Additional security enhancements

Security improvements for this release improve compliance with the latest security best practices, including:

  • Gaps in Admin action logs have been addressed with more specific auditing of actions within grid views, mass actions, and exports.

  • reCAPTCHA validation no longer fails during checkout when unexpected errors occur during payment processing. GitHub-35093

  • New system configuration for requiring email confirmation when an admin user changes their email. To reduce site vulnerability, a new system configuration setting (disabled by default) was added to require email confirmation when an admin user changes their email: Stores > Settings:Configuration > Customers > Customer Configuration > Account Information Options > Require email confirmation if an email has been changed. When this option is enabled, the application will request email confirmation every time the admin user changes their email address. The following module is affected by this change: Magento_Customer.

Platform enhancements

Magento Open Source 2.4.6 introduces support for PHP 8.2. PHP 8.1 remains fully supported.

PHP 7.4 support has been removed from this release. You cannot run Magento Open Source 2.4.6 on PHP 7.4.

Magento Open Source now supports:

  • Composer 2.2.x. Composer 1.x has been removed.

  • Redis 7.0.x. Although compatibility with Redis 6.2 remains, we recommend deploying this release with Redis 7.0.x because Redis 6.2 is expected to reach end of life in 2024.

  • OpenSearch is now supported as the default search engine for Magento Open Source on-premises and cloud deployments. It is supported as an independent search engine for Magento Open Source. This release supports OpenSearch v2.x and has been tested with OpenSearch 2.5. Although compatibility with OpenSearch 1.x remains, we recommend using this release with OpenSearch 2.x. You can install and run Magento Open Source and Magento Open Source 2.4.6 with OpenSearch 2.x on both Cloud and on-premises Search engine prerequisites.

  • Elasticsearch 8.x. See Upgrade Elasticsearch.

  • MariaDB 10.6 (LTS version). This release is still compatible with MariaDB 10.4, but we recommend upgrading to MariaDB 10.6.

Other upgrades and replacements

  • The DHL schema has been migrated from v6.2 to v10.0.

  • Outdated JavaScript libraries have been updated to their latest versions, and outdated dependencies have been removed. These changes are backward compatible.

  • PHP 7.4 compatibility has been removed from the Commerce and Magento Open Source code bases.

  • Symfony dependencies have been upgraded to the new LTS version. Dependencies include:

    • friendsofphp/php-cs-fixer
    • symfony/console
    • symfony/event-dispatcher
    • symfony/finder
    • symfony/process
    • web-token/jwt-framework
  • jquery-migrate has been removed from the Commerce and Magento Open Source code bases. GitHub-21406

  • Upgraded jQuery/fileUpload library to v10.32.

  • Zend framework (ZF1) components that have reached end of life have been removed from the codebase. See Backward-incompatible changes highlights.

  • Laminas dependencies have been updated to support PHP 8.2.

  • The laminas/laminas-dependency-plugin Composer plugin has been removed. GitHub-36515

  • Replaced Zend_Filter with laminas/laminas-filter.

  • Upgraded web-token/jwt-framework to v3.0.5. (latest version)

  • Upgraded allure-framework/allure-phpunit to v2.x.

  • Upgraded the Chart-js library to v3.9.1

Accessibility updates

The focus of this release has been on creating a storefront experience on Venia (PWA) that is more perceivable, operable, understandable, and robust. These enhancements include:

  • The visual text label for the Sign in button now matches its accessible name. (Best practice recommends that a UI element’s accessible name starts with the visible label text.)
  • Descriptive accessible names have been added to buttons throughout the storefront.
  • Verbal descriptive labels have been added to the Has Video checkboxes in search filters.
  • Keyboard-only users can now access all page functionality on the storefront. Previously, shoppers could not access sub-navigation links using only keystrokes.

Adobe Commerce integration with Adobe IMS

The following Adobe IMS modules have been decoupled from the Adobe Commerce and Magento Open Source core code and are now packaged as a separate metapackage:

  • adobe-ims
  • adobe-ims-api
  • admin-adobe-ims

The new adobe-ims-metapackage v2.2.0 is bundled with Adobe Commerce 2.4.6 and Magento Open Source 2.4.6. No functionality has changed in this release.

