Releasesby Glyph
Role-based access control and org management for partners
We have revamped the way partner organizations manage users and stores. Role-based Access Control: Assign roles to users instead of configuring permissions individually. We offer seven system roles that cover organization-wide administration, store access, app development, and merchant-granted collaborator permissions.
Also shipped Mar 30, 2026Shopify in March 2026 →
AI Image Tools now in FigJam, Slides, & Buzz
AI image tools like Expand, Erase, and Isolate are now in FigJam, Slides, and Buzz (beta), with Vectorize available in Slides and Buzz.
Updated visualization suggestions now generally available
In January 2026, we announced improvements to visualization suggestions in public preview. These changes included higher quality suggestions leveraging information provided by data sources, as well as minor user interface updates. These improvements are now generally available.
Edit guide and survey positions without leaving Preview mode
What it is: The Guide Preview now includes an Edit button. Click it to adjust form factor options like position and layout, then save to see changes reflected in both the Preview and the Dashboard right away.
Modal 1.4.1
- We're introducing a concept of "readiness probes" for modal.Sandbox. This feature lets you configure a readiness check on a TCP port (modal.Probe.with_tcp()) or by executing a process (modal.Probe.with_exec()).
Streaming: Server-Sent Events (SSE) Streaming responses for Chat Completions (/v1/chat/completions) and...
Streaming: Server-Sent Events (SSE) Streaming responses for Chat Completions (/v1/chat/completions) and Completions (/v1/completions) now emit a standard data: [DONE] SSE event at the end of the stream, following the SSE standard (see the living specification). The [DONE] marker is guaranteed to appear exactly once and is always the last event in the stream.
WAF Release - 2026-03-30
This week's release introduces new detections for a critical authentication bypass vulnerability in Fortinet products (CVE-2025-59718), alongside three new generic detection rules designed to identify and block HTTP Parameter Pollution attempts.
More from Shopify developer platformEvery Shopify developer platform release →
Removing `visible_to_storefront_api` field on metaobject field definitions
What's changing The visibleToStorefrontApi field/input field is deprecated and removed from the unstable version of the GraphQL Admin API for the following types: MetaobjectFieldDefinition MetaobjectFieldDefinitionCreateInput MetaobjectFieldDefinitionUpdateInput StandardMetaobjectDefinitionFieldTemplate Who's affected Anyone using visibleToStorefrontApi...
Add Prerequisites to Product Discount Functions
Discount functions now support prerequisites for product discount candidates, allowing you to define the "Buy X" portion of a Buy X, Get Y (BXGY) discount. In a BXGY discount, customers must purchase a specified quantity of one product (Buy X) to receive a discount on another product (Get Y).
Add Tags to Discounts
Starting in API version 2026-04, discounts support tags allowing you to efficiently label, group, and organize your discounts. What's new: The tags field has been added to all discount types Tags can be added, updated, and removed via the Admin API For more information, visit the Admin API documentation
`expiresIn` field added to `DelegateAccessToken` type
We have introduced an expiresIn field to the DelegateAccessToken type, which is returned by the delegateAccessTokenCreate mutation. This addition allows app developers using delegate tokens to know precisely when their tokens will expire.
Adding access field to StandardMetaobjectDefinitionTemplate
We are introducing a new access field to the StandardMetaobjectDefinitionTemplate . This field will display the template's access rules, helping you determine if a specific template is configured for access via the Storefront API.
App-owned metaobjects can be used without access scopes
App-owned metaobjects, identified by types such as $app:example , including those created using declarative metaobject definitions , can now be utilized by their owning app without requiring any access scopes.
Removing outdated Polaris reference docs
Polaris reference docs now follow the same versioning policy as Shopify's GraphQL APIs: Each stable version is supported for a minimum of 12 months. Older versions continue to work, they just won’t have dedicated docs on Shopify.dev.
Metaobject access in Shopify Functions
As of GraphQL API version 2026-04, all Shopify Functions can access app-owned metaobject entries. Metaobjects are now available for every function target. This feature enables you to query additional structured data present in metaobjects, such as tiered pricing and bundles. To query a metaobject entry, specify a handle or ID in your input query file.