v0.14.0

What's Changed

• fix: reject explicit non-positive --timeout and clarify help (ESD-1526) by @Phil-Browne in #448
• ci: add GitHub Action to build and publish WASM to S3 (ESD-1506) by @Phil-Browne in #428
• fix: classify ValidationError as usage exit code (ESD-1523) by @Phil-Browne in #444
• ESD-1532(fix): remove the non-functional mve restore command by @Phil-Browne in #455
• fix(output): stop spinner animating into non-TTY logs by @Phil-Browne in #438
• feat(wasm): register users, managed-account, billing-market modules by @Phil-Browne in #441
• test: add LAG port update lifecycle integration test (ESD-1528) by @Phil-Browne in #452
• feat: register ix module in WASM browser build (ESD-1285) by @Phil-Browne in #422
• fix(tags): reject empty tag keys in buy/create JSON input (ESD-1527) by @Phil-Browne in #450
• ci: add govulncheck workflow by @Phil-Browne in #436
• fix: guard nil SDK responses and honor vNIC index 0 on VXC (ESD-1524, ESD-1525) by @Phil-Browne in #447
• test: add MCR/MVE lock/unlock lifecycle integration tests by @Phil-Browne in #453
• test: add MCR IPv6 prefix-filter-list integration lifecycle by @Phil-Browne in #454
• test: add VLAN-scoped and update-matrix service key integration tests (ESD-1530) by @Phil-Browne in #451
• ci: add WASM build guard and browser fetch smoke harness (ESD-1286) by @Phil-Browne in #434
• ci: generate CHANGELOG.md from release notes, backfill to v0.13.0 (ESD-1533) by @Phil-Browne in #457
• fix(json): tighten JSON input value handling to match flags (ESD-1521) by @Phil-Browne in #446
• fix(buy): submit order under retry, poll provisioning separately (ESD-1520) by @Phil-Browne in #449
• test(mcr): add IPSec add-on lifecycle integration test by @Phil-Browne in #413
• chore: remove unused WASM demo server and vanilla web demo (ESD-1519) by @Phil-Browne in #443
• fix(apply): wire MCR tunnel_count to IPsec add-on order by @Phil-Browne in #440
• fix: print command errors to stderr and keep stdout data-only by @Phil-Browne in #427
• test: use CaptureStdout in locations integration tests that parse JSON by @Phil-Browne in #460
• ESD-1538: Expose MCR IPsec tunnel config on VXC vRouter interfaces (megaportgo v1.14.1) by @Phil-Browne in #458
• fix: apply --timeout bounds each resource, not the whole run (ESD-1522) by @Phil-Browne in #445
• test: widen per-resource timeout budget for flake resistance (ESD-1522) by @Phil-Browne in #461
• ESD-1321: Add integration tests for nat-gateway commands by @Phil-Browne in #381
• fix(cli): route PreRunE validation errors through the JSON error envelope (ESD-1553) by @Phil-Browne in #462
• ESD-1549: fix vxc buy dropping --resource-tags on the flags path by @Phil-Browne in #464
• fix(vxc): accept valid single-field flag updates (ESD-1550) by @Phil-Browne in #463
• ESD-1556: wire resource-tag flags into the buy flags builders by @Phil-Browne in #465
• chore(deps): bump github.com/andybalholm/brotli from 1.2.1 to 1.2.2 by @dependabot[bot] in #468
• chore(deps): bump github.com/jedib0t/go-pretty/v6 from 6.8.1 to 6.8.2 by @dependabot[bot] in #469
• docs: prepare documentation for beta release by @Phil-Browne in #466
• test(integration): add location and MVE capacity fallback (ESD-1559) by @Phil-Browne in #467
• docs: update CHANGELOG.md for v1.0.0-beta.1 by @Phil-Browne in #470
• test(mve): filter unmappable sizes from capacity probe by @Phil-Browne in #471
• chore(deps): bump actions/setup-go from 6.4.0 to 6.5.0 in the github-actions group by @dependabot[bot] in #472
• chore(ESD-1562): ignore superpowers planning artifacts in docs by @Phil-Browne in #473
