturation-retours-templates) **\ud83d\ude80\ud83d\ude80\ud83d\ude80A MEP**\n        - *Fix/invoice items pagination* [\\#7872](https://github.com/Wishibam/Marketplace-api/pull/7872)\n \n- **Misc**\n    - *feat(shipping-method): expose the default return method flag on the API* [\\#7793](https://github.com/Wishibam/Marketplace-api/pull/7793)\n    - *:sparkles: feat: resync a single retailer in the live merchandising indices* [\\#7808](https://github.com/Wishibam/Marketplace-api/pull/7808)\n    - *:bug: WMS Log Message Container identifier* [\\#7810](https://github.com/Wishibam/Marketplace-api/pull/7810)\n    - *:bug: fix: resync-retailer scroll rejected by ES8 (size param)* [\\#7820](https://github.com/Wishibam/Marketplace-api/pull/7820)\n    - *feat(mcp): add MCP server walking skeleton with list\\_organizations* [\\#7823](https://github.com/Wishibam/Marketplace-api/pull/7823)\n    - *refactor(mcp): extract logic from ImportAction, RetailerNormalizer and RankProduct* [\\#7824](https://github.com/Wishibam/Marketplace-api/pull/7824)\n    - *:sparkles: feat: compute product scoring on the fly (service + ES)* [\\#7825](https://github.com/Wishibam/Marketplace-api/pull/7825)\n    - *:sparkles: feat: raise the ES pagination window beyond 10k documents* [\\#7826](https://github.com/Wishibam/Marketplace-api/pull/7826)\n    - *feat(merchandising): supporter les tris du listing produit sur POST /merchandising* [\\#7827](https://github.com/Wishibam/Marketplace-api/pull/7827)\n    - *feat(merchandising): actions de masse asynchrones avec lock par organisation* [\\#7828](https://github.com/Wishibam/Marketplace-api/pull/7828)\n    - *Merge feat/mcp-walking-skeleton (simulate #7823 merge)* [\\#7832](https://github.com/Wishibam/Marketplace-api/pull/7832)\n    - *feat(product-list): pipeline batch pour les actions de masse des listes produits* [\\#7833](https://github.com/Wishibam/Marketplace-api/pull/7833)\n    - *feat(mcp): Add OAuth discovery* [\\#7834](https://github.com/Wishibam/Marketplace-api/pull/7834)\n    - *:arrow\\_up: deps: bump mcp/sdk to 0.7.1 (CVE-2026-53965)* [\\#7838](https://github.com/Wishibam/Marketplace-api/pull/7838)\n    - *Disabled MCP by default* [\\#7840](https://github.com/Wishibam/Marketplace-api/pull/7840)\n    - *:bug: fix: guard against null option name/value in CSV export* [\\#7841](https://github.com/Wishibam/Marketplace-api/pull/7841)\n    - *:bug: fix: stream line item CSV export to fix memory exhaustion* [\\#7842](https://github.com/Wishibam/Marketplace-api/pull/7842)\n    - *:arrow\\_up: deps: patch sodium\\_compat Ed25519 key validation vulnerability* [\\#7843](https://github.com/Wishibam/Marketplace-api/pull/7843)\n    - *fix: attribut required category* [\\#7851](https://github.com/Wishibam/Marketplace-api/pull/7851)\n    - *fix: batch action view* [\\#7852](https://github.com/Wishibam/Marketplace-api/pull/7852)\n    - *:bug: fix: batch the retailers list health queries (N+1)* [\\#7854](https://github.com/Wishibam/Marketplace-api/pull/7854)\n    - *:bug: fix: stop hydrating import report errors on retailers list* [\\#7855](https://github.com/Wishibam/Marketplace-api/pull/7855)\n    - *fix(import): stop importing translations in locales missing from the organization* [\\#7856](https://github.com/Wishibam/Marketplace-api/pull/7856)\n    - *feat(merchandising): filtres stock, diffusion limit\u00e9e et prix* [\\#7857](https://github.com/Wishibam/Marketplace-api/pull/7857)\n    - *:bug: fix: index option values in the organization locale, not the current one* [\\#7858](https://github.com/Wishibam/Marketplace-api/pull/7858)\n    - *feat(merchandising): filtres Vente et Scoring, fix du filtre options sur valeurs mapp\u00e9es* [\\#7859](https://github.com/Wishibam/Marketplace-api/pull/7859)\n    - *:sparkles: feat: Index push-error flag on ES product documents* [\\#7861](https://github.com/Wishibam/Marketplace-api/pull/7861)\n    - *fix(attributes): require a non-empty value to satisfy a required attr\u2026* [\\#7864](https://github.com/Wishibam/Marketplace-api/pull/7864)\n    - *:bug: fix: invalidate missing-mapping cache after retailer snapshot* [\\#7871](https://github.com/Wishibam/Marketplace-api/pull/7871)\n    - *fix: remove useless sync sftp command with alwaysdata* [\\#7875](https://github.com/Wishibam/Marketplace-api/pull/7875)\n    - *:bug: Fix: 403 on feed read from scaleway* [\\#7876](https://github.com/Wishibam/Marketplace-api/pull/7876)\n    - *:wrench: chore: remove leftover Heroku config and HireFire* [\\#7877](https://github.com/Wishibam/Marketplace-api/pull/7877)\n \n- **D\u00e9j\u00e0 en production**\n    - *:arrow\\_up: deps: bump php\\_codesniffer to 4.0.4 (CVE-2026-67434)* [\\#7817](https://github.com/Wishibam/Marketplace-api/pull/7817)\n    - *feat: allow max product variation at 380* [\\#7829](https://github.com/Wishibam/Marketplace-api/pull/7829)\n    - *:bug: fix: stop gating unmapped counters on product validity* [\\#7835](https://github.com/Wishibam/Marketplace-api/pull/7835)\n    - *:bug: fix: repair missing-mapping counters behind the retailer list icon* [\\#7837](https://github.com/Wishibam/Marketplace-api/pull/7837)\n    - *fix(dashboard): top retailer when members has multiple retailers* [\\#7865](https://github.com/Wishibam/Marketplace-api/pull/7865)\n    - *:sparkles: feat: add dry-run and limit options to request-missing-invoices* [\\#7866](https://github.com/Wishibam/Marketplace-api/pull/7866)\n\n## POST MEP\n\n### [PR #7826](https://github.com/Wishibam/Marketplace-api/pull/7826) \u2014 :sparkles: feat: raise the ES pagination window beyond 10k documents\n\n```\n  curl -X PUT \"http://localhost:9200/prod_product_*/_settings\" -H 'Content-Type: application/json' -d '{\"index\":{\"max_result_window\":200000}}'\n  curl -X PUT \"http://localhost:9200/prod_variation_*/_settings\" -H 'Content-Type: application/json' -d '{\"index\":{\"max_result_window\":500000}}'\n\n  V\u00e9rifier :\n  curl \"http://localhost:9200/prod_product_*/_settings/index.max_result_window?flat_settings\"\n  curl \"http://localhost:9200/prod_variation_*/_settings/index.max_result_window?flat_settings\"\n```\n\n### [PR #7828](https://github.com/Wishibam/Marketplace-api/pull/7828) \u2014 feat(merchandising): actions de masse asynchrones avec lock par organisation\n\n - ansible en prod \u00e7a https://github.com/Wishibam/Infrastructure/pull/467\n\n### [PR #7853](https://github.com/Wishibam/Marketplace-api/pull/7853) \u2014 feat(feedTransformer): bataviastad chasin stock feed\n\nD\u00e9ployer cette PR sur la PROD MP -> https://github.com/Wishibam/Infrastructure/pull/495\n\n### [PR #7859](https://github.com/Wishibam/Marketplace-api/pull/7859) \u2014 feat(merchandising): filtres Vente et Scoring, fix du filtre options sur valeurs mapp\u00e9es\n\n - Ajouter les mappings manquants `console wishibam:merchandising:update-mappings`\n - R\u00e9indexer quand possible `console wishibam:merchandising:build-index`\n", "creation_timestamp": "2026-09-03T15:31:01.990582Z"}, {"uuid": "bb5929a4-0c5e-42fe-8246-b5ea89d48bd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67434", "type": "seen", "source": "https://gist.github.com/jbourdin/ff06a8fb3f471d73baaa173829e7f463", "content": "- **Trello**\n    - [GLOBAL - Email Alerte paiement en erreur](https://trello.com/c/P1DJvjHp/3229-global-email-alerte-paiement-en-erreur) **\ud83c\udf89 A MEP**\n        - *feat(payment): send email notification when payment fails* [\\#10555](https://github.com/Wishibam/Ecommerce-sylius/pull/10555)\n    - [Helsinki : Portail de retour - Sylius - int\u00e9gration front du portail de retour](https://trello.com/c/mhcc7YaC/2401-helsinki-portail-de-retour-sylius-int%C3%A9gration-front-du-portail-de-retour) **\ud83d\ude80Testing BACK / FLUX / CLIENT**\n        - *feat(helsinki): Add return portal to Helsinki order details* [\\#11757](https://github.com/Wishibam/Ecommerce-sylius/pull/11757)\n        - *fix(helsinki): tri-state select-all checkbox on the return request page* [\\#12129](https://github.com/Wishibam/Ecommerce-sylius/pull/12129)\n    - [\u26a0\ufe0fAction prod\u26a0\ufe0f\ud83d\udd14 Refonte TVO : tracking du volet d'alerte \u00ab retour en stock \u00bb](https://trello.com/c/SXyhrSQb/3834-%E2%9A%A0%EF%B8%8Faction-prod%E2%9A%A0%EF%B8%8F%F0%9F%94%94-refonte-tvo-tracking-du-volet-dalerte-retour-en-stock) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: track back-in-stock alert panel usage* [\\#11791](https://github.com/Wishibam/Ecommerce-sylius/pull/11791)\n    - [TVO - Fiche produit - Ajout des blocs \"Mati\u00e8re et entretien\" & \"Caract\u00e9ristiques\"](https://trello.com/c/AbsKmIzk/3633-tvo-fiche-produit-ajout-des-blocs-mati%C3%A8re-et-entretien-caract%C3%A9ristiques) **\ud83c\udf89 A MEP**\n        - *feat(tvo): add Mati\u00e8re et entretien & Caract\u00e9ristiques blocks on PDP* [\\#11812](https://github.com/Wishibam/Ecommerce-sylius/pull/11812)\n    - [\\[Migration\\]\\[A.4.1\\] Internaliser bitbag/wishlist-plugin dans src/Component/Wishlist](https://trello.com/c/U9dQGx1l/3863-migrationa41-internaliser-bitbag-wishlist-plugin-dans-src-component-wishlist) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: internalize bitbag/wishlist-plugin \\[A.4.1\\]* [\\#11856](https://github.com/Wishibam/Ecommerce-sylius/pull/11856)\n    - [\\[Migration\\]\\[A.4.2/A.4.3\\] Internaliser bring & deep-link dans src/Component](https://trello.com/c/RsLN5SNT/3864-migrationa42-a43-internaliser-bring-deep-link-dans-src-component) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: internalize bring & deep-link plugins \\[A.4.2, A.4.3\\]* [\\#11861](https://github.com/Wishibam/Ecommerce-sylius/pull/11861)\n    - [\\[Migration\\]\\[A.5\\] Bumps frontend \u00ab safe \u00bb + suppression des packages morts](https://trello.com/c/vI6k61gt/3873-migrationa5-bumps-frontend-safe-suppression-des-packages-morts) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: bump safe frontend deps + prune dead packages \\[A.5\\]* [\\#11875](https://github.com/Wishibam/Ecommerce-sylius/pull/11875)\n    - [\\[Migration\\]\\[A.6\\] Pr\u00e9paration Doctrine pour DBAL 3 (monkey-patch migrations)](https://trello.com/c/8mdyVMwg/3880-migrationa6-pr%C3%A9paration-doctrine-pour-dbal-3-monkey-patch-migrations) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: replace Doctrine migration monkey-patch for DBAL 3 \\[A.6\\]* [\\#11893](https://github.com/Wishibam/Ecommerce-sylius/pull/11893)\n    - [TVO - Express checkout : adresse tronqu\u00e9e \u2014 nom de rue perdu (Apple Pay line1/line2)](https://trello.com/c/dIrl0I1a/3884-tvo-express-checkout-adresse-tronqu%C3%A9e-nom-de-rue-perdu-apple-pay-line1-line2) **\ud83c\udf89 A MEP**\n        - *:bug: fix: join express checkout wallet address line1/line2 into street* [\\#11914](https://github.com/Wishibam/Ecommerce-sylius/pull/11914)\n    - [\\[P0\\] Express checkout : re-v\u00e9rifier le montant du PaymentIntent au complete](https://trello.com/c/qJdTR9Jc/3885-p0-express-checkout-re-v%C3%A9rifier-le-montant-du-paymentintent-au-complete) **\ud83e\udd16 Testing tech**\n        - *:bug: fix: verify express checkout PaymentIntent amount at completion* [\\#11916](https://github.com/Wishibam/Ecommerce-sylius/pull/11916)\n    - [\\[P0\\] Webhook Stripe : rembourser r\u00e9ellement les charges des commandes refus\u00e9es/annul\u00e9es](https://trello.com/c/fyJeMD3L/3886-p0-webhook-stripe-rembourser-r%C3%A9ellement-les-charges-des-commandes-refus%C3%A9es-annul%C3%A9es) **\ud83e\udd16 Testing tech**\n        - *:bug: fix: refund Stripe charges captured for refused or cancelled orders* [\\#11918](https://github.com/Wishibam/Ecommerce-sylius/pull/11918)\n    - [\\[P1\\] Express checkout : pinner explicitement les wallets autoris\u00e9s (quick