Magento 2 Release Notes

In the following post, we will gather all Magento 2 release notes starting from 1.0.0-beta. Since every release includes a plethora of improvements and changes, we’ve divided them into several subcategories, such as performance, payment methods, checkout, CMS, etc. These are the latest Magento 2 Release notes from the official repo.

Magento 2.4. Release Notes

Magento Open Source 2.4.7 Release Notes

Over 140 quality fixes and enhancements are included in Magento Open Source 2.4.7-beta1. Core Composer dependencies and third-party libraries have been updated to the most recent versions available. Composer 2.5 is now supported, whereas Composer 2.2.x is still accessible.

This version also expands GraphQL coverage for custom properties and improves GraphQL caching.

Security

This version includes 13 security fixes as well as platform security enhancements. They increase compliance with the most recent security best practices, such as this update, which alters the default behavior of an existing REST endpoint:

Payment information communicated over REST and GraphQL APIs is subject to native rate limitations. Merchants may now set rate limits for payment information sent through REST and GraphQL. This additional layer of security aids in the prevention of carding attacks and may reduce the amount of carding assaults that test many credit card numbers at once. 

The isEmailAvailable GraphQL query and (V1/customers/isEmailAvailable) REST endpoint’s default behavior has been changed. The API now always returns true by default. 

Platform enhancements

Platform upgrades for this release improve compliance with the latest security best practices, including Composer 2.5.x support (compatibility with Composer 2.2.x remains) and Varnish cache 7.3 support (compatibility with the 6.0.x and 7.2.x versions remains).

Outdated JavaScript libraries have been updated to the latest versions: moment.js library (v2.29.4), jQuery UI library (v1.13.2), and jQuery validation plugin library (v1.19.5).

GraphQL

This release improves GraphQL caching and adds support for customer EAV characteristics to the GraphQL schema, including:

• Custom attributes get better support. By augmenting API data, GraphQL custom attribute support has been expanded to include all attribute types. The GraphQL EAV attributes schema now enables expanding and obtaining customer attributes and customer address objects in the Admin using GraphQL. Specific areas for improvement include:
  • custom attribute functionality has been extended/added to particular areas such as customer and customer address; 
  • custom attribute caching;
  • improved current product custom attribute support.
• Improved GraphQL caching speeds up page load time. Caching support has been introduced to these queries, resulting in faster page load times for most PWA pages:
  • storeConfig
  • currency
  • countries and country
  • availableStores
  • customAttributeMetada
• The following new GraphQL resolver cache types are at your service:
  • CMS page – the result of the CMS Page resolver;
  • CMS blocks – the results returned from Magento\CmsGraphQl\Model\Resolver\Blocks::resolve.
• The performance of the GraphQL parser has been improved. The number of times the parse method is called per request is reduced to one instead of three.
• customAttributeMetadataV2 is a new query.
• attributesMetadata and customAttributeMetadata are deprecated queries.

Magento Open Source Extension metapackage

This version includes the Magento Open Source Extension metapackage v1.0.0-beta1, which includes the Payment Services extension by default. When composer update is called, the version of this extension included in this metapackage is installed, easing the process of upgrading the extension when upgrading to the newest core release. This addon keeps its own release schedule. Additional extensions will be added to future editions of this extension metapackage.

Page Builder

Magento Open Source 2.4.7-beta1 is compatible with Page Builder v.1.7.4.

PWA Studio

Magento Open Source 2.4.7-beta1 is compatible with PWA Studio v.13.2.x, including multiple enhancements and improved accessibility.

Adobe Commerce 2.4.7 Release Notes

Adobe Commerce 2.4.7 includes all the features described above plus a bunch of exclusive enhancements:

Performance and scalability

Adobe Commerce 2.4.7 release introduces significant improvements in the processing speed of save operations for large deployment configurations. 

It might take a long time to save configuration settings in installations with more than 500 stores. By executing a cron job that employs a consumer to handle the save action in a message queue, the new Async Config module enables asynchronous configuration to save operations. By default, AsyncConfig is turned off.

For big setups, the config cache is generated faster. When the config cache is enabled, the bin/magento cache:clean config command now pre-warms it. For big setups, this decreases the downtime required to construct the config cache. Configuration save actions no longer empty the config_scopes cache before writing data to the cache, reducing the amount of time other requests are locked out while config data is being saved.

Application Server for GraphQL APIs

Adobe Commerce 2.4.7 release includes a new PHP application server based on the Swoole PHP extension. This application server allows Adobe Commerce to keep state across Commerce GraphQL API calls, removing the requirement for bootstrapping. API requests become substantially more efficient when the application state is shared throughout processes, and API response times might possibly be reduced by 50 – 60 milliseconds.

The PHP application server is implemented via the ApplicationServer module, which is exclusively accessible for on-premises installations. Developers who wish to use this server must install and set up Swoole and Nginx as well.

This application server’s beta version is only available for on-premises deployments; it does not allow cloud-based deployments. It currently does not support B2B GraphQL capability. In on-premises implementations, GraphQL queries may not function as intended.

Adobe Commerce Extension metapackage

The Adobe Commerce Extension metapackage v2.0.0-beta1 is included in this version, and it automatically packages selected Adobe Commerce extensions with this core release. When the composer update runs, the versions of these extensions included in this metapackage are installed, easing the process of upgrading these extensions when upgrading to the current core release. These extensions keep their own release schedules.

The following three extensions are included in the Adobe Commerce Extension metapackage for Adobe Commerce 2.4.7-beta1:

• Bolt Quick Checkout
• Adobe I/O Events for Adobe Commerce
• Payment Services

B2B

New capabilities and enhancements for B2B negotiable quotes, REST API updates, and multiple bug fixes have been introduced in Adobe Commerce 2.4.7:

• Seller-initiated quotes: With this release, B2B Sales representatives get the ability to initiate a quote directly from the Quote and Customer grids in the Admin. 
• Line item discounts. It is now possible to apply discounts as a percentage off, a fixed value, or as extended pricing for specific line items from a quote.
• Notes exchange on a quote. B2B Buyers and Sellers can add notes directly to a quote to negotiate. Note management is available in the line item and quote history.
• Improved Quote Detail view. The quote detail page provides sellers and buyers with the ability to add items by SKU or from the product catalog. In addition to that, it is possible to add or edit notes, apply line item discounts, and access product configuration.
• REST API updates:
  • A new endpoint provides web API coverage for the seller-initiated quote capability: POST /V1/negotiableQuote/draft
  • Enhanced web API coverage of the storefront features for shared catalog includes new endpoints used for assigning and reseting custom price actions: POST /V1/sharedCatalog/:sharedCatalogId/assignCustomPrices & POST /V1/sharedCatalog/:sharedCatalogId/resetCustomPrices
• A new quickorder_active field has been introduced for the storeConfig and availableStores queries. It indicates whether the quick order feature is enabled.

Magento Open Source 2.4.6 Release Notes

Magento Open Source 2.4.6 adds PHP 8.2 support. PHP 8.1 is still fully supported, while PHP 7.4 is no longer maintained. Significant speed and scalability improvements are included. GraphQL operations for bulk cart operations and response to category tree rendering have been improved.

This version contains several quality corrections and upgrades. Core Composer dependencies and third-party libraries have been updated to the most recent versions which are PHP 8.2-compatible.

Backward-incompatible modifications (BICs) may be included in Adobe Commerce and Magento Open Source versions. See the BIC reference for a list of backward-incompatible modifications. BIC highlights explain major backward-incompatible concerns.

Security enhancements

This version contains eight security fixes as well as platform security enhancements.

There have been no verified attacks connected to these problems so far. Certain vulnerabilities, on the other hand, can be exploited for getting access to client information or taking over administrator sessions. 

Security improvements for Magento 2.4.6 Open Source improve compliance with the latest security best practices:

• Gaps in Admin action logs have been filled with more precise auditing of grid view activities, bulk actions, and exports.
• When unexpected issues occur during payment processing, reCAPTCHA validation no longer fails at checkout. 
• When an admin user changes their email address, the system now requires email confirmation. A new system configuration feature is available under Stores > Settings:Configuration > Customers > Customer Configuration > Account Information Options > Require email confirmation. When this option is selected, the program will seek email confirmation if the admin user’s email address changes. This modification has an impact on the following modules: Magento_Customer.

Platform enhancements

Magento Open Source 2.4.6 adds PHP 8.2 support. PHP 8.1 is still fully supported, while PHP 7.4 is no longer maintained. It means that running Magento Open Source 2.4.6 on PHP 7.4 is impossible.

Magento Open Source now supports:

• Composer 2.2.x, while Composer 1.x has been removed.
• Redis 7.0.x, while compatibility with Redis 6.2 still remains.
• OpenSearch is the default search engine for Magento Open Source on-premises and cloud deployments. Magento 2.4.6 Open Source supports OpenSearch v2.x and has been tested with OpenSearch 2.5.
• Elasticsearch 8.x.
• MariaDB 10.6 (LTS version), while MariaDB 10.4 is still compatible, 
• The DHL schema has been migrated to v10.0.
• Outdated JavaScript libraries have been updated to their latest versions resulting in the removal of outdated dependencies.
• Symfony dependencies have been upgraded to the new LTS version in Magento 2.4.6, including: friendsofphp/php-cs-fixer, symfony/console, symfony/event-dispatcher, symfony/finder, symfony/process, web-token/jwt-framework.
• jquery-migrate is no longer available in the Commerce and Magento Open Source code bases. 
• jQuery/fileUpload library has been upgraded to v10.32.
• Outdated Zend framework (ZF1) components have been removed from the codebase.
• Laminas dependencies support PHP 8.2 and the laminas/laminas-dependency-plugin Composer plugin has been removed. Zend_Filter has been replaced with laminas/laminas-filter.
• web-token/jwt-framework has been upgraded to v3.0.5.
• allure-framework/allure-phpunit has been upgraded to v2.x.
• The Chart-js library has been upgraded to v3.9.1

Accessibility updates

Magento 2.4.6 Open Source focuses on developing a more perceptible, operable, intelligible, and comprehensive retail experience on Venia (PWA):

• The Sign in button’s visual text label now matches its accessible name.
• Buttons in the shop now have descriptive, easy-to-remember names.
• The Has Video checkboxes in search filters now include verbal descriptive captions.
• All page functionality on the shop is now available to keyboard-only users. Previously, only keystrokes could be used to access sub-navigation links.

Adobe Commerce integration with Adobe IMS

With 2.4.6, the following Adobe IMS modules have been decoupled from the Adobe Commerce and Magento Open Source core code. They are now packaged as a separate metapackage: adobe-ims, adobe-ims-api, and admin-adobe-ims.

The new adobe-ims-metapackage v2.2.0 is bundled with the latest version of both Adobe Commerce and Magento Open Source.

Braintree

• It is possible to use the Pay Later button and banners (messages) in Italy and Spain.
• 2.4.6 enables PayLater messaging with PayPal Vault.
• Fraud Protection and ACH web hooks are enabled, triggering when a risk decision is made in Braintree.
• LPM (Local Payment Methods) web hook is now enabled.

GraphQL

Improvements to GraphQL speed include faster response times when querying categories with category permissions enabled. Response speeds have improved when querying items in categories with enabled category permissions and a large number of customer groups or shared catalogs. Changes to the code that allow this performance increase include:

• The functioning of the GraphQL resolver has been improved.
• Because the data source no longer resets runtime-cached data for each new product handled, performance has improved.
• The GraphQL resolver has improved product authorization processing. Product permissions are now applied to product groups rather than individual products.
• In the addProductsToCart mutation, permissions read in shared catalogs were optimized.
• Product inline pieces have been used to improve product permissions.

Category tree rendering speed has been improved. The categoryList query has been improved to accommodate clients with a high number of categories. Merchants searching more than 1500 categories with up to five layers of nested subcategories will notice a performance boost. Refactoring code has enhanced the loading of category children by reducing superfluous method calls, enhancing category tree caching, and loading category data recursively. Changes to the code that allow this performance increase include:

The retrieval of custom attribute metadata for category models has been enhanced.

The retrieval of Category IDs has been enhanced, and the number of getChildren calls has been minimized.

The loading of the category children has been enhanced.

Bulk cart operations query response time has been reduced. When adding up to 500 simple and configurable items, the added product mutations have been adjusted to increase query efficiency. Bundle products are unaffected. 

The optimized mutations include addProductsToCart, addConfigurableProductsToCart, addDownloadableProductsToCart, addSimpleProductsToCart, addVirtualProductsToCart,addWishlistItemsToCart, and updateCartItems.

Also, customer query now supports order sorting. The orders output object of the customer query received a sort field. It means that it is possible to sort orders by order number or creation date in ascending or descending order.

New mutations:

• deleteCustomer
• Page Builder

Magento Open Source 2.4.6 supports Page Builder v.1.7.3.

PWA Studio

Magento Open Source 2.4.6 supports PWA Studio v.13.0.x, including multiple accessibility enhancements. See the official PWA Studio releases for information about bug fixes and Version compatibility for a list of PWA Studio versions.

Adobe Commerce 2.4.6 Release Notes

Adobe Commerce 2.4.6 includes all the improvements introduced in Magento Open Source 2.4.6 along with the following new features:

Performance and scalability enhancements

Performance Improvements introduced in Adobe Commerce 2.4.6 affect many customer segments. The performance of operations has been improved, involving more than 100 customer segments. The Real-time Check if Customer is Matched by Segment setting can be disabled, reducing processing time.

Also, the new system configuration setting for limiting the number of products displayed in the product grid improves product grid performance. Note that by default, this limit is configured to 20000 and affects only product collections used by UI components. 

Improved import performance lets you transfer up to 100,000 records per minute. There is a new POST /rest/<store_view_code>/V1/import/csv REST API endpoint that offers faster import and can be usedto create, update, and remove products, product pricing, and customer entities via CSV.

Improved high-throughput order processing performance based on load balancing is another performance improvement introduced in Adobe Commerce 2.4.6 on a cloud infrastructure. It is possible to balance a database load across different nodes. 

Adobe Commerce Extension metapackage

Adobe Commerce 2.4.6 introduces the Adobe Commerce Extension metapackage v1.1.0. It automatically bundles select Adobe Commerce extensions with this core release. When composer update is called, the versions of these extensions included in this metapackage are installed, easing the process of upgrading these extensions when upgrading to the current core release. These extensions will continue to have their own release schedules.

The Adobe Commerce Extension metapackage for Adobe Commerce 2.4.6 includes these two extensions: Bolt Quick Checkout and Adobe I/O Events for Adobe Commerce.

Adobe I/O Events for Adobe Commerce

Adobe I/O Events for Adobe Commerce records events in Adobe Commerce and sends data from Adobe Commerce to other Adobe systems. Developers may use Adobe Developer App Builder to create cloud-native apps that subscribe to Commerce events like inventory updates, order status changes, and pricing adjustments. Developers can utilize this functionality to share data across mission-critical systems in order to orchestrate the complete buyer journey.

B2B

The GraphQL API now fully exposes the Purchase Orders for Companies functionality. This version includes two GraphQL schemas:

• Purchase Order Form The GraphQL schema includes Purchase Order Management capabilities for B2B corporate users, such as generating, amending, and canceling purchase orders. 
• The Purchase Order Regulation GraphQL schema allows you to add, update, and delete approval rules, as well as manually validate purchase orders. 

See B2B Release Notes for more information.

Magento Open Source 2.4.5 Release Notes

GraphQL caching performance, platform quality, payment options, and accessibility are all improved in Magento Open Source 2.4.5. Updates to Google modules that are integrated are also included in this version, along with 290+ improvements and fixes.

Note that some changes in Magento Open Source 2.4.5 are incompatible with earlier versions. See BIC reference for a breakdown of these backward-incompatible issues.

Although the source for these features is included with the Magento Open Source core code’s quarterly releases, some of them are also distributed separately. The separate, project-specific release information that is accessible in the documentation for each project contains details on the corresponding bug fixes.

Security 

Twenty security fixes and platform security upgrades are included in this release. Backports of this security update have been made to Magento Open Source versions 2.4.4-p1 and 2.3.7-p4.

To date, there have been no confirmed attacks related to these problems. Nevertheless, these flaws might theoretically be used to access user data or hijack administrator sessions. For the majority of these problems, an attacker must first get access to the Admin. The official documentation, therefore, advises taking all necessary precautions to safeguard the Admin section, including but not restricted to the following actions:

• IP allowlisting;
• two-step authentication;
• VPN;
• Unique admin location; 
• Strong password.

Security improvements for Magento 2.4.5 improve compliance with the latest security practices. So, the following enhancements are at your service:

• reCAPTCHA is now available in the Wish List Sharing, Create New Customer Account, and Gift Card forms.
• ACL resources are available in Inventory.
• Enhanced Inventory template security.
• The MaliciousCode filter now uses the HtmlPurifier library.

