Releasesby Glyph
Updated online store promotion app store requirement
Effective Wednesday, November 5th, 2025, the following requirement for the online store has been revised: Your app must not use theme app extensions or blocks to promote your app, promote related apps, or request reviews.
Also shipped Oct 23, 2025Shopify in October 2025 →
Workers Preview URL default behavior now matches your workers.dev setting
We have updated the default behavior for Cloudflare Workers Preview URLs . Going forward, if a preview URL setting is not explicitly configured during deployment, its default behavior will automatically match the setting of your workers.dev subdomain .
Tailscale v1.90.1
Note : 1.90.0 was a release candidate intended for testing only. All platforms New: Clients can use configured DNS resolvers for all domains even when the client also uses an exit node using the nameserver settings in the DNS page of the admin console.
Save, reuse, and share dashboard annotation queries
We recently introduced the ability to save queries in Dashboards and Explore , now we’ve extended this functionality to dashboard annotations. With this addition, you can save, reuse, and share annotation queries with others in your organization.
WAF Release - 2025-10-23 - Emergency
This week highlights enhancements to detection signatures improving coverage for vulnerabilities in Adobe Commerce and Magento Open Source, linked to CVE-2025-54236. Key Findings This vulnerability allows unauthenticated attackers to take over customer accounts through the Commerce REST API and, in certain configurations, may lead to remote code execution.
Workers AI Markdown Conversion: New endpoint to list supported formats
Developers can now programmatically retrieve a list of all file formats supported by the Markdown Conversion utility in Workers AI. You can use the env.AI binding: await env. AI . toMarkdown ().
Skew protection now available
We've released skew protection for all plans starting with these frameworks: Astro 5.15.0+ Next.js This feature prevents version mismatch errors when users interact with your site during a deployment. What it fixes When you deploy a new version of your site, users with an open browser tab may still be running the old version.
More from Shopify developer platformEvery Shopify developer platform release →
New `notify` parameter available on the `storeCreditAccountCredit` mutation
The storeCreditAccountCredit mutation now includes an optional notify parameter. When this parameter is set to true , the account owner will receive a "store credit issued" email notification. If the parameter is not provided, no email will be sent. To enable email notifications, you must explicitly set this flag to true .
New ACH support for deferred payments
The 2026-01 Admin GraphQL API introduces support for ACH payment methods, enabling merchants to accept and manage bank account-based payments through Shopify Payments. This means new types of PaymentInstrument and CustomerPaymentInstrument are now available for B2B company locations, supporting payment terms and draft orders.
Increased limits in metafield and metaobject definitions
We've increased the limits for metafield and metaobject definitions, providing you with more flexibility when building custom data structures for your apps and stores. For app developers : Each app has its own allocation, so apps aren't competing with each other for definition space.
Improved concurrency handling in the Cart AJAX API and Storefront Cart GraphQL API
As of October 10, 2025, the Cart AJAX API and Storefront Cart GQL API now processes simultaneous requests. For example, when sending two cart add requests at the same time, the Cart AJAX API executes both requests. Previously, the Cart AJAX and GraphQL APIs were inconsistent in handling concurrent requests. This sometimes resulted in requests being dropped.
New: Unlisted Product Status
UNLISTED is available as a new product status value in the 2025-10 GraphQL Admin API and REST Admin APIs, as well as in the Webhooks API. The Unlisted status hides products from store search and recommendations (including collections), all sales channels, internet searches and Shopify Catalog , while still allowing access via a direct URL.
Optional location inputs for inventory transfers
You can now create inventory transfers without specifying an origin or destination location. Previously, the InventoryTransferCreateAsReadyToShip mutation required both origin and destination location IDs. Now, these inputs are optional. This change supports workflows where the transfer's origin or destination is unknown at creation time.
Bulk operations group objects default changed to `false`
We have optimized the output of bulk operations in the GraphQL Admin API to enhance speed and reliability. What's Changed Bulk Queries ( bulkOperationRunQuery ) The groupObjects argument now defaults to false . Grouping objects can slow down operations and increase failure rates, especially with large datasets.
The `cartDiscountCodeUpdate` mutation now requires the `discountCodes` field
As part of the GraphQL Storefront API 2026-01 release , the cartDiscountCodesUpdate mutation now requires the discountCodes argument to be included. Previously, mutation calls without the discountCodes argument were allowed, but would not actually modify the cart in any way.