Changelog

Critical fix: the shipment catch-up scheduled task no longer started at all, leaving no trace whatsoever in Dolibarr — only the server log recorded it. An automatic check now prevents this kind of silent failure from recurring

Fix: two other scheduled tasks failed for a related reason, including the webhook health check — which broke down precisely when recording an incident, that is, when it was most needed

Fix: products with variants produced around thirty warnings on every image synchronisation

Critical fix: viewing one page could disable the buttons on another. The module's internal calls rotated the session security token, and the Health page triggers one per store as soon as it opens: on a three-store installation, merely opening that page was enough for clicks on the Webhooks page to be rejected, silently

Fix: thirty actions across nine administration pages could be rejected with no message and no trace when the security token was refused — including linking a licence number to a store, which could therefore fail without any indication. All of them now display an explicit error

Fix: a synchronisation could switch off the webhooks of other stores

Fix: on the webhooks screen, "Configuration saved" was displayed without the state actually changing. Display and saving were not looking at the same database row: you disabled a webhook, the page confirmed, and nothing moved

Fix: disabling now removes every relevant subscription rather than just the first one found — a twin row can no longer bring back a webhook you have just removed. Enabling reuses an existing subscription instead of creating another one

Inconsistencies inherited from installations predating multi-store support are corrected along the way: a row left "active" with no actual subscription is reset

Fix: with several stores connected, the Webhooks page displayed the selected store but saved against another one — webhooks could not be disabled and the Save button appeared to do nothing. Display and saving now share the same per-store filter, and every error is shown in full instead of an empty message

Critical fix: on hardened installations (anti-CSRF token renewed on every page), every admin action of the module was silently rejected — including the setup wizard. Token checking now matches Dolibarr core, and a rejection is always reported on screen

Critical fix: on Dolibarr 18 to 22, connecting a store returned an HTTP 500 error on the way back from Shopify and the store was lost — the module relied on a core feature only introduced in late 2025

Fix: on strict SQL mode hosting, webhooks were never registered — the timestamps sent by Shopify were rejected by the database. They are now converted and stored in universal time

Fix: variant products imported from Shopify did not create a real Dolibarr variant — the parent/variant link stayed invisible in the interface, and the variant label could remain identical to the parent product's

Fix: importing products with variants failed when the same reference (SKU) is shared across several Shopify products — the module now reuses the existing product instead of failing, and shows the full error reason for any other issue

Fix: order lines coming from bundle/pack apps ("build your own pack") were not created in Dolibarr — billable products grouped in a bundle are now imported correctly (free 0-euro components are still ignored)

Critical fix: Dolibarr stock was never pushed to Shopify (restocking, in-house production, manual corrections) — Shopify stock drifted with each sale, down to false negative values. Every Dolibarr stock movement is now synchronized to Shopify in real time (absolute value, never negative)

Critical fix: more reliable product/stock sync — a disabled variant sometimes remained visible on Shopify, and diverging stock levels (sometimes negative) were no longer silently corrected; errors are now logged and surfaced

Critical fix: a shipment left in draft status after a failure (warehouse/stock) was never caught up automatically — it is now validated and closed by the periodic catch-up job

Display fix: incorrectly encoded accented characters (double encoding) fixed throughout the admin interface

Fix: a store's license status could get stuck on "unknown" — verification is now reliable and never downgrades a default store

Critical fix: some orders were no longer fetched from Shopify (regression introduced in 2.3.0) — order synchronization works normally again

Fix: webhooks registered on an outdated Shopify API version are now automatically re-registered during health checks, for each store

Fix: module activation blocked (blank page) on multi-store installations

Fix: percentage discounts undervalued — the discount was computed on the tax-excluded base then divided a second time by (1 + VAT) as if it were a tax-included amount. Orders with a percentage promo code now match the exact amount shown by Shopify (e.g. 5% = −€151.20 incl. tax, not −€126)

Critical fix: stock not decremented when importing Shopify orders — the warehouse was not passed at invoice validation. All 4 Dolibarr stock decrease rules (order, invoice, shipment, shipment closing) are now covered

Fix: the v2.2.4 permissions migration (module ID change) now runs automatically on activation — user rights are preserved when upgrading from a version older than 2.2.4

Webhooks fix: wrong callback URL (missing /custom/ path) when no explicit configuration was set, and the events retention days setting is now honored by the purge

Critical fix: document API calls returning 404 on subdirectory installations — a leading slash was overriding the subdirectory path (issue #288)

All document access points (product and category images) now correctly honour the installation subdirectory

Fixes Dolibarr installations running in a subdirectory (version 2.2.6 already worked around this via the local SQL fallback)

Critical fix: resilient product image sync — automatic SQL fallback (llx_ecm_files) when the Dolibarr REST API /documents endpoint is unreachable (404, timeout, HTML in body). Product images now correctly synced to Shopify even on restrictive hosting (issue #286)

Critical fix: multi-tenant entity filter added to image SQL query — prevents exposing images from other Dolibarr entities in multi-company installations

Fix: image sort key mismatch (filename vs relativename) — sort by position now actually works

Critical fix: verifToken() function not loaded on some PHP-FPM stacks, blocking Shopify OAuth — 4 module files now explicitly include the compatibility.lib.php polyfill

Critical fix: Dolibarr module ID migration (436950 → 351003, official range allocated to Association P'tite Tête) — automatic SQL migration preserves existing permissions

Critical fix: admin pages (setup, wizard, product sync) referenced a non-existent CSS file — CSS loading and page display now correct

Critical fix: variant stock sync now runs every hour instead of 24h

Fixed webhook products/delete — invalid SQL query corrected

Critical fix: no more duplicate products created on Shopify after purging a product with variants

Improved anti-loop: inter-process sync/webhook protection to prevent deadlocks

Diagnostic false positive fixed: API Documents 404 on non-existent test product is now reported as warning instead of error

Removed ~1,974 lines of dead code

Dolibarr 23 compatibility — systematic audit and corrections

OAuth license link fix

Discounts not applied on services