[github-actions]

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and publish to npm yourself or setup this action to publish automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

Releases

@shopify/cli@5.0.0

Major Changes

• 62d961a: Add typed JSON output across CLI commands; update scripts for the new schemas with --json-schema, read store execute query results from .data, and use --no-watch with app function replay --json.

Minor Changes

• 62d961a: Improve app security check accuracy and safely scan untrusted repositories; add --print-instructions, deprecate --yes, and require Git 2.38.0 or later for Git operations.
• e71ac0e: Add typed JSON output to app security commands.
• 6ef6660: Add app dev --json streaming and expose session-file schemas with --json-schema.
• 604a2ce: Update cli-hydrogen 13.1.0, adding typed JSON output to Hydrogen commands

Patch Changes

• 62d961a: Fix lost Shop scopes in app config link, legacy Checkout and POS extension migration detection, and UI extension builds with multiple should_render targets.
• adb6a43: Have coding agents run app security commands with --json --no-input and read their results instead of parsing terminal output.
• 12cc647: Exit 0 instead of failing when you decline to scan without app configuration in app security check.
• 525289f: Report clipboard failures in app security instructions --copy as errors, and in app security check as warnings, instead of crashing.
• e3d8ebb: Report app security results files with out-of-range values as invalid.
• 62d961a: Protect webhook secrets in debug output, prevent GraphQL cache reuse across tokens, and harden GraphiQL and local command execution.
• bcbaec8: Explain which access is missing when a token can't manage dev stores, instead of printing a raw GraphQL 401 with the query and a stack trace.
• 349478a: Preserve graceful shutdown and child-process cleanup on Windows.

@shopify/cli-kit@5.0.0

Minor Changes

• 62d961a: Improve app security check accuracy and safely scan untrusted repositories; add --print-instructions, deprecate --yes, and require Git 2.38.0 or later for Git operations.
• 730d051: Add SHOPIFY_SERVICE_ACCOUNT_TOKEN for app, store, and organization automation; it replaces the deprecated SHOPIFY_APP_AUTOMATION_TOKEN and SHOPIFY_CLI_PARTNERS_TOKEN, which remain supported.
• 62d961a: Fix development theme previews on stores with market subfolders when using account authentication, improve Theme Access authentication, keep pulled files inside the theme directory, and support browser identity verification.
• 62d961a: Add typed JSON output across CLI commands; update scripts for the new schemas with --json-schema, read store execute query results from .data, and use --no-watch with app function replay --json.

Patch Changes

• 62d961a: Retry throttled API requests, report process failures correctly, and keep login available when the browser cannot open.
• 62d961a: Protect webhook secrets in debug output, prevent GraphQL cache reuse across tokens, and harden GraphiQL and local command execution.
• bcbaec8: Explain which access is missing when a token can't manage dev stores, instead of printing a raw GraphQL 401 with the query and a stack trace.
• 349478a: Preserve graceful shutdown and child-process cleanup on Windows.

@shopify/plugin-cloudflare@5.0.0

Patch Changes

• 62d961a: Protect webhook secrets in debug output, prevent GraphQL cache reuse across tokens, and harden GraphiQL and local command execution.
• Updated dependencies [62d961a]
• Updated dependencies [62d961a]
• Updated dependencies [62d961a]
• Updated dependencies [bcbaec8]
• Updated dependencies [730d051]
• Updated dependencies [62d961a]
• Updated dependencies [62d961a]
• Updated dependencies [349478a]
  • @shopify/cli-kit@5.0.0

@shopify/create-app@5.0.0

@shopify/app@5.0.0

Major Changes

• 4282952: Remove app logs and app logs sources; use app dev to stream Function logs and save them to .shopify/logs.

