v2.0.3

Fixes a regression where AuthUrlAction configuration option was not being honored.

What's Changed

• make changelog pass lintcheck by @synfinatic in #1227
• enable markdownlint by @synfinatic in #1229
• Fix AuthUrlAction by @synfinatic in #1231

Full Changelog: v2.0.2...v2.0.3

v2.0.2

About

Just fixing the few reported bugs from v2.0.x. Thanks to everyone reporting an issue! Please keep them coming!

Changelog

Bugs

• Fix ignoring --url-action when passed in on CLI
• aws-sso list should never force authentication #1219
• aws-sso-clear now no longer requires user to be logged in #1224

What's Changed

• fix --url-action override by @synfinatic in #1218
• list command should never force authentication by @synfinatic in #1222
• Bump golangci/golangci-lint-action from 7 to 8 by @dependabot in #1200
• aws-sso eval -c no longer requires a logged in session by @synfinatic in #1225
• prep v2.0.2 by @synfinatic in #1226

Full Changelog: v2.0.1...v2.0.2

v2.0.1

v2.0.1 - 2025-05-16

Bugs

• Fix forced re-auth with aws-sso setup profiles #1210

Changes

• aws-sso setup profiles Now uses your existing cache if not expired and refreshes only if necessary
• aws-sso setup profiles Now requires users to be logged in

What's Changed

• replace config w/ setup wizard in docs by @synfinatic in #1214
• fix setup profiles forced re-auth by @synfinatic in #1215
• prep v2.0.1 by @synfinatic in #1216

Full Changelog: v2.0.0...v2.0.1

v2.0.0

Finally. :)

Lots of changes since v1.17.0- far more than I can possibly cover here. Changes since beta4 are fairly small:

v2.0.0 - 2025-05-10

Bugs

• aws-sso-profile helper generates error about --no-config-check flag
• Honor DefaultRegion in config.yaml when using interactive prompt #1075
• Lock SecureStore across multiple aws-sso executions #1084
• setup completions and most ecs commands no longer require a valid config #1180
• Improve documentation and bug fix for the Via configuration option #1202, #1087

