Skip to main content

Securing your app, together

Act now to secure your app: We're asking every app dev to act this week. We have new tools to help, including AI security scans, expiring tokens, and better log filtering. Read on to learn how.
Read the full story
Changelog
Subscribe

Surfaces & APIs

Versions

Change type

  1. October 2026

    Surface
    1. New owner_type field for metafield declarations in Checkout and Customer Account UI extensions, required in 2027-01
      Action requiredCheckout UI
    2. Cart mutations reject unconfirmed writes in POS UI extensions 2026-10
      Breaking changesPOS Extensions
    3. POS UI extensions now return percentage values for percentage discounts
      Breaking changesPOS Extensions
    4. Discounts can now be included in Rollouts
      Action requiredGraphQL Admin API
    5. metafieldInteger collection condition removed in API version 2027-01
      Breaking changesGraphQL Admin API
    6. SMS marketing consent now available on the CustomerPhoneNumber object
      Action requiredGraphQL Admin API
    7. Tax webhook summary and calculation requests now use Global IDs
      Breaking changesGraphQL Admin API
    8. New SubscriptionContractCalculation API for subscription management
      Action requiredGraphQL Admin API
    9. Updated function syntax on the segment query language
      Breaking changesGraphQL Admin API

  2. September 2026

    Surface
    1. AI Toolkit skills have been consolidated to shopify
      Action requiredAI Toolkit
    2. Events subscription query complexity limit is changing to 100 points
      Breaking changesEvents & webhooks
    3. Removing marketCurrencySettingsUpdate mutation
      Breaking changesGraphQL Admin API
    4. The automaticDiscounts query is removed in API version 2027-01
      Breaking changesGraphQL Admin API
    5. Removed session.currentSession.staffMemberId from POS UI Extensions (2026-10)
      Breaking changesPOS Extensions
    6. Updates to Events payloads and subscription configuration
      Action requiredEvents & webhooks
    7. Discounts Allocator Function API developer preview has ended
      Action requiredGraphQL Admin API
    8. Variants now support multiple barcodes
      Action requiredGraphQL Admin API

  3. August 2026

    Surface
    1. Password Protected Shop Dev flows on Shopify Theme CLI v3.83.x and older to be deprecated
      Action requiredThemes
    2. Script tags are deprecated and will stop running on March 1, 2027
      Action requiredGraphQL Admin API

  4. July 2026

    Surface
    1. Updating an order's shipping address recalculates taxes as of API version 2026-10
      Breaking changesGraphQL Admin API
    2. Invalid metafield queries now return errors in the GraphQL Admin API
      Breaking changesGraphQL Admin API
    3. Identity verification for Shopify Partners starts today
      Action requiredPlatform
    4. POS UI extensions 2026-07 uses per-unit fixed-amount line item discounts
      Breaking changesPOS Extensions
    5. Customer Account API Customer.lastIncompleteCheckout and Checkout types removed in 2026-10
      Breaking changesCustomer Account API
    6. OrderDisplayFulfillmentStatus now returns FULFILLMENT_NOT_REQUIRED for orders with no items to fulfill
      Breaking changesGraphQL Admin API
    7. Deprecating the useBuyerJourneyIntercept API on checkout UI extensions
      Action requiredPolaris
    8. Market-driven shipping now available in feature preview
      Action requiredGraphQL Admin API
    9. Deprecation of cumulative marketing engagements
      Action requiredGraphQL Admin API
    10. Merchant-owned delivery profile APIs are deprecated for market-driven shipping
      Action requiredGraphQL Admin API

  5. June 2026

    Surface
    1. Storefront MCP cart tools are being deprecated in favour of UCP Cart MCP
      Action requiredAPI
    2. DraftOrderDiscountNotAppliedWarning.priceRule removed in GraphQL Admin API 2026-10
      Breaking changesGraphQL Admin API
    3. Removal of ITEM_NOT_STOCKED_AT_LOCATION error
      Breaking changesGraphQL Admin API
    4. WhatsApp marketing consent now available in the Admin API and Customer Account API
      Action requiredGraphQL Admin API
    5. Built for Shopify requirements for Returns and exchanges apps and Subscription apps (effective December 1, 2026)
      Action requiredBuilt for Shopify
    6. New Collection model and APIs now available
      Action requiredGraphQL Admin API
    7. Metafields now require a definition to be accessed through the Customer Account API
      Action requiredPlatform
    8. Shopify AI Toolkit for upgrading extensions to Polaris web components
      Action requiredTools

  6. May 2026

    Surface
    1. Expiring offline access tokens required for all public apps as of January 1, 2027
      Breaking changesGraphQL Admin API
    2. Removing deprecated PRIVATE and PUBLIC_READ enums on metaobject definitions
      Breaking changesGraphQL Admin API
    3. Bots and agents should identify themselves via Web Bot Auth
      Action requiredPlatform
    4. App deployment in CI/CD is now available for all apps
      Action requiredTools
    5. Ship and pickup in one order now available in feature preview
      Action requiredAdmin Extensions

  7. April 2026

    Surface
    1. Deprecation of checkout metafields in checkout and customer account UI extensions
      Action requiredCheckout UI
    2. Automatic CSS subsetting for {% stylesheet %} tags
      Action requiredThemes
    3. Storefront Catalog MCP now implements UCP
      Breaking changesAPI
    4. ActionBar removed on mobile: TitleBar primary action now renders as an icon button
      Action requiredApp Bridge
    5. New CSS variable for mobile safe area insets
      Action requiredApp Bridge
    6. DraftOrderLineItem.grams field removed in 2026-07
      Breaking changesAPI
    7. Replacing or deleting a Shopify-hosted file no longer purges its CDN URL
      Action requiredPlatform

