shopify_api 9.0.0 → 10.1.0

data/CHANGELOG.md

@@ -1,429 +1,537 @@
-== Version 9.0.0
+# Changelog
 
-* Breaking change: Improved GraphQL client [#672](https://github.com/Shopify/shopify_api/pull/672). See the [client docs](docs/graphql.md) for usage and a migration guide.
+Note: For changes to the API, see https://shopify.dev/changelog?filter=api
 
-* Added options hash to create_permission_url and makes redirect_uri required [#670](https://github.com/Shopify/shopify_api/pull/670)
+## Unreleased
 
-* Release new Endpoint `fulfillment_order.locations_for_move` in 2020-01 REST API version [#669](https://github.com/Shopify/shopify_api/pull/669)
+## Version 10.1.0
 
-* Release new Endpoints for `fulfillment` in 2020-01 REST API version [#639](https://github.com/Shopify/shopify_api/pull/639):
-  * `fulfillment.create` with `line_items_by_fulfillment_order`
-  * `fulfillment.update_tracking`
-  * `fulfillment.cancel`
+- [#933](https://github.com/Shopify/shopify_api/pull/933) Fix syntax of GraphQL query in `Webhooks.get_webhook_id` method by removing extra curly brace
+- [#941](https://github.com/Shopify/shopify_api/pull/941) Fix `to_hash` to return readonly attributes, unless being used for serialize the object for saving - fix issue [#930](https://github.com/Shopify/shopify_api/issues/930)
+- [#959](https://github.com/Shopify/shopify_api/pull/959) Update `LATEST_SUPPORTED_ADMIN_VERSION` to `2022-04` to align it with the current value
 
-* Release new Endpoints for `fulfillment_order` in 2020-01 REST API version [#637](https://github.com/Shopify/shopify_api/pull/637):
-  * `fulfillment_order.fulfillment_request`
-  * `fulfillment_order.fulfillment_request.accept`
-  * `fulfillment_order.fulfillment_request.reject`
-  * `fulfillment_order.cancellation_request`
-  * `fulfillment_order.cancellation_request.accept`
-  * `fulfillment_order.cancellation_request.reject`
+## Version 10.0.3
 
-* Release new Endpoints `fulfillment_order.move`, `fulfillment_order.cancel` and `fulfillment_order.close` in 2020-01 REST API version [#635](https://github.com/Shopify/shopify_api/pull/635)
+### Fixed
 
-* Release new Endpoint `order.fulfillment_orders`, and active resources `AssignedFulfillmentOrder` and `FulfillmentOrder` in 2020-01 REST API version [#633](https://github.com/Shopify/shopify_api/pull/633)
+- [#935](https://github.com/Shopify/shopify_api/pull/935) Fix issue [#931](https://github.com/Shopify/shopify_api/pull/931), weight of variant should be float
+- [#944](https://github.com/Shopify/shopify_api/pull/944) Deprecated the `validate_shop` method from the JWT class since we can trust the token payload, since it comes from Shopify.
 
-== Version 8.1.0
+## Version 10.0.2
 
-* Release 2020-01 REST ADMIN API VERSION [#656](https://github.com/Shopify/shopify_api/pull/656)
-* Release new Endpoint `collection.products` and `collection.find()` in 2020-01 REST API version [#657](https://github.com/Shopify/shopify_api/pull/657)
-* Enrich 4xx errors with error message from response body [#647](https://github.com/Shopify/shopify_api/pull/647)
-* Make relative cursor based pagination work across page loads [#625](https://github.com/Shopify/shopify_api/pull/625)
-* Small ruby compat fix [#623](https://github.com/Shopify/shopify_api/pull/623)
-* Small consistency change [#621](https://github.com/Shopify/shopify_api/pull/621)
+- [#929](https://github.com/Shopify/shopify_api/pull/929) Aligning sorbet dependencies
 
-== Version 8.0.0
+## Version 10.0.1
 
-* Api Version changes [#600](https://github.com/Shopify/shopify_api/pull/600)
-  * Remove static Api Version definitions.
-  * Introduces Api Version lookup modes: `:define_on_unknown` and `:raise_on_unknown`
-  * See [migration notes](README.md#-breaking-change-notice-for-version-800-)
-* `Session.valid?` checks that api_version `is_a?(ApiVersion)` instead of `present?`
-* `ApiVersion::NullVersion` cannot be instantiated and now has a `match?` method [#615](https://github.com/Shopify/shopify_api/pull/615/files)
-* Introduces new Collection endpoint for looking up products without knowing collection type. Only available if ApiVersion is `:unstable` [#609](https://github.com/Shopify/shopify_api/pull/609)
+### Fixed
 
