- Shopify enforces stricter rate limits on unauthenticated bots and agents accessing the Storefront API and online store pages.
- Bots must sign requests with the new Web Bot Auth to qualify for higher rate limits, with guidance and admin‑generated signatures provided.
- Merchants can obtain ready‑to‑use signatures in the Shopify admin; higher tiers require contacting Shopify.
Bots and agents should identify themselves via Web Bot Auth
Official Shopify changelog summary with source attribution, release tags, and community reactions.
Track this Shopify release note alongside related changelog updates, risky changes, and weekly digest signals from the developer community.
Verify the original release note
Every summary should remain traceable to the original changelog or release source.
Follow this in context
Turn this Shopify release note into a weekly digest for the tools you actually use.
Create digestMore Shopify changelog updates
admin.app.intent.link intents now open as a full‑page navigation instead of an overlay modal
Adds cart session attribution and cart attributes for richer checkout data.
Added the `shop_campaign_insights` schema to ShopifyQL, letting apps query campaign performance data using the existing `shopifyqlQuery` field with the `read_reports` scope.