shopify/shopify-api

Merge pull request #458 from Shopify/v6.1.1

Preparing for release 6.1.1

• #456 [Patch] Update firebase/php-jwt to ^7.0 to address security vulnerability (GHSA-2x45-7fc3-mxwq)

Preparing for release 6.1.0

• #450 [Minor] Add support for 2026-01 API version

• ⚠️ [Breaking] Remove ApiVersion::LATEST constant to prevent semver violations. The apiVersion parameter is now required in Context::initialize(). Developers must explicitly specify API versions. See the migration guide for details.
• #425 [Patch] Add compliance webhook topics
• #433 [Minor] Add support for 2025-10 API version

• #418 [Minor] Add support for 2025-07 API version

Merge pull request #406 from Shopify/release_v5.10.0

Preparing for release 5.10.0

• #292 [Patch] Fix bug where null can be passed to param 3 of setcookie()
• #405 [Minor] Add support for 2025-04 API version

Preparing for release v5.9.0

• #393 [Minor] Add support for 2025-01 API version REST resources
• #367 [Patch] Allow uppercase characters in redirect URI
• #394 [Patch] Remove implicit nullability to support PHP 8.4

Preparing for release 5.8.1

• #387 [Patch] Fix GraphQL request to properly encode query string

Merge pull request #382 from Shopify/v5_8_0

preparing for release v5.8.0

• #381 [Minor] Adding support for 2024-10 API version
• #379 [Patch] Fix GraphQL Content-Type header to be application/json

Merge pull request #378 from Shopify/v5_7_0

Preparing for release v5.7.0

• #371 [Minor] Remove API version validation to allow more flexibility of API version. And add support for 2024-10 API version
• #370 [Patch] Fix params set to zero being removed from request payload
• #366 [Minor] Updated webhook subscription topic constants

Merge pull request #355 from Shopify/v5_6_0

Preparing for release v5.6.0

• #354 [Minor] Adding support for 2024-07 API version

• #345 [Patch] Stop storing a session in the database when beginning OAuth, only when completing it

• #332 [Patch] Avoid writing to system temporary directory when an API deprecation is encountered

• #333 [Minor] Adding support for 2024-04 API version

• #318 [Minor] Adding support for 2024-01 API version

• #306 [Minor] Adding support for 2023-10 API version
• #297 [Patch] Fix CustomerAddress methods, FulfillmentRequest save method

• #285 [Minor] Adding support for 2023-07 API version

• #269 [bugfix] Refactored query string building to account for Shopify-specific array format
• #236 [bugfix] Correct requirements in composer.json
• #262 ⚠️ [Breaking] Added support for PHP 8.2, and removed support for PHP 7.4
• #264 [Patch] Remove support for currently-non-existent versions of PHP (8.3+)
• #272 ⚠️ [Breaking] Removed REST resources for 2022-01, update resources for remaining versions
• #270 [Patch] Add support for Event topic names

• #259 Added support for 2023-04 API version, updated auto-generated REST resources

• #235 Fixed an error when parsing the JSON response body for the AssignedFulfillmentOrder resource
• #238 Add support for 2023-01 API version

• #186 Update the php-jwt package

• #222 Add support for Context::$CUSTOM_SHOP_DOMAINS setting

• #221 ⚠️ [Breaking] Add REST resources for October 2022 API version, remove support and REST resources for October 2021 (2021-10) API version

• #218 Fix issue that failed when setting Context::$HOST_NAME with a port

• #213 Add 10s leeway when decoding session token JWTs
• #211 Change requirement of psr/log from ^1.1 to ^1.1 || ^2.0 || ^3.0
• #210 Add ext-json as a dependency in composer.json
• #212 Allow a scheme in the Context::$HOST_NAME URL to enable support for HTTP apps

• #209 Add getEmbeddedAppUrl utils method to load the embedded app in the right Shopify host

• #197 ⚠️ [Breaking] Add REST resources for July 2022 API version, remove support and REST resources for July 2021 (2021-07) API version
• #180 Add optional saving parameter to toArray of Base class - default is false and will include read-only attributes in returned array; true used for save when committing via API to Shopify, which excludes read-only attributes.

Added

• #168 Allow REST resources to configure a deny list of attributes to be excluded when saving
• #169 Allow loading dynamic fields returned by the API, and fix an issue when loading object arrays from API response data

Added

• #139 Add support for REST resources
• #134 ⚠️ [Breaking] Add support for PHP 8.1 and remove 7.3 from the supported list, since it's no longer supported
• #136 Allow full paths in REST requests

Fixed

• #117 Handle float Retry-After headers
• #114 Update session cookie expiration after OAuth
• #116 Save signature OAuth cookies when using the fallback function for frameworkless apps