- Legacy Customer Account forms now require a valid hCaptcha token; the /challenge endpoint is removed, and non‑compliant submissions return 400 errors.
- reCAPTCHA v3 is fully deprecated on Storefront forms; any request containing a recaptcha‑v3‑token or using window.grecaptcha will be rejected with a 400 error.
- Update custom code or themes to use hCaptcha as described in the developer docs.
Breaking Changes to CAPTCHA protection on Storefront forms
Official Shopify changelog summary with source attribution, release tags, and community reactions.
Track this Shopify release note alongside related changelog updates, risky changes, and weekly digest signals from the developer community.
Verify the original release note
Every summary should remain traceable to the original changelog or release source.
Follow this in context
Turn this Shopify release note into a weekly digest for the tools you actually use.
Create digestMore Shopify changelog updates
admin.app.intent.link intents now open as a full‑page navigation instead of an overlay modal
Adds cart session attribution and cart attributes for richer checkout data.
Added the `shop_campaign_insights` schema to ShopifyQL, letting apps query campaign performance data using the existing `shopifyqlQuery` field with the `read_reports` scope.