RepoJournal
Shopify Shopify
127 wires and counting

$ follow Shopify

Keep up with Shopify in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-07-30
stories 16
RSS Archive Reviews

© 2026 RepoJournal Home Showcase How it works Privacy

$ the-wire · showcase

SHOPIFY CLI CLOSES STORE DELETE REGRESSION, ADDS CONFIRMATION GATES

By RepoJournal · Filed · About Shopify · Composed from the cited sources · methodology

alfonso-noriega
1 person shipped this
alfonso-noriega @alfonso-noriega 5 cited

Alfonso Noriega shipped three connected fixes for the store-auth session reuse regression that broke theme commands for OAuth users, then added irreversible deletion safeguards to prevent accidental store wipes.

The regression from CLI 4.4.0 hit Enterprise Support hard: store-auth sessions were being reused automatically across all theme commands without checking scopes, silencing OAuth users [1]. Noriega stacked three layers to fix it. First, he made session reuse opt-in per theme command [1], blocking the silent adoption that triggered the regression. Second, he added expiry checking [2] because theme commands were reading cached store-auth tokens but never validating their freshness, handing 401s to the Admin API with no refresh handler. Third, he wired verbose logging [3] so support can see exactly why a stored session was adopted, skipped, or rejected without tracing code. In parallel, Noriega shipped the `shopify store delete` command [4] that Business Platform now requests but CLI never had, then immediately wrapped it with confirmation UX [5]: store name required in interactive mode, `--force` required for CI, because deleting a development store is permanent. Ten commits, six PRs, one engineer closing a production hole and hardening a dangerous operation.

$ ls shopify/reviews/ # the step-back reads

the week in review Shopify CLI goes machine-readable for agent tooling the month in review Shopify CLI 5.0 ships standardized JSON output
Full archive → Weekly reviews →

Quick answers

What shipped in Shopify on July 30, 2026?
Alfonso Noriega shipped three connected fixes for the store-auth session reuse regression that broke theme commands for OAuth users, then added irreversible deletion safeguards to prevent accidental store wipes. In total, 10 commits and 6 pull requests landed.
Who contributed to Shopify on July 30, 2026?
1 developer shipped this update, including alfonso-noriega.
What were the notable Shopify updates?
Make store auth session reuse opt-in per theme command, Skip expired store auth sessions in theme commands, and Log store auth session decisions in theme commands under --verbose.
♥

$ log Shopify --recent

Hydrogen moves CSP into the core package, and a Vite build fix stops 500s on Oxygen 10 shipped Hydrogen stops leaking client IPs, app dev stops crashing on bad frames 21 shipped Theme tooling goes machine-readable, docs drift breaks CI 45 shipped Theme dev server stops forcing the exit page, and GraphiQL learns JSON 12 shipped

$ log --all # elsewhere on the wire

Agent Security Quiet day in agent security as guard coverage reaches four clients Alignment & Post-training verl defaults Ascend RL mode, open-instruct unblocks SFT packing

$ ls showcases/

Safety Evals AI Red Teaming Agent Security Interpretability Alignment & Post-training

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.