v2.1.0

New Features

• Add support for ansi-osc52 copying of URLs into clipboard #1070
• --url-action now supports auto-complete
• aws-sso-profile shell helper now supports -S/--sso flag to specify SSO instance #1264
• Detect running in WSL and prompt user for open method #1267

Bug Fixes

• Fix clearing ENV vars under Windows Powershell #1244
• Fix docs around correct naming of --level flag #1240
• Fix console command for Via/AssumeRole roles #1205
• Update docker library to fix GO-2025-3829

What's Changed

• replace --log-level with --level in docs by @synfinatic in #1242
• Fix unset env vars for powershell by @gitfool in #1245
• update changelog by @synfinatic in #1246
• Fix console command for Role Chaining by @synfinatic in #1247
• refactor internal/utils into smaller packages by @synfinatic in #1248
• Add support for ANSI OSC52 escape sequence by @synfinatic in #1249
• Add auto-complete support for --url-action by @synfinatic in #1250
• Bump github.com/docker/docker from 27.2.1+incompatible to 28.0.0+incompatible in the go_modules group across 1 directory by @dependabot[bot] in #1254
• Bump github.com/docker/docker from 27.2.1+incompatible to 28.1.1+incompatible by @dependabot[bot] in #1194
• Bump crazy-max/ghaction-import-gpg from 6.2.0 to 6.3.0 by @dependabot[bot] in #1187
• Bump actions/checkout from 4 to 5 by @dependabot[bot] in #1253
• Bump actions/download-artifact from 4 to 5 by @dependabot[bot] in #1252
• Bump squidfunk/mkdocs-material from 9.6.5 to 9.6.16 by @dependabot[bot] in #1243
• Bump golang.org/x/term from 0.31.0 to 0.34.0 by @dependabot[bot] in #1251
• Update bug report template for config file path by @synfinatic in #1266
• [Feature] Add support for specifying SSO instance via -S/--sso flag for aws-sso-profile by @l2D in #1264
• detect running on WSL2 for Wizard by @synfinatic in #1269
• prep changes for v2.1.0 by @synfinatic in #1257
• fix release date for 2.1.0 by @synfinatic in #1270

New Contributors

• @gitfool made their first contribution in #1245
• @l2D made their first contribution in #1264

Full Changelog: v2.0.3...v2.1.0

v2.0.3

Fixes a regression where AuthUrlAction configuration option was not being honored.

What's Changed

• make changelog pass lintcheck by @synfinatic in #1227
• enable markdownlint by @synfinatic in #1229
• Fix AuthUrlAction by @synfinatic in #1231

Full Changelog: v2.0.2...v2.0.3

v2.0.2

About

Just fixing the few reported bugs from v2.0.x. Thanks to everyone reporting an issue! Please keep them coming!

Changelog

Bugs

• Fix ignoring --url-action when passed in on CLI
• aws-sso list should never force authentication #1219
• aws-sso-clear now no longer requires user to be logged in #1224

What's Changed

• fix --url-action override by @synfinatic in #1218
• list command should never force authentication by @synfinatic in #1222
• Bump golangci/golangci-lint-action from 7 to 8 by @dependabot in #1200
• aws-sso eval -c no longer requires a logged in session by @synfinatic in #1225
• prep v2.0.2 by @synfinatic in #1226

Full Changelog: v2.0.1...v2.0.2

v2.0.1

v2.0.1 - 2025-05-16

Bugs

• Fix forced re-auth with aws-sso setup profiles #1210

Changes

• aws-sso setup profiles Now uses your existing cache if not expired and refreshes only if necessary
• aws-sso setup profiles Now requires users to be logged in

What's Changed

• replace config w/ setup wizard in docs by @synfinatic in #1214
• fix setup profiles forced re-auth by @synfinatic in #1215
• prep v2.0.1 by @synfinatic in #1216

Full Changelog: v2.0.0...v2.0.1

v2.0.0

Finally. :)

Lots of changes since v1.17.0- far more than I can possibly cover here. Changes since beta4 are fairly small:

v2.0.0 - 2025-05-10

Bugs

• aws-sso-profile helper generates error about --no-config-check flag
• Honor DefaultRegion in config.yaml when using interactive prompt #1075
• Lock SecureStore across multiple aws-sso executions #1084
• setup completions and most ecs commands no longer require a valid config #1180
• Improve documentation and bug fix for the Via configuration option #1202, #1087

