An order reaches IN_PRODUCTION, FULFILLED or ON_HOLD. The old system documented this event but never actually sent it — if your receiver only ever saw shipping_added, this is new traffic.
Signed with HMAC-SHA256 over the exact request bytes, in the X-Signature header. Respond 2xx; anything else is retried with backoff.
postWebhookorder_status
Headers
X-Signaturestring required
HMAC-SHA256 of the raw body, keyed with your webhook secret, hex encoded.
Response
Acknowledged.
Changes
Webhooks have no change history: a webhook is keyed by its event name rather than a path and method, so no recorded change can name it.