diff --git a/.changeset/app-security-dependency-automation-repository-root.md b/.changeset/app-security-dependency-automation-repository-root.md deleted file mode 100644 index ef03df1d659..00000000000 --- a/.changeset/app-security-dependency-automation-repository-root.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -'@shopify/app': patch ---- - -Check for Dependabot or Renovate configuration at the Git repository root when `shopify app security check` scans an app below it diff --git a/.changeset/app-security-flag-descriptions.md b/.changeset/app-security-flag-descriptions.md deleted file mode 100644 index a8cde0e31f3..00000000000 --- a/.changeset/app-security-flag-descriptions.md +++ /dev/null @@ -1,6 +0,0 @@ ---- -'@shopify/app': patch -'@shopify/cli': patch ---- - -Clarify the `--blocking` and `--skip-instructions` help text for `shopify app security` diff --git a/.changeset/app-security-monorepo-lockfiles.md b/.changeset/app-security-monorepo-lockfiles.md deleted file mode 100644 index f189116d200..00000000000 --- a/.changeset/app-security-monorepo-lockfiles.md +++ /dev/null @@ -1,6 +0,0 @@ ---- -'@shopify/app': patch -'@shopify/cli': patch ---- - -Skip lockfiles in every `shopify app security check` scan directory, so a monorepo root lockfile no longer leaves the secret check unresolved diff --git a/.changeset/app-security-react-router-roots.md b/.changeset/app-security-react-router-roots.md deleted file mode 100644 index 836cdab0ecb..00000000000 --- a/.changeset/app-security-react-router-roots.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -'@shopify/app': patch ---- - -Detect React Router app code outside the app directory, such as in `--include-dir` or web directories, in `shopify app security check` diff --git a/.changeset/app-security-unresolved-calibration.md b/.changeset/app-security-unresolved-calibration.md deleted file mode 100644 index 17a89f5f28d..00000000000 --- a/.changeset/app-security-unresolved-calibration.md +++ /dev/null @@ -1,6 +0,0 @@ ---- -'@shopify/app': patch -'@shopify/cli': patch ---- - -Stop app security agent checks from leaving the React Router app template's metafield, authorization and frame-ancestors checks unresolved diff --git a/packages/app/CHANGELOG.md b/packages/app/CHANGELOG.md index a3f6a74f03f..68c360ec364 100644 --- a/packages/app/CHANGELOG.md +++ b/packages/app/CHANGELOG.md @@ -1,5 +1,19 @@ # @shopify/app +## 4.9.3 + +### Patch Changes + +- efc1987: Check for Dependabot or Renovate configuration at the Git repository root when `shopify app security check` scans an app below it +- 5e9df02: Clarify the `--blocking` and `--skip-instructions` help text for `shopify app security` +- 5a175f4: Skip lockfiles in every `shopify app security check` scan directory, so a monorepo root lockfile no longer leaves the secret check unresolved +- de830e0: Detect React Router app code outside the app directory, such as in `--include-dir` or web directories, in `shopify app security check` +- a7ec921: Stop app security agent checks from leaving the React Router app template's metafield, authorization and frame-ancestors checks unresolved + - @shopify/organizations@4.9.3 + - @shopify/cli-kit@4.9.3 + - @shopify/theme@4.9.3 + - @shopify/plugin-cloudflare@4.9.3 + ## 