v0.14.0

What's Changed

• fix: reject explicit non-positive --timeout and clarify help (ESD-1526) by @Phil-Browne in #448
• ci: add GitHub Action to build and publish WASM to S3 (ESD-1506) by @Phil-Browne in #428
• fix: classify ValidationError as usage exit code (ESD-1523) by @Phil-Browne in #444
• ESD-1532(fix): remove the non-functional mve restore command by @Phil-Browne in #455
• fix(output): stop spinner animating into non-TTY logs by @Phil-Browne in #438
• feat(wasm): register users, managed-account, billing-market modules by @Phil-Browne in #441
• test: add LAG port update lifecycle integration test (ESD-1528) by @Phil-Browne in #452
• feat: register ix module in WASM browser build (ESD-1285) by @Phil-Browne in #422
• fix(tags): reject empty tag keys in buy/create JSON input (ESD-1527) by @Phil-Browne in #450
• ci: add govulncheck workflow by @Phil-Browne in #436
• fix: guard nil SDK responses and honor vNIC index 0 on VXC (ESD-1524, ESD-1525) by @Phil-Browne in #447
• test: add MCR/MVE lock/unlock lifecycle integration tests by @Phil-Browne in #453
• test: add MCR IPv6 prefix-filter-list integration lifecycle by @Phil-Browne in #454
• test: add VLAN-scoped and update-matrix service key integration tests (ESD-1530) by @Phil-Browne in #451
• ci: add WASM build guard and browser fetch smoke harness (ESD-1286) by @Phil-Browne in #434
• ci: generate CHANGELOG.md from release notes, backfill to v0.13.0 (ESD-1533) by @Phil-Browne in #457
• fix(json): tighten JSON input value handling to match flags (ESD-1521) by @Phil-Browne in #446
• fix(buy): submit order under retry, poll provisioning separately (ESD-1520) by @Phil-Browne in #449
• test(mcr): add IPSec add-on lifecycle integration test by @Phil-Browne in #413
• chore: remove unused WASM demo server and vanilla web demo (ESD-1519) by @Phil-Browne in #443
• fix(apply): wire MCR tunnel_count to IPsec add-on order by @Phil-Browne in #440
• fix: print command errors to stderr and keep stdout data-only by @Phil-Browne in #427
• test: use CaptureStdout in locations integration tests that parse JSON by @Phil-Browne in #460
• ESD-1538: Expose MCR IPsec tunnel config on VXC vRouter interfaces (megaportgo v1.14.1) by @Phil-Browne in #458
• fix: apply --timeout bounds each resource, not the whole run (ESD-1522) by @Phil-Browne in #445
• test: widen per-resource timeout budget for flake resistance (ESD-1522) by @Phil-Browne in #461
• ESD-1321: Add integration tests for nat-gateway commands by @Phil-Browne in #381
• fix(cli): route PreRunE validation errors through the JSON error envelope (ESD-1553) by @Phil-Browne in #462
• ESD-1549: fix vxc buy dropping --resource-tags on the flags path by @Phil-Browne in #464
• fix(vxc): accept valid single-field flag updates (ESD-1550) by @Phil-Browne in #463
• ESD-1556: wire resource-tag flags into the buy flags builders by @Phil-Browne in #465
• chore(deps): bump github.com/andybalholm/brotli from 1.2.1 to 1.2.2 by @dependabot[bot] in #468
• chore(deps): bump github.com/jedib0t/go-pretty/v6 from 6.8.1 to 6.8.2 by @dependabot[bot] in #469
• docs: prepare documentation for beta release by @Phil-Browne in #466
• test(integration): add location and MVE capacity fallback (ESD-1559) by @Phil-Browne in #467
• docs: update CHANGELOG.md for v1.0.0-beta.1 by @Phil-Browne in #470
• test(mve): filter unmappable sizes from capacity probe by @Phil-Browne in #471
• chore(deps): bump actions/setup-go from 6.4.0 to 6.5.0 in the github-actions group by @dependabot[bot] in #472
