[Snyk] Upgrade @shopify/cli from 3.41.1 to 3.65.0

[snyk-io]

Snyk has created this PR to upgrade @shopify/cli from 3.41.1 to 3.65.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 88 versions ahead of your current version.

• The recommended version was released on 22 days ago.

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Uncontrolled resource consumption SNYK-JS-BRACES-6838727	169	Proof of Concept
	Improper Input Validation SNYK-JS-FOLLOWREDIRECTS-6141137	169	Proof of Concept
	Inefficient Regular Expression Complexity SNYK-JS-MICROMATCH-6838728	169	No Known Exploit
	Improper Control of Dynamically-Managed Code Resources SNYK-JS-EJS-6689533	169	No Known Exploit
	Information Exposure SNYK-JS-FOLLOWREDIRECTS-6444610	169	Proof of Concept
	Improper Authorization SNYK-JS-REACTDEVTOOLSCORE-6023999	169	Proof of Concept

Release notes

Package name: @shopify/cli

• 3.65.0 - 2024-08-02
  

  CLI

  • [Checkout extensibility] Adds iframe.sources capability #4192
  • Replace sample domain with IANA-reserved domain for technical documentation #4241

  App

  • Introduce .wasm asset support for theme app extensions #4229
  • Fix webhook URI transformation in TOML to relative path when the app URL ends with a slash #4253
  • Clear cache on app init to avoid issues when re-using a folder #4186

  Theme

  • Prevent the live theme from being set in the shopify theme dev session by Shopify infrastructure #4257
• 3.64.1 - 2024-07-17
  

  What's Changed

  • Update cli-hydrogen to fix an issue with authentication #4215
• 3.64.0 - 2024-07-10
  

  CLI

  • Added extension type pos_ui_extension to the ui_extension migration process #4162

  CLI-kit

  • Device auth is the default authentication method #4092
  • Remove unnecessary prompt from CLI2 #4175

  Theme

  • Avoid loop with static assets when users pass the --theme-editor-sync flag #4160
  • Avoid loop when users pass the --theme-editor-sync flag in the shopify theme dev command #4142
• 3.63.2 - 2024-07-03
  

  What's Changed

  • Avoid deploying draft webhook extensions during dev #4146
  • Avoid loop when users pass the --theme-editor-sync flag in the shopify theme dev command #4143
  • Fix issue that was causing declarative webhooks to be regenerated on every deploy #4150

  Full Changelog: 3.63.1...3.63.2

• 3.63.1 - 2024-06-26
  
  • Upgrade cloudflared version used to create tunnels on app dev #4126
• 3.63.0 - 2024-06-21
  

  What's Changed

  • You can now subscribe to webhook topics using the app configuration file (shopify.app.toml). To get started, use the new tutorial for Shopify webhook subscriptions.
  • Log streaming for Shopify Functions within app dev and re-execution of function runs via app function replay are available in beta. See Shopify Functions documentation for more information.
• 3.62.0 - 2024-06-18
• 3.61.2 - 2024-06-10
• 3.61.1 - 2024-06-07
• 3.61.0 - 2024-05-31
• 3.60.1 - 2024-05-10
• 3.60.0 - 2024-05-06
• 3.59.3 - 2024-05-02
• 3.59.2 - 2024-04-30
• 3.59.1 - 2024-04-23
• 3.59.0 - 2024-04-16
• 3.58.2 - 2024-04-04
• 3.58.1 - 2024-04-03
• 3.58.0 - 2024-03-27
• 3.57.1 - 2024-03-15
• 3.57.0 - 2024-03-05
• 3.56.3 - 2024-02-23
• 3.56.2 - 2024-02-20
• 3.56.1 - 2024-02-12
• 3.56.0 - 2024-02-12
• 3.55.4 - 2024-02-05
• 3.55.3 - 2024-02-02
• 3.55.2 - 2024-02-01
• 3.55.1 - 2024-01-31
• 3.55.0 - 2024-01-31
• 3.54.0 - 2024-01-25
• 3.53.1 - 2024-01-18
• 3.53.0 - 2024-01-02
• 3.52.0 - 2023-12-06
• 3.51.2 - 2023-11-27
• 3.51.1 - 2023-11-23
• 3.51.0 - 2023-11-13
• 3.50.2 - 2023-11-02
• 3.50.1 - 2023-10-31
• 3.50.0 - 2023-10-19
• 3.49.7 - 2023-10-10
• 3.49.6 - 2023-10-05
• 3.49.5 - 2023-10-02
• 3.49.4 - 2023-09-29
• 3.49.3 - 2023-09-14
• 3.49.2 - 2023-09-08
• 3.49.1 - 2023-09-06
• 3.49.0 - 2023-09-06
• 3.48.6 - 2023-09-03
• 3.48.5 - 2023-08-31
• 3.48.4 - 2023-08-23
• 3.48.3 - 2023-08-18
• 3.48.2 - 2023-08-16
• 3.48.1 - 2023-08-04
• 3.48.0 - 2023-07-26
• 3.47.5 - 2023-07-11
• 3.47.4 - 2023-07-11
• 3.47.3 - 2023-07-03
• 3.47.2 - 2023-06-30
• 3.47.1 - 2023-06-29
• 3.47.0 - 2023-06-28
• 3.47.0-pre.0 - 2023-06-07
• 3.46.5 - 2023-06-13
• 3.46.4 - 2023-06-12
• 3.46.3 - 2023-06-07
• 3.46.2 - 2023-06-01
• 3.46.1 - 2023-05-26
• 3.46.0 - 2023-05-22
• 3.46.0-pre.3 - 2023-05-02
• 3.46.0-pre.2 - 2023-04-24
• 3.46.0-pre.1 - 2023-04-17
• 3.46.0-pre.0 - 2023-04-11
• 3.45.4 - 2023-05-04
• 3.45.3 - 2023-05-03
• 3.45.2 - 2023-05-02
• 3.45.1 - 2023-04-13
• 3.45.0 - 2023-04-04
• 3.45.0-pre.5 - 2023-03-28
• 3.45.0-pre.4 - 2023-03-20
• 3.45.0-pre.3 - 2023-03-13
• 3.45.0-pre.2 - 2023-03-08
• 3.45.0-pre.1 - 2023-03-08
• 3.44.1 - 2023-02-23
• 3.44.1-pre.0 - 2023-02-28
• 3.44.0 - 2023-02-22
• 3.43.0 - 2023-02-10
• 3.42.0 - 2023-02-09
• 3.41.2 - 2023-02-08
• 3.41.1 - 2023-02-08

from @shopify/cli GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[google-cla]

Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

View this failed invocation of the CLA check for more information.

For the most up to date status, view the checks section at the bottom of the pull request.