What's Changed

• disable release-brew target by @synfinatic in #965
• Add login command, remove flush by @synfinatic in #966
• hide ecs sub-commands and re-order commands by @synfinatic in #967
• remove static creds code by @synfinatic in #977
• Bump github.com/aws/aws-sdk-go-v2 from 1.30.1 to 1.30.3 by @dependabot in #968
• fix ecs-commands documentation page by @synfinatic in #978
• fix all doc lint bugs and reorder ecs commands by @synfinatic in #979
• Change Warn -> Debug for invalid account/roles by @synfinatic in #981
• Add mkdocs versioning by @synfinatic in #984
• fix mkdocs yaml by @synfinatic in #986
• add mkdocs version selector by @synfinatic in #987
• Adjust links to documentation to versioning by @tillkahlbrock in #988
• move sso to internal by @synfinatic in #989
• Add some debug code for fetching the roles from AWS by @synfinatic in #990
• unify building of mkdocs by @synfinatic in #991
• change default profile format to NICE_PROFILE_FORMAT by @synfinatic in #994
• move config, config-profiles and completions to setup by @synfinatic in #993
• No auto-config check except login/cache by @synfinatic in #995
• change default log level from warn to info by @synfinatic in #996
• Continue work on login command by @synfinatic in #997
• Bump actions/checkout from 3 to 4 by @dependabot in #999
• Bump actions/setup-python from 4 to 5 by @dependabot in #998
• document ecs commands requiring login by @synfinatic in #1000
• Bump github.com/goccy/go-yaml from 1.11.3 to 1.12.0 by @dependabot in #1002
• Refactor commands by @synfinatic in #1004
• refactor the logger to be a singleton and use init() by @synfinatic in #1005
• work on ecs threat model by @synfinatic in #1009
• Fix crash with time command by @synfinatic in #1010
• Support XDG_CONFIG_HOME to override config location by @synfinatic in #1011
• Remove Firefox Multi-Account Containers plugin by @synfinatic in #1022
• Bump docker/build-push-action from 4 to 6 by @dependabot in #949
• Bump github.com/docker/docker from 27.0.3+incompatible to 27.1.1+incompatible in the go_modules group across 1 directory by @dependabot in #1019
• Bump github.com/docker/docker from 27.0.3+incompatible to 27.1.2+incompatible by @dependabot in #1024
• New logger v2 by @synfinatic in #1025
• switch to console logger by default by @synfinatic in #1029
• Bump golang from 1.21-alpine to 1.23-alpine by @dependabot in #1028
• cleanup docs and remove completions pre-1.9 by @synfinatic in #1032
• fix ignore for cmd in codecov by @synfinatic in #1034
• basic xonsh support by @synfinatic in #1033
• validate codecov.yml by @synfinatic in #1035
• validate codecov workflow by @synfinatic in #1036
• ECS Server needs the secure store by @synfinatic in #1041
• fix --lines CLI argument by @synfinatic in #1038
• Bump golang.org/x/term from 0.22.0 to 0.23.0 by @dependabot in #1014
• Bump golang.org/x/net from 0.27.0 to 0.28.0 by @dependabot in #1016
• Bump squidfunk/mkdocs-material from 9.5.27 to 9.5.33 by @dependabot in #1042
• Bump github.com/aws/aws-sdk-go-v2 from 1.30.3 to 1.30.4 by @dependabot in #1026
• update security.md and update golangci-lint by @synfinatic in #1049
• unify all github test workflows by @synfinatic in #1050
• Bump golang.org/x/net from 0.28.0 to 0.29.0 by @dependabot in #1051
• DefaultCmd exits, and no longer exists by @guildencrantz in #1048
• Bump github.com/Masterminds/sprig/v3 from 3.2.3 to 3.3.0 by @dependabot in #1044
• Bump github.com/aws/aws-sdk-go-v2 from 1.30.4 to 1.30.5 by @dependabot in #1046
• Bump github.com/docker/docker from 27.1.2+incompatible to 27.2.1+incompatible by @dependabot in #1052
• fix crash due to go variable context change by @synfinatic in #1056
• Bump github.com/alecthomas/kong from 0.9.0 to 1.2.1 by @dependabot in #1054
• update FAQ for auto-refresh by @synfinatic in #1061
• console command requires authentication by @synfinatic in #1062
• Add AutoLogin config option by @synfinatic in #1064
• cleanup readme by @synfinatic in #1066
• add AutoLogin to FAQ by @synfinatic in #1067
• proper delination in FAQ by @synfinatic in #1069
• remove --no-config-check from helpers by @synfinatic in #1079
• fix(#1075): Populate accountid and role correctly for exec when using UI by @sgmeunier in #1080
• fix files for linkspector by @synfinatic in #1081
• add logging to registerClient by @synfinatic in #1085
• Bump golang.org/x/net from 0.29.0 to 0.31.0 by @dependabot in #1100
• Bump codecov/codecov-action from 4 to 5 by @dependabot in #1105
• Bump crazy-max/ghaction-import-gpg from 6.1.0 to 6.2.0 by @dependabot in #1088
• Bump github.com/aws/aws-sdk-go-v2 from 1.30.5 to 1.32.5 by @dependabot in #1106
• small change to improve config docs by @synfinatic in #1110
• Bump github.com/stretchr/testify from 1.9.0 to 1.10.0 by @dependabot in #1111
• add locking around storage access by @synfinatic in #1113
• Bump golang.org/x/net from 0.31.0 to 0.34.0 by @dependabot in #1133
• Bump github.com/alecthomas/kong from 1.2.1 to 1.6.1 by @dependabot in #1134
• Bump squidfunk/mkdocs-material from 9.5.33 to 9.5.50 by @dependabot in #1142
• Bump github.com/aws/aws-sdk-go-v2 from 1.32.5 to 1.33.0 by @dependabot in #1139
• revert merge of codeql workflow by @synfinatic in #1144
• update copyright by @synfinatic in #1143
• Bump github.com/goccy/go-yaml from 1.12.0 to 1.15.15 by @dependabot in #1140
• Bump github.com/aws/aws-sdk-go-v2 from 1.33.0 to 1.34.0 by @dependabot in #1146
• Bump codecov/codecov-action from 4 to 5 by @dependabot in #1145
• update go version to latest by @synfinatic in https://github.com/synfinatic/aws-sso-cli/...

v2.0.0-beta4

Overview

This is hopefully the final v2-beta release and if all goes to plan, will become v2.0.0.

