shopify-app-template-with-nestjs icon indicating copy to clipboard operation
shopify-app-template-with-nestjs copied to clipboard

⬆️ Bump @shopify/shopify-api from 9.7.2 to 10.0.0 in /web

Open dependabot[bot] opened this issue 2 months ago • 0 comments

Bumps @shopify/shopify-api from 9.7.2 to 10.0.0.

Release notes

Sourced from @​shopify/shopify-api's releases.

@​shopify/shopify-api@​10.0.0

Major Changes

[!NOTE] For more details on migrating to v10, please follow see the migration guide.

  • 379206c: Webhook validation will now return a different reason value when the HMAC value is missing from the request. Instead of returning WebhookValidationErrorReason.MissingHeaders as it does for the other headers it validates, it will now return a new WebhookValidationErrorReason.MissingHmac error so this check matches other HMAC validations.

    If your app doesn't explicitly check for the error after calling webhook.validate(), you don't need to make any changes.

  • 637c6c3: This scopes field on the API config object is now optional. If your app is using the new managed install flow, it is now recommended you omit the scopes property from the config object.

  • 61576be: Changed the package's build process to produce both ESM and CJS outputs.

    While this should have no effect on most apps, if you're directly importing a file from the package, its path will have changed. Regular imports for package files remain unchanged.

    Before:

    import 'node_modules/@shopify/shopify-api/lib/clients/admin/graphql/client';
    import '@shopify/shopify-api/adapters/node';
    

    After:

    // Add `dist/esm|cjs/` before the file
    import 'node_modules/@shopify/shopify-api/dist/esm/lib/clients/admin/graphql/client';
    // Unchanged
    import '@shopify/shopify-api/adapters/node';
    

Patch Changes

  • 65325b8: Change v10_lineItemBilling flag to lineItemBilling
  • 6f1a98e: Fixing REST resource find() methods to fail when missing all ids, instead of defaulting to the same behaviour as all().
  • 379206c: Postponed deprecating the GraphQL clients' query method because they haven't been deprecated for long enough. They'll be removed when v11 is released instead.
  • Updated dependencies [715a120]
    • @​shopify/storefront-api-client@​0.3.4
    • @​shopify/admin-api-client@​0.2.9
Commits
  • c6c8e9d Merge pull request #809 from Shopify/changeset-release/main
  • c2b14a0 Preparing for release
  • 353882a Version Packages
  • 974c12f Merge pull request #826 from Shopify/fix_remix_bot_checks
  • 3438225 Merge branch 'main' into fix_remix_bot_checks
  • 414fceb Applying comments from review
  • fa94e85 Don't consider Shopify POS / Mobile requests as bots
  • 0e36531 Merge pull request #824 from Shopify/liz/udpate-v10-migration-guide
  • ea6d7bb Merge pull request #825 from Shopify/remove_deprecations
  • 379206c Remove deprecations for v10 release
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependabot[bot] avatar Apr 29 '24 02:04 dependabot[bot]