Merge branch 'main' into dependabot/github_actions/actions-cool/issues-helper-3.6.3

Author: lizkenyon

.github/workflows/ci.yml

@@ -15,7 +15,7 @@ jobs:
       - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: Install PHP with extensions
-        uses: shivammathur/setup-php@20529878ed81ef8e78ddf08b480401e6101a850f # 2.35.3
+        uses: shivammathur/setup-php@bf6b4fbd49ca58e4608c9c89fba0b8d90bd2a39f # 2.35.5
         with:
           php-version: ${{ matrix.php-version }}
           tools: composer:v2, phpcs

BREAKING_CHANGES_FOR_V6.md

@@ -0,0 +1,84 @@
+# Breaking change notice for version 6.0.0
+
+## Removal of `ApiVersion::LATEST` constant
+
+The `ApiVersion::LATEST` constant has been removed to prevent semantic versioning (semver) breaking changes. Previously, this constant would automatically update every quarter when new API versions were released, causing unintended breaking changes for apps.
+
+### Migration Guide
+
+**If you were using the constant directly:**
+
+```php
+// Before (v5 and earlier)
+$apiVersion = ApiVersion::LATEST;
+
+// After (v6+)
+$apiVersion = '2025-07'; // Explicitly specify the version you want to use
+```
+
+**In your Context::initialize():**
+
+The `apiVersion` parameter is now **required** in `Context::initialize()`. You must explicitly specify which API version you want to use:
+
+```php
+// Before (v5 and earlier)
+Context::initialize(
+    apiKey: $_ENV['SHOPIFY_API_KEY'],
+    apiSecretKey: $_ENV['SHOPIFY_API_SECRET'],
+    scopes: $_ENV['SHOPIFY_APP_SCOPES'],
+    hostName: $_ENV['SHOPIFY_APP_HOST_NAME'],
+    sessionStorage: new FileSessionStorage('/tmp/php_sessions'),
+    // apiVersion was optional with default ApiVersion::LATEST
+);
+
+// After (v6+)
+Context::initialize(
+    apiKey: $_ENV['SHOPIFY_API_KEY'],
+    apiSecretKey: $_ENV['SHOPIFY_API_SECRET'],
+    scopes: $_ENV['SHOPIFY_APP_SCOPES'],
+    hostName: $_ENV['SHOPIFY_APP_HOST_NAME'],
+    sessionStorage: new FileSessionStorage('/tmp/php_sessions'),
+    apiVersion: '2025-07', // Now required - explicitly specify the version
+);
+```
+
+**Finding the right API version:**
+
+You can reference the available API versions in the `ApiVersion` class:
+
+```php
+use Shopify\ApiVersion;
+
+// Available constants (as of this release):
+ApiVersion::UNSTABLE      // "unstable"
+ApiVersion::JULY_2025     // "2025-07"
+ApiVersion::APRIL_2025    // "2025-04"
+ApiVersion::JANUARY_2025  // "2025-01"
+ApiVersion::OCTOBER_2024  // "2024-10"
+// ... and older versions
+```
+
+Or you can use string literals directly:
+
+```php
+Context::initialize(
+    // ... other parameters
+    apiVersion: '2025-07',
+);
+```
+
+**Why this change?**
+
+By requiring explicit version specification, apps can:
+- Control when they upgrade to new API versions
+- Test thoroughly before upgrading
+- Avoid unexpected breaking changes from automatic version updates
+- Follow semantic versioning principles more accurately
+
+**Recommended approach:**
+
+1. Review the [Shopify API Changelog](https://shopify.dev/changelog) to understand changes between versions
+2. Choose the API version that best suits your app's needs
+3. Explicitly specify that version in your `Context::initialize()` call
+4. Test your app thoroughly with the chosen version
+5. Upgrade to newer versions on your own schedule after proper testing

CHANGELOG.md

@@ -6,7 +6,9 @@ The format is based on [Keep a Changelog](http://keepachangelog.com/en/1.0.0/)
 and adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.html).
 
