Releases: shopware/shopware
Release v6.7.0.1
See the UPGRADE.md for all important technical changes.
Shopware 6.7.0.0
Shopware 6.7.0.0
This major release introduces significant technical improvements, cleanup of deprecated features, upgraded accessibility changes and impactful changes for long-term platform stability. After a RC validation period in different phases, the 6.7 release is now production-ready for self-hosted environments.
Highlights
-
Vue 3 is now fully supported in the administration. The compatibility layer has been removed, and Pinia replaces Vuex for state management.
-
Webpack has been replaced with Vite for the administration build process, improving performance and DX.
-
Storefront and Admin templates have been migrated to the Meteor Component Library. Several legacy components have been deprecated or removed.
-
The cache system has been reworked. Store-API route caching has been removed, and ESI was introduced for more precise cache control.
-
Native type declarations have been added to PHP class properties across the platform.
-
Multiple core libraries were upgraded: DBAL 4.x, PHPUnit 11.x, Dompdf 3.x, oauth2-server 9.x.
-
The OAuth token request flow is now spec-compliant. The /api/oauth/authorize endpoint has been removed.
-
Accessibility improvements have been made across the admin UI in preparation for the European Accessibility Act (EAA).
Deprecation Cleanup
6.7 finalizes the deprecation removals that were scheduled during the 6.6 lifecycle. Please refer to the Upgrade Guide for detailed migration instructions.
Upgrade Considerations
-
Plugin and app developers should test compatibility, particularly with the Vue 3 and Vite changes.
-
Private apps and themes may require additional review due to internal API and caching adjustments.
-
Redis configuration and Varnish now rely on updated modules. See the hosting section in the upgrade guide.
Additional Resources
The changes introduced between RC5 and the final release were limited to bug fixes and minor adjustments. No additional breaking changes were introduced after RC5.
Release v6.6.10.5
See the UPGRADE.md for all important technical changes.
- #9447- Assets repeatedly disappearing
- #10112 - Silence and log exceptions of In-App purchases
- #10254 - Pass through extensions from IdSearchResult to EntitySearchResult in ProductListingLoader @OliverSkroblin
- #10259 - Translated custom field value accessor @OliverSkroblin
- #10285 - Unwrap messages when routing
- #10300 - Fix StoreAPI criteria endpoints schema @akf-bw
- #8321 - Fix nested line items
- #8739 - Imitate customer active sales channel check @MelvinAchterhuis
- #8763 - Add recalculated custom line-items to delivery
- #9031 - ci: reenable 6.6.0.0 update (fixes #9031)[6.6.x] (#9248)
- #9117 - Allow enriching seoUrls for search results's extensions
- #9179 - Elasticsearch index's mapping should be updated post update
- #9198 - Fix StructEncoder custom field visibility @akf-bw
- #9236 - Add AllowHtml Attribute support @raffaelecarelle
- #9333 - Added locking mechanism to CartOrderRoute
- #9356 - Fixed accessibility issue of collapse button of orders @aragon999
- #9388 - Fix search result order
- #9460 - Transmit correct shipping costs to Google Analytics @aragon999
- #9517 - Provide context token to current request
- #9532 - Refactored snippet set list
- #9572 - Fix theme settings getting lost when navigating quickly @amenk
- #9615 - Changed manufacturer wrapper from
<a>
to<div>
when link is missing - #9712 - Display Promotion rule correctly as line item rule in Administration
- #9729 - Fix search term custom find weird icons
- #9844 - Fix incorrect overwrite of deepLinkCode on order recalculation
- #9851 - feat: implement event on Sitemap Generation, closes #9851 [6.6.x] (#9968)
- #10190 - Fix essential characteristics create template with more than 2 values does not work
- #5413 - Fix sorting of countries in Storefront
- #5899 - Elasticsearch list/price percentage ratio dynamic product groups not working
- #7447 - Variant indicator missing in product listing
- #8285 - Fixed promotion deletion cart error
- #8790 - Fix inline media upload preview image option is broken
- #8828 - Fix category search results not scrollable
- #8922 - Fix allowFullscreen attribute in CmsGdprVideoElement
- #9384 - Fix search result order in preview search in mysql
- #9612 - Remove overwrite of CreatedByField with non-live version
- #9715 - Set Limit when loading options in property group detail page
- #9855 - Elasticsearch custom fields dynamic product groups not working
- #7768 - Reduce downtime while theme change
- #9851 - Add Event to modify SalesChannelContext @wrongspot
Release v6.7.0.0-rc5
See the UPGRADE.md for all important technical changes.