4.9.2 ### Patch Changes diff --git a/packages/app/package.json b/packages/app/package.json index db2a305fdae..5f4e831e54c 100644 --- a/packages/app/package.json +++ b/packages/app/package.json @@ -1,6 +1,6 @@ { "name": "@shopify/app", - "version": "4.9.2", + "version": "4.9.3", "packageManager": "pnpm@10.11.1", "description": "Utilities for loading, building, and publishing apps.", "homepage": "https://github.com/shopify/cli#readme", @@ -58,10 +58,10 @@ "@graphql-typed-document-node/core": "3.2.0", "@luckycatfactory/esbuild-graphql-loader": "3.8.1", "@oclif/core": "4.8.3", - "@shopify/cli-kit": "4.9.2", - "@shopify/organizations": "4.9.2", - "@shopify/plugin-cloudflare": "4.9.2", - "@shopify/theme": "4.9.2", + "@shopify/cli-kit": "4.9.3", + "@shopify/organizations": "4.9.3", + "@shopify/plugin-cloudflare": "4.9.3", + "@shopify/theme": "4.9.3", "@shopify/theme-check-node": "3.30.1", "@shopify/toml-patch": "0.3.0", "chokidar": "3.6.0", diff --git a/packages/cli-kit/CHANGELOG.md b/packages/cli-kit/CHANGELOG.md index 19ba2ab661b..920be29a6bf 100644 --- a/packages/cli-kit/CHANGELOG.md +++ b/packages/cli-kit/CHANGELOG.md @@ -1,5 +1,7 @@ # @shopify/cli-kit +## 4.9.3 + ## 4.9.2 ## 4.9.1 diff --git a/packages/cli-kit/package.json b/packages/cli-kit/package.json index 5cfadb31c66..1dcdc65bd3f 100644 --- a/packages/cli-kit/package.json +++ b/packages/cli-kit/package.json @@ -1,6 +1,6 @@ { "name": "@shopify/cli-kit", - "version": "4.9.2", + "version": "4.9.3", "packageManager": "pnpm@10.11.1", "private": false, "description": "A set of utilities, interfaces, and models that are common across all the platform features", diff --git a/packages/cli-kit/src/public/common/version.ts b/packages/cli-kit/src/public/common/version.ts index 0c252e395d0..79dc6616116 100644 --- a/packages/cli-kit/src/public/common/version.ts +++ b/packages/cli-kit/src/public/common/version.ts @@ -1 +1 @@ -export const CLI_KIT_VERSION = '4.9.2' +export const CLI_KIT_VERSION = '4.9.3' diff --git a/packages/cli/CHANGELOG.md b/packages/cli/CHANGELOG.md index 7528406f7ea..5fd36d1505e 100644 --- a/packages/cli/CHANGELOG.md +++ b/packages/cli/CHANGELOG.md @@ -1,5 +1,13 @@ # @shopify/cli +## 4.9.3 + +### Patch Changes + +- 5e9df02: Clarify the `--blocking` and `--skip-instructions` help text for `shopify app security` +- 5a175f4: Skip lockfiles in every `shopify app security check` scan directory, so a monorepo root lockfile no longer leaves the secret check unresolved +- a7ec921: Stop app security agent checks from leaving the React Router app template's metafield, authorization and frame-ancestors checks unresolved + ## 4.9.2 ### Patch Changes diff --git a/packages/cli/oclif.manifest.json b/packages/cli/oclif.manifest.json index 73647a575b3..08371be4251 100644 --- a/packages/cli/oclif.manifest.json +++ b/packages/cli/oclif.manifest.json @@ -12918,5 +12918,5 @@ "strict": true } }, - "version": "4.9.2" + "version": "4.9.3" } \ No newline at end of file diff --git a/packages/cli/package.json b/packages/cli/package.json index bce4db9a19f..7b0e009617c 100644 --- a/packages/cli/package.json +++ b/packages/cli/package.json @@ -1,6 +1,6 @@ { "name": "@shopify/cli", - "version": "4.9.2", + "version": "4.9.3", "packageManager": "pnpm@10.11.1", "private": false, "description": "A