craft\commerce\services\Purchasables::EVENT_PURCHASABLE_SHIPPABLE event handlers can now access the order. (#3279) Fixed a SQL error that could occur when fetching emails. (#3267) Fixed a bug where gateway URLs could be malformed. (#3299) Fixed an XSS vulnerability.