Who contributed to Shopify on May 11, 2026?

1 developer shipped this update, including frandiox.

What were the notable Shopify updates?

Pass Storefront API requests through the dev proxy as-is.

Shopify

Hydrogen, Polaris, and the CLI - the dev platform behind millions of stores

Pick a date

Topics: JavaScript Full archive →

The Wire · Showcase

SHOPIFY CLI FIXES STOREFRONT API AUTH HEADACHE IN DEV PROXY

By RepoJournal · Filed 06:02 UTC on May 11, 2026 · About Shopify

1 person shipped this

frandiox @frandiox 1 cited

The dev proxy was rejecting every Storefront API request with a 401 — turns out it was injecting its own auth headers where it had no business being.

Developers running local Storefront API calls through Shopify's dev proxy [1] hit a wall yesterday: every `/api/{version}/graphql.json` request bounced with authentication failures. The culprit was the proxy itself, which was aggressively injecting SFR devtools bearer tokens into the Authorization header even for public Storefront API endpoints that don't want or need them. The fix [1] treats Storefront API traffic as pass-through — no header injection, no interference. If you've been working around this by disabling the dev proxy for API work, your life just got simpler. This lands in the next CLI release.

Action items

→ Update Shopify CLI to the next release for transparent Storefront API proxying Shopify/cli [plan]
→ Monitor the next CLI release notes for availability Shopify/cli [monitor]

References

[1] Pass Storefront API requests through the dev proxy as-is ↗ Shopify/cli

Quick answers

What shipped in Shopify on May 11, 2026?: The dev proxy was rejecting every Storefront API request with a 401 — turns out it was injecting its own auth headers where it had no business being. In total, 1 commits and 1 pull requests landed.
Who contributed to Shopify on May 11, 2026?: 1 developer shipped this update, including frandiox.
What were the notable Shopify updates?: Pass Storefront API requests through the dev proxy as-is.

SHOPIFY CLI ADDS THEME UTILITY TEST COVERAGE

Shopify's CLI tooling now has comprehensive unit tests covering core theme utility functions, closing a coverage gap in the theme management layer.

javascript 2 shipped 1-min read

Shopify 4 days ago

SHOPIFY CLI CUTS SUPPLY-CHAIN RISK WITH SEVEN-DAY DEPENDABOT HOLD

Shopify CLI just implemented a seven-day cooldown on npm dependency updates, blocking Dependabot from proposing fresh packages before the ecosystem has time to validate them.

javascript 6 shipped 1-min read

Shopify 7 days ago

SHOPIFY CLI TIGHTENS TEST COVERAGE ACROSS AUTH AND WARNING SYSTEMS

Shopify/cli shipped comprehensive unit tests for critical warning and storage systems, closing gaps that could hide regressions in production auth flows.

javascript 15 shipped 1-min read

Shopify 9 days ago

CLI AUTOMATION SWEEP KILLS INTERACTIVE PROMPTS ACROSS SHOPIFY TOOLS

Shopify's interactivity audit is shipping widespread fixes to eliminate blocking prompts in non-interactive workflows, from app dev to hydrogen deployments.

javascript 27 shipped 1-min read

Elsewhere on the wire

AI Agents about 9 hours ago

CLAUDE OPUS 5 LANDS ACROSS THE STACK

The newest Anthropic model is now live in langchain, Cline, and llama-index, with native support for extended reasoning and 1M context windows.

ai-agents 28 shipped 1-min read

Local LLMs about 9 hours ago

OLLAMA LANDS LAGUNA SUPPORT AND CRUSHES MEMORY LEAKS WHILE SGLANG HITS V0.5.16 WITH CONFIDENCE-DRIVEN SPECULATIVE DECODING

Ollama shipped three critical performance and reliability fixes for Metal residency and concurrent access patterns, while SGL-Lang released 0.5.16 with a new speculative algorithm hitting 383.7 tok/s on DeepSeek-V4.