-== Version 7.1.0
+- [#919](https://github.com/Shopify/shopify_api/pull/919) Allow REST resources to configure a deny list of attributes to be excluded when saving
+- [#920](https://github.com/Shopify/shopify_api/pull/920) Set all values received from the API response to REST resource objects, and allow setting / getting attributes with special characters (such as `?`)
+- [#927](https://github.com/Shopify/shopify_api/pull/927) Fix the `ShopifyAPI::AdminVersions` module for backward compatibility
 
-* Add 2019-10 to known API versions
-* Add support for cursor pagination [#594](https://github.com/Shopify/shopify_api/pull/594) and
-[#611](https://github.com/Shopify/shopify_api/pull/611)
-* `ShopifyAPI::Base.api_version` now defaults to `ShopifyAPI::ApiVersion::NullVersion` instead of `nil`. Making requests without first setting an ApiVersion raises `ApiVersionNotSetError` instead of `NoMethodError: undefined method 'construct_api_path' for nil:NilClass'` [#605](https://github.com/Shopify/shopify_api/pull/605)
+## Version 10.0.0
 
-== Version 7.0.2
+- Major update to the library to provide _all_ essential functions needed for a Shopify app, supporting embedded apps with session tokens. See the [full list of changes](https://github.com/Shopify/shopify_api#breaking-change-notice-for-version-1000) here
 
-* Add 2019-07 to known API versions.
+## Version 9.5.1
 
-== Version 7.0.1
+- [#891](https://github.com/Shopify/shopify_api/pull/891) Removed the upper bound on the `activeresource` dependency to allow apps to use the latest version
 
-* Support passing version string to `ShopifyAPI::Base.api_version` [#563](https://github.com/Shopify/shopify_api/pull/563)
+## Version 9.5
 
-== Version 7.0.0
+- [#883](https://github.com/Shopify/shopify_api/pull/883) Add support for Ruby 3.0
 
-* Removed support for `ActiveResouce` < `4.1`.
-* Removed `ShopifyAPI::Oauth`.
-* Added api version support, See [migration
-notes](README.md#-breaking-change-notice-for-version-700-)
-* Changed `ShopifyAPI::Session` method signatures from positional to keyword
-arguments, See [migration notes](README.md#-breaking-change-notice-for-version-700-)
-* Add support for newer call limit header `X-Shopify-Shop-Api-Call-Limit`.
-* Removed all Ping resources.
+## Version 9.4.1
 
-== Version 6.0.0
+- [#847](https://github.com/Shopify/shopify_api/pull/847) Update `create_permission_url` method to use grant_options
+- [#852](https://github.com/Shopify/shopify_api/pull/852) Bumping kramdown to fix a security vulnerability
 
-* Removed undocumented `protocol` and `port` options from `ShopifyAPI::Session`.
+## Version 9.4.0
 
-== Version 5.2.4
+- [#843](https://github.com/Shopify/shopify_api/pull/843) Introduce a new `access_scopes` attribute on the Session class.
+  - Specifying this in the Session constructor is optional. By default, this attribute returns `nil`.
 
-* Added `currency` parameter to `ShopifyAPI::Order#capture`. This parameter is required for apps that belong to the
-multi-currency beta program.
+## Version 9.3.0
 
-== Version 5.2.3
+- [#797](https://github.com/Shopify/shopify_api/pull/797) Release new Endpoint `fulfillment_order.open` and `fulfillment_order.reschedule`.
 
-* Update delivery confirmation resource to delivery confirmation details resource.
+- [#818](https://github.com/Shopify/shopify_api/pull/818) Avoid depending on ActiveSupport in Sesssion class.
 
-== Version 5.2.2
+- Freeze all string literals. This should have no impact unless your application is modifying ('monkeypatching') the internals of the library in an unusual way.
 
-* Add delivery confirmation endpoint to Ping resources.
+- [#802](https://github.com/Shopify/shopify_api/pull/802) Made `inventory_quantity` a read-only field in Variant
 
-== Version 5.2.1
+- [#821](https://github.com/Shopify/shopify_api/pull/821) Add logging based on environment variable, move log subscriber out of `detailed_log_subscriber`.
+  The `ActiveResource::DetailedLogSubscriber` no longer automatically attaches when the class is loaded. If you were previously relying on that behaviour, you'll now need to call `ActiveResource::DetailedLogSubscriber.attach_to(:active_resource_detailed)`. (If using the new `SHOPIFY_LOG_PATH` environment setting then this is handled for you).
 
-* Log warning when Shopify indicates deprecated API call was performed
+- Provide `ApiAccess` value object to encapsulate scope operations [#829](https://github.com/Shopify/shopify_api/pull/829)
 
-== Version 5.2.0
+## Version 9.2.0
 
-* Added `ShopifyAPI::Currency` to fetch list of supported currencies on a shop
-* Added `ShopifyAPI::TenderTransaction` to fetch list of transactions on a shop
-* Fixed bug with X-Shopify-Checkout-Version on ShopifyAPI::Checkout header being applied to all requests
+- Removes the `shopify` binary which will be used by the Shopify CLI
 
-== Version 5.1.0
+## Version 9.1.1
 
-* Added `ShopifyAPI::Publications`
-* Added `ShopifyAPI::ProductPublications`
-* Added `ShopifyAPI::CollectionPublications`
-* Added support for new collection products endpoint from `ShopifyAPI::Collection#products`
+- Make cursor based pagination return relative uri's when fetching next and previous pages. [#726](https://github.com/Shopify/shopify_api/pull/726)
 
-== Version 5.0.0
+## Version 9.1.0
 
-* Breaking change: `ShopifyAPI::Checkout` now maps to the Checkout API, rather than the Abandoned Checkouts API
-  * See the README for more details
-* Added `ShopifyAPI::AbandonedCheckout`
-* Added support for X-Shopify-Checkout-Version header on `ShopifyAPI::Checkout`
-* Added `ShopifyAPI::ShippingRate`
-* Added `ShopifyAPI::Payment`
-* Added support for `Checkout::complete` endpoint
-* Fixed session handling support for Rails 5.2.1
+- Implements equality operator on `Session` [#714](https://github.com/Shopify/shopify_api/pull/714)
 
-== Version 4.13.0
-* Added `ShopifyAPI::ApiPermission` resource for uninstalling an application
-* Added a deprecation warning to `ShopifyAPI::OAuth`
+## Version 9.0.4
 
-== Version 4.12.0
+- Contains [#708](https://github.com/Shopify/shopify_api/pull/708) which is a revert for [#655](https://github.com/shopify/shopify_api/pull/655) due to the deprecated inventory parameters not being removed correctly in some cases
 
-* Added support for the GraphQL API
+## Version 9.0.3
 
-== Version 4.11.0
+- We now raise a `ShopifyAPI::ValidationException` exception when clients try to use `Product` and `Variant` with deprecated inventory-related fields in API version `2019-10` or later. [#655](https://github.com/shopify/shopify_api/pull/655) Deprecation and migration information can be found in the following documents:
+  - [Product Variant REST API Reference](https://shopify.dev/docs/admin-api/rest/reference/products/product-variant)
+  - [Migrate your app to support multiple locations](https://shopify.dev/tutorials/migrate-your-app-to-support-multiple-locations)
+  - [Manage product inventory with the Admin API](https://shopify.dev/tutorials/manage-product-inventory-with-admin-api)
+- Added support for the Discount Code API batch endpoints [#701](https://github.com/shopify/shopify_api/pull/701)
+  - [Create](https://shopify.dev/docs/admin-api/rest/reference/discounts/discountcode#batch_create-2020-01)
+  - [Show](https://shopify.dev/docs/admin-api/rest/reference/discounts/discountcode#batch_show-2020-01)
+  - [List](https://shopify.dev/docs/admin-api/rest/reference/discounts/discountcode#batch_discount_codes_index-2020-01)
+- Fix issue in the README to explicitly say clients need to require the `shopify_api` gem [#700](https://github.com/Shopify/shopify_api/pull/700)
 
-* Added `ShopifyAPI::InventoryItem`
-* Added `ShopifyAPI::InventoryLevel`
-* Added `#inventory_levels` method to `ShopifyAPI::Location`
+## Version 9.0.2
 
-== Version 4.10.0
+- Added optional flag passed to `initialize_clients` to prevent from raising the `InvalidSchema` exception [#693](https://github.com/Shopify/shopify_api/pull/693)
 
-* Added `ShopifyAPI::AccessScope`
+## Version 9.0.1
 
-== Version 4.9.1
+- Added warning message if API version used is unsupported or soon to be unsupported [#685](https://github.com/Shopify/shopify_api/pull/685)
+- Take into account "errors" messages from response body [#677](https://github.com/Shopify/shopify_api/pull/677)
 
-* Fix a bug with custom properties for orders
+## Version 9.0.0
 
-== Version 4.9.0
+- Breaking change: Improved GraphQL client [#672](https://github.com/Shopify/shopify_api/pull/672). See the [client docs](docs/graphql.md) for usage and a migration guide.
 
