Releases: synfinatic/aws-sso-cli
v2.0.0-beta3
What's Changed
- disable
release-brew
target by @synfinatic in #965 - Add login command, remove flush by @synfinatic in #966
- hide ecs sub-commands and re-order commands by @synfinatic in #967
- remove static creds code by @synfinatic in #977
- Bump github.com/aws/aws-sdk-go-v2 from 1.30.1 to 1.30.3 by @dependabot in #968
- fix ecs-commands documentation page by @synfinatic in #978
- fix all doc lint bugs and reorder ecs commands by @synfinatic in #979
- Change Warn -> Debug for invalid account/roles by @synfinatic in #981
- Add mkdocs versioning by @synfinatic in #984
- fix mkdocs yaml by @synfinatic in #986
- add mkdocs version selector by @synfinatic in #987
- Adjust links to documentation to versioning by @tillkahlbrock in #988
- move sso to internal by @synfinatic in #989
- Add some debug code for fetching the roles from AWS by @synfinatic in #990
- unify building of mkdocs by @synfinatic in #991
- change default profile format to NICE_PROFILE_FORMAT by @synfinatic in #994
- move config, config-profiles and completions to setup by @synfinatic in #993
- No auto-config check except login/cache by @synfinatic in #995
- change default log level from warn to info by @synfinatic in #996
- Continue work on login command by @synfinatic in #997
- Bump actions/checkout from 3 to 4 by @dependabot in #999
- Bump actions/setup-python from 4 to 5 by @dependabot in #998
- document ecs commands requiring login by @synfinatic in #1000
- Bump github.com/goccy/go-yaml from 1.11.3 to 1.12.0 by @dependabot in #1002
- Refactor commands by @synfinatic in #1004
- refactor the logger to be a singleton and use init() by @synfinatic in #1005
- work on ecs threat model by @synfinatic in #1009
- Fix crash with
time
command by @synfinatic in #1010 - Support XDG_CONFIG_HOME to override config location by @synfinatic in #1011
- Remove Firefox Multi-Account Containers plugin by @synfinatic in #1022
- Bump docker/build-push-action from 4 to 6 by @dependabot in #949
- Bump github.com/docker/docker from 27.0.3+incompatible to 27.1.1+incompatible in the go_modules group across 1 directory by @dependabot in #1019
- Bump github.com/docker/docker from 27.0.3+incompatible to 27.1.2+incompatible by @dependabot in #1024
- New logger v2 by @synfinatic in #1025
- switch to console logger by default by @synfinatic in #1029
- Bump golang from 1.21-alpine to 1.23-alpine by @dependabot in #1028
New Contributors
- @tillkahlbrock made their first contribution in #988
Full Changelog: v1.17.0...v2.0.0-beta3
v2.0.0-beta2
What's Changed
- disable
release-brew
target by @synfinatic in #965 - Add login command, remove flush by @synfinatic in #966
- hide ecs sub-commands and re-order commands by @synfinatic in #967
- remove static creds code by @synfinatic in #977
- Bump github.com/aws/aws-sdk-go-v2 from 1.30.1 to 1.30.3 by @dependabot in #968
- fix ecs-commands documentation page by @synfinatic in #978
- fix all doc lint bugs and reorder ecs commands by @synfinatic in #979
- Change Warn -> Debug for invalid account/roles by @synfinatic in #981
- Add mkdocs versioning by @synfinatic in #984
- fix mkdocs yaml by @synfinatic in #986
- add mkdocs version selector by @synfinatic in #987
- Adjust links to documentation to versioning by @tillkahlbrock in #988
- move sso to internal by @synfinatic in #989
- Add some debug code for fetching the roles from AWS by @synfinatic in #990
- unify building of mkdocs by @synfinatic in #991
- change default profile format to NICE_PROFILE_FORMAT by @synfinatic in #994
- move config, config-profiles and completions to setup by @synfinatic in #993
- No auto-config check except login/cache by @synfinatic in #995
- change default log level from warn to info by @synfinatic in #996
- Continue work on login command by @synfinatic in #997
- Bump actions/checkout from 3 to 4 by @dependabot in #999
- Bump actions/setup-python from 4 to 5 by @dependabot in #998
- document ecs commands requiring login by @synfinatic in #1000
- Bump github.com/goccy/go-yaml from 1.11.3 to 1.12.0 by @dependabot in #1002
- Refactor commands by @synfinatic in #1004
- refactor the logger to be a singleton and use init() by @synfinatic in #1005
- work on ecs threat model by @synfinatic in #1009
- Fix crash with
time
command by @synfinatic in #1010 - Support XDG_CONFIG_HOME to override config location by @synfinatic in #1011
- Remove Firefox Multi-Account Containers plugin by @synfinatic in #1022
- Bump docker/build-push-action from 4 to 6 by @dependabot in #949
- Bump github.com/docker/docker from 27.0.3+incompatible to 27.1.1+incompatible in the go_modules group across 1 directory by @dependabot in #1019
- Bump github.com/docker/docker from 27.0.3+incompatible to 27.1.2+incompatible by @dependabot in #1024
- New logger v2 by @synfinatic in #1025
- switch to console logger by default by @synfinatic in #1029
New Contributors
- @tillkahlbrock made their first contribution in #988
Full Changelog: v1.17.0...v2.0.0-beta2
v1.17.0
Overview
- Add credentials command
- Various small quality-of-life bug fixes (fix
--threads
flag and warn about old IAM roles in theconfig.yaml
) - Add support for and prefer the XDG Config location for config files:
~/.config/aws-sso
over~/.aws-sso
ConfigProfilesUrlAction
now defaults to value ofUrlAction
instead ofurl
unless you pickedprint
orprinturl
There are also a significant number of ECS Server changes that aren't really backwards compatible, but will make the future better. If you are interested in the ECS Server functionality or using aws-sso
on remote hosts over ssh then I would greatly appreciate it if you upvote this AWS SDK bug which makes it nearly impossible to use SSL/TLS with the ECS Server.
