Who contributed to Shopify on June 13, 2026?

3 developers shipped this update, including gonzaloriestra, dependabot[bot], and andguy95.

What were the notable Shopify updates?

Extract GraphiQL server to @shopify/cli-kit, Make GraphiQL server auth-agnostic, and Bump the development_dependencies group across 1 directory with 27 updates.

Shopify

Hydrogen, Polaris, and the CLI - the dev platform behind millions of stores

Pick a date

Topics: JavaScript Full archive →

The Wire · Showcase

CLI REFACTORS GRAPHIQL SERVER FOR PLATFORM REUSE

By RepoJournal · Filed 06:03 UTC on June 13, 2026 · About Shopify

3 people shipped this

gonzaloriestra @gonzaloriestra 2 cited

dependabot[bot] @dependabot[bot] 2 cited

andguy95 @andguy95 1 cited

Shopify/cli is extracting its GraphiQL server from the app package into cli-kit, making it available across other tools while shipping 40 dependency updates.

The team moved the GraphiQL server, templates, utilities, and assets into @shopify/cli-kit [1], then updated app dev to import from there while keeping bundled asset resolution intact. This clears the path for other packages to spin up GraphQL debugging without duplicating code. In parallel, the same codebase made the server auth-agnostic [2], so Store GraphiQL can work with tokens outside the app dev client credentials flow. A separate token provider module was extracted with full test coverage. Dependency maintenance continues steady: 27 development dependencies bumped [3], including @changesets/cli, @graphql-codegen packages, and 13 minor version updates [4] across TypeScript-ESLint, GraphQL, and Prettier. Over in hydrogen, a one-character fix landed [5]: the preview release npm publish path now uses `./packages/hydrogen` instead of `packages/hydrogen`, preventing npm from misinterpreting the path as a GitHub shorthand spec.

Action items

→ Review GraphiQL extraction in cli-kit to ensure your integrations still point to the right imports Shopify/cli [plan]
→ Upgrade development dependencies in your CLI fork if you track them upstream Shopify/cli [monitor]
→ Verify hydrogen preview releases are publishing correctly after npm path fix Shopify/hydrogen [immediate]

References

[1] Extract GraphiQL server to @shopify/cli-kit ↗ Shopify/cli
[2] Make GraphiQL server auth-agnostic ↗ Shopify/cli
[3] Bump the development_dependencies group across 1 directory with 27 updates ↗ Shopify/cli
[4] Bump the minor_versions group across 1 directory with 13 updates ↗ Shopify/cli
[5] Fix preview release npm publish path ↗ Shopify/hydrogen

Quick answers

What shipped in Shopify on June 13, 2026?: Shopify/cli is extracting its GraphiQL server from the app package into cli-kit, making it available across other tools while shipping 40 dependency updates. In total, 20 commits and 7 pull requests landed.
Who contributed to Shopify on June 13, 2026?: 3 developers shipped this update, including gonzaloriestra, dependabot[bot], and andguy95.
What were the notable Shopify updates?: Extract GraphiQL server to @shopify/cli-kit, Make GraphiQL server auth-agnostic, and Bump the development_dependencies group across 1 directory with 27 updates.

SHOPIFY CLI ADDS THEME UTILITY TEST COVERAGE

Shopify's CLI tooling now has comprehensive unit tests covering core theme utility functions, closing a coverage gap in the theme management layer.

javascript 2 shipped 1-min read

Shopify 7 days ago

SHOPIFY CLI CUTS SUPPLY-CHAIN RISK WITH SEVEN-DAY DEPENDABOT HOLD

Shopify CLI just implemented a seven-day cooldown on npm dependency updates, blocking Dependabot from proposing fresh packages before the ecosystem has time to validate them.

javascript 6 shipped 1-min read

Shopify 10 days ago

SHOPIFY CLI TIGHTENS TEST COVERAGE ACROSS AUTH AND WARNING SYSTEMS

Shopify/cli shipped comprehensive unit tests for critical warning and storage systems, closing gaps that could hide regressions in production auth flows.

javascript 15 shipped 1-min read

Shopify 12 days ago

CLI AUTOMATION SWEEP KILLS INTERACTIVE PROMPTS ACROSS SHOPIFY TOOLS

Shopify's interactivity audit is shipping widespread fixes to eliminate blocking prompts in non-interactive workflows, from app dev to hydrogen deployments.

javascript 27 shipped 1-min read

Elsewhere on the wire

AI Agents about 21 hours ago

CLINE SHIPS FIVE CRITICAL AGENT FIXES AFTER END-TO-END TESTING BLITZ

Saoudrizwan just landed a cascade of fixes that prevent the agent loop from running wild, stop file reads from resolving to the wrong directory, and plug the compaction pipeline.

ai-agents 16 shipped 2-min read

Local LLMs about 21 hours ago

LLAMA.CPP SHIPS MINIMAX-M3 SPARSE ATTENTION, VLLM UNLOCKS HETEROGENEOUS PREFILL-DECODE

The inference stack gets a new model architecture and a fundamental shift in how prefill and decode can run on different hardware configurations.

+10

llms 125 shipped 1-min read

@CachyOS about 21 hours ago

GLIBC 2.43 REBUILD SHIPS, INSTALLER JUMPS TO C++26

CachyOS pushed glibc 2.43 through the pipeline while the CLI installer upgraded its C++ standard to C++26, signaling a major refresh across core infrastructure.

infra 97 shipped 1-min read

Elixir & Phoenix about 21 hours ago

ECTO FIXES SUBQUERY PLANNING IN JOINS, ELIXIR PATCHES IEX PARSING

Ecto's query planner now handles subqueries correctly in interpolated join filters, while Elixir fixes a syntax error that broke 'not in' as a continuation operator in IEx.