Bugs

• Fix running the ECS server outside of docker #104
• Fix crash while fetching AWS account list
• Fix console command failing due to lack of authentication
• Fix --lines argument

New Features

• Add basic xonsh shell support
• Add AutoLogin config option

Changes

• Bump various 3rd party libraries
• Improve github actions for builds

What's Changed

• cleanup docs and remove completions pre-1.9 by @synfinatic in #1032
• fix ignore for cmd in codecov by @synfinatic in #1034
• basic xonsh support by @synfinatic in #1033
• validate codecov.yml by @synfinatic in #1035
• validate codecov workflow by @synfinatic in #1036
• ECS Server needs the secure store by @synfinatic in #1041
• fix --lines CLI argument by @synfinatic in #1038
• Bump golang.org/x/term from 0.22.0 to 0.23.0 by @dependabot in #1014
• Bump golang.org/x/net from 0.27.0 to 0.28.0 by @dependabot in #1016
• Bump squidfunk/mkdocs-material from 9.5.27 to 9.5.33 by @dependabot in #1042
• Bump github.com/aws/aws-sdk-go-v2 from 1.30.3 to 1.30.4 by @dependabot in #1026
• update security.md and update golangci-lint by @synfinatic in #1049
• unify all github test workflows by @synfinatic in #1050
• Bump golang.org/x/net from 0.28.0 to 0.29.0 by @dependabot in #1051
• DefaultCmd exits, and no longer exists by @guildencrantz in #1048
• Bump github.com/Masterminds/sprig/v3 from 3.2.3 to 3.3.0 by @dependabot in #1044
• Bump github.com/aws/aws-sdk-go-v2 from 1.30.4 to 1.30.5 by @dependabot in #1046
• Bump github.com/docker/docker from 27.1.2+incompatible to 27.2.1+incompatible by @dependabot in #1052
• fix crash due to go variable context change by @synfinatic in #1056
• Bump github.com/alecthomas/kong from 0.9.0 to 1.2.1 by @dependabot in #1054
• update FAQ for auto-refresh by @synfinatic in #1061
• console command requires authentication by @synfinatic in #1062
• Add AutoLogin config option by @synfinatic in #1064

Full Changelog: v2.0.0-beta3...v2.0.0-beta4

v2.0.0-beta3

What's Changed

• disable release-brew target by @synfinatic in #965
• Add login command, remove flush by @synfinatic in #966
• hide ecs sub-commands and re-order commands by @synfinatic in #967
• remove static creds code by @synfinatic in #977
• Bump github.com/aws/aws-sdk-go-v2 from 1.30.1 to 1.30.3 by @dependabot in #968
• fix ecs-commands documentation page by @synfinatic in #978
• fix all doc lint bugs and reorder ecs commands by @synfinatic in #979
• Change Warn -> Debug for invalid account/roles by @synfinatic in #981
• Add mkdocs versioning by @synfinatic in #984
• fix mkdocs yaml by @synfinatic in #986
• add mkdocs version selector by @synfinatic in #987
• Adjust links to documentation to versioning by @tillkahlbrock in #988
• move sso to internal by @synfinatic in #989
• Add some debug code for fetching the roles from AWS by @synfinatic in #990
• unify building of mkdocs by @synfinatic in #991
• change default profile format to NICE_PROFILE_FORMAT by @synfinatic in #994
• move config, config-profiles and completions to setup by @synfinatic in #993
• No auto-config check except login/cache by @synfinatic in #995
• change default log level from warn to info by @synfinatic in #996
• Continue work on login command by @synfinatic in #997
• Bump actions/checkout from 3 to 4 by @dependabot in #999
• Bump actions/setup-python from 4 to 5 by @dependabot in #998
• document ecs commands requiring login by @synfinatic in #1000
• Bump github.com/goccy/go-yaml from 1.11.3 to 1.12.0 by @dependabot in #1002
• Refactor commands by @synfinatic in #1004
• refactor the logger to be a singleton and use init() by @synfinatic in #1005
• work on ecs threat model by @synfinatic in #1009
• Fix crash with time command by @synfinatic in #1010
• Support XDG_CONFIG_HOME to override config location by @synfinatic in #1011
• Remove Firefox Multi-Account Containers plugin by @synfinatic in #1022
• Bump docker/build-push-action from 4 to 6 by @dependabot in #949
• Bump github.com/docker/docker from 27.0.3+incompatible to 27.1.1+incompatible in the go_modules group across 1 directory by @dependabot in #1019
• Bump github.com/docker/docker from 27.0.3+incompatible to 27.1.2+incompatible by @dependabot in #1024
• New logger v2 by @synfinatic in #1025
• switch to console logger by default by @synfinatic in #1029
• Bump golang from 1.21-alpine to 1.23-alpine by @dependabot in #1028

