RepoJournal
Shopify Shopify

Shopify — full archive

127 daily briefings · 14 reviews.

$ ls shopify/reviews/ # the step-back reads

  1. week Shopify CLI goes machine-readable for agent tooling
  2. week Shopify CLI 5.0 ships standardized JSON output
  3. week Hydrogen drops Storefront API redirects after token leak risk
  4. week Shopify CLI ships typed JSON output across app commands
  5. week Hydrogen 2026.10 redirects variant URLs, a breaking change
  6. month Shopify CLI 5.0 ships standardized JSON output
  7. week Hydrogen moves consent to CTA async API
  8. week App Doctor becomes App Security, scoring removed
  9. week App doctor drops CVE audit and lax key check
  10. week Shopify CLI 4.8.0 ships store create and delete
  11. month Shopify CLI closes credential leaks, ships 4.8.0
  12. week CLI adds subscription migration commands
  13. week Shopify CLI grows dev store creation, aligns sizes with Brotli
  14. month CLI 4.6/4.7 hardens auth, trims startup, rewrites E2E ergonomics
  1. Hydrogen moves CSP into the core package, and a Vite build fix stops 500s on Oxygen
  2. Hydrogen stops leaking client IPs, app dev stops crashing on bad frames
  3. Theme tooling goes machine-readable, docs drift breaks CI
  4. Theme dev server stops forcing the exit page, and GraphiQL learns JSON
  5. MiniOxygen moves to Miniflare 4, Hydrogen stops replaying analytics events
  6. Theme language server accepts --json, DO_NOT_TRACK honored
  7. Shopify CLI retires its gardener automation: two workflows deleted, a third being replaced
  8. CLI flavor flag derives its options from one source
  9. CLI keeps polling when dev store status reads empty
  10. Shopify CLI 5.0 ships JSON output for agents, breaking existing formats
  11. Theme extensions can declare network origins, but the server isn't ready
  12. Theme app extensions can declare network origins, server support pending
  13. CLI explains 401s, Hydrogen scopes i18n injection
  14. App security commands get typed JSON output
  15. Liquid settings false positives cleared, throttled CLI retries get backoff
  16. Hydrogen stops following Storefront API redirects
  17. Typed JSON across theme commands, Hydrogen branch map
  18. Theme CLI commands gain typed JSON output
  19. Typed JSON across CLI commands, cart hydration fix in Hydrogen
  20. Hydrogen fixes batched cart writes, first-load races, and route session requirements
  21. Shopify CLI hardens GraphQL caching and GraphiQL rendering
  22. CLI drops --app-security-check-yes, Hydrogen migration skill names its silent failures
  23. Shopify CLI adds typed JSON output to deploy, execute, and webhook trigger
  24. Shopify CLI publishes contributor design guidance
  25. Shopify CLI ships public design guidance for contributors
  26. Hydrogen 2026.10 lands, Vercel Shop becomes the Next.js path
  27. Shopify CLI 4.9.0 adds typed JSON output for app bulk status
  28. Shopify CLI moves prompts to stderr, adds typed JSON output
  29. Hydrogen's /snapit publishes again through OIDC; App Security stops trusting mistyped client IDs
  30. App Security checks get docs links, telemetry, and a config prompt
  31. Shopify CLI locks JSON conventions before release
  32. Hydrogen fixes hydration interruption, Shopify CLI adds --no-input
  33. App Security renames its artifacts, Hydrogen stops interrupting hydration
  34. Shopify CLI adds --ignore to app security check, Hydrogen fixes env pull quoting
  35. App Security checks arrive in Shopify CLI, injection checks changeset pulled
  36. Hydrogen moves consent to CTA async, dropping Server-Timing and legacy cookies
  37. Shopify CLI bumps theme-tools and puts flaky tests first
  38. Subscription migration commands go visible, MiniOxygen keeps https in local dev
  39. Shopify CLI drops App Security score, Hydrogen enforces typed JSON output
  40. Shopify CLI groups App Security findings and guards agent scans
  41. App Doctor becomes App Security, version gains --json
  42. Shopify CLI recovers from storage permission errors and versions in JSON
  43. Per-target function input variables, optional owner_type for UI extension metafields
  44. App Doctor gains a dependency automation check, organization list gets a JSON schema
  45. Shopify CLI drops CVE audit from app doctor, adds typed command events
  46. Shopify CLI starts detecting AI agents in analytics
  47. App doctor drops the lax Shopify API key check
  48. Scheduled maintenance runs fixed in Shopify CLI
  49. Shopify CLI now syncs config/styles.css and AGENTS.md
  50. App Doctor reuses Shopify CLI app identity, engine internals go behind operations
  51. Shopify CLI 4.8.0 ships store create, pnpm install recovery, and honest upgrade messaging
  52. Dasherize `client_transfer` in Shopify CLI
  53. Shopify CLI unhides store create dev and store delete
  54. shopify store list gains server-side type filtering
  55. Filter store list by type, server-side
  56. Shopify CLI adds subscription migration list command
  57. Two Shopify CLI prompts make their unexpected appearances visible
  58. Shopify CLI starts asking for demo data on dev store creation
  59. Redact store signup JWTs from analytics and terminal output
  60. Validate git author args, stop leaking GitHub credentials

Never miss a Shopify briefing.

Get Shopify's week in review every Monday - and security advisories the day they land. Free, unsubscribe in one click.

One click. Every Monday: what mattered across the projects you've been reading (or our AI picks) — security news same-day. You refine anytime. Choose specific journals · Read a sample issue →