detektu
Shopify API changes
Info

SDK release 15.0.1

sdk:npm/@shopify/shopify-api@15.0.1
Product
Shopify Admin GraphQL API
Source
GitHub Releases
Change kind
Sdk Release
Detected
Last updated

Deterministic evidence

Before / after

Extracted from Shopify's published contract. Open the source ↗

−1+131 change

1 / 1
null
{
"classification": "patch",
"content_hash": "1e2b86880e1433722ac3027cf6073da789b37a912e660435a4ebddb5a0069328",
"coordinate": "sdk:npm/@shopify/shopify-api@15.0.1",
"deprecated": false,
"identity": "@shopify/shopify-api@15.0.1",
"link": "https://github.com/Shopify/shopify-app-js/releases/tag/%40shopify/shopify-api%4015.0.1",
"notes": "@shopify/shopify-api@15.0.1\n### Patch Changes\n\n- 79671d2: Set the `HttpOnly` flag on cookies by default, including the OAuth state and session cookies, so browser JavaScript can no longer read them. Pass `httpOnly: false` to opt out. Boolean cookie attributes are now written as flags, so `secure=true` is now just `secure`.\n- Updated dependencies [d7be864]\n - @shopify/graphql-client@2.0.1\n - @shopify/admin-api-client@2.0.1\n - @shopify/storefront-api-client@2.0.1",
"published_at": "2026-10-08T19:25:44Z",
"registry_message": "",
"version": "15.0.1",
"yanked": false
}

Interpreted documentation change

What the vendor announced

The evidence describes a patch release for @shopify/shopify-api@15.0.1, noting a change where HttpOnly is now set by default for cookies (including OAuth state and session cookies) with opt-out via httpOnly: false, and a simplification of boolean cookie attributes (secure=true becomes secure). It also lists updated dependencies to new patch versions of related Shopify clients.

@shopify/shopify-api@15.0.1 ### Patch Changes - 79671d2: Set the `HttpOnly` flag on cookies by default, including the OAuth state and session cookies, so browser JavaScript can no longer read them. Pass `httpOnly: false` to opt out. Boolean cookie attributes are now written as flags, so `secure=true` is now just `secure`. - Updated dependencies [d7be864] - @shopify/graphql-client@2.0.1 - @shopify/admin-api-client@2.0.1 - @shopify/storefront-api-client@2.0.1

Vendor source ↗

Monitored for you

Does this change affect your integration?

Choose the operations and fields your services use. Detektu matches Shopify findings to that declared usage so your team can review the relevant evidence. No agent or repository access required.

Monitor Shopify free See pricing

Multi-source correlation

Other Shopify findings correlated with this change across sources.

