Shopify's Exponential Edition landed four weeks before Black Friday with 150+ updates and two hard API deadlines. Here is a developer triage: what to act on now, what to review carefully, and what to schedule for January.
Shopify released its Fall '26 Edition on October 28, 2026, under the name Exponential. It bundles more than 150 updates, many of which already shipped during October: Canvas started rolling out on October 1, Shop MCP went live on October 13 and Hydrogen 2026-10 became generally available on October 14.
The timing is the problem. Most engineering teams are already in a pre-BFCM change freeze, and an Edition this size invites scope creep. Our recommendation is simple: handle the dated deadlines now, review the payment and pricing settings carefully, and park everything else until January.
Two items in this Edition have hard dates: the Global Catalog REST API stopped serving traffic on November 2, 2026, and apps must migrate to expiring offline access tokens before January 1, 2027. Everything else can wait for a calm deploy window.
Editions are written as a story. Engineering needs a queue. Shopify groups the release around AI shopping and doing more with fewer manual tasks, but the practical impact on a given store varies widely:
Treat each update as one of three buckets: act now, review before Black Friday, or park until Q1.
Shopify announced on October 9 that the Global Catalog REST API stops serving traffic on November 2, 2026. If you built any integration that reads catalog data through that REST surface, it is already failing or about to. Check your logs for errors from that integration first, then move the calls to the current GraphQL-based catalog access described in the developer changelog.
Apps that rely on long-lived offline tokens need to move to expiring offline access tokens before January 1, 2027. In practice this means storing refresh credentials, refreshing tokens before they expire and handling a failed refresh gracefully instead of silently losing access to a shop. The worst time to discover your refresh logic is broken is the week of Cyber Monday, so test it in a development store now, even if you deploy it in December.
The 2026-10 API release removes deprecated fields, changes how carrier services are registered, recalculates taxes when addresses change and updates inventory error handling. If your shipping, inventory or order apps pin an older version, read the release notes for those four areas specifically before you bump the version string.
Shopify Protect is the most useful merchant-facing piece of the Edition. It adds fraud rules you can write and backtest, AI-written chargeback responses tuned to each bank and reason code, and carrier proof of delivery attached to disputes automatically. Shopify says Protect wins 60% more "product not received" disputes, and chargeback protection now extends to orders not paid with Shop Pay.
Most of these features are labeled as rolling out, so check what is live in your admin. If rule building is available, the backtest is the key feature: run any new rule against last year's November orders before switching it on, so you do not block legitimate holiday buyers.
Compare-at prices are now shared with agentic channels (October 9). That is good for conversion, but it also means any inflated or stale compare-at price is now visible to AI shopping agents as well as humans. Audit your BFCM compare-at values before the campaign starts. We cover the wider catalog side in our UCP agentic catalog readiness guide.
Since October 1, shipping rate configuration moves from delivery profiles into Shopify Markets. If your team or an app edits shipping rates programmatically, confirm where the rates now live before you touch them during peak.
Canvas is a new design surface built around Sidekick that shows every page of the store at once. It is interesting, but early reactions from theme developers are cautious to hostile, and theme app extension support is still being clarified. Redesigning a storefront in November is a bad idea regardless of the tool. Evaluate it in January on a duplicate theme.
If you run a headless Shopify storefront, the 2026-10 release is now GA. Unless it fixes a bug you are actively hitting, schedule the upgrade after the holidays. Our notes on Hydrogen 2026.4 breaking changes show how we usually stage these upgrades.
Promoted Placements is in early access: developers who drive sales through the Catalog API earn the commission a business sets in Shop Campaigns, plus 0.3% from Shopify. It is a meaningful signal about where Shopify is taking discovery, but not something to build in the next four weeks.
Sidekick can now suggest storefront changes that are tested before you apply them. Pair this with the native experiments we described in Shopify native A/B testing with Rollouts once traffic is back to normal. Test results during BFCM are skewed by discount-driven behavior anyway.
| Update | Bucket | Owner | Deadline |
|---|---|---|---|
| Global Catalog REST API retired | Act now | App developer | November 2, 2026 |
| Expiring offline access tokens | Act now (test), deploy in December | App developer | January 1, 2027 |
| API 2026-10 behavior changes | Act now for shipping, tax and inventory apps | App developer | Before version bump |
| Shopify Protect rules | Review, backtest first | Ops / finance | Before November 27 |
| Compare-at prices on agentic channels | Review | Merchandising | Before campaign launch |
| Market-driven shipping | Review | Ops | Before peak edits |
| Canvas | Park | Design | Q1 2027 |
| Hydrogen 2026-10 | Park | Headless team | Q1 2027 |
| Promoted Placements | Park | Product | Q1 2027 |
For custom apps and integrations, a quick scan tells you where to look before you read every changelog entry. This Node script lists files that contain REST Admin calls, catalog references, pinned API versions and token handling:
// scan-shopify-deadlines.mjs
// Usage: node scan-shopify-deadlines.mjs ./path-to-your-app
import { readFileSync, readdirSync, statSync } from "node:fs";
import { join, extname } from "node:path";
const ROOT = process.argv[2] ?? ".";
const EXTENSIONS = new Set([".js", ".mjs", ".ts", ".tsx", ".jsx", ".json"]);
const CHECKS = [
{ label: "REST Admin call", re: /\/admin\/api\/\d{4}-\d{2}\/[\w/.-]+\.json/g },
{ label: "Catalog reference", re: /catalog/gi },
{ label: "Pinned API version", re: /\b20\d{2}-(01|04|07|10)\b/g },
{ label: "Token handling", re: /offline|accessToken|access_token|refresh_token/g },
];
function walk(dir, files = []) {
for (const name of readdirSync(dir)) {
if (name === "node_modules" || name.startsWith(".")) continue;
const path = join(dir, name);
if (statSync(path).isDirectory()) walk(path, files);
else if (EXTENSIONS.has(extname(path))) files.push(path);
}
return files;
}
for (const file of walk(ROOT)) {
const source = readFileSync(file, "utf8");
for (const { label, re } of CHECKS) {
const hits = source.match(re);
if (hits) console.log(`${label.padEnd(20)} ${String(hits.length).padStart(4)} ${file}`);
}
}It is deliberately noisy. The goal is a short list of files to review by hand, not an automated verdict.
At Sentinu we split every Edition into the same three buckets for our clients, then align the "act now" items with the existing BFCM 2026 engineering checklist. Deadlines get shipped behind feature flags and tested in a development store. Everything else goes into a January backlog with an owner and a reason.
If you run a custom Shopify app and are not sure whether the token or API changes affect you, get in touch and we will review your integration before the freeze.
It is Shopify's biannual product release, published on October 28, 2026 under the name Exponential. It groups more than 150 updates, many of which rolled out earlier in October, around AI shopping, fraud protection, store design and developer tooling.
Only if you own a custom app or integration. The Global Catalog REST API retirement on November 2 and the move to expiring offline access tokens before January 1, 2027 are the two dated items. Store owners on standard themes mainly need to review Shopify Protect and compare-at prices.
Shopify describes most Protect features as rolling out, so availability varies. Check your admin, and if custom rules are available, backtest them against past orders before enabling them during peak season.
We advise against it. Canvas changes how you edit the storefront, and any redesign in November adds risk during your highest-revenue weeks. Evaluate it on a duplicate theme in January.
Only if it fixes a problem you are actively experiencing. Otherwise, schedule the upgrade for January, when you can test it without peak traffic.
From the journal
Architecture, scaling, and the work behind the build. Occasional notes from Sentinu, and nothing else.

A senior engineer's comparison of Shopify Hydrogen and Next.js for headless commerce. Architecture trade-offs, rendering strategies, SEO, hosting, and a decision framework based on shipped projects.

Summer '26 Editions made Checkout Components generally available for Shopify Plus. Here is what changes architecturally, what it costs to adopt, and how to sequence a migration that does not put peak season at risk.

A senior engineer's guide to building a B2B wholesale portal on Shopify Plus. Company accounts, custom catalogs, net terms, the limits of native features, and the decision framework for when to extend with custom development.