Version Packages - main

packages/app/CHANGELOG.md

@@ -1,5 +1,32 @@
 # @shopify/app
 
+## 5.0.0
+
+### Minor Changes
+
+- 463c38b: Add typed JSON output to `app execute` with GraphQL error details and file receipts.
+- e5ac2d0: Add typed JSON output to `app webhook trigger`.
+
+### Patch Changes
+
+- d7129a5: Check for Dependabot or Renovate configuration at the Git repository root when `shopify app security check` scans an app below it
+- 02c6a6a: Clarify the `--blocking` and `--skip-instructions` help text for `shopify app security`
+- 70fd6eb: Skip lockfiles in every `shopify app security check` scan directory, so a monorepo root lockfile no longer leaves the secret check unresolved
+- a3765eb: Detect React Router app code outside the app directory, such as in `--include-dir` or web directories, in `shopify app security check`
+- f5f737a: Stop app security agent checks from leaving the React Router app template's metafield, authorization and frame-ancestors checks unresolved
+- 0c17a82: `shopify app security check` only reads from Git: it no longer starts file-system monitors or fetches missing objects, and it doesn't use repositories committed inside the scanned directory
+- Updated dependencies [1678264]
+- Updated dependencies [03d54a6]
+- Updated dependencies [f945f9d]
+- Updated dependencies [1678264]
+- Updated dependencies [f7feb6d]
+- Updated dependencies [fdae48f]
+- Updated dependencies [e5ac2d0]
+  - @shopify/theme@5.0.0
+  - @shopify/cli-kit@5.0.0
+  - @shopify/organizations@5.0.0
+  - @shopify/plugin-cloudflare@5.0.0
+
 ## 4.9.0
 
 ### Minor Changes

packages/app/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shopify/app",
-  "version": "4.9.0",
+  "version": "5.0.0",
   "packageManager": "pnpm@10.11.1",
   "description": "Utilities for loading, building, and publishing apps.",
   "homepage": "https://github.com/shopify/cli#readme",
@@ -58,10 +58,10 @@
     "@graphql-typed-document-node/core": "3.2.0",
     "@luckycatfactory/esbuild-graphql-loader": "3.8.1",
     "@oclif/core": "4.8.3",
-    "@shopify/cli-kit": "4.9.0",
-    "@shopify/organizations": "4.9.0",
-    "@shopify/plugin-cloudflare": "4.9.0",
-    "@shopify/theme": "4.9.0",
+    "@shopify/cli-kit": "5.0.0",
+    "@shopify/organizations": "5.0.0",
+    "@shopify/plugin-cloudflare": "5.0.0",
+    "@shopify/theme": "5.0.0",
     "@shopify/theme-check-node": "3.30.1",
     "@shopify/toml-patch": "0.3.0",
     "chokidar": "3.6.0",

packages/cli-kit/CHANGELOG.md

@@ -1,5 +1,19 @@
 # @shopify/cli-kit
 
+## 5.0.0
+
+### Minor Changes
+
+- 1678264: Add a native option to isSubpath for checking containment using filesystem path semantics.
+- f7feb6d: Normalize migration cancellation JSON and share error serialization to preserve completed batch outcomes, error classifications, and recovery guidance.
+- fdae48f: Add typed JSON output to `shopify upgrade`.
+
+### Patch Changes
+
+- 03d54a6: Fail with a clear error, instead of logging in with your Shopify account, when `SHOPIFY_APP_AUTOMATION_TOKEN` or `SHOPIFY_CLI_PARTNERS_TOKEN` is set but empty
+- f945f9d: Route success banners through JSON diagnostics.
+- e5ac2d0: Hide webhook shared secrets in GraphQL request diagnostics.
+
 ## 4.9.0
 
 ### Minor Changes

packages/cli-kit/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shopify/cli-kit",
-  "version": "4.9.0",
+  "version": "5.0.0",
   "packageManager": "pnpm@10.11.1",
   "private": false,
   "description": "A set of utilities, interfaces, and models that are common across all the platform features",

packages/cli-kit/src/public/common/version.ts

@@ -1 +1 @@
-export const CLI_KIT_VERSION = '4.9.0'
+export const CLI_KIT_VERSION = '5.0.0'

