Magento 2 Release Notes: Adobe Commerce & Open Source Updates

Keeping Magento up to date is essential for maintaining a secure, stable, and high-performing ecommerce store. This page collects Magento 2 release notes for major Magento Open Source and Adobe Commerce versions, helping merchants and developers quickly understand what changed in each release.

Below, you can explore Adobe Commerce release notes and Magento Open Source changes version by version. We summarize the most important new features, platform updates, security improvements, API changes, performance enhancements, and fixes from the official release documentation, making it easier to compare Magento versions and plan your next upgrade.

Adobe Commerce & Magento 2 Release Notes: What to Expect Next

The next minor/patch update in the official release pipeline is probably Magento 2.4.10, not Magento 2.5. That’s because Adobe’s release strategy focuses entirely on maintaining, optimizing, and modernizing the 2.4.x Long-Term Support (LTS) architecture. Here is what to expect next when it comes to Adobe Commerce & Magento 2 release notes:

• Magento 2.4.10: An alpha/development version is expected to surface late in October 2026. Following Adobe’s current annual release cadence, the stable General Availability (GA) release of 2.4.10 will likely launch around May 2027.
• Interim Patches: Between now and the next major patch version, your store will receive quarterly security and quality patches to maintain PCI compliance.
• Magento 2.5 (or Magento 3): Adobe has no public roadmap or plans to release a version 2.5 of the Magento platform. Because they are actively replacing legacy core components (such as moving from Laminas MVC to a native implementation and adopting Symfony components) right inside the 2.4.x line, there is no need to split the platform into a 2.5 release.

Magento 2.4. Release Notes: Adobe Commerce & Magento Open Source

Magento 2.4.9 Release Notes: Adobe Commerce & Magento Open Source

Magento 2.4.9 is a major platform update for both Magento Open Source and Adobe Commerce. The release modernizes the underlying technology stack, adds support for newer PHP, database, search, and cache technologies, improves GraphQL and REST APIs, and includes hundreds of quality fixes. The two editions share the core 2.4.9 platform improvements, while Adobe Commerce adds enterprise-specific capabilities and integrations.

Magento Open Source 2.4.9 Release Notes

Magento Open Source 2.4.9 introduces several important infrastructure and developer-focused improvements. Adobe reports 580 fixes in the Magento Open Source 2.4.9 core code. The release also brings Symfony 7.4 LTS, PHP 8.5 compatibility, improvements to GraphQL, cart behavior, APIs, and checkout functionality.

Adobe Commerce 2.4.9 Release Notes

Adobe Commerce 2.4.9 builds on the Magento Open Source 2.4.9 foundation and adds enterprise-focused improvements. Key changes include support for PHP 8.5, OpenSearch 3.x, Valkey 9.x, MariaDB 11.8 and 12.x, Symfony 7.4 LTS, and the migration of the WYSIWYG editor from TinyMCE to HugeRTE. Adobe reports 666 fixes in the Adobe Commerce 2.4.9 core code.

What makes Magento 2.4.9 important?

Magento 2.4.9 is primarily a platform modernization release. The most significant changes are the move toward PHP 8.5, Symfony 7.4 LTS, OpenSearch 3.x, Valkey 9.x, and newer MariaDB versions. Adobe Commerce also replaces the deprecated Zend Cache implementation with Symfony Cache and moves the Admin WYSIWYG editor from TinyMCE to HugeRTE.

For developers and integration teams, the release is also notable for its continued expansion of REST and GraphQL APIs. Magento Open Source 2.4.9 makes the clearCart GraphQL mutation available to Open Source users, while Adobe Commerce adds broader API and enterprise functionality.

From a maintenance perspective, the upgrade is particularly important because PHP 8.2 and 8.3 are no longer supported in Adobe Commerce 2.4.9, making the move to PHP 8.5 an important part of planning the upgrade.

Also, Adobe’s current release-version page says the 2.4.9 release line receives regular support until May 31, 2029.

Magento 2.4.8 Release Notes: Adobe Commerce & Magento Open Source

Magento 2 release notes for version 2.4.8 cover significant platform, security, performance, API, and compatibility improvements. The release is available in both Magento Open Source and Adobe Commerce, but the two editions do not have identical feature sets. Below, we summarize the most important changes from the official Adobe documentation, including the platform upgrades that affect both editions and the additional capabilities introduced in Adobe Commerce 2.4.8.

Magento Open Source 2.4.8 release notes

Adobe lists 31 highlights for Magento Open Source 2.4.8 and reports 497 fixed core issues. The release includes framework dependency updates, MySQL 8.4 compatibility, TinyMCE 7, Require.js 2.3.7, GraphQL improvements, REST API fixes, performance improvements, and numerous catalog, checkout, CMS, and admin fixes.

I would use a condensed table like this in your article:

Adobe Commerce 2.4.8 release notes

The Adobe Commerce release is broader. Adobe highlights enhanced security, PHP 8.4 and MariaDB 11.4 compatibility, extensive GraphQL improvements, Edge Delivery Storefront migration capabilities, and more than 500 quality fixes and enhancements. The 2.4.8 release line has regular support through April 2028.

For the Adobe Commerce table, I’d structure it around the things that actually distinguish the release:

Magento Open Source 2.4.7 Release Notes

Over 140 quality fixes and enhancements are included in Magento Open Source 2.4.7-beta1. Core Composer dependencies and third-party libraries have been updated to the most recent versions available. Composer 2.5 is now supported, whereas Composer 2.2.x is still accessible.

This version also expands GraphQL coverage for custom properties and improves GraphQL caching.

Security

This version includes 13 security fixes as well as platform security enhancements. They increase compliance with the most recent security best practices, such as this update, which alters the default behavior of an existing REST endpoint:

Payment information communicated over REST and GraphQL APIs is subject to native rate limitations. Merchants may now set rate limits for payment information sent through REST and GraphQL. This additional layer of security aids in the prevention of carding attacks and may reduce the amount of carding assaults that test many credit card numbers at once.

The isEmailAvailable GraphQL query and (V1/customers/isEmailAvailable) REST endpoint’s default behavior has been changed. The API now always returns true by default.

Platform enhancements

Platform upgrades for this release improve compliance with the latest security best practices, including Composer 2.5.x support (compatibility with Composer 2.2.x remains) and Varnish cache 7.3 support (compatibility with the 6.0.x and 7.2.x versions remains).

Outdated JavaScript libraries have been updated to the latest versions: moment.js library (v2.29.4), jQuery UI library (v1.13.2), and jQuery validation plugin library (v1.19.5).

GraphQL

This release improves GraphQL caching and adds support for customer EAV characteristics to the GraphQL schema, including:

• Custom attributes get better support. By augmenting API data, GraphQL custom attribute support has been expanded to include all attribute types. The GraphQL EAV attributes schema now enables expanding and obtaining customer attributes and customer address objects in the Admin using GraphQL. Specific areas for improvement include:
  • custom attribute functionality has been extended/added to particular areas such as customer and customer address;
  • custom attribute caching;
  • improved current product custom attribute support.
• Improved GraphQL caching speeds up page load time. Caching support has been introduced to these queries, resulting in faster page load times for most PWA pages:
  • storeConfig
  • currency
  • countries and country
  • availableStores
  • customAttributeMetada
• The following new GraphQL resolver cache types are at your service:
  • CMS page – the result of the CMS Page resolver;
  • CMS blocks – the results returned from Magento\CmsGraphQl\Model\Resolver\Blocks::resolve.
• The performance of the GraphQL parser has been improved. The number of times the parse method is called per request is reduced to one instead of three.
• customAttributeMetadataV2 is a new query.
• attributesMetadata and customAttributeMetadata are deprecated queries.

Magento Open Source Extension metapackage

This version includes the Magento Open Source Extension metapackage v1.0.0-beta1, which includes the Payment Services extension by default. When composer update is called, the version of this extension included in this metapackage is installed, easing the process of upgrading the extension when upgrading to the newest core release. This addon keeps its own release schedule. Additional extensions will be added to future editions of this extension metapackage.

Page Builder

Magento Open Source 2.4.7-beta1 is compatible with Page Builder v.1.7.4.

PWA Studio

Magento Open Source 2.4.7-beta1 is compatible with PWA Studio v.13.2.x, including multiple enhancements and improved accessibility.

Adobe Commerce 2.4.7 Release Notes

Adobe Commerce 2.4.7 includes all the features described above plus a bunch of exclusive enhancements:

Performance and scalability

Adobe Commerce 2.4.7 release introduces significant improvements in the processing speed of save operations for large deployment configurations.

It might take a long time to save configuration settings in installations with more than 500 stores. By executing a cron job that employs a consumer to handle the save action in a message queue, the new Async Config module enables asynchronous configuration to save operations. By default, AsyncConfig is turned off.

For big setups, the config cache is generated faster. When the config cache is enabled, the bin/magento cache:clean config command now pre-warms it. For big setups, this decreases the downtime required to construct the config cache. Configuration save actions no longer empty the config_scopes cache before writing data to the cache, reducing the amount of time other requests are locked out while config data is being saved.

Application Server for GraphQL APIs

Adobe Commerce 2.4.7 release includes a new PHP application server based on the Swoole PHP extension. This application server allows Adobe Commerce to keep state across Commerce GraphQL API calls, removing the requirement for bootstrapping. API requests become substantially more efficient when the application state is shared throughout processes, and API response times might possibly be reduced by 50 – 60 milliseconds.

The PHP application server is implemented via the ApplicationServer module, which is exclusively accessible for on-premises installations. Developers who wish to use this server must install and set up Swoole and Nginx as well.

This application server’s beta version is only available for on-premises deployments; it does not allow cloud-based deployments. It currently does not support B2B GraphQL capability. In on-premises implementations, GraphQL queries may not function as intended.

Adobe Commerce Extension metapackage

The Adobe Commerce Extension metapackage v2.0.0-beta1 is included in this version, and it automatically packages selected Adobe Commerce extensions with this core release. When the composer update runs, the versions of these extensions included in this metapackage are installed, easing the process of upgrading these extensions when upgrading to the current core release. These extensions keep their own release schedules.

The following three extensions are included in the Adobe Commerce Extension metapackage for Adobe Commerce 2.4.7-beta1:

• Bolt Quick Checkout
• Adobe I/O Events for Adobe Commerce
• Payment Services

B2B

New capabilities and enhancements for B2B negotiable quotes, REST API updates, and multiple bug fixes have been introduced in Adobe Commerce 2.4.7:

• Seller-initiated quotes: With this release, B2B Sales representatives get the ability to initiate a quote directly from the Quote and Customer grids in the Admin.
• Line item discounts. It is now possible to apply discounts as a percentage off, a fixed value, or as extended pricing for specific line items from a quote.
• Notes exchange on a quote. B2B Buyers and Sellers can add notes directly to a quote to negotiate. Note management is available in the line item and quote history.
• Improved Quote Detail view. The quote detail page provides sellers and buyers with the ability to add items by SKU or from the product catalog. In addition to that, it is possible to add or edit notes, apply line item discounts, and access product configuration.
• REST API updates:
  • A new endpoint provides web API coverage for the seller-initiated quote capability: POST /V1/negotiableQuote/draft
  • Enhanced web API coverage of the storefront features for shared catalog includes new endpoints used for assigning and reseting custom price actions: POST /V1/sharedCatalog/:sharedCatalogId/assignCustomPrices & POST /V1/sharedCatalog/:sharedCatalogId/resetCustomPrices
• A new quickorder_active field has been introduced for the storeConfig and availableStores queries. It indicates whether the quick order feature is enabled.

Magento Open Source 2.4.6 Release Notes

Magento Open Source 2.4.6 adds PHP 8.2 support. PHP 8.1 is still fully supported, while PHP 7.4 is no longer maintained. Significant speed and scalability improvements are included. GraphQL operations for bulk cart operations and response to category tree rendering have been improved.

This version contains several quality corrections and upgrades. Core Composer dependencies and third-party libraries have been updated to the most recent versions which are PHP 8.2-compatible.