win)](https://trello.com/c/tEpmPM9l/3890-p1-express-checkout-pinner-explicitement-les-wallets-autoris%C3%A9s-quick-win) **\ud83e\udd16 Testing tech**\n        - *:bug: fix: restrict express checkout wallets to an explicit allowlist* [\\#11919](https://github.com/Wishibam/Ecommerce-sylius/pull/11919)\n    - [\\[P0\\] Express checkout : commandes \u00e0 fonds captur\u00e9s supprim\u00e9es par la purge des carts + cha\u00eene d'abort morte](https://trello.com/c/1Wo7zGP5/3887-p0-express-checkout-commandes-%C3%A0-fonds-captur%C3%A9s-supprim%C3%A9es-par-la-purge-des-carts-cha%C3%AEne-dabort-morte) **\ud83e\udd16 Testing tech**\n        - *:bug: fix: protect express checkout captured-funds carts from the purge* [\\#11920](https://github.com/Wishibam/Ecommerce-sylius/pull/11920)\n    - [FEAT-0006 \u2014 Regroupement des emails d'annulation d'articles](https://trello.com/c/bBiV4jTE/3415-feat-0006-regroupement-des-emails-dannulation-darticles) **\ud83c\udf89 A MEP**\n        - *:bug: fix: FEAT-0006 cancellation email grouping QA feedback* [\\#11984](https://github.com/Wishibam/Ecommerce-sylius/pull/11984)\n        - *:bug: fix: register order\\_entirely\\_cancelled email template for all projects* [\\#12091](https://github.com/Wishibam/Ecommerce-sylius/pull/12091)\n        - *:bug: fix: send grouped withdrawal confirmations on entirely cancelled orders* [\\#12104](https://github.com/Wishibam/Ecommerce-sylius/pull/12104)\n    - [Min-height pages React](https://trello.com/c/Rti8eFXb/3919-min-height-pages-react) **\ud83c\udf89 A MEP**\n        - *:bug: fix: add min-height on React pages to prevent footer flash* [\\#11987](https://github.com/Wishibam/Ecommerce-sylius/pull/11987)\n    - [SEO - TVO - changement de slug](https://trello.com/c/Gbb2tles/3908-seo-tvo-changement-de-slug) **\ud83c\udf89 A MEP**\n        - *:bug: fix: clean up TVO brand page slugs with 301 redirects* [\\#11988](https://github.com/Wishibam/Ecommerce-sylius/pull/11988)\n    - [\u26a0\ufe0f action preprod/prod \u26a0\ufe0f \ud83d\uded2 Refonte Checkout #1 \u2014 La page Panier change de garde-robe](https://trello.com/c/qxdtlZxk/3851-%E2%9A%A0%EF%B8%8F-action-preprod-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%9B%92-refonte-checkout-1-la-page-panier-change-de-garde-robe) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): cart page QA feedback round* [\\#11990](https://github.com/Wishibam/Ecommerce-sylius/pull/11990)\n    - [\u26a0\ufe0f MEP \u26a0\ufe0f\u2b50 Google Customer Reviews sur TVO \u2014 brancher la machine \u00e0 \u00e9toiles](https://trello.com/c/7JA9u85M/3899-%E2%9A%A0%EF%B8%8F-mep-%E2%9A%A0%EF%B8%8F%E2%AD%90-google-customer-reviews-sur-tvo-brancher-la-machine-%C3%A0-%C3%A9toiles) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: TVO Google Customer Reviews \u2014 GTIN produits sur thank you* [\\#11991](https://github.com/Wishibam/Ecommerce-sylius/pull/11991)\n    - [Fix : TypeError trim() null sur les share descriptions de channel (admin)](https://trello.com/c/o47Ek1Fo/3924-fix-typeerror-trim-null-sur-les-share-descriptions-de-channel-admin) **\ud83e\udd16 Testing tech**\n        - *:bug: fix: guard against null share descriptions in channel setter* [\\#11992](https://github.com/Wishibam/Ecommerce-sylius/pull/11992)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f \ud83d\udce6\ud83c\udf0d Mondial Relay sans fronti\u00e8res \u2014 points relais UE (v1 TVO)](https://trello.com/c/4X0QYlQ5/3918-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%93%A6%F0%9F%8C%8D-mondial-relay-sans-fronti%C3%A8res-points-relais-ue-v1-tvo) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat(mondial-relay): relay search follows the buyer's country* [\\#11994](https://github.com/Wishibam/Ecommerce-sylius/pull/11994)\n    - [\ud83d\udccd Refonte Checkout \u2014 La suggestion d'adresse qui fait mouche](https://trello.com/c/vF0T1FZU/3860-%F0%9F%93%8D-refonte-checkout-la-suggestion-dadresse-qui-fait-mouche) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): address suggestion QA feedback round* [\\#11995](https://github.com/Wishibam/Ecommerce-sylius/pull/11995)\n        - *:bug: fix(tvo): keep the manual phone flag choice made on an empty field* [\\#12058](https://github.com/Wishibam/Ecommerce-sylius/pull/12058)\n    - [\ud83c\udf5e Refonte Checkout \u2014 Des toasts tout chauds pour les messages syst\u00e8me](https://trello.com/c/N70pstGO/3861-%F0%9F%8D%9E-refonte-checkout-des-toasts-tout-chauds-pour-les-messages-syst%C3%A8me) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): checkout toasts QA feedback round* [\\#11996](https://github.com/Wishibam/Ecommerce-sylius/pull/11996)\n    - [\ud83d\udd00 Refonte TVO : le variant s\u00e9lectionn\u00e9 saute en 1re position au lieu de rester \u00e0 sa place](https://trello.com/c/vQH5uxHz/3904-%F0%9F%94%80-refonte-tvo-le-variant-s%C3%A9lectionn%C3%A9-saute-en-1re-position-au-lieu-de-rester-%C3%A0-sa-place) **\ud83c\udf89 A MEP**\n        - *:bug: fix: keep option values in place on overflowing variant axis* [\\#11998](https://github.com/Wishibam/Ecommerce-sylius/pull/11998)\n    - [Helsinki preprod (peut \u00eatre ailleurs) - Commande C&C cr\u00e9e plusieurs shipments.](https://trello.com/c/Dlk8WpIg/3895-helsinki-preprod-peut-%C3%AAtre-ailleurs-commande-cc-cr%C3%A9e-plusieurs-shipments) **\ud83c\udf89 A MEP**\n        - *:bug: fix: remove phantom shipment block from account order page* [\\#11999](https://github.com/Wishibam/Ecommerce-sylius/pull/11999)\n    - [TVO- mail order\\_open\\_return\\_withdrawn -remplacement de tag](https://trello.com/c/NK5CnCM2/3883-tvo-mail-orderopenreturnwithdrawn-remplacement-de-tag) **\ud83c\udf89 A MEP**\n        - *\ud83d\udc1b fix: orange \"return in progress\" badge on TVO withdrawal email* [\\#12000](https://github.com/Wishibam/Ecommerce-sylius/pull/12000)\n    - [SEO - ALL - Meta Title](https://trello.com/c/QDbDIPTu/3909-seo-all-meta-title) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: add dedicated Meta Title for CMS pages* [\\#12001](https://github.com/Wishibam/Ecommerce-sylius/pull/12001)\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\ude9a Refonte Checkout #3 \u2014 Le Mode de livraison prend la route](https://trello.com/c/NDSNOimu/3854-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%9A%9A-refonte-checkout-3-le-mode-de-livraison-prend-la-route) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat(tvo): React checkout select shipping step (P3)* [\\#12011](https://github.com/Wishibam/Ecommerce-sylius/pull/12011)\n        - *:bug: fix(tvo): checkout QA feedback of August 18-19* [\\#12119](https://github.com/Wishibam/Ecommerce-sylius/pull/12119)\n    - [\u2709\ufe0f \\[TVO V2\\] Login & inscription : un seul email pour les gouverner tous](https://trello.com/c/Eml7o2An/3912-%E2%9C%89%EF%B8%8F-tvo-v2-login-inscription-un-seul-email-pour-les-gouverner-tous) **\ud83e\udd13 Testing**\n        - *:sparkles: feat: TVO email-first React login & registration flow* [\\#12015](https://github.com/Wishibam/Ecommerce-sylius/pull/12015)\n        - *:bug: fix(tvo): align the login page footer with the checkout footer* [\\#12133](https://github.com/Wishibam/Ecommerce-sylius/pull/12133)\n        - *:bug: fix(tvo): show the login success toasts on Safari* [\\#12154](https://github.com/Wishibam/Ecommerce-sylius/pull/12154)\n    - [Helsinki - Correction bug d'affichage en finnois en version mobile](https://trello.com/c/f9V6mA6z/3686-helsinki-correction-bug-daffichage-en-finnois-en-version-mobile) **\ud83c\udf89 A MEP**\n        - *:bug: fix: reduce Helsinki posts carousel title on mobile* [\\#12017](https://github.com/Wishibam/Ecommerce-sylius/pull/12017)\n    - [\ud83d\udcb8 TVO \u2014 Filtre par niveau de remise : que la d\u00e9marque soit avec vous \u2702\ufe0f](https://trello.com/c/FvSWlx14/3877-%F0%9F%92%B8-tvo-filtre-par-niveau-de-remise-que-la-d%C3%A9marque-soit-avec-vous-%E2%9C%82%EF%B8%8F) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: TVO minimum discount percentage filter on product lists* [\\#12018](https://github.com/Wishibam/Ecommerce-sylius/pull/12018)\n    - [\ud83c\udfbd \\[IS\\] Footer : \u00ab Notre accompagnement \u00bb devient \u00ab Nos services \u00bb et raccroche son lien](https://trello.com/c/H2X0XtqH/3932-%F0%9F%8E%BD-is-footer-notre-accompagnement-devient-nos-services-et-raccroche-son-lien) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: rename the Intersport footer column to \u00ab Nos services \u00bb and unlink its title* [\\#12026](https://github.com/Wishibam/Ecommerce-sylius/pull/12026)\n        - *:rewind: revert: Intersport footer \u00ab Nos services \u00bb (wrong target branch)* [\\#12037](https://github.com/Wishibam/Ecommerce-sylius/pull/12037)\n    - [Batavia - Probl\u00e8me sur l'affichage des variations](https://trello.com/c/MY6aNjLj/3931-batavia-probl%C3%A8me-sur-laffichage-des-variations) **\ud83c\udf89 A MEP**\n        - *:bug: fix: deep-link Batavia PLP cards to the displayed color variant* [\\#12027](https://github.com/Wishibam/Ecommerce-sylius/pull/12027)\n    - [Batavia \u2014 Mails \u00ab produit indisponible \u00bb non re\u00e7us par les clients](https://trello.com/c/YLHFxnVs/3933-batavia-mails-produit-indisponible-non-re%C3%A7us-par-les-clients) **\ud83c\udf89 A MEP**\n        - *:bug: fix: validate admin email templates and log real send outcomes* [\\#12035](https://github.com/Wishibam/Ecommerce-sylius/pull/12035)\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\udcb3 Refonte Checkout #4 \u2014 Le Mode de paiement passe \u00e0 la caisse](https://trello.com/c/vDcvKX88/3855-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%92%B3-refonte-checkout-4-le-mode-de-paiement-passe-%C3%A0-la-caisse) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat(tvo): rebuild the checkout payment step and success page in React* [\\#12051](https://github.com/Wishibam/Ecommerce-sylius/pull/12051)\n    - [Intersport - Bug d'affichage images box produit](https://trello.com/c/mOO6EBx1/3936-intersport-bug-daffichage-images-box-produit) **\ud83c\udf89 A MEP**\n        - *:bug: \\[via\\] fix: styles mobiles des pages mot de passe oubli\u00e9/reset* [\\#12055](https://github.com/Wishibam/Ecommerce-sylius/pull/12055)\n    - [\ud83e\ude97 VIA \u2014 Le filtre Cat\u00e9gorie s'ouvre tout seul dans les descentes : on le veut ferm\u00e9 au chargement](https://trello.com/c/GMHVWZe2/3938-%F0%9F%AA%97-via-le-filtre-cat%C3%A9gorie-souvre-tout-seul-dans-les-descentes-on-le-veut-ferm%C3%A9-au-chargement) **\ud83c\udf89 A MEP**\n        - *:bug: \\[via\\] fix: le filtre Cat\u00e9gorie reste ferm\u00e9 au chargement des descentes* [\\#12059](https://github.com/Wishibam/Ecommerce-sylius/pull/12059)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f Feed : Ajouter le flux facebook TVO](https://trello.com/c/iXjTokqz/3937-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-feed-ajouter-le-flux-facebook-tvo) **\ud83e\udd16 Testing tech**\n        - *:sparkles: feat: porter le flux facebook\\_catalog vers le nouveau composant* [\\#12060](https://github.com/Wishibam/Ecommerce-sylius/pull/12060)\n    - [\\[Migration\\]\\[B.1\\] PHP 8.2 \u2192 8.3](https://trello.com/c/Slm1Q5n7/3940-migrationb1-php-82-%E2%86%92-83) **\ud83d\ude80 To Do Vincent**\n        - *:wrench: chore: run the test suite on PHP 8.2 and 8.3 \\[B.1\\]* [\\#12063](https://github.com/Wishibam/Ecommerce-sylius/pull/12063)\n        - *:bug: fix(deploy): restart PHP-FPM via systemd glob instead of hardcoded 8.2* [\\#12066](https://github.com/Wishibam/Ecommerce-sylius/pull/12066)\n        - *:wrench: chore: run the dual PHP matrix on the tests job only \\[B.1\\]* [\\#12068](https://github.com/Wishibam/Ecommerce-sylius/pull/12068)\n    - [\\[Migration\\]\\[B.2\\] Sylius 1.12 \u2192 1.13 (DBAL 3)](https://trello.com/c/huA0VNU9/3941-migrationb2-sylius-112-%E2%86%92-113-dbal-3) **\ud83d\ude80 