Who contributed to Shopify on August 6, 2026?

4 developers shipped this update, including wes-shaw, Gonzalo Riestra, Aubron Wood, and markusvoigt.

What were the notable Shopify updates?

Log the reason a token exchange fails in verbose output, Fix customer logout when token refresh fails with transient errors, and [Tests] Add unit tests for ShopifyConfig custom oclif loader.

Shopify

Hydrogen, Polaris, and the CLI - the dev platform behind millions of stores

Pick a date

Topics: JavaScript Full archive →

The Wire · Showcase

CLI TOKEN DEBUGGING GETS TEETH, HYDROGEN STOPS NUKING SESSIONS ON BLIPS

By RepoJournal · Filed 06:59 UTC on August 6, 2026 · About Shopify

4 people shipped this

Gonzalo Riestra @gonzaloriestra 4 cited

wes-shaw @wes-shaw 1 cited

Aubron Wood @Aubron 1 cited

markusvoigt @markusvoigt 1 cited

Shopify CLI now exposes the actual reason token exchanges fail instead of dead-end error messages, while Hydrogen stops logging out customers when OAuth endpoints hiccup.

The CLI's token exchange failure has been a black box for developers hitting CI walls. Starting today, when an app automation token exchange dies, verbose output includes the OAuth error code and description from Identity's response [1], turning a useless "can't be used for the App Management API" into actionable debugging data. On the Hydrogen side, a transient failure in the Customer Account token refresh endpoint no longer nukes the entire session [2]. The fix distinguishes between transient 5xx errors and network blips, which should be retried, versus genuine credential rejection (4xx), which warrants logout. Polaris documentation infrastructure is being corrected after the repo rename from polaris-react to polaris-react-archive, ensuring the static GitHub Pages export deploys to the right base path [6]. The test suite across CLI continues to expand with comprehensive coverage for ShopifyConfig loaders, path utilities, and abort controllers [3], [4], [5]. Hydrogen storefronts now ship with agent-friendly guidance pointing scaffolded projects toward the Shopify AI Toolkit for LLM-compatible validation [7].

Action items

→ Pull the latest CLI to get token exchange error context in verbose logs Shopify/cli [plan]
→ Update Hydrogen deployments to stop session wipeouts on transient OAuth failures Shopify/hydrogen [plan]
→ Verify Polaris docs deploy to correct GitHub Pages path after repo rename Shopify/polaris [immediate]

References

[1] Log the reason a token exchange fails in verbose output ↗ Shopify/cli
[2] Fix customer logout when token refresh fails with transient errors ↗ Shopify/hydrogen
[3] [Tests] Add unit tests for ShopifyConfig custom oclif loader ↗ Shopify/cli
[4] Merge pull request #8176 from Shopify/tests-path-coverage-2046332310498932967 Shopify/cli
[5] Merge pull request #8144 from Shopify/tests-abort-controller-8501718038938971862 Shopify/cli
[6] Update Pages basePath for the repo rename, add npm deprecation workflow (#14422) Shopify/polaris
[7] Recommend Shopify AI Toolkit in scaffolded storefronts ↗ Shopify/hydrogen

Quick answers

What shipped in Shopify on August 6, 2026?: Shopify CLI now exposes the actual reason token exchanges fail instead of dead-end error messages, while Hydrogen stops logging out customers when OAuth endpoints hiccup. In total, 21 commits and 20 pull requests landed.
Who contributed to Shopify on August 6, 2026?: 4 developers shipped this update, including wes-shaw, Gonzalo Riestra, Aubron Wood, and markusvoigt.
What were the notable Shopify updates?: Log the reason a token exchange fails in verbose output, Fix customer logout when token refresh fails with transient errors, and [Tests] Add unit tests for ShopifyConfig custom oclif loader.

CLI TIGHTENS FUNCTION TYPES, LOCKS DOWN NON-INTERACTIVE FLAGS

Shopify Function GraphQL scalars now ship with proper TypeScript mappings instead of unsafe `any` types, while CLI commands gain infrastructure to enforce required flags in automation flows.

javascript 45 shipped

Shopify Aug 4

SHOPIFY CLI WARNS DEVELOPERS ABOUT SENSITIVE DATA IN VERBOSE LOGS

The Shopify CLI now explicitly flags that --verbose output may leak sensitive information, closing a gap in the redaction pipeline.

javascript 7 shipped

Shopify Aug 1

SHOPIFY CLI 4.6.0 SHIPS WITH FUNCTION PROFILING AND SOURCE MAP FIXES

The Shopify CLI gains WebAssembly performance profiling for app functions while fixing a critical bug that broke UI extension source maps in local development.

javascript 22 shipped

Shopify Jul 31

HYDROGEN DEBUGGER GETS STABILITY FIX ACROSS CLI AND RUNTIME

Shopify shipped coordinated patches to both cli-hydrogen and mini-oxygen that fix local debugger reliability, rolling out the first updates in this cycle.

javascript 3 shipped

Elsewhere on the wire

AI Agents Aug 6

LANGCHAIN HARDENS ANTHROPIC TOOL CALLING AND GIT CREDENTIALS AS OPENHANDS SHIPS 1.10.0

LangChain fixed a critical credential leak in evaluation runs while Anthropic tool schemas get proper fallback handling, as three major agent frameworks push releases across the ecosystem.

ai-agents 54 shipped

Local LLMs Aug 6

OLLAMA FIXES KV CACHE CORRUPTION, LLAMA.CPP HARDENS FILE SEARCH, VLLM KILLS MOE LEGACY CODE

Ollama patched a critical cache corruption bug that corrupts lazy snapshots during multi-request prefills, while llama.cpp hardened Windows junction traversal and vLLM removed 14 hardcoded MoE shards across quantization methods.