Skip to content

Releases: PrestaShop/PrestaShop

PrestaShop 9.1.1

27 Apr 14:24

Choose a tag to compare

  • Back Office
    • Improvement:
      • GHSA-w9f3-qc75-qgx9 Prevent xss exploitation via unprotected variables in customer threads (found by Savio from Doyensec in collaboration with Anthropic Research)

Release Notes & Download

The attached files listed below contain only the source code. To download the installer, please visit the release notes above.

Full Changelog: 9.1.0...9.1.1

PrestaShop 8.2.6

27 Apr 15:14

Choose a tag to compare

  • Back Office
    • Improvement:
      • GHSA-w9f3-qc75-qgx9 Prevent xss exploitation via unprotected variables in customer threads (found by Savio from Doyensec in collaboration with Anthropic Research)

Full Changelog: 8.2.5...8.2.6

PrestaShop 8.2.5

23 Mar 10:07
96a83b1

Choose a tag to compare

This release fixes 2 vulnerabilities.

Read full release notes here.

Full Changelog: 8.2.4...8.2.5

PrestaShop 9.1.0

23 Mar 10:11
a0b4946

Choose a tag to compare

PrestaShop 9.1 is now available for download. The headline of this release is Hummingbird 2.0, which becomes the default front office theme, delivering a modern, accessible, and high-performance storefront out of the box. This version also introduces two experimental features (multi-carrier shipping and a redesigned discount system), along with dozens of improvements and bug fixes.

Release Notes & Download

The attached files listed below contain only the source code. To download the installer, please visit the release notes above.

Changelog

Click here to read the changes since RC 1

PrestaShop 9.1.0 RC 1

05 Mar 11:57
5ae255a

Choose a tag to compare

PrestaShop 9.1.0 RC 1 Pre-release
Pre-release

This is PrestaShop 9.1.0 first Release Candidate.

Changelog

Click here to read the changes

Read more

PrestaShop 9.0.3

03 Feb 10:01

Choose a tag to compare

What's Changed

This release fixes 1 vulnerability, fixes some bugs and adds some improvements.

Click here to read the changes since 9.0.2

  • Back Office:
    • Improvement:
    • Bug fix:
      • #40563: Admin API improvements for combination endpoints (by @jolelievre)
      • #40556: Fix: CsvFileReader service fails with "You have requested a non-existent service 'session'" (by @Codencode)
      • #38775: Fix: Multishop - error loading CMS pages removed from the default shop (by @Codencode)
      • #40499: Fix: When saving an Attribute is_color_group is not updated. (by @Codencode)
      • #40554: Fix: always display taxes total in order summary (by @Codencode)
      • #40532: BO Product page, fix feature value collection indexes (by @jolelievre)
      • #40433: Fix: Module update problem (by @Codencode)
      • #40054: Use URL when building urls to prevent subtle mistakes with &? (by @tswfi)
      • #40036: BO - Product : Fixed feature display in multishop (by @Progi1984)
      • #39854: Fix: Quick Access links redirect to root instead of subdirectory, causing 404 (by @Codencode)
      • #40050: Fix: Incorrect redirect from HTTP to HTTPS on the admin login page when PrestaShop is in a subfolder (by @Codencode)
      • #40475: Fix link for redirection on country BO page (by @jolelievre)
      • #40066: Fix: [BO] Admin Countries page redirect issue with multishop after changing shop (by @Codencode)
      • #40329: Prevent NoResultException when checking for existing translations (by @ChillCode)
      • #39926: Fix: handle SELECT fields without no_quotes in getSensitiveAttributes (by @Codencode)
      • #40001: Fix redirect after editing root category to use current categoryId in stead of PS_HOME_CATEGORY (by @Codencode)
      • #39869: Update monologger to v3 (by @NKoonen)
      • #40256: Fix: Issue retrieving product price when adding the first specific_price (by @Codencode)
      • #40243: Admin API handle position update (by @jolelievre)
      • #40257: Prevent saving ajax URL for future login redirection, or the redirect… (by @jolelievre)
      • #40112: Bump prestakit to v2.0.5 (by @Quetzacoalt91)
    • Refactoring:
  • Front Office:
    • New feature:
      • #40403: Allow easily hooking into country and currency selection logic (by @Hlavtox)
    • Improvement:
      • #40537: Remove unnecessary force refresh in checkout (by @Hlavtox)
      • #40248: Prevent Exposure of Sensitive Product Attributes in Front Office (by @M0rgan01)
    • Bug fix:
      • #40246: Fix preview in multilang (by @tleon)
      • #39582: Fix: Product customization text field bug with using symbol {} (by @Codencode)
      • #40117: Fix cart rule validation in front office (by @Hlavtox)
      • #40262: Allow access to customized files preview without multi-lang enabled (by @kpodemski)
      • #40137: Updated zxcvbn to a maintained version for consistency with backend checks (by @tleon)
    • Refactoring:
  • Core:
  • Installer:
    • Bug fix:
      • #40574: Fix Makefile to prevent build assets twice (by @jolelievre)
      • #40077: Install Console : Allow characters "<" & ">" in admin password (by @Progi1984)
      • #40114: Chore(Makefile): fix Makefile shell detection issue (by @tyloo)
  • Localization:
  • Tests:

