RepoJournal

$ cat shopify/week/2026-08-31.log

Shopify

Shopify

the week in review · Aug 31 – Sep 6, 2026

CLI adds subscription migration commands

♥

GitHub credential leak risks prompted urgent fixes, plus new demo data prompts and store plan display.

44 commits 20 PRs merged 2 releases 6 briefings covered
← previous week shopify wire →

What shipped: The Shopify CLI added app subscription migration commands, including a list command [1][2], and started asking about demo data during interactive dev store creation [3]. Store list now shows each store's plan [4] and filters by type server-side. Under the hood: Security fixes prevent GitHub credentials from being logged locally [5] and redact store signup JWTs from analytics payloads [6], with JWTs read from stdin [7]. Sensitive admin URLs are no longer printed [8], and a merge addresses potential 500 errors in reports [9]. The CLI also clarifies unexpected organization prompts in app dev and store delete flows [10][11]. Why it matters: If your CI logs CLI output, the git author fix stops credentials from leaking into logs, a critical update for shared runners [5]. The new demo data prompt changes interactive store creation behavior; automate accordingly [3]. The subscription migration commands open a new workflow for managing plan changes, so review the CLI's help output for the new list command. The hydrogen CLI bumped to 13.0.4 [12], and Node.js version requirements in hydrogen docs were corrected [13]. Also: The CLI added hidden App Doctor commands [14] and store create examples [15], plus a store list context banner [16]—all minor polish for daily users.

References

  1. [1] Add app subscription migration commands ↗ Shopify/cli
  2. [2] Add subscription migration list command ↗ Shopify/cli
  3. [3] Ask about demo data when creating a dev store interactively ↗ Shopify/cli
  4. [4] Show each store's plan in `store list` ↗ Shopify/cli
  5. [5] Prevent GitHub credentials from being logged locally ↗ Shopify/cli
  6. [6] Redact store signup JWTs from analytics payloads ↗ Shopify/cli
  7. [7] Read store signup JWT from stdin ↗ Shopify/cli
  8. [8] Avoid printing sensitive store auth URLs ↗ Shopify/cli
  9. [9] Merge pull request #8329 from Shopify/fix-500-reports ↗ Shopify/cli
  10. [10] Explain the empty-organization store creation prompts in app dev ↗ Shopify/cli
  11. [11] Explain why store delete prompts for an organization ↗ Shopify/cli
  12. [12] hydrogen/Bump cli-hydrogen to 13.0.4 (main) ↗ Shopify/cli
  13. [13] Fix outdated Node.js version requirements in README and CONTRIBUTING (#3970) ↗ Shopify/hydrogen
  14. [14] Add hidden App Doctor commands ↗ Shopify/cli
  15. [15] Add examples to store create dev ↗ Shopify/cli
  16. [16] Show `store list` context in an info banner ↗ Shopify/cli

$ ls shopify/week/ # the briefings behind this review

Tue Sep 1 Validate git author args, stop leaking GitHub credentials Wed Sep 2 Redact store signup JWTs from analytics and terminal output Thu Sep 3 Shopify CLI starts asking for demo data on dev store creation Fri Sep 4 Two Shopify CLI prompts make their unexpected appearances visible Sat Sep 5 Shopify CLI adds subscription migration list command Sun Sep 6 Filter store list by type, server-side
← previous week shopify wire →