Braintree

  • The Pay Later button and banners (messages) for Italy and Spain have been enabled for Braintree.
  • PayLater messaging with PayPal Vault has been enabled.
  • Added Fraud Protection and ACH web hooks. The Fraud Protection web hook is triggered when a risk decision has been made in Braintree. The ACH web hook is triggered when the status of an ACH payment is updated to settled or settlement decline.
  • Added LPM (Local Payment Methods) web hook.

GraphQL

GraphQL performance enhancements include:

Improved response time when querying categories with category permissions enabled. Response times have improved when querying products in categories for which category permissions are enabled and that contain many customer groups or shared catalogs. Code changes that support this performance improvement include:

  • GraphQL resolver operation has been optimized.
  • The data provider no longer re-sets runtime-cached data for every new product being processed, which has improved performance.
  • Product permission processing has been optimized in the GraphQL resolver. Product permissions are now applied to product collections instead now on a per-product basis.
  • Optimized permissions read in shared catalogs in the addProductsToCart mutation.
  • Product permissions have been optimized with product inline fragments.

Optimized performance of category tree rendering. The categoryList query has been optimized to support customers with a large number of categories. Merchants using this query to search more than 1500 categories with up to five levels of nested subcategories will notice a performance improvement. The loading of category children by refactoring code has been improved by removing unnecessary method calls, improving caching of the category tree, and loading category data recursively. Code changes that support this performance improvement include:

  • Custom attributes metadata fetching for category models has been improved.
  • Category ID fetching has been improved, and getChildren calls have been reduced.
  • Category children loading has been improved.

Reduced bulk cart operations query response times. The add product mutations have been optimized to improve query performance when adding up to 500 simple and configurable products. Bundle products are not affected. The optimized mutations include addProductsToCart, addConfigurableProductsToCart, addDownloadableProductsToCart, addSimpleProductsToCart, addVirtualProductsToCart,addWishlistItemsToCart, and updateCartItems.

customer query now supports order sorting. The orders output object of the customer query now contains a sort field. You can now sort orders by order number or creation date and in ascending or descending order.

New mutations:

deleteCustomer

Page Builder

Page Builder v.1.7.3 is compatible with Magento Open Source 2.4.6.

PWA Studio

PWA Studio v.13.0.x is compatible with Magento Open Source 2.4.6. It includes multiple enhancements to improve accessibility. For information about bug fixes, see PWA Studio releases. See Version compatibility for a list of PWA Studio versions and their compatible Adobe Commerce core versions.

Known issue

Issue: New Relic is not currently compatible with PHP 8.2. Deployments running New Relic can run Adobe Commerce 2.4.6 on PHP 8.1 but not PHP 8.2. Workaround: Run Adobe Commerce 2.4.6 on PHP 8.1 until a new version of New Relic is released that supports PHP 8.2. This release is expected Summer 2023.

Fixed issues

We have fixed hundreds of issues in the Magento Open Source 2.4.6 core code.

Installation, upgrade, deployment

  • Static content deployment no longer times out or fails during standard or compact deployments with multiple locales and websites.
  • Compact strategy no longer causes an invalid reference to an external domain when running static content deployment (bin/magento set:static-content:deploy -f --strategy compact).
  • Executing bin/magento setup:di:compile -vvv (or with the -v or -vv options) now returns an informative message on failure. GitHub-35391
  • Magento Open Source no longer throws the following exception when you run the bin/magento setup:upgrade command in a deployment already running the data migration tool: PHP Fatal error: Declaration of Migration\Logger\Logger::addRecord(int $level, string $message, array $context = []): bool must be compatible with Monolog\Logger::addRecord(int $level, string $message, array $context = [], ?Monolog\DateTimeImmutable $datetime = null): bool in /var/www/html/vendor/magento/data-migration-tool/src/Migration/Logger/Logger.php on line 34. GitHub-35604
  • The bin/magento setup:db:status command no longer fails in environments running MySQL 8.0.29. Previously, command output stated erroneously that the declarative schema was outdated. GitHub-35671
  • The composer install command no longer overwrites .gitignore files. GitHub-32888
  • Running bin/magento sampledata:remove to remove sample data after upgrade on Alpine Linux no longer fails with this error: Undefined constant "MagentoHackathon\Composer\Magento\Deploystrategy\GLOB_BRACE. GitHub-36062
  • bin/magento setup:upgrade now executes successfully after first executing composer install --no-dev. GitHub-36351
  • Exceptions and exception stack trace entries are now included in var/log/exception.log. GitHub-36054

Magento Open Source now throws a parameter validation error when you use the command line to set a Redis connection without a password.