-* Added `ShopifyAPI::PriceRule`
-* Added `ShopifyAPI::DiscountCode`
+- Added options hash to create_permission_url and makes redirect_uri required [#670](https://github.com/Shopify/shopify_api/pull/670)
 
-== Version 4.8.0
+- Release new Endpoint `fulfillment_order.locations_for_move` in 2020-01 REST API version [#669](https://github.com/Shopify/shopify_api/pull/669)
 
-* Added `add_engagements` to `ShopifyAPI::MarketingEvent`
+- Release new Endpoints for `fulfillment` in 2020-01 REST API version [#639](https://github.com/Shopify/shopify_api/pull/639):
 
-== Version 4.7.1
+  - `fulfillment.create` with `line_items_by_fulfillment_order`
+  - `fulfillment.update_tracking`
+  - `fulfillment.cancel`
 
-* Added support for URL parameter (e.g. limit & page) to ShopifyAPI::Metafields
-* Added support for URL parameter (e.g. limit & page) to metafield operator in ShopifyAPI::Shop
+- Release new Endpoints for `fulfillment_order` in 2020-01 REST API version [#637](https://github.com/Shopify/shopify_api/pull/637):
 
-== Version 4.7.0
+  - `fulfillment_order.fulfillment_request`
+  - `fulfillment_order.fulfillment_request.accept`
+  - `fulfillment_order.fulfillment_request.reject`
+  - `fulfillment_order.cancellation_request`
+  - `fulfillment_order.cancellation_request.accept`
+  - `fulfillment_order.cancellation_request.reject`
 
-* Removed the mandatory `application_id` parameter from `ShopifyAPI::ProductListing` and `ShopifyAPI::CollectionListing`
-* Fixed a bug related to the non-standard primary key for `ShopifyAPI::ProductListing` and `ShopifyAPI::CollectionListing`
+- Release new Endpoints `fulfillment_order.move`, `fulfillment_order.cancel` and `fulfillment_order.close` in 2020-01 REST API version [#635](https://github.com/Shopify/shopify_api/pull/635)
 
-== Version 4.6.0
+- Release new Endpoint `order.fulfillment_orders`, and active resources `AssignedFulfillmentOrder` and `FulfillmentOrder` in 2020-01 REST API version [#633](https://github.com/Shopify/shopify_api/pull/633)
 
-* Added `ShopifyAPI::Report`
+## Version 8.1.0
 
-== Version 4.5.0
+- Release 2020-01 REST ADMIN API VERSION [#656](https://github.com/Shopify/shopify_api/pull/656)
+- Release new Endpoint `collection.products` and `collection.find()` in 2020-01 REST API version [#657](https://github.com/Shopify/shopify_api/pull/657)
+- Enrich 4xx errors with error message from response body [#647](https://github.com/Shopify/shopify_api/pull/647)
+- Make relative cursor based pagination work across page loads [#625](https://github.com/Shopify/shopify_api/pull/625)
+- Small ruby compat fix [#623](https://github.com/Shopify/shopify_api/pull/623)
+- Small consistency change [#621](https://github.com/Shopify/shopify_api/pull/621)
 
-* Added `ShopifyAPI::MarketingEvent`
+## Version 8.0.0
 
-== Version 4.4.0
+- Api Version changes [#600](https://github.com/Shopify/shopify_api/pull/600)
+  - Remove static Api Version definitions.
+  - Introduces Api Version lookup modes: `:define_on_unknown` and `:raise_on_unknown`
+  - See [migration notes](README.md#-breaking-change-notice-for-version-800-)
+- `Session.valid?` checks that api_version `is_a?(ApiVersion)` instead of `present?`
+- `ApiVersion::NullVersion` cannot be instantiated and now has a `match?` method [#615](https://github.com/Shopify/shopify_api/pull/615/files)
+- Introduces new Collection endpoint for looking up products without knowing collection type. Only available if ApiVersion is `:unstable` [#609](https://github.com/Shopify/shopify_api/pull/609)
 
-* Added `ShopifyAPI::CustomerInvite`
-* Support for Customer#send_invite endpoint
+## Version 7.1.0
 
-== Version 4.3.8
+- Add 2019-10 to known API versions
+- Add support for cursor pagination [#594](https://github.com/Shopify/shopify_api/pull/594) and
+  [#611](https://github.com/Shopify/shopify_api/pull/611)
+- `ShopifyAPI::Base.api_version` now defaults to `ShopifyAPI::ApiVersion::NullVersion` instead of `nil`. Making requests without first setting an ApiVersion raises `ApiVersionNotSetError` instead of `NoMethodError: undefined method 'construct_api_path' for nil:NilClass'` [#605](https://github.com/Shopify/shopify_api/pull/605)
 
-* Added `ShopifyAPI::ResourceFeedback`
+## Version 7.0.2
 
-== Version 4.3.7
+- Add 2019-07 to known API versions.
 
-* Added support for `complete` in `ShopifyAPI::DraftOrder`
+## Version 7.0.1
 
-== Version 4.3.6
+- Support passing version string to `ShopifyAPI::Base.api_version` [#563](https://github.com/Shopify/shopify_api/pull/563)
 
-* Fixed the `customer_saved_search_id` param in `ShopifyAPI::CustomerSavedSearch#customers`.
+## Version 7.0.0
 
-== Version 4.3.5
+- Removed support for `ActiveResouce` < `4.1`.
+- Removed `ShopifyAPI::Oauth`.
+- Added api version support, See [migration
+  notes](README.md#-breaking-change-notice-for-version-700-)
+- Changed `ShopifyAPI::Session` method signatures from positional to keyword
+  arguments, See [migration notes](README.md#-breaking-change-notice-for-version-700-)
+- Add support for newer call limit header `X-Shopify-Shop-Api-Call-Limit`.
+- Removed all Ping resources.
 
-* Added support for online mode access tokens, token expiry, and associated_user information.
-* Added `ShopifyAPI::DraftOrder`
-* Added `ShopifyAPI::DraftOrderInvoice`
+## Version 6.0.0
 
-== Version 4.3.4
+- Removed undocumented `protocol` and `port` options from `ShopifyAPI::Session`.
 
-* Added `ShopifyAPI::ProductListing`
-* Added `ShopifyAPI::CollectionListing`
+## Version 5.2.4
 
-== Version 4.3.3
+- Added `currency` parameter to `ShopifyAPI::Order#capture`. This parameter is required for apps that belong to the
+  multi-currency beta program.
 
-* Added `ShopifyAPI::StorefrontAccessToken`
+## Version 5.2.3
 
-== Version 4.3.2
+- Update delivery confirmation resource to delivery confirmation details resource.
 
-* Relax Ruby version requirement to >= `2.0`
+## Version 5.2.2
 
-== Version 4.3.1
+- Add delivery confirmation endpoint to Ping resources.
 
-* Support for ShopifyAPI::ApplicationCredit
+## Version 5.2.1
 
-== Version 4.3.0
+- Log warning when Shopify indicates deprecated API call was performed
 
-* Require Ruby >= `2.3.0`
-* Use inheritance instead of the deprecated Rails `Module#alias_method_chain`
+## Version 5.2.0
 
-== Version 4.2.2
+- Added `ShopifyAPI::Currency` to fetch list of supported currencies on a shop
+- Added `ShopifyAPI::TenderTransaction` to fetch list of transactions on a shop
+- Fixed bug with X-Shopify-Checkout-Version on ShopifyAPI::Checkout header being applied to all requests
 
-* Support for AccessToken#delegate endpoint
+## Version 5.1.0
 
-== Version 4.2.1
+- Added `ShopifyAPI::Publications`
+- Added `ShopifyAPI::ProductPublications`
+- Added `ShopifyAPI::CollectionPublications`
+- Added support for new collection products endpoint from `ShopifyAPI::Collection#products`
 
-* Support for Users and Discounts (Shopify Plus only)
-* Adds Customer#account_activation_url method
-* Adds ability to open a fulfillment.
+## Version 5.0.0
 
-== Version 4.2.0
+- Breaking change: `ShopifyAPI::Checkout` now maps to the Checkout API, rather than the Abandoned Checkouts API
+  - See the README for more details
+- Added `ShopifyAPI::AbandonedCheckout`
+- Added support for X-Shopify-Checkout-Version header on `ShopifyAPI::Checkout`
+- Added `ShopifyAPI::ShippingRate`
+- Added `ShopifyAPI::Payment`
+- Added support for `Checkout::complete` endpoint
+- Fixed session handling support for Rails 5.2.1
 
-* Threadsafety is now compatible with the latest ActiveResource master
+## Version 4.13.0
 
-== Version 4.1.1
+- Added `ShopifyAPI::ApiPermission` resource for uninstalling an application
+- Added a deprecation warning to `ShopifyAPI::OAuth`
 
-* Added explicit 90 second timeout to `ShopifyAPI::Base`
+## Version 4.12.0
 
-== Version 4.0.7
+- Added support for the GraphQL API
 
-* Added `ShippingAPI::ShippingZone`
+## Version 4.11.0
 
-== Version 4.0.6
+- Added `ShopifyAPI::InventoryItem`
+- Added `ShopifyAPI::InventoryLevel`
+- Added `#inventory_levels` method to `ShopifyAPI::Location`
 
-* Replaced `cancelled` with `expired` in `ShopifyAPI::ApplicationCharge`
+## Version 4.10.0
 
-== Version 4.0.5
+- Added `ShopifyAPI::AccessScope`
 
-* Added `pending`, `cancelled`, `accepted`, `declined` helper methods to `ShopifyAPI::ApplicationCharge`
+## Version 4.9.1
 
-== Version 4.0.4
+- Fix a bug with custom properties for orders
 
-* Fixed truthiness for order cancellations. Requests are now sent in the request body and as JSON
+## Version 4.9.0
 