Full Changelog: 9.0.2...9.0.3

PrestaShop 8.2.4

03 Feb 09:49

Choose a tag to compare

This release fixes 1 vulnerability.

PrestaShop 9.1.0 Beta 1

07 Jan 09:36
31bdb75

Choose a tag to compare

Pre-release

Full Changelog

This is the first beta for PrestaShop 9.1.0. You can read the Release note on the blog.

Click here to see

  • Back Office:
  • Front Office:
    • New feature:
      • #39755: Feat: add logic for new display on multishipment for order summary (by @PoulainMaxime)
      • #38444: Show all carriers in the delivery option when FEATURE_FLAG_IMPROVED_SHIPMENT is enabled (by @Nakahiru)
    • Improvement:
      • #40248: Prevent Exposure of Sensitive Product Attributes in Front Office (by @M0rgan01)
      • #39879: Chore: add new format to multishipment display on order final summary (by @PoulainMaxime)
      • #39787: Multi-carrier: added a property in OrderLazyArray (by @M0rgan01)
      • #39097: Fix CartPresenter translation domain (by @PululuK)
      • #39433: Allow specials characters in search (by @MattKelvin)
    • Bug fix:
      • #39582: Fix: Product customization text field bug with using symbol {} (by @Codencode)
      • #40117: Fix cart rule validation in front office (by @Hlavtox)
      • #40262: Allow access to customized files preview without multi-lang enabled (by @kpodemski)
      • #40137: Updated zxcvbn to a maintained version for consistency with backend checks (by @tleon)
      • #40044: Multistore : Display countries only those covered by active carriers (by @Progi1984)
      • #39788: Add check for enabled countries in cart and order (by @PrestaEdit)
      • #35471: [BC Break] PrestashopDatabaseException on cart confirmation with free delivery cart rules in debug mode #32748 (by @clotairer)
  • Core:
    • New feature:
Read more

PrestaShop 9.0.2

10 Dec 12:31
58870bc

Choose a tag to compare

This patch release fixes some bugs and adds some improvements.

