
- New: Added auction product support to the new vendor product editor, allowing vendors to create and edit auction products without using the legacy form.
- Update: The Stripe Express payment method now appears in Block Checkout only when all vendors in the cart have completed their onboarding.
- Fix: Prevented duplicate order notes from being added to single-vendor orders paid through Stripe Express.
- Fix: Improved security in the Booking module by preventing stored cross-site scripting through customer names and email addresses in the Manage Bookings list.
- Fix: Ensured product add-ons can only be edited by the vendor who owns them.
- Fix: Ensured MangoPay account signup, disconnection, and saved card actions can only be performed for the vendor’s own account.
- Fix: Ensured vendors can only update or delete reviews left on their own products.
- Fix: Ensured auction products can only be edited by the vendor who owns them.
- Fix: Ensured ShipStation shipment notifications are only applied to the vendor’s own orders.