To Do Vincent**\n        - *:wrench: chore(doctrine): drop the last getSchemaManager() call for DBAL 3/4 \\[B.2 P.1\\]* [\\#12071](https://github.com/Wishibam/Ecommerce-sylius/pull/12071)\n        - *:white\\_check\\_mark: test: characterize every state machine graph wiring \\[B.2 P.2\\]* [\\#12074](https://github.com/Wishibam/Ecommerce-sylius/pull/12074)\n        - *:recycle: refactor: state machine abstraction infra + pilot call site \\[B.2 P.3.1\\]* [\\#12089](https://github.com/Wishibam/Ecommerce-sylius/pull/12089)\n        - *:recycle: refactor: migrate the mechanical state machine call sites \\[B.2 P.3.2\\]* [\\#12094](https://github.com/Wishibam/Ecommerce-sylius/pull/12094)\n        - *:recycle: refactor: migrate the structural state machine call sites \\[B.2 P.3.3\\]* [\\#12098](https://github.com/Wishibam/Ecommerce-sylius/pull/12098)\n        - *:wrench: chore: bump symfony/flex 1 to 2 \\[B.2 P.4\\]* [\\#12100](https://github.com/Wishibam/Ecommerce-sylius/pull/12100)\n    - [MA - Pas de message d'erreur lorsque l'on n'arrive pas \u00e0 se connecter \u00e0 son compte client](https://trello.com/c/fQ9vwTD0/3684-ma-pas-de-message-derreur-lorsque-lon-narrive-pas-%C3%A0-se-connecter-%C3%A0-son-compte-client) **\ud83c\udf89 A MEP**\n        - *:bug: fix: display an error message on failed login on Marques Avenue* [\\#12072](https://github.com/Wishibam/Ecommerce-sylius/pull/12072)\n    - [Fix : \ufeff\ufefftransmettre le consentement newsletter \u00e0 Coniq \u00e0 l'inscription](https://trello.com/c/mShGQBUK/3943-fix-transmettre-le-consentement-newsletter-%C3%A0-coniq-%C3%A0-linscription) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: transmettre le consentement newsletter \u00e0 Coniq \u00e0 l'inscription* [\\#12076](https://github.com/Wishibam/Ecommerce-sylius/pull/12076)\n        - *:bug: fix: consentement newsletter Coniq par canal \u00e0 l'inscription* [\\#12105](https://github.com/Wishibam/Ecommerce-sylius/pull/12105)\n    - [TVO - Bloc caract\u00e9ristiques : Attribut genre et ean](https://trello.com/c/MwYdlurp/3945-tvo-bloc-caract%C3%A9ristiques-attribut-genre-et-ean) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): localize gender and drop EAN in the characteristics block* [\\#12112](https://github.com/Wishibam/Ecommerce-sylius/pull/12112)\n    - [Page de confirmation de commande - N\u00b0 de commande sylius plut\u00f4t que MP](https://trello.com/c/bUrAEDyS/3944-page-de-confirmation-de-commande-n-de-commande-sylius-plut%C3%B4t-que-mp) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): align the thank-you order number with the email* [\\#12114](https://github.com/Wishibam/Ecommerce-sylius/pull/12114)\n    - [TVO \u2014 Tracking des mails de relance panier (taux d'ouverture / clic / CA)](https://trello.com/c/cyTNgF1i/3947-tvo-tracking-des-mails-de-relance-panier-taux-douverture-clic-ca) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat(tvo, all): track abandoned cart reminder emails* [\\#12118](https://github.com/Wishibam/Ecommerce-sylius/pull/12118)\n    - [Bug : Mail d'annulation quand validation de retour](https://trello.com/c/Zh0QOdKa/3950-bug-mail-dannulation-quand-validation-de-retour) **\ud83c\udf89 A MEP**\n        - *:bug: fix: skip cancellation email when cancel follows a validated return* [\\#12122](https://github.com/Wishibam/Ecommerce-sylius/pull/12122)\n        - *:bug: fix: group return confirmation emails to fix stale VALID\u00c9 tags* [\\#12131](https://github.com/Wishibam/Ecommerce-sylius/pull/12131)\n    - [FACTURATION - Template mail : cr\u00e9ation de variable](https://trello.com/c/GQLEqISq/2508-facturation-template-mail-cr%C3%A9ation-de-variable) **\u2600\ufe0fIn review**\n        - *feat(email): expose the invoice table as an invoiceResume variable* [\\#12143](https://github.com/Wishibam/Ecommerce-sylius/pull/12143)\n    - [\\[P1\\] Express checkout : le PaymentIntent est cal\u00e9 sur la m\u00e9thode de livraison par d\u00e9faut, pas sur celle pr\u00e9s\u00e9lectionn\u00e9e par Stripe](https://trello.com/c/WsW78d4s/3955-p1-express-checkout-le-paymentintent-est-cal%C3%A9-sur-la-m%C3%A9thode-de-livraison-par-d%C3%A9faut-pas-sur-celle-pr%C3%A9s%C3%A9lectionn%C3%A9e-par-stripe) **\ud83c\udf89 A MEP**\n        - *:bug: fix: \\[TVO\\] sync express PaymentIntent on preselected rate* [\\#12150](https://github.com/Wishibam/Ecommerce-sylius/pull/12150)\n \n- **Misc**\n    - *:sparkles: feat: PushDispatcher + adaptateur FCM (push app TVO)* [\\#11917](https://github.com/Wishibam/Ecommerce-sylius/pull/11917)\n    - *style(withdrawal): make the withdrawal button theme-colored and not f\u2026* [\\#11951](https://github.com/Wishibam/Ecommerce-sylius/pull/11951)\n    - *:zap: perf: Batavia PLP \u2014 ES result cache, key batching, menu cache* [\\#11963](https://github.com/Wishibam/Ecommerce-sylius/pull/11963)\n    - *:wrench: chore: outillage pour worktrees parall\u00e8les (front isol\u00e9 par projet)* [\\#11986](https://github.com/Wishibam/Ecommerce-sylius/pull/11986)\n    - *:sparkles: feat: push app TVO \u2014 envoi asynchrone + badge (3.A.5 + 3.A.6)* [\\#12022](https://github.com/Wishibam/Ecommerce-sylius/pull/12022)\n    - *:sparkles: feat: badge unreadPushCount de bout en bout (app TVO)* [\\#12025](https://github.com/Wishibam/Ecommerce-sylius/pull/12025)\n    - *:sparkles: feat: compteur badge dans data des push (app TVO)* [\\#12028](https://github.com/Wishibam/Ecommerce-sylius/pull/12028)\n    - *:sparkles: feat: push \u00ab commande confirm\u00e9e \u00bb (app TVO)* [\\#12031](https://github.com/Wishibam/Ecommerce-sylius/pull/12031)\n    - *:sparkles: feat: push \u00ab commande exp\u00e9di\u00e9e \u00bb (app TVO)* [\\#12040](https://github.com/Wishibam/Ecommerce-sylius/pull/12040)\n    - *feat(push): notification de remboursement de commande (TVO 3.B.3)* [\\#12041](https://github.com/Wishibam/Ecommerce-sylius/pull/12041)\n    - *fix(push): durcir l'envoi FCM \u2014 timeouts born\u00e9s + retry effectif (TVO 3.A.7)* [\\#12042](https://github.com/Wishibam/Ecommerce-sylius/pull/12042)\n    - *test(featured-content): d\u00e9-flakifier testProgramDisableDelay (tol\u00e9rance sur le d\u00e9lai)* [\\#12044](https://github.com/Wishibam/Ecommerce-sylius/pull/12044)\n    - *feat(push): notification de retour en stock (TVO 3.B.4)* [\\#12045](https://github.com/Wishibam/Ecommerce-sylius/pull/12045)\n    - *feat(push): notification de baisse de prix wishlist (TVO 3.B.5)* [\\#12049](https://github.com/Wishibam/Ecommerce-sylius/pull/12049)\n    - *:bug: fix(megamenu): \u00e9largir le lien \u00e0 2048 caract\u00e8res* [\\#12050](https://github.com/Wishibam/Ecommerce-sylius/pull/12050)\n    - *feat(push): relance push des paniers abandonn\u00e9s (TVO 3.B.6)* [\\#12053](https://github.com/Wishibam/Ecommerce-sylius/pull/12053)\n    - *feat(deeplink): AASA de la nouvelle app TVO \u2014 Universal Links iOS (TVO 4.1)* [\\#12064](https://github.com/Wishibam/Ecommerce-sylius/pull/12064)\n    - *feat(deeplink): assetlinks.json de la nouvelle app TVO \u2014 App Links Android (TVO 4.2)* [\\#12065](https://github.com/Wishibam/Ecommerce-sylius/pull/12065)\n    - *:bug: fix: complete payments stuck by Stripe webhook/checkout race* [\\#12075](https://github.com/Wishibam/Ecommerce-sylius/pull/12075)\n    - *:bug: fix: dedup order\\_confirmation per order to stop double send* [\\#12101](https://github.com/Wishibam/Ecommerce-sylius/pull/12101)\n    - *:bug: fix: pin the fixtures channel default tax zone* [\\#12106](https://github.com/Wishibam/Ecommerce-sylius/pull/12106)\n    - *:wrench: chore: bump webfactory/ssh-agent to v0.9.1* [\\#12120](https://github.com/Wishibam/Ecommerce-sylius/pull/12120)\n    - *fix(coniq): stop Coniq errors from blocking the to\\_ship transition* [\\#12134](https://github.com/Wishibam/Ecommerce-sylius/pull/12134)\n    - *Fix/coniq swallow poisons doctrine transaction* [\\#12138](https://github.com/Wishibam/Ecommerce-sylius/pull/12138)\n    - *:wrench: chore: merge master into develop* [\\#12144](https://github.com/Wishibam/Ecommerce-sylius/pull/12144)\n \n- **D\u00e9j\u00e0 en production**\n    - [\\[Migration\\]\\[A.2\\] D\u00e9mant\u00e8lement Setono Analytics + Tag-Bag](https://trello.com/c/uJN0Gkiz/3856-migrationa2-d%C3%A9mant%C3%A8lement-setono-analytics-tag-bag) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore(migration): internalize setono analytics + tag-bag as src/Component \\[A.2\\]* [\\#11846](https://github.com/Wishibam/Ecommerce-sylius/pull/11846)\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\udc1b Fix r\u00e9indexation ES bloqu\u00e9e \u2014 \u00ab immense term \u00bb sur attribut trop long (Intersport)](https://trello.com/c/iD6idW0v/3915-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%90%9B-fix-r%C3%A9indexation-es-bloqu%C3%A9e-immense-term-sur-attribut-trop-long-intersport) **MEP Ao\u00fbt**\n        - *:bug: fix: r\u00e9indexation ES bloqu\u00e9e par un attribut trop long (immense term)* [\\#11972](https://github.com/Wishibam/Ecommerce-sylius/pull/11972)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f \u203c\ufe0f Nouveau Feeds - Faire tourner tous les nouveaux feeds sur toutes les preprods/prods](https://trello.com/c/Kr8UhDAv/3910-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-%EF%B8%8F-nouveau-feeds-faire-tourner-tous-les-nouveaux-feeds-sur-toutes-les-preprods-prods) **\ud83e\udee1 To Do JC**\n        - *:sparkles: feat: drive-to-store feeds parity with legacy Setono* [\\#11979](https://github.com/Wishibam/Ecommerce-sylius/pull/11979)\n    - [Helsinki \u2014 Funnel checkout GA4 vide : \u00e9v\u00e9nements e-commerce manquants/incomplets](https://trello.com/c/j0yQGSFm/3921-helsinki-funnel-checkout-ga4-vide-%C3%A9v%C3%A9nements-e-commerce-manquants-incomplets) **MEP Septembre**\n        - *:bug: fix: \u00e9mettre le funnel checkout GA4 complet* [\\#11980](https://github.com/Wishibam/Ecommerce-sylius/pull/11980)\n        - *:bug: fix: \u00e9mettre add\\_payment\\_info quand l'\u00e9tape de paiement est saut\u00e9e* [\\#12014](https://github.com/Wishibam/Ecommerce-sylius/pull/12014)\n    - [TVO - Les recommandations produits ne remontent aucun produit sur la fiche produit](https://trello.com/c/lw3SYgNG/3926-tvo-les-recommandations-produits-ne-remontent-aucun-produit-sur-la-fiche-produit) **MEP Ao\u00fbt**\n        - *:bug: fix(search): match the indexed color value in recommendations* [\\#12004](https://github.com/Wishibam/Ecommerce-sylius/pull/12004)\n    - [A ESTIMER : Google Shopping Feed : ajouter le Outlet Price en cas de promotion](https://trello.com/c/RnEgL53B/3867-a-estimer-google-shopping-feed-ajouter-le-outlet-price-en-cas-de-promotion) **MEP Ao\u00fbt**\n        - *:sparkles: feat(helsinki): expose the outlet price in the Google Shopping feed* [\\#12020](https://github.com/Wishibam/Ecommerce-sylius/pull/12020)\n    - [\u2615\ufe0f \\[Batavia\\] Frais de retour : \u20ac3,25 \u2192 \u20ac3,95 (et on passe le texte en traduction)](https://trello.com/c/P4vec3cz/3934-%E2%98%95%EF%B8%8F-batavia-frais-de-retour-%E2%82%AC325-%E2%86%92-%E2%82%AC395-et-on-passe-le-texte-en-traduction) **MEP Ao\u00fbt**\n        - *:bug: fix: Batavia return cost 3,95 and move the line to a translation* [\\#12034](https://github.com/Wishibam/Ecommerce-sylius/pull/12034)\n    - [TVO - Changement url de la page marque Millet](https://trello.com/c/8NZBv11v/3952-tvo-changement-url-de-la-page-marque-millet) **MEP Septembre**\n        - *:bug: fix(tvo): rename the Millet merchant page slug from lafuma to millet* [\\#12136](https://github.com/Wishibam/Ecommerce-sylius/pull/12136)\n    - *:bug: fix: render flag emojis as SVG icons, not OS emoji glyphs* [\\#11981](https://github.com/Wishibam/Ecommerce-sylius/pull/11981)\n    - *:bug: fix: apply the flag icon filter to