Developer changelog

The PriceRule API now includes allocation_limit for Buy X Get Y discounts, controlling application frequency. Defaults to unlimited if unspecified. Email support to enable before Sept 10, 2018.

We've started removing all HTTP proxies on the platform. You should transition your app to create HTTPS proxies instead.

The timeline for supporting HTTP proxies is as follows:

• On...

Currently, Admin API requests to locked stores return a 420 status code. As of Thursday, August 30th, this response will change to 423. We're pushing this change to reduce ambiguity around the 420...

Developers must implement mandatory webhooks to handle GDPR data requests, including customer and shop redaction, by August 25, 2018. Compliance requires action within 30 days.

Shopify releases v2.5 POS Android and v4.8 POS iOS on July 19, 2018. Test your POS apps on phones/tablets. Upgrade required; older versions won't display apps.

Shopify limits public app access to orders older than 60 days; approval needed for read_all_orders scope. Update apps by July 9, 2018, to maintain access. Private apps are unaffected.

Shopify apps must specify location_id for fulfillments and can't set inventory on Product resources by July 1, 2018, to support multi-location inventory tracking. Update apps accordingly.

To help you better identify multiple fulfillments for a single order, responses from the Fulfillment resource endpoint will now include a name property.

For more information, see the...

Shopify requires TLS 1.2 for API connections as of June 20, 2018, due to PCI standards. Upgrade apps from TLS 1.0/1.1 to ensure compliance and maintain secure connections.

If you missed it at Unite this year, we've exposed line-level discount information on the Order API through a...

REST error messages now include attribute names, aligning with GraphQL. Ensure apps display new messages correctly and adjust any logic parsing error text. Use HTTP status codes instead.

POS Android v2.4.8 and iOS v4.6 apps can now beta test on Shopify dev stores, appearing in Edit Cart, Order Complete, and full-screen. Test on devices before July release.

New GDPR-compliant webhooks customers/redact and shop/redact are mandatory for public apps to handle data deletion. Apps must respond with a 200 status code. Manage via Partner Dashboard.

Shopify Plus Partners can now create sandbox stores with full Plus features, unlimited test purchases, and enhanced API access, aiding development and demos for prospective merchants.

In 2013, we started to transition ID columns from 32-bit to 64-bit in...

The new prerequisite_quantity_range property on PriceRule lets developers set minimum item quantities for discounts, applicable to percentage, fixed amount, and free shipping discounts.

Shopify introduces pre-launch pages, blocking storefront access and disabling apps. Check pre_launch_enabled via Admin API. Update error handling and docs. Access beta via Partner Dashboard.

On March 1, 2018, Shopify will prevent cancellations of fulfilled or partially-fulfilled orders. Post-fulfillment order cancellations are rare and can lead to confusing fulfillment states and...

Introducing AccessScope: query merchant shop permissions for your app. Manage user scopes efficiently with GET /admin/oauth/access_scopes.json, based on your access token's permissions.

Shopify introduces a staff_business plan, allowing app developers to offer free or discounted access to employees, enhancing app understanding and merchant support.

The PriceRule resource now includes the prerequisite_customer_ids property, which can be used to create discounts for specific customers. See the [PriceRule reference...

Access tokens for JS Buy and Mobile Buy SDKs are now managed via a private app, improving product tracking and performance reporting for developers.

Shopify improves webhooks by reducing flooding and duplication, decreasing webhook volume, and ensuring timely, consolidated updates, enhancing app efficiency and resource management.

As of Dec 5, 2017, inventory_quantity and inventory_policy in JSON Liquid are deprecated. Use variant.inventory_quantity and variant.inventory_policy for inventory data.

On December 4, 2017, we will be removing the web_processing_url parameter from the Checkout resource. The web_processing_url...

Shopify will sunset the Bulk Discounts app on Nov 1. Use Space Squirrel's app for similar features. PriceRule now supports bulk discount code creation for custom solutions.

Shopify themes now use richtext for homepage content, replacing page settings. Update app docs for easier installation. Page settings remain for custom development.

Shopify Admin API now supports bulk discount code creation, allowing multiple codes per price rule via a new batch endpoint. Bulk creation is API-only, not available in Shopify admin.

Prior to September 18, 2017, requests to GET /admin/orders.json including the since_id parameter would return a list of orders sorted by created_at. This would present problems when multiple...

Starting September 1, 2017, Shopify will verify SSL certificates for HTTPS webhooks. Ensure your server's SSL is valid to avoid delivery failures.

We've added some validation today to the ScriptTag resource that prevents an application from creating more than 100 script tags...

Currently, the Discounts page in the Shopify admin displays discount codes based on the value of discount_code.code. However, as of August 7th, 2017, Shopify will display the...

Starting July 24, Shopify will support UTF-8 for tags and handles, allowing non-ASCII characters. Developers must ensure applications can handle these characters in URLs and data parsing.

Shopify adds a locale parameter to Carrier Service rate requests, enabling rate titles in the customer's language, enhancing localization for developers.

Shopify checkouts now occur on the shop domain instead of checkout.shopify.com. Update apps parsing checkout URLs, as the domain is no longer static. No major breakages expected.

As of today, the Discounts resource has been fully deprecated in favour of the new Price Rules resource. If you have any questions or concerns, then...

New "locale" key added to Hosted Payment SDK requests. Ensure signing uses all x_ prefixed key-value pairs, sorted and concatenated. No changes needed if already compliant.

Order import now validates addresses for last name, address line, city, and country. Failed validation results in order creation without address data, impacting address accuracy.