Shopify has a new store activity log that shows who changed what in your store, from products and discounts to themes, apps, staff and settings. It's in Settings > General > Store activity log and keeps up to 18 months of history, up from the last 250 events.
Google has updated its rules for Merchant Center promotions. Promotion titles must not include redemption dates in any format; the dates go in the promotion's own date fields instead. The only exception is a short month name, such as "Jan".
If an agency or freelancer built a custom app for your store, it now needs an IP allowlist: a list of the only networks allowed to use it to reach your store's data. New installs need one from 20 November 2026, and existing apps from 1 January 2027.
AI agents can look up a store's policies and FAQs (delivery, returns and so on) through a Shopify tool called search_shop_policies_and_faqs. It's being replaced by a new tool called ask_business, which replies with a written answer. Shopify will maintain the old tool until 15 January 2027.
Until now, only stores using Shopify Payments could appear on Shop, Shopify's shopping app and Shop.com. Stores using other payment providers can now appear too, as long as they meet Shop's eligibility requirements. Shopify has also updated those requirements for every store.
Klaviyo has added a feature that uses AI to adjust the tone and product names in the SMS and RCS messages your flows send, based on how each shopper engages. Each version is automatically A/B tested against your original copy. Separately, email flows can now show or hide blocks and add content using details from the event that started the flow, with no code.
WooCommerce has released a security update for WooPayments, fixing an issue in the subscriptions features built into the plugin. Every recent version has a matching fix, such as 11.2.0 to 11.2.1. Anything older than 9.0.0 should go to 11.2.1.
Omnisend has launched Social Capture. When someone comments or messages a keyword on your Instagram, it replies automatically and collects their email address for your list.
Adobe has set deadlines for Adobe Commerce on Cloud stores running old software. PHP 8.1 or older, Redis 5 or older and some other outdated services must be upgraded by 31 May 2027. Stores on Commerce 2.4.4 or 2.4.5 must upgrade or move to Adobe's SaaS version by 1 June 2027. Miss them and Adobe may switch your storefront off.
Klaviyo's AI assistant, Composer, is now out of preview. Klaviyo says it can answer harder questions across your data, run analyses and audits on a schedule, and turn workflows that work into reusable skills. You can open it from a bar that appears throughout Klaviyo.
You can now add discounts to Rollouts, Shopify's built-in tool for scheduling and testing store changes. That means you can show a new offer to part of your online store traffic, compare it against your current offer using conversion results, or launch a discount alongside theme and checkout changes in one go.
Stripe's Endive API version (2026-09-30.endive) removes the payment_method_types setting from Checkout Sessions and the matching option from Elements. It also deprecates the payment request button. These are breaking changes, so they only affect you when your developer upgrades to this API version.
Google Analytics now has hostname filters. You can make an approved list of website addresses, and only events from those addresses are counted in your property.
Shopify is moving where you set up shipping. Instead of shipping profiles, shipping options will live inside Markets, so you manage where you sell and how you ship in one place. Stores could opt in from 1 October 2026, existing stores are being moved over as their apps become compatible, and it applies to every store from 1 July 2027.
Gorgias now lets Shopify stores set a maximum refund amount and a list of refund reasons. Once it's set up, agents can only refund up to your limit and must pick a reason before the refund goes through.
WooCommerce has fixed security issues in its Stripe Gateway plugin. Version 10.9.0 could store new customers' account passwords in plain text in some cases. Update to 11.2.0, or 11.1.2 if you need to stay on 11.1.x.
Shopify Tax is free until your store passes 100,000 in sales (£100,000 for UK stores). Until now that allowance reset every calendar year. From 1 January 2027 it's based on your store's lifetime sales instead, so once you've passed it, it doesn't come back.
WooCommerce 11.3 was released on 11 November. The sale badge can now show the discount as an amount or a percentage, such as "Save 25%". The Orders report can filter by payment method. You can also choose a refund and returns policy page, which Google can read. Product galleries swipe more smoothly on mobile.
Google Analytics has launched Data Manager in beta. It's a single place in the admin area to connect and control your product links (such as Google Ads), your data streams and your first-party data, and to fix any connection problems.