Platform

With Magento Open Source 2.4.5, the platform delivers support for the following acts:

• Composer 2.2;
• TinyMCE 5.10.2;
• jQueryUI 1.13.1;
• PHPStan ^1.5.7 with constraint;
• DHL Integration schema v6.2;
• JavaScript libraries have been updated to their latest versions;
• Outdated dependencies have been removed.

Also, pay attention to the following Composer dependencies that have been updated to the latest versions with constraints in Magento 2.4.5:

• colinmollenhour/credis (1.13.0)
• guzzlehttp/guzzle (^7.4.2)
• laminas/laminas-captcha (updated with a constraint ^2.12)
• laminas/laminas-db (^2.15.0)
• laminas/laminas-di (^3.7.0)
• laminas/laminas-escaper (~2.10.0)
• laminas/laminas-eventmanager (^3.5.0)
• laminas/laminas-feed (^2.17.0)
• laminas/laminas-mail (^2.16.0)
• laminas/laminas-mvc (^3.3.3)
• laminas/laminas-server (^2.11.1)
• laminas/laminas-servicemanager (^3.11.0)
• laminas/laminas-validator (^2.17.0)
• league/fly (2.4.3)
• monolog/monolog (^2.5)
• phpmd/phpmd (^2.12.0)
• phpstan/phpstan (^1.5.7)
• phpunit/phpunit (~9.5.20)
• php-cs-fixer (^3.4.0)
• webonyx/graphql-php (14.11.6)

As for the removed dependencies, they are:

• laminas/laminas-session
• laminas/laminas-text
• laminas/laminas-view 

Other upgrades and replacements introduced in Magento Open Source 2.4.5 include

• The default Gateway URL for USPS shipping now uses https instead of http.
• Magento 2.4.5 now uses the Vimeo Player.js library (2.16.4) instead of the Froogaloop library.
• The grunt-eslint (NPM) library has been elevated to the latest version.
• julien-maurel/js-storage is now used instead of the jQuery Storage libraries.
• Since Magento 2.4.5, the php-cs-fixer and phpcs static code analysis instruments are fully compatible with PHP 8.x.
• glob.js dependency has been updated with a constraint to ~7.2.0.
• serve-static.js dependency has been updated with a constraint to ~1.14.2.
• underscore.js dependency (NPM) has been updated to ~1.14.2.
• moment-timezone-with-data.js  has been updated with a constraint to ~0.5.34.
• js-cookie/js-cookie is now used instead of the jquery/jquery-cookie library.
• The jarallax.js and jaralax-video.js libraries have been updated so that they can utilize the latest Vimeo REST API version.

Accessibility 

The goal of this version was to improve the storefront experience on Venia (PWA) by making it easier to perceive, use, comprehend, and understand the frontend. These improvements consist of:

• Users with screen readers are now informed of the summary information for search results.
• When a new page view loads, screen readers are now alerted.
• Accessibility to the keyboard, as well as its contrast, has increased.

Google Analytics

Through the integration of GTag, Google has upgraded the tracking and integration procedures of AdWords and Analytics in web applications. The ability to track and manage information through Google Services is expanded thanks to this integration of Google capabilities into website pages. The old API is used by several built-in modules in Adobe Commerce, such as Google AdWords, Analytics, Optimizer, and TagManager, to integrate with Google services. This integration has been re-implemented in Magento 2.4.5 utilizing the GTag method.

 GraphQL

Performance improvements for GraphQL include:

• When deploying or modifying attributes in production, developers and administrators experience a faster rebuilding of the unified storefront GraphQL schema. Customers notice substantially quicker page loads whenever the GraphQL schema has to be rebuilt for whatever reason.
• The ability to use JSON Web Tokens (JWT) in the GraphQL API to consume the authorization token’s expiration date and time has been added.
• Merchants can totally deactivate the generation of session cookies for all GraphQL operations by using the bin/magento config:set graphql/session/disable 1 command. These cookies are generated by default by Magento Open Source and are used for authorization, which has an impact on performance. The use of session cookies on their own or in combination with permission tokens is not advised.
• GraphQL operations now only use class proxies to launch session cookies when necessary.
• In GraphQL, http header processors like shop, customer, and currency no longer need sessions.

Inventory

The inventory template experienced security enhancement in Magento 2.4.5.

Page Builder

Page Builder v.1.7.2 is now compatible with Magento 2.4.5 Open Source. In addition to that, It contains the following enhancements:

• Users can now modify the column settings on the storefront because columns are now visible.
• Wrapping in response to user events is now supported for column resizing.

Payments

All businesses running deployments with Payment Services enabled can use Apple Pay. Customers do not need to provide their card information to use this payment option. The product information page, mini cart, shopping cart, and checkout all support Apple Pay. This feature can be turned on by retailers.

In terms of PayPal, Magento 2.4.5 offers the following enhancements:

• Shoppers in Spain and Italy have the option to pay with PayPal Pay Later.
• The checkout, minicart, cart, and product pages in the admin all include previews of the PayPal, Credit, and Pay Later buttons. When enabled and shown on the storefront, these buttons will appear as they do in the previews.

As for Braintree, users of Magento 2.4.5 can experience the following changes:

• The integration for KOUNT fraud protection has been discontinued by Braintree. The Magento Open Source source no longer contains it.
• The Admin now has the Always request 3DS option.

PWA Studio

Magento Open Source 2.4.5 is compatible with PWA Studio version 12.5.x. For this release, the update includes the following new features:

• On the PWA Studio storefront, information about customer behavior is gathered for web analytics providers. Now, retailers can subscribe to and prolong these events as necessary.
• From the Admin, merchants may now choose a service to deploy (Google Tag Manager).

Adobe Commerce 2.4.5 Release Notes

The platform quality, payment options, GraphQL caching effectiveness, and accessibility are all improved with Adobe Commerce 2.4.5. Live Search B2B functionality is included, along with changes to the Upgrade Compatibility Tool and integrated Google components. More than 400 quality fixes and improvements are a part of this release. It could include modifications that are incompatible with earlier versions (BIC). See the official BIC reference for a breakdown of these backward-incompatible modifications.

Even though the main code for these features is provided every quarterly release, some of these projects are also released on their own. The separate, project-specific release information that is accessible in the documentation for each project contains details on the bug fixes for them.

So, Adobe Commerce 2.4.5 includes resolution of all issues that are addressed by the following hotfixes:

• The Braintree_disabled_partial_capture_for_applepay_googlepay.zip patch addresses the inability to create partial invoices when using either Apple Pay or Google Pay through Braintree as a payment method on the user side.
• The AC-2655_2.4.4.patch.zip patch addresses an issue when it is not possible to add a product to the cart when the Allow Countries option is unselected..

Security 

This release includes 20 platform security improvements and security patches. Adobe Commerce 2.4.3-p3 and Adobe Commerce 2.3.7-p4 now include backports of this security upgrade.

There haven’t been any confirmed attacks involving these issues up to this point. However, these bugs might possibly be exploited to get access to user data or take over administrator sessions. An attacker must first gain access to the Admin in order to leverage the majority of these issues. Therefore, according to the official guidelines, you should take all required safety measures to protect the Admin section, including but not limited to taking the following steps:

• IP permitting;
• Dual-factor authentication;
• VPN;
• Unique admin location;
• Secure password

Additional security enhancements for this release improve compliance with the latest security practices, including:

• reCAPTCHA is now available in the Wish List Sharing, Create New Customer Account, and Gift Card forms.
• ACL resources are available in Inventory.
• Enhanced Inventory template security.
• The MaliciousCode filter now uses the HtmlPurifier library.

Platform

From the perspective of Adobe Commerce on-premises deployments: version 2.4.5 is compatible with Elasticsearch 7.17 (~7.17.0 with constraint). So, if you are a merchant hosting Adobe Commerce on-premises, you can now use either Elasticsearch or OpenSearch 1.2.

As for Adobe Commerce cloud-hosted deployments, version 2.4.5 does not support ElasticSearch 7.11 or later. OpenSearch is the default search engine option.

Both Adobe Commerce 2.4.5 deployments now support Composer 2.2, TinyMCE 5.10.2, jQueryUI 1.13.1, and PHPStan ^1.5.7 with constraint.

Also, note that the DHL Integration schema update to v6.2 does not result in a change in product behavior.

It is also worth mentioning that outdated JavaScript libraries in Adobe commerce have been updated to their latest versions in the same fashion as in Open Source. It also means that outdated dependencies have been removed. Pay heed to the fact that these changes are backward compatible.

Composer dependencies that have been updated in Adobe Commerce 2.4.5 are the same as in Open Source:

• colinmollenhour/credis (1.13.0)
• guzzlehttp/guzzle (^7.4.2)
• laminas/laminas-captcha (updated with a constraint ^2.12)
• laminas/laminas-db (^2.15.0)
• laminas/laminas-di (^3.7.0)
• laminas/laminas-escaper (~2.10.0)
• laminas/laminas-eventmanager (^3.5.0)
• laminas/laminas-feed (^2.17.0)
• laminas/laminas-mail (^2.16.0)
• laminas/laminas-mvc (^3.3.3)
• laminas/laminas-server (^2.11.1)
• laminas/laminas-servicemanager (^3.11.0)
• laminas/laminas-validator (^2.17.0)
• league/fly (2.4.3)
• monolog/monolog (^2.5)
• phpmd/phpmd (^2.12.0)
• phpstan/phpstan (^1.5.7)
• phpunit/phpunit (~9.5.20)
• php-cs-fixer (^3.4.0)
• webonyx/graphql-php (14.11.6)

As for the removed dependencies, Adobe Commerce 2.4.5 has got rid of laminas/laminas-session, laminas/laminas-text, and laminas/laminas-view .

Other upgrades and replacements introduced in Adobe Commerce 2.4.5 include

• The default Gateway URL for USPS shipping now uses https instead of http.
• Magento 2.4.5 now uses the Vimeo Player.js library (2.16.4) instead of the Froogaloop library.
• The grunt-eslint (NPM) library has been elevated to the latest version.
• julien-maurel/js-storage is now used instead of the jQuery Storage libraries.
• Since Magento 2.4.5, the php-cs-fixer and phpcs static code analysis instruments are fully compatible with PHP 8.x.
• glob.js dependency has been updated with a constraint to ~7.2.0.
• serve-static.js dependency has been updated with a constraint to ~1.14.2.
• underscore.js dependency (NPM) has been updated to ~1.14.2.
• moment-timezone-with-data.js  has been updated with a constraint to ~0.5.34.
• js-cookie/js-cookie is now used instead of the jquery/jquery-cookie library.
• The jarallax.js and jaralax-video.js libraries have been updated so that they can utilize the latest Vimeo REST API version.

As you can see, they are similar to the platform updates of Magento Open Source 2.4.5.

Performance and scalability

The catalog_product_index_price_tmp table’s primary index performance has increased as a result of the reduction of the table’s primary indexes from three to one. This improvement decreased the eSKU multiplication brought on by shared catalogs, hence lowering the number of records generated in the price index. This update caused a significant decrease in indexing time.

Accessibility 

This version aimed to enhance the retail experience on Venia (PWA) by simplifying the frontend’s perception, use, comprehension, and understanding. These enhancements include:

• The summary data for search results is now provided to screen reader users.
• Screen readers are now informed when a new page view loads.
• Both the keyboard’s contrast and accessibility have improved.

Adobe Sign

Customers can now electronically sign customized contracts during an Adobe Commerce checkout, including warranty paperwork, purchase agreements, and terms and conditions.

Integration with Adobe IMS

The Adobe IMS authentication workflow can be integrated with Commerce authentication for Adobe Commerce merchants who have an Adobe ID and desire a simplified login to Adobe Commerce and Adobe Business products. Each Admin user must log in with their Adobe credentials rather than their Commerce credentials after this connection has been enabled for your Commerce business.

Branding

In order to better reflect Adobe’s brand approach, The Admin has been changed. Headers, footers, data grid color modifications, and navigational elements are all affected by the changes.

B2B

The normalized database data that is required to implement the Shared Catalogs feature has been optimized. Performance is improved since fewer database rows need to be stored as a result of the decreased eSKU multiplication. For each Shared Catalog, Adobe Commerce used to duplicate every SKU in the catalog. For individuals who are now directly assigned to a Shared Catalog, Adobe Commerce provides distinctive eSKUs.

Performance of the product price indexer is also enhanced by using the new Enabled Shared Catalog direct product price assigning settings option.

Numerous bug fixes are included in this release as well.

Google Analytics

Google has improved the monitoring and integration processes for AdWords and Analytics in web apps with the integration of GTag. Thanks to this integration of Google capabilities into website pages, it is now possible to track and manage more data through Google Services. Many built-in modules in Adobe Commerce, including Google AdWords, Analytics, Optimizer, and TagManager, interface with Google services by using the old API. In Magento 2.4.5, this integration has been re-implemented using the GTag technique.

GraphQL

Improvements to GraphQL’s performance include:

• Developers and admins notice a faster rebuilding of the unified storefront GraphQL schema when delivering or changing attributes in production. Every time the GraphQL schema has to be rebuilt, customers notice noticeably faster page loads.
• The expiration time and date of the authorization token can now be obtained using JSON Web Tokens (JWT) in the GraphQL API.
• By using the bin/magento config:set graphql/session/disable 1 command, retailers can completely prevent the generation of session cookies for all GraphQL operations. Adobe Commerce automatically creates certain cookies, which are used for authorization and have an effect on performance. It is not advisable to utilize session cookies on their own or in conjunction with permission tokens.
• Only when necessary do GraphQL operations launch session cookies via class proxies.
• Sessions are no longer required for http header processors like shop, customer, and currency in GraphQL.

Inventory

The inventory template is associated with a security enhancement in Adobe Commerce 2.4.5.

Live Search

Support for B2B client groups and customized pricing are also included in this edition. The pricing that has been specified for a particular customer group/shared catalog as well as the product allocations to customer groups are now respected by Live Search.

Page Builder

Adobe Commerce 2.4.5 can now be used with Page Builder version 1.7.2. Additionally, it includes the following improvements:

• Because columns are now visible, users can change the storefront’s column settings.
• For column resizing, wrapping in reaction to user events is now supported.

Payments

Apple Pay is available to all companies with Payment Services enabled. Customers can utilize this payment method without having to provide their card details. Apple Pay is supported on the product detail page, mini cart, shopping cart, and checkout. Retailers have the option of activating this function.

Magento 2.4.5 brings the following improvements for PayPal:

• PayPal Pay Later is an option for customers in Spain and Italy.
• The admin includes previews of the PayPal, Credit, and Pay Later buttons on the checkout, minicart, cart, and product pages. These buttons will appear as they do in the previews when enabled and shown on the shop.

Users of Magento 2.4.5 may notice the following updates regarding Braintree:

• Braintree has stopped supporting the KOUNT fraud protection integration. It is no longer present in the source code.
• The Always request 3DS option is now available to admins.

PWA Studio

PWA Studio version 12.5.x is compatible with Magento Open Source version 2.4.5. The update for this release comes with the following new features:

• Web analytics service providers collect data on consumer behavior on the PWA Studio storefront. Retailers can now sign up for and extend these events as needed.
• Merchants can now select a service to launch from the Admin (Google Tag Manager).

Upgrade Compatibility Tool

Adobe Commerce 2.4.5 includes the following enhancements in this area:

• Method or constructor signature incompatibilities are now detected through method signature validation.
• Database schema validation now shows modifications and incompatibilities to the schema.
• Now, the DI configuration validation checks preferences for core classes and interfaces as well as references to removed or deprecated non-API core classes in di.xml.
• UCT now recognizes code deprecations and offers detailed suggestions for fixing each problem.

Magento Open Source 2.4.4 Release Notes

Magento Open Source 2.4.4 is now available. It provides lots of new enhancements and bug fixes. For instance, you can now leverage support for PHP 8.1. It means that all project libraries and dependencies have been updated too. They are now compatible with PHP 8.1. The same is about core Composer dependencies and third-party libraries. 

Another important peculiarity of Magento 2.4.4 Open Source is support for OpenSearch 1.2. In general, the latest platform’s release includes almost 250 quality fixes and enhancements. Let’s explore different categories of enhancements introduced in Magento Open Source 2.4.4. 

Security

This release introduces one security fix that has been backported to Magento Open Source 2.4.3-p2 and Magento Open Source 2.3.7-p3. Also, you will find a few more platform security improvements in 2.4.4. 

However, there is no reason for panic since no attacks related to these issues have been confirmed. But you should keep in mind that certain vulnerabilities are always associated with probable fraud activities, such as access to customer information or administrator sessions. 

