$ cat shopify/week/2026-10-26.log
the week in review · Oct 26 – Nov 1, 2026
Shopify CLI 5.0 ships standardized JSON output
By RepoJournal · composed from the cited sources · human-reviewed weekly · methodology
The agent-ready release changes output formats for nearly all commands and adds an `app dev` flow built for agentic workflows; theme network origins wait on server support.
5.0.0 Shopify/cli
Nearly every command now emits a standardized JSON shape rather than the ad-hoc text scripts have been scraping, alongside an `app dev` command tuned for agentic workflows. Anything that parses CLI stdout in CI or in your own tooling needs the migration guide before you upgrade.
Let theme app extensions declare the network origins they contact Shopify/cli
The CLI accepts an `[extensions.capabilities.network_access]` block in a theme app extension's deploy config, declaring the sources the extension contacts. It does not work yet: the platform rejects unknown keys, so a deploy carrying `capabilities.network_access.allowed_sources` fails until the server accepts it.
Let cart Remove buttons skip form validation (#4259) Shopify/hydrogen
`register("remove")` now returns `formNoValidate: true`, covering the Nuxt example, the React Router template, SolidStart and SvelteKit. Previously a line's Remove button shared a form with the quantity input, and invalid text there, such as `abc`, made the browser cancel the submit.
Name the missing access when a token exchange is refused Shopify/cli
A valid dev-stores-only service account token running `shopify app versions list` was told the custom token could not be used for the App Management API. The refusal now names the missing access instead of sending you hunting for an expired token that was never the problem.
Find a store in the account's only organization when destinations miss it Shopify/cli
`store delete -s <store>` failed with "Could not determine which organization owns <store>" for any store the service account had not created itself, and `store info` reported the store missing. Both now fall back to the account's only organization.
Keep polling dev store creation when the status read comes back empty Shopify/cli
`shopify store create dev` intermittently failed with "Unable to determine store creation status" because the CLI read `organization.storeCreation(shopDomain:)` immediately after creation and treated an empty read as terminal. It keeps polling instead, which should end the flaky failures in scripted store setup.
Remove maintenance-prs workflow and automated task prompts Shopify/cli
The team retired the `maintenance-prs` workflow on 2026-10-29 with a Torrent routine to replace it; the input records 71 PRs between 2026-09-10 and 2026-10-23, of which 10 merged, 9 were closed by `stale.yml`, and 52 stayed open. Auto-merge stays out.
Keep extension flavor flag options in sync with supported values Shopify/cli
The `--flavor` flag's options had been duplicating `ExtensionFlavorValue` and drifting, rejecting CLI-supported flavors such as `liquid` and `config-only`. The options now derive from that single list so a flavor the CLI accepts is a flavor the flag offers.
$ ls shopify/week/ # the briefings behind this review
Keep up with Shopify in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.
fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.
Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.