Applying Patches

[perryworld]

Hi

We are new to Magento especially with regards to applying patches, so this will be our first attempt.

Our site is currently running under Magento ver. 2.3.6-p1 and we have a message saying
there are patches available - 2.3.7-p1 and 2.4.2-p1 so we would like to apply them against
our test site.

Which is the best approach - using Composer or Github?
Where would we find the patch files to download?
Is there a step by step by guide on how to apply them?

Any help would really be appreciated

Thanks
Rich

[Mukesh Tiwari]

Hi @perryworld 

Please read this article for more information https://devdocs.magento.com/guides/v2.4/comp-mgr/patching.html 
I suggest you to use composer.

Thanks

[perryworld]

Hi Mukesh

We have made some progress with this.
We had to check with our ISP and they made a few changes so we were able to
try to run the composer command but got this error:

Creating a "magento/project-enterprise-edition=2.3.7-p2" project at
"./patches"
Warning from repo.magento.com:
You haven't provided your Magento authentication keys.
For instructions, visit
https://devdocs.magento.com/guides/v2.3/install-gde/prereq/connect-auth.html

We have followed these instructions to get the autorisation keys but are
not sure what we need to do with them

Any help would be greatly appreciated

Thanks
Rich

[perryworld]

Hi 

We have made some progress with this.

We had to check with our ISP and they made a few changes so we were able to try to run the composer command but got this error:

Creating a "magento/project-enterprise-edition=2.3.7-p2" project at "./patches"
Warning from repo.magento.com:
You haven't provided your Magento authentication keys.
For instructions, visit https://devdocs.magento.com/guides/v2.3/install-gde/prereq/connect-auth.html

We have followed these instructions to get the autorisation keys but are not sure what we need to do with them

Any help would be greatly appreciated

Thanks

Rich

[Mukesh Tiwari]

Hi @perryworld 

When you will run the composer update command to update your Magento version it will ask for the credentials. You have to enter the values there.

You may create a auth.json file in your Magento root folder also with the credentials.

Please refer following articles for more information about auth.json.

https://devdocs.magento.com/guides/v2.4/install-gde/prereq/dev_install.html 

https://devdocs.magento.com/cloud/setup/first-time-setup-import-prepare.html 

Thanks

[perryworld]

Hi Mukesh

Thanks so much for your help with this.

We have now signed in using the keys and are now trying to run the following command

composer create-project --repository-url=https://repo.magento.com/ magento/project-community-edition=2.3.7-p2 patches but we get "Could not find package" error

Where do we download the patches file for 2.3.7-p2 patches?

We go to https://magento.com/security/patches and see this mentioned but are unable to find where we download the file?

Any help would really be appreciated - Thanks

cheers

Rich

[perryworld]

Hi,

Can anyone help with this.

We just need to find where we can download the patches files from so we can upload to our server and then apply the patches

Any help would rally be appreciated

Thanks

Rich