May brought significant momentum to the Sylius ecosystem, with major improvements to the Stripe Plugin, welcoming a new Sylius member, presenting the Subscription Module for Sylius Plus in action, and three new partners joining across Europe. Beyond product work, the community remained active with events, video content, and ongoing conversations about eCommerce migration and architecture choices.
Let’s dive into May! ☀️
May was a month of focused improvements across the Sylius ecosystem, with notable progress in payments, content management, platform stability, and developer tooling. A total of 100 pull requests were merged, bringing new capabilities alongside a wide range of quality, security, and maintenance enhancements.
The biggest momentum this month came from the Stripe Plugin, which saw significant investment in checkout experience, payment reliability, and merchant usability. Express Checkout was introduced both on the cart page and throughout the checkout flow, enabling faster purchasing journeys and reducing friction for customers (#34, #41). Additional improvements ensured wallet payments stay synchronized with cart totals and shipping selections, helping merchants avoid payment discrepancies and improving customer trust (#76, #86).
Merchants also gained stronger fraud-prevention and payment management capabilities. PaymentIntent metadata was enriched with order-level information for Stripe Radar rules, while several fixes improved webhook handling, authorization flows, and payment state synchronization (#49, #87, #89, #90).
The plugin also moved toward a more secure configuration model by promoting Stripe Restricted API Keys, improving onboarding guidance, and modernizing the administration experience with a redesigned gateway configuration interface (#31, #60, #63, #65, #75).
Core platform work focused on stability, extensibility, and developer experience. Admin notifications became more flexible, allowing plugins to surface clickable, contextual actions directly in the back office (#19015). Several API improvements and regression tests strengthened platform reliability, covering cart security, Swagger UI behavior, and product API edge cases (#19025, #19026, #19012, #19018).
The month also brought improvements to Symfony compatibility, form security, API consistency, and internationalization, making Sylius easier to extend and operate across diverse projects (#19001, #19024, #18988).
Content management capabilities received a meaningful upgrade with the introduction of a Quill-based WYSIWYG editor, making content creation more accessible for business users (#151). Several fixes also improved page management flexibility and storefront navigation, including support for nested page slugs and better handling of optional content collections (#153, #158).
The Demo application received a visual refresh on its homepage alongside a series of cleanup and maintenance improvements. These updates help keep the showcase project aligned with current Sylius best practices while improving the overall presentation experience (#364, #365, #366, #367).
Work continued on AI-related tooling and developer productivity. MCP Server Plugin support was updated to newer Symfony MCP versions, while the sylius-mate-extension project gained automated CI workflows and moved fully to stable dependency requirements, helping improve reliability for contributors and adopters (#10, #1, #2).
Several ecosystem projects benefited from maintenance and compatibility work. WishlistPlugin improved localization support for default wishlist names (#83), SyliusRecipes gained easier Product Configurator integration (#47), SyliusRector expanded migration tooling for B2B Suite users (#57), and Sylius-Standard received important PostgreSQL and security-related fixes (#1282, #1283).
Together, these updates continue to strengthen the Sylius ecosystem with faster checkout experiences, improved platform stability, better merchant tooling, and smoother developer workflows.
In May, we published security patches addressing three moderate-severity vulnerabilities affecting Sylius 2.x versions. The issues covered an IDOR vulnerability in payment requests, a channel-based payment method restriction bypass, and a race condition that could corrupt or delete already-completed orders.
As AI-assisted security research becomes more common across open-source projects, our approach remains consistent: review each report carefully, validate the impact, and release clear fixes for supported versions.
If your store runs a version below 2.0.18, 2.1.15, or 2.2.6, it’s best to update as soon as possible. Full details and workarounds are available in our security advisory blog post. We’re grateful to the community members who responsibly disclosed these vulnerabilities, especially Fase Rais Baradika (baradika), Anshu Chimala (achimala), FredrikEV, and Kévin Gonella (kgonella). 💪
Say hello to Ferdi Balaban, who has joined Sylius as our Key Account & Partnership Manager, focusing on France and the Benelux region.
His role centers on staying close to the people and companies using Sylius – partners, agencies, software houses, as well as customers and independent developers. Understanding their needs keeps feedback open and creates a clear point of contact in the ecosystem that matters for any open-source platform.
