RepoJournal
Shopify Shopify
127 wires and counting

$ follow Shopify

Keep up with Shopify in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-08-22
stories 2
RSS Archive Reviews

© 2026 RepoJournal Home Showcase How it works Privacy

$ the-wire · showcase

SHOPIFY CLI BLOCKS BAD VARIABLES BEFORE GRAPHQL

By RepoJournal · Filed · About Shopify · Composed from the cited sources · methodology

dmerand
1 person shipped this
dmerand @dmerand 2 cited

A one-line fix in Shopify's CLI just closed a hole that let malformed variables slip straight into GraphQL.

Shopify's CLI now rejects invalid store execute variables locally, stopping null, arrays, and primitives from ever reaching GraphQL [1]. The patch lands via PR #8321, which dmerand merged after adding regression coverage for both inline and file-backed inputs [2]. This is a small but essential hardening step for anyone automating store operations. If you pass `--variables` or `--variable-file` in CI, this change means failures surface early with a clear `AbortError` instead of cryptic downstream errors. The merge is already in, so pull the latest CLI and let the validation do its job.

$ ls shopify/reviews/ # the step-back reads

the week in review Shopify CLI goes machine-readable for agent tooling the month in review Shopify CLI 5.0 ships standardized JSON output
Full archive → Weekly reviews →

Quick answers

What shipped in Shopify on August 22, 2026?
A one-line fix in Shopify's CLI just closed a hole that let malformed variables slip straight into GraphQL. In total, 1 commits and 1 pull requests landed.
Who contributed to Shopify on August 22, 2026?
1 developer shipped this update, including dmerand.
What were the notable Shopify updates?
Reject invalid store execute variables and Merge pull request #8321 from Shopify/donald/store-execute-variable-validation.
♥

$ log Shopify --recent

Hydrogen moves CSP into the core package, and a Vite build fix stops 500s on Oxygen 10 shipped Hydrogen stops leaking client IPs, app dev stops crashing on bad frames 21 shipped Theme tooling goes machine-readable, docs drift breaks CI 45 shipped Theme dev server stops forcing the exit page, and GraphiQL learns JSON 12 shipped

$ log --all # elsewhere on the wire

Agent Security Quiet day in agent security as guard coverage reaches four clients Alignment & Post-training verl defaults Ascend RL mode, open-instruct unblocks SFT packing

$ ls showcases/

Safety Evals AI Red Teaming Agent Security Interpretability Alignment & Post-training

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.