Cross-border intelligence

currententrychange now returns the previous page in event.from for customer account full-page extensions

Starting in API version 2027-01, in customer account full-page extensions the Navigation API currententrychange event sets event.from to the page the customer navigated away from, instead of the page they navigated to. This is a breaking ch

UI extensions now support a larger number of locales

UI extensions no longer have a 256 KB limit on the combined size of their locale files. As of October 30, 2026, you can add more languages to an extension without hitting a combined size limit at deploy. This applies to all apps with UI ext

Gift Card line_item_id will become read-only in REST Admin API version 2027-01

In REST Admin API version 2027-01 and later, the line_item_id property on the Gift Card resource is read-only. Shopify ignores the property in create and update requests. Remove it from those requests before you upgrade. What changed In RES

New trusted vault origin signal in Payments Apps API

The Payments Apps API 2027-01 release candidate adds payment_method.data.trusted_vault_origin to credit card payment and verification requests. Payment app developers can use this optional Boolean to handle missing CVV for cards from a vaul

Shop SDK lead capture now supports Rich Authorization Requests

You can now request the specific profile data your app needs during Shop SDK lead capture, including details that aren't saved on the user's Shop profile. Use Rich Authorization Requests (RAR) to select which fields are required and which o

Start Sidekick conversations from your app

Embedded apps can now launch Sidekick with a pre-filled prompt using the Sidekick Launch API, so merchants can get contextual help without leaving your app. From within the Shopify admin, your app can start a Sidekick conversation on the me

Editions: Fall 2026

Cart and checkout permalinks now support UCP at /buy

Shopify storefronts now support the UCP dev.ucp.shopping.permalink capability starting with UCP 2026-08-25 on a new /buy route. You can use a single /buy link to add items to a cart, prefill checkout details, and take the buyer to checkout,

Add selling plans to draft order line items with the Admin GraphQL API

Admin GraphQL API version 2027-01 adds selling plan support to draft orders. You can now apply a selling plan to a draft order line item and read back the applied plan. These fields are additive, so no action is required to keep your app wo

First sign-ins to customer accounts now set Customer.state and send customers/enable webhooks

A customer's first sign-in to customer accounts now sets Customer.state to ENABLED and sends the customers/enable and customers/update webhooks. This matches how account activation works in legacy customer accounts. What's changing When a c

Managed mode for Shopify Tax

Shopify Tax managed mode helps Shopify apply the correct tax behavior for US sales by managing some store settings and API behavior directly. To keep those settings consistent, some Admin API writes now validate against the requirements of

App Events: Send events from Checkout and Customer Account UI extensions

Starting with API version 2027-01, Checkout and Customer Account UI extensions can send App Events to Shopify with shopify.appEvents.emit(). Extensions don't need network access or an app backend to send events. This is a new, optional API,

Make your app's activity reportable in Shopify Analytics with App Events

You can now make your app’s activity available for merchants in Shopify Analytics. Merchants can explore your app’s metrics and dimensions in the report builder or query them with ShopifyQL using FROM app_events. What changed Apps can now d

Introducing theme app add-ons: Build and bundle apps with your themes

Theme developers can now build storefront apps using theme app extensions and bundle them with their theme listings on the Theme Store. Theme app add-ons extend your theme with advanced functionality while creating new monetization opportun

Merchant email now available on the `ThemeSale` object in the Partners API

You can now access the purchasing merchant's email on the ThemeSale object in the Partner API, which lets you connect with the merchants using your themes to provide support, share updates, and build lasting relationships. As a reminder, un

Shopify App Store: Estimated local-currency prices

Merchants who are billed in a currency other than USD now see estimated prices for your app in their billing currency. No action is required on your part, and you can continue to set prices in USD. What changed The Shopify App Store and the

Shopify App Pricing: Plan Feature Targeting

You can now add store requirements to public plans in Shopify App Pricing. A merchant whose store does not have a required feature cannot subscribe to that plan. Store requirements are optional, so no action is required. What changed The pl

Manage payouts, billing, and settings in Dev Dashboard

You now manage your Partner business details, payouts, billing, and the remaining Partner Dashboard settings in Dev Dashboard's Organization settings. New Partners also complete business verification there during setup. Existing Partners do

Store and app install details in the Dev Dashboard

You can now view your organization’s installed apps, collaborator access, earnings, and app activity in one place in the Dev Dashboard. Use the store page to view apps, users, and earnings for a store: Apps from your organization installed

Security update: Offline token dates, new security features

On October 20, we asked all app devs to secure their app, and told you we'd share more before any security change takes effect. Here's what's new, and what you need to do. Offline access tokens The migration timeline for offline access toke

Migrate to expiring offline access tokens before January 1, 2027

Public apps still using non-expiring offline access tokens must migrate to use expiring offline access tokens before January 1, 2027 to remain listed in the Shopify App Store and continue accepting new installs. New client credentials acces

Restrict Admin API access with an IP allowlist

You can now limit Admin API access tokens by IP address. When you add your servers' IP addresses to an IP allowlist in the Dev Dashboard, Shopify rejects GraphQL Admin API and REST Admin API requests that use your app's tokens from anywhere

Secure your app with network access rules in `shopify.app.toml`

You can now declare your app's external hosts and servers in a new [network_access] section of shopify.app.toml. Normally Shopify warns customers when they navigate to a URL ouside Shopify; declaring your external hosts skips this warning,

Search brands that don't sell on Shopify in the Catalog API (beta)

You can now return products from brands that don't sell on Shopify when you search the beta Catalog API. Add the new sources parameter to search_catalog to include external products in the same response as products from Shopify merchants. I