# magento/magento-cloud-patches

> Provides critical fixes for Magento 2 Enterprise Edition

`composer require magento/magento-cloud-patches`

Canonical URL: https://packagento.com/magento/magento-cloud-patches

## At a glance

- **Vendor**: magento (https://packagento.com/magento.md)
- **Latest version**: 1.1.14 — released 2026-05-06
- **Pricing**: Free
- **Package type**: Magento 2 component
- **Status**: active, accepting new buyers

## Installation

Packagento is licence-gated, so even free packages need a licence on a project before Composer can resolve them.

1. **Sign in or create an account** at https://packagento.com/customer/account/.

2. **Add the package to your account.** Open https://packagento.com/magento/magento-cloud-patches and complete the free checkout. A licence is minted automatically.

3. **Create or pick a project, then activate the licence on it.**
   - Projects represent the Magento installs you deploy to. Manage them at https://packagento.com/projects/.
   - Activate the new licence on the project you'll deploy this package to. Activation is what generates the Composer credentials scoped to that project.

4. **Add the project credentials to your Magento codebase.**

   Grab the project's public + private key from https://packagento.com/projects/ (open the project, then its Credentials tab), and add them to `auth.json`:

   ```json
   {
     "http-basic": {
       "packagento.com": {
         "username": "ppk_live_...",
         "password": "psk_live_..."
       }
     }
   }
   ```

   Add the Packagento Composer repository to `composer.json`:

   ```json
   {
     "repositories": [
       { "type": "composer", "url": "https://packagento.com" }
     ]
   }
   ```

5. **Install and apply.**

   ```bash
   composer require magento/magento-cloud-patches:*
   bin/magento setup:upgrade
   bin/magento setup:di:compile
   bin/magento cache:flush
   ```

## What it does

Provides critical fixes for Magento 2 Enterprise Edition

## README

### Welcome
The Magento Cloud Patches package is a set of patches, previously used within the ece-tools package to improve the integration of all Magento versions with Cloud environments and to deliver critical fixes quickly. Beginning with ece-tools version `2002.0.22` and `2002.1.0`, the Magento Cloud Patches  package is required so that patches can be applied with same workflow used in  ece-tools `2002.0.21` and earlier versions.

### Contributing to Magento Cloud Patches Code Base
You can submit pull requests to fix potential bugs. If you find a bug or have a new suggestion, let us know by creating a Github issue.

**Note:** This repository is not an official support channel. To receive project-specific help, submit a support ticket using the [Magento Support Portal](https://support.magento.com). Any support-related issues opened in this repository will be closed with a request to open a support ticket.

## Magento Cloud Suite
The Magento Cloud Suite includes a set of packages designed to deploy and manage Magento Commerce installations on the Cloud platform.
- The [ece-tools package](https://github.com/magento/ece-tools) - A set of scripts and tools designed to manage and deploy Cloud projects
- [Magento Cloud Components](https://github.com/magento/magento-cloud-components) package - Extended Magento Commerce core functionality for sites deployed on the Cloud platform
- [Magento Cloud Docker](https://github.com/magento/magento-cloud-docker) package - Functionality and Docker images to deploy Magento Commerce to a local Cloud environment
- [Magento Cloud Patches](https://github.com/magento/magento-cloud-patches) package - A set of patches which improve the integration of all Magento versions with Cloud environments

### Useful Resources
- [Release Notes](https://github.com/magento/magento-cloud-patches/releases)
- [Magento Cloud Guide DevDocs](https://devdocs.magento.com/guides/v2.3/cloud/bk-cloud.html)
- [Cloud Knowledge Base and Support](https://support.magento.com)
- [Cloud Slack Channel](https://magentocommeng.slack.com) (join #cloud and #cloud-docker)

### License
Each Magento source file included in this distribution is licensed under OSL-3.0 license.

See [LICENSE.txt](https://github.com/magento/magento-cloud-patches/blob/develop/LICENSE.txt) for the full text of the [Open Software License v. 3.0 (OSL-3.0)](http://opensource.org/licenses/osl-3.0.php)

## Recent Versions

| Version | Released |
|---|---|
| 1.1.14 | 2026-05-06 |
| 1.1.13 | 2026-03-05 |
| 1.1.12 | 2025-11-13 |
| 1.1.11 | 2025-09-08 |
| 1.1.10 | 2025-08-06 |
| 1.1.9 | 2025-06-09 |
| 1.1.8 | 2025-06-03 |
| 1.1.7 | 2025-05-05 |
| 1.1.6 | 2025-04-24 |
| 1.1.5 | 2025-04-15 |

Showing 10 of 43 versions. Full release history on https://packagento.com/magento/magento-cloud-patches.

