4.0.0-rc release is now available
Pre-release4.0.0-rc is an unmaintained developer preview release that includes some backwards incompatible changes from the currently developed 4.0 development branch.
Please note, that 4.x series should be used only if your project is scheduled to go live after January 2020. You will have to continually upgrade to the next available 4.0.0, 4.1.0-beta, 4.1.0-rc versions and ultimately upgrade to 4.1 LTS version prior to going live with the project.
All other projects should use 3.1 LTS, which is the latest stable version.
Majority of the bugfixes and some improvements from 4.0 branch have already been included in the last 3.1.x patch releases:
- 3.1.7 release notes (May 23, 2019)
- 3.1.6 release notes (April 18, 2019)
- 3.1.5 release notes (April 11, 2019)
We have also accepted and merged various contributions from Oro community developers and partners.
Some 4.0.0-rc release highlights:
- We improved the responsive layout of the back-office UI for tablets and mobile devices.
- We've added an ability to export/import product inventory settings together with the general product information and improved product import performance.
- We improved performance of Elasticsearch indexation, search and storefront navigation.
- Symfony dependency has been upgrade to version 3.4.27 (migration to Symfony 4 is being worked on).
- We have included NelmioSecurityBundle in all Oro applications and enabled the following features:
- clickjacking protection - adds X-Frame-Options header to HTTP responses which tells browsers that the current page should not be displayed inside a frame;
- disable content type sniffing - adds X-Content-Type-Options header to HTTP responses recognized by Microsoft browsers to prevent inclusion of CSS or Javascrip files with wrong MIME types;
- Microsoft XSS protection - another Microsoft-specific HTTP header that instructs Internet Explorer to employ additional security features.
- The full list of the features provided by this bundle is available in the bundle documentation.
- We've added support of OAuth 2.0 authorization protocol in web APIs (see our blog for details for details).
- It is now possible to clone reports and segments with a single click.
- Custom SKU validation rules can be defined in the configuration files.
Localization improvements:
- new noDataMessages.emptyFilteredGrid and noDataMessages.emptyGrid options in datagrids.yml configuration allow to provide custom translatable messages for specific datagrids (documentation);
- mb_strtoupper is used instead of strtoupper in SKU validation;
- all dates have been brought to the same (short) format on the storefront;
- it is now possible to set default currency during installation.
Please note that the Mailchimp connector for OroCRM has been moved to a 3-rd party repository.
The full list of bug fixes included in this release is available in the wiki.