• chore(ESD-1574): hide docs subcommand and drop generated twin pages by @Phil-Browne in #474
• ESD-1571-fix(mve): make Cisco config parser match the validator by @Phil-Browne in #476
• ESD-1568-fix(ports): enforce LAG validation on the JSON order path by @Phil-Browne in #475
• ESD-1567-fix(cli): make --interactive take precedence over stray flags by @Phil-Browne in #481
• ESD-1569-fix(managed-account): preserve unspecified fields on update by @Phil-Browne in #477
• ESD-1570-fix(mve): apply resourceTags on JSON and interactive buy paths by @Phil-Browne in #478
• ESD-1573-fix(version): honor injected version and normalize update-check prefix by @Phil-Browne in #479
• ESD-1593-fix(wasm): enable consistent ANSI color in browser output by @Phil-Browne in #488
• ESD-1597-fix(wasm): align prompt timeout with the command budget by @Phil-Browne in #491
• ESD-1598-feat(wasm): retire the synchronous command entrypoint by @Phil-Browne in #492
• ESD-1577-fix(wasm): show confirmation summaries in interactive mode by @Phil-Browne in #485
• feat: distinguish portal/WASM CLI traffic with x-app: cli-wasm by @Phil-Browne in #496
• ESD-1578-ci(wasm): enforce full wasm build, vet, and test compilation by @Phil-Browne in #484
• ESD-1579-fix(wasm): fail file-input flags fast with a clear browser error by @Phil-Browne in #482
• ESD-1594-fix(wasm): abort browser fetches on context cancellation and timeout by @Phil-Browne in #487
• ESD-1592-fix(users): default JSON-created users to active by @Phil-Browne in #497
• ESD-1591-feat(servicekeys): add JSON and interactive input modes by @Phil-Browne in #504
• ESD-1590-fix(partners): make list filters partial-match as documented by @Phil-Browne in #498
• ESD-1595-feat(wasm): stream command output to the host by @Phil-Browne in #489
• fix: bump goldmark to resolve govulncheck XSS finding by @Phil-Browne in #505
• ESD-1572-fix(ports,mcr): preserve cost centre on update by @Phil-Browne in #480
• ESD-1580-fix(wasm): keep status messages when table output is present by @Phil-Browne in #483
• ESD-1589-fix(mve): reject malformed vNICs and normalize interactive vendor/size case by @Phil-Browne in #499
• ESD-1586-fix(cli): send confirmation prompts to stderr by @Phil-Browne in #500
• ESD-1587-fix(cli): add missing interactive prompts for ix, nat-gateway, users by @Phil-Browne in #501
• fix(validation): align contract terms and MCR speeds with the SDK by @Phil-Browne in #503
• fix(cli): return usage exit code for malformed JSON input by @Phil-Browne in #502
• ESD-1601-refactor(wasm): remove the config manager from the browser build by @Phil-Browne in #495
• ESD-1599-fix(wasm): surface spinner success messages in captured output by @Phil-Browne in #494
• fix(build): bump Go toolchain to 1.26.5 by @Phil-Browne in #511
• ESD-1615: add matrix-aware NAT gateway speed/session validation by @Phil-Browne in #507
• chore(deps): bump golang.org/x/term from 0.44.0 to 0.45.0 by @dependabot[bot] in #510
• ESD-1552-fix(mcr): wire --marketplace-visibility into mcr buy and validate by @Phil-Browne in #506
• ESD-1600-feat(wasm): size table columns from the host terminal viewport width by @Phil-Browne in #493
• ESD-1627: Stop MVE update from wiping the existing cost centre by @Phil-Browne in #516
• ESD-1641: Validate environment in config update-profile and import by @Phil-Browne in #529
• fix(validation): correct int-width bound in GetIntFromInterface by @Phil-Browne in #538
• ESD-1637: Reject contract term 0 consistently in VXC and port updates by @Phil-Browne in #522
• ESD-1596-feat(wasm): handle port...