Backward-incompatible modifications (BICs) may be included in Adobe Commerce and Magento Open Source versions. See the BIC reference for a list of backward-incompatible modifications. BIC highlights explain major backward-incompatible concerns.

Security enhancements

This version contains eight security fixes as well as platform security enhancements.

There have been no verified attacks connected to these problems so far. Certain vulnerabilities, on the other hand, can be exploited for getting access to client information or taking over administrator sessions.

Security improvements for Magento 2.4.6 Open Source improve compliance with the latest security best practices:

• Gaps in Admin action logs have been filled with more precise auditing of grid view activities, bulk actions, and exports.
• When unexpected issues occur during payment processing, reCAPTCHA validation no longer fails at checkout.
• When an admin user changes their email address, the system now requires email confirmation. A new system configuration feature is available under Stores > Settings:Configuration > Customers > Customer Configuration > Account Information Options > Require email confirmation. When this option is selected, the program will seek email confirmation if the admin user’s email address changes. This modification has an impact on the following modules: Magento_Customer.

Platform enhancements

Magento Open Source 2.4.6 adds PHP 8.2 support. PHP 8.1 is still fully supported, while PHP 7.4 is no longer maintained. It means that running Magento Open Source 2.4.6 on PHP 7.4 is impossible.

Magento Open Source now supports:

• Composer 2.2.x, while Composer 1.x has been removed.
• Redis 7.0.x, while compatibility with Redis 6.2 still remains.
• OpenSearch is the default search engine for Magento Open Source on-premises and cloud deployments. Magento 2.4.6 Open Source supports OpenSearch v2.x and has been tested with OpenSearch 2.5.
• Elasticsearch 8.x.
• MariaDB 10.6 (LTS version), while MariaDB 10.4 is still compatible,
• The DHL schema has been migrated to v10.0.
• Outdated JavaScript libraries have been updated to their latest versions resulting in the removal of outdated dependencies.
• Symfony dependencies have been upgraded to the new LTS version in Magento 2.4.6, including: friendsofphp/php-cs-fixer, symfony/console, symfony/event-dispatcher, symfony/finder, symfony/process, web-token/jwt-framework.
• jquery-migrate is no longer available in the Commerce and Magento Open Source code bases.
• jQuery/fileUpload library has been upgraded to v10.32.
• Outdated Zend framework (ZF1) components have been removed from the codebase.
• Laminas dependencies support PHP 8.2 and the laminas/laminas-dependency-plugin Composer plugin has been removed. Zend_Filter has been replaced with laminas/laminas-filter.
• web-token/jwt-framework has been upgraded to v3.0.5.
• allure-framework/allure-phpunit has been upgraded to v2.x.
• The Chart-js library has been upgraded to v3.9.1

Accessibility updates

Magento 2.4.6 Open Source focuses on developing a more perceptible, operable, intelligible, and comprehensive retail experience on Venia (PWA):

• The Sign in button’s visual text label now matches its accessible name.
• Buttons in the shop now have descriptive, easy-to-remember names.
• The Has Video checkboxes in search filters now include verbal descriptive captions.
• All page functionality on the shop is now available to keyboard-only users. Previously, only keystrokes could be used to access sub-navigation links.

Adobe Commerce integration with Adobe IMS

With 2.4.6, the following Adobe IMS modules have been decoupled from the Adobe Commerce and Magento Open Source core code. They are now packaged as a separate metapackage: adobe-ims, adobe-ims-api, and admin-adobe-ims.

The new adobe-ims-metapackage v2.2.0 is bundled with the latest version of both Adobe Commerce and Magento Open Source.

Braintree

• It is possible to use the Pay Later button and banners (messages) in Italy and Spain.
• 2.4.6 enables PayLater messaging with PayPal Vault.
• Fraud Protection and ACH web hooks are enabled, triggering when a risk decision is made in Braintree.
• LPM (Local Payment Methods) web hook is now enabled.

GraphQL

Improvements to GraphQL speed include faster response times when querying categories with category permissions enabled. Response speeds have improved when querying items in categories with enabled category permissions and a large number of customer groups or shared catalogs. Changes to the code that allow this performance increase include:

• The functioning of the GraphQL resolver has been improved.
• Because the data source no longer resets runtime-cached data for each new product handled, performance has improved.
• The GraphQL resolver has improved product authorization processing. Product permissions are now applied to product groups rather than individual products.
• In the addProductsToCart mutation, permissions read in shared catalogs were optimized.
• Product inline pieces have been used to improve product permissions.

Category tree rendering speed has been improved. The categoryList query has been improved to accommodate clients with a high number of categories. Merchants searching more than 1500 categories with up to five layers of nested subcategories will notice a performance boost. Refactoring code has enhanced the loading of category children by reducing superfluous method calls, enhancing category tree caching, and loading category data recursively. Changes to the code that allow this performance increase include:

The retrieval of custom attribute metadata for category models has been enhanced.

The retrieval of Category IDs has been enhanced, and the number of getChildren calls has been minimized.

The loading of the category children has been enhanced.

Bulk cart operations query response time has been reduced. When adding up to 500 simple and configurable items, the added product mutations have been adjusted to increase query efficiency. Bundle products are unaffected.

The optimized mutations include addProductsToCart, addConfigurableProductsToCart, addDownloadableProductsToCart, addSimpleProductsToCart, addVirtualProductsToCart,addWishlistItemsToCart, and updateCartItems.

Also, customer query now supports order sorting. The orders output object of the customer query received a sort field. It means that it is possible to sort orders by order number or creation date in ascending or descending order.

New mutations:

• deleteCustomer
• Page Builder

Magento Open Source 2.4.6 supports Page Builder v.1.7.3.

PWA Studio

Magento Open Source 2.4.6 supports PWA Studio v.13.0.x, including multiple accessibility enhancements. See the official PWA Studio releases for information about bug fixes and Version compatibility for a list of PWA Studio versions.

Adobe Commerce 2.4.6 Release Notes

Adobe Commerce 2.4.6 includes all the improvements introduced in Magento Open Source 2.4.6 along with the following new features:

Performance and scalability enhancements

Performance Improvements introduced in Adobe Commerce 2.4.6 affect many customer segments. The performance of operations has been improved, involving more than 100 customer segments. The Real-time Check if Customer is Matched by Segment setting can be disabled, reducing processing time.

Also, the new system configuration setting for limiting the number of products displayed in the product grid improves product grid performance. Note that by default, this limit is configured to 20000 and affects only product collections used by UI components.

Improved import performance lets you transfer up to 100,000 records per minute. There is a new POST /rest/<store_view_code>/V1/import/csv REST API endpoint that offers faster import and can be usedto create, update, and remove products, product pricing, and customer entities via CSV.

Improved high-throughput order processing performance based on load balancing is another performance improvement introduced in Adobe Commerce 2.4.6 on a cloud infrastructure. It is possible to balance a database load across different nodes.

Adobe Commerce Extension metapackage

Adobe Commerce 2.4.6 introduces the Adobe Commerce Extension metapackage v1.1.0. It automatically bundles select Adobe Commerce extensions with this core release. When composer update is called, the versions of these extensions included in this metapackage are installed, easing the process of upgrading these extensions when upgrading to the current core release. These extensions will continue to have their own release schedules.

The Adobe Commerce Extension metapackage for Adobe Commerce 2.4.6 includes these two extensions: Bolt Quick Checkout and Adobe I/O Events for Adobe Commerce.

Adobe I/O Events for Adobe Commerce

Adobe I/O Events for Adobe Commerce records events in Adobe Commerce and sends data from Adobe Commerce to other Adobe systems. Developers may use Adobe Developer App Builder to create cloud-native apps that subscribe to Commerce events like inventory updates, order status changes, and pricing adjustments. Developers can utilize this functionality to share data across mission-critical systems in order to orchestrate the complete buyer journey.

B2B

The GraphQL API now fully exposes the Purchase Orders for Companies functionality. This version includes two GraphQL schemas:

• Purchase Order Form The GraphQL schema includes Purchase Order Management capabilities for B2B corporate users, such as generating, amending, and canceling purchase orders.
• The Purchase Order Regulation GraphQL schema allows you to add, update, and delete approval rules, as well as manually validate purchase orders.

See B2B Release Notes for more information.

Magento Open Source 2.4.5 Release Notes

GraphQL caching performance, platform quality, payment options, and accessibility are all improved in Magento Open Source 2.4.5. Updates to Google modules that are integrated are also included in this version, along with 290+ improvements and fixes.

Note that some changes in Magento Open Source 2.4.5 are incompatible with earlier versions. See BIC reference for a breakdown of these backward-incompatible issues.

Although the source for these features is included with the Magento Open Source core code’s quarterly releases, some of them are also distributed separately. The separate, project-specific release information that is accessible in the documentation for each project contains details on the corresponding bug fixes.

Security

Twenty security fixes and platform security upgrades are included in this release. Backports of this security update have been made to Magento Open Source versions 2.4.4-p1 and 2.3.7-p4.

To date, there have been no confirmed attacks related to these problems. Nevertheless, these flaws might theoretically be used to access user data or hijack administrator sessions. For the majority of these problems, an attacker must first get access to the Admin. The official documentation, therefore, advises taking all necessary precautions to safeguard the Admin section, including but not restricted to the following actions:

• IP allowlisting;
• two-step authentication;
• VPN;
• Unique admin location;
• Strong password.

Security improvements for Magento 2.4.5 improve compliance with the latest security practices. So, the following enhancements are at your service:

• reCAPTCHA is now available in the Wish List Sharing, Create New Customer Account, and Gift Card forms.
• ACL resources are available in Inventory.
• Enhanced Inventory template security.
• The MaliciousCode filter now uses the HtmlPurifier library.

Platform

With Magento Open Source 2.4.5, the platform delivers support for the following acts:

• Composer 2.2;
• TinyMCE 5.10.2;
• jQueryUI 1.13.1;
• PHPStan ^1.5.7 with constraint;
• DHL Integration schema v6.2;
• JavaScript libraries have been updated to their latest versions;
• Outdated dependencies have been removed.

Also, pay attention to the following Composer dependencies that have been updated to the latest versions with constraints in Magento 2.4.5:

• colinmollenhour/credis (1.13.0)
• guzzlehttp/guzzle (^7.4.2)
• laminas/laminas-captcha (updated with a constraint ^2.12)
• laminas/laminas-db (^2.15.0)
• laminas/laminas-di (^3.7.0)
• laminas/laminas-escaper (~2.10.0)
• laminas/laminas-eventmanager (^3.5.0)
• laminas/laminas-feed (^2.17.0)
• laminas/laminas-mail (^2.16.0)
• laminas/laminas-mvc (^3.3.3)
• laminas/laminas-server (^2.11.1)
• laminas/laminas-servicemanager (^3.11.0)
• laminas/laminas-validator (^2.17.0)
• league/fly (2.4.3)
• monolog/monolog (^2.5)
• phpmd/phpmd (^2.12.0)
• phpstan/phpstan (^1.5.7)
• phpunit/phpunit (~9.5.20)
• php-cs-fixer (^3.4.0)
• webonyx/graphql-php (14.11.6)

As for the removed dependencies, they are:

• laminas/laminas-session
• laminas/laminas-text
• laminas/laminas-view

Other upgrades and replacements introduced in Magento Open Source 2.4.5 include

• The default Gateway URL for USPS shipping now uses https instead of http.
• Magento 2.4.5 now uses the Vimeo Player.js library (2.16.4) instead of the Froogaloop library.
• The grunt-eslint (NPM) library has been elevated to the latest version.
• julien-maurel/js-storage is now used instead of the jQuery Storage libraries.
• Since Magento 2.4.5, the php-cs-fixer and phpcs static code analysis instruments are fully compatible with PHP 8.x.
• glob.js dependency has been updated with a constraint to ~7.2.0.
• serve-static.js dependency has been updated with a constraint to ~1.14.2.
• underscore.js dependency (NPM) has been updated to ~1.14.2.
• moment-timezone-with-data.js has been updated with a constraint to ~0.5.34.
• js-cookie/js-cookie is now used instead of the jquery/jquery-cookie library.
• The jarallax.js and jaralax-video.js libraries have been updated so that they can utilize the latest Vimeo REST API version.

