CLI 1.12.0

1.12.0 (2026-10-02)

Breaking Changes

• Authorization resources and scopes use type instead of kind. The catalog returns resourceTypes, and permission checks take type and parentType. Stored policies are unchanged.

Features

• Members and service accounts can hold several roles. ravion membership create|update and ravion service-account create|update take --roles, a comma-separated or repeated list of system-managed role keys and custom role IDs; on update it replaces the whole set. --role still sets a single role.
• Membership and service account output adds roles and roleNames. role and roleName remain, showing the role with the most access.
• The /authorization assignment commands no longer take a scope or inline statements: an assignment gives one role across the organization. Statements in custom roles can be limited to resources with within.