  1. Info
    Build with confidence: Shopify AI Toolkit's security checkdoc:019fb619-9b4a-74ac-a83e-3ffa98844fb4::feed/https://shopify.dev/changelog/build-more-secure-apps-with-shopify-s-ai-toolkit-security-check
    Shopify Admin GraphQL API
  2. Info
    Add shopping and Shop Pay checkout to any agent with Shop MCPdoc:019fb619-9b4a-74ac-a83e-3ffa98844fb4::feed/https://shopify.dev/changelog/add-shopping-and-shop-pay-checkout-to-any-agent-with-shop-mcp
    Shopify Admin GraphQL API
  3. Info
    Checkout footer visibility now applies to merchant-configurable contentdoc:019fb619-9b4a-74ac-a83e-3ffa98844fb4::feed/https://shopify.dev/changelog/checkout-footer-visibility-now-applies-to-merchant-configurable-content
    Shopify Admin GraphQL API
  4. Info
    Manage packed product dimensions with the GraphQL Admin APIdoc:019fb619-9b4a-74ac-a83e-3ffa98844fb4::feed/https://shopify.dev/changelog/manage-packed-product-dimensions-with-the-graphql-admin-api
    Shopify Admin GraphQL API
  5. Info
    Hydrogen 2026-10 is now availabledoc:019fb619-9b4a-74ac-a83e-3ffa98844fb4::feed/https://shopify.dev/changelog/hydrogen-2026-10-is-now-available
    Shopify Admin GraphQL API
  6. Info
    Shopify Flow: Flow Trigger Lifecycle Callback extensions now support relative url pathsdoc:019fb619-9b4a-74ac-a83e-3ffa98844fb4::feed/https://shopify.dev/changelog/shopify-flow-flow-trigger-lifecycle-callback-extensions-now-support-relative-url-paths
    Shopify Admin GraphQL API
  7. Info
    Cart updates that result in no changes to the cart no longer trigger carts/update webhooksdoc:019fb619-9b4a-74ac-a83e-3ffa98844fb4::feed/https://shopify.dev/changelog/unchanged-carts-no-longer-trigger-carts-update-webhooks
    Shopify Admin GraphQL API
  8. Info
    Identify the published version running in a POS extensiondoc:019fb619-9b4a-74ac-a83e-3ffa98844fb4::feed/https://shopify.dev/changelog/identify-the-published-version-running-in-a-pos-extension
    Shopify Admin GraphQL API
  9. Info
    Detect when a POS extension screen finishes navigatingdoc:019fb619-9b4a-74ac-a83e-3ffa98844fb4::feed/https://shopify.dev/changelog/detect-when-a-pos-extension-screen-finishes-navigating
    Shopify Admin GraphQL API
  10. Info
    Global Catalog REST API stops serving traffic on November 2, 2026doc:019fb619-9b4a-74ac-a83e-3ffa98844fb4::feed/https://shopify.dev/changelog/global-catalog-rest-api-stops-serving-traffic-on-november-2-2026
    Shopify Admin GraphQL API
  11. Info
    Catalog API now returns compare-at prices as `list_price`doc:019fb619-9b4a-74ac-a83e-3ffa98844fb4::feed/https://shopify.dev/changelog/catalog-api-now-returns-compare-at-prices-as-list_price
    Shopify Admin GraphQL API
  12. Info
    New `owner_type` field for metafield declarations in Checkout and Customer Account UI extensions, required in 2027-01doc:019fb619-9b4a-74ac-a83e-3ffa98844fb4::feed/https://shopify.dev/changelog/metafield-owner-types-required-for-checkout-and-customer-account-ui-extensions
    Shopify Admin GraphQL API
  13. Info
    POS UI extensions now return percentage values for percentage discountsdoc:019fb619-9b4a-74ac-a83e-3ffa98844fb4::feed/https://shopify.dev/changelog/pos-ui-extensions-now-return-percentage-values-for-percentage-discounts
    Shopify Admin GraphQL API
  14. Info
    Per-customer request limit for the Customer Account APIdoc:019fb619-9b4a-74ac-a83e-3ffa98844fb4::feed/https://shopify.dev/changelog/per-customer-request-limit-for-the-customer-account-api
    Shopify Admin GraphQL API
  15. Info
    Downgrade app access scopes from write to readdoc:019fb619-9b4a-74ac-a83e-3ffa98844fb4::feed/https://shopify.dev/changelog/downgrade-app-access-scopes-from-write-to-read
