Magento 2.3.4
12 February 2020
Magento version 2.3.4 is now available (security release).
Upgrading to Magento 2.3.4
Magento 2.3.4 can be upgraded to (or installed) using any of Installatron's products. Use Installatron's optional Automatic Update feature to automatically apply Magento updates as new versions are released, or use Installatron's Clone feature to duplicate an existing Magento install to test the 2.3.4 upgrade prior to applying it live. Get started managing your Magento installations with Installatron
What's New in Magento 2.3.4
Magento Open Source 2.3.4 offers significant platform upgrades, substantial security changes, and PSD2-compliant core payment methods.
Security
- Over 30 security enhancements that help close cross-site scripting (XSS) and remote code execution (RCE) vulnerabilities.
- Removal of custom layout updates and the deprecation of layout updates to remove the opportunity for Remote Code Execution (RCE).
- Redesigned content template features so that only whitelisted variables can be added to templates.
Bug Fixes
- We have fixed hundreds of issues in the Magento 2.3.4 core code.
Platform Upgrades
- Enhancements to the message queue framework.
- Improved page caching and session storage.
- Enhanced support for MariaDB 10.2.
- The core integration of the Authorize.net payment method has been deprecated. Please use the official payment integration that is available on Marketplace.
Performance
- Redundant non-cached requests to the server on catalog pages have been eliminated.
- PHTML files have been refactored to better support parsing by the bundling mechanism.
- Added the ability to disable statistic collecting for Reports module by default.
Merchant Tools
- Integration with Adobe Stock image galleries.
Inventory Management
- Addressed a known performance issue that caused higher than expected loads on the database server in scenarios involving the shopping cart.
- Updated the Inventory Reservations CLI command to reduce memory usage when finding and compensating for missing reservations on large catalogs.
- Resolved multiple quality issues, including those related to credit memos, grouped products, source and stock mass actions.
GraphQL
- Guest carts can now be merged with customer carts.
- A customer can start an order on one device and complete it on another.
- Layered navigation can use custom filters.
- You can search categories by ID, name, and/or URL key.
- The ProductInterface supports fixed product taxes (such as WEEE).
- The cart object has been enhanced to include information about promotions and applied discounts at the line and cart levels.
PWA Studio
- Improved the getting-started experience through the use of @magento/create-pwa to scaffold your initial project using Venia as your template.
- Separation of the logic (Talons) and presentation pieces (venia-ui) of certain React hooks in Peregrine. Developers can now swap out either the logic or the presentation side of a component.
- Routing is now handled through the React Router (library of navigational components).
- Refactored Venia state management to abstract and reduce dependency on Redux.
- Continued migration from REST to GraphQL.
- Performance improvements (service workers, cache, image optimization).
- Breadcrumbs for improved storefront navigation.
dotdigital
- Live Chat powered by dotdigital enables merchants to increase conversion rates, and keep customers coming back with real-time engagement.
- Engagement Cloud includes a new Chat widget that makes it easy for shoppers to communicate in real time with customers as they shop in your store.
- Merchants can now sync additional campaigns from Engagement Cloud to Magento.