127 wires and counting

$ follow Shopify

Keep up with Shopify in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-10-24
stories 42

© 2026 RepoJournal Home Showcase How it works Privacy

$ the-wire · showcase

CLI explains 401s, Hydrogen scopes i18n injection

By RepoJournal · Filed · About Shopify · Composed from the cited sources · methodology

Shopify/cli now turns a token that lacks dev store access into a readable error instead of a raw graphql-request dump, while hydrogen applies one rule for which i18n variables each client auto-fills.

Explain a token's missing dev store access instead of dumping the 401 Shopify/cli

by River

An app-only service account token running `store list`, `store create dev` or `store delete` used to crash with Business Platform's full 401 query text, variables and stack trace; the failure now reads as missing dev store access. cli-kit had handed 401s back raw so callers could refresh the token, and nothing handled the case where the refreshed request was rejected too.

Only auto-fill Customer Account $language variables declared as LanguageCode Shopify/hydrogen

by mdamjanic7

The Customer Account client used to fill any variable named `$language` regardless of its declared type; it now fills only variables declared `$language: LanguageCode`, using the same declaration scanner the Storefront client got in the earlier change. Both clients decide what to inject identically, so a query declaring `$language` as another type no longer receives the market value.

fix: make @shopify/hydrogen subpaths resolvable from Jest and require() Shopify/hydrogen

by fredericoo

`@shopify/hydrogen/react`, `/vue`, `/customer-account` and `/vite` declare only an `import` condition, so Jest in CommonJS mode and plain `require()` report them as missing even though the root export loads. Adding a `default` condition to the subpaths makes them resolvable from both tests and require().

Fix theme profile for URLs with a query string and report redirects Shopify/cli

by MillanWangShopify

`theme profile --url` now splits path from query before rendering; previously a URL carrying a query string produced a malformed request that dropped `_fd=0`, and stores with a custom primary domain answered with a 301. Unparseable URLs and ones starting with `//` are rejected outright, and a redirect now raises an AbortError naming the destination.

Merge pull request #8984 from Shopify/remove-theme-dev-poll-flag Shopify/cli

by Isaac Roldán

The deprecated `--poll` flag is gone from `theme dev`, `shopify theme check -C <dir>` reports a directory argument as an expected error instead of `EISDIR: illegal operation on a directory, read`, and cli-kit reports a 401 that survives token refresh with a statusCode. If any script calls `theme dev --poll`, drop the flag.

Quick answers

What shipped in Shopify on October 24, 2026?
Shopify/cli now turns a token that lacks dev store access into a readable error instead of a raw graphql-request dump, while hydrogen applies one rule for which i18n variables each client auto-fills. In total, 26 commits and 16 pull requests landed.
Who contributed to Shopify on October 24, 2026?
5 developers shipped this update, including River, Isaac Roldán, MillanWangShopify, Misha Damjanic, and fredericoo.
What were the notable Shopify updates?
Explain a token's missing dev store access instead of dumping the 401, Only auto-fill Customer Account $language variables declared as LanguageCode, and fix: make @shopify/hydrogen subpaths resolvable from Jest and require().