Skip to content

v2.4.0

Choose a tag to compare

View all tags
@yashvir-webkul yashvir-webkul released this 15 Jul 13:18
· 13 commits to main since this release
v2.4.0
7606846
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Release Notes — v2.4.0 (July 15, 2026)

Changed

  • Upgrade to Bagisto 2.4.7 / Laravel 12; the package now requires PHP 8.3+.
  • Upgrade API Platform to 4.3.x (api-platform/laravel and api-platform/graphql at ~4.3.8), which also resolves the api-platform/json-api security advisory.
  • Install only api-platform/laravel and api-platform/graphql — the other api-platform/* components are pulled in automatically, so the redundant per-component composer require list has been removed.
  • Keep every endpoint URL unchanged after the API Platform upgrade: auto-generated paths stay underscored (e.g. /api/shop/compare_items), so no client needs to update a URL.

Fixed

  • Fix GraphQL delete mutations (deleteWishlist, deleteCompareItem, deleteGdprRequest) returning only id instead of the deleted record's fields.
  • Fix storefront place-order (createCheckoutOrder) returning an empty payload.
  • Fix a request for another customer's return (customerReturn) returning a blank record instead of an error.
  • Fix filterableAttributes missing from the storefront category GraphQL type.
  • Fix admin user create/edit/delete and downloadable-file download rejecting roles that hold the correct permission, caused by permission keys renamed in Bagisto 2.4.
  • Fix storefront contact-us, newsletter, login, logout, forgot-password and token-verification responses returning empty payloads.
  • Fix creating a product review over REST (POST /api/shop/reviews) failing with a server error.

Full Changelog: v2.3.1...v2.4.0

Assets 2
Loading