Maho 26.7.0 is out today!
Maho keeps accelerating: 26.7.0 lands with a completely rewritten API (REST v2, GraphQL, JWT auth, OpenAPI docs), a brand-new admin design with light and dark mode, and a declarative database schema system that replaces two decades of imperative upgrade scripts.
With 26.7.0, Maho gets a brand-new API and a brand-new face.
Highlights
- The new API on API Platform: ~140 REST endpoints, GraphQL, JWT auth, granular permissions, OpenAPI docs. Ships as beta.
- New backend design: complete admin redesign with light and dark mode, CSS-first, zero new dependencies.
- Declarative DB schema: modules describe their target schema, Maho converges the database automatically.
- Frontend 2FA: optional (or mandatory) TOTP two-factor authentication for customers.
- Maho_Revocation: the EU-mandatory revocation button (Directive 2023/2673), built in.
- Schema.org structured data: JSON-LD for products, breadcrumbs, organization, site search and blog posts.
- Layered navigation SEO: noindex for filtered/paginated pages, canonical defaults, nofollow filter links.
- PDF attachments for invoice, shipment, and credit memo emails.
- Maho_MediaCleaner: find and clean orphan media files from the admin.
- Bestsellers and On Sale widgets: merchandising blocks powered by data Maho already collects.