Accessibility

The goal of this version was to improve the storefront experience on Venia (PWA) by making it easier to perceive, use, comprehend, and understand the frontend. These improvements consist of:

• Users with screen readers are now informed of the summary information for search results.
• When a new page view loads, screen readers are now alerted.
• Accessibility to the keyboard, as well as its contrast, has increased.

Google Analytics

Through the integration of GTag, Google has upgraded the tracking and integration procedures of AdWords and Analytics in web applications. The ability to track and manage information through Google Services is expanded thanks to this integration of Google capabilities into website pages. The old API is used by several built-in modules in Adobe Commerce, such as Google AdWords, Analytics, Optimizer, and TagManager, to integrate with Google services. This integration has been re-implemented in Magento 2.4.5 utilizing the GTag method.

GraphQL

Performance improvements for GraphQL include:

• When deploying or modifying attributes in production, developers and administrators experience a faster rebuilding of the unified storefront GraphQL schema. Customers notice substantially quicker page loads whenever the GraphQL schema has to be rebuilt for whatever reason.
• The ability to use JSON Web Tokens (JWT) in the GraphQL API to consume the authorization token’s expiration date and time has been added.
• Merchants can totally deactivate the generation of session cookies for all GraphQL operations by using the bin/magento config:set graphql/session/disable 1 command. These cookies are generated by default by Magento Open Source and are used for authorization, which has an impact on performance. The use of session cookies on their own or in combination with permission tokens is not advised.
• GraphQL operations now only use class proxies to launch session cookies when necessary.
• In GraphQL, http header processors like shop, customer, and currency no longer need sessions.

Inventory

The inventory template experienced security enhancement in Magento 2.4.5.

Page Builder

Page Builder v.1.7.2 is now compatible with Magento 2.4.5 Open Source. In addition to that, It contains the following enhancements:

• Users can now modify the column settings on the storefront because columns are now visible.
• Wrapping in response to user events is now supported for column resizing.

Payments

All businesses running deployments with Payment Services enabled can use Apple Pay. Customers do not need to provide their card information to use this payment option. The product information page, mini cart, shopping cart, and checkout all support Apple Pay. This feature can be turned on by retailers.

In terms of PayPal, Magento 2.4.5 offers the following enhancements:

• Shoppers in Spain and Italy have the option to pay with PayPal Pay Later.
• The checkout, minicart, cart, and product pages in the admin all include previews of the PayPal, Credit, and Pay Later buttons. When enabled and shown on the storefront, these buttons will appear as they do in the previews.

As for Braintree, users of Magento 2.4.5 can experience the following changes:

• The integration for KOUNT fraud protection has been discontinued by Braintree. The Magento Open Source source no longer contains it.
• The Admin now has the Always request 3DS option.

PWA Studio

Magento Open Source 2.4.5 is compatible with PWA Studio version 12.5.x. For this release, the update includes the following new features:

• On the PWA Studio storefront, information about customer behavior is gathered for web analytics providers. Now, retailers can subscribe to and prolong these events as necessary.
• From the Admin, merchants may now choose a service to deploy (Google Tag Manager).

Adobe Commerce 2.4.5 Release Notes

The platform quality, payment options, GraphQL caching effectiveness, and accessibility are all improved with Adobe Commerce 2.4.5. Live Search B2B functionality is included, along with changes to the Upgrade Compatibility Tool and integrated Google components. More than 400 quality fixes and improvements are a part of this release. It could include modifications that are incompatible with earlier versions (BIC). See the official BIC reference for a breakdown of these backward-incompatible modifications.

Even though the main code for these features is provided every quarterly release, some of these projects are also released on their own. The separate, project-specific release information that is accessible in the documentation for each project contains details on the bug fixes for them.

So, Adobe Commerce 2.4.5 includes resolution of all issues that are addressed by the following hotfixes:

• The Braintree_disabled_partial_capture_for_applepay_googlepay.zip patch addresses the inability to create partial invoices when using either Apple Pay or Google Pay through Braintree as a payment method on the user side.
• The AC-2655_2.4.4.patch.zip patch addresses an issue when it is not possible to add a product to the cart when the Allow Countries option is unselected..

Security

This release includes 20 platform security improvements and security patches. Adobe Commerce 2.4.3-p3 and Adobe Commerce 2.3.7-p4 now include backports of this security upgrade.

There haven’t been any confirmed attacks involving these issues up to this point. However, these bugs might possibly be exploited to get access to user data or take over administrator sessions. An attacker must first gain access to the Admin in order to leverage the majority of these issues. Therefore, according to the official guidelines, you should take all required safety measures to protect the Admin section, including but not limited to taking the following steps:

• IP permitting;
• Dual-factor authentication;
• VPN;
• Unique admin location;
• Secure password

Additional security enhancements for this release improve compliance with the latest security practices, including:

• reCAPTCHA is now available in the Wish List Sharing, Create New Customer Account, and Gift Card forms.
• ACL resources are available in Inventory.
• Enhanced Inventory template security.
• The MaliciousCode filter now uses the HtmlPurifier library.

Platform

From the perspective of Adobe Commerce on-premises deployments: version 2.4.5 is compatible with Elasticsearch 7.17 (~7.17.0 with constraint). So, if you are a merchant hosting Adobe Commerce on-premises, you can now use either Elasticsearch or OpenSearch 1.2.

As for Adobe Commerce cloud-hosted deployments, version 2.4.5 does not support ElasticSearch 7.11 or later. OpenSearch is the default search engine option.

Both Adobe Commerce 2.4.5 deployments now support Composer 2.2, TinyMCE 5.10.2, jQueryUI 1.13.1, and PHPStan ^1.5.7 with constraint.

Also, note that the DHL Integration schema update to v6.2 does not result in a change in product behavior.

It is also worth mentioning that outdated JavaScript libraries in Adobe commerce have been updated to their latest versions in the same fashion as in Open Source. It also means that outdated dependencies have been removed. Pay heed to the fact that these changes are backward compatible.

Composer dependencies that have been updated in Adobe Commerce 2.4.5 are the same as in Open Source:

• colinmollenhour/credis (1.13.0)
• guzzlehttp/guzzle (^7.4.2)
• laminas/laminas-captcha (updated with a constraint ^2.12)
• laminas/laminas-db (^2.15.0)
• laminas/laminas-di (^3.7.0)
• laminas/laminas-escaper (~2.10.0)
• laminas/laminas-eventmanager (^3.5.0)
• laminas/laminas-feed (^2.17.0)
• laminas/laminas-mail (^2.16.0)
• laminas/laminas-mvc (^3.3.3)
• laminas/laminas-server (^2.11.1)
• laminas/laminas-servicemanager (^3.11.0)
• laminas/laminas-validator (^2.17.0)
• league/fly (2.4.3)
• monolog/monolog (^2.5)
• phpmd/phpmd (^2.12.0)
• phpstan/phpstan (^1.5.7)
• phpunit/phpunit (~9.5.20)
• php-cs-fixer (^3.4.0)
• webonyx/graphql-php (14.11.6)

As for the removed dependencies, Adobe Commerce 2.4.5 has got rid of laminas/laminas-session, laminas/laminas-text, and laminas/laminas-view .

Other upgrades and replacements introduced in Adobe Commerce 2.4.5 include

• The default Gateway URL for USPS shipping now uses https instead of http.
• Magento 2.4.5 now uses the Vimeo Player.js library (2.16.4) instead of the Froogaloop library.
• The grunt-eslint (NPM) library has been elevated to the latest version.
• julien-maurel/js-storage is now used instead of the jQuery Storage libraries.
• Since Magento 2.4.5, the php-cs-fixer and phpcs static code analysis instruments are fully compatible with PHP 8.x.
• glob.js dependency has been updated with a constraint to ~7.2.0.
• serve-static.js dependency has been updated with a constraint to ~1.14.2.
• underscore.js dependency (NPM) has been updated to ~1.14.2.
• moment-timezone-with-data.js has been updated with a constraint to ~0.5.34.
• js-cookie/js-cookie is now used instead of the jquery/jquery-cookie library.
• The jarallax.js and jaralax-video.js libraries have been updated so that they can utilize the latest Vimeo REST API version.

As you can see, they are similar to the platform updates of Magento Open Source 2.4.5.

Performance and scalability

The catalog_product_index_price_tmp table’s primary index performance has increased as a result of the reduction of the table’s primary indexes from three to one. This improvement decreased the eSKU multiplication brought on by shared catalogs, hence lowering the number of records generated in the price index. This update caused a significant decrease in indexing time.

Accessibility

This version aimed to enhance the retail experience on Venia (PWA) by simplifying the frontend’s perception, use, comprehension, and understanding. These enhancements include:

• The summary data for search results is now provided to screen reader users.
• Screen readers are now informed when a new page view loads.
• Both the keyboard’s contrast and accessibility have improved.

Adobe Sign

Customers can now electronically sign customized contracts during an Adobe Commerce checkout, including warranty paperwork, purchase agreements, and terms and conditions.

Integration with Adobe IMS

The Adobe IMS authentication workflow can be integrated with Commerce authentication for Adobe Commerce merchants who have an Adobe ID and desire a simplified login to Adobe Commerce and Adobe Business products. Each Admin user must log in with their Adobe credentials rather than their Commerce credentials after this connection has been enabled for your Commerce business.

Branding

In order to better reflect Adobe’s brand approach, The Admin has been changed. Headers, footers, data grid color modifications, and navigational elements are all affected by the changes.

B2B

The normalized database data that is required to implement the Shared Catalogs feature has been optimized. Performance is improved since fewer database rows need to be stored as a result of the decreased eSKU multiplication. For each Shared Catalog, Adobe Commerce used to duplicate every SKU in the catalog. For individuals who are now directly assigned to a Shared Catalog, Adobe Commerce provides distinctive eSKUs.

Performance of the product price indexer is also enhanced by using the new Enabled Shared Catalog direct product price assigning settings option.

Numerous bug fixes are included in this release as well.

Google Analytics

Google has improved the monitoring and integration processes for AdWords and Analytics in web apps with the integration of GTag. Thanks to this integration of Google capabilities into website pages, it is now possible to track and manage more data through Google Services. Many built-in modules in Adobe Commerce, including Google AdWords, Analytics, Optimizer, and TagManager, interface with Google services by using the old API. In Magento 2.4.5, this integration has been re-implemented using the GTag technique.

GraphQL

Improvements to GraphQL’s performance include:

• Developers and admins notice a faster rebuilding of the unified storefront GraphQL schema when delivering or changing attributes in production. Every time the GraphQL schema has to be rebuilt, customers notice noticeably faster page loads.
• The expiration time and date of the authorization token can now be obtained using JSON Web Tokens (JWT) in the GraphQL API.
• By using the bin/magento config:set graphql/session/disable 1 command, retailers can completely prevent the generation of session cookies for all GraphQL operations. Adobe Commerce automatically creates certain cookies, which are used for authorization and have an effect on performance. It is not advisable to utilize session cookies on their own or in conjunction with permission tokens.
• Only when necessary do GraphQL operations launch session cookies via class proxies.
• Sessions are no longer required for http header processors like shop, customer, and currency in GraphQL.

Inventory

The inventory template is associated with a security enhancement in Adobe Commerce 2.4.5.

Live Search

Support for B2B client groups and customized pricing are also included in this edition. The pricing that has been specified for a particular customer group/shared catalog as well as the product allocations to customer groups are now respected by Live Search.

Page Builder

Adobe Commerce 2.4.5 can now be used with Page Builder version 1.7.2. Additionally, it includes the following improvements:

• Because columns are now visible, users can change the storefront’s column settings.
• For column resizing, wrapping in reaction to user events is now supported.

