Changelog
A record of significant updates and improvements to Gemhubx.
- Security Upgraded Shopify API to version 2026-01 (current stable)
- Security Hardened all file upload endpoints — MIME-type and extension validation on tickets, dropship requests, wallet uploads, and email templates
- Security Added explicit mass-assignment guards (
$guarded) to all Eloquent models
- Security Sanitised
marketing_video field — extracts YouTube/Vimeo embed ID only, eliminating stored XSS risk
- Fix GDPR mandatory webhooks (customers/data_request, customers/redact, shop/redact) correctly configured via Partner Dashboard — resolves invalid GraphQL topic errors on install
- Fix Removed duplicate
logout route name that blocked route cache in production
- Fix Removed all
dd() and dump() calls from production controllers
- Improvement Pre-deploy automated test gate added to deployment pipeline
- Improvement Queue worker migrated to correct app path — stale legacy worker from pre-rename removed
- New Rapnet loose diamond scraper — mirrors QGold import pattern for diamond inventory
- New Auto token refresh for Shopify API sessions
- New Diamond spec badges and detail page labels on product pages
- Improvement Rapnet scraper — rate-limit detection on HTTP 200, increased backoff with auto-retry
- Improvement e2e testing kit and App Store asset generators added
- Fix Headless login with MFA code entry for supplier scraper authentication
- New Shopify embedded app — AppBridge v4, SameSite=None cookies, CSP frame-ancestors
- New GDPR-compliant webhook handlers — customers/data_request, customers/redact, shop/redact, app/uninstalled
- New Full product import flow — browse catalog, Import List staging, push to Shopify with duplicate prevention
- New Order management — webhook ingestion, fulfillment requests, tracking sync back to Shopify
- New Team management — invite staff with role-based permissions
- New Prepaid Wallet — balance management and payment history
- New WooCommerce integration — connect WooCommerce stores via REST API keys
- New Non-Shopify user portal — custom order management for merchants without Shopify
- New Advanced jewelry filters — metal, gemstone, karat, color, price range
- New
/health endpoint for uptime monitoring
- New Privacy policy, support, terms, and GDPR documentation pages
