Deep-dives on Shopify, checkout extensibility, APIs and e-commerce development — written by the people who do it every day.
Shopify has issued a critical alert to all app developers: attacks are rising and AI is accelerating the discovery of vulnerabilities. Here's what's changing and what to do immediately.
Read the articleStarting November 2, 2026, Shopify's Global Catalog REST API will no longer respond: it's time to audit exposed integrations and migrate to UCP-based Global Catalog MCP.
Read the articleShopify has released Next Gen Events in general availability with API 2026-10: a new subscription model that eliminates secondary API calls after each webhook.
Read the articleShopify completes the agentic commerce stack by introducing WebMCP support for checkout: browser agents can read, update and complete orders with no merchant configuration required.
Read the articleWith Shopify API version 2027-01, the automaticDiscounts query is removed and now returns a validation error. Here's how to migrate correctly to discountNodes and avoid a double migration.
Read the articleShopify is introducing strict limits on the compressed bundle size of UI extensions and setting a mandatory deadline to migrate to the 2026-01 API: here's what's changing and how to prepare.
Read the articleShopify has substantially changed the structure of Events API payloads: fields_changed is no longer an array, triggers now require explicit wildcards, and some headers have been removed. Here's what's changing and how to update your integrations.
Read the articleShopify has announced the final deprecation of Script Tags for online storefronts, with two fixed deadlines between 2026 and 2027. Here's what changes and how to prepare.
Read the articleShopify has introduced the SubscriptionContractCalculation API (2026-10 RC) in early access, unifying the subscription engine with the checkout engine and drastically reducing the mutations needed to modify a contract.
Read the articleStarting October 15, 2026, Shopify will require an mTLS client certificate for every call to the /sessions endpoint used for card data vaulting, directly impacting subscriptions and B2B billing for those who don't migrate in time.
Read the articleWith API version 2026-07, Shopify is deprecating the useBuyerJourneyIntercept hook and the block_progress capability in checkout UI extensions, forcing a move to server-side validation via Shopify Functions.
Read the articleShopify is introducing Market-driven shipping: merchant shipping configuration moves from the Delivery Profile API to the Markets API, with mandatory rollout starting October 2026.
Read the articleShopify has deprecated merchant-owned delivery profile APIs for stores using market-driven shipping: mutations still return success without errors, but no longer update actual shipping settings.
Read the articleStarting with Shopify API version 2026-07, per-market shipping configuration happens directly on the Market object, eliminating separate shipping profiles and manual workarounds.
Read the articleStarting with Shopify's GraphQL Admin API version 2026-10, creating a carrier service no longer automatically adds it to the General shipping profile, risking silent disappearance of rates at checkout.
Read the articleShopify now enforces stricter rate limits on all anonymous bots accessing the Storefront API. Adopting Web Bot Auth is the only way to qualify for higher access thresholds and ensure reliable automated operations.
Read the articleShopify has moved the Storefront Catalog MCP to the Unified Commerce Platform (UCP), changing the endpoint, tool names, and request/response schemas. The deadline to complete the migration is June 15, 2026.
Read the articleShopify Admin GraphQL API Next Generation Events redefine the contract between your system and Shopify, introducing granular control over triggers, payloads and changed fields. Here is what changes for teams managing high-volume integrations.
Read the articleShopify introduces the admin.app.home.render target: a custom app's homepage can now live inside the UI extension bundle, eliminating the need for a dedicated web server and simplifying the entire admin architecture.
Read the articleFrom API version 2025-10, Shopify makes Polaris web components the default for Checkout and Customer Account extensions, moving away from React and vanilla JavaScript. Migration is not optional.
Read the articleShopify is making expiring offline access tokens mandatory for all public apps by January 1, 2027. Here is what technical teams need to do to comply without disrupting merchants.
Read the articleWith API version 2026-07, Shopify introduces independent publishing of product variants per sales channel or catalog. A structural change for teams managing B2B, phased launches, and multi-channel feeds.
Read the articleWith Admin GraphQL API version 2026-07, Shopify finally makes the taxSettings field on the Customer object accessible, allowing you to read the VAT number collected at checkout through standard queries using the read_customers or read_taxes scope.
Read the articleShopify Plus introduces the ability to combine home delivery and in-store pickup within a single order. Integrations that assume one delivery method per order need to be updated right away.
Read the articleShopify has opened the feature preview for the new Customer Account layout, which adopts a single-column structure on both desktop and mobile. For teams that have built custom extensions, there are concrete technical implications to address before June 12, 2026.
Read the articleShopify is introducing automatic CSS subsetting for stylesheet tags: starting April 20, 2026, each page will receive only the CSS rules actually in use. Here's how to check your themes before the deadline.
Read the articleShopify is fully deprecating Scripts in favor of Functions by June 30, 2026, directly affecting discounts, shipping, and custom payment logic. Here's what Shopify Plus merchants need to do now.
Read the article