Dear community. You probably already noticed that yesterdays Rails security update breaks Solidus because of deserialization errors in some circumstances. If you see errors like

Psych::DisallowedClass:
  Tried to load unspecified class: Symbol

add this into your apps

config/application.rb

config.active_record.yaml_column_permitted_classes = [Symbol]

We are working on a fix for newly installed apps and extension generators. Stay safe.

Hi @tvdeyen! Appreciate if you can check my comments in your PR. Please see https://github.com/solidusio/solidus/pull/4448#issuecomment-1182976436 and https://github.com/solidusio/solidus/pull/4448#issuecomment-1182994337. Thank you!

Thanks. Would be great if you could take this over, then.