Saleor 3.23.38 — Release Notes & Engineering Impact

Source available — automated, not human-reviewed

Component: saleor · Channel: stable. Automated analysis, not a compatibility certification. How this works.

Analysis updated: 2026-11-01.

Compatibility not verified — check source notes

📄 .MD

✨ Features 2 🔧 Bug Fixes 4

⚡ Executive Summary (TL;DR)

Saleor 3.23.38. Source highlight: **Dependencies & security:**

Visit Saleor Official Site ↗ Official Release Source ↗ All Saleor Releases 📡 Saleor RSS

Who Does This Impact? (Role-Based Analysis)

💻 Software Engineers & Devs

Check the source notes against the package and APIs you use before upgrading.

📊 Product & Engineering Leads

Use the documented changes to assess relevance to your product; release frequency alone is not a quality measure.

⚙️ DevOps & Security

Verify the target version, runtime requirements and rollback procedure in the official documentation.

✨ New Features & Capabilities (2)

Added possibility for apps to declare deprecation status
Added `externalReference` support to Promotion and Category by @DamianCzajkowski in https://github.com/saleor/saleor/pull/19830 + https://github.com/saleor/saleor/pull/19831

🔧 Bug Fixes & Patches (4)

Upgraded urllib3 to fix CVE-2026-97689, CVE-2026-97688, CVE-2026-97687
Upgraded Python to latest patch version (3.12.15) to fix CVE-2026-19445 and CVE-2026-19553
Fixed checkout payload crash when assigned delivery is deleted
Fixed migrations not respecting `POPULATE_DEFAULTS` preference

📄 View Raw Release Notes (Original Developer Log)

## What's Changed **Dependencies & security:** * Upgraded urllib3 to fix CVE-2026-97689, CVE-2026-97688, CVE-2026-97687 by @NyanKiyoshi in https://github.com/saleor/saleor/pull/19859 * Upgraded cryptography to upgrade to the latest OpenSSL version (https://openssl-library.org/news/secadv/20260929.txt) by @NyanKiyoshi in https://github.com/saleor/saleor/pull/19859 * Upgraded Python to latest patch version (3.12.15) to fix CVE-2026-19445 and CVE-2026-19553 **Features:** * Added possibility for apps to declare deprecation status by @lkostrowski in https://github.com/saleor/saleor/pull/19814 * Added `externalReference` support to Promotion and Category by @DamianCzajkowski in https://github.com/saleor/saleor/pull/19830 + https://github.com/saleor/saleor/pull/19831 **Fixes:** * Fixed checkout payload crash when assigned delivery is deleted by @lkostrowski in https://github.com/saleor/saleor/pull/19821 * Fixed migrations not respecting `POPULATE_DEFAULTS` preference by @stmpn in https://github.com/saleor/saleor/pull/19848 ## New Contributors * @DamianCzajkowski made their first contribution in https://github.com/saleor/saleor/pull/19830 **Full Changelog**: https://github.com/saleor/saleor/compare/3.23.37...3.23.38

← Older Version Saleor 3.22.72 Newer Version → Saleor 3.23.39