Shopify webhook bug silently dropped key field for two days without triggering alerts

·1 views

In April 2026, Shopify webhooks pinned to API version 2025-07 began intermittently delivering payloads missing the critical 'id' field, while all delivery monitors reported healthy green status. The bug caused silent data corruption — handlers received 'undefined' instead of a record ID, causing database rows to stop updating with no errors or failed HTTP responses. A Shopify staff member explained on April 14 that if a store had any subscription for the same topic resolving to the newer 2026-04 API version, that version's field removal leaked across all subscriptions on the store, regardless of their pinned version. Shopify deployed a fix on April 15, resolving the issue. The incident highlights a structural blind spot in webhook monitoring, where delivery-layer tools cannot detect payload-level data corruption by design.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Node.js Now Natively Supports .env Loading and Auto-Restart Watching

Recent versions of Node.js have introduced built-in features that reduce the need for popular third-party packages. Since version 20.6, Node.js supports loading environment variables directly from .env files using the --env-file flag, eliminating the need for the dotenv package. Starting with Node.js 22, the --watch flag became stable, enabling automatic application restarts on file changes without nodemon. Developers can now run a single command combining both flags to replicate what previously required two separate dependencies. These additions are documented in the official Node.js CLI documentation.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Federated MCP Servers Enable Multi-Agent AI Coordination at Enterprise Scale

The Model Context Protocol (MCP) is enabling a shift from single, monolithic AI agent loops to distributed, federated multi-agent networks capable of handling enterprise-scale complexity. Drawing on principles from microservices architecture, federated MCP networks break AI workloads into specialized, independently deployable agent nodes that communicate over standardized protocols. A supervisor agent acts as an orchestrator, maintaining a registry of available MCP servers, each responsible for a distinct operational domain such as browser automation or code execution. The architecture is built on four layers — context, transport and protocol, registry and discovery, and governance — to manage state and coordination across distributed nodes. This approach aims to overcome the scalability limits of traditional LLM-based tooling by applying distributed systems engineering to autonomous software agents.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Indian dev builds dual-payment checkout using PayPal for USD and Razorpay for UPI

A solo Indian developer building an AI skills marketplace discovered that Stripe is not viable for Indian merchants needing to accept both international and domestic payments simultaneously. PayPal, commonly assumed to be a global solution, shut down India-to-India domestic transactions in April 2021, leaving it useful only for cross-border payments from international buyers. To solve this, the developer implemented a two-provider architecture routing international buyers through PayPal in USD and Indian buyers through Razorpay via UPI in INR. The payment rail is selected at checkout based on the buyer's chosen currency, with a timezone-based default that users can manually override. The developer also cautions against simple USD-to-INR price conversion, recommending regional price points instead, as direct currency conversions tend to feel expensive to Indian buyers of digital goods.

0 comments Read more at DEV Community

ProgrammingHacker News ·

EU AI Act Rules for General-Purpose AI Models Now Enforceable

The European Union's AI Act regulations governing general-purpose AI models became enforceable as of August 2, 2026. The rules apply to developers and providers of large AI systems deployed within the EU market. Companies must now comply with transparency and safety obligations or face potential penalties under the new framework. The enforcement marks a significant milestone in the EU's broader effort to regulate artificial intelligence across member states.

0 comments Read more at Hacker News