Since such issues usually require obtaining access to the Admin, protect it. The official documentation offers the following protection strategies:

• IP allowlisting;
• two-factor authentication;
• VPN;
• unique location instead of /admin;
• Reliable passwords.

Additional security enhancements

Additional security improvements introduced in Magento 2.4.4 Open Source include:

• While email variable usage was deprecated back in 2.3.4, it was completely removed in 2.4.4. It means that email or newsletter templates created earlier may not work correctly after upgrading to Adobe Commerce 2.4.4 or Magento Open Source 2.4.4. Therefore, you need either create new templates or edit the available ones. What templates have been affected, you will ask?  Take a look at admin overrides, themes, child themes, and templates from custom modules or third-party extensions first. All templates associated with them were affected if they contained variables. Even the Upgrade compatibility tool won’t help. Peruse this Migrating custom email templates article for further information.
• Also, pay attention to the fact that you can no longer use integration tokens for API Bearer token authentication. It can no longer be a standalone key for token-based authentication. See Token-based authentication for more information.
• Session IDs disappeared from the database. Since it is not the most secure storage, they are no longer available there.
• However, OAuth access tokens and password reset tokens are stored in the database. But they are now encrypted.
• To make your Magento 2 website more secure, the 2.4.4 release also strengthens validation. It prevents the upload of non alpha-numeric file extensions.
• reCAPTCHA is now available in the coupon code realm.
• When you switch to the production mode, Swagger gets disabled by default.
• When it comes to your storefront, HTTPS is now enabled by default. You can find the Use Secure URLs on Storefront and Use Secure URLs in Admin settings turned on by default. Also, all built-in cookies are now set as secure.
• All Magento Open Source installations now require the dependency confusion plugin, unlike before 2.4.4 when it was required for Composer-based installations only.
• As a developer, you can now configure the limit on the size of arrays accepted by Magento Open Source RESTful endpoints. 2.4.4 lets you do that on a per-endpoint basis (see API security).
• You can leverage new mechanisms for limiting the size and number of resources that a user can request through a web API on a system-wide basis. Also, new ways of overriding the defaults on individual modules are available.

Platform

As we’ve already mentioned above, Magento Open Source 2.4.4 supports PHP 8.1 along with all its project libraries and dependencies that have been updated for compatibility with this PHP version. 

As for the additional platform enhancements, they include:

• Support for Elasticsearch 7.16 and OpenSearch 1.2. If you are a Magento Open Source merchant who runs deployments hosted on-premises, you can use either solution. But pay heed to the fact that OpenSearch is the default search engine for Magento Open Source 2.4.4 deployments hosted in the cloud. If you run a cloud deployment and upgrade to version 2.4.4, you must use OpenSearch (see Switching to OpenSearch).
• Magento 2.4.4 now includes the JQuery library of version 3.6. As for the jquery-ui library, it has been upgraded to version 1.13.0. You can also find several other JavaScript libraries updated to the latest versions.
• Magento 2.4.4 now supports TinyMCE 5.8.1. As for TinyMCE 4, it has been removed from the codebase.
• Magento2.4.4 now works with the latest version of the RequireJS library – 2.3.6.
• The same situation is with PHPUnit. Tests and test frameworks have been updated to be compatible with 9.5.x.
• Most Laminas dependencies have been upgraded to the latest versions. As a result, they are now compatible with PHP 8.1. At the same time, three Laminas dependencies were removed from the codebase. Thus, Magento 2.4.4 achieves a reduction of dependencies.
• jQuery UI has been upgraded to v1.13.0. Several 1.10.0 jQuery components have been removed:
  • ajaxOptions and cache options for tabs;
  • .zIndex(). jQuery UI v1.12.1 includes jquery/z-index.js, which supports the use of .zIndex();.
  • Data fallbacks for widget names. Now, it is necessary to use the full name for the .data() key.
  • Hard coding of classes in widgets, such as ui-corner-all.

GraphQL

Magento 2.4.4 release includes these GraphQL improvements:

• Performance:
  • More efficient GraphQL cart operations are achieved due to the collectQuoteTotals() method that is called only once during a GraphQL request;
  • Better storefront performance based on new caching of GraphQL requests: Fastly and Varnish cache GraphQL requests sent with the help of auth tokens.
• Due to new Admin configuration settings for the storefront: the storeConfig query returns the configuration settings for the Zero Subtotal Checkout and Check/Money Order payment methods.
• The webonyx library is updated to 14.9. It enables core GraphQL to function.
• The GraphQL resolver returns translated strings based on store scope as it should.
• New Relic gets descriptive transaction names that simplify debugging.

Vendor-Bundled Extensions

All vendor-bundled extensions have been removed from the Magento Open Source 2.4.4 codebase. Braintree is the only exception. So, if you want to get the removed modules, visit the Commerce Marketplace. You can find Amazon Pay, dotdigital, Klarna, Vertex, and YotPo there.

PayPal Payment

• Magento 2.4.4 introduces support for the Venmo payment option.
• The Pay Later option is now based on the shopper’s location instead of the merchant’s location.
• As a merchant, you can now set the shopper country when testing the shopper experience. Previously, tests were bound to their location. However, the new feature works in sandbox mode only.
• Messaging on the checkout page is more integrated with Pay Later. In Magento 2.4.4, it displays accurate messaging on how much and in how many increments shopper will be expected to pay.

Accessibility 

Magento 2.4.4  brings enhanced conformance to standard accessibility guidelines:

• improved tooltips;
•  accessible naming;
• screen elements tagging;
• redesigned icons and buttons. 

Most of these fixes are aimed at users Without Vision or Limited Vision.

Page Builder

As a merchant, you can now add alternative text (alt_text) to images to improve content accessibility. The improvement is associated with such content types as Image, Banner, and Slide.

Adobe Commerce 2.4.4 Release Notes

Adobe Commerce 2.4.4 introduces the same features as Magento Open Source. In addition to them, it also offers the following enhancements:

Performance and scalability

Adobe Commerce introduces improved performance for order processing and message queue optimization. Due to the new asynchronous orders functionality, it is possible to create up to 60,000 orders per hour. It is 6 times more orders than in previous versions (10,000 orders/hour).

Also, the new multiple consumers feature introduces better e-commerce opportunities. It supports scaling the number of message queue consumers on a single Cloud instance. In addition to that, Magento 2.4.4 uses it to increase the number of orders processed per hour.

Performance enhancements in this release:

• AsyncOrder. With this feature, Magento 2.4.4 introduces faster order placement than synchronous execution provides. When it is enabled, order placement is executed in the background. Shoppers can complete other tasks on the storefront at that moment.
• Enable Inventory Check On Cart Load. This configuration option provides a switchable inventory check when loading a product into the cart. In Magento 2.4.4, it is enabled by default. After disabling this option, Adobe Commerce skips the inventory check as the quote loads. It speeds up checkout, especially for carts with numerous items.
• multiple_processes. This configuration option supports running parallel consumers in multiple processes. It improves task execution speed. You need to add multiple_processes to the app/etc/env.php file to enable this feature.
• Configurable products. If a cart contains over 750 configurable products, Magento 2.4.4 provides the ability to operate faster than before. The improvement is based on increasing the memory limit set by max_input_vars in the php.ini file to support input variables volume.
• Optimized sales rules processing. Magento 2.4.4 offers this enhancement during checkout by deferring total calculation. It occurs every time a shopper adds a product to their cart, updates product quantity, or clicks the Place Order button. Set the checkout/deferred_total_calculating variable in the env.php file to enable this deferment. Or run
  bin/magento setup:config:set –deferred-total-calculating 1|0.
• Improved validation process for orders. If orders are affected by a cart price rule during asynchronous order placement, their validation is improved.

B2B

The B2B release for Magento 2.4.4 includes numerous fixes and improvements. However, it doesn’t introduce any new features (see B2B Release Notes)

PWA Studio

Adobe Commerce 2.4.4 introduces compatibility with PWA Studio v.12.3.0, which, in its turn, includes support for reCaptcha, Page Builder content optimization, and personalized content. No more new features are available. You can read about enhancements and bug fixes here: PWA Studio releases.

Live Search

Due to the support of PHP 8.1 in Magento 2.4.4, Live Search also works with it. Note that the new Magento_ElasticsearchCatalogPermissionsGraphQl module is automatically disabled during the Live Search installation. Don’t forget to upgrade your existing Live Search installations to version 2.0.0 to leverage the latest features.

Accessibility updates

With Adobe Commerce 2.4.4, the platform introduces increased conformance to standard accessibility guidelines, including Screen Reader tools. New enhancements offer a better experience for users with limited abilities, including vision, language, cognitive, or learning. So, what are the exact accessibility enhancements, you will ask?

• Tooltip links. New tooltip links offer text and accurate, visible labels for inputs;
• Edit buttons. Each item now offers unique text.
• Admin buttons. Your admins can now leverage unique, accessible, and descriptive buttons developed in adherence to AA standards. Also, admin buttons introduce enhanced contrast to a contrast ratio of at least 3:1 with adjacent colors. The same is about form fields.
• Icon images. In Magento 2.4.4, they have textual alternatives.

Magento 2.4.3 Release Notes

Below, you will find release notes for Magento Open Source 2.4.3 and Adobe Commerce 2.4.3

Magento Open Source 2.4.3 Release Notes

As usual, the latest Magento version delivers enhancements to performance and security as well as essentially improves the platform. The core security enhancements introduced in Magento Open Source 2.4.3 include expansion of reCAPTCHA coverage and inclusion of built-in rate limiting. It is also worth mentioning that the wave of updates has reached core composer dependencies and third-party libraries. They have been upgraded to the latest versions compatible with PHP 8.x. Magento Open Source 2.4.3 also includes Page Builder as a bundled extension. The tool has become the default content editing solution for both platform’s versions – Adobe Commerce and Magento Open Source. More than 370 new fixes to core code and 33 security enhancements are at your service. Below, you will see the most important ones. Also, note that Magento 2.4.3 addresses all known issues identified in Magento 2.4.2.

Note that such projects as the PWA Studio are released independently. Bug fixes for them are available in the separate documentation per each project respectively.

Security

Magento 2.4.3 includes 33 security fixes and platform security improvements that help close remote code execution (RCE) and cross-site scripting (XSS) vulnerabilities, many of which have been backported to Magento 2.4.2-p2 and Magento 2.3.7-p1.

Other security improvements include:

• A new Composer plugin designed to prevent dependency confusion. Also, it identifies malicious packages.
• The built-in rate limiting prevents denial-of-service (DoS) attacks due to Web APIs that impose restrictions on the size or number of resources potentially requested by a client.
• ReCAPTCHA coverage includes Web APIs that have corresponding HTML pages along with the Place Order on the storefront and payment-related web APIs.

Infrastructure

Magento 2.4.3 is proud to introduce an enhanced infrastructure via the following functional areas:

• Customer Account;
• Catalog;
• CMS;
• OMS;
• Import/Export;
• Promotions and Targeting;
• Cart and Checkout;
• B2B;
• Staging and Preview.

It is also worth mentioning that deployments that include PayPal support PayPal Pay Later, allowing shoppers to pay for an order in bi-weekly installments. Thus, there is no need to pay the full amount at the time of purchase.

And you no longer need to manually reset the indexer after failure due to the new use_application_lock indexing mode. It is now possible to run reindexing through the use of environment variables or by configuring the app/etc/env.php file.

Platform 

The following platform upgrades have been introduced in Magento 2.4.3:

• Core Composer dependencies and third-party libraries are compatible with PHP 8.x;
• The KnockoutJS library v3.5.1;
• The TinyMCE v3 library has been removed along with the Magento_Tinymce3Banner module and MFTF tests related to the library;
• Magento 2.4.3 is now confirmed to be compatible with Redis 6.0.12;
• Laminas library dependencies have been upgraded. Now they are compatible with PHP 8. As for the redundant dependencies, they have been removed. Laminas 3.4.0 is used in Adobe Commerce 2.4.3.

They bring Magento 2 closer to future compatibility with PHP 8.x.

Performance

Indexation time for Product Price and Catalog Rule indexers has been decreased. From the merchant site, it is possible to exclude a website from a customer group or shared catalog in Magento 2.4.3. Consequently, the number of records for indexing is reduced.

Adobe Stock 

Magento 2.4.3 includes Adobe Stock Integration v2.1.1.

GraphQL

Magento Open Source 2.4.3 adds GraphQL coverage for shared routes. Routing requests on the product, category, and CMS pages are now supported in the route query and RoutableInterface. While the urlResolver query has been deprecated, its functionality is now available in the route query.

Page Builder

Magento Open Source delivers Page Builder as a bundled extension from 2.4.3. Adobe Commerce and Magento Open Source now rely on the same content editing tool, which replaces the TinyMCE editor in CMS page and blocks as well as category and product descriptions.

If you already rely on the content created with the help of TinyMCE, it can be migrated into Page Builder as HTML.

PWA Studio

You can see all the PWA Studio upgrades associated with Magento 2.4.3 here: PWA Studio releases.

Upgrade Compatibility Tool

The scope of the Upgrade Compatibility Tool has been upgraded in Magento 2.4.3. It has been expanded following the community feedback.

Vendor Developed Extensions

The following vendor developed extensions have been upgraded:

• Amazon Pay;
• Braintree;
• dotdigital Engagement Cloud;
• Klarna;
• Vertex Cloud;
• Yotpo Product Reviews.

Adobe Commerce 2.4.3 Release Notes

Adobe Commerce 2.4.3 introduces all the same enhancements described above along with several more specific improvements. 

GraphQL

Unlike Open Source, Adobe Commerce delivers many more GraphQL improvements in the following areas:

• Shared catalogs;
• Wish lists;
• Gift registries;
• Negotiable quotes;
• Shared routes.

Tasks covered for gift registries in Magento 2.4.3 include the use of the giftRegistry query to return the customer’s gift registry content. Also, it is possible to search for gift registries by type, email, or ID; create, update, or delete gift registries; as well as update or remove items from a gift registry or move all items to the gift registry straight from the cart. Besides, it is possible to add, update, or remove registrants from a gift registry and share gift registries with invitees.

When it comes to negotiable quotes, new mutations include:

• requestNegotiableQuote
• setNegotiableQuoteShippingAddresses
• updateNegotiableQuoteQuantities
• removeNegotiableQuoteItems
• closeNegotiableQuotes
• deleteNegotiableQuotes

As for shared routes, the route query and RoutableInterface now support routing requests on the product, category, and CMS pages. Pay heed to the fact that the urlResolver query is no longer available since it has been deprecated. You can achieve its functionality with the route query.

B2B

The B2B enhancements introduced in Magento 2.4.3 are associated with B2B v1.3.2 that includes multiple bug fixes.

Cloud managed services

Adobe Commerce 2.4.3 is proud to announce support for Amazon Simple Storage Service (AWS S3) and Amazon Aurora cloud managed services. The latest version of the e-commerce platform provides certified support for the following services:

• AWS ElastiCache;
• AWS ElasticSearch;
• AWS Managed Queues (Rabbit MQ). 

New Adobe Commerce Releases: 2.4.2-p1 and 2.3.7

Before Magento 2.4.3 hits the stage, Adobe has released new Commerce and Open Source versions –  2.4.2-p1 and 2.3.7. Within the last three years, the company integrated sales, marketing, and product teams within the Adobe Experience Cloud business unit. Besides, new capabilities for Adobe Commerce were introduced:

• AI-powered live search;
• Extended product recommendations;
• Adobe Sign integration;
• The official Wayflyer extension provides access to their financing solution.

Although these are strategic decisions that will impact the platform in recent years, there is one improvement vital for the short-term run: Adobe Commerce 2.4.2-p1 and 2.3.7 are now available! These releases mainly focus on security updates and support for PHP 7.4.  2.3.7 also adds in-product guidance that was previously available exclusively in Adobe Commerce 2.4.2. Why are these moves so important? 

PHP 7.3 reaches the end of support very soon. It will happen by the end of this year – in December 2021. As for Adobe Commerce 2.3.x, this version of our favorite e-commerce platform reaches the end of support in April 2022. Hence, 2.3.7 has been delivered to bridge this period: While the former 2.3.x versions don’t support PHP 7.4, the new 2.3.7 release includes the necessary capabilities. Consequently, the 2.3 line is fully supported until its EOS date. 

However, Adobe officially recommends upgrading from Adobe Commerce and Magento Open Source 2.3.x straight to the 2.4 line and PHP 7.4. This move will help merchants maintain PCI compliance, following the most cost-effective upgrade approach. As you’ve probably guessed already, support for PHP 7.4 in the 2.3.7 version is only a stopgap. It is intended to help customers maintain PCI compliance before upgrading to 2.4. 

