Who contributed to Shopify on August 22, 2026?

1 developer shipped this update, including dmerand.

What were the notable Shopify updates?

Reject invalid store execute variables and Merge pull request #8321 from Shopify/donald/store-execute-variable-validation.

Shopify

Hydrogen, Polaris, and the CLI - the dev platform behind millions of stores

Pick a date

Topics: JavaScript Full archive →

The Wire · Showcase

SHOPIFY CLI BLOCKS BAD VARIABLES BEFORE GRAPHQL

By RepoJournal · Filed 06:58 UTC on August 22, 2026 · About Shopify

1 person shipped this

dmerand @dmerand 2 cited

A one-line fix in Shopify's CLI just closed a hole that let malformed variables slip straight into GraphQL.

Shopify's CLI now rejects invalid store execute variables locally, stopping null, arrays, and primitives from ever reaching GraphQL [1]. The patch lands via PR #8321, which dmerand merged after adding regression coverage for both inline and file-backed inputs [2]. This is a small but essential hardening step for anyone automating store operations. If you pass `--variables` or `--variable-file` in CI, this change means failures surface early with a clear `AbortError` instead of cryptic downstream errors. The merge is already in, so pull the latest CLI and let the validation do its job.

Action items

→ Update Shopify CLI to include PR #8321 Shopify/cli [immediate]

References

[1] Reject invalid store execute variables ↗ Shopify/cli
[2] Merge pull request #8321 from Shopify/donald/store-execute-variable-validation Shopify/cli

Quick answers

What shipped in Shopify on August 22, 2026?: A one-line fix in Shopify's CLI just closed a hole that let malformed variables slip straight into GraphQL. In total, 1 commits and 1 pull requests landed.
Who contributed to Shopify on August 22, 2026?: 1 developer shipped this update, including dmerand.
What were the notable Shopify updates?: Reject invalid store execute variables and Merge pull request #8321 from Shopify/donald/store-execute-variable-validation.

Shopify CLI Fixes Silent Loopback Rejection

Your local notifications server was being ignored, but this patch fixes that.

javascript 6 shipped

Shopify Aug 20

Shopify CLI 4.7.0 lands with dev tools and performance boosts

Shopify CLI 4.7.0 ships with source maps for UI extensions and profiling for app functions, tightening the loop for production debugging.

javascript 6 shipped

Shopify Aug 15

CLI LATENCY DROPS, THROTTLING FIXED, HYDROGEN OAUTH HARDENS

Shopify's CLI is shipping background analytics to eliminate command blocking, while three critical authentication fixes land across the platform.

javascript 17 shipped

Shopify Aug 14

SHOPIFY CLI DROPS NODE 22 LEGACY CODE

The CLI team ripped out compatibility shims and polyfills that shouldn't have survived the Node 22.12.0 minimum bump.

javascript 2 shipped

Elsewhere on the wire

AI Agents Aug 22

Cline hubs get drain and replay as Langchain plumb gates

Cline just shipped rollover-grade hub commands while Langchain exposes gateway internals, and OpenHands quietly broke its own monitoring contract.

ai-agents 42 shipped

Local LLMs Aug 22

SGLang ships v0.5.18 with 710 PRs and DeepSeek V4 FP4 auto-routing

The biggest release of the week just landed: SGLang v0.5.18 adds new models, fixes a silent disagg bug, and defaults DeepSeek V4 FP4 checkpoints to the right MoE runner.