What's Changed

• disable release-brew target by @synfinatic in #965
• Add login command, remove flush by @synfinatic in #966
• hide ecs sub-commands and re-order commands by @synfinatic in #967
• remove static creds code by @synfinatic in #977
• Bump github.com/aws/aws-sdk-go-v2 from 1.30.1 to 1.30.3 by @dependabot in #968
• fix ecs-commands documentation page by @synfinatic in #978
• fix all doc lint bugs and reorder ecs commands by @synfinatic in #979
• Change Warn -> Debug for invalid account/roles by @synfinatic in #981
• Add mkdocs versioning by @synfinatic in #984
• fix mkdocs yaml by @synfinatic in #986
• add mkdocs version selector by @synfinatic in #987
• Adjust links to documentation to versioning by @tillkahlbrock in #988
• move sso to internal by @synfinatic in #989
• Add some debug code for fetching the roles from AWS by @synfinatic in #990
• unify building of mkdocs by @synfinatic in #991
• change default profile format to NICE_PROFILE_FORMAT by @synfinatic in #994
• move config, config-profiles and completions to setup by @synfinatic in #993
• No auto-config check except login/cache by @synfinatic in #995
• change default log level from warn to info by @synfinatic in #996
• Continue work on login command by @synfinatic in #997
• Bump actions/checkout from 3 to 4 by @dependabot in #999
• Bump actions/setup-python from 4 to 5 by @dependabot in #998
• document ecs commands requiring login by @synfinatic in #1000
• Bump github.com/goccy/go-yaml from 1.11.3 to 1.12.0 by @dependabot in #1002
• Refactor commands by @synfinatic in #1004
• refactor the logger to be a singleton and use init() by @synfinatic in #1005
• work on ecs threat model by @synfinatic in #1009
• Fix crash with time command by @synfinatic in #1010
• Support XDG_CONFIG_HOME to override config location by @synfinatic in #1011
• Remove Firefox Multi-Account Containers plugin by @synfinatic in #1022
• Bump docker/build-push-action from 4 to 6 by @dependabot in #949
• Bump github.com/docker/docker from 27.0.3+incompatible to 27.1.1+incompatible in the go_modules group across 1 directory by @dependabot in #1019
• Bump github.com/docker/docker from 27.0.3+incompatible to 27.1.2+incompatible by @dependabot in #1024
• New logger v2 by @synfinatic in #1025
• switch to console logger by default by @synfinatic in #1029
• Bump golang from 1.21-alpine to 1.23-alpine by @dependabot in #1028
• cleanup docs and remove completions pre-1.9 by @synfinatic in #1032
• fix ignore for cmd in codecov by @synfinatic in #1034
• basic xonsh support by @synfinatic in #1033
• validate codecov.yml by @synfinatic in #1035
• validate codecov workflow by @synfinatic in #1036
• ECS Server needs the secure store by @synfinatic in #1041
• fix --lines CLI argument by @synfinatic in #1038
• Bump golang.org/x/term from 0.22.0 to 0.23.0 by @dependabot in #1014
• Bump golang.org/x/net from 0.27.0 to 0.28.0 by @dependabot in #1016
• Bump squidfunk/mkdocs-material from 9.5.27 to 9.5.33 by @dependabot in #1042
• Bump github.com/aws/aws-sdk-go-v2 from 1.30.3 to 1.30.4 by @dependabot in #1026
• update security.md and update golangci-lint by @synfinatic in #1049
• unify all github test workflows by @synfinatic in #1050
• Bump golang.org/x/net from 0.28.0 to 0.29.0 by @dependabot in #1051
• DefaultCmd exits, and no longer exists by @guildencrantz in #1048
• Bump github.com/Masterminds/sprig/v3 from 3.2.3 to 3.3.0 by @dependabot in #1044
• Bump github.com/aws/aws-sdk-go-v2 from 1.30.4 to 1.30.5 by @dependabot in #1046
• Bump github.com/docker/docker from 27.1.2+incompatible to 27.2.1+incompatible by @dependabot in #1052
• fix crash due to go variable context change by @synfinatic in #1056
• Bump github.com/alecthomas/kong from 0.9.0 to 1.2.1 by @dependabot in #1054
• update FAQ for auto-refresh by @synfinatic in #1061
• console command requires authentication by @synfinatic in #1062
• Add AutoLogin config option by @synfinatic in #1064
• cleanup readme by @synfinatic in #1066
• add AutoLogin to FAQ by @synfinatic in #1067
• proper delination in FAQ by @synfinatic in #1069
• remove --no-config-check from helpers by @synfinatic in #1079
• fix(#1075): Populate accountid and role correctly for exec when using UI by @sgmeunier in #1080
• fix files for linkspector by @synfinatic in #1081
• add logging to registerClient by @synfinatic in #1085
• Bump golang.org/x/net from 0.29.0 to 0.31.0 by @dependabot in #1100
• Bump codecov/codecov-action from 4 to 5 by @dependabot in #1105
• Bump crazy-max/ghaction-import-gpg from 6.1.0 to 6.2.0 by @dependabot in #1088
• Bump github.com/aws/aws-sdk-go-v2 from 1.30.5 to 1.32.5 by @dependabot in #1106
• small change to improve config docs by @synfinatic in #1110
• Bump github.com/stretchr/testify from 1.9.0 to 1.10.0 by @dependabot in #1111
• add locking around storage access by @synfinatic in #1113
• Bump golang.org/x/net from 0.31.0 to 0.34.0 by @dependabot in #1133
• Bump github.com/alecthomas/kong from 1.2.1 to 1.6.1 by @dependabot in #1134
• Bump squidfunk/mkdocs-material from 9.5.33 to 9.5.50 by @dependabot in #1142
• Bump github.com/aws/aws-sdk-go-v2 from 1.32.5 to 1.33.0 by @dependabot in #1139
• revert merge of codeql workflow by @synfinatic in #1144
• update copyright by @synfinatic in #1143
• Bump github.com/goccy/go-yaml from 1.12.0 to 1.15.15 by @dependabot in #1140
• Bump github.com/aws/aws-sdk-go-v2 from 1.33.0 to 1.34.0 by @dependabot in #1146
• Bump codecov/codecov-action from 4 to 5 by @dependabot in #1145
• update go version to latest by @synfinatic in https://github.com/synfinatic/aws-sso-cli/...

