v2026.11.7

What's Changed

Breaking for themes built on Pilot. Pilot now runs on Hydrogen 2026.10, where Hydrogen is a server-handler library rather than a framework, and on @weaverse/hydrogen 6.0. npx @weaverse/cli migrate v6 rewrites the Weaverse imports. For the rest, follow Pilot's upgrade guide or the Weaverse v6 & Hydrogen 2026.10 migration guide. Merchants using Pilot as-is need no changes.

• Migrate Pilot to Hydrogen 2026.10 and @weaverse/hydrogen 6.0, keeping every route, SEO output, analytics event and commerce feature: server.ts owns the request lifecycle, the cart and product form run on Hydrogen's stores, customer accounts use Hydrogen's OAuth handlers, ShopifyScripts replaces Analytics.Provider, and unsupported market prefixes answer 404, by @hta218 in #209
• Own the CSP header and nonce in the app, so the Studio bridge, YouTube and GTM are covered by script-src, by @hta218 in #204
• Keep the quantity per product, and answer Weaverse load failures with a retryable 503 instead of a broken page, by @paul-phan in #203
• Apply image focal points set in Weaverse Studio by @hta218 in #194
• Fix a duplicate view-transition-name when opening a product from a product card by @hta218 in #206
• Move static checks to Vite+ 1.3 (Oxlint and Oxfmt, replacing Biome) and refresh dependencies by @paul-phan in #177
• Typecheck Linux CI with a pinned tsrs by @paul-phan in #201
• Adopt the issue-first, single-spec workflow for agents by @paul-phan in #187, #188, #189 and #190
• Set up the Oxygen deployment workflow (#184) and drop .github workflows from the README setup guide by @hta218 in #186
• Bump shell-quote, source-map-js, @graphql-tools/executor-legacy-ws and @fastify/busboy (#195, #196, #197, #198)
• Bump version to 2026.11.7 and regenerate the component manifest

Full Changelog: v2026.10.4...v2026.11.7