Releasesby Ibis
Polaris 2.0 is now stable
Update2 days agoUnverifiedAdded Oct 23, 2026
Polaris 2.0 is now stable Polaris Web Components 2.0 is now available on the stable Polaris CDN channels. It's the first major release under the CDN's semantic versioning model. Polaris 2.0 matches the redesigned Shopify admin, which has a new frame, new navigation, and a new visual appearance.
Topics: Governance
More Shopify developer platform releases
Every Shopify developer platform releaseDiscover a merchant's retail stores with UCP location search and lookup
Shopify storefronts now support the UCP location capability , dev.ucp.common.location.search and dev.ucp.common.location.lookup , starting with UCP 2026-08-25 . When you negotiate these capabilities over the storefront MCP endpoint, your agent can find a merchant's physical stores, narrow them by name, city, or distance, and check which stores carry the...
POS UI extensions now support reactive storage access
The new shopify.storage.current API lets POS UI extension developers respond automatically when stored values change across extension targets on the same POS device. It’s now available in API version 2026-10 . No changes are required for existing extensions. What changed shopify.storage.current exposes each storage key as a read-only reactive signal.
POS UI extensions 2026-10 adds s-pos-list, a virtualized list with custom row templates
POS UI extensions API version 2026-10 adds s-pos-list , a virtualized list component for Polaris web components. You pass rows as plain data and lay out each kind of row with a template built from web components.
Metaobject analytics queryable capability available in the Admin API
Starting with GraphQL Admin API version 2027-01 , you can read and configure the analyticsQueryable capability on metaobject definitions. This applies to apps that create, update, or inspect metaobject definitions. No action is required unless you want your app to control whether a metaobject definition can be queried in analytics.
Securing your app, together
Merchants install your app because they trust it, and because they trust the Shopify App Store. There are bad actors out there who are motivated to exploit that trust. Alongside the rest of the industry, we are seeing the number of attacks increasing across the app ecosystem as AI gets better at finding vulnerabilities.
Exclusive > timestamp filters exclude the full second
As of API version 2026-10 , an exclusive lower bound ( > ) on a timestamp filter in the GraphQL Admin API search syntax excludes the full second. For example, created_at:>'2026-09-15T12:00:02Z' no longer returns an order created at 12:00:02.500 .
Checkout MCP and Cart MCP now support UCP buyer consent
Checkout MCP and Cart MCP now support the UCP buyer consent extension ( dev.ucp.shopping.buyer_consent ) starting with UCP 2026-08-25 . Buyers can now make the same privacy and marketing choices in your agent that they'd make in a shop's own checkout, like opting in to email or SMS. Shops receive those choices with the cart, checkout, and order.
Checkout footer visibility now applies to merchant-configurable content
The visibility fields on CheckoutBrandingFooterContent and CheckoutAndAccountsConfigurationBrandingFooterContent now control only merchant-configurable footer content. Checkout can display Shopify-provided transaction information in the footer regardless of this setting.
Also shipped on Oct 22, 2026
Shopify in October 2026Trace and evaluate Cursor agents with Langfuse, powered by ClickHouse
Users can now connect Cursor to Langfuse to trace agent turns and analyze model and tool calls, with ClickHouse providing the underlying analytics infrastructure.
The AI.TRANSLATE function lets you translate text strings between languages
The AI.TRANSLATE function lets you translate text strings between languages. AI.TRANSLATE supports standard Neural Machine Translation (NMT) workloads and Translation LLM (TLLM) capabilities. This function is generally available (GA).
Replit Monitoring Agent: Your very own software engineering team
Replit Monitoring Agent is an autonomous tool that investigates production alerts, identifies causes, applies fixes, and deploys them to production for internal apps.
Microsoft Entra ID connector is available in Beta
The managed Microsoft Entra ID connector is now available in Beta in Databricks Lakeflow Connect. Use the connector to ingest Microsoft Entra ID users, groups, applications, service principals, directory roles, identity configuration, and audit and sign-in logs into Databricks.
You can configure Direct VPC ingress for Cloud Run instances ( Preview )
You can configure Direct VPC ingress for Cloud Run instances ( Preview ). Direct VPC ingress lets Cloud Run instances on a VPC network use their own ephemeral private IP address to communicate with each other and with other resources on the VPC network.
Gemini Enterprise: Single-user quota limits
Gemini Enterprise administrators can configure single-user quota limits on the Usage & Spending > Usage page in the Google Cloud console to prevent an individual user from using all of an edition's shared subscription quota pool.