# Medusa v2.13.2 — Release & Upgrade Intelligence
- **Product:** Medusa (https://medusajs.com)
- **Version:** v2.13.2
- **Released:** Feb 26, 2026
- **Impact Score:** 5/10
- **Breaking Changes:** Not verified
- **Canonical Analysis:** https://changelogs.us/medusajs/updates/v2.13.2/

## Executive Summary (TL;DR)
Medusa v2.13.2. Source highlight: ⚠️ Warning: v2.13.2 introduces a regression that causes req.queryConfig to include entity: undefined, which can break routes that spread req.queryConfig into query.graph() (e.g., query.graph({entity: "some_entity", ...req.queryConfig })), resulting in a Service with alias "undefined" was not found e

## New Features
- feat(medusa): filter query fields (RBAC field filtering)
- feat: add forbidden error 403
- feat: Allow passing `session_token` to S3 credentials when using an access key
- feat: Add dynamodb packages as dependencies
- feat: Introduce filtering by orders total on the Admin UI
- feat(admin): add configurable maximum file upload size by @arjusmoon860 in #14720

## Bug Fixes
- fix(framework): exclude test files from resource auto-loading
- fix(orchestration): `continueOnPermanentFailure` when timeout
- fix(core-flows): only consider captures amounts for credit line amount computation
- fix(dashboard): settingsRoutes list error (all plugin settings routes now visible)
- fix(dashboard): pass product ID explicitly to edit option form
- fix(dashboard): Added the `__BASE__` prefix to the datatable row on click