Payments

Apple Pay is available to all companies with Payment Services enabled. Customers can utilize this payment method without having to provide their card details. Apple Pay is supported on the product detail page, mini cart, shopping cart, and checkout. Retailers have the option of activating this function.

Magento 2.4.5 brings the following improvements for PayPal:

• PayPal Pay Later is an option for customers in Spain and Italy.
• The admin includes previews of the PayPal, Credit, and Pay Later buttons on the checkout, minicart, cart, and product pages. These buttons will appear as they do in the previews when enabled and shown on the shop.

Users of Magento 2.4.5 may notice the following updates regarding Braintree:

• Braintree has stopped supporting the KOUNT fraud protection integration. It is no longer present in the source code.
• The Always request 3DS option is now available to admins.

PWA Studio

PWA Studio version 12.5.x is compatible with Magento Open Source version 2.4.5. The update for this release comes with the following new features:

• Web analytics service providers collect data on consumer behavior on the PWA Studio storefront. Retailers can now sign up for and extend these events as needed.
• Merchants can now select a service to launch from the Admin (Google Tag Manager).

Upgrade Compatibility Tool

Adobe Commerce 2.4.5 includes the following enhancements in this area:

• Method or constructor signature incompatibilities are now detected through method signature validation.
• Database schema validation now shows modifications and incompatibilities to the schema.
• Now, the DI configuration validation checks preferences for core classes and interfaces as well as references to removed or deprecated non-API core classes in di.xml.
• UCT now recognizes code deprecations and offers detailed suggestions for fixing each problem.

Magento Open Source 2.4.4 Release Notes

Magento Open Source 2.4.4 is now available. It provides lots of new enhancements and bug fixes. For instance, you can now leverage support for PHP 8.1. It means that all project libraries and dependencies have been updated too. They are now compatible with PHP 8.1. The same is about core Composer dependencies and third-party libraries.

Another important peculiarity of Magento 2.4.4 Open Source is support for OpenSearch 1.2. In general, the latest platform’s release includes almost 250 quality fixes and enhancements. Let’s explore different categories of enhancements introduced in Magento Open Source 2.4.4.

Security

This release introduces one security fix that has been backported to Magento Open Source 2.4.3-p2 and Magento Open Source 2.3.7-p3. Also, you will find a few more platform security improvements in 2.4.4.

However, there is no reason for panic since no attacks related to these issues have been confirmed. But you should keep in mind that certain vulnerabilities are always associated with probable fraud activities, such as access to customer information or administrator sessions.

Since such issues usually require obtaining access to the Admin, protect it. The official documentation offers the following protection strategies:

• IP allowlisting;
• two-factor authentication;
• VPN;
• unique location instead of /admin;
• Reliable passwords.

Additional security enhancements

Additional security improvements introduced in Magento 2.4.4 Open Source include:

• While email variable usage was deprecated back in 2.3.4, it was completely removed in 2.4.4. It means that email or newsletter templates created earlier may not work correctly after upgrading to Adobe Commerce 2.4.4 or Magento Open Source 2.4.4. Therefore, you need either create new templates or edit the available ones. What templates have been affected, you will ask? Take a look at admin overrides, themes, child themes, and templates from custom modules or third-party extensions first. All templates associated with them were affected if they contained variables. Even the Upgrade compatibility tool won’t help. Peruse this Migrating custom email templates article for further information.
• Also, pay attention to the fact that you can no longer use integration tokens for API Bearer token authentication. It can no longer be a standalone key for token-based authentication. See Token-based authentication for more information.
• Session IDs disappeared from the database. Since it is not the most secure storage, they are no longer available there.
• However, OAuth access tokens and password reset tokens are stored in the database. But they are now encrypted.
• To make your Magento 2 website more secure, the 2.4.4 release also strengthens validation. It prevents the upload of non alpha-numeric file extensions.
• reCAPTCHA is now available in the coupon code realm.
• When you switch to the production mode, Swagger gets disabled by default.
• When it comes to your storefront, HTTPS is now enabled by default. You can find the Use Secure URLs on Storefront and Use Secure URLs in Admin settings turned on by default. Also, all built-in cookies are now set as secure.
• All Magento Open Source installations now require the dependency confusion plugin, unlike before 2.4.4 when it was required for Composer-based installations only.
• As a developer, you can now configure the limit on the size of arrays accepted by Magento Open Source RESTful endpoints. 2.4.4 lets you do that on a per-endpoint basis (see API security).
• You can leverage new mechanisms for limiting the size and number of resources that a user can request through a web API on a system-wide basis. Also, new ways of overriding the defaults on individual modules are available.

Platform

As we’ve already mentioned above, Magento Open Source 2.4.4 supports PHP 8.1 along with all its project libraries and dependencies that have been updated for compatibility with this PHP version.

As for the additional platform enhancements, they include:

• Support for Elasticsearch 7.16 and OpenSearch 1.2. If you are a Magento Open Source merchant who runs deployments hosted on-premises, you can use either solution. But pay heed to the fact that OpenSearch is the default search engine for Magento Open Source 2.4.4 deployments hosted in the cloud. If you run a cloud deployment and upgrade to version 2.4.4, you must use OpenSearch (see Switching to OpenSearch).
• Magento 2.4.4 now includes the JQuery library of version 3.6. As for the jquery-ui library, it has been upgraded to version 1.13.0. You can also find several other JavaScript libraries updated to the latest versions.
• Magento 2.4.4 now supports TinyMCE 5.8.1. As for TinyMCE 4, it has been removed from the codebase.
• Magento2.4.4 now works with the latest version of the RequireJS library – 2.3.6.
• The same situation is with PHPUnit. Tests and test frameworks have been updated to be compatible with 9.5.x.
• Most Laminas dependencies have been upgraded to the latest versions. As a result, they are now compatible with PHP 8.1. At the same time, three Laminas dependencies were removed from the codebase. Thus, Magento 2.4.4 achieves a reduction of dependencies.
• jQuery UI has been upgraded to v1.13.0. Several 1.10.0 jQuery components have been removed:
  • ajaxOptions and cache options for tabs;
  • .zIndex(). jQuery UI v1.12.1 includes jquery/z-index.js, which supports the use of .zIndex();.
  • Data fallbacks for widget names. Now, it is necessary to use the full name for the .data() key.
  • Hard coding of classes in widgets, such as ui-corner-all.

GraphQL

Magento 2.4.4 release includes these GraphQL improvements:

• Performance:
  • More efficient GraphQL cart operations are achieved due to the collectQuoteTotals() method that is called only once during a GraphQL request;
  • Better storefront performance based on new caching of GraphQL requests: Fastly and Varnish cache GraphQL requests sent with the help of auth tokens.
• Due to new Admin configuration settings for the storefront: the storeConfig query returns the configuration settings for the Zero Subtotal Checkout and Check/Money Order payment methods.
• The webonyx library is updated to 14.9. It enables core GraphQL to function.
• The GraphQL resolver returns translated strings based on store scope as it should.
• New Relic gets descriptive transaction names that simplify debugging.

Vendor-Bundled Extensions

All vendor-bundled extensions have been removed from the Magento Open Source 2.4.4 codebase. Braintree is the only exception. So, if you want to get the removed modules, visit the Commerce Marketplace. You can find Amazon Pay, dotdigital, Klarna, Vertex, and YotPo there.

PayPal Payment

• Magento 2.4.4 introduces support for the Venmo payment option.
• The Pay Later option is now based on the shopper’s location instead of the merchant’s location.
• As a merchant, you can now set the shopper country when testing the shopper experience. Previously, tests were bound to their location. However, the new feature works in sandbox mode only.
• Messaging on the checkout page is more integrated with Pay Later. In Magento 2.4.4, it displays accurate messaging on how much and in how many increments shopper will be expected to pay.

Accessibility

Magento 2.4.4 brings enhanced conformance to standard accessibility guidelines:

• improved tooltips;
• accessible naming;
• screen elements tagging;
• redesigned icons and buttons.

Most of these fixes are aimed at users Without Vision or Limited Vision.

Page Builder

As a merchant, you can now add alternative text (alt_text) to images to improve content accessibility. The improvement is associated with such content types as Image, Banner, and Slide.

Adobe Commerce 2.4.4 Release Notes

Adobe Commerce 2.4.4 introduces the same features as Magento Open Source. In addition to them, it also offers the following enhancements:

Performance and scalability

Adobe Commerce introduces improved performance for order processing and message queue optimization. Due to the new asynchronous orders functionality, it is possible to create up to 60,000 orders per hour. It is 6 times more orders than in previous versions (10,000 orders/hour).

Also, the new multiple consumers feature introduces better e-commerce opportunities. It supports scaling the number of message queue consumers on a single Cloud instance. In addition to that, Magento 2.4.4 uses it to increase the number of orders processed per hour.

Performance enhancements in this release:

• AsyncOrder. With this feature, Magento 2.4.4 introduces faster order placement than synchronous execution provides. When it is enabled, order placement is executed in the background. Shoppers can complete other tasks on the storefront at that moment.
• Enable Inventory Check On Cart Load. This configuration option provides a switchable inventory check when loading a product into the cart. In Magento 2.4.4, it is enabled by default. After disabling this option, Adobe Commerce skips the inventory check as the quote loads. It speeds up checkout, especially for carts with numerous items.
• multiple_processes. This configuration option supports running parallel consumers in multiple processes. It improves task execution speed. You need to add multiple_processes to the app/etc/env.php file to enable this feature.
• Configurable products. If a cart contains over 750 configurable products, Magento 2.4.4 provides the ability to operate faster than before. The improvement is based on increasing the memory limit set by max_input_vars in the php.ini file to support input variables volume.
• Optimized sales rules processing. Magento 2.4.4 offers this enhancement during checkout by deferring total calculation. It occurs every time a shopper adds a product to their cart, updates product quantity, or clicks the Place Order button. Set the checkout/deferred_total_calculating variable in the env.php file to enable this deferment. Or run
  bin/magento setup:config:set –deferred-total-calculating 1|0.
• Improved validation process for orders. If orders are affected by a cart price rule during asynchronous order placement, their validation is improved.

B2B

The B2B release for Magento 2.4.4 includes numerous fixes and improvements. However, it doesn’t introduce any new features (see B2B Release Notes)

PWA Studio

Adobe Commerce 2.4.4 introduces compatibility with PWA Studio v.12.3.0, which, in its turn, includes support for reCaptcha, Page Builder content optimization, and personalized content. No more new features are available. You can read about enhancements and bug fixes here: PWA Studio releases.

Live Search

Due to the support of PHP 8.1 in Magento 2.4.4, Live Search also works with it. Note that the new Magento_ElasticsearchCatalogPermissionsGraphQl module is automatically disabled during the Live Search installation. Don’t forget to upgrade your existing Live Search installations to version 2.0.0 to leverage the latest features.

Accessibility updates

With Adobe Commerce 2.4.4, the platform introduces increased conformance to standard accessibility guidelines, including Screen Reader tools. New enhancements offer a better experience for users with limited abilities, including vision, language, cognitive, or learning. So, what are the exact accessibility enhancements, you will ask?

• Tooltip links. New tooltip links offer text and accurate, visible labels for inputs;
• Edit buttons. Each item now offers unique text.
• Admin buttons. Your admins can now leverage unique, accessible, and descriptive buttons developed in adherence to AA standards. Also, admin buttons introduce enhanced contrast to a contrast ratio of at least 3:1 with adjacent colors. The same is about form fields.
• Icon images. In Magento 2.4.4, they have textual alternatives.

Magento 2.4.3 Release Notes

Below, you will find release notes for Magento Open Source 2.4.3 and Adobe Commerce 2.4.3

Magento Open Source 2.4.3 Release Notes

As usual, the latest Magento version delivers enhancements to performance and security as well as essentially improves the platform. The core security enhancements introduced in Magento Open Source 2.4.3 include expansion of reCAPTCHA coverage and inclusion of built-in rate limiting. It is also worth mentioning that the wave of updates has reached core composer dependencies and third-party libraries. They have been upgraded to the latest versions compatible with PHP 8.x. Magento Open Source 2.4.3 also includes Page Builder as a bundled extension. The tool has become the default content editing solution for both platform’s versions – Adobe Commerce and Magento Open Source. More than 370 new fixes to core code and 33 security enhancements are at your service. Below, you will see the most important ones. Also, note that Magento 2.4.3 addresses all known issues identified in Magento 2.4.2.