    Shopify Admin GraphQL API
  16. Info
    Cart mutations reject unconfirmed writes in POS UI extensions 2026-10doc:019fb619-9b4a-74ac-a83e-3ffa98844fb4::feed/https://shopify.dev/changelog/cart-mutations-reject-unconfirmed-writes-in-pos-ui-extensions-2026-10
    Shopify Admin GraphQL API
  17. Info
    Sign in with Shop opens to storefront appsdoc:019fb619-9b4a-74ac-a83e-3ffa98844fb4::feed/https://shopify.dev/changelog/sign-in-with-shop-storefront-apps
    Shopify Admin GraphQL API
  18. Info
    Meet the 2026 Shopify Build Award winnersdoc:019fb619-9b4a-74ac-a83e-3ffa98844fb4::feed/https://shopify.dev/changelog/shopify-build-award-2026
    Shopify Admin GraphQL API
  19. Info
    Polaris: unified and for the webdoc:019fb619-9b4a-74ac-a83e-3ffa98844fb4::feed/https://shopify.dev/changelog/polaris-unified-and-for-the-web
    Shopify Admin GraphQL API
  20. Info
    Polaris Goes Stable: The Future of Shopify App Developmentdoc:019fb619-9b4a-74ac-a83e-3ffa98844fb4::feed/https://shopify.dev/changelog/polaris-goes-stable-the-future-of-shopify-app-development-is-here
    Shopify Admin GraphQL API
  21. Info
    The next generation of Shopify fulfillment is comingdoc:019fb619-9b4a-74ac-a83e-3ffa98844fb4::feed/https://shopify.dev/changelog/next-gen-fulfillment
    Shopify Admin GraphQL API
  22. Info
    New tax fields for return shipping fees in the GraphQL Admin APIdoc:019fb619-9b4a-74ac-a83e-3ffa98844fb4::feed/https://shopify.dev/changelog/new-return-shipping-fee-tax-fields
    Shopify Admin GraphQL API
  23. Info
    Meet Shopify Dev Assistant: Build Shopify Apps Fasterdoc:019fb619-9b4a-74ac-a83e-3ffa98844fb4::feed/https://shopify.dev/changelog/meet-shopify-dev-assistant-build-shopify-apps-faster-than-ever
    Shopify Admin GraphQL API
  24. Info
    Introducing the new Collection Sources APIdoc:019fb619-9b4a-74ac-a83e-3ffa98844fb4::feed/https://shopify.dev/changelog/introducing-the-new-collections-api
    Shopify Admin GraphQL API
  25. Info
    Introducing admin intents: Keep merchants in your appdoc:019fb619-9b4a-74ac-a83e-3ffa98844fb4::feed/https://shopify.dev/changelog/introducing-admin-intents-keep-merchants-in-your-app-while-managing-shopify-resources
    Shopify Admin GraphQL API
  26. Info
    Build More, Manage Less: Teams, Stores, and Roles Simplifieddoc:019fb619-9b4a-74ac-a83e-3ffa98844fb4::feed/https://shopify.dev/changelog/improved-building-for-partners
    Shopify Admin GraphQL API
  27. Info
    App Events: See all your app activity in one placedoc:019fb619-9b4a-74ac-a83e-3ffa98844fb4::feed/https://shopify.dev/changelog/app-events
    Shopify Admin GraphQL API
  28. Info
    Raising the bar: 2025 Shopify Build Awards winnersdoc:019fb619-9b4a-74ac-a83e-3ffa98844fb4::feed/https://shopify.dev/changelog/2025-shopify-build-awards
    Shopify Admin GraphQL API
  29. Info
    What's new in Polaris 2.0.0-rc.1doc:019fb619-9b4a-74ac-a83e-3ffa98844fb4::feed/https://shopify.dev/changelog/what-s-new-in-polaris-2-0-0-rc-1
    Shopify Admin GraphQL API
  30. Info
    New Shop Campaigns metrics and dimensions in ShopifyQL API version 2026-10doc:019fb619-9b4a-74ac-a83e-3ffa98844fb4::feed/https://shopify.dev/changelog/new-shop-campaigns-metrics-and-dimensions-on-api-version-2026-10
    Shopify Admin GraphQL API
  31. Info
    Return policy profiles are now available in the GraphQL Admin APIdoc:019fb619-9b4a-74ac-a83e-3ffa98844fb4::feed/https://shopify.dev/changelog/return-policy-profiles-are-now-available-in-the-graphql-admin-api
    Shopify Admin GraphQL API
  32. Info
    New APIs for buyer-requested order editsdoc:019fb619-9b4a-74ac-a83e-3ffa98844fb4::feed/https://shopify.dev/changelog/new-apis-for-buyer-requested-order-edits
    Shopify Admin GraphQL API