Skip to content

Maho 26.1.0 is out today!

We're kicking off 2026 with yet another monumental milestone: multi-database support. For the first time ever, Maho can run on PostgreSQL and SQLite alongside MySQL!

But that's just the beginning. This release also brings passwordless authentication, a complete gift card module, automated product linking rules, dozens of frontend improvements, and full PHP 8.5 compatibility.

26.1.0 is our most feature-rich release yet.

Highlights

  • Multi-database support: Run Maho on MySQL, PostgreSQL, or SQLite via Doctrine DBAL 4.4.
  • Magic Link authentication: Passwordless login via secure email links with hybrid or full passwordless modes.
  • Complete Gift Card module: Fixed or custom amounts, partial payments, PDF export with QR codes, and recipient notifications.
  • CatalogLinkRule module: Automate product relationships through condition-based rules.
  • USPS REST API migration: OAuth 2.0 support with ~90% reduction in API requests.
  • Enhanced Dashboard Analytics: Server-side visitor insights without third-party data collection.
  • AJAX add-to-cart: Offcanvas minicart for smoother shopping experience.
  • New CLI commands: Database migrations, maintenance mode, theme scaffolding, and layout debugging.

🚀 New features and major improvements

Multi-Database Support

Maho now operates across three database engines: MySQL, PostgreSQL, and SQLite. This advancement leverages Doctrine DBAL 4.4 to provide true database flexibility. PostgreSQL enables enterprise deployments with its advanced features, while SQLite supports lightweight installations perfect for development, testing, or small deployments.

Our demo store running on SQLite demonstrates performance improvements of nearly 50% faster reindexing compared to MySQL, showing that the right database choice can make a significant difference for your specific use case.

We're introducing passwordless authentication via secure email links, giving your customers a modern, frictionless login experience. The system supports two modes:

  • Hybrid mode: Traditional passwords alongside optional magic link access
  • Passwordless mode: Email-only login with password fields completely hidden

Security is paramount: the system uses 32-character cryptographically secure tokens, configurable expiration (10 minutes default), and rate limiting that prevents email enumeration attacks.

Gift Card Module

A comprehensive gift card system is now built into Maho's core. Features include:

  • Fixed or custom amounts for flexible gifting options
  • Partial payment application with automatic balance tracking
  • PDF export with QR codes and barcodes
  • Recipient notifications via email
  • Refund handling that credits balances back to cards

This enterprise-grade feature required no third-party modules and integrates seamlessly with Maho's checkout and order management.

CatalogLinkRule Module

Automate your product relationships through condition-based rules instead of manual assignment. Define source and target conditions, customize sort ordering, and let the daily cron process handle everything in efficient 100-product batches. Perfect for "customers also bought", related products, or any automated cross-sell strategy.

USPS REST API Migration

We've replaced the legacy XML API with the modern USPS REST API featuring OAuth 2.0 support. This update introduces shipping label generation capability and reduces API requests by approximately 90%, making shipping calculations faster and more reliable.

Enhanced Dashboard Analytics

Get server-side visitor insights directly in your admin dashboard without relying on third-party analytics services. Features include:

  • 30-day visitor trends
  • Device and browser breakdowns
  • Conversion rate tracking
  • Entry and exit page analysis
  • Traffic source referrers
  • Language preferences

All data stays on your server with zero third-party data collection.

Major, but not headline

  • AJAX add-to-cart with offcanvas minicart for a smoother shopping experience without page reloads
  • Unified tabbed login interface combining login and registration in a clean, modern design
  • Fullscreen product gallery with scroll-snap navigation for immersive product browsing
  • File attribute type for EAV enabling file uploads on any entity
  • Enhanced layered navigation with improved price filters
  • Discount percentage badges displayed automatically on product prices
  • Customizable maintenance page for branded downtime communication
  • Multi-column layout support in TipTap editor for richer content creation
  • Drag-and-drop section reordering in the admin interface

CLI Enhancements

  • ./maho migrate - Execute database migrations
  • ./maho maintenance:enable/disable/status - Manage maintenance mode
  • ./maho frontend:theme:create - Scaffold new themes quickly
  • ./maho frontend:layout:debug - Analyze and debug layout XML

Code Quality & Security

  • PHPStan configuration enhancements for stricter static analysis
  • Removal of ancient deprecated code for a cleaner codebase
  • Namespace migrations from Varien to Maho continuing
  • GIF icons replaced with SVG for sharper, scalable graphics
  • Inclusive terminology updates throughout the codebase
  • Path validation utilities added to \Maho\Io blocking dangerous stream wrappers
  • Rector rules implemented for securing unserialize() calls

Dependencies & Compatibility

  • Symfony upgraded to 7.4
  • Emogrifier upgraded to version 8
  • PHP 8.5 compatibility achieved
  • EAV attribute ID remapping for sample data imports

And much more, be sure to check the full release announcement.