CLI tool to build for the Shopify platform", @@ -61,12 +61,12 @@ "@oclif/core": "4.8.3", "@oclif/plugin-commands": "4.1.60", "@oclif/plugin-plugins": "5.4.84", - "@shopify/app": "4.9.2", - "@shopify/store": "4.9.2", - "@shopify/cli-kit": "4.9.2", - "@shopify/plugin-cloudflare": "4.9.2", - "@shopify/plugin-did-you-mean": "4.9.2", - "@shopify/theme": "4.9.2", + "@shopify/app": "4.9.3", + "@shopify/store": "4.9.3", + "@shopify/cli-kit": "4.9.3", + "@shopify/plugin-cloudflare": "4.9.3", + "@shopify/plugin-did-you-mean": "4.9.3", + "@shopify/theme": "4.9.3", "@shopify/cli-hydrogen": "13.0.6", "@types/global-agent": "3.0.0", "@vitest/coverage-istanbul": "^3.2.7", diff --git a/packages/create-app/CHANGELOG.md b/packages/create-app/CHANGELOG.md index 9497c7d5bbc..a6ab3531d37 100644 --- a/packages/create-app/CHANGELOG.md +++ b/packages/create-app/CHANGELOG.md @@ -1,5 +1,7 @@ # @shopify/create-app +## 4.9.3 + ## 4.9.2 ## 4.9.1 diff --git a/packages/create-app/oclif.manifest.json b/packages/create-app/oclif.manifest.json index 43c5a01deb7..e2024cf5a4a 100644 --- a/packages/create-app/oclif.manifest.json +++ b/packages/create-app/oclif.manifest.json @@ -143,5 +143,5 @@ "summary": "Create a new app project" } }, - "version": "4.9.2" + "version": "4.9.3" } \ No newline at end of file diff --git a/packages/create-app/package.json b/packages/create-app/package.json index dffd394950a..78b340a7c17 100644 --- a/packages/create-app/package.json +++ b/packages/create-app/package.json @@ -1,6 +1,6 @@ { "name": "@shopify/create-app", - "version": "4.9.2", + "version": "4.9.3", "packageManager": "pnpm@10.11.1", "private": false, "description": "A CLI tool to create a new Shopify app.", @@ -58,8 +58,8 @@ "esbuild": "0.28.1" }, "devDependencies": { - "@shopify/cli-kit": "4.9.2", - "@shopify/app": "4.9.2", + "@shopify/cli-kit": "4.9.3", + "@shopify/app": "4.9.3", "esbuild-plugin-copy": "^2.1.1", "@vitest/coverage-istanbul": "^3.2.7" }, diff --git a/packages/organizations/CHANGELOG.md b/packages/organizations/CHANGELOG.md index 01fd61a8ef0..b2a29da9f12 100644 --- a/packages/organizations/CHANGELOG.md +++ b/packages/organizations/CHANGELOG.md @@ -1,5 +1,11 @@ # @shopify/organizations +## 4.9.3 + +### Patch Changes + +- @shopify/cli-kit@4.9.3 + ## 4.9.2 ### Patch Changes diff --git a/packages/organizations/package.json b/packages/organizations/package.json index c753b36c0a9..728012c9324 100644 --- a/packages/organizations/package.json +++ b/packages/organizations/package.json @@ -1,6 +1,6 @@ { "name": "@shopify/organizations", - "version": "4.9.2", + "version": "4.9.3", "packageManager": "pnpm@10.11.1", "private": true, "description": "Utilities for working with Shopify organizations", @@ -39,7 +39,7 @@ ] }, "dependencies": { - "@shopify/cli-kit": "4.9.2", + "@shopify/cli-kit": "4.9.3", "@graphql-typed-document-node/core": "3.2.0" }, "devDependencies": { diff --git a/packages/plugin-cloudflare/CHANGELOG.md b/packages/plugin-cloudflare/CHANGELOG.md index 6ab81643772..be1a1a73792 100644 --- a/packages/plugin-cloudflare/CHANGELOG.md +++ b/packages/plugin-cloudflare/CHANGELOG.md @@ -1,5 +1,11 @@ # @shopify/plugin-cloudflare +## 4.9.3 + +### Patch Changes + +- @shopify/cli-kit@4.9.3 + ## 4.9.2 ### Patch Changes