Skip to content

Version Packages - main - #8836

Open
github-actions[bot] wants to merge 1 commit into
mainfrom
changeset-release/main
Open

Version Packages - main#8836
github-actions[bot] wants to merge 1 commit into
mainfrom
changeset-release/main

Conversation

@github-actions

@github-actions github-actions Bot commented Oct 8, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and publish to npm yourself or setup this action to publish automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

Releases

@shopify/cli@5.0.0

Major Changes

  • 36a009a: Wrap app function info --json in function, expose targets as an array, and use null for unavailable fields.
  • e98b4e3: Buffer finite app function replay text output until completion and require --no-watch for validated JSON output with structured diagnostics.
  • f515b00: Buffer app function run text output until completion and validate JSON output with structured errors, stderr diagnostics, and nonzero exits for failed executions.
  • 731f591: Return a success status and absolute file path in app import channel-config --json.
  • d5565e0: Normalize migration status JSON with gid and shopGid identifiers and flat per-shop results.
  • 4332594: Normalize migration submission JSON with outcome statuses, changed, GID fields, flattened results, fieldPath errors, and successful cancellation results.
  • 56e663d: Normalize migration subscription JSON with shopGid identifiers, whole-second UTC instants, and calendar dates.
  • 2ded4d0: Normalize migration unscheduling JSON with explicit outcomes, successful cancellation, GID fields, and flattened results.
  • f7feb6d: Normalize migration cancellation JSON and share error serialization to preserve completed batch outcomes, error classifications, and recovery guidance.
  • 3e14abe: Use string IDs, camelCase resources, cancellation results, and fatal error envelopes for theme duplicate --json.
  • 124a33e: Use camelCase fields, string theme IDs, null unavailable values, and one complete environment batch object in theme info --json.
  • 0b8e0f7: Return {themes} with string IDs and complete environment batches from theme list --json, excluding internal runtime fields.
  • 09a84e0: Use string IDs and camelCase links inside theme open --json resources, and emit only a fatal error when opening the browser fails.
  • 2811afa: Use string theme IDs, camelCase fields, complete environment batches and partial upload results in theme push JSON.
  • 37e12ac: Rename app config validate JSON diagnostics to filePath and fieldPath, use null for unavailable fields, and report setup failures as fatal errors.

Minor Changes

  • 6616f2e: Add typed JSON output to app bulk cancel.
  • d1c2303: Add typed JSON output to app bulk execute.
  • 35ef50c: Add typed JSON output to app bulk status.
  • b46926e: Add typed JSON output to app dev clean.
  • 463c38b: Add typed JSON output to app execute with GraphQL error details and file receipts.
  • 576f240: Add typed JSON output to app import custom-data-definitions.
  • 6f94240: Add typed JSON output to app import dashboard-extensions.
  • 264c3a0: Add --print-instructions to app security check and deprecate --yes without removing support.
  • e5ac2d0: Add typed JSON output to app webhook trigger.
  • 11dbcff: Add JSON status output to app build.
  • fdebfc5: Add typed JSON output and schema discovery to doc fetch.
  • 2e10837: Add typed JSON output and schema discovery to doc search.
  • a6f00e2: Add typed JSON output to app function commands
  • 49efca9: Add typed JSON output to app generate extension.
  • 9aa11b4: Add typed JSON output to app deploy.
  • fd6b631: Add typed JSON output to app init.
  • 4762dfa: Add typed JSON output to app release.
  • fdae48f: Add typed JSON output to shopify upgrade.
  • d0a6f30: Add typed JSON output to app config use, pull, and link.
  • 7b3abc7: Add typed JSON output to app env commands.