-== Version 4.0.3
+- Added `ShopifyAPI::PriceRule`
+- Added `ShopifyAPI::DiscountCode`
 
-* Fixed hmac signature validation for params with delimiters (`&`, `=` or `%`)
+## Version 4.8.0
 
-== Version 4.0.2
+- Added `add_engagements` to `ShopifyAPI::MarketingEvent`
 
-* Verify that the shop domain is a subdomain of .myshopify.com which creating the session
+## Version 4.7.1
 
-== Version 4.0.1
+- Added support for URL parameter (e.g. limit & page) to ShopifyAPI::Metafields
+- Added support for URL parameter (e.g. limit & page) to metafield operator in ShopifyAPI::Shop
 
-* Added `ShopifyAPI::OAuth.revoke` for easy token revocation.
+## Version 4.7.0
 
-== Version 3.2.6
+- Removed the mandatory `application_id` parameter from `ShopifyAPI::ProductListing` and `ShopifyAPI::CollectionListing`
+- Fixed a bug related to the non-standard primary key for `ShopifyAPI::ProductListing` and `ShopifyAPI::CollectionListing`
 
-* Fixed CustomerSavedSearch#customers method to now correctly return only relevant customers
+## Version 4.6.0
 
-== Version 3.2.5
+- Added `ShopifyAPI::Report`
 
-* More useful error messages for activating nil sessions
-* Add tests for commonly deleted objects, and metafield tests, fix naming error in order_risk_test.rb
+## Version 4.5.0
 
-== Version 3.2.4
+- Added `ShopifyAPI::MarketingEvent`
 
-* No API changes
+## Version 4.4.0
 
-== Version 3.2.3
+- Added `ShopifyAPI::CustomerInvite`
+- Support for Customer#send_invite endpoint
 
-* Added pry to the CLI
+## Version 4.3.8
 
-== Version 3.2.2
+- Added `ShopifyAPI::ResourceFeedback`
 
-* Temporary fix for the CLI
-* Add a specific exception for signature validation failures
+## Version 4.3.7
 
-== Version 3.2.1
+- Added support for `complete` in `ShopifyAPI::DraftOrder`
 
-* Added CarrierService resource
-* Added optionally using threadsafe ActiveResource (see readme)
-* Fixed bug in validate_signature
+## Version 4.3.6
 
-== Version 3.2.0
+- Fixed the `customer_saved_search_id` param in `ShopifyAPI::CustomerSavedSearch#customers`.
 
-* in Session::request_token params is no longer optional, you must pass all the params and the method will now extract the code
-* Fixed JSON errors handling (#103)
-* Fixed compatibility with Ruby 2.1.x (#83)
-* Fixed getting parent ID from nested resources like Variants (#44)
-* Cleaned up compatibility with ActiveResource 4.0.x
-* Added OrderRisk resource
-* Added FulfillmentService resource
-* Removed discontinued ProductSearchEngine resource
-* Added convenience method Customer#search (#45)
+## Version 4.3.5
 
-== Version 3.1.8
+- Added support for online mode access tokens, token expiry, and associated_user information.
+- Added `ShopifyAPI::DraftOrder`
+- Added `ShopifyAPI::DraftOrderInvoice`
 
-* Expose `index` and `show` actions of `Location`
-* Added create_permission_url and request_token helper methods
-* Edited the readme to better describe the getting started procedure
+## Version 4.3.4
 
-== Version 3.1.7
+- Added `ShopifyAPI::ProductListing`
+- Added `ShopifyAPI::CollectionListing`
 
-* Expose `authors` and `tags` action on Article
+## Version 4.3.3
 
-== Version 3.1.6
+- Added `ShopifyAPI::StorefrontAccessToken`
 
-* Add LineItem::Property resource
+## Version 4.3.2
 
-== Version 3.1.5
+- Relax Ruby version requirement to >= `2.0`
 
-* Expose `orders` action on Customer
+## Version 4.3.1
 
-== Version 3.1.3
+- Support for ShopifyAPI::ApplicationCredit
 
-* Expose `complete` action on Fulfillment
+## Version 4.3.0
 
-== Version 3.1.2
+- Require Ruby >= `2.3.0`
+- Use inheritance instead of the deprecated Rails `Module#alias_method_chain`
 
-* Includes port in domain URI (when other than http/80 or https/443)
-* Adds access to CustomerSavedSearch
-* Adds resources: Order::DefaultAddress, Client::ClientDetails, Announcement
-* Allows access to Articles without a blog_id
-* Moves encode and as_json overrides to ShopifyAPI::Base scope
-* Exposes the `order` action in SmartCollection for general use
+## Version 4.2.2
 
-== Version 3.0.3
+- Support for AccessToken#delegate endpoint
 
-* Add a `customers` helper method to the CustomerGroup resource
+## Version 4.2.1
 
-== Version 3.0.2
+- Support for Users and Discounts (Shopify Plus only)
+- Adds Customer#account_activation_url method
+- Adds ability to open a fulfillment.
 