Note that such projects as the PWA Studio are released independently. Bug fixes for them are available in the separate documentation per each project respectively.

Security

Magento 2.4.3 includes 33 security fixes and platform security improvements that help close remote code execution (RCE) and cross-site scripting (XSS) vulnerabilities, many of which have been backported to Magento 2.4.2-p2 and Magento 2.3.7-p1.

Other security improvements include:

• A new Composer plugin designed to prevent dependency confusion. Also, it identifies malicious packages.
• The built-in rate limiting prevents denial-of-service (DoS) attacks due to Web APIs that impose restrictions on the size or number of resources potentially requested by a client.
• ReCAPTCHA coverage includes Web APIs that have corresponding HTML pages along with the Place Order on the storefront and payment-related web APIs.

Infrastructure

Magento 2.4.3 is proud to introduce an enhanced infrastructure via the following functional areas:

• Customer Account;
• Catalog;
• CMS;
• OMS;
• Import/Export;
• Promotions and Targeting;
• Cart and Checkout;
• B2B;
• Staging and Preview.

It is also worth mentioning that deployments that include PayPal support PayPal Pay Later, allowing shoppers to pay for an order in bi-weekly installments. Thus, there is no need to pay the full amount at the time of purchase.

And you no longer need to manually reset the indexer after failure due to the new use_application_lock indexing mode. It is now possible to run reindexing through the use of environment variables or by configuring the app/etc/env.php file.

Platform

The following platform upgrades have been introduced in Magento 2.4.3:

• Core Composer dependencies and third-party libraries are compatible with PHP 8.x;
• The KnockoutJS library v3.5.1;
• The TinyMCE v3 library has been removed along with the Magento_Tinymce3Banner module and MFTF tests related to the library;
• Magento 2.4.3 is now confirmed to be compatible with Redis 6.0.12;
• Laminas library dependencies have been upgraded. Now they are compatible with PHP 8. As for the redundant dependencies, they have been removed. Laminas 3.4.0 is used in Adobe Commerce 2.4.3.

They bring Magento 2 closer to future compatibility with PHP 8.x.

Performance

Indexation time for Product Price and Catalog Rule indexers has been decreased. From the merchant site, it is possible to exclude a website from a customer group or shared catalog in Magento 2.4.3. Consequently, the number of records for indexing is reduced.

Adobe Stock

Magento 2.4.3 includes Adobe Stock Integration v2.1.1.

GraphQL

Magento Open Source 2.4.3 adds GraphQL coverage for shared routes. Routing requests on the product, category, and CMS pages are now supported in the route query and RoutableInterface. While the urlResolver query has been deprecated, its functionality is now available in the route query.

Page Builder

Magento Open Source delivers Page Builder as a bundled extension from 2.4.3. Adobe Commerce and Magento Open Source now rely on the same content editing tool, which replaces the TinyMCE editor in CMS page and blocks as well as category and product descriptions.

If you already rely on the content created with the help of TinyMCE, it can be migrated into Page Builder as HTML.

PWA Studio

You can see all the PWA Studio upgrades associated with Magento 2.4.3 here: PWA Studio releases.

Upgrade Compatibility Tool

The scope of the Upgrade Compatibility Tool has been upgraded in Magento 2.4.3. It has been expanded following the community feedback.

Vendor Developed Extensions

The following vendor developed extensions have been upgraded:

• Amazon Pay;
• Braintree;
• dotdigital Engagement Cloud;
• Klarna;
• Vertex Cloud;
• Yotpo Product Reviews.

Adobe Commerce 2.4.3 Release Notes

Adobe Commerce 2.4.3 introduces all the same enhancements described above along with several more specific improvements.

GraphQL

Unlike Open Source, Adobe Commerce delivers many more GraphQL improvements in the following areas:

• Shared catalogs;
• Wish lists;
• Gift registries;
• Negotiable quotes;
• Shared routes.

Tasks covered for gift registries in Magento 2.4.3 include the use of the giftRegistry query to return the customer’s gift registry content. Also, it is possible to search for gift registries by type, email, or ID; create, update, or delete gift registries; as well as update or remove items from a gift registry or move all items to the gift registry straight from the cart. Besides, it is possible to add, update, or remove registrants from a gift registry and share gift registries with invitees.

When it comes to negotiable quotes, new mutations include:

• requestNegotiableQuote
• setNegotiableQuoteShippingAddresses
• updateNegotiableQuoteQuantities
• removeNegotiableQuoteItems
• closeNegotiableQuotes
• deleteNegotiableQuotes

As for shared routes, the route query and RoutableInterface now support routing requests on the product, category, and CMS pages. Pay heed to the fact that the urlResolver query is no longer available since it has been deprecated. You can achieve its functionality with the route query.

B2B

The B2B enhancements introduced in Magento 2.4.3 are associated with B2B v1.3.2 that includes multiple bug fixes.

Cloud managed services

Adobe Commerce 2.4.3 is proud to announce support for Amazon Simple Storage Service (AWS S3) and Amazon Aurora cloud managed services. The latest version of the e-commerce platform provides certified support for the following services:

• AWS ElastiCache;
• AWS ElasticSearch;
• AWS Managed Queues (Rabbit MQ).

New Adobe Commerce Releases: 2.4.2-p1 and 2.3.7

Before Magento 2.4.3 hits the stage, Adobe has released new Commerce and Open Source versions – 2.4.2-p1 and 2.3.7. Within the last three years, the company integrated sales, marketing, and product teams within the Adobe Experience Cloud business unit. Besides, new capabilities for Adobe Commerce were introduced:

• AI-powered live search;
• Extended product recommendations;
• Adobe Sign integration;
• The official Wayflyer extension provides access to their financing solution.

Although these are strategic decisions that will impact the platform in recent years, there is one improvement vital for the short-term run: Adobe Commerce 2.4.2-p1 and 2.3.7 are now available! These releases mainly focus on security updates and support for PHP 7.4. 2.3.7 also adds in-product guidance that was previously available exclusively in Adobe Commerce 2.4.2. Why are these moves so important?

PHP 7.3 reaches the end of support very soon. It will happen by the end of this year – in December 2021. As for Adobe Commerce 2.3.x, this version of our favorite e-commerce platform reaches the end of support in April 2022. Hence, 2.3.7 has been delivered to bridge this period: While the former 2.3.x versions don’t support PHP 7.4, the new 2.3.7 release includes the necessary capabilities. Consequently, the 2.3 line is fully supported until its EOS date.

However, Adobe officially recommends upgrading from Adobe Commerce and Magento Open Source 2.3.x straight to the 2.4 line and PHP 7.4. This move will help merchants maintain PCI compliance, following the most cost-effective upgrade approach. As you’ve probably guessed already, support for PHP 7.4 in the 2.3.7 version is only a stopgap. It is intended to help customers maintain PCI compliance before upgrading to 2.4.

Along with the Q2 Adobe Commerce updates, merchants can also leverage the following upgrades:

• PWA Studio 10 is now live for Adobe Commerce and Magento Open Source 2.4.2+ merchants. See the PWA 10 release notes for further information.
• Egress Filtering is available in Adobe Commerce for the existing Adobe Commerce Starter merchants. This feature lets merchants enable/disable network traffic from the store to other destinations. As a result, you can stop malware from sending private information to outside entities.
• Product Recommendations are exclusively available in Adobe Commerce 2.3.7+, featuring more complex B2B buying scenarios, B2B customer-specific recommendations, more flexible preview options, etc. You can find more enhancements in the official Release Notes for Product Recommendations.
• The Security Scan tool will also support the PWA Studio by the end of this month.
• New data privacy mechanisms will be introduced in Customer Engineering. The system revises the collection of consent to access Customer Data for support requests. According to the new approach, the Primary User within a Magento Customer profile is the only user who can provide consent which will be stored under the Privacy Settings.

More updates and features are planned for August with Adobe Commerce 2.4.3.

Magento 2.4.2 Release Notes

Below, you will find features and enhancements associated with Magento 2.4.2. Firstly, we describe the Open Source innovations introduced in the platform’s latest version. Secondly, you will find unique improvements associated with the Commerce edition.

Magento 2.4.2 Open Source Release Notes

Magento 2.4.2 Open Source received tons of enhancements in the following areas:

Security

Both platform editions include numerous security fixes backported to Magento 2.4.1-p1 and Magento 2.3.6-p1. You deal with more than 35 security enhancements aimed at closing RCE and XSS vulnerabilities. Although no attacks related to these issues have been confirmed, you must install the security update since malefactors can potentially exploit certain vulnerabilities.

Bear in mind that most of these issues require admin access. Therefore, you need to protect your backend area by two-factor authentication, IP white lists, VPN, unique admin address, and strong password.

Other security improvements are:

• Full support for the SameSite attribute.
• Potentially malicious content identification via messages in product and category description fields. The alert is displayed when the user tries to save values there.
• Standardized file system operations across Magento components prevent malicious uploads.
• Fixed Core Content Security Policy violations.

Infrastructure

Both Magento 2.4.2 Open Source and Commerce editions introduce improvements to core quality. They enhance the quality of the Framework with such functional areas as:

• Customer Account;
• CMS;
• Catalog;
• OMS;
• Import/Export;
• Promotions and Targeting (Commerce);
• Staging and Preview (Commerce);
• Cart and Checkout.

Platform

Magento 2.4.2 supports:

• Elasticsearch 7.9.x and remains compatible with 7.4.x.
• Varnish 6.4 and remains compatible with its 6.x version.
• Redis 6.x and remains compatible with Redis 5.x.
• Composer 2.x and remains compatible with Composer 1.x, which will soon reach end-of-life.

Also, note that the split database functionality has been deprecated. If you leverage this feature, you will need to revert or migrate to a single.

Performance

Magento 2.4.2 introduces boosted API performance and faster Admin response time. These enhancements are associated with deployments with large catalogs. Due to multiple scalability enhancements, Magento 2.4.2 now supports complex catalogs up to 20x larger than before.

Adobe Stock

Magento has been integrated with Adobe Stock for a while. In 2.4.2, you can leverage v2.1.1.

GraphQL

Magento 2.4.2 introduces improved GraphQL coverage. Now, you can leverage the following features:

• GraphQL in catalog permissions provides the ability to restrict which items are returned for a product query. The shopper’s customer group is used as a base for this operation.
• Due to the generateCustomerTokenAsAdmin mutation and enhanced Customer object, remote purchasing assistance is easier in Magento 2.4.2 than in other platform versions.
• Changing languages, carts, and currencies is way more simple since localization support across stores is a part of Magento 2.4.2.
• The enhanced GraphQL schema optimizes product data retrieval for configurable products.
• Magento GraphQL now supports unions.
• Magento 2.4.2 no longer works with integer type object IDs. They have been deprecated. Now, the system relies on uid attributes of type ID.
• ProductInterface and CategoryInterface are enhanced with the staging attribute. Now, it is easier to determine if a product is staged. Besides, the system can display its associated campaign information.

For further information, follow this link: GraphQL Developer Guide.

PWA Studio

Magento 2.4.2 is associated with the new release of PWA Studio. It includes the following enhancements:

• Venia supports multiple stores, languages. and currencies.
• It delivers enhanced extensibility.
• Client-side performance enhancements incorporate Google Lighthouse.
• My Account for Venia includes order history, saved payments, and address book.

Media Gallery

Media Gallery is associated with new Role Resources in Magento 2.4.2. Besides, it can now deliver web-optimized images in the content.

According to the first feature, you can limit administrator access to the Media Gallery and assign the following roles:

• Upload assets;
• Change assets details;
• Insert media assets into content;
• Delete assets;
• Edit folder structure.

