Version Packages - main

[github-actions]

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and publish to npm yourself or setup this action to publish automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

Releases

@shopify/cli@4.9.0

Minor Changes

• 5b4e82f: Add json flag and output schema for all store commands
• 4986275: Add --language to doc fetch to filter shopify.dev Markdown code examples to a single language.
• 3385c63: Move app import-extensions and app import-custom-data-definitions under the new app import topic; the old paths still work but are deprecated
• 83fe8a2: Emit machine-readable fatal errors when JSON output is active
• 02fbf6e: Show JSON Schema in command help and use --json-schema to print result, error, and event schemas.
• f88ee51: Add JSON output to version, search and help commands.

Patch Changes

• dddec36: Fix loading bars remaining on screen when a task prints log messages.
• 667c628: Verify the installed version after shopify upgrade and fail instead of reporting a false success when the upgrade didn't complete

@shopify/cli-kit@4.9.0

Minor Changes

• 83fe8a2: Emit machine-readable fatal errors when JSON output is active
• 02fbf6e: Show JSON Schema in command help and use --json-schema to print result, error, and event schemas.
• 46dcc14: Add optional maxRetries and retryDelay options to removeFile, passed through to Node's fs.rm to retry transient removal errors

Patch Changes

• 267c622: Fix a startup crash on machines where the OS can't look up the current user's shell
• 9832404: Retry gateway failures during device authorization before reporting an expected service error.
• 065cd24: Show recovery guidance instead of crashing when Shopify CLI cannot create a local storage directory
• fd4a5db: Stop reporting an unavailable shop, an Admin API server error, and a cancelled request as unknown CLI bugs during Admin API version discovery
• 667c628: Verify the installed version after shopify upgrade and fail instead of reporting a false success when the upgrade didn't complete
• 2a9b3a4: Fix text prompt underlines rendering as unsupported characters in Windows consoles.

@shopify/plugin-cloudflare@4.9.0

Patch Changes

• Updated dependencies [267c622]
• Updated dependencies [9832404]
• Updated dependencies [83fe8a2]
• Updated dependencies [065cd24]
• Updated dependencies [02fbf6e]
• Updated dependencies [46dcc14]
• Updated dependencies [fd4a5db]
• Updated dependencies [667c628]
• Updated dependencies [2a9b3a4]
  • @shopify/cli-kit@4.9.0

@shopify/create-app@4.9.0

@shopify/app@4.9.0

Minor Changes

• b36c592: Add a JSON output schema for app versions list and clarify its missing-app error.
• 3793fab: Add typed JSON output with organization status, shop count, and URL to organization list.
• a80a926: Support owner types in UI extension metafield configuration.
• 265ada1: Allow Flow trigger lifecycle callback urls to be relative to the app's application_url
• 5658023: Support input_variables on function targets, alongside the extension-level [input.variables]
• 3385c63: Move app import-extensions and app import-custom-data-definitions under the new app import topic; the old paths still work but are deprecated
• f863c88: Rename app doctor commands to app security check, app security submit, and app security instructions.

Patch Changes

• 511403e: Check for the presence of a local Dependabot or Renovate configuration file in App Doctor.
• 5aa3987: Defer context-based route authentication to agent review instead of reporting it as missing authentication.
• c708391: Select a single app TOML with --config in app security check and app security instructions.
• 35b1bb7: The committed-secret check in shopify app security now only flags recognizable secret values (e.g. shpss_/shpat_ tokens), not secret-sounding variable names or placeholders.
• f85d3e5: Add App Doctor agent checks for lifecycle replay, dependency reachability, and active upload previews.
• 73ad604: Stop reporting a missing configured asset path and a missing extension build output as unknown CLI bugs during app build
• c8f7f06: Add a narrow deterministic App Doctor check for wildcard frame-ancestors policies in embedded admin apps.
• 06e88f6: Require concrete excess-authority evidence in App Security OAuth scope reviews instead of flagging declarations without local usage.
• 93cc4d8: Recover gracefully when pnpm blocks dependency build scripts during app generate extension: clean up the partially generated extension and explain how to approve the builds
• 850441d: Avoid flagging static theme asset script tags in app doctor.
• fcddd81: Remove the dependency CVE audit check from shopify app doctor.
• 7b93048: Stop treating generic 32-character hex values as hardcoded Shopify API keys in App Doctor.
• 96309ff: Prevent new App Security scans from replacing local agent review work without --clean.
• c5e5194: Fix App Doctor deterministic rule coverage for request-derived admin contexts, app-proxy body flows, and configured callback URL metadata.
• 9920840: Tighten App Doctor agentic prompts around trust-boundary evidence, tenant-selector provenance, authorization drift, and dependency reachability.
• Updated dependencies [267c622]
• Updated dependencies [9832404]
• Updated dependencies [83fe8a2]
• Updated dependencies [065cd24]
• Updated dependencies [02fbf6e]
• Updated dependencies [46dcc14]
• Updated dependencies [fd4a5db]
• Updated dependencies [667c628]
• Updated dependencies [2a9b3a4]
  • @shopify/cli-kit@4.9.0
  • @shopify/organizations@4.9.0
  • @shopify/plugin-cloudflare@4.9.0
  • @shopify/theme@4.9.0

@shopify/organizations@4.9.0

Patch Changes

• Updated dependencies [267c622]
• Updated dependencies [9832404]
• Updated dependencies [83fe8a2]
• Updated dependencies [065cd24]
• Updated dependencies [02fbf6e]
• Updated dependencies [46dcc14]
• Updated dependencies [fd4a5db]
• Updated dependencies [667c628]
• Updated dependencies [2a9b3a4]
  • @shopify/cli-kit@4.9.0

@shopify/plugin-did-you-mean@4.9.0

Patch Changes

• Updated dependencies [267c622]
• Updated dependencies [9832404]
• Updated dependencies [83fe8a2]
• Updated dependencies [065cd24]
• Updated dependencies [02fbf6e]
• Updated dependencies [46dcc14]
• Updated dependencies [fd4a5db]
• Updated dependencies [667c628]
• Updated dependencies [2a9b3a4]
  • @shopify/cli-kit@4.9.0

@shopify/store@4.9.0

Patch Changes

• fd4a5db: Stop reporting an unavailable shop, an Admin API server error, and a cancelled request as unknown CLI bugs during Admin API version discovery
• Updated dependencies [267c622]
• Updated dependencies [9832404]
• Updated dependencies [83fe8a2]
• Updated dependencies [065cd24]
• Updated dependencies [02fbf6e]
• Updated dependencies [46dcc14]
• Updated dependencies [fd4a5db]
• Updated dependencies [667c628]
• Updated dependencies [2a9b3a4]
  • @shopify/cli-kit@4.9.0
  • @shopify/organizations@4.9.0

@shopify/theme@4.9.0

Patch Changes

• Updated dependencies [267c622]
• Updated dependencies [9832404]
• Updated dependencies [83fe8a2]
• Updated dependencies [065cd24]
• Updated dependencies [02fbf6e]
• Updated dependencies [46dcc14]
• Updated dependencies [fd4a5db]
• Updated dependencies [667c628]
• Updated dependencies [2a9b3a4]
  • @shopify/cli-kit@4.9.0