RepoJournal
Shopify Shopify
127 wires and counting

$ follow Shopify

Keep up with Shopify in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-05-30
stories 5
RSS Archive Reviews

© 2026 RepoJournal Home Showcase How it works Privacy

$ the-wire · showcase

SHOPIFY CLI FIXES DEV THEME PERSISTENCE BUG AFTER SFR MIGRATION

By RepoJournal · Filed · About Shopify · Composed from the cited sources · methodology

EvilGenius13 graygilmore
2 people shipped this
EvilGenius13 @EvilGenius13 1 cited graygilmore @graygilmore 1 cited

A latent redirect handling bug surfaced this week when Shopify moved preview theme binding from server-side storage to cookies, causing dev themes to occasionally render as live in the storefront renderer.

The storefront renderer was using fetch's default 'follow' redirect behavior, which silently dropped Set-Cookie headers that bind the _shopify_essential cookie to dev themes [1]. After SFR migrated preview_theme_id to cookie-based storage, this bug started manifesting as dev preview occasionally showing the live theme instead [1]. The fix switches to manual redirect handling and patches response headers to preserve the session cookie while letting browsers follow redirects cleanly [1]. In parallel, CLI shipped a fix for a password validation loop affecting theme app developers [2]. The issue surfaced when ensureValidPassword started treating empty strings as valid input, bypassing the normal prompt fallback that password-protected stores relied on [2]. Both fixes are now merged and rolled into the CLI [3] [4].

$ ls shopify/reviews/ # the step-back reads

the week in review Shopify CLI goes machine-readable for agent tooling the month in review Shopify CLI 5.0 ships standardized JSON output
Full archive → Weekly reviews →

Quick answers

What shipped in Shopify on May 30, 2026?
A latent redirect handling bug surfaced this week when Shopify moved preview theme binding from server-side storage to cookies, causing dev themes to occasionally render as live in the storefront renderer. In total, 3 commits and 2 pull requests landed.
Who contributed to Shopify on May 30, 2026?
2 developers shipped this update, including EvilGenius13 and graygilmore.
What were the notable Shopify updates?
fix(theme): preserve dev preview theme across SFR redirects, Use validated storefront password for theme apps, and Merge pull request #7642 from Shopify/fix/theme-dev-redirect-manual.
♥

$ log Shopify --recent

Hydrogen moves CSP into the core package, and a Vite build fix stops 500s on Oxygen 10 shipped Hydrogen stops leaking client IPs, app dev stops crashing on bad frames 21 shipped Theme tooling goes machine-readable, docs drift breaks CI 45 shipped Theme dev server stops forcing the exit page, and GraphiQL learns JSON 12 shipped

$ log --all # elsewhere on the wire

Agent Security Quiet day in agent security as guard coverage reaches four clients Alignment & Post-training verl defaults Ascend RL mode, open-instruct unblocks SFT packing

$ ls showcases/

Safety Evals AI Red Teaming Agent Security Interpretability Alignment & Post-training

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.