Cody
Cody batches nine ecommerce UX and analytics improvements into a single September release
A side-by-side editorial comparison of Bagisto and Sylius — release velocity, themes, recent moves, and the top alternatives to consider.
Bagisto v2.5.0 adds PostgreSQL support and a full stack upgrade to Laravel 13 + PHP 8.4 + Tailwind 4.
Bagisto is an open-source Laravel-based e-commerce platform currently in the v2.5.0 beta cycle. The headline v2.5.0-beta1 addition is PostgreSQL support via a database grammar abstraction layer — Bagisto was previously MySQL-only, which was a deployment blocker for teams on managed Postgres infrastructure. The same release bundles Laravel 13, PHP 8.4, Pest 5, and Tailwind CSS 4, making it one of the most comprehensive stack upgrades the project has shipped.
Sylius patched critical JWT and Host header auth vulnerabilities across three stable branches simultaneously.
Sylius shipped coordinated security patches across v1.12, v1.13, and v1.14 in the same release window, closing two serious vulnerabilities: a JWT audience confusion flaw that let shop customers authenticate as administrators, and a Host header injection that could enable reset-token theft. These are production-critical fixes for live storefronts. Meanwhile, v2.3.0-ALPHA.1 is in active development with Symfony 8 + PHP 8.3 support, dark mode in the admin panel, and per-channel promotion rules.
Bagisto is an open-source Laravel-based e-commerce platform currently in the v2.5.0 beta cycle. The headline v2.5.0-beta1 addition is PostgreSQL support via a database grammar abstraction layer — Bagisto was previously MySQL-only, which was a deployment blocker for teams on managed Postgres infrastructure. The same release bundles Laravel 13, PHP 8.4, Pest 5, and Tailwind CSS 4, making it one of the most comprehensive stack upgrades the project has shipped.
Bagisto is targeting enterprise and cloud-hosted deployments with the PostgreSQL move, removing the database constraint that limited adoption on platforms where Postgres is the default (AWS RDS, Supabase, Heroku). The full-stack version upgrade signals a focus on staying current with the Laravel ecosystem rather than accumulating technical debt. v2.4.0 also removed visitor tracking entirely and upgraded the upgrade guide with breaking-change documentation — a pattern of deliberate architectural pruning.
v2.5.0 stable will likely follow the beta cycle with database-compatibility testing across MySQL and PostgreSQL as the primary release gate; the Tailwind 4 migration may drive a round of UI theme updates from community contributors.
Sylius shipped coordinated security patches across v1.12, v1.13, and v1.14 in the same release window, closing two serious vulnerabilities: a JWT audience confusion flaw that let shop customers authenticate as administrators, and a Host header injection that could enable reset-token theft. These are production-critical fixes for live storefronts. Meanwhile, v2.3.0-ALPHA.1 is in active development with Symfony 8 + PHP 8.3 support, dark mode in the admin panel, and per-channel promotion rules.
The v2.x alpha signals a significant platform modernization effort — Symfony 8, PHP 8.3, and DBAL 4 adoption. The per-channel promotion rules feature in v2.3 is the most notable new commerce capability: it allows a single promotion to have independent configuration per sales channel, which is important for multi-region merchants with different pricing or discount strategies per market.
v2.3 will reach beta in the next release cycle; the most likely next feature push is around promotion configuration depth or checkout flow improvements to compete with more modern headless commerce platforms.
Other E-comm products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Bagisto or Sylius.
Cody batches nine ecommerce UX and analytics improvements into a single September release
Shopify overhauled its admin shell and pulled Meta into its AI commerce channel layer.
Virto Commerce backports a blade widget UI freeze fix across three active release trains while tightening module auth hooks
Foxy is steadily expanding its payment and shipping provider integrations via API, with FedEx OAuth and PayPal improvements leading recent work.
Snipcart's changelog is documentation pages—an MCP server and robust API suggest active developer-focused platform work, but no release timeline is visible.
CS-Cart ships one major version per quarter on a steady, predictable cycle with minimal public changelog detail.
See all Bagisto alternatives → · See all Sylius alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
Both compete on the same themes — ecommerce — within E-comm. Bagisto is currently shipping more aggressively (velocity 6.3 vs 5.0), with 1 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Bagisto is currently shipping more aggressively (velocity 6.3 vs 5.0), with 1 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other E-comm products to evaluate alongside.
Top Bagisto alternatives in E-comm are ranked by recent ship velocity. Browse the "Bagisto alternatives" section above for the current picks, or visit /alternatives/bagisto for the full list with editorial commentary on each.
Top Sylius alternatives in E-comm are ranked by recent ship velocity. Browse the "Sylius alternatives" section above for the current picks, or visit /alternatives/sylius for the full list with editorial commentary on each.