New Contributors

• @tillkahlbrock made their first contribution in #988

Full Changelog: v1.17.0...v2.0.0-beta3

v2.0.0-beta2

What's Changed

• disable release-brew target by @synfinatic in #965
• Add login command, remove flush by @synfinatic in #966
• hide ecs sub-commands and re-order commands by @synfinatic in #967
• remove static creds code by @synfinatic in #977
• Bump github.com/aws/aws-sdk-go-v2 from 1.30.1 to 1.30.3 by @dependabot in #968
• fix ecs-commands documentation page by @synfinatic in #978
• fix all doc lint bugs and reorder ecs commands by @synfinatic in #979
• Change Warn -> Debug for invalid account/roles by @synfinatic in #981
• Add mkdocs versioning by @synfinatic in #984
• fix mkdocs yaml by @synfinatic in #986
• add mkdocs version selector by @synfinatic in #987
• Adjust links to documentation to versioning by @tillkahlbrock in #988
• move sso to internal by @synfinatic in #989
• Add some debug code for fetching the roles from AWS by @synfinatic in #990
• unify building of mkdocs by @synfinatic in #991
• change default profile format to NICE_PROFILE_FORMAT by @synfinatic in #994
• move config, config-profiles and completions to setup by @synfinatic in #993
• No auto-config check except login/cache by @synfinatic in #995
• change default log level from warn to info by @synfinatic in #996
• Continue work on login command by @synfinatic in #997
• Bump actions/checkout from 3 to 4 by @dependabot in #999
• Bump actions/setup-python from 4 to 5 by @dependabot in #998
• document ecs commands requiring login by @synfinatic in #1000
• Bump github.com/goccy/go-yaml from 1.11.3 to 1.12.0 by @dependabot in #1002
• Refactor commands by @synfinatic in #1004
• refactor the logger to be a singleton and use init() by @synfinatic in #1005
• work on ecs threat model by @synfinatic in #1009
• Fix crash with time command by @synfinatic in #1010
• Support XDG_CONFIG_HOME to override config location by @synfinatic in #1011
• Remove Firefox Multi-Account Containers plugin by @synfinatic in #1022
• Bump docker/build-push-action from 4 to 6 by @dependabot in #949
• Bump github.com/docker/docker from 27.0.3+incompatible to 27.1.1+incompatible in the go_modules group across 1 directory by @dependabot in #1019
• Bump github.com/docker/docker from 27.0.3+incompatible to 27.1.2+incompatible by @dependabot in #1024
• New logger v2 by @synfinatic in #1025
• switch to console logger by default by @synfinatic in #1029

New Contributors

• @tillkahlbrock made their first contribution in #988

Full Changelog: v1.17.0...v2.0.0-beta2

v1.17.0

Overview

• Add credentials command
• Various small quality-of-life bug fixes (fix --threads flag and warn about old IAM roles in the config.yaml)
• Add support for and prefer the XDG Config location for config files: ~/.config/aws-sso over ~/.aws-sso
• ConfigProfilesUrlAction now defaults to value of UrlAction instead of url unless you picked print or printurl

There are also a significant number of ECS Server changes that aren't really backwards compatible, but will make the future better. If you are interested in the ECS Server functionality or using aws-sso on remote hosts over ssh then I would greatly appreciate it if you upvote this AWS SDK bug which makes it nearly impossible to use SSL/TLS with the ECS Server.

• aws-sso ecs ... commands have been re-worked
• ECS Server now technically supports SSL/TLS (see above)
• ECS Server now supports a bearer token for HTTP Auth
• ECS Server now can run in a Docker container
• ECS Server now supports binding to non-loopback interfaces via --bind-ip flag

