Protected customer data scopes required for web pixel PII access starting on December 10th
We will be enforcing Shopify's protected customer data policy for all web pixel extensions starting on December 10th, 2025. Customer personally identifiable information (PII), including name, email, phone, and address fields, will only be present in web pixel payloads when the app has been approved for the corresponding protected scopes.
Also shipped Nov 10, 2025Shopify in November 2025 →
Modal 1.2.2
- modal.Image.run_commands now supports modal.Volume mounts. This can be helpful for accelerating builds by keeping a package manager cache on the Volume: python cache_vol = modal.Volume.from_name("cache-mount") cmd_using_cache = "..." image = modal.Image.debian_slim().run_commands(cmd_using_cache, volumes={"/cache": cache_vol}) All Modal objects now accept...
NeMo NVIDIA Neural Modules 2.5.3
Highlights This release addresses known security issues. For the latest NVIDIA Vulnerability Disclosure Information visit https://www.nvidia.com/en-us/security/ , for acknowledgement please reach out to the NVIDIA PSIRT team at PSIRT@nvidia.com Update nv-one-logger Update ctc-segmentation Detailed Changelogs: Text Normalization / Inverse Text Normalization...
Entity Detection Now Available for Streaming Speech-to-Text
We're excited to announce that Entity Detection is now available for streaming (real-time) speech-to-text with Nova 3, Nova 2, Nova, and Enhanced models. detect_entities=true Previously available only for pre-recorded audio, you can now identify and extract over 50 unique entity types in real-time streaming transcriptions, including email addresses, names...
AI Crawl Control - Crawler drilldowns with extended actions menu
AI Crawl Control now supports per-crawler drilldowns with an extended actions menu and status code analytics. Drill down into Metrics, Cloudflare Radar, and Security Analytics, or export crawler data for use in WAF custom rules , Redirect Rules , and robots.txt files.
WAF Release - 2025-11-10
This week’s release introduces new detections for Prototype Pollution across three common vectors: URI, Body, and Header/Form. Key Findings These attacks can affect both API and web applications by altering normal behavior or bypassing security controls.
React Router 7 apps can now be deployed to Edge Functions
React Router 7 apps on Netlify are deployed to Serverless Functions by default. Now, you can choose to deploy your app to Edge Functions instead, bringing your page renders, data loaders, and actions closer to your users while lowering cold start times.
More from Shopify developer platformEvery Shopify developer platform release →
New Google Cloud Run deployment tutorial released
We're excited to introduce a new deployment tutorial for Google Cloud Run . After scaffolding a Shopify app through the CLI and building out functionality in a local development store, what's next? Deployment! This tutorial guides you through the complete process of deploying your production Shopify apps, using Google Cloud Run as the target.
tax_summaries/create webhook and taxSummaryCreate mutation now available
As of the 2026-01 API version, the tax_summaries/create webhook and taxSummaryCreate mutation are available for Tax Partner Apps. What's New The taxSummaryCreate mutation enables apps to request the generation of tax summaries for orders. The tax_summaries/create webhook is triggered by events that may affect tax liability, such as fulfillments and refunds.
Carrier Service API now includes order totals and customer tags
The Carrier Service API callback payload now includes order totals and customer tags. This enhancement enables more effective shipping rate calculations by taking into account the order value and customer segments. New Payload Fields: order_totals subtotal_price : The total price of all items in the cart before discounts.
Shopify Dev MCP now supports POS UI extensions
The Shopify Dev MCP server now includes support for code generation for POS (Point of Sale) UI extensions . With this update, you can use the Shopify Dev MCP as a virtual pair programmer within your preferred IDE.
Order Update Phone Field Public
As of Admin API 2026-01, the phone field is now publicly available in the orderUpdate mutation's OrderInput . This field allows developers to update the customer phone number for an order, overwriting the existing phone number. This change brings parity with the REST API, which already supports updating the phone field through the Order resource .
Tax summary webhook `created_at` field now returns UTC timezone
What's new The created_at field from tax_summaries/create webhook for tax partners will now return timestamps in UTC format with the Z suffix, including millisecond precision. Action required Update your parsing logic to handle the new format.
New Queries for Bulk Operations
We've introduced new GraphQL queries to help you retrieve and manage bulk operations in the Admin API. What's Changed Here's an overview of the updates: New Bulk Operations Retrieval Queries We have added two new queries for accessing your bulk operations: bulkOperations : A connection-based query that returns a paginated list of all your bulk operations...
Support metafield and metaobject standards in Declarative Custom Data Definitions
We now support enabling and referencing standard metafield and metaobject definitions through an app’s TOML file. Key benefits include: Standard metafield and metaobject definitions can be enabled through TOML, and managed through the app dev or app deploy command.