Releases
Release 4.7.0
Stable release notes for Payment Gateway App 4.7.0.
Release 4.7.0
- Channel: stable
- Deployment target: production
- Published: 2026-07-13T16:36:52Z
- Release tag: v4.7.0
Admin Panel
- Introduced customer risk hold controls, allowing administrators to enforce and manage transaction restrictions on a per-customer basis.
- Added a new dispute resolution workflow to improve the traceability and accounting of contested transactions.
- Enhanced the dashboard trend reports to include disputed transactions for better financial visibility.
- Implemented an invoice settlement repair tool to manually resolve data inconsistencies in payment records.
- Improved the data import service with organization-scoped provider toggling and enhanced update specifications.
- Added a warning notification for document templates utilizing authoritative data sources to prevent unintended configuration overrides.
APIs And Integrations
- Updated dispute webhook handling to ensure final resolution states and invoice effects are synchronized between the gateway and external providers.
- Improved tax country determination logic by updating and clarifying
evidenceTypevalues. - Refactored CORS and session handling to improve error logging and integration reliability for third-party callers.
Checkout And Customer Portal
- Implemented enforcement of customer risk holds during checkout, preventing transactions for flagged accounts.
- Added localized notifications and payment limit displays to inform customers when risk-related restrictions are active.
- Enhanced internationalization support with improved resource loading and localized messages for unresolved disputes.
- Improved the reliability of the checkout process for preselected payment providers when customer-specific holds are present.
Deployment And Operations
- Upgraded the backend runtime to Go 1.26.5.
- Introduced an automated PDF regeneration queue that triggers on cache misses to ensure credit note availability.
- Improved system resilience during credit note generation with polling mechanisms that wait for worker completion, preventing download failures during cache lag.
- Added automated settlement consistency backfilling to ensure historical invoice records align with current accounting logic.
Security
- Improved data import security by preventing imports from continuing when required encryption is unavailable.
- Upgraded Go modules and core runtime to address security vulnerabilities.
- Improved the isolation of organization-scoped provider settings to ensure strict access control across multi-tenant environments.
Fixes
- Resolved a layout issue in the Invoice Studio where the right edge of PDF documents was occasionally cut off.
- Fixed a bug in tax record rebuilds where active records or snapshots could be lost during webhook merges.
- Corrected an issue preventing the download of credit note PDFs by ensuring runtime data is fully populated before rendering.
- Fixed an inconsistency in invoice settlement that could lead to non-atomic payment state updates.
- Improved the accuracy of VAT OSS reporting by aligning report quarters with issued invoice dates.
- Stabilized credit note document defaults to ensure consistency across PDF templates.
Security Artifacts
Release security evidence is linked from the Release Security Transparency guide.
- Artifact index: https://docs.payment-gateway.app/release-security/v4.7.0/artifact-index.json
- Scan manifest: https://docs.payment-gateway.app/release-security/v4.7.0/reports/scan-manifest.json
- Vulnerability policy result: https://docs.payment-gateway.app/release-security/v4.7.0/reports/policy-result.json
- Vulnerability summary: https://docs.payment-gateway.app/release-security/v4.7.0/reports/summary.md
- Component image provenance: https://docs.payment-gateway.app/release-security/v4.7.0/reports/component-image-provenance.json
- Release provenance statement: https://docs.payment-gateway.app/release-security/v4.7.0/provenance.intoto.jsonl
- Checksum manifest: https://docs.payment-gateway.app/release-security/v4.7.0/SHA256SUMS
- Checksum signature bundle: https://docs.payment-gateway.app/release-security/v4.7.0/SHA256SUMS.sigstore.json