We are proud to announce Mage-OS Distribution version 1.0.4 is now available!

Release Notes

This Mage-OS update brings parity with Magento Open Source 2.4.7-p2, which was recently released with platform security fixes. When upgrading from an earlier version, please be sure to rotate your encryption key.

Please see the release notes for Magento Open Source 2.4.7 and the patch notes for 2.4.7-p2.

You can get Mage-OS from our primary composer repository, repo.mage-os.org.

What’s Changed

  • Security changes from upstream 2.4.7-p2 by @rhoerr in #101

Full Changelog: 1.0.3…1.0.4

Mirror Updates

The latest Magento versions are also available from our public Magento mirror, mirror.mage-os.org:

  • 2.4.4-p10
  • 2.4.5-p9
  • 2.4.6-p7
  • 2.4.7-p2

This mirror composer repository is a drop-in replacement for Magento packages from repo.magento.com. This way you can install Magento without any login, using our public and repeatable build process from the official Magento sources.

Contributors

Thank you to Ryan Hoerr for managing this release, and to all that contributed to the Magento Open Source security reports and fixes.

Thank you also to all who attend our weekly tech meetings, and to all who have ongoing efforts underway!

Contribute

Are you interested in contributing to Mage-OS, or have a bug or improvement you’d like to make? We welcome pull requests at https://github.com/mage-os/mageos-magento2!

If you have a bigger project in mind, please join Discord and summarize your idea. We’d be delighted to hear from you, and help figure out how your idea best fits into Mage-OS!

Installing Mage-OS

You can create a new Mage-OS project with the following SSH command:

composer create-project --repository-url=https://repo.mage-os.org/ mage-os/project-community-edition .

After a successful composer download, you will need to run the installer. Please see DevDocs: Installation Guide for Mage-OS

Moving to Mage-OS

If you are already using Magento 2.4 and PHP 8.1+, you can change to Mage-OS by running the following in SSH:

composer config repositories.0 composer https://repo.mage-os.org/ && \
    composer require mage-os/product-community-edition --no-update && \
    composer remove magento/product-community-edition magento/composer-dependency-version-audit-plugin magento/composer-root-update-plugin --no-update && \
    composer remove sebastian/comparator --dev --no-update && \
    composer update --no-plugins --with-all-dependencies

We strongly recommend updating to the latest Magento version (currently 2.4.7-p2) before changing to Mage-OS, to minimize issues.

Your specific situation may require additional changes to your composer.json file. Generally this will involve changing magento/ package names to mage-os/, or updating dependency versions.

What’s Next?

Our Vision for Mage-OS

The Mage-OS Distribution is an upstream compatible metapackage based on Magento Open Source. Think of it as an independent version of Magento—based on Magento source code, but including additional changes specific to Mage-OS.

The purpose of the Mage-OS core distribution is to provide

  • Improved decoupling of packages
  • Improved developer experience while working with the product
  • Improved developer experience while contributing to the product
  • Full compatibility with Magento extensions
  • Focus on additional security
  • Reduced infrastructure stack dependencies
  • Low-level code improvements, for example in the areas of caching and indexing
  • Removal of most bundled extensions contained in upstream (still independently installable if desired)
  • A simple documented migration path to Magento Open Source or Adobe Commerce

Mage-OS Distribution releases are made independently of upstream releases. This enables us to move faster when desired, for example when enabling compatibility with new PHP versions.

New functional features will be introduced through independently installable modules. This follows the same decoupling approach that Adobe Commerce is using, allowing for a more stable core and an independent feature module release schedule.

The goal of the reduced infrastructure stack dependencies is to enable new developers to be onboarded more easily. The goal is to be able to use a plain XAMPP stack on any machine, including Windows, to run and develop with Mage-OS. This requires making Elasticsearch optional, as well as ensuring services like Redis, RabbitMQ, Node.js and such remain optional.

Mage-OS will also maintain backwards compatibility and the ability to migrate upstream at multiple levels:

  • Compatibility with third-party extensions
  • Database level compatibility (data and schema)
  • API stability

All of our work on creating custom releases based on Magento is open source, meaning:

  1. Mage-OS builds can be independently built and verified, and are fully reproducible;
  2. If you want to create your own fork and version of Magento or Mage-OS, you can do that too.

That’s all for now!