RepoJournal
Shopify Shopify
127 wires and counting

$ follow Shopify

Keep up with Shopify in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-10-09
stories 41
RSS Archive Reviews

© 2026 RepoJournal Home Showcase How it works Privacy

$ the-wire · showcase

Shopify CLI 4.9.0 adds typed JSON output for app bulk status

By RepoJournal · Filed · About Shopify · Composed from the cited sources · methodology

Isaac Roldán Josh Larson github-actions
3 people shipped this
Isaac Roldán @isaacroldan 3 cited Josh Larson @jplhomer 1 cited github-actions @github-actions

The Shopify CLI release train puts machine-readable output on app bulk status and lands the shared schema layer underneath it, while an app security scan change skips lockfiles.

Add typed JSON output to app bulk status Shopify/cli

by isaacroldan

@shopify/cli 4.9.0 gives callers a typed, discoverable JSON result for `app bulk status` instead of parsing terminal output, covering empty lists and missing operations. The existing text output is kept, so scripts reading text today are unaffected.

Prepare common JSON contracts for app bulk commands Shopify/cli

by isaacroldan

A separate shared layer adds the common bulk-operation and context schemas, explicit JSON projection, diagnostic presenter, and shared input fixtures, with tests for identifier formats, timestamps, count precision, missing values, and stderr event output. Reviewers can land the foundation independently of each command.

Merge pull request #8825 from Shopify/jplhomer/app-security-monorepo-lockfiles Shopify/cli

by Josh Larson

Every app security check scan directory now skips lockfiles, so monorepo lockfiles no longer enter the scan.

Remove unused status presenter test scaffolding Shopify/cli

by Isaac Roldán

Unused status presenter test scaffolding was removed from the CLI test suite.

$ ls shopify/reviews/ # the step-back reads

the week in review Shopify CLI goes machine-readable for agent tooling the month in review Shopify CLI 5.0 ships standardized JSON output
Full archive → Weekly reviews →

Quick answers

What shipped in Shopify on October 9, 2026?
The Shopify CLI release train puts machine-readable output on app bulk status and lands the shared schema layer underneath it, while an app security scan change skips lockfiles. In total, 28 commits, 11 pull requests, and 2 releases landed.
Who contributed to Shopify on October 9, 2026?
3 developers shipped this update, including Josh Larson, Isaac Roldán, and github-actions.
What were the notable Shopify updates?
Add typed JSON output to app bulk status, Prepare common JSON contracts for app bulk commands, and Merge pull request #8825 from Shopify/jplhomer/app-security-monorepo-lockfiles.
♥

$ log Shopify --recent

Hydrogen moves CSP into the core package, and a Vite build fix stops 500s on Oxygen 10 shipped Hydrogen stops leaking client IPs, app dev stops crashing on bad frames 21 shipped Theme tooling goes machine-readable, docs drift breaks CI 45 shipped Theme dev server stops forcing the exit page, and GraphiQL learns JSON 12 shipped

$ log --all # elsewhere on the wire

Agent Security Quiet day in agent security as guard coverage reaches four clients Alignment & Post-training verl defaults Ascend RL mode, open-instruct unblocks SFT packing

$ ls showcases/

Safety Evals AI Red Teaming Agent Security Interpretability Alignment & Post-training

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.