Along with the Q2 Adobe Commerce updates, merchants can also leverage the following upgrades:

• PWA Studio 10 is now live for Adobe Commerce and Magento Open Source 2.4.2+ merchants. See the PWA 10 release notes for further information.
• Egress Filtering is available in Adobe Commerce for the existing Adobe Commerce Starter merchants. This feature lets merchants enable/disable network traffic from the store to other destinations. As a result, you can stop malware from sending private information to outside entities. 
  
•  Product Recommendations are exclusively available in Adobe Commerce 2.3.7+, featuring more complex B2B buying scenarios, B2B customer-specific recommendations, more flexible preview options, etc. You can find more enhancements in the official Release Notes for Product Recommendations. 
• The Security Scan tool will also support the PWA Studio by the end of this month.
• New data privacy mechanisms will be introduced in Customer Engineering. The system revises the collection of consent to access Customer Data for support requests. According to the new approach, the Primary User within a Magento Customer profile is the only user who can provide consent which will be stored under the Privacy Settings. 

More updates and features are planned for August with Adobe Commerce 2.4.3.  

Magento 2.4.2 Release Notes

Below, you will find features and enhancements associated with Magento 2.4.2. Firstly, we describe the Open Source innovations introduced in the platform’s latest version. Secondly, you will find unique improvements associated with the Commerce edition.

Magento 2.4.2 Open Source Release Notes

Magento 2.4.2 Open Source received tons of enhancements in the following areas:

Security

Both platform editions include numerous security fixes backported to Magento 2.4.1-p1 and Magento 2.3.6-p1. You deal with more than 35 security enhancements aimed at closing RCE and XSS vulnerabilities. Although no attacks related to these issues have been confirmed, you must install the security update since malefactors can potentially exploit certain vulnerabilities.

Bear in mind that most of these issues require admin access. Therefore, you need to protect your backend area by two-factor authentication, IP white lists, VPN, unique admin address, and strong password.

Other security improvements are:

• Full support for the SameSite attribute.
• Potentially malicious content identification via messages in product and category description fields. The alert is displayed when the user tries to save values there.
• Standardized file system operations across Magento components prevent malicious uploads.
• Fixed Core Content Security Policy violations.

Infrastructure 

Both Magento 2.4.2 Open Source and Commerce editions introduce improvements to core quality. They enhance the quality of the Framework with such functional areas as: 

• Customer Account;
• CMS;
• Catalog;
• OMS;
• Import/Export;
• Promotions and Targeting (Commerce);
• Staging and Preview (Commerce);
• Cart and Checkout.

Platform

Magento 2.4.2 supports:

• Elasticsearch 7.9.x and remains compatible with 7.4.x.
• Varnish 6.4 and remains compatible with its 6.x version.
• Redis 6.x and remains compatible with Redis 5.x.
• Composer 2.x and remains compatible with Composer 1.x,  which will soon reach end-of-life.

Also, note that the split database functionality has been deprecated. If you leverage this feature, you will need to revert or migrate to a single.

Performance 

Magento 2.4.2 introduces boosted API performance and faster Admin response time. These enhancements are associated with deployments with large catalogs. Due to multiple scalability enhancements, Magento 2.4.2 now supports complex catalogs up to 20x larger than before.

Adobe Stock

Magento has been integrated with Adobe Stock for a while. In 2.4.2, you can leverage v2.1.1.

GraphQL

Magento 2.4.2 introduces improved GraphQL coverage. Now, you can leverage the following features:

• GraphQL in catalog permissions provides the ability to restrict which items are returned for a product query. The shopper’s customer group is used as a base for this operation.
• Due to the generateCustomerTokenAsAdmin mutation and enhanced Customer object, remote purchasing assistance is easier in Magento 2.4.2 than in other platform versions.
• Changing languages, carts, and currencies is way more simple since localization support across stores is a part of Magento 2.4.2.
• The enhanced GraphQL schema optimizes product data retrieval for configurable products.
  
• Magento GraphQL now supports unions.
• Magento 2.4.2 no longer works with integer type object IDs. They have been deprecated. Now, the system relies on uid attributes of type ID.
• ProductInterface and CategoryInterface are enhanced with the staging attribute. Now, it is easier to determine if a product is staged. Besides, the system can display its associated campaign information.

For further information, follow this link: GraphQL Developer Guide.

PWA Studio

Magento 2.4.2 is associated with the new release of PWA Studio. It includes the following enhancements:

• Venia supports multiple stores, languages. and currencies.
• It delivers enhanced extensibility.
• Client-side performance enhancements incorporate Google Lighthouse.
• My Account for Venia includes order history,  saved payments, and address book.

Media Gallery

Media Gallery is associated with new Role Resources in Magento 2.4.2. Besides, it can now deliver web-optimized images in the content. 

According to the first feature, you can limit administrator access to the Media Gallery and assign the following roles:

• Upload assets;
• Change assets details;
• Insert media assets into content;
• Delete assets;
• Edit folder structure.

Web-optimized image rendition allows for replacing high-resolution images. While the original image stays untouched in the Media Gallery, the image rendition is dynamically generated every time the image is inserted in the content.

MFTF

Magento 2.4.2 delivers Magento Functional Testing Framework version 3.2.1. You can leverage error tolerance in both tests and test suite generation along with some minor enhancements and bug fixes.

AWS S3 

Amazon Simple Storage Service (AWS S3) support now covers object storage and future extensibility. Besides, it enables you to store media files on AWS S3.

Also, note that B2B, PageBuilder, Adobe Stock Integration, and other modules support AWS S3.

Magento 2.4.2 Commerce Release Notes

Note that Magento 2.4.2 Commerce shares the same set of enhancements that Open Source incorporates. At the same time, it is associated with the following unique features:

GraphQL

The list of GraphQL improvements of Magento 2.4.2 Commerce also contains the following features:

• Support for multiple wish lists. Now, GraphQL enables you to create, delete, and rename wish lists. At the same time, you can move and copy items between them using the new technology improvement.
• Support for RMA. Customers can request a return in a more user-friendly way. If the request is accepted, the customer can add a comment or tracking data.
• Support for B2B:
  • Companies. In Magento 2.4.2, you can use GraphQL to add company admins, users, roles, and teams.
  • Company credit. Now, you can view details about the company’s credit history in a company query.
  • Requisition lists. Magento 2.4.2 lets you use GraphQL to create, delete, and update requisition lists as well as add, update, delete, copy, and move items within them or add requisition list items to the cart.

B2B

Magento 2.4.2 includes the latest version of the B2B module – v1.3.1. It supports online payments for POs along with numerous bug fixes. You can complete the former with the help of online payment methods. From the perspective of a B2B buyer, it is possible to select a preferred payment method for each purchase order. A corresponding prompt appears during the initial checkout.

Next, a buyer is prompted to enter payment details to convert the purchase order to a final order after the PO has been approved.

Other B2B updates include:

• Existing payment method templates can be overridden during initial checkout. Thus, Magento maintains PCI compliance.
• The system is compatible with third-party payment methods.
• Magento sends email notifications to buyers, asking for payment details to an approved PO.
• Custom email templates are supported.
• An Approved – Pending Payment state for POs is now available. It determines when actions are required.
• Order total amount remains unchanged for approved POs since Magento disables customers to add or remove discount codes at the final payment step. However, buyers can change the payment method.

Page Builder

Page Builder content migration and CSS customization were improved in Magento 2.4.2. The following enhancements are at your service:

• Magento now offers different content type output per viewport, avoiding the !important directive.
• You can migrate content to Page Builder and it will no longer follow the default inline styling.
• It is not necessary to place all content types within a row. Page Builder introduces an initially blank stage. Besides, you can place Rows, Columns, Tabs, Dynamic Blocks, HTML Code, and Blocks there.
• It is no longer necessary to specify predefined margins and paddings.
• Magento 2.4.2 introduces the new mobile viewport switcher and viewport scope for form field values. Thus, it is possible to perform the following actions:
  • You can now view content on different viewports while authoring.
  • Besides, it is allowed to optimize the minimum height field parameter on different content types per viewport. However, ‘min-height’ is the only parameter supported out of the box. You need to develop custom parameters to enable mobile optimization for other content types.
  • As a developer, you can also add field scope to custom fields and fieldsets.

Magento 2.4.1 Release Notes

As usual, Magento introduces enhancements to performance and safety, and 2.4.1 is not an exception. Security enhancements (15+) are represented by the SameSite attribute for cookies and the addition of CAPTCHA protection for payment-related and order-related API endpoints. Besides, you get 150+ fixes to the core code and significant enhancements in GraphQL. Also, bear in mind that all known issues of Magento 2.4.0 have been fixed.

As for backward-incompatible changes Magento 2.4.1 introduces minor shifts described here: BIC reference. 

Time-sensitive security fixes are under your disposal too. You can install them without applying the hundreds of functional fixes and enhancements. Magento 2.4.1 comes along with the patch 2.4.0.1 (Composer package 2.4.0-p1). It is a security-only patch that addresses vulnerabilities identified in Magento 2.4.0.

Magento Open Source 2.4.1 Release Notes

All changes represented in Magento 2.4.1 are divided into the following sections:

Security 

With over 15 security fixes and platform security improvements help protect your store from remote code execution (RCE) and cross-site scripting (XSS). They include:

• CAPTCHA has been added to the place order storefront page and payment-related REST and GraphQL endpoints.
• The SameSite attribute for cookies is now supported. It is set to Lax by default.
• A database of over 8700 threat signatures is now integrated into the Magento Security Scan Tool. 

Infrastructure

Framework, Customer Account, CMS, OMS, Catalog, Import/Export, Promotions and Targeting, Staging and Preview, Cart and Checkout, and other infrastructure elements have been enhanced in Magento 2.4.1.

Performance 

Magento 2.4.1 offers the following core performance enhancements:

• Smaller network transfers between Redis and Magento result in a decrease in network cache size and execution time.
• Enhanced message queue consumer performance due to the three new configuration settings that cause a decrease in consumer queue CPU consumption.
• Faster bin/magento commands.

Adobe Stock

Magento 2.4.1 is integrated with Adobe Stock 2.1.0.

Media Gallery

Starting from Magento 2.4.1, the New Media Gallery is enabled in the Admin by default. As a merchant, you can delete images in bulk, identify duplicate images, detect images that are not used on the storefront, apply filters to reorder images by the storefront area they are used in, work with image metadata (view, edit, search by metadata).

GraphQL

GraphQL coverage for the following features is now a part of Magento 2.4.1:

• Product reviews;
• Gift options;
• Order history;
• Add to cart;
• Payment methods stored in My Account;
• Wish lists in Open Source;
• Customer accounts;
• Payflow Pro Vault payment method;
• Klarna.

Also, note that Magento 2.4.1 introduces updated GraphQL storeConfig query. Another enhancement is a new requestPasswordResetEmail mutation that now triggers the password reset email for the provided email address. You can find more information here: GraphQL Developer Guide.

PWA Studio

Magento 2.4.1 also introduces PWA Studio v8.0.0. The latter offers the following enhancements: 

• Venia style guide updated with new design tokens, colors, typography, core components, page layouts;
• Improved mini-cart experience;
• Support for localized content and multiple locales;
• Improved My Account experience.

Magento Functional Testing Framework (MFTF)

MFTF 3.1.0 has also been released along with Magento 2.4.1. You can find more information here: Magento Functional Testing Framework Changelog.

Vendor Developed Extensions

The following extensions also got updates in 2.4.1: Amazon Pay, dotdigital Engagement Cloud, Braintree, Klarna, Yotpo Product Reviews, and Vertex Cloud.

Magento Commerce 2.4.1 Release Notes

Magento Commerce 2.4.1 also offers enhancements to performance and security plus. However, there is a significant addition to the B2B feature set introduced with the update. Let’s take a look at what makes Magento 2.4.1 Commerce different from Open Source.

Site-Wide Analysis Tool (SWAT) is now integrated with Magento Admin. It offers system insights and provides instrumentation for real-time performance monitoring. You can get reports and self-service recommendations. Utilize the new SWAT Admin role to access SWAT Customer Detail pages through the Magento Admin in a more secure way. You can find more information here: SWAT.

As for B2B, its v1.3.0 is now a part of Magento 2.4.1. As a merchant, you get better order approvals, enhanced shipping methods, improved shopping cart, and updated logging of Admin actions.

Order Approvals

B2B order approvals support bulk actions on purchase orders. Besides, you get the following features:

• B2B buyers are able to view rules applied to their company even if they do not have permission to edit them. The information is available on the new View Rule page.
• The Requires My Approval tab is enhanced with the count alert icon that indicates the number of pending approval actions.
• Bulk order approvals and rejections for B2B managers and Company Administrators.
• The My Purchase Orders view lets Merchants search the Applies to and Requires approval from fields. They can also select multiple user roles during rule creation.

B2B shipping methods 

As a B2B merchant, you can control shipping methods per Company. Magento 2.4.1 lets you create a set of shipping methods and use all or B2B-specific shipping methods per Company account.

Shopping cart 

• It is possible to clear a shopping cart in a single action.
• As a B2B buyer, you can add shopping carts (individual items or the entire contents) to requisition lists.

Admin

• It is now possible to create orders from the Admin on behalf of customers based on the Payment on Account payment method.
• As a merchant, you can view all quotes linked to a user from the customer’s detail page.
• The Company filter is now available in the Customers Now Online grid.
• The Sales Rep filter for customers is also available.

Storefront security

Google reCAPTCHA on the New Company Request is now possible.

Admin actions logging

If an admin takes actions in the Company modules (Company, NegotiableQuote, CompanyCredit, SharedCatalog), they are logged in the Admin Actions Log. 

For further information about Magento 2.4.1, follow this link: Magento 2.4.1 Release Notes. Also, check backward incompatibility issues.

Magento 2.4.0 Open Source Release Notes

Below, you will find key highlights from the Magento Open Source 2.4.0 release notes. The new platform version introduces support for PHP 7.4, Elasticsearch 7.6.x, and MySQL 8.0. Besides, it delivers substantial security changes, such as two-factor authentication for admin users, which is now enabled by default. Also, pay heed to the removal of the Authorize.Net and Braintree payment method integrations from core code. Now, you have to instal the corresponding third-party modules manually. The Magento 2.4.0 contains 100+ core code fixes and 30 security improvements. Let’s take a look at the main points of the update.

Security 

Over 30 security enhancements introduced in Magento 2.4.0 help merchants struggle with both external and internal threats. They mainly address remote code execution and cross-site scripting issues.

One of the most important enhancements is that Two-Factor Authentication is now available for admin accounts (cannot be disabled), Magento.com user accounts, and Cloud SSH access. 

Another key security feature introduced in Magento 2.4.0 is related to the template filter strict mode. It is now enabled by default, dramatically reducing risks of RCE attacks.

At the same time, the new platform version disables data rendering for UI data providers reducing an opportunity to execute arbitrary JavaScript.

Besides, PHP classes responsible for generating HTML as well as .phtml templates get a new class – \Magento\Framework\Escaper. It contains HTML sanitization methods designed for multiple new contexts. Also, bear in mind that the $escaper local variable from .phtml templates is a mandatory replacement for the deprecated $block->escape{method}.

A new security.txt file introduces an industry-standard server data element designed to help security researchers provide store admins with information regarding potential security issues.

As promised before, Magento now allows installing security fixes only. If you don’t need new features but want to keep your website safe, this option will help you save tons of time and effort. You can update the shield around your e-commerce store without applying the hundreds of functional fixes and enhancements. You can find more information here: Introducing the New Security-only Patch Release.

Platform

Now, let’s take a look at core platform upgrades introduced in Magento 2.4.0:

• PHP:
  • PHP 7.4 support;
  • PHP 7.1 and 7.2 are deprecated;
• PHPUnit:
  • PHPUnit 9.x support;
  • PHPUnit 6.5 is deprecated;
• Elasticsearch 7.6.x becomes the default catalog search engine for both Magento Commerce and Open Source;
• MySQL 8.0 is supported along with MySQL 5.7. However, MySQL 5.6 can be no longer used;
• MySQL catalog search engine has been replaced with Elasticsearch;
• MariaDB 10.4 is supported along with MariaDB 10.2. Note that MariaDB 10.0 and 10.1 can be no longer used;
• Laminas project instead of Zend Framework: migrate dependencies;
• Signifyd fraud protection is removed from the code. You have to look for a replacement on the Magento Marketplace;
• Braintree has also been removed from the codebase. 

Before going any further, check this article about the issues related to the updated technology stack: How to Run Magento 2.4 That Requires PHP 7.4 and Elasticsearch.

