Action neededShopify · Changelog· Yesterday
What they said
“Leaked tokens can be used from any network location.”
If an agency or freelancer built a custom app for your store, it now needs an IP allowlist: a list of the only networks allowed to use it to reach your store's data. New installs need one from 20 November 2026, and existing apps from 1 January 2027.
Latest
Newest first · Last update 10 hours agoFYIShopify
When a customer asks you to delete their data, Shopify now processes it 5 days after the request instead of 10. This started on 10 November 2026. The only exception is when a gift card is due to be sent to someone: then it waits until the gift card has been delivered.
Yesterday · For founders, ops
Worth knowingShopify
Apps inside your Shopify admin can now open Sidekick, Shopify's built-in AI assistant, with a question already filled in. For example, an app could add an "Ask Sidekick" button next to a report, so you get help understanding it without leaving the app.
28 Oct · For founders, developers
Action neededGoogle
From 31 January 2027, every product image you send to Google Merchant Center must be at least 500 x 500 pixels. Until now the minimum was 100 x 100, or 250 x 250 for clothing. Products with smaller images will be disapproved and drop out of Shopping ads and free listings.
21 Aug · For founders, marketers, ops81 days left
Worth knowingWooCommerce
WooCommerce 11.3 is out this week. The sale badge can now show the discount as an amount or a percentage, such as "Save 25%". The Orders report can filter by payment method. You can also choose a refund and returns policy page, which Google can read. Product galleries swipe more smoothly on mobile.
2 days ago · For founders, developers
Action neededAdobe Commerce
Adobe released a critical security update for Adobe Commerce and Magento Open Source on 13 October 2026. Stores also need a separate hotfix released in September for another serious flaw. Adobe recommends changing your store's encryption keys and passwords as part of the fix.
13 Oct · For founders, developers
Action neededWooCommerce
WooCommerce 11.2.2 fixes several security problems, including making admin pages more secure. WooCommerce says to update as soon as possible. Some of the fixes came from an AI security scan of WooCommerce's code.
8 days ago · For founders, developers
FYIKlaviyo
Klaviyo has launched Klaviyo Starter, a simpler version that runs inside your Shopify admin. It bundles signup forms, ready-made email flows and campaigns in one place, so newer brands can get going without learning the full Klaviyo platform.
5 Oct · For founders