news

August settled into something calmer than the months before it, but no less productive: the 2.2 cycle wrapped up, Payment Request graduated to fully stable, and the AI tooling stack moved onto its new native-CLI foundation, all while the ecosystem kept new projects coming, from an AI-powered curtain shop to… Read More

Security is an ongoing commitment; sometimes, despite our best efforts, vulnerabilities slip through the cracks. Over the past weeks we received several independent security reports concerning the API authentication layer, administrator account recovery, and the Payment Request pipeline. Rather than fixing each report in isolation, we traced every one of them back to its root cause and reviewed… Read More

Summer slowdown? Not here. While half of Europe was off chasing sunshine, the Sylius ecosystem kept shipping, and July turned into one of the busiest months yet, headlined by a new official partnership with Stripe and a fresh MCP tool for admin panel. From new go-lives to amazing events, the… Read More

Security isn’t something we treat as optional. Our team keeps a close eye on the Sylius ecosystem, takes every report from the community seriously, and turns fixes around as quickly as we responsibly can. In that spirit, today we’re shipping security fixes for PayPalPlugin versions 1.7 and 2.0. If your project relies on this package, please plan an upgrade… Read More

Keeping your Sylius store secure is our top priority, and while security updates may not always be the most exciting news, they are absolutely essential. We work diligently to identify and address vulnerabilities so that everyone in the Sylius ecosystem gets a safer experience, and we do our best to… Read More

Security is, and always will be, our top priority. Protecting the merchants and customers who rely on Sylius every day is something we treat as a continuous responsibility. This is why we strongly recommend keeping Sylius installations up to date, especially when security releases are available. This round of fixes… Read More

If your store lets EU consumers buy online, soon they may also need a simple way to withdraw online. From 19 June 2026, online merchants will need to provide a clearly visible and easily accessible withdrawal flow where the consumer has a statutory right of withdrawal. This change comes from… Read More

Security is an ongoing commitment; sometimes, despite our best efforts, vulnerabilities slip through the cracks. Over the past weeks we received several independent security reports concerning different areas of the platform. Rather than addressing each report in isolation, we used it as an opportunity to conduct a broader audit of the surrounding code – leveraging AI-assisted analysis to… Read More

In recent years, the Sylius ecosystem has grown significantly, with more community plugins, more Sylius Plus modules, new online courses, more partners, and vendors. The previous marketplace, Sylius Store, was created many years ago, when the Sylius ecosystem operated on a much smaller scale. As the… Read More

2025 was one of the most important years in Sylius’ history. It brought new developer tools, the creation of new extensions, and the decision to take over maintenance of key ones, early steps into AI, and the introduction of project accelerators such as Elesto. The year was also marked by… Read More