Alpha testing: all current functionality is free while VAT Engine is in active development

Product updates

Changelog

Track customer-facing product improvements, security outcomes, and compliance reporting updates across VAT Engine.

Archive page 30 of 33.

Latest release
3.6.506
More Complete Blog Subscriptions
Releases tracked
392
Since January 2026
Logged changes
1225
Across customer-facing categories
SecurityFeatureImprovementFix
3.6.60June 23, 2026

Shopify Order Preview Import

2 changes
Feature1 item
  • Shopify storefront activity pages now include a controlled order-preview tool that can fetch one Shopify order, show the normalized VAT Engine events, and import them on demand
Improvement1 item
  • The preview flow also surfaces request health and import outcomes in one place, making it easier to validate a new Shopify connection before broader sync automation is enabled
3.6.59June 23, 2026

Shopify App Setup Visibility

2 changes
Feature1 item
  • The Integrations workspace now shows a shared Shopify app-setup summary so teams can verify connection readiness, requested permissions, and shared delivery status before reconnecting a store
Improvement1 item
  • Technical environment details such as callback URLs, webhook routing, and pinned API versions now live behind a collapsed developer-diagnostics section instead of filling the main merchant-facing view
3.6.58June 22, 2026

Dedicated Integration Activity Page

2 changes
Feature1 item
  • Each storefront connection now has its own activity page for recent deliveries, sync jobs, privacy requests, retention state, and operator actions instead of compressing that workflow into a modal
Improvement1 item
  • The Integrations catalog now stays focused on connection summaries and edit actions while deeper troubleshooting and replay workflows live on the dedicated activity screen
3.6.57June 22, 2026

Shopify Connect URL Reliability

1 change
Improvement1 item
  • The Integrations catalog layout was also reshaped into clearer responsive connection records so connected Shopify rows no longer clip or compress important status details
3.6.56June 18, 2026

Login Throttle Rebalance

1 change
Security1 item
  • Sign-in now slows repeated attempts against the same account sooner and adds extra source-level protection against automated login floods
3.6.32June 15, 2026

Docs Search Recovery

2 changes
Fix2 items
  • Documentation search now returns live matching results again instead of failing when you start typing in the docs search field
  • The public fallback error screen now uses the VAT Engine logo so branded recovery states stay consistent with the site header
3.6.25June 15, 2026

Safer Automated Abuse Signals

2 changes
Security1 item
  • Automated host blocking now focuses on clearer abusive traffic signals, reducing accidental bans on normal visitors
Fix1 item
  • Operational notes now reflect the narrower abuse-detection policy
3.6.20June 14, 2026

Atomic TOTP Replay Protection

2 changes
Security2 items
  • Accepted authenticator codes are now claimed atomically across app instances, so concurrent sign-in attempts can no longer reuse the same valid TOTP code before another request records it
  • The same replay hardening now protects both the customer sign-in flow and the admin sign-in flow
3.6.18June 12, 2026

Alpha Preview Banner & Legal Status Refresh

3 changes
Improvement3 items
  • Added a slim alpha-status banner above the public site navigation so visitors can immediately see that current VAT Engine functionality is free during testing
  • Updated the public Terms and Privacy pages to make the alpha / pre-release status explicit and to clarify that features, workflows, and outputs may change while development continues
  • Refreshed shared public metadata so search, manifest, and legal-page descriptions no longer describe the product as production-ready while alpha testing is still in progress
3.6.16June 11, 2026

Homepage Account Menu & Cookie Banner Cleanup

4 changes
Improvement2 items
  • The homepage account trigger now keeps the same compact dropdown behavior as the customer area while staying lighter on first load for public visitors
  • Cookie controls now load after the main page content is on screen, reducing avoidable work during the initial homepage render on slower devices
Fix2 items
  • The homepage no longer falls back to the wrong standalone sign-in control when the shared account menu should be shown instead
  • Cookie-policy links now use clearer wording for search engines and assistive technology, and the public header status badge uses stronger contrast
3.6.15June 7, 2026

Search Indexing & Shopify Availability Controls

7 changes
Feature1 item
  • Added optional IndexNow publishing support with a hosted verification key file and an authenticated internal submission route that accepts only canonical public URLs
Improvement3 items
  • Public SEO metadata now uses tighter page descriptions, clearer Google and Bing crawler directives, and safer JSON-LD output across the homepage, docs, and public legal pages
  • Homepage and integration copy were refreshed so public search snippets and landing-page messaging reflect the current product surface more accurately
  • Documentation, roadmap, changelog, and public legal pages now expose breadcrumb trails and page-specific structured data that matches visible content more closely
Security3 items
  • Integration request handling now enforces guarded streaming body limits and safer form parsing before larger Shopify-related payloads reach deeper processing
  • The internal IndexNow submission route now rejects oversized JSON bodies and overlong submitted URL strings before they reach deeper validation or upstream search-engine submission
  • Authenticated IndexNow submission responses now trim unexpected upstream response bodies before echoing them back to internal automation callers
3.6.12June 4, 2026

Shopify Webhook & Privacy Endpoints

4 changes
Feature2 items
  • Added dedicated Shopify webhook and privacy endpoints as the first public inbound surfaces for storefront integrations
  • Added webhook payload retention windows, backfill support, and a reaper workflow so inbound deliveries can be replayed or purged intentionally
Security2 items
  • Shopify webhook handling is now exempted from the standard IP limiter where appropriate, while same-origin checks protect dashboard-triggered privacy retention changes
  • Manual resync controls are now disabled for integrations that are not importable, reducing invalid operator actions during connector troubleshooting