Patch Changes

  • fc638a0: Stop shopify app security check from running a command that a scanned repository names through an empty Git remote helper
  • 02c6a6a: Clarify the --blocking and --skip-instructions help text for shopify app security
  • 71bb7c4: Require Git 2.38.0 or later when shopify app security check uses Git, and add a reusable CLI Kit minimum-version guard.
  • 70fd6eb: Skip lockfiles in every shopify app security check scan directory, so a monorepo root lockfile no longer leaves the secret check unresolved
  • 13e5cfe: Document command-specific telemetry in security command help.
  • f5f737a: Stop app security agent checks from leaving the React Router app template's metafield, authorization and frame-ancestors checks unresolved
  • 0c17a82: shopify app security check only reads from Git: it no longer starts file-system monitors or fetches missing objects, and it doesn't use repositories committed inside the scanned directory
  • 04842af: Fix migration detection for legacy Checkout and POS UI extensions in App Management apps.
  • f945f9d: Route success banners through JSON diagnostics.
  • c76bad7: Add usage examples to shopify app security check help.
  • e5ac2d0: Hide webhook shared secrets in GraphQL request diagnostics.
  • a23c474: Fix the check that stops the CLI from running a program found in the working directory on Windows

@shopify/cli-kit@5.0.0

Minor Changes

  • dfe353a: Warn that SHOPIFY_APP_AUTOMATION_TOKEN and SHOPIFY_CLI_PARTNERS_TOKEN are deprecated in favor of SHOPIFY_SERVICE_ACCOUNT_TOKEN, which takes the same tokens. The warning shows at most once a day, and both variables keep working for now.
  • 71bb7c4: Require Git 2.38.0 or later when shopify app security check uses Git, and add a reusable CLI Kit minimum-version guard.
  • 1678264: Add a native option to isSubpath for checking containment using filesystem path semantics.
  • f7feb6d: Normalize migration cancellation JSON and share error serialization to preserve completed batch outcomes, error classifications, and recovery guidance.
  • fdae48f: Add typed JSON output to shopify upgrade.
  • 730d051: Add SHOPIFY_SERVICE_ACCOUNT_TOKEN to run shopify organization list, shopify store list, shopify store create dev, shopify store info, shopify store delete and app commands with a service account token. It can't be set together with SHOPIFY_APP_AUTOMATION_TOKEN or SHOPIFY_CLI_PARTNERS_TOKEN, and commands that need your Shopify account or a store's Admin API access, such as shopify store execute, refuse to run while it's set.

Patch Changes

  • dd71f5f: Reject captured process startup failures and signal termination instead of reporting exit code zero.
  • 03d54a6: Fail with a clear error, instead of logging in with your Shopify account, when SHOPIFY_APP_AUTOMATION_TOKEN or SHOPIFY_CLI_PARTNERS_TOKEN is set but empty
  • 3f4baab: Serialize the GraphiQL initial query and variables as HTML-safe JSON before they are placed in the page's inline script.
  • 217db4d: Partition the GraphQL response cache by a hash of the endpoint URL and access token. Existing cache entries are not reused, so each cached query is fetched again once.
  • 1cdbfa2: Don't crash shopify auth login when the browser can't be opened (for example, spawn xdg-open ENOENT in a headless container). The CLI now prints the login link and keeps waiting for you to approve it in any browser.
  • f945f9d: Route success banners through JSON diagnostics.
  • 72fe13b: Support writable streams and optional final-newline preservation when capturing process output.
  • 2c9d28b: Fix Theme Access authentication to work with all of a store’s domains.
  • e5ac2d0: Hide webhook shared secrets in GraphQL request diagnostics.
  • a23c474: Fix the check that stops the CLI from running a program found in the working directory on Windows

@shopify/plugin-cloudflare@5.0.0

Patch Changes

  • 6afb51b: Run the macOS cloudflared archive extraction with an argument list instead of a shell command string.
  • Updated dependencies [dfe353a]
  • Updated dependencies [71bb7c4]
  • Updated dependencies [dd71f5f]
  • Updated dependencies [03d54a6]
  • Updated dependencies [3f4baab]
  • Updated dependencies [217db4d]
  • Updated dependencies [1cdbfa2]
  • Updated dependencies [f945f9d]
  • Updated dependencies [1678264]
  • Updated dependencies [f7feb6d]
  • Updated dependencies [72fe13b]
  • Updated dependencies [fdae48f]
  • Updated dependencies [730d051]
  • Updated dependencies [2c9d28b]
  • Updated dependencies [e5ac2d0]
  • Updated dependencies [a23c474]
    • @shopify/cli-kit@5.0.0

@shopify/create-app@5.0.0

@shopify/app@5.0.0

Minor Changes

  • 463c38b: Add typed JSON output to app execute with GraphQL error details and file receipts.
  • e5ac2d0: Add typed JSON output to app webhook trigger.