the remaining menu renderings* [\\#11982](https://github.com/Wishibam/Ecommerce-sylius/pull/11982)\n    - *:wrench: chore: bump php\\_codesniffer en 3.13.6 (CVE-2026-67434, CI rouge)* [\\#12008](https://github.com/Wishibam/Ecommerce-sylius/pull/12008)\n    - *:bug: fix: skip Comarch in LaRedoute order import when disabled* [\\#12125](https://github.com/Wishibam/Ecommerce-sylius/pull/12125)", "creation_timestamp": "2026-09-04T10:26:34.648503Z"}, {"uuid": "fe3882c6-9694-4f58-afaf-5a88f925ed31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67434", "type": "seen", "source": "https://gist.github.com/jbourdin/e12d020e1513c63c73001eeac7f73df0", "content": "- **Trello**\n    - [GLOBAL - Email Alerte paiement en erreur](https://trello.com/c/P1DJvjHp/3229-global-email-alerte-paiement-en-erreur) **\ud83c\udf89 A MEP**\n        - *feat(payment): send email notification when payment fails* [\\#10555](https://github.com/Wishibam/Ecommerce-sylius/pull/10555)\n    - [Helsinki : Portail de retour - Sylius - int\u00e9gration front du portail de retour](https://trello.com/c/mhcc7YaC/2401-helsinki-portail-de-retour-sylius-int%C3%A9gration-front-du-portail-de-retour) **\ud83d\ude80Testing BACK / FLUX / CLIENT**\n        - *feat(helsinki): Add return portal to Helsinki order details* [\\#11757](https://github.com/Wishibam/Ecommerce-sylius/pull/11757)\n        - *fix(helsinki): tri-state select-all checkbox on the return request page* [\\#12129](https://github.com/Wishibam/Ecommerce-sylius/pull/12129)\n        - *fix(helsinki): give in-store returns their own email and no return code* [\\#12155](https://github.com/Wishibam/Ecommerce-sylius/pull/12155)\n    - [\u26a0\ufe0fAction prod\u26a0\ufe0f\ud83d\udd14 Refonte TVO : tracking du volet d'alerte \u00ab retour en stock \u00bb](https://trello.com/c/SXyhrSQb/3834-%E2%9A%A0%EF%B8%8Faction-prod%E2%9A%A0%EF%B8%8F%F0%9F%94%94-refonte-tvo-tracking-du-volet-dalerte-retour-en-stock) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: track back-in-stock alert panel usage* [\\#11791](https://github.com/Wishibam/Ecommerce-sylius/pull/11791)\n    - [TVO - Fiche produit - Ajout des blocs \"Mati\u00e8re et entretien\" & \"Caract\u00e9ristiques\"](https://trello.com/c/AbsKmIzk/3633-tvo-fiche-produit-ajout-des-blocs-mati%C3%A8re-et-entretien-caract%C3%A9ristiques) **\ud83c\udf89 A MEP**\n        - *feat(tvo): add Mati\u00e8re et entretien & Caract\u00e9ristiques blocks on PDP* [\\#11812](https://github.com/Wishibam/Ecommerce-sylius/pull/11812)\n    - [\\[Migration\\]\\[A.4.1\\] Internaliser bitbag/wishlist-plugin dans src/Component/Wishlist](https://trello.com/c/U9dQGx1l/3863-migrationa41-internaliser-bitbag-wishlist-plugin-dans-src-component-wishlist) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: internalize bitbag/wishlist-plugin \\[A.4.1\\]* [\\#11856](https://github.com/Wishibam/Ecommerce-sylius/pull/11856)\n    - [\\[Migration\\]\\[A.4.2/A.4.3\\] Internaliser bring & deep-link dans src/Component](https://trello.com/c/RsLN5SNT/3864-migrationa42-a43-internaliser-bring-deep-link-dans-src-component) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: internalize bring & deep-link plugins \\[A.4.2, A.4.3\\]* [\\#11861](https://github.com/Wishibam/Ecommerce-sylius/pull/11861)\n    - [\\[Migration\\]\\[A.5\\] Bumps frontend \u00ab safe \u00bb + suppression des packages morts](https://trello.com/c/vI6k61gt/3873-migrationa5-bumps-frontend-safe-suppression-des-packages-morts) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: bump safe frontend deps + prune dead packages \\[A.5\\]* [\\#11875](https://github.com/Wishibam/Ecommerce-sylius/pull/11875)\n    - [\\[Migration\\]\\[A.6\\] Pr\u00e9paration Doctrine pour DBAL 3 (monkey-patch migrations)](https://trello.com/c/8mdyVMwg/3880-migrationa6-pr%C3%A9paration-doctrine-pour-dbal-3-monkey-patch-migrations) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: replace Doctrine migration monkey-patch for DBAL 3 \\[A.6\\]* [\\#11893](https://github.com/Wishibam/Ecommerce-sylius/pull/11893)\n    - [TVO - Express checkout : adresse tronqu\u00e9e \u2014 nom de rue perdu (Apple Pay line1/line2)](https://trello.com/c/dIrl0I1a/3884-tvo-express-checkout-adresse-tronqu%C3%A9e-nom-de-rue-perdu-apple-pay-line1-line2) **\ud83c\udf89 A MEP**\n        - *:bug: fix: join express checkout wallet address line1/line2 into street* [\\#11914](https://github.com/Wishibam/Ecommerce-sylius/pull/11914)\n    - [\\[P0\\] Express checkout : re-v\u00e9rifier le montant du PaymentIntent au complete](https://trello.com/c/qJdTR9Jc/3885-p0-express-checkout-re-v%C3%A9rifier-le-montant-du-paymentintent-au-complete) **\ud83e\udd16 Testing tech**\n        - *:bug: fix: verify express checkout PaymentIntent amount at completion* [\\#11916](https://github.com/Wishibam/Ecommerce-sylius/pull/11916)\n    - [\\[P0\\] Webhook Stripe : rembourser r\u00e9ellement les charges des commandes refus\u00e9es/annul\u00e9es](https://trello.com/c/fyJeMD3L/3886-p0-webhook-stripe-rembourser-r%C3%A9ellement-les-charges-des-commandes-refus%C3%A9es-annul%C3%A9es) **\ud83e\udd16 Testing tech**\n        - *:bug: fix: refund Stripe charges captured for refused or cancelled orders* [\\#11918](https://github.com/Wishibam/Ecommerce-sylius/pull/11918)\n    - [\\[P1\\] Express checkout : pinner explicitement les wallets autoris\u00e9s (quick win)](https://trello.com/c/tEpmPM9l/3890-p1-express-checkout-pinner-explicitement-les-wallets-autoris%C3%A9s-quick-win) **\ud83e\udd16 Testing tech**\n        - *:bug: fix: restrict express checkout wallets to an explicit allowlist* [\\#11919](https://github.com/Wishibam/Ecommerce-sylius/pull/11919)\n    - [\\[P0\\] Express checkout : commandes \u00e0 fonds captur\u00e9s supprim\u00e9es par la purge des carts + cha\u00eene d'abort morte](https://trello.com/c/1Wo7zGP5/3887-p0-express-checkout-commandes-%C3%A0-fonds-captur%C3%A9s-supprim%C3%A9es-par-la-purge-des-carts-cha%C3%AEne-dabort-morte) **\ud83e\udd16 Testing tech**\n        - *:bug: fix: protect express checkout captured-funds carts from the purge* [\\#11920](https://github.com/Wishibam/Ecommerce-sylius/pull/11920)\n    - [FEAT-0006 \u2014 Regroupement des emails d'annulation d'articles](https://trello.com/c/bBiV4jTE/3415-feat-0006-regroupement-des-emails-dannulation-darticles) **\ud83c\udf89 A MEP**\n        - *:bug: fix: FEAT-0006 cancellation email grouping QA feedback* [\\#11984](https://github.com/Wishibam/Ecommerce-sylius/pull/11984)\n        - *:bug: fix: register order\\_entirely\\_cancelled email template for all projects* [\\#12091](https://github.com/Wishibam/Ecommerce-sylius/pull/12091)\n        - *:bug: fix: send grouped withdrawal confirmations on entirely cancelled orders* [\\#12104](https://github.com/Wishibam/Ecommerce-sylius/pull/12104)\n    - [Min-height pages React](https://trello.com/c/Rti8eFXb/3919-min-height-pages-react) **\ud83c\udf89 A MEP**\n        - *:bug: fix: add min-height on React pages to prevent footer flash* [\\#11987](https://github.com/Wishibam/Ecommerce-sylius/pull/11987)\n    - [SEO - TVO - changement de slug](https://trello.com/c/Gbb2tles/3908-seo-tvo-changement-de-slug) **\ud83c\udf89 A MEP**\n        - *:bug: fix: clean up TVO brand page slugs with 301 redirects* [\\#11988](https://github.com/Wishibam/Ecommerce-sylius/pull/11988)\n    - [\u26a0\ufe0f action preprod/prod \u26a0\ufe0f \ud83d\uded2 Refonte Checkout #1 \u2014 La page Panier change de garde-robe](https://trello.com/c/qxdtlZxk/3851-%E2%9A%A0%EF%B8%8F-action-preprod-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%9B%92-refonte-checkout-1-la-page-panier-change-de-garde-robe) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): cart page QA feedback round* [\\#11990](https://github.com/Wishibam/Ecommerce-sylius/pull/11990)\n    - [\u26a0\ufe0f MEP \u26a0\ufe0f\u2b50 Google Customer Reviews sur TVO \u2014 brancher la machine \u00e0 \u00e9toiles](https://trello.com/c/7JA9u85M/3899-%E2%9A%A0%EF%B8%8F-mep-%E2%9A%A0%EF%B8%8F%E2%AD%90-google-customer-reviews-sur-tvo-brancher-la-machine-%C3%A0-%C3%A9toiles) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: TVO Google Customer Reviews \u2014 GTIN produits sur thank you* [\\#11991](https://github.com/Wishibam/Ecommerce-sylius/pull/11991)\n    - [Fix : TypeError trim() null sur les share descriptions de channel (admin)](https://trello.com/c/o47Ek1Fo/3924-fix-typeerror-trim-null-sur-les-share-descriptions-de-channel-admin) **\ud83e\udd16 Testing tech**\n        - *:bug: fix: guard against null share descriptions in channel setter* [\\#11992](https://github.com/Wishibam/Ecommerce-sylius/pull/11992)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f \ud83d\udce6\ud83c\udf0d Mondial Relay sans fronti\u00e8res \u2014 points relais UE (v1 TVO)](https://trello.com/c/4X0QYlQ5/3918-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%93%A6%F0%9F%8C%8D-mondial-relay-sans-fronti%C3%A8res-points-relais-ue-v1-tvo) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat(mondial-relay): relay search follows the buyer's country* [\\#11994](https://github.com/Wishibam/Ecommerce-sylius/pull/11994)\n    - [\ud83d\udccd Refonte Checkout \u2014 La suggestion d'adresse qui fait mouche](https://trello.com/c/vF0T1FZU/3860-%F0%9F%93%8D-refonte-checkout-la-suggestion-dadresse-qui-fait-mouche) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): address suggestion QA feedback round* [\\#11995](https://github.com/Wishibam/Ecommerce-sylius/pull/11995)\n        - *:bug: fix(tvo): keep the manual phone flag choice made on an empty field* [\\#12058](https://github.com/Wishibam/Ecommerce-sylius/pull/12058)\n    - [\ud83c\udf5e Refonte Checkout \u2014 Des toasts tout chauds pour les messages syst\u00e8me](https://trello.com/c/N70pstGO/3861-%F0%9F%8D%9E-refonte-checkout-des-toasts-tout-chauds-pour-les-messages-syst%C3%A8me) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): checkout toasts QA feedback round* [\\#11996](https://github.com/Wishibam/Ecommerce-sylius/pull/11996)\n    - [\ud83d\udd00 Refonte TVO : le variant s\u00e9lectionn\u00e9 saute en 1re position au lieu de rester \u00e0 sa place](https://trello.com/c/vQH5uxHz/3904-%F0%9F%94%80-refonte-tvo-le-variant-s%C3%A9lectionn%C3%A9-saute-en-1re-position-au-lieu-de-rester-%C3%A0-sa-place) **\ud83c\udf89 A MEP**\n        - *:bug: fix: keep option values in place on overflowing variant axis* [\\#11998](https://github.com/Wishibam/Ecommerce-sylius/pull/11998)\n    - [Helsinki preprod (peut \u00eatre ailleurs) - Commande C&C cr\u00e9e plusieurs shipments.](https://trello.com/c/Dlk8WpIg/3895-helsinki-preprod-peut-%C3%AAtre-ailleurs-commande-cc-cr%C3%A9e-plusieurs-shipments) **\ud83c\udf89 A MEP**\n        - *:bug: fix: remove phantom shipment block from account order page* [\\#11999](https://github.com/Wishibam/Ecommerce-sylius/pull/11999)\n    - [TVO- mail order\\_open\\_return\\_withdrawn -remplacement de tag](https://trello.com/c/NK5CnCM2/3883-tvo-mail-orderopenreturnwithdrawn-remplacement-de-tag) **\ud83c\udf89 A MEP**\n        - *\ud83d\udc1b fix: orange \"return in progress\" badge on TVO withdrawal email* [\\#12000](https://github.com/Wishibam/Ecommerce-sylius/pull/12000)\n    - [SEO - ALL - Meta Title](https://trello.com/c/QDbDIPTu/3909-seo-all-meta-title) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: add dedicated Meta Title for CMS pages* [\\#12001](https://github.com/Wishibam/Ecommerce-sylius/pull/12001)\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\ude9a Refonte Checkout #3 \u2014 Le Mode de livraison prend la route](https://trello.com/c/NDSNOimu/3854-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%9A%9A-refonte-checkout-3-le-mode-de-livraison-prend-la-route) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat(tvo): React checkout select shipping step (P3)* [\\#12011](https://github.com/Wishibam/Ecommerce-sylius/pull/12011)\n        - *:bug: fix(tvo): checkout QA feedback of August 18-19* [\\#12119](https://github.com/Wishibam/Ecommerce-sylius/pull/12119)\n    - [\u2709\ufe0f \\[TVO V2\\] Login & inscription : un seul email pour les gouverner tous](https://trello.com/c/Eml7o2An/3912-%E2%9C%89%EF%B8%8F-tvo-v2-login-inscription-un-seul-email-pour-les-gouverner-tous) **\ud83e\udee1 To Do JC**\n        - *:sparkles: feat: TVO email-first React login & registration flow* [\\#12015](https://github.com/Wishibam/Ecommerce-sylius/pull/12015)\n        - *:bug: fix(tvo): align the login page footer with the checkout footer* [\\#12133](https://github.com/Wishibam/Ecommerce-sylius/pull/12133)\n        - *:bug: fix(tvo): show the login success toasts on Safari* [\\#12154](https://github.com/Wishibam/Ecommerce-sylius/pull/12154)\n    - [Helsinki - Correction bug d'affichage en finnois en version mobile](https://trello.com/c/f9V6mA6z/3686-helsinki-correction-bug-daffichage-en-finnois-en-version-mobile) **\ud83c\udf89 A MEP**\n        - *:bug: fix: reduce Helsinki posts carousel title on mobile* [\\#12017](https://github.com/Wishibam/Ecommerce-sylius/pull/12017)\n    - [\ud83d\udcb8 TVO \u2014 Filtre par niveau de remise : que la d\u00e9marque soit avec vous \u2702\ufe0f](https://trello.com/c/FvSWlx14/3877-%F0%9F%92%B8-tvo-filtre-par-niveau-de-remise-que-la-d%C3%A9marque-soit-avec-vous-%E2%9C%82%EF%B8%8F) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: TVO minimum discount percentage filter on product lists* [\\#12018](https://github.com/Wishibam/Ecommerce-sylius/pull/12018)\n    - [\ud83c\udfbd \\[IS\\] Footer : \u00ab Notre accompagnement \u00bb devient \u00ab Nos services \u00bb et raccroche son lien](https://trello.com/c/H2X0XtqH/3932-%F0%9F%8E%BD-is-footer-notre-accompagnement-devient-nos-services-et-raccroche-son-lien) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: rename the Intersport footer column to \u00ab Nos services \u00bb and unlink its title* [\\#12026](https://github.com/Wishibam/Ecommerce-sylius/pull/12026)\n        - *:rewind: revert: Intersport footer \u00ab Nos services \u00bb (wrong target branch)* [\\#12037](https://github.com/Wishibam/Ecommerce-sylius/pull/12037)\n    - [Batavia - Probl\u00e8me sur l'affichage des variations](https://trello.com/c/MY6aNjLj/3931-batavia-probl%C3%A8me-sur-laffichage-des-variations) **\ud83c\udf89 A MEP**\n        - *:bug: fix: deep-link Batavia PLP cards to the displayed color variant* [\\#12027](https://github.com/Wishibam/Ecommerce-sylius/pull/12027)\n    - [Batavia \u2014 Mails \u00ab produit indisponible \u00bb non re\u00e7us par les clients](https://trello.com/c/YLHFxnVs/3933-batavia-mails-produit-indisponible-non-re%C3%A7us-par-les-clients) **\ud83c\udf89 A MEP**\n        - *:bug: fix: validate admin email templates and log real send outcomes* [\\#12035](https://github.com/Wishibam/Ecommerce-sylius/pull/12035)\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\udcb3 Refonte Checkout #4 \u2014 Le Mode de paiement passe \u00e0 la caisse](https://trello.com/c/vDcvKX88/3855-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%92%B3-refonte-checkout-4-le-mode-de-paiement-passe-%C3%A0-la-caisse) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat(tvo): rebuild the checkout payment step and success page in React* [\\#12051](https://github.com/Wishibam/Ecommerce-sylius/pull/12051)\n    - [Intersport - Bug d'affichage images box produit](https://trello.com/c/mOO6EBx1/3936-intersport-bug-daffichage-images-box-produit) **\ud83c\udf89 A MEP**\n        - *:bug: \\[via\\] fix: styles mobiles des pages mot de passe oubli\u00e9/reset* [\\#12055](https://github.com/Wishibam/Ecommerce-sylius/pull/12055)\n    - [\ud83e\ude97 VIA \u2014 Le filtre Cat\u00e9gorie s'ouvre tout seul dans les descentes : on le veut ferm\u00e9 au chargement](https://trello.com/c/GMHVWZe2/3938-%F0%9F%AA%97-via-le-filtre-cat%C3%A9gorie-souvre-tout-seul-dans-les-descentes-on-le-veut-ferm%C3%A9-au-chargement) **\ud83c\udf89 A MEP**\n        - *:bug: \\[via\\] fix: le filtre Cat\u00e9gorie reste ferm\u00e9 au chargement des descentes* [\\#12059](https://github.com/Wishibam/Ecommerce-sylius/pull/12059)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f Feed : Ajouter le flux facebook TVO](https://trello.com/c/iXjTokqz/3937-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-feed-ajouter-le-flux-facebook-tvo) **\ud83e\udd16 Testing tech**\n        - *:sparkles: feat: porter le flux facebook\\_catalog vers le nouveau composant* [\\#12060](https://github.com/Wishibam/Ecommerce-sylius/pull/12060)\n    - [\\[Migration\\]\\[B.1\\] PHP 8.2 \u2192 8.3](https://trello.com/c/Slm1Q5n7/3940-migrationb1-php-82-%E2%86%92-83) **\ud83d\ude80 To Do Vincent**\n        - *:wrench: chore: run the test suite on PHP 8.2 and 8.3 \\[B.1\\]* [\\#12063](https://github.com/Wishibam/Ecommerce-sylius/pull/12063)\n        - *:bug: fix(deploy): restart PHP-FPM via systemd glob instead of hardcoded 8.2* [\\#12066](https://github.com/Wishibam/Ecommerce-sylius/pull/12066)\n        - *:wrench: chore: run the dual PHP matrix on the tests job only \\[B.1\\]* [\\#12068](https://github.com/Wishibam/Ecommerce-sylius/pull/12068)\n    - [\\[Migration\\]\\[B.2\\] Sylius 1.12 \u2192 1.13 (DBAL 3)](https://trello.com/c/huA0VNU9/3941-migrationb2-sylius-112-%E2%86%92-113-dbal-3) **\ud83d\ude80 To Do Vincent**\n        - *:wrench: chore(doctrine): drop the last getSchemaManager() call for DBAL 3/4 \\[B.2 P.1\\]* [\\#12071](https://github.com/Wishibam/Ecommerce-sylius/pull/12071)\n        - *:white\\_check\\_mark: test: characterize every state machine graph wiring \\[B.2 P.2\\]* [\\#12074](https://github.com/Wishibam/Ecommerce-sylius/pull/12074)\n        - *:recycle: refactor: state machine abstraction infra + pilot call site \\[B.2 P.3.1\\]* [\\#12089](https://github.com/Wishibam/Ecommerce-sylius/pull/12089)\n        - *:recycle: refactor: migrate the mechanical state machine call sites \\[B.2 P.3.2\\]* [\\#12094](https://github.com/Wishibam/Ecommerce-sylius/pull/12094)\n        - *:recycle: refactor: migrate the structural state machine call sites \\[B.2 P.3.3\\]* [\\#12098](https://github.com/Wishibam/Ecommerce-sylius/pull/12098)\n        - *:wrench: chore: bump symfony/flex 1 to 2 \\[B.2 P.4\\]* [\\#12100](https://github.com/Wishibam/Ecommerce-sylius/pull/12100)\n    - [MA - Pas de message d'erreur lorsque l'on n'arrive pas \u00e0 se connecter \u00e0 son compte client](https://trello.com/c/fQ9vwTD0/3684-ma-pas-de-message-derreur-lorsque-lon-narrive-pas-%C3%A0-se-connecter-%C3%A0-son-compte-client) **\ud83c\udf89 A MEP**\n        - *:bug: fix: display an error message on failed login on Marques Avenue* [\\#12072](https://github.com/Wishibam/Ecommerce-sylius/pull/12072)\n    - [Fix : \ufeff\ufefftransmettre le consentement newsletter \u00e0 Coniq \u00e0 l'inscription](https://trello.com/c/mShGQBUK/3943-fix-transmettre-le-consentement-newsletter-%C3%A0-coniq-%C3%A0-linscription) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: transmettre le consentement newsletter \u00e0 Coniq \u00e0 l'inscription* [\\#12076](https://github.com/Wishibam/Ecommerce-sylius/pull/12076)\n        - *:bug: fix: consentement newsletter Coniq par canal \u00e0 l'inscription* [\\#12105](https://github.com/Wishibam/Ecommerce-sylius/pull/12105)\n    - [TVO - Bloc caract\u00e9ristiques : Attribut genre et ean](https://trello.com/c/MwYdlurp/3945-tvo-bloc-caract%C3%A9ristiques-attribut-genre-et-ean) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): localize gender and drop EAN in the characteristics block* [\\#12112](https://github.com/Wishibam/Ecommerce-sylius/pull/12112)\n    - [Page de confirmation de commande - N\u00b0 de commande sylius plut\u00f4t que MP](https://trello.com/c/bUrAEDyS/3944-page-de-confirmation-de-commande-n-de-commande-sylius-plut%C3%B4t-que-mp) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): align the thank-you order number with the email* [\\#12114](https://github.com/Wishibam/Ecommerce-sylius/pull/12114)\n    - [TVO \u2014 Tracking des mails de relance panier (taux d'ouverture / clic / CA)](https://trello.com/c/cyTNgF1i/3947-tvo-tracking-des-mails-de-relance-panier-taux-douverture-clic-ca) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat(tvo, all): track abandoned cart reminder emails* [\\#12118](https://github.com/Wishibam/Ecommerce-sylius/pull/12118)\n    - [Bug : Mail d'annulation quand validation de retour](https://trello.com/c/Zh0QOdKa/3950-bug-mail-dannulation-quand-validation-de-retour) **\ud83c\udf89 A MEP**\n        - *:bug: fix: skip cancellation email when cancel follows a validated return* [\\#12122](https://github.com/Wishibam/Ecommerce-sylius/pull/12122)\n        - *:bug: fix: group return confirmation emails to fix stale VALID\u00c9 tags* [\\#12131](https://github.com/Wishibam/Ecommerce-sylius/pull/12131)\n    - [FACTURATION - Template mail : cr\u00e9ation de variable](https://trello.com/c/GQLEqISq/2508-facturation-template-mail-cr%C3%A9ation-de-variable) **\u2600\ufe0fIn review**\n        - *feat(email): expose the invoice table as an invoiceResume variable* [\\#12143](https://github.com/Wishibam/Ecommerce-sylius/pull/12143)\n    - [\\[P1\\] Express checkout : le PaymentIntent est cal\u00e9 sur la m\u00e9thode de livraison par d\u00e9faut, pas sur celle pr\u00e9s\u00e9lectionn\u00e9e par Stripe](https://trello.com/c/WsW78d4s/3955-p1-express-checkout-le-paymentintent-est-cal%C3%A9-sur-la-m%C3%A9thode-de-livraison-par-d%C3%A9faut-pas-sur-celle-pr%C3%A9s%C3%A9lectionn%C3%A9e-par-stripe) **\ud83c\udf89 A MEP**\n        - *:bug: fix: \\[TVO\\] sync express PaymentIntent on preselected rate* [\\#12150](https://github.com/Wishibam/Ecommerce-sylius/pull/12150)\n \n- **Misc**\n    - *:sparkles: feat: PushDispatcher + adaptateur FCM (push app TVO)* [\\#11917](https://github.com/Wishibam/Ecommerce-sylius/pull/11917)\n    - *style(withdrawal): make the withdrawal button theme-colored and not f\u2026* [\\#11951](https://github.com/Wishibam/Ecommerce-sylius/pull/11951)\n    - *:zap: perf: Batavia PLP \u2014 ES result cache, key batching, menu cache* [\\#11963](https://github.com/Wishibam/Ecommerce-sylius/pull/11963)\n    - *:wrench: chore: outillage pour worktrees parall\u00e8les (front isol\u00e9 par projet)* [\\#11986](https://github.com/Wishibam/Ecommerce-sylius/pull/11986)\n    - *:sparkles: feat: push app TVO \u2014 envoi asynchrone + badge (3.A.5 + 3.A.6)* [\\#12022](https://github.com/Wishibam/Ecommerce-sylius/pull/12022)\n    - *:sparkles: feat: badge unreadPushCount de bout en bout (app TVO)* [\\#12025](https://github.com/Wishibam/Ecommerce-sylius/pull/12025)\n    - *:sparkles: feat: compteur badge dans data des push (app TVO)* [\\#12028](https://github.com/Wishibam/Ecommerce-sylius/pull/12028)\n    - *:sparkles: feat: push \u00ab commande confirm\u00e9e \u00bb (app TVO)* [\\#12031](https://github.com/Wishibam/Ecommerce-sylius/pull/12031)\n    - *:sparkles: feat: push \u00ab commande exp\u00e9di\u00e9e \u00bb (app TVO)* [\\#12040](https://github.com/Wishibam/Ecommerce-sylius/pull/12040)\n    - *feat(push): notification de remboursement de commande (TVO 3.B.3)* [\\#12041](https://github.com/Wishibam/Ecommerce-sylius/pull/12041)\n    - *fix(push): durcir l'envoi FCM \u2014 timeouts born\u00e9s + retry effectif (TVO 3.A.7)* [\\#12042](https://github.com/Wishibam/Ecommerce-sylius/pull/12042)\n    - *test(featured-content): d\u00e9-flakifier testProgramDisableDelay (tol\u00e9rance sur le d\u00e9lai)* [\\#12044](https://github.com/Wishibam/Ecommerce-sylius/pull/12044)\n    - *feat(push): notification de retour en stock (TVO 3.B.4)* [\\#12045](https://github.com/Wishibam/Ecommerce-sylius/pull/12045)\n    - *feat(push): notification