sincecutoff.com
/v1/json /v1/md llms.txt

What changed in Shopify CLI.

We scan this tool’s changelog a few times a day and keep the changes that would alter your agent’s next action: 26 since January 2026, each linked to its source.

YOUR MODEL or
INTRODUCED
26 CHANGES
LATEST 2026-10-08 · 1 TOOLS
OCT 082026
Shopify CLI

shopify app Flow trigger lifecycle callback relative urls

When the app hosts the Flow trigger lifecycle callback, set its `url` to a single-slash relative path; Shopify CLI resolves it against the dev tunnel during `app dev` and the HTTPS `application_url` during deploy. Implement the callback route, run `shopify app dev` and create a workflow using the trigger, then run `shopify app deploy`.

[[extensions]] name = "My lifecycle callback" handle = "my-lifecycle-callback" type = "flow_trigger_lifecycle_callback" uid = "<generated-uid>" url = "/flow/lifecycle-callback"
evidence github.comscore 0.92open card ↗
OCT 082026
Shopify CLI

shopify app function target-level input variables

When a function target’s input query declares variables, set `input_variables` on that target to identify its JSON metafield. Don’t also configure extension-level variables in the same function.

[[extensions.targeting]] target = "<function-target>" input_query = "<path-to-input-query.graphql>" input_variables = { namespace = "$app:<namespace>", key = "<key>" } export = "<function-export>"
evidence github.comscore 0.97open card ↗
OCT 082026
Shopify CLI

shopify app security commands check and review app source

When reviewing a Shopify app for Shopify-specific security issues, run the deterministic scan, have a coding agent investigate and record its findings, then review the combined results. Use the same app-selection flags throughout; `instructions` prints the workflow and `clean` deletes stored results.

shopify app security check
evidence github.comscore 0.94open card ↗
OCT 082026
Shopify CLI

shopify CLI commands accept --no-input

When running a Shopify CLI command without interactive behavior, append `--no-input`; it disables prompts and browser authentication. If required input is unavailable, the CLI returns an actionable error.

shopify app deploy --no-input
evidence github.comscore 0.96open card ↗
OCT 082026
Shopify CLI

Shopify UI extension metafields accept owner_type

When configuring metafields for a checkout or customer account UI extension, add `owner_type` to each declaration to identify the resource that owns it. On API version 2026-10 it is optional; Shopify's docs list `PRODUCTVARIANT` and `CUSTOMER` as supported values.

[[extensions.metafields]] namespace = "$app" key = "energy-rating" owner_type = "PRODUCTVARIANT" [[extensions.metafields]] namespace = "custom" key = "age-verification-required" owner_type = "CUSTOMER"
evidence github.comscore 0.96open card ↗
OCT 062026
Shopify CLI

shopify theme init defaults to stable Skeleton releases

When initializing a theme without interactive input, run `shopify theme init` with `--no-input` to use the latest stable Skeleton release. With interactive input, the CLI prompts for the Skeleton theme version.

shopify theme init --no-input
evidence github.comscore 0.95open card ↗
SEP 092026
Shopify CLI

shopify app dev creates dev stores inline

When using App Management with no usable development store, run `shopify app dev` and create a store in its interactive flow. When stores already exist, choose “Create a new dev store” in the picker to create one and continue the preview; the official CLI docs describe the interactive picker but do not document this new choice.

shopify app dev
evidence github.comscore 0.98open card ↗
SEP 092026
Shopify CLI

Shopify UI extensions support intercepts target capabilities

When a UI extension target needs interception behavior, add an `intercepts` target capability with its documented fields; the CLI 4.8.0 release also says `ExtensionPoint` exposes target capabilities separately from extension-level capabilities.

evidence github.comscore 0.92open card ↗
AUG 192026
Shopify CLI

shopify app function run supports --profile

When you have a built function and valid JSON input, run it with `--profile` to generate a WebAssembly performance profile. Open the `.perf` file from the function directory in Speedscope.

shopify app function build shopify app function run --export <export> --input <input.json> --profile
evidence github.comscore 0.97open card ↗
JUL 312026
Shopify CLI

Shopify app and theme commands accept an auth alias

When running a supported app or theme development command, pass `--auth-alias <alias>` or set `SHOPIFY_FLAG_AUTH_ALIAS` to use that account alias for the command without changing the current CLI session.

shopify app dev --auth-alias <alias>
evidence github.comscore 0.95open card ↗