aws-sso ecs ...
commands have been re-worked- ECS Server now technically supports SSL/TLS (see above)
- ECS Server now supports a bearer token for HTTP Auth
- ECS Server now can run in a Docker container
- ECS Server now supports binding to non-loopback interfaces via
--bind-ip
flag
What's Changed
- fix link to docs by @synfinatic in #902
- Bump github.com/aws/aws-sdk-go-v2/service/iam from 1.24.0 to 1.34.0 by @dependabot in #918
- Bump github.com/stretchr/testify from 1.8.4 to 1.9.0 by @dependabot in #898
- Add AWS_CONTAINER_AUTHORIZATION_TOKEN support by @synfinatic in #916
- Bump github.com/aws/aws-sdk-go-v2/service/sso from 1.20.11 to 1.22.0 by @dependabot in #917
- Improve bearer token support by @synfinatic in #919
- update ssh docs by @synfinatic in #920
- Ssl support by @synfinatic in #925
- Docker ecs server by @synfinatic in #935
- update copyright to 2024 by @synfinatic in #939
- Add --server flag for ecs client commands by @synfinatic in #940
- Update cache during login IFF relevant settings change by @synfinatic in #941
- Support AWS_SHARED_CREDENTIALS_FILE by @synfinatic in #942
- Bump github.com/aws/aws-sdk-go-v2/service/sts from 1.28.12 to 1.30.1 by @dependabot in #931
- Bump github.com/aws/aws-sdk-go-v2/config from 1.27.18 to 1.27.24 by @dependabot in #934
- add test tool for ssl bug by @synfinatic in #944
- Bump squidfunk/mkdocs-material from 9.5.25 to 9.5.27 by @dependabot in #904
- ConfigProfilesUrlAction defaults to UrlAction by @synfinatic in #947
- work on refactoring and documentation of ECS by @synfinatic in #943
- continue work on ecs server refactor by @synfinatic in #948
- Bump ubuntu from 22.04 to 24.04 by @dependabot in #841
- Support XDG config path by @synfinatic in #951
- continue ecs cleanup by @synfinatic in #957
- remove ecs run from docs by @synfinatic in #960
- fix docs again by @synfinatic in #961
- Fix --threads cli arg by @synfinatic in #959
- Don't store broken roles in the cache.json by @synfinatic in #963
- Bump golang.org/x/term from 0.21.0 to 0.22.0 by @dependabot in #954
- Bump golang.org/x/net from 0.26.0 to 0.27.0 by @dependabot in #952
- Bump github.com/aws/aws-sdk-go-v2/service/iam from 1.34.0 to 1.34.1 by @dependabot in #953
- prep for v1.17.0 release by @synfinatic in #964
Full Changelog: v1.16.1...v1.17.0
v1.16.1
Overview
- Fix homebrew auto-builds
- change flag for specifying profiles to
--profile
for thecredentials
command
What's Changed
- fix homebrew and credentials --profile by @synfinatic in #900
Full Changelog: v1.16.0...v1.16.1
v1.16.0
Overview
Key changes in v1.16.0:
- Add
credentials
command to write temporary IAM credentials to~/.aws/credentials
- Fix
config-profiles
command to support multiple AWS SSO instances - Improve
fish
shell support AWS_SSO_SESSION_EXPIRATION
environment variable is now in RFC3339 format
What's Changed
- fix build issue with go.sum by @synfinatic in #845
- Bump squidfunk/mkdocs-material from 9.5.20 to 9.5.25 by @dependabot in #866
- Add support for
credentials
command by @synfinatic in #868 - Fix malformed LC_DYSYMTAB warning on darwin by @synfinatic in #869
- Bump golangci/golangci-lint-action from 5 to 6 by @dependabot in #851
- aws-sso-profile with no args should return usage. by @synfinatic in #872
- switch AWS_SSO_SESSION_EXPIRATION to RFC3339 by @synfinatic in #870
- fix token by @synfinatic in #882
- Bump codecov/codecov-action from 3 to 4 by @dependabot in #876
- Bump golang.org/x/term from 0.18.0 to 0.21.0 by @dependabot in #879
- Bump github.com/aws/aws-sdk-go-v2/service/sso from 1.15.2 to 1.20.10 by @dependabot in #881
- Bump github.com/aws/aws-sdk-go-v2 from 1.21.2 to 1.27.1 by @dependabot in #877
- Bump github.com/aws/aws-sdk-go-v2/service/ssooidc from 1.17.3 to 1.24.4 by @dependabot in #880