de baisse de prix wishlist (TVO 3.B.5)* [\\#12049](https://github.com/Wishibam/Ecommerce-sylius/pull/12049)\n    - *:bug: fix(megamenu): \u00e9largir le lien \u00e0 2048 caract\u00e8res* [\\#12050](https://github.com/Wishibam/Ecommerce-sylius/pull/12050)\n    - *feat(push): relance push des paniers abandonn\u00e9s (TVO 3.B.6)* [\\#12053](https://github.com/Wishibam/Ecommerce-sylius/pull/12053)\n    - *feat(deeplink): AASA de la nouvelle app TVO \u2014 Universal Links iOS (TVO 4.1)* [\\#12064](https://github.com/Wishibam/Ecommerce-sylius/pull/12064)\n    - *feat(deeplink): assetlinks.json de la nouvelle app TVO \u2014 App Links Android (TVO 4.2)* [\\#12065](https://github.com/Wishibam/Ecommerce-sylius/pull/12065)\n    - *:bug: fix: complete payments stuck by Stripe webhook/checkout race* [\\#12075](https://github.com/Wishibam/Ecommerce-sylius/pull/12075)\n    - *:bug: fix: dedup order\\_confirmation per order to stop double send* [\\#12101](https://github.com/Wishibam/Ecommerce-sylius/pull/12101)\n    - *:bug: fix: pin the fixtures channel default tax zone* [\\#12106](https://github.com/Wishibam/Ecommerce-sylius/pull/12106)\n    - *:wrench: chore: bump webfactory/ssh-agent to v0.9.1* [\\#12120](https://github.com/Wishibam/Ecommerce-sylius/pull/12120)\n    - *fix(coniq): stop Coniq errors from blocking the to\\_ship transition* [\\#12134](https://github.com/Wishibam/Ecommerce-sylius/pull/12134)\n    - *Fix/coniq swallow poisons doctrine transaction* [\\#12138](https://github.com/Wishibam/Ecommerce-sylius/pull/12138)\n    - *:wrench: chore: merge master into develop* [\\#12144](https://github.com/Wishibam/Ecommerce-sylius/pull/12144)\n    - *:bug: fix(translations): align the missing-keys report with the gate* [\\#12159](https://github.com/Wishibam/Ecommerce-sylius/pull/12159)\n \n- **D\u00e9j\u00e0 en production**\n    - [\\[Migration\\]\\[A.2\\] D\u00e9mant\u00e8lement Setono Analytics + Tag-Bag](https://trello.com/c/uJN0Gkiz/3856-migrationa2-d%C3%A9mant%C3%A8lement-setono-analytics-tag-bag) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore(migration): internalize setono analytics + tag-bag as src/Component \\[A.2\\]* [\\#11846](https://github.com/Wishibam/Ecommerce-sylius/pull/11846)\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\udc1b Fix r\u00e9indexation ES bloqu\u00e9e \u2014 \u00ab immense term \u00bb sur attribut trop long (Intersport)](https://trello.com/c/iD6idW0v/3915-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%90%9B-fix-r%C3%A9indexation-es-bloqu%C3%A9e-immense-term-sur-attribut-trop-long-intersport) **MEP Ao\u00fbt**\n        - *:bug: fix: r\u00e9indexation ES bloqu\u00e9e par un attribut trop long (immense term)* [\\#11972](https://github.com/Wishibam/Ecommerce-sylius/pull/11972)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f \u203c\ufe0f Nouveau Feeds - Faire tourner tous les nouveaux feeds sur toutes les preprods/prods](https://trello.com/c/Kr8UhDAv/3910-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-%EF%B8%8F-nouveau-feeds-faire-tourner-tous-les-nouveaux-feeds-sur-toutes-les-preprods-prods) **\ud83e\udee1 To Do JC**\n        - *:sparkles: feat: drive-to-store feeds parity with legacy Setono* [\\#11979](https://github.com/Wishibam/Ecommerce-sylius/pull/11979)\n    - [Helsinki \u2014 Funnel checkout GA4 vide : \u00e9v\u00e9nements e-commerce manquants/incomplets](https://trello.com/c/j0yQGSFm/3921-helsinki-funnel-checkout-ga4-vide-%C3%A9v%C3%A9nements-e-commerce-manquants-incomplets) **MEP Septembre**\n        - *:bug: fix: \u00e9mettre le funnel checkout GA4 complet* [\\#11980](https://github.com/Wishibam/Ecommerce-sylius/pull/11980)\n        - *:bug: fix: \u00e9mettre add\\_payment\\_info quand l'\u00e9tape de paiement est saut\u00e9e* [\\#12014](https://github.com/Wishibam/Ecommerce-sylius/pull/12014)\n    - [TVO - Les recommandations produits ne remontent aucun produit sur la fiche produit](https://trello.com/c/lw3SYgNG/3926-tvo-les-recommandations-produits-ne-remontent-aucun-produit-sur-la-fiche-produit) **MEP Ao\u00fbt**\n        - *:bug: fix(search): match the indexed color value in recommendations* [\\#12004](https://github.com/Wishibam/Ecommerce-sylius/pull/12004)\n    - [A ESTIMER : Google Shopping Feed : ajouter le Outlet Price en cas de promotion](https://trello.com/c/RnEgL53B/3867-a-estimer-google-shopping-feed-ajouter-le-outlet-price-en-cas-de-promotion) **MEP Ao\u00fbt**\n        - *:sparkles: feat(helsinki): expose the outlet price in the Google Shopping feed* [\\#12020](https://github.com/Wishibam/Ecommerce-sylius/pull/12020)\n    - [\u2615\ufe0f \\[Batavia\\] Frais de retour : \u20ac3,25 \u2192 \u20ac3,95 (et on passe le texte en traduction)](https://trello.com/c/P4vec3cz/3934-%E2%98%95%EF%B8%8F-batavia-frais-de-retour-%E2%82%AC325-%E2%86%92-%E2%82%AC395-et-on-passe-le-texte-en-traduction) **MEP Ao\u00fbt**\n        - *:bug: fix: Batavia return cost 3,95 and move the line to a translation* [\\#12034](https://github.com/Wishibam/Ecommerce-sylius/pull/12034)\n    - [TVO - Changement url de la page marque Millet](https://trello.com/c/8NZBv11v/3952-tvo-changement-url-de-la-page-marque-millet) **MEP Septembre**\n        - *:bug: fix(tvo): rename the Millet merchant page slug from lafuma to millet* [\\#12136](https://github.com/Wishibam/Ecommerce-sylius/pull/12136)\n    - *:bug: fix: render flag emojis as SVG icons, not OS emoji glyphs* [\\#11981](https://github.com/Wishibam/Ecommerce-sylius/pull/11981)\n    - *:bug: fix: apply the flag icon filter to the remaining menu renderings* [\\#11982](https://github.com/Wishibam/Ecommerce-sylius/pull/11982)\n    - *:wrench: chore: bump php\\_codesniffer en 3.13.6 (CVE-2026-67434, CI rouge)* [\\#12008](https://github.com/Wishibam/Ecommerce-sylius/pull/12008)\n    - *:bug: fix: skip Comarch in LaRedoute order import when disabled* [\\#12125](https://github.com/Wishibam/Ecommerce-sylius/pull/12125)", "creation_timestamp": "2026-09-04T13:30:08.718890Z"}, {"uuid": "ca8b5d53-f9f4-4c46-9dc2-48d8f2deed03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67434", "type": "seen", "source": "https://gist.github.com/jbourdin/2b7c32ec2d31b1197253a4606ef57573", "content": "- **Trello**\n    - [GLOBAL - Email Alerte paiement en erreur](https://trello.com/c/P1DJvjHp/3229-global-email-alerte-paiement-en-erreur) **\ud83c\udf89 A MEP**\n        - *feat(payment): send email notification when payment fails* [\\#10555](https://github.com/Wishibam/Ecommerce-sylius/pull/10555)\n    - [Helsinki : Portail de retour - Sylius - int\u00e9gration front du portail de retour](https://trello.com/c/mhcc7YaC/2401-helsinki-portail-de-retour-sylius-int%C3%A9gration-front-du-portail-de-retour) **\ud83d\ude80Testing BACK / FLUX / CLIENT**\n        - *feat(helsinki): Add return portal to Helsinki order details* [\\#11757](https://github.com/Wishibam/Ecommerce-sylius/pull/11757)\n        - *fix(helsinki): tri-state select-all checkbox on the return request page* [\\#12129](https://github.com/Wishibam/Ecommerce-sylius/pull/12129)\n        - *fix(helsinki): give in-store returns their own email and no return code* [\\#12155](https://github.com/Wishibam/Ecommerce-sylius/pull/12155)\n    - [\u26a0\ufe0fAction prod\u26a0\ufe0f\ud83d\udd14 Refonte TVO : tracking du volet d'alerte \u00ab retour en stock \u00bb](https://trello.com/c/SXyhrSQb/3834-%E2%9A%A0%EF%B8%8Faction-prod%E2%9A%A0%EF%B8%8F%F0%9F%94%94-refonte-tvo-tracking-du-volet-dalerte-retour-en-stock) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: track back-in-stock alert panel usage* [\\#11791](https://github.com/Wishibam/Ecommerce-sylius/pull/11791)\n    - [TVO - Fiche produit - Ajout des blocs \"Mati\u00e8re et entretien\" & \"Caract\u00e9ristiques\"](https://trello.com/c/AbsKmIzk/3633-tvo-fiche-produit-ajout-des-blocs-mati%C3%A8re-et-entretien-caract%C3%A9ristiques) **\ud83c\udf89 A MEP**\n        - *feat(tvo): add Mati\u00e8re et entretien & Caract\u00e9ristiques blocks on PDP* [\\#11812](https://github.com/Wishibam/Ecommerce-sylius/pull/11812)\n    - [\\[Migration\\]\\[A.4.1\\] Internaliser bitbag/wishlist-plugin dans src/Component/Wishlist](https://trello.com/c/U9dQGx1l/3863-migrationa41-internaliser-bitbag-wishlist-plugin-dans-src-component-wishlist) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: internalize bitbag/wishlist-plugin \\[A.4.1\\]* [\\#11856](https://github.com/Wishibam/Ecommerce-sylius/pull/11856)\n    - [\\[Migration\\]\\[A.4.2/A.4.3\\] Internaliser bring & deep-link dans src/Component](https://trello.com/c/RsLN5SNT/3864-migrationa42-a43-internaliser-bring-deep-link-dans-src-component) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: internalize bring & deep-link plugins \\[A.4.2, A.4.3\\]* [\\#11861](https://github.com/Wishibam/Ecommerce-sylius/pull/11861)\n    - [\\[Migration\\]\\[A.5\\] Bumps frontend \u00ab safe \u00bb + suppression des packages morts](https://trello.com/c/vI6k61gt/3873-migrationa5-bumps-frontend-safe-suppression-des-packages-morts) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: bump safe frontend deps + prune dead packages \\[A.5\\]* [\\#11875](https://github.com/Wishibam/Ecommerce-sylius/pull/11875)\n    - [\\[Migration\\]\\[A.6\\] Pr\u00e9paration Doctrine pour DBAL 3 (monkey-patch migrations)](https://trello.com/c/8mdyVMwg/3880-migrationa6-pr%C3%A9paration-doctrine-pour-dbal-3-monkey-patch-migrations) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore: replace Doctrine migration monkey-patch for DBAL 3 \\[A.6\\]* [\\#11893](https://github.com/Wishibam/Ecommerce-sylius/pull/11893)\n    - [TVO - Express checkout : adresse tronqu\u00e9e \u2014 nom de rue perdu (Apple Pay line1/line2)](https://trello.com/c/dIrl0I1a/3884-tvo-express-checkout-adresse-tronqu%C3%A9e-nom-de-rue-perdu-apple-pay-line1-line2) **\ud83c\udf89 A MEP**\n        - *:bug: fix: join express checkout wallet address line1/line2 into street* [\\#11914](https://github.com/Wishibam/Ecommerce-sylius/pull/11914)\n    - [\\[P0\\] Express checkout : re-v\u00e9rifier le montant du PaymentIntent au complete](https://trello.com/c/qJdTR9Jc/3885-p0-express-checkout-re-v%C3%A9rifier-le-montant-du-paymentintent-au-complete) **\ud83e\udd16 Testing tech**\n        - *:bug: fix: verify express checkout PaymentIntent amount at completion* [\\#11916](https://github.com/Wishibam/Ecommerce-sylius/pull/11916)\n    - [\\[P0\\] Webhook Stripe : rembourser r\u00e9ellement les charges des commandes refus\u00e9es/annul\u00e9es](https://trello.com/c/fyJeMD3L/3886-p0-webhook-stripe-rembourser-r%C3%A9ellement-les-charges-des-commandes-refus%C3%A9es-annul%C3%A9es) **\ud83e\udd16 Testing tech**\n        - *:bug: fix: refund Stripe charges captured for refused or cancelled orders* [\\#11918](https://github.com/Wishibam/Ecommerce-sylius/pull/11918)\n    - [\\[P1\\] Express checkout : pinner explicitement les wallets autoris\u00e9s (quick win)](https://trello.com/c/tEpmPM9l/3890-p1-express-checkout-pinner-explicitement-les-wallets-autoris%C3%A9s-quick-win) **\ud83e\udd16 Testing tech**\n        - *:bug: fix: restrict express checkout wallets to an explicit allowlist* [\\#11919](https://github.com/Wishibam/Ecommerce-sylius/pull/11919)\n    - [\\[P0\\] Express checkout : commandes \u00e0 fonds captur\u00e9s supprim\u00e9es par la purge des carts + cha\u00eene d'abort morte](https://trello.com/c/1Wo7zGP5/3887-p0-express-checkout-commandes-%C3%A0-fonds-captur%C3%A9s-supprim%C3%A9es-par-la-purge-des-carts-cha%C3%AEne-dabort-morte) **\ud83e\udd16 Testing tech**\n        - *:bug: fix: protect express checkout captured-funds carts from the purge* [\\#11920](https://github.com/Wishibam/Ecommerce-sylius/pull/11920)\n    - [FEAT-0006 \u2014 Regroupement des emails d'annulation d'articles](https://trello.com/c/bBiV4jTE/3415-feat-0006-regroupement-des-emails-dannulation-darticles) **\ud83c\udf89 