[Bug]: `profiles/update` and `profiles/create` webhooks trigger protected customer data error

[inetaa]

Please confirm that you have:

• [x] Searched existing issues to see if your issue is a duplicate. (If you’ve found a duplicate issue, feel free to add additional information in a comment on it.)
• [x] Reproduced the issue in the latest CLI version.

In which of these areas are you experiencing a problem?

Extension, App

Expected behavior

Adding in toml file:

[[webhooks.subscriptions]]
topics = ["profiles/create", "profiles/update", "profiles/delete"]
uri = "/webhooks"

scopes = "read_shipping"

Running shopify app deploy deploys new version

Actual behavior

On shopify app deploygetting

│  Version couldn't be created.                                                │
│                                                                              │
│    • This app is not approved to subscribe to webhook topics containing      │
│      protected customer data. See                                            │
│      https://shopify.dev/docs/apps/launch/protected-customer-data for more   │
│      details.                                                                │
│    • This app is not approved to subscribe to webhook topics containing      │
│      protected customer data. See                                            │
│      https://shopify.dev/docs/apps/launch/protected-customer-data for more   │
│      details.                                                                │

Verbose output

Verbose output

2025-10-06T14:13:30.702Z: Analytics event sent: { "command": "app deploy", "time_start": 1759760004167, "time_end": 1759760010230, "total_time": 6063, "success": false, "cli_version": "3.85.4", "ruby_version": "", "node_version": "22.15.1", "is_employee": false, "uname": "darwin arm64", "env_ci": false, "env_plugin_installed_any_custom": false, "env_plugin_installed_shopify": "["@shopify/cli"]", "env_shell": "zsh", "env_device_id": "369dec2deae3f2799343efbac9fb208a91b14c18", "env_cloud": "localhost", "env_package_manager": "npm", "env_is_global": true, "env_auth_method": "device_auth", "env_is_wsl": false, "env_build_repository": "Shopify/cli", "cmd_app_warning_api_key_deprecation_displayed": false, "cmd_deploy_flag_message_used": false, "cmd_deploy_flag_version_used": false, "cmd_deploy_flag_source_url_used": false, "cmd_app_all_configs_any": true, "cmd_app_all_configs_clients": "{"shopify.app.cloud-dev.toml":"df6d2416343b8850cb18d7854de63911","shopify.app.cloud-prod.toml":"5bbd011e284de09e8249f515bc6f49cc","shopify.app.local-i.toml":"ce38b32c8f0a21e7d4752af531e3eca7","shopify.app.local-m.toml":"55a39ee60e238fb602c28ae124f05bd4"}", "cmd_app_linked_config_used": true, "cmd_app_linked_config_name": "shopify.app.local-i.toml", "cmd_app_linked_config_git_tracked": true, "cmd_app_linked_config_source": "cached", "cmd_app_linked_config_uses_cli_managed_urls": true, "project_type": "node", "app_extensions_any": true, "app_extensions_breakdown": "{"theme":1}", "app_extensions_count": 1, "app_extensions_custom_layout": false, "app_extensions_function_any": false, "app_extensions_function_count": 0, "app_extensions_theme_any": true, "app_extensions_theme_count": 1, "app_extensions_ui_any": false, "app_extensions_ui_count": 0, "app_name_hash": "e9adf63b695dd767ee3dc280751867c74f29198d", "app_path_hash": "7df7cb30fa38b1641e893e99dfade2466d68afd8", "app_scopes": "["read_inventory","read_locales","read_locations","read_products","read_shipping"]", "app_web_backend_any": true, "app_web_backend_count": 1, "app_web_custom_layout": true, "app_web_framework": "remix", "app_web_frontend_any": true, "app_web_frontend_count": 1, "env_package_manager_workspaces": true, "business_platform_id": 143588588, "api_key": "****", "cmd_app_reset_used": false, "cmd_deploy_include_config_used": true, "cmd_deploy_config_modules_breakdown": "["access_scopes","app_proxy","application_url","auth","embedded","handle","name","pos","webhooks"]", "cmd_deploy_config_modules_updated": "["webhooks"]", "cmd_deploy_confirm_new_registrations": 0, "cmd_deploy_confirm_updated_registrations": 0, "cmd_deploy_confirm_removed_registrations": 0, "cmd_deploy_confirm_cancelled": false, "cmd_deploy_confirm_time_to_complete_ms": 1976, "cmd_all_timing_network_ms": 3243, "cmd_all_timing_prompts_ms": 1975, "cmd_all_launcher": "unknown", "cmd_all_topic": "app", "cmd_all_plugin": "@shopify/app", "cmd_all_force": false, "cmd_all_verbose": true, "cmd_all_path_override": true, "cmd_all_path_override_hash": "7df7cb30fa38b1641e893e99dfade2466d68afd8", "cmd_all_last_graphql_request_id": "a013643a-0a7d-4ad2-96f1-09aa9155bac5-1759760009", "cmd_all_timing_active_ms": 843, "cmd_all_exit": "expected_error", "user_id": "0fcaccca-16e9-4f29-9a98-e1f8604fc964", "request_ids": [ "aaf426f0-cf56-453a-8b83-3924f5f6d59c-1759760004", "af5496a0-3e68-48a2-b94c-0d8cea27887b-1759760004", "84032b8e-c9e5-4ffa-b3a8-60cbecf48ffc-1759760005", "48a58cc1-411f-43c6-8a92-eb0bcb90267d-1759760005", "a013643a-0a7d-4ad2-96f1-09aa9155bac5-1759760009" ], "args": "--verbose", "error_message": "Version couldn't be created.", "env_plugin_installed_all": "["@shopify/cli"]", "metadata": "{"extraPublic":{},"extraSensitive":{}}" } 2025-10-06T14:13:30.716Z: Reporting handled error to Bugsnag: Version couldn't be created.

Reproduction steps

1. Add to toml file webhooks: "profiles/create" or "profiles/update"
2. Include scope read_shipping
3. Run shopify app deploy

Operating System

Mac OS

Shopify CLI version (shopify --version)

3.85.4

Shell

No response

Node version (run node -v if you're not sure)

No response

What language and version are you using in your application?

No response

[github-actions[bot]]

This issue seems inactive. If it's still relevant, please add a comment saying so. Otherwise, take no action. → If there's no activity within a week, then a bot will automatically close this. Thanks for helping to improve Shopify's dev tooling and experience.

P.S. You can learn more about why we stale issues here.