  8. March 2026

    Surface
    1. Removing visible_to_storefront_api field on metaobject field definitions
      Action requiredGraphQL Admin API
    2. The Shopify CLI app release --force flag is deprecated and will be removed
      Action requiredTools
    3. Expiring offline access tokens required for new public apps as of April 1, 2026
      Action requiredGraphQL Admin API
    4. Process refunds only through the original payment processor – Requirement update
      Action requiredApp store
    5. New payment decline codes added to OrderTransactionErrorCode enum
      Action requiredGraphQL Admin API
    6. ShopifyQL returns fields deprecated and replaced with sales reversals fields
      Action requiredGraphQL Admin API
    7. Clearer standards for app listing images
      Action requiredApp store
    8. inventorySetScheduledChanges mutation is being removed with no replacement
      Breaking changesGraphQL Admin API
    9. Removed Checkout ID from checkout and order webhooks
      Breaking changesEvents & webhooks
    10. Bare query strings no longer bust the cache for assets
      Action requiredThemes

  9. February 2026

    Surface
    1. New APIs to read and write shipping options in delivery profile
      Breaking changesGraphQL Admin API
    2. JSON metafield values limited to 128KB
      Breaking changesGraphQL Admin API

  10. January 2026

    Surface
    1. Ensuring POS UI extension stability by hardening callback handling
      Breaking changesPOS Extensions
    2. Shop Minis development now requires Partner account permissions
      Breaking changesShop Minis
    3. Standardization of Asset URL Version Parameters
      Action requiredAPI

  11. December 2025

    Surface
    1. Deprecation of Shop.billingAddress in favor of Shop.shopAddress
      Action requiredGraphQL Admin API
    2. Removing permitsSkuSharing field from fulfillment service
      Breaking changesGraphQL Admin API
    3. Customer marketing URL fields now require write access
      Breaking changesGraphQL Admin API
    4. Venmo and PayPal are now treated as separate payment methods
      Breaking changesFunctions
    5. New compare and swap syntax for the inventorySetQuantities mutation
      Breaking changesGraphQL Admin API
    6. Concurrency protection features for inventory and refund mutations
      Action requiredGraphQL Admin API
    7. Making changeFromQuantity field required (with explicit opt-out)
      Breaking changesGraphQL Admin API
    8. Making idempotency mandatory for inventory adjustments and refund mutations
      Breaking changesGraphQL Admin API

  12. November 2025

    Surface
    1. Tax summary webhook created_at field now returns UTC timezone
      Breaking changesEvents & webhooks
    2. Protected customer data scopes required for web pixel PII access starting on December 10th
      Action requiredPlatform

  13. October 2025

    Surface
    1. The cartDiscountCodeUpdate mutation now requires the discountCodes field
      Action requiredStorefront API
    2. Bulk operations group objects default changed to false
      Breaking changesGraphQL Admin API

  14. September 2025

    Surface
    1. Upcoming Markets pricing support for Draft Order checkouts
      Action requiredGraphQL Admin API
    2. Removal of deprecated Shop.draftOrders connection in the GraphQL Admin API
      Breaking changesGraphQL Admin API
    3. Your app may be affected by remote products
      Breaking changesTools
    4. Upgrade to the latest version of Checkout Kit to avoid issues with iOS 26
      Action requiredTools
    5. Setting permitsSkuSharing argument to false when creating a fulfillment service returns an error
      Breaking changesGraphQL Admin API
    6. Next-Gen developer platform now available to all app developers
      Action requiredTools
    7. CollectionReorderProducts operation userErrors now includes code field
      Breaking changesGraphQL Admin API

  15. August 2025

    Surface
    1. Introducing the new context field to specify discount eligibility
      Action requiredGraphQL Admin API
    2. Deprecation of the checkout_and_accounts_configurations/update webhook
      Action requiredEvents & webhooks
    3. The cartDeliveryAddressesUpdate mutation now supports removing all addresses from a cart
      Breaking changesStorefront API
    4. _tracking_consent, _landing_page, _orig_referrer cookies will no longer be set
      Action requiredAPI
    5. _shopify_y and _shopify_s cookies will no longer be set
      Action requiredAPI

  16. July 2025

    Surface
    1. Deprecation of the ProductVariant.taxCode field
      Action requiredGraphQL Admin API
    2. POS UI Extensions 2025-07 update
      Breaking changesPOS Extensions
    3. Changes to Cart token format for AJAX and Storefront GraphQL Cart APIs
      Action requiredAPI
    4. New Built for Shopify requirements for marketing apps – Effective July 1, 2025
      Action requiredBuilt for Shopify
    5. New field for discount classes on DraftOrderPlatformDiscount
      Action requiredGraphQL Admin API

  17. June 2025

    Surface
    1. Removed tax-related fields from the ShopFeatures object
      Breaking changesGraphQL Admin API
    2. Deprecation of POST requests without a Content-Length or Transfer-Encoding: chunked header
      Action requiredGraphQL Admin API
    3. Buy Button JS must be upgraded to the latest version
      Action requiredAPI

  18. May 2025

    Surface
    1. Deprecation of legacy return APIs and improvements to return management
      Breaking changesGraphQL Admin API
    2. Deprecation of Product, Order, and Shipping Discount Function APIs
      Action requiredGraphQL Admin API
    3. Uncapped counts in GraphQL
      Breaking changesGraphQL Admin API