This release patches 1 CVE for security teams tracking exposure across their dependency inventory.
Topics
+1 more
Summary
AI summaryUpdates Improvement, Refactoring, and Core across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
Add --skip-overrides option to prestashop:module CLI command Add --skip-overrides option to prestashop:module CLI command Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high |
— |
| Feature | Medium |
Feat(FrontController): Add Specialized Hooks Feat(FrontController): Add Specialized Hooks Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high |
— |
| Feature | Medium |
Allow category tree selector to open when no default category Allow category tree selector to open when no default category Source: granite4.1:30b@2026-05-19-audit Confidence: low |
— |
| Bugfix | Medium |
Fix sending test emails from/to idn domains Fix sending test emails from/to idn domains Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high |
— |
| Bugfix | Medium |
EditStateHandler : Fixes if ZoneId or Country are null (partial update) EditStateHandler : Fixes if ZoneId or Country are null (partial update) Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high |
— |
| Bugfix | Medium |
Fix module uninstall failing when override contains multi-line property or constant value Fix module uninstall failing when override contains multi-line property or constant value Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high |
— |
| Bugfix | Medium |
Return correct product name for attributes Return correct product name for attributes Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high |
— |
| Bugfix | Medium |
Fix saving module settings when legacy profiler enabled Fix saving module settings when legacy profiler enabled Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high |
— |
| Bugfix | Medium |
Fix theme import from web throwing PHP warnings on invalid URLs Fix theme import from web throwing PHP warnings on invalid URLs Source: granite4.1:30b@2026-05-19-audit Confidence: low |
— |
| Bugfix | Medium |
Throw exception on order detail insert failure during conversion Throw exception on order detail insert failure during conversion Source: granite4.1:30b@2026-05-19-audit Confidence: low |
— |
| Bugfix | Medium |
Fix unable to delete order product when catalog product is deleted Fix unable to delete order product when catalog product is deleted Source: granite4.1:30b@2026-05-19-audit Confidence: low |
— |
| Bugfix | Medium |
Fix child theme translation loading in BO translation API Fix child theme translation loading in BO translation API Source: granite4.1:30b@2026-05-19-audit Confidence: low |
— |
| Bugfix | Medium |
Fix pass shop group ID when setting context in LogoUploader Fix pass shop group ID when setting context in LogoUploader Source: granite4.1:30b@2026-05-19-audit Confidence: low |
— |
| Bugfix | Medium |
Fix error when creating an attribute for a group in “All shops” context with multiple shops Fix error when creating an attribute for a group in “All shops” context with multiple shops Source: granite4.1:30b@2026-05-19-audit Confidence: low |
— |
| Bugfix | Medium |
Fix Design > Theme & Logo update in “All shops” context updating only shop ID 1 Fix Design > Theme & Logo update in “All shops” context updating only shop ID 1 Source: granite4.1:30b@2026-05-19-audit Confidence: low |
— |
| Bugfix | Low |
Fix email HTML previews for module emails Fix email HTML previews for module emails Source: granite4.1:30b@2026-05-19-audit Confidence: low |
— |
| Bugfix | Low |
Add specific error message when embedded HTML is blocked Add specific error message when embedded HTML is blocked Source: granite4.1:30b@2026-05-19-audit Confidence: low |
— |
| Bugfix | Low |
Fix sidebar blanking on RTL Fix sidebar blanking on RTL Source: granite4.1:30b@2026-05-19-audit Confidence: low |
— |
| Bugfix | Low |
Use sticky positioning for module selection panel in Positions page Use sticky positioning for module selection panel in Positions page Source: granite4.1:30b@2026-05-19-audit Confidence: low |
— |
| Bugfix | Low |
Fixed bug for free gift button on cart rules Fixed bug for free gift button on cart rules Source: granite4.1:30b@2026-05-19-audit Confidence: low |
— |
| Bugfix | Low |
Fix validate medium pass Fix validate medium pass Source: granite4.1:30b@2026-05-19-audit Confidence: low |
— |
| Bugfix | Low |
