v0.3.1

Fixes from an audit of the experimental GCP support.

Fixed

• GCP (experimental): instances sort after the AWS ones, grouped by project, instead of
  among the first AWS profile's. Tab completion no longer starts gcloud in the
  background, which would open a console window on Windows. A project answering 403
  for a quota, or a zone that does not answer, is reported instead of looking empty.
  -p gcp:<project> that matches nothing, and -p gcp with -r, now say so. The
  gcloud token is no longer waited for past the timeout on Windows, and a project
  listed twice is queried once. -p completion offers gcp.
• The documentation covers GCP in the Docker notes, the security notes, exit codes,
  limits and environment variables, and hop --help.

v0.3.0

This release adds experimental GCP support: hop finds Compute Engine instances across
your GCP projects and opens shells on them through IAP.

Added

• GCP support, experimental: with gcp_projects in the configuration (["*"] for every
  project gcloud's account can see), hop ls and the search list the Compute Engine
  instances of those projects as gcp:<project>, in their zone, and hop <name>
  opens a shell through IAP with gcloud compute ssh --tunnel-through-iap, after
  checking that the instance is still the one listed. GCP does not record shell
  sessions: hop says so, and transcript: require refuses them. run, tunnel,
  push and ssh-proxy are AWS only for now: on a GCP instance they print the
  gcloud command that does it. hop doctor checks gcloud.
• An animated demo in the README and on the site, recorded with VHS against a
  fictional fleet (docs/demo). It replaces the site's typed mockup, which showed a
  line hop never prints.

v0.2.0

This release brings ssh, scp and rsync by instance name, and the shell integration to
bash and fish.

Added

• hop ssh-proxy, a ProxyCommand for ssh, and hop init ssh, which prints the
  ~/.ssh/config block for it. After hop init ssh >> ~/.ssh/config,
  ssh ec2-user@tools.hop reaches the instance hop finds for tools, through
  Session Manager (AWS-StartSSHSession), and so do scp, rsync, git, sftp and
  editors' remote mode. ssh gives hop no terminal, so only an unambiguous match
  connects. With transcript: require, hop refuses: Session Manager does not log
  SSH. The block runs hop by its full path, since editors start ssh with a short
  PATH.
• hop init bash and hop init fish, like hop init zsh: completion, and an
  optional --alias with the same completion. The bash version works with or without
  the bash-completion package.
• README: a comparison with other Session Manager clients, with what each does
  better.

Changed

• When session-manager-plugin is not on PATH, hop also looks where its installers
  put it (/opt/homebrew/bin, /usr/local/bin, /usr/local/sessionmanagerplugin/bin,
  /usr/bin, or Program Files\Amazon\SessionManagerPlugin\bin on Windows).
  hop doctor looks there too.
• --alias refuses names that start with -, which a shell would read as an option.
• IAM policy in the README: ssm:StartSession on the AWS-StartSSHSession document,
  for ssh.

v0.1.7

Changelog

• 701f4bf docs(changelog): release 0.1.6, note the 0.1.5 tag (#8)
• 7198eb2 docs(changelog): release 0.1.7 (#10)
• 4a87111 fix(cache): hold the lock and retry the rename on Windows (#12)
• 3c7e190 fix(release): rename the Homebrew cask to hop-cli (#9)

v0.1.6

Changelog

• 3e85cfd fix: functional defects from the audit (lot 3) (#6)

v0.1.4

Incomplete release, use v0.1.5 or later.

A GitHub Actions incident on 2026-10-30 interrupted this release after the container image was published, and the run could not be retried. The image ghcr.io/morganseznec/hop:0.1.4 is complete and signed, but the binaries, Linux packages and Homebrew cask were not published; only the SLSA provenance file was attached.

v0.1.5 ships the same changes (and more) through the full pipeline.

v0.1.3

Changelog

• 91b5e9b fix: security and correctness findings from the audit (#2)

v0.1.2

Changelog

• f49a18c ci(release): sign the checksums and attach SLSA provenance
• 7366b96 docs(security): link the private report form and state response times

v0.1.1

Changelog

• db13b7e fix(release): pass the tap token as a bare env reference

v0.1.0

Changelog

• 7869402 feat: hop, Session Manager across every AWS account and region