Saleor 3.22.59 — Release Notes & Engineering Impact
Saleor 3.22.59. Source highlight: Added different scopes to account management tokens (password reset, account confirmation, etc.)
96 tracked entries. Older history is imported progressively; see source coverage.
Saleor 3.22.59. Source highlight: Added different scopes to account management tokens (password reset, account confirmation, etc.)
Saleor 3.21.65. Source highlight: Added different scopes to account management tokens (password reset, account confirmation, etc.)
Saleor 3.23.18. Source highlight: Added different scopes to account management tokens (password reset, account confirmation, etc.)
Saleor 3.23.17. Source highlight: Upgraded django to v5.2.16
Saleor 3.22.58. Source highlight: Upgraded django to v5.2.16
Saleor 3.21.64. Source highlight: Upgraded django to v5.2.16
Saleor 3.23.16. Source highlight: Add possibility of running multiple development supporting containers (database, cache, container for running tests) in parallel primarily for use with Git worktrees (#19247)
Saleor 3.22.57. Source highlight: Add possibility of running multiple development supporting containers (database, cache, container for running tests) in parallel primarily for use with Git worktrees (#19247)
Saleor 3.21.63. Source highlight: Add possibility of running multiple development supporting containers (database, cache, container for running tests) in parallel primarily for use with Git worktrees (#19247)
Saleor 3.21.62. Source highlight: Upgrade 7 dependencies to latest patches
Saleor 3.22.56. Source highlight: Upgrade 8 dependencies to latest patches
Saleor 3.23.15. Source highlight: Upgrade 8 dependencies to latest patches
Saleor 3.22.55. Source highlight: Make logic sending messages to AWS SQS and Google PubSub more tolerant to prevent task giving up without retries (#19384)
Saleor 3.23.14. Source highlight: Make logic sending messages to AWS SQS and Google PubSub more tolerant to prevent task giving up without retries (#19384)
Saleor 3.21.61. Source highlight: ci: pin changelog-enforcer action to v3.7.0
Saleor 3.23.13. Source highlight: Fix: refresh order to guarantee correct order payment status calculation
Saleor 3.22.54. Source highlight: Feature: added translation field on AssignedSwatchAttributeValue
Saleor 3.23.12. Source highlight: Refund Reasons phase 2
Saleor 3.23.11. Source highlight: Fix `OrderShippingMethodsByOrderIdAndWebhookSyncLoader` issues when querying for non-existent and/or multiple orders
Saleor 3.23.10. Source highlight: Ensure CheckoutDeliveries are deleted before deleting Checkouts (#19312)
Saleor 3.22.53. Source highlight: fix(build): missing timezone in uv cooldowns
Saleor 3.23.9. Source highlight: [3.23] Add support for editorJS table syntax
Saleor 3.23.8. Source highlight: Fixed `TypeError` when resolving default channel slug on product types (#19251)
Saleor 3.22.52. Source highlight: Fixed saving language code in customerUpdate mutation (#19254)
Saleor 3.21.60. Source highlight: Fixed KeyError when resolving channel for channel-agnostic account events (#19253)
Saleor 3.22.51. Source highlight: Upgraded pyjwt to v2.13.0 by @NyanKiyoshi in https://github.com/saleor/saleor/pull/19234 - fixes:
Saleor 3.21.59. Source highlight: Upgraded pyjwt to v2.13.0 by @NyanKiyoshi in https://github.com/saleor/saleor/pull/19235 - fixes:
Saleor 3.23.7. Source highlight: Upgraded pyjwt to v2.13.0 by @NyanKiyoshi in https://github.com/saleor/saleor/pull/19233 - fixes:
Saleor 3.23.6. Source highlight: Gracefully handle invalid json string
Saleor 3.23.5. Source highlight: Added subscription to CUSTOMER_DELETED
Saleor 3.23.4. Source highlight: Upgraded cryptography, Pillow, and Django to latest security hotfixes:
Saleor 3.22.50. Source highlight: Upgraded cryptography, Pillow, and Django to latest security hotfixes:
Saleor 3.21.58. Source highlight: Upgraded cryptography, Pillow, and Django to latest security hotfixes:
Saleor 3.23.3. Source highlight: Extend stock related webhooks with webhooks events info
Saleor 3.21.57. Source highlight: Fix CVE-2026-42175 - SSRF bypass via unfiltered RFC 6598 shared address space (100.64.0.0/10) by upgrading `requests-hardened` to v1.2.1
Saleor 3.22.49. Source highlight: Fix failed request handler in AvataxPlugin
Saleor 3.23.2. Source highlight: Allow metadata crud for STAFF for apps
Saleor 3.21.56. Source highlight: Upgraded Django to 5.2 by @patrys & @NyanKiyoshi in #19109 + #19125
Saleor 3.20.119. Source highlight: This is **the last release** for 3.20. We recommend upgrading as soon as possible to 3.23, 3.22, or 3.21 (the latter not being recommended due to being planned for removal in the near future)
Saleor 3.22.48. Source highlight: feat(graphql): mark slow spans as errored
Saleor 3.23.1. Source highlight: Allow to assigning product without variant to collection
Saleor 3.21.55. Source highlight: feat(graphql): mark slow spans as errored
Saleor 3.23.0. Source highlight: Following changelog contains brief summary of changes that differ from latest 3.22 version.
Saleor 3.20.118. Source highlight: Fixed CVE-2026-33756: Denial of service via unbounded GraphQL query batching
Saleor 3.21.54. Source highlight: Fixed CVE-2026-33756: Denial of service via unbounded GraphQL query batching
Saleor 3.22.47. Source highlight: Fixed CVE-2026-33756: Denial of service via unbounded GraphQL query batching