@shopify/cli-hydrogen 5.4.1 → 5.4.3

package/dist/generator-templates/starter/app/components/Search.tsx

@@ -151,7 +151,7 @@ export function SearchResults({
 function SearchResultsProductsGrid({products}: Pick<SearchQuery, 'products'>) {
   return (
     <div className="search-result">
-      <h3>Products</h3>
+      <h2>Products</h2>
       <Pagination connection={products}>
         {({nodes, isLoading, NextLink, PreviousLink}) => {
           const itemsMarkup = nodes.map((product) => (

package/dist/generator-templates/starter/app/routes/discount.$code.tsx

@@ -17,9 +17,14 @@ export async function loader({request, context, params}: LoaderArgs) {
 
   const url = new URL(request.url);
   const searchParams = new URLSearchParams(url.search);
-  const redirectParam =
+  let redirectParam =
     searchParams.get('redirect') || searchParams.get('return_to') || '/';
 
+  if (redirectParam.includes('//')) {
+    // Avoid redirecting to external URLs to prevent phishing attacks
+    redirectParam = '/';
+  }
+
   searchParams.delete('redirect');
   searchParams.delete('return_to');
 

package/dist/generator-templates/starter/package.json

@@ -15,9 +15,9 @@
   "dependencies": {
     "@remix-run/react": "1.19.1",
     "@shopify/cli": "3.49.2",
-    "@shopify/cli-hydrogen": "^5.4.1",
-    "@shopify/hydrogen": "^2023.7.9",
-    "@shopify/remix-oxygen": "^1.1.5",
+    "@shopify/cli-hydrogen": "^5.4.3",
+    "@shopify/hydrogen": "^2023.7.11",
+    "@shopify/remix-oxygen": "^1.1.7",
     "graphql": "^16.6.0",
     "graphql-tag": "^2.12.6",
     "isbot": "^3.6.6",

package/dist/lib/request-events.js

@@ -17,7 +17,6 @@ async function getRequestInfo(request) {
     endTime: data.endTime || Date.now(),
     purpose: data.purpose === "prefetch" ? "(prefetch)" : "",
     cacheStatus: data.cacheStatus ?? "",
-    stackLine: data.stackLine ?? "",
     graphql: data.graphql ? JSON.parse(data.graphql) : null
   };
 }
@@ -32,16 +31,11 @@ async function logRequestEvent(request) {
   if (DEV_ROUTES.has(url.pathname)) {
     return new Response("ok");
   }
-  const { eventType, purpose, stackLine, graphql, ...data } = await getRequestInfo(request);
-  let originFile = "";
+  const { eventType, purpose, graphql, ...data } = await getRequestInfo(request);
   let graphiqlLink = "";
   let description = request.url;
   if (eventType === "subrequest") {
     description = graphql?.query.match(/(query|mutation)\s+(\w+)/)?.[0]?.replace(/\s+/, " ") || decodeURIComponent(url.search.slice(1));
-    const [, fnName, filePath] = stackLine?.match(/\s+at ([^\s]+) \(.*?\/(app\/[^\n]*)\)/) || [];
-    if (fnName && filePath) {
-      originFile = `${fnName}:${filePath}`;
-    }
     if (graphql) {
       graphiqlLink = getGraphiQLUrl({ graphql });
     }
@@ -51,8 +45,7 @@ async function logRequestEvent(request) {
     data: JSON.stringify({
       ...data,
       url: `${purpose} ${description}`.trim(),
-      graphiqlLink,
-      originFile
+      graphiqlLink
     })
   };
   eventHistory.push(event);

package/oclif.manifest.json

@@ -1,5 +1,5 @@
 {
-  "version": "5.4.1",
+  "version": "5.4.3",
   "commands": {
     "hydrogen:build": {
       "id": "hydrogen:build",

package/package.json

@@ -4,7 +4,7 @@
     "access": "public",
     "@shopify:registry": "https://registry.npmjs.org"
   },
-  "version": "5.4.1",
+  "version": "5.4.3",
   "license": "MIT",
   "type": "module",
   "scripts": {
@@ -37,7 +37,7 @@
     "@oclif/core": "2.11.7",
     "@shopify/cli-kit": "3.49.2",
     "@shopify/hydrogen-codegen": "^0.0.2",
-    "@shopify/mini-oxygen": "^2.2.1",
+    "@shopify/mini-oxygen": "^2.2.3",
     "@shopify/oxygen-cli": "^2.0.0",
     "ansi-escapes": "^6.2.0",
     "diff": "^5.1.0",
@@ -57,7 +57,7 @@
     "@remix-run/dev": "1.19.1",
     "@remix-run/react": "1.19.1",
     "@shopify/hydrogen-react": "^2023.7.4",
-    "@shopify/remix-oxygen": "^1.1.5"
+    "@shopify/remix-oxygen": "^1.1.7"
   },
   "peerDependenciesMeta": {
     "@remix-run/dev": {