Announcing Medusa v2.18: Shipped with the Community

Today, we released Medusa v2.18. It comes with new features, DX improvements, and bug fixes. It includes many community contributions, which have increased and improved repository health since we introduced AI-assisted issue triager and PR reviewer:

• Unique community contributors per month roughly doubled, from about 15 to about 32.
• Issues closed per month rose by about 50 percent, from roughly 48 to 74.
• Open issues across the entire repository now sit at 16, down from a backlog that used to grow every month.

This article covers some of the release's highlights. Check out the full release notes on GitHub with instructions on how to update.

Users of the MCP server can update with the following prompt:

1
Update my Medusa project to v2.18.0

New Inventory events

Inventory-related workflows now emit events for inventory items, inventory levels, and reservations, across both inventory and order workflows.

You can subscribe to these events to react to stock changes in near real time, for example to sync inventory levels to an external search index without polling. This was a feature requested by a Medusa Cloud user through our MCP server.

Learn more about emitted events in this documentation.

Admin view configuration enhancements

List views in the admin dashboard gain view configuration enhancements: dynamic filter and sort resolution, custom cell renderer registration, and a UI to manage property labels.

Data grid columns are also resizable now so that operators can adapt tables to their own workflows.

Learn more in the documentation.

Developer experience improvements from your feedback

We resolved many feedback requests submitted by Medusa Cloud users through the MCP server. Each one became a concrete fix or developer experience (DX) improvement in v2.18:

• A new ESLint rule flags wildcard and specific field selections used together in the same query.
• Regex matchers in Copy to clipboarddefineMiddlewares now work as documented, instead of being silently ignored.
• Generated Copy to clipboarddelete methods now work on data models whose primary key is not Copy to clipboardid.
• The API returns a helpful hint when a secret key is sent with a Bearer header instead of Basic.

If you use our MCP server, don't hesitate to ask your AI agent to submit feedback for bugs, documentation gaps, or DX improvements you find. It helps us improve Medusa for you and all users.

Community Contribution Highlights

Faster pricing for B2B

Community contributor docloulou rewrote the query behind Copy to clipboardcalculatePrices to pre-filter matching price lists in a single step instead of a per-row join.

In B2B catalogs with many price lists and rules, this delivers around a 10x speedup on one of the hottest paths in commerce.

AWS RDS IAM authentication

mrpackethead added support for dynamic database credentials in Copy to clipboardcreatePgConnection.

Copy to clipboarddriverOptions.dynamicPassword and Copy to clipboarddriverOptions.expirationChecker now pass through to the connection config. Projects running on AWS RDS with IAM authentication can mint a fresh token per connection, instead of failing when the short-lived token expires after about 15 minutes.

Stripe payment method configurations

vssavosko added first-class support for Stripe Payment Method Configurations to the Copy to clipboard@medusajs/payment-stripe provider.

Merchants can now control which payment methods appear through the configurations they pass to the Stripe Payment Module Provider in Medusa.

More languages and currencies

Medusa is used worldwide, and the community made it more accessible this release:

• Brazilian Portuguese admin translations from diwberg.
• Persian (fa) translation completeness from rasa7x.
• Angolan Kwanza (AOA) currency support, with the region editor guarded against unknown currencies, from BIGSUS24.

Correctness fixes across the platform

Dozens of community fixes made Medusa more reliable, the kind of work that compounds into a platform you can trust:

• Fixed binary file corruption on upload, where PNGs and PDFs were mangled by UTF-8 re-encoding, from BIGSUS24.
• Stopped double-counting tax on discounts in refundable totals, from shafi-VM.
• Corrected per-adjustment subtotals and Copy to clipboardBigNumber string coercion, from Venkat-jaswanth.
• Prevented nested serialization from mutating parent keys such as Copy to clipboardid and Copy to clipboarddeleted_at, from dosacha.
• Added HTTP compression middleware from AkashRanjan18, and a JS SDK that no longer breaks when browser storage is blocked from Arunsiva003.

Zero open security alerts

We reviewed and resolved every open Dependabot alert on the repository. There are now zero open alerts, with +100 resolved in this release. We also automated the process around these alerts to resolve them promptly and keep Medusa secure.

Upgrade to v2.18.0

Check out the release notes to update to v2.18.0. Thank you to our community members for their contributions!