Spree Commerce
Open-source headless ecommerce platform with a REST API and Next.js storefront
Alternative to: Shopify, Magento, WooCommerce, Salesforce Commerce Cloud
v5.3.5
2026-03-12This patch release includes bug fixes and security improvements. We recommend updating as soon as possible!
Changes
Core
- Fix store credit amount validation with non-English locales https://github.com/spree/spree/commit/638e31d12410eea03786df99869b90fc25478d02
- FIX gift card overspend race condition potential vulnerability https://github.com/spree/spree/commit/1ab03d54556ddb3901b635f61de67755eb1170bc
- Fix: Replace deprecated Image#plp_url with cdn_image_url variant(:xlarge) https://github.com/spree/spree/commit/b3e259cdf230464eb924ab0312fb83927a3afbcd
- Fix
Order#order_refunded?method when store credits are used https://github.com/spree/spree/commit/d2b92570b2cbdadc50ef04488f7ea9751b285ca7
API
- Improved webhooks SSRF protection https://github.com/spree/spree/commit/3c7fc53a14e647516a2dd9b5578d146a668dadfc
Admin
- Fix toggling clear filter button https://github.com/spree/spree/commit/98211d8854ea8b62e6cc4b9f27e354b6075c85d6
- handle custom model class in exports#new https://github.com/spree/spree/commit/4cf12b4855f3779f6c2de8e73f4df008820eabde
Update
Run in your project root:
bundle update
Full Changelog: https://github.com/spree/spree/compare/v5.3.4…v5.3.5