Skip to main content

App security updates: IP allowlist is now required

The IP allowlist is now required for every public app by November 20, or November 12 if you use bulk ops. ASN support covers serverless hosting. Plus token updates.
Read the full story
Changelog

Surfaces & APIs

Versions

Change type

  1. November 2026

    Surface
    1. Merchant notes on store credit transactions
      GraphQL Admin API
    2. orderCreate line items support custom IDs
      GraphQL Admin API
  2. October 2026

    Surface
    1. currententrychange now returns the previous page in event.from for customer account full-page extensions
      Breaking changesCustomer Account API
    2. Gift Card line_item_id will become read-only in REST Admin API version 2027-01
      Breaking changesAdmin REST API
    3. New trusted vault origin signal in Payments Apps API
      Payments Apps API
    4. FulfillmentOrderDestination now includes provinceCode
      GraphQL Admin API
    5. App Events: Send events from Checkout and Customer Account UI extensions
      App Events API
    6. Managed mode for Shopify Tax
      Breaking changesAdmin REST API
    7. Add selling plans to draft order line items with the Admin GraphQL API
      GraphQL Admin API
    8. Unlink a customer's identity provider subject with the GraphQL Admin API
      GraphQL Admin API
    9. Metaobject analytics queryable capability available in the Admin API
      GraphQL Admin API
    10. Downgrade app access scopes from write to read
      GraphQL Admin API
    11. metafieldInteger collection condition removed in API version 2027-01
      Breaking changesGraphQL Admin API
    12. Tax webhook summary and calculation requests now use Global IDs
      Breaking changesGraphQL Admin API
  3. September 2026

    Surface
    1. Manage packed product dimensions with the GraphQL Admin API
      GraphQL Admin API
    2. Removing marketCurrencySettingsUpdate mutation
      Breaking changesGraphQL Admin API
    3. The automaticDiscounts query is removed in API version 2027-01
      Breaking changesGraphQL Admin API
  4. May 2026

    Surface
    1. Removing deprecated PRIVATE and PUBLIC_READ enums on metaobject definitions
      Breaking changesGraphQL Admin API