Infrastructure

Numerous infrastructure improvements revamp the functionality of previous Magento releases. The new changes enhance the quality of the Framework and numerous modules, such as Customer Account, CMS, Catalog, Checkout, etc. Let’s cast a glance at the most notable updates:

• Third-party payment methods are no longer available in the core code of Magento. You have to use third-party extensions instead;
• Partial-word search is a new feature introduced with the appointment of Elasticsearch as a new default search engine. Partial words are supported in search terms for product names and SKUs;
• PayPal JavaScript SDK has been upgraded to the latest version, introducing the newest features and best security;
• Web Set-Up Wizard has been deprecated. Use the command-line interface instead;
• Composer update plugin enhancements simplify the upgrade process by addressing issues associated with the root project composer.json file. Overwriting customizations problems are resolved too;
• Seller-assisted shopping provides the ability to view the storefront on behalf of your customers and get access to their accounts right from the frontend:
  • Complete control over which administrators can log in to customer accounts;
  • Orders placed on behalf of customers are logged normally: both in the storefront and admin;
  • Top-notch customer security: the system destroys all sessions when administrators log out; admins cannot access customer passwords.

Performance 

Every new Magento release delivers various performance optimizations, and Magento 2.4.0 is not an exception. The new version offers the following enhancements in the area of speed and productivity:

• Customer data section invalidation. The logic behind this section has been improved, addressing the issue related to a local storage and active custom sections.xml invalidations;
• Redis. The number of queries to Redis performed on each Magento request has been reduced. It leads to shrink size of network data transfers between Redis and Magento; smaller consumption of CPU cycles; decreased race conditions related to Redis write operations;
• Caching. Magento 2.4.0 introduces a new caching mechanism for results of SQL queries to inventory tables;
• Quick Order. Quick Order add-to-cart performance has been improved. It is faster up to 25-30%; 
• Lazy Loading. Magento loads images notably faster.

Adobe Stock

Magento 2.4.0 introduces the ability to license stock image previews right from the Media Gallery, reducing the number of steps that should be taken previously. It is possible to search, filter, and sort images up to 30x faster.

Inventory Management

Magento 2.4.0 supports Inventory Management 1.2.0. Its core features include:

• A new in-store delivery method can be selected during checkout. A source can be used as a pickup location. Follow this link for more information: Magento 2 In-store Delivery;
• Bundle products are now supported in multi-source mode. Thus, the Magento 2 Inventory now supports all product types with multiple sources;
• Asynchronous stock re-indexing dramatically enhances the performance of the Magento 2 inventory management.
• New bulk interfaces have been added for salability check;
• Increased test coverage + numerous bug fixes.

Check Inventory Management release notes for more details.

GraphQL

Various GraphQL enhancements introduced in Magento 2.4.0 improve numerous areas, such as: 

• pickupLocations query now supports the Inventory In-store pickup feature;
• categories query not only returns a list of categories that match a specified filter, like the categoryList query did before, but also supports pagination. 
• reorderItems mutation enables logged-in users to add products from a previous order into a cart.

You can find more information here: GraphQL Developer Guide & GraphQL Release Notes.

Magento Functional Testing Framework

Magento 2.4.0 works with MFTF v3.0.0, which in its turn supports PHP 7.4 and PHPUnit 9. Its core features include:

• MFTF helpers for custom actions outside of the framework;
• Sub-folders in test modules;
• Schema updates for test entities;
• Nested assertion syntax;
• Static checks for references to deprecated test entities.

Note that the deprecated actions of MFTF have been removed and scripts responsible for upgrading tests to MFTF major version requirements have been updated.

Vendor-developed Extensions

Although numerous third-party extensions are deprecated in Magento 2.4.0, there are still some vendor-developed modules built into the platform. 

Thus, Amazon Pay improvements include CSP allowlists updates as well as support for multiple authorizations for a multi-item order and  Japanese addresses.

Braintree Payments replaces the core Braintree integration. 

Klarna in Magento 2.4.0 delivers new on-site messaging options to help shoppers understand the available credit and financing options. Besides, it supports refunds, discounts, cookies & unit tests, as well as updated configuration settings.

Vertex provides better admin experience, XML schema files and patches instead of scripts, and deprecated code removal.

Yotpo’s  Ratings and Reviews feature is now integrated with Page Builder.

Magento 2.4 Commerce Release Notes

Magento Commerce 2.4.0 includes all the features mentioned above plus several more enhancements, such as renewed B2B features. The deprecated payment methods include: Authorize.Net, Braintree, eWay, CyberSource, and Worldpay.

Page Builder

The major Page Builder improvement introduced in Magento 2.4.0 is that it now supports PHP 7.4. That’s it.

B2B

As for the B2B improvements of Magento 2.4.0, they are quite lean too. The new platform version introduces the Order Approval Workflow feature that allows managers of buying organizations to configure approval rules for their buyers.

Thus, Magento now supports self-service configuration of unique approval rules per Company account. Flexible rule criteria can be based on such parameters as order amount, number of line items, or shipment costs. Configurable thresholds add a new flexibility level to the initial configuration.

Customizable permissions for all aspects of the feature is another notable change to the default workflow. 

Approvals are now required in quick storefront view of Purchase Orders. Besides, you get better control over the related processes with a full history log of actions.

Email notifications now inform relevant parties about all steps taken during the approval process.

Also, numerous bug fixes to the B2B functionality have been introduced in Magento 2.4.0. You can view them here: B2B Release Notes.

Vendor-developed Extension

Magento Commerce 2.4.0 includes the same third-party modules as Open Source as well as the dotdigital extension. The latter offers the following improvements:

• Customer attribute values captured by any input type are synced correctly – like data fields;
• It is possible to send cart insight data for all active quotes, even if they are empty;
• The website name, store name, and store view name can be synced by individual data fields;
• The transactional data sync limit for Wishlist, Review, and Order data has been improved;
• Logging output from the Client class is consistent across all the API wrapper methods;
• Configurable products have a stock figure – a sum of their child products;
• Stock updates performed outside the Magento admin are now detected;
• Improved data mapping;
• Updated transactional email configuration.

Magento 2.3 Release Notes

This release introduces significant improvements and various tools that enhance the developer experience: PWA Studio, alternatives to SOAP and REST, and a flexible frontend API that opens rich opportunities for the frontend, headless, and mobile development.

Magento 2.3.5 Open Source Release Notes

Magento 2.3.5 contains 180 functional fixes as well as 25 security enhancements. Below, we concentrate on the most essential updates.

Platform updates

Platform updates include support for Elasticsearch 7.x and deprecation of Authorize.Net, eWay, CyberSource, Worldpay, and Signifyd integrations. Use the corresponding modules from the Marketplace. 

Besides, Magento 2.3.5 delivers an upgrade for Symfony Components to 4.4 and relies on the Laminas project instead of the Zend Framework.

Performance 

With Magento 2.3.5, you can now benefit from improvements in customer data section invalidation as well as numerous Redis performance optimizations.

Infrastructure

Magento 2.3.5 infrastructure improvements are related to Catalog, PayPal, Sales, Elasticsearch, Import, CMS, and B2B modules. The system now follows the SameSite cookie update with the PayPal Pro payment method. Besides, you can leverage a PHPStan code analysis check via static builds.

Inventory Management

A new extension point for SourceDataProvider and StockDataProvider and allocated inventory sources in the list of orders are among the inventory management updates of Magento 2.3.5. 

GraphQL

Products and categoryList queries can be utilized for retrieving information about the corresponding entities of a staged campaign.

PWA Studio

PWA Studio 6.0.0 offers a new PWA extensibility framework, improved caching and data fetching, as well as a full-page shopping cart experience.

Third-party extensions

Google Shopping ads Channel is no longer supported. Klarna is delivered to Australia and New Zealand. Vertex offers improved backend interface, address validation, tax calculations for virtual products, WSDL ports with basic authentication, restorable configuration settings, etc.

Magento 2.3.5 CommerceRelease Notes

Magento 2.3.5 Commerce also introduces the following enhancements: 

• Dotdigital connects the Engagement cloud with Magento B2B via company data (customer types, companies, company statuses), shared catalog data, and quotes data synchronization. As a result, you get better campaigns and more precise recommendations.
• Page Builder offers templates to customize the appearance of your store pages and save them for further updates to new content areas. Video backgrounds can be added to rows, banners, and sliders, which now support full-page hight. Previously saved content versions are updated automatically so that they always match newer configuration changes.
• For B2B enhancements of Magento 2.3.5 follow this link: B2B Release Notes. They include mostly fixes.
• Product Recommendations introduce a built-in personalization tool powered by Adobe Sensei. We describe it here: Magento 2 Personalization Services.

Magento Open Source 2.3.3 Release Notes

Like other releases, Magento Open Source 2.3.3 offers platform upgrades and security changes. Check this article for more detailed description of features: Magento 2.3.4 Enhancements.

New security patches

Starting from 2.3.3, Magento offers time-sensitive security patches that don’t apply hundreds of functional fixes and enhancements. Thus, patch 2.3.2.2 is a security-only patch designed to fix vulnerabilities that have been identified in Magento 2.3.2. You can read more about this new improvement here: Introducing the New Security-only Patch Release. Also, read this article to discover how to install the new patch: Install Magento using Composer.

Security enhancements

Magento 2.3.3 Open Source includes many more security enhancements that can be divided into three groups. Firstly, it is PSD2 compliance with core payment methods. Secondly, the new platform version fixes 75 critical security issues. Thirdly, 2.3.3 offers enhancements that boost XSS protection against future exploits.

PSD2 compliance

Since PSD2 went into effect on September 14, Magento has already prepared its users for the new change. The 2.3.3 version contains the following PSD-related changes:

• Braintree is now compliant with PSD2;
• Authorize.net now provides the ability to make 3D Secure verification through third-party services;

• Magento 2.3.3 no longer includes the Cybersource and eWay payment modules. You have to replace them with the official extensions instead.

Security enhancements

75 security enhancements improve close cross-site scripting and remote code execution vulnerabilities. Besides, they also fix other security issues. Although no confirmed attacks occurred, certain vulnerabilities can potentially be exploited to access your admin and customer data.

Platform upgrades

To boost platform security and performance, Magento 2.3.3 Open source supports PHP 7.3.x and 7.2.x. The latest tested versions are 7.3.8 and 7.2.21. It also supports Varnish 6.2.0. Also, note that Zend Framework 2 Components have been upgraded to the Active/LTS versions.

Performance improvements

To enhance the platform performance, Magento 2.3.3 offers the following features:

• Automatic URL rewrite generation that occurs when the category products belong to is saved can be enabled/disabled.

• Non-critical CSS elements are at the bottom of the page increasing its load speed. Enable the feature under Stores > Configuration > Advanced > Developer > CSS Settings > Use CSS critical path.

• The jQuery/ui library exists as separate widgets. It means that core modules can now load only the widgets they need.

• To increase page load speed, Magento 2.3.3 store pages display text in readable system fonts while loading custom ones. The more large CSS files and fonts you use, the more noticeable the improvement is.

Infrastructure improvements

Magento 2.3.3 includes updated Framework and the following modules: Catalog, Sales, Checkout/One Page Checkout, UrlRewrite, Customer, and Ui. Also, note that the WYSIWYG editor has been upgraded. Its latest version is TinyMCE v. 4.9.5​.

Merchant tool enhancements

Magento 2.3.3 provides a tracking tool for user actions and events on the Admin. The data is saved and provided to Adobe Analytics.

Inventory Management enhancements

As for inventory management enhancements of Magento 2.3.3, they include fixes to multiple bugs. You can find more information here: Inventory Management release notes.

GraphQL

Expanded GraphQL functionality covers PayPal payment integrations, store credits, and gift cards. You can leverage it to process payments, redeem gift cards and convert to store credit balance, update shopping carts, and add configurable products to cart.

PWA Studio

Magento 2.3.3 also includes upgrades for PWA Studio 4.0.0. Now, this tool contains new hooks in Peregrine as well as refactored components that can be converted into re-useable Peregrine hooks.

Google Shopping ads Channel

In Magento 2.3.3, the Google Shopping ads Channel Marketplace module is available as a bundled extension. 

Magento Shipping

From the perspective of Magento Shipping, 2.3.3 includes numerous improvements in such areas as carrier integration, batch-order processing, shipping method preview in the shipping portal, checkout, etc. It also supports bundled products and prepackage options.

Vendor-developed extension

Magento 2.3.3 Open Source offers the following enhancements for third-party extensions:

• Amazon Pay is compliant with the PSD2 directive for the UK and Germany;
• Dotdigital includes improved product catalog synchronization for bundled and custom products as well as better communications for abandoned carts;
• Klarna lets merchants disable the sending of customer information, supports B2B transactions and works with PayBright;
• Vertex for Magento 2.3.3 supports Flexible Fields – merchants can provide the tax engine with additional information, provides several attributes by default, lets merchants add custom fields to the Vertex connector;
• Yotpo is a user-generated content management platform that is integrated with the admin section of Magento 2.3.3 so that merchants can gather, curate, and manage user-generated content more efficiently.

Import/export

Since Magento 2.3.3 introduced a plethora of import/export improvements (most of them are bug fixes), we’d like to draw your attention to the Improved Import & Export features that are not available by default. Our extension lets you automate all data transfers using schedules. At the same time, you can use presets to map third-party attributes automatically. Another vital benefit of our plugin is the ability to use multiple file formats in addition to CSV. You can even transfer data from Google Sheets or via API. Follow this link for more information:

Get Improved Import & Export Magento 2 Extension

For further information about the new release, check this article: Magento Open Source 2.3.3 Release Notes.

Magento Commerce 2.3.3 Release Notes

As for Magento Commerce 2.3.3, it includes all the aforementioned improvements and fixes plus additional GraphQL features and the following Page Builder enhancements:

• Improved inline editing experience with the upgrade to TinyMCE v4.9.5;
• The ability to define product order explicitly;
• Improved HTML content management for non-technical users.

Magento 2.3.2 Open Source Release Notes

Security

Magento 2.3.2 Open Source includes 75 security enhancements. They help to solve the following issues: 

• cross-site scripting (XSS);
• remote code execution (RCE);
• sensitive data disclosure vulnerabilities.

Google reCAPTCHA module for PayPal Payflow checkout prevents malicious targeting of Magento deployments that implement Payflow Pro. 

Performance 

Another change introduced in Magento 2.3.2 Open Source is a significant improvement to storefront page response time under high load. With enhanced concurrent access to the block cache storage, the response of storefront pages under high load is improved by approximately 20%.

Besides, Magento 2.3.2 Open Source users can leverage the recent product page gallery load optimization. The latest version enables product images to be loaded as quickly as other page elements.

It is also necessary to mention that Magento 2.3.2 includes improved page rendering to improve page performance. The feature is based on deferred loading and parsing of storefront JavaScript. It means that non-critical JavaScript code is situated at the bottom of storefront pages enabling faster page rendering. As a result, store visitors see the complete page sooner while nonessential elements remain inactive.

Infrastructure 

Magento 2.3.2 Open Source contains 130 enhancements to core quality of Framework and numerous modules. It is also worth mentioning that 

• The Braintree payment method is now supported for checkout with multiple addresses; 
• The CGI URL gateway in the UPS module is updated to HTTPS; 
• Google chart API updated to the Image-Charts.

Merchant tool 

Magento 2.3.2 Open Source now performs a bunch of new tasks as asynchronous background processes. Besides, it sends system messages to alert Admin users about task completion. The following processes are now performed in a background:

• Discount coupon generation;
• Products mass editing;
• Data export. 

Inventory Management 

Magento 2.3.2 Open Source introduces new commands that enable merchants to discover and resolve reservation inconsistencies. Besides, all users can leverage the improved user interface for assigning sources to products with the following features:

• Decimal order quantity;
• New test scenarios for Credit Memo;
• InventoryGraphQl module with attributes that return correct product quantity information;
• Single/multiple products save;
• Bulk inventory transfers.

Besides, it is now possible to leverage a new endpoint for Bulk Partial Stock Transfer. The new feature enables bulk transfers for a custom product quantity between sources. 

GraphQL

Magento 2.3.2 Open Source includes the following GraphQL improvements:

• GraphQL coverage for cart and checkout operations provides support for simple and virtual products. Besides, you can freely add, update, and delete cart items; set shipping and billing addresses (with address book support); set shipping and payment (offline only) method; place an order;
• GraphQL caching supports additional queries to improve response times;
• GraphQL performance test scenario coverage has been extended.

PWA

Magento 2.3.2 Open Source introduces an improved modular component library for the PWA Studio. From this version, developers can reuse and scale components for frontend needs. A phased rollout for Peregrine functional and data components is another big step. From 2.3.2, the Search component has been updated.

Amazon Pay

Finally, the UK and German merchants can leverage Amazon Pay since it is now compliant with the PSD2 directive for these countries. 