Click here to read the changes since 9.0.1

  • Back Office:
    • Improvement:
    • Bug fix:
      • #40201: Fix path to legacy mail folder (by @Hlavtox)
      • #40123: Update module api resources with new boolean rule (by @jolelievre)
      • #40091: Update module ps_apiresources with new conventions (by @jolelievre)
      • #40052: BO - Multistore : Fixed link "Add new group" (by @Progi1984)
      • #40082: Fix: Error in updating the state that has an ISO code equal to that of a different country's state (by @Codencode)
      • #38617: Fix: Hook actionAttributeCombinationSave never triggered (by @Codencode)
      • #40062: BO - Products Page : Fixed URL for documentation (by @Progi1984)
      • #40004: BO - Customer Service : Fixed button "Reply to the next unanswered message in this thread" (by @Progi1984)
      • #39999: BO : Product (Virtual) : Set number of days without expiration date (by @Progi1984)
      • #39892: Fix order of categories in admin (by @Hlavtox)
      • #40021: BO - Orders : Fixed amount of order discounts when changing currency (by @Progi1984)
      • #37841: Fix: Multishop: Deleting and recreating a combination removes the shared reference (new Product Page V2) (by @Codencode)
      • #39669: Fix grid doctrine query builder to use context language instead of employee language (by @Codencode)
      • #39982: BO : Fixed anchor target for modules page (by @Progi1984)
      • #39834: BO Modules : Display only modules if you have the permission (by @Progi1984)
      • #39976: BO : Adresses : Fixed display of state if there is errors (by @Progi1984)
      • #39985: BO : Product SEO - Display attribute in SEO preview (by @Progi1984)
      • #39900: BO - Orders : Optimized Countries Choice (by @Progi1984)
      • #39833: BO - Orders - View - Carrier Modal : The selected carrier is the correct (by @Progi1984)
      • #39866: BO - Import : Added missing ISBN field for Products & Combinations (by @Progi1984)
      • #39897: BO - Categories : The description wasn't displayed by default in SERP (by @Progi1984)
      • #39914: BO - Permissions : Added authorization role for "More" (by @Progi1984)
      • #39886: Legacy email template scan (by @tleon)
      • #39874: BO - Products : Enable/Disable actions depending on permissions (by @Progi1984)
      • #39877: Add the possibility to bulk assign a new zone (by @nicosomb)
      • #38301: Fix: AverageTaxOfProductsTaxCalculator, Cannot use a scalar value as an array (by @Codencode)
      • #39691: Fix: Ensure order status template keeps between saves (by @ChillCode)
      • #39802: BO: State Grid : Clean unuseful parameters (by @Progi1984)
      • #39758: Allow attribute groups colors/textures on groups with ID different than 2 (by @ChillCode)
      • #39578: Fix issue with null values on stores from import (by @Prestaworks)
      • #39732: Fix order tax update (by @tleon)
      • #39728: Fix product broken when redirect target is deleted (by @tleon)
      • #39714: BO: Email Layouts : Set table responsive (by @Progi1984)
      • #39621: [BO] Added DataCollector for Legacy Profiling (by @Progi1984)
      • #39637: Ensure cache is cleared on each module action even when they fail (by @jolelievre)
    • Refactoring:
  • Front Office:
    • Improvement:
      • #39913: Add new hooks: actionOverrideQuantityAvailableByProduct - actionCheckAttributeQuantity - actionOverrideProductQuantity (by @Codencode)
      • #39928: Remove very specific text about payment validation (by @Hlavtox)
      • #39891: Fix: ProductController::findProductCombinationById() incorrect return type (by @Codencode)
    • Bug fix:
      • #40044: Multistore : Display countries only those covered by active carriers (by @Progi1984)
      • #36796: Fix: Product customization text appears as raw HTML in order confirmation email (order_conf) (by @Codencode)
      • #39817: Improve front office customer form validation to fix issues with guests and emails (by @Hlavtox)
      • #39572: Fix: Front container lazy service declaration (by @Codencode)
      • #39525: Fix: Fatal Error : Doctrine proxy classes and cache in production mode Prestashop 9.0.0 (by @Codencode)
      • #39606: fix(CustomerMessage): increase user_agent length from 128 to 255 to prevent silent validation errors on some mobile contact form (by @yebor974)
      • #39651: Fix the canonical redirection when category slug is wrong but id is correct (by @aomaxime)
    • Refactoring:
  • Core:
    • Improvement:
    • Bug fix:
      • #39905: Fixed swagger property filter system for mapped properties (by @tleon)
      • #40030: Initialize dispatcher early and fix all $_FILES issues (by @Hlavtox)
      • #39835: Fix Manufacturer/Supplier controllers return types for their respective getters (by @prestamodule)
      • #40017: Check if function exec is disabled in ExecKernelCacheClearer (by @jolelievre)
      • #39674: Fix log level create test db for 9.0.x (by @boherm)
    • Refactoring:
  • Installer:
  • Web Services:
    • Bug fix:
      • #39904: Add DateImmutable for api type consistency (by @tleon)
  • Localization:
  • Tests:
Read more