 ## Unreleased
+- ⚠️ [Breaking] Remove `ApiVersion::LATEST` constant to prevent semver violations. The `apiVersion` parameter is now required in `Context::initialize()`. Developers must explicitly specify API versions. See the [migration guide](BREAKING_CHANGES_FOR_V6.md#removal-of-apiversionlatest-constant) for details.
 - [#425](https://github.com/Shopify/shopify-api-php/pull/425) [Patch] Add compliance webhook topics
+- [#433](https://github.com/Shopify/shopify-api-php/pull/433) [Minor] Add support for 2025-10 API version
 
 ## v5.11.0 - 2025-07-10
 - [#418](https://github.com/Shopify/shopify-api-php/pull/416) [Minor] Add support for 2025-07 API version

docs/getting_started.md

@@ -19,7 +19,7 @@ The first thing your app will need to do to use this library is to set up your c
 | `scopes`          | `string \| array` |    Yes    |      -       | App scopes                                                                                                                                                                           |
 | `hostName`        | `string`          |    Yes    |      -       | App host name e.g. `my-app.my-domain.ca`. You may optionally include `https://` or `http://` to determine which scheme to use                                                        |
 | `sessionStorage`  | `SessionStorage`  |    Yes    |      -       | Session storage strategy. Read our [notes on session handling](issues.md#notes-on-session-handling) for more information                                                             |
-| `apiVersion`      | `string`          |    No     | `ApiVersion::LATEST` | App API version, defaults to `ApiVersion::LATEST`                                                                                                                                                |
+| `apiVersion`      | `string`          |    Yes    |      -       | App API version. You must explicitly specify which API version to use (e.g., `'2025-07'`, `'2024-10'`, etc.)                                                                         |
 | `isEmbeddedApp`   | `bool`            |    No     |    `true`    | Whether the app is an embedded app                                                                                                                                                   |
 | `isPrivateApp`    | `bool`            |    No     |   `false`    | Whether the app is a private app                                                                                                                                                     |
 | `userAgentPrefix` | `string`          |    No     |      -       | Prefix for user agent header sent with a request                                                                                                                                     |

src/ApiVersion.php

@@ -69,5 +69,5 @@ class ApiVersion
     /**
      * @var string
      */
-    public const LATEST = self::JULY_2025;
+    public const OCTOBER_2025 = "2025-10";
 }

src/Context.php

@@ -60,7 +60,7 @@ class Context
      * @param string|array         $scopes                          App scopes
      * @param string               $hostName                        App host name e.g. www.google.ca. May include scheme
      * @param SessionStorage       $sessionStorage                  Session storage strategy
-     * @param string               $apiVersion                      App API key, defaults to unstable
+     * @param string               $apiVersion                      App API version
      * @param bool                 $isEmbeddedApp                   Whether the app is an embedded app, defaults to true
      * @param bool                 $isPrivateApp                    Whether the app is a private app, defaults to false
      * @param string|null          $privateAppStorefrontAccessToken The Storefront API Access Token for a private app
@@ -77,7 +77,7 @@ public static function initialize(
         $scopes,
         string $hostName,
         SessionStorage $sessionStorage,
-        string $apiVersion = ApiVersion::LATEST,
+        string $apiVersion,
         bool $isEmbeddedApp = true,
         bool $isPrivateApp = false,
         ?string $privateAppStorefrontAccessToken = null,
@@ -93,6 +93,7 @@ public static function initialize(
             'apiSecretKey' => $apiSecretKey,
             'scopes' => implode((array)$scopes),
             'hostName' => $hostName,
+            'apiVersion' => $apiVersion,
         ];
         $missing = array();
         foreach ($requiredValues as $key => $value) {