For further information about Magento 2.3.2 Open Source, follow this link: Magento Open Source 2.3.2 Release Notes.

Magento 2.3.2 Commerce Release Notes

Security 

Magento 2.3.2 Commerce includes 75 security enhancements. They help to solve the following issues: 

• cross-site scripting (XSS);
• remote code execution (RCE);
• sensitive data disclosure vulnerabilities.

Google reCAPTCHA module for PayPal Payflow checkout prevents malicious targeting of Magento deployments that implement Payflow Pro. 

Performance 

Magento 2.3.2 Commerce offers a redesigned checkout page to support customers working with many addresses. Now, it is possible to search addresses instead of listing them on the Select shipping and Billing address steps. Thus, customers with thousands of addresses can benefit from the new feature reducing the time necessary to specify data required for the checkout. 

Another notable change introduced in Magento 2.3.2 Commerce is a significant improvement to storefront page response time under high load. With enhanced concurrent access to the block cache storage, the response of storefront pages under high load is improved by approximately 20%.

Besides, Magento 2.3.2 Commerce users can leverage the recent product page gallery load optimization. The latest version enables product images to be loaded as quickly as other page elements.

It is also necessary to mention that Magento 2.3.2 includes improved page rendering to improve page performance. The feature is based on deferred loading and parsing of storefront JavaScript. It means that non-critical JavaScript code is situated at the bottom of storefront pages enabling faster page rendering. As a result, store visitors see the complete page sooner while nonessential elements remain inactive.

Infrastructure 

Magento 2.3.2 Commerce contains 130 enhancements to core quality of Framework and numerous modules. It is also worth mentioning that 

• The Braintree payment method is now supported for checkout with multiple addresses; 
• The CGI URL gateway in the UPS module is updated to HTTPS; 
• Google chart API updated to the Image-Charts.

Merchant tool 

Magento 2.3.2 Commerce now performs a bunch of new tasks as asynchronous background processes. Besides, it sends system messages to alert Admin users about task completion. The following processes are now performed in a background:

• Discount coupon generation;
• Products mass editing;
• Data export. 

Inventory Management 

Magento 2.3.2 Commerce introduces new commands that enable merchants to discover and resolve reservation inconsistencies. Besides, all users can leverage the improved user interface for assigning sources to products with the following features:

• Decimal order quantity;
• New test scenarios for Credit Memo;
• InventoryGraphQl module with attributes that return correct product quantity information;
• Single/multiple products save;
• Bulk inventory transfers.

Besides, it is now possible to leverage a new endpoint for Bulk Partial Stock Transfer. The new feature enables bulk transfers for a custom product quantity between sources. 

GraphQL

Magento 2.3.2 Commerce includes the following GraphQL improvements:

• GraphQL coverage for cart and checkout operations provides support for simple and virtual products. Besides, you can freely add, update, and delete cart items; set shipping and billing addresses (with address book support); set shipping and payment (offline only) method; place an order;
• GraphQL caching supports additional queries to improve response times;
• GraphQL performance test scenario coverage has been extended.

PWA

Magento 2.3.2 Commerce introduces an improved modular component library for the PWA Studio. From this version, developers can reuse and scale components for frontend needs. A phased rollout for Peregrine functional and data components is another big step. From 2.3.2, the Search component has been updated.

BlueFoot to Page Builder content migration

Assistance for BlueFoot to Page Builder migration is a Commerce-specific feature introduced in Magento 2.3.2. The BlueFoot content migration module enables merchants on Magento 2.1.x or 2.2.x with BlueFoot to upgrade to Magento 2.3.1+ with PageBuilder 1.0 with no data losses.

Amazon Pay

Finally, the UK and German merchants can leverage Amazon Pay since it is now compliant with the PSD2 directive for these countries. 

For further information about Magento 2.3.2 Commerce, follow this link: Magento Commerce 2.3.2 Release Notes.

Magento 2.3.1 Open Source Release Notes

Magento 2.3.1 Commerce Release Notes

Magento Open Source 2.3.0 Release Notes (Beta)

New features

• PWA Studio – a set of tools for the significantly improved development, deployment, and maintenance of progressive web applications: Magento PWA documentation;
• Declarative schema – improved installation and upgrade procedures for Magento and extensions.
• GraphQL API – an alternative to REST and SOAP web APIs: GraphQL Developer Guide;
• MultiSource Inventory (MSI) – manage physical inventory across locations out of the box. Read our review here: Magento 2 Multi Source Inventory;
• Amazon Sales Channel – create and manage Amazon listings and fulfill your orders for both Amazon customers and your store visitors.

Core product improvements

• Updates to Magento’s tech stack: Redis, MySQL, Elasticsearch, compatibility with PHP 7.2, etc;
• Improvements to import and export (but our module is a way more powerful);
• Elasticsearch support;
• Improvements to release packaging with a faster and more efficient release process;
• CMS enhancements with a native Magento WYSIWYG editor or Page Builder for banners;
• Performance improvements are represented by JavaScript bundling.
• Security enhancements: Cache flush ACL and 2FA/CAPTCHA;
• Change in versioning for B2B product that lets matching the versioning of the core product.

Magento Commerce 2.3.0 Release Notes (Beta)

New features

• PageBuilder – a new drag-and-drop visual content editing tool that lets merchants customize the appearance of their storefront in a very user-friendly way;
• PWA Studio – a set of tools for the significantly improved development, deployment, and maintenance of progressive web applications: Magento PWA documentation;
• Declarative schema – improved installation and upgrade procedures for Magento and extensions.
• GraphQL API – an alternative to REST and SOAP web APIs: GraphQL Developer Guide;
• MultiSource Inventory (MSI) – manage physical inventory across locations out of the box. Read our review here: Magento 2 Multi Source Inventory;
• Amazon Sales Channel – create and manage Amazon listings and fulfill your orders for both Amazon customers and your store visitors.

As you can see, the only unique feature is the PageBuilder. Other tools are the same for both Commerce and Open Source editions. As for the core product improvements, they are also similar. For further information, follow these links: Magento Open Source 2.3.0 Release Notes & Magento Commerce 2.3.0 Release Notes.

Magento Commerce & Open Source  2.2.6 Release Notes

Magento 2.2.6 has been just released, so we update this post with the latest data. There are 25 critical enhancements to product security, over 150 core code fixes and enhancements, and over 350 community-submitted pull requests included in the new version of the platform. Of course, it is impossible to describe all of them in this article, but we highlight the most crucial ones as well as provide links for further exploration of Magento 2.2.6.

Note that the provided security enhancements are a preventive measure: no confirmed attacks related to them have occurred to date. However, the reason to provide the update is quite usual: certain vulnerabilities can potentially be exploited to access customer information or take over administrator sessions. We face the same problem from one release to another.

Hope that the security reasons are enough to upgrade your Magento software to the latest version as soon as possible. You can find all the corresponding issues discusses here: Magento Security Center. In addition to 25 critical security fixes, look for the following highlights in this release.

It is also necessary to mention that both Open Source and Commerce editions got the same improvements. The core difference is related to some fixes of the Commerce edition-specific features. Let’s start the in-depth exploration of Magento 2.2.6.

Core code highlights

The Magento 2 platform gets new and new performance enhancements with each release and 2.2.6 is not an exception. Below, you can see multiple improvements in various key areas of the platform.

Substantial Performance Improvements

Let’s take a look at the performance-tuning enhancements focussed on the catalog indexing. They include:

• Category product indexer logic has been essentially optimized. Thus, the re-indexing time has decreased up to 98%. It means that now it takes just one minute instead of 40 minutes for 100,000 categories. Previously, stores with huge catalogs were faced almost endless reindexing that could take up to an hour till the process is complete.

• The good news about the catalog:image:resize command are available as well! Its execution time has been dramatically reduced! In Magento 2.2.6, it is up to 90% shorter. However, You can achieve such high performance results after implementing some additional steps after upgrading your Magento instance to 2.2.6:
  • First of all, it is necessary to remove pub/media/catalog/product/cache . Thus, you will free up some space.
  • Next, run bin/magento catalog:image:resize to generate a new image cache. It is necessary because we’ve changed the path to cached images, so must remove the previously cached images.

• Another optimization is related to the catalog rule re-indexing. In the new version, the average re-indexing time which also depends on rule conditions has been improved essentially. 2.2.6 offers a more than 80% enhancement to its performance. Initially, this process took more than 20 minutes. Now, a full catalog rule re-index operation on a medium B2C store is 80% faster.

• Also, note that the catalog price indexer is now scoped and multithreaded. What does it mean? The performance of layered navigation, search, and indexing actions for Magento instances with multiple websites and stores has been enhanced substantially. Furthermore, it is now possible to parallelize catalog price indexing by websites and customer groups. How can we achieve the new functionality? By adding the MAGE_INDEXER_THREADS_COUNT environment variable to env.php.

• And you need much less time to load category or product pages for products that are configured with more than 500 attributes. The core reason for this improvement is the refactored logic for product attribute retrieval. It has resulted in a reduction of the load time of almost 90% for scenarios related to a large number of product attribute sets. In case of a single attribute set deployment with 500 attributes, you won’t notice essential performance improvements. However, deployments with many attribute sets that contain only a few attributes will show noticeable performance bump. Let’s take a look at some numbers to illustrate the new feature. Imagine that you have a deployment with 100 attribute sets. Each set contains at least 50 attributes. In this situation, the performance improvement is significant which results in up to 40-90% reduction of the load time.

• We’ve also prepared some good news for merchants whose stores contain the top menu with many categories. The time required to load a store’s home page has been reduced noticeably. But you should remember that the load time is still affected by two factors:
  • the number of categories;
  • the structure of the top menu.

• And you can implement one simple trick to improve your store performance. Disable the Magento Report functionality. You will find the new configuration setting under System Configuration: General > Reports > General Options. The new Magento version allows disabling Magento Reports, which is recommended practice if your business does not require this capability.

Better Checkout

Of course, the checkout functionality has been improved in Magento 2.2.6. Take a look at the following features:

• A better usability is represented by the resistance to page reloads. A shopping cart’s content, with which a customer comes to the final stage of buying, remains constant even when the checkout page is repeatedly reloaded. Previously, several checkout page reloads resulted in a completely emptied cart. As a result, the customer could not place the order. This problem primarily affected stores running on HTTPS. Now, you can upgrade to 2.2.6 to make the life of your customers better.

• Now, it is also possible to refresh the checkout page without deleting the shipping address during a guest checkout. Previously, when the persistent shopping cart was enabled, refreshing the checkout page wiped out information entered into form fields for a guest checkout.

• And the number of available shipping methods no longer affects the speed at which Magento places an order. Previously, this process could last more than 20 seconds if an order for which multiple shipping methods were available was placed. The checkout of Magento 2.2.6 is fast and furious!

Additional Improvements

• We should also draw your attention to the fact that configurable products are now sorted by visible prices. Everyone expected this. As for the previous Magento versions, sorting a catalog by price produced sort results that included the prices of out-of-stock products and disabled child products. You must admit that the new feature will make your catalog a way more user-friendly.

• And there are no duplicate delete requests resulted by an unstable Internet connection. Previously, unintentional mass deletion of products sometimes occurred as a result of an unstable Internet connection. With Magento 2.2.6, you can forever forget about this problem.

Magento Cloud

• A Docker Compose configuration has been added to the Cloud ece-tools repository in 2.2.6. Thus, deploying a local development environment is no longer a problem!
• There is also a robust merchant-oriented improvement. It is no longer necessary to export and import the configuration process to change store locales.
• Besides, a new workflow that improves the sitemap generation has been introduced in Magento 2.2.6. Now, it lets merchants add a robots.txt file and generate a sitemap.xml file for a single domain configuration without requiring a change to the infrastructure. At such rate, you will soon forget about the necessity to use third-party XML sitemap extensions!
• The new SCD_MATRIX environment variable has been added. It reduces the number of theme files necessary for the deployment so that Merchants can now define multiple locales for each theme.
• Zero-downtime deployment has been implemented. The basis of this new enhancement is a “connection holding” capability, which ensures no lost connections or site unavailability. As a result, you can provide customers with a smooth shopping experience even during deployments involving database schema changes.
• An issue that caused downtime between the deploy and post-deploy phase is fixed as well. Now, the post_deploy phase begins right after the deploy phase ends. No delays occur!

Community Contributions

Now, let’s highlight various community contributions and pay a separate attention to fixes that improve checkout flow and the sorting of simple products.

• A customer experience is more flexible in 2.2.6 than in the previous versions. Your clients can complete an order when it contains a configurable product with an option that is deleted after the product has been placed in the shopping cart. As you might have already faced previously, it was impossible to load the shopping cart after the configurable option was deleted. Thanks to community member jonshipman! GitHub-15467, you no longer have to worry about this issue.
• It is also necessary to mention that Magento 2.2.6 maintains the default sort order for products – which is “newest first” – when the Magento deployment is upgraded. Previously, the situation was the opposite. After the upgrade, the default product order in categories changed from “newest first” to “oldest first”. Thanks to community member Danny Verkade! GitHub-15627, your customers won’t face this trouble anymore.
• As a Magento merchant, you can now successfully change the applied theme setting for a store view under Content > Design > Configuration. You can say thank you to community member Daniel Ruf! Here is the improvement: GitHub-14968.
• The page load speed in Magento 2.2.6 has been improved since it no longer calculates product taxes when loading category pages. Jeroen proposed the optimisation here: GitHub-14941.

Core Bundled Extensions

When it comes to the core bundled extensions, Magento 2.2.6 offers a lot of new fixes as well. Let’s take a look at each extension.

Amazon Pay

Enhancements to Amazon Pay affect four key areas.

• Firstly, it is the implementation of the Magento payment provider gateway. Developers finally have a robust tool for integrating stores with payment providers. This goal can be achieved faster and with the less effort in Magento 2.2.6.
• Secondly, the handling of virtual products has been improved as well.
• Thirdly, a new entry has been added to the Admin. The new feature allows displaying Amazon Pay in the list of payment options.
• Fourthly, Synchronous, if possible and Asynchronous settings for authorization mode are now combined into one setting. Now, there are only two settings in this area:
  • Immediate which was previously represented by Synchronous
  • Automatic which is a combination of Synchronous, if possible and Asynchronous.

dotmailer

The dotmailer extension has been enhanced in Magento 2.2.6 as well. And we can highlight 4 key areas where improvements are available:

• Magento 2.2.6 allows you to request and capture the consent of customers and guests using dotmailer’s new Consent Insight.
• The Magento contacts import is much more flexible now. You can import only those contacts who have opted in. For instance, customer, guest, and other subscribers.
• And get ready to see a warning alert if you are syncing non-subscribers into a dotmailer account. Thus, you will no longer do that occasionally.
• The fourth sphere of improvements is related to the retry process that now results after a failed attempt to access EDC.

Not a huge list of enhancements but some very useful fixes. What else is available in Magento 2.2.6?

Klarna

Enhancements to Klarna include a little bit more features:

• The Klarna Payments section has been improved. Now. it includes a link to Klarna automated onboarding and account sign in. You must admit that it slightly improves the usability of the section.
• Some good news in the area of fraudulent orders! If an order is identified as such, Klarna will notify you with a request to stop the order from being delivered. Additionally, Klarna will try to cancel the order automatically by sending a notification. You can find more information regarding this feature here: Managing Your Account.
• The order management calls have been improved with shipping and discount order lines.
• The shipping details workflow has got a new enhancement in Magento 2.2.6. Now, Klarna passes them in capture requests.
• Besides, the Klarna API now returns the name and logo URL to use for each payment method. Previously, it was necessary to hard-code the payment method names into the module.

You can also find the full description of the features mentioned above here: Klarna.

Magento Shipping

Perhaps, the most updated area is shipping. The Magento Shipping extension incorporates the following improvements. As a merchant, you can benefit from the new Click & Collect feature that offers the ability to:

• Provide the new option as a shipping option to customers, enabling them to directly collect shipments from designated source locations or stores. At the same time, you can still rely on third-party click and collect extensions.
• Configure multiple source locations available for Click & Collect pick-ups.
• Leverage updates to Shipment Form for UPS (currently, the feature is available for the US only). Note that customers can select Click & Collect locations during checkout. The feature supports workflows and notifications for Click & Collect pick-up, packing, and collection.

Batch Processing provides merchants with several new improvements as well. Thus, you can freely specify and modify packages and experiences for orders assigned to a batch. Next, it is possible to book shipments for a batch. And Magento 2.2.6 allows you to print all packing slips and printing labels for the batch. There is also the new Shipment Reference field that associates bookings between a carrier and a customer.

Magento Social

Unfortunately, the Magento Social Facebook integration has been removed. The extension is no longer supported, but you can always rely on third-party modules.