Web-optimized image rendition allows for replacing high-resolution images. While the original image stays untouched in the Media Gallery, the image rendition is dynamically generated every time the image is inserted in the content.

MFTF

Magento 2.4.2 delivers Magento Functional Testing Framework version 3.2.1. You can leverage error tolerance in both tests and test suite generation along with some minor enhancements and bug fixes.

AWS S3

Amazon Simple Storage Service (AWS S3) support now covers object storage and future extensibility. Besides, it enables you to store media files on AWS S3.

Also, note that B2B, PageBuilder, Adobe Stock Integration, and other modules support AWS S3.

Magento 2.4.2 Commerce Release Notes

Note that Magento 2.4.2 Commerce shares the same set of enhancements that Open Source incorporates. At the same time, it is associated with the following unique features:

GraphQL

The list of GraphQL improvements of Magento 2.4.2 Commerce also contains the following features:

• Support for multiple wish lists. Now, GraphQL enables you to create, delete, and rename wish lists. At the same time, you can move and copy items between them using the new technology improvement.
• Support for RMA. Customers can request a return in a more user-friendly way. If the request is accepted, the customer can add a comment or tracking data.
• Support for B2B:
  • Companies. In Magento 2.4.2, you can use GraphQL to add company admins, users, roles, and teams.
  • Company credit. Now, you can view details about the company’s credit history in a company query.
  • Requisition lists. Magento 2.4.2 lets you use GraphQL to create, delete, and update requisition lists as well as add, update, delete, copy, and move items within them or add requisition list items to the cart.

B2B

Magento 2.4.2 includes the latest version of the B2B module – v1.3.1. It supports online payments for POs along with numerous bug fixes. You can complete the former with the help of online payment methods. From the perspective of a B2B buyer, it is possible to select a preferred payment method for each purchase order. A corresponding prompt appears during the initial checkout.

Next, a buyer is prompted to enter payment details to convert the purchase order to a final order after the PO has been approved.

Other B2B updates include:

• Existing payment method templates can be overridden during initial checkout. Thus, Magento maintains PCI compliance.
• The system is compatible with third-party payment methods.
• Magento sends email notifications to buyers, asking for payment details to an approved PO.
• Custom email templates are supported.
• An Approved – Pending Payment state for POs is now available. It determines when actions are required.
• Order total amount remains unchanged for approved POs since Magento disables customers to add or remove discount codes at the final payment step. However, buyers can change the payment method.

Page Builder

Page Builder content migration and CSS customization were improved in Magento 2.4.2. The following enhancements are at your service:

• Magento now offers different content type output per viewport, avoiding the !important directive.
• You can migrate content to Page Builder and it will no longer follow the default inline styling.
• It is not necessary to place all content types within a row. Page Builder introduces an initially blank stage. Besides, you can place Rows, Columns, Tabs, Dynamic Blocks, HTML Code, and Blocks there.
• It is no longer necessary to specify predefined margins and paddings.
• Magento 2.4.2 introduces the new mobile viewport switcher and viewport scope for form field values. Thus, it is possible to perform the following actions:
  • You can now view content on different viewports while authoring.
  • Besides, it is allowed to optimize the minimum height field parameter on different content types per viewport. However, ‘min-height’ is the only parameter supported out of the box. You need to develop custom parameters to enable mobile optimization for other content types.
  • As a developer, you can also add field scope to custom fields and fieldsets.

Magento 2.4.1 Release Notes

As usual, Magento introduces enhancements to performance and safety, and 2.4.1 is not an exception. Security enhancements (15+) are represented by the SameSite attribute for cookies and the addition of CAPTCHA protection for payment-related and order-related API endpoints. Besides, you get 150+ fixes to the core code and significant enhancements in GraphQL. Also, bear in mind that all known issues of Magento 2.4.0 have been fixed.

As for backward-incompatible changes Magento 2.4.1 introduces minor shifts described here: BIC reference.

Time-sensitive security fixes are under your disposal too. You can install them without applying the hundreds of functional fixes and enhancements. Magento 2.4.1 comes along with the patch 2.4.0.1 (Composer package 2.4.0-p1). It is a security-only patch that addresses vulnerabilities identified in Magento 2.4.0.

Magento Open Source 2.4.1 Release Notes

All changes represented in Magento 2.4.1 are divided into the following sections:

Security

With over 15 security fixes and platform security improvements help protect your store from remote code execution (RCE) and cross-site scripting (XSS). They include:

• CAPTCHA has been added to the place order storefront page and payment-related REST and GraphQL endpoints.
• The SameSite attribute for cookies is now supported. It is set to Lax by default.
• A database of over 8700 threat signatures is now integrated into the Magento Security Scan Tool.

Infrastructure

Framework, Customer Account, CMS, OMS, Catalog, Import/Export, Promotions and Targeting, Staging and Preview, Cart and Checkout, and other infrastructure elements have been enhanced in Magento 2.4.1.

Performance

Magento 2.4.1 offers the following core performance enhancements:

• Smaller network transfers between Redis and Magento result in a decrease in network cache size and execution time.
• Enhanced message queue consumer performance due to the three new configuration settings that cause a decrease in consumer queue CPU consumption.
• Faster bin/magento commands.

Adobe Stock

Magento 2.4.1 is integrated with Adobe Stock 2.1.0.

Media Gallery

Starting from Magento 2.4.1, the New Media Gallery is enabled in the Admin by default. As a merchant, you can delete images in bulk, identify duplicate images, detect images that are not used on the storefront, apply filters to reorder images by the storefront area they are used in, work with image metadata (view, edit, search by metadata).

GraphQL

GraphQL coverage for the following features is now a part of Magento 2.4.1:

• Product reviews;
• Gift options;
• Order history;
• Add to cart;
• Payment methods stored in My Account;
• Wish lists in Open Source;
• Customer accounts;
• Payflow Pro Vault payment method;
• Klarna.

Also, note that Magento 2.4.1 introduces updated GraphQL storeConfig query. Another enhancement is a new requestPasswordResetEmail mutation that now triggers the password reset email for the provided email address. You can find more information here: GraphQL Developer Guide.

PWA Studio

Magento 2.4.1 also introduces PWA Studio v8.0.0. The latter offers the following enhancements:

• Venia style guide updated with new design tokens, colors, typography, core components, page layouts;
• Improved mini-cart experience;
• Support for localized content and multiple locales;
• Improved My Account experience.

Magento Functional Testing Framework (MFTF)

MFTF 3.1.0 has also been released along with Magento 2.4.1. You can find more information here: Magento Functional Testing Framework Changelog.

Vendor Developed Extensions

The following extensions also got updates in 2.4.1: Amazon Pay, dotdigital Engagement Cloud, Braintree, Klarna, Yotpo Product Reviews, and Vertex Cloud.

Magento Commerce 2.4.1 Release Notes

Magento Commerce 2.4.1 also offers enhancements to performance and security plus. However, there is a significant addition to the B2B feature set introduced with the update. Let’s take a look at what makes Magento 2.4.1 Commerce different from Open Source.

Site-Wide Analysis Tool (SWAT) is now integrated with Magento Admin. It offers system insights and provides instrumentation for real-time performance monitoring. You can get reports and self-service recommendations. Utilize the new SWAT Admin role to access SWAT Customer Detail pages through the Magento Admin in a more secure way. You can find more information here: SWAT.

As for B2B, its v1.3.0 is now a part of Magento 2.4.1. As a merchant, you get better order approvals, enhanced shipping methods, improved shopping cart, and updated logging of Admin actions.

Order Approvals

B2B order approvals support bulk actions on purchase orders. Besides, you get the following features:

• B2B buyers are able to view rules applied to their company even if they do not have permission to edit them. The information is available on the new View Rule page.
• The Requires My Approval tab is enhanced with the count alert icon that indicates the number of pending approval actions.
• Bulk order approvals and rejections for B2B managers and Company Administrators.
• The My Purchase Orders view lets Merchants search the Applies to and Requires approval from fields. They can also select multiple user roles during rule creation.

B2B shipping methods

As a B2B merchant, you can control shipping methods per Company. Magento 2.4.1 lets you create a set of shipping methods and use all or B2B-specific shipping methods per Company account.

Shopping cart

• It is possible to clear a shopping cart in a single action.
• As a B2B buyer, you can add shopping carts (individual items or the entire contents) to requisition lists.

Admin

• It is now possible to create orders from the Admin on behalf of customers based on the Payment on Account payment method.
• As a merchant, you can view all quotes linked to a user from the customer’s detail page.
• The Company filter is now available in the Customers Now Online grid.
• The Sales Rep filter for customers is also available.

Storefront security

Google reCAPTCHA on the New Company Request is now possible.

Admin actions logging

If an admin takes actions in the Company modules (Company, NegotiableQuote, CompanyCredit, SharedCatalog), they are logged in the Admin Actions Log.

For further information about Magento 2.4.1, follow this link: Magento 2.4.1 Release Notes. Also, check backward incompatibility issues.

Magento 2.4.0 Open Source Release Notes

Below, you will find key highlights from the Magento Open Source 2.4.0 release notes. The new platform version introduces support for PHP 7.4, Elasticsearch 7.6.x, and MySQL 8.0. Besides, it delivers substantial security changes, such as two-factor authentication for admin users, which is now enabled by default. Also, pay heed to the removal of the Authorize.Net and Braintree payment method integrations from core code. Now, you have to instal the corresponding third-party modules manually. The Magento 2.4.0 contains 100+ core code fixes and 30 security improvements. Let’s take a look at the main points of the update.

Security

Over 30 security enhancements introduced in Magento 2.4.0 help merchants struggle with both external and internal threats. They mainly address remote code execution and cross-site scripting issues.

One of the most important enhancements is that Two-Factor Authentication is now available for admin accounts (cannot be disabled), Magento.com user accounts, and Cloud SSH access.

Another key security feature introduced in Magento 2.4.0 is related to the template filter strict mode. It is now enabled by default, dramatically reducing risks of RCE attacks.

At the same time, the new platform version disables data rendering for UI data providers reducing an opportunity to execute arbitrary JavaScript.

Besides, PHP classes responsible for generating HTML as well as .phtml templates get a new class – \Magento\Framework\Escaper. It contains HTML sanitization methods designed for multiple new contexts. Also, bear in mind that the $escaper local variable from .phtml templates is a mandatory replacement for the deprecated $block->escape{method}.

A new security.txt file introduces an industry-standard server data element designed to help security researchers provide store admins with information regarding potential security issues.

As promised before, Magento now allows installing security fixes only. If you don’t need new features but want to keep your website safe, this option will help you save tons of time and effort. You can update the shield around your e-commerce store without applying the hundreds of functional fixes and enhancements. You can find more information here: Introducing the New Security-only Patch Release.

Platform

Now, let’s take a look at core platform upgrades introduced in Magento 2.4.0:

• PHP:
  • PHP 7.4 support;
  • PHP 7.1 and 7.2 are deprecated;
• PHPUnit:
  • PHPUnit 9.x support;
  • PHPUnit 6.5 is deprecated;
• Elasticsearch 7.6.x becomes the default catalog search engine for both Magento Commerce and Open Source;
• MySQL 8.0 is supported along with MySQL 5.7. However, MySQL 5.6 can be no longer used;
• MySQL catalog search engine has been replaced with Elasticsearch;
• MariaDB 10.4 is supported along with MariaDB 10.2. Note that MariaDB 10.0 and 10.1 can be no longer used;
• Laminas project instead of Zend Framework: migrate dependencies;
• Signifyd fraud protection is removed from the code. You have to look for a replacement on the Magento Marketplace;
• Braintree has also been removed from the codebase.

Before going any further, check this article about the issues related to the updated technology stack: How to Run Magento 2.4 That Requires PHP 7.4 and Elasticsearch.

