This release includes all the improvements to core quality that were included in Magento 2.3.5-p1, over 100 new fixes to core code, and 30 security enhancements. It includes the resolution of 226 GitHub issues by community members.
This release includes over 30 security fixes and platform security improvements. Additional security enhancements include:
- Two-factor authentication (2FA) is now enabled by default for the Magento Admin. Admin users must first configure their 2FA before logging into the Admin through either the UI or a web API. 2FA is enabled by default and cannot be disabled.
- Content Security Policy (CSP) improvements. SecureHtmlRenderer has been added to the Magento Framework and is available in .phtml templates to support the whitelisting of inline style and script tags. Inline scripts and styles are not typically permitted with the default CSP configuration.
- PHP 7.4 support introduced and PHP 7.1 and 7.2 deprecated. Magento 2.4.0 introduces support for PHP 7.4. All testing of 2.4.0 has been done on PHP 7.4. You can still install Magento 2.4.x with PHP 7.3, but we recommend using PHP 7.4.
- Elasticsearch 7.x support. The latest Elasticsearch 7.x version is now the default catalog search engine for Magento Commerce and Open Source. Elasticsearch version 2.x code has been removed, and Elasticsearch version 5.x has been deprecated. Elasticsearch v6.8 is still supported in Magento 2.4.0 (and 2.3.x).
- MySQL 8.0 support. Magento 2.4.x supports MySQL 8.x. Although MySQL 5.7 is still supported for Magento 2.4.x, MySQL 5.6 is no longer supported. You cannot host Magento 2.4.x with a MySQL 5.6 database.
- Removal of the MySQL catalog search engine. The MySQL search engine has been removed from Magento 2.4.0 and replaced as the default search engine with Elasticsearch. Elasticsearch provides superior search capabilities as well as catalog performance optimizations. All merchants must have Elasticsearch to install and deploy Magento 2.4.0.
- Deprecation and removal of the Web Set-Up Wizard. You must use the command line to install or upgrade Magento 2.4.0.
- Support for the partial-word search for Elasticsearch (new default search engine). Elasticsearch now supports the use of partial words in search terms for product names and SKUs when using quick search.
- Removal of core integration of third-party payment methods. With this release, the Authorize.Net, eWay, CyberSource, and Worldpay payment method integrations have been removed from core code.
- Magento Media Gallery. This replacement for the former Media Gallery offers a brand-new, searchable interface for Magento media assets. Administrators can now search, filter, and sort images up to 30x faster than they could in the earlier version of this feature. Merchants can use this tool to evaluate storefront image usage.
- Improvement of up to 25-30% to Quick Order add-to-cart performance.
- Inventory Management enhancements for this release include support for in-store pickup and bundle product support.
- Login as Customer – B2B. This feature allows merchants to view the storefront on behalf of their customers. Customers opt in to allow storefront access to their accounts.
- Order Approval Workflow feature for B2B. Order Approvals allow managers of buying organizations to configure approval rules for their buyers.
- The performance of the catalog_product_price re-index operation for bundle products has been improved.
- Magento now displays an informative message when a product in the mini cart becomes out-of-stock before checkout. Once you’ve removed the out-of-stock item, Magento now displays the Proceed to Checkout button. Previously, Magento did not display this button.
- You can now save and duplicate all CMS pages. Previously, Magento threw this exception when you tried to duplicate certain pages.
- Magento now lets you create CMS blocks with identical names if the blocks are assigned to different store views.
- Customers who are subscribed to newsletters as a guest are no longer unsubscribed after registering for a new account.
Want to dig deeper yourself? You can read more about fixed issues here https://devdocs.magento.com/guides/v2.4/release-notes/release-notes-2-4-0-open-source.html#fixed-issues.
And if you any questions about the new release – and the impact it may have on your business – please reach out to us here at Alpine!