RepoJournal
Shopify

Shopify

Hydrogen, Polaris, and the CLI - the dev platform behind millions of stores

Keep up with Shopify in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

One email a day. Unsubscribe in one click.

Pick a date

  1. Wed 17 jun
  2. Thu 18 jun
  3. Sat 27 jun
  4. Tue 30 jun
  5. Wed 1 jul
  6. Thu 2 jul
  7. Fri 3 jul
  8. Sat 4 jul
  9. Tue 7 jul
  10. Wed 8 jul
  11. Thu 9 jul
  12. Fri 10 jul
  13. Sat 11 jul
  14. Tue 14 jul
  15. Wed 15 jul
  16. Thu 16 jul
  17. Sat 18 jul
  18. Tue 21 jul
  19. Fri 24 jul
  20. Tue 28 jul
  21. Wed 29 jul
  22. Thu 30 jul
  23. Fri 31 jul
  24. Sat 1 aug
  25. Tue 4 aug
  26. Wed 5 aug
  27. Thu 6 aug
  28. Fri 7 aug
  29. Sat 8 aug
  30. Today 11 aug
Topics: JavaScript Full archive →

The Wire · Showcase

CLI 4.6.1 PATCHES SOURCE MAPS, REVERTS TYPESCRIPT BUNDLING BREAKAGE

By RepoJournal · Filed · About Shopify

Craig Martin github-actions[bot] gonzaloriestra
3 people shipped this
Craig Martin @craigmichaelmartin 2 cited github-actions[bot] @github-actions[bot] 1 cited gonzaloriestra @gonzaloriestra 1 cited

Shopify CLI shipped a hotfix for UI extension source maps, but immediately rolled back a production-breaking change that removed TypeScript from the bundle.

Shopify CLI 4.6.1 went live with a cherry-picked fix to serve UI extension source maps during development [1]. The fix shipped cleanly via the stable/4.6 branch [2], and the team followed standard release hygiene by removing the changeset from main to prevent duplicate changelog entries in the upcoming 4.7.0 release [3]. However, an earlier commit to remove TypeScript from the production CLI bundle [4] broke the app dev command entirely, leaving developers unable to run shopify app dev. The revert is already staged [4] and addresses the immediate blockers. The team executed 4 commits and 2 PRs across the cycle, keeping the hotfix cycle tight.

One email a day. Unsubscribe in one click.

Action items

References

  1. [1] 4.6.1 ↗ Shopify/cli
  2. [2] Remove .changeset/serve-ui-extension-source-maps-in-dev.md ↗ Shopify/cli
  3. [3] Remove .changeset/serve-ui-extension-source-maps-in-dev.md Shopify/cli
  4. [4] Revert "Avoid bundling TypeScript in the production CLI" ↗ Shopify/cli

Quick answers

What shipped in Shopify on August 8, 2026?
Shopify CLI shipped a hotfix for UI extension source maps, but immediately rolled back a production-breaking change that removed TypeScript from the bundle. In total, 4 commits, 2 pull requests, and 1 releases landed.
Who contributed to Shopify on August 8, 2026?
3 developers shipped this update, including Craig Martin, github-actions[bot], and gonzaloriestra.
What were the notable Shopify updates?
4.6.1, Remove .changeset/serve-ui-extension-source-maps-in-dev.md, and Remove .changeset/serve-ui-extension-source-maps-in-dev.md.

More from Shopify

Shopify Shopify

CLI PATCHES TWO SECURITY HOLES IN GIT INITIALIZATION AND NOTIFICATION HANDLING

Shopify/cli shipped emergency fixes for argument injection in git repository setup and URL validation flaws that could expose merchant deployments.

Gonzalo Riestra Donald Merand isaacroldan
javascript 47 shipped
Shopify Shopify

CLI STARTUP GETS 30% FASTER AS SHOPIFY DROPS REACT FROM BOOT PATH

Shopify's CLI now skips loading the entire terminal UI runtime on every invocation, cutting startup overhead before any command runs.

alexanderMontague isaacroldan gonzaloriestra frandiox
javascript 54 shipped
Shopify Shopify

CLI TOKEN DEBUGGING GETS TEETH, HYDROGEN STOPS NUKING SESSIONS ON BLIPS

Shopify CLI now exposes the actual reason token exchanges fail instead of dead-end error messages, while Hydrogen stops logging out customers when OAuth endpoints hiccup.

wes-shaw Gonzalo Riestra Aubron Wood markusvoigt
javascript 41 shipped
Shopify Shopify

CLI TIGHTENS FUNCTION TYPES, LOCKS DOWN NON-INTERACTIVE FLAGS

Shopify Function GraphQL scalars now ship with proper TypeScript mappings instead of unsafe `any` types, while CLI commands gain infrastructure to enforce required flags in automation flows.

davejcameron isaacroldan gonzaloriestra Aubron +2
javascript 45 shipped

Daily updates, in your inbox

Follow Shopify

Keep up with Shopify in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

One email a day. Unsubscribe in one click. Read a past issue →

Elsewhere on the wire

AI Agents AI Agents

LANGCHAIN PATCHES TOOL CALLS, OPENHANDS SURFACES HIDDEN INTEGRATIONS

LangChain's OpenAI wrapper shipped a fix for invalid tool calls that were silently dropped, while OpenHands surfaced integrations the automation layer was burying.

github-actions[bot] langchain-oss-model-profiles[bot] langchain-oss-model-profiles ccurme +7
ai-agents 44 shipped
Local LLMs Local LLMs

OLLAMA PATCHES CRITICAL PARSER BUG, NEMOTRON 3 LANDS WITH SPECULATIVE DECODING

Ollama shipped v0.32.7 with a critical fix for boundary token corruption in model invocation, while full MLX support for Nemotron 3 Nano Omni brings self-draft speculation to inference without a separate draft model.

dhiltgen Pedro Cuenca Pascal github-actions[bot] +11
llms 271 shipped
CachyOS @CachyOS

CACHYOS LINUX 7.1.8 SHIPS WITH VMALLOC OPTIMIZATIONS; NOCTALIA CONFIG UPDATED FOR BETA 8

CachyOS Linux 7.1.8 landed overnight with upstream rebase and performance tuning across memory allocation, while Noctalia configuration hardened for beta 8 stability with direct_scanout gaming support.

witchlliee Jinra SoongVilda cantosun99 +7
infra 83 shipped
Elixir & Phoenix Elixir & Phoenix

PHOENIX LIVE VIEW PATCHES OPEN REDIRECT VULNERABILITY ACROSS TWO VERSIONS

Phoenix Live View shipped emergency security fixes for CVE-2026-64941 in both v1.1.33 and v1.2.9 to close an open redirect hole via ASCII control characters in the redirect/2 function.

José Valim Patric github-actions[bot] SteffenDE +1
elixir 14 shipped
Want every project, not just this one?