A MEP**\n        - *:bug: fix: FEAT-0006 cancellation email grouping QA feedback* [\\#11984](https://github.com/Wishibam/Ecommerce-sylius/pull/11984)\n        - *:bug: fix: register order\\_entirely\\_cancelled email template for all projects* [\\#12091](https://github.com/Wishibam/Ecommerce-sylius/pull/12091)\n        - *:bug: fix: send grouped withdrawal confirmations on entirely cancelled orders* [\\#12104](https://github.com/Wishibam/Ecommerce-sylius/pull/12104)\n    - [Min-height pages React](https://trello.com/c/Rti8eFXb/3919-min-height-pages-react) **\ud83c\udf89 A MEP**\n        - *:bug: fix: add min-height on React pages to prevent footer flash* [\\#11987](https://github.com/Wishibam/Ecommerce-sylius/pull/11987)\n    - [SEO - TVO - changement de slug](https://trello.com/c/Gbb2tles/3908-seo-tvo-changement-de-slug) **\ud83c\udf89 A MEP**\n        - *:bug: fix: clean up TVO brand page slugs with 301 redirects* [\\#11988](https://github.com/Wishibam/Ecommerce-sylius/pull/11988)\n    - [\u26a0\ufe0f action preprod/prod \u26a0\ufe0f \ud83d\uded2 Refonte Checkout #1 \u2014 La page Panier change de garde-robe](https://trello.com/c/qxdtlZxk/3851-%E2%9A%A0%EF%B8%8F-action-preprod-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%9B%92-refonte-checkout-1-la-page-panier-change-de-garde-robe) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): cart page QA feedback round* [\\#11990](https://github.com/Wishibam/Ecommerce-sylius/pull/11990)\n    - [\u26a0\ufe0f MEP \u26a0\ufe0f\u2b50 Google Customer Reviews sur TVO \u2014 brancher la machine \u00e0 \u00e9toiles](https://trello.com/c/7JA9u85M/3899-%E2%9A%A0%EF%B8%8F-mep-%E2%9A%A0%EF%B8%8F%E2%AD%90-google-customer-reviews-sur-tvo-brancher-la-machine-%C3%A0-%C3%A9toiles) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: TVO Google Customer Reviews \u2014 GTIN produits sur thank you* [\\#11991](https://github.com/Wishibam/Ecommerce-sylius/pull/11991)\n    - [Fix : TypeError trim() null sur les share descriptions de channel (admin)](https://trello.com/c/o47Ek1Fo/3924-fix-typeerror-trim-null-sur-les-share-descriptions-de-channel-admin) **\ud83e\udd16 Testing tech**\n        - *:bug: fix: guard against null share descriptions in channel setter* [\\#11992](https://github.com/Wishibam/Ecommerce-sylius/pull/11992)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f \ud83d\udce6\ud83c\udf0d Mondial Relay sans fronti\u00e8res \u2014 points relais UE (v1 TVO)](https://trello.com/c/4X0QYlQ5/3918-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%93%A6%F0%9F%8C%8D-mondial-relay-sans-fronti%C3%A8res-points-relais-ue-v1-tvo) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat(mondial-relay): relay search follows the buyer's country* [\\#11994](https://github.com/Wishibam/Ecommerce-sylius/pull/11994)\n    - [\ud83d\udccd Refonte Checkout \u2014 La suggestion d'adresse qui fait mouche](https://trello.com/c/vF0T1FZU/3860-%F0%9F%93%8D-refonte-checkout-la-suggestion-dadresse-qui-fait-mouche) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): address suggestion QA feedback round* [\\#11995](https://github.com/Wishibam/Ecommerce-sylius/pull/11995)\n        - *:bug: fix(tvo): keep the manual phone flag choice made on an empty field* [\\#12058](https://github.com/Wishibam/Ecommerce-sylius/pull/12058)\n    - [\ud83c\udf5e Refonte Checkout \u2014 Des toasts tout chauds pour les messages syst\u00e8me](https://trello.com/c/N70pstGO/3861-%F0%9F%8D%9E-refonte-checkout-des-toasts-tout-chauds-pour-les-messages-syst%C3%A8me) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): checkout toasts QA feedback round* [\\#11996](https://github.com/Wishibam/Ecommerce-sylius/pull/11996)\n    - [\ud83d\udd00 Refonte TVO : le variant s\u00e9lectionn\u00e9 saute en 1re position au lieu de rester \u00e0 sa place](https://trello.com/c/vQH5uxHz/3904-%F0%9F%94%80-refonte-tvo-le-variant-s%C3%A9lectionn%C3%A9-saute-en-1re-position-au-lieu-de-rester-%C3%A0-sa-place) **\ud83c\udf89 A MEP**\n        - *:bug: fix: keep option values in place on overflowing variant axis* [\\#11998](https://github.com/Wishibam/Ecommerce-sylius/pull/11998)\n    - [Helsinki preprod (peut \u00eatre ailleurs) - Commande C&C cr\u00e9e plusieurs shipments.](https://trello.com/c/Dlk8WpIg/3895-helsinki-preprod-peut-%C3%AAtre-ailleurs-commande-cc-cr%C3%A9e-plusieurs-shipments) **\ud83c\udf89 A MEP**\n        - *:bug: fix: remove phantom shipment block from account order page* [\\#11999](https://github.com/Wishibam/Ecommerce-sylius/pull/11999)\n    - [TVO- mail order\\_open\\_return\\_withdrawn -remplacement de tag](https://trello.com/c/NK5CnCM2/3883-tvo-mail-orderopenreturnwithdrawn-remplacement-de-tag) **\ud83c\udf89 A MEP**\n        - *\ud83d\udc1b fix: orange \"return in progress\" badge on TVO withdrawal email* [\\#12000](https://github.com/Wishibam/Ecommerce-sylius/pull/12000)\n    - [SEO - ALL - Meta Title](https://trello.com/c/QDbDIPTu/3909-seo-all-meta-title) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: add dedicated Meta Title for CMS pages* [\\#12001](https://github.com/Wishibam/Ecommerce-sylius/pull/12001)\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\ude9a Refonte Checkout #3 \u2014 Le Mode de livraison prend la route](https://trello.com/c/NDSNOimu/3854-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%9A%9A-refonte-checkout-3-le-mode-de-livraison-prend-la-route) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat(tvo): React checkout select shipping step (P3)* [\\#12011](https://github.com/Wishibam/Ecommerce-sylius/pull/12011)\n        - *:bug: fix(tvo): checkout QA feedback of August 18-19* [\\#12119](https://github.com/Wishibam/Ecommerce-sylius/pull/12119)\n    - [\u2709\ufe0f \\[TVO V2\\] Login & inscription : un seul email pour les gouverner tous](https://trello.com/c/Eml7o2An/3912-%E2%9C%89%EF%B8%8F-tvo-v2-login-inscription-un-seul-email-pour-les-gouverner-tous) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: TVO email-first React login & registration flow* [\\#12015](https://github.com/Wishibam/Ecommerce-sylius/pull/12015)\n        - *:bug: fix(tvo): align the login page footer with the checkout footer* [\\#12133](https://github.com/Wishibam/Ecommerce-sylius/pull/12133)\n        - *:bug: fix(tvo): show the login success toasts on Safari* [\\#12154](https://github.com/Wishibam/Ecommerce-sylius/pull/12154)\n        - *:bug: fix(tvo): drop the payment block from the login footer* [\\#12158](https://github.com/Wishibam/Ecommerce-sylius/pull/12158)\n    - [Helsinki - Correction bug d'affichage en finnois en version mobile](https://trello.com/c/f9V6mA6z/3686-helsinki-correction-bug-daffichage-en-finnois-en-version-mobile) **\ud83c\udf89 A MEP**\n        - *:bug: fix: reduce Helsinki posts carousel title on mobile* [\\#12017](https://github.com/Wishibam/Ecommerce-sylius/pull/12017)\n    - [\ud83d\udcb8 TVO \u2014 Filtre par niveau de remise : que la d\u00e9marque soit avec vous \u2702\ufe0f](https://trello.com/c/FvSWlx14/3877-%F0%9F%92%B8-tvo-filtre-par-niveau-de-remise-que-la-d%C3%A9marque-soit-avec-vous-%E2%9C%82%EF%B8%8F) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: TVO minimum discount percentage filter on product lists* [\\#12018](https://github.com/Wishibam/Ecommerce-sylius/pull/12018)\n    - [\ud83c\udfbd \\[IS\\] Footer : \u00ab Notre accompagnement \u00bb devient \u00ab Nos services \u00bb et raccroche son lien](https://trello.com/c/H2X0XtqH/3932-%F0%9F%8E%BD-is-footer-notre-accompagnement-devient-nos-services-et-raccroche-son-lien) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: rename the Intersport footer column to \u00ab Nos services \u00bb and unlink its title* [\\#12026](https://github.com/Wishibam/Ecommerce-sylius/pull/12026)\n        - *:rewind: revert: Intersport footer \u00ab Nos services \u00bb (wrong target branch)* [\\#12037](https://github.com/Wishibam/Ecommerce-sylius/pull/12037)\n    - [Batavia - Probl\u00e8me sur l'affichage des variations](https://trello.com/c/MY6aNjLj/3931-batavia-probl%C3%A8me-sur-laffichage-des-variations) **\ud83c\udf89 A MEP**\n        - *:bug: fix: deep-link Batavia PLP cards to the displayed color variant* [\\#12027](https://github.com/Wishibam/Ecommerce-sylius/pull/12027)\n    - [Batavia \u2014 Mails \u00ab produit indisponible \u00bb non re\u00e7us par les clients](https://trello.com/c/YLHFxnVs/3933-batavia-mails-produit-indisponible-non-re%C3%A7us-par-les-clients) **\ud83c\udf89 A MEP**\n        - *:bug: fix: validate admin email templates and log real send outcomes* [\\#12035](https://github.com/Wishibam/Ecommerce-sylius/pull/12035)\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\udcb3 Refonte Checkout #4 \u2014 Le Mode de paiement passe \u00e0 la caisse](https://trello.com/c/vDcvKX88/3855-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%92%B3-refonte-checkout-4-le-mode-de-paiement-passe-%C3%A0-la-caisse) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat(tvo): rebuild the checkout payment step and success page in React* [\\#12051](https://github.com/Wishibam/Ecommerce-sylius/pull/12051)\n    - [Intersport - Bug d'affichage images box produit](https://trello.com/c/mOO6EBx1/3936-intersport-bug-daffichage-images-box-produit) **\ud83c\udf89 A MEP**\n        - *:bug: \\[via\\] fix: styles mobiles des pages mot de passe oubli\u00e9/reset* [\\#12055](https://github.com/Wishibam/Ecommerce-sylius/pull/12055)\n    - [\ud83e\ude97 VIA \u2014 Le filtre Cat\u00e9gorie s'ouvre tout seul dans les descentes : on le veut ferm\u00e9 au chargement](https://trello.com/c/GMHVWZe2/3938-%F0%9F%AA%97-via-le-filtre-cat%C3%A9gorie-souvre-tout-seul-dans-les-descentes-on-le-veut-ferm%C3%A9-au-chargement) **\ud83c\udf89 A MEP**\n        - *:bug: \\[via\\] fix: le filtre Cat\u00e9gorie reste ferm\u00e9 au chargement des descentes* [\\#12059](https://github.com/Wishibam/Ecommerce-sylius/pull/12059)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f Feed : Ajouter le flux facebook TVO](https://trello.com/c/iXjTokqz/3937-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-feed-ajouter-le-flux-facebook-tvo) **\ud83e\udd16 Testing tech**\n        - *:sparkles: feat: porter le flux facebook\\_catalog vers le nouveau composant* [\\#12060](https://github.com/Wishibam/Ecommerce-sylius/pull/12060)\n    - [\\[Migration\\]\\[B.1\\] PHP 8.2 \u2192 8.3](https://trello.com/c/Slm1Q5n7/3940-migrationb1-php-82-%E2%86%92-83) **\ud83d\ude80 To Do Vincent**\n        - *:wrench: chore: run the test suite on PHP 8.2 and 8.3 \\[B.1\\]* [\\#12063](https://github.com/Wishibam/Ecommerce-sylius/pull/12063)\n        - *:bug: fix(deploy): restart PHP-FPM via systemd glob instead of hardcoded 8.2* [\\#12066](https://github.com/Wishibam/Ecommerce-sylius/pull/12066)\n        - *:wrench: chore: run the dual PHP matrix on the tests job only \\[B.1\\]* [\\#12068](https://github.com/Wishibam/Ecommerce-sylius/pull/12068)\n    - [\\[Migration\\]\\[B.2\\] Sylius 1.12 \u2192 1.13 (DBAL 3)](https://trello.com/c/huA0VNU9/3941-migrationb2-sylius-112-%E2%86%92-113-dbal-3) **\ud83d\ude80 To Do Vincent**\n        - *:wrench: chore(doctrine): drop the last getSchemaManager() call for DBAL 3/4 \\[B.2 P.1\\]* [\\#12071](https://github.com/Wishibam/Ecommerce-sylius/pull/12071)\n        - *:white\\_check\\_mark: test: characterize every state machine graph wiring \\[B.2 P.2\\]* [\\#12074](https://github.com/Wishibam/Ecommerce-sylius/pull/12074)\n        - *:recycle: refactor: state machine abstraction infra + pilot call site \\[B.2 P.3.1\\]* [\\#12089](https://github.com/Wishibam/Ecommerce-sylius/pull/12089)\n        - *:recycle: refactor: migrate the mechanical state machine call sites \\[B.2 P.3.2\\]* [\\#12094](https://github.com/Wishibam/Ecommerce-sylius/pull/12094)\n        - *:recycle: refactor: migrate the structural state machine call sites \\[B.2 P.3.3\\]* [\\#12098](https://github.com/Wishibam/Ecommerce-sylius/pull/12098)\n        - *:wrench: chore: bump symfony/flex 1 to 2 \\[B.2 P.4\\]* [\\#12100](https://github.com/Wishibam/Ecommerce-sylius/pull/12100)\n    - [MA - Pas de message d'erreur lorsque l'on n'arrive pas \u00e0 se connecter \u00e0 son compte client](https://trello.com/c/fQ9vwTD0/3684-ma-pas-de-message-derreur-lorsque-lon-narrive-pas-%C3%A0-se-connecter-%C3%A0-son-compte-client) **\ud83c\udf89 A MEP**\n        - *:bug: fix: display an error message on failed login on Marques Avenue* [\\#12072](https://github.com/Wishibam/Ecommerce-sylius/pull/12072)\n    - [Fix : \ufeff\ufefftransmettre le consentement newsletter \u00e0 Coniq \u00e0 l'inscription](https://trello.com/c/mShGQBUK/3943-fix-transmettre-le-consentement-newsletter-%C3%A0-coniq-%C3%A0-linscription) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat: transmettre le consentement newsletter \u00e0 Coniq \u00e0 l'inscription* [\\#12076](https://github.com/Wishibam/Ecommerce-sylius/pull/12076)\n        - *:bug: fix: consentement newsletter Coniq par canal \u00e0 l'inscription* [\\#12105](https://github.com/Wishibam/Ecommerce-sylius/pull/12105)\n    - [TVO - Bloc caract\u00e9ristiques : Attribut genre et ean](https://trello.com/c/MwYdlurp/3945-tvo-bloc-caract%C3%A9ristiques-attribut-genre-et-ean) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): localize gender and drop EAN in the characteristics block* [\\#12112](https://github.com/Wishibam/Ecommerce-sylius/pull/12112)\n    - [Page de confirmation de commande - N\u00b0 de commande sylius plut\u00f4t que MP](https://trello.com/c/bUrAEDyS/3944-page-de-confirmation-de-commande-n-de-commande-sylius-plut%C3%B4t-que-mp) **\ud83c\udf89 A MEP**\n        - *:bug: fix(tvo): align the thank-you order number with the email* [\\#12114](https://github.com/Wishibam/Ecommerce-sylius/pull/12114)\n    - [TVO \u2014 Tracking des mails de relance panier (taux d'ouverture / clic / CA)](https://trello.com/c/cyTNgF1i/3947-tvo-tracking-des-mails-de-relance-panier-taux-douverture-clic-ca) **\ud83c\udf89 A MEP**\n        - *:sparkles: feat(tvo, all): track abandoned cart reminder emails* [\\#12118](https://github.com/Wishibam/Ecommerce-sylius/pull/12118)\n    - [Bug : Mail d'annulation quand validation de retour](https://trello.com/c/Zh0QOdKa/3950-bug-mail-dannulation-quand-validation-de-retour) **\ud83c\udf89 A MEP**\n        - *:bug: fix: skip cancellation email when cancel follows a validated return* [\\#12122](https://github.com/Wishibam/Ecommerce-sylius/pull/12122)\n        - *:bug: fix: group return confirmation emails to fix stale VALID\u00c9 tags* [\\#12131](https://github.com/Wishibam/Ecommerce-sylius/pull/12131)\n    - [FACTURATION - Template mail : cr\u00e9ation de variable](https://trello.com/c/GQLEqISq/2508-facturation-template-mail-cr%C3%A9ation-de-variable) **\u2600\ufe0fIn review**\n        - *feat(email): expose the invoice table as an invoiceResume variable* [\\#12143](https://github.com/Wishibam/Ecommerce-sylius/pull/12143)\n \n- **Misc**\n    - *:sparkles: feat: PushDispatcher + adaptateur FCM (push app TVO)* [\\#11917](https://github.com/Wishibam/Ecommerce-sylius/pull/11917)\n    - *style(withdrawal): make the withdrawal button theme-colored and not f\u2026* [\\#11951](https://github.com/Wishibam/Ecommerce-sylius/pull/11951)\n    - *:zap: perf: Batavia PLP \u2014 ES result cache, key batching, menu cache* [\\#11963](https://github.com/Wishibam/Ecommerce-sylius/pull/11963)\n    - *:wrench: chore: outillage pour worktrees parall\u00e8les (front isol\u00e9 par projet)* [\\#11986](https://github.com/Wishibam/Ecommerce-sylius/pull/11986)\n    - *:sparkles: feat: push app TVO \u2014 envoi asynchrone + badge (3.A.5 + 3.A.6)* [\\#12022](https://github.com/Wishibam/Ecommerce-sylius/pull/12022)\n    - *:sparkles: feat: badge unreadPushCount de bout en bout (app TVO)* [\\#12025](https://github.com/Wishibam/Ecommerce-sylius/pull/12025)\n    - *:sparkles: feat: compteur badge dans data des push (app TVO)* [\\#12028](https://github.com/Wishibam/Ecommerce-sylius/pull/12028)\n    - *:sparkles: feat: push \u00ab commande confirm\u00e9e \u00bb (app TVO)* [\\#12031](https://github.com/Wishibam/Ecommerce-sylius/pull/12031)\n    - *:sparkles: feat: push \u00ab commande exp\u00e9di\u00e9e \u00bb (app TVO)* [\\#12040](https://github.com/Wishibam/Ecommerce-sylius/pull/12040)\n    - *feat(push): notification de remboursement de commande (TVO 3.B.3)* [\\#12041](https://github.com/Wishibam/Ecommerce-sylius/pull/12041)\n    - *fix(push): durcir l'envoi FCM \u2014 timeouts born\u00e9s + retry effectif (TVO 3.A.7)* [\\#12042](https://github.com/Wishibam/Ecommerce-sylius/pull/12042)\n    - *test(featured-content): d\u00e9-flakifier testProgramDisableDelay (tol\u00e9rance sur le d\u00e9lai)* [\\#12044](https://github.com/Wishibam/Ecommerce-sylius/pull/12044)\n    - *feat(push): notification de retour en stock (TVO 3.B.4)* [\\#12045](https://github.com/Wishibam/Ecommerce-sylius/pull/12045)\n    - *feat(push): notification de baisse de prix wishlist (TVO 3.B.5)* [\\#12049](https://github.com/Wishibam/Ecommerce-sylius/pull/12049)\n    - *:bug: fix(megamenu): \u00e9largir le lien \u00e0 2048 caract\u00e8res* [\\#12050](https://github.com/Wishibam/Ecommerce-sylius/pull/12050)\n    - *feat(push): relance push des paniers abandonn\u00e9s (TVO 3.B.6)* [\\#12053](https://github.com/Wishibam/Ecommerce-sylius/pull/12053)\n    - *feat(deeplink): AASA de la nouvelle app TVO \u2014 Universal Links iOS (TVO 4.1)* [\\#12064](https://github.com/Wishibam/Ecommerce-sylius/pull/12064)\n    - *feat(deeplink): assetlinks.json de la nouvelle app TVO \u2014 App Links Android (TVO 4.2)* [\\#12065](https://github.com/Wishibam/Ecommerce-sylius/pull/12065)\n    - *:bug: fix: complete payments stuck by Stripe webhook/checkout race* [\\#12075](https://github.com/Wishibam/Ecommerce-sylius/pull/12075)\n    - *:bug: fix: dedup order\\_confirmation per order to stop double send* [\\#12101](https://github.com/Wishibam/Ecommerce-sylius/pull/12101)\n    - *:bug: fix: pin the fixtures channel default tax zone* [\\#12106](https://github.com/Wishibam/Ecommerce-sylius/pull/12106)\n    - *:wrench: chore: bump webfactory/ssh-agent to v0.9.1* [\\#12120](https://github.com/Wishibam/Ecommerce-sylius/pull/12120)\n    - *fix(coniq): stop Coniq errors from blocking the to\\_ship transition* [\\#12134](https://github.com/Wishibam/Ecommerce-sylius/pull/12134)\n    - *Fix/coniq swallow poisons doctrine transaction* [\\#12138](https://github.com/Wishibam/Ecommerce-sylius/pull/12138)\n    - *:wrench: chore: merge master into develop* [\\#12144](https://github.com/Wishibam/Ecommerce-sylius/pull/12144)\n    - *:bug: fix(translations): align the missing-keys report with the gate* [\\#12159](https://github.com/Wishibam/Ecommerce-sylius/pull/12159)\n    - *:memo: docs: preprod branch pinning and Loco push ordering* [\\#12162](https://github.com/Wishibam/Ecommerce-sylius/pull/12162)\n \n- **D\u00e9j\u00e0 en production**\n    - [\\[Migration\\]\\[A.2\\] D\u00e9mant\u00e8lement Setono Analytics + Tag-Bag](https://trello.com/c/uJN0Gkiz/3856-migrationa2-d%C3%A9mant%C3%A8lement-setono-analytics-tag-bag) **\ud83e\udd16 Testing tech**\n        - *:wrench: chore(migration): internalize setono analytics + tag-bag as src/Component \\[A.2\\]* [\\#11846](https://github.com/Wishibam/Ecommerce-sylius/pull/11846)\n    - [\u26a0\ufe0f action prod \u26a0\ufe0f \ud83d\udc1b Fix r\u00e9indexation ES bloqu\u00e9e \u2014 \u00ab immense term \u00bb sur attribut trop long (Intersport)](https://trello.com/c/iD6idW0v/3915-%E2%9A%A0%EF%B8%8F-action-prod-%E2%9A%A0%EF%B8%8F-%F0%9F%90%9B-fix-r%C3%A9indexation-es-bloqu%C3%A9e-immense-term-sur-attribut-trop-long-intersport) **MEP Ao\u00fbt**\n        - *:bug: fix: r\u00e9indexation ES bloqu\u00e9e par un attribut trop long (immense term)* [\\#11972](https://github.com/Wishibam/Ecommerce-sylius/pull/11972)\n    - [\u26a0\ufe0faction preprod/prod \u26a0\ufe0f \u203c\ufe0f Nouveau Feeds - Faire tourner tous les nouveaux feeds sur toutes les preprods/prods](https://trello.com/c/Kr8UhDAv/3910-%E2%9A%A0%EF%B8%8Faction-preprod-prod-%E2%9A%A0%EF%B8%8F-%EF%B8%8F-nouveau-feeds-faire-tourner-tous-les-nouveaux-feeds-sur-toutes-les-preprods-prods) **\ud83e\udee1 To Do JC**\n        - *:sparkles: feat: drive-to-store feeds parity with legacy Setono* [\\#11979](https://github.com/Wishibam/Ecommerce-sylius/pull/11979)\n    - [Helsinki \u2014 Funnel checkout GA4 vide : \u00e9v\u00e9nements e-commerce manquants/incomplets](https://trello.com/c/j0yQGSFm/3921-helsinki-funnel-checkout-ga4-vide-%C3%A9v%C3%A9nements-e-commerce-manquants-incomplets) **MEP Septembre**\n        - *:bug: fix: \u00e9mettre le funnel checkout GA4 complet* [\\#11980](https://github.com/Wishibam/Ecommerce-sylius/pull/11980)\n        - *:bug: fix: \u00e9mettre add\\_payment\\_info quand l'\u00e9tape de paiement est saut\u00e9e* [\\#12014](https://github.com/Wishibam/Ecommerce-sylius/pull/12014)\n    - [TVO - Les recommandations produits ne remontent aucun produit sur la fiche produit](https://trello.com/c/lw3SYgNG/3926-tvo-les-recommandations-produits-ne-remontent-aucun-produit-sur-la-fiche-produit) **MEP Ao\u00fbt**\n        - *:bug: fix(search): match the indexed color value in recommendations* [\\#12004](https://github.com/Wishibam/Ecommerce-sylius/pull/12004)\n    - [A ESTIMER : Google Shopping Feed : ajouter le Outlet Price en cas de promotion](https://trello.com/c/RnEgL53B/3867-a-estimer-google-shopping-feed-ajouter-le-outlet-price-en-cas-de-promotion) **MEP Ao\u00fbt**\n        - *:sparkles: feat(helsinki): expose the outlet price in the Google Shopping feed* [\\#12020](https://github.com/Wishibam/Ecommerce-sylius/pull/12020)\n    - [\u2615\ufe0f \\[Batavia\\] Frais de retour : \u20ac3,25 \u2192 \u20ac3,95 (et on passe le texte en traduction)](https://trello.com/c/P4vec3cz/3934-%E2%98%95%EF%B8%8F-batavia-frais-de-retour-%E2%82%AC325-%E2%86%92-%E2%82%AC395-et-on-passe-le-texte-en-traduction) **MEP Ao\u00fbt**\n        - *:bug: fix: Batavia return cost 3,95 and move the line to a translation* [\\#12034](https://github.com/Wishibam/Ecommerce-sylius/pull/12034)\n    - [TVO - Changement url de la page marque Millet](https://trello.com/c/8NZBv11v/3952-tvo-changement-url-de-la-page-marque-millet) **MEP Septembre**\n        - *:bug: fix(tvo): rename the Millet merchant page slug from lafuma to millet* [\\#12136](https://github.com/Wishibam/Ecommerce-sylius/pull/12136)\n    - [\\[P1\\] Express checkout : le PaymentIntent est cal\u00e9 sur la m\u00e9thode de livraison par d\u00e9faut, pas sur celle pr\u00e9s\u00e9lectionn\u00e9e par Stripe](https://trello.com/c/WsW78d4s/3955-p1-express-checkout-le-paymentintent-est-cal%C3%A9-sur-la-m%C3%A9thode-de-livraison-par-d%C3%A9faut-pas-sur-celle-pr%C3%A9s%C3%A9lectionn%C3%A9e-par-stripe) **\ud83c\udf89 A MEP**\n        - *:bug: fix: \\[TVO\\] sync express PaymentIntent on preselected rate* [\\#12150](https://github.com/Wishibam/Ecommerce-sylius/pull/12150)\n    - *:bug: fix: render flag emojis as SVG icons, not OS emoji glyphs* [\\#11981](https://github.com/Wishibam/Ecommerce-sylius/pull/11981)\n    - *:bug: fix: apply the flag icon filter to the remaining menu renderings* [\\#11982](https://github.com/Wishibam/Ecommerce-sylius/pull/11982)\n    - *:wrench: chore: bump php\\_codesniffer en 3.13.6 (CVE-2026-67434, CI rouge)* [\\#12008](https://github.com/Wishibam/Ecommerce-sylius/pull/12008)\n    - *:bug: fix: skip Comarch in LaRedoute order import when disabled* [\\#12125](https://github.com/Wishibam/Ecommerce-sylius/pull/12125)", "creation_timestamp": "2026-09-04T16:36:16.164319Z"}]}