shopify_api 4.13.0 → 12.2.1

data/Gemfile.lock

@@ -0,0 +1,159 @@
+PATH
+  remote: .
+  specs:
+    shopify_api (12.2.1)
+      concurrent-ruby
+      hash_diff
+      httparty
+      jwt
+      oj
+      openssl
+      securerandom
+      sorbet-runtime
+      zeitwerk (~> 2.5)
+
+GEM
+  remote: https://rubygems.org/
+  specs:
+    activesupport (7.0.1)
+      concurrent-ruby (~> 1.0, >= 1.0.2)
+      i18n (>= 1.6, < 2)
+      minitest (>= 5.1)
+      tzinfo (~> 2.0)
+    addressable (2.8.0)
+      public_suffix (>= 2.0.2, < 5.0)
+    ast (2.4.2)
+    byebug (11.1.3)
+    coderay (1.1.3)
+    concurrent-ruby (1.1.9)
+    crack (0.4.5)
+      rexml
+    diff-lcs (1.5.0)
+    fakefs (1.4.1)
+    hash_diff (1.1.1)
+    hashdiff (1.0.1)
+    httparty (0.20.0)
+      mime-types (~> 3.0)
+      multi_xml (>= 0.5.2)
+    i18n (1.8.11)
+      concurrent-ruby (~> 1.0)
+    json (2.6.2)
+    jwt (2.5.0)
+    language_server-protocol (3.17.0.1)
+    method_source (1.0.0)
+    mime-types (3.4.1)
+      mime-types-data (~> 3.2015)
+    mime-types-data (3.2022.0105)
+    minitest (5.15.0)
+    mocha (1.13.0)
+    multi_xml (0.6.0)
+    netrc (0.11.0)
+    oj (3.13.21)
+    openssl (3.0.1)
+    parallel (1.22.1)
+    parser (3.1.2.1)
+      ast (~> 2.4.1)
+    prettier_print (0.1.0)
+    pry (0.14.1)
+      coderay (~> 1.1)
+      method_source (~> 1.0)
+    pry-byebug (3.10.1)
+      byebug (~> 11.0)
+      pry (>= 0.13, < 0.15)
+    public_suffix (4.0.6)
+    rainbow (3.1.1)
+    rake (13.0.6)
+    rbi (0.0.15)
+      ast
+      parser (>= 2.6.4.0)
+      sorbet-runtime (>= 0.5.9204)
+      unparser
+    regexp_parser (2.5.0)
+    rexml (3.2.5)
+    rubocop (1.36.0)
+      json (~> 2.3)
+      parallel (~> 1.10)
+      parser (>= 3.1.2.1)
+      rainbow (>= 2.2.2, < 4.0)
+      regexp_parser (>= 1.8, < 3.0)
+      rexml (>= 3.2.5, < 4.0)
+      rubocop-ast (>= 1.20.1, < 2.0)
+      ruby-progressbar (~> 1.7)
+      unicode-display_width (>= 1.4.0, < 3.0)
+    rubocop-ast (1.21.0)
+      parser (>= 3.1.1.0)
+    rubocop-shopify (2.10.1)
+      rubocop (~> 1.35)
+    rubocop-sorbet (0.6.11)
+      rubocop (>= 0.90.0)
+    ruby-lsp (0.3.2)
+      language_server-protocol (~> 3.17.0)
+      sorbet-runtime
+      syntax_tree (>= 3.4)
+    ruby-progressbar (1.11.0)
+    securerandom (0.2.0)
+    sorbet (0.5.10438)
+      sorbet-static (= 0.5.10438)
+    sorbet-runtime (0.5.10438)
+    sorbet-static (0.5.10438-universal-darwin-21)
+    sorbet-static (0.5.10438-x86_64-linux)
+    sorbet-static-and-runtime (0.5.10438)
+      sorbet (= 0.5.10438)
+      sorbet-runtime (= 0.5.10438)
+    spoom (1.1.11)
+      sorbet (>= 0.5.9204)
+      sorbet-runtime (>= 0.5.9204)
+      thor (>= 0.19.2)
+    syntax_tree (3.6.1)
+      prettier_print
+    tapioca (0.10.2)
+      bundler (>= 1.17.3)
+      netrc (>= 0.11.0)
+      parallel (>= 1.21.0)
+      pry (>= 0.12.2)
+      rbi (~> 0.0.0, >= 0.0.14)
+      sorbet-static-and-runtime (>= 0.5.9204)
+      spoom (~> 1.1.0, >= 1.1.11)
+      thor (>= 1.2.0)
+      yard-sorbet
+    thor (1.2.1)
+    tzinfo (2.0.4)
+      concurrent-ruby (~> 1.0)
+    unicode-display_width (2.3.0)
+    unparser (0.6.5)
+      diff-lcs (~> 1.3)
+      parser (>= 3.1.0)
+    webmock (3.14.0)
+      addressable (>= 2.8.0)
+      crack (>= 0.3.2)
+      hashdiff (>= 0.4.0, < 2.0.0)
+    webrick (1.7.0)
+    yard (0.9.28)
+      webrick (~> 1.7.0)
+    yard-sorbet (0.7.0)
+      sorbet-runtime (>= 0.5)
+      yard (>= 0.9)
+    zeitwerk (2.6.1)
+
+PLATFORMS
+  arm64-darwin-21
+  x86_64-linux
+
+DEPENDENCIES
+  activesupport
+  fakefs
+  minitest
+  mocha
+  pry-byebug
+  rake
+  rubocop
+  rubocop-shopify
+  rubocop-sorbet
+  ruby-lsp
+  shopify_api!
+  sorbet
+  tapioca
+  webmock
+
+BUNDLED WITH
+   2.3.4