Minor Changes

• 587b14d: Record app dev sessions, preview status, and JSONL logs so agents can reuse a running session.
• 62d961a: Improve app security check accuracy and safely scan untrusted repositories; add --print-instructions, deprecate --yes, and require Git 2.38.0 or later for Git operations.
• e71ac0e: Add typed JSON output to app security commands.
• 62d961a: Add typed JSON output across CLI commands; update scripts for the new schemas with --json-schema, read store execute query results from .data, and use --no-watch with app function replay --json.

Patch Changes

• 30fbfab: Reduce app dev file watching by excluding Cargo target directories, Function build output, .shopify files, and editor temporary files.
• 62d961a: Fix lost Shop scopes in app config link, legacy Checkout and POS extension migration detection, and UI extension builds with multiple should_render targets.
• adb6a43: Have coding agents run app security commands with --json --no-input and read their results instead of parsing terminal output.
• 12cc647: Exit 0 instead of failing when you decline to scan without app configuration in app security check.
• 525289f: Report clipboard failures in app security instructions --copy as errors, and in app security check as warnings, instead of crashing.
• e3d8ebb: Report app security results files with out-of-range values as invalid.
• 62d961a: Fix development theme previews on stores with market subfolders when using account authentication, improve Theme Access authentication, keep pulled files inside the theme directory, and support browser identity verification.
• Updated dependencies [62d961a]
• Updated dependencies [62d961a]
• Updated dependencies [62d961a]
• Updated dependencies [c86f804]
• Updated dependencies [bcbaec8]
• Updated dependencies [730d051]
• Updated dependencies [87cc186]
• Updated dependencies [62d961a]
• Updated dependencies [e85a56f]
• Updated dependencies [62d961a]
• Updated dependencies [349478a]
  • @shopify/cli-kit@5.0.0
  • @shopify/plugin-cloudflare@5.0.0
  • @shopify/theme@5.0.0
  • @shopify/organizations@5.0.0

@shopify/theme@5.0.0

Major Changes

• c86f804: Remove the --poll flag from theme dev. It has been deprecated since 3.61.0 and has had no effect since 3.70.0.

Patch Changes

• 87cc186: Report a directory passed to theme check --config as an expected user error instead of crashing with EISDIR.
• 62d961a: Fix development theme previews on stores with market subfolders when using account authentication, improve Theme Access authentication, keep pulled files inside the theme directory, and support browser identity verification.
• e85a56f: Fix theme profile failing with "Bad response: 301" when --url includes a query string, and show an actionable error when the page redirects.
• Updated dependencies [62d961a]
• Updated dependencies [62d961a]
• Updated dependencies [62d961a]
• Updated dependencies [bcbaec8]
• Updated dependencies [730d051]
• Updated dependencies [62d961a]
• Updated dependencies [62d961a]
• Updated dependencies [349478a]
  • @shopify/cli-kit@5.0.0

@shopify/organizations@5.0.0

Patch Changes

• Updated dependencies [62d961a]
• Updated dependencies [62d961a]
• Updated dependencies [62d961a]
• Updated dependencies [bcbaec8]
• Updated dependencies [730d051]
• Updated dependencies [62d961a]
• Updated dependencies [62d961a]
• Updated dependencies [349478a]
  • @shopify/cli-kit@5.0.0

@shopify/plugin-did-you-mean@5.0.0

Patch Changes

• Updated dependencies [62d961a]
• Updated dependencies [62d961a]
• Updated dependencies [62d961a]
• Updated dependencies [bcbaec8]
• Updated dependencies [730d051]
• Updated dependencies [62d961a]
• Updated dependencies [62d961a]
• Updated dependencies [349478a]
  • @shopify/cli-kit@5.0.0

@shopify/store@5.0.0

Patch Changes

• Updated dependencies [62d961a]
• Updated dependencies [62d961a]
• Updated dependencies [62d961a]
• Updated dependencies [bcbaec8]
• Updated dependencies [730d051]
• Updated dependencies [62d961a]
• Updated dependencies [62d961a]
• Updated dependencies [349478a]
  • @shopify/cli-kit@5.0.0
  • @shopify/organizations@5.0.0