Accessibility

  • The Proceed to Checkout, Review Order, and Place Order buttons in the checkout workflow now work as expected with keyboard input.
  • Visual indication of focus on buttons when using TAB or SHIFT + TAB to navigate through page controls now works as expected.

Screen readers

  • The screen reader for the order history page now reads the correct image description.

Screen readers now announce:

  • Total item count found in search results as expected
  • Logged-in user’s name when a user successfully signs in using keyboard controls
  • Product search result page header now reads the correct value for the <title> element
  • Whether input fields are required
  • Correct current state of accordion elements (collapsed and expanded)
  • When page content has been refreshed after the user has clicked the Create an account button

Bundle products

  • Updating bundle product via API for a specific store view now does not override other store views data for the same bundle product. Previously, bundle product option titles were overridden with the first option title for other store views.
  • Bundled products can now be filtered successfully from Admin Catalog > Products when using a Dutch locale. Previously, Magento Open Source displayed this error when you tried to filter on Type: Bundle Product: Something went wrong with processing the default view and we have restored the filter to its original state. GitHub-35704
  • The products grid no longer throws an exception when bundle products have a special price that exceeds 1000. Previously, when you either searched for the product by SKU or navigated to Catalog > Products, Magento Open Source threw this error: Non Numeric value encountered. GitHub-36284)
  • Columns in credit memo and invoice PDFs for orders that contain a mix of bundle and simple products are now rendered correctly. Previously, columns were distorted or misaligned.
  • In GraphQL queries that contain a BundleProduct fragment, the items.options.product object contains data as expected. Previously, the object could be null in some circumstances.
  • Decimal quantities for bundle options are now rendered correctly when Quantity uses decimals is enabled. Previously, only the integer part of the quantity was rendered, not the fractional component. For example, a quantity of 1.5 was rendered as 1.0. GitHub-35964
  • GraphQL product queries now return only bundle product options within the scope of the store being queried.
  • Products that are not assigned to categories but that are product options for bundle or grouped products are now returned in responses when the Allow Category Browsing configuration setting is enabled for the customer sending the query.

Cache

  • Full-page cache is no longer flushed after order fulfillment unless the ordered product is out of stock. Previously, the cache was purged for the category whenever a shipment was created.
  • Data is now cached successfully when the L2 cache is configured and remote data is partially evicted. Previously, after flushing only the data cache without hashes of those data, the new cache was not saved while the data hashes existed.
  • Corrected defects in CatalogUrlResolverIdentity and CmsUrlResolverIdentity that prevented caching. This affected route query caching on multiple requests.