- Update aws-sso.fish to add completion helper for aws-sso-profile by @drmikecrowe in #865
- Bump github.com/aws/aws-sdk-go-v2/config from 1.19.1 to 1.27.17 by @dependabot in #887
- use SSO name for config-profiles block by @synfinatic in #871
- fix bug removing an fileedit config block by @synfinatic in #892
- improve documentation and prep release by @synfinatic in #893
- Bump github.com/aws/aws-sdk-go-v2/config from 1.27.17 to 1.27.18 by @dependabot in #890
- Bump github.com/aws/aws-sdk-go-v2/service/sts from 1.28.11 to 1.28.12 by @dependabot in #889
- Bump github.com/goccy/go-yaml from 1.11.2 to 1.11.3 by @dependabot in #886
- Bump github.com/alecthomas/kong from 0.8.1 to 0.9.0 by @dependabot in #884
- Bump golang.org/x/net from 0.23.0 to 0.26.0 by @dependabot in #885
- release 1.16.0 by @synfinatic in #894
- fix changelog by @synfinatic in #895
New Contributors
- @drmikecrowe made their first contribution in #865
Full Changelog: v1.15.1...v1.16.0
v1.15.1
Overview
- Added fish shell helperst #361
What's Changed
- Bump squidfunk/mkdocs-material from 9.5.3 to 9.5.17 by @dependabot in #826
- helper functions for fish (#361) by @zickzackv in #808
- Bump golangci/golangci-lint-action from 4 to 5 by @dependabot in #840
- fix: testing for AWS_SSO_PROFILE by @zickzackv in #839
- Bump golang.org/x/net from 0.19.0 to 0.23.0 by @dependabot in #835
- Bump squidfunk/mkdocs-material from 9.5.17 to 9.5.20 by @dependabot in #842
- Add govulncheck by @synfinatic in #843
- release v1.15.1 by @synfinatic in #844
New Contributors
- @zickzackv made their first contribution in #808
Full Changelog: v1.15.0...v1.15.1
v1.15.0
What's Changed
- fix workflow variables for go version by @synfinatic in #780
- feature: add support for installing completions at package build time by @ghthor in #779
- Bump golangci/golangci-lint-action from 3 to 4 by @dependabot in #773
- Bump codecov/codecov-action from 3 to 4 by @dependabot in #769
- support
~
and $HOME for UrlExecCommand by @synfinatic in #822 - release 1.15.0 by @synfinatic in #825
Full Changelog: v1.14.3...v1.15.0
v1.14.3
Overview
- Update dependencies
- Statically link Linux binaries (CGO_ENABLED=0)
- Fix crash when users have no AWS roles available
What's Changed
- do brew update for release by @synfinatic in #642
- Bump actions/stale from 5 to 8 by @dependabot in #643
- add script to validate status for release by @synfinatic in #645
- fix release-check logic and remove target by @synfinatic in #646
- Bump github.com/aws/aws-sdk-go-v2/service/iam from 1.22.7 to 1.23.0 by @dependabot in #648
- Bump github.com/aws/aws-sdk-go-v2/config from 1.19.0 to 1.19.1 by @dependabot in #647
- Bump github.com/aws/aws-sdk-go-v2/service/iam from 1.23.0 to 1.24.0 by @dependabot in #649
- Bump squidfunk/mkdocs-material from 9.4.6 to 9.4.7 by @dependabot in #656
- add contributing by @synfinatic in #680
- Bump golang.org/x/term from 0.13.0 to 0.14.0 by @dependabot in #689
- Bump squidfunk/mkdocs-material from 9.4.7 to 9.4.8 by @dependabot in #690
- Bump actions/setup-go from 4 to 5 by @dependabot in #725
- Bump actions/stale from 8 to 9 by @dependabot in #728
- Bump github/codeql-action from 2 to 3 by @dependabot in #734
- Bump actions/download-artifact from 3 to 4 by @dependabot in #735
- Bump actions/upload-artifact from 3 to 4 by @dependabot in #736
- Bump github.com/dvsekhvalnov/jose2go from 1.5.0 to 1.6.0 by @dependabot in #744
- Bump golang.org/x/crypto from 0.14.0 to 0.17.0 by @dependabot in #739
- ignore dependabot in auto-close by @synfinatic in #745
- Bump crazy-max/ghaction-import-gpg from 6.0.0 to 6.1.0 by @dependabot in #746
- Bump squidfunk/mkdocs-material from 9.4.8 to 9.5.3 by @dependabot in #742