v2.0.0-beta4

Overview

This is hopefully the final v2-beta release and if all goes to plan, will become v2.0.0.

Bugs

• Fix running the ECS server outside of docker #104
• Fix crash while fetching AWS account list
• Fix console command failing due to lack of authentication
• Fix --lines argument

New Features

• Add basic xonsh shell support
• Add AutoLogin config option

Changes

• Bump various 3rd party libraries
• Improve github actions for builds

What's Changed

• cleanup docs and remove completions pre-1.9 by @synfinatic in #1032
• fix ignore for cmd in codecov by @synfinatic in #1034
• basic xonsh support by @synfinatic in #1033
• validate codecov.yml by @synfinatic in #1035
• validate codecov workflow by @synfinatic in #1036
• ECS Server needs the secure store by @synfinatic in #1041
• fix --lines CLI argument by @synfinatic in #1038
• Bump golang.org/x/term from 0.22.0 to 0.23.0 by @dependabot in #1014
• Bump golang.org/x/net from 0.27.0 to 0.28.0 by @dependabot in #1016
• Bump squidfunk/mkdocs-material from 9.5.27 to 9.5.33 by @dependabot in #1042
• Bump github.com/aws/aws-sdk-go-v2 from 1.30.3 to 1.30.4 by @dependabot in #1026
• update security.md and update golangci-lint by @synfinatic in #1049
• unify all github test workflows by @synfinatic in #1050
• Bump golang.org/x/net from 0.28.0 to 0.29.0 by @dependabot in #1051
• DefaultCmd exits, and no longer exists by @guildencrantz in #1048
• Bump github.com/Masterminds/sprig/v3 from 3.2.3 to 3.3.0 by @dependabot in #1044
• Bump github.com/aws/aws-sdk-go-v2 from 1.30.4 to 1.30.5 by @dependabot in #1046
• Bump github.com/docker/docker from 27.1.2+incompatible to 27.2.1+incompatible by @dependabot in #1052
• fix crash due to go variable context change by @synfinatic in #1056
• Bump github.com/alecthomas/kong from 0.9.0 to 1.2.1 by @dependabot in #1054
• update FAQ for auto-refresh by @synfinatic in #1061
• console command requires authentication by @synfinatic in #1062
• Add AutoLogin config option by @synfinatic in #1064