In addition to the features mentioned above, this release contains lots of fixes. You can view all of them here: Magento Commerce 2.2.6 Release Notes and Magento Open Source 2.2.6 Release Notes.

As you can see, nothing bad has happened to Magento 2 after the Adobe acquisition. Both Open Source and Commerce versions get lots of new features and enhancements. Furthermore, extension providers still have lots of areas that can be improved with their products. And when some old features are eliminated, it is not a reason to panic: there is always a reliable third-party replacement. Even if any new features are implemented, they are usually not as powerful as the existing solutions. The Magento ecosystem is still growing and nothing will stop it!

Magento Commerce & Open Source  2.2.5 Release Notes

Magento 2.2.5 has been released recently and it offers the following improvements for both Commerce and Open Source Editions. For instance, you can leverage the following enhancements after updating your Magento instance:

• Multiple enhancements developed to close stored XSS, SQL injection, and CSRF vulnerabilities.
• Resolution of issues caused after upgrading to Magento 2.2.4 in deployments that span multiple websites. Now, Magento multi-store installations use the store view-specific values from the store configuration settings.
• Performance indexing improvements.
• 150+ community contributions.
• Core bundled extensions enhancements.

As for the performance improvements to the core Magento code, they include:

• The ability to run the catalog search full-text indexer and category product indexer in parallel mode by store view. The indexer:reindex execution time is decreased.
• Indexing performance improvement up to 15% due to the refactoring of the catalog full-text indexer for profiles with 600,000+ products and catalogs with 5,000+ configurable products and 500+ options.
• Improved swatch product attributes behavior leads to the increase of the search result page performance by 31% for catalogs with many configurable product options.

Below, you can see a list of community contributions:

• It is possible to create a new customer account from the Order Confirmation page.
• Coupon codes that exclude bundle products are applied correctly now. Previously, bundle products were not excluded.
• Simple products are sorted by a regular price when catalog promo price rule is applied. The same is about simple products with a required custom option.

The new release of Magento Shipping also includes some important improvements:

• Now, merchants can select carriers for returns. Besides, it is possible to send a return label along with forwarding fulfillment.
• Batch processing leads to a significant rise in processing a large volume of shipments.
• Customers can designate a drop point rather than a residence for delivery by a carrier with the help of collection points.

As for other fixes and improvements, you can discover them here: Magento Commerce 2.2.5 Release Notes and Magento Open Source 2.2.5 Release Notes.

Magento 2.2.4 Release Notes

Magento Open Source 2.2.4 Release Notes

The new Magento 2 version has just arrived. Published on May 2, 2018, Magento 2.2.4 brings lots of features described below. The release includes numerous tools, enhancements, and features. And don’t forget about community contributions. The core highlights are described below.

Highlights

• New modules out-of-the-box. Improved tax and shipping calculations right from the cart with the help of Amazon Pay, Vertex, and Klarna Payments.
• Magento Shipping and dotmailer improvements.
• Performance improvements and numerous fixes and enhancements to core features..
• Lots of community contributions.

Enhancements

Below, you can see changes that are not full-fledged features or bug fixes:

• The Improved admin global search is now extensible, translatable, and takes the ACL settings for the current user into account.
• An automated checker that enforces the short array syntax convention in a new code.
• Dedicated payment and shipping debug log files that store functional area-specific information.
• The Emogrifier dependency update.
• The is_null replacement with strict comparison only for models and block in Catalog, Tax, Sales, and EAV.

dotmailer enhancements

The dotmailer bundled extension also has several important enhancements. You can discover them below.

• Enhanced Abandoned Cart report table;
• Merchants can design their own transactional email templates;
• Better synchronization of subscriber’s sales data;
• Transactional emails per the Store level;
• Enhancements in the area of validation for deletion of cron job CSV files.

You can discover more fixes and improvements here: Official Release Notes.

Magento Commerce 2.2.4 Release Notes

It is also necessary to draw your attention to the release notes of Magento Commerce 2.2.4. The new version was also released on May 2, 2018, and you can find its core features below.

Highlights

• The situation with new bundled extensions is just the same as we’ve mentioned above: they add instant and accurate tax and shipping calculations right from the cart with the help of Amazon Pay, Vertex, and Klarna Payments.
• Magento Shipping and dotmailer bundled extensions have been updated as well.
• Numerous fixes and performance improvements have been introduced with Magento Commerce 2.2.4.
• Almost 200 community contributions became a part of the new version.

Enhancements

Not full-fledged features or bug fixes are described below.

• The admin global search enhancement leads to a translatable and extensible experience that takes the ACL settings for the current user into account.
• The CyberSource payment method has been added to the multi-shipping checkout flow. This is a Magento Commerce-specific feature. The Multishipping module has been improved so that the integration process for other payment methods is more developer-friendly.
• The automated Magento checker enforces the short array syntax convention via a new code that complies with all requirements of PSR-2.
• Dedicated payment and shipping debug log files have been added. Now, they store information specific to those functional areas.
• The Emogrifier dependency update to 2.0.0+.
• The is_null replacement with strict comparison only for models and block in Catalog, Tax, Sales, and EAV.

As you can see, the only Magento Commerce-specific improvement in 2.2.4 is related to the CyberSource payment method. As for the dotmailer enhancements, they are just the same as in the Open Source edition:

• Enhanced Abandoned Cart report table;
• Merchants can design their own transactional email templates;
• Better synchronization of subscriber’s sales data;
• Transactional emails per the Store level;
• Enhancements in the area of validation for deletion of cron job CSV files.

You can discover more fixes and improvements here: Official Release Notes.

Magento 2.2.3 Release Notes

Magento Open Source 2.2.3 Release Notes

Originally, the official release notes for Magento Open Source 2.2.3 were published on February 27, 2018, and updated on March 22, 2018. The 2.2.3 version includes 35 enhancements to multiple key areas including product security, the Magento Admin, shipping changes, and a copyright update.

The key security improvement of 2.2.3 limits the ability to use symlinks for /media and other folders. Thus, the use of symlinks for deployment or in /media may lead to problems with uploading or removing images.

Highlights

• Due to numerous security enhancements, 2.2.3 fixed vulnerabilities in cross-site request forgery (CSRF), unauthorized data leaks, and authenticated Admin user remote code execution.
• Elasticsearch 5.x is now supported.
• The latest USPS shipping changes are supported in the Magento Admin.
• Cache management tasks managed through the Magento Admin get a better control system.
• The copyright was updated to 2018.

Security enhancements

With the Magento 2.2.3 Open Source, multiple security enhancements have been introduced. They fix numerous vulnerabilities. Luckily, no confirmed attacks related to the fixed issues have occurred. See Magento Security Center for more information. All release notes and fixes are available here: Magento Open Source 2.2.3.

Magento Commerce 2.2.3 Release Notes

Magento Commerce updates introduced in 2.2.3 are just the same as in Magento Open Source. Originally, the official release notes for Magento Commerce 2.2.3 were published on February 27, 2018. The update goes back to March 22, 2018. The 2.2.3 version includes numerous enhancements to various key areas. Although the core vector of the update is product security, it also includes enhancements related to the Magento Admin, shipping, and a copyright.

Note that in 2.2.3, the ability to use symlinks for /media and other folders is limited due to security reasons. Thus, the use of symlinks for deployment or in /media may lead to problems while uploading or removing images.

Highlights

• Numerous security enhancements of 2.2.3 fixed vulnerabilities in the following areas:
  • cross-site request forgery (CSRF)
  • unauthorized data leaks
  • authenticated Admin user remote code execution.

• The support for Elasticsearch 5.x has been introduced in 2.2.3.
• The Magento Admin now supports the latest USPS shipping changes.
• A better control system for cache management tasks managed in the Magento Admin has been introduced.
• The copyright was updated to 2018.

Security enhancements

With the Magento 2.2.3 Commerce, multiple security enhancements became a part of the platform fixing numerous vulnerabilities. Luckily, no confirmed attacks related to the fixed issues have occurred. You can find more details in the Magento Security Center. All release notes and fixes are described here: Magento Commerce 2.2.3.

Magento 2.2.2 Release Notes

Magento Commerce 2.2.2 Release Notes

• Advanced Reporting: 20 reports with user-friendly interface; see Advanced Reporting for more information;
• Instant Purchase: zero-step checkout for returning customer; get more data here: Instant Purchase module;
• Magento Shipping: multi-carrier shipping and fulfillment; for further information, follow this link: Magento Shipping;
• Email marketing automation: integration with dotmailer; see Email Marketing Automation for further information;
• Magento Functional Testing Framework: the cross-platform testing solution to facilitate functional testing and minimize efforts to perform regression testing; get more information here: Introduction to Magento Functional Testing Framework.

Besides, the update includes 100+ community-submitted bug fixes and multiple pull requests. For any further information, go here: Magento Commerce 2.2.2 Release Notes.

Magento Open Source 2.2.2 Release Notes

Magento 2.2.2 Open Source got the same update. You can check this out for yourself here: Magento Open Source 2.2.2 Release Notes.

Magento Community Edition 2.1.8

• Magento 2 Community Edition is renamed to Magento 2 Open Source;
• 100+ functional fixes and enhancements;
• Better static content deployment and generation;
• Improved indexing of large catalogs, URL rewrites, and cache tuning;
• Performance optimization;
• reduction in memory amount required by mass actions;
• Advanced multi-language sites functionality.

Magento Community Edition 2.1.7

• 15 security enhancements + 1 significant functional enhancement;
• Remote code execution issue was fixed;
• Access control bypass issue was fixed;
• Cross-site request forgery issue was fixed;
• Improved image resizing.

Magento Community Edition 2.1.6

• 15 significant performance improvement;
• Category page performance enhancement;
• Faster configurable products database loading;
• Faster price calculations;
• Faster stock validation;
• Optimized image resizing;
• Improved layered navigation performance.

Magento Community Edition 2.1.5

• Copyright date update in every file – no functional or security changes.

Magento Community Edition 2.1.4

• 20+ functional fixes and improvements and 1 security enhancement;
• Zend framework vulnerability was removed;
• Catalog, payment, and sales modules were updated;

Magento Community Edition 2.1.3

• New PayPal and Braintree payment features: faster checkouts, lower risks, etc;
• Unregistered customers can reorder or add items to an existing order in the Admin without re-entering credit card details;
• Redesigned Payment Methods page in Admin;
• Slow SQL media queries were removed;
• Advanced configurable products management in Admin;
• Support for special symbols during CSV import/export;
• Two new web API endpoints in the Sales module: easily process refunds from an order or invoice;
• Credit memo for particular invoice or order;
• Details about refunded items in invoice or order;
• More efficient processing of large catalogs.

Magento Community Edition 2.1.2

• Multiple bug fixes and improvements;
• Support for PHP 7.0.4 and 5.6.5;
• MySQL 5.7 compatibility;
• 2 web APIs for the Sales module.

Magento Community Edition 2.1.1

• Several functional fixes and improvements in the area of static assets deployment.

Magento 2.1.0 Release Notes

Magento Community Edition 2.1.0 General Availability has been released recently. And since it includes tons of fixes, enhancements, and improvements, we are here to shed light on them. Check the following update to discover all new features that are now available in Magento 2.1.0.

3 Core New Features Are:

• PayPal Enhancements (in-context checkout + saved credit cards: buyers can pay with PayPal without leaving your website site; there is no need to re-enter credit card information in checkout or while reordering items);
• Braintree Hosted Fields (sensitive payment information is securely collected, so everyone comply with the simplest set of PCI compliance requirements; checkout layout can be customized; Braintree settlement reports are available right in the Magento 2 admin);
• Improved Management Interfaces (better search and improved creation of products, categories, and CMS content).

Security enhancements

On our website, we have a separate post about security vulnerabilities of Magento. You might have read about all these patches that should be installed to protect precise data. Otherwise, malefactors can access customer information or take over administrator sessions. Therefore, it is recommend to upgrade your Magento software to the latest version as soon as possible, since it includes lots of security improvements. And Magento 2.1.0 is not an exception, so hurry up to upgrade your store.

Fixed Issues

Shopping

• Problems with the Add to Cart button translation are now fixed: GITHUB-4181;
• In case of registered users, a cart returns a complete list of products.
• Fixed amount discount can be created for an entire cart.
• Cart Price Rules now support coupon codes generation.
• Redundant GET requests are no longer performed if there are items in a shopping cart.
• Date/time fields now work as expected.
• Exceptions are logged in a file under var/report (in default mode).
• Cart has been fixed, so rates for custom shipping methods are updated and listed as expected when you change the shipping address: GITHUB-4679.
• Reordering a product with a required custom option (type = file) no longer causes an error when opening the shopping cart: GITHUB-4058.
• A customer is not logged out after clicking the Go to Checkout link and then clicking the Shopping Cart link.
• Discounts have been fixed, so they behave consistently.
• Conditions can be seamlessly saved in Create Cart Price Rules.
• It is possible to log out with the enabled persistent shopping cart functionality.
• Shopping cart shipping estimation has been fixed as well: it no longer fails randomly.
• Downloadable products are now supported by Magento 2, so you can easily create them.
• It is possible to place an order for an item in case its amount exceeds half of item’s stock.
• Maestro credit cards got better conditions: they can pass validation on the app server side.
• Click on a swatch and you will see that product images are switched as expected.
• After canceling an order with the Worldpay payment method, quotes are no longer lost.
• Catalog Price Rules are applied as expected.
• The Customer Address tab was also improved. Now, it works as it should.
• The same is about the Force Sign-in button.
• Shipping_discount_amount is converted to different currencies: GITHUB-2708.

Product

• Downloadable products are not only supported, but no longer shown as out of stock on category pages.
• Product assigned to more than one website can be saved.
• Loading directories that contain products with Swatches perform better.
• Simple products support a new row that can be added to a Custom Option of Input Type.
• The creation of a configurable product no longer duplicates URL keys.
• It is possible to reset a Product Attributes mass update Admin form.
• Creating a simple product, you can add custom options. It is possible to save a product after applying an update.
• The system allows you to configure a product whose last attribute has a price of zero: GITHUB-3912.
• It is possible to left optional dropdown product attributes blank.
• Configurable products can be viewed when using sample data.
• All product attributes are available in layered navigation.
• Entries in the Product Reviews report can be filtered by date.
• An existing variation of a configurable product can be updated.
• An issue with incorrect or missing scope labels has been fixed (it appeared on the Product Creation/Editing page).
• Unexpected calls are no longer made while viewing a product in the storefront.
• Correct product prices are displayed on the Configurable product page when catalog prices include tax: GITHUB-2471.
• Products > Catalog “Change status” problems were fixed: GITHUB-1559.

Search

• Search performance has been improved.
• Using fewer than the minimal required characters in a search query no longer leads to a fatal error.
• Search input on themes via the Blank theme works as it should: GITHUB-4282.
• Synonyms have been also improved: GITHUB-2519.

Checkout

• Several address-related issues have been fixed.
• Customers save their address as well as add a new address during checkout.
• Reorder and Go to Checkout buttons work as expected.
• Checkout also works as expected if you purchase products during a persisted session.
• Unnecessary redirects to checkout page after Sign-in have been eliminated.
• Information about the country selected in the address in the checkout flow is now provided.
• Custom customer attributes are saved.
• The JavaScript error that occurred when switching between addresses that either contain or don’t contain Region data has been fixed.
• Loader disappears after clicking the Place Order button.
• An error related to a changed base currency at checkout has been fixed as well.
• Opening My Cart page in one-page checkout no longer causes a problem.
• The Payflow Pro payment method is fully supported.
• The ‘Create an Account’ form also works as it should after checkout has been completed.
• Cart price rules for payment method conditions are now applied.

Upgrades and Installation

• The contents of the Magento var/session directory are now ignored by system upgrades.
• Magento CLI commands can be run without a composer.json file.
• A non-default MySQL listen port can be successfully utilized for Magento upgrades: GITHUB-4548, 2735, 4275, 3529.
• No data is lost during the upgrade: GITHUB-4054, 3951, 3097, 3249.
• Upgrade correctly updates the product version.
• Upgrading to Magento 2.0.4 no longer causes issues: GITHUB-3951.
• Better installation performance due to compressed packages on repo.magento.com.
• Web Setup Wizard can not be run by a user with limited access to the admin.
• An exception is no longer thrown after installing optional sample data.
• The Magento_CustomerBalanceSampleData module can be successfully installed.
• The Component Manager has been also improved. Now, it displays component versions compatible with the version of your Magento software.
• The Magento software can be successfully uninstalled after an incomplete installation.
• Optional sample data installation issues are fixed.
• Integration tests can be run on Microsoft Windows without previous issues.
• The magento setup:di:compile command was also improved: GITHUB-3824.
• You can manually unselect the DownloadableStaging during installation. This no longer throws a fatal error.
• It is possible to install Magento via a setup URL with a port number: GITHUB-2272.
• Hyphens and dashes are accepted by the Magento CLI setup:config:set : GITHUB-2700. Running it no longer deletes values in addition to running an update: GITHUB-2852.
• Problems with Magento Community Edition 2.0.4 with Sample Data.tar.bz2 were fixed. This 204 MB download now works: GITHUB-4090.
• NGINX configuration does not require the MAGE_MODE environment variable as a mandatory server config variable.
• .gitignore is now a part of the project package: GITHUB-4358.
• All files are now compiled by the setup:di:compile script as expected: GITHUB-2888.
• When defined as optional, attribute ‘setup_version’ is missing for the module error: (GITHUB-1493).

