Shopify Release notes and new features

Apps must enable bulk operations before use

Apps must now explicitly enable access to bulk queries or mutations in the Partner Dashboard to use them with the GraphQL Admin API. Unauthorized requests will return an access denied error.

• Apps must enable bulk operations before use
• Merchant notes on store credit transactions
• Partner apps must enable bulk operations before use

currententrychange now returns the previous page in event.from for customer account full-page extensions

Starting in API version 2027-01 , in customer account full-page extensions the Navigation API currententrychange event sets event.from to the page the customer navigated away from, instead of the page they navigated to. This is a breaking change for customer account full-page extensions that read the new page from event.from .

Gift Card line_item_id will become read-only in REST Admin API version 2027-01

In REST Admin API version 2027-01 and later, the line_item_id property on the Gift Card resource is read-only. Shopify ignores the property in create and update requests. Remove it from those requests before you upgrade.

• Gift Card line_item_id will become read-only in REST Admin API version 2027-01
• New trusted vault origin signal in Payments Apps API
• UI extensions now support a larger number of locales

`FulfillmentOrderDestination` now includes `provinceCode`

As of GraphQL Admin API version 2027-01 , the FulfillmentOrderDestination object has a provinceCode field . It returns the alphanumeric code of the destination's province or state, such as ON for Ontario, so apps can read the code directly instead of mapping the province name themselves.

Analytics queryable capability is configurable in shopify.app.toml for metaobject definitions

Apps can now configure metaobject definitions in shopify.app.toml to be queryable in Shopify analytics and ShopifyQL. This allows compatible fields to be used as dimensions and filters in reports.

• Analytics queryable capability is configurable in shopify.app.toml for metaobject definitions
• Unlink a customer's identity provider subject with the GraphQL Admin API

Enable the analytics queryable capability on metafield and metaobject definitions from your app's TOML

You can now enable the analytics_queryable capability on metafield and metaobject definitions that you declare in shopify.app.toml . Merchants can then use those metafields and metaobjects as dimensions and filters in Shopify Analytics and ShopifyQL. Previously, you could set this capability only through the GraphQL Admin API.

• Enable the analytics queryable capability on metafield and metaobject definitions from your app's TOML
• Metaobject analytics queryable capability available in the Admin API
• Securing your app, together

Exclusive > timestamp filters exclude the full second

As of API version 2026-10 , an exclusive lower bound ( > ) on a timestamp filter in the GraphQL Admin API search syntax excludes the full second. For example, created_at:>'2026-09-15T12:00:02Z' no longer returns an order created at 12:00:02.500 .

Checkout MCP and Cart MCP now support UCP buyer consent

Checkout MCP and Cart MCP now support the UCP buyer consent extension ( dev.ucp.shopping.buyer_consent ) starting with UCP 2026-08-25 . Buyers can now make the same privacy and marketing choices in your agent that they'd make in a shop's own checkout, like opting in to email or SMS. Shops receive those choices with the cart, checkout, and order.

Add shopping and Shop Pay checkout to any agent with Shop MCP

Shop MCP lets your agent or app search Shopify Catalog, build carts, and complete Shop Pay checkout through a single MCP connection. It works with over 1 billion products in Shopify Catalog and doesn't require an API key for search. Nothing changes for existing Catalog API integrations, and no action is required.

Cart updates that result in no changes to the cart no longer trigger carts/update webhooks

Cart operations that leave the cart unchanged, for example, resubmitting the same values a cart already has, no longer trigger a carts/update webhook. Shopify sends a webhook every time a cart's contents or properties change. Previously, every cart operation produced a carts/update webhook.

• Cart updates that result in no changes to the cart no longer trigger carts/update webhooks
• Detect when a POS extension screen finishes navigating
• Identify the published version running in a POS extension

Shopify Flow: Flow Trigger Lifecycle Callback extensions now support relative url paths

What's changed Flow Trigger Lifecycle Callback extensions now support relative URLs in addition to absolute HTTPS URLs. This works similarly to relative URLs with Flow action extensions.

