Additional security enhancements
Security improvements for this release improve compliance with the latest security best practices, including:
-
Gaps in Admin action logs have been addressed with more specific auditing of actions within grid views, mass actions, and exports.
-
reCAPTCHA validation no longer fails during checkout when unexpected errors occur during payment processing. GitHub-35093
-
New system configuration for requiring email confirmation when an admin user changes their email. To reduce site vulnerability, a new system configuration setting (disabled by default) was added to require email confirmation when an admin user changes their email: Stores > Settings:Configuration > Customers > Customer Configuration > Account Information Options > Require email confirmation if an email has been changed. When this option is enabled, the application will request email confirmation every time the admin user changes their email address. The following module is affected by this change:
Magento_Customer
.
Platform enhancements
Magento Open Source 2.4.6 introduces support for PHP 8.2. PHP 8.1 remains fully supported.
PHP 7.4 support has been removed from this release. You cannot run Magento Open Source 2.4.6 on PHP 7.4.
Magento Open Source now supports:
-
Composer 2.2.x. Composer 1.x has been removed.
-
Redis 7.0.x. Although compatibility with Redis 6.2 remains, we recommend deploying this release with Redis 7.0.x because Redis 6.2 is expected to reach end of life in 2024.
-
OpenSearch is now supported as the default search engine for Magento Open Source on-premises and cloud deployments. It is supported as an independent search engine for Magento Open Source. This release supports OpenSearch v2.x and has been tested with OpenSearch 2.5. Although compatibility with OpenSearch 1.x remains, we recommend using this release with OpenSearch 2.x. You can install and run Magento Open Source and Magento Open Source 2.4.6 with OpenSearch 2.x on both Cloud and on-premises Search engine prerequisites.
-
Elasticsearch 8.x. See Upgrade Elasticsearch.
-
MariaDB 10.6 (LTS version). This release is still compatible with MariaDB 10.4, but we recommend upgrading to MariaDB 10.6.
Other upgrades and replacements
-
The DHL schema has been migrated from v6.2 to v10.0.
-
Outdated JavaScript libraries have been updated to their latest versions, and outdated dependencies have been removed. These changes are backward compatible.
-
PHP 7.4 compatibility has been removed from the Commerce and Magento Open Source code bases.
-
Symfony dependencies have been upgraded to the new LTS version. Dependencies include:
friendsofphp/php-cs-fixer
symfony/console
symfony/event-dispatcher
symfony/finder
symfony/process
web-token/jwt-framework
-
jquery-migrate
has been removed from the Commerce and Magento Open Source code bases. GitHub-21406 -
Upgraded
jQuery/fileUpload
library to v10.32. -
Zend framework (ZF1) components that have reached end of life have been removed from the codebase. See Backward-incompatible changes highlights.
-
Laminas dependencies have been updated to support PHP 8.2.
-
The
laminas/laminas-dependency-plugin
Composer plugin has been removed. GitHub-36515 -
Replaced
Zend_Filter
withlaminas/laminas-filter
. -
Upgraded
web-token/jwt-framework
to v3.0.5. (latest version) -
Upgraded
allure-framework/allure-phpunit
to v2.x. -
Upgraded the
Chart-js
library to v3.9.1
Accessibility updates
The focus of this release has been on creating a storefront experience on Venia (PWA) that is more perceivable, operable, understandable, and robust. These enhancements include:
- The visual text label for the Sign in button now matches its accessible name. (Best practice recommends that a UI element’s accessible name starts with the visible label text.)
- Descriptive accessible names have been added to buttons throughout the storefront.
- Verbal descriptive labels have been added to the Has Video checkboxes in search filters.
- Keyboard-only users can now access all page functionality on the storefront. Previously, shoppers could not access sub-navigation links using only keystrokes.
Adobe Commerce integration with Adobe IMS
The following Adobe IMS modules have been decoupled from the Adobe Commerce and Magento Open Source core code and are now packaged as a separate metapackage:
adobe-ims
adobe-ims-api
admin-adobe-ims
The new adobe-ims-metapackage
v2.2.0 is bundled with Adobe Commerce 2.4.6 and Magento Open Source 2.4.6. No functionality has changed in this release.
Braintree
- The Pay Later button and banners (messages) for Italy and Spain have been enabled for Braintree.