src/Rest/Admin2025_10/AbandonedCheckout.php

@@ -0,0 +1,101 @@
+<?php
+
+/***********************************************************************************************************************
+* This file is auto-generated. If you have an issue, please create a GitHub issue.                                     *
+***********************************************************************************************************************/
+
+declare(strict_types=1);
+
+namespace Shopify\Rest\Admin2025_10;
+
+use Shopify\Auth\Session;
+use Shopify\Rest\Base;
+
+/**
+ * @property string|null $abandoned_checkout_url
+ * @property array|null $billing_address
+ * @property bool|null $buyer_accepts_marketing
+ * @property bool|null $buyer_accepts_sms_marketing
+ * @property string|null $cart_token
+ * @property string|null $closed_at
+ * @property string|null $completed_at
+ * @property string|null $created_at
+ * @property Currency|null $currency
+ * @property Customer|null $customer
+ * @property string|null $customer_locale
+ * @property int|null $device_id
+ * @property DiscountCode[]|null $discount_codes
+ * @property string|null $email
+ * @property string|null $gateway
+ * @property int|null $id
+ * @property string|null $landing_site
+ * @property array|null $line_items
+ * @property int|null $location_id
+ * @property string|null $note
+ * @property string|null $phone
+ * @property string|null $presentment_currency
+ * @property string|null $referring_site
+ * @property array|null $shipping_address
+ * @property array|null $shipping_lines
+ * @property string|null $sms_marketing_phone
+ * @property string|null $source_name
+ * @property string|null $subtotal_price
+ * @property array|null $tax_lines
+ * @property bool|null $taxes_included
+ * @property string|null $token
+ * @property string|null $total_discounts
+ * @property string|null $total_duties
+ * @property string|null $total_line_items_price
+ * @property string|null $total_price
+ * @property string|null $total_tax
+ * @property int|null $total_weight
+ * @property string|null $updated_at
+ * @property int|null $user_id
+ */
+class AbandonedCheckout extends Base
+{
+    public static string $API_VERSION = "2025-10";
+    protected static array $HAS_ONE = [
+        "currency" => Currency::class,
+        "customer" => Customer::class
+    ];
+    protected static array $HAS_MANY = [
+        "discount_codes" => DiscountCode::class
+    ];
+    protected static array $PATHS = [
+        ["http_method" => "get", "operation" => "checkouts", "ids" => [], "path" => "checkouts.json"],
+        ["http_method" => "get", "operation" => "checkouts", "ids" => [], "path" => "checkouts.json"]
+    ];
+
+    /**
+     * @param Session $session
+     * @param array $urlIds
+     * @param mixed[] $params Allowed indexes:
+     *     since_id,
+     *     created_at_min,
+     *     created_at_max,
+     *     updated_at_min,
+     *     updated_at_max,
+     *     status,
+     *     limit
+     *
+     * @return array|null
+     */
+    public static function checkouts(
+        Session $session,
+        array $urlIds = [],
+        array $params = []
+    ): ?array {
+        $response = parent::request(
+            "get",
+            "checkouts",
+            $session,
+            [],
+            $params,
+            [],
+        );
+
+        return $response->getDecodedBody();
+    }
+
+}

src/Rest/Admin2025_10/AccessScope.php

@@ -0,0 +1,47 @@
+<?php
+
+/***********************************************************************************************************************
+* This file is auto-generated. If you have an issue, please create a GitHub issue.                                     *
+***********************************************************************************************************************/
+
+declare(strict_types=1);
+
+namespace Shopify\Rest\Admin2025_10;
+
+use Shopify\Auth\Session;
+use Shopify\Rest\Base;
+
+/**
+ * @property string $handle
+ * @property array[]|null $access_scopes
+ */
+class AccessScope extends Base
+{
+    public static string $API_VERSION = "2025-10";
+    protected static array $HAS_ONE = [];
+    protected static array $HAS_MANY = [];
+    protected static ?string $CUSTOM_PREFIX = "/admin/oauth";
+    protected static array $PATHS = [
+        ["http_method" => "get", "operation" => "get", "ids" => [], "path" => "access_scopes.json"]
+    ];
+
+    /**
+     * @param Session $session
+     * @param array $urlIds
+     * @param mixed[] $params
+     *
+     * @return AccessScope[]
+     */
+    public static function all(
+        Session $session,
+        array $urlIds = [],
+        array $params = []
+    ): array {
+        return parent::baseFind(
+            $session,
+            [],
+            $params,
+        );
+    }
+
+}