- #8388 - Replace old data protection info the our current standard
- #9433 - Adjust styling label created by admin on customer detail page
- #9461 - Transmit correct shipping costs to Google Analytics @aragon999
- #9510 - Add
skip-theme-compile
option for app uninstall - #9518 - Provide context token to current request
- #9532 - Refactored snippet set list
- #9572 - Fix theme settings getting lost when navigating quickly @amenk
- #9579 - Account design adjustments
- #9600 - Show rendered type of tax rule restrictions @aragon999
- #9615 - Changed manufacturer wrapper from
<a>
to<div>
when link is missing - #9623 - Adjusted the styling of the tooltip dot marker
- #9713 - Display Promotion rule correctly as line item rule in Administration
- #9729 - Fix search term custom find weird icons
- #9845 - Fix incorrect overwrite of deepLinkCode on order recalculation
- #9868 - Replaced
sw-checkbox-field
component bymt-checkbox
in theme assignment @aragon999 - #9955 - Update Meteor to 4.12.1
- #5413 - Fix sorting of countries in Storefront
- #5899 - Elasticsearch list/price percentage ratio dynamic product groups not working
- #7447 - Variant indicator missing in product listing
- #8790 - Fix inline media upload preview image option is broken
- #9055 - Replace theme media sidebar with media modal
- #9384 - Fix search result order in preview search in mysql
- #9557 - Fix first level nav bar links
- #9612 - Remove overwrite of CreatedByField with non-live version
- #7768 - Reduce downtime while theme change
- #9426 - Fix Change in new generated language get an error
Release v6.7.0.0-rc4
Notable Changes
Mitigate Meteor components migration with deprecated components
To support extension developers and ensure compatibility between Shopware 6.6 and Shopware 6.7, a new prop called deprecated
has been added to Shopware components.
- Prop Name:
deprecated
- Default Value:
false
(uses the new Meteor Components by default) - Purpose:
- When
deprecated
is set totrue
, the component will render the old (deprecated) version instead of the new Meteor Component. - This allows extension developers to maintain a single codebase compatible with both Shopware 6.6 and 6.7 without being forced to immediately migrate to Meteor Components.
- When
Example:
<!-- Uses mt-button in 6.7 and sw-button-deprecated in 6.6 -->
<template>
<sw-button />
</template>
<!-- Uses sw-button-deprecated in 6.6 and 6.7 -->
<template>
<sw-button deprecated />
</template>
Improve extensibility of header and footer ESI templates
With this change it is possible to add query parameters to the header/footer ESI requests.
This could be used to customize the header/footer templates.
- Extending the
src/Storefront/Resources/views/storefront/base.html.twig
file:
{% sw_extends '@Storefront/storefront/base.html.twig' %}
{% block base_esi_header %}
{% set headerParameters = headerParameters|merge({ 'vendorPrefixPluginName': { 'activeRoute': activeRoute } }) %}
{{ parent() }}
{% endblock %}
- Within a plugin, you can also use the
Shopware\Storefront\Event\StorefrontRenderEvent
class StorefrontSubscriber
{
public function __invoke(StorefrontRenderEvent $event): void
{
if ($event->getRequest()->attributes->get('_route') !== 'frontend.header') {
return;
}
$headerParameters = $event->getParameter('headerParameters') ?? [];
$headerParameters['vendorPrefixPluginName']['salesChannelId'] = $event->getSalesChannelContext()->getSalesChannelId();
$event->setParameter('headerParameters', $headerParameters);
}
}
After that you can use this data to customize the header template:
{% sw_extends '@Storefront/storefront/layout/header.html.twig' %}
{% block header %}
{{ dump(headerParameters.vendorPrefixPluginName.activeRoute) }}
{{ dump(headerParameters.vendorPrefixPluginName.salesChannelId) }}
{{ parent() }}
{% endblock %}
See the UPGRADE.md for all important technical changes.