- PayLater messaging with PayPal Vault has been enabled.
- Added Fraud Protection and ACH web hooks. The Fraud Protection web hook is triggered when a risk decision has been made in Braintree. The ACH web hook is triggered when the status of an ACH payment is updated to
settled
orsettlement decline
.
- Added LPM (Local Payment Methods) web hook.
GraphQL
GraphQL performance enhancements include:
Improved response time when querying categories with category permissions enabled. Response times have improved when querying products in categories for which category permissions are enabled and that contain many customer groups or shared catalogs. Code changes that support this performance improvement include:
- GraphQL resolver operation has been optimized.
- The data provider no longer re-sets runtime-cached data for every new product being processed, which has improved performance.
- Product permission processing has been optimized in the GraphQL resolver. Product permissions are now applied to product collections instead now on a per-product basis.
- Optimized permissions read in shared catalogs in the
addProductsToCart
mutation. - Product permissions have been optimized with product inline fragments.
Optimized performance of category tree rendering. The categoryList
query has been optimized to support customers with a large number of categories. Merchants using this query to search more than 1500 categories with up to five levels of nested subcategories will notice a performance improvement. The loading of category children by refactoring code has been improved by removing unnecessary method calls, improving caching of the category tree, and loading category data recursively. Code changes that support this performance improvement include:
- Custom attributes metadata fetching for category models has been improved.
- Category ID fetching has been improved, and
getChildren
calls have been reduced. - Category children loading has been improved.
Reduced bulk cart operations query response times. The add product mutations have been optimized to improve query performance when adding up to 500 simple and configurable products. Bundle products are not affected. The optimized mutations include addProductsToCart
, addConfigurableProductsToCart
, addDownloadableProductsToCart
, addSimpleProductsToCart
, addVirtualProductsToCart
,addWishlistItemsToCart
, and updateCartItems
.
customer query now supports order sorting. The orders
output object of the customer
query now contains a sort field. You can now sort orders by order number or creation date and in ascending or descending order.
New mutations:
deleteCustomer
Page Builder
Page Builder v.1.7.3 is compatible with Magento Open Source 2.4.6.
PWA Studio
PWA Studio v.13.0.x is compatible with Magento Open Source 2.4.6. It includes multiple enhancements to improve accessibility. For information about bug fixes, see PWA Studio releases. See Version compatibility for a list of PWA Studio versions and their compatible Adobe Commerce core versions.
Known issue
Issue: New Relic is not currently compatible with PHP 8.2. Deployments running New Relic can run Adobe Commerce 2.4.6 on PHP 8.1 but not PHP 8.2. Workaround: Run Adobe Commerce 2.4.6 on PHP 8.1 until a new version of New Relic is released that supports PHP 8.2. This release is expected Summer 2023.
Fixed issues
We have fixed hundreds of issues in the Magento Open Source 2.4.6 core code.
Installation, upgrade, deployment
- Static content deployment no longer times out or fails during standard or compact deployments with multiple locales and websites.
- Compact strategy no longer causes an invalid reference to an external domain when running static content deployment (
bin/magento set:static-content:deploy -f --strategy compact
).
- Executing
bin/magento setup:di:compile -vvv
(or with the-v
or-vv
options) now returns an informative message on failure. GitHub-35391
- Magento Open Source no longer throws the following exception when you run the
bin/magento setup:upgrade
command in a deployment already running the data migration tool:PHP Fatal error: Declaration of Migration\Logger\Logger::addRecord(int $level, string $message, array $context = []): bool must be compatible with Monolog\Logger::addRecord(int $level, string $message, array $context = [], ?Monolog\DateTimeImmutable $datetime = null): bool in /var/www/html/vendor/magento/data-migration-tool/src/Migration/Logger/Logger.php on line 34
. GitHub-35604
- The
bin/magento setup:db:status
command no longer fails in environments running MySQL 8.0.29. Previously, command output stated erroneously that the declarative schema was outdated. GitHub-35671
- The
composer install
command no longer overwrites.gitignore
files. GitHub-32888
- Running
bin/magento sampledata:remove
to remove sample data after upgrade on Alpine Linux no longer fails with this error:Undefined constant "MagentoHackathon\Composer\Magento\Deploystrategy\GLOB_BRACE
. GitHub-36062
bin/magento setup:upgrade
now executes successfully after first executingcomposer install --no-dev
. GitHub-36351
- Exceptions and exception stack trace entries are now included in
var/log/exception.log
. GitHub-36054
Magento Open Source now throws a parameter validation error when you use the command line to set a Redis connection without a password.