• chore(ESD-1562): ignore superpowers planning artifacts in docs by @Phil-Browne in #473
• chore(ESD-1574): hide docs subcommand and drop generated twin pages by @Phil-Browne in #474
• ESD-1571-fix(mve): make Cisco config parser match the validator by @Phil-Browne in #476
• ESD-1568-fix(ports): enforce LAG validation on the JSON order path by @Phil-Browne in #475
• ESD-1567-fix(cli): make --interactive take precedence over stray flags by @Phil-Browne in #481
• ESD-1569-fix(managed-account): preserve unspecified fields on update by @Phil-Browne in #477
• ESD-1570-fix(mve): apply resourceTags on JSON and interactive buy paths by @Phil-Browne in #478
• ESD-1573-fix(version): honor injected version and normalize update-check prefix by @Phil-Browne in #479
• ESD-1593-fix(wasm): enable consistent ANSI color in browser output by @Phil-Browne in #488
• ESD-1597-fix(wasm): align prompt timeout with the command budget by @Phil-Browne in #491
• ESD-1598-feat(wasm): retire the synchronous command entrypoint by @Phil-Browne in #492
• ESD-1577-fix(wasm): show confirmation summaries in interactive mode by @Phil-Browne in #485
• feat: distinguish portal/WASM CLI traffic with x-app: cli-wasm by @Phil-Browne in #496
• ESD-1578-ci(wasm): enforce full wasm build, vet, and test compilation by @Phil-Browne in #484
• ESD-1579-fix(wasm): fail file-input flags fast with a clear browser error by @Phil-Browne in #482
• ESD-1594-fix(wasm): abort browser fetches on context cancellation and timeout by @Phil-Browne in #487
• ESD-1592-fix(users): default JSON-created users to active by @Phil-Browne in #497
• ESD-1591-feat(servicekeys): add JSON and interactive input modes by @Phil-Browne in #504
• ESD-1590-fix(partners): make list filters partial-match as documented by @Phil-Browne in #498
• ESD-1595-feat(wasm): stream command output to the host by @Phil-Browne in #489
• fix: bump goldmark to resolve govulncheck XSS finding by @Phil-Browne in #505
• ESD-1572-fix(ports,mcr): preserve cost centre on update by @Phil-Browne in #480
• ESD-1580-fix(wasm): keep status messages when table output is present by @Phil-Browne in #483
• ESD-1589-fix(mve): reject malformed vNICs and normalize interactive vendor/size case by @Phil-Browne in #499
• ESD-1586-fix(cli): send confirmation prompts to stderr by @Phil-Browne in #500
• ESD-1587-fix(cli): add missing interactive prompts for ix, nat-gateway, users by @Phil-Browne in #501
• fix(validation): align contract terms and MCR speeds with the SDK by @Phil-Browne in #503
• fix(cli): return usage exit code for malformed JSON input by @Phil-Browne in #502
• ESD-1601-refactor(wasm): remove the config manager from the browser build by @Phil-Browne in #495
• ESD-1599-fix(wasm): surface spinner success messages in captured output by @Phil-Browne in #494
• fix(build): bump Go toolchain to 1.26.5 by @Phil-Browne in #511
• ESD-1615: add matrix-aware NAT gateway speed/session validation by @Phil-Browne in #507
• chore(deps): bump golang.org/x/term from 0.44.0 to 0.45.0 by @dependabot[bot] in #510
• ESD-1552-fix(mcr): wire --marketplace-visibility into mcr buy and validate by @Phil-Browne in #506
• ESD-1600-feat(wasm): size table columns from the host terminal viewport width by @Phil-Browne in #493
• ESD-1627: Stop MVE update from wiping the existing cost centre by @Phil-Browne in #516
• ESD-1641: Validate environment in config update-profile and import by @Phil-Browne in #529
• fix(validation): correct int-width bound in GetIntFromInterface by @Phil-Browne in #538