What's Changed

• fix link to docs by @synfinatic in #902
• Bump github.com/aws/aws-sdk-go-v2/service/iam from 1.24.0 to 1.34.0 by @dependabot in #918
• Bump github.com/stretchr/testify from 1.8.4 to 1.9.0 by @dependabot in #898
• Add AWS_CONTAINER_AUTHORIZATION_TOKEN support by @synfinatic in #916
• Bump github.com/aws/aws-sdk-go-v2/service/sso from 1.20.11 to 1.22.0 by @dependabot in #917
• Improve bearer token support by @synfinatic in #919
• update ssh docs by @synfinatic in #920
• Ssl support by @synfinatic in #925
• Docker ecs server by @synfinatic in #935
• update copyright to 2024 by @synfinatic in #939
• Add --server flag for ecs client commands by @synfinatic in #940
• Update cache during login IFF relevant settings change by @synfinatic in #941
• Support AWS_SHARED_CREDENTIALS_FILE by @synfinatic in #942
• Bump github.com/aws/aws-sdk-go-v2/service/sts from 1.28.12 to 1.30.1 by @dependabot in #931
• Bump github.com/aws/aws-sdk-go-v2/config from 1.27.18 to 1.27.24 by @dependabot in #934
• add test tool for ssl bug by @synfinatic in #944
• Bump squidfunk/mkdocs-material from 9.5.25 to 9.5.27 by @dependabot in #904
• ConfigProfilesUrlAction defaults to UrlAction by @synfinatic in #947
• work on refactoring and documentation of ECS by @synfinatic in #943
• continue work on ecs server refactor by @synfinatic in #948
• Bump ubuntu from 22.04 to 24.04 by @dependabot in #841
• Support XDG config path by @synfinatic in #951
• continue ecs cleanup by @synfinatic in #957
• remove ecs run from docs by @synfinatic in #960
• fix docs again by @synfinatic in #961
• Fix --threads cli arg by @synfinatic in #959
• Don't store broken roles in the cache.json by @synfinatic in #963
• Bump golang.org/x/term from 0.21.0 to 0.22.0 by @dependabot in #954
• Bump golang.org/x/net from 0.26.0 to 0.27.0 by @dependabot in #952
• Bump github.com/aws/aws-sdk-go-v2/service/iam from 1.34.0 to 1.34.1 by @dependabot in #953
• prep for v1.17.0 release by @synfinatic in #964

Full Changelog: v1.16.1...v1.17.0

v1.16.1

Overview

• Fix homebrew auto-builds
• change flag for specifying profiles to --profile for the credentials command

What's Changed

• fix homebrew and credentials --profile by @synfinatic in #900

Full Changelog: v1.16.0...v1.16.1

v1.16.0

Overview

Key changes in v1.16.0:

• Add credentials command to write temporary IAM credentials to ~/.aws/credentials
• Fix config-profiles command to support multiple AWS SSO instances
• Improve fish shell support
• AWS_SSO_SESSION_EXPIRATION environment variable is now in RFC3339 format

What's Changed

• fix build issue with go.sum by @synfinatic in #845
• Bump squidfunk/mkdocs-material from 9.5.20 to 9.5.25 by @dependabot in #866
• Add support for credentials command by @synfinatic in #868
• Fix malformed LC_DYSYMTAB warning on darwin by @synfinatic in #869
• Bump golangci/golangci-lint-action from 5 to 6 by @dependabot in #851
• aws-sso-profile with no args should return usage. by @synfinatic in #872
• switch AWS_SSO_SESSION_EXPIRATION to RFC3339 by @synfinatic in #870
• fix token by @synfinatic in #882
• Bump codecov/codecov-action from 3 to 4 by @dependabot in #876
• Bump golang.org/x/term from 0.18.0 to 0.21.0 by @dependabot in #879
• Bump github.com/aws/aws-sdk-go-v2/service/sso from 1.15.2 to 1.20.10 by @dependabot in #881
• Bump github.com/aws/aws-sdk-go-v2 from 1.21.2 to 1.27.1 by @dependabot in #877
• Bump github.com/aws/aws-sdk-go-v2/service/ssooidc from 1.17.3 to 1.24.4 by @dependabot in #880
• Update aws-sso.fish to add completion helper for aws-sso-profile by @drmikecrowe in #865
• Bump github.com/aws/aws-sdk-go-v2/config from 1.19.1 to 1.27.17 by @dependabot in #887
• use SSO name for config-profiles block by @synfinatic in #871
• fix bug removing an fileedit config block by @synfinatic in #892
• improve documentation and prep release by @synfinatic in #893
• Bump github.com/aws/aws-sdk-go-v2/config from 1.27.17 to 1.27.18 by @dependabot in #890
• Bump github.com/aws/aws-sdk-go-v2/service/sts from 1.28.11 to 1.28.12 by @dependabot in #889
• Bump github.com/goccy/go-yaml from 1.11.2 to 1.11.3 by @dependabot in #886
• Bump github.com/alecthomas/kong from 0.8.1 to 0.9.0 by @dependabot in #884
• Bump golang.org/x/net from 0.23.0 to 0.26.0 by @dependabot in #885
• release 1.16.0 by @synfinatic in #894
• fix changelog by @synfinatic in #895

New Contributors

• @drmikecrowe made their first contribution in #865

Full Changelog: v1.15.1...v1.16.0