-* Brevity in require statements
+## Version 4.2.0
 
-== Version 3.0.1
+- Threadsafety is now compatible with the latest ActiveResource master
 
-* Fix saving nested resources in ActiveResource 3.1+
+## Version 4.1.1
 
-== Version 3.0.0
+- Added explicit 90 second timeout to `ShopifyAPI::Base`
 
-* Added support for OAuth Authentication
-* Removal of support for Legacy Authentication
-* Added Cart resource
+## Version 4.0.7
 
-== Version 2.3.0
+- Added `ShippingAPI::ShippingZone`
 
-* Fix double root bug with ActiveSupport 3.2.0
-* Add metafields methods on Customer resource
-* Fix prefix_options on assets returned from Asset.find
+## Version 4.0.6
 
-== Version 2.2.0
+- Replaced `cancelled` with `expired` in `ShopifyAPI::ApplicationCharge`
 
-* Fix issues with resources that have both direct and namespaced routes
-* Added detailed logger to help with debugging ActiveResource
-requests/responses
-* Add fulfillment#cancel
+## Version 4.0.5
 
-== Version 2.1.0
+- Added `pending`, `cancelled`, `accepted`, `declined` helper methods to `ShopifyAPI::ApplicationCharge`
 
-* Fix JSON errors handling
-* Remove global limit from ShopifyAPI::Limits
+## Version 4.0.4
 
-== Version 2.0.0
+- Fixed truthiness for order cancellations. Requests are now sent in the request body and as JSON
 
-* Bump to 2.0.0 as this release breaks Rails 2 compatibility; we're now officially only supporting Rails 3. Rails 2 devs can follow the rails2 tag in this repo to know where we broke off
-* Refactored resources into their own source files
-* Added API limits functionality
-* Patched ActiveResource issue with roots in JSON
-* Added pending, cancelled, accepted, and declined convenience methods to ShopifyAPI::RecurringApplicationCharge
-* ShopifyAPI::Session#temp now available as a convenience method to support temporarily switching to other shops when making calls
-* Fixes to `shopify console` CLI tool
+## Version 4.0.3
 
-== Version 1.2.5
+- Fixed hmac signature validation for params with delimiters (`&`, `=` or `%`)
 
-* Fix for Article#comments
+## Version 4.0.2
 
-== Version 1.2.4
+- Verify that the shop domain is a subdomain of .myshopify.com which creating the session
 
-* Added Article#comments
-* Added Order#cancel
-* Added Comment#restore, #not_spam
+## Version 4.0.1
 
-== Version 1.2.3
+- Added `ShopifyAPI::OAuth.revoke` for easy token revocation.
 
-* Added Customer, CustomerGroup support
+## Version 3.2.6
 
-== Version 1.2.2
+- Fixed CustomerSavedSearch#customers method to now correctly return only relevant customers
 
-* Added ScriptTag support
+## Version 3.2.5
 
-== Version 1.2.1
+- More useful error messages for activating nil sessions
+- Add tests for commonly deleted objects, and metafield tests, fix naming error in order_risk_test.rb
 
-* Allow abbreviated names for all commands like rails does, e.g. 'shopify c' instead of 'shopify console'
-* Fix Variant to support accessing both nested variants with a product prefix as well as top level variants directly
-* Add 'grande' to supported product image size variants
+## Version 3.2.4
 
-== Version 1.2.0
+- No API changes
 
-* Command-line interface
-* Allow custom params when fetching a single Asset
+## Version 3.2.3
 
-== Version 1.1.3 (November 4, 2010)
+- Added pry to the CLI
 
-* Add ProductSearchEngines resource
+## Version 3.2.2
 
-== Version 1.1.2 (October 20, 2010)
+- Temporary fix for the CLI
+- Add a specific exception for signature validation failures
 
-* Fix for users of ActiveResource 3.x
+## Version 3.2.1
 
-== Version 1.1.1 (October 5, 2010)
+- Added CarrierService resource
+- Added optionally using threadsafe ActiveResource (see readme)
+- Fixed bug in validate_signature
 
-* Remove hard coded xml formatting in API calls
-* Remove jeweler stuff
-* Ruby 1.9 encoding fix
+## Version 3.2.0
 
-== Version 1.1.0 (September 24, 2010)
+- in Session::request_token params is no longer optional, you must pass all the params and the method will now extract the code
+- Fixed JSON errors handling (#103)
+- Fixed compatibility with Ruby 2.1.x (#83)
+- Fixed getting parent ID from nested resources like Variants (#44)
+- Cleaned up compatibility with ActiveResource 4.0.x
+- Added OrderRisk resource
+- Added FulfillmentService resource
+- Removed discontinued ProductSearchEngine resource
+- Added convenience method Customer#search (#45)
 