• Shopify Flow: Flow Trigger Lifecycle Callback extensions now support relative url paths
• New `owner_type` field for metafield declarations in Checkout and Customer Account UI extensions, required in 2027-01

Sidekick can now invoke app intents without tools

Sidekick now surfaces app extensions that declare only intents , with no tools file. Previously an extension had to declare tools to be eligible for Sidekick, so an admin.app.intent.link or admin.app.intent.render extension that registered only an intent was skipped and Sidekick never suggested the app.

• Sidekick can now invoke app intents without tools
• WebMCP support for checkout

AI Toolkit skills have been consolidated to `shopify`

With today's release of AI Toolkit , all existing shopify- skills are consolidated into a single shopify skill. If you use AI Toolkit skills with agents or npx skills , you might need to update your environment.

• AI Toolkit skills have been consolidated to `shopify`
• Shopify Payments Balance Transaction GraphQL type supports currency conversion type
• The new Dev Dashboard: your command center for building

Polaris 2.0 release candidate

The Polaris 2.0 release candidate is now available for embedded App Home interfaces. It includes the Shopify admin’s new visual styles, allowing your app to adopt the new look. The new Shopify admin design began rolling out progressively to merchants on September 15, 2026.

Query SP Fee Details with the GraphQL Admin API

As of API version 2026-10, the GraphQL Admin API includes a feeDetails query for retrieving specialized fees charged to a shop. No action is required for existing apps. What changed The new feeDetails query returns a connection of FeeDetails objects. Each FeeDetails object includes: feeName and amount : The name of the fee and the amount charged.

Polaris CDN 1.1 is now stable

Polaris Web Components 1.1 is now available on the stable Polaris CDN channels. This is the first minor release under the CDN's new semantic versioning model . The following URLs now serve Polaris 1.1 Apps using polaris.js or polaris-1.js receive the update automatically. No action is required.

• Events subscription query complexity limit is changing to 100 points
• Polaris CDN 1.1 is now stable
• Removing marketCurrencySettingsUpdate mutation

The `automaticDiscounts` query is removed in API version 2027-01

The deprecated automaticDiscounts query is removed from the GraphQL Admin API in version 2027-01 . If your app reads a shop’s automatic discounts through automaticDiscounts , you need to move to the discountNodes query with a method:automatic filter before you upgrade to 2027-01 .

Updates to Events payloads and subscription configuration

Starting today, we're updating Events payloads, trigger syntax, and delivery headers. Classic Webhook subscriptions are unaffected. What's changed fields_changed now describes how each path changed The flat array becomes an object containing three arrays: added , updated , and removed .

Delivery options in Shopify Functions input now expose their metafields

Shopify Functions can now read metafields attached to delivery options in the cart. On API version 2026-10 , you can call metafield(namespace:, key:) on any option in cart.deliveryGroups.deliveryOptions . This affects apps that build Delivery Customization Functions and any other function whose input includes delivery options. No action is required.

Create and delete dev stores in Shopify CLI

Shopify CLI 4.8 adds shopify store commands that let you create and manage dev stores from your terminal or coding agent. These commands are available after you update to Shopify CLI 4.8.

Customer Address APIs now support countryCode

Starting with Customer Account API version 2026-10, customer address inputs and objects support countryCode . The existing territoryCode field is deprecated but remains fully supported, so current integrations continue working without interruption. Developers should migrate to countryCode when adopting API version 2026-10.

• Customer Address APIs now support countryCode
• Variants now support multiple barcodes

Shopify storefronts now support UCP 2026-08-25

Shopify storefronts now advertise support for Universal Commerce Protocol (UCP) version 2026-08-25 in their discovery profiles at /.well-known/ucp . This update adds compatibility with the 2026-08-25 protocol release and doesn’t require any changes to your existing integrations.

