Shopify Apps 2025-10

Use this historical 2025-10 pack to review and migrate existing Shopify integrations. Shopify lists this API line as unsupported, and its accessibility ended on 2026-10-16 at 15:00 UTC; requests naming it now fall forward under the published policy. Do not assume these quarter-specific rules describe the schema actually serving the app. OAuth, App Bridge, and platform security requirements evolve independently of that quarter. UI extensions and Functions have their own versioned API configuration. Apply the sections for the surfaces your app exposes, along with security guidance for its server language and framework.

Version scope and SDK security

• Replace retired API selections with an explicitly chosen supported stable version in Admin and Storefront request URLs and [webhooks] api_version. Select Customer Account and extension API versions separately; an Admin client setting does not configure them. Deploy webhook configuration changes for production.
• Check X-Shopify-API-Version on API responses and webhooks against the expected version. Treat a mismatch as version drift requiring migration review; Shopify falls requests and webhook payloads forward to the oldest accessible stable version. Verify authentication, scopes, webhook parsing, and privacy handling against the version actually served before relying on the migrated integration.
• Use the 2025-10 schema only to understand the old integration. Check fields, mutations, scopes, limits, and these rules against the migration target's versioned reference and release notes. Monitor the API health report and