Carrier services will no longer be automatically added to the default shipping profile

DraftOrderDiscountNotAppliedWarning.priceRule removed in GraphQL Admin API 2026-10

Trong phiên bản GraphQL Admin API 2026-10, Shopify đã loại bỏ trường priceRule đã lỗi thời khỏi đối tượng DraftOrderDiscountNotAppliedWarning. Các ứng dụng cần chuyển sang sử dụng discountTitle và discountCode thay thế trước khi nâng cấp.

Lập trình viên cần đọc để tránh bị lỗi khi ứng dụng của họ vẫn sử dụng priceRule trong GraphQL Admin API mới nhất, vì phiên bản 2026-10 đã loại bỏ trường này và yêu cầu chuyển sang discountTitle và discountCode để tránh lỗi khi nâng cấp.

Shopify taught AI to spot duplicate products. Here’s why retailers are scrambling.

Shopify has launched a system called Catalog that uses LLMs to group related product listings under a Universal Product Identifier, helping AI shopping agents recognize when different listings describe the same item. The system determines a product's 'core value proposition' to decide which variants belong together, using a precision-first approach to avoid incorrect groupings. This comes as AI-driven traffic to Shopify stores grew 8x year-over-year in Q1 2026 and AI-powered orders increased nearly 13-fold. Alongside Catalog, Shopify and Google co-launched the Universal Commerce Protocol (UCP), an open standard for AI agent interactions with merchants, backed by Etsy, Target, Walmart, and Wayfair. Retailers are also experimenting with markdown and other formats to make product data more readable by AI agents.

Order-tracking app Shop abused to push callback phishing attacks

Threat actors are abusing Shopify's Shop order-tracking app by inserting fake purchase receipts into users' order histories. These fraudulent invoices impersonate brands like Norton, McAfee, Apple, and PayPal, and include phone numbers that connect victims to scammers posing as support agents. The scammers use social engineering to extract credentials, payment card details, and OTPs, or trick victims into installing remote access software. This callback phishing method is considered more effective than email-based fraud because users inherently trust the Shop app. No evidence of a compromise at Shopify or the impersonated companies has been found, and the exact delivery mechanism for the fake receipts remains unclear. Users are advised not to call numbers on suspicious receipts and to verify charges directly with their bank.

Storefront MCP cart tools are being deprecated in favour of UCP Cart MCP

Shopify is deprecating the cart tools on its Storefront MCP server in favor of new UCP-conforming Cart MCP tools. The new tools implement the UCP cart capability (dev.ucp.shopping.cart, version 2026-04-08) and expose four operations: create, get, update (PUT semantics), and cancel a cart. Developers must migrate their integrations before August 31, 2026, update endpoints, include a meta object with ucp-agent.profile in every request, add an idempotency key for cart creation, and send the complete line items array on every update rather than patching individual fields.