Version Packages - main

packages/app/CHANGELOG.md

@@ -1,5 +1,48 @@
 # @shopify/app
 
+## 4.9.0
+
+### Minor Changes
+
+- b36c592: Add a JSON output schema for `app versions list` and clarify its missing-app error.
+- 3793fab: Add typed JSON output with organization status, shop count, and URL to `organization list`.
+- a80a926: Support owner types in UI extension metafield configuration.
+- 574a949: Allow `--config` and `--client-id` together on `app deploy`, `app dev`, and `app dev clean` to use the selected configuration with a different app
+- 265ada1: Allow Flow trigger lifecycle callback `url`s to be relative to the app's `application_url`
+- 5658023: Support `input_variables` on function targets, alongside the extension-level `[input.variables]`
+- 3385c63: Move `app import-extensions` and `app import-custom-data-definitions` under the new `app import` topic; the old paths still work but are deprecated
+- ba84763: Add `shopify app security` commands to check an app's source code for Shopify-specific security issues. `check` runs deterministic rules and generates checks for your coding agent to investigate, `record` saves the agent's findings, `review` shows the combined results, `instructions` prints the workflow for a coding agent, and `clean` removes local results.
+- a1c34f0: Add an `--unsafe-validation` flag to `shopify app dev`.
+
+### Patch Changes
+
+- ebd7430: Refer to `shopify app security` results and instructions as an app security check instead of the title-cased "App Security"
+- 73ad604: Stop reporting a missing configured asset path and a missing extension build output as unknown CLI bugs during app build
+- f1b8250: Clarify `app config link` flags and recommend `--file-name` when both `--config` and `--client-id` are provided
+- e2e1eec: Fix unchanged event subscriptions appearing as updates during app deploy and avoid redundant subscription API versions when linking config.
+- 93cc4d8: Recover gracefully when pnpm blocks dependency build scripts during `app generate extension`: clean up the partially generated extension and explain how to approve the builds
+- fa5989a: Emit info and warning banners as JSON diagnostics on stderr in JSON mode.
+- f6700aa: Bump Shopify/theme-tools packages
+- Updated dependencies [9945ebf]
+- Updated dependencies [267c622]
+- Updated dependencies [9832404]
+- Updated dependencies [fa5989a]
+- Updated dependencies [83fe8a2]
+- Updated dependencies [065cd24]
+- Updated dependencies [b5d1f33]
+- Updated dependencies [f6700aa]
+- Updated dependencies [02fbf6e]
+- Updated dependencies [ab16257]
+- Updated dependencies [46dcc14]
+- Updated dependencies [58d1f09]
+- Updated dependencies [fd4a5db]
+- Updated dependencies [667c628]
+- Updated dependencies [2a9b3a4]
+  - @shopify/cli-kit@4.9.0
+  - @shopify/theme@4.9.0
+  - @shopify/organizations@4.9.0
+  - @shopify/plugin-cloudflare@4.9.0
+
 ## 4.8.0
 
 ### Minor Changes

packages/app/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shopify/app",
-  "version": "4.8.0",
+  "version": "4.9.0",
   "packageManager": "pnpm@10.11.1",
   "description": "Utilities for loading, building, and publishing apps.",
   "homepage": "https://github.com/shopify/cli#readme",
@@ -58,10 +58,10 @@
     "@graphql-typed-document-node/core": "3.2.0",
     "@luckycatfactory/esbuild-graphql-loader": "3.8.1",
     "@oclif/core": "4.8.3",
-    "@shopify/cli-kit": "4.8.0",
-    "@shopify/organizations": "4.8.0",
-    "@shopify/plugin-cloudflare": "4.8.0",
-    "@shopify/theme": "4.8.0",
+    "@shopify/cli-kit": "4.9.0",
+    "@shopify/organizations": "4.9.0",
+    "@shopify/plugin-cloudflare": "4.9.0",
+    "@shopify/theme": "4.9.0",
     "@shopify/theme-check-node": "3.30.1",
     "@shopify/toml-patch": "0.3.0",
     "chokidar": "3.6.0",

packages/cli-kit/CHANGELOG.md

@@ -1,5 +1,27 @@
 # @shopify/cli-kit
 
+## 4.9.0
+
+### Minor Changes
+
+- 83fe8a2: Emit machine-readable fatal errors when JSON output is active
+- b5d1f33: Add `--no-input` to commands with global flags to disable interactive prompts and browser authentication.
+- 02fbf6e: Show JSON Schema in command help and use `--json-schema` to print result, error, and event schemas.
+- 46dcc14: Add optional `maxRetries` and `retryDelay` options to `removeFile`, passed through to Node's `fs.rm` to retry transient removal errors
+- 58d1f09: Run `renderTasks` without Ink in JSON mode, report task retries and failures, and support retries in `renderSingleTask`.
+
+### Patch Changes
+
+- 9945ebf: Send finite concurrent process output as JSON diagnostic and progress events on stderr.
+- 267c622: Fix a startup crash on machines where the OS can't look up the current user's shell
+- 9832404: Retry gateway failures during device authorization before reporting an expected service error.
+- fa5989a: Emit info and warning banners as JSON diagnostics on stderr in JSON mode.
+- 065cd24: Show recovery guidance instead of crashing when Shopify CLI cannot create a local storage directory
+- ab16257: Write interactive prompts to stderr by default to keep stdout clear for command results.
+- fd4a5db: Stop reporting an unavailable shop, an Admin API server error, and a cancelled request as unknown CLI bugs during Admin API version discovery
+- 667c628: Verify the installed version after `shopify upgrade` and fail instead of reporting a false success when the upgrade didn't complete
+- 2a9b3a4: Fix text prompt underlines rendering as unsupported characters in Windows consoles.
+
 ## 4.8.0
 
 ## 4.7.0

packages/cli-kit/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shopify/cli-kit",
-  "version": "4.8.0",
+  "version": "4.9.0",
   "packageManager": "pnpm@10.11.1",
   "private": false,
   "description": "A set of utilities, interfaces, and models that are common across all the platform features",

packages/cli-kit/src/public/common/version.ts

@@ -1 +1 @@
-export const CLI_KIT_VERSION = '4.8.0'
+export const CLI_KIT_VERSION = '4.9.0'