Full Changelog: v2.0.0-beta3...v2.0.0-beta4

v2.0.0-beta3

What's Changed

• disable release-brew target by @synfinatic in #965
• Add login command, remove flush by @synfinatic in #966
• hide ecs sub-commands and re-order commands by @synfinatic in #967
• remove static creds code by @synfinatic in #977
• Bump github.com/aws/aws-sdk-go-v2 from 1.30.1 to 1.30.3 by @dependabot in #968
• fix ecs-commands documentation page by @synfinatic in #978
• fix all doc lint bugs and reorder ecs commands by @synfinatic in #979
• Change Warn -> Debug for invalid account/roles by @synfinatic in #981
• Add mkdocs versioning by @synfinatic in #984
• fix mkdocs yaml by @synfinatic in #986
• add mkdocs version selector by @synfinatic in #987
• Adjust links to documentation to versioning by @tillkahlbrock in #988
• move sso to internal by @synfinatic in #989
• Add some debug code for fetching the roles from AWS by @synfinatic in #990
• unify building of mkdocs by @synfinatic in #991
• change default profile format to NICE_PROFILE_FORMAT by @synfinatic in #994
• move config, config-profiles and completions to setup by @synfinatic in #993
• No auto-config check except login/cache by @synfinatic in #995
• change default log level from warn to info by @synfinatic in #996
• Continue work on login command by @synfinatic in #997
• Bump actions/checkout from 3 to 4 by @dependabot in #999
• Bump actions/setup-python from 4 to 5 by @dependabot in #998
• document ecs commands requiring login by @synfinatic in #1000
• Bump github.com/goccy/go-yaml from 1.11.3 to 1.12.0 by @dependabot in #1002
• Refactor commands by @synfinatic in #1004
• refactor the logger to be a singleton and use init() by @synfinatic in #1005
• work on ecs threat model by @synfinatic in #1009
• Fix crash with time command by @synfinatic in #1010
• Support XDG_CONFIG_HOME to override config location by @synfinatic in #1011
• Remove Firefox Multi-Account Containers plugin by @synfinatic in #1022
• Bump docker/build-push-action from 4 to 6 by @dependabot in #949
• Bump github.com/docker/docker from 27.0.3+incompatible to 27.1.1+incompatible in the go_modules group across 1 directory by @dependabot in #1019
• Bump github.com/docker/docker from 27.0.3+incompatible to 27.1.2+incompatible by @dependabot in #1024
• New logger v2 by @synfinatic in #1025
• switch to console logger by default by @synfinatic in #1029
• Bump golang from 1.21-alpine to 1.23-alpine by @dependabot in #1028

New Contributors

• @tillkahlbrock made their first contribution in #988

Full Changelog: v1.17.0...v2.0.0-beta3

v2.0.0-beta2

What's Changed

• disable release-brew target by @synfinatic in #965
• Add login command, remove flush by @synfinatic in #966
• hide ecs sub-commands and re-order commands by @synfinatic in #967
• remove static creds code by @synfinatic in #977
• Bump github.com/aws/aws-sdk-go-v2 from 1.30.1 to 1.30.3 by @dependabot in #968
• fix ecs-commands documentation page by @synfinatic in #978
• fix all doc lint bugs and reorder ecs commands by @synfinatic in #979
• Change Warn -> Debug for invalid account/roles by @synfinatic in #981
• Add mkdocs versioning by @synfinatic in #984
• fix mkdocs yaml by @synfinatic in #986
• add mkdocs version selector by @synfinatic in #987
• Adjust links to documentation to versioning by @tillkahlbrock in #988
• move sso to internal by @synfinatic in #989
• Add some debug code for fetching the roles from AWS by @synfinatic in #990
• unify building of mkdocs by @synfinatic in #991
• change default profile format to NICE_PROFILE_FORMAT by @synfinatic in #994
• move config, config-profiles and completions to setup by @synfinatic in #993
• No auto-config check except login/cache by @synfinatic in #995
• change default log level from warn to info by @synfinatic in #996
• Continue work on login command by @synfinatic in #997
• Bump actions/checkout from 3 to 4 by @dependabot in #999
• Bump actions/setup-python from 4 to 5 by @dependabot in #998
• document ecs commands requiring login by @synfinatic in #1000
• Bump github.com/goccy/go-yaml from 1.11.3 to 1.12.0 by @dependabot in #1002
• Refactor commands by @synfinatic in #1004
• refactor the logger to be a singleton and use init() by @synfinatic in #1005
• work on ecs threat model by @synfinatic in #1009
• Fix crash with time command by @synfinatic in #1010
• Support XDG_CONFIG_HOME to override config location by @synfinatic in #1011
• Remove Firefox Multi-Account Containers plugin by @synfinatic in #1022
• Bump docker/build-push-action from 4 to 6 by @dependabot in #949
• Bump github.com/docker/docker from 27.0.3+incompatible to 27.1.1+incompatible in the go_modules group across 1 directory by @dependabot in #1019
• Bump github.com/docker/docker from 27.0.3+incompatible to 27.1.2+incompatible by @dependabot in #1024
• New logger v2 by @synfinatic in #1025
• switch to console logger by default by @synfinatic in #1029

