Storefront API and Customer Account API are updated to 2026-04. Two breaking changes also land: 'API proxy is now always enabled' and 'backend consent mode defaults to ON'. Review the impact before upgrading.
Both Storefront API and Customer Account API are updated to the 2026-04 version. (#3651)
proxyStandardRoutes The option is removed. Throws if storefront is missing from load context. (#3649)
Backend consent mode defaults to ON. The JS _tracking_consent cookie is replaced with a server-set cookie. (#3649)
The Storefront API proxy, which used to be optionally toggleable, is nowalways enabled. The configuration option is gone, and the prerequisites are stricter.
createRequestHandler 's proxyStandardRoutes option controlled whether the standard routes were proxied.
The proxy isalways enabled.proxyStandardRoutes has been createRequestHandler fromremoved. If left in place, fixes are required.
Tracking consent handling has moved from a client-side JS cookie to aserver-set cookie. This is now the default.
_tracking_consent the cookie that was set via JavaScript is being replaced.
Via the Storefront API proxy,the server sets the cookie. This is enabled by default.
Both the Storefront API and the Customer Account API have been 2026-04 updated. (#3651)
| Scope | New version | What to check |
|---|---|---|
| Storefront API | 2026-04 | Verify that other changes in the 2026-04 changelog don't affect your storefront |
| Customer Account API | 2026-04 | Review the other changes listed in the 2026-04 changelog |
proxyStandardRoutes if you were passing one, remove it (the option has been deprecated).
make sure the storefront instance is always included. Without it, the request handler will throw.
Assume server-set cookies._tracking_consent Check for any custom implementations that depend on it.
proxyStandardRoutes is createRequestHandler has been removed. It can no longer be toggled and is always assumed to be enabled. (#3649)
If the load context lacks a storefront instance, the request handler throws. Custom server entries need review.
The backend consent mode is ON by default._tracking_consent Replace JS cookies with server-set cookies.
Consent cookies are set via the Storefront API proxy. Always-on proxy is a prerequisite for consent mode.
Both Storefront API and Customer Account API are updated to 2026-04 (#3651).Individual API changes introduced in 2026-04 are not covered in this article. You will need to review each API's 2026-04 changelog separately.
proxyStandardRoutes if you are still using it, or if storefront is missing from load context anywhere, you risk errors the moment you upgrade.createRequestHandler Audit all call sites, remove deprecated options, and make sure a storefront instance is always present in load context before upgrading._tracking_consent consent management relied on JS cookies. Because it assumed client-side JS, it was hard to handle for SSR and for keeping consent state consistent.2026-04 . Check the 2026-04 changelog for each store and identify the impact.createRequestHandler review their consent flow before upgrading."