# Medusa v2.22.3 — Release & Upgrade Intelligence
- **Product:** Medusa (https://medusajs.com)
- **Version:** v2.22.3
- **Released:** Nov 04, 2026
- **Impact Score:** 7/10
- **Breaking Changes:** Not verified
- **Canonical Analysis:** https://changelogs.us/medusajs/updates/v2.22.3/

## Executive Summary (TL;DR)
Medusa v2.22.3 introduces end-to-end Role-Based Access Control (RBAC) across the admin dashboard, API routes, and JS SDK, along with off-session payment support for Adyen. Additionally, this release adds Tailwind CSS 4 support and fixes several bugs across CLI handling, routing, and Redis event processing.

## New Features
- End-to-end Role-Based Access Control (RBAC) across dashboard UI, API routes, core flows, JS SDK, and dedicated module (requires Enterprise License)
- Off-session payment support in the Adyen payment provider for subscription and recurring billing scenarios

## Improvements
- Added support for Tailwind CSS 4 in UI packages
- Added Aruban Florin (AWG) currency support across dashboard, loyalty plugin, and utilities

## Bug Fixes
- CLI now exits properly when stdout encounters a broken pipe instead of spinning indefinitely
- Applied request locale to store product options routes
- Re-registered restricted fields middlewares when API routes are reloaded via HMR in the framework
- Forwarded `with_deleted` query parameter in `GET /admin/shipping-options` API route
- Prevented silent event loss in `clearGroupedEvents` within `event-bus-redis`
- Skipped customer account email validation when auth identity lacks an email, and added a validate hook to `createCustomerAccountWorkflow`