For further information on fixes and updates related to bundle products, import/export, messages and documentation, admin, API, and other areas of Magento 2, check this official release notes: Magento 2.1.0 Release Notes.

As for known issues of the new version, the Cart Price rules are not applied to total amount/item conditions: GITHUB-5025.

Magento 2.0.4 Release Notes

Both Enterprise and Community Editions of Magento 2.0.4 include a lot of security enhancements and performance improvements. Download and install the latest software version to ensure that you receive all security enhancements. Implement the new version in a development environment first. After you will confirm that it works as expected, deploy it to a production store.

Bugs fixed in Magento 2.0.4:

• APPSEC-1263 – server-side cross-site scripting via a user name during customer registration. JavaScript from a user name can be executed in the admin context and steal some precious data.
• APPSEC-1379 – reflected cross-site scripting in the Authorize.net module which has several parameters vulnerable to reflected XSS attacks.
• APPSEC-1337 – arbitrary PHP code execution via language packs. If a user installs a malicious language package, an attacker gets extra access to a store.
• APPSEC-1377 – password guesses are not limited in admin and customer token APIs providing an opportunity for brute force attempts to guess passwords.
• APPSEC-1378 – Web API allows anonymous users to access data about products, promotions, and storefronts.
• APPSEC-1303 – encryption keys generated on the Manage Encryption Key page are very weak.

Magento 2.0.1 Release Notes

Bugs fixed in Magento 2.0.1:

• A problem with sample data deployment after running “composer create-project” has been fixed.
• An issue with reviews has been fixed: no longer someone can edit someone else’s reviews.
• The same is about orders: no longer someone can vies someone else’s order details.
• Price rule is now applied to a product created via Web API.
• An empty file is no longer uploaded to custom option.
• Minicart now clears after completing an order with PayPal.
• The problem of plugin incorrect calls is fixed as well.
• Travis CI builds do not fail anymore (due to authentication).
• Custom options related to configurable products are calculated correctly.
• In 2.0.1 everything is ok with modifying a category if you use on store view level.
• URL rewrites now work correctly for sample data.
• The problem of BaseURL in static files is also solved.
• UI Form Component supports a customer’s custom attribute of ‘file’ type.
• bin/magento setup:upgrade clears cache properly.
• And you can freely run category creation from product page with Google Chrome Experiments enabled.
• Information related to the country selected in address is now available in checkout flow.
• Customer segments no longer prevent page from caching.
• And there are no any problems with multi-store implementations related to an imported product with replace behaviour.
• Everything is also ok with url_key validation during import.
• “Learn More” link for Payments Pro leads to the correct source now.
• A JS error does not appear anymore if loading a product grid right after clearing static files and cache.

GitHub requests:

• #2519 – synonyms now work with Magento 2.0.
• #2675 – admin order creation now worcs correctly when config include Tax In Order Total.
• #2471 – the problem of incorrect prices which appeared on configurable product page if catalog prices included tax is now fixed.
• #2674 – plugins/interceptors now work with early stage single instance objects.
• #2888 – all files are pre-compiled.

Various Improvements introduced in Magento 2.0.1:

• Сustomer edit form now works with normal performance.
• The same is about swatch module.
• A few security-related problems are solved.
• The latest USPS API is supported.
• The same is about PHP 7.0.2

Magento Community Edition 2.0

Magento 2 Community Edition is finally available. The next-generation commerce platform offers the following features and improvements:

Magento 2 Release Notes: Architectural Innovations

1. The tech stack of Magento 2 Community edition is based on PHP frameworks and efficient coding patterns.

2. With a modular code base structure, the platform offers fine-grain customizations as well as the ability to easily add new or replace available features.

3. Service contracts also introduce a major architectural innovation. The new feature provide stable interfaces that ensure seamless upgrades and simplify various code customizations.

4. As for theming and layout framework, they provide the ability to rapidly change the way your Magento 2 website looks like for the needs of seasonal campaigns, market expansions, or product presentations.

5. There are also new extensive and more efficient APIs for promotions and taxes. As for the old ones, they were revamped for better integration with third party solutions.

6. And due to automated testing, the system offers essentially enhanced code quality and accelerated QA process. Consequently, Magento 2 shows much faster time to market than its predecessor.

7. As for new quarterly releases, merchants can easily implement them adding new functionality to a store.

Magento 2 Release Notes: Performance

1. In Magento Community Edition 2.0 page load time has been increased significantly due to several client-side optimizations. For instance, optimized work with JavaScript: the system minimizes and bundles the code; compressed images; or improving static content browser caching.

2. As for server-side improvements, they include integrated Apache Varnish caching with minimal tuning, which leads to much faster performance.

Magento 2 Release Notes: Scalability

1. Key subsystems for such processes as order management, checkout, or product management now has standalone databases. Combined with the MySQL Cluster support, they enable marvelous scalability.

2. And after serious backend improvements, Magento 2 enable larger teams to update product, process orders, and perform other tasks simultaneously without reduced performance.

Magento 2 Release Notes: Admin and Business Tools

1. Magento 2 offers a new intuitive admin interface, which provides the ability not only to manage daily tasks, but to monitor business performance. And it is touch-friendly now!

2. Besides, everyone can customize and save various Admin panel views. This feature not only simplify daily routine tasks of administrators, but essentially reduce time required for managing products, processing orders, or analyzing customer data.

3. There is also a new tool for step-by-step product creation which enables faster operations with products.

4. As for improved product data import capabilities, they speed up the process of sending data up to 4 times.

Magento 2 Release Notes: Marketing Features

1. The checkout is essentially minimized in Magento 2. Now it is much faster, consists of less steps, and requires minimum information. Registered customers are recognized and offered to check out faster.

2. Now, it is possible to create an account from the order Thank You page in just one click.

3. A shopping cart now shows a detailed order summary, including images. Such an improvement encourages shoppers to complete checkout.

4. Magento 2 features out-of-the-box integration with key payment gateways as well as provides the ability to send payment information from the browser to the gateway in order t improve security.

5. The system include such themes as Blank and Luma. They allow merchants to create engaging and SEO-optimized shopping experiences faster.

Check this official documentation to find out both fixed and known issues.

2.0.0-RC2

A plethora of bugs have been fixed in Magento 2.0.0-RC2. Below, you will find a full list of improvements.

1. A problem with video playback on Apple mobile devices (iPad and iPhone) has been fixed.
2. You might have noticed that Admin panel in 2.0.0-RC was not accessible in case when port was used in URL. Now, this no longer an issue.
3. Another useful improvement is related to database name. In the previous release it could not be changed after installation process. The problem has been successfully fixed.
4. In 2.0.0-RC2 it is also possible to save bundle items quantities while working in a wishlist and editing a bundle product. This was impossible in the first RC.
5. As for the PHP issue related to Text Swatch product attribute creation, it has also remained in 2.0.0-RC.
6. Mini Shopping Cart resizing is fixed as well.
7. If you worry about a negative subtotal in a PayPal checkout, it’s time to breathe freely, because the issue has been eliminated.
8. The same is about an inconsistent credit card validation process.
9. You might have noticed that in 2.0.0-RC in the full-screen view the Product Gallery did not completely overlay the bottom layer. Now, it is displayed correctly.
10. Besides, the Product Gallery can be easily opened in the full-screen mode now.
11. The “+” icon is not shown on a video preview hover anymore.
12. And the preview is not visible under a video player.
13. Another improvement is related to swatches. Earlier, the ‘Admin’ field was not required for a new Swatch.
14. It is also necessary to mention that in 2.0.0-RC not all information was transmitted to PayPal. The problem mainly involved shipping and billing country data. Now it is fixed.
15. A configurable products attribute issue has been fixed.
16. Load time of a category page has been improved.
17. The visible area in Admin was revamped. The space outside has been removed.
18. There was an issue with the Magento maintenance mode. The system was stuck in case when a backup was created while disabling modules with the help of Web Setup Wizard
19. Session response in JSON now works correctly.
20. Out of stock product are no longer displayed on the Magento storefront
21. Product import with the replaced behavior has been improved.
22. URL rewrites work as expected.  Earlier, rewrites in catalog categories were wrong after URL key in certain cases.
23. JSON does not replace a normal page anymore when you are trying to delete a category after reset.
24. The product API with “all” store code now functions properly.
25. Another fixed issue is related to the misleading system message on invalid indexers.
26. You might have noticed that a bundle product created via Web API was not visible in 2.0.0-RC. The problem has been fixed now.
27. Now, it is possible to save more than one configuration for every configurable product with a text swatch attribute.
28. And there is a proper ‘why an image could not be deleted’ indication in 2.0.0-RC2
29. Data modification in an export result file has been revamped as well.
30. With the new update, you can forget about the incorrect behavior of the required checkbox.
31. An exception is no longer thrown when you are trying to install Magento after you’ve already uninstalled it.
32. Now, after changing the layout of a CMS page, its design is not replaced with Magento Blank.
33. CMS pages API now works with store code and CMS blocks API works for multiple websites.
34. As for XSS Payload, you can easily save it into Admin Panel and it works correctly in a website’s translation table.
35. You can add a new swatch attribute without any hesitations about errors that previously persisted even after deleting the attribute.
36. PHP notice is also fixed. In 2.0.0-RC it appeared during the creation of a text swatch product attribute.
37. If you’ve tried to export data to CSV, you might have noticed a JS error on credit memo view grid. In RC2 it has been fixed.
38. Now, nobody is redirected to a blank page after canceling the PayPal Express checkout.
39. And it is possible to checkout with the enabled Persistent Shopping Cart as well as complete the Braintree PayPal Checkout with the empty Street line 2.
40. All payment methods introduce valuable information in Magento 2.0.0-RC2.

2.0.0-RC

Below, you will find a complete list of improvements introduced in 2.0.0 Release Candidate

Magento 2 Release Notes 2.0.0-RC: Performance

1. Minimized observer object loading time due to refactored observer classes that satisfy such requirement as single-responsibility.
2. Enhanced performance of both catalog advanced search and catalog quick search.
3. Magento framework micro-optimizations.
4. Better data loading and stores initialization.
5. Optimized mechanism of CSS and JavaScript minification.
6. Improved sales rules.
7. Optimized table rendering and sample data.

Magento 2 Release Notes 2.0.0-RC: Payment methods

1. eWay payment gateway has been revamped. It supports responsive shared page APIs as well as client side encryption.
2. PayPal Express Checkout relies on PayPal best practices.
3. Braintree payment method introduces a new UI .

Magento 2 Release Notes 2.0.0-RC: Checkout

1. The persistence of a shopping cart.
2. Customer’s data on checkout.
3. Improved settings for Terms and Conditions.
4. New error handling and collect totals mechanisms.
5. Checkout credit card now has a new form.

Magento 2 Release Notes 2.0.0-RC: Products

1. Now, it is possible to manage the list of variations via wizard. Alternatively, you can perform this procedure manually.
2. You can also manage the list of variations based on moving attributes.
3. Notifications during such processes as product information management; product template set while saving a product.
4. Mass action update now has the ability to update product data.
5. Each attribute now has the “remove attribute” button.
6. Grouped price has been removed from product creation functionality.
7. Discounts logic relies on the configurable product selected option

Magento 2 Release Notes 2.0.0-RC: CMS

1. Data grids now have controls and a sticky header.
2. Data grid filters offer multiple select.
3. Data grids offers the ability to change the width of a column and supports both inline and bulk inline editing.

Magento 2 Release Notes 2.0.0-RC: WebApi Framework and Framework

1. API calls support store codes.
2. It is possible to update Magento to a particular version, enable/disable modules, and use maintenance mode.
3. Webapi payload processors now have the common interface.
4. The Search API is situated in the Search Framework library instead of the Search module.
5. Observer interface now has improved observer classes.
6. The intl extension is compatible with HHVM.
7. 2.0.0 supports PHP 7.
8. The generation of catalog images is improved.
9. It is possible to use the vendor directory for storing Magento code.
10. URN schema is now supported in configuration files.
11. Input and modification data in pop-ups has been simplified because of a new Model Windows component.
12. In Global JS Widgets Library, there is a gallery widget with MVP functionality.
13. The migration tool is included into Magento CLI.
14. Data grids support inline editing.
15. Data grids mass actions have been updated.
16. Data grids now support export as well as full text search in Admin.
17. The DesignEditor module has been removed with the related code
18. Automated API documentation creation is now possible due to the schema generation of the Swagger REST API.
19. And you can easily generate a page designed to report REST APIs.
20. Webapidoc module provides the ability to create on-the-fly API documentation. The feature is possible for particular Magento instances.
21. Inline translation is supported in Magento UI components.
22. Sales data grid has a new data grid component.
23. And there is a unified database resource connections interface in 2.0.0-RC.
24. The escaped string rendering mechanism.
25. Every Magento JavaScript Component can be extended after it is loaded and before executed.
26. Such attributes as @remove and @display are now added for handling blocks and containers appearance.
27. Purge requests can be send for multiple servers.
28. Deprecated code has been removed from Magento/Framework and modules.
29. A bunch of independent template hints for both admin and storefront are now a part of the ecommerce platform.
30. Magento 2 Release Notes 2.0.0-RC: Setup
31. The Web Installation Wizard was improved in terms of both wording and extensions styles. The Install Components functionality has been added.
32. Besides, it is possible to control such an important parameter as the access to the setup tool.
33. Styles are now updated.
34. Magento 2 Release Notes 2.0.0-RC: Sample Data
35. Sample data installation has been significantly revamped.
36. As for the sample itself, it has been updated with color swatches, Product Heros, MAP, as well as based product relations.
37. Sample data flow has been also updated.
38. While installing sample data, you can easily to log errors as well as set error flags.

Magento 2 Release Notes 2.0.0-RC: Various improvements

1. NewRelic integration.
2. Platinum integration partners now have a dashboard.
3. Downloadable products UI has been improved, so similar experience with other product types is now possible.
4. Responsive and localized email templates.
5. WebApi now offers country list as well as store and currency information.
6. Multi-actions APIs for discount coupon generation and search.
7. Filter components  can be declared inside the datagrid column definition.
8. catalog:image:resize console command.
9. Populating system packages relies on consolidated algorithms during upgrade and other tasks.
10. Different accessibility improvements have been introduced in 2.0.0-RC.
11. Enhanced Tax Rule Management.
12. The default storefront theme is Luma.
13. Grid store selectors have been refactored and introduce better unification.
14. Magento UI Library has been also refactored, so it is possible use the ‘lib-‘ prefix in all library mixins now.
15. As for refactored styles, they provide the ability to reduce log file errors after the execution of static files deployment.
16. Component Manager introduces improved UX.
17. Unit tests have better JS and PHP code coverage in 2.0.0-RC.

1.0.0-beta

Magento 2 Release Notes 1.0.0-beta: Framework

1. 1.0.0-beta introduced a new way the method’s return type is derived while the WSDL generation procedure runs.

2. And it is possible to retrieve a list of endpoints.

Magento 2 Release Notes 1.0.0-beta: Search

1. Enhanced Data Grids from CMS now have a search field.

2. Search Indexer interface was implemented in 1.0.0-beta. The same is about XML declaration.

3. Search module API helps to improve the search functionality.

4. Product attributes have been changed: they have different weight, and this parameter is set by default.

5. Full text index has been implemented per each store.

6. Search API is in the Search module instead of the Catalog.

Magento 2 Release Notes 1.0.0-beta: Various improvements

1. The infrastructure of the payment gateway has been improved.

2. The GoogleShopping module has been removed.

3. Braintree payment gateway integration.

4. Authorize.net is now back in Community Edition

5. Fraud status order processing has been revamped.

6. Checkout sections have data attributes

7. Magento’s Product grid and Sales module are enhanced with a new grid component.

8. An account can be created during or right after the checkout.

9. Coupon code URL works for empty carts.

10. Admin-icons font has new icons.

11. Email markup duplication has been eliminated.

12. Email content management is enhanced with improved footer and header content as well as styles.