New Contributors

• @tillkahlbrock made their first contribution in #988

Full Changelog: v1.17.0...v2.0.0-beta2

v1.17.0

Overview

• Add credentials command
• Various small quality-of-life bug fixes (fix --threads flag and warn about old IAM roles in the config.yaml)
• Add support for and prefer the XDG Config location for config files: ~/.config/aws-sso over ~/.aws-sso
• ConfigProfilesUrlAction now defaults to value of UrlAction instead of url unless you picked print or printurl

There are also a significant number of ECS Server changes that aren't really backwards compatible, but will make the future better. If you are interested in the ECS Server functionality or using aws-sso on remote hosts over ssh then I would greatly appreciate it if you upvote this AWS SDK bug which makes it nearly impossible to use SSL/TLS with the ECS Server.

• aws-sso ecs ... commands have been re-worked
• ECS Server now technically supports SSL/TLS (see above)
• ECS Server now supports a bearer token for HTTP Auth
• ECS Server now can run in a Docker container
• ECS Server now supports binding to non-loopback interfaces via --bind-ip flag

What's Changed

• fix link to docs by @synfinatic in #902
• Bump github.com/aws/aws-sdk-go-v2/service/iam from 1.24.0 to 1.34.0 by @dependabot in #918
• Bump github.com/stretchr/testify from 1.8.4 to 1.9.0 by @dependabot in #898
• Add AWS_CONTAINER_AUTHORIZATION_TOKEN support by @synfinatic in #916
• Bump github.com/aws/aws-sdk-go-v2/service/sso from 1.20.11 to 1.22.0 by @dependabot in #917
• Improve bearer token support by @synfinatic in #919
• update ssh docs by @synfinatic in #920
• Ssl support by @synfinatic in #925
• Docker ecs server by @synfinatic in #935
• update copyright to 2024 by @synfinatic in #939
• Add --server flag for ecs client commands by @synfinatic in #940
• Update cache during login IFF relevant settings change by @synfinatic in #941
• Support AWS_SHARED_CREDENTIALS_FILE by @synfinatic in #942
• Bump github.com/aws/aws-sdk-go-v2/service/sts from 1.28.12 to 1.30.1 by @dependabot in #931
• Bump github.com/aws/aws-sdk-go-v2/config from 1.27.18 to 1.27.24 by @dependabot in #934
• add test tool for ssl bug by @synfinatic in #944
• Bump squidfunk/mkdocs-material from 9.5.25 to 9.5.27 by @dependabot in #904
• ConfigProfilesUrlAction defaults to UrlAction by @synfinatic in #947
• work on refactoring and documentation of ECS by @synfinatic in #943
• continue work on ecs server refactor by @synfinatic in #948
• Bump ubuntu from 22.04 to 24.04 by @dependabot in #841
• Support XDG config path by @synfinatic in #951
• continue ecs cleanup by @synfinatic in #957
• remove ecs run from docs by @synfinatic in #960
• fix docs again by @synfinatic in #961
• Fix --threads cli arg by @synfinatic in #959
• Don't store broken roles in the cache.json by @synfinatic in #963
• Bump golang.org/x/term from 0.21.0 to 0.22.0 by @dependabot in #954
• Bump golang.org/x/net from 0.26.0 to 0.27.0 by @dependabot in #952
• Bump github.com/aws/aws-sdk-go-v2/service/iam from 1.34.0 to 1.34.1 by @dependabot in #953
• prep for v1.17.0 release by @synfinatic in #964

Full Changelog: v1.16.1...v1.17.0

v1.16.1

Overview

• Fix homebrew auto-builds
• change flag for specifying profiles to --profile for the credentials command

What's Changed

• fix homebrew and credentials --profile by @synfinatic in #900

Full Changelog: v1.16.0...v1.16.1