Cart and checkout

  • Shoppers can now add an additional item to their cart when their cart contains the minimum quantity of the simple product.
  • REST API calls to retrieve cart data now return the same grand_total and base_grand_total values when the store currency and base currency are the same. GitHub-34649
  • The exported value of Maximum Qty Allowed in Shopping Cart now matches the default value set in the Admin configuration setting.
  • Magento Open Source now correctly calculates the grand total for refunds of orders with a discount for shipping.
  • Google reCAPTCHA now works as expected for storefront orders. Previously, Magento Open Source displayed these errors when Google ReCAPTCHA was not first selected before a shopper first attempted to place an order: ReCaptcha validation failed, please try again and No such cart with id = ID.
  • CAPTCHA image refresh now honors the Admin configuration setting and is not triggered when the setting is disabled. Previously, the refresh was triggered whenever the payment method changed regardless of whether the setting was enabled or disabled. GitHub-34855
  • Magento Open Source now displays a confirmation popup as expected before redirecting a shopper to the next page when the shopper changes product quantity on the cart page without updating the cart and then tries to navigate to the next page.
  • Shoppers can now decrease a product’s quantity from their cart after it was decreased in the Admin. Previously, Magento Open Source threw the following error when a shopper tried to decrease product quantity: The requested qty is not available. GitHub-35780
  • Magento Open Source no longer throws an error in the JavaScript console when product quantity exceeds the configured maximum during multi-shipping checkout. Instead, Magento Open Source now displays an informative error message. GitHub-36184
  • Item quantity on the shopping cart page is no longer represented as a negative number when a shopper uses the down arrow key on their keyboard to change product quantity. GitHub-36299
  • Shoppers can no longer add to the cart a product from a category that is now disallowed after changing the customer group to which the shopper belongs. Magento Open Source now checks customer group permission access for specific categories when the permission configuration settings have been changed.
  • Customer shopping carts are no longer emptied before Admin order creation, and cart contents are now restored if the order is canceled or abandoned. Items are now removed from the cart only after order creation. Previously, whenever an admin user tried to create an order on the Admin Manage Shopping Cart page, the cart was emptied.
  • The mini cart now displays correct product images after you run bin/magento catalog:image:resize. Previously, all images were replaced by the default product placeholder image. GitHub-35535
  • Checkout can now complete successfully when the shipping address contains an extension attribute. Previously, Magento Open Source threw this error: Object of class Magento\Quote\Api\Data\AddressExtension could not be converted to string. GitHub-34202
  • The addBundleProductsToCart mutation no longer adds products to a quote if a required product option has no value. GitHub-25676
  • Magento Open Source now returns an informative message when an addProductsToCart mutation fails when adding a product to the cart with insufficient permissions.
  • Magento Open Source no longer throws an error on the cart page when Quick Order is used to add a product in a quantity that exceeds available inventory.

Cart price rule

  • Cart price rule free shipping options that are set during rule creation are now applied to orders as expected. Previously, free shipping options applied during rule created were ignored during checkout, and free shipping was not permitted when the rule was applied. GitHub-35013
  • The discount_percent column of the sales_order_item table for a product is now populated as expected with the discount percentage when the item discount quantity is not set or it is greater than or equal to order item quantity. Previously, this column was not populated when a cart price rule was applied to this product.

Catalog

  • The product list widget no longer displays incorrect or cached prices for a logged-in shopper. The price displayed in the home page widget now matches the shopper’s address and is updated when the shopper updates the address. Previously, the browser cache did not update product prices on the home page based on customer group tax rules.
  • The Compare Products list feature now works correctly in a multi-website deployment and is dependent on website.
  • Magento Open Source no longer displays data from the previous page when you reload a product detail page. Previously, when the product detail page was reloaded, data from the first tab was merged with the newly loaded data for a split second.
  • Categories with subcategories can now be expanded in the main menu on mobile devices as expected. Previously, shoppers could not open or expand categories with subcategories in mobile deployments. GitHub-35329
  • Category listings are now updated as expected when a product is assigned to a new website or store. Previously, the product price indexer was not marked as invalid and subsequently re-triggered on a cron run as expected. As a result, the product’s price entry was missing from the price index table and was not displayed on the new store or website.
  • The storefront inventory count is now accurate when the Display Out of Stock Products configuration setting is enabled. GitHub-35899
  • The category page is no longer empty when the Allow All Products Per Page setting is enabled. GitHub-35900
  • The Display Out of Stock Products configuration option now works as expected when enabled. Previously, all products were displayed as out-of-stock on the storefront when this option was enabled on the Admin. GitHub-35898
  • Product sorting by Boolean attributes now works as expected. GitHub-36390
  • Catalog price rule discounts are no longer applied to fixed price custom product options but are applied to only the product’s original price.
  • Catalog price rules now take into account the selected scope and are applied to products only for the websites for which the attribute has an option value that matches the rule. Previously, the rule did not take into account the selected scope in multi-site deployments. GitHub-36049
  • The swatch options color and size attributes are now pre-selected in the product detail page when a shopper modifies the configurable product from the My Cart page. (jQuery 3.x version now supports the swatchRenderer widget name, which is now camel case.) Previously, the swatch option is not pre-selected.
  • Customers are now notified for product price drops when the customer is subscribed to the price drop alert. Previously, price drop notifications were not always sent due to application level caching.
  • Catalog rules that are based on SKUs with the is not one of condition now work as expected.
  • Magento Open Source no longer erroneously assumes that one category is the parent category of another based on category path. Previously, when two categories were adjacent and one category ID starts with another category’s category ID, Adobe Commerce assumed that the categories had the same parent category. GitHub-32464