Accessibility
- The Proceed to Checkout, Review Order, and Place Order buttons in the checkout workflow now work as expected with keyboard input.
- Visual indication of focus on buttons when using TAB or SHIFT + TAB to navigate through page controls now works as expected.
Screen readers
- The screen reader for the order history page now reads the correct image description.
Screen readers now announce:
- Total item count found in search results as expected
- Logged-in user’s name when a user successfully signs in using keyboard controls
- Product search result page header now reads the correct value for the
<title>
element - Whether input fields are required
- Correct current state of accordion elements (collapsed and expanded)
- When page content has been refreshed after the user has clicked the Create an account button
Bundle products
- Updating bundle product via API for a specific store view now does not override other store views data for the same bundle product. Previously, bundle product option titles were overridden with the first option title for other store views.
- Bundled products can now be filtered successfully from Admin Catalog > Products when using a Dutch locale. Previously, Magento Open Source displayed this error when you tried to filter on
Type: Bundle Product
:Something went wrong with processing the default view and we have restored the filter to its original state
. GitHub-35704
- The products grid no longer throws an exception when bundle products have a special price that exceeds 1000. Previously, when you either searched for the product by SKU or navigated to Catalog > Products, Magento Open Source threw this error:
Non Numeric value encountered
. GitHub-36284)
- Columns in credit memo and invoice PDFs for orders that contain a mix of bundle and simple products are now rendered correctly. Previously, columns were distorted or misaligned.
- In GraphQL queries that contain a
BundleProduct
fragment, theitems.options.product
object contains data as expected. Previously, the object could be null in some circumstances.
- Decimal quantities for bundle options are now rendered correctly when Quantity uses decimals is enabled. Previously, only the integer part of the quantity was rendered, not the fractional component. For example, a quantity of 1.5 was rendered as 1.0. GitHub-35964
- GraphQL product queries now return only bundle product options within the scope of the store being queried.
- Products that are not assigned to categories but that are product options for bundle or grouped products are now returned in responses when the Allow Category Browsing configuration setting is enabled for the customer sending the query.
Cache
- Full-page cache is no longer flushed after order fulfillment unless the ordered product is out of stock. Previously, the cache was purged for the category whenever a shipment was created.
- Data is now cached successfully when the L2 cache is configured and remote data is partially evicted. Previously, after flushing only the data cache without hashes of those data, the new cache was not saved while the data hashes existed.
- Corrected defects in
CatalogUrlResolverIdentity
andCmsUrlResolverIdentity
that prevented caching. This affected route query caching on multiple requests.
Cart and checkout
- Shoppers can now add an additional item to their cart when their cart contains the minimum quantity of the simple product.
- REST API calls to retrieve cart data now return the same
grand_total
andbase_grand_total
values when the store currency and base currency are the same. GitHub-34649
- The exported value of Maximum Qty Allowed in Shopping Cart now matches the default value set in the Admin configuration setting.
- Magento Open Source now correctly calculates the grand total for refunds of orders with a discount for shipping.
- Google reCAPTCHA now works as expected for storefront orders. Previously, Magento Open Source displayed these errors when Google ReCAPTCHA was not first selected before a shopper first attempted to place an order:
ReCaptcha validation failed, please try again
andNo such cart with id = ID
.
- CAPTCHA image refresh now honors the Admin configuration setting and is not triggered when the setting is disabled. Previously, the refresh was triggered whenever the payment method changed regardless of whether the setting was enabled or disabled. GitHub-34855
- Magento Open Source now displays a confirmation popup as expected before redirecting a shopper to the next page when the shopper changes product quantity on the cart page without updating the cart and then tries to navigate to the next page.
