The order review page in the checkout workflow now loads successfully for an order being shipped to multiple addresses when Terms and conditions with the. Nullable getters in service contracts no longer throw reflection errors when used in the web API. Magento components (including CMS pages and blocks) that use the template filter in legacy mode can be vulnerable to remote code execution (RCE). Enabling strict mode by default ensures that RCE attacks cannot be deliberately enabled.Â. Workaround: Ignore the error message and continue with payment. An incorrectly nested HTML structure has been corrected. Magento no longer throws an error when you change the name of a tiered product that is included in a scheduled update. Our technology stack is built on PHP and MySQL. Issue: Magento throws a 404 not found error when a customer tries to remove reward points when checking out an order being shipped to multiple addresses. However, upgrading this SDK to the latest version let merchants access the latest features and security enhancements. Previously, if you selected a parent category that was an anchor, but that did not contain assigned products, Magento did not display all nested products. Corrected misalignment of the calendar icon on the Add Design Change page. The enhancements minimize the number of queries to Redis that are performed on each Magento request. The Code Migration Toolkit helps transfer existing Magento 1.x store extensions and customizations to Magento 2.x. We have fixed hundreds of issues in the Magento 2.4.0 core code. The default layout handle is used as a basic handle for every page. You can now create a new customer from the storefront when the date of birth is required. Removed an extra closing tag from module XML. We’ve improved the error message that is displayed when a customer tries to share their wishlist with more email addresses than is permitted. Merchants should migrate to the official extension that is available on the Magento Marketplace. 2FA is enabled by default. This bug is native to PHP 7.4.2 and cannot be corrected by Magento. This community-developed feature includes an original extension developed by MAGEFAN. Prompt modals no longer carry out a confirm action when a user clicks on the modal overlay. It also includes improvements to: This release of Vertex includes the following new feature and enhancements: Yotpo Ratings and Reviews are integrated with Page Builder. See Configuring MFTF for Two-Factor Authentication (2FA). Corrected the rendering of SKUs in the Current Variations list for a configurable product. Inventory Management enhancements for this release include support for in-store pickup and bundle product support. See Braintree Payments. The link from the Setup Wizard to the Admin now works as expected. The sample description that is provided for a newly product’s description and title no longer contains double quotation marks. This extra step of authentication makes it harder for malicious users to log in to the Admin without authorization. Credit memos now display the correct amount in the, You can now remove additional information from the, Payment instructions are now derived from the store view from which an order was made. Whether you’re using an e-commerce platform or integrating directly with our APIs, getting up and running with Affirm is quick and easy. See Export Tax Rates does not work Knowledge Base article. Sorting has been disabled on the status column of the Cache Management grid in the Admin. Offer Affirm in whichever e-commerce platform you use. We are grateful to the wider Magento community and would like to acknowledge their contributions to this release. Corrected display issues with the table header on the. Merchants can now create a product attribute of type, Magento no longer returns a 500 error when you try to open a Category page on the storefront when. Issue: Magento displays two identical PayPal methods in the Payment Method drop-down list that is available when creating a new cart price rule. See Securing Your Account. Previously, in deployments with multiple store views, Magento sometimes generated incorrect URL rewrites by using the default value of the category url path instead of the storeview-specific URL path. Removed unnecessary space in submenu display on the home page hover menu. Consumers: If you’re an Affirm customer with questions about your application, loan, or account, please visit our Help Center. Previously, Magento displayed a 500 error. This capability was supported by the MySQL search engine, which has been deprecated and replaced by Elasticsearch in this release. From that Contributors page, you can follow links to their merged PRs on GitHub. The CMS page custom layout update logic has been improved. MFTF now uses Google Authenticator to execute tests with 2FA enabled. For installation instructions, see Install the Data Migration Tool. Removal of the core integration of the Signifyd fraud protection code. The drop-down list that is available for selecting shipping methods during the process of creating a cart price rule now