Configurable products

  • Magento Open Source no longer throws an error when an admin user adds products manually to a configurable product that already has many simple products assigned to it. Previously, Magento Open Source displayed this error: Something went wrong with processing the default view and we have restored the filter to its original state.
  • Shoppers can no longer add configurable products with a salable quantity of 0 to their shopping cart in deployments with back orders disabled. Magento Open Source now indicates that the product is out of stock. GitHub-35319
  • Creating a new product by importing a configurable product with many options from a different store view now results in an exact copy of the first product as expected. Previously, the sort order of the new product’s configurable options was incorrect, and titles were not translated to the new store view’s locale in deployments with multiple store views and locales. GitHub-35200
  • Configurable products with all out-of-stock child products are now displayed as out of stock on the storefront.
  • Configurable product SKUs and product names are now displayed accurately. Previously, name and SKUs were displayed as undefined after you moved an attribute group above the Product Details group on Stores > Attribute set. GitHub-36309

Coupons

  • Validation logic has been added to the Manage Coupon Codes workflow to enforce the coupon code settings when generating coupons. Previously, coupon code generation ignored the Code Length setting when the Coupon Qty value was greater than 2500.
  • Reward points are now added to a customer’s account as expected when a rewards coupon is applied during checkout with the PayPal Express payment method.
  • You can now apply a coupon code during Admin order creation when the cart price rule has weight as a condition. Previously, coupon codes were not set if other fields were not selected for the product. GitHub-36271
  • You can now filter coupon reports by multiple cart price rules. GitHub-36272
  • Custom options are now applied and saved when an admin user presses Enter while configuring a product with custom options. Previously, you were able to select options and add the product to an order, but the options were not saved, and the admin user was prompted to re-select product options. GitHub-35284
  • Coupon codes can now be successfully exported to Excel XML. Previously, the generated file did not contain all selected coupon codes but only as many items as were selected in the items per page selector.GitHub-36073

cron

  • The catalog_index_refresh_price cron job now executes successfully. Previously, Magento Open Source logged this error during cron execution: report.ERROR: Cron Job catalog_index_refresh_price has an error: SQLSTATE[HY093]: Invalid parameter number: number of bound variables does not match number of tokens.

Currency

  • A missing space between custom currency symbols and prices has been added to both storefront and Admin product prices. The appropriate condition and regex expression has been added to allow a custom NBSP in currency symbols. For example, IDRx 105.00 was previously displayed as IDRx105.00.

Email

  • Magento Open Source no longer sends a customer duplicate emails after an order is created from the Admin.
  • Admin order emails are no longer sent when the Email order confirmation setting is disabled. GitHub-36256
  • Image options are no longer displayed as HTML markup in the credit memo, order confirmation, and invoice customer emails (default template) for products with custom options.

