Who contributed to Shopify on May 30, 2026?

2 developers shipped this update, including EvilGenius13 and graygilmore.

What were the notable Shopify updates?

fix(theme): preserve dev preview theme across SFR redirects, Use validated storefront password for theme apps, and Merge pull request #7642 from Shopify/fix/theme-dev-redirect-manual.

Shopify

Hydrogen, Polaris, and the CLI - the dev platform behind millions of stores

Pick a date

Topics: JavaScript Full archive →

The Wire · Showcase

SHOPIFY CLI FIXES DEV THEME PERSISTENCE BUG AFTER SFR MIGRATION

By RepoJournal · Filed 06:03 UTC on May 30, 2026 · About Shopify

2 people shipped this

EvilGenius13 @EvilGenius13 1 cited

graygilmore @graygilmore 1 cited

A latent redirect handling bug surfaced this week when Shopify moved preview theme binding from server-side storage to cookies, causing dev themes to occasionally render as live in the storefront renderer.

The storefront renderer was using fetch's default 'follow' redirect behavior, which silently dropped Set-Cookie headers that bind the _shopify_essential cookie to dev themes [1]. After SFR migrated preview_theme_id to cookie-based storage, this bug started manifesting as dev preview occasionally showing the live theme instead [1]. The fix switches to manual redirect handling and patches response headers to preserve the session cookie while letting browsers follow redirects cleanly [1]. In parallel, CLI shipped a fix for a password validation loop affecting theme app developers [2]. The issue surfaced when ensureValidPassword started treating empty strings as valid input, bypassing the normal prompt fallback that password-protected stores relied on [2]. Both fixes are now merged and rolled into the CLI [3] [4].

Action items

→ Upgrade Shopify CLI if you're developing theme apps on password-protected stores Shopify/cli [plan]
→ Update theme dev workflows if dev preview was rendering as live Shopify/cli [monitor]

References

[1] fix(theme): preserve dev preview theme across SFR redirects ↗ Shopify/cli
[2] Use validated storefront password for theme apps ↗ Shopify/cli
[3] Merge pull request #7642 from Shopify/fix/theme-dev-redirect-manual Shopify/cli
[4] Merge pull request #7662 from Shopify/gg-fix-app-dev-password-loop Shopify/cli

Quick answers

What shipped in Shopify on May 30, 2026?: A latent redirect handling bug surfaced this week when Shopify moved preview theme binding from server-side storage to cookies, causing dev themes to occasionally render as live in the storefront renderer. In total, 3 commits and 2 pull requests landed.
Who contributed to Shopify on May 30, 2026?: 2 developers shipped this update, including EvilGenius13 and graygilmore.
What were the notable Shopify updates?: fix(theme): preserve dev preview theme across SFR redirects, Use validated storefront password for theme apps, and Merge pull request #7642 from Shopify/fix/theme-dev-redirect-manual.

SHOPIFY CLI ADDS THEME UTILITY TEST COVERAGE

Shopify's CLI tooling now has comprehensive unit tests covering core theme utility functions, closing a coverage gap in the theme management layer.

javascript 2 shipped 1-min read

Shopify 4 days ago

SHOPIFY CLI CUTS SUPPLY-CHAIN RISK WITH SEVEN-DAY DEPENDABOT HOLD

Shopify CLI just implemented a seven-day cooldown on npm dependency updates, blocking Dependabot from proposing fresh packages before the ecosystem has time to validate them.

javascript 6 shipped 1-min read

Shopify 7 days ago

SHOPIFY CLI TIGHTENS TEST COVERAGE ACROSS AUTH AND WARNING SYSTEMS

Shopify/cli shipped comprehensive unit tests for critical warning and storage systems, closing gaps that could hide regressions in production auth flows.

javascript 15 shipped 1-min read

Shopify 9 days ago

CLI AUTOMATION SWEEP KILLS INTERACTIVE PROMPTS ACROSS SHOPIFY TOOLS

Shopify's interactivity audit is shipping widespread fixes to eliminate blocking prompts in non-interactive workflows, from app dev to hydrogen deployments.

javascript 27 shipped 1-min read

Elsewhere on the wire

AI Agents about 6 hours ago

CLAUDE OPUS 5 LANDS ACROSS THE STACK

The newest Anthropic model is now live in langchain, Cline, and llama-index, with native support for extended reasoning and 1M context windows.

ai-agents 28 shipped 1-min read

Local LLMs about 6 hours ago

OLLAMA LANDS LAGUNA SUPPORT AND CRUSHES MEMORY LEAKS WHILE SGLANG HITS V0.5.16 WITH CONFIDENCE-DRIVEN SPECULATIVE DECODING

Ollama shipped three critical performance and reliability fixes for Metal residency and concurrent access patterns, while SGL-Lang released 0.5.16 with a new speculative algorithm hitting 383.7 tok/s on DeepSeek-V4.