Show features with the same name only once when creating values and assigning to products Show features with the same name only once when creating values and assigning to products Source: granite4.1:30b@2026-05-19-audit Confidence: low |
— |
| Refactor | Medium |
Functional tests - Refacto create customer from order page Functional tests - Refacto create customer from order page Source: granite4.1:8b-q6_K@2026-05-19 Confidence: low |
— |
| Refactor | Medium |
Functional tests - Add first UI test of discount V2 : Minimum purchase amount (On cart amount) Functional tests - Add first UI test of discount V2 : Minimum purchase amount (On cart amount) Source: granite4.1:8b-q6_K@2026-05-19 Confidence: low |
— |
| Refactor | Medium |
Use constants for range behavior Use constants for range behavior Source: granite4.1:8b-q6_K@2026-05-19 Confidence: low |
— |
| Other | Medium |
Set version to 9.1.1 Set version to 9.1.1 Source: granite4.1:8b-q6_K@2026-05-19 Confidence: low |
— |
| Other | Medium |
Add workflow to automatically set milestone based on target branch Add workflow to automatically set milestone based on target branch Source: granite4.1:8b-q6_K@2026-05-19 Confidence: low |
— |
| Other | Medium |
Improve bulk actions returns from admin api Improve bulk actions returns from admin api Source: granite4.1:8b-q6_K@2026-05-19 Confidence: low |
— |
| Other | Medium |
Fix tests with admin api Fix tests with admin api Source: granite4.1:8b-q6_K@2026-05-19 Confidence: low |
— |
| Other | Medium |
Update default catalog 9.1.2-build Update default catalog 9.1.2-build Source: granite4.1:8b-q6_K@2026-05-19 Confidence: low |
— |
| Other | Medium |
Turkey updated its tax rates on July 10, 2023. Turkey updated its tax rates on July 10, 2023. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: low |
— |
| Other | Medium |
Add checkout step properties Add checkout step properties Source: granite4.1:8b-q6_K@2026-05-19 Confidence: low |
— |
| Other | Medium |
Update Symfony components after 6.4.38 release Update Symfony components after 6.4.38 release Source: granite4.1:8b-q6_K@2026-05-19 Confidence: low |
— |
| Other | Medium |
Bump the version of the prestashop/dashgoals package from v2.0.4 to v2.0.5 Bump the version of the prestashop/dashgoals package from v2.0.4 to v2.0.5 Source: granite4.1:8b-q6_K@2026-05-19 Confidence: low |
— |
| Other | Medium |
Update Symfony components after 6.4.34 release (not listed but implied by pattern) Update Symfony components after 6.4.34 release (not listed but implied by pattern) Source: granite4.1:8b-q6_K@2026-05-19 Confidence: low |
— |
| Other | Medium |
Use context instead of cookie where relevant Use context instead of cookie where relevant Source: granite4.1:8b-q6_K@2026-05-19 Confidence: low |
— |
| Other | Medium |
Add --skip-overrides option to prestashop:module CLI command (already listed as feature) Add --skip-overrides option to prestashop:module CLI command (already listed as feature) Source: granite4.1:8b-q6_K@2026-05-19 Confidence: low |
— |
Full changelog
The attached files listed below contain only the source code. To download the installer, please visit the release notes above.
Changelog
Click here to read the changes since 9.1.1
- Back Office:
- Improvement:
- #40912: Handle no value objects, like NoStateId, NoCombinationId in ValueObje… (by @jolelievre)
- #40859: Fix: in the customer form from admin side, it is missing the newsletter option as Partner Offers (by @Codencode)
- #40636: Always execute non display hooks in backoffice (by @Hlavtox)
- Bug fix:
- #41334: Fix theme import from web throwing PHP warnings on invalid URLs (by @mattgoud)
- #41327: Throw exception on order detail insert failure during conversion (by @nicosomb)
- #41320: Fix unable to delete order product when catalog product is deleted (by @mattgoud)
- #41193: Fix child theme translation loading in BO translation API (by @Codencode)
- #41100: Fix email HTML previews for module emails (by @axel-paillaud)
- #41018: Fix #33921 - Add specific error message when embedded HTML is blocked (by @mattgoud)
- #40975: Fix sidebar blanking on RTL (by @cnavarro-prestashop)
- #40971: Fix pass shop group ID when setting context in LogoUploader (by @mehdiboissat-bron)
- #40964: Use sticky positioning for module selection panel in Positions page (by @intraordinaire)
- #40866: Fixed bug for free gift button on cart rules (by @Touxten)
- #40829: Fix validate medium pass (by @tleon)
- #40745: Allow category tree selector to open when no default category (by @Kaikina)
