Shopify
Shopify is rebuilding its entire merchant surface — admin shell to AI channel integrations — in a concentrated September sprint.
A side-by-side editorial comparison of Saleor and Virto Commerce — release velocity, themes, recent moves, and the top alternatives to consider.
Saleor's public feed shows release tags, not what's in them.
The 3.23 line moves through release candidates — 3.23.26-rc.0 and rc.1 landed hours apart on August 6 — but only one entry in the window carries an actual change list. That entry, 3.23.22-rc.0, shows the shape of the work: an identifier field on the Webhook model, a unique tie-breaker for default cursor pagination, and a setting to block customer and anonymous traffic. The other tags publish with nothing but the release commit reference.
Virto Commerce adds sign-in audit logging and tightens user deletion security while patching a repeated-sign-in UI loop across all active branches.
Virto Commerce is maintaining three concurrent LTS branches (3.1007.x, 3.1039.x, 3.1060.x) alongside the main 3.107x line. This week added a sign-in audit log, fixed user deletion to accept only user ID rather than username (closing an implicit security gap), introduced module pipeline hooks for post-routing and post-authentication extensibility, and bounded the API key lookup cache. A UI $digest loop that fired on repeated same-tab sign-ins was patched across all branches.
The 3.23 line moves through release candidates — 3.23.26-rc.0 and rc.1 landed hours apart on August 6 — but only one entry in the window carries an actual change list. That entry, 3.23.22-rc.0, shows the shape of the work: an identifier field on the Webhook model, a unique tie-breaker for default cursor pagination, and a setting to block customer and anonymous traffic. The other tags publish with nothing but the release commit reference.
What is visible is maintenance-grade hardening of an established GraphQL commerce API: pagination determinism, webhook identity, traffic gating. The rc.0-then-rc.1 pattern within a single day suggests a candidate being corrected rather than a feature train, and the point release cadence within 3.23 indicates the branch is in stabilisation rather than expansion.
Expect the 3.23 line to keep issuing patch-level release candidates on this pattern. The feed itself is the limiting factor here — most tags publish without a change list, so feature direction is not derivable from what is being crawled.
Virto Commerce is maintaining three concurrent LTS branches (3.1007.x, 3.1039.x, 3.1060.x) alongside the main 3.107x line. This week added a sign-in audit log, fixed user deletion to accept only user ID rather than username (closing an implicit security gap), introduced module pipeline hooks for post-routing and post-authentication extensibility, and bounded the API key lookup cache. A UI $digest loop that fired on repeated same-tab sign-ins was patched across all branches.
The sign-in audit log and user-deletion ID-only fix indicate Virto Commerce is addressing enterprise compliance and security requirements — likely responding to customer requests in its B2B headless commerce positioning. Module pipeline hooks after routing and authentication expand the extensibility surface meaningfully for self-hosted deployments that need custom middleware or authorization layers. The heavy multi-LTS maintenance load reflects an enterprise customer base slow to upgrade.
Expect broader audit log coverage for other sensitive actions — profile changes, role assignments, order modifications — as the compliance story gets built out. The multi-LTS pattern suggests a formal LTS support timeline announcement may be coming to rationalize the maintenance load.
Other E-comm products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Saleor or Virto Commerce.
Shopify is rebuilding its entire merchant surface — admin shell to AI channel integrations — in a concentrated September sprint.
CartFlows Pro 3.2.0 adds AI product selection to order bumps, automating the most manual checkout decision
Squarespace adds AI site generation and LLM brand monitoring in the same quarter
Foxy is filling API gaps in payments and shipping — FedEx OAuth and PayPal pay-now in two months.
ParcelPanel plugs tracking data into Shopify's AI assistant, making fulfillment queries answerable from inside the merchant admin.
Junip clears Shopify's ScriptTag deadline and expands to four new languages and global TikTok Shop syndication.
See all Saleor alternatives → · See all Virto Commerce alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. Saleor and Virto Commerce are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Saleor and Virto Commerce are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). For your specific use case, the alternatives sections above list other E-comm products to evaluate alongside.
Top Saleor alternatives in E-comm are ranked by recent ship velocity. Browse the "Saleor alternatives" section above for the current picks, or visit /alternatives/saleor for the full list with editorial commentary on each.
Top Virto Commerce alternatives in E-comm are ranked by recent ship velocity. Browse the "Virto Commerce alternatives" section above for the current picks, or visit /alternatives/virto-commerce for the full list with editorial commentary on each.