RepoJournal
Shopify

Shopify

Hydrogen, Polaris, and the CLI — the dev platform behind millions of stores

Pick a date

  1. Tue 5 may
  2. Wed 6 may
  3. Thu 7 may
  4. Fri 8 may
  5. Sat 9 may
  6. Mon 11 may
  7. Tue 12 may
  8. Wed 13 may
  9. Thu 14 may
  10. Fri 15 may
  11. Sat 16 may
  12. Tue 19 may
  13. Thu 21 may
  14. Sat 23 may
  15. Wed 27 may
  16. Thu 28 may
  17. Fri 29 may
  18. Sat 30 may
  19. Mon 8 jun
  20. Tue 9 jun
  21. Today 10 jun

The Wire · Showcase

SHOPIFY CLI FIXES DEV THEME PERSISTENCE BUG AFTER SFR MIGRATION

By RepoJournal · Filed · About Shopify

A latent redirect handling bug surfaced this week when Shopify moved preview theme binding from server-side storage to cookies, causing dev themes to occasionally render as live in the storefront renderer.

The storefront renderer was using fetch's default 'follow' redirect behavior, which silently dropped Set-Cookie headers that bind the _shopify_essential cookie to dev themes [1]. After SFR migrated preview_theme_id to cookie-based storage, this bug started manifesting as dev preview occasionally showing the live theme instead [1]. The fix switches to manual redirect handling and patches response headers to preserve the session cookie while letting browsers follow redirects cleanly [1]. In parallel, CLI shipped a fix for a password validation loop affecting theme app developers [2]. The issue surfaced when ensureValidPassword started treating empty strings as valid input, bypassing the normal prompt fallback that password-protected stores relied on [2]. Both fixes are now merged and rolled into the CLI [3] [4].

Action items

References

  1. [1] fix(theme): preserve dev preview theme across SFR redirects ↗ Shopify/cli
  2. [2] Use validated storefront password for theme apps ↗ Shopify/cli
  3. [3] Merge pull request #7642 from Shopify/fix/theme-dev-redirect-manual Shopify/cli
  4. [4] Merge pull request #7662 from Shopify/gg-fix-app-dev-password-loop Shopify/cli

FAQ

What changed in Shopify on May 30, 2026?
A latent redirect handling bug surfaced this week when Shopify moved preview theme binding from server-side storage to cookies, causing dev themes to occasionally render as live in the storefront renderer.
What should Shopify teams do about it?
Upgrade Shopify CLI if you're developing theme apps on password-protected stores • Update theme dev workflows if dev preview was rendering as live
Which Shopify repositories shipped on May 30, 2026?
Shopify/cli

Related across the cluster

For your repos

The showcase is a teaser.
Your wire is the product.

Same engine. Different stack. Below: what changes when the wire is yours.

Showcase wire

  • •14 famous open source orgs
  • •One wire per day
  • •Public, generic
  • •Read on the web, when you remember

Your wire

  • →Up to 1,500 of your repos - orgs, deps, vendors
  • →Morning and evening briefs
  • →Action items routed to your team
  • →Slack delivery, email, breaking-news CVE alerts

Want a hands-on demo first? Ask a current user for an invite link.