PrestaShop 9.0.1

13 Oct 15:24
1571ae0

Choose a tag to compare

This patch release fixes some bugs and adds some improvements.

Click here to read the changes since 9.0.0

  • Back Office:
    • New feature:
    • Improvement:
    • Bug fix:
      • #39559: Update HTMLTemplateOrderSlip.php (by @ShaiMagal)
      • #39472: Add missing "Stock location" in the defaults product csv (by @MattKelvin)
      • #39062: Fix display of Nav Bar with NULL icons (by @Quetzacoalt91)
      • #39554: [BC Break] Revert PR 38745 (by @tleon)
      • #39335: BO : Titles : When editing, fetch dimensions of the image (by @Progi1984)
      • #38006: Fix: Problems with customer groups category discounts (by @Codencode)
      • #39310: [BC Break] Remove property from documentation that are not in the ressources (by @tleon)
      • #37707: Fix unsecure payment request link (by @SebBareyre)
      • #39326: BO : HelperForm : Fixed for select the hard defined width (by @Progi1984)
      • #39430: Fix quantity in delivery slip if we have a refunded product (by @Touxten)
      • #39358: Create ModuleParser to parse module information (by @jolelievre)
      • #37590: Patch tinymce fullscreen (by @nicohery)
      • #39407: Update CancelProductType to display only refundable quantities as available quantity to refund (by @iNem0o)
      • #39400: Fix: Help is displayed two times (by @Codencode)
      • #38622: Fix: New product catalog does not load images in multi-store (by @Codencode)
      • #39340: Fix product / category access in BO when seo redirection related category is deleted (by @aomaxime)
      • #39375: Don't allow delete default country (by @Touxten)
      • #39333: Fix product access in BO when seo redirection related entity is deleted (by @aomaxime)
      • #39287: Fix + simplify last positions and add comments to it (by @Hlavtox)
      • #39314: BO : Orders : Modal Discount reset when it's hidden (by @Progi1984)
      • #39337: Fix: Cannot use newline in textarea on product page (by @Codencode)
      • #39269: BO : Admin API : Fixed selectors for copying secret (by @Progi1984)
      • #39271: BO : TinyMCE : Fixed checkbox icon (by @Progi1984)
      • #39272: BO : Fixed the memorization of the language used in Admin in the cookie (if option is enabled) (by @Progi1984)
      • #39292: BO : Fixed redirection when permission is not allowed (by @Progi1984)
      • #39312: Fix ALT shop name. (by @Touxten)
      • #39297: Update PHPDoc of ActionsBarButtonInterface (by @Quetzacoalt91)
      • #39295: [BC Break] Admin API CQRSDelete can use CQRSCommand and empty bodies can be used (by @jolelievre)
      • #39209: BO : Fixed HTML in informations & warnings block (by @Progi1984)
      • #39203: BO : Invoices : Harmonize Helper Text (by @Progi1984)
      • #39274: Added closure of the 'deleteCategoriesForm' form (by @Codencode)
      • #39208: Fix: Carrier search not working when editing order's carrier (by @Codencode)
      • #39160: Fix OrderStateType form to show all languages, including disabled ones (by @Codencode)
      • #39053: Add logic to generate random password on employee profil (by @PoulainMaxime)
      • #39257: Add missing attribute tag on constraints (by @jolelievre)
      • #39216: Fix: Call to a member function getClassName() on null when the Employee default tab does not exist anymore (by @Codencode)
      • #39228: Fix the result of Admin API paginated response (by @jolelievre)
      • #39206: Apply filters mapping on the orderBy query parameter in API listing (by @jolelievre)
