[efegokdemir]

Summary

Adds the evidence-backed UG-TAX-001 warning for Shopify's 2027-01 tax summary webhook identifier change. AI assistance: Codex prepared the changes and ran the local checks listed below.

Motivation

The documented change can affect handlers for apps subscribed to tax_summaries/create; a bounded static warning helps app developers review the integration before upgrading.

Changes

Detects the exact topic in declared [[webhooks.subscriptions]] tables in shopify.app*.toml, only for target 2027-01 or later. Adds version-boundary and negative-case tests, migration evidence, changelog text, and a rebuilt Action bundle. Also applies the portfolio README/community and workflow updates.

Tests performed

Node 22 and 24 local validation passed: clean install, tests, coverage, lint, build, distribution integrity and package/Action smoke checks. The new tests fail against the pre-change source and pass with this rule. npm audit reported no vulnerabilities.

Compatibility

Requires Node.js >=22. The rule is not in the published v0.4.0 package or Action; no existing release tag or package is changed.

Security and privacy

The rule is offline and emits a medium-confidence warning, not a security or migration guarantee. It does not inspect merchant data or call Shopify APIs.

Shopify source/evidence

https://shopify.dev/changelog/posts/tax-webhook-summary-and-calculation-requests-now-use-global-ids
https://shopify.dev/docs/apps/build/webhooks/subscribe
https://shopify.dev/changelog/release-notes/2027-01

Release impact

This is a consumer-facing source change. Review a separate SemVer minor v0.5.0 release only after the implementation merges and hosted checks pass; no package publication is part of this PR.

Checklist

• The change is focused and the docs/examples match the implementation.
• Regression tests and local checks are recorded above.
• The generated Action distribution matches the source.
• No sensitive or third-party material was added without permission/licence review.