skeleton@2026.4.0

Major Changes

• Update Storefront API and Customer Account API from 2026-01 to 2026-04. (#3651) by @itsjustriley

  Breaking changes

  JSON metafield values limited to 128KB: When using API version 2026-04 or later, the Storefront API limits JSON type metafield writes to 128KB. This limit applies at the API level - Hydrogen passes through to the Storefront API without additional restriction. Apps that used JSON metafields before April 1, 2026 are grandfathered at the existing 2MB limit. Large metafield values continue to be readable by all API versions.

  New features

  New MERCHANDISE_LINE_TRANSFORMERS_RUN_ERROR cart error code: Cart operations (cartCreate, cartLinesAdd, etc.) now return a specific MERCHANDISE_LINE_TRANSFORMERS_RUN_ERROR error code when a Cart Transform Function fails at runtime, instead of the previous generic INVALID error code. If you handle cart errors in your storefront code, you may want to add handling for this new code.

  Changelog links

  • Storefront API 2026-04 changelog
  • Customer Account API 2026-04 changelog

Patch Changes

• Updated dependencies [e7215ed0d7a74cacfa8c935f414c1cf32fc2ccd0, 92ab8e8b59807bbdb5dbecaa18629292d5566135, b0caa5c013380c7837f049f48da089a1671e2c6d]:
  • @Shopify/hydrogen@2026.4.0

skeleton@2026.1.4

Patch Changes

• Remove redundant Storefront API proxy route from skeleton template. The server now automatically proxies requests to /api/:version/graphql.json via createRequestHandler with proxyStandardRoutes: true (enabled by default since December 2025). (#3572) by @itsjustriley

  Developers no longer need a manual route file for the tokenless Storefront API. Existing apps with this route can safely delete it - the server-level proxy provides the same functionality with better cookie forwarding and analytics integration.

• Updated dependencies [b0a75c1d759706931876f056662de2497cb3e688, a44ee3566b9bb9a7f43f05dfaae6f1f2ab1d548f]:

  • @Shopify/hydrogen@2026.1.4

@shopify/hydrogen@2026.4.0

Major Changes

• Make Storefront API proxy mandatory and enable backend consent mode, supporting the deprecation of the _tracking_consent cookie in favor of server-set cookies via the SF API proxy. (#3649) by @itsjustriley

  • Breaking: proxyStandardRoutes option has been removed from createRequestHandler. The Storefront API proxy is now always enabled. If your load context does not include a storefront instance, the request handler will now throw an error instead of logging a warning.
  • New: window.Shopify.customerPrivacy.backendConsentEnabled is now set to true before the Customer Privacy API script loads. This tells the consent library to use the new server-set cookie mode instead of the legacy _tracking_consent JS cookie. The flag is installed via a window.Shopify property interceptor so it survives the CDN's window.Shopify = {} reset cycle and is readable before the full API is assigned.

• Update Storefront API and Customer Account API from 2026-01 to 2026-04. (#3651) by @itsjustriley

  Breaking changes

  JSON metafield values limited to 128KB: When using API version 2026-04 or later, the Storefront API limits JSON type metafield writes to 128KB. This limit applies at the API level - Hydrogen passes through to the Storefront API without additional restriction. Apps that used JSON metafields before April 1, 2026 are grandfathered at the existing 2MB limit. Large metafield values continue to be readable by all API versions.

  New features

  New MERCHANDISE_LINE_TRANSFORMERS_RUN_ERROR cart error code: Cart operations (cartCreate, cartLinesAdd, etc.) now return a specific MERCHANDISE_LINE_TRANSFORMERS_RUN_ERROR error code when a Cart Transform Function fails at runtime, instead of the previous generic INVALID error code. If you handle cart errors in your storefront code, you may want to add handling for this new code.

  Changelog links

  • Storefront API 2026-04 changelog
  • Customer Account API 2026-04 changelog

Patch Changes

• Widen React Router peer dependencies from exact versions to caret ranges (^7.12.0). This allows Hydrogen projects to use newer React Router minor versions without peer dependency conflicts, particularly with npm's strict resolver. Hydrogen only uses stable public APIs from React Router, so minor version updates are backwards-compatible. (#3677) by @fredericoo

• Updated dependencies [b0caa5c013380c7837f049f48da089a1671e2c6d]:

  • @shopify/hydrogen-react@2026.4.0

@shopify/hydrogen@2026.1.4

Minor Changes

• Add Storefront MCP proxy support to enable AI agent integration. Hydrogen now automatically proxies requests to /api/mcp to Shopify's Storefront MCP server, which implements the Model Context Protocol specification. This feature is automatically available when proxyStandardRoutes is enabled in createRequestHandler (the default) — no code changes required. AI assistants like Claude and ChatGPT can connect to Hydrogen storefronts to help customers browse products, manage carts, and access store policies. (#3572) by @itsjustriley

Patch Changes

• Add useCustomAuthDomain option to createCustomerAccountClient and createHydrogenContext. When set to true, the development tunnel domain check logs a warning instead of throwing, enabling use of custom HTTPS setups like ngrok or local HTTPS proxies for Customer Account API OAuth. (#3642) by @fredericoo

@shopify/hydrogen-react@2026.4.0

Major Changes

• Update Storefront API and Customer Account API from 2026-01 to 2026-04. (#3651) by @itsjustriley

  Breaking changes

  JSON metafield values limited to 128KB: When using API version 2026-04 or later, the Storefront API limits JSON type metafield writes to 128KB. This limit applies at the API level - Hydrogen passes through to the Storefront API without additional restriction. Apps that used JSON metafields before April 1, 2026 are grandfathered at the existing 2MB limit. Large metafield values continue to be readable by all API versions.

