Hello everyone,
We’d like to share an update on rate limiting in the CLI.
CLI version 4.4.0 introduces new signatures for local theme development. When you run shopify theme dev, the CLI now attaches specific headers to the requests it sends to your storefront. This gives storefront a clear signal that the traffic is legitimate CLI activity, so it’s less likely to be flagged as bot-like and rate limited.
This works when you use the default auth method (email/password). It does not yet apply when authenticating with the --password flag (a Theme Access app password). Support for that is still to come. If the signature can’t be retrieved for any reason, theme dev continues to work as normal.
Thanks for your patience while we worked through this.
We will be looking for specific feedback around these changes. If you encounter an error around the signature being created, or you are still getting rate limited, cloudflare managed checks, 429’s, please post with a request ID so we can investigate.
Thanks!