contains only valid values. Magento no longer underlines the Delete icon in the shopping cart when the cursor hovers over the icon when viewing the storefront in Internet Explorer. Instead, users with these permissions were redirected to the storefront with a 404 error. Filtering on the Admin product grid website column now works as expected. Corrected a problem in GraphQL in which Magento did not return all the required information while using fragments on products query. Elasticsearch 7.6.x is now the default catalog search engine for Magento Commerce and Open Source. Corrected inconsistent menu spacing in mobile view. Implementation of 2FA for Admin accounts, Magento.com user accounts, and Cloud SSH access. You can now save and duplicate all CMS pages. You can now use an import file to update downloadable products in bulk by SKU and description. The Magento Community Engineering team Magento Contributors maintains a list of top contributing individuals and partners by month, quarter, and year. Offer Affirm as a payment option on your website or in your mobile app. Merchants can now find any Adobe Stock preview image in the Media Gallery, which reduces the number of steps required to license stock preview image. Previously, when you created an email template in the Admin by loading and saving the default template, emails generated from this template did not include the list of ordered items. On some applications, Affirm may need additional information about a customer to decide on a loan application. The Customer module no longer has a dependency on the Review module. See, Products now show as expected in categories after running. Securing your Magento account. Previously, when a customer used the store switcher to switch between stores, the request failed if the target store had a different base URL than the current store. Magento Open Source 2.4.0 introduces support for PHP 7.4, Elasticsearch 7.6.x, and MySQL 8.0. Magento now assigns the correct Group ID when a new customer creates an order in multi-site deployments. Issue: Magento throws an error when opening Sales > Braintree Virtual Terminal. Previously, Magento did not load or apply mixins for advanced bundled modules. But the reality is, sometimes these purchases don’t fit comfortably into their monthly budget. Previously, when these settings were in place, adding a product to a wishlist resulted in a 404 error. You cannot install or upgrade to Magento 2.4.0 without also installing Elasticsearch 7.6.x. See Upgrade using the Magento composer root plugin. Previously, prices did not reflect the scheduled cart price rule until you manually re-indexed (, You can now successfully re-index the product database after adding an attribute that is unsearchable (that is, the. Pressing the ESC key when entering the name of a new folder on the create a new folder popup window now closes the popup as expected without creating the folder. This release includes all the improvements to core quality that were included in Magento 2.3.5-p1, over 100 new fixes to core code, and 30 security enhancements. SecureHtmlRenderer has been added to the Framework and is available in .phtml templates to whitelist inline style and script tags. Currently, Magento scrolls the page every time the Refresh button is clicked and does not display the product name. Magento now successfully imports customer data using the. The package names of security-only releases are typically appended with -p1. All useful PLUGINS are available here! The product compare feature now works as expected. Previously, the report grouped products by. Merchants can now install time-sensitive security fixes without applying the hundreds of functional fixes and enhancements that a full quarterly release (for example, Magento 2.3.5-p2) provides. For instructions on downloading and applying security-only patches (including patch 2.3.5-p2), see Install Magento using Composer. Patch 2.3.5.2 (Composer package 2.3.5-p2) is a security-only patch that provides fixes for vulnerabilities that have been identified in our previous quarterly release, Magento 2.3.5-p1. Features include: Improvements to customer data section invalidation logic. The logic that is responsible for updating configurable product images has been improved. See the Decomposition of Magento Controllers DevBlog post. Previously, when you requested results from a specific page (for example. Previously, when a restricted administrator tried to view an order, Magento displayed this error: Magento no longer displays an error when a customer adds a quantity of a product to their cart that exceeds half of the existing product stock but does not exceed the total stock. See Enable multi-factor authentication for SSH access. Information for research of yearly salaries, wage level, bonus and compensation data comparison. MariaDB 10.0 and 10.1 are no longer supported (as a result of removing support for MySQL 5.6 in this release). See Refresh on Customer’s Activities does not work Knowledge Base article. Bug fixes for these projects are documented in the separate, project-specific