github medusajs/medusa v2.22.2
v2.22.2: Adyen Payment Provider, Search Improvements, Dependency Updates

3 hours ago

Highlights

Adyen Payment Provider

Medusa now includes an official Adyen payment provider module in beta, enabling merchants to accept card payments through Adyen's payment platform. The provider integrates with Adyen's APIs to handle payment sessions, captures, and refunds within Medusa's payment workflows.

#17577


Search Improvements and Fixes

Several enhancements and fixes have been applied to Medusa's search functionality, making product and catalog search more reliable across Medusa applications.

#17540

Dependency Updates

This release includes a large round of dependency updates across the server, CLI, admin dashboard, and design system, including several major version upgrades. Most of them require no changes in your application, but note the following behavior changes:

  • the Medusa admin now uses vite v7.3.7. If you have it installed in your project, make sure to update it as well.
  • bignumber.js 11: BigNumber and MathBN from @medusajs/framework/utils now throw an error when they receive an invalid number, instead of returning NaN. Medusa validates amounts before they reach these helpers, so this only affects custom code that passes invalid values and relies on NaN:
import { BigNumber, MathBN } from "@medusajs/framework/utils"

// Before: NaN
// After: throws "[BigNumber Error] Not a number: abc"
MathBN.add("abc", 1)
new BigNumber("")
  • body-parser 1.20.9: an invalid bodyParser.sizeLimit in a route's middleware configuration (for example, "abc") now throws an error when the route is called, instead of silently disabling the size limit.
  • @medusajs/ui-preset: the unused @tailwindcss/forms dependency was removed. If your Tailwind configuration loads @tailwindcss/forms without installing it yourself, add it to your project's dependencies.

For the full list of updated dependencies, refer to the following pull requests:

  • #17567: major version updates for repo and dev tooling
  • #17572: major dependency updates for admin and UI
  • #17575: bignumber.js 11.1.5
  • #17517: multer 2.5.0
  • #17535: AWS SDK dependencies
  • #17533: database and Redis drivers
  • #17532: auth and telemetry dependencies
  • #17528: admin dashboard and UI dependencies
  • #17527: server and CLI dependencies
  • #17525: dev packages
  • #17487: patch dependencies
  • #17519: handlebars 4.7.10
  • #17515: zod 4.6.6 in @medusajs/admin-sdk
  • #17573 and #17523: documentation dependencies

Features

Bugs

  • fix[adyen]: Ensure no capture override, only cards support until core improvements are done, better idempotency by @sradevski in #17579
  • fix(core-flows): don't replace payment sessions with an active payment by @shahednasser in #17536
  • fix: Medusa payment changes to match the latest in Cloud by @sradevski in #17558
  • fix(payment): disable payment providers removed from config on startup by @medusa-os-bot in #17545
  • fix(medusa): reject webhooks for nonexistent providers by @Mezzle in #17538
  • fix(pricing): don't charge a sale price above a matching override price by @medusa-os-bot in #17530
  • fix(inventory): don't re-add reserved quantity when restoring live reservations by @medusa-os-bot in #17509
  • fix(order): don't write off claimed items more than once by @medusa-os-bot in #17510
  • fix(promotion): reject null max_quantity for each and once allocations by @medusa-os-bot in #17514
  • fix(orchestration): retry steps with retryIntervalAwaiting after they fail by @medusa-agents in #17408
  • fix(js-sdk): allow admin.upload.create in Node.js without FileList by @medusa-os-bot in #17505
  • fix(caching): close the in-memory provider's cache client on shutdown by @medusa-os-bot in #17503
  • fix(ui): stop long labels from shifting left in DataTable select filter options by @NicolasGorga in #17543
  • fix(medusa): stop logging user emails in super admin role migration script by @medusa-os-bot in #17494
  • fix: re-apply changesets assemble-release-plan patch by @shahednasser in #17546
  • fix(ci): allow Actions artifact host in harden-runner egress allowlists by @shahednasser in #17554
  • fix(docs): resolve vulnerable dependencies and upgrade turbo to v2 by @shahednasser in #17573

Documentation

Chores

Full Changelog: v2.22.1...v2.22.2

Don't miss a new medusa release

NewReleases is sending notifications on new releases.