Who contributed to Shopify on August 1, 2026?

5 developers shipped this update, including Isaac Roldán, github-actions[bot], davejcameron, dmerand, and vividviolet.

What were the notable Shopify updates?

4.6.0, [Feature] Add profiling to app function run, and Serve UI extension source maps during app dev.

Shopify

Hydrogen, Polaris, and the CLI - the dev platform behind millions of stores

Pick a date

Topics: JavaScript Full archive →

The Wire · Showcase

SHOPIFY CLI 4.6.0 SHIPS WITH FUNCTION PROFILING AND SOURCE MAP FIXES

By RepoJournal · Filed 06:59 UTC on August 1, 2026 · About Shopify

5 people shipped this

Isaac Roldán @isaacroldan 1 cited

github-actions[bot] @github-actions[bot] 1 cited

davejcameron @davejcameron 1 cited

vividviolet @vividviolet 1 cited

dmerand @dmerand

The Shopify CLI gains WebAssembly performance profiling for app functions while fixing a critical bug that broke UI extension source maps in local development.

Shopify CLI 4.6.0 [1] landed with meaningful improvements across the developer experience stack. The release removes deprecated extension processes and dev session branching [1], but the two features that matter most are profiling and debugging. You can now profile app functions directly from the CLI with a new `--profile` flag that forwards to Function Runner and outputs Speedscope-compatible data [2], solving the long-standing gap between what the runner could do and what developers could actually use. More critical: UI extension source maps are now served correctly during `shopify app dev` [3], restoring DevTools visibility after a regression left the dev server 404ing map requests. The CLI also adds `--flags` to skip interactive prompts during app config linking [1] and fixes a domain-matching bug in storeByDomain that could connect to the wrong store on substring domains [1]. Security-wise, loadtest header injection domains have been narrowed [4], reducing surface area. This is a solid incremental release with two bugs that needed fixing and one powerful new capability for performance-conscious function developers.

Action items

→ Upgrade to Shopify CLI 4.6.0 if you're debugging UI extensions or profiling functions Shopify/cli [plan]
→ Update if you use storeByDomain with substring-matching domain logic Shopify/cli [immediate]
→ Enable Claude Code plugin hints if running CLI in Claude Code environments Shopify/cli [monitor]

References

[1] 4.6.0 ↗ Shopify/cli
[2] [Feature] Add profiling to app function run ↗ Shopify/cli
[3] Serve UI extension source maps during app dev ↗ Shopify/cli
[4] Narrow loadtest header injection domains Shopify/cli

Quick answers

What shipped in Shopify on August 1, 2026?: The Shopify CLI gains WebAssembly performance profiling for app functions while fixing a critical bug that broke UI extension source maps in local development. In total, 12 commits, 9 pull requests, and 1 releases landed.
Who contributed to Shopify on August 1, 2026?: 5 developers shipped this update, including Isaac Roldán, github-actions[bot], davejcameron, dmerand, and vividviolet.
What were the notable Shopify updates?: 4.6.0, [Feature] Add profiling to app function run, and Serve UI extension source maps during app dev.

CLI TOKEN DEBUGGING GETS TEETH, HYDROGEN STOPS NUKING SESSIONS ON BLIPS

Shopify CLI now exposes the actual reason token exchanges fail instead of dead-end error messages, while Hydrogen stops logging out customers when OAuth endpoints hiccup.

javascript 41 shipped

Shopify Aug 5

CLI TIGHTENS FUNCTION TYPES, LOCKS DOWN NON-INTERACTIVE FLAGS

Shopify Function GraphQL scalars now ship with proper TypeScript mappings instead of unsafe `any` types, while CLI commands gain infrastructure to enforce required flags in automation flows.

javascript 45 shipped

Shopify Aug 4

SHOPIFY CLI WARNS DEVELOPERS ABOUT SENSITIVE DATA IN VERBOSE LOGS

The Shopify CLI now explicitly flags that --verbose output may leak sensitive information, closing a gap in the redaction pipeline.

javascript 7 shipped

Shopify Jul 31

HYDROGEN DEBUGGER GETS STABILITY FIX ACROSS CLI AND RUNTIME

Shopify shipped coordinated patches to both cli-hydrogen and mini-oxygen that fix local debugger reliability, rolling out the first updates in this cycle.

javascript 3 shipped

Elsewhere on the wire

AI Agents Aug 6

LANGCHAIN HARDENS ANTHROPIC TOOL CALLING AND GIT CREDENTIALS AS OPENHANDS SHIPS 1.10.0

LangChain fixed a critical credential leak in evaluation runs while Anthropic tool schemas get proper fallback handling, as three major agent frameworks push releases across the ecosystem.

ai-agents 54 shipped

Local LLMs Aug 6

OLLAMA FIXES KV CACHE CORRUPTION, LLAMA.CPP HARDENS FILE SEARCH, VLLM KILLS MOE LEGACY CODE

Ollama patched a critical cache corruption bug that corrupts lazy snapshots during multi-request prefills, while llama.cpp hardened Windows junction traversal and vLLM removed 14 hardcoded MoE shards across quantization methods.