Compliance topics issue

Shopify CLI and Libraries
1

Hi,

I have issue with this: Add validation to prevent app-specific webhooks and legacy install flow by cdarne · Pull Request #6003 · Shopify/cli · GitHub

Before updates I had in my configuration file:

[webhooks]
api_version = "2025-07"

  [[webhooks.subscriptions]]
  uri = "/webhooks"
  compliance_topics = [ "customers/data_request", "customers/redact", "shop/redact" ]

And all works correctly. But after upgrade to latest version app I can’t deploy because I have issue:

│  App-specific webhook subscriptions are not supported when                   │
│  use_legacy_install_flow is enabled.                                         │
│                                                                              │
│  To use app-specific webhooks, you need to:                                  │
│  1. Remove 'use_legacy_install_flow = true' from your configuration          │
│  2. Run 'shopify app deploy' to sync your scopes with the Partner Dashboard  │
│                                                                              │
│  Alternatively, continue using shop-specific webhooks with the legacy        │
│  install flow.                                                               │
│                                                                              │
│  Learn more: https://shopify.dev/docs/apps/build/authentication-authorizati  │
│  on/app-installation

And when I removed subscriptions then after deploy I lost my configuration in Shopify Partners:

463696748-2f93a9ae-30d2-4842-97df-8af713802446
463696748-2f93a9ae-30d2-4842-97df-8af7138024461940×592 45.9 KB

I think that checker should exclude compliance_topics

1 Like
2

Hey @sebastian.pisula thanks for flagging this.

Opening a comment in the Github repo is the recommendation we usually share on the forums here for issues with the CLI, and I’ve seen you have done that already, but if you haven’t heard back from our CLI developers directly on this by the end of the week, can you ping me here again and I can do some digging into this directly for you and see if we can get this escalated?

Hope this helps a bit, if needed, please feel free to ping me here again and I’d be happy to take a look.

3

Hey @Alan_G,

Thank you! I didn’t get answer on GitHub. Can you escalated it?

4

Hi @sebastian.pisula - for sure! I’ll touch base with the team internall and see if we can get this looked at for you. I can’t guarantee a turnaround time, but I will make sure to get back to you on this, even if we can’t share a concrete solution/answer right away.

Speak with you as soon as I have more info!

6

Hey @sebastian.pisula, just following up on this with you here. I was able to connect with our product team and we are looking into this as a potential issue on our end. I can’t guarantee an exact turnaround time/outcome, but I’ll be back in touch as soon as I have next steps on my end.

7

@Alan_G I’m also following this as I’m trying to deploy an update to my app extension, don’t even have [[webhooks.subscriptions]] in my shopify.extension.toml file, and am also getting the following error:

│ App-specific webhook subscriptions are not supported when │
│ use_legacy_install_flow is enabled. │
│ │
│ To use app-specific webhooks, you need to: │
│ 1. Remove ‘use_legacy_install_flow = true’ from your configuration │
│ 2. Run ‘shopify app deploy’ to sync your scopes with the Partner Dashboard │
│ │
│ Alternatively, continue using shop-specific webhooks with the legacy │
│ install flow. │
│ │
│ Learn more: https://shopify.dev/docs/apps/build/authentication-authorizati │
│ on/app-installation │

8

Thanks @Myles_Marcus, appreciate you jumping in on this thread, it might be related to the same underlying issue we’re investigating.

Just to help narrow it down, could you double-check that use_legacy_install_flow = true isn’t present in your shopify.app.toml file (if you have one set up in the parent directory of your extension)?. If it’s there, try removing it and then running shopify app deploy to see if that clears things up.

If you’ve already checked that (or if it doesn’t apply), no worries, could you try deploying again but add the --verbose flag (e.g., shopify app deploy --verbose)? That would give us a more detailed log of what’s happening during the process. If you’re comfortable sharing the output here (feel free to redact any sensitive info), I’d be happy to take a closer look and see if it’s tied to the same webhook validation issue as @sebastian.pisula’s case.

Hope to speak soon!