-* Add new Events API for Shop, Order, Product, CustomCollection, SmartCollection, Page, Blog and Article
-* Add new 'compact' product image size variant
-* Rails 3 fix: attribute_accessors has to be explicitly included since activesupport 3.0.0
+## Version 3.1.8
 
-== Version 1.0.6
+- Expose `index` and `show` actions of `Location`
+- Added create_permission_url and request_token helper methods
+- Edited the readme to better describe the getting started procedure
 
-* Add metafields
-* Add latest changes from Shopify including asset support, token validation and a common base class
+## Version 3.1.7
 
-== Version 1.0.0
+- Expose `authors` and `tags` action on Article
 
-* extracting ShopifyAPI from Shopify into Gem
+## Version 3.1.6
+
+- Add LineItem::Property resource
+
+## Version 3.1.5
+
+- Expose `orders` action on Customer
+
+## Version 3.1.3
+
+- Expose `complete` action on Fulfillment
+
+## Version 3.1.2
+
+- Includes port in domain URI (when other than http/80 or https/443)
+- Adds access to CustomerSavedSearch
+- Adds resources: Order::DefaultAddress, Client::ClientDetails, Announcement
+- Allows access to Articles without a blog_id
+- Moves encode and as_json overrides to ShopifyAPI::Base scope
+- Exposes the `order` action in SmartCollection for general use
+
+## Version 3.0.3
+
+- Add a `customers` helper method to the CustomerGroup resource
+
+## Version 3.0.2
+
+- Brevity in require statements
+
+## Version 3.0.1
+
+- Fix saving nested resources in ActiveResource 3.1+
+
+## Version 3.0.0
+
+- Added support for OAuth Authentication
+- Removal of support for Legacy Authentication
+- Added Cart resource
+
+## Version 2.3.0
+
+- Fix double root bug with ActiveSupport 3.2.0
+- Add metafields methods on Customer resource
+- Fix prefix_options on assets returned from Asset.find
+
+## Version 2.2.0
+
+- Fix issues with resources that have both direct and namespaced routes
+- Added detailed logger to help with debugging ActiveResource
+  requests/responses
+- Add fulfillment#cancel
+
+## Version 2.1.0
+
+- Fix JSON errors handling
+- Remove global limit from ShopifyAPI::Limits
+
+## Version 2.0.0
+
+- Bump to 2.0.0 as this release breaks Rails 2 compatibility; we're now officially only supporting Rails 3. Rails 2 devs can follow the rails2 tag in this repo to know where we broke off
+- Refactored resources into their own source files
+- Added API limits functionality
+- Patched ActiveResource issue with roots in JSON
+- Added pending, cancelled, accepted, and declined convenience methods to ShopifyAPI::RecurringApplicationCharge
+- ShopifyAPI::Session#temp now available as a convenience method to support temporarily switching to other shops when making calls
+- Fixes to `shopify console` CLI tool
+
+## Version 1.2.5
+
+- Fix for Article#comments
+
+## Version 1.2.4
+
+- Added Article#comments
+- Added Order#cancel
+- Added Comment#restore, #not_spam
+
+## Version 1.2.3
+
+- Added Customer, CustomerGroup support
+
+## Version 1.2.2
+
+- Added ScriptTag support
+
+## Version 1.2.1
+
+- Allow abbreviated names for all commands like rails does, e.g. 'shopify c' instead of 'shopify console'
+- Fix Variant to support accessing both nested variants with a product prefix as well as top level variants directly
+- Add 'grande' to supported product image size variants
+
+## Version 1.2.0
+
+- Command-line interface
+- Allow custom params when fetching a single Asset
+
+## Version 1.1.3 (November 4, 2010)
+
+- Add ProductSearchEngines resource
+
+## Version 1.1.2 (October 20, 2010)
+
+- Fix for users of ActiveResource 3.x
+
+## Version 1.1.1 (October 5, 2010)
+
+- Remove hard coded xml formatting in API calls
+- Remove jeweler stuff
+- Ruby 1.9 encoding fix
+
+## Version 1.1.0 (September 24, 2010)
+
+- Add new Events API for Shop, Order, Product, CustomCollection, SmartCollection, Page, Blog and Article
+- Add new 'compact' product image size variant
+- Rails 3 fix: attribute_accessors has to be explicitly included since activesupport 3.0.0
+
+## Version 1.0.6
+
+- Add metafields
+- Add latest changes from Shopify including asset support, token validation and a common base class
+
+## Version 1.0.0
+
+- extracting ShopifyAPI from Shopify into Gem