Welcome to the team, Ferdi! 🦢
The Sylius Community Edition demo is back and ready to explore. It gives you a quick way to see how Sylius works in a standard setup – before installing locally, testing with your team, or starting a new project.
The demo is based on Sylius/Sylius-Standard with official plugins and the default configuration you get out of the box. You can walk through the storefront experience, explore products and variants, test the cart and checkout flow, check the customer account and order history, and review the admin panel for catalog, orders, promotions, shipments, and payments.
For developers, it’s a quick reference for baseline Sylius setup. For agencies and merchants, it clarifies what comes from Sylius by default and what gets extended during implementation. If you need to explore more specific business scenarios, check out Elesto for B2B commerce or Dafré for marketplace projects.
Subscription-based sales are common across eCommerce: recurring deliveries, renewals, memberships, services, B2B supply flows, and regularly purchased products. The Subscription Module for Sylius Plus adds this capability while keeping the standard product, cart, order, and checkout flow intact.
With the module, you define subscriptions at the product variant level, letting merchants sell products as one-time purchases or subscriptions. Customers can mix recurring and non-recurring items in a single cart. Subscriptions are created from placed orders and managed through a clear lifecycle – status, intervals, and renewal dates. Renewal orders are generated automatically, and the flow is extensible for custom payment or billing logic.
The demo was built with Claude, using an AI-assisted development approach. It demonstrates what agentic coding can support in Sylius: faster prototyping, storefront adjustments, and business-flow extensions built on top of a solid Symfony architecture. The module is structured, testable, and fits naturally into how Sylius works. More AI content coming soon, stay tuned!
The Subscription Module is available in the Sylius Addons Marketplace. 🦢
We released the new Sylius PdfGenerationBundle, giving Sylius and Symfony projects a cleaner, more flexible way to generate PDFs.
Instead of locking into one rendering engine, the bundle provides a swappable abstraction with multiple adapters: KnpSnappy for wkhtmltopdf rendering, Dompdf for pure PHP rendering, and Gotenberg for container-based rendering.
This matters because wkhtmltopdf – the underlying engine often used with KnpSnappy – is no longer actively maintained. The abstraction gives projects flexibility to choose what works for their setup, and it leaves room to add more rendering adapters in the future without forcing projects to rewrite their PDF generation logic.
The bundle is already integrated into core Sylius plugins: RefundPlugin v2.1.0, InvoicingPlugin v2.2.0, and WishlistPlugin v1.2.0.
PS Summit is bringing the PrestaShop and Sylius communities together in Lyon on November 4-5 – and now it’s time to shape the program.
If you have a talk worth sharing – whether it’s a project story, technical case study, business insight, AI use case, or open-source perspective – submit your proposal. We’re looking for speakers from both ecosystems who can offer practical insights or challenge how we think about eCommerce.
The conference works best when it reflects what people are actually building and learning. Your experience, whether it’s a successful migration, an integration challenge solved, or a new way of thinking about commerce, matters.
Here you can submit the proposal 🤝
Choosing the right platform architecture impacts profitability, time-to-market, and operational costs. We published a new eBook designed to help eCommerce managers and executives navigate these decisions without marketing hype, translating technical architecture into business outcomes.
The guide covers three core questions: When does a flexible framework outperform headless? How do you balance built-in enterprise capabilities with custom development? How does ecosystem maturity protect your investment? Available now for ecosystem partners, merchants, and community members.
Both Sylius and PrestaShop are open-source eCommerce platforms with strong ecosystems and years of commerce experience. But they follow different product approaches and support different types of projects.
The new eBook compares both platforms across architecture, performance, hosting, scalability, development experience, mobile and PWA capabilities, ecosystem maturity, testing infrastructure, licensing, and total cost of ownership. Instead of declaring a winner, it shows how these areas influence implementation choices, customization depth, maintenance requirements, and long-term platform growth.
To add real-world context, we worked with implementation partners experienced in both platforms: EMAGMA, PrestaRock, and Invertus. Their insights help translate technical differences into practical business impact – what actually changes when you choose one platform over another.
The eBook is designed for eCommerce teams making platform decisions with incomplete information. It’s not marketing material – it’s written to help you understand the tradeoffs.
