Magento Commerce 2.3.5 Release Notes: Upgrades, Fixes, & Other Highlights

This article entails the release notes of Magento Commerce 2.3.5 which includes all the major fixes, upgrades, security enhancements, and much more. Finally, the release notes of the much-awaited Magento Commerce 2.3.5 have been released. There is a myriad of features & functionalities enhancements, bug & error fixes, platform upgrades, performance improvements, and other numerous changes.

In this release, there are more than 180 fixes to the functionalities of the core product and 25 enhancements of the security issues. Along with this, there are 46 GitHub issues which have been fixed by our huge community members. The community members contribution lies from cleaning up core code to enhancements in Inventory Management & GraphQL.

When Magento Commerce 2.3.5 notes will release?

The Magento Commerce 2.3.5 will release in April 2020. The announcement has been made official on the Magento Site.

What are new updates and fixed issues in the Magento Commerce 2.3.5?

As we have already mentioned, the new release of Magento commerce 2.3.5 come up with more than 180 functional fixes and 25 plus security enhancements.

Now the merchants can install time-sensitive security fixes without needing numerous functional fixes or enhancements that come up with a full quarterly release. You can also check the security updates available for Magento in detail.

You must know that the code for most features comes in bundles with the release of Magento core code, however, there are features like Page Builder, Inventory Management, Progressive Web Applications Studio, which are also released independently.

Now, let’s discuss all the major highlights in this release:

1. Substantial Security Enhancements:

There are more than 25 enhancements in security which close the Remote Code Execution (RCE) along with Cross-site Scripting (XSS) vulnerabilities. Currently, no major attacks have found to date. These vulnerabilities can help the attackers to take over Admin or accessing customer information. But firstly, the attacker would require to access admin. Hence, we say, protect your Admin panel by all possible means such as IP whitelisting, two-factor authentication, use of a VPN, the use of a unique location, and maintain a highly secure password.

Apart from these security measures, there are two more major enhancements:

• CSP Implementation: Content Security Policy, an HTTP response header, is used by the browser for enhancing the web page security. It detects attacks, like cross-site scripting & data injection attacks.
• Session id removal from URLs: Session id presence in URLs create a potential threat, hence removing code from the classes and session ids from URLs gives more protection.

Get help for hassle-free Magento 2 migration

2. Platform Upgrades:

In this release, there are numerous upgrades in the platform which enhance the overall performance and security of the Magento platform.

• Elasticsearch 7.5 support: In this release, Elasticsearch 7.5 support both Magento Commerce and Magento Open Source. Now the Magento 2.3.x support Elasticsearch 6.x as well as 7.x, however, the earlier versions of Elasticsearch are deprecated for Magento 2.3.x.
• No support for 3rd Party Payment methods core integration: Core integration of payment methods such as Authorize.Net, eWay, CyberSource, and Worldpay are now deprecated. Magento will not provide support for the integration of core feature and in the next release of Magento 2.4.0, these features will be removed. Therefore, if you are a seller, move to the official extensions available on the Magento marketplace.
• Signifyd fraud protection code core integration is no longer in support: The core feature of Signifyd fraud protection code, Magento doesn’t provide support to it any more. Hence, you should move to the official extension of Signifyd Fraud & Chargeback Protection, available on the Magento Marketplace.

3. Performance Boosts:

Magento has aimed in its release to provide a significant boost in the overall performance of the Magento Commerce.

• The customer data invalidation logic has been improved in this release. There is a new way invalidating customer sections data which can avoid the issue with local storage when custom sections.xml invalidations are active.
• There are optimizations in the Redis performance. The queries which performed on each Magento request in Redis have been minimized. The major optimizations are:
  • The data transfers between Redis & Magento has been decreased.
  • Redis consumption of CPU cycles gets decrease.
  • Redis write operations in race conditions gets reduce.

4. Infrastructure Improvements:

There are enhancements of improving the core quality of code, along with its modules such as catalogue, sales, PayPal, Elasticsearch, Import, CMS, and B2B.

The PayPal Pro payment method can now work in the Chrome 80 browser. Earlier, it invoked a Magento callback endpoint that needed access to the customer’s session.

A PHPStan code analysis check has been integrated into Magento static builds.

5. Merchant tool enhancements:

There have been several enhancements in the merchant tools including the templates, video backgrounds for rows, banners, and sliders, full height rows, banners, sliders, and content type upgrade library.

6. Inventory Management:

In this release, the inventory management enhancements are:

• New bulk API for IsProductSalableForRequestedQtyInterface which is usable for cart verification and checkout process.
• New extension for SourceDataProvider and StockDataProvider
• Can view allocated inventory sources from the Orders list

7. GraphQL:

You can use the queries of products and categoryList for getting information about the same respectively which are added to a staged –campaign.

8. PWA Studio:

For knowing about the enhancements in the PWA studio, and other improvements, you can go through this link of PWA Studio releases precisely.

9. DotDigital:

In this release, there is an integration of Engagement cloud and Magento B2B which enables Magento B2B merchants to leverage their B2B commerce data and better engage with their prospective and existing customers. It includes syncing of company data, catalogue data, quote data.

10. Google Shopping ads channel:

In the Magento 2.3.5 Commerce release, the Google Shopping ads channel has come to its end. However, there are many other similar extensions available on the Magento Marketplace.
Learn More – Benefits of migrating Magento 1 to Magento 2

11. B2B:

There are more than 18 fixes in the Magento 2.3.5 Commerce release. Check the official site to see B2B release notes.

12. Vendor-developed extension enhancements:

There have been many improvements in the extensions by third-party vendors for a better quality and user experience improvements. Some of the extensions are Klarna, Yotpo, Vertex etc.

Fixed Issues:

In this release, the Magento experts and community developers have fixed tons of issues in Magento 2.3.5 core code.

Author Amit Samsukha

CTO at Emizentech and a member of the Forbes technology council, Amit Samsukha, is acknowledged by the Indian tech world as an innovator and community builder. He has a well-established vocation with 12+ years of progressive experience in the technology industry. He directs all product initiatives, worldwide sales and marketing, and business enablement. He has spearheaded the journey in the e-commerce landscape for various businesses in India and the U.S.

Related Posts

Strategic Adobe Commerce Migration for Business Growth

January 23, 2024

What Is Visual Merchandiser in Adobe Commerce, & How To Set It Up?

January 17, 2024

How To Ensure eCommerce Security for Adobe Commerce?

December 20, 2023