- Shoppers can now decrease a product’s quantity from their cart after it was decreased in the Admin. Previously, Magento Open Source threw the following error when a shopper tried to decrease product quantity:
The requested qty is not available
. GitHub-35780
- Magento Open Source no longer throws an error in the JavaScript console when product quantity exceeds the configured maximum during multi-shipping checkout. Instead, Magento Open Source now displays an informative error message. GitHub-36184
- Item quantity on the shopping cart page is no longer represented as a negative number when a shopper uses the down arrow key on their keyboard to change product quantity. GitHub-36299
- Shoppers can no longer add to the cart a product from a category that is now disallowed after changing the customer group to which the shopper belongs. Magento Open Source now checks customer group permission access for specific categories when the permission configuration settings have been changed.
- Customer shopping carts are no longer emptied before Admin order creation, and cart contents are now restored if the order is canceled or abandoned. Items are now removed from the cart only after order creation. Previously, whenever an admin user tried to create an order on the Admin Manage Shopping Cart page, the cart was emptied.
- The mini cart now displays correct product images after you run
bin/magento catalog:image:resize
. Previously, all images were replaced by the default product placeholder image. GitHub-35535
- Checkout can now complete successfully when the shipping address contains an extension attribute. Previously, Magento Open Source threw this error:
Object of class Magento\Quote\Api\Data\AddressExtension could not be converted to string
. GitHub-34202
- The
addBundleProductsToCart
mutation no longer adds products to a quote if a required product option has no value. GitHub-25676
- Magento Open Source now returns an informative message when an
addProductsToCart
mutation fails when adding a product to the cart with insufficient permissions.
- Magento Open Source no longer throws an error on the cart page when Quick Order is used to add a product in a quantity that exceeds available inventory.
Cart price rule
- Cart price rule free shipping options that are set during rule creation are now applied to orders as expected. Previously, free shipping options applied during rule created were ignored during checkout, and free shipping was not permitted when the rule was applied. GitHub-35013
- The
discount_percent
column of thesales_order_item
table for a product is now populated as expected with the discount percentage when the item discount quantity is not set or it is greater than or equal to order item quantity. Previously, this column was not populated when a cart price rule was applied to this product.
Catalog
- The product list widget no longer displays incorrect or cached prices for a logged-in shopper. The price displayed in the home page widget now matches the shopper’s address and is updated when the shopper updates the address. Previously, the browser cache did not update product prices on the home page based on customer group tax rules.
- The Compare Products list feature now works correctly in a multi-website deployment and is dependent on website.
- Magento Open Source no longer displays data from the previous page when you reload a product detail page. Previously, when the product detail page was reloaded, data from the first tab was merged with the newly loaded data for a split second.
- Categories with subcategories can now be expanded in the main menu on mobile devices as expected. Previously, shoppers could not open or expand categories with subcategories in mobile deployments. GitHub-35329
- Category listings are now updated as expected when a product is assigned to a new website or store. Previously, the product price indexer was not marked as invalid and subsequently re-triggered on a
cron
run as expected. As a result, the product’s price entry was missing from the price index table and was not displayed on the new store or website.
- The storefront inventory count is now accurate when the Display Out of Stock Products configuration setting is enabled. GitHub-35899
- The category page is no longer empty when the Allow All Products Per Page setting is enabled. GitHub-35900
- The Display Out of Stock Products configuration option now works as expected when enabled. Previously, all products were displayed as out-of-stock on the storefront when this option was enabled on the Admin. GitHub-35898
- Product sorting by Boolean attributes now works as expected. GitHub-36390
- Catalog price rule discounts are no longer applied to fixed price custom product options but are applied to only the product’s original price.
- Catalog price rules now take into account the selected scope and are applied to products only for the websites for which the attribute has an option value that matches the rule. Previously, the rule did not take into account the selected scope in multi-site deployments. GitHub-36049
- The swatch options color and size attributes are now pre-selected in the product detail page when a shopper modifies the configurable product from the My Cart page. (jQuery 3.x version now supports the
swatchRenderer
widget name, which is now camel case.) Previously, the swatch option is not pre-selected.
- Customers are now notified for product price drops when the customer is subscribed to the price drop alert. Previously, price drop notifications were not always sent due to application level caching.
- Catalog rules that are based on SKUs with the is not one of condition now work as expected.
- Magento Open Source no longer erroneously assumes that one category is the parent category of another based on category path. Previously, when two categories were adjacent and one category ID starts with another category’s category ID, Adobe Commerce assumed that the categories had the same parent category. GitHub-32464
Configurable products
- Magento Open Source no longer throws an error when an admin user adds products manually to a configurable product that already has many simple products assigned to it. Previously, Magento Open Source displayed this error:
Something went wrong with processing the default view and we have restored the filter to its original state
.
