---
title: "Commerce API migration calendar"
source: https://www.crm-sync.dev/pages/difference#calendar
updated: 2026-09-29
---
# Commerce API migration calendar

Google Merchant API, Google Ads and Analytics, Shopify GraphQL, and the EU product rules, as dated events.
Dates marked TBA have not been announced by the authority.

| Date | Authority | Event |
|---|---|---|
| 2024-03-06 | Google | Consent Mode v2 becomes mandatory for EEA/UK ads measurement and audiences |
| 2024-04 | Shopify | GraphQL product APIs raise the variant ceiling from 100 to 2,048 - GraphQL only, and REST stays capped at 100 with no error explaining why |
| 2024-10-01 | Shopify | REST Admin API declared legacy |
| 2024-12-10 | EU | Cyber Resilience Act enters into force - the clock starts, obligations phase in across the following three years |
| 2025-02-01 | Shopify | Public apps forced onto the new GraphQL product APIs - anything on the older GraphQL or REST product APIs had to migrate |
| 2025-04 | Shopify | New apps must use the GraphQL Admin API |
| 2025-05 | Google | The channel field is deprecated on data sources and products - anything keying on channel in reporting or reconciliation is reading a field with an end date |
| 2025-11 | YouTube | Affiliate analytics arrive - creator, content and product-level data becomes retrievable |
| 2025-12-10 | Shopify | Web pixel payloads null email, phone, name and address for apps without approved protected-customer-data access |
| 2026-01 | Google | Affiliate performance reporting lands in Reports v1alpha - parity with the Merchant Center reports, through the API |
| 2026-01-13 | Shopify | Marketing app pixels default to Optimized - Shopify may pause some or all of a pixel's data sharing on its own judgement |
| 2026-02-28 | Google | Merchant API v1beta retired - integrations must be on v1 |
| 2026-04-01 | Shopify | Expiring offline access tokens required for new public apps - the Admin credential lasts 60 minutes and renews from a 90-day refresh token |
| 2026-04-01 | Google | Customer Match uploads leave the Google Ads API for the Data Manager API - projects with no recent uploads get CUSTOMER_NOT_ALLOWLISTED |
| 2026-04-14 | Google | Merchant Center begins warning on images below the updated minimum resolution - warnings only, enforcement follows in 2027 |
| 2026-05 | Google | Merchant API MCP Access Service ships in alpha - fourteen tools, read-only and low-risk writes, making Merchant Center data agent-readable |
| 2026-06-11 | EU | Cyber Resilience Act Chapter IV applies - notification of conformity assessment bodies, and the assessment market opens |
| 2026-06-15 | Google | Consent Mode ad_storage becomes the sole control of the GA4 to Google Ads flow; the Signals toggle is retired |
| 2026-06-15 | Google | Offline conversion imports and enhanced conversions for leads leave the Google Ads API for the Data Manager API |
| 2026-08-18 | Google | Content API for Shopping shuts down - product feeds ride the Merchant API only |
| 2026-08-26 | Shopify | Additional scripts stop running on non-Plus Thank you and Order status pages - tracking must come from Customer Events |
| 2026-09-10 | Shopify | Shopify moves its own mobile apps from React Native to Swift and Kotlin - a signal about its apps, not a developer deadline |
| 2026-09-11 | EU | Cyber Resilience Act reporting obligations begin - actively exploited vulnerabilities need an early warning within 24 hours, full notification within 72, final report within 14 days |
| 2026-10 | Shopify | Customer Account API removes Customer.lastIncompleteCheckout and the Checkout Classic types |
| 2026-10-01 | Shopify | Script tag create and update calls fail in GraphQL and REST - tags already installed keep running until March 2027 |
| 2026-10-01 | Shopify | Checkout and customer-account extensions must complete the move to Polaris web components |
| 2026-10-07 | Google | Google Ads API v22 sunset - every v22 request fails |
| 2026-10-16 | Shopify | API version 2025-10 retired - requests fall forward to the oldest supported version and still return 200 |
| 2026-H2 (TBA) | Google | Second consolidation wave - ads personalization moves out of GA4 into Google Ads under ad_personalization, and tag-collected IP addresses are encrypted and flow to the linked Ads account |
| 2026-H2 (TBA) | Shopify | Final sunset date for legacy customer accounts to be announced - deprecation already in force |
| 2026-12-01 | Shopify | Returns and subscription apps must sign customers in through the Customer Account API to keep Built for Shopify status |
| 2026-12-31 | Shopify | React Native open-source maintenance ends - Restyle is archived with support stopping, Skia sponsorship ends and the maintainer forks it under a new package name, and FlashList drops to critical fixes only while stewardship is sought. This is the developer deadline the September announcement was not |
| 2027-01 | Shopify | Fields deprecated in the 2026-10 release are removed |
| 2027-01-01 | Shopify | Expiring offline access tokens required for all public apps - a non-expiring token gets authentication errors |
| 2027-01-01 | Shopify | POS Liquid receipt templates are converted automatically |
| 2027-01-31 | Google | Minimum image resolution is enforced in Merchant Center - offers below it stop being eligible, having been warned since April 2026 |
| 2027-02-01 | YouTube | Partner Programme thresholds roughly double - 1,000 subscribers plus 8,000 watch hours in 365 days or 20 million Shorts views in 90; Shopping affiliate needs YPP, so the gate in front of it rises |
| 2027-02-18 | EU | Battery Digital Product Passport becomes mandatory - relevant batteries must carry a passport reachable by QR code, and this is the first hard QR mandate |
| 2027-03-01 | Shopify | Script tags stop running on storefronts |
| 2027 | EU | Aluminium, textiles and tyres join the Digital Product Passport scope, alongside measures on secondary materials, product lifespan and recyclability |
| 2027-12-11 | EU | Cyber Resilience Act main obligations apply - essential requirements, conformity assessment, technical documentation, CE marking and SBOM |
| 2027-12-31 | GS1 | Sunrise 2027 - retail point-of-sale expected to scan 2D barcodes (GS1 Digital Link) |
| 2028-2029 | EU | Packaging Digital Product Passport delegated acts expected - specifying the exact data requirements and formats per packaging category |
| 2030 | EU | Packaging and Packaging Waste Regulation - QR codes on all packaging carrying recycling and material composition data |

- Calendar: https://www.crm-sync.dev/pages/difference#calendar
- The eight-week brief, with sources: https://www.crm-sync.dev/pages/knowledge-base#shopify-and-google-sunsets
- Same record as JSON: the `crm-migration-timeline` script on the calendar page