SalesforceCommerceCloud · syadupathi-sf · Feb 2, 2026 · Dec 30, 2025 · Dec 30, 2025 · Dec 30, 2025
@@ -1,3 +1,6 @@
+## v5.0.0-dev (Jan 28, 2026)
+- Upgrade to commerce-sdk-isomorphic v5.0.0 and introduce Payment Instrument SCAPI integration [#3552](https://github.com/SalesforceCommerceCloud/pwa-kit/pull/3552)
+
 ## v4.4.0-dev (Dec 17, 2025)
 - [Bugfix]Ensure code_verifier can be optional in resetPassword call [#3567](https://github.com/SalesforceCommerceCloud/pwa-kit/pull/3567)
 - [Improvement] Strengthening typescript types on custom endpoint options and fetchOptions types [#3589](https://github.com/SalesforceCommerceCloud/pwa-kit/pull/3589)

@@ -1,6 +1,6 @@
 {
   "name": "@salesforce/commerce-sdk-react",
-  "version": "4.4.0-dev",
+  "version": "5.0.0-dev",
   "description": "A library that provides react hooks for fetching data from Commerce Cloud",
   "homepage": "https://github.com/SalesforceCommerceCloud/pwa-kit/tree/develop/packages/ecom-react-hooks#readme",
   "bugs": {
@@ -40,7 +40,7 @@
     "version": "node ./scripts/version.js"
   },
   "dependencies": {
-    "commerce-sdk-isomorphic": "4.2.0",
+    "commerce-sdk-isomorphic": "5.0.0-preview.1",
     "js-cookie": "^3.0.1",
     "jwt-decode": "^4.0.0"
   },

@@ -96,10 +96,19 @@ type AuthorizePasswordlessParams = {
     userid: string
     mode?: 'email' | 'callback'
     locale?: string
+    /** When true, SLAS will register the customer as part of the passwordless flow */
+    register_customer?: boolean | string
+    /** Optional registration details forwarded to SLAS when register_customer=true */
+    first_name?: string
+    last_name?: string
+    email?: string
+    phone_number?: string
 }
 
 type GetPasswordLessAccessTokenParams = {
     pwdlessLoginToken: string
+    /** When true, SLAS will register the customer if not already registered */
+    register_customer?: boolean | string
 }
 
 /**
@@ -125,6 +134,8 @@ type AuthDataKeys =
     | typeof DWSID_COOKIE_NAME
     | 'code_verifier'
     | 'uido'
+    | 'idp_refresh_token'
+    | 'dnt'
 
 type AuthDataMap = Record<
     AuthDataKeys,
@@ -1283,7 +1294,19 @@ class Auth {
                 ...(usid && {usid}),
                 ...(parameters.locale && {locale: parameters.locale}),
                 userid: parameters.userid,
-                mode
+                mode,
+                ...(parameters.register_customer !== undefined && {
+                    registerCustomer:
+                        typeof parameters.register_customer === 'boolean'
+                            ? parameters.register_customer
+                            : parameters.register_customer === 'true'
+                            ? true
+                            : false
+                }),
+                ...(parameters.last_name && {lastName: parameters.last_name}),
+                ...(parameters.email && {email: parameters.email}),
+                ...(parameters.first_name && {firstName: parameters.first_name}),
+                ...(parameters.phone_number && {phoneNumber: parameters.phone_number})
             }
         })
         if (res && res.status !== 200) {
@@ -1299,14 +1322,22 @@ class Auth {
     async getPasswordLessAccessToken(parameters: GetPasswordLessAccessTokenParams) {
         const pwdlessLoginToken = parameters.pwdlessLoginToken || ''
         const dntPref = this.getDnt({includeDefaults: true})
+        const usid = this.get('usid')
         const token = await helpers.getPasswordLessAccessToken({
             slasClient: this.client,
             credentials: {
                 clientSecret: this.clientSecret
             },
             parameters: {
                 pwdlessLoginToken,
-                dnt: dntPref !== undefined ? String(dntPref) : undefined
+                dnt: dntPref !== undefined ? String(dntPref) : undefined,
+                ...(usid && {usid}),
+                ...(parameters.register_customer !== undefined && {
+                    register_customer:
+                        typeof parameters.register_customer === 'boolean'
+                            ? String(parameters.register_customer)
+                            : parameters.register_customer
+                })
             }
         })
         const isGuest = false