v1.0.0-beta.3

Changelog

Fixed

• fix(release): pin GoReleaser project_name to megaport-cli (#561)

Other Changes

• ESD-1765: Update the MCR looking-glass commands for the reworked diagnostics API (#558)

v1.0.0-beta.2

Changelog

Added

• ESD-1591-feat(servicekeys): add JSON and interactive input modes (#504)
• ESD-1595-feat(wasm): stream command output to the host (#489)
• ESD-1596-feat(wasm): handle portal token expiry with a clear re-auth signal (#490)
• ESD-1600-feat(wasm): size table columns from the host terminal viewport width (#493)
• ESD-1614-feat(mcr): add looking-glass ping and traceroute commands (#508)
• feat(wasm)!: retire the synchronous command entrypoint
• feat: distinguish portal/WASM CLI traffic with x-app: cli-wasm (#496)

Fixed

• ESD-1552-fix(mcr): wire --marketplace-visibility into mcr buy and validate (#506)
• ESD-1572-fix(ports,mcr): preserve cost centre on update (#480)
• ESD-1579-fix(wasm): fail file-input flags fast with a clear browser error (#482)
• ESD-1580-fix(wasm): keep status messages when table output is present (#483)
• ESD-1586-fix(cli): send confirmation prompts to stderr (#500)
• ESD-1587-fix(cli): add missing interactive prompts for ix, nat-gateway, users (#501)
• ESD-1589-fix(mve): reject malformed vNICs and normalize interactive vendor/size case (#499)
• ESD-1590-fix(partners): make list filters partial-match as documented (#498)
• ESD-1592-fix(users): default JSON-created users to active (#497)
• ESD-1594-fix(wasm): abort browser fetches on context cancellation and timeout (#487)
• ESD-1599-fix(wasm): surface spinner success messages in captured output (#494)
• ESD-1633-fix(wasm): stop SplitArgs deleting a literal megaport argument (#520)
• ESD-1636-fix(wasm): recover around JS callback invocations at the boundary (#523)
• ESD-1646-fix(wasm): sanitize control sequences in data output (#533)
• fix(build): bump Go toolchain to 1.26.5 (#511)
• fix(cli): handle empty-value tag edits in interactive tag prompt (#539)
• fix(cli): make --interactive take precedence over stray flags
• fix(cli): return usage exit code for malformed JSON input (#502)
• fix(deps): bump golang.org/x/text to v0.39.0 (GO-2026-5970) (#544)
• fix(managed-account): preserve unspecified fields on update
• fix(mcr,mve): error on invalid/empty answers to required yes/no prompts (#527)
• fix(mve): apply resourceTags on JSON and interactive buy paths
• fix(mve): make Cisco config parser match the validator
• fix(mve): preserve cost centre on update when not provided (#516)
• fix(mve): reject non-boolean manageLocally with a clear error
• fix(ports): enforce LAG validation on the JSON buy path
• fix(tests): repair provisioning integration suite compile and servicekeys stubs (#540)
• fix(validation): align contract terms and MCR speeds with the SDK (#503)
• fix(validation): correct int-width bound in GetIntFromInterface (#538)
• fix(version): honor injected version and normalize update-check prefix
• fix(wasm): address Copilot review follow-ups on retirement PR
• fix(wasm): align prompt timeout with the command budget
• fix(wasm): assert no error before reading output in async test helpers
• fix(wasm): check executeMegaportCommandAsync is a function, not just truthy
• fix(wasm): enable consistent ANSI color in browser output
• fix(wasm): harden terminal sanitization and release test callbacks
• fix(wasm): register JS globals in TestMain for main_wasm_test.go
• fix(wasm): release mock js.Func callbacks in tests, drop dead changelog entry
• fix(wasm): show confirmation summaries in interactive mode
• fix(wasm): stop prompt timeout timer on completion, deflake late-submit tests
• fix: bump goldmark to resolve govulncheck XSS finding (#505)

Other Changes

• ESD-1578-ci(wasm): enforce full wasm build, vet, and test compilation (#484)
• ESD-1601-refactor(wasm): remove the config manager from the browser build (#495)
• ESD-1615: add matrix-aware NAT gateway speed/session validation (#507)
• ESD-1624: Stop trusting the page-writable apiURL global in WASM login (#513)
• ESD-1626: Fix interactive VXC buy dropping the B-End VLAN (#512)
• ESD-1629: emit WASM artifact integrity hashes from the publish workflow (#519)
• ESD-1634: Reject unknown flags in the WASM build (#521)
• ESD-1637: Reject contract term 0 consistently in VXC and port updates (#522)
• ESD-1638: Validate VXC update JSON with checked helpers and a field gate (#526)
• ESD-1640: Read VXC shutdown status from the Shutdown field (#525)
• ESD-1641: Validate environment in config update-profile and import (#529)
• ESD-1642: Validate empty request and position on users update (#528)
• ESD-1643: Share one buffered stdin reader across prompts (#530)
• ESD-1645: Make WithRequiredFlag fail loudly when misordered (#532)
• ESD-1666: Route Cobra command errors to result.error in the WASM CLI (#542)

