Version Packages - main

packages/app/CHANGELOG.md

@@ -1,5 +1,43 @@
 # @shopify/app
 
+## 5.0.0
+
+### Major Changes
+
+- 4282952: Remove `app logs` and `app logs sources`; use `app dev` to stream Function logs and save them to `.shopify/logs`.
+
+### Minor Changes
+
+- 587b14d: Record `app dev` sessions, preview status, and JSONL logs so agents can reuse a running session.
+- 62d961a: Improve `app security check` accuracy and safely scan untrusted repositories; add `--print-instructions`, deprecate `--yes`, and require Git 2.38.0 or later for Git operations.
+- e71ac0e: Add typed JSON output to `app security` commands.
+- 62d961a: Add typed JSON output across CLI commands; update scripts for the new schemas with `--json-schema`, read `store execute` query results from `.data`, and use `--no-watch` with `app function replay --json`.
+
+### Patch Changes
+
+- 30fbfab: Reduce `app dev` file watching by excluding Cargo `target` directories, Function build output, `.shopify` files, and editor temporary files.
+- 62d961a: Fix lost Shop scopes in `app config link`, legacy Checkout and POS extension migration detection, and UI extension builds with multiple `should_render` targets.
+- adb6a43: Have coding agents run `app security` commands with `--json --no-input` and read their results instead of parsing terminal output.
+- 12cc647: Exit 0 instead of failing when you decline to scan without app configuration in `app security check`.
+- 525289f: Report clipboard failures in `app security instructions --copy` as errors, and in `app security check` as warnings, instead of crashing.
+- e3d8ebb: Report app security results files with out-of-range values as invalid.
+- 62d961a: Fix development theme previews on stores with market subfolders when using account authentication, improve Theme Access authentication, keep pulled files inside the theme directory, and support browser identity verification.
+- Updated dependencies [62d961a]
+- Updated dependencies [62d961a]
+- Updated dependencies [62d961a]
+- Updated dependencies [c86f804]
+- Updated dependencies [bcbaec8]
+- Updated dependencies [730d051]
+- Updated dependencies [87cc186]
+- Updated dependencies [62d961a]
+- Updated dependencies [e85a56f]
+- Updated dependencies [62d961a]
+- Updated dependencies [349478a]
+  - @shopify/cli-kit@5.0.0
+  - @shopify/plugin-cloudflare@5.0.0
+  - @shopify/theme@5.0.0
+  - @shopify/organizations@5.0.0
+
 ## 4.9.0
 
 ### Minor Changes

packages/app/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shopify/app",
-  "version": "4.9.0",
+  "version": "5.0.0",
   "packageManager": "pnpm@10.11.1",
   "description": "Utilities for loading, building, and publishing apps.",
   "homepage": "https://github.com/shopify/cli#readme",
@@ -58,10 +58,10 @@
     "@graphql-typed-document-node/core": "3.2.0",
     "@luckycatfactory/esbuild-graphql-loader": "3.8.1",
     "@oclif/core": "4.8.3",
-    "@shopify/cli-kit": "4.9.0",
-    "@shopify/organizations": "4.9.0",
-    "@shopify/plugin-cloudflare": "4.9.0",
-    "@shopify/theme": "4.9.0",
+    "@shopify/cli-kit": "5.0.0",
+    "@shopify/organizations": "5.0.0",
+    "@shopify/plugin-cloudflare": "5.0.0",
+    "@shopify/theme": "5.0.0",
     "@shopify/theme-check-node": "3.30.1",
     "@shopify/toml-patch": "0.3.0",
     "chokidar": "3.6.0",

packages/cli-kit/CHANGELOG.md

@@ -1,5 +1,21 @@
 # @shopify/cli-kit
 
+## 5.0.0
+
+### Minor Changes
+
+- 62d961a: Improve `app security check` accuracy and safely scan untrusted repositories; add `--print-instructions`, deprecate `--yes`, and require Git 2.38.0 or later for Git operations.
+- 730d051: Add `SHOPIFY_SERVICE_ACCOUNT_TOKEN` for app, store, and organization automation; it replaces the deprecated `SHOPIFY_APP_AUTOMATION_TOKEN` and `SHOPIFY_CLI_PARTNERS_TOKEN`, which remain supported.
+- 62d961a: Fix development theme previews on stores with market subfolders when using account authentication, improve Theme Access authentication, keep pulled files inside the theme directory, and support browser identity verification.
+- 62d961a: Add typed JSON output across CLI commands; update scripts for the new schemas with `--json-schema`, read `store execute` query results from `.data`, and use `--no-watch` with `app function replay --json`.
+
+### Patch Changes
+
+- 62d961a: Retry throttled API requests, report process failures correctly, and keep login available when the browser cannot open.
+- 62d961a: Protect webhook secrets in debug output, prevent GraphQL cache reuse across tokens, and harden GraphiQL and local command execution.
+- bcbaec8: Explain which access is missing when a token can't manage dev stores, instead of printing a raw GraphQL 401 with the query and a stack trace.
+- 349478a: Preserve graceful shutdown and child-process cleanup on Windows.
+
 ## 4.9.0
 
