shopify-upgrade-guard 0.2.5 → 0.2.6
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +7 -3
- package/dist/index.js +1 -1
- package/package.json +1 -1
- package/src/graphql.js +89 -0
- package/src/rules.js +33 -1
- package/src/version.js +1 -1
package/README.md
CHANGED
|
@@ -67,7 +67,7 @@ jobs:
|
|
|
67
67
|
fetch-depth: 0
|
|
68
68
|
persist-credentials: false
|
|
69
69
|
|
|
70
|
-
- uses: RexCode-Digital/shopify-upgrade-guard@
|
|
70
|
+
- uses: RexCode-Digital/shopify-upgrade-guard@223ec33e119f920ecc9f9a5df722a2f6fda0df40 # v0.2.5
|
|
71
71
|
with:
|
|
72
72
|
target: 2026-10
|
|
73
73
|
fail-on: warning
|
|
@@ -94,7 +94,7 @@ The Action is bundled and runs on the current GitHub `node24` JavaScript Action
|
|
|
94
94
|
|
|
95
95
|
## What it catches today
|
|
96
96
|
|
|
97
|
-
The rule pack is intentionally focused.
|
|
97
|
+
The rule pack is intentionally focused. Literal GraphQL checks parse supported documents and ignore malformed or dynamic queries; rule-specific context limits findings to Shopify API constructs that can be identified deterministically.
|
|
98
98
|
|
|
99
99
|
| Rule | Detects | Evidence |
|
|
100
100
|
| --- | --- | --- |
|
|
@@ -107,6 +107,10 @@ The rule pack is intentionally focused. Existing lexical checks report review si
|
|
|
107
107
|
| `UG-POS-001` | Removed POS `session.currentSession.staffMemberId` usage | [Shopify changelog](https://shopify.dev/changelog/removed-session-currentsession-staffmemberid-from-pos-ui-extensions-2026-10) |
|
|
108
108
|
| `UG-ADMIN-001` | Legacy Admin GraphQL `priceRule` usage | [2026-10 release notes](https://shopify.dev/release-notes/2026-10) |
|
|
109
109
|
| `UG-ADMIN-002` | Literal GraphQL root `automaticDiscounts` removed in 2027-01 | [Official removal](https://shopify.dev/changelog/posts/automaticdiscounts-query-is-removed-in-api-version-2027-01) |
|
|
110
|
+
| `UG-ADMIN-003` | GraphQL `metafieldInteger` collection conditions and types removed in 2027-01 | [Official removal](https://shopify.dev/changelog/posts/metafieldinteger-collection-condition-removed-in-api-version-2027-01) |
|
|
111
|
+
| `UG-ADMIN-004` | `ProductVariant.barcode` read deprecated in 2026-10; it still works and no removal date is announced | [Official deprecation](https://shopify.dev/changelog/posts/product-variant-barcode-is-being-replaced-by-barcodes) |
|
|
112
|
+
| `UG-SEGMENT-001` | Legacy function/date syntax inside literal segment GraphQL query arguments | [Official syntax update](https://shopify.dev/changelog/posts/updated-function-syntax-on-the-segment-query-language) |
|
|
113
|
+
| `UG-ADMIN-005` | Source handling for removed inventory error `ITEM_NOT_STOCKED_AT_LOCATION` | [Official removal](https://shopify.dev/changelog/posts/removal-of-itemnotstockedatlocation-error) |
|
|
110
114
|
| `UG-SCRIPT-001` | Cross-version Script Tag write restrictions; REST resource references require method review | [Script Tag deprecation](https://shopify.dev/changelog/online-store-script-tags-deprecation) |
|
|
111
115
|
|
|
112
116
|
Supported inventory surfaces include Admin REST, Admin GraphQL, Checkout UI extensions, Customer Account UI extensions, POS UI extensions, Functions, Shopify app TOML, and recognized Shopify client configuration.
|
|
@@ -226,7 +230,7 @@ MIT — see [LICENSE](LICENSE).
|
|
|
226
230
|
The Action example pins the reviewed v0.2.3 release commit. Verify the release reference with:
|
|
227
231
|
|
|
228
232
|
```bash
|
|
229
|
-
gh api repos/RexCode-Digital/shopify-upgrade-guard/git/ref/tags/v0.2.
|
|
233
|
+
gh api repos/RexCode-Digital/shopify-upgrade-guard/git/ref/tags/v0.2.5 --jq .object.sha
|
|
230
234
|
```
|
|
231
235
|
|
|
232
236
|
Published patch tags and existing minor aliases are retained. Future releases do not move minor aliases; use an immutable patch tag or a reviewed full commit SHA.
|