Shopify 2026-10 API Deprecates owner_type, Requires Global IDs in metafieldsSet

·8 views

A developer warns that the Shopify 2026-10 API version contains a breaking change to the metafieldsSet mutation that can cause failures in production pipelines once the deprecation window closes. The owner_type argument, which previously let developers specify resource kinds for batch metafield writes, is deprecated in this version. Shopify now requires the ownerId field to be a fully qualified Global ID that matches the metafield definition's namespace. Payloads that fail this check may return an INVALID_OWNER error or be silently dropped, depending on how an integration handles errors. The author recommends constructing Global IDs explicitly in client code and treating such errors as fatal rather than as warnings.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Xplora 1.0.0 Released With WordPress 7.1 Engine and Custom Avatars

Version 1.0.0 of Xplora is now available to users. The update adopts WordPress 7.1 as the platform's underlying engine. Users can now upload and edit custom avatars instead of depending on Gravatar. The release also includes fixes and functional improvements to user profiles, along with security adjustments and general stability work. The developers describe this version as a new step in Xplora's ongoing development.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

cloudg: open-source CLI maps and audits AWS, Azure and GCP resources as a graph

A cloud security practitioner has released cloudg, an MIT-licensed Python tool that builds a connected graph of assets across AWS, Azure and GCP. Unlike scanners that produce flat lists of misconfigurations, cloudg records typed relationships between resources, such as a storage bucket invoking a Lambda function or a function assuming a role. The tool can also run Prowler, ScoutSuite, Checkov and Trivy over the same inventory, attaching each finding to the asset it concerns and mapping results to 28 compliance frameworks. Users can query dependencies with the deps command, and the cloudg run pipeline produces an offline HTML report with a topology view and findings table. The current release on PyPI is version 0.6.1, and the project requires Python 3.11 or newer.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Windows Server 2016 Nears End of Extended Support; Engineer Shares In-Place EC2 Upgrade Process

Windows Server 2016 reaches the end of extended support on January 12, 2027, prompting organizations running it on Amazon EC2 to plan upgrades. One engineer upgraded more than 10 EC2 instances in place to Windows Server 2022, using an AI agent for pre- and post-upgrade validation while a human approved each step. Key lessons included pinning the Windows edition to avoid stalls, enforcing a 20 GB free-disk-space requirement after a root volume was expanded from 30 GB to 50 GB, and avoiding copying installation media onto the C: drive. The engineer also recommended using Replace Root Volume rather than AMI restoration for rollback, since the latter changes the instance ID and IP address, and starting with a canary upgrade on a single server. Finally, the account advised testing application functionality rather than only the OS version, and verifying that SSM connectivity and patch-tool OS detection are working after the upgrade.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Some 492,000 MinIO Hosts Found Online, Exposing Object Storage Risks

A ZoomEye index snapshot from October 2026 found 492,113 hosts whose page titles match MinIO, versus 261,617 by application fingerprint. The gap is attributed to the product's console and API surfaces responding differently to scans, plus MinIO being bundled inside other software. The counts reflect detectable fingerprints, not open buckets, since public indexes cannot enumerate bucket contents. The analysis stresses that object stores accumulate historical data such as old backups and dumps, that bucket policies are easy to misconfigure, and that anonymous reads leave few traces. Organisations are advised to audit their own address space, distinguish console exposures (a credential risk) from API exposures (a data risk), and check log retention.

0 comments Read more at DEV Community