Frameworks

  • Admin users can now successfully open the Admin Store > Configuration page when no country in the European Union Countries setting (Stores > Configuration > General > Country options > European Union Countries). Previously, when an admin user tried to open this page, Magento Open Source threw this error: TypeError: explode(): Argument #2 ($string) must be of type string, null given in /var/www/php/folder/vendor/magento/module-config/ViewModel/CountryFilter.php:46. GitHub-35901
  • jquery.cookie dependencies now work as expected with JavaScript dependencies. Previously, you could not use aliases for jquery/jquery.cookie. GitHub-35913
  • The bin/magento i18n:collect-phrases command now includes <title> text in the exported CSV file. GitHub-35462
  • Magento\Framework\Code\Reader\ArgumentsReader::getParentCall() now supports named constructor arguments. You can now call a function by setting the parameters by their name.
  • Errors are now logged as expected in the exception.log file. Previously, although errors were logged in the system.log file, errors were not logged in var/log/exception.log.
  • Merchants now have the ability to specify a custom external SMTP provider. GitHub-26104
  • OAuth integrations can now be re-authorized as expected on deployments running Magento Open Source 2.4.3-p2. Previously, re-authorization failed with this error: The attempt to post data to consumer failed due to an unexpected error. Please try again later. Magento Open Source also attempted to decrypt unencrypted values. GitHub-35313
  • The correct rowId parameter is now passed when the category urlKey is saved for categories that have child categories. Previously, the wrong categoryId was passed when saving the category URLKey.
  • The product attribute code event has been added to the list of reserved product attribute codes, which eliminates errors associated with using an attribute with this name on the storefront. Previously, the application threw this error on the product detail and search/product list pages when event was used: report.CRITICAL: Error: Call to a member function getStatus() on string in /home/mer33515/public_html/ee24develop/magento2ee/app/code/Magento/CatalogEvent/Observer/ApplyIsSalableToProduct.php:23.
  • Storefront validation error messages that occur during order placement are now displayed consistently. Previously, messages appeared, collapsed, then re-appeared. GitHub-35651
  • AMQP consumers no longer fail due to a deprecated trim() function on deployments running PHP 8.1. Previously, when the AMQP consumer started after installation, Magento Open Source threw this error: Deprecated Functionality: trim(): Passing null to parameter #1 ($string) of type string is deprecated in .../vendor/magento/framework-amqp/Config.php on line 143. GitHub-35380
  • The getFilteredTimerIds method now works as expected. Class Magento\Framework\Profiler\Driver\Standard\Stat is now compatible with PHP 8.1. Previously, Magento Open Source threw an exception when this method was called. GitHub-35307
  • Removed dependency on the imagemin-svgo library.
  • The minifying template process now successfully processes consecutive comments when the first comment begins with //. GitHub-34880
  • Corrected a database query issued by the BundleGraphQl module that returned this error: "debugMessage": "Notice: Undefined offset: 16 in vendor/magento/module-bundle-graph-ql/Model/Resolver/Options/Collection.php on line 130".GitHub-34991

General fixes

  • Magento Open Source now displays an accurate time range when an admin user selects the Last 24 Hours option from the Admin statistics dashboard. Previously, Magento Open Source displayed an incorrect time range. This occurred because the timezone of the database remained unchanged.
  • Credit memos can now be generated for both integer and decimal quantities. Previously, only integer quantities were supported.
  • The Customer Zip Code input validation rule for type numeric only now works as expected in the Edit Customer Address field (Store > Attribute > Customer Address). Previously, customer address information was saved without zip code validation.
  • Globally shared customer accounts now have addresses that are validated against the list of allowed countries for the current website and saved successfully. Previously, these accounts were incorrectly validated against the allowed countries of the website where customer was registered.
  • Breadcrumbs from the CMS page hierarchy are no longer displayed when Enable Hierarchy Functionality is disabled. Previously, breadcrumbs were displayed, and when shoppers clicked on them, a 404 page was displayed. GitHub-35513
  • Removing a product from all websites via the Admin no longer causes the following error: SQLSTATE[42000]: Syntax error or access violation. GitHub-35133
  • Customers who exceed the maximum login failed attempts can now log in after password reset. GitHub-34981
  • The dynamic rows component now behaves as expected when an admin user adds a new element. Previously, the row component behaved incorrectly when a new simple product was added to a grouped product. GitHub-34850
  • Corrected typos and incorrect grammar in the app/code/Magento/Backend/etc/menu.xsd file.
  • The app/code/Magento/Authorization/README.md file has been updated to accurately describe table creation.
  • The recordLogin method has been updated to set login values on the user model as well as preserving the correct values in the logdate and lognum fields of the admin_user table. Previously, login attempts for updated Admin users were not recorded.
  • GitHub issue templates have been converted to issue forms for developer experience issues and feature requests.
  • The Is required customer attribute is now implemented properly per website scope for the Admin customer edit form.
  • The Grid Filter Condition Type field of customer and customer address attributes is no longer visible on the attribute edit page when the Use in Filter Options setting is disabled.
  • Magento Open Source now displays an informative error message if a merchant fails to enter an optional SKU attribute value when creating a product. Previously, the application threw this exception when the attribute was optional: Deprecated Functionality: trim(): Passing null to parameter #1 ($string) of type string is deprecated in /var/www/html/mg244/project-community-edition/vendor/magento/module-eav/Model/Entity/AbstractEntity.php on line 932. GitHub-35810
  • The Show my quotes filter on the My Quotes page now works as expected. Previously, filter results included other admin users’s quotes.