- #7346 - feat: Fixes #7346 - Allow variable icon names in sw_icon [6.7.0.0] (#8477)
- #7476 - fix no new line for placeholder
- #7652 - Rename
order_transaction
transition actionpay
andpay_partially
- #8002 - Show customer default addresses in available listing
- #8412 - fix broken snippets in rule builder conditions
- #8499 - Improve basic captcha form validation compatibility
- #8649 - Solve admin promotion issues
- #8686 - Case insensitive guest order e-mail and postal code check
- #8739 - Imitate customer active sales channel check @MelvinAchterhuis
- #8896 - Fix local mode of
sw-one-to-many-grid
@aragon999 - #8937 - Fix multi select filter for translated entities @nickygerritsen
- #8964 - Allow small size of
sw-simple-search-field
@aragon999 - #9012 - export createTextEditorDataMappingButton through global Shopware component helper
- #9037 - Allow small size of
sw-select-rule-create
@aragon999 - #9051 - Changed text when editing locked CMS page in table view @MelvinAchterhuis
- #9060 - Remove extra closing curly brace @MelvinAchterhuis
- #9075 - Add active styling class to main navigation
- #9102 - Fix admin password recovery submit @wannevancamp
- #9112 - Fix height of search field in
sw-card-filter
component @aragon999 - #9118 - Allow enriching seoUrls for search results's extensions
- #9137 - Fix admin ui when staging mode enabled @MelvinAchterhuis
- #9160 - Revert "Silently ignore admin ES errors (NEXT-37382)" @paulvonallwoerden
- #9180 - Elasticsearch index's mapping should be updated post update
- #9199 - Fix StructEncoder custom field visibility @akf-bw
- #9210 - Do not include empty subcategory navigation lists @aragon999
- #9215 - "Fix admin watcher Vite origin host for DDEV" @vanWittlaer
- #9252 - Change PropertyGroupOption
combinable
visibility @akf-bw - #9290 - Improve sw-page back button linking @lacknere
- #9313 - Add blocks for inputs for address and register form @aragon999
- #9334 - Added locking mechanism to CartOrderRoute
- #9357 - Fixed accessibility issue of collapse button of orders @aragon999
- #9390 - Cleanup cancel order modal @aragon999
- 8265 - Changed form validation to check for custom error message
- 8285 - Fixed promotion deletion cart error
- 8828 - Fix category search results not scrollable
- 8859 - Add deprecated prop to facilitate the migration to meteor components
- 8922 - Fix allowFullscreen attribute in CmsGdprVideoElement
- 8925 - Fix faulty modal behavior in Advanced Pricing "Create New Rule" @maheshbohara
- 8976 - Fix admin assets with underscores in plugin names
- 8978 - Fix incorrect proportions of tags in orders @maheshbohara
- 9207 - Fixed misalignment of 'Add tags...' placeholder in order edit view @maheshbohara
- https://github.com/shopware/shopware/issues/8136 - Improve extensibility ESI templates
- https://github.com/shopware/shopware/issues/9024 - Fix RetryableTransaction missing savepoint error
- #9389 - Fix search result order
Security Release 6.5.8.18
Fixed security issues:
- Blind SQL-injection in DAL aggregations @AndreasA (originally GHSA-8g35-7rmw-7f59)
- Check for registered accounts through the store-api @niklaswolf
Our backporting process failed for these two security issues, big thank you to @AndreasA and @MelvinAchterhuis for reporting this
This is going to be the last patch for 6.5, please make sure that you have the security plugin installed and keep it updated.
Release v6.6.10.4
See the UPGRADE.md for all important technical changes.
- #4450 - OffCanvasSingleton does not remove hard-coded offcanvas from DOM
- #4654 - Fix HTML quirks mode in the Storefront
- #6311 - Increase contrast for slider UI
- #6648 - Make product variation accessible in seo url templates
- #6675 - Fix elasticsearch indexing performance for orders in administration @niklaswolf
- #6760 - Fix order delivery state machine name @akf-bw
- #6820 - Removed the total count mode when selecting products during order creation in the administration.
- #6837 - Ask for save order before proceeding
- #6845 - Restore customer address from order for context
- #6875 - Sorted conditions alphabetically
- #6886 - Improve db queries on media files
- #6954 - Only show style attribute if blockBgColor variable isset @jmatthiesen81
- #7108 - Add title attribute to filter remove button
- #7113 - Eliminate errors when clicking product rating
- #7128 - Adjust card component position name in order detail
- #7131 - Fixed bulk edit custom fields
- #7134 - Fix missing CMS product slider animation and re-enable CMS sliders speed configuration @lacknere
- #7136 - Use current order data in mail preview
- #7215 - Improve accessibility of footer collapse sections on mobile.
