Shipped · APIs and backends

What Sylius/Sylius shipped

The public repository of Sylius · github.com/Sylius/Sylius

Written by FoxPlug from the repository's own releases; not affiliated with Sylius. Paste your own repository in the box below and FoxPlug writes the same weekly update for your product. This page is an automatic summary of the releases, pull requests and commits in github.com/Sylius/Sylius; Sylius did not write it and does not use or endorse FoxPlug. Every line links to the change it describes.

Get a weekly update like this for your product, free

Or Use it as a GitHub Action

See the update FoxPlug writes for Sylius, free

Week of October 26, 2026

What shipped

Why it matters

This week brings a fixtures addition that lets shop users be created as verified on channels where email verification is required, a fix to the German place order button wording, and a related German translation adjustment. It also includes build adjustments for newer Symfony patch releases and small cleanup to satisfy static analysis and remove a duplicated test.

Changelog entry

Example posts FoxPlug drafted from these changes. Not written or posted by the project.

Post for X

This week: shop user fixtures can now mark users as verified, the German place order button wording was fixed to meet legal requirements, and German channel translations for skipping payment were aligned. Behat contexts were adjusted for newer Symfony patch releases.

Post for LinkedIn

This week in Sylius: shop user fixtures gained a verified option so users can be created with a verified email on channels that require it. The German translation on the place order button in UiBundle was fixed to meet German legal wording requirements, and the German translation for skipping the payment step in admin channel translations was aligned with the shipping step wording. Behat contexts were also adjusted for Symfony 6.4.49 and 7.4.22 to fix the build, a PHPStan-rejected annotation was removed, a duplicated test method was removed, and the 2.2 branch was merged into 2.3.

Week of October 19, 2026

What shipped

Why it matters

This week brings security releases across four supported branches, fixing vulnerabilities that could expose or modify customer data, keep disabled APIs reachable, and inject host headers into password reset emails. Users on v2.3, v2.2, v2.1, and v1.14 should upgrade to the respective patch releases. A payment repository fix also ensures the latest matching payment request is returned.

Changelog entry

Example posts FoxPlug drafted from these changes. Not written or posted by the project.

Post for X

Security releases are out: v2.3.2, v2.2.12, v2.1.17, v1.14.21. They fix percent-encoded API path bypass, disabled API reachability, host header injection in password reset email, and unpublished review disclosure. Upgrade your branch. Also: PaymentBundle returns latest matching p

Post for LinkedIn

Security releases have been published for Sylius: v2.3.2, v2.2.12, v2.1.17, and v1.14.21. These patch percent-encoded API path bypass of shop API ownership filters, a disabled API remaining reachable through a percent-encoded path, host header injection in the shop password reset email link when the channel has no hostname, and unpublished product reviews disclosed through the Shop API item endpoint. Users on these branches should upgrade to the respective patch release. Additionally, PaymentBundle now returns the latest payment request when several match the action, payment and method.

Week of October 12, 2026

What shipped

Why it matters

This week brings two patch releases, v2.3.1 and v2.2.11, so projects on those lines can pick up fixes for MariaDB detection on DBAL 4, taxon tree buttons and missing Greek translations. Work also continues on the new routing branch and on API and admin dashboard behavior that affects day-to-day use.

Changelog entry

Example posts FoxPlug drafted from these changes. Not written or posted by the project.

Post for X

Two patch releases this week: v2.3.1 with a MariaDB fix on DBAL 4 and a taxon tree button fix, and v2.2.11 with missing Greek translations. Also: API now returns 422 for missing required fields on API Platform 5.0.3+, and the admin dashboard picks an enabled channel by default.

Post for LinkedIn

This week we published two patch releases. v2.3.1 includes a fix so AbstractMigration::isMySql() recognizes MariaDB on DBAL 4, a fix for collapsed taxon tree action buttons with Tabler 1.4, and a Behat Chrome extension requirement bump. v2.2.11 adds missing Greek translations across ShopBundle, CoreBundle, Promotion and Shipping. On the code side, the API now returns 422 for missing required fields on API Platform 5.0.3 and newer, the admin dashboard defaults to an enabled channel when disabled channels exist, and the cart offcanvas refreshes correctly on live re-render. The new routing branch also saw refactoring of shop user verification and product variant position updates.

Week of October 5, 2026

What shipped

Why it matters

This week brings fixes for admin and shop interface issues that affect everyday use, including the grid delete action and the collapsed taxon tree buttons. It also makes MariaDB detection work correctly on DBAL 4. For Greek-speaking users, a large batch of missing translations was added across several bundles.

Changelog entry

Example posts FoxPlug drafted from these changes. Not written or posted by the project.

Post for X

Small fixes this week: admin grid delete action and taxon tree buttons, MariaDB detection on DBAL 4, and a behat extension requirement. Greek translations were also filled in across the shop, core, promotion and shipping bundles.

Post for LinkedIn

This week includes fixes for a few interface and compatibility issues. The admin and shop grid delete action now falls back to its default label and icon when a null value is passed, and the collapsed taxon tree buttons keep their width on Tabler 1.4. MariaDB is recognized again by AbstractMigration::isMySql on DBAL 4. The maintenance branch now requires sylius-labs/behat-chrome-extension 1.5.1 or newer. Greek translations were also completed or expanded in the shop, core, promotion and shipping bundles, covering form labels, email templates and account pages.

Week of September 28, 2026

What shipped

Why it matters

V2.3.0 brings compatibility with the latest Symfony and API Platform versions, modernizes the admin interface with dark mode, and improves promotion configuration flexibility. These updates ensure Sylius stays current with the broader PHP ecosystem while enhancing developer experience.

Changelog entry

Example posts FoxPlug drafted from these changes. Not written or posted by the project.

Post for X

Sylius v2.3.0 is here: Symfony 8 support, API Platform 5, admin dark mode, PHP-configurable grids, per-channel promotions, and stable Payment Request API.

Post for LinkedIn

Sylius v2.3.0 is now available. This release brings support for Symfony 8, API Platform 5, and Symfony UX 3, keeping pace with modern PHP development. New features include admin dark mode, PHP-based grid configuration, per-channel promotion rules and actions with usage tracking, and a stable Payment Request API. Performance improvements include optimized order item adjustment preloading.

Week of September 21, 2026

What shipped

Why it matters

Version 2.3.0-RC.1 brings major dependency upgrades including API Platform 5, Webpack Encore 6, and Symfony UX 3.0, while fixing bugs and replacing outdated libraries. These changes position the project for modern tooling while maintaining backward compatibility where possible.

Changelog entry

Example posts FoxPlug drafted from these changes. Not written or posted by the project.

Post for X

Sylius 2.3.0-RC.1 is here. API Platform 5 support, Webpack Encore 6, Symfony UX 3.0, and a fresh product gallery powered by viewerjs. Try it out.

Post for LinkedIn

We're excited to announce Sylius 2.3.0-RC.1. This release brings API Platform 5 support, upgrades to Webpack Encore 6 and Symfony UX 3.0, and replaces the unmaintained spotlight.js with viewerjs for product galleries. It maintains compatibility with Symfony 7.4 and 8.0. Developers using PHP 8.5 will benefit from PHPArkitect support. Check out the release candidate and share your feedback.

More from Sylius/Sylius on GitHub

Merged pull requests

Weeks with too little public activity are left out rather than filled in. Last updated 2026-11-03.

Is this your repo? Ask us to remove this page.