Release 3.0.10 — verified end-to-end on Magento 2.4.9 / PHP 8.5 with Content-Security-Policy enforced.
Fixed
- Checkout page hung on the loading spinner under enforced CSP. The module's PHP CSP
PolicyCollectorreplaced Magento's entire Content-Security-Policy, dropping'self'fromscript-srcand blocking Magento's own JavaScript on the checkout page (CSP is enforced by default on checkout/payment pages since 2.4.7). Replaced with the standard, additiveetc/csp_whitelist.xmlmechanism. - Payment verification failed on PHP 8.5 even when the payment succeeded.
Gateway/PaystackApiClient.phpcalledcurl_close(), deprecated in PHP 8.5 (a no-op since PHP 8.0); Magento escalated the deprecation to an exception that fired after the charge was confirmed. Removed allcurl_close()calls. - Admin order creation on Adobe Commerce (EE). The payment method now implements
MethodInterfacedirectly instead of extendingAbstractMethod, andgetInfoInstance()matches the expected contract, with a defence-in-depth admin-area guard — preventing EE-only interceptors from crashing admin pages.
Added
- PHPUnit unit-test suite (
Test/Unit/**,phpunit.xml) covering the payment model, controllers, gateway client, observers, config provider, and plugins. - Storefront guest-checkout MFTF coverage and an admin-config MFTF page object.
CHANGELOG.mddocumenting 3.0.5–3.0.10.
Full changelog: see CHANGELOG.md.