## Dependencies

### Require

| Package | Constraint |
|---|---|
| composer/composer | ^1.9 \|\| ^2.8 \|\| !=2.2.16 |
| composer/semver | @stable |
| ext-json | * |
| magento/quality-patches | ^1.1.0 |
| monolog/monolog | ^2.3 \|\| ^2.7 \|\| ^3.6 |
| php | ^8.0 |
| symfony/config | ^4.4 \|\| ^5.1 \|\| ^5.4 \|\| ^6.4 \|\| ^7.2 |
| symfony/console | ^4.4 \|\| ^5.1 \|\| ^5.4 \|\| ^6.4 \|\| ^7.2 |
| symfony/dependency-injection | ^4.4 \|\| ^5.1 \|\| ^5.4 \|\| ^6.4 \|\| ^7.2 |
| symfony/process | ^4.4 \|\| ^5.1 \|\| ^5.4 \|\| ^6.4 \|\| ^7.2 |
| symfony/proxy-manager-bridge | ^3.3\|\|^4.3\|\|^5.0\|\|^6.0 |
| symfony/yaml | ^4.4 \|\| ^5.1 \|\| ^5.4 \|\| ^6.4 \|\| ^7.2 |

### Require (dev)

| Package | Constraint |
|---|---|
| codeception/codeception | ^4.1 \|\| ^5.1 |
| codeception/module-asserts | ^1.2 \|\| ^3.0 |
| codeception/module-db | ^1.0 \|\| ^3.0 |
| codeception/module-phpbrowser | ^1.0 \|\| ^3.0 |
| codeception/module-rest | ^1.2 \|\| ^3.0 |
| consolidation/robo | ^1.2 \|\| ^3.0 \|\| ^4.0 \|\| ^5.0 |
| phpmd/phpmd | @stable |
| phpunit/phpunit | ^10.0 \|\| ^12.0 |
| squizlabs/php_codesniffer | ^3.0 |

## Quality

Latest release (1.1.14) fails the Packagento QA pipeline. Verdicts below are per-cell (Magento line × PHP version) for the matrixed tools, and run-once for the static / security tiers.


### Compatibility

Each Magento line is installed on its supported PHP versions, then the module is built (DI compile + static-content deploy). Cells show passed / failed / untested; staircase gaps render as `–`.

| Magento | PHP 8.2 | PHP 8.3 | PHP 8.4 | PHP 8.5 |
|---|---|---|---|---|
| 2.4.7 | Pass | Pass | – | – |
| 2.4.8 | – | Pass | Pass | – |
| 2.4.9 | – | – | not tested | not tested |


### Code Quality

Advisory checks against the module's source. Never affect the Compatibility verdict — a phpcs finding can't make a module incompatible.

#### Static Analysis

Coding standards (phpcs), mess detection (phpmd), copy-pasted code (cpd), PHP cross-version compatibility, composer.json validity. Each runs once for the whole module.

| Tool | Status | Findings | Summary |
|---|---|---|---|
| PHPCS | Fail | 116 | 6 errors, 110 warnings (ruleset: Magento2) — 9 auto-fixable with phpcbf |
| PHPMD | Warning | 20 | 20 rule violations (UndefinedVariable:9, MissingImport:8, ErrorControlOperator:2, CountInLoopExpression:1) |
| Cpd | Warning | 8 | 8 duplicated chunks spanning 294 total lines (min-lines=5, min-tokens=70) |
| Composer validate | Info | 3 | valid; 3 advisory notes (composer validate --strict) |

#### PHPStan

Type-checks the module against a real Magento install. Re-runs per Magento + PHP version because resolvable symbols differ between releases.

| Magento | PHP 8.2 | PHP 8.3 | PHP 8.4 | PHP 8.5 |
|---|---|---|---|---|
| 2.4.7 | 17 | 17 | – | – |
| 2.4.8 | – | 18 | 18 | – |
| 2.4.9 | – | – | N/A | N/A |


### Tests

Unit and integration suites run per Magento + PHP cell. Test failures speak to the module's behaviour, not its compatibility with a line, so they're reported here separately.

#### Unit Tests

| Magento | PHP 8.2 | PHP 8.3 | PHP 8.4 | PHP 8.5 |
|---|---|---|---|---|
| 2.4.7 | N/A | N/A | – | – |
| 2.4.8 | – | N/A | N/A | – |
| 2.4.9 | – | – | N/A | N/A |

#### Integration Tests

| Magento | PHP 8.2 | PHP 8.3 | PHP 8.4 | PHP 8.5 |
|---|---|---|---|---|
| 2.4.7 | N/A | N/A | – | – |
| 2.4.8 | – | N/A | N/A | – |
| 2.4.9 | – | – | N/A | N/A |


### Security

Dependency-advisory audit (composer audit) plus a source malware scan. A malware detection fails the version outright.

| Tool | Status | Findings | Summary |
|---|---|---|---|
| Composer audit | Pass | 0 |  |
| Malware scan | Pass | 0 |  |

## Licence and pricing

Free. A licence is still minted on checkout and bound to your project for Composer access — no payment step.

Refundable within 14 days of first purchase via https://packagento.com/account/refunds/.

## Install via Claude Code or any MCP client

The Packagento MCP server can run the licence + project + Composer steps above in one tool call:

```
purchase_and_install_packages(
  composer_names=["magento/magento-cloud-patches"],
  project_id="proj_xxx"
)
```

This handles cart, checkout, licence minting, project activation, and writes auth.json credentials. Connect a client with `claude mcp add packagento https://mcp.packagento.com`. Full setup at https://packagento.com/docs/mcp-setup.

## Vendor

magento is a Magento 2 vendor on Packagento. See https://packagento.com/magento.md for their full catalogue.