July 23, 2026·Product
Shahed Nasser
Shahed Nasser
Today, we released Medusa v2.18. It comes with new features, DX improvements, and bug fixes.
Today, we released Medusa v2.18. It comes with new features, DX improvements, and bug fixes. It includes many community contributions, which have increased and improved repository health since we introduced AI-assisted issue triager and PR reviewer:
- Unique community contributors per month roughly doubled, from about 15 to about 32.
- Issues closed per month rose by about 50 percent, from roughly 48 to 74.
- Open issues across the entire repository now sit at 16, down from a backlog that used to grow every month.
This article covers some of the release's highlights. Check out the full release notes on GitHub with instructions on how to update.
Users of the MCP server can update with the following prompt:
1Update my Medusa project to v2.18.0
New Inventory events #
Inventory-related workflows now emit events for inventory items, inventory levels, and reservations, across both inventory and order workflows.
You can subscribe to these events to react to stock changes in near real time, for example to sync inventory levels to an external search index without polling. This was a feature requested by a Medusa Cloud user through our MCP server.
Learn more about emitted events in this documentation.
Admin view configuration enhancements #
List views in the admin dashboard gain view configuration enhancements: dynamic filter and sort resolution, custom cell renderer registration, and a UI to manage property labels.
Data grid columns are also resizable now so that operators can adapt tables to their own workflows.
Learn more in the documentation.
Developer experience improvements from your feedback #
We resolved many feedback requests submitted by Medusa Cloud users through the MCP server. Each one became a concrete fix or developer experience (DX) improvement in v2.18:
- A new
ESLintrule flags wildcard and specific field selections used together in the same query. - Regex matchers in Copy to clipboard
defineMiddlewares
now work as documented, instead of being silently ignored. - Generated Copy to clipboard
delete
methods now work on data models whose primary key is not Copy to clipboardid
. - The API returns a helpful hint when a secret key is sent with a Bearer header instead of Basic.
If you use our MCP server, don't hesitate to ask your AI agent to submit feedback for bugs, documentation gaps, or DX improvements you find. It helps us improve Medusa for you and all users.
Community Contribution Highlights #
Faster pricing for B2B
Community contributor docloulou rewrote the query behind Copy to clipboardcalculatePrices
to pre-filter matching price lists in a single step instead of a per-row join.
In B2B catalogs with many price lists and rules, this delivers around a 10x speedup on one of the hottest paths in commerce.
AWS RDS IAM authentication
mrpackethead added support for dynamic database credentials in Copy to clipboardcreatePgConnection
.
Copy to clipboarddriverOptions.dynamicPassword
and Copy to clipboarddriverOptions.expirationChecker
now pass through to the connection config. Projects running on AWS RDS with IAM authentication can mint a fresh token per connection, instead of failing when the short-lived token expires after about 15 minutes.
Stripe payment method configurations
vssavosko added first-class support for Stripe Payment Method Configurations to the Copy to clipboard@medusajs/payment-stripe
provider.
Merchants can now control which payment methods appear through the configurations they pass to the Stripe Payment Module Provider in Medusa.
More languages and currencies
Medusa is used worldwide, and the community made it more accessible this release:
- Brazilian Portuguese admin translations from diwberg. - Persian (fa) translation completeness from rasa7x. - Angolan Kwanza (AOA) currency support, with the region editor guarded against unknown currencies, from BIGSUS24.
Correctness fixes across the platform
Dozens of community fixes made Medusa more reliable, the kind of work that compounds into a platform you can trust:
- Fixed binary file corruption on upload, where PNGs and PDFs were mangled by UTF-8 re-encoding, from
BIGSUS24. - Stopped double-counting tax on discounts in refundable totals, from
shafi-VM. - Corrected per-adjustment subtotals and Copy to clipboard
BigNumber
string coercion, fromVenkat-jaswanth. - Prevented nested serialization from mutating parent keys such as Copy to clipboard
id
and Copy to clipboarddeleted_at
, fromdosacha. - Added HTTP compression middleware from AkashRanjan18, and a JS SDK that no longer breaks when browser storage is blocked fromArunsiva003.
Zero open security alerts #
We reviewed and resolved every open Dependabot alert on the repository. There are now zero open alerts, with +100 resolved in this release. We also automated the process around these alerts to resolve them promptly and keep Medusa secure.
Upgrade to v2.18.0 #
Check out the release notes to update to v2.18.0. Thank you to our community members for their contributions!