GraphQL

  • Types that implement multiple Interfaces in GraphQL code can now separated by an & sign as well as , in accordance with the GraphQL @docspecification.
  • The setShippingAddressesOnCart mutation now supports setting numeric region codes as region. Previously, this mutation worked incorrectly for numeric region code values.
  • The products query now returns only reviews associated with the specified scope. Previously, queries returned reviews from all stores.
  • Category permissions are now respected during GraphQL requests.
  • The customer query now filters on orders with a specified from and to range correctly. GitHub-31537
  • The product query now returns correct category data in aggregation. Previously, attribute_code.category_uid returned the value of category_id instead of category_uid.
  • The customerOrders query no longer throws an \"model\" value should be specifiederror. GitHub-35852
  • The customer query now filters orders based on scope. You can now specify whether the query should filter orders by store, website, or globally.
  • The categoryList query now returns an accurate product count for both anchored and unanchored parent categories. The new is_anchor attribute has been added to the category collection selected columns list. Previously, requests returned a 0 product count. GitHub-36300
  • The generateCustomerTokenAsAdmin mutation now works as expected when creating a token to log in to a non-default store in a multi-store deployment. GitHub-35084
  • The createEmptyCart mutation now throws an exception as expected when an expired token is used. GitHub-26112
  • Cart query error messages have been made more informative. GitHub-34546
  • Aggregation data in the response of a products query now includes correct values for price type attribute attribute_code and label. GitHub-28878
  • The products query returns category information as expected when the database prefix has a non-null value. Previously, it returned an Internal server error. GitHub-36117
  • Corrected the return type for the getCustomerIsGuest method. GitHub-29529
  • The Magento\CatalogGraphQl\Plugin\DesignLoader plugin as been refactored.
  • Cart reload is now triggered once only as expected when the cart is initialized by GraphQL mutations. Previously, cart loading triggered unnecessary cart revalidation against stock inventory, which consumed significant resources every time the cart was loaded.
  • Added the gift_message type to the OrderItemInterface. GitHub-29418
  • Product options returned in GraphQL responses now include only the products that are within the catalog to which the user belongs. If the user belongs to a shared catalog, then only products in shared catalogs are returned. If user is a guest or not part of a custom shared catalog, then only products in public catalog are returned.

Google ReCAPTCHA

  • A reCAPTCHA error in the var/log/exception.log file for the Google V3 reCAPTCHA Admin login has been resolved, and no error messages are logged. Previously, the following error was thrown every few seconds when an admin user configured their Configuration > Security > Google reCAPTCHA Admin Panel settings: main.ERROR: Can not resolve reCAPTCHA parameter. {"exception":"[object] (Magento\Framework\Exception\InputException(code: 0): Can not resolve reCAPTCHA parameter. at /home/xxxxxxx/public_html/vendor/magento/module-re-captcha-ui/Model/CaptchaResponseResolver.php:25)"} []. GitHub-34975

Image

  • Updated the recommendations on the logo size for PDF Invoice slip.

Import/export

  • Importing a product with the same numeric URL key as an existing product but without its terminal alphabetical character no longer causes a validation error when the Product URL Suffix is set to empty in the Admin.
  • The bin/magento app:config:importcommand now successfully imports the contents of a config.php file when it contains certain cron expressions. Previously, import failed with this error: Import failed: Notice: Trying to access array offset on value of type null in [..]/vendor/magento/module-config/Model/Config/Backend/Currency/Cron.php on line 66. GitHub-31428
  • Full export now works correctly when AWS S3 is used as remote storage. Previously, export failed due to the uploaded file size.
  • Product status is now imported correctly when inventory data columns in the CSV file are missing. Previously, after product import, default source was automatically assigned to the product, its quantity was set to zero, and its status was listed as out of stock when inventory data columns in the CSV file were missing.
  • Importing advance pricing values now provides the correct count for new and updated records when the import includes more than 100 records. Previously, the import success message provided the wrong count.
  • Exported CSV files now contain correct paths to category names that are saved in multiple languages. A store ID has been added for category collection. Previously, the exported files contained mixed paths with different languages instead of a category path derived from the default store view.
  • Updating custom options for a product in a specific store view via import now completes successfully. Previously, an internal server error was thrown if a product-related rows were split into multiple batches.
  • The Fixer.io import service now works as expected. Currency rates are now imported successfully. GitHub-36010