[lucyxiang]

TL;DR: Some links in the cookbook docs return 404. The markets links to the new sanitizeHtml.ts point to a commit that is older than the file, and every "Deleted Files" link has templates/skeleton/ twice. This PR fixes both.

The rendered README and LLM prompt build every file link from the commit field in recipe.yaml. For markets, that field was 1040066d, which is older than #4278. The shopify.dev page uses the same links.

Before

commit: 1040066d20b52667756fd1ebffd8607602a735b4

• https://github.com/Shopify/hydrogen/blob/1040066d…/cookbook/recipes/markets/ingredients/templates/skeleton/app/lib/sanitizeHtml.ts returns 404.
• https://github.com/Shopify/hydrogen/blob/<commit>/templates/skeleton/templates/skeleton/app/routes/_index.tsx returns 404.

After

commit: 68f62c423b5382cb6a98a4f0000d656bf98b9c13

• The sanitizeHtml.ts link opens the sanitizer.
• The Deleted Files links use /templates/skeleton/ once and open the file at the pinned commit.

What this changes

• Sets commit in cookbook/recipes/markets/recipe.yaml to the Sanitize merchant-managed HTML in the markets recipe #4278 merge commit, and renders the markets README and LLM prompt again.
• In cookbook/src/lib/render.ts, stops adding templates/skeleton/ to Deleted Files links. The deletedFiles paths in each recipe already start with it.
• Fixes the same links in the express (59 links) and multipass (1 link) READMEs. The changes in those two files touch only these links. A full render of either README would also bring in other recipe changes that nobody has rendered yet, so this PR does not do one.

Developer impact

No changeset. The cookbook does not ship in a package.

Out of scope

• The shopify.dev page is in shop/world. A separate PR updates it.
• pnpm run cookbook regenerate sets commit automatically, but it runs apply first, and apply fails on the markets package.json patch. This PR sets commit by hand.

How to Test

1. Open cookbook/recipes/markets/README.md on this branch.
2. Select the app/lib/sanitizeHtml.ts link in the ingredients table.
3. Confirm that GitHub shows the sanitizer file and not a 404.
4. Select any link under "Deleted Files", in the markets, express or multipass README.
5. Confirm that GitHub shows the file and not a 404.

[shopify]

Oxygen deployed a preview of your lucy/markets-recipe-commit branch. Details:

Storefront	Status	Preview link	Deployment details	Last update (UTC)
Skeleton (skeleton.hydrogen.shop)	✅ Successful (Logs)	Preview deployment	Inspect deployment	November 2, 2026 7:35 PM

Learn more about Hydrogen's GitHub integration.

[fredericoo]

LGTM! Checked that every link except the Deleted Files ones (see inline) resolves at 68f62c4, and that render and generateLLMsFiles reproduce both files byte-for-byte from the new recipe.yaml.

[fredericoo]

non-blocking: these 20 Deleted Files links still 404, because the path has templates/skeleton/ twice.

Reproduced: none of the 20 paths exist in the 68f62c4 tree; the same paths with a single templates/skeleton/ all do.

deletedFiles entries already start with templates/skeleton/, and render.ts adds it again. This predates the PR and also affects the express and multipass READMEs, so it's out of scope here. Worth a follow-up in render.ts:

// before
`${linkPrefix}/templates/skeleton/${file}`
// after
`${linkPrefix}/${file}`