Saleor 3.23.45 — Release Notes & Engineering Impact
Saleor 3.23.45. Source highlight: chore: bump uv & virtualenv
saleor release archive — Page 1
294 tracked entries. Older history is imported progressively; see source coverage.
Saleor 3.22.76 — Release Notes & Engineering Impact
Saleor 3.22.76. Source highlight: chore: bump uv & virtualenv
Saleor 3.23.44 — Release Notes & Engineering Impact
Saleor 3.23.44. Source highlight: Upgraded `certifi` to 2026.10.19 to fix GHSA-6q48-6c7w-9gw2 by @NyanKiyoshi in https://github.com/saleor/saleor/pull/19940 + https://github.com/saleor/saleor/pull/19943. This revokes a compromised certificate.
Saleor 3.22.75 — Release Notes & Engineering Impact
Saleor 3.22.75. Source highlight: Upgraded `certifi` to 2026.10.19 to fix GHSA-6q48-6c7w-9gw2 by @NyanKiyoshi in https://github.com/saleor/saleor/pull/19941 + https://github.com/saleor/saleor/pull/19945. This revokes a compromised certificate.
Saleor 3.23.43 — Release Notes & Engineering Impact
Saleor 3.23.43. Source highlight: Upgraded Pillow to v13.0.0
Saleor 3.22.74 — Release Notes & Engineering Impact
Saleor 3.22.74. Source highlight: Upgraded Pillow to v13.0.0
Saleor 3.23.42 — Release Notes & Engineering Impact
Saleor 3.23.42. Source highlight: feat(seo): add translatable full descriptions to categories and colle…
Saleor 3.23.41 — Release Notes & Engineering Impact
Saleor 3.23.41. Source highlight: Reject products sortBy with neither field nor attributeId
Saleor 3.23.40 — Release Notes & Engineering Impact
Saleor 3.23.40. Source highlight: Applied the security patches from Django (CVE-2026-77050, CVE-2026-84429, CVE-2026-87890, CVE-2026-87975), for more information, see https://www.djangoproject.com/weblog/2026/oct/06/security-releases/ by
Saleor 3.22.73 — Release Notes & Engineering Impact
Saleor 3.22.73. Source highlight: Applied the security patches from Django (CVE-2026-77050, CVE-2026-84429, CVE-2026-87890, CVE-2026-87975), for more information, see https://www.djangoproject.com/weblog/2026/oct/06/security-releases/
Saleor 3.23.39 — Release Notes & Engineering Impact
Saleor 3.23.39. Source highlight: Tests: fixed flaky test case (`test_get_default_fulfillment_payload`)
Saleor 3.23.38 — Release Notes & Engineering Impact
Saleor 3.23.38. Source highlight: **Dependencies & security:**
Saleor 3.22.72 — Release Notes & Engineering Impact
Saleor 3.22.72. Source highlight: Upgraded urllib3 to fix CVE-2026-97689, CVE-2026-97688, CVE-2026-97687
Saleor 3.23.37 — Release Notes & Engineering Impact
Saleor 3.23.37. Source highlight: ci: replace path filters in tests and e2e with an in-job change check
Saleor 3.23.36 — Release Notes & Engineering Impact
Saleor 3.23.36. Source highlight: Feature: added `idempotencyKey` on transaction action requested webhooks
Saleor 3.22.71 — Release Notes & Engineering Impact
Saleor 3.22.71. Source highlight: Upgraded pyjwt to 2.15.0 to fix GHSA-x33g-cr3x-6449, GHSA-42vr-xj54-vc7v
Saleor 3.21.71 — Release Notes & Engineering Impact
Saleor 3.21.71. Source highlight: This is the **last release** for Saleor 3.21. Upgrade as soon as possible to **3.23** to continue receiving security and bug fixes.