  New features

  New MERCHANDISE_LINE_TRANSFORMERS_RUN_ERROR cart error code: Cart operations (cartCreate, cartLinesAdd, etc.) now return a specific MERCHANDISE_LINE_TRANSFORMERS_RUN_ERROR error code when a Cart Transform Function fails at runtime, instead of the previous generic INVALID error code. If you handle cart errors in your storefront code, you may want to add handling for this new code.

  Changelog links

  • Storefront API 2026-04 changelog
  • Customer Account API 2026-04 changelog

@shopify/create-hydrogen@5.0.33

Patch Changes

• Update Storefront API and Customer Account API from 2026-01 to 2026-04. (#3651) by @itsjustriley

  Breaking changes

  JSON metafield values limited to 128KB: When using API version 2026-04 or later, the Storefront API limits JSON type metafield writes to 128KB. This limit applies at the API level - Hydrogen passes through to the Storefront API without additional restriction. Apps that used JSON metafields before April 1, 2026 are grandfathered at the existing 2MB limit. Large metafield values continue to be readable by all API versions.

  New features

  New MERCHANDISE_LINE_TRANSFORMERS_RUN_ERROR cart error code: Cart operations (cartCreate, cartLinesAdd, etc.) now return a specific MERCHANDISE_LINE_TRANSFORMERS_RUN_ERROR error code when a Cart Transform Function fails at runtime, instead of the previous generic INVALID error code. If you handle cart errors in your storefront code, you may want to add handling for this new code.

  Changelog links

  • Storefront API 2026-04 changelog
  • Customer Account API 2026-04 changelog

@shopify/create-hydrogen@5.0.32

Patch Changes

• Add Storefront MCP proxy support to enable AI agent integration. Hydrogen now automatically proxies requests to /api/mcp to Shopify's Storefront MCP server, which implements the Model Context Protocol specification. This feature is automatically available when proxyStandardRoutes is enabled in createRequestHandler (the default) — no code changes required. AI assistants like Claude and ChatGPT can connect to Hydrogen storefronts to help customers browse products, manage carts, and access store policies. (#3572) by @itsjustriley

• Remove redundant Storefront API proxy route from skeleton template. The server now automatically proxies requests to /api/:version/graphql.json via createRequestHandler with proxyStandardRoutes: true (enabled by default since December 2025). (#3572) by @itsjustriley

  Developers no longer need a manual route file for the tokenless Storefront API. Existing apps with this route can safely delete it - the server-level proxy provides the same functionality with better cookie forwarding and analytics integration.

@shopify/cli-hydrogen@11.1.14

Patch Changes

• Widen React Router peer dependencies from exact versions to caret ranges (^7.12.0). This allows Hydrogen projects to use newer React Router minor versions without peer dependency conflicts, particularly with npm's strict resolver. Hydrogen only uses stable public APIs from React Router, so minor version updates are backwards-compatible. (#3677) by @fredericoo

• Update Storefront API and Customer Account API from 2026-01 to 2026-04. (#3651) by @itsjustriley

  Breaking changes

  JSON metafield values limited to 128KB: When using API version 2026-04 or later, the Storefront API limits JSON type metafield writes to 128KB. This limit applies at the API level - Hydrogen passes through to the Storefront API without additional restriction. Apps that used JSON metafields before April 1, 2026 are grandfathered at the existing 2MB limit. Large metafield values continue to be readable by all API versions.

  New features

  New MERCHANDISE_LINE_TRANSFORMERS_RUN_ERROR cart error code: Cart operations (cartCreate, cartLinesAdd, etc.) now return a specific MERCHANDISE_LINE_TRANSFORMERS_RUN_ERROR error code when a Cart Transform Function fails at runtime, instead of the previous generic INVALID error code. If you handle cart errors in your storefront code, you may want to add handling for this new code.

  Changelog links

  • Storefront API 2026-04 changelog
  • Customer Account API 2026-04 changelog

@shopify/cli-hydrogen@11.1.13

Patch Changes

• Add Storefront MCP proxy support to enable AI agent integration. Hydrogen now automatically proxies requests to /api/mcp to Shopify's Storefront MCP server, which implements the Model Context Protocol specification. This feature is automatically available when proxyStandardRoutes is enabled in createRequestHandler (the default) — no code changes required. AI assistants like Claude and ChatGPT can connect to Hydrogen storefronts to help customers browse products, manage carts, and access store policies. (#3572) by @itsjustriley

• Remove redundant Storefront API proxy route from skeleton template. The server now automatically proxies requests to /api/:version/graphql.json via createRequestHandler with proxyStandardRoutes: true (enabled by default since December 2025). (#3572) by @itsjustriley

  Developers no longer need a manual route file for the tokenless Storefront API. Existing apps with this route can safely delete it - the server-level proxy provides the same functionality with better cookie forwarding and analytics integration.

• GraphQL access denied error is now handled as an expected user error (#3654) by @lucyxiang

skeleton@2026.1.3

Patch Changes

• Improve screen reader experience for paginated product grids by hiding decorative arrow characters from assistive technology. (#3557) by @itsjustriley

• Fix broken aria-label on territory code input in address form. The label was the raw developer string "territoryCode" instead of a human-readable "Country code". (#3607) by @itsjustriley

• Add aria-label to ProductPrice for improved screen reader accessibility (#3558) by @itsjustriley

• Updated dependencies [108243003a7f36349a446478f4e8ab0cade3e13a]:

  • @Shopify/hydrogen@2026.1.3