Skip to main content

Security update: Offline token dates, new security features

Offline token enforcement dates, plus new security features: client credentials access, IP restrictions, network access declarations, identity verification, and a new app security hub.
Read the full story
Changelog
Subscribe

Surfaces & APIs

Versions

Change type

  1. October 2025

    Surface
    1. Introducing functionHandle for Shopify Functions
      DeprecatedFunctions
    2. New: Support for USDC Credit field in Shopify Payments Payout GraphQL
      GraphQL Admin API
    3. Storefront API Cart now supports adding Gift Cards
      Storefront API
    4. Rerouting Fulfillment Orders is now possible via API
      GraphQL Admin API
    5. Subscription contract shipping requirements now sync with product variants
      Breaking changesGraphQL Admin API
    6. multipassIdentifier field added to GraphQL Admin API
      GraphQL Admin API
    7. Polaris unified web components are now stable
      Tools
    8. New productNetwork field on the Order object
      GraphQL Admin API
    9. productVariantsBulkCreate and productVariantsBulkUpdate mutations now validate inventoryQuantities limits
      GraphQL Admin API
    10. Dynamic complexity cost for productCreate and productUpdate mutations
      GraphQL Admin API
    11. productSet mutation now validates inventoryQuantities limits
      GraphQL Admin API
    12. Dynamic complexity cost for productSet mutation
      GraphQL Admin API
    13. ShopifyQL now available as shopifyqlQuery within the GraphQL Admin API
      GraphQL Admin API

  2. October 2025

    Surface
    1. Duplicate themes with the Admin GraphQL API
      GraphQL Admin API
    2. New metafield definition types in GraphQL - article_reference / list.article_reference
      GraphQL Admin API
    3. New balance and due status fields for PaymentSchedule
      GraphQL Admin API
    4. New mandate connection added to CustomerPaymentMethod object
      GraphQL Admin API
    5. Order metafield definitions and values can now be used as filters in the Shopify Admin UI
      GraphQL Admin API
    6. Store credit now supports company locations as account owners in Admin and Customer APIs
      GraphQL Admin API
    7. New enum values for FulfillmentEventStatus
      GraphQL Admin API
    8. Metaobject field definitions offer new capabilities
      GraphQL Admin API
    9. Setting permitsSkuSharing argument to false when creating a fulfillment service returns an error
      Breaking changesGraphQL Admin API
    10. @inContext directive supports visitor consent for privacy-compliant checkouts
      Storefront API
    11. Global HS code is now supported in GraphQL Admin API
      GraphQL Admin API
    12. CollectionReorderProducts operation userErrors now includes code field
      Breaking changesGraphQL Admin API

  3. August 2025

    Surface
    1. Cart mutations now return error for invalid merchandise configuration
      Storefront API
    2. Enhanced delivery profile webhooks now include additional payload fields
      Events & webhooks
    3. New PRESERVE_STANDALONE_VARIANT strategy for the productVariantsBulkCreate mutation
      GraphQL Admin API
    4. Introducing the new context field to specify discount eligibility
      Action requiredGraphQL Admin API
    5. The cartDeliveryAddressesUpdate mutation now supports removing all addresses from a cart
      Breaking changesStorefront API
    6. webhookSubscriptionCreate and webhookSubscriptionUpdate support all URI types
      GraphQL Admin API
    7. New: Support for nested cart lines
      Functions
    8. Shopify Payments Payout GraphQL type supports external_trace_id
      GraphQL Admin API
    9. Orders query now supports current_total_price and total_weight filters and CURRENT_TOTAL_PRICE as a sortKey
      GraphQL Admin API

  4. July 2025

    Surface
    1. Deprecation of the ProductVariant.taxCode field
      Action requiredGraphQL Admin API
    2. MerchandiseSellingPlanNotApplicableOnCompanyLocation warning code for Storefront API
      Storefront API
    3. Storefront API Cart now supports replacing Cart delivery addresses
      Storefront API
    4. New fields for inventory shipment timestamps
      GraphQL Admin API
    5. Add option to filter by dispute type in OrderListQuery GraphQL query
      GraphQL Admin API

  5. June 2025

    Surface
    1. Removed tax-related fields from the ShopFeatures object
      Breaking changesGraphQL Admin API
    2. Image alt text can now be translated
      GraphQL Admin API
    3. Order editing workflows now offer direct session access via mutation arguments and return fields
      GraphQL Admin API
    4. Contextual pricing and publishing APIs use backup region fallback
      Breaking changesGraphQL Admin API