packages/cli/CHANGELOG.md

@@ -1,5 +1,42 @@
 # @shopify/cli
 
+## 5.0.0
+
+### Major Changes
+
+- 731f591: Return a success status and absolute file path in `app import channel-config --json`.
+- d5565e0: Normalize migration status JSON with gid and shopGid identifiers and flat per-shop results.
+- 4332594: Normalize migration submission JSON with outcome statuses, changed, GID fields, flattened results, fieldPath errors, and successful cancellation results.
+- 56e663d: Normalize migration subscription JSON with shopGid identifiers, whole-second UTC instants, and calendar dates.
+- 2ded4d0: Normalize migration unscheduling JSON with explicit outcomes, successful cancellation, GID fields, and flattened results.
+- f7feb6d: Normalize migration cancellation JSON and share error serialization to preserve completed batch outcomes, error classifications, and recovery guidance.
+
+### Minor Changes
+
+- 6616f2e: Add typed JSON output to app bulk cancel.
+- d1c2303: Add typed JSON output to app bulk execute.
+- 35ef50c: Add typed JSON output to app bulk status.
+- b46926e: Add typed JSON output to `app dev clean`.
+- 463c38b: Add typed JSON output to `app execute` with GraphQL error details and file receipts.
+- 576f240: Add typed JSON output to `app import custom-data-definitions`.
+- 6f94240: Add typed JSON output to `app import dashboard-extensions`.
+- e5ac2d0: Add typed JSON output to `app webhook trigger`.
+- 11dbcff: Add JSON status output to app build.
+- fdebfc5: Add typed JSON output and schema discovery to `doc fetch`.
+- 2e10837: Add typed JSON output and schema discovery to `doc search`.
+- 9aa11b4: Add typed JSON output to `app deploy`.
+- fdae48f: Add typed JSON output to `shopify upgrade`.
+
+### Patch Changes
+
+- 02c6a6a: Clarify the `--blocking` and `--skip-instructions` help text for `shopify app security`
+- 70fd6eb: Skip lockfiles in every `shopify app security check` scan directory, so a monorepo root lockfile no longer leaves the secret check unresolved
+- f5f737a: Stop app security agent checks from leaving the React Router app template's metafield, authorization and frame-ancestors checks unresolved
+- 0c17a82: `shopify app security check` only reads from Git: it no longer starts file-system monitors or fetches missing objects, and it doesn't use repositories committed inside the scanned directory
+- 04842af: Fix migration detection for legacy Checkout and POS UI extensions in App Management apps.
+- f945f9d: Route success banners through JSON diagnostics.
+- e5ac2d0: Hide webhook shared secrets in GraphQL request diagnostics.
+
 ## 4.9.0
 
 ### Minor Changes

packages/cli/oclif.manifest.json

@@ -13106,5 +13106,5 @@
       "strict": true
     }
   },
-  "version": "4.9.0"
+  "version": "5.0.0"
 }

packages/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shopify/cli",
-  "version": "4.9.0",
+  "version": "5.0.0",
   "packageManager": "pnpm@10.11.1",
   "private": false,
   "description": "A CLI tool to build for the Shopify platform",
@@ -61,12 +61,12 @@
     "@oclif/core": "4.8.3",
     "@oclif/plugin-commands": "4.1.60",
     "@oclif/plugin-plugins": "5.4.84",
-    "@shopify/app": "4.9.0",
-    "@shopify/store": "4.9.0",
-    "@shopify/cli-kit": "4.9.0",
-    "@shopify/plugin-cloudflare": "4.9.0",
-    "@shopify/plugin-did-you-mean": "4.9.0",
-    "@shopify/theme": "4.9.0",
+    "@shopify/app": "5.0.0",
+    "@shopify/store": "5.0.0",
+    "@shopify/cli-kit": "5.0.0",
+    "@shopify/plugin-cloudflare": "5.0.0",
+    "@shopify/plugin-did-you-mean": "5.0.0",
+    "@shopify/theme": "5.0.0",
     "@shopify/cli-hydrogen": "13.0.6",
     "@types/global-agent": "3.0.0",
     "@vitest/coverage-istanbul": "^3.2.7",

packages/create-app/CHANGELOG.md

@@ -1,5 +1,7 @@
 # @shopify/create-app
 
+## 5.0.0
+
 ## 4.9.0
 
 ## 4.8.0

packages/create-app/oclif.manifest.json

@@ -143,5 +143,5 @@
       "summary": "Create a new app project"
     }
   },
-  "version": "4.9.0"
+  "version": "5.0.0"
 }

packages/create-app/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shopify/create-app",
-  "version": "4.9.0",
+  "version": "5.0.0",
   "packageManager": "pnpm@10.11.1",
   "private": false,
   "description": "A CLI tool to create a new Shopify app.",
@@ -58,8 +58,8 @@
     "esbuild": "0.28.1"
   },
   "devDependencies": {
-    "@shopify/cli-kit": "4.9.0",
-    "@shopify/app": "4.9.0",
+    "@shopify/cli-kit": "5.0.0",
+    "@shopify/app": "5.0.0",
     "esbuild-plugin-copy": "^2.1.1",
     "@vitest/coverage-istanbul": "^3.2.7"
   },