detektu
Shopify API changes
Info

SDK release 14.0.1

sdk:npm/@shopify/shopify-api@14.0.1
Product
Shopify Admin GraphQL API
Source
GitHub Releases
Change kind
Sdk Release
Detected
Last updated

Deterministic evidence

Before / after

Extracted from Shopify's published contract. Open the source ↗

−1+131 change

1 / 1
null
{
"classification": "patch",
"content_hash": "d82794c12eaad6184dc80ce1a20ef999cdf050255bd4fa074ab2b8be0980ef94",
"coordinate": "sdk:npm/@shopify/shopify-api@14.0.1",
"deprecated": false,
"identity": "@shopify/shopify-api@14.0.1",
"link": "https://github.com/Shopify/shopify-app-js/releases/tag/%40shopify/shopify-api%4014.0.1",
"notes": "@shopify/shopify-api@14.0.1\n### Patch Changes\n\n- 8689457: Redact OAuth credentials from HTTP debug logs. The request body of OAuth token endpoint calls is no longer written to the debug log, and credential headers (`Authorization`, `Cookie`, `Set-Cookie`, `X-Shopify-Access-Token`, `Shopify-Storefront-Private-Token`, `X-Shopify-Storefront-Access-Token`) are replaced with `****` in API client debug logs.",
"published_at": "2026-08-28T13:50:26Z",
"registry_message": "",
"version": "14.0.1",
"yanked": false
}

Interpreted documentation change

What the vendor announced

The evidence describes a patch release for @shopify/shopify-api@14.0.1 that adds a change to redact OAuth credentials from HTTP debug logs, replacing sensitive headers with **** in API client debug logs.

@shopify/shopify-api@14.0.1 ### Patch Changes - 8689457: Redact OAuth credentials from HTTP debug logs. The request body of OAuth token endpoint calls is no longer written to the debug log, and credential headers (`Authorization`, `Cookie`, `Set-Cookie`, `X-Shopify-Access-Token`, `Shopify-Storefront-Private-Token`, `X-Shopify-Storefront-Access-Token`) are replaced with `****` in API client debug logs.

Vendor source ↗

Monitored for you

Does this change affect your integration?

Choose the operations and fields your services use. Detektu matches Shopify findings to that declared usage so your team can review the relevant evidence. No agent or repository access required.

Monitor Shopify free See pricing

Multi-source correlation

Other Shopify findings correlated with this change across sources.

  1. Info
    Password Protected Shop Dev flows on Shopify Theme CLI v3.83.x and older to be deprecateddoc:019fb619-9b4a-74ac-a83e-3ffa98844fb4::feed/https://shopify.dev/changelog/password-protected-shop-dev-flows-on-shopify-theme-cli-v3-83-x-and-older-to-be-deprecated
    Shopify Admin GraphQL API
  2. Info
    Expiring offline access tokens required for new public apps as of April 1, 2026doc:019fb619-9b4a-74ac-a83e-3ffa98844fb4::feed/https://shopify.dev/changelog/expiring-offline-access-tokens-required-for-public-apps-april-1-2026
    Shopify Admin GraphQL API
  3. Info
    Hydrogen developer preview update: September 2, 2026doc:019fb619-9b4a-74ac-a83e-3ffa98844fb4::feed/https://shopify.dev/changelog/hydrogen-developer-preview-update-september-2-2026
    Shopify Admin GraphQL API
  4. Info
    The Polaris CDN is adopting semantic versioningdoc:019fb619-9b4a-74ac-a83e-3ffa98844fb4::feed/https://shopify.dev/changelog/the-polaris-cdn-is-adopting-semantic-versioning
    Shopify Admin GraphQL API
  5. Info
    Polaris CDN 1.1 release candidatedoc:019fb619-9b4a-74ac-a83e-3ffa98844fb4::feed/https://shopify.dev/changelog/polaris-cdn-1-1-release-candidate
    Shopify Admin GraphQL API
  6. Info
    More resilient refreshes for expiring offline access tokensdoc:019fb619-9b4a-74ac-a83e-3ffa98844fb4::feed/https://shopify.dev/changelog/more-resilient-refreshes-for-expiring-offline-access-tokens
    Shopify Admin GraphQL API
  7. Info
    Oxygen is now available on trial plan storesdoc:019fb619-9b4a-74ac-a83e-3ffa98844fb4::feed/https://shopify.dev/changelog/oxygen-is-now-available-on-trial-plan-stores
    Shopify Admin GraphQL API
  8. Info
    Build Shopify apps in PHP and Python with new official packagesdoc:019fb619-9b4a-74ac-a83e-3ffa98844fb4::feed/https://shopify.dev/changelog/build-shopify-apps-in-php-and-python-with-new-official-packages
    Shopify Admin GraphQL API
  9. Info
    GitHub commits now name the last theme editordoc:019fb619-9b4a-74ac-a83e-3ffa98844fb4::feed/https://shopify.dev/changelog/github-commits-now-name-the-last-theme-editor
    Shopify Admin GraphQL API
  10. Info
    Four additional topics are now available for Eventsdoc:019fb619-9b4a-74ac-a83e-3ffa98844fb4::feed/https://shopify.dev/changelog/four-additional-topics-are-now-available-for-events
    Shopify Admin GraphQL API
  11. Info
    POS UI Extensions 2025-04 Updatedoc:019fb619-9b4a-74ac-a83e-3ffa98844fb4::feed/https://shopify.dev/changelog/pos-ui-extensions-2025-04-update
    Shopify Admin GraphQL API
  12. Info
    OrderDisplayFulfillmentStatus now returns FULFILLMENT_NOT_REQUIRED for orders with no items to fulfilldoc:019fb619-9b4a-74ac-a83e-3ffa98844fb4::feed/https://shopify.dev/changelog/orderdisplayfulfillmentstatus-now-returns-fulfillmentnotrequired
    Shopify Admin GraphQL API
  13. Info
    Script tags are deprecated and will stop running on March 1, 2027doc:019fb619-9b4a-74ac-a83e-3ffa98844fb4::feed/https://shopify.dev/changelog/online-store-script-tags-deprecation
    Shopify Admin GraphQL API