Infrastructure

Numerous infrastructure improvements revamp the functionality of previous Magento releases. The new changes enhance the quality of the Framework and numerous modules, such as Customer Account, CMS, Catalog, Checkout, etc. Let’s cast a glance at the most notable updates:

• Third-party payment methods are no longer available in the core code of Magento. You have to use third-party extensions instead;
• Partial-word search is a new feature introduced with the appointment of Elasticsearch as a new default search engine. Partial words are supported in search terms for product names and SKUs;
• PayPal JavaScript SDK has been upgraded to the latest version, introducing the newest features and best security;
• Web Set-Up Wizard has been deprecated. Use the command-line interface instead;
• Composer update plugin enhancements simplify the upgrade process by addressing issues associated with the root project composer.json file. Overwriting customizations problems are resolved too;
• Seller-assisted shopping provides the ability to view the storefront on behalf of your customers and get access to their accounts right from the frontend:
  • Complete control over which administrators can log in to customer accounts;
  • Orders placed on behalf of customers are logged normally: both in the storefront and admin;
  • Top-notch customer security: the system destroys all sessions when administrators log out; admins cannot access customer passwords.

Performance

Every new Magento release delivers various performance optimizations, and Magento 2.4.0 is not an exception. The new version offers the following enhancements in the area of speed and productivity:

• Customer data section invalidation. The logic behind this section has been improved, addressing the issue related to a local storage and active custom sections.xml invalidations;
• Redis. The number of queries to Redis performed on each Magento request has been reduced. It leads to shrink size of network data transfers between Redis and Magento; smaller consumption of CPU cycles; decreased race conditions related to Redis write operations;
• Caching. Magento 2.4.0 introduces a new caching mechanism for results of SQL queries to inventory tables;
• Quick Order. Quick Order add-to-cart performance has been improved. It is faster up to 25-30%;
• Lazy Loading. Magento loads images notably faster.

Adobe Stock

Magento 2.4.0 introduces the ability to license stock image previews right from the Media Gallery, reducing the number of steps that should be taken previously. It is possible to search, filter, and sort images up to 30x faster.

Inventory Management

Magento 2.4.0 supports Inventory Management 1.2.0. Its core features include:

• A new in-store delivery method can be selected during checkout. A source can be used as a pickup location. Follow this link for more information: Magento 2 In-store Delivery;
• Bundle products are now supported in multi-source mode. Thus, the Magento 2 Inventory now supports all product types with multiple sources;
• Asynchronous stock re-indexing dramatically enhances the performance of the Magento 2 inventory management.
• New bulk interfaces have been added for salability check;
• Increased test coverage + numerous bug fixes.

Check Inventory Management release notes for more details.

GraphQL

Various GraphQL enhancements introduced in Magento 2.4.0 improve numerous areas, such as:

• pickupLocations query now supports the Inventory In-store pickup feature;
• categories query not only returns a list of categories that match a specified filter, like the categoryList query did before, but also supports pagination.
• reorderItems mutation enables logged-in users to add products from a previous order into a cart.

You can find more information here: GraphQL Developer Guide & GraphQL Release Notes.

Magento Functional Testing Framework

Magento 2.4.0 works with MFTF v3.0.0, which in its turn supports PHP 7.4 and PHPUnit 9. Its core features include:

• MFTF helpers for custom actions outside of the framework;
• Sub-folders in test modules;
• Schema updates for test entities;
• Nested assertion syntax;
• Static checks for references to deprecated test entities.

Note that the deprecated actions of MFTF have been removed and scripts responsible for upgrading tests to MFTF major version requirements have been updated.

Vendor-developed Extensions

Although numerous third-party extensions are deprecated in Magento 2.4.0, there are still some vendor-developed modules built into the platform.

Thus, Amazon Pay improvements include CSP allowlists updates as well as support for multiple authorizations for a multi-item order and Japanese addresses.

Braintree Payments replaces the core Braintree integration.

Klarna in Magento 2.4.0 delivers new on-site messaging options to help shoppers understand the available credit and financing options. Besides, it supports refunds, discounts, cookies & unit tests, as well as updated configuration settings.

Vertex provides better admin experience, XML schema files and patches instead of scripts, and deprecated code removal.

Yotpo’s Ratings and Reviews feature is now integrated with Page Builder.

Magento 2.4 Commerce Release Notes

Magento Commerce 2.4.0 includes all the features mentioned above plus several more enhancements, such as renewed B2B features. The deprecated payment methods include: Authorize.Net, Braintree, eWay, CyberSource, and Worldpay.

Page Builder

The major Page Builder improvement introduced in Magento 2.4.0 is that it now supports PHP 7.4. That’s it.

B2B

As for the B2B improvements of Magento 2.4.0, they are quite lean too. The new platform version introduces the Order Approval Workflow feature that allows managers of buying organizations to configure approval rules for their buyers.

Thus, Magento now supports self-service configuration of unique approval rules per Company account. Flexible rule criteria can be based on such parameters as order amount, number of line items, or shipment costs. Configurable thresholds add a new flexibility level to the initial configuration.

Customizable permissions for all aspects of the feature is another notable change to the default workflow.

Approvals are now required in quick storefront view of Purchase Orders. Besides, you get better control over the related processes with a full history log of actions.

Email notifications now inform relevant parties about all steps taken during the approval process.

Also, numerous bug fixes to the B2B functionality have been introduced in Magento 2.4.0. You can view them here: B2B Release Notes.

Vendor-developed Extension

Magento Commerce 2.4.0 includes the same third-party modules as Open Source as well as the dotdigital extension. The latter offers the following improvements:

• Customer attribute values captured by any input type are synced correctly – like data fields;
• It is possible to send cart insight data for all active quotes, even if they are empty;
• The website name, store name, and store view name can be synced by individual data fields;
• The transactional data sync limit for Wishlist, Review, and Order data has been improved;
• Logging output from the Client class is consistent across all the API wrapper methods;
• Configurable products have a stock figure – a sum of their child products;
• Stock updates performed outside the Magento admin are now detected;
• Improved data mapping;
• Updated transactional email configuration.

Magento 2.3 Release Notes: Adobe Commerce & Magento Open Source

This release introduces significant improvements and various tools that enhance the developer experience: PWA Studio, alternatives to SOAP and REST, and a flexible frontend API that opens rich opportunities for the frontend, headless, and mobile development.

Magento 2.3.5 Open Source Release Notes

Magento 2.3.5 contains 180 functional fixes as well as 25 security enhancements. Below, we concentrate on the most essential updates.

Platform updates

Platform updates include support for Elasticsearch 7.x and deprecation of Authorize.Net, eWay, CyberSource, Worldpay, and Signifyd integrations. Use the corresponding modules from the Marketplace.

Besides, Magento 2.3.5 delivers an upgrade for Symfony Components to 4.4 and relies on the Laminas project instead of the Zend Framework.

Performance

With Magento 2.3.5, you can now benefit from improvements in customer data section invalidation as well as numerous Redis performance optimizations.

Infrastructure

Magento 2.3.5 infrastructure improvements are related to Catalog, PayPal, Sales, Elasticsearch, Import, CMS, and B2B modules. The system now follows the SameSite cookie update with the PayPal Pro payment method. Besides, you can leverage a PHPStan code analysis check via static builds.

Inventory Management

A new extension point for SourceDataProvider and StockDataProvider and allocated inventory sources in the list of orders are among the inventory management updates of Magento 2.3.5.

GraphQL

Products and categoryList queries can be utilized for retrieving information about the corresponding entities of a staged campaign.

PWA Studio

PWA Studio 6.0.0 offers a new PWA extensibility framework, improved caching and data fetching, as well as a full-page shopping cart experience.

Third-party extensions

Google Shopping ads Channel is no longer supported. Klarna is delivered to Australia and New Zealand. Vertex offers improved backend interface, address validation, tax calculations for virtual products, WSDL ports with basic authentication, restorable configuration settings, etc.

Magento 2.3.5 CommerceRelease Notes

Magento 2.3.5 Commerce also introduces the following enhancements:

• Dotdigital connects the Engagement cloud with Magento B2B via company data (customer types, companies, company statuses), shared catalog data, and quotes data synchronization. As a result, you get better campaigns and more precise recommendations.
• Page Builder offers templates to customize the appearance of your store pages and save them for further updates to new content areas. Video backgrounds can be added to rows, banners, and sliders, which now support full-page hight. Previously saved content versions are updated automatically so that they always match newer configuration changes.
• For B2B enhancements of Magento 2.3.5 follow this link: B2B Release Notes. They include mostly fixes.
• Product Recommendations introduce a built-in personalization tool powered by Adobe Sensei. We describe it here: Magento 2 Personalization Services.

Magento Open Source 2.3.3 Release Notes

Like other releases, Magento Open Source 2.3.3 offers platform upgrades and security changes. Check this article for more detailed description of features: Magento 2.3.4 Enhancements.

New security patches

Starting from 2.3.3, Magento offers time-sensitive security patches that don’t apply hundreds of functional fixes and enhancements. Thus, patch 2.3.2.2 is a security-only patch designed to fix vulnerabilities that have been identified in Magento 2.3.2. You can read more about this new improvement here: Introducing the New Security-only Patch Release. Also, read this article to discover how to install the new patch: Install Magento using Composer.

Security enhancements

Magento 2.3.3 Open Source includes many more security enhancements that can be divided into three groups. Firstly, it is PSD2 compliance with core payment methods. Secondly, the new platform version fixes 75 critical security issues. Thirdly, 2.3.3 offers enhancements that boost XSS protection against future exploits.

PSD2 compliance

Since PSD2 went into effect on September 14, Magento has already prepared its users for the new change. The 2.3.3 version contains the following PSD-related changes:

• Braintree is now compliant with PSD2;
• Authorize.net now provides the ability to make 3D Secure verification through third-party services;
• Magento 2.3.3 no longer includes the Cybersource and eWay payment modules. You have to replace them with the official extensions instead.

Security enhancements

75 security enhancements improve close cross-site scripting and remote code execution vulnerabilities. Besides, they also fix other security issues. Although no confirmed attacks occurred, certain vulnerabilities can potentially be exploited to access your admin and customer data.

Platform upgrades

To boost platform security and performance, Magento 2.3.3 Open source supports PHP 7.3.x and 7.2.x. The latest tested versions are 7.3.8 and 7.2.21. It also supports Varnish 6.2.0. Also, note that Zend Framework 2 Components have been upgraded to the Active/LTS versions.

Performance improvements

To enhance the platform performance, Magento 2.3.3 offers the following features:

• Automatic URL rewrite generation that occurs when the category products belong to is saved can be enabled/disabled.
• Non-critical CSS elements are at the bottom of the page increasing its load speed. Enable the feature under Stores > Configuration > Advanced > Developer > CSS Settings > Use CSS critical path.
• The jQuery/ui library exists as separate widgets. It means that core modules can now load only the widgets they need.
• To increase page load speed, Magento 2.3.3 store pages display text in readable system fonts while loading custom ones. The more large CSS files and fonts you use, the more noticeable the improvement is.

Infrastructure improvements

Magento 2.3.3 includes updated Framework and the following modules: Catalog, Sales, Checkout/One Page Checkout, UrlRewrite, Customer, and Ui. Also, note that the WYSIWYG editor has been upgraded. Its latest version is TinyMCE v. 4.9.5​.

Merchant tool enhancements

Magento 2.3.3 provides a tracking tool for user actions and events on the Admin. The data is saved and provided to Adobe Analytics.

Inventory Management enhancements

As for inventory management enhancements of Magento 2.3.3, they include fixes to multiple bugs. You can find more information here: Inventory Management release notes.

GraphQL

Expanded GraphQL functionality covers PayPal payment integrations, store credits, and gift cards. You can leverage it to process payments, redeem gift cards and convert to store credit balance, update shopping carts, and add configurable products to cart.

PWA Studio

Magento 2.3.3 also includes upgrades for PWA Studio 4.0.0. Now, this tool contains new hooks in Peregrine as well as refactored components that can be converted into re-useable Peregrine hooks.

Google Shopping ads Channel

In Magento 2.3.3, the Google Shopping ads Channel Marketplace module is available as a bundled extension.

