Shopify deprecates the PRIVATE and PUBLIC_READ metaobject admin access values
- Provider
- Shopify
- Endpoint
POST /admin/api/{version}/graphql.json- Effective
- 2027-01-01
- Severity
- low
- Change
- enum-added
- Status
- unverified (secondary reports only; SHAPI does not open fix PRs for it)
What changed
The PRIVATE and PUBLIC_READ values of the MetaobjectAdminAccess enum are deprecated and are never returned by the API; they go away with API version 2027-01.
What to do
Stop sending PRIVATE or PUBLIC_READ as a metaobject definition's admin access, and drop code that expects them back.
Sources
- Provider notice (2026-05-20)
Check your code
bash
npx shapi-cli scan .shapi scan lists the call sites this change affects; shapi fix repairs them test-first when the advisory has an automatic fix. All advisories · Markdown · OSV · JSON