Patch Changes

  • d7129a5: Check for Dependabot or Renovate configuration at the Git repository root when shopify app security check scans an app below it
  • fc638a0: Stop shopify app security check from running a command that a scanned repository names through an empty Git remote helper
  • 02c6a6a: Clarify the --blocking and --skip-instructions help text for shopify app security
  • 71bb7c4: Require Git 2.38.0 or later when shopify app security check uses Git, and add a reusable CLI Kit minimum-version guard.
  • 70fd6eb: Skip lockfiles in every shopify app security check scan directory, so a monorepo root lockfile no longer leaves the secret check unresolved
  • a3765eb: Detect React Router app code outside the app directory, such as in --include-dir or web directories, in shopify app security check
  • f5f737a: Stop app security agent checks from leaving the React Router app template's metafield, authorization and frame-ancestors checks unresolved
  • 0c17a82: shopify app security check only reads from Git: it no longer starts file-system monitors or fetches missing objects, and it doesn't use repositories committed inside the scanned directory
  • a98e34f: Bundle every UI extension should_render target instead of only the last one.
  • Updated dependencies [dfe353a]
  • Updated dependencies [71bb7c4]
  • Updated dependencies [dd71f5f]
  • Updated dependencies [1678264]
  • Updated dependencies [03d54a6]
  • Updated dependencies [3f4baab]
  • Updated dependencies [217db4d]
  • Updated dependencies [1cdbfa2]
  • Updated dependencies [f945f9d]
  • Updated dependencies [1678264]
  • Updated dependencies [f7feb6d]
  • Updated dependencies [6afb51b]
  • Updated dependencies [72fe13b]
  • Updated dependencies [fdae48f]
  • Updated dependencies [730d051]
  • Updated dependencies [2c9d28b]
  • Updated dependencies [a07e09e]
  • Updated dependencies [e5ac2d0]
  • Updated dependencies [a23c474]
    • @shopify/cli-kit@5.0.0
    • @shopify/theme@5.0.0
    • @shopify/plugin-cloudflare@5.0.0
    • @shopify/organizations@5.0.0

@shopify/organizations@5.0.0

Patch Changes

@shopify/plugin-did-you-mean@5.0.0

Patch Changes

@shopify/store@5.0.0

Patch Changes

@shopify/theme@5.0.0

Patch Changes

  • 1678264: Keep theme pull files inside the selected theme directory.
  • 2c9d28b: Fix Theme Access authentication to work with all of a store’s domains.
  • a07e09e: Fix theme dev showing the live theme instead of the development theme on stores where every market uses a subfolder. Sessions using a Theme Access password are not yet covered.
  • Updated dependencies [dfe353a]
  • Updated dependencies [71bb7c4]
  • Updated dependencies [dd71f5f]
  • Updated dependencies [03d54a6]
  • Updated dependencies [3f4baab]
  • Updated dependencies [217db4d]
  • Updated dependencies [1cdbfa2]
  • Updated dependencies [f945f9d]
  • Updated dependencies [1678264]
  • Updated dependencies [f7feb6d]
  • Updated dependencies [72fe13b]
  • Updated dependencies [fdae48f]
  • Updated dependencies [730d051]
  • Updated dependencies [2c9d28b]
  • Updated dependencies [e5ac2d0]
  • Updated dependencies [a23c474]
    • @shopify/cli-kit@5.0.0

@github-actions
github-actions Bot requested review from a team as code owners October 8, 2026 14:01
@github-actions
github-actions Bot force-pushed the changeset-release/main branch 28 times, most recently from 019eb41 to cc10685 Compare October 14, 2026 10:45
@github-actions
github-actions Bot force-pushed the changeset-release/main branch 20 times, most recently from 2c7ad08 to e84c7e7 Compare October 16, 2026 12:14
@github-actions
github-actions Bot force-pushed the changeset-release/main branch from e84c7e7 to 75bd6f6 Compare October 16, 2026 14:22

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants