Shopify App Store submission requirements: build, grow, then expand
Shopify has updated its App Store submission policies, requiring existing apps to have at least 10 installs on full-priced stores before listing additional apps. It also introduced escalating cooldown periods for rejected submissions.
Also shipped Nov 10, 2026Shopify in November 2026 →
Amazon Bedrock AgentCore now offers a Web Search API
AWS launched the InvokeWebSearch API on Amazon Bedrock AgentCore, enabling direct web search execution billed at $7 per 1,000 queries.
Flagship - Evaluate Flagship feature flags from Rust
Cloudflare released an official Rust SDK (`cloudflare-flagship`) for Flagship, enabling async Rust applications to evaluate feature flags via OpenFeature with remote or in-process local evaluation.
BigQuery generative AI functions support gemini-4-carbon
Google Cloud announced general availability for the gemini-4-carbon model across BigQuery generative AI functions.
Amazon OpenSearch Service announces managed cross-Region disaster recovery
AWS introduced managed cross-Region disaster recovery for Amazon OpenSearch Service, providing continuous data replication with an RPO under one minute and RTO under 20 minutes.
Amazon Bedrock adds bedrock-runtime endpoint support for Daybreak models
AWS added support for OpenAI Daybreak Red and Daybreak Blue cybersecurity models on Amazon Bedrock runtime endpoints via US and Global cross-Region inference profiles.
Gemini Enterprise: Gemini 4 Carbon available in web app, mobile app, Workflow Builder, and AI developer tools
Google Cloud generally released Gemini 4 Carbon across Gemini Enterprise web and mobile apps, Workflow Builder, and AI developer tools with multi-region availability.
More from Shopify developer platformEvery Shopify developer platform release →
Redesigned Partner Directory with profiles built on Shopify data
The Shopify Partner Directory has been redesigned. We've made it easier for merchants to explore and evaluate Partners based on a definitive, Shopify-confirmed record of their work, while making profiles easier for Partners to maintain.
Partner apps must enable bulk operations before use
Apps must now explicitly enable access to bulk queries or mutations in the Partner Dashboard to use them with the GraphQL Admin API. Unauthorized requests will return an access denied error.
Apps must enable bulk operations before use
Apps must now explicitly enable access to bulk queries or mutations in the Partner Dashboard to use them with the GraphQL Admin API. Unauthorized requests will return an access denied error.
Merchant notes on store credit transactions
The GraphQL Admin API now allows attaching optional notes to store credit transactions. This feature is available in version 2027-01 and later.
orderCreate line items support custom IDs
The variantIdentifier field on orderCreate line items is now available in GraphQL Admin API version 2027-01 and later. Previously, it was only available in the unstable version. You can use it to identify a product variant by its ID or by a custom ID, such as a listing ID from another system that you store in a metafield.
Order routing functions can now rank locations across multiple fulfillment groups in the unstable Function APIs
Shopify order routing functions in the unstable Function APIs can now rank locations across multiple fulfillment groups.
App security updates: IP allowlist is now required
Shopify now requires public apps to turn on IP allowlists by November 20, 2026, and public apps using bulk operations by November 12, 2026, to restrict API access to trusted networks.
IP allowlists are now required for public apps
Shopify requires public apps using bulk operations to configure IP allowlists by November 12, 2026, and all other public apps by November 20, 2026, preventing leaked API tokens from being used elsewhere.