data/LICENSE

@@ -1,4 +1,4 @@
-Copyright (c) 2009 "JadedPixel inc."
+Copyright (c) 2022 Shopify Inc.
 
 Permission is hereby granted, free of charge, to any person obtaining
 a copy of this software and associated documentation files (the
@@ -17,4 +17,4 @@ MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
 NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
 LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
 OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
-WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

data/README.md

@@ -1,271 +1,139 @@
-Shopify API
-===========
-[![Version][gem]][gem_url] [![Build Status](https://travis-ci.org/Shopify/shopify_api.svg?branch=master)](https://travis-ci.org/Shopify/shopify_api)
+# Shopify API Library for Ruby
 
-[gem]: https://img.shields.io/gem/v/shopify_api.svg
-[gem_url]: https://rubygems.org/gems/shopify_api
+<!-- ![Build Status]() -->
+[![License: MIT](https://img.shields.io/badge/License-MIT-green.svg)](LICENSE)
+![Build Status](https://github.com/Shopify/shopify-api-ruby/workflows/CI/badge.svg?branch=main)
 
+This library provides support for Ruby [Shopify apps](https://apps.shopify.com/) to access the [Shopify Admin API](https://shopify.dev/api/admin), by making it easier to perform the following actions:
 
-The Shopify API gem allows Ruby developers to programmatically access the admin section of Shopify stores.
+- Creating [online](https://shopify.dev/apps/auth/oauth/access-modes#online-access) or [offline](https://shopify.dev/apps/auth/oauth/access-modes#offline-access) access tokens for the Admin API via OAuth
+- Making requests to the [REST API](https://shopify.dev/api/admin-rest)
+- Making requests to the [GraphQL API](https://shopify.dev/api/admin-graphql)
+- Registering/processing webhooks
 
-The API is implemented as JSON over HTTP using all four verbs (GET/POST/PUT/DELETE). Each resource, like Order, Product, or Collection, has its own URL and is manipulated in isolation. In other words, we’ve tried to make the API follow the REST principles as much as possible.
+In addition to the Admin API, this library also allows querying the [Storefront API](https://shopify.dev/docs/storefront-api).
 
