Releasesby Glyph
Restrict Admin API access with an IP allowlist
Developers can now restrict Admin API access tokens to specific IP addresses or CIDR ranges via the Dev Dashboard. Requests originating from outside the configured ranges will be rejected with a 403 status code.
Also shipped Oct 27, 2026Shopify in October 2026 →
OpenAI GPT-6.1 Terra is now available on Unity Gateway
Databricks now supports the OpenAI GPT-6.1 Terra model via Foundation Model APIs on Unity Gateway.
Editing files in Unity Catalog volumes is now generally available
Users can now edit files stored in Unity Catalog volumes directly within the Databricks workspace file editor, eliminating the need for manual downloads and uploads.
Released pg\_pinecone
The pg_pinecone extension is now available, enabling native vector search within PostgreSQL. It allows users to perform vector searches using the local engine or offload indexing to Pinecone for larger datasets.
[Launched] Generally Available: Cost management and tagging for Claude models in Microsoft Foundry
Microsoft Foundry now provides integrated cost management and tagging for Claude models within Azure Cost Management. This update ensures Claude usage is tracked under the specific Foundry resource rather than as general SaaS spend.
Gemini Robotics ER 2 (Preview)
Gemini Robotics ER 2 is now available in preview. This vision-language model is designed for robotics applications, supporting spatial reasoning, agentic code execution, and task orchestration.
xAI's Grok 4.7 is generally available
xAI's Grok 4.7 model is now generally available for production use on global and US multi-region endpoints.
More from Shopify developer platformEvery Shopify developer platform release →
Store and app install details in the Dev Dashboard
You can now view your organization’s installed apps, collaborator access, earnings, and app activity in one place in the Dev Dashboard. Use the store page to view apps, users, and earnings for a store: Apps from your organization installed on the store. Users in your organization who have collaborator access to the store.
Manage payouts, billing, and settings in Dev Dashboard
You now manage your Partner business details, payouts, billing, and the remaining Partner Dashboard settings in Dev Dashboard 's Organization settings . New Partners also complete business verification there during setup. Existing Partners don’t need to take action because your current payout and billing settings stay the same.
Security update: Offline token dates, new security features
Shopify has set a January 1, 2027 deadline for public apps to migrate to expiring offline access tokens. Non-compliant apps will face delisting and API access restrictions starting in 2027.
Migrate to expiring offline access tokens before January 1, 2027
Public apps still using non-expiring offline access tokens must migrate to use expiring offline access tokens before January 1, 2027 to remain listed in the Shopify App Store and continue accepting new installs. New client credentials access helps your backend recover access without waiting for a merchant to reopen your app.
Secure your app with network access rules in `shopify.app.toml`
Developers can now declare external hosts and servers in the network_access section of shopify.app.toml. This configuration helps remove navigation warnings for trusted links and allows Shopify to monitor storefront requests for security.
Promoted Placements beta now includes Shop Campaigns
The Promoted Placements beta now integrates Shop Campaigns, allowing developers to earn merchant-funded commissions on catalog search results. No code changes are required for existing integrations.
Search brands that don't sell on Shopify in the Catalog API (beta)
The Catalog API beta now supports searching for products from brands that do not sell on Shopify. Developers can use the new sources parameter to include external products in search results.
Unlink a customer's identity provider subject with the GraphQL Admin API
Shopify's GraphQL Admin API now supports the identityProviderSubjectDelete mutation to unlink customers from third-party identity providers.