- #7244 - Accessibility of keyboard navigation on mobile
- #7256 - Add aria-labels to product slider controls @aragon999
- #7382 - Make off-canvas navigation accessible
- #7624 - Improve cookie settings accessibility
- #7654 - Close search suggests when focus of input is lost @nguyenquocdaile
- #7697 - Fix double triggering of switch field
update:value
event - #7699 - Add missing dependency field of URL runtime field to media definition @pascalniklaspaul
- #7758 - fix cms block removable check @schneider-felix
- #7877 - Improve search widget accessibility
- #7890 - Disable Prefix Search for Synonyms to Prevent Irrelevant Results
- #7925 - Remove DeleteThemeFilesMessage usage in ThemeCompiler
- #7953 - Fix CmsDataResolver same Criteria different Entities @Fayti1703
- #8007 - Correctly reset promotion duplication fields @akf-bw
- #8020 - Pin promotions for admin orders
- #8230 - Spatial AR viewer checks
- #8234 - Fix loading of to one associations with partial data loading @pascalniklaspaul
- #8278 - Fix the issue where a criteria limit of 500 prevents loading admin modules
- #8317 - Prevent imitating as customer when not possible @MelvinAchterhuis
- #8333 - Fixed calls to update extensions
- #8401 - Show navigation arrows of product cross selling sliders (again) @aragon999
- #8422 - Fix override paging listing page parameter @akf-bw
- #8674 - New event for fetched category ids
- 5328 - Fix DAL inherited to-many field reads with limits
- 5615 - Allowed nulls in SystemConfigValidator for required values in child-configs
- 6842 - Exclude app namespaces in BundleHierarchyBuilder if DISABLE_EXTENSIONS is set
- 7093 - a11y insufficient accessibility of the search form field for screen readers @nguyenquocdaile
- 7858 - Fix webhook dispatching for not versioned events
- 8293 - Make search parameter optional in search api
- ANA-217 - Add shopware.usage_data.collection_enabled config to improve usage of shopware.usage_data.gateway.dispatch_enabled
- https://github.com/shopware/shopware/issues/6969 - Add file type to download and open e-invoices
- https://github.com/shopware/shopware/issues/7228 - Added missing rule filter for shipping price matrix
- https://github.com/shopware/shopware/issues/7350 - Show new customer address after saving admin modal
- #8895 - Fix local mode of
sw-one-to-many-grid
@aragon999
Release v6.7.0.0-rc3
See the UPGRADE.md for all important technical changes.
- #4450 - OffCanvasSingleton does not remove hard-coded offcanvas from DOM
- #5263 - Improve variants can be assigned to a category (Le Nguyen)
- #7056 - Fix adjacent form fields on narrow viewports
- #7346 - sw_icon variable icon name @runelaenen
- #7925 - Remove DeleteThemeFilesMessage usage in ThemeCompiler
- #8190 - Fix missing currency text in offcanvas currency selection
- #8318 - Prevent imitating as customer when not possible @MelvinAchterhuis
- #8321 - Fix nested line items
- #8333 - Fixed calls to update extensions
- #8399 - Show navigation arrows of product cross selling sliders (again) @aragon999
- #8423 - Fix override paging listing page parameter @akf-bw
- #8675 - New event for fetched category ids
- #8782 - Disable Prefix Search for Synonyms to Prevent Irrelevant Results
- #8840 - fix: Added missing class 'js-search-form' header search input element @marvn-r3
- 5328 - Fix DAL inherited to-many field reads with limits
- 7858 - Fix webhook dispatching for not versioned events
- 8293 - Make search parameter optional in search api
- Fix admin order shipping cost input behaviour(#7958)
- Changed ThemeConfigField::$type property type(#8494)
Release v6.7.0.0-rc2
See the UPGRADE.md for all important technical changes.
Fixed security issues:
- Blind SQL-injection in DAL aggregations
- Broken ACL on Document retrieval to access other customers documents
- Denial Of Service via password length (@bsmietana)
- Check for registered accounts through the store-api (@niklaswolf)
Other changes:
- #4654 - Fix HTML quirks mode in the Storefront
- #5900 - Only add gtag consent mode if Google Analytics is enabled (Max)
- #7108 - Add title attribute to filter remove button
- #7624 - Improve cookie settings accessibility
- #7843 - Update storefront Inter font and remove non-variable fonts (Max)
- #7867 - Add login scripts to window
- #7877 - Improve search widget accessibility
- #7888 - Cleanup storefront stylelint integration (Max)
- #7965 - Raise version in composer.stub (Marcus Müller)
- #8009 - Correctly reset promotion duplication fields (Benjamin Wittwer)
- #8021 - Pin promotions for admin orders
- #8235 - Fix loading of to one associations with partial data loading (Pascal Paul)
- #8280 - Fix the issue where a criteria limit of 500 prevents loading admin modules
- 7093 - a11y insufficient accessibility of the search form field for screen readers (Le Nguyen)