The Polaris CDN is adopting semantic versioning

Polaris Web Components loaded from the Shopify CDN are moving to semantic versioning. Most apps will continue receiving compatible improvements automatically, while developers can choose when to adopt breaking changes. Existing apps don’t need to take immediate action.

• Polaris CDN 1.1 release candidate
• The Polaris CDN is adopting semantic versioning

More resilient refreshes for expiring offline access tokens

Expiring offline access token refreshes now retain the previously used refresh token until an app begins using its replacement. This rollout helps apps recover when a refresh response is lost or isn’t persisted. No migration is required, but apps should continue to store every refreshed token pair atomically.

Oxygen is now available on trial plan stores

You can now deploy Hydrogen storefronts to Oxygen from trial plan stores . Previously, Oxygen hosting required a paid plan. Note that trial plan stores don't include public environments, so deployment URLs always require a store login. Learn more about supported plans .

App intents on `admin.app.intent.link` now open as a full-page navigation

When Sidekick invokes an app intent declared on the admin.app.intent.link extension target, the Shopify admin now navigates the merchant to your extension's url as a full page, matching how Shopify's own admin intents behave. Previously, the same intent always opened in an overlay on top of the page the merchant was already on.

Shop Campaigns performance data now available via ShopifyQL

The shop_campaign_insights schema is now available in the ShopifyQL . Analytics and reporting apps can query Shop Campaigns performance data on behalf of authorized merchants using the existing shopifyqlQuery field with read_reports scope.

Standard storefront events and actions now support cart attributes

The updateCart standard action now updates cart attributes, and a new shopify:cart:attributes-update event fires whenever an attributes update is initiated. Before this, changing an attribute meant calling the Storefront API yourself, and nothing told your app when one changed.

The `orderCreate` mutation now supports multiple tracking numbers for each fulfillment

We’ve added a trackingNumbers field to OrderCreateFulfillmentInput , so you can attach multiple tracking numbers to a fulfillment when importing orders. If you use the orderCreate mutation to import orders that ship in more than one package, you no longer need to update the fulfillment after creation to add additional tracking numbers.

• The `orderCreate` mutation now supports multiple tracking numbers for each fulfillment
• Oxygen is now available on development stores

Updated Built for Shopify requirements for Fulfillment services apps

We've updated three Built for Shopify requirements for Fulfillment services apps . The updated thresholds better reflect how fulfillment operations run in practice, making Built for Shopify achievable for more high-quality fulfillment apps. No action is required.

Merchants now see partner details on collaborator requests

Collaborator access is built on trust. When a merchant approves a request, they're giving a partner access to a live store , and merchants need enough context to make that decision with confidence. Building on identity verification for partners , merchants now see details about your partner organization on every new collaborator request.

POS UI extensions can now print directly to hardware receipt printers

POS UI Extensions 2026-07 introduces the Printing API ( shopify.printing ), which enables extensions to discover hardware printers with getPrinters() and send documents directly to a connected receipt printer with print() . The Printing API supersedes shopify.print , which is now deprecated.

• POS UI extensions can now print directly to hardware receipt printers
• SubscriptionContractCalculation API now available in early access

Invalid metafield queries now return errors in the GraphQL Admin API

Starting in API version 2026-10, the GraphQL Admin API returns an error when a query filters by a metafield that isn't set up for filtering, instead of silently returning incorrect results. This is a breaking change. It affects apps that filter resources by metafield on version 2026-10 or later, and you'll need to update affected queries before you upgrade.

Card deposit endpoint now requires mTLS certificate

Shopify's card-deposit endpoint now requires a Shopify-issued mTLS client certificate. Apps that store cardholder data with the customerPaymentMethodCreditCardCreate and customerPaymentMethodCreditCardUpdate GraphQL Admin API mutations must first deposit that data at Shopify's /sessions card-deposit endpoint to receive a session identifier.