• ESD-1637: Reject contract term 0 consistently in VXC and port updates by @Phil-Browne in #522
• ESD-1596-feat(wasm): handle portal token expiry with a clear re-auth signal by @Phil-Browne in #490
• ESD-1646-fix(wasm): sanitize control sequences in data output by @Phil-Browne in #533
• fix(mcr,mve): error on invalid/empty answers to required yes/no prompts by @Phil-Browne in #527
• fix(cli): handle empty-value tag edits in interactive tag prompt by @Phil-Browne in #539
• ESD-1645: Make WithRequiredFlag fail loudly when misordered by @Phil-Browne in #532
• ESD-1643: Share one buffered stdin reader across prompts by @Phil-Browne in #530
• ESD-1642: Validate empty request and position on users update by @Phil-Browne in #528
• ESD-1636-fix(wasm): recover around JS callback invocations at the boundary by @Phil-Browne in #523
• ESD-1634: Reject unknown flags in the WASM build by @Phil-Browne in #521
• ESD-1626: Fix interactive VXC buy dropping the B-End VLAN by @Phil-Browne in #512
• chore(deps): bump the github-actions group with 5 updates by @dependabot[bot] in #518
• ESD-1638: Validate VXC update JSON with checked helpers and a field gate by @Phil-Browne in #526
• ESD-1624: Stop trusting the page-writable apiURL global in WASM login by @Phil-Browne in #513
• ESD-1629: emit WASM artifact integrity hashes from the publish workflow by @Phil-Browne in #519
• ESD-1640: Read VXC shutdown status from the Shutdown field by @Phil-Browne in #525
• ESD-1614-feat(mcr): add looking-glass ping and traceroute commands by @Phil-Browne in #508
• chore(deps): bump github.com/jedib0t/go-pretty/v6 from 6.8.2 to 6.8.3 by @dependabot[bot] in #543
• ESD-1666: Route Cobra command errors to result.error in the WASM CLI by @Phil-Browne in #542
• fix(tests): repair provisioning integration suite compile and servicekeys stubs by @Phil-Browne in #540
• ESD-1633-fix(wasm): stop SplitArgs deleting a literal megaport argument by @Phil-Browne in #520
• fix(deps): bump golang.org/x/text to v0.39.0 (GO-2026-5970) by @Phil-Browne in #544
• chore(deps): bump github.com/megaport/megaportgo from 1.15.0 to 1.17.0 by @dependabot[bot] in #545
• chore(deps): bump actions/checkout from 5.0.1 to 5.1.0 in the github-actions group by @dependabot[bot] in #549
• chore(deps): bump docker/login-action from 4.4.0 to 4.5.1 in the github-actions group by @dependabot[bot] in #551
• chore(deps): bump docker/login-action from 4.5.1 to 4.6.0 in the github-actions group by @dependabot[bot] in #552
• chore: bump Go toolchain to 1.26.7 by @Phil-Browne in #555
• chore(deps): bump github.com/andybalholm/brotli from 1.2.2 to 1.2.3 by @dependabot[bot] in #557
• chore(deps): bump docker/setup-buildx-action from 4.2.0 to 4.3.0 in the github-actions group by @dependabot[bot] in #556
• chore(deps): bump github.com/stretchr/testify from 1.11.1 to 1.12.1 by @dependabot[bot] in #554
• chore: add senior-backend and staff-backend to CODEOWNERS by @Phil-Browne in #559
• ESD-1765: Update the MCR looking-glass commands for the reworked diagnostics API by @Phil-Browne in #558
• fix(release): pin GoReleaser project_name to megaport-cli by @Phil-Browne in #561
• chore(deps): bump docker/setup-qemu-action from 4.2.0 to 4.3.0 in the github-actions group by @dependabot[bot] in #563
• chore(deps): bump github.com/andybalholm/brotli from 1.2.3 to 1.2.4 by @dependabot[bot] in #564
• chore(deps): bump golang.org/x/term from 0.45.0 to 0.46.0 by @dependabot[bot] in #565

Full Changelog: v0.13.0...v0.14.0