- Card‑deposit endpoint now requires a Shopify‑issued mTLS client certificate for all deposit calls (enforced Oct 15 2026).
- Apps using customerPaymentMethodCreditCardCreate or Update must obtain and present the certificate or deposits will be rejected; apps only using customerPaymentMethodRemoteCreate are unaffected.
- Obtain the certificate via shopify‑mtls‑partnerships@shopify.com, present it on /sessions calls, and rotate it annually before the 1‑year TTL expires.
Card deposit endpoint now requires mTLS certificate
Official Shopify changelog summary with source attribution, release tags, and community reactions.
Track this Shopify release note alongside related changelog updates, risky changes, and weekly digest signals from the developer community.
Verify the original release note
Every summary should remain traceable to the original changelog or release source.
Follow this in context
Turn this Shopify release note into a weekly digest for the tools you actually use.
Create digestMore Shopify changelog updates
admin.app.intent.link intents now open as a full‑page navigation instead of an overlay modal
Adds cart session attribution and cart attributes for richer checkout data.
Added the `shop_campaign_insights` schema to ShopifyQL, letting apps query campaign performance data using the existing `shopifyqlQuery` field with the `read_reports` scope.