Saleor 3.21.60 — Release Notes & Engineering Impact
Saleor 3.21.60. Source highlight: Fixed KeyError when resolving channel for channel-agnostic account events (#19253)
733 tracked entries. Older history is imported progressively; see source coverage.
Saleor 3.21.60. Source highlight: Fixed KeyError when resolving channel for channel-agnostic account events (#19253)
Medusa v2.15.5. Source highlight: Multi-Factor Authentication
WooCommerce 10.8.1 is published, but the available notes are too limited to assess upgrade impact. Review the official source before upgrading.
WooCommerce 10.8.0 is published, but the available notes are too limited to assess upgrade impact. Review the official source before upgrading.
Saleor 3.22.51. Source highlight: Upgraded pyjwt to v2.13.0 by @NyanKiyoshi in https://github.com/saleor/saleor/pull/19234 - fixes:
Saleor 3.21.59. Source highlight: Upgraded pyjwt to v2.13.0 by @NyanKiyoshi in https://github.com/saleor/saleor/pull/19235 - fixes:
Saleor 3.23.7. Source highlight: Upgraded pyjwt to v2.13.0 by @NyanKiyoshi in https://github.com/saleor/saleor/pull/19233 - fixes:
Medusa v2.15.3. Source highlight: Multi-Factor Authentication Support
Saleor 3.23.6. Source highlight: Gracefully handle invalid json string
Medusa v2.15.2. Source highlight: Fix Migrations Regressions
Medusa v2.15.1. Source highlight: Includes missing PRs from 2.15.0 release
Medusa v2.15.0. Source highlight: Missing PRs in published packages
Saleor 3.23.5. Source highlight: Added subscription to CUSTOMER_DELETED
Saleor 3.23.4. Source highlight: Upgraded cryptography, Pillow, and Django to latest security hotfixes:
Saleor 3.22.50. Source highlight: Upgraded cryptography, Pillow, and Django to latest security hotfixes:
Saleor 3.21.58. Source highlight: Upgraded cryptography, Pillow, and Django to latest security hotfixes:
Medusa v2.14.2. Source highlight: Price List Metadata Support
Saleor 3.23.3. Source highlight: Extend stock related webhooks with webhooks events info
Saleor 3.21.57. Source highlight: Fix CVE-2026-42175 - SSRF bypass via unfiltered RFC 6598 shared address space (100.64.0.0/10) by upgrading `requests-hardened` to v1.2.1
Saleor 3.22.49. Source highlight: Fix failed request handler in AvataxPlugin
Medusa v2.14.1. Source highlight: Fix currency and translation management regression in admin dashboard
Medusa v2.14.0. Source highlight: This release open sources the Loyalty plugin and includes breaking changes related to Zod, account creation, and more. Please read carefully before updating.
Saleor 3.23.2. Source highlight: Allow metadata crud for STAFF for apps
Saleor 3.21.56. Source highlight: Upgraded Django to 5.2 by @patrys & @NyanKiyoshi in #19109 + #19125
Saleor 3.20.119. Source highlight: This is **the last release** for 3.20. We recommend upgrading as soon as possible to 3.23, 3.22, or 3.21 (the latter not being recommended due to being planned for removal in the near future)
Saleor 3.22.48. Source highlight: feat(graphql): mark slow spans as errored
Saleor 3.23.1. Source highlight: Allow to assigning product without variant to collection
Saleor 3.21.55. Source highlight: feat(graphql): mark slow spans as errored
WooCommerce 10.7.0 is published, but the available notes are too limited to assess upgrade impact. Review the official source before upgrading.
Saleor 3.23.0. Source highlight: Following changelog contains brief summary of changes that differ from latest 3.22 version.
Saleor 3.20.118. Source highlight: Fixed CVE-2026-33756: Denial of service via unbounded GraphQL query batching
Saleor 3.21.54. Source highlight: Fixed CVE-2026-33756: Denial of service via unbounded GraphQL query batching
Saleor 3.22.47. Source highlight: Fixed CVE-2026-33756: Denial of service via unbounded GraphQL query batching
Medusa v2.13.6. Source highlight: This release includes an update for MikroORM dependencies to v6.6.12 due to recent security vulnerabilities. While Medusa's core API routes were not impacted by the security vulnerability as they're guarded with Zod validation, it may impact custom API routes if they're not properly guarded. So, we
Saleor 3.20.117. Source highlight: Fix error handling and parse errors when dealing with unexpected and/or incorrect JSON payloads (#19016)
Saleor 3.21.53. Source highlight: Fix error handling and parse errors when dealing with unexpected and/or incorrect JSON payloads (#19016)
Saleor 3.22.46. Source highlight: Fix error handling and parse errors when dealing with unexpected and/or incorrect JSON payloads (#19016)
WooCommerce 10.6.2 is published, but the available notes are too limited to assess upgrade impact. Review the official source before upgrading.
Saleor 3.22.45. Source highlight: Add `PRODUCT_VARIANT_DISCOUNTED_PRICE_UPDATED` webhook event
Medusa v2.13.5. Source highlight: feat: Improve filtering for workflow executions
Saleor 3.22.44. Source highlight: Introduce a metric for tracking GraphQL field usage
Saleor 3.22.43. Source highlight: Fix memory leak for cached states
Saleor 3.21.52. Source highlight: Fix memory leak for cached states
Saleor 3.20.116. Source highlight: Fix memory leak for cached states
Saleor 3.20.115. Source highlight: Upgraded pyjwt to latest to fix CVE-2026-32597
Saleor 3.22.42. Source highlight: Deprecated legacy Adyen plugin `Payment.partial` field
Saleor 3.21.51. Source highlight: Upgraded pyjwt to latest to fix CVE-2026-32597
Medusa v2.13.4. Source highlight: feat(order,payment): make return and refund reason translatable
WooCommerce 10.6.1 is published, but the available notes are too limited to assess upgrade impact. Review the official source before upgrading.
WooCommerce 10.6.0 is published, but the available notes are too limited to assess upgrade impact. Review the official source before upgrading.