1.0.0

Changelog (6 related PRs)

Overview—

• The ece-tools 2002.0.22 release changes the structure of the ece-tools package to decouple the release of Magento patches from the main ece-tools release. Starting with this release, patches and critical fixes will be delivered using this repository and respective package, which is a new dependency for the ece-tools package. We made these changes to reduce complexity for scheduling release updates and working with community contributions.

Patches and critical fixes—

• Update Cloud environment to use magento-cloud-patches version 1.0.0 to apply the following critical fixes:
  • Page Builder security patches for 2.3.1 and 2.3.2 releases. Fixes an issue in Page Builder preview that allows unauthenticated users to access some templating methods that can be used to trigger arbitrary code execution over the network (RCE). This issue can occur when using unsupported versions of Page Builder with Magento Commerce versions 2.3.1 and 2.3.2.
  • MSI patches. Fixes issues that caused indexing errors and performance issues when using default inventory settings for managing stock.
  • Backward Compatibility of new Mail Interfaces. Fixes a backward incompatibility issue caused by the Magento\Framework\Mail\EmailMessageInterface PHP interface introduced in Magento Commerce 2.3.3. In the scope of this patch, the new EmailMessageInterface inherits from the old MessageInterface, and Magento Commerce core modules are reverted to depend on MessageInterface.
  • Catalog pagination does not work on Elasticsearch 6.x. Fixes a critical issue with search result pagination that affects customers using Elasticsearch 6.x as the catalog search engine.