News
Medusa reissues its security release after 2.22.5 shipped incomplete
Medusa 2.22.6 supersedes 2.22.5, which included a security hardening fix but was published with missing package files. Stores on 2.22.5 should move to 2.22.6.
Medusa, the open source commerce platform, published version 2.22.6 on 9 November as a corrected re-release of 2.22.5.
Why there are two releases
Version 2.22.5 contained a security hardening fix, but some of its packages were published without their build output. Version 2.22.6 supersedes it with complete packages. Medusa points to the 2.22.5 notes for details of the security fix itself.
What to do
If you upgraded to 2.22.5, move to 2.22.6. If you are on an earlier version, skip 2.22.5 and go directly to 2.22.6.
Other fixes
- The draft-order and loyalty plugins now include their build output when packed with Yarn.
- The dev server restarts on Windows after a failed boot.
- The orders list no longer returns order items unless they are requested.
