Alpha testing: all current functionality is free while VAT Engine is in active development

VAT Engine logo
Product updates

Changelog

Track product releases, security hardening, compliance reporting work, and infrastructure changes across VAT Engine.

Archive page 4 of 14.

Latest release
3.6.112
Production Frontend Now Redirects www To The Canonical Apex Host
Releases tracked
162
Since January 2026
Logged changes
755
Across all categories
SecurityFeatureImprovementFixInfrastructure

Showing releases 37-48 of 162

3.6.76June 28, 2026

Header Loading And Integrations Hardening

2 changes
Fix1 item
  • The public-site header now shows a visible loading spinner for the account action slot, using the same shared button styling as the rest of the project instead of an empty placeholder box while auth state and the user menu are still loading
Improvement1 item
  • The dashboard integrations page now tolerates partial or older Shopify app-configuration payloads without crashing into the dashboard error screen, and the header loading fallback keeps the same button footprint as the final account control so hydration stays visually stable on smaller screens
3.6.75June 28, 2026

Shopify Historical Coverage Visibility

2 changes
Feature1 item
  • Shopify integration activity pages now show whether a store is still limited to recent order history, has approved historical access but still needs a first backfill, or already has queued, running, or completed historical import coverage
Improvement1 item
  • Historical Shopify coverage now stays visible through a dedicated access-state summary without marking every default `read_orders`-only install as a generic integration warning
3.6.74June 28, 2026

Shopify Minimal Data Gate

2 changes
Security1 item
  • Shopify installs are now limited to VAT Engine's current minimal permission set, so broader customer-data access cannot be enabled accidentally on a deployment
Improvement1 item
  • The integrations workspace and per-store activity view now show the Shopify data-minimization posture and the narrower field policy used for order fetches
3.6.73June 28, 2026

Shopify Privacy Fulfillment Review

2 changes
Feature1 item
  • Shopify privacy requests now run through a background review worker that can automatically complete safe customer-redaction and customer-data cases instead of leaving every request fully manual
Improvement1 item
  • Integration activity pages now show the Shopify privacy-review cadence and explain which requests still require operator export or remaining metadata cleanup
3.6.72June 28, 2026

Shopify Webhook Fail-Closed Minimization

2 changes
Security1 item
  • Supported Shopify operational webhooks no longer fall back to storing the full verified body when VAT Engine cannot reduce the payload to the expected replay identifiers safely
Improvement1 item
  • Those minimization failures are now recorded as metadata-only webhook failures instead of queueing replay from broader retained payload data
3.6.71June 28, 2026

Shopify Throttle Telemetry Boundary

2 changes
Security1 item
  • Shopify activity pages now suppress live Admin API throttle diagnostics when the same storefront is linked in more than one VAT Engine account on the same deployment
Improvement1 item
  • Customer-visible Shopify throttle diagnostics no longer expose low-level request identifiers in the browser
3.6.70June 28, 2026

Shopify Webhook Data Minimization

2 changes
Security1 item
  • Supported Shopify order, refund, and uninstall webhooks now retain only the minimal identifiers VAT Engine needs for safe replay instead of keeping broader operational payload data
Improvement1 item
  • Shopify connection repair now reapplies the payload-filter settings VAT Engine expects, so older webhook subscriptions stop drifting back to full delivery bodies
3.6.69June 28, 2026

Shopify Bulk Download Hardening

2 changes
Security1 item
  • Shopify historical backfill now rejects signed bulk-result URLs that resolve to loopback, link-local, private, or other blocked destinations before VAT Engine downloads them server-side
Improvement1 item
  • Completed Shopify bulk downloads now honor Shopify's reported file size when available, unknown-size results are capped, and malformed oversized JSONL lines fail closed instead of consuming unbounded worker memory
3.6.68June 25, 2026

Shopify Webhook Subscription Repair

2 changes
Feature1 item
  • Connecting or reconnecting a Shopify store now also verifies the store-specific operational webhook subscriptions that VAT Engine needs for automated order, refund, and uninstall updates
Improvement1 item
  • Shopify activity pages now show live webhook-subscription health per topic and offer a repair action when Shopify still points to an old receiver URL or has lost registration state
3.6.67June 25, 2026

Shopify Throttle Compose Wiring

1 change
Fix1 item
  • Local, develop, and production Docker Compose API services now forward the Shopify per-store GraphQL throttle-concurrency setting into the container, so deployment overrides for that control actually take effect
3.6.66June 25, 2026

Shopify GraphQL Throttle Guard

2 changes
Improvement1 item
  • Shopify connections now use a shared same-store Admin API throttle guard in the background, which smooths repeated sync and preview calls when Shopify reports a tight GraphQL bucket
Feature1 item
  • Storefront activity pages now show a live Shopify Admin API throttle snapshot for the current API process, including bucket availability, restore rate, wait history, and recent throttle signals
3.6.65June 25, 2026

Shopify Backfill Cancellation Guard

2 changes
Fix1 item
  • Shopify sync-job cancellation is now explicitly limited to historical bulk backfill jobs, so internal dashboard calls cannot cancel webhook-processing work into a stale delivery state
Improvement1 item
  • The cancellation response now explains that only queued or running Shopify historical backfill jobs are operator-cancelable, matching the activity-page controls