From 9e7c787a8acbcff3225a25c93f420d2d569063d4 Mon Sep 17 00:00:00 2001 From: Margaret Eker Date: Mon, 11 May 2026 10:20:54 -0500 Subject: [PATCH 1/3] Revise backward-incompatible changes for 2.4.9 Updated the version from 2.4.9-beta1 to 2.4.9 and added details about new admin password length validation and its impact. --- .../backward-incompatible-changes/index.md | 20 +++++++++++++++++-- 1 file changed, 18 insertions(+), 2 deletions(-) diff --git a/src/pages/development/backward-incompatible-changes/index.md b/src/pages/development/backward-incompatible-changes/index.md index a99da28bf..aade0675b 100644 --- a/src/pages/development/backward-incompatible-changes/index.md +++ b/src/pages/development/backward-incompatible-changes/index.md @@ -9,9 +9,9 @@ keywords: This page highlights backward-incompatible changes between Adobe Commerce and Magento Open Source releases that have a major impact and require detailed explanation and special instructions to ensure third-party modules continue working. High-level reference information for all backward-incompatible changes in each release is documented in the [reference](reference.md) section. -## 2.4.9-beta1 +## 2.4.9 -The following major backward-incompatible changes were introduced in the 2.4.9-beta1 Adobe Commerce and Magento Open Source releases: +The following major backward-incompatible changes were introduced in the 2.4.9 Adobe Commerce and Magento Open Source releases: * GraphQL alias limit validation * GraphQL query length validation @@ -21,6 +21,22 @@ The following major backward-incompatible changes were introduced in the 2.4.9-b * Valkey 8.x CLI command * Zend_Cache replaced with symfony/cache + +### Admin Password Length Validation + +A new Admin configuration setting enables validation of minimum password length for admin users. Administrators can now set this requirement via **[!UICONTROL Stores > Configuration > Advanced > Admin > Security]**. The validation is enforced during admin user create or update operations and configuration saves, with real-time frontend feedback for improved user experience. + +**Impact:** + +* Only custom or non-standard admin user creation flows are impacted if they do not comply with the new minimum password length requirement +* No impact is expected on normal admin usage if passwords meet the configured minimum length +* The default minimum length can be adjusted in configuration as needed +* A constructor was added to the `Magento\User\Model\UserValidationRules.php` file to support this feature; EAT report shows zero affected modules + +**Action required:** + +No action is required for typical usage. To adjust the minimum password length, use the system configuration path `admin/security/minimum_password_length` in **[!UICONTRL Stores > Configuration > Advanced > Admin > Security]**. \