Regarding the PHP vulnerabilities disclosed on October 21, 2026 (CVE-2026-109618 and CVE-2026-109619), we have reviewed their impact on all of our Shopify apps: Japan Order CSV, Delete Me, Mockingbird, Mypage Blocks, and B2E, our employee sales app. None of these apps use PHP, so they are not affected by these vulnerabilities. Merchants using our apps do not need to take any action, such as updating or changing settings.

We continuously monitor published vulnerability information and will notify our users promptly if any impact is expected. If you have any questions about this matter, please contact the support desk for the app you use.

Semantic Browser Testing

Definition

A paradigm for automated browser testing in which UI elements are targeted by their meaning, with tests executed through an AI agent.

Background

EC sites change constantly — A/B tests, theme overhauls, OS 2.0 migrations — making structure-dependent tests expensive to maintain. Semantic testing is a compelling answer to this "test debt." Where a CSS-selector instruction like "click #checkout-btn-01" breaks with every theme update, a semantic instruction — "find and click the button that proceeds to checkout" — keeps the test alive through visual change.

Flagship's Involvement

Our QA automation strategy is a phased migration from CSS-selector-based tests to semantic tests. We have run a dedicated internal QA automation channel since 2021, and we maintain Playwright-based smoke tests and semantic tests as internal Claude Plugins — accumulating test code and test procedures as assets that AI agents can operate directly.