 ### Minor Changes

packages/cli-kit/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shopify/cli-kit",
-  "version": "4.9.0",
+  "version": "5.0.0",
   "packageManager": "pnpm@10.11.1",
   "private": false,
   "description": "A set of utilities, interfaces, and models that are common across all the platform features",

packages/cli-kit/src/public/common/version.ts

@@ -1 +1 @@
-export const CLI_KIT_VERSION = '4.9.0'
+export const CLI_KIT_VERSION = '5.0.0'

packages/cli/CHANGELOG.md

@@ -1,5 +1,29 @@
 # @shopify/cli
 
+## 5.0.0
+
+### Major Changes
+
+- 62d961a: Add typed JSON output across CLI commands; update scripts for the new schemas with `--json-schema`, read `store execute` query results from `.data`, and use `--no-watch` with `app function replay --json`.
+
+### Minor Changes
+
+- 62d961a: Improve `app security check` accuracy and safely scan untrusted repositories; add `--print-instructions`, deprecate `--yes`, and require Git 2.38.0 or later for Git operations.
+- e71ac0e: Add typed JSON output to `app security` commands.
+- 6ef6660: Add `app dev --json` streaming and expose session-file schemas with `--json-schema`.
+- 604a2ce: Update cli-hydrogen 13.1.0, adding typed JSON output to Hydrogen commands
+
+### Patch Changes
+
+- 62d961a: Fix lost Shop scopes in `app config link`, legacy Checkout and POS extension migration detection, and UI extension builds with multiple `should_render` targets.
+- adb6a43: Have coding agents run `app security` commands with `--json --no-input` and read their results instead of parsing terminal output.
+- 12cc647: Exit 0 instead of failing when you decline to scan without app configuration in `app security check`.
+- 525289f: Report clipboard failures in `app security instructions --copy` as errors, and in `app security check` as warnings, instead of crashing.
+- e3d8ebb: Report app security results files with out-of-range values as invalid.
+- 62d961a: Protect webhook secrets in debug output, prevent GraphQL cache reuse across tokens, and harden GraphiQL and local command execution.
+- bcbaec8: Explain which access is missing when a token can't manage dev stores, instead of printing a raw GraphQL 401 with the query and a stack trace.
+- 349478a: Preserve graceful shutdown and child-process cleanup on Windows.
+
 ## 4.9.0
 
 ### Minor Changes

packages/cli/oclif.manifest.json

@@ -14085,5 +14085,5 @@
       "strict": true
     }
   },
-  "version": "4.9.0"
+  "version": "5.0.0"
 }

packages/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shopify/cli",
-  "version": "4.9.0",
+  "version": "5.0.0",
   "packageManager": "pnpm@10.11.1",
   "private": false,
   "description": "A CLI tool to build for the Shopify platform",
@@ -61,12 +61,12 @@
     "@oclif/core": "4.8.3",
     "@oclif/plugin-commands": "4.1.60",
     "@oclif/plugin-plugins": "5.4.84",
-    "@shopify/app": "4.9.0",
-    "@shopify/store": "4.9.0",
-    "@shopify/cli-kit": "4.9.0",
-    "@shopify/plugin-cloudflare": "4.9.0",
-    "@shopify/plugin-did-you-mean": "4.9.0",
-    "@shopify/theme": "4.9.0",
+    "@shopify/app": "5.0.0",
+    "@shopify/store": "5.0.0",
+    "@shopify/cli-kit": "5.0.0",
+    "@shopify/plugin-cloudflare": "5.0.0",
+    "@shopify/plugin-did-you-mean": "5.0.0",
+    "@shopify/theme": "5.0.0",
     "@shopify/cli-hydrogen": "13.1.0",
     "@types/global-agent": "3.0.0",
     "@vitest/coverage-istanbul": "^3.2.7",

packages/create-app/CHANGELOG.md

@@ -1,5 +1,7 @@
 # @shopify/create-app
 
+## 5.0.0
+
 ## 4.9.0
 
 ## 4.8.0

packages/create-app/oclif.manifest.json

@@ -153,5 +153,5 @@
       "summary": "Create a new app project"
     }
   },
-  "version": "4.9.0"
+  "version": "5.0.0"
 }

packages/create-app/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shopify/create-app",
-  "version": "4.9.0",
+  "version": "5.0.0",
   "packageManager": "pnpm@10.11.1",
   "private": false,
   "description": "A CLI tool to create a new Shopify app.",
@@ -58,8 +58,8 @@
     "esbuild": "0.28.1"
   },
   "devDependencies": {
-    "@shopify/cli-kit": "4.9.0",
-    "@shopify/app": "4.9.0",
+    "@shopify/cli-kit": "5.0.0",
+    "@shopify/app": "5.0.0",
     "esbuild-plugin-copy": "^2.1.1",
     "@vitest/coverage-istanbul": "^3.2.7"
   },

packages/organizations/CHANGELOG.md

@@ -1,5 +1,19 @@
 # @shopify/organizations
 
+## 5.0.0
+
+### Patch Changes
+
+- Updated dependencies [62d961a]
+- Updated dependencies [62d961a]
+- Updated dependencies [62d961a]
+- Updated dependencies [bcbaec8]
+- Updated dependencies [730d051]
+- Updated dependencies [62d961a]
+- Updated dependencies [62d961a]
+- Updated dependencies [349478a]
+  - @shopify/cli-kit@5.0.0
+
 ## 4.9.0
 
 ### Patch Changes

packages/organizations/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shopify/organizations",
-  "version": "4.9.0",
+  "version": "5.0.0",
   "packageManager": "pnpm@10.11.1",
   "private": true,
   "description": "Utilities for working with Shopify organizations",
@@ -39,7 +39,7 @@
     ]
   },
   "dependencies": {
-    "@shopify/cli-kit": "4.9.0",
+    "@shopify/cli-kit": "5.0.0",
     "@graphql-typed-document-node/core": "3.2.0"
   },
   "devDependencies": {