- Shoppers can no longer add configurable products with a salable quantity of 0 to their shopping cart in deployments with back orders disabled. Magento Open Source now indicates that the product is out of stock. GitHub-35319
- Creating a new product by importing a configurable product with many options from a different store view now results in an exact copy of the first product as expected. Previously, the sort order of the new product’s configurable options was incorrect, and titles were not translated to the new store view’s locale in deployments with multiple store views and locales. GitHub-35200
- Configurable products with all out-of-stock child products are now displayed as out of stock on the storefront.
- Configurable product SKUs and product names are now displayed accurately. Previously, name and SKUs were displayed as undefined after you moved an attribute group above the Product Details group on Stores > Attribute set. GitHub-36309
Coupons
- Validation logic has been added to the Manage Coupon Codes workflow to enforce the coupon code settings when generating coupons. Previously, coupon code generation ignored the Code Length setting when the Coupon Qty value was greater than 2500.
- Reward points are now added to a customer’s account as expected when a rewards coupon is applied during checkout with the PayPal Express payment method.
- You can now apply a coupon code during Admin order creation when the cart price rule has weight as a condition. Previously, coupon codes were not set if other fields were not selected for the product. GitHub-36271
- You can now filter coupon reports by multiple cart price rules. GitHub-36272
- Custom options are now applied and saved when an admin user presses Enter while configuring a product with custom options. Previously, you were able to select options and add the product to an order, but the options were not saved, and the admin user was prompted to re-select product options. GitHub-35284
- Coupon codes can now be successfully exported to Excel XML. Previously, the generated file did not contain all selected coupon codes but only as many items as were selected in the items per page selector.GitHub-36073
cron
- The
catalog_index_refresh_price
cron job now executes successfully. Previously, Magento Open Source logged this error during cron execution:report.ERROR: Cron Job catalog_index_refresh_price has an error: SQLSTATE[HY093]: Invalid parameter number: number of bound variables does not match number of tokens
.
Currency
- A missing space between custom currency symbols and prices has been added to both storefront and Admin product prices. The appropriate condition and regex expression has been added to allow a custom NBSP in currency symbols. For example, IDRx 105.00 was previously displayed as IDRx105.00.
- Magento Open Source no longer sends a customer duplicate emails after an order is created from the Admin.
- Admin order emails are no longer sent when the Email order confirmation setting is disabled. GitHub-36256
- Image options are no longer displayed as HTML markup in the credit memo, order confirmation, and invoice customer emails (default template) for products with custom options.
Frameworks
- Admin users can now successfully open the Admin Store > Configuration page when no country in the European Union Countries setting (Stores > Configuration > General > Country options > European Union Countries). Previously, when an admin user tried to open this page, Magento Open Source threw this error:
TypeError: explode(): Argument #2 ($string) must be of type string, null given in /var/www/php/folder/vendor/magento/module-config/ViewModel/CountryFilter.php:46
. GitHub-35901
jquery.cookie
dependencies now work as expected with JavaScript dependencies. Previously, you could not use aliases forjquery/jquery.cookie
. GitHub-35913
- The
bin/magento i18n:collect-phrases
command now includes<title>
text in the exported CSV file. GitHub-35462
Magento\Framework\Code\Reader\ArgumentsReader::getParentCall()
now supports named constructor arguments. You can now call a function by setting the parameters by their name.
- Errors are now logged as expected in the
exception.log
file. Previously, although errors were logged in thesystem.log
file, errors were not logged invar/log/exception.log
.
- Merchants now have the ability to specify a custom external SMTP provider. GitHub-26104
- OAuth integrations can now be re-authorized as expected on deployments running Magento Open Source 2.4.3-p2. Previously, re-authorization failed with this error:
The attempt to post data to consumer failed due to an unexpected error. Please try again later
. Magento Open Source also attempted to decrypt unencrypted values. GitHub-35313
- The correct
rowId
parameter is now passed when the categoryurlKey
is saved for categories that have child categories. Previously, the wrongcategoryId
was passed when saving the categoryURLKey
.
