Magento Open Source 2.4.9 officially arrived in the Magento ecosystem on May 12, 2026. Following the strategic alpha and beta releases earlier this year, this General Availability (GA) update modernizes the platform’s core dependencies, patches critical security gaps, and introduces massive feature expansions.
With 581 issues fixed in the core code, this release focuses on:
- Adding comprehensive Braintree payment enhancements
- Upgrading core framework dependencies to ensure PHP 8.5 and Symfony 7.4 LTS support
- Enhancing security and streamlining the admin 2FA experience
- Fixing critical bugs across APIs, checkout, inventory, and catalog performance
Here’s a closer look at what is included in this major release.
Key Highlights in Magento 2.4.9
1. Massive Braintree Payment Enhancements
The Braintree extension received significant upgrades in this release, aimed at streamlining the checkout process and expanding local payment options globally:
- Google Pay & Apple Pay Updates: Customers can now vault their Google Pay cards in their account area for future purchases. Additionally, both Google Pay and Apple Pay Express Pay Sheets now support promo and offer codes directly within the modal. Apple Pay is also now supported on Chrome and Firefox.
- Real-Time Account Updater (RTAU): Vaulted Visa, Mastercard, and Discover cards are automatically updated when they expire or are replaced, minimizing failed payments.
- New Local Payment Methods: Added support for “Pay Upon Invoice” (a Buy Now, Pay Later option) for German buyers, BLIK for Polish shoppers, and ELO card types.
- Server-Side Shipping Callback: The PayPal Express shipping callback has been moved to the server side, allowing for dynamic, real-time shipping cost calculations directly in the PayPal modal.
2. Enhanced Technical Stack & Framework Updates
Adobe has pushed Magento into the latest stable server environments, ensuring better memory management and execution speed:
- PHP & Symfony Support: Added official support for PHP 8.5 (while maintaining 8.4 support) and updated all Symfony dependencies to the latest Symfony 7.4 LTS versions.
- Modernized JS Libraries: Updated key frontend dependencies, including jQuery UI (1.14.1), jQuery Validate (1.21.0), Uppy (4.13.4), Chart.js (4.5.0), and Moment Timezone, ensuring a secure and modern experience.
- Native PHP OAuth: Replaced the third-party
carlos-mg89/oauthlibrary with native PHP OAuth functions to improve security and reduce external dependencies.
3. GraphQL & API Improvements
- Open Source
clearCart: TheclearCartGraphQL mutation is now fully available to all Open Source users, not just Adobe Commerce. - Guest & Customer Cart Merging: A new admin configuration option allows merchants to control exactly how guest and customer carts are merged when a shopper signs in.
- Tax-Exclusive Totals: Added a new
OrderTotal.grand_total_excl_taxfield to the GraphQL order response, simplifying integrations with external systems that need tax-exclusive data.
4. Security & Performance Hardening
- Streamlined Admin 2FA: Admin users are now only required to configure one enabled 2FA provider (e.g., Google Authenticator) to log in, rather than being forced to configure all enabled providers.
- Performance-Efficient SRI Storage: Subresource Integrity (SRI) hash storage now generates separate files per area, theme, and locale instead of one massive JSON file. This drastically improves performance and reduces memory usage.
- CAPTCHA on APIs: When CAPTCHA is enabled for customer account creation, validation is now strictly enforced via REST and GraphQL APIs, closing a previous loophole.
Fixed Issues in v2.4.9
Adobe Commerce has managed to fix an impressive 581 issues in the Magento Open Source 2.4.9 core code. These fixes address long-standing bugs related to APIs, cart & checkout, taxes, and catalog management.
A few critical fixes include:
- Fixed Product Tax (FPT) Consistency: FPT values and rounding errors are now consistent across the catalog, product pages, and the shopping cart, eliminating previous decimal mismatches.
- Infinite Loading Cart Fix: Resolved an issue where the shopping cart page entered an infinite loading loop when FPT was enabled.
- Duplicate FPC Entries: Fixed an issue where the Full Page Cache (FPC) created duplicate cache entries for the same page due to query parameter ordering, saving significant server storage.
- Cart Price Rules: Rules with the “Price in Cart less than” condition are no longer incorrectly applied to ineligible products. Excluded SKUs are now properly ignored during discount calculations.
- Improved Async/Bulk APIs: Fixed performance degradation in bulk asynchronous web endpoints that was causing increased execution times.
- Wishlist Stability: Configurable product options are no longer lost when a product is added to the wishlist.
With the release of Magento Open Source 2.4.9, the Magento ecosystem takes another massive step forward in improving platform performance, developer experience, and overall stability.
Switch to the latest Magento 2 version and experience a faster, safer, and smarter platform.
Update Now