diff --git a/packages/plugin-cloudflare/package.json b/packages/plugin-cloudflare/package.json index 77c794a7088..83fdb6ae6e1 100644 --- a/packages/plugin-cloudflare/package.json +++ b/packages/plugin-cloudflare/package.json @@ -1,6 +1,6 @@ { "name": "@shopify/plugin-cloudflare", - "version": "4.9.2", + "version": "4.9.3", "packageManager": "pnpm@10.11.1", "description": "Enables the creation of Cloudflare tunnels from `shopify app dev`, allowing previews from any device", "keywords": [ @@ -46,7 +46,7 @@ }, "dependencies": { "@oclif/core": "4.8.3", - "@shopify/cli-kit": "4.9.2" + "@shopify/cli-kit": "4.9.3" }, "devDependencies": { "@vitest/coverage-istanbul": "^3.2.7" diff --git a/packages/plugin-did-you-mean/CHANGELOG.md b/packages/plugin-did-you-mean/CHANGELOG.md index 4bb2d78f95e..9b8be3a336d 100644 --- a/packages/plugin-did-you-mean/CHANGELOG.md +++ b/packages/plugin-did-you-mean/CHANGELOG.md @@ -1,5 +1,11 @@ # @shopify/plugin-did-you-mean +## 4.9.3 + +### Patch Changes + +- @shopify/cli-kit@4.9.3 + ## 4.9.2 ### Patch Changes diff --git a/packages/plugin-did-you-mean/package.json b/packages/plugin-did-you-mean/package.json index 65eb933d778..66129e7680f 100644 --- a/packages/plugin-did-you-mean/package.json +++ b/packages/plugin-did-you-mean/package.json @@ -1,6 +1,6 @@ { "name": "@shopify/plugin-did-you-mean", - "version": "4.9.2", + "version": "4.9.3", "packageManager": "pnpm@10.11.1", "private": true, "bugs": { @@ -41,7 +41,7 @@ }, "dependencies": { "@oclif/core": "4.8.3", - "@shopify/cli-kit": "4.9.2", + "@shopify/cli-kit": "4.9.3", "n-gram": "2.0.2" }, "devDependencies": { diff --git a/packages/store/CHANGELOG.md b/packages/store/CHANGELOG.md index 910ac265e73..07e19aea007 100644 --- a/packages/store/CHANGELOG.md +++ b/packages/store/CHANGELOG.md @@ -1,5 +1,12 @@ # @shopify/store +## 4.9.3 + +### Patch Changes + +- @shopify/organizations@4.9.3 +- @shopify/cli-kit@4.9.3 + ## 4.9.2 ### Patch Changes diff --git a/packages/store/package.json b/packages/store/package.json index 4c319a0a71a..9c4937151d6 100644 --- a/packages/store/package.json +++ b/packages/store/package.json @@ -1,6 +1,6 @@ { "name": "@shopify/store", - "version": "4.9.2", + "version": "4.9.3", "packageManager": "pnpm@10.11.1", "private": true, "description": "Utilities for working with Shopify stores", @@ -41,8 +41,8 @@ "dependencies": { "@graphql-typed-document-node/core": "3.2.0", "@oclif/core": "4.8.3", - "@shopify/cli-kit": "4.9.2", - "@shopify/organizations": "4.9.2" + "@shopify/cli-kit": "4.9.3", + "@shopify/organizations": "4.9.3" }, "devDependencies": { "@vitest/coverage-istanbul": "^3.2.7" diff --git a/packages/theme/CHANGELOG.md b/packages/theme/CHANGELOG.md index 8b22e68b616..341e7ac4ba1 100644 --- a/packages/theme/CHANGELOG.md +++ b/packages/theme/CHANGELOG.md @@ -1,5 +1,11 @@ # @shopify/theme +## 4.9.3 + +### Patch Changes + +- @shopify/cli-kit@4.9.3 + ## 4.9.2 ### Patch Changes diff --git a/packages/theme/package.json b/packages/theme/package.json index b8ff1ecc384..654a4582a7c 100644 --- a/packages/theme/package.json +++ b/packages/theme/package.json @@ -1,6 +1,6 @@ { "name": "@shopify/theme", - "version": "4.9.2", + "version": "4.9.3", "packageManager": "pnpm@10.11.1", "private": true, "description": "Utilities