- The product attribute code
event
has been added to the list of reserved product attribute codes, which eliminates errors associated with using an attribute with this name on the storefront. Previously, the application threw this error on the product detail and search/product list pages whenevent
was used:report.CRITICAL: Error: Call to a member function getStatus() on string in /home/mer33515/public_html/ee24develop/magento2ee/app/code/Magento/CatalogEvent/Observer/ApplyIsSalableToProduct.php:23
.
- Storefront validation error messages that occur during order placement are now displayed consistently. Previously, messages appeared, collapsed, then re-appeared. GitHub-35651
- AMQP consumers no longer fail due to a deprecated
trim()
function on deployments running PHP 8.1. Previously, when the AMQP consumer started after installation, Magento Open Source threw this error:Deprecated Functionality: trim(): Passing null to parameter #1 ($string) of type string is deprecated in .../vendor/magento/framework-amqp/Config.php on line 143
. GitHub-35380
- The
getFilteredTimerIds
method now works as expected. ClassMagento\Framework\Profiler\Driver\Standard\Stat
is now compatible with PHP 8.1. Previously, Magento Open Source threw an exception when this method was called. GitHub-35307
- Removed dependency on the
imagemin-svgo
library.
- The minifying template process now successfully processes consecutive comments when the first comment begins with
//
. GitHub-34880
- Corrected a database query issued by the
BundleGraphQl
module that returned this error:"debugMessage": "Notice: Undefined offset: 16 in vendor/magento/module-bundle-graph-ql/Model/Resolver/Options/Collection.php on line 130"
.GitHub-34991
General fixes
- Magento Open Source now displays an accurate time range when an admin user selects the Last 24 Hours option from the Admin statistics dashboard. Previously, Magento Open Source displayed an incorrect time range. This occurred because the timezone of the database remained unchanged.
- Credit memos can now be generated for both integer and decimal quantities. Previously, only integer quantities were supported.
- The Customer Zip Code input validation rule for type numeric only now works as expected in the Edit Customer Address field (Store > Attribute > Customer Address). Previously, customer address information was saved without zip code validation.
- Globally shared customer accounts now have addresses that are validated against the list of allowed countries for the current website and saved successfully. Previously, these accounts were incorrectly validated against the allowed countries of the website where customer was registered.
- Breadcrumbs from the CMS page hierarchy are no longer displayed when Enable Hierarchy Functionality is disabled. Previously, breadcrumbs were displayed, and when shoppers clicked on them, a 404 page was displayed. GitHub-35513
- Removing a product from all websites via the Admin no longer causes the following error:
SQLSTATE[42000]: Syntax error or access violation
. GitHub-35133
- Customers who exceed the maximum login failed attempts can now log in after password reset. GitHub-34981
- The dynamic rows component now behaves as expected when an admin user adds a new element. Previously, the row component behaved incorrectly when a new simple product was added to a grouped product. GitHub-34850
- Corrected typos and incorrect grammar in the
app/code/Magento/Backend/etc/menu.xsd
file.
- The
app/code/Magento/Authorization/README.md
file has been updated to accurately describe table creation.
- The
recordLogin
method has been updated to set login values on the user model as well as preserving the correct values in thelogdate
andlognum
fields of theadmin_user
table. Previously, login attempts for updated Admin users were not recorded.
- GitHub issue templates have been converted to issue forms for developer experience issues and feature requests.
- The
Is required
customer attribute is now implemented properly per website scope for the Admin customer edit form.
- The Grid Filter Condition Type field of customer and customer address attributes is no longer visible on the attribute edit page when the Use in Filter Options setting is disabled.
- Magento Open Source now displays an informative error message if a merchant fails to enter an optional SKU attribute value when creating a product. Previously, the application threw this exception when the attribute was optional:
Deprecated Functionality: trim(): Passing null to parameter #1 ($string) of type string is deprecated in /var/www/html/mg244/project-community-edition/vendor/magento/module-eav/Model/Entity/AbstractEntity.php on line 932
. GitHub-35810
- The Show my quotes filter on the My Quotes page now works as expected. Previously, filter results included other admin users’s quotes.
GraphQL
Types
that implement multiple Interfaces in GraphQL code can now separated by an&
sign as well as,
in accordance with the GraphQL@doc
specification.
