$ the-wire · showcase
Shopify CLI drops CVE audit from app doctor, adds typed command events
By RepoJournal · Filed · About Shopify · Composed from the cited sources · methodology
2 people shipped this
Shopify CLI removed the dependency CVE audit from app doctor and laid the groundwork for typed JSON results and structured command diagnostics.
Merge pull request #8555 from Shopify/joshlarson/remove-app-doctor-cve-audit Shopify/cli
The dependency CVE audit check is gone from app doctor, so that command no longer reports vulnerable packages in your app's dependency tree. If you relied on it as a pre-deploy gate, you need another scanner.
Add command side event infrastructure Shopify/cli
Typed diagnostic and progress events with timestamps, backed by an AsyncLocalStorage event context per command execution, give finite commands structured output separate from their final result.
Add JSON result schema infrastructure Shopify/cli
Typed JSON result schemas with validation and encoding now surface through BaseCommand and generated command help, and unsupported or unnamed nested schema constructs are rejected.
Fix loading bar cleanup when tasks log messages Shopify/cli
Calling outputInfo() or outputWarn() during an Ink task wrote straight to stderr and left the loading bar on screen after the task finished; those logs now route through Ink's console interception so messages stay visible and the task UI clears.
Add workflow to create PRs from the Gardener backlog Shopify/cli
A new workflow has Claude pick the highest-priority eligible CLI issue off the Gardener board, open a draft PR, and post the linked title in #devtools-gardener-backlog, running Monday through Friday at 00:00 UTC or on demand.
