Release Notes

EGL Build 260915.1

15 September 2026

NEW Upgraded from Bagisto 2.2.4 to Bagisto 2.4.10, eight releases of fixes and features ahead. This also moves the application from Laravel 10 to Laravel 12, so the platform underneath your store has a full support life ahead of it rather than behind it.

NEW Containerized build on AlmaLinux 10, replacing AlmaLinux 9. Bagisto and its database run as containers, so an application update no longer means replacing the instance, and your product images, category banners and generated invoices are kept in storage that an update does not touch.

NEW Your admin panel has its own address. Bagisto’s default is /admin, which is the first path every automated login attempt tries. Each instance now gets its own admin path, and the installation summary tells you what yours is.

NEW Free SSL and your own domain in one command. Run egl-setup-domain.sh.x and a Let’s Encrypt certificate is obtained and renewed automatically. No email address is required and no configuration files need editing.

NEW Automatic HTTP to HTTPS redirect once a domain is associated, and a Caddy reverse proxy in front of the application, so certificates survive application updates and restarts.

FIXED Your store now gets its own administrator password. Previous builds left Bagisto’s published default in place, [email protected] with the password admin123, and printed it to every customer as if it had been generated for them. Upstream’s own unattended installer still creates exactly that account, so this is corrected deliberately at install time.

FIXED SELinux is left enforcing. The previous install wrote SELINUX=permissive into the system configuration and switched enforcement off in the same step, and nothing ever put it back, so every instance ran with the kernel’s mandatory access control disabled.

FIXED Installation can no longer report success after a failure. The previous installer declared success when a file it had copied itself was present, so a failed dependency install or a failed database migration still printed the success summary. This build reads back what the installation was supposed to produce and stops if it is not there.

FIXED The domain tool now updates the address your store records for itself, which is the address used in the links inside your order confirmation and password reset emails, as well as the address in the web server configuration.

IMPROVED PHP 8.4, replacing PHP 8.2, which is what Bagisto 2.4 requires. MariaDB 11.4 is unchanged.

IMPROVED The database is no longer reachable from outside the instance. It runs on an isolated internal network with no published port, where the previous build listened on every interface.

IMPROVED Every dependency is pinned. The previous build resolved its PHP dependencies fresh on each run, so two instances launched a week apart were not running the same software. This build installs all 167 of them from the version lock the Bagisto project publishes, and verifies the source archive by checksum before unpacking it.

IMPROVED The recommended inbound ports are now 22, 80 and 443 only. Port 3306 no longer needs to be open and must not be, and the previous build’s firewall additionally permitted the server administration console on port 9090.

IMPROVED Installation no longer depends on a single download source. If one is unavailable the installer falls back to others automatically.

IMPROVED Clearer installation messages, including a check that your domain points at the instance before a certificate is requested.

IMPROVED The default time zone is now UTC, matching the instance clock, so a timestamp in Bagisto lines up with a timestamp in the system log next to it. You can change it under Configure.

IMPROVED AlmaLinux 10 with current patches, replacing AlmaLinux 9.

IMPROVED This is a clean Bagisto with no sample products, so there is nothing to delete before you list real stock.

REMOVED phpMyAdmin is no longer included. The database is no longer reachable from outside the instance, and a database administration console published on the public internet is the most direct route into every order and customer record your store holds.

REMOVED The DNS server and the two cache services that earlier builds installed and ran are gone. Bagisto’s own defaults use none of them.

REMOVED Firewalld is no longer listed. In the container model the database has no published port for it to protect, and the recommended inbound port list does that job.

EGL Build 260629.1

29 June 2026

IMPROVED Latest AlmaLinux 9 – Now running on the latest AlmaLinux 9 with critical patches applied, delivering improved stability, security, and long-term support.

IMPROVED Hardened Security – Implemented additional security measures, including the latest CVE patches, to protect against emerging threats and vulnerabilities.

IMPROVED Comprehensive Package Updates – All system packages and dependencies have been updated to their latest stable versions, ensuring compatibility, reliability, and security.

EGL Build 260421.1

21 April 2026

IMPROVED Latest AlmaLinux 9 – Now running on the latest AlmaLinux 9 with critical patches applied, delivering improved stability, security, and long-term support.

IMPROVED Hardened Security – Implemented additional security measures, including the latest CVE patches, to protect against emerging threats and vulnerabilities.

IMPROVED Performance Optimizations – Fine-tuned system configurations to enhance speed, responsiveness, and resource efficiency.

IMPROVED Comprehensive Package Updates – All system packages and dependencies have been updated to their latest stable versions, ensuring compatibility, reliability, and security.

EGL Build 251023.1

23 October 2025

IMPROVED Latest AlmaLinux 9 – Now running on the latest AlmaLinux 9 with critical patches applied, delivering improved stability, security, and long-term support.

IMPROVED Hardened Security – Implemented additional security measures, including the latest CVE patches, to protect against emerging threats and vulnerabilities.

IMPROVED Performance Optimizations – Fine-tuned system configurations to enhance speed, responsiveness, and resource efficiency.

IMPROVED Comprehensive Package Updates – All system packages and dependencies have been updated to their latest stable versions, ensuring compatibility, reliability, and security.