Apps inside your Shopify admin can now open Sidekick, Shopify's built-in AI assistant, with a question already filled in. For example, an app could add an "Ask Sidekick" button next to a report, so you get help understanding it without leaving the app.
The PHP project released fixes for two critical security issues on 21 October 2026. WooCommerce is telling store owners to update PHP on their servers straight away. No WooCommerce or WordPress update is needed.
Klaviyo sign-up forms can now collect explicit marketing consent and email tracking consent from new subscribers. Klaviyo says the aim is to keep measuring email engagement while staying compliant with EU privacy rules.
Klaviyo has launched Klaviyo Starter, a simpler version that runs inside your Shopify admin. It bundles signup forms, ready-made email flows and campaigns in one place, so newer brands can get going without learning the full Klaviyo platform.
You can now add your own annotations to time-series reports in Shopify Analytics. Each note can have a title, description, date or date range and a type, so you can mark things like a campaign launch, an influencer post, a supplier change or a promotion right on the chart.
The WooCommerce PHP version requirement is going up: WooCommerce 11.6, planned for February 2027, will need PHP 8.1 or newer. Stores on PHP 7.4 or 8.0 can keep updating up to version 11.5, and WooCommerce 11.3 now shows a warning in your admin if your store is affected.
From 21 September 2026, Shopify Analytics counts sessions differently. It now focuses on human visitors and classifies bot traffic more consistently, and it keeps genuine shopper journeys that don't include a normal pageview. Session-based numbers like conversion rate will look different, but orders, sales and customer counts aren't affected.
When customers sign in to their account on your store, their store credit balance now shows at the top of every account page. Signed-in customers who haven't ordered yet also see product recommendations from your catalogue, chosen by Shopify based on what it knows about their preferences.
When a customer asks you to delete their data, Shopify now processes it 5 days after the request instead of 10. This started on 10 November 2026. The only exception is when a gift card is due to be sent to someone: then it waits until the gift card has been delivered.
Shopify's self-serve returns and cancellations, where customers request them from their account, used to be one setting for the whole store. You can now switch them on or off separately for each market you sell in. Your current settings have carried over, so nothing changes until you edit them.
From 9 November, BigCommerce is gradually stopping product and variant image uploads in two old, rarely used formats: WBMP and XBM. Once the change reaches your store, uploading one of these files, in the control panel or through the API, gives an unsupported image format error. Images for modifiers, brands and categories aren't affected.
WooCommerce 11.2.2 is a security update that tightens several areas, including the Store API, REST API key checks and two admin pages that now need an administrator to be logged in. It also stops checkout going to payment if an order fails to save. WooCommerce says to update as soon as possible.
Stripe's October update lets you allow customers to pause their own subscriptions from the Stripe customer portal. Customers can also get back into an expired portal session by verifying their email address.
Shopify has added protection against links that send customers from your store to other websites. After an update on 23 October, your store blocks links to sites Shopify has identified as malicious, asks customers to confirm before going to suspicious sites, and sends them straight through to all other sites with no message.
Adobe released a security update for Adobe Commerce and Magento Open Source on 13 October 2026, covering versions 2.4.4 to 2.4.9. A separate hotfix for another issue isn't included in the October patch and has to be applied on its own.
You can now turn off email click tracking for your whole account, for certain people, or for individual links. The old SMS dashboard now shows email, SMS, WhatsApp and push together in one view. SMS campaigns can also wait until a customer's local quiet hours are over before sending.
Canvas is a new way to design your Shopify store. You see every page of your store laid out together, click to edit anything, or ask Sidekick, Shopify's AI assistant, to make changes for you. You'll find it under Online Store > Themes, where you can start a new theme or duplicate an existing one into Canvas.
Trustpilot's September release adds product review pages, a way to group product variants under one rating, printable QR codes for collecting reviews, and AI Search Market Insights, which shows how often AI tools cite your Trustpilot profile compared with competitors.
From 31 January 2027, Google wants every product image in Merchant Center to be at least 500 x 500 pixels. Until then the old minimums still work: 100 x 100, or 250 x 250 for clothing. Google has been showing warnings on smaller images since July 2026.