May brought three new partners to the Sylius ecosystem – strengthening our presence across Poland, Spain, and France. 🌐
We’re glad to welcome iteo to the Sylius ecosystem. The Poland-based IT consulting company specializes in digital product development, enterprise software, mobile and web applications, eCommerce platforms, UX/UI design, cloud, and AI-driven solutions. Since 2011, they’ve delivered projects for brands like InPost, ITAKA, and Changi Singapore – companies that require scalable technology and reliable architecture. Their experience with large-scale digital products and complex custom software delivery fits well with Sylius implementation projects. There’s also a familiar connection: Szymon Skowroński, our CTO, worked at iteo before joining Sylius.
SDi joins as a Professional Solution Partner from Spain, bringing 40+ years of experience and over 400 eCommerce projects delivered. The 160+ person team helps businesses through digitization, automation, and process optimization – with deep expertise in ERP, CRM, and business systems integration. What matters for Sylius projects: they understand that eCommerce doesn’t exist in isolation. They build custom online sales solutions connected to the tools companies already use, from inventory systems to financial platforms. They support 2,000+ active companies across Spain.
We’re glad to have Widop back in the Sylius ecosystem. The Lille-based web agency builds custom digital platforms with Symfony, Sylius, Vue.js, and AWS. What sets them apart is their focus on maintainability and long-term ownership, as they build reliable, adaptable solutions designed to evolve with business needs rather than short-term delivery. They work closely with clients on architecture decisions and ongoing platform development, combining technical execution with a pragmatic, business-oriented approach.
The Sylius community gathered in Mannheim last month for another meetup organized by bitExpert AG and the PHP User Group Rhein-Neckar. The event focused on modern eCommerce architectures, performance optimization, and scalable systems – topics that matter when building commerce platforms at any scale.
Thomas Lohner shared his perspective on why AI is far more than just an efficiency tool, and how it plays a role in future-proofing business models long-term rather than just accelerating existing ones. Benjamin Eberlei from Tideways walked through PHP profiling and performance monitoring – practical tools for understanding what’s actually happening in production systems. Sebastian Langer introduced Laioutr, demonstrating how headless architecture integrates with Sylius.
What makes these events valuable: they create space for developers and agencies working with Sylius to connect, share real project experiences, and discuss what’s actually working in production. Thanks to Stephan Hochdörfer and bitExpert for organizing – these community events don’t happen without real effort. 🇩🇪
Infinitum Digital is bringing the Sylius community together for the first time in Spain. The meetup on Thursday, June 25th in Barcelona is designed to share experiences, learn together, and connect with professionals working with Sylius and the composable commerce ecosystem.
It’s an opportunity to exchange knowledge, discover real cases, and discuss the challenges and opportunities of modern eCommerce in an open, community-focused environment. Whether you’re part of the Sylius ecosystem or curious to learn about it, this is worth attending.
Register at the event’s website 🇪🇸
Our Global Solution Partner BitBag continues to release valuable content for the eCommerce community.
In the latest episode of BitBag eCommerce Talks, Marcin Piwowarczyk, CEO and Founder of Ergonode, discusses why product data management is one of the biggest challenges in B2B eCommerce. Product catalogs often live in multiple places simultaneously, creating data chaos and broken integrations. Marcin explores how to approach data systematically across ERP + PIM + eCommerce, where integrations typically fail, and how this impacts sales and growth. The core insight: “If your product catalog is chaotic, no eCommerce platform will save you.” If you work in B2B eCommerce, this episode helps you assess whether your organization has a single source of truth.
Commerce Weavers also released a dive into custom Sylius promotions. They walk through building custom promotion rules and actions for real eCommerce scenarios – understanding the difference between rules (when a promotion applies) and actions (what happens), navigating the Sylius promotion system, and implementing both custom rule checkers and promotion actions step by step. The approach emphasizes maintainability: how to extend Sylius promotion logic for your specific business rules without creating technical debt. Code examples are available on GitHub.
Simon Krull, a Sylius Key Contributor, shared progress on improving the Sylius CMS Plugin, adding the ability to move content elements up or down when editing pages and blocks, alongside bug fixes and UI improvements. Future plans include copy and paste functionality for elements.
Watch it in action in Simon’s post 🎬
Here are the highlights of May’s articles.
The discussions and announcements filled the whole month.
The work continues. May showed steady progress across the ecosystem – new capabilities, new partners, community conversations. Platform development isn’t just about milestones; it’s about constantly adapting to what people actually need.
Thanks to everyone building and contributing. See you next month! ☀️