-## Usage
+You can use this library in any application that has a Ruby backend, since it doesn't rely on any specific framework — you can include it alongside your preferred stack and use the features that you need to build your app.
 
-### Requirements
+**Note**: These instructions apply to v10 or later of this package. If you're running v9 in your app, you can find the documentation [in this branch](https://github.com/Shopify/shopify-api-ruby/tree/v9).
 
-All API usage happens through Shopify applications, created by either shop owners for their own shops, or by Shopify Partners for use by other shop owners:
+## Requirements
 
-* Shop owners can create applications for themselves through their own admin: https://docs.shopify.com/api/authentication/creating-a-private-app
-* Shopify Partners create applications through their admin: http://app.shopify.com/services/partners
+To follow these usage guides, you will need to:
 
-For more information and detailed documentation about the API visit https://developers.shopify.com/
+- have a working knowledge of ruby and a web framework such as Rails or Sinatra
+- have a Shopify Partner account and development store
+- _OR_ have a test store where you can create a private app
+- have an app already set up in your test store or partner account
+- add the URL and the appropriate redirect for your OAuth callback route to your app settings
 
-#### Ruby version
+## Installation
 
-This gem requires Ruby 2.3.1 as of version 4.3. If you need to use an older Ruby version then update your `Gemfile` to lock onto an older release than 4.3.
+Add the following to your Gemfile:
 
-### Installation
-
-Add `shopify_api` to your `Gemfile`:
-
-```ruby
-gem 'shopify_api'
+```sh
+gem "shopify_api"
 ```
 
-Or install via [gem](http://rubygems.org/)
+or use [bundler](https://bundler.io):
 
-```bash
-gem install shopify_api
+```sh
+bundle add shopify_api
 ```
 
-### Getting Started
-
-ShopifyAPI uses ActiveResource to communicate with the REST web service. ActiveResource has to be configured with a fully authorized URL of a particular store first. To obtain that URL you can follow these steps:
-
-1. First create a new application in either the partners admin or your store admin. For a private App you'll need the API_KEY and the PASSWORD otherwise you'll need the API_KEY and SHARED_SECRET.
-
-   If you're not sure how to create a new application in the partner/store admin and/or if you're not sure how to generate the required credentials, you can [read the related shopify docs](https://docs.shopify.com/api/guides/api-credentials) on the same.
-
-2. For a private App you just need to set the base site url as follows:
-
-   ```ruby
-   shop_url = "https://#{API_KEY}:#{PASSWORD}@#{SHOP_NAME}.myshopify.com/admin"
-   ShopifyAPI::Base.site = shop_url
-   ```
-
-   That's it, you're done, skip to step 6 and start using the API!
-
-   For a partner app you will need to supply two parameters to the Session class before you instantiate it:
-
-   ```ruby
-   ShopifyAPI::Session.setup(api_key: API_KEY, secret: SHARED_SECRET)
-   ```
-
-   Shopify maintains [`omniauth-shopify-oauth2`](https://github.com/Shopify/omniauth-shopify-oauth2) which securely wraps the OAuth flow and interactions with Shopify (steps 3 and 4 above). Using this gem is the recommended way to use OAuth authentication in your application.
-
-3. In order to access a shop's data, apps need an access token from that specific shop. This is a two-stage process. Before interacting with a shop for the first time an app should redirect the user to the following URL:
-
-   ```
-   GET https://SHOP_NAME.myshopify.com/admin/oauth/authorize
-   ```
-
-   with the following parameters:
-
-   * ``client_id`` – Required – The API key for your app
-   * ``scope`` – Required – The list of required scopes (explained here: https://help.shopify.com/api/guides/authentication/oauth#scopes)
-   * ``redirect_uri`` – Required – The URL where you want to redirect the users after they authorize the client. The complete URL specified here must be identical to one of the Application Redirect URLs set in the App's section of the Partners dashboard. Note: in older applications, this parameter was optional, and redirected to the Application Callback URL when no other value was specified.
-   * ``state`` – Optional – A randomly selected value provided by your application, which is unique for each authorization request. During the OAuth callback phase, your application must check that this value matches the one you provided during authorization. [This mechanism is important for the security of your application](https://tools.ietf.org/html/rfc6819#section-3.6).
-   * ``grant_options[]`` - Optional - Set this parameter to `per-user` to receive an access token that respects the user's permission level when making API requests (called online access). This is strongly recommended for embedded apps.
-
-   We've added the create_permission_url method to make this easier, first instantiate your session object:
-
-   ```ruby
-   session = ShopifyAPI::Session.new("SHOP_NAME.myshopify.com")
-   ```
-
-   Then call:
-
-   ```ruby
-   scope = ["write_products"]
-   permission_url = session.create_permission_url(scope)
-   ```
-
-   or if you want a custom redirect_uri:
-
-   ```ruby
-   permission_url = session.create_permission_url(scope, "https://my_redirect_uri.com")
-   ```
-
-4. Once authorized, the shop redirects the owner to the return URL of your application with a parameter named 'code'. This is a temporary token that the app can exchange for a permanent access token.
-
-   Before you proceed, make sure your application performs the following security checks. If any of the checks fails, your application must reject the request with an error, and must not proceed further.
-
-   * Ensure the provided ``state`` is the same one that your application provided to Shopify during Step 3.
-   * Ensure the provided hmac is valid. The hmac is signed by Shopify as explained below, in the Verification section.
-   * Ensure the provided hostname parameter is a valid hostname, ends with myshopify.com, and does not contain characters other than letters (a-z), numbers (0-9), dots, and hyphens.
+## Steps to use the Gem
 
