$ the-wire · showcase
App Doctor gains a dependency automation check, organization list gets a JSON schema
By RepoJournal · Filed · About Shopify · Composed from the cited sources · methodology
3 people shipped this
Shopify's CLI picks up two new contracts for tooling consumers: a low-severity App Doctor check for missing dependency-automation config, and a typed JSON schema for organization list.
Check for dependency automation configuration files in App Doctor Shopify/cli
App Doctor now adds MISSING_DEPENDENCY_SECURITY_AUTOMATION, a low-severity check worth -5 points, satisfied by a standard Dependabot or Renovate configuration file. It follows the removal of package-manager CVE audits and deliberately avoids interpreting CI workflows or shell commands, so projects with dependency automation already in place will not lose points.
Add JSON schema to organization list Shopify/cli
shopify organization list --json is now a typed, discoverable contract backed by the strict OrganizationListResult schema, with generated --json-schema documentation. The result also carries public organization data the command can return without a second API request, which saves JSON consumers a round trip.
Review fixes for the store signup JWT handoff Shopify/cli
Review fixes for the store signup JWT handoff, stacked on signup-stdin-loopback and rebased onto main after #8427 merged. The manifest commit was dropped from this branch and regenerated on the parent branch with pnpm refresh-manifests rather than transcribed from a CI log.
Regenerate GraphQL types for upstream schema comment fix Shopify/cli
GraphQL types were regenerated for an upstream schema comment fix, a routine sync with no behavior change for CLI consumers.