@@ -67,6 +67,36 @@ export const cacheUpdateMatrix: CacheUpdateMatrix<Client> = {
             ]
         }
     },
+    updateCustomerPaymentInstrument(customerId, {parameters}, response) {
+        const newParams = {...parameters}
+        return {
+            update: [
+                {
+                    queryKey: getCustomerPaymentInstrument.queryKey(newParams)
+                },
+                {
+                    queryKey: getCustomer.queryKey(newParams),
+                    updater: createUpdateFunction((customer: Customer) => {
+                        if (!customer.paymentInstruments) return customer
+                        const idx = customer.paymentInstruments.findIndex(
+                            ({paymentInstrumentId}) =>
+                                paymentInstrumentId === parameters.paymentInstrumentId
+                        )
+                        if (idx >= 0) {
+                            customer.paymentInstruments[idx] = response as any
+                            // If this instrument is now default, unset others
+                            if ((response as any)?.default) {
+                                customer.paymentInstruments = customer.paymentInstruments.map(
+                                    (pi, i) => (i === idx ? pi : {...pi, default: false})
+                                ) as any
+                            }
+                        }
+                        return customer
+                    })
+                }
+            ]
+        }
+    },
     createCustomerPaymentInstrument(customerId, {parameters}, response) {
         const newParams = {...parameters, paymentInstrumentId: response.paymentInstrumentId}
         return {

@@ -18,6 +18,7 @@ describe('Shopper Customers hooks', () => {
         // or add it to the `expected` array with a comment explaining "TODO" or "never" (and why).
         expect(unimplemented).toEqual([
             'getExternalProfile', // TODO: Implement when the endpoint exits closed beta
+            'getPublicProductListItems', // TODO: Implement when the endpoint exits closed beta
             'registerExternalProfile' // TODO: Implement when the endpoint exits closed beta
         ])
     })

@@ -54,7 +54,8 @@ const basePaymentInstrument: ShopperCustomersTypes.CustomerPaymentInstrument = {
     paymentBankAccount: {},
     paymentCard: {cardType: 'fake'},
     paymentInstrumentId: 'paymentInstrumentId',
-    paymentMethodId: 'paymentMethodId'
+    paymentMethodId: 'paymentMethodId',
+    default: false
 }
 const baseCustomer: RequireKeys<
     ShopperCustomersTypes.Customer,
@@ -176,6 +177,50 @@ describe('ShopperCustomers mutations', () => {
             expect(result.current.mutation.data).toBeUndefined()
             assertRemoveQuery(result.current.query)
         })
+        test('`updateCustomerPaymentInstrument` updates cache on success', async () => {
+            // 0. Setup
+            const customer = baseCustomer
+            const oldData = basePaymentInstrument
+            const newData: ShopperCustomersTypes.CustomerPaymentInstrument = {
+                ...basePaymentInstrument,
+                default: true
+            }
+            const options = createOptions<'updateCustomerPaymentInstrument'>({
+                // Only updating default flag for this test
+                default: true as any
+            })
+
+            mockQueryEndpoint(customersEndpoint, customer) // getCustomer
+            mockQueryEndpoint(customersEndpoint, oldData) // getCustomerPaymentInstrument
+            mockMutationEndpoints(customersEndpoint, newData) // this mutation
+            mockQueryEndpoint(customersEndpoint, {test: 'this should not get used'}) // getCustomer refetch
+            mockQueryEndpoint(customersEndpoint, {test: 'this should not get used'}) // getCustomerPaymentInstrument refetch
+
+            const {result} = renderHookWithProviders(() => ({
+                customer: queries.useCustomer(queryOptions),
+                mutation: useShopperCustomersMutation('updateCustomerPaymentInstrument'),
+                query: queries.useCustomerPaymentInstrument(queryOptions)
+            }))
+
+            // 1. Populate cache with initial data
+            await waitAndExpectSuccess(() => result.current.customer)
+            await waitAndExpectSuccess(() => result.current.query)
+            expect(result.current.customer.data).toEqual(customer)
+            expect(result.current.query.data).toEqual(oldData)
+
+            // 2. Do update mutation
+            act(() => result.current.mutation.mutate(options))
+            await waitAndExpectSuccess(() => result.current.mutation)
+            expect(result.current.mutation.data).toEqual(newData)
+            // query updated
+            assertUpdateQuery(result.current.query, newData)
+            // customer cache updated (instrument replaced)
+            const expectedCustomer = {
+                ...customer,
+                paymentInstruments: [newData]
+            }
+            assertUpdateQuery(result.current.customer, expectedCustomer as any)
+        })
         test('`removeCustomerAddress` updates cache on success', async () => {
             // 0. Setup
             const customer = baseCustomer