- #40736: Fix: Error when creating an attribute for a group in “All shops” context with multiple shops (by @Codencode)
- #40706: Fix: Features with the same name are shown only once when creating values and assigning to products (by @Codencode)
- #40693: Fix: [BO][Multishop] Design > Theme & Logo: when updating the logo in the “All shops” context, only shop ID 1 gets updated (by @Codencode)
- #40070: Fix: actionCarrierUpdate not triggered on migrated carrier page (by @Codencode)
- #40015: Fix: BO - Import for Customers will overwrite the already existing customers (by @Codencode)
- Improvement:
- Front Office:
- Improvement:
- #41087: Add checkout step properties (by @ga-devfront)
- Bug fix:
- #41319: Fix product details overridden when changing attribute in quickview modal (by @mattgoud)
- #41316: Fix wrong state saved when country is changed quickly before AJAX completes (by @mattgoud)
- #40853: Fix fuzzy search SQL when closest word contains apostrophe (#40847) (by @Codencode)
- #40795: Fix: Fatal error in hookActionCartSave when switching language and calling Product::getPriceStatic() or Cart::getProducts() (by @Codencode)
- Refactoring:
- #40828: Use context instead of cookie where relevant (by @Hlavtox)
- Improvement:
- Core:
- New feature:
- #40613: Add --skip-overrides option to prestashop:module CLI command (by @jf-viguier)
- Improvement:
- #41419: Update Symfony components after 6.4.38 release (by @nicosomb)
- #41383: Update Symfony components after 6.4.37 release (by @nicosomb)
- #41358: Bump 9.1.2 (by @Progi1984)
- #41230: Bump the version of the prestashop/dashgoals package from v2.0.4 to v2.0.5 (by @cnavarro-prestashop)
- #41188: Update Symfony components after 6.4.36 release (by @nicosomb)
- #41086: Fix tests with admin api (by @boherm)
- #41059: Set version to 9.1.1 (by @Progi1984)
- #41041: Add workflow to automatically set milestone based on target branch (by @jolelievre)
- #41033: Update Symfony components after 6.4.35 release (by @nicosomb)
- #41009: Improve bulk actions returns from admin api (by @boherm)
- #40431: Feat(FrontController): Add Specialized Hooks (by @Kaikina)
- Bug fix:
- #41443: Update dependencies for 9.1.2 (by @jolelievre)
- #41412: Fix sending test emails from/to idn domains (by @boherm)
- #41410: Switch employee email from ps_shop_email when forwarding customer threads to another employee (by @boherm)
- #41317: Fix module uninstall failing when override contains multi-line property or constant value (by @mattgoud)
- #40894: EditStateHandler : Fixes if ZoneId or Country are null (partial update) (by @Progi1984)
- #40888: Add ShopContext and LanguageContext to FeatureAttributeRepository (by @boherm)
- #40655: Fix saving module settings when legacy profiler enabled (by @kpodemski)
- #40651: Return correct product name for attributes (by @Prestaworks)
- Refactoring:
- #40834: Use constants for range behavior (by @Hlavtox)
- New feature:
- Installer:
- Improvement:
- #41448: Update default catalog 9.1.2-build (by @ps-jarvis)
- Improvement:
- Localization:
- Improvement:
- #40945: Turkey updated its tax rates on July 10, 2023. (by @metineren)
- Improvement:
- Tests:
- Improvement:
- #41347: Functional Tests : Bump @prestashop-core/ui-testing (by @Progi1984)
- #41236: Functional Tests : @prestashop-core/ui-testing (by @Progi1984)
- #40990: Functional Tests : Bump @prestashop-core/ui-testing (by @Progi1984)
- #40954: Functional Tests : Improve nightly (by @Progi1984)
- #40946: Functional Tests : Improve
functional:BO:orders:03-05(by @Progi1984) - #40933: Functional Tests : Improve
functional:BO:orders:01-view-and-edit-order(by @Progi1984) - #40931: Functional Tests : Audit : BO - Wall of Fame (by @Progi1984)
- #40923: Dynamize docker names when using docker exec in CI (by @jolelievre)
- #40911: Functional Tests : Improve
functional:BO:orders:03-05(by @Progi1984) - #40882: Functional Tests : Bump @prestashop-core/ui-testing (by @Progi1984)
- #40873: Functional Tests : Stabilize GDPR Tests (by @Progi1984)
- Refactoring:
- #41025: Functional tests - Refacto create customer from order page (by @nesrineabdmouleh)
- #40910: Functional tests - Add first UI test of discount V2 : Minimum purchase amount (On cart amount) (by @nesrineabdmouleh)
- Improvement:
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About PrestaShop
PrestaShop is the universal open-source software platform to build your e-commerce solution.
Beta — feedback welcome: [email protected]