Magento Open Source 2.4.9 Release Notes: Major Highlights

Magento Open Source 2.4.9 is a significant platform release focused on modern technology compatibility, stronger API security, improved GraphQL capabilities, expanded payment options, and greater overall stability.

According to Adobe’s official Magento Open Source 2.4.9 release notes, the release resolves 580 issues across the Magento core. These improvements cover APIs, checkout, payments, customer accounts, inventory, catalogues, administration, security, and framework performance.

Major Magento 2.4.9 Highlights

• Official PHP 8.5 support
• Symfony 7.4 LTS compatibility
• 580 Magento core issues resolved
• Modernised JavaScript and PHP dependencies
• New GraphQL cart and wishlist capabilities
• Improved REST API validation
• Enhanced API and GraphQL security
• Expanded Braintree payment functionality
• Improved two-factor authentication experience
• Better performance for multi-theme and multi-locale stores

Modernised Technology Foundation

Magento Open Source 2.4.9 introduces official support for PHP 8.5 and updates Symfony components to Symfony 7.4 LTS. These upgrades provide a more modern foundation for Magento development and improve long-term compatibility with current PHP ecosystems.

Several frontend and framework dependencies have also been updated, including Uppy, jQuery Validate, jQuery UI, Less.js, Chart.js, Underscore.js, Moment Timezone, JWT components, and Allure PHPUnit.

Magento has also replaced a third-party OAuth library with native PHP functionality. This reduces external dependencies and helps improve framework maintainability and security.

REST API Improvements

A major REST API enhancement improves product media inheritance across store views. Updating a product through the REST API without including media_gallery_entries no longer unintentionally modifies inherited product images or videos.

Magento 2.4.9 also provides clearer API validation. Malformed requests across several endpoints now return an appropriate 400 Bad Request response instead of a generic 500 Internal Server Error.

Additional API fixes address:

• Product attribute cache invalidation
• Special-price date validation
• Customer account confirmation
• Billing-address validation
• Product website assignment
• Store-specific attribute labels
• Order state and status responses
• Inventory pagination
• Concurrent product updates
• Shipping-address validation
• Credit memo and shipment requests

These improvements make Magento integrations more predictable and easier to troubleshoot.

GraphQL Enhancements

The clearCart mutation is now available in Magento Open Source, allowing applications to remove all cart items through a single GraphQL operation.

Magento 2.4.9 also introduces:

• A clearWishlist GraphQL mutation
• Configurable guest and customer cart merging
• Improved historical-order product information
• reCAPTCHA support for additional mutations
• Customer authentication through external integration tokens
• The grand_total_excl_tax order field
• Correctly localised customer-cart product attributes
• Improved product media-gallery responses

These enhancements are especially valuable for headless storefronts, PWAs, mobile applications, and third-party commerce integrations.

Expanded Braintree Payments

The bundled Braintree integration receives several important upgrades.

Customers can store eligible Google Pay payment methods in their accounts for future purchases. The Real-Time Account Updater can also update supported vaulted card details when cards expire or are replaced.

Additional payment enhancements include:

• ELO card support
• BLIK payments for eligible Polish customers
• Pay Upon Invoice for eligible German customers
• Promotional codes inside Apple Pay and Google Pay express sheets
• Apple Pay support through compatible Chrome and Firefox experiences
• Server-side PayPal shipping callbacks
• PayPal contact-information management
• Updated Content Security Policy support for Cardinal 3-D Secure

These improvements provide merchants with greater payment flexibility across international markets.

Security and Performance Improvements

Magento 2.4.9 introduces stronger GraphQL input controls, including alias and query-length validation. The default GraphQL alias limit helps protect servers from unusually complex or resource-intensive requests.

Subresource Integrity hash storage has also been restructured. Separate files are generated by area, theme, and locale instead of loading one large file, reducing unnecessary memory usage for multi-store deployments.

Admin users now need to configure only one enabled two-factor authentication provider before accessing the Admin panel. Additional providers can be configured later.

Merchants should review Adobe’s Magento 2.4.9 backward-incompatible changes because custom extensions may be affected by Symfony changes, GraphQL limits, updated identity-verification blocks, and the replacement of Zend Cache components.

Preparing for the Upgrade

Before upgrading to Magento Open Source 2.4.9:

1. Review the official system requirements.
2. Audit custom modules, themes, and integrations.
3. Confirm third-party extension compatibility.
4. Review backward-incompatible changes.
5. Create complete database, media, and code backups.
6. Perform the upgrade in a staging environment.
7. Test checkout, payments, APIs, cron jobs, queues, and integrations.
8. Run performance, security, and regression testing.
9. Prepare a documented production rollback plan.

Adobe’s upgrade prerequisites should be reviewed before beginning the deployment.

AviCommerce Technologies provides Magento 2.4.9 compatibility audits, extension upgrades, custom-code remediation, staging deployment, testing, production releases, and post-upgrade support.

Upgrade securely. Improve stability. Build on a modern Magento foundation.