@@ -73,6 +73,11 @@ export const ShopperCustomersMutations = {
      * @returns A TanStack Query mutation hook for interacting with the Shopper Customers `createCustomerPaymentInstrument` endpoint.
      */
     CreateCustomerPaymentInstrument: 'createCustomerPaymentInstrument',
+    /**
+     * Updates a customer's payment instrument.
+     * @returns A TanStack Query mutation hook for interacting with the Shopper Customers `updateCustomerPaymentInstrument` endpoint.
+     */
+    UpdateCustomerPaymentInstrument: 'updateCustomerPaymentInstrument',
     /**
      * Deletes a customer's payment instrument.
      * @returns A TanStack Query mutation hook for interacting with the Shopper Customers `deleteCustomerPaymentInstrument` endpoint.

@@ -11,6 +11,12 @@ import * as queries from './query'
 describe('Shopper Experience hooks', () => {
     test('all endpoints have hooks', () => {
         const unimplemtented = getUnimplementedEndpoints(ShopperExperience, queries)
-        expect(unimplemtented).toEqual([])
+        expect(unimplemtented).toEqual([
+            'getContent', //TODO: implement later
+            'getContentFolder', //TODO: implement later
+            'getContentFolders', //TODO: implement later
+            'getMultipleContent', //TODO: implement later
+            'searchContent' //TODO: implement later
+        ])
     })
 })
@@ -20,7 +20,12 @@ describe('Shopper Login hooks', () => {
             // These endpoints all return data in the response headers, rather than body, so they
             // don't work well with the current implementation of mutation hooks.
             'authenticateCustomer',
-            'getTrustedAgentAuthorizationToken'
+            'authorizeWebauthnRegistration',
+            'finishWebauthnAuthentication',
+            'finishWebauthnUserRegistration',
+            'getTrustedAgentAuthorizationToken',
+            'startWebauthnAuthentication',
+            'startWebauthnUserRegistration'
         ])
     })
     test('all mutations have cache update logic', () => {

@@ -16,7 +16,7 @@ describe('Shopper Orders hooks', () => {
         const unimplemented = getUnimplementedEndpoints(ShopperOrders, queries, mutations)
         // If this test fails: create a new query hook, add the endpoint to the mutations enum,
         // or add it to the `expected` array with a comment explaining "TODO" or "never" (and why).
-        expect(unimplemented).toEqual(['guestOrderLookup'])
+        expect(unimplemented).toEqual(['failOrder', 'guestOrderLookup'])
     })
     test('all mutations have cache update logic', () => {
         // unimplemented = value in mutations enum, but no method in cache update matrix

@@ -1,3 +1,5 @@
+## v3.16.0-dev (Dec 17, 2025)
+- Add new One-Click Checkout configuration [#3609](https://github.com/SalesforceCommerceCloud/pwa-kit/pull/3609)
 
 ## v3.15.0-dev (Nov 05, 2025)
 - Support email mode by default for passwordless login and password reset in a generated app. [#3525](https://github.com/SalesforceCommerceCloud/pwa-kit/pull/3525)

@@ -139,6 +139,10 @@ module.exports = {
             appSourceId: '{{answers.project.dataCloud.appSourceId}}',
             tenantId: '{{answers.project.dataCloud.tenantId}}'
         },
+        // Enable one-click checkout feature
+        oneClickCheckout: {
+            enabled: false
+        },
         // Bonus product config
         pages: {
             cart: {

@@ -139,6 +139,10 @@ module.exports = {
             appSourceId: '{{answers.project.dataCloud.appSourceId}}',
             tenantId: '{{answers.project.dataCloud.tenantId}}'
         },
+        // Enable one-click checkout feature
+        oneClickCheckout: {
+            enabled: false
+        },
         // Bonus product config
         pages: {
             cart: {

@@ -1,3 +1,6 @@
+## v8.5.0-dev (Jan 19, 2026)
+- [Feature] One Click Checkout [#3552](https://github.com/SalesforceCommerceCloud/pwa-kit/pull/3552)
+
 ## v8.4.0-dev (Dec 17, 2025)
 - [Feature] Add `fuzzyPathMatching` to reduce computational overhead of route generation at time of application load [#3530](https://github.com/SalesforceCommerceCloud/pwa-kit/pull/3530)
 - [Bugfix] Fix Passwordless Login landingPath, Reset Password landingPath, and Social Login redirectUri value in config not being used [#3560](https://github.com/SalesforceCommerceCloud/pwa-kit/pull/3560)