Saleor 3.22.70 — Release Notes & Engineering Impact
Saleor 3.22.70. Source highlight: Fix `giftCardBulkCreate` removing existing tags from previously created gift cards
Saleor 3.23.35 — Release Notes & Engineering Impact
Saleor 3.23.35. Source highlight: Feat/translate media alt
Saleor 3.23.34 — Release Notes & Engineering Impact
Saleor 3.23.34. Source highlight: Update oss sample db 3.23
Saleor 3.23.33 — Release Notes & Engineering Impact
Saleor 3.23.33. Source highlight: Upgraded pyjwt to latest
Saleor 3.22.69 — Release Notes & Engineering Impact
Saleor 3.22.69. Source highlight: Limit the number of pixels of images we decode
Saleor 3.21.70 — Release Notes & Engineering Impact
Saleor 3.21.70. Source highlight: Upgraded pyjwt to latest
Saleor 3.23.32 — Release Notes & Engineering Impact
Saleor 3.23.32. Source highlight: Add Order.transactionSummaries for customer-facing payment history
Saleor 3.23.31 — Release Notes & Engineering Impact
Saleor 3.23.31. Source highlight: [3.23] Reject GraphQL subscription operations sent over HTTP
Saleor 3.23.30 — Release Notes & Engineering Impact
Saleor 3.23.30. Source highlight: Limit the number of pixels of images we decode
Saleor 3.22.68 — Release Notes & Engineering Impact
Saleor 3.22.68. Source highlight: Make the tests not depend on the constant but rather the function
Saleor 3.23.29 — Release Notes & Engineering Impact
Saleor 3.23.29. Source highlight: Make the tests not depend on the constant but rather the function
Saleor 3.23.28 — Release Notes & Engineering Impact
Saleor 3.23.28. Source highlight: Deprecate the preorder GraphQL API
Saleor 3.22.67 — Release Notes & Engineering Impact
Saleor 3.22.67. Source highlight: Serialize MPTT tree writes with a Postgres advisory lock (#19668)
Saleor 3.23.27 — Release Notes & Engineering Impact
Saleor 3.23.27. Source highlight: Fix pageAttributeAssign crash on nonexistent attribute IDs and fix productAttributeAssign's existence check (#19564)
Saleor 3.22.66 — Release Notes & Engineering Impact
Saleor 3.22.66. Source highlight: Fix pageAttributeAssign crash on nonexistent attribute IDs and fix productAttributeAssign's existence check (#19564)
Saleor 3.23.26 — Release Notes & Engineering Impact
Saleor 3.23.26. Source highlight: Assigning attributes to customer entities
Saleor 3.23.25 — Release Notes & Engineering Impact
Saleor 3.23.25. Source highlight: Fix permission checks for attribute value and bulk mutations to respect attribute type (#19595)
Saleor 3.22.65 — Release Notes & Engineering Impact
Saleor 3.22.65. Source highlight: Fix permission checks for attribute value and bulk mutations to respect attribute type (#19595)
Saleor 3.21.69 — Release Notes & Engineering Impact
Saleor 3.21.69. Source highlight: Fix permission checks for attribute value and bulk mutations to respect attribute type (#19595)
Saleor 3.23.24 — Release Notes & Engineering Impact
Saleor 3.23.24. Source highlight: Upgraded Django to v5.2.17 to fix the following issues (via https://github.com/saleor/saleor/pull/19601 by @NyanKiyoshi):
Saleor 3.22.64 — Release Notes & Engineering Impact
Saleor 3.22.64. Source highlight: Feature: added unique tie-breaker to default cursor pagination ordering
Saleor 3.21.68 — Release Notes & Engineering Impact
Saleor 3.21.68. Source highlight: Upgraded Django to v5.2.17 to fix the following issues (via https://github.com/saleor/saleor/pull/19603 by @NyanKiyoshi):
Saleor 3.23.23 — Release Notes & Engineering Impact
Saleor 3.23.23. Source highlight: Added a new `identifier` field to Webhook model
Saleor 3.23.22 — Release Notes & Engineering Impact
Saleor 3.23.22. Source highlight: Fixed CVE-2026-44472 - Account pre-hijacking vulnerability due to unverified anonymous order merge
Saleor 3.22.63 — Release Notes & Engineering Impact
Saleor 3.22.63. Source highlight: Fixed CVE-2026-44472 - Account pre-hijacking vulnerability due to unverified anonymous order merge
Saleor 3.21.67 — Release Notes & Engineering Impact
Saleor 3.21.67. Source highlight: Fixed CVE-2026-44472 - Account pre-hijacking vulnerability due to unverified anonymous order merge
Saleor 3.23.21 — Release Notes & Engineering Impact
Saleor 3.23.21. Source highlight: Fix permission check for attributeUpdate and attributeDelete mutations (#19527)
Saleor 3.22.62 — Release Notes & Engineering Impact
Saleor 3.22.62. Source highlight: docs: harden AGENTS.md and add Saleor review skills
Saleor 3.21.66 — Release Notes & Engineering Impact
Saleor 3.21.66. Source highlight: fix(populatedb): crash when creating orders
Saleor 3.23.20 — Release Notes & Engineering Impact
Saleor 3.23.20. Source highlight: fix(tests): crash when trying to run a parametrized test
Saleor 3.22.61 — Release Notes & Engineering Impact
Saleor 3.22.61. Source highlight: Fix products and variants with the same id overwriting each other's attribute values
Saleor 3.23.19 — Release Notes & Engineering Impact
Saleor 3.23.19. Source highlight: Deprecated OBSERVABILITY event type and MANAGE_OBSERVABILITY permission
Saleor 3.22.60 — Release Notes & Engineering Impact
Saleor 3.22.60. Source highlight: Attribute filters and the product CSV export no longer match values of attributes that are no longer assigned to the object's page type or product type