fix(catalog): allow non-alphanumeric characters in product SKU validation - #708

Relaxes SKU validation to allow non-alphanumeric characters while retaining length, whitespace, and CSV-delimiter safeguards.

Changes:

• Updates core SKU rules and tests.
• Revises import and create-form validation.
• Updates localized messages and changelog documentation.

Suppressed comments (3)

packages/Webkul/AiAgent/src/Chat/Tools/ImportProducts.php:434

• This constructs a full Laravel validator for every row. handle() calls this method inside its per-row loop with a 100,000-row cap, and the queued DataTransfer importer validates sku again with the same Sku rule, replacing the previous cheap regex prefilter with up to 100,000 validator allocations plus duplicate work. Please batch the validation or expose a reusable predicate so the Core rule remains the source of truth without this per-row overhead.

        return ! validator(['sku' => $sku], ['sku' => ['required', new Sku]])->fails();

packages/Webkul/Core/src/Rules/Sku.php:17

• Allowing % here also makes it possible to store SKUs that the existing database search paths cannot search literally: ProductRepository::queryBuilderFromDatabase() and Database/SkuOrUniversalFilter build LIKE '%'.$value.'%' without escaping SQL wildcard characters. A search for a % SKU can therefore match unrelated products; escape LIKE metacharacters at those query boundaries and add a regression test.
  packages/Webkul/Core/src/Rules/Sku.php:30
• The new delimiter/whitespace invariant is not enforced for API variant SKUs. ConfigurableProductController::normalizeVariantsPayload() only requires variants.*.sku to be a string, then createVariant() persists it directly, so comma/semicolon or padded variant SKUs bypass this rule. Apply Sku to that variant validation path as well.

• Files reviewed: 39/39 changed files
• Comments generated: 2
• Review effort level: Lite