RepoJournal
Shopify Shopify
127 wires and counting

$ follow Shopify

Keep up with Shopify in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-08-15
stories 17
RSS Archive Reviews

© 2026 RepoJournal Home Showcase How it works Privacy

$ the-wire · showcase

CLI LATENCY DROPS, THROTTLING FIXED, HYDROGEN OAUTH HARDENS

By RepoJournal · Filed · About Shopify · Composed from the cited sources · methodology

shopify-github-actions-access[bot] isaacroldan gonzaloriestra
3 people shipped this
shopify-github-actions-access[bot] @shopify-github-actions-access[bot] 5 cited isaacroldan @isaacroldan 3 cited gonzaloriestra @gonzaloriestra 1 cited

Shopify's CLI is shipping background analytics to eliminate command blocking, while three critical authentication fixes land across the platform.

The CLI is moving analytics delivery off the critical path [1], passing payloads to a detached process so commands exit immediately on Mac and Linux, though Windows still blocks. In the same release, retryAwareRequest now handles GraphQL throttling correctly [2], catching the 200 response with `extensions.code: "THROTTLED"` that App Management and other APIs return instead of a 429 code. E2E authentication infrastructure got a complete overhaul [3] [4], splitting local and remote test suites so transient device-login failures only retry once rather than nuking the entire run, and adding configuration validation upfront. On the Hydrogen side, OAuth state now uses cryptographically secure randomness to prevent session hijacking across browser contexts [7], while MiniOxygen added HTTP/2 support [6] and the CLI-hydrogen package fixed local command discovery [5]. Five releases shipped across the stack in the last 24 hours, with skeleton and create-hydrogen adding Shopify AI Toolkit recommendations to new storefronts [8] [9].

Action items

References

  1. [1] Send analytics in background ↗ Shopify/cli
  2. [2] Retry GraphQL requests rejected as Throttled without a 429 code ↗ Shopify/cli
  3. [3] Make E2E authentication setup resilient ↗ Shopify/cli
  4. [4] Split local and remote E2E tests ↗ Shopify/cli
  5. [5] @shopify/cli-hydrogen@13.0.4 ↗ Shopify/hydrogen
  6. [6] @shopify/mini-oxygen@4.2.2 ↗ Shopify/hydrogen
  7. [7] @shopify/hydrogen@2026.4.5 ↗ Shopify/hydrogen
  8. [8] skeleton@2026.4.6 ↗ Shopify/hydrogen
  9. [9] @shopify/create-hydrogen@5.0.39 ↗ Shopify/hydrogen

$ ls shopify/reviews/ # the step-back reads

the week in review Shopify CLI goes machine-readable for agent tooling the month in review Shopify CLI 5.0 ships standardized JSON output
Full archive → Weekly reviews →

Quick answers

What shipped in Shopify on August 15, 2026?
Shopify's CLI is shipping background analytics to eliminate command blocking, while three critical authentication fixes land across the platform. In total, 7 commits, 5 pull requests, and 5 releases landed.
Who contributed to Shopify on August 15, 2026?
3 developers shipped this update, including gonzaloriestra, isaacroldan, and shopify-github-actions-access[bot].
What were the notable Shopify updates?
Send analytics in background, Retry GraphQL requests rejected as Throttled without a 429 code, and Make E2E authentication setup resilient.
♥

$ log Shopify --recent

Hydrogen moves CSP into the core package, and a Vite build fix stops 500s on Oxygen 10 shipped Hydrogen stops leaking client IPs, app dev stops crashing on bad frames 21 shipped Theme tooling goes machine-readable, docs drift breaks CI 45 shipped Theme dev server stops forcing the exit page, and GraphiQL learns JSON 12 shipped

$ log --all # elsewhere on the wire

Agent Security Quiet day in agent security as guard coverage reaches four clients Alignment & Post-training verl defaults Ascend RL mode, open-instruct unblocks SFT packing

$ ls showcases/

Safety Evals AI Red Teaming Agent Security Interpretability Alignment & Post-training

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.