- The
setShippingAddressesOnCart
mutation now supports setting numeric region codes asregion
. Previously, this mutation worked incorrectly for numeric region code values.
- The
products
query now returns only reviews associated with the specified scope. Previously, queries returned reviews from all stores.
- Category permissions are now respected during GraphQL requests.
- The
customer
query now filters on orders with a specifiedfrom
andto
range correctly. GitHub-31537
- The
product
query now returns correct category data in aggregation. Previously,attribute_code.category_uid
returned the value ofcategory_id
instead ofcategory_uid
.
- The
customerOrders
query no longer throws an\"model\" value should be specified
error. GitHub-35852
- The
customer
query now filters orders based on scope. You can now specify whether the query should filter orders by store, website, or globally.
- The
categoryList
query now returns an accurate product count for both anchored and unanchored parent categories. The newis_anchor
attribute has been added to the category collection selected columns list. Previously, requests returned a 0 product count. GitHub-36300
- The
generateCustomerTokenAsAdmin
mutation now works as expected when creating a token to log in to a non-default store in a multi-store deployment. GitHub-35084
- The
createEmptyCart
mutation now throws an exception as expected when an expired token is used. GitHub-26112
- Cart query error messages have been made more informative. GitHub-34546
- Aggregation data in the response of a
products
query now includes correct values for price type attributeattribute_code
andlabel
. GitHub-28878
- The
products
query returns category information as expected when the database prefix has a non-null value. Previously, it returned anInternal server error
. GitHub-36117
- Corrected the return type for the
getCustomerIsGuest
method. GitHub-29529
- The
Magento\CatalogGraphQl\Plugin\DesignLoader
plugin as been refactored.
- Cart reload is now triggered once only as expected when the cart is initialized by GraphQL mutations. Previously, cart loading triggered unnecessary cart revalidation against stock inventory, which consumed significant resources every time the cart was loaded.
- Added the
gift_message
type to theOrderItemInterface
. GitHub-29418
- Product options returned in GraphQL responses now include only the products that are within the catalog to which the user belongs. If the user belongs to a shared catalog, then only products in shared catalogs are returned. If user is a guest or not part of a custom shared catalog, then only products in public catalog are returned.
Google ReCAPTCHA
- A reCAPTCHA error in the
var/log/exception.log
file for the Google V3 reCAPTCHA Admin login has been resolved, and no error messages are logged. Previously, the following error was thrown every few seconds when an admin user configured their Configuration > Security > Google reCAPTCHA Admin Panel settings:main.ERROR: Can not resolve reCAPTCHA parameter. {"exception":"[object] (Magento\Framework\Exception\InputException(code: 0): Can not resolve reCAPTCHA parameter. at /home/xxxxxxx/public_html/vendor/magento/module-re-captcha-ui/Model/CaptchaResponseResolver.php:25)"} []
. GitHub-34975
Image
- Updated the recommendations on the logo size for PDF Invoice slip.
Import/export
- Importing a product with the same numeric URL key as an existing product but without its terminal alphabetical character no longer causes a validation error when the Product URL Suffix is set to empty in the Admin.
- The
bin/magento app:config:import
command now successfully imports the contents of aconfig.php
file when it contains certaincron
expressions. Previously, import failed with this error:Import failed: Notice: Trying to access array offset on value of type null in [..]/vendor/magento/module-config/Model/Config/Backend/Currency/Cron.php on line 66
. GitHub-31428
- Full export now works correctly when AWS S3 is used as remote storage. Previously, export failed due to the uploaded file size.
- Product status is now imported correctly when inventory data columns in the CSV file are missing. Previously, after product import, default source was automatically assigned to the product, its quantity was set to zero, and its status was listed as out of stock when inventory data columns in the CSV file were missing.
- Importing advance pricing values now provides the correct count for new and updated records when the import includes more than 100 records. Previously, the import success message provided the wrong count.
- Exported CSV files now contain correct paths to category names that are saved in multiple languages. A store ID has been added for category collection. Previously, the exported files contained mixed paths with different languages instead of a category path derived from the default store view.
- Updating custom options for a product in a specific store view via import now completes successfully. Previously, an internal server error was thrown if a product-related rows were split into multiple batches.
- The
Fixer.io
import service now works as expected. Currency rates are now imported successfully. GitHub-36010