for building and publishing themes", @@ -41,7 +41,7 @@ }, "dependencies": { "@oclif/core": "4.8.3", - "@shopify/cli-kit": "4.9.2", + "@shopify/cli-kit": "4.9.3", "@shopify/theme-check-node": "3.30.1", "@shopify/theme-language-server-node": "2.23.1", "chokidar": "3.6.0", diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index ff772cd595a..34fc07a1456 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -174,16 +174,16 @@ importers: specifier: 4.8.3 version: 4.8.3 '@shopify/cli-kit': - specifier: 4.9.2 + specifier: 4.9.3 version: link:../cli-kit '@shopify/organizations': - specifier: 4.9.2 + specifier: 4.9.3 version: link:../organizations '@shopify/plugin-cloudflare': - specifier: 4.9.2 + specifier: 4.9.3 version: link:../plugin-cloudflare '@shopify/theme': - specifier: 4.9.2 + specifier: 4.9.3 version: link:../theme '@shopify/theme-check-node': specifier: 3.30.1 @@ -281,25 +281,25 @@ importers: specifier: 5.4.84 version: 5.4.84 '@shopify/app': - specifier: 4.9.2 + specifier: 4.9.3 version: link:../app '@shopify/cli-hydrogen': specifier: 13.0.6 version: 13.0.6(@graphql-codegen/cli@6.3.1(@parcel/watcher@2.5.6)(@types/node@22.20.1)(crossws@0.3.5)(graphql@16.14.2)(typescript@5.9.3))(graphql-config@5.1.6(@types/node@26.1.1)(crossws@0.3.5)(graphql@16.14.2)(typescript@5.9.3))(graphql@16.14.2)(react-dom@19.2.4(react@18.3.1))(react@18.3.1)(vite@6.4.3(@types/node@26.1.1)(jiti@2.6.1)(sass@1.100.0)(tsx@4.23.1)(yaml@2.9.0)) '@shopify/cli-kit': - specifier: 4.9.2 + specifier: 4.9.3 version: link:../cli-kit '@shopify/plugin-cloudflare': - specifier: 4.9.2 + specifier: 4.9.3 version: link:../plugin-cloudflare '@shopify/plugin-did-you-mean': - specifier: 4.9.2 + specifier: 4.9.3 version: link:../plugin-did-you-mean '@shopify/store': - specifier: 4.9.2 + specifier: 4.9.3 version: link:../store '@shopify/theme': - specifier: 4.9.2 + specifier: 4.9.3 version: link:../theme '@types/global-agent': specifier: 3.0.0 @@ -529,10 +529,10 @@ importers: version: 0.28.1 devDependencies: '@shopify/app': - specifier: 4.9.2 + specifier: 4.9.3 version: link:../app '@shopify/cli-kit': - specifier: 4.9.2 + specifier: 4.9.3 version: link:../cli-kit '@vitest/coverage-istanbul': specifier: ^3.2.7 @@ -626,7 +626,7 @@ importers: specifier: 3.2.0 version: 3.2.0(graphql@16.14.2) '@shopify/cli-kit': - specifier: 4.9.2 + specifier: 4.9.3 version: link:../cli-kit devDependencies: '@vitest/coverage-istanbul': @@ -639,7 +639,7 @@ importers: specifier: 4.8.3 version: 4.8.3 '@shopify/cli-kit': - specifier: 4.9.2 + specifier: 4.9.3 version: link:../cli-kit devDependencies: '@vitest/coverage-istanbul': @@ -652,7 +652,7 @@ importers: specifier: 4.8.3 version: 4.8.3 '@shopify/cli-kit': - specifier: 4.9.2 + specifier: 4.9.3 version: link:../cli-kit n-gram: specifier: 2.0.2 @@ -671,10 +671,10 @@ importers: specifier: 4.8.3 version: 4.8.3 '@shopify/cli-kit': - specifier: 4.9.2 + specifier: 4.9.3 version: link:../cli-kit '@shopify/organizations': - specifier: 4.9.2 + specifier: 4.9.3 version: link:../organizations devDependencies: '@vitest/coverage-istanbul': @@ -687,7 +687,7 @@ importers: specifier: 4.8.3 version: 4.8.3 '@shopify/cli-kit': - specifier: 4.9.2 + specifier: 4.9.3 version: link:../cli-kit '@shopify/theme-check-node': specifier: 3.30.1