- Bump golang.org/x/net from 0.17.0 to 0.19.0 by @dependabot in #716
- Bump golang.org/x/term from 0.14.0 to 0.15.0 by @dependabot in #719
- Don't crash with 0 AWS accounts by @synfinatic in #751
- Bump golang.org/x/term from 0.15.0 to 0.16.0 by @dependabot in #748
- CGO_ENABLED=0 for Linux by @synfinatic in #756
- Document support for firefox Multi-Account Containers plugin by @synfinatic in #762
Full Changelog: v1.14.2...v1.14.3
v2.0.0-beta1
Overview
This is a significant release with some key changes regarding configuration defaults and user experience which I hope makes aws-sso
easier and more consistent to use. The major changes (please see the change log for more details) are:
- Now requires to run
aws-sso login
to use your SSO credentials to login to AWS Identity Center. - New default Profile format (used for
$AWS_PROFILE
and--profile
flag) uses the Account name/alias instead of the AccountId. - Removed the
AutoConfigCheck
config option.aws-sso
will now check the number of authorized AWS Accounts atlogin
to see if the cache needs to be updated. If you have been granted a new role to an existing account, you will need to runaws-sso cache
manually.
I consider this beta quality as I am using this myself on a daily basis.
Changelog
Bugs
- No longer ignore the
--threads
CLI option
New Features
- Require running
aws-sso login
. No more auto-login. #291 login
does a quick cache invalidation check using the AWS AccountIDs #576- New default ProfileFormat uses AccountAlias instead of AccountId
Changes
aws-sso
commands other thancache
andlogin
no longer can trigger a cache refresh or
update of~/.aws/config
file
Removed Commands, Config Options and Flags
- Remove
config
,config-profiles
andcompletions
commands
and replace withsetup
- Remove
flush
command. Uselogout
instead - Remove
--no-cache
flag - Remove
CacheRefresh
configuration option.aws-sso
will only update the cache
when you ask it to viaaws-sso cache
- Remove
tags --force-update
flag - Remove
AutoConfigCheck
configuration option. - Remove references to all deprecated features:
AccountIdStr()
function forProfileFormat
.AccountIdStr
field is replaced byAccountIdPad
inlist
command andListFields
in config.yamlARN
field is replaced byArn
inlist
command andListFields
in config.yamlExpiresStr
field is replaced byExpires
inlist
command andListFields
in config.yamlFirefoxOpenUrlInContainer
config optionConfigUrlAction
config option
What's Changed
- do brew update for release by @synfinatic in #642
- Bump actions/stale from 5 to 8 by @dependabot in #643
- add script to validate status for release by @synfinatic in #645
- fix release-check logic and remove target by @synfinatic in #646
- Bump github.com/aws/aws-sdk-go-v2/service/iam from 1.22.7 to 1.23.0 by @dependabot in #648
- Bump github.com/aws/aws-sdk-go-v2/config from 1.19.0 to 1.19.1 by @dependabot in #647
- Bump github.com/aws/aws-sdk-go-v2/service/iam from 1.23.0 to 1.24.0 by @dependabot in #649
- Remove
CacheRefresh
config option by @synfinatic in #655 - remove --no-config-check from shell integration by @synfinatic in #657
- Fix threads by @synfinatic in #659
- Remove
AutoConfigCheck
config option by @synfinatic in #660 - Remove deprecated by @synfinatic in #664
Full Changelog: v1.14.2...v2.0.0-beta1
v1.14.2
Changes
Bugs
- Fix
console
command when accessing China/US Gov #634
Changes
- Now use region/partition specific API Endpoint when retrieving AWS Console URLs from
IAM Identity Center #634
What's Changed
- update release.md by @synfinatic in #633
- auto close inactive issues & PRs by @synfinatic in #640
- Use a region specific federated url per the AWS docs. by @synfinatic in #635
- release v1.14.2 by @synfinatic in #641
Full Changelog: v1.14.1...v1.14.2