-   If all security checks pass, the authorization code can be exchanged once for a permanent access token. The exchange is made with a request to the shop.
+### Setup Shopify Context
 
-   ```
-   POST https://SHOP_NAME.myshopify.com/admin/oauth/access_token
-   ```
+Start by initializing the `ShopifyAPI::Context` with the parameters of your app by calling `ShopifyAPI::Context.setup` (example below) when your app starts (e.g `application.rb` in a Rails app).
 
-   with the following parameters:
+```ruby
+ShopifyAPI::Context.setup(
+  api_key: "<api-key>",
+  api_secret_key: "<api-secret-key>",
+  host: "<https://application-host-name.com>",
+  scope: "read_orders,read_products,etc",
+  session_storage: ShopifyAPI::Auth::FileSessionStorage.new, # See more details below
+  is_embedded: true, # Set to true if you are building an embedded app
+  is_private: false, # Set to true if you are building a private app
+  api_version: "2022-01" # The version of the API you would like to use
+)
+```
 
-   * ``client_id`` – Required – The API key for your app
-   * ``client_secret`` – Required – The shared secret for your app
-   * ``code`` – Required – The token you received in step 3
+### Setup a Session Store
 
-   and you'll get your permanent access token back in the response.
+In order for the Shopify API gem to properly store sessions it needs an implementation of `ShopifyAPI::Auth::SessionStorage`. We provide one implementation in the gem, `ShopifyAPI::Auth::FileSessionStorage`, which is suitable for testing/development, but isn't intended for production apps. See the [Session Storage doc](docs/usage/session_storage.md) for instructions on how to create a custom session store for a production application.
 
