4.17.0

medusajs/medusa4.17.0Jun 26, 2026by HFO4

AI Summary

Release adding thumbnail support, OIDC group mapping, email visibility controls, Arabic localization, and addressing security vulnerabilities.

Key Highlights

Enabled displaying thumbnails in list view
Added Pro feature for configuring initial user group mapping for OIDC login
Global toggle to expose or hide registered users' email addresses
Added Arabic localization
Fixed multiple security vulnerabilities and OAuth client API endpoint issues

New Features

Thumbnail display
OIDC group mapping
Email visibility toggle
Arabic localization
Security fixes

Full Release Notes

* New: Enable displaying thumbnails in list view (#3453)
  * <details>
     <summary>
     Details
     </summary>
     
     <img width="710" height="610" alt="image" src="https://github.com/user-attachments/assets/2ab359fa-13ed-45f8-a466-abbec40335a8" />

     </details>
* New: [Pro] Configure initial user group mapping for OIDC login (#3434)
  * <details>
     <summary>
     Details
     </summary>
     
     <img width="524" height="440" alt="image" src="https://github.com/user-attachments/assets/4bc46161-d81d-442c-bb47-03c7efa4c0e0" />

     </details>
* New: Global toggle to expose or hide registered users' email addresses (#2930)
* New: Arabic localization (#337 @ahmed-0011 @YUDONGLING)
* Enhancement: Clickable site LOGO (#3457)
* Fix: Multiple security vulnerabilities; detailed information will be disclosed in 30 days. Thanks to @riodrwn and @DavidCarliez for reporting.
* Fix: Desktop client and other OAuth clients unable to use all API endpoints (#3471)