Alpha testing: all current functionality is free while VAT Engine is in active development

VAT Engine logo
Product updates

Changelog

Track customer-facing product improvements, security outcomes, and compliance reporting updates across VAT Engine.

Archive page 20 of 23.

Latest release
3.6.383
Cross-platform Decision Replay Is Clearer
Releases tracked
270
Since January 2026
Logged changes
785
Across customer-facing categories
SecurityFeatureImprovementFix

Showing releases 229-240 of 270

3.6.58June 22, 2026

Dedicated Integration Activity Page

2 changes
Feature1 item
  • Each storefront connection now has its own activity page for recent deliveries, sync jobs, privacy requests, retention state, and operator actions instead of compressing that workflow into a modal
Improvement1 item
  • The Integrations catalog now stays focused on connection summaries and edit actions while deeper troubleshooting and replay workflows live on the dedicated activity screen
3.6.57June 22, 2026

Shopify Connect URL Reliability

1 change
Improvement1 item
  • The Integrations catalog layout was also reshaped into clearer responsive connection records so connected Shopify rows no longer clip or compress important status details
3.6.56June 18, 2026

Login Throttle Rebalance

1 change
Security1 item
  • Sign-in now slows repeated attempts against the same account sooner and adds extra source-level protection against automated login floods
3.6.32June 15, 2026

Docs Search Recovery

2 changes
Fix2 items
  • Documentation search now returns live matching results again instead of failing when you start typing in the docs search field
  • The public fallback error screen now uses the VAT Engine logo so branded recovery states stay consistent with the site header
3.6.25June 15, 2026

Safer Automated Abuse Signals

2 changes
Security1 item
  • Automated host blocking now focuses on clearer abusive traffic signals, reducing accidental bans on normal visitors
Fix1 item
  • Operational notes now reflect the narrower abuse-detection policy
3.6.20June 14, 2026

Atomic TOTP Replay Protection

2 changes
Security2 items
  • Accepted authenticator codes are now claimed atomically across app instances, so concurrent sign-in attempts can no longer reuse the same valid TOTP code before another request records it
  • The same replay hardening now protects both the customer sign-in flow and the admin sign-in flow
3.6.18June 12, 2026

Alpha Preview Banner & Legal Status Refresh

3 changes
Improvement3 items
  • Added a slim alpha-status banner above the public site navigation so visitors can immediately see that current VAT Engine functionality is free during testing
  • Updated the public Terms and Privacy pages to make the alpha / pre-release status explicit and to clarify that features, workflows, and outputs may change while development continues
  • Refreshed shared public metadata so search, manifest, and legal-page descriptions no longer describe the product as production-ready while alpha testing is still in progress
3.6.16June 11, 2026

Homepage Account Menu & Cookie Banner Cleanup

4 changes
Improvement2 items
  • The homepage account trigger now keeps the same compact dropdown behavior as the customer area while staying lighter on first load for public visitors
  • Cookie controls now load after the main page content is on screen, reducing avoidable work during the initial homepage render on slower devices
Fix2 items
  • The homepage no longer falls back to the wrong standalone sign-in control when the shared account menu should be shown instead
  • Cookie-policy links now use clearer wording for search engines and assistive technology, and the public header status badge uses stronger contrast
3.6.15June 7, 2026

Search Indexing & Shopify Availability Controls

7 changes
Feature1 item
  • Added optional IndexNow publishing support with a hosted verification key file and an authenticated internal submission route that accepts only canonical public URLs
Improvement3 items
  • Public SEO metadata now uses tighter page descriptions, clearer Google and Bing crawler directives, and safer JSON-LD output across the homepage, docs, and public legal pages
  • Homepage and integration copy were refreshed so public search snippets and landing-page messaging reflect the current product surface more accurately
  • Documentation, roadmap, changelog, and public legal pages now expose breadcrumb trails and page-specific structured data that matches visible content more closely
Security3 items
  • Integration request handling now enforces guarded streaming body limits and safer form parsing before larger Shopify-related payloads reach deeper processing
  • The internal IndexNow submission route now rejects oversized JSON bodies and overlong submitted URL strings before they reach deeper validation or upstream search-engine submission
  • Authenticated IndexNow submission responses now trim unexpected upstream response bodies before echoing them back to internal automation callers
3.6.12June 4, 2026

Shopify Webhook & Privacy Endpoints

4 changes
Feature2 items
  • Added dedicated Shopify webhook and privacy endpoints as the first public inbound surfaces for storefront integrations
  • Added webhook payload retention windows, backfill support, and a reaper workflow so inbound deliveries can be replayed or purged intentionally
Security2 items
  • Shopify webhook handling is now exempted from the standard IP limiter where appropriate, while same-origin checks protect dashboard-triggered privacy retention changes
  • Manual resync controls are now disabled for integrations that are not importable, reducing invalid operator actions during connector troubleshooting
3.6.11June 3, 2026

Review Queue, Metrics & Integration Health

2 changes
Feature2 items
  • Added an imported-event review queue API and dashboard UI so merchants can inspect and resolve normalized events before they become filing-grade supply rows
  • Added operational metrics, health checks, and audit event tracking for commerce integrations to support safer rollout and troubleshooting
3.6.10June 2, 2026

Source Aliases & Product Tax Mapping

5 changes
Feature2 items
  • The Integrations workspace now lets teams keep stable source aliases for shop domains, external store IDs, sales-channel labels, fulfillment locations, and renamed storefronts
  • Product tax mapping rules can now classify product IDs, variant IDs, SKUs, tags, categories, and metafields into VAT treatment and supply-kind defaults before broader automation is switched on
Improvement2 items
  • Alias and catalog-classification rules can be kept account-wide or narrowed to a specific reporting source or storefront connection, making multi-store rollout safer
  • These integration setup rules prepare future sync behavior without rewriting historical filed data or hiding rows that still need review
Security1 item
  • Integration prep records stay isolated per account and validate conflicting live aliases or mapping scopes before they are saved