magento2-40657: Varnish VCL pipes PATCH requests instead of passing them to the backend
Community fix magento2-40657 merged into magento/magento2 on 2026-07-28, not in a release yet; applies cleanly to 7 releases from 2.4.8 to 2.4.9.
Varnish VCL pipes PATCH requests instead of passing them to the backend edited
- Pull request title
- fix(pagecache): recognize PATCH as valid HTTP method in Varnish VCL
- Pull request
- magento/magento2#40657
- Issues
- —
- Author
- @lbajsarowicz
- Merged
- 2026-07-28
- Fixed in
- no release yet
- Reported on
- —
- Categories
- —
- Components
- magento/module-page-cache
Labels
- Area
- —
- Component
- —
- Priority
- —
- Severity
- —
- Reported on (labels)
- —
Issue
Title and steps come from the upstream issue and pull request.
The upstream issue and pull request have no structured description.
Code match per tag
Each tag was checked with git apply --check against that tag's files. A clean match means the change applies; it is not a test result. Tags that already contain the fix are marked.
| Line | Code match per tag | Tests |
|---|---|---|
| 2.4.6 | 2.4.6 file-missing 2.4.6-p1 file-missing 2.4.6-p2 file-missing 2.4.6-p3 file-missing 2.4.6-p4 file-missing 2.4.6-p5 file-missing 2.4.6-p6 file-missing 2.4.6-p7 file-missing 2.4.6-p8 file-missing 2.4.6-p9 file-missing 2.4.6-p10 file-missing 2.4.6-p11 file-missing 2.4.6-p12 file-missing 2.4.6-p13 file-missing 2.4.6-p14 file-missing 2.4.6-p15 file-missing | 2.4.6: no test data 2.4.6-p1: no test data 2.4.6-p2: no test data 2.4.6-p3: no test data 2.4.6-p4: no test data 2.4.6-p5: no test data 2.4.6-p6: no test data 2.4.6-p7: no test data 2.4.6-p8: no test data 2.4.6-p9: no test data 2.4.6-p10: no test data 2.4.6-p11: no test data 2.4.6-p12: no test data 2.4.6-p13: no test data 2.4.6-p14: no test data 2.4.6-p15: no test data |
| 2.4.7 | 2.4.7 file-missing 2.4.7-p1 file-missing 2.4.7-p2 file-missing 2.4.7-p3 file-missing 2.4.7-p4 file-missing 2.4.7-p5 file-missing 2.4.7-p6 file-missing 2.4.7-p7 file-missing 2.4.7-p8 file-missing 2.4.7-p9 file-missing 2.4.7-p10 file-missing | 2.4.7: no test data 2.4.7-p1: no test data 2.4.7-p2: no test data 2.4.7-p3: no test data 2.4.7-p4: no test data 2.4.7-p5: no test data 2.4.7-p6: no test data 2.4.7-p7: no test data 2.4.7-p8: no test data 2.4.7-p9: no test data 2.4.7-p10: no test data |
| 2.4.8 | 2.4.8 clean 2.4.8-p1 clean 2.4.8-p2 clean 2.4.8-p3 clean 2.4.8-p4 clean 2.4.8-p5 clean | 2.4.8: no test data 2.4.8-p1: no test data 2.4.8-p2: no test data 2.4.8-p3: no test data 2.4.8-p4: no test data 2.4.8-p5: no test data |
| 2.4.9 | 2.4.9 clean | 2.4.9: no test data |
Triage
Model @cf/cloudflare/clef. Probability this is a bug fix: 88.8%. Probability it is security relevant: 1.2%.
Show the model's answers and probabilities
| Question | Answer | Probabilities | Confidence |
|---|---|---|---|
| Change kind | bugfix | bugfix 86.9%, feature 8.0%, cleanup 2.1%, refactor 1.5%, dependency 0.6%, tests_only 0.5%, docs_only 0.5% | 72.2% |
| Area | framework | framework 80.2%, graphql_api 6.9%, other 6.2% | 60.4% |
| Reported version | unspecified | unspecified 16.8%, 2.4.6 6.1%, 2.4.8 4.3% | 3.2% |
| Scope | 0.33 of 2 | 0 73.8%, 1 19.4%, 2 6.9% | 38.0% |
| Risk | 0.32 of 2 | 0 72.4%, 1 23.2%, 2 4.4% | 36.9% |
| Worth backporting | 1.66 of 2 | 2 71.5%, 1 22.5%, 0 6.0% | 34.9% |
Download
For cweagans/composer-patches, choose a version below and download the bundle. Copy its magento2-40657/ folder into patches/composer/, merge composer.patches.json into composer.json, then run composer install. Test files are always removed; paths are relative to each package root, using the default -p1 level.
Bundle README (what the ZIP ships)
# magento2-40657 Community fix merged upstream into magento/magento2, adapted by magento.watch. This is not a patch published by Adobe. Pull request: https://github.com/magento/magento2/pull/40657 Author: @lbajsarowicz Source commit: 8a3e07ac01e6f4819070a097ef7c44b663b9aec1 Modifications: test files and documentation removed, paths rewritten relative to each Composer package. Licence: OSL-3.0 / AFL-3.0, as the original Magento Open Source code. Maintainer: Łukasz Bajsarowicz (@lbajsarowicz)
Licence: Magento Open Source code under OSL-3.0 and AFL-3.0. The bundle carries the original author, source commit and the list of modifications.
