DocumentationCommerceTools

Commerce Version Tool release notes

Last update: August 10, 2026

CREATED FOR:

  • Experienced
  • Admin
  • Developer

These release notes describe updates for Commerce Version Tool (CVT).

Support is provided for the latest released. Release notes for older versions are provided for reference.
Updates include:

New New features
Fix Fixes and improvements
Bug Known issues

Version 1.0.2 — August 2026 version-1-0-2

New features

New Composer replace support—Added support for installations that remove core modules through composer replace, with improved patch detection accuracy for those modules.

Version 1.0.0 — June 2026 version-1-0-0

New Updates include:

  • Patch status reporting - Reports which monthly Adobe Commerce security patches are applied, missing, or could not be classified for an Adobe Commerce installation.
  • CVE protection status - Maps patch results to per-CVE protection status values: PROTECTED, VULNERABLE, UNKNOWN, and NOT_APPLICABLE.
  • Multi-component support - Detects installed Adobe Commerce components from composer.lock, including Adobe Commerce business-to-business (B2B), Adobe Commerce Page Builder, Adobe Commerce Inventory, and other components represented in the patch registry file.
  • JSON and CSV output - Provides JSON output by default for programmatic consumption and CSV output for spreadsheets, scanners, dashboards, and compliance tooling.
  • Offline-friendly cache behavior - Caches the patch registry file locally after each successful fetch. If the remote registry is unavailable, the CVT tool can use the cached registry with a warning.
  • Bundled delivery - Ships inside monthly Adobe Commerce security patch files. Applying the patch installs CVT at vendor/bin/patch-status with no separate installation step.
recommendation-more-help
commerce-operations-help-tools