Impact Score: 5/10
Medusa v2.15.3 β Release Notes & Engineering Impact
Source available β automated, not human-reviewed
Component: medusajs Β· Channel: stable. Automated analysis, not a compatibility certification. How this works.
Analysis updated: 2026-11-01.
β‘ Executive Summary (TL;DR)
Medusa v2.15.3. Source highlight: Multi-Factor Authentication Support
Who Does This Impact? (Role-Based Analysis)
π» Software Engineers & Devs
Check the source notes against the package and APIs you use before upgrading.
π Product & Engineering Leads
Use the documented changes to assess relevance to your product; release frequency alone is not a quality measure.
βοΈ DevOps & Security
Verify the target version, runtime requirements and rollback procedure in the official documentation.
β¨ New Features & Capabilities (5)
- feat(js-sdk): add MFA auth helpers by @christiananese in #15441
- feat(ui): add CodeInput component by @christiananese in #15424
- docs: add logging by @shahednasser in #15435
- docs: added cloud docs for backups by @shahednasser in #15408
- docs: add TSDocs for "add MFA provider primitives by @shahednasser in #15387
π§ Bug Fixes & Patches (6)
- fix(design-system): broaden React peer dependencies to support v18 an⦠by @Suh0161 in #15271
- fix(core-flows): harden create payment sessions when customer has no account holders by @Suh0161 in #15264
- fix(dashboard): include inventory query in detail key by @Derekko-web in #15417
- fix(dashboard): complete and correct Thai (th) translations by @Ligament in #15409
- fix(test-utils, link-modules): encode URL credentials and fix schema-qualified RENAME TO by @Ultron03 in #15344
- fix(medusa): fix filtering by categories and tags in /store/products with the index module by @shahednasser in #15405
π View Raw Release Notes (Original Developer Log)
## Highlights
### Multi-Factor Authentication Support
This release adds the primitives to support Multi-Factor Authentication (MFA) for enhanced security. This includes new authentication provider primitives, API routes for MFA management, and retrieval functionality. The implementation provides a foundation for integrating various MFA methods.
---
### Promotion Code Visibility Improvements
When promotion codes are skipped due to budget or usage limits, the system now surfaces this information to provide better visibility into why certain promotions weren't applied. This helps merchants understand promotion application behavior and troubleshoot issues.
[#15396](https://github.com/medusajs/medusa/pull/15396)
## Features
* feat(js-sdk): add MFA auth helpers by [@christiananese](https://github.com/christiananese) in [#15441](https://github.com/medusajs/medusa/pull/15441)
* feat(ui): add CodeInput component by [@christiananese](https://github.com/christiananese) in [#15424](https://github.com/medusajs/medusa/pull/15424)
## Bugs
* fix(design-system): broaden React peer dependencies to support v18 an⦠by [@Suh0161](https://github.com/Suh0161) in [#15271](https://github.com/medusajs/medusa/pull/15271)
* fix(core-flows): harden create payment sessions when customer has no account holders by [@Suh0161](https://github.com/Suh0161) in [#15264](https://github.com/medusajs/medusa/pull/15264)
* fix(dashboard): include inventory query in detail key by [@Derekko-web](https://github.com/Derekko-web) in [#15417](https://github.com/medusajs/medusa/pull/15417)
* fix(dashboard): complete and correct Thai (th) translations by [@Ligament](https://github.com/Ligament) in [#15409](https://github.com/medusajs/medusa/pull/15409)
* fix(test-utils, link-modules): encode URL credentials and fix schema-qualified RENAME TO by [@Ultron03](https://github.com/Ultron03) in [#15344](https://github.com/medusajs/medusa/pull/15344)
* fix(medusa): fix filtering by categories and tags in /store/products with the index module by [@shahednasser](https://github.com/shahednasser) in [#15405](https://github.com/medusajs/medusa/pull/15405)
