Thank you guys, that's very helpful. In fact, very few of my changes (if any) were to core code. Perhaps a couple of authentication code or RQ hacks but not much more than that. The bulk of my changes were to the ecommerce package.
I think I'll do as you suggest and start by upgrading OpenACS core. After doing that I can see what breaks and then fix it.
R.