v0.3.28

What's Changed

• fix(cache): scope cache by auth identity, not just profile by @hojinyoo in #30
• fix(cli): return non-zero exit code on command errors by @hojinyoo in #31
• fix: setup team persistence, interactive pager, blocked-by relations by @Finesssee in #37
• fix(auth): enable real OS keyring backends for secure-storage by @Finesssee in #40
• ci: thin Blacksmith PR Check and shared budget modes by @Finesssee in #41
• fix(initiatives): paginate projects in initiatives get by @oliverbarnes in #39
• feat: integrate release recovery and safety fixes by @Finesssee in #50

New Contributors

• @hojinyoo made their first contribution in #30
• @oliverbarnes made their first contribution in #39

Full Changelog: v0.3.26...v0.3.28

v0.3.27

Manual GitHub release.

• Add --project flag to issue create (#32).
• Includes Windows x86_64 MSVC binary asset.

v0.3.26

Fixes

• Fixed linear-cli history issue failing on relation-history activity by removing an invalid relationChanges.issue GraphQL field from the history query.

Fixes #29.

Distribution

• Published to crates.io as linear-cli 0.3.26.
• Binary GitHub release assets are not attached because the repository Release workflow failed before build steps started.

v0.3.25

Release v0.3.25. Fixes all-features builds and deflakes priority colored-output tests.

v0.3.24

What's Changed

• Harden setup so API keys are validated before being persisted.
• Use no-echo secret entry for interactive setup while preserving piped stdin support.
• Tighten behavioral CLI tests around dry-run parsing and hidden completions.
• Align Windows cargo-binstall metadata with the release asset naming contract.
• Ignore local Clawpatch state files.

Verification

• cargo fmt --check
• git diff --check
• cargo clippy -- -D warnings
• cargo test --quiet
• cargo audit -q
• cargo deny check advisories
• cargo package --allow-dirty --no-verify
• clawpatch status: openFindings 0

v0.3.23

What's Changed

• Harden terminal output sanitization across human-facing detail/render paths.
• Improve agent-facing CLI ergonomics for templates, bulk input, and missing-ID errors.
• Fix clippy release blockers and keep CI warning-clean.
• Pin privileged release workflow actions to full commit SHAs and pin cross installation.
• Update vulnerable/advisory dependencies reported by cargo-audit and cargo-deny.

Verification

• cargo fmt --check
• git diff --check
• cargo clippy -- -D warnings
• cargo test --quiet
• cargo audit -q
• cargo deny check advisories
• cargo package --allow-dirty --no-verify

v0.3.22

Security hardening release.

Highlights:

• removes argv-based API-key setup flows for safer secret handling
• keeps update/install on the explicit update command path
• expands terminal output sanitization across issues, comments, teams, and templates
• excludes local release archives from the published crate package

Manual release with Linux x86_64, Linux aarch64, and Windows x86_64 MSVC assets.

v0.3.21

Security hardening patch release.

Includes fixes for:

• PAGER allowlist bypass via path-based executable overrides
• remaining unsafe terminal output paths in issue and webhook rendering
• uncapped concurrent webhook listener connections

Assets in this manual release were built locally.

v0.3.20

Fix native certificate trust handling for HTTPS proxy environments.

Highlights:

• switch reqwest Rustls transport to platform-native certificate roots
• restore compatibility with environments that install local trusted proxy certificates in the OS trust store, including Claude Code for Web style setups

v0.3.19

Runtime security hardening release.

Highlights:

• sanitize terminal text before rendering untrusted Linear content
• harden config/API key masking in human-readable output
• sanitize dynamic completion values to strip shell metacharacters
• tighten OAuth callback and webhook listener route matching
• add explicit HTTP/connect timeouts for OAuth and update checks
• make export and upload file writes atomic to avoid partial-file exposure