* fix(create-medusa-app): fix incorrect command replacement when using yarn and npm by [@shahednasser](https://github.com/shahednasser) in [#15436](https://github.com/medusajs/medusa/pull/15436)
* fix(utils): implement tokenized free text search by [@Suh0161](https://github.com/Suh0161) in [#15275](https://github.com/medusajs/medusa/pull/15275)
* fix(core-flows): fix incorrect stock location picked for item with backorder in a sales channel with multiple locations by [@shahednasser](https://github.com/shahednasser) in [#15159](https://github.com/medusajs/medusa/pull/15159)
## Documentation
* docs: configure posthog capturing by [@shahednasser](https://github.com/shahednasser) in [#15449](https://github.com/medusajs/medusa/pull/15449)
* docs: fix information about preview environments by [@shahednasser](https://github.com/shahednasser) in [#15445](https://github.com/medusajs/medusa/pull/15445)
* docs: fix documentation issues in triage inbox by [@shahednasser](https://github.com/shahednasser) in [#15427](https://github.com/medusajs/medusa/pull/15427)
* docs: revert Cloudflare migration by [@shahednasser](https://github.com/shahednasser) in [#15438](https://github.com/medusajs/medusa/pull/15438)
* docs: add logging by [@shahednasser](https://github.com/shahednasser) in [#15435](https://github.com/medusajs/medusa/pull/15435)
* docs: prepare to deploy to medusa cloud by [@shahednasser](https://github.com/shahednasser) in [#15429](https://github.com/medusajs/medusa/pull/15429)
* docs: track logged in users by [@shahednasser](https://github.com/shahednasser) in [#15425](https://github.com/medusajs/medusa/pull/15425)
* docs: added cloud docs for backups by [@shahednasser](https://github.com/shahednasser) in [#15408](https://github.com/medusajs/medusa/pull/15408)
* docs: migrate to cloudflare by [@shahednasser](https://github.com/shahednasser) in [#15388](https://github.com/medusajs/medusa/pull/15388)
* docs: fix mcp instructions for cursor by [@shahednasser](https://github.com/shahednasser) in [#15401](https://github.com/medusajs/medusa/pull/15401)
* docs: add TSDocs for "add MFA provider primitives by [@shahednasser](https://github.com/shahednasser) in [#15387](https://github.com/medusajs/medusa/pull/15387)
## Chores
* chore(docs): cloud doc changes (automated) by [@shahednasser](https://github.com/shahednasser) in [#15451](https://github.com/medusajs/medusa/pull/15451)
* chore: fix docs automation job by [@shahednasser](https://github.com/shahednasser) in [#15452](https://github.com/medusajs/medusa/pull/15452)
* chore: fix required secrets in review and triage actions by [@shahednasser](https://github.com/shahednasser) in [#15421](https://github.com/medusajs/medusa/pull/15421)
* chore: fix actions required anthropic api key by [@shahednasser](https://github.com/shahednasser) in [#15410](https://github.com/medusajs/medusa/pull/15410)
* chore: switch actions to use anthropic api key by [@shahednasser](https://github.com/shahednasser) in [#15404](https://github.com/medusajs/medusa/pull/15404)
* chore(docs): Updated UI Reference (automated) by [@app/github-actions](https://github.com/app/github-actions) in [#15391](https://github.com/medusajs/medusa/pull/15391)
* chore(docs): Generated References (automated) by [@app/github-actions](https://github.com/app/github-actions) in [#15393](https://github.com/medusajs/medusa/pull/15393)
* chore(docs): Update version in documentation (automated) by [@app/github-actions](https://github.com/app/github-actions) in [#15390](https://github.com/medusajs/medusa/pull/15390)
* chore: fixes to pr reviewer and issue triager by [@shahednasser](https://github.com/shahednasser) in [#15394](https://github.com/medusajs/medusa/pull/15394)
**Full Changelog**: [v2.15.2...v2.15.3](https://github.com/medusajs/medusa/compare/v2.15.2...v2.15.3)