-   There is a method to make the request and get the token for you. Pass
-   all the params received from the previous call and the method will verify
-   the params, extract the temp code and then request your token:
+Session information would is typically stored in cookies on the browser. However, due to restrictions with modern browsers we highly discourage using cookies for embedded apps. For this reason, an app needs to define a storage implementation that the library can use to store and retrieve a session given its ID. In a non-embedded app this ID will come from a cookie, whereas in an embedded app this ID will come from [App Bridge](https://shopify.dev/apps/tools/app-bridge).
 
-   ```ruby
-   token = session.request_token(params)
-   ```
+### Performing OAuth
 
-   This method will save the token to the session object and return it. All fields returned by Shopify, other than the access token itself, are stored in the session's `extra` attribute. For a list of all fields returned by Shopify, read [our OAuth documentation](https://help.shopify.com/api/guides/authentication/oauth#confirming-installation). If you requested an access token that is associated with a specific user, you can retreive information about this user from the `extra` hash:
+Next, unless you are making a private app, you need to go through OAuth as described [here](https://shopify.dev/apps/auth/oauth) to create sessions for shops using your app.
+The Shopify API gem tries to make this easy by providing functions to begin and complete the OAuth process. See the [Oauth doc](docs/usage/oauth.md) for instructions on how to use these.
 
-   ```ruby
-   # a list of all granted scopes
-   granted_scopes = session.extra['scope']
-   # a hash containing the user information
-   user = session.extra['associated_user']
-   # the access scopes available to this user, which may be a subset of the access scopes granted to this app.
-   active_scopes = session.extra['associated_user_scope']
-   # the time at which this token expires; this is automatically converted from 'expires_in' returned by Shopify
-   expires_at = session.extra['expires_at']
-   ```
+### Register Webhooks and a Webhook Handler
 
-   For the security of your application, after retrieving an access token you must validate the following:
-   1) The list of scopes in `session.extra['scope']` is the same as you requested.
-   2) If you requested an online-mode access token, `session.extra['associated_user']` must be present.
-   Failing either of these tests means the end-user may have tampered with the url parameters during the OAuth authentication phase. You should avoid using this access token and revoke it immediately. If you use the [`omniauth-shopify-oauth2`](https://github.com/Shopify/omniauth-shopify-oauth2) gem these checks are done automatically for you.
+If you intend to use webhooks in your application follow the steps in the [Webhooks doc](docs/usage/webhooks.md) for instructions on registering and handling webhooks.
 
-   For future sessions simply pass in the `token` and `extra` hash (optional) when creating the session object:
+### Start Making Authenticated Shopify Requests
 
-   ```ruby
-   session = ShopifyAPI::Session.new("SHOP_NAME.myshopify.com", token, extra)
-   ```
+Once your app can perform OAuth, it can now make authenticated Shopify API calls using the Admin [REST](docs/usage/rest.md) or [GraphQL](docs/usage/graphql.md) Clients, or the [Storefront API GraphQL Client](docs/usage/graphql_storefront.md).
 
-5. The session must be activated before use:
+## Breaking Change Notices
 
-   ```ruby
-   ShopifyAPI::Base.activate_session(session)
-   ```
+### Breaking change notice for version 10.0.0
 
-6. Now you're ready to make authorized API requests to your shop! Data is returned as ActiveResource instances:
+We've rewritten this library for v10, so that it provides all essential features for a Shopify app without requiring any other packages.
 
-   ```ruby
-   shop = ShopifyAPI::Shop.current
+Here are the main features it provides:
 
-   # Get a specific product
-   product = ShopifyAPI::Product.find(179761209)
+- OAuth support, both with online and offline tokens.
+- Full, transparent support for JWT sessions for embedded apps and cookies for non-embedded ones.
+  - Removal of support for 3rd party cookies which are increasingly more difficult to use with modern browsers.
+- Admin API support
+  - Auto-generated, version-specific REST resources which are similar to `ActiveResource` (though not identical), that provide methods for all endpoints defined in our [REST API reference](https://shopify.dev/api/admin-rest), as well as direct definition of known attributes.
+  - A GraphQL client that doesn't rely on the ActiveResource implementation for REST.
+- Webhook management, with features for adding handlers and registering them with Shopify.
+- Storefront GraphQL API support
 
-   # Create a new product
-   new_product = ShopifyAPI::Product.new
-   new_product.title = "Burton Custom Freestlye 151"
-   new_product.product_type = "Snowboard"
-   new_product.vendor = "Burton"
-   new_product.save
+Please refer to [the documentation](docs/getting_started.md) in this repository for instructions on how to use each of these components.
 
-   # Update a product
-   product.handle = "burton-snowboard"
-   product.save
-   ```
+With this, a lot changed in how apps access the library. Here are the updates you should make when migrating to v10:
 
