v0.10.0

0.10.0 (2026-07-20)

Features

• add --format selector with real Kubernetes ExecCredential output (#39) (3353b68)

Bug Fixes

• suppress gosec G101 false positive on exec-credential format (#40) (a12a0c5)

v0.9.0

0.9.0 (2026-07-20)

Features

• extensible grant type architecture with --extra flag (#31) (51323ab)
• extensible subject token source abstraction (#34) (2ad0cb2)
• grouped --help output with advanced sections (#36) (c992da3)
• table-driven config binding for grant-specific flags (#35) (e837866)
• table-driven config binding to unify flag/env/file handling (#32) (f02bf92)
• uniform help descriptions with env var documentation (#37) (8ca1a2c)

v0.8.0

0.8.0 (2026-07-19)

Features

• forward all STS extension fields in --all output (#27) (da9b2b3)

v0.7.0

0.7.0 (2026-07-18)

Features

• config: default subject-token-type to id_token for github-actions source (#21) (7caa0cc)

Bug Fixes

• ci: pass id_token subject-token-type for github-actions exchange (#17) (22d2b7b)

Reverts

• chore(main): release 0.7.0 (#20) (#24) (d880025)

v0.6.0

Changelog

• b4e76cc feat: add --subject-token-source=github-actions for token-exchange (#13)

v0.5.1

Changelog

• f056818 fix: migrate Homebrew publishing from brews to homebrew_casks (#11)

v0.5.0

Changelog

• ceadd1d ci: correct gh-token-broker OIDC audience in release workflow (#10)
• d66f0d3 ci: re-enable homebrew tap publishing via gh-token-broker (#8)
• 9b2490d feat: support disabling the token store and rename --cache-dir (#9)

v0.4.0

Changelog

• 5140f31 feat: support RFC 8693 token exchange grant (#7)

v0.3.0

Changelog

• eb2eb9f feat: support confidential-client authentication methods (#2)

v0.2.0

Changelog

• 160fb35 ci: add ci-pr workflow with commitlint check (#6)
• f19715b feat: add OS keychain token storage with fallback to file cache (#3)
• 97bb929 test: add dex + testcontainers-go e2e compliance tier (#4)