      • #39168: Fix RouteValidator by checking unknown keywords in schema URL (by @cnavarro-prestashop)
      • #39193: When enriching the module data always keep most recent version (by @jolelievre)
      • #39153: BO Theme import : Fixed bad display when filename is too long (by @Progi1984)
      • #38810: Support for brand named as numbers (by @borjagarciab)
      • #39028: Fix carrier edit form name (by @Hlavtox)
      • #38549: Fix: Misleading maximum attachment upload size in configure/advanced/administration (by @Codencode)
      • #37933: Price final critical error fix (by @jf-viguier)
      • #38982: BO : Product Form : Use the correct configuration for the Max Filesize (by @Progi1984)
      • #39007: Client API - Help card is not displayed in sidebar as it should (by @seiwan)
      • #38966: Add missing Content-Type header in stock quantity update request (by @nborkowska)
      • #37928: Fix datacollector caster for reference object property including smarty cache_locking fatal error (by @jf-viguier)
      • #38846: BO Countries : Set two fields call_prefix & zip_code_format as non-required (by @Progi1984)
      • #38593: Fix query builder to find translations by key in Backoffice during the translations saving process (by @mcaldex)
      • #38532: Fix: Multistore: CMS page error on new empty store creation (by @Codencode)
      • #38337: Fix: Max password length allowed in the password policy is longer than bcrypt can handle and hardcoded max pass length for customer (by @Codencode)
      • #38581: Allow refund on an order of a deleted customer (by @jf-viguier)
    • Refactoring:
  • Front Office:
  • Core:
    • New feature:
      • #38881: Add hook that allows completely custom cart rule application on a cart (by @Hlavtox)
    • Improvement:
      • #39717: Chore: Update ps_apiresources (by @tyloo)
      • #39589: Improved generation of queries and commands (by @kpodemski)
      • #39591: Improve customer unicity check and add comments (by @Hlavtox)
      • #39541: Admin API Openapi multistore context documentation (by @iNem0o)
      • #39379: Updated PrestaShop Packages (by @github-actions[bot])
      • #39344: Updated PrestaShop Packages (by @github-actions[bot])
      • #39479: Bump PrestaShop version to 8.2.3 (by @matthieu-rolland)
      • #39466: Update Symfony components after 6.4.25 release (by @nicosomb)
      • #39264: Update Symfony components after 6.4.24 release (by @nicosomb)
      • #39371: Refacto ConnectionsSource.php for little better performance (by @ShaiMagal)
      • #39372: Refacto of few $_SERVER variables (Tools.php) (by @ShaiMagal)
      • #39364: Add genuine Czech republic bot (SeznamBot) to "isBot" function (by @ShaiMagal)
      • #38822: Another level of protection for Tools::unSerialize (allowed_classes => false) + refacto (by @ShaiMagal)
      • #39217: Fix changelog date for 8.2.2 (by @boherm)
      • #39145: Bump PrestaShop version to 8.2.2 (by @boherm)
      • #39006: Verify if category exists before accessing it (by @Hlavtox)
      • #39180: Bump patch version 9.0.1 (by @jolelievre)
      • #39150: Updated PrestaShop Packages (by @github-actions[bot])
      • #39063: Add option to automatically generate text version of emails (by @Hlavtox)
      • #39141: Update hummingbird to v1.0.1 (by @tblivet)
      • #39135: Updated PrestaShop Packages (by @github-actions[bot])
      • #39043: Silence some last smarty deprecations (by @Hlavtox)
        -...
Read more