Shopify

Shopify October 1 Script Tag Freeze and Extension Version Cutoffs

October 1 freezes script-tag writes, blocks updates for extensions on API 2025-07 or earlier, and makes API 2026-10 stable. Vendors must migrate before BFCM.

E-commerce 4 Internet Marketers Editorial

Small-business owner and developer reviewing October calendar deadlines at a shop counter
Illustration of a small-business owner and a developer checking October platform deadlines at a neighborhood shop counter in early autumn.

By E-commerce 4 Internet Marketers Editorial

Starting October 1, 2026, Shopify will reject new and updated storefront script tags across every Admin API version, according to Shopify’s developer changelog and storefront script-tag deprecation docs. The same date is when API version 2026-10 becomes stable and when Shopify CLI blocks updates for apps whose checkout or customer-account UI extensions still target API versions 2025-07 or earlier.

Age gates, shipping-ban matrices, specialty payment widgets, and claims disclosures that still depend on script tags or stale extension API versions are the compliance tooling most exposed. Existing script tags keep running after October 1, but apps that need to create or refresh tags on install will fail, and vendors stuck on old extension APIs will be unable to ship fixes before BFCM.

Script tag freeze on October 1, 2026

Shopify’s August 24, 2026 changelog, “Script tags are deprecated and will stop running on March 1, 2027,” states that beginning October 1, 2026, the scriptTagCreate and scriptTagUpdate GraphQL mutations return a user error, and the ScriptTag REST Admin API resource rejects POST and PUT. The deprecation applies to all API versions, including older ones, so pinning will not defer it.

Shopify’s storefront script-tag documentation repeats the timeline. On October 1, 2026, apps cannot create or update script tags. Existing tags keep running. On March 1, 2027, Shopify stops injecting script tags into storefronts. Read operations via the scriptTags query and deletes via scriptTagDelete continue to work so apps can audit and clean up.

Affected apps are those that create script tags with a display_scope of online_store. Order-status script tags sit on an earlier, separate deprecation path. Shopify’s replacement guidance is an app embed block shipped in a theme app extension for storefront JavaScript, or a web pixel when the script only collects analytics or conversion data.

From October 1, 2026, Shopify will also show a dismissible install banner when an app that still uses script tags is installed without shipping an app embed block or web pixel replacement.

Admin-created custom apps cannot use app extensions or web pixels. Shopify says those apps must move script behavior into the theme (custom Liquid where possible) or be replaced with a properly distributed app.

Extension version cutoff the same day

In a June 11, 2026 changelog on the Shopify AI Toolkit for upgrading checkout and customer account UI extensions to Polaris web components, Shopify states that Shopify CLI blocks apps from being updated if any extension is on an API version more than one year old. By October 1, 2026, any app that contains extensions on API versions 2025-07 or earlier will be unable to be updated. Shopify says API versions 2025-10 and later use Polaris web components by default and tells developers to upgrade.

That gate is separate from the script-tag freeze, but it lands on the same calendar day. A compliance app that still ships a checkout UI extension on 2025-07 cannot push a hotfix after October 1 until it migrates. Merchants who depend on that app for age verification or destination blocking inherit the vendor’s migration delay.

API version 2026-10 becomes stable

Shopify’s 2026-10 release notes state that 2026-10 is available as a release candidate for development testing until October 1, 2026, when it becomes stable. The notes flag action-required changes across GraphQL Admin API order and tax flows, metafield filters, Customer Account API removals (including the deprecated Customer.lastIncompleteCheckout field and classic Checkout subtree), and other surfaces.

App and custom-integration teams that pin Admin API versions should finish 2026-10 compatibility testing before they cut over, especially if they recalculate taxes on address changes, import multi-package fulfillments, or still query incomplete checkout objects through the Customer Account API.

Why compliance and specialty payment apps are in scope

Script tags have been a common way to inject storefront age prompts, geo warnings, and third-party widgets without theme edits. After October 1, new installs cannot receive that injection path. After March 1, 2027, leftover tags stop loading entirely. Apps that already migrated to theme app extensions and web pixels are aligned with Shopify’s stated path. Apps that still mint script tags during install leave merchants with a banner warning and a hard stop on March 1, 2027.

Checkout and customer-account UI extensions on current API versions remain the supported place for in-checkout and account UI. Shopify’s cart and checkout validation Function API lists age or ID verification among supported use cases and applies across checkout surfaces that include express wallets. Merchants should confirm with vendors whether enforcement lives in a Function and a supported extension, not only in a storefront script.

Specialty payment widgets that still rely on script injection for non-checkout pages face the same October create/update freeze and March 2027 stop-inject date.

What merchants and developers should confirm before October 1

  1. Ask each age-verification, shipping-restriction, claims, and specialty payment app whether it still creates script tags on install or settings save.
  2. Confirm checkout and customer-account UI extensions are on API 2025-10 or later so the vendor can still deploy after October 1.
  3. Audit installed script tags with the scriptTags query (or the vendor’s audit tooling) and delete tags only after the replacement is live on the published theme.
  4. Schedule 2026-10 Admin API and Customer Account API regression tests for custom integrations before adopting the stable version.
  5. For admin-created custom apps that cannot use extensions, plan a theme-embedded replacement or a rebuild on a distributable app before the March 1, 2027 injection stop.

Closing

October 1, 2026 freezes storefront script-tag creates and updates, blocks app updates for checkout and customer-account extensions still on API 2025-07 or earlier, and promotes API 2026-10 to stable. High-risk Shopify stores should get written migration dates from compliance and specialty payment vendors now, because a frozen install path or an un-updateable extension is harder to fix after BFCM traffic starts than before the cutoff.

Sources