Zod is now available as a framework export. Import with import { z } from "@medusajs/framework/zod" to use schemas + z.infer in custom routes and middleware (especially helpful in pnpm setups).

Medusa Cloud OAuth login is now available in the Admin. Cloud deployments can enable “Log in with Medusa Cloud” so you can sign in with your Cloud credentials (with automatic user creation/linking when needed).

create-medusa-app now includes facts pointing to Medusa’s Claude Code plugins and MCP server, and CLI messages use cleaner clickable links (e.g., docs + troubleshooting guides).

create-medusa-app now supports pnpm. It detects your package manager automatically, or you can force it with --use-npm, --use-yarn, or --use-pnpm (applies to projects, plugins, and the Next.js starter).

Priority-based event processing is now supported in the Redis event bus. Internal events default to the lowest priority, normal events default to 100, and order placed emits at priority 10 for faster processing. Priority can be overridden per message, emit, or module.

New in DML: .translatable() for text properties. Mark fields as translatable and discover all translatable entities/fields across modules with DmlEntity.getTranslatableEntities() (works with chained modifiers like .searchable()).

New: Translation settings management UI in the Admin. Configure which entities and fields are translatable (and update them in bulk) from Settings → Translations → Manage entities.

New: RBAC module. Create roles and policies, attach policies to roles, and support role inheritance. Admin API endpoints available under /admin/rbac/*.