-   Alternatively, you can use #temp to initialize a Session and execute a command which also handles temporarily setting ActiveResource::Base.site:
+- Call `ShopifyAPI::Context.setup` when setting up your app. This class holds global configurations for your app and defines how the library behaves.
+- If not using the `shopify_app` gem, your app needs to provide an implementation of `ShopifyAPI::Auth::SessionStorage` for production. Read more about this [in our documentation](docs/usage/session_storage.md).
+- To change the `User-Agent` header, use `user_agent_prefix` in `ShopifyAPI::Context.setup`.
+- Usages of the `ActiveResource` classes for REST API requests need to be refactored into the new format. You can find detailed examples on how each of the endpoints work in our [reference documentation](https://shopify.dev/api/admin-rest).
 
-   ```ruby
-   products = ShopifyAPI::Session.temp("SHOP_NAME.myshopify.com", token) { ShopifyAPI::Product.find(:all) }
-   ```
+    Please see below a (non-exhaustive) list of common replacements to guide you in your updates, using the `Order` resource as an example.
 
-7. If you want to work with another shop, you'll first need to clear the session:
+    | Before | After |
+    | --- | --- |
+    | `Order.find(:all, params: {param1: value1})` | `Order.all(param1: value1, session:)` |
+    | `Order.find(<id>)` | `Order.find(id: <id>, session:)` |
+    | `order = Order.new(<id>)`<br/>`order.post(:close)` | `order = Order.new(session:)`<br/>`order.close()` |
+    | `order = Order.new(<id>)`<br/>`order.delete` | `Order.delete(id: <id>, session:)` |
 
-   ```ruby
-   ShopifyAPI::Base.clear_session
-   ```
+## Breaking changes for older versions
 
-### Console
+See [BREAKING_CHANGES_FOR_OLDER_VERSIONS](BREAKING_CHANGES_FOR_OLDER_VERSIONS.md)
 
-This package also supports the ``shopify-cli`` executable to make it easy to open up an interactive console to use the API with a shop.
+## Developing this gem
 
-1. Install the ``shopify_cli`` gem.
+After cloning the repository, you can install the dependencies with bundler:
 
 ```bash
-gem install shopify_cli
-```
-
-2. Obtain a private API key and password to use with your shop (step 2 in "Getting Started")
-
-3. Use the ``shopify-cli`` script to save the credentials for the shop to quickly log in.
-
-   ```bash
-   shopify-cli add yourshopname
-   ```
-
-   Follow the prompts for the shop domain, API key and password.
-
-4. Start the console for the connection.
-
-   ```bash
-   shopify-cli console
-   ```
-
-5. To see the full list of commands, type:
-
-   ```bash
-   shopify-cli help
-   ```
-
-## GraphQL
-
-This library also supports Shopify's new [GraphQL API](https://help.shopify.com/api/graphql-admin-api)
-via a dependency on the [graphql-client](https://github.com/github/graphql-client) gem.
-The authentication process (steps 1-5 under [Getting Started](#getting-started))
-is identical. Once your session is activated, simply construct a new graphql
-client and use `parse` and `query` as defined by
-[graphql-client](https://github.com/github/graphql-client#defining-queries).
-
-```ruby
-client = ShopifyAPI::GraphQL.new
-
-SHOP_NAME_QUERY = client.parse <<-'GRAPHQL'
-  {
-    shop {
-      name
-    }
-  }
-GRAPHQL
-
-result = client.query(SHOP_NAME_QUERY)
-result.data.shop.name
+bundle install
 ```
 