release information that is available in the documentation for each project. You must use the command line to install or upgrade Magento 2.4.0. This release includes new on-site messaging options to help shoppers understand the available credit and financing options. Switching billing address no longer causes JavaScript function text to render in the payment section of the storefront checkout workflow. You can now add any number of bundle products to your shopping cart without error. GitHub-9582. You can now successfully edit a configurable product with many variants (approximately 5,000) from the Admin. Also, remove references to this file in crontabs when upgrading. The Compare Products section of the Catalog page is now displayed as expected in mobile view on displays with resolutions of less than 767px. Elasticsearch provides superior search capabilities as well as catalog performance optimizations. Elasticsearch version 2.x code has been removed. The following table highlights contributions made by Partners. Contact Support for assistance. Completed orders now appear in both the payment system and Magento. You can now successfully save an image to a category from the Admin. Previously, Magento did not reload the current page and displayed this error: An error has happened during application run. Adding non-cacheable blocks to default layout handlers renders all Magento pages non-cacheable. Click to see our best Video content. Issue: Directly clicking on the Export Tax Rates button of the Add New Tax Rule page (Stores > Tax Rules) does not download the tax_rates.csv file as expected. Improved caching of results of SQL queries to inventory tables. Millions of real salary data collected from government and companies - annual starting salaries, average salaries, payscale by company, job title, and city. You can now update the value of a downloadable product’s sample and link title by enabling the, The bottom border color of the Additional Address Entries table on the Address Book page now matches. With this release (Magento 2.4.0), the extension is now included in the Magento release. Each Action group in a test has been moved to a separate file to follow MFTF best practices, and inconsistent file names have been revised. Our docs provide step-by-step guidance for adding Affirm to your site, creating effective promotional messaging, and managing your Affirm account. Merchants must follow additional steps to ensure that Braintree works properly in a Magento 2.4.0 deployment. Issue: Magento displays an error message in the following countries when a customer selects a local payment method during checkout: Belgium, Netherlands, Italy, Spain, and Poland. Add Affirm promotional messaging to Magento, Processing Affirm transactions in Magento 2. oneCart. These optimizations include: Decrease in the size of network data transfers between Redis and Magento, Reduction in Redis’ consumption of CPU cycles by improving the adapter’s ability to automatically determine what needs to be loaded, Reduction in race conditions on Redis write operations. You can now successfully import or update customers using the Customer and addresses single file option of the import workflow. Take A Sneak Peak At The Movies Coming Out This Week (8/12) Don’t get it twisted: ‘Spiral: From the Book of Saw’ takes the franchise to a whole new level The email field is no longer required when placing an order from the Admin. Magento now displays the following informative message when you try to add a product to your wishlist with a quantity of 0 or negative number: Magento no longer supports inheritance of DTO classes from the. The BUNDLE-2670_VirtualTerminal.patch hotfix for this issue is now available from Releases. How does the Chrome SameSite cookie policy impact my Magento 1 integration? Process Affirm transactions on WooCommerce, How to ensure your Affirm + WooCommerce integration is up to date, Controllers & Pipelines cartridge installation, Processing Affirm transactions in Salesforce Commerce Cloud (SFCC), Stencil promotional messaging integration, Blueprint promotional messaging integration, Upgrading educational modals v3 to v4 (with Prequalification), Upgrading educational modals from v2 to v4, Identify potential fraud with Affirm travel signals. Selecting all products from the products list page using Elasticsearch now displays all products in the search results as expected. The command-line interface includes scripts for converting Magento 1.x modules and layouts. See Braintree Virtual Terminal page is corrupted Knowledge Base article. Language pack inheritance order is now applied in a first-listed, first-used basis as expected and as described in the Magento documentation. Images on the storefront are now responsive. These community contributions range from minor clean-up of core code to significant enhancements in Inventory Management and GraphQL. Two-factor Authentication (2FA) provides an added, optional layer of security to better protect your Magento.com account from unauthorized users who might want to use your account in ways you do not want.