Magento Shipping

From the perspective of Magento Shipping, 2.3.3 includes numerous improvements in such areas as carrier integration, batch-order processing, shipping method preview in the shipping portal, checkout, etc. It also supports bundled products and prepackage options.

Vendor-developed extension

Magento 2.3.3 Open Source offers the following enhancements for third-party extensions:

• Amazon Pay is compliant with the PSD2 directive for the UK and Germany;
• Dotdigital includes improved product catalog synchronization for bundled and custom products as well as better communications for abandoned carts;
• Klarna lets merchants disable the sending of customer information, supports B2B transactions and works with PayBright;
• Vertex for Magento 2.3.3 supports Flexible Fields – merchants can provide the tax engine with additional information, provides several attributes by default, lets merchants add custom fields to the Vertex connector;
• Yotpo is a user-generated content management platform that is integrated with the admin section of Magento 2.3.3 so that merchants can gather, curate, and manage user-generated content more efficiently.

Import/export

Since Magento 2.3.3 introduced a plethora of import/export improvements (most of them are bug fixes), we’d like to draw your attention to the Improved Import & Export features that are not available by default. Our extension lets you automate all data transfers using schedules. At the same time, you can use presets to map third-party attributes automatically. Another vital benefit of our plugin is the ability to use multiple file formats in addition to CSV. You can even transfer data from Google Sheets or via API. Follow this link for more information:

Get Improved Import & Export Magento 2 Extension

For further information about the new release, check this article: Magento Open Source 2.3.3 Release Notes.

Magento Commerce 2.3.3 Release Notes

As for Magento Commerce 2.3.3, it includes all the aforementioned improvements and fixes plus additional GraphQL features and the following Page Builder enhancements:

• Improved inline editing experience with the upgrade to TinyMCE v4.9.5;
• The ability to define product order explicitly;
• Improved HTML content management for non-technical users.

Magento 2.3.2 Open Source Release Notes

Security

Magento 2.3.2 Open Source includes 75 security enhancements. They help to solve the following issues:

• cross-site scripting (XSS);
• remote code execution (RCE);
• sensitive data disclosure vulnerabilities.

Google reCAPTCHA module for PayPal Payflow checkout prevents malicious targeting of Magento deployments that implement Payflow Pro.

Performance

Another change introduced in Magento 2.3.2 Open Source is a significant improvement to storefront page response time under high load. With enhanced concurrent access to the block cache storage, the response of storefront pages under high load is improved by approximately 20%.

Besides, Magento 2.3.2 Open Source users can leverage the recent product page gallery load optimization. The latest version enables product images to be loaded as quickly as other page elements.

It is also necessary to mention that Magento 2.3.2 includes improved page rendering to improve page performance. The feature is based on deferred loading and parsing of storefront JavaScript. It means that non-critical JavaScript code is situated at the bottom of storefront pages enabling faster page rendering. As a result, store visitors see the complete page sooner while nonessential elements remain inactive.

Infrastructure

Magento 2.3.2 Open Source contains 130 enhancements to core quality of Framework and numerous modules. It is also worth mentioning that

• The Braintree payment method is now supported for checkout with multiple addresses;
• The CGI URL gateway in the UPS module is updated to HTTPS;
• Google chart API updated to the Image-Charts.

Merchant tool

Magento 2.3.2 Open Source now performs a bunch of new tasks as asynchronous background processes. Besides, it sends system messages to alert Admin users about task completion. The following processes are now performed in a background:

• Discount coupon generation;
• Products mass editing;
• Data export.

Inventory Management

Magento 2.3.2 Open Source introduces new commands that enable merchants to discover and resolve reservation inconsistencies. Besides, all users can leverage the improved user interface for assigning sources to products with the following features:

• Decimal order quantity;
• New test scenarios for Credit Memo;
• InventoryGraphQl module with attributes that return correct product quantity information;
• Single/multiple products save;
• Bulk inventory transfers.

Besides, it is now possible to leverage a new endpoint for Bulk Partial Stock Transfer. The new feature enables bulk transfers for a custom product quantity between sources.

GraphQL

Magento 2.3.2 Open Source includes the following GraphQL improvements:

• GraphQL coverage for cart and checkout operations provides support for simple and virtual products. Besides, you can freely add, update, and delete cart items; set shipping and billing addresses (with address book support); set shipping and payment (offline only) method; place an order;
• GraphQL caching supports additional queries to improve response times;
• GraphQL performance test scenario coverage has been extended.

PWA

Magento 2.3.2 Open Source introduces an improved modular component library for the PWA Studio. From this version, developers can reuse and scale components for frontend needs. A phased rollout for Peregrine functional and data components is another big step. From 2.3.2, the Search component has been updated.

Amazon Pay

Finally, the UK and German merchants can leverage Amazon Pay since it is now compliant with the PSD2 directive for these countries.

For further information about Magento 2.3.2 Open Source, follow this link: Magento Open Source 2.3.2 Release Notes.

Magento 2.3.2 Commerce Release Notes

Security

Magento 2.3.2 Commerce includes 75 security enhancements. They help to solve the following issues:

• cross-site scripting (XSS);
• remote code execution (RCE);
• sensitive data disclosure vulnerabilities.

Google reCAPTCHA module for PayPal Payflow checkout prevents malicious targeting of Magento deployments that implement Payflow Pro.

Performance

Magento 2.3.2 Commerce offers a redesigned checkout page to support customers working with many addresses. Now, it is possible to search addresses instead of listing them on the Select shipping and Billing address steps. Thus, customers with thousands of addresses can benefit from the new feature reducing the time necessary to specify data required for the checkout.

Another notable change introduced in Magento 2.3.2 Commerce is a significant improvement to storefront page response time under high load. With enhanced concurrent access to the block cache storage, the response of storefront pages under high load is improved by approximately 20%.

Besides, Magento 2.3.2 Commerce users can leverage the recent product page gallery load optimization. The latest version enables product images to be loaded as quickly as other page elements.

It is also necessary to mention that Magento 2.3.2 includes improved page rendering to improve page performance. The feature is based on deferred loading and parsing of storefront JavaScript. It means that non-critical JavaScript code is situated at the bottom of storefront pages enabling faster page rendering. As a result, store visitors see the complete page sooner while nonessential elements remain inactive.

Infrastructure

Magento 2.3.2 Commerce contains 130 enhancements to core quality of Framework and numerous modules. It is also worth mentioning that

• The Braintree payment method is now supported for checkout with multiple addresses;
• The CGI URL gateway in the UPS module is updated to HTTPS;
• Google chart API updated to the Image-Charts.

Merchant tool

Magento 2.3.2 Commerce now performs a bunch of new tasks as asynchronous background processes. Besides, it sends system messages to alert Admin users about task completion. The following processes are now performed in a background:

• Discount coupon generation;
• Products mass editing;
• Data export.

Inventory Management

Magento 2.3.2 Commerce introduces new commands that enable merchants to discover and resolve reservation inconsistencies. Besides, all users can leverage the improved user interface for assigning sources to products with the following features:

• Decimal order quantity;
• New test scenarios for Credit Memo;
• InventoryGraphQl module with attributes that return correct product quantity information;
• Single/multiple products save;
• Bulk inventory transfers.

Besides, it is now possible to leverage a new endpoint for Bulk Partial Stock Transfer. The new feature enables bulk transfers for a custom product quantity between sources.

GraphQL

Magento 2.3.2 Commerce includes the following GraphQL improvements:

• GraphQL coverage for cart and checkout operations provides support for simple and virtual products. Besides, you can freely add, update, and delete cart items; set shipping and billing addresses (with address book support); set shipping and payment (offline only) method; place an order;
• GraphQL caching supports additional queries to improve response times;
• GraphQL performance test scenario coverage has been extended.

PWA

Magento 2.3.2 Commerce introduces an improved modular component library for the PWA Studio. From this version, developers can reuse and scale components for frontend needs. A phased rollout for Peregrine functional and data components is another big step. From 2.3.2, the Search component has been updated.

BlueFoot to Page Builder content migration

Assistance for BlueFoot to Page Builder migration is a Commerce-specific feature introduced in Magento 2.3.2. The BlueFoot content migration module enables merchants on Magento 2.1.x or 2.2.x with BlueFoot to upgrade to Magento 2.3.1+ with PageBuilder 1.0 with no data losses.

Amazon Pay

Finally, the UK and German merchants can leverage Amazon Pay since it is now compliant with the PSD2 directive for these countries.

For further information about Magento 2.3.2 Commerce, follow this link: Magento Commerce 2.3.2 Release Notes.

Magento 2.3.1 Open Source Release Notes

Magento 2.3.1 Commerce Release Notes

Magento Open Source 2.3.0 Release Notes (Beta)

New features

• PWA Studio – a set of tools for the significantly improved development, deployment, and maintenance of progressive web applications: Magento PWA documentation;
• Declarative schema – improved installation and upgrade procedures for Magento and extensions.
• GraphQL API – an alternative to REST and SOAP web APIs: GraphQL Developer Guide;
• MultiSource Inventory (MSI) – manage physical inventory across locations out of the box. Read our review here: Magento 2 Multi Source Inventory;
• Amazon Sales Channel – create and manage Amazon listings and fulfill your orders for both Amazon customers and your store visitors.

Core product improvements

• Updates to Magento’s tech stack: Redis, MySQL, Elasticsearch, compatibility with PHP 7.2, etc;
• Improvements to import and export (but our module is a way more powerful);
• Elasticsearch support;
• Improvements to release packaging with a faster and more efficient release process;
• CMS enhancements with a native Magento WYSIWYG editor or Page Builder for banners;
• Performance improvements are represented by JavaScript bundling.
• Security enhancements: Cache flush ACL and 2FA/CAPTCHA;
• Change in versioning for B2B product that lets matching the versioning of the core product.

Magento Commerce 2.3.0 Release Notes (Beta)

New features

• PageBuilder – a new drag-and-drop visual content editing tool that lets merchants customize the appearance of their storefront in a very user-friendly way;
• PWA Studio – a set of tools for the significantly improved development, deployment, and maintenance of progressive web applications: Magento PWA documentation;
• Declarative schema – improved installation and upgrade procedures for Magento and extensions.
• GraphQL API – an alternative to REST and SOAP web APIs: GraphQL Developer Guide;
• MultiSource Inventory (MSI) – manage physical inventory across locations out of the box. Read our review here: Magento 2 Multi Source Inventory;
• Amazon Sales Channel – create and manage Amazon listings and fulfill your orders for both Amazon customers and your store visitors.

As you can see, the only unique feature is the PageBuilder. Other tools are the same for both Commerce and Open Source editions. As for the core product improvements, they are also similar. For further information, follow these links: Magento Open Source 2.3.0 Release Notes & Magento Commerce 2.3.0 Release Notes.

Final Words: Keep Your Magento Store Up to Date

Following the latest Magento 2 release notes is an important part of maintaining a secure, stable, and future-ready ecommerce store. Each new Magento Open Source and Adobe Commerce version can introduce security patches, performance improvements, new APIs, platform upgrades, and compatibility changes that affect your store and its integrations.

Magento 2.4.9 continues this evolution with major technology-stack updates, including PHP 8.5, Symfony 7.4, OpenSearch 3.x, Valkey 9.x, and newer MariaDB versions. Adobe Commerce also brings additional improvements for B2B, GraphQL, payments, shipping, and enterprise ecommerce workflows.

Before upgrading, review the Adobe Commerce release notes or Magento Open Source documentation for your target version and check the system requirements, third-party extensions, customizations, integrations, and data workflows used by your store.

If your upgrade or migration involves large amounts of products, customers, orders, categories, or other Magento data, Firebear Improved Import & Export can help automate data transfers between Magento 2 and external systems. The extension supports flexible import and export processes, scheduled transfers, API integrations, and multiple data sources and destinations, making it easier to manage complex ecommerce data operations as your Magento platform evolves. Contact us now for more information.

Magento 2 Release Notes FAQ