RepoJournal
Shopify Shopify
127 wires and counting

$ follow Shopify

Keep up with Shopify in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-10-06
stories 47
RSS Archive Reviews

© 2026 RepoJournal Home Showcase How it works Privacy

$ the-wire · showcase

App Security checks get docs links, telemetry, and a config prompt

By RepoJournal · Filed · About Shopify · Composed from the cited sources · methodology

Josh Larson Jason Kirtland
2 people shipped this
Josh Larson @jplhomer 2 cited Jason Kirtland @jek 2 cited

The Shopify CLI's App Security checks shipped a cluster of usability and instrumentation work: findings now link to shopify.dev, prompt for an app configuration, and report counts into command analytics.

Merge pull request #8762 from Shopify/app-doctor/config-prompt Shopify/cli

by jason kirtland

Running App Security with no app configuration selected used to leave the scan without a target; the CLI now asks which configuration to scan. That removes the dead-end for anyone running the check from a repo with multiple app configs.

Merge pull request #8743 from Shopify/joshlarson/app-security-telemetry Shopify/cli

by Josh Larson

Finding counts from App Security now flow into command analytics, so the CLI team can see how many findings each run surfaces. Nothing changes in the output developers read, only what gets recorded.

Link App Security checks to their shopify.dev docs pages Shopify/cli

by Josh Larson

Each App Security check links to its corresponding page on shopify.dev, so the remediation guidance sits one click from the finding instead of requiring a search. Josh Larson landed it, with a merge of the docs-links branch carrying the same change.

Clean all App Security results without selecting an app configuration Shopify/cli

by Jason Kirtland

Cleaning App Security results no longer depends on picking an app configuration first. Previously the cleanup path required a selected config; it now clears all results.

$ ls shopify/reviews/ # the step-back reads

the week in review Shopify CLI goes machine-readable for agent tooling the month in review Shopify CLI 5.0 ships standardized JSON output
Full archive → Weekly reviews →

Quick answers

What shipped in Shopify on October 6, 2026?
The Shopify CLI's App Security checks shipped a cluster of usability and instrumentation work: findings now link to shopify.dev, prompt for an app configuration, and report counts into command analytics. In total, 33 commits and 14 pull requests landed.
Who contributed to Shopify on October 6, 2026?
2 developers shipped this update, including Josh Larson and Jason Kirtland.
What were the notable Shopify updates?
Merge pull request #8762 from Shopify/app-doctor/config-prompt, Merge pull request #8743 from Shopify/joshlarson/app-security-telemetry, and Link App Security checks to their shopify.dev docs pages.
♥

$ log Shopify --recent

Hydrogen moves CSP into the core package, and a Vite build fix stops 500s on Oxygen 10 shipped Hydrogen stops leaking client IPs, app dev stops crashing on bad frames 21 shipped Theme tooling goes machine-readable, docs drift breaks CI 45 shipped Theme dev server stops forcing the exit page, and GraphiQL learns JSON 12 shipped

$ log --all # elsewhere on the wire

Agent Security Quiet day in agent security as guard coverage reaches four clients Alignment & Post-training verl defaults Ascend RL mode, open-instruct unblocks SFT packing

$ ls showcases/

Safety Evals AI Red Teaming Agent Security Interpretability Alignment & Post-training

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.