github Shopify/cli 4.9.3

3 hours ago

What's Changed

App

  • Skip lockfiles in every shopify app security check scan directory, including --include-dir paths, so large repository-root lockfiles no longer leave the secret check unresolved by @jplhomer in #8825
  • Check Dependabot and Renovate configuration at the app's Git repository root when the app is nested below it by @jplhomer in #8826
  • Detect React Router code in additional directories, such as servers added with --include-dir and web/ directories, so the relevant source checks can run by @jplhomer in #8827
  • Clarify agent-check instructions for React Router authentication, metafield writes, and frame-ancestors CSP policies, including when to report completed checks versus unresolved investigations by @jplhomer in #8830
  • Clarify the --blocking levels and its none default, and when to use --skip-instructions, in shopify app security help by @jplhomer in #8853

Full Changelog: 4.9.2...4.9.3

Don't miss a new cli release

NewReleases is sending notifications on new releases.