$ ls shopify/reviews/ # the step-back reads
Shopify in review
One review per week (and month): what shipped, what broke, what to act on.
Nov 2–8, 2026 weekly [act] 8 stories
Shopify CLI goes machine-readable for agent tooling
Theme dev, theme console, GraphiQL and the language server gain JSON output while Hydrogen ships a runtime bump and several proxy fixes.
Oct 26–Nov 1, 2026 weekly [act] 8 stories
Shopify CLI 5.0 ships standardized JSON output
The agent-ready release changes output formats for nearly all commands and adds an `app dev` flow built for agentic workflows; theme netw...
Oct 19–25, 2026 weekly [act] 8 stories
Hydrogen drops Storefront API redirects after token leak risk
Shopify CLI spends the same week putting typed JSON output on theme and app security commands, and shipping patch 2026.10.2 for Hydrogen ...
Oct 12–18, 2026 weekly [act] 8 stories
Shopify CLI ships typed JSON output across app commands
Deploy, execute, webhook trigger, and custom-data import now return machine-readable results, and Hydrogen 2026.10 breaks silent cart cac...
Oct 5–11, 2026 weekly [act] 8 stories
Hydrogen 2026.10 redirects variant URLs, a breaking change
The same week, Shopify CLI locked JSON conventions and moved prompts to stderr ahead of 4.9.0.
Oct 1–31, 2026 monthly [act] 8 stories
Shopify CLI 5.0 ships standardized JSON output
The release makes nearly all commands machine-readable for agentic workflows and breaks existing output formats, alongside Hydrogen 2026.10.
Sep 28–Oct 4, 2026 weekly [act] 8 stories
Hydrogen moves consent to CTA async API
Hydrogen's consent init now fetches and caches Customer Privacy data before analytics starts, replacing its own consentManagement request.
Sep 21–27, 2026 weekly [act] 8 stories
App Doctor becomes App Security, scoring removed
Shopify CLI retired the App Doctor name and stripped the score from App Security JSON output, breaking scripts and agents that read it.
Sep 14–20, 2026 weekly [act] 7 stories
App doctor drops CVE audit and lax key check
Shopify CLI reshaped App Doctor's checks and began reporting which AI agent ran a command.
Sep 7–13, 2026 weekly [plan] 8 stories
Shopify CLI 4.8.0 ships store create and delete
The release also lands pnpm build-script recovery and upgrade messaging that no longer reports success on a downgrade.
Sep 1–30, 2026 monthly [act] 8 stories
Shopify CLI closes credential leaks, ships 4.8.0
Hydrogen moves consent to async initialization and keeps https origin in MiniOxygen local dev.
Aug 31–Sep 6, 2026 weekly [act]
CLI adds subscription migration commands
GitHub credential leak risks prompted urgent fixes, plus new demo data prompts and store plan display.
Aug 24–30, 2026 weekly
Shopify CLI grows dev store creation, aligns sizes with Brotli
This week the CLI deepened its role in the development lifecycle: app dev can now create dev stores on the fly, extension size reporting ...
Aug 1–31, 2026 monthly
CLI 4.6/4.7 hardens auth, trims startup, rewrites E2E ergonomics
August tightened Shopify CLI's trust boundaries, sped up boot by 30%, and made store lifecycle management something `app dev` owns end to...
Keep up with Shopify in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.
fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.
Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.