v3.0.0

Highlights

• Browser sign-in is now the default for mux login. Running mux login opens the Mux Dashboard, where you pick an organization and environment. The CLI then stores OAuth tokens and refreshes them automatically. Access tokens still work through --interactive, --env-file and --from-env. (#74)
• mux assets create --upload … --wait now waits. Previously --wait was ignored for local file uploads. Each upload is now followed through to its asset and polled until ready. With --json, the output is one array of { file, uploadId, status, assetId, asset, error } entries. If any file fails, the others are still reported and the command exits non-zero. (#77)

Breaking changes

Upgrading from 2.x? Read these first. They all come from #74.

• mux login with no flags opens a browser instead of prompting for a Token ID and Secret. Scripts that answered those prompts need --interactive.
• mux login errors when MUX_TOKEN_ID/MUX_TOKEN_SECRET are set. It used to save them silently. CI that runs mux login with injected credentials needs --from-env. This also applies to mux login --json, which used to return source: "env".
• Configs written by 3.x can't be read by 2.x. Credentials are now stored in nested oauth/token blocks. 3.x reads existing 2.x configs without any migration, but any write converts every entry. If you downgrade, run mux login again. Your access token credentials are still in config.json, one level deeper, so you don't need to create a new token.
• mux env list and mux auth status output changed shape. Parsing their text output will break, so use --json.
• --interactive requires a TTY. It fails immediately under --json, in agent mode or with piped stdin, instead of hanging. Browser sign-in works without a TTY under --json or in agent mode: it prints the authorization URL as a JSON event on stderr, and --timeout (default 300s) bounds the wait.
• mux logout now revokes refresh tokens over the network. If revocation fails, it prints a warning and still removes the local credentials.
• The env-var shadow notice on stderr now names the environment being shadowed.

Other fixes

• Release candidate tags are published as GitHub pre-releases, so install.sh and the releases/latest download links always resolve to a stable version. (#76)
• Several fixes to OAuth token refresh, locking and login error handling. (#74)

What's Changed

• fix(release): mark suffixed tags as prereleases on GitHub by @davekiss in #76
• feat(auth)!: OAuth login as the default for mux login by @daniel-hayes in #74
• fix(assets): honor --wait when creating assets from uploads by @davekiss in #77

New Contributors

• @daniel-hayes made their first contribution in #74

Full Changelog: v2.1.0...v3.0.0