-## Threadsafety
-
-ActiveResource is threadsafe as of version 4.1 (which works with Rails 4.x and above).
-
-If you were previously using Shopify's [activeresource fork](https://github.com/shopify/activeresource) then you should remove it and use ActiveResource 4.1.
-
-## Using Development Version
-
-Download the source code and run:
+To run the automated tests:
 
 ```bash
-bundle install
 bundle exec rake test
 ```
 
-## Additional Resources
-
-API Reference: https://help.shopify.com/api/reference
-
-Ask questions on the forums: http://ecommerce.shopify.com/c/shopify-apis-and-technology
+We use [rubocop](https://rubocop.org) to lint/format the code. You can run it with the following command:
 
-## Copyright
-
-Copyright (c) 2014 "Shopify Inc.". See LICENSE for details.
+```bash
+bundle exec rubocop
+```

data/RELEASING.md

@@ -0,0 +1,19 @@
+# Releasing ShopifyAPI
+
+1. Before releasing, make sure `sorbet` and related gems are up to date:
+   `bundle update sorbet sorbet-runtime sorbet-static tapioca --conservative`
+1. Check the Semantic Versioning page for info on how to version the new release: http://semver.org
+1. Update the version of ShopifyAPI in lib/shopify_api/version.rb
+1. Run `bundle`
+1. Add a CHANGELOG entry for the new release
+1. Commit the changes with a commit message like "Packaging for release X.Y.Z"
+1. Tag the release with the version (Leave REV blank for HEAD or provide a SHA)
+   $ git tag vX.Y.Z REV
+1. Push out the changes
+   $ git push
+1. Push out the tags
+   $ git push --tags
+1. Publish the gem using Shipit
+1. Consider if the dependency in Shopify/shopify needs updated. It's used only by the tests so is a low risk change.
+   Also consider Shopify/shopify_app whose gemspec depends on this.
+   We don't need to do this for every release, but we should try to keep them relatively up to date.

data/Rakefile

@@ -1,39 +1,23 @@
-require 'rake'
-require "bundler/gem_tasks"
+# typed: false
+# frozen_string_literal: true
 
-require 'rake/testtask'
-Rake::TestTask.new(:test) do |test|
-  test.libs << 'lib' << 'test'
-  test.pattern = 'test/**/*_test.rb'
-  test.verbose = true
-end
+require "rake/testtask"
+require "bundler/gem_tasks"
 
-begin
-  require 'rcov/rcovtask'
-  Rcov::RcovTask.new do |test|
-    test.libs << 'test'
-    test.pattern = 'test/**/*_test.rb'
-    test.verbose = true
-  end
-rescue LoadError
-  task :rcov do
-    abort "RCov is not available. In order to run rcov, you must: sudo gem install spicycode-rcov"
+namespace :test do
+  Rake::TestTask.new(:library) do |t|
+    t.test_files = FileList["test/**/*_test.rb"].exclude("test/rest/**/*.rb")
   end
-end
 
-task :default => :test
+  Rake::TestTask.new(:rest_wrappers) do |t|
+    pattern = if ENV.key?("API_VERSION")
+      "test/rest/**/#{ENV.fetch("API_VERSION")}/*.rb"
+    else
+      "test/rest/**/*.rb"
+    end
 
-require 'rdoc/task'
-Rake::RDocTask.new do |rdoc|
-  if File.exist?('VERSION.yml')
-    config = YAML.load(File.read('VERSION.yml'))
-    version = "#{config[:major]}.#{config[:minor]}.#{config[:patch]}"
-  else
-    version = ""
+    t.pattern = pattern
   end
-
-  rdoc.rdoc_dir = 'rdoc'
-  rdoc.title = "shopify_api #{version}"
-  rdoc.rdoc_files.include('README*')
-  rdoc.rdoc_files.include('lib/**/*.rb')
 end
+
+task test: ["test:library"]