chore: 배포 액션 실패 이슈 수정

Author: MU-Software

.github/workflows/test.yaml

@@ -48,6 +48,8 @@ jobs:
 
       - uses: astral-sh/setup-uv@v5
         with:
+          # 러너 기본 파이썬(3.12.3)은 RFC 2047 헤더 폴딩 버그가 있다. 배포 이미지(python:3.12-slim)와 맞춘다.
+          python-version: '3.12'
           enable-cache: true
           ignore-nothing-to-cache: true
 
@@ -92,6 +94,8 @@ jobs:
 
       - uses: astral-sh/setup-uv@v5
         with:
+          # 러너 기본 파이썬(3.12.3)은 RFC 2047 헤더 폴딩 버그가 있다. 배포 이미지(python:3.12-slim)와 맞춘다.
+          python-version: '3.12'
           enable-cache: true
           ignore-nothing-to-cache: true
 

app/admin_api/serializers/shop/orders.py

@@ -313,16 +313,6 @@ class Meta:
         model = OrderProductRelationTag
         fields = COMMON_ADMIN_FIELDS + ("code", "name", "priority")
 
-    def validate_code(self, value: str) -> str:
-        duplicated = (
-            OrderProductRelationTag.objects.filter_active()
-            .filter(code=value)
-            .exclude(pk=self.instance.pk if self.instance else None)
-        )
-        if duplicated.exists():
-            raise serializers.ValidationError("이미 있는 코드입니다.")
-        return value
-
 
 class OrderProductRelationTagAssignResultSerializer(serializers.Serializer):
     affected = serializers.IntegerField()

app/admin_api/test/shop/order_product_notifications_api_test.py

@@ -116,6 +116,24 @@ def test_opr_notification_preview_prefers_ticket_info_over_customer_info(api_cli
     assert recipient["context"]["customer_email"] == "customer@example.com"
 
 
+@pytest.mark.django_db
+def test_opr_notification_preview_skips_participant_without_channel_contact(api_client, opr_email_template, ticket_opr):
+    # 참가자 정보가 있으면 주문자로 되돌아가지 않는다 — 엉뚱한 사람에게 티켓 QR 이 가면 안 된다.
+    TicketInfo.objects.create(
+        order_product_relation=ticket_opr,
+        name="참가자",
+        phone="01099998888",
+        email="",
+    )
+
+    response = OrderProductNotificationsAdminApi(http_client=api_client).preview(
+        {"channel": "email", "template_id": str(opr_email_template.id)}
+    )
+
+    assert response.status_code == HTTP_200_OK
+    assert response.json()["recipients"] == []
+
+
 @pytest.mark.django_db
 def test_opr_notification_preview_falls_back_to_customer_info(api_client, opr_email_template, ticket_opr):
     response = OrderProductNotificationsAdminApi(http_client=api_client).preview(

app/admin_api/test/shop/order_product_relation_tags_api_test.py

@@ -111,6 +111,16 @@ def test_order_detail_exposes_tags(api_client, speaker_tag, order_factory):
     assert body["products"][0]["tags"] == [{"id": str(speaker_tag.id), "code": "speaker", "name": "발표자"}]
 
 
+@pytest.mark.django_db
+def test_assign_rejects_invalid_filter_value(api_client, speaker_tag, order_factory):
+    order_factory(status="completed")
+
+    response = api_client.post(f"{_assign_url(speaker_tag.id)}?first_paid_at_after=어제")
+
+    assert response.status_code == HTTP_400_BAD_REQUEST
+    assert speaker_tag.order_product_relations.count() == 0
+
+
 @pytest.mark.django_db
 def test_assign_rejects_blank_filter_value(api_client, speaker_tag, order_factory):
     # django-filter 는 빈 값을 무시하므로 `?id=` 가 전체 태깅이 되면 안 된다.

app/shop/order/models.py

@@ -478,9 +478,7 @@ def customer_info_or_none(self) -> CustomerInfo | None:
     def participant_info(self) -> TicketInfo | CustomerInfo | None:
         return self.ticket_info_or_none or self.customer_info_or_none
 
-    def build_notification_context(self, participant: TicketInfo | CustomerInfo | None = None) -> dict:
-        if participant is None:
-            participant = self.participant_info
+    def build_notification_context(self, participant: TicketInfo | CustomerInfo | None) -> dict:
         name = (getattr(participant, "name", "")) or ""
         organization = (getattr(participant, "organization", "")) or ""
         event = self.product.category.event

app/shop/order/test/scancode_api_test.py

@@ -11,6 +11,11 @@
 from shop.test.helpers import ScanCodeApi
 
 
+def _tamper(token: str) -> str:
+    # 마지막 글자를 그대로 되돌려 쓰면 원본과 같아져 테스트가 간헐적으로 통과한다.
+    return token[:-1] + ("A" if token[-1] != "A" else "B")
+
+
 @pytest.mark.django_db
 def test_scancode_rejects_missing_token(anon_client):
     response = ScanCodeApi(http_client=anon_client).list()
@@ -72,7 +77,7 @@ def test_scancode_opr_token_with_invalid_salt_rejects(anon_client, order_factory
     completed_order = order_factory(status="completed")
     opr = completed_order.products.first()
     # token 의 salt 부분 변조 — from_scancode_token 이 None 반환 → 403.
-    tampered = opr.scancode_token[:-1] + ("A" if opr.scancode_token[-1] != "A" else "B")
+    tampered = _tamper(opr.scancode_token)
     response = ScanCodeApi(http_client=anon_client).list({"token": tampered})
     assert response.status_code == HTTP_403_FORBIDDEN
 
@@ -149,7 +154,7 @@ def test_scancode_token_rejected_after_old_salt_removed(anon_client, order_facto
 @pytest.mark.django_db
 def test_scancode_error_page_shows_both_languages_and_guide(anon_client, order_factory):
     order = order_factory(status="completed")
-    tampered = order.scancode_token[:-1] + "A"
+    tampered = _tamper(order.scancode_token)
 
     response = anon_client.get(reverse("v1:scancode-list"), {"token": tampered}, HTTP_ACCEPT_LANGUAGE="ko-KR,ko;q=0.9")
     body = response.content.decode()
@@ -162,7 +167,7 @@ def test_scancode_error_page_shows_both_languages_and_guide(anon_client, order_f
 @pytest.mark.django_db
 def test_scancode_error_page_is_english_for_english_client(anon_client, order_factory):
     order = order_factory(status="completed")
-    tampered = order.scancode_token[:-1] + "A"
+    tampered = _tamper(order.scancode_token)
 
     response = anon_client.get(reverse("v1:scancode-list"), {"token": tampered}, HTTP_ACCEPT_LANGUAGE="en-US,en;q=0.9")
     body = response.content.decode()
@@ -180,7 +185,7 @@ def test_scancode_renders_html_even_when_client_asks_for_json(anon_client, order
     assert ok.status_code == HTTP_200_OK
     assert ok["Content-Type"].startswith("text/html")
 
-    tampered = order.scancode_token[:-1] + "A"
+    tampered = _tamper(order.scancode_token)
     error = anon_client.get(reverse("v1:scancode-list"), {"token": tampered}, HTTP_ACCEPT="application/json")
     assert error.status_code == HTTP_404_NOT_FOUND
     assert SCANCODE_MESSAGES["order_not_found"]["ko"] in error.content.decode()