v1.0.0-beta.1

Changelog

Added

• feat(vxc): expose MCR IPsec tunnel config on vRouter interfaces (ESD-1538)
• feat(wasm): register users, managed-account, billing-market modules
• feat: register ix module in WASM browser build

Fixed

• fix(apply): wire MCR tunnel_count to IPsec add-on and harden config parsing
• fix(buy): submit order under retry, poll provisioning separately (ESD-1520)
• fix(ci): publish stable wasm filenames and make CloudFront optional
• fix(ci): update wasm-publish workflow for content-hash build pipeline
• fix(json): tighten JSON input value handling to match flags (ESD-1521)
• fix(nat_gateway): expose --asn flag on create; pass valid session-count and asn in lifecycle test
• fix(output): stop spinner animating into non-TTY logs
• fix(tags): reject empty tag keys in buy/create JSON input (ESD-1527)
• fix(vxc): address adversarial review findings
• fix(vxc): align update non-interactive gate with registered flags (ESD-1550)
• fix(vxc): treat empty partner-config flag as no update (ESD-1550)
• fix: apply --timeout bounds each resource, not the whole run (ESD-1522)
• fix: classify ValidationError as usage exit code (ESD-1523)
• fix: derive changelog prev version from previous git tag
• fix: extend nil-response guards and honor vNIC index 0 on interactive VXC (ESD-1524, ESD-1525)
• fix: guard nil SDK responses and honor vNIC index 0 on VXC flag path (ESD-1524, ESD-1525)
• fix: guard nil responses on service-key update and list paths (ESD-1524)
• fix: print command errors to stderr and route status messages off stdout
• fix: reject explicit non-positive --timeout instead of defaulting (ESD-1526)
• fix: remove the non-functional mve restore command
• fix: route NAT Gateway ASN through central ValidateASN

Other Changes

• ESD-1538: Add staging integration test for MCR IPsec tunnel VXC
• ESD-1538: Register MCR cleanup before asserting captured UID in IPsec test
• ESD-1538: address review findings: docs, lifetime comment, BGP password test
• ESD-1538: model ipSecTunnelOptions as a single object per interface
• ESD-1549: fix vxc buy dropping --resource-tags on the flags path
• ESD-1553: clarify FinishPreRunError doc for the WASM caller
• ESD-1553: emit JSON envelope for WASM root flag-validation errors too
• ESD-1553: route PreRunE validation errors through finishWithError
• ESD-1553: unit-test FinishPreRunError for codecov patch coverage
• ESD-1553: unit-test invalid-output and max-retries PreRunE paths for patch coverage
• ESD-1556: wire resource-tag flags into the buy flags builders
• fixup: address code review feedback on WASM CI / smoke harness
• fixup: address second-round code review feedback

v0.13.0

What's Changed

• ENG-31566: Document manual WASM S3 publish steps by @pedrotorchio-megaport in #409
• fix: bump Go toolchain to 1.26.4 and x/net to v0.56.0 (ESD-1422) by @Phil-Browne in #408
• chore(deps): bump github.com/megaport/megaportgo from 1.13.0 to 1.13.1 by @dependabot[bot] in #410
• ESD-830: Reduce global state in output package by @Phil-Browne in #340
• ESD-828: add client-side validation for IX ASN, MAC address, VLAN, and rate limit by @Phil-Browne in #329
• ESD-1322: Add integration tests for partners, servicekeys, users, managed_account by @Phil-Browne in #379
• ESD-1323: add unit tests for ix and nat_gateway inputs, outputs, and prompts by @Phil-Browne in #385
• test(ESD-1384): add managed_account inputs, output, and prompts unit tests by @Phil-Browne in #398
• ESD-1416(fix-WASM): remove SSRF-prone legacy /proxy/ endpoint and default bind to loopback by @Phil-Browne in #406
• feat: add one-command static web build for CDN hosting (ESD-1267) by @Phil-Browne in #368
• chore(deps): bump github.com/jedib0t/go-pretty/v6 from 6.8.0 to 6.8.1 by @dependabot[bot] in #405
• ESD-1323: Add missing XML format and VXC output test coverage by @Phil-Browne in #383
• test(ESD-1386): add validation helper coverage and boundary-value tests by @Phil-Browne in #399
• test(ESD-1385): add output formatter unit tests for read-only command packages by @Phil-Browne in #400
• chore(deps): bump esbuild, @vitejs/plugin-vue and vite in /frontend-integration by @dependabot[bot] in #411
• fix: dedup MinASN/MaxASN build break and bump Node 20 actions to Node 24 by @Phil-Browne in #412
• fix(config): fail-closed credential redaction in --log-http (ESD-1418) by @Phil-Browne in #419
• ESD-1268 / ESD-1269: Shrink and pre-compress the WASM for CDN serving by @Phil-Browne in #370
• refactor: de-duplicate the shared WASM/Vue web build (ESD-1270) by @Phil-Browne in #373
• ESD-1272(feat): content-hash the WASM filename for immutable CDN caching by @Phil-Browne in #371
• test(ESD-1392): resource tag lifecycle integration tests (ports/mcr/mve/vxc) by @Phil-Browne in #414
• fix(locations): drop blank market codes from list-market-codes by @Phil-Browne in #430
• test(ESD-1380): apply command integration tests by @Phil-Browne in #397
• ESD-1388: Add read-only smoke integration tests for ports, VXC, MCR, MVE, IX by @Phil-Browne in #402
• ESD-1491: route AWS/BGP ASN range checks through ValidateASN by @Phil-Browne in #416
• feat: register nat-gateway module in WASM build by @Phil-Browne in #421
• test(ESD-1393): add MCR/vrouter + inner-VLAN VXC provisioning lifecycle test by @Phil-Browne in #415
• fix: prevent servicekeys update from resetting active and single-use (ESD-1417) by @Phil-Browne in #407
• fix(ESD-1500): stop retrying buy/order calls on ambiguous errors by @Phil-Browne in #425
• ESD-1136(feat-mcr): support updating MCR ASN by @Phil-Browne in #359
• feat(ESD-1283): register read-only status, topology, product modules in WASM build by @Phil-Browne in #418
• fix(output): empty list results emit valid json/csv/xml; accept uppercase --output by @Phil-Browne in #423
• fix: return errors on failed mutations and fix usage exit code (ESD-1497) by @Phil-Browne in #424
• test: add native-binary e2e harness and smoke test (ESD-1493) by @Phil-Browne in #417
• fix(servicekeys): rename lifecycle test helper to avoid redeclaration by @Phil-Browne in #435
• fix(cli): show friendly errors for invalid integer arguments by @Phil-Browne in #431
• refactor(ESD-1500): rename order-retry symbols to OrderOnce by @Phil-Browne in #432
• test (ESD-1494): add hermetic native-binary e2e contract tests by @Phil-Browne in #433
• test: add live-staging read-only native-binary e2e tests by @Phil-Browne in #437
• ci: wire e2e tests into CI and make the sandbox cross-platform by @Phil-Browne in #442
• ci: pin GPG import action to allowlisted v6 by @Phil-Browne in #456

Full Changelog: v0.12.0...v0.13.0

v0.12.0

What's Changed

• ESD-1206: support in-place vNIC description updates on MVE by @Phil-Browne in #366
• ESD-1387: Add read-only integration tests for billing-market, product, status, topology by @Phil-Browne in #401
• ci: enforce coverage targets and add e2e/html-coverage make targets by @penzeliz-megaport in #394
• fix(ESD-1379): reset slice flags via Replace in WASM flag reset by @Phil-Browne in #395
• chore: add penzeliz-megaport as a codeowner by @Phil-Browne in #404
• chore(deps): bump golang.org/x/term from 0.43.0 to 0.44.0 by @dependabot[bot] in #396

New Contributors

• @penzeliz-megaport made their first contribution in #394

Full Changelog: v0.11.0...v0.12.0

v0.11.0

What's Changed

• chore(deps): bump github.com/megaport/megaportgo from 1.10.1 to 1.10.2 by @dependabot[bot] in #353
• ESD-551: add MCR Looking Glass commands for IP routes, BGP routes, and B… by @Phil-Browne in #191
• chore(deps): bump github.com/megaport/megaportgo from 1.10.2 to 1.10.3 by @dependabot[bot] in #355
• chore(deps): bump golang.org/x/term from 0.42.0 to 0.43.0 by @dependabot[bot] in #354
• ci: harden GitHub Actions workflows (permissions, SHA pins, Dependabot) by @Phil-Browne in #351
• ESD-905: Wire integration tests into CI and add Makefile targets by @Phil-Browne in #344
• chore: remove deprecated build tags by @ianb-mp in #361
• ESD-999: Replace deprecated reflect.Ptr with reflect.Pointer by @Phil-Browne in #357
• ESD-1170(feat-mve): support adminPassword for Cisco and Palo Alto vendor configs by @Phil-Browne in #358
• ESD-999: Add golangci-lint workflow for pull requests by @Phil-Browne in #356
• ESD-829: surface config default-load failures instead of failing silently by @Phil-Browne in #331
• chore(deps): bump golangci/golangci-lint-action from 9.2.0 to 9.2.1 in the github-actions group by @dependabot[bot] in #375
• WIP ENG-31566: Allow portal to override hostname-derived environment in WASM by @pedrotorchio-megaport in #374
• ESD-1184: Default all cancel commands to immediate, opt-in deferred via --later by @Phil-Browne in #363
• ESD-827: consolidate delete confirmation logic into shared utility by @Phil-Browne in #328
• fix(mcr): register --term flag on mcr update (ESD-1171) by @Phil-Browne in #360
• fix(wasm): fix WASM runtime issues and broken mock interfaces by @Phil-Browne in #342
• test(ports): migrate integration tests to direct-action pattern by @Phil-Browne in #364
• ESD-1309: Migrate MCR and MVE integration tests to direct action function calls by @Phil-Browne in #376
• ESD-1315: Preserve corrupt config as .corrupt- instead of overwriting by @Phil-Browne in #377
• ESD-1317: Prompt securely for credentials in config profile commands by @Phil-Browne in #382
• ESD-1319: Add IX integration tests by @Phil-Browne in #384
• chore(deps): bump github.com/jedib0t/go-pretty/v6 from 6.7.10 to 6.8.0 by @dependabot[bot] in #387
• ESD-1320: Migrate VXC integration tests to to direct action function calls by @Phil-Browne in #386
• ESD-1325: add --base-url flag to override the API base URL by @Phil-Browne in #388
• ESD-1316: report orphaned resources and add --rollback-on-failure to apply by @Phil-Browne in #378
• docs(ESD-1207): refresh docs and update alpha status by @Phil-Browne in #367
• ESD-1325: remove --base-url test that asserted a failure mode by @Phil-Browne in #389
• ESD-1318: Guard nil API responses and wrap provisioning errors by @Phil-Browne in #380
• feat(ESD-1325): add --token-url flag for authenticated custom-host login by @Phil-Browne in #390

New Contributors

• @ianb-mp made their first contribution in #361
• @pedrotorchio-megaport made their first contribution in #374

Full Changelog: v0.10.0...v0.11.0

v0.10.0

What's Changed

• feat: add NAT Gateway support (mocks + validate/buy subcommands) by @Phil-Browne in #332
• ESD-826: extract shared resolvePartnerPortUID to deduplicate partner config logic by @Phil-Browne in #327
• ESD-893: Fix output formatting inconsistencies by @Phil-Browne in #341
• ESD-895: Miscellaneous cleanup by @Phil-Browne in #343

Full Changelog: v0.9.4...v0.10.0

v0.9.4

What's Changed

• fix(goreleaser): wire head branch + PR base so homebrew-tap update opens a PR by @Phil-Browne in #352

Full Changelog: v0.9.3...v0.9.4

v0.9.3

Merge pull request #350 from megaport/fix/goreleaser-homebrew-pr-mode

ci: route homebrew-tap update through mp1-cli-releaser App + PR mode