Skip to content

Preparing for release 23.0.2#2077

Merged
craigmichaelmartin merged 1 commit into
mainfrom
v23.0.2
May 22, 2026
Merged

Preparing for release 23.0.2#2077
craigmichaelmartin merged 1 commit into
mainfrom
v23.0.2

Conversation

@craigmichaelmartin
Copy link
Copy Markdown
Contributor

Summary

Packaging release 23.0.2 — a patch release containing two bug fixes that have been sitting in Unreleased on main.

Changes

  • Validate host param in generated HomeController template to prevent open redirect #2059 — addresses bug bounty report 3551313
  • Fix sorbet errors in generated webhook handlers #2047 — unblocks users hitting TypeError when registering webhook handlers due to Sorbet type checking introduced in shopify_api 16.0.0

Files changed

  • lib/shopify_app/version.rb — bumped to 23.0.2
  • package.json — bumped to 23.0.2
  • Gemfile.lock — bumped to 23.0.2
  • CHANGELOG.md — promoted Unreleased entries to 23.0.2 (May 22, 2026) with PR links

Test plan

🤖 Generated with Claude Code

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
@github-actions github-actions Bot added the devtools-gardener Post the issue or PR to Slack for the gardener label May 22, 2026
Copy link
Copy Markdown
Contributor

@lizkenyon lizkenyon left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

TY ⭐

@craigmichaelmartin craigmichaelmartin merged commit 413089e into main May 22, 2026
8 checks passed
@craigmichaelmartin